Proxy Squid3

download Proxy Squid3

If you can't read please download the document

description

setting squid3 ala [email protected]

Transcript of Proxy Squid3

Konfigurasi squid3# ACCESS CONTROLS OPTIONS# ====================##acl QUERY berikut saya buat comment karena error saat penulis coba#acl QUERY urlpath_regex -i cgi-bin ? .php$ .asp$ .shtml$ .cfm$ .cfml$ .phtml$ .php3$ localhostacl all srcacl localnet src 10.0.0.0/8# Your network hereacl localnet src 192.168.1.100/32#acl localhost src 127.0.0.1/32acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535acl sslports port 443 563 81 2087 10000acl manager proto cache_objectacl purge method PURGEaclconnect method CONNECTacl ym dstdomain .messenger.yahoo.com .psq.yahoo.comacl ym dstdomain .us.il.yimg.com .msg.yahoo.com .pager.yahoo.comacl ym dstdomain .rareedge.com .ytunnelpro.com .chat.yahoo.comacl ym dstdomain .voice.yahoo.comacl ymregex url_regex yupdater.yim ymsgr myspaceim#http_access deny ymhttp_access deny ymregexhttp_access allow manager localhosthttp_access deny managerhttp_access allow purge localhosthttp_access deny purgehttp_access deny !safeportshttp_access deny CONNECT !sslportshttp_access allow localhosthttp_access allow localnethttp_access deny all## NETWORK OPTIONS# #http_port 3128 transparent## OPTIONS WHICH AFFECT THE CACHE SIZE# ==============================#cache_mem 16 MBmaximum_object_size_in_memory 32 KBmemory_replacement_policy heap GDSFcache_replacement_policy heap LFUDAcache_dir aufs /home/cache 10000 14 256maximum_object_size 128000 KBcache_swap_low 95cache_swap_high 99## LOGFILE PATHNAMES AND CACHE DIRECTORIES# ==================================#access_log /var/log/squid3/access.logcache_log /var/lod/squid3/cache.log#cache_log /dev/nullcache_store_log nonelogfile_rotate 5log_icp_queries off## OPTIONS FOR TUNING THE CACHE# ========================##cache deny QUERY#cache deny QUERY di-comment karena error saat penulis coba

refresh_pattern ^ftp: 1440 20% 10080 reload-into-imsrefresh_pattern ^gopher: 1440 0% 1440refresh_pattern -i .(gif|png|jp?g|ico|bmp|tiff?)$ 10080 95% 43200 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-privaterefresh_pattern -i .(rpm|cab|deb|exe|msi|msu|zip|tar|xz|bz|bz2|lzma|gz|tgz|rar|bin|7z|doc?|xls?|ppt?|pdf|nth|psd|sis)$ 10080 90% 43200 override-expire$refresh_pattern -i .(avi|iso|wav|mid|mp?|mpeg|mov|3gp|wm?|swf|flv|x-flv|axd)$ 43200 95% 432000 override-expire override-lastmod reload-into-ims ignore$refresh_pattern -i .(html|htm|css|js)$ 1440 75% 40320refresh_pattern -i .index.(html|htm)$ 0 75% 10080#quick_abort_min 0 KBquick_abort_max 0 KBquick_abort_pct 100store_avg_object_size 13 KB## HTTP OPTIONS# ===========vary_ignore_expire on## ANONIMITY OPTIONS# ===============#request_header_access From deny allrequest_header_access Server deny allrequest_header_access Link deny allrequest_header_access Via deny allrequest_header_access X-Forwarded-For deny all## TIMEOUTS# =======#forward_timeout 240 secondconnect_timeout 30 secondpeer_connect_timeout 5 secondread_timeout 600 secondrequest_timeout 60 secondshutdown_lifetime 10 second## ADMINISTRATIVE PARAMETERS# =====================#[email protected]_effective_user proxycache_effective_group proxyhttpd_suppress_version_string onvisible_hostname proxy#ftp_list_width 32ftp_passive onftp_sanitycheck on## DNS OPTIONS# ==========#dns_timeout 10 secondsdns_nameservers 192.168.1.1 #DNS lokal jika adadns_nameservers 8.8.8.8 203.130.208.18 # DNS Server

## MISCELLANEOUS# ===========#memory_pools offclient_db offreload_into_ims on#coredump_dir /cachecoredump_dir /home/cachepipeline_prefetch onoffline_mode off

##Marking ZPH#==========#zph_mode tos#zph_local 0x30#zph_parent 0#zph_option 136qos_flows tosqos_flows local-hit = 0x30qos_flows parent-hit = 0### END CONFIGURATION ###