OOD
Silver Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
http_port 192.168.0.1:3128
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
#------------------------------------
positive_dns_ttl 8 hours
negative_dns_ttl 1 minute
negative_ttl 5 minutes
request_timeout 2 minutes
client_lifetime 8 hours
authenticate_ttl 6 hour
half_closed_clients off
client_db off
balance_on_multiple_ip off
relaxed_header_parser on
#------------------------------------
memory_pools on
memory_pools_limit 512 MB
ipcache_size 32768
ipcache_low 80
ipcache_high 95
fqdncache_size 1024000
cache_mem 128 MB
maximum_object_size 10 MB
minimum_object_size 15 KB
maximum_object_size_in_memory 1024 KB
cache_dir ufs /var/spool/squid 1000 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/error.log
# logfile_rotate 40
cache_mgr Admin@domain.name
cache_store_log none
append_domain .ekhp.local
error_directory /usr/share/squid/errors/ru-ru
visible_hostname sv-gate01
ftp_user anonymous@
ftp_passive on
coredump_dir /var/log/squid/
forwarded_for off
shutdown_lifetime 5 seconds
#---------------------------------------
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
#---------------------------------------
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.gif$ 10080 90% 43200
refresh_pattern -i \.(jpg|jpeg|png|bmp)$ 10080 90% 43200
refresh_pattern -i \.swf$ 10080 90% 43200
refresh_pattern . 1440 50% 22160
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 20
auth_param ntlm keep_alive on
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 10
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
acl localhost src 127.0.0.1/32
acl webserver src 192.168.0.1/32
acl manager proto cache_object
acl Safe_ports port 80 81 21 443 449 563 883 8008 50000 8085 24554 7001 8804 5222 8443
acl CONNECT method CONNECT
acl purge method PURGE
acl manager proto cache_object
acl microsoft url_regex .microsoft.com .squid-cache.org .uz.gov.ua .expertsoft.com.ua .pumb.ua .irc.gov.ua .stockmarket.gov.ua .mytalentq.com .candidate.talantqgroup.com .notification.talentqgroup.com .talentqgroup.com. .batch1.euro.confirmit.com. 83.138.165.68 .batch2.euro.confirmit.com. 213.100.250.11 .batch3.euro.confirmit.com. 83.138.165.69 .batch4.euro.confirmit.com. 92.52.102.162 .metinvest.ecopsy.ru.
acl multimedia urlpath_regex -i \.mp3$ \.mpeg$ \.avi$ \.rar$ \.zip$ \.wmv$ \.mpeg$ \.msi$ \.iso$
acl block dstdomain "/etc/squid/acl/block-http"
http_access deny block
external_acl_type nt_group ttl=1 negative_ttl=1 %LOGIN /usr/lib64/squid/wbinfo_group.pl
acl dl-internet01 external nt_group dl-internet01
acl dl-internet02 external nt_group dl-internet02
acl dl-internet03 external nt_group dl-internet03
http_access allow purge localhost
http_access allow manager webserver
http_access deny manager
http_access allow microsoft
http_access allow CONNECT Safe_ports
http_access deny !Safe_ports
http_access allow dl-internet01
http_access allow dl-internet02
http_access allow dl-internet03
http_access deny all
#============================================================
delay_pools 3
delay_class 1 1
delay_class 2 1
delay_class 3 1
delay_parameters 1 512000/512000
delay_parameters 2 128000/128000
delay_parameters 3 64000/64000
delay_access 1 allow dl-internet01
delay_access 1 deny all
delay_access 2 allow dl-internet02
delay_access 2 deny all
delay_access 3 allow dl-internet03
delay_access 3 deny all
|
Всего записей: 3379 | Зарегистр. 20-05-2006 | Отправлено: 15:32 11-04-2019 | Исправлено: OOD, 15:33 11-04-2019 |
|
