squid.conf

鯖 
# 
#  /etc/squid/squid.conf
# 
#  pkill squid ;  /usr/local/sbin/squid ;
# 
acl our_networks src 192.168.1.0/24 192.168.2.0/24
coredump_dir /var/squid/cache
http_port 8080

## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## 
 ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## 
hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8

acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

#マネージャーＣＧＩへはローカルホストのみ接続許可
http_access allow manager localhost
#その他のマネージャーＣＧＩへの接続はすべて拒否
http_access deny manager

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow our_networks
http_access allow localhost
http_access deny all

# 外部からの接続拒否
http_reply_access allow our_networks
http_reply_access allow localhost
http_reply_access deny all

icp_access allow our_networks
icp_access allow localhost
icp_access deny all

# 念のためのフェイク
visible_hostname 192.168.1.1

# 消してしまおう
header_access X-FORWARDED-FOR deny all
header_access VIA deny all
header_access CACHE-CONTROL deny all
# header_access user-agent deny all
header_replace user-agent Nutscrape/1.0 (CP/M; 8-bit)