http_port 3128 icp_port 0 cache_mem 100 MB visible_hostname squid cache_dir ufs /var/squid 256 16 256 log_fqdn on httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on ############ Servers acl low_ip src 192.168.10.241 acl low_ip src 192.168.10.242 acl low_ip src 192.168.10.243 acl low_ip src 192.168.10.247 acl low_ip src 192.168.10.248 acl low_ip src 192.168.10.249 acl low_ip src 192.168.10.250 acl low_ip src 192.168.10.251 acl low_ip src 192.168.10.252 ######################################################## # GOOD DOMAINS acl gooddomain_nonGR url_regex "/etc/squid/web_sites_allow_nonGR" http_access allow gooddomain_nonGR ######################################################### # BAD FILES acl BAD_FILES_WIN urlpath_regex -i .(exe|bat|com|wsh|wsf|vxd|vbs|sys|shb|sct|scr|shs|reg|prf|pcd|mst|msp|msi|msc|isp|crt)$ #acl BAD_FILES_MEDIA urlpath_regex -i .(mp3|mov|avi|mpg|mpeg|asf|wmv|ra|rm|ram|asx|asf|afx|divx|m3u|viv|vivo|vo|qt)$ #http_access deny BAD_FILES_MEDIA acl BAD_FILES_WIN urlpath_regex -i .(exe|bat|wsh|wsf|vxd|vbs|sys|shb|sct|scr|shs|reg|prf|pcd|mst|msi|msc|isp|crt)$ http_access deny BAD_FILES_WIN acl BAD_FILES_ZIP urlpath_regex -i .(ace|cab|rar|rpm|gz)$ http_access deny BAD_FILES_ZIP acl BAD_FILES_OFFICE urlpath_regex -i .(ade|xls|doc|ops|mdz|mdw|mdt|mde|mdb|mda)$ http_access deny BAD_FILES_OFFICE acl BAD_FILES_MISC urlpath_regex -i .(crl)$ http_access deny BAD_FILES_MISC ######################################################## # BAD DOMAINS acl badDomain_nonGR url_regex "/etc/squid/web_sites_block_nonGR" http_access deny badDomain_nonGR acl badDomain_GR url_regex "/etc/squid/web_sites_block_GR" deny_info ERR_BLOCK badDomain_GR http_access deny badDomain_GR acl akamaitech_url url_regex -i akamai acl akamaitech_url url_regex -i a212 http_access deny akamaitech_url acl baaaaaaad srcdomain akamaitechnologies.com http_access deny baaaaaaad ######################################################### ## ALLOWED IP acl allow_ip src 192.168.10.90 acl allow_ip src 192.168.10.4 acl allow_ip src 192.168.10.5 acl allow_ip src 192.168.10.31 acl all src 0/0 http_access deny all