SQUID (только под *nix) - [1703] :: В помощь системному администратору

auth_param basic program /usr/local/squid/libexec/squid_ad_auth 10.1.1.105
auth_param basic children 1
auth_param basic realm Squid Proxy
auth_param basic credentialsttl 24 hours
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl SSL_ports port 443
acl Safe_ports port 80-89 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl worktime time D 10:00-18:00
acl pornoips dst "/usr/local/squid/acl/pornoips"
acl pornodoms dstdomain "/usr/local/squid/acl/pornodoms"
acl musor dstdomain "/usr/local/squid/acl/musor"
acl usefull dstdomain "/usr/local/squid/acl/good"
acl pornowords url_regex -i "/usr/local/squid/acl/badwords"
acl badext urlpath_regex -i \.mp3$ \.avi$ \.ogg$
acl knownusers proxy_auth REQUIRED

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny pornoips
http_access deny badext !usefull
http_access deny pornodoms
http_access deny pornowords
http_access deny musor worktime
http_access allow CONNECT knownusers Safe_ports
http_access allow CONNECT knownusers SSL_ports
http_access allow knownusers
http_access deny all
icp_access allow localnet
icp_access deny all

http_port 10.1.1.1:80

acl tech_net src 10.1.1.0/255.255.255.0
acl tech_admins src 10.1.2.0/255.255.255.128
acl center_sales src 10.1.2.128/255.255.255.128
acl stock src 10.1.10.0/255.255.255.0 10.1.5.0/255.255.255.0 192.168.10.0/24
tcp_outgoing_address X.X.X.135 tech_admins tech_net
tcp_outgoing_address X.X.X.132 center_sales
tcp_outgoing_address X.X.X.131 stock

hierarchy_stoplist cgi-bin ?
cache_dir null /dev/null
access_log /usr/local/squid/var/logs/access.log squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
request_header_max_size 128 KB
request_body_max_size 5192 KB
acl shoutcast rep_header X-HTTP09-First-Line ^ICY\s[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

cache_effective_user nouser
cache_effective_group nogroup
coredump_dir /usr/local/squid/var/cache

Модерирует : lynx, Crash_Master, dg, emx, ShriEkeR
Версия для печати • Подписаться • Добавить в закладки
На первую страницу • к этому сообщению • к последнему сообщению