squid config fix

This commit is contained in:
Paolo Asperti 2019-08-05 19:18:50 +02:00
parent 3fed5bb83a
commit d0ceadf1b8
Signed by: paspo
GPG Key ID: 06D46905D19D5182

View File

@ -4,27 +4,16 @@ acl localnet src 100.64.0.0/10 # RFC 6598 shared address space (CGN)
acl localnet src 169.254.0.0/16 # RFC 3927 link-local (directly plugged) machines acl localnet src 169.254.0.0/16 # RFC 3927 link-local (directly plugged) machines
acl localnet src 172.16.0.0/12 # RFC 1918 local private network (LAN) acl localnet src 172.16.0.0/12 # RFC 1918 local private network (LAN)
acl localnet src 192.168.0.0/16 # RFC 1918 local private network (LAN) acl localnet src 192.168.0.0/16 # RFC 1918 local private network (LAN)
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager http_access allow localhost manager
http_access deny manager http_access deny manager
include /etc/squid/conf.d/*
include /etc/squid/patterns.d/*
http_access allow localnet http_access allow localnet
http_access allow localhost http_access allow localhost
http_access deny all http_access deny all
include /etc/squid/conf.d/*
include /etc/squid/patterns.d/*
http_port 3128 http_port 3128
http_port 3129 intercept http_port 3129 intercept
refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^ftp: 1440 20% 10080