# squid.conf
#-----------------------------------------------
http_port 172.168.0.1:3128 transparent
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 128 MB
cache_swap_low 75
cache_swap_high 78
maximum_object_size 250 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 2048 KB
#ipcache_size 91200
#ipcache_low 75
#ipcache_high 78
#fqdncache_size 91200
httpd_suppress_version_string on
cache_replacement_policy heap LFUDA
#cache_replacement_policy heap LRU
memory_replacement_policy heap GDSF
cache_dir aufs /var/spool/squid 20000 64 128
cache_access_log /var/log/squid/access.log
cache_store_log none
cache_log /var/log/squid/cache.log
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
# CACHE DE PAGINAS
refresh_pattern -i \.(html|htm|shtml|php|php3|xml|jsp|is|jhtm)$ 0 70% 4320
# CACHE DE FOTOS
refresh_pattern -i \.(bmp|gif|jpeg|jpg|png|tif|tiff|ico|swf)$ 0 90% 21600 reload-into-ims
# CACHE DE EXECUTAVEIS
refresh_pattern -i \.(exe|gz|tar|tgz|zip|arj|ace|bin|cab|msi)$ 0 90% 14400
# CACHE DE VIDEOS
refresh_pattern -i \.(mov|avi|mpg|mpeg|qtm|flv|swf)$ 0 90% 21600 reload-into-ims
# CACHE DE AUDIO
refresh_pattern -i \.(wav|au|mid|mp3)$ 0 80% 21600 reload-into-ims
# CACHE ANTI VIRUS
refresh_pattern -i kaspersky.com/bases/.*\.(kdc|kdl|kdz|dif) 0 100% 43200 reload-into-ims
refresh_pattern -i eset.com/.*\.(rar|nup|ver) 0 100% 43200 reload-into-ims
refresh_pattern -i symantecliveupdate.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i guru.avg.com/.*\.(bin|ctf) 0 100% 43200 reload-into-ims
refresh_pattern -i free.avg.com/download-update/.*\.(cab|bin) 0 100% 43200 reload-into-ims
refresh_pattern -i avgate.net/.*\.(cab|zip) 0 100% 43200 reload-into-ims
refresh_pattern -i avast.com/.*\.(def|vpu|vpaa|stamp|cgi)$ 0 100% 43200 reload-into-ims
refresh_pattern -i iavs4x/.* 0 100% 4320 reload-into-ims
# CACHE DE SITES
refresh_pattern -i blogspot.com/.* 720 100% 10080 reload-into-ims
refresh_pattern -i wordpress.com/.* 720 100% 10080 reload-into-ims
refresh_pattern -i yahoo.*/.* 720 100% 7200 reload-into-ims
refresh_pattern -i globo.com/.* 720 100% 7200 reload-into-ims
refresh_pattern -i terra.com.br/.* 720 100% 7200 reload-into-ims
refresh_pattern -i google.*/.* 720 100% 10080 reload-into-ims
refresh_pattern -i msn.*/.* 720 100% 10080 reload-into-ims
refresh_pattern -i yimg.*/.* 720 100% 4320 reload-into-ims
refresh_pattern -i doubleclick.*/.* 720 100% 4320 reload-into-ims
refresh_pattern -i google-analytics.*/.* 720 100% 4320 reload-into-ims
refresh_pattern -i rapidshare.com/.* 720 100% 4320 reload-into-ims
refresh_pattern -i myspace.com/.* 720 100% 4320 reload-into-ims
refresh_pattern -i photobucket.com/.* 180 100% 4320 reload-into-ims
refresh_pattern -i imageshack.us/.* 180 100% 4320 reload-into-ims
refresh_pattern -i geocities.com/.* 180 100% 4320 reload-into-ims
refresh_pattern -i redtube.com/.* 180 100% 4320 reload-into-ims
refresh_pattern -i facebook.com/.* 180 100% 4320 reload-into-ims
refresh_pattern -i windowsmedia.*/.* 720 100% 4320 reload-into-ims
refresh_pattern -i googlesyndication.*/.* 720 100% 4320 reload-into-ims
refresh_pattern -i under-linux.org/.* 720 100% 4320 reload-into-ims
refresh_pattern -i olhardireto.com.br/.* 720 100% 10080 reload-into-ims
refresh_pattern -i mercadolivre.com.br/.* 720 100% 10080 reload-into-ims
# CACHE FOTOS ORKUT
refresh_pattern -i images.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i static1.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i static2.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i static3.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i static4.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i img1.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i img2.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i img3.orkut.com/.* 0 100% 43200 reload-into-ims
refresh_pattern -i img4.orkut.com/.* 0 100% 43200 reload-into-ims
# CACHE WINDOWS UPDATE
refresh_pattern -i office\.microsoft\.com/ 0 100% 20160 reload-into-ims
refresh_pattern -i w?xpsp[0-9]\.microsoft\.com/ 0 100% 20160 reload-into-ims
refresh_pattern -i w2ksp[0-9]\.microsoft\.com/ 0 100% 20160 reload-into-ims
refresh_pattern -i download.windowsupdate.com/msdownload/ 0 100% 20160 reload-into-ims
refresh_pattern -i windowsupdate.com/.*\.(cab|exe|dll|msi) 0 100% 43200 reload-into-ims
refresh_pattern -i download.microsoft.com/.*\.(cab|exe|dll|msi) 10080 100% 43200 reload-into-ims
refresh_pattern -i microsoft.com/.*\.(cab|exe|dll|msi) 10080 100% 43200 reload-into-ims
refresh_pattern -i msgruser.dlservice.microsoft.com/.*\.(cab|exe|msi|dll|amx) 0 100% 43200 reload-into-ims
refresh_pattern -i download\.macromedia\.com/ 0 100% 20160 reload-into-ims
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 20% 2280
refresh_pattern (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
quick_abort_min -1 KB
quick_abort_max 0 KB
quick_abort_pct 100%
negative_ttl 2 minutes
positive_dns_ttl 5 minutes
half_closed_clients off
read_timeout 60 seconds
pconn_timeout 120 seconds
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSl_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 #unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl rede src 172.168.0.0/255.255.0.0
http_access allow localhost
http_access allow rede
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
visible_hostname lgmtecnologia.farolbr.com.br
memory_pools on
memory_pools_limit 32 MB
forwarded_for off
error_directory /usr/share/squid/errors/Portuguese
strip_query_terms off
ie_refresh on
detect_broken_pconn on
pipeline_prefetch on