Last active
June 17, 2016 16:58
-
-
Save wppurking/75ed0a591e77282d2bce to your computer and use it in GitHub Desktop.
squid.conf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
auth_param basic program /usr/lib/squid3/basic_ncsa_auth /etc/squid3/passwd | |
auth_param basic children 200 startup=0 idle=1 | |
auth_param basic realm Squid proxy-caching web server | |
auth_param basic credentialsttl 2 hours | |
auth_param basic casesensitive off | |
acl ncsa_users proxy_auth REQUIRED | |
http_access deny !ncsa_users | |
http_access allow ncsa_users | |
acl SSL_ports port 443 | |
acl Safe_ports port 80 # http | |
acl Safe_ports port 21 # ftp | |
acl Safe_ports port 443 # https | |
acl Safe_ports port 70 # gopher | |
acl Safe_ports port 210 # wais | |
acl Safe_ports port 1025-65535 # unregistered ports | |
acl Safe_ports port 280 # http-mgmt | |
acl Safe_ports port 488 # gss-http | |
acl Safe_ports port 591 # filemaker | |
acl Safe_ports port 777 # multiling http | |
acl CONNECT method CONNECT | |
http_access deny !Safe_ports | |
http_access deny CONNECT !SSL_ports | |
http_access allow localhost manager | |
http_access deny manager | |
http_access allow localhost | |
http_access allow all | |
http_port 8081 | |
coredump_dir /var/spool/squid3 | |
refresh_pattern ^ftp: 1440 20% 10080 | |
refresh_pattern ^gopher: 1440 0% 1440 | |
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 | |
refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880 | |
refresh_pattern . 0 20% 4320 | |
forwarded_for off | |
dns_nameservers 8.8.8.8 | |
#request | |
request_header_access Via deny all | |
request_header_access X-Forwarded-For deny all | |
request_header_access All allow all | |
#reply | |
reply_header_access Server deny all | |
reply_header_access X-Cache deny all | |
reply_header_access X-Cache-Lookup deny all | |
reply_header_access Warning deny all | |
reply_header_access Expires deny all | |
reply_header_access Cache-Control deny all | |
reply_header_access age deny all |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment