#####################################################################################
#squid.conf
#  -rw-r-----  root squid
#
#####################################################################################


acl SSL_ports port 443

acl Safe_ports port 80      # http
acl Safe_ports port 21      # ftp
acl Safe_ports port 443     # https

acl CONNECT method CONNECT


#==================================================================================
# test-group1
#==================================================================================
acl test-group1 src xx.xx.xx.xx # test-server-1
acl test-group1 src xx.xx.xx.xx # test-server-2

acl specialurl1 urlregex test.example.com

httpaccess allow test-group1 specialurl1
http_access deny test-group1 all


#==================================================================================
# localnet
#==================================================================================
acl localnet src 10.50.0.0/24    # Office
acl localnet src 172.16.0.0/24  # 
acl localnet src 192.168.0.0/16 # 

# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# Only allow cachemgr access from localhost
http_access allow localhost manager
http_access deny manager




#==================================================================================
# Log
#==================================================================================
logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
access_log /var/log/squid/access.log combined