FastHandle - IT Operations Examples

FastHandle is fast operation tools for infrastructure configurations and tests.

User Tools

Site Tools

middleware:squid:squid.conf.html



Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision 		Previous revision
middleware:squid:squid.conf.html [2017/11/14 01:36]
kurihara created 		middleware:squid:squid.conf.html [2018/02/08 01:37] (current)
kurihara
Line 1: Line 1:
-====== squid : squid.conf ======+[[middleware:squid:index.html]] 
 +====== Squid Recommended Configuration with whitelist======
  
 +\\
 +{{INLINETOC}}
 +\\
 +
 +===== /etc/squid/squid.conf =====
  
 <sxh apache toolbar:false gutter:false> <sxh apache toolbar:false gutter:false>
-##################################################################################### +#=============================================================================== 
-#squid.conf+#/etc/squid/squid.conf
 #  -rw-r-----  root squid #  -rw-r-----  root squid
 # #
-#####################################################################################+#===============================================================================
  
 +#-------------------------------------------------------------------------------
 +# Port
 +#-------------------------------------------------------------------------------
 +http_port 8080
  
 acl SSL_ports port 443 acl SSL_ports port 443
Line 19: Line 29:
  
  
-#================================================================================== +#------------------------------------------------------------------------------- 
-# test-group1 +# ACL1 : test-group1 
-#==================================================================================+#------------------------------------------------------------------------------- 
 +acl all src all
 acl test-group1 src xx.xx.xx.xx # test-server-1 acl test-group1 src xx.xx.xx.xx # test-server-1
 acl test-group1 src xx.xx.xx.xx # test-server-2 acl test-group1 src xx.xx.xx.xx # test-server-2
Line 31: Line 42:
  
  
-#================================================================================== +#------------------------------------------------------------------------------- 
-# localnet +# ACL2 : localnet 
-#==================================================================================+#------------------------------------------------------------------------------- 
 +acl test-group2 src xx.xx.xx.xx  xx.xx.xx.xx 
 + 
 +acl whitelist dstdomain "/etc/squid/whitelist" 
 +http_access allow whitelist 
 + 
 + 
 +#------------------------------------------------------------------------------- 
 +# ACL3 : localnet 
 +#-------------------------------------------------------------------------------
 acl localnet src 10.50.0.0/24    # Office acl localnet src 10.50.0.0/24    # Office
 acl localnet src 172.16.0.0/24  #  acl localnet src 172.16.0.0/24  # 
Line 47: Line 67:
 http_access allow localhost manager http_access allow localhost manager
 http_access deny manager http_access deny manager
 +
 +
 +
 +
 +#-------------------------------------------------------------------------------
 +# Log
 +#-------------------------------------------------------------------------------
 +logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
 +access_log /var/log/squid/access.log combined
 +
 +
 +#-------------------------------------------------------------------------------
 +# Security
 +#-------------------------------------------------------------------------------
 +forwarded_for off
 +
 +header_access Referer deny all
 +header_access X-Forwarded-For deny all
 +header_access Via deny all
 +
 +visible_hostname unknown
 +
 </sxh> </sxh>
 +
 +\\
 +===== /etc/squid/whitelist =====
 +<sxh apache toolbar:false gutter:false>
 +.microsoft.com
 +.windows.com
 +.windowsupdate.com
 +</sxh>
 +
 +
 +\\
 +<WRAP box 90%>
 +<catlist -noAddPageButton -smallHead -sortAscending>
 +</WRAP>
 +
 +
 +\\
 +\\
 +[[middleware:squid:index.html]]


middleware/squid/squid.conf.html.1510590981.txt.gz · Last modified: 2017/11/14 01:36 by kurihara

Page Tools


Home     About     Contact

Copyright (c) 2024 FastHandle - IT Operations Examples All Rights Reserved.