[Comm] Re: Squid ворос к майнтейнерам пакета

[Serhii Hlodin]

=F3=D0=C5=C3=C9=C1=CC=D8=CE=CF =C4=CC=D1 =D4=C5=C2=D1 =CE=C5 =D0=CF=CC=C5=
=CE=C9=CC=D3=D1, =D0=CF=D3=D4=C1=D7=C9=CC squid =C9 =CE=C1=D3=D4=D2=CF=C9=
=CC =C5=C7=CF. =F7=D3=C5
=D2=C1=C2=CF=D4=C1=C5=D4. =E4=C5=D2=D6=C9 =C6=C1=CA=CC =CB=CF=CE=C6=C9=C7=
=D5=D2=C1=C3=C9=C9 =C9 =CD=C1=D2=DB =DE=C9=D4=C1=D4=D8 =C4=CF=CB=D5=CD=C5=
=CE=D4=C1=C3=C9=C0!
=FE=D4=CF=C2=D9 =D4=D9 =CE=C5 =C7=CF=D7=CF=D2=C9=CC -- =DC=D4=C1 =CB=CF=CE=
=C6=C9=C7=D5=D2=C1=C3=C9=D1 _=D0=CF=CC=CE=CF=D3=D4=D8=C0_ _=D2=C1=C2=CF=DE=
=C1=D1_!

http_port 3128
ssl_unclean_shutdown off
icp_port 3130

cache_replacement_policy heap GDSF

cache_dir ufs /var/spool/squid 100 16 256

emulate_httpd_log off
log_ip_on_direct on

debug_options ALL,1
log_fqdn on

ftp_user Squid@
ftp_passive on
ftp_sanitycheck on

diskd_program /usr/lib/squid/diskd
unlinkd_program /usr/lib/squid/unlinkd

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

authenticate_ttl 1 hour
authenticate_ip_ttl 30 seconds

refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320

connect_timeout 5 minutes
peer_connect_timeout 600 seconds
read_timeout 10 minutes
request_timeout 5 minutes

half_closed_clients off
pconn_timeout 600 seconds
shutdown_lifetime 10 seconds

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Jabber_ports port 5222
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443 563	# https, snews
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl CONNECT method CONNECT
acl users proxy_auth REQUIRED

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports !Jabber_ports
http_access deny to_localhost
http_access allow localhost
http_access allow all users
http_access deny all
http_reply_access allow all
icp_access allow all

coredump_dir /var/spool/squid


--=20
With best regards,
                Serhii Hlodin