acl localnet src 192.168.0.0/16


acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT


http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow localnet
http_access allow localhost

http_access deny all

icp_access allow localnet
icp_access deny all

http_port 3128

hierarchy_stoplist cgi-bin ?

cache_mem 1024 MB

minimum_object_size 0 KB
maximum_object_size 40 MB

cache_dir aufs /var/spool/squid3 6144 16 256

coredump_dir /var/spool/squid3

refresh_pattern ^ftp:               1440    20%    10080
refresh_pattern ^gopher:            1440    0%     1440
refresh_pattern -i (/cgi-bin/|\?)   0       0%     0
refresh_pattern .                   0       20%    4320
