redirect_program /usr/bin/squidGuard auth_param basic program /usr/lib/squid/ncsa_auth /s4f/conf/proxy_access auth_param basic realm Ess Content Filter cache_mem 50 MB cache_swap_low 93 cache_swap_high 95 # maximum_object_size 4096 KB # minimum_object_size 0 KB # maximum_object_size_in_memory 8 KB fqdncache_size 2048 visible_hostname wii cache_access_log /s4f/logs/squid/access.log cache_log /s4f/logs/squid/cache.log cache_store_log none cache_replacement_policy heap GDSF memory_replacement_policy heap GDSF useragent_log none ##authenticate_children 5 ##authenticate_ttl 1 hour # authenticate_ip_ttl 0 seconds # authenticate_ip_ttl_is_strict on request_body_max_size 0 # reply_body_max_size 0 positive_dns_ttl 24 hour # negative_dns_ttl 5 minutes acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object ########### ACL Definitions acl PURGE method PURGE acl localhost src 127.0.0.1/255.255.255.255 acl Safe_ports port "/s4f/conf/s_ports.conf" # ports acl CONNECT method CONNECT acl password proxy_auth REQUIRED acl authenticated_port myport "/s4f/conf/authports.conf" acl allow_ips src "/s4f/conf/ip_allows.conf" acl windows-update-dom dstdomain .microsoft.com acl windows-update-dom dstdomain .windowsupdate.com #Recommended minimum configuration: # bypass squidGuard for manager requests redirector_access deny manager # Only allow cachemgr access from localhost http_access allow manager localhost http_access deny manager http_access deny !Safe_ports # PURGE ACCESS http_access allow PURGE localhost http_access deny PURGE # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS http_access allow windows-update-dom http_access allow authenticated_port password http_access allow allow_ips # And finally deny all other access to this proxy http_access deny all icp_access deny all cache_effective_user squid cache_effective_group aim error_directory /usr/share/squid/errors digest_generation off extension_methods SEARCH PROPFIND PROPATCH MKCOL SUBSCRIBE ##authenticate_program /usr/local/squid/auth_mods/ncsa_auth /s4f/conf/proxy_access #LOG_DAYS=7 ADDED BY BRAD TO USE DB LOG STORAGE connect_timeout 1 minute request_timeout 30 seconds # TM OFF cache_dir aufs /var/cache/squid 5120 16 256 #!s4f_auth_mode basic acl deny_cache url_regex "/s4f/conf/deny_cache.conf" redirect_children 10 redirector_bypass off cache_mgr youradmin@yourdomain.com cachemgr_passwd daiseychain config offline_toggle shutdown logfile_rotate 0 httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on http_port 8080 http_port 8081