Isi Squid Warnet "H"

shutdown_lifetime 5 seconds

icp_port 0

http_port 192.168.0.1:800 transparent

cache_effective_user squid

cache_effective_group squid

umask 022

pid_filename /var/run/squid.pid

cache_mem 504 MB

cache_dir aufs /var/log/cache 50000 16 256

error_directory /usr/lib/squid/advproxy/errors/English

memory_replacement_policy heap GDSF

cache_replacement_policy heap LFUDA

access_log /var/log/squid/access.log

cache_log /var/log/squid/cache.log

cache_store_log none

log_mime_hdrs off

forwarded_for on

via on

acl within_timeframe time MTWHFAS 00:00-24:00

acl all src 0.0.0.0/0.0.0.0

acl localhost src 127.0.0.1/255.255.255.255

acl SSL_ports port 443 # https

acl SSL_ports port 563 # snews

acl Safe_ports port 80 # http

acl Safe_ports port 21 # ftp

acl Safe_ports port 443 # https

acl Safe_ports port 563 # snews

acl Safe_ports port 70 # gopher

acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280 # http-mgmt

acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker

acl Safe_ports port 777 # multiling http

acl Safe_ports port 800 # Squids port (for icons)

acl IPCop_http port 81

acl IPCop_https port 445

acl IPCop_ips dst 192.168.0.1

acl IPCop_networks src "/var/ipcop/proxy/advanced/acls/src_subnets.acl"

acl IPCop_servers dst "/var/ipcop/proxy/advanced/acls/src_subnets.acl"

acl IPCop_green_network src 192.168.0.0/255.255.255.0

acl IPCop_green_servers dst 192.168.0.0/255.255.255.0

acl CONNECT method CONNECT

#Start of custom includes

#tcp_outgoing_tos 0x30 localnet

zph_mode tos

zph_local 0x30

zph_parent 0

zph_option 136

#==============================

refresh_pattern -i \.tar.gz$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.mp3$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.zip$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.png$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.gif$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.jpg$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.jpeg$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.swf$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.3gp$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.rm$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.wma$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.mpeg$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.(gif|jp?g|xbm|png|swf|bmp)$ 21600 90% 43200 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.(mov|avi|qtm|mp?)$ 21600 90% 43200 override-expire override-lastmod ignore-reload reload-into-ims

refresh_pattern -i \.(3gp|wmv|wma|mpg|mpeg|mpga|rm|rv|vgp)$ 21600 90% 43200 override-expire override-lastmod ignore-reload reload-into-ims

refresh_pattern -i \.(zip|exe|gz|Z|lha||rar|arj)$ 21600 90% 43200 override-expire override-lastmod ignore-reload reload-into-ims

refresh_pattern -i \.(hqx|pdf|w3x|rtf|doc|swf)$ 100000 500% 99000000 ignore-reload override-expire

refresh_pattern -i \.(inc|cab|ad|)$ 100000 500% 99000000 ignore-reload override-expire

refresh_pattern ^http://www.friendster.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://photos.friendster.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://images.friendster.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://mail.yahoo.com/.* 720 100% 4320

refresh_pattern ^http://mail1.plasa.com/.* 720 100% 4320

refresh_pattern ^http://*.yahoo.*/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://*.google.*/.* 720 100% 4320

refresh_pattern ^http://*.friendster.*/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://pb.gemscool.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://www.facebook.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://kaskus.us/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://perfectworld.lytogame.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://seal.lytogame.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims

refresh_pattern ^http://*.indowebster.*/.* 720 100% 4320

refresh_pattern ^http://*.4shared.*/.* 720 100% 4320

refresh_pattern ^http://www.yahoo.com/.* 720 100% 4320

refresh_pattern ^http://*.yimg.*/.* 720 100% 4320

refresh_pattern ^http://*.boleh.*/.* 720 100% 4320

refresh_pattern ^http://*.detik.*/.* 180 100% 4320

refresh_pattern ^http://*.detikinet.*/.* 180 100% 4320

refresh_pattern ^http://*.detikhot.*/.* 180 100% 4320

refresh_pattern ^http://*.detiportal.*/.* 180 100% 4320

refresh_pattern ^http://*.kompas.*/.* 180 100% 4320

refresh_pattern ^http://*.facebook.*/.* 720 100% 4320

refresh_pattern ^http://*.texas_holdem.*/.* 720 100% 4320

refresh_pattern ^http://*.zynga.com.*/.* 720 100% 4320

refresh_pattern ^http://*.kapanlagi.*/.* 720 100% 4320

refresh_pattern ^http://*.google-analytics.*/.* 720 100% 4320

refresh_pattern ^ftp: 100080 95% 2419200 reload-into-ims override-lastmod

refresh_pattern . 180 95% 120960 reload-into-ims override-lastmod

#End of custom includes

#Access to squid:

#local machine, no restriction

http_access allow localhost

#GUI admin if local machine connects

http_access allow IPCop_ips IPCop_networks IPCop_http

http_access allow CONNECT IPCop_ips IPCop_networks IPCop_https

#Deny not web services

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

#Set custom configured ACLs

http_access allow IPCop_networks within_timeframe

http_access deny all

maximum_object_size 40960 KB

minimum_object_size 0 KB

request_body_max_size 0 KB

reply_body_max_size 0 deny all

visible_hostname warnet.harlens

cache_mgr admin@harlens.net