[squid-users] some questions

From: johon Doe <johond@dont-contact.us>
Date: Tue, 27 Jul 2004 08:29:37 -0700 (PDT)

Hi, I'm a new squid user.
I have some problem to configure it.
Well the server is inside a lan of 70-100 pc and the
traffic should be quiet low (600MB per day)
Those are the problems:
1) I'd like to cache some html static pages so that i
used the refresh_pattern tag:
refresh_pattern -i html$ 3880 100% 43200
override-lastmod reload-into-ims
refresh_pattern -i htm$ 3880 100% 43200
override-lastmod reload-into-ims
but it doesn't work.
2) the squid dedicated partition is about of 70GB with
50GB limited to squid. I read around the net of about
a much more less partition. So the question is: it's a
bad idea use a so big partition only for squid ? (the
server should be only a proxy+iptables machine)
3) Also the tag:
reply_body_max_size 2000 deny lan
seems doesn't work... any suggestions ?

4) I'd like to have some advice about the following
squid.conf file (the server hardware is duron900 with
512MB and 80GB of hd ATA100.

acl CONNECT method CONNECT
acl QUERY urlpath_regex cgi-bin \?
acl SSL_ports port 443 563
acl SSL_ports port 873
acl Safe_ports port 1025-65535
acl Safe_ports port 21
acl Safe_ports port 210
acl Safe_ports port 280
acl Safe_ports port 443 563
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 631
acl Safe_ports port 70
acl Safe_ports port 777
acl Safe_ports port 80
acl Safe_ports port 873
acl Safe_ports port 901
acl all src 0.0.0.0/0.0.0.0
acl ambiente-lan src 192.168.1.0/24
acl localhost src 127.0.0.1/255.255.255.255
acl manager proto cache_object
acl purge method PURGE
acl to_localhost dst 127.0.0.0/8
ftp_user none@none.com
forwarded_for off
logfile_rotate 10
cache_mem 96 MB
high_memory_warning 120 MB
maximum_object_size 65536 KB
minimum_object_size 1 KB
maximum_object_size_in_memory 256 KB
#cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
cache_swap_low 90
cache_swap_high 95
pid_filename /var/run/squid.pid
visible_hostname ambiente-fw
useragent_log /var/log/squid/useragent.log
referer_log /var/log/squid/referer.log
cache_dir aufs /data/squid-cache 50000 256 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
coredump_dir /var/spool/squid
hierarchy_stoplist cgi-bin ?
http_port 192.168.1.105:3128
http_port 127.0.0.1:3128
udp_incoming_address 192.168.1.105
icp_access allow all
no_cache deny QUERY
refresh_pattern -i
\.(zip|arj|rar|tgz|gz|tar|exe|pdf|bz2)$ 5040 50% 43200
ignore-reload override-lastmod
refresh_pattern -i \.(gif|jpg|jpeg|png|swf|xbm)$
5040 50% 38800 ignore-reload override-lastmod
refresh_pattern -i \.(mp3|avi|mpg|mpeg)$ 5040 50%
43200 ignore-reload override-lastmod
refresh_pattern -i html$ 1 100% 43200 override-lastmod
reload-into-ims
refresh_pattern -i htm$ 1 100% 43200 override-lastmod
reload-into-ims
refresh_pattern
http://*\.windowsupdate\.microsoft\.com/ 0 80% 20160
reload-into-ims
refresh_pattern http://office\.microsoft\.com/ 0 80%
20160 reload-into-ims
refresh_pattern http://windowsupdate\.microsoft\.com/
0 80% 20160 reload-into-ims
refresh_pattern http://wxpsp2\.microsoft\.com/ 0 80%
20160 reload-into-ims
refresh_pattern http://xpsp1\.microsoft\.com/ 0 80%
20160 reload-into-ims
refresh_pattern http://w2ksp4\.microsoft\.com/ 0 80%
20160 reload-into-ims
refresh_pattern http://download\.microsoft\.com/ 0 80%
20160 reload-into-ims
refresh_pattern http://download\.macromedia\.com/ 0
80% 20160 reload-into-ims
refresh_pattern http://ftp\.software\.ibm\.com/ 0 80%
20160 reload-into-ims
refresh_pattern -i cgi 1440 100% 1440 reload-into-ims
override-lastmod
refresh_pattern -i query 1440 100% 1440
refresh_pattern -i . 0 20% 4320
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
cache_effective_user proxy
cache_effective_group proxy
reply_body_max_size 2000 deny ambiente-lan
http_access allow localhost ambiente-lan
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny !Safe_ports
http_access deny purge
http_reply_access allow all
redirect_program /usr/bin/wrapzap
redirect_children 5

Thx :-)

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Received on Tue Jul 27 2004 - 09:29:39 MDT

This archive was generated by hypermail pre-2.1.9 : Sun Aug 01 2004 - 12:00:02 MDT