#last Update Proxy Squid config 2013
http_port 192.168.1.1:8080 transparent


icp_port 3130
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
acl QUERY urlpath_regex cgi-bin \?.php
no_cache deny QUERY
cache_mem 50 MB

cache_dir ufs /home/squid/squid0 1000 32 512
cache_dir ufs /home/squid/squid1 1000 32 512

cache_access_log /dev/null
#cache_store_log none
cache_log /dev/null
#access_log /var/log/squid/access.log squid

cache_replacement_policy GDSF

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255

acl vlan11 src 192.168.1.0/255.255.255.0


acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 110         # pop
acl Safe_ports port 119 20      # Lain2x
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl safe_ports port 53          # dns
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 587         # outlook
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl Safe_ports port 6667-7002   # IRC ports
acl SSL_ports port 5050         # YM
acl SSL_ports port 5222         # GTalk
acl CONNECT method CONNECT



deny_info http://www.google.com session



maximum_object_size 3000 KB
store_avg_object_size 50 KB

http_access allow vlan11

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny all
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_access deny all
http_reply_access allow all
always_direct allow all

icp_access allow all
miss_access allow all
reply_body_max_size 0 allow all
cache_mgr dms@ikc.co.id
visible_hostname PROXY.MAKARYA
logfile_rotate 7
forwarded_for on
maximum_single_addr_tries 3

request_header_max_size 10 KB
request_body_max_size 1 MB
reply_header_max_size 40 KB
reply_body_max_size 0 allow all

delay_pools 1

delay_class 1 1
delay_parameters 1 250000/1024000
delay_access 1 deny all