Isi squid.conf

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
# acl all src 0.0.0.0/0.0.0.0
acl terserahnetwork src xxx.xxx.xxx.xxx/xx
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl purge method PURGE
acl QUERY urlpath_regex cgi-bin \? .js .jsp .cgi
# acl blacklist url_regex -i "/etc/squid/blacklist.txt"
# acl snmppublic snmp_community public
# acl ym req_mime_type ^appication/x-msn-messenger$
# acl ymmime req_mime_type -i ^appication/x-msn-messenger$
# acl ymmime rep_mime_type ^appication/x-msn-messenger$
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
# http_access deny to_localhost
http_access allow purge localhost
http_access deny purge
# icp_access allow allnetwork
icp_access allow terserahnetwork
icp_access deny all
# htcp_access allow allnetwork
htcp_access deny all
# http_access allow all
http_access allow terserahnetwork
# http_access deny ymmime
# http_access deny blacklist
http_access deny all
http_port 3128 transparent
# http_port 8080 transparent
hierarchy_stoplist cgi-bin ? .js .jsp .cgi
cache_mem 256 MB
# maximum_object_size_in_memory 8 KB
# memory_replacement_policy lru
cache_dir ufs /var/log/squid/cache 18432 16 256
# minimum_object_size 0 KB
maximum_object_size 128 MB
cache_replacement_policy lru
cache_swap_low 90
cache_swap_high 95
access_log /var/log/squid/logs/access.log
cache_log /var/log/squid/logs/cache.log
cache_store_log /var/log/squid/logs/store.log
logfile_rotate 5
emulate_httpd_log on
# redirect_children 5
mime_table /etc/squid/mime.conf
pid_filename /var/log/squid/logs/squid.pid
log_fqdn on
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
refresh_pattern . 0 20% 4320
cache_mgr admin@domain.com
cache_effective_user squid
cache_effective_group squid
visible_hostname localhost.domain.com
# snmp_access allow snmppublic localhost
# snmp_access deny all
icp_port 3130
# cache_dns_program /usr/libexec/dnsserver
dns_nameservers xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
# hosts_file /etc/hosts
# dns_testnames netscape.com internic.net nlanr.net microsoft.com
cachemgr_passwd terserahaja
coredump_dir /var/log/squid/cache