[squid-users] Squid conf review

From: Brent Clark <bclark@dont-contact.us>
Date: Fri, 6 Aug 2004 09:45:45 +0200

Hi all

I am very much new to squid and I have just installed squid to be a
transparent proxy on my dialup (soon to be ADSL) connected box (which
currently works beautifully).

Another problem I have, is that I cant browse the caches it makes. For
example (I know this is comparing apples with pears, but its the only thing
I can think of) with wwwoffle, it has the facility to offline browsing. Is
there anyway to allow squid to do the day. I know its only a dialup
connection, but I really want to know \ learn squid.

I have pasted my conf file below, hoping that someone would be so kind as
too review it and if possible share where I can improve etc.
Any advice, critism, pointers etc would be most appreciated.

Kind Regards
Brent Clark

========================================================================
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl mynet src 192.168.2.0/255.255.255.0
acl localhost src 127.0.0.0/255.0.0.0
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 25 # smtp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 110 # pop3
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
#acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow mynet
http_access deny all

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

offline_mode 0
offline_mode 2
offline_mode 1

cache_effective_user proxy
cache_effective_group proxy

cache_replacement_policy heap GDSF

cache_dir ufs /var/spool/squid 100 16 256

maximum_object_size 200 KB

cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log

client_lifetime 15 minutes
half_closed_clients on

cache_mem 2 MB
cache_mgr me@homelinux.com

#dns_nameservers 192.168.2.2 196.43.1.11 196.25.1.11

visible_hostname mail.homelinux.com
unique_hostname mail.homelinux.com
Received on Fri Aug 06 2004 - 01:43:58 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Sep 01 2004 - 12:00:01 MDT