xSpeedy13
(usa Ubuntu)
Enviado em 24/01/2011 - 13:03h
Sim, sou mesmo tuga! ;)
Cá está então o squid.conf:
# Mensagens de erro em Português
error_directory /usr/share/squid/errors/Portuguese
# Porta do Squid
http_port 3128
#tcp_outgoing_address 192.168.10.28
# Nome do servidor
visible_hostname xSpeedy13Server
# Cache
cache_mem 700 MB
maximum_object_size_in_memory 32 KB
maximum_object_size 1024 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /etc/squid/cache 30000 16 256
# Logs de acesso
access_log /var/log/squid/access.log squid
# Regras acl padrão
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563 873
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 873 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # swat
acl Safe_ports port 1025-65535 # portas altas
acl purge method PURGE
acl CONNECT method CONNECT
# Permissões e bloqueios padrão
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
# Bloqueio de sites por URL
#acl sites_proibidos url_regex -i "/etc/squid/sites_proibidos"
#http_access deny sites_proibidos
# Bloqueio de downloads por extensão
#acl downloads_proibidos url_regex -i \.exe \.torrent \.avi \.mp3
#http_access deny downloads_proibidos
# Permissão rede local e servidor
acl redelocal src 192.168.2.0/24
http_access allow localhost
http_access allow redelocal
# Bloqueio de usuários fora da rede
http_access deny all
