Skip to content

Instantly share code, notes, and snippets.

@andrefsp
Created July 15, 2019 09:06
Show Gist options
  • Select an option

  • Save andrefsp/796ff195dd53e6a6dd3e03c3eda2678b to your computer and use it in GitHub Desktop.

Select an option

Save andrefsp/796ff195dd53e6a6dd3e03c3eda2678b to your computer and use it in GitHub Desktop.

Revisions

  1. andrefsp created this gist Jul 15, 2019.
    51 changes: 51 additions & 0 deletions squid.inboud.conf
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,51 @@
    # Recommended minimum configuration:
    acl manager proto cache_object

    acl localhost src 127.0.0.1/32
    acl to_localhost dst 127.0.0.0/8
    # Specify incoming networks of incoming traffic
    acl localnet src 0.0.0.0/0 192.168.100.0/24 192.168.101.0/24 10.0.0.0/8

    acl SSL_ports port 443
    acl Safe_ports port 80 # http
    acl Safe_ports port 21 # ftp
    acl Safe_ports port 443 # https
    acl Safe_ports port 70 # gopher
    acl Safe_ports port 210 # wais
    acl Safe_ports port 1025-65535 # unregistered ports
    acl Safe_ports port 280 # http-mgmt
    acl Safe_ports port 488 # gss-http
    acl Safe_ports port 591 # filemaker
    acl Safe_ports port 777 # multiling http

    acl CONNECT method CONNECT

    http_access allow manager localhost localnet
    http_access deny manager
    http_access deny !Safe_ports

    http_access deny to_localhost
    icp_access deny all
    htcp_access deny all

    http_port 80
    hierarchy_stoplist cgi-bin ?
    access_log /var/log/squid/access.log squid


    #Suggested default:
    refresh_pattern ^ftp: 1440 20% 10080
    refresh_pattern ^gopher: 1440 0% 1440
    refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
    refresh_pattern . 0 20% 4320
    # Leave coredumps in the first cache dir
    coredump_dir /var/spool/squid3

    # Allow all machines to all sites
    http_access allow all

    # add the following statements
    ## IP OF THE NEXT NODE
    cache_peer 10.128.0.5 parent 80 0 no-digest

    never_direct allow all
    45 changes: 45 additions & 0 deletions squid.outbound.conf
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,45 @@
    #Recommended minimum configuration:
    acl manager proto cache_object

    acl localhost src 127.0.0.1/32
    acl to_localhost dst 127.0.0.0/8
    # Specify incoming networks of incoming traffic
    acl localnet src 0.0.0.0/0 192.168.100.0/24 192.168.101.0/24 10.0.0.0/8

    acl SSL_ports port 443
    acl Safe_ports port 80 # http
    acl Safe_ports port 21 # ftp
    acl Safe_ports port 443 # https
    acl Safe_ports port 70 # gopher
    acl Safe_ports port 210 # wais
    acl Safe_ports port 1025-65535 # unregistered ports
    acl Safe_ports port 280 # http-mgmt
    acl Safe_ports port 488 # gss-http
    acl Safe_ports port 591 # filemaker
    acl Safe_ports port 777 # multiling http

    acl CONNECT method CONNECT

    http_access allow manager localhost localnet
    http_access deny manager
    http_access deny !Safe_ports

    http_access deny to_localhost
    icp_access deny all
    htcp_access deny all

    http_port 80
    hierarchy_stoplist cgi-bin ?
    access_log /var/log/squid/access.log squid


    #Suggested default:
    refresh_pattern ^ftp: 1440 20% 10080
    refresh_pattern ^gopher: 1440 0% 1440
    refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
    refresh_pattern . 0 20% 4320
    # Leave coredumps in the first cache dir
    coredump_dir /var/spool/squid3

    # Allow all machines to all sites
    http_access allow all