# TAG_HTTPORT #
# http_port 3128
http_port 172.17.3.1:3128 transparent
# END_TAG #

visible_hostname gw-cyt2
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
refresh_pattern ^ftp:		1440	20%	10080
# refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320
coredump_dir /var/spool/squid
cache_effective_user proxy
cache_effective_group proxy
cache_mem 16 MB
maximum_object_size 4096 KB
# establecemos la cache del disco
cache_dir ufs /var/spool/squid 2000 16 256
cache_mgr admin@cyt.monagas.gov.ve

# Identifica el cache padre de donde llamará obtejos almacenados
#cache_peer 172.17.0.1 parent 3128 3130 proxy-only

# Rotacion de Historicos
logfile_rotate 7

# El usuario ftp anonimo #
ftp_user proxy@monagas.gov.ve

# Llevamos un registro de lo que hacen
emulate_httpd_log on

# END_TAG #
acl localhost src 127.0.0.0/8
acl localhostdst dst 127.0.0.0/8
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563	# https, snews
acl SSL_ports port 873		# rsync
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443 563	# https, snews
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl Safe_ports port 631		# cups
acl Safe_ports port 873		# rsync
acl Safe_ports port 901		# SWAT
#acl Safe_ports port 1863	# MSN
acl purge method PURGE
acl CONNECT method CONNECT

# Mi Lista de Control de acceso  (ACL) #
acl todalared src 172.17.3.0/255.255.255.0
acl redcyt src "/etc/squid/redcyt.txt"
acl permitidos src "/etc/squid/permitidos"
acl castigados src "/etc/squid/castigados.txt"
acl sitiosdenegados url_regex "/etc/squid/sitiosdenegados"
acl listaextensiones urlpath_regex -i "/etc/squid/listaextensiones"
acl messenger req_mime_type -i ^application/x-msn-messenger$
acl messengerrep rep_mime_type -i ^application/x-msn-messenger$
acl msn url_regex -i gateway.dll
#acl msn url_regex -i ADSAdClient31.dll
acl semana time MTWHF
acl matutino time 08:00-11:59
acl mediodia time 12:00-13:59
acl vespertino time 14:00-17:59
acl nocturno time 18:00-23:59
acl madrugada time 00:00-7:59

# REGLAS DE CONTROL DE ACCESO PREDEFINIDAS#
http_access allow localhost 
http_access deny manager
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_reply_access allow all
 
# MIS REGLAS DE CONTROL DE ACCESO #
http_access allow permitidos all
http_access allow redcyt mediodia
http_access deny castigados all
http_access allow redcyt matutino !sitiosdenegados !listaextensiones !msn
http_access allow redcyt vespertino !sitiosdenegados !listaextensiones !msn
http_access allow redcyt nocturno all
http_access allow redcyt madrugada all
http_access deny messenger redcyt !mediodia !permitidos
http_reply_access deny messengerrep redcyt !mediodia !permitidos
http_access deny all
# END_TAG #