forum.lissyara.su

Код: Выделить всё

#user squid & group squid
cache_effective_user squid
cache_effective_group squid


acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl geyser_network src 192.168.4.0/24
acl stim_network src 192.168.5.0/24
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl CONNECT method CONNECT

#url_rewrite_program        /usr/local/rejik/redirector /usr/local/rejik/redirector.conf
url_rewrite_children 120
#my acls
acl ICQ_DOMAIN  dstdomain               icq.com aol.com login.icq.com login.oscar.aol.com ibucp-vip-d.blue.aol.com ibucp-vip-m.blue.aol.com bucp2-vip-m.blue.aol.com bucp-m08.blu
e.aol.com
acl ICQ_ADDR    dst                     64.12.0.0/16 205.188.0.0/16
acl ICQ_PORT    port                    5190
acl ICQ_PROTO   proto                   HTTPS
acl ICQ_ALLOWED src "/usr/local/etc/squid/rules/icq_allowed_ip"
acl vip src "/usr/local/etc/squid/rules/vip"
acl My_SNMP snmp_community squidmrtg

http_access allow ICQ_ADDR vip ICQ_ALLOWED
http_access allow ICQ_DOMAIN vip ICQ_ALLOWED
http_access deny ICQ_ADDR geyser_network stim_network
http_access deny ICQ_DOMAIN geyser_network stim_network
http_access allow SSL_ports geyser_network stim_network
#
http_access allow manager localhost
http_access deny manager


http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow geyser_network
http_access allow stim_network
http_access deny all


icp_access allow geyser_network
icp_access allow stim_network
icp_access deny all

htcp_access allow geyser_network
htcp_access allow stim_network
htcp_access deny all

http_port 127.0.0.1:3128 transparent
http_port 3128

hierarchy_stoplist cgi-bin ?

access_log /usr/local/squid/logs/access.log squid

snmp_port 3401

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern (cgi-bin|\?)    0       0%      0
refresh_pattern .               0       20%     4320

icp_port 3130

coredump_dir /usr/local/squid/cache

tcp_outgoing_address 192.168.1.132 geyser_network
tcp_outgoing_address 10.6.0.1 stim_network

visible_hostname mpdmaster

cache_dir ufs /usr/local/squid/cache 10000 16 256

Код: Выделить всё

1243006420.738    531 192.168.4.86 TCP_MISS/200 43931 GET http://hh.ru/ - DIRECT/94.124.200.6 text/html
1243006421.830    341 192.168.4.86 TCP_MISS/200 31960 GET http://joblist.ru/ - DIRECT/94.124.200.6 text/html
1243006582.917    354 192.168.4.86 TCP_MISS/200 31922 GET http://joblist.ru/ - DIRECT/94.124.200.6 text/html