Squid.conf, alguem poderia dar uma olhadinha...

[fisiconuclear18]

Pessoal, configurei o squid e gostaria que alguem desse uma olhada, alguma sugestão, enfim se está tudo certo com ele...
Se a ordem das acl's batem e tal...

SQUID.CONF
http_port 3128
acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY

#Definindo memória,cash e afins...

cache_mem 64 MB
maximum_object_size_in_memory 64 KB
maximum_object_size_in_memory 200 KB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 10000 16 256
cache_access_log /var/log/squid/access.log
client_netmask 255.255.255.255
refresh_pattern ^ftp: 60 20% 2280
refresh_pattern ^gopher: 60 0% 2280
refresh_pattern . 60 20% 2280

#Criando as acls

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

#Bloqueando palavras chaves dentro destes arquivos

acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt"
acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt"
http_access deny blockedsites !unblockedsites

#Bloqueando mp3,.iso e sh

acl mp3 url_regex -i.*.mp3$
http_access deny mp3
acl iso url_regex -i.*.iso$
http_access deny iso
acl sh url_regex -i.*.sh$
http_access deny sh

acl redelocal src 192.168.2.0/24
http_access allow localhost
http_access allow redelocal
http_access deny all

#Proxy Transparente

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
icp_access allow all
miss_access allow all
visible_hostname GTIS
error_directory /usr/share/squid/errors/Portuguese
coredump_dir /var/spool/squid

[Rod_Oliveira]

Está certo o seu squid, qualquer problema favor enviar o arquivo /var/log/messages..para avaliação. E também os arquivos de log do squid.

[Bruno]

cria sua acl assim
no inicio do das outras de bloqueio


acl all src 0.0.0.0/0.0.0.0
acl redelocal src 192.168.2.0/24

[Makaveli]

Coloque :
http_port 192.168.0.1:3128

Sendo 192.168.0.1 o IP do servidor proxy.
Assim vc será visto somente pela rede interna.