[lang=hr]my settings! modem----dinamic ip------mikrotik router--------------------debian squid
ip-192.168.10.1/24 debian ip 192.168.20.10/30
wlan 192.168.100.1/24
squid ip 192.168.20.1/30

mikrotik- ip route dst 192.168.20.1 gateway 192.168.20.10
ip firewall add chain src action src address 192.168.20.0/30 dst nat action nat to address 192.168.20.10
ip firewall dst action nat to address 192.168.20.10 to ports 3128 in interface tcp dst port 80 commenct proxy
ip web proxy src address 192.168.20.1
ports-3128
parent proxy 192.168.20.10
parent proxy port 3126

squid


zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136
http_port 192.168.12.1:3128 transparent
cache_mem 6 MB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
maximum_object_size 2 MB
cache_swap_low 98
cache_swap_high 99
cache_dir aufs /lapo1cache 3000 32 256
cache_dir aufs /lapo2cache 3000 32 256
access_log /usr/local/squid/access.log
cache_log /usr/local/squid/cache.log
cache_store_log none
log_fqdn off
log_icp_queries off
buffered_logs off
emulate_httpd_log off

client_netmask 255.255.255.0
redirect_rewrites_host_header off
dns_nameservers 203.130.206.250 202.134.0.155
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT

acl blocklist url_regex -i //\*.*3gp*.* //\*.*3GP*.* //\*.*SEX*.* //\*.*sex*.* //\*.*Sex*.* //\*.*miyabi*.* //\*.*Miyabi*.* //\*.*oral*.* //\*.*adult*.*

//\*.*sexy*.* ^http://www\.submit-it.* ^http://ads01.* ^http://www\.eads.* ^http://ads\. ^http://ad\. ^http://ads02\. ^http://adaver.*\. ^http://adforce\.

/images/[Aa][Dd]/ /reklame/ /[Bb]anners/ 17tahun miyabi \.3[Gg][Pp]$ 3gp 3GP Sex
acl download url_regex -i \.mpg$ \.mpeg$ \.avi$ \.dat$ \.exe$ \.vqf$ \.tar.gz$ \.gz$ \.rpm$
acl download url_regex -i \.zip$ \.bz2$ \.rar$ \.qt$ \.ram$ \.rm$ \.iso$ \.raw$ \.wav$ \.mov$ \.cab$

acl proxy src 192.168.12.0/255.255.255.0
acl wifi src 192.168.3.0/255.255.255.0
acl lan src 192.168.10.0/255.255.255.0

http_access allow manager
http_access allow manager localhost
http_access allow localhost
http_access allow proxy
http_access allow wifi
http_access allow lan
http_reply_access allow all
always_direct allow all
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny manager
http_access deny blocklist
http_access deny download
http_access deny all



cache_mgr [email protected]
cache_effective_user squid
cache_effective_group squid



# FTP section
ftp_list_width 32
ftp_passive on
ftp_sanitycheck on


# REFRESH-PATTERN #

refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims i$
refresh_pattern -i \.(xml|html|htm|js|txt|css)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-relo$
refresh_pattern ^http://mail.yahoo.com/.* 720 100% 10080
refresh_pattern ^http://*.yahoo.*/.* 720 100% 7200
refresh_pattern ^http://*.google.com/.* 720 100% 10080
refresh_pattern ^http://*.mylapo.com/.* 720 100% 10080
refresh_pattern ^http://*.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.static.ak.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^Page Not Found | Facebook 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://facebook.poker.zynga.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://statics.poker.static.zynga.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://profile.ak.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static-facebook.farmville.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.farmville.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://zbar.static.zynga.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320



acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
fqdncache_size 1000
ignore_unknown_nameservers on
ipcache_size 4096
ipcache_low 98
ipcache_high 99
quick_abort_min 0
quick_abort_max 0
quick_abort_pct 75
shutdown_lifetime 10 second
memory_pools off
buffered_logs off
log_icp_queries off
logfile_rotate 1
log_fqdn off
forwarded_for off
icp_hit_stale on
query_icmp on
reload_into_ims on
emulate_httpd_log off
negative_ttl 2 minute
pipeline_prefetch on
vary_ignore_expire on
half_closed_clients off
high_page_fault_warning 2
nonhierarchical_direct on
prefer_direct off
cache deny blocklist download
server_http11 on

wrong here

igor:/home/igor# squid start
2010/08/06 20:25:23| parseConfigFile: squid.conf:38 unrecognized: '//\*.*sexy*.*'
2010/08/06 20:25:23| parseConfigFile: squid.conf:40 unrecognized: '/images/[Aa][Dd]/'
2010/08/06 20:25:23| parse_refreshpattern: Unknown option '\.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$': i$
2010/08/06 20:25:23| parse_refreshpattern: Unknown option '\.(xml|html|htm|js|txt|css)$': ignore-relo$
FATAL: cache_dir /lapo1cache: (2) No such file or directory
Squid Cache (Version 2.7.STABLE3): Terminated abnormally.
CPU Usage: 0.004 seconds = 0.000 user + 0.004 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0

please , help me --tanks[/lang]