|
发表于 2005-5-6 16:55:18
|
显示全部楼层
- http_port ip:3128
- hierarchy_stoplist cgi-bin ?
- acl QUERY urlpath_regex cgi-bin \?
- httpd_accel_host virtual
- httpd_accel_port 80
- httpd_accel_uses_host_header on
- httpd_accel_single_host off
- httpd_accel_with_proxy on
- cache_dir aufs /var/spool/squid 2048 16 256
- cache_mgr your@mail
- cache_mem 128 MB
- cache_swap_low 90
- cache_swap_high 95
- maximum_object_size 4096 KB
- maximum_object_size_in_memory 64 KB
- ipcache_size 4096
- ipcache_low 90
- ipcache_high 95
- cache_access_log /var/log/squid/access.log
- cache_log /var/log/squid/cache.log
- cache_store_log /var/log/squid/store.log
- log_ip_on_direct on
- unlinkd_program /usr/lib/squid/unlinkd
- cache_effective_user squid
- cache_effective_group squid
- acl all src 0.0.0.0/0.0.0.0
- acl manager proto cache_object
- acl localhost src 127.0.0.1/255.255.255.255
- acl our_networks src 172.16.1.0/255.255.255.0
- acl to_localhost dst 127.0.0.0/8
- acl SSL_ports port 443 563
- acl Safe_ports port 80
- acl Safe_ports port 81
- acl Safe_ports port 82
- acl Safe_ports port 21
- acl Safe_ports port 443 563
- acl Safe_ports port 70
- acl Safe_ports port 210
- acl Safe_ports port 1025-65535
- acl Safe_ports port 280
- acl Safe_ports port 488
- acl Safe_ports port 591
- acl Safe_ports port 777
- acl Safe_ports port 5500
- acl Safe_ports port 5560
- acl Safe_ports port 3128
- acl CONNECT method CONNECT
- no_cache deny QUERY
- # Only allow cachemgr access from localhost
- http_access allow manager localhost
- http_access deny manager
- # Deny requests to unknown ports
- http_access deny !Safe_ports
- # Deny CONNECT to other than SSL ports
- http_access deny CONNECT !SSL_ports
- #http_access allow our_networks
- http_access allow our_networks
- # And finally deny all other access to this proxy
- http_access allow localhost
- http_access deny all
- #http_access allow all
- coredump_dir /var/spool/squid
- dns_nameservers 172.16.1.254 210.12.168.12 61.139.2.69
- ftp_list_width 96
复制代码 |
|