cache_mem 32 MB
store_avg_object_size 16 kB

# transparentny proxy
http_port 8080
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
#miss_access allow all

# nazwa wyœwietlana
visible_hostname xxx

cache_dir ufs /var/cache/squid 500 16 256
cache_access_log none
cache_log none
cache_store_log none

# regu³y odœwie¿ania
refresh_pattern -i (.*jpg$|.*gif$) 0 50% 28800
refresh_pattern -i (.*html$|.*htm|.*shtml) 0 20% 1440
refresh_pattern (http://.*/$) 0 20% 1440
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

# Change to your domain
cache_mgr xxx

# serwery dns (mo¿esz podaæ swój np. 192.168.1.1)
dns_nameservers 194.204.152.34 194.204.159.1

# Cache replacement policy
# GDSF zatrzymuje w cache niewielkie popularne obiekty
cache_replacement_policy GDSF

# Standard Access List
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl siec src 192.168.0.0/16 # nasza sieæ LAN
acl SSL_ports port 443 563
acl Safe_ports port 21 80 442 563 70 210 280 488 591 777 1025-65535
acl CONNECT method CONNECT
acl MCONN maxconn 50

# dostêp
#http_access deny bad_url bad_url_ip_1
http_access allow localhost
http_access allow manager localhost
http_access deny manager
http_access deny to_localhost
http_access deny MCONN siec
http_access allow siec
http_access deny CONNECT !SSL_ports
http_access deny !Safe_ports
http_access deny all

#Allow ICP queries from eveyone
icp_access allow all

# wylaczone cacheowanie cgi
#acl QUERY urlpath_regex cgi-bin ?
#hierarchy_stoplist cgi-bin ?
#no_cache deny QUERY

#acl magic_words1 url_regex -i 192.168
#acl magic_words2 url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov


# pora dnia, o której bêd¹ obowi¹zywaæ ograniczenia
#acl day time 13:00-24:00

# Delay Pool
#delay_pools 2

# limit na pliki wymienione w acl magic_words2 url_regex (4kb/s)
#delay_class 1 2
#delay_parameters 1 15650/15650 4000/15650
#delay_access 1 allow magic_words2
#delay_access 1 allow siec

# -1/-1 means that there are no limits for local traffic.
#delay_class 2 2
#delay_parameters 2 -1/-1 -1/-1
#delay_access 2 allow magic_words1

# maksymalny plik jaki mo¿na œci¹gn¹æ (1MB)
#reply_body_max_size 1024 KB

# snmp stuff
#acl snmppublic snmp_community public
#snmp_access allow snmppublic localhost
#snmp_access deny all

# aby u¿ytkownicy nie mieli ¿adnych problemów z ftp
ftp_passive off

# podaje adres przy logowaniu anonymous
ftp_user ftp@LAN

# czas przechowywania zapisanych stron (dwa tygodnie)
#reference_age 1 week

# logowanie zapytañ ICP z innych serwerów web cache:
log_icp_queries off

# zapis logów z buforowaniem
buffered_logs on


# INNE
#error_directory /var/log/squid/errors
debug_options ALL,1
connect_timeout 180 seconds
peer_connect_timeout 50 seconds
read_timeout 5 minutes
request_timeout 2 minutes
client_lifetime 1 day
half_closed_clients on
pconn_timeout 120 seconds
dead_peer_timeout 25 seconds
pipeline_prefetch on
maximum_object_size 1024 KB
forwarded_for off