FreeBSD上的Squid透明代理配置

icepole

http_port 10.62.1.2:3128 transparent
#Disable Cache
hierarchy_stoplist cgi-bin ?
hierarchy_stoplist -i ^https:\\ ?
acl QUERY urlpath_regex -i cgi-bin \? \.asp \.php \.jsp \.cgi
acl denyssl urlpath_regex -i ^https:\\
no_cache deny QUERY
no_cache deny denyssl
cache_mgr kelvin.peng@carlingtech.com
cache_mem 256 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
cache_dir ufs /cache/squid/cache1 1000 16 256
cache_dir ufs /cache/squid/cache2 1000 16 256
access_log /cache/squid/logs/access.log
cache_log /cache/squid/logs/cache.log
cache_store_log /cache/squid/logs/store.log
pid_filename /var/run/squid.pid
ipcache_size 2048
ipcache_low 90
ipcache_high 95
fqdncache_size 2048
dns_nameservers 202.96.128.166 202.96.128.86
cache_effective_user squid squid
#Define IP address
#acl wan src 0.0.0.0/0.0.0.0
acl lan src 10.62.1.0/24
acl lan_ip dst "/usr/config/internal"
acl denyip src "/usr/config/denyip.ip"
acl 100 src "/usr/config/permit.ip"
#acl 101 src "/usr/config/ac.ip"
#acl 102 src "/usr/config/cs.ip"
#acl 103 src "/usr/config/hr-adm.ip"
#Define URL address
acl badurl url_regex "/usr/config/blockurl.txt"
#acl allowedmac arp "/usr/config/maclist.txt"
acl work_inside url_regex "/usr/config/work_url.txt"
acl work_outside url_regex "/usr/config/offwork_url.txt"
acl full_url dstdomain "/usr/config/internal"
#deny download swf flash
#acl badfiles urlpath_regex -i .swf$
#http_access deny badfiles
#Define Access-control Times
acl offtime time 17:31-24:00 00:00-8:29
acl worktime time MTWHF 8:30-12:29 13:31-17:30
acl middle time 12:30-13:30
http_access allow lan_ip
http_access allow full_url
http_access allow 100 work_inside
http_access allow 100 work_outside !middle
#http_access allow 100 work_outside offtime
#http_access allow allowedmac
http_access deny denyip
http_access deny badurl
http_access deny lan !worktime
visible_hostname Squid Proxy-Server
error_directory /usr/local/etc/squid/errors/Simplify_Chinese
               
               
               

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u3/107631/showart_2136096.html