User Tools

Site Tools


linux:squid-config

Link to this comparison view

Next revision
Previous revision
linux:squid-config [2014/08/29 15:33]
percy created
linux:squid-config [2016/05/05 13:07] (current)
Line 1: Line 1:
 ====== Squid config ====== ====== Squid config ======
 +Squid is a proxy application running on Linux, I want to use it as forward proxy, so I can break the GFW.
  
 +  root@pjq:/​etc/​squid3#​ grep -E -v "​^$|^#"​ squid.conf
 +
 +<code BASH>
 +auth_param basic program /​usr/​lib/​squid3/​basic_ncsa_auth /​etc/​squid3/​passwd
 +auth_param basic children 5
 +auth_param basic realm Login to access proxy server
 +auth_param basic credentialsttl 2 hours
 +auth_param basic casesensitive off
 +acl allowed_user proxy_auth REQUIRED
 +http_access allow allowed_user
 +via off
 +forwarded_for off
 +request_header_access Allow allow all
 +request_header_access Authorization allow all
 +request_header_access WWW-Authenticate allow all
 +request_header_access Proxy-Authorization allow all
 +request_header_access Proxy-Authenticate allow all
 +request_header_access Cache-Control allow all
 +request_header_access Content-Encoding allow all
 +request_header_access Content-Length allow all
 +request_header_access Content-Type allow all
 +request_header_access Date allow all
 +request_header_access Expires allow all
 +request_header_access Host allow all
 +request_header_access If-Modified-Since allow all
 +request_header_access Last-Modified allow all
 +request_header_access Location allow all
 +request_header_access Pragma allow all
 +request_header_access Accept allow all
 +request_header_access Accept-Charset allow all
 +request_header_access Accept-Encoding allow all
 +request_header_access Accept-Language allow all
 +request_header_access Content-Language allow all
 +request_header_access Mime-Version allow all
 +request_header_access Retry-After allow all
 +request_header_access Title allow all
 +request_header_access Connection allow all
 +request_header_access Proxy-Connection allow all
 +request_header_access User-Agent allow all
 +request_header_access Cookie allow all
 +request_header_access All deny all
 +acl SSL_ports port 443
 +acl Safe_ports port 80          # http
 +acl Safe_ports port 21          # ftp
 +acl Safe_ports port 443         # https
 +acl Safe_ports port 70          # gopher
 +acl Safe_ports port 210         # wais
 +acl Safe_ports port 1025-65535 ​ # unregistered ports
 +acl Safe_ports port 280         # http-mgmt
 +acl Safe_ports port 488         # gss-http
 +acl Safe_ports port 591         # filemaker
 +acl Safe_ports port 777         # multiling http
 +acl CONNECT method CONNECT
 +http_access deny !Safe_ports
 +http_access deny CONNECT !SSL_ports
 +http_access allow localhost manager
 +http_access deny manager
 +http_access allow localhost
 +http_access deny all
 +http_port 3129
 +cache_mem 32 MB
 +coredump_dir /​var/​spool/​squid3
 +refresh_pattern ^ftp:           ​1440 ​   20%     10080
 +refresh_pattern ^gopher: ​       1440    0%      1440
 +refresh_pattern -i (/​cgi-bin/​|\?​) 0     ​0% ​     0
 +refresh_pattern (Release|Packages(.gz)*)$ ​     0       ​20% ​    2880
 +refresh_pattern .               ​0 ​      ​20% ​    4320
 +cache_mgr pengjianqing<​AT>​gmail.com
 +</​code>​
/var/www/dokuwiki/wiki/data/pages/linux/squid-config.txt · Last modified: 2016/05/05 13:07 (external edit)