Posted by taigakun on 12-02-2009 14:26
#1
saya lagi blajar squid dibawah ini adalah setingannya kira kira ad yang salah g? kayaknya seh banyak......hohohoho
http_port 8000
icp_port 3130
cache_peer 192.168.100.3 parent 8080 3130 proxy-only default
cache_mem 90 MB
cache_swap_low 93
cache_swap_high 95
maximum_object_size 20000 KB
minimum_object_size 10 KB
maximum_object_size_in_memory 1000 KB
cache_replacement_policy lru
memory_replacement_policy lru
# DIREKTORI LOG DAN CACHE#####
cache_dir ufs /usr/local/squidx/var/cache 100 16 256
access_log /usr/local/squidx/var/logs/access.log squid
access_log /usr/local/squidx/var/logs/cache.log squid
cache_store_log /usr/local/squidx/var/logs/store.log
##tuning cache proxy
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
# TIMEOUT####
half_closed_clients off
# AKSES KONTROL
#acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8
acl localnet src 172.16.0.0/12
acl localnet src 192.168.0.0/16
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl gaboleh url_regex -i "/usr/local/squidx/etc/nyoba/gaboleh"
acl download url_regex -i \.vqf$ \.tar$ \.gz$ \.rpm$ \.avi$ \.mpeg$ \.mpe$ \.mpg
#acl##############
acl server src 192.168.100.0/28
acl lab src 192.168.1.0/26 # lab01
acl lab src 192.168.2.0/26 # lab02
acl lab src 192.168.3.0/26 # lab03
acl lab src 192.168.4.0/26 # lab04
acl lab src 192.168.4.0/26 # lab04
acl lab src 192.168.5.0/26 # lab05
acl lab src 192.168.6.0/26 # lab06
acl lab src 192.168.7.0/26 # lab07
acl lab src 192.168.8.0/26 # lab08
acl lab src 192.168.9.0/25 # lab09
acl lab src 192.168.10.0/26 # lab10
acl lab src 192.168.11.0/26 # lab11
acl lab src 192.168.12.0/26 # lab12
####blok####
http_access allow server gaboleh
http_access allow server download
http_access deny lab gaboleh
http_access allow lab download
http_access allow manager localhost
http_access deny manager
http_access allow !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access allow server
http_reply_access allow lab
http_access deny all
icp_access allow all
visible_hostname = localhost