duvida no squid

ae galera to com um problema aki, to qurendo q o squid faça com q o pessoal da rede interna navegue em apenas 20 sites: vo postar minha squid.conf ai vcs me falam o q devo faze

http_port 3120
visible_hostname Carmonet_WebMaster
cache_mem 100 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /usr/local/squid/cache 2000 32 512
cache_access_log /usr/local/squid/logs/access.log
dns_nameservers 200.202.197.130
cache_effective_user squid
error_directory /usr/local/etc/squid/errors/Portuguese
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost

acl expediente time SMTWHFA 18:00-24:00
http_access deny expediente
acl madrugada time SMTWHFA 00:00-05:00
http_access deny madrugada

acl redelocal src 192.168.111.0/24
delay_pools 1
delay_class 1 2
delay_parameters 1 16384/16384 7192/7192
delay_access 1 allow redelocal
http_access allow localhost
http_access allow redelocal

http_access deny all

acl only dstdom_regex "/usr/local/etc/squid/only"
http_access allow only

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

pessoal ta ae minha squid.conf, o arquivo only eh onde estao os sites q eu quero q a rede navegue.. quer souber de algo errado ai da um toque ae..
flw vle galera