# NETWORK OPTIONS
# —————————————————————————–
http_port 192.168.0.254:3128
http_port 127.0.0.1:3128
# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
# —————————————————————————–
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
# OPTIONS WHICH AFFECT THE CACHE SIZE
# —————————————————————————–
cache_mem 12582912 bytes
cache_swap_low 98
cache_swap_high 99
maximum_object_size 134217728 bytes
maximum_object_size_in_memory 131072 bytes
ipcache_size 4096
ipcache_low 98
ipcache_high 99
fqdncache_size 2096
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
# LOGFILE PATHNAMES AND CACHE DIRECTORIES
# —————————————————————————–
cache_dir aufs /var/spool/squid/cache1 14000 33 256
cache_dir aufs /var/spool/squid/cache2 14000 33 256
cache_dir aufs /var/spool/squid/cache3 14000 33 256
cache_dir aufs /var/spool/squid/cache4 14000 33 256
# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
# —————————————————————————–
redirect_children 10
auth_param ntlm children 15
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param ntlm use_ntlm_negotiate on
auth_param basic program /usr/lib/squid/squid_ldap_auth -b “dc=Blue,dc=net” -f “(&(objectClass=pcnProxyAccount)(uid=%s))” -h 127.0.0.1 -D “cn=manager,cn=internal,dc=Blue,dc=net” -W
/etc/squid/ldap.conf -s one -v 3 -U pcnProxyPassword -d
auth_param basic children 5
auth_param basic realm ClarkConnect Enterprise Edition – Web Proxy
auth_param basic credentialsttl 2 hours
# OPTIONS FOR TUNING THE CACHE
# —————————————————————————–
wais_relay_port 0
request_header_max_size 524288 KB
request_body_max_size 0 KB
refresh_pattern -i \.tar.gz$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mp3$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.zip$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.png$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.gif$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpg$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpeg$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.swf$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.(gif|jp?g|xbm|png|swf|bmp)$ 21600 90% 43200 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.(mov|avi|qtm|mp?)$ 21600 90% 43200 override-expire override-lastmod ignore-reload reload-into-ims
refresh_pattern -i \.(3gp|wmv|wma|mpg|mpeg|mpga|rm|rv|vgp)$ 21600 90% 43200 override-expire override-lastmod ignore-reload reload-into-ims
refresh_pattern -i \.(zip|exe|gz|Z|lha|arj)$ 21600 90% 43200 override-expire override-lastmod ignore-reload
reload-into-ims
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 100000 500% 99000000 ignore-reload override-expire
refresh_pattern -i \.(inc|cab|ad|txt|)$ 100000 500% 99000000 ignore-reload override-expire
refresh_pattern ^http://www.friendster.com/.* 720 100% 4320
refresh_pattern ^http://mail.yahoo.com/.* 720 100% 4320
refresh_pattern ^http://*.plasa.com/.* 720 100% 4320
refresh_pattern ^http://*.yahoo.*/.* 720 100% 4320
refresh_pattern ^http://*.friendster.*/.* 720 100% 4320
refresh_pattern ^http://www.yahoo.com/.* 720 100% 4320
refresh_pattern ^http://*.yimg.*/.* 720 100% 4320
refresh_pattern ^http://*.kompas.*/.* 720 100% 4320
refresh_pattern ^http://*.trans7.*/.* 720 100% 4320
refresh_pattern ^http://*.rcti.*/.* 720 100% 4320
refresh_pattern ^http://*.indosiar.*/.* 720 100% 4320
refresh_pattern ^http://*.kapanlagi.*/.* 720 100% 4320
refresh_pattern ^http://*.google.*/.* 720 100% 4320
refresh_pattern ^http://*.akamai.*/.* 720 100% 4320
refresh_pattern ^http://*.googlesyndication.*/.* 720 100% 4320
refresh_pattern ^http://*.google-analytics.*/.* 720 100% 4320
refresh_pattern ^http://*.windowsupdate.com/.*\.(cab|exe) 4320 100% 43200
refresh_pattern ^http://*.download.microsoft.com/.*\.(cab|exe) 4320 100% 43200
refresh_pattern ^http://*.grisoft.com/.*\.(bin|exe) 4320 100% 43200
refresh_pattern ^http://*.kaskus.us/.* 720 100% 4320
refresh_pattern ^http://*.ads.adbrite.com/.* 720 100% 4320
refresh_pattern ^http://*.adserving.*/.* 720 100% 4320
refresh_pattern ^http://*.yieldmanager.*/.* 720 100% 4320
refresh_pattern ^http://*.imageshack.*/.* 100800 100% 4320
refresh_pattern ^http://*.photobucket.*/.* 100800 100% 4320
refresh_pattern ^ftp: 10080 95% 241920 reload-into-ims override-lastmod
refresh_pattern . 180 95% 120960 reload-into-ims override-lastmod
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100
#read_ahead_gap 16384 bytes
negative_ttl 0 seconds
positive_dns_ttl 86400 seconds
negative_dns_ttl 1 seconds
range_offset_limit 0 bytes
# TIMEOUTS
# —————————————————————————–
forward_timeout 240 seconds
connect_timeout 60 seconds
peer_connect_timeout 30 seconds
read_timeout 900 seconds
request_timeout 120 seconds
persistent_request_timeout 60 seconds
client_lifetime 7200 seconds
half_closed_clients off
pconn_timeout 60 seconds
shutdown_lifetime 20 seconds
# ACCESS CONTROLS
# —————————————————————————–
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.0/8
acl webconfig_lan src 192.168.0.0/24
acl webconfig_to_lan dst 192.168.0.0/24
acl to_localhost dst 127.0.0.0/8
acl password proxy_auth REQUIRED
acl privoxy dstdomain config.privoxy.org
acl SSL_ports port 443 563
acl SSL_ports port 81 10000
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 81 82 83 10000 # Web-based administration tools
acl CONNECT method CONNECT
acl pcntime-all-tiime time SMTWHFA 00:00-24:00
acl pcngroup-all src 192.168.0.100-192.168.0.252
http_access allow manager localhost
http_access deny manager
cachemgr_passwd XXXX
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny privoxy
http_access allow localhost
http_access deny pcngroup-all pcntime-all-tiime
http_access allow webconfig_to_lan
http_access allow webconfig_lan
http_access deny all
http_reply_access allow all
icp_access allow all
miss_access allow all
reply_header_max_size 20480 bytes
reply_body_max_size 0 allow all
# HTTPD-ACCELERATOR OPTIONS
# —————————————————————————–
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
redirect_rewrites_host_header off
# MISCELLANEOUS
# —————————————————————————–
logfile_rotate 3
memory_pools off
forwarded_for off
log_icp_queries off
icp_hit_stale on
error_directory /etc/squid/errors
nonhierarchical_direct off
prefer_direct off
pipeline_prefetch on
store_dir_select_algorithm round-robin
ie_refresh on
vary_ignore_expire on
follow_x_forwarded_for allow localhost
saya memakai spec komp :
P4 Quad 2,4 Ghz
RAM 4GB
HDD SCSI 80GB 15K RPM
ClarkConnect Enterprice 4.2
Koneksi Speedy 3 Line
