# Server details #Squid must run as a regular user and group - ***NOT ROOT*** cache_effective_user nobody cache_effective_group wheel

#Tell Squid to listen to port 3128, but substitute your Mac's IP address! http_port 172.16.0.81:3128 http_port 127.0.0.1:3128 #Tell Squid where to find your SSL cert. Leave this commented out until you have generated your cert! #https_port 3128 cert=/usr/local/squid/etc/server.pem #Tell your users who to contact if there's a problem - shown on error pages cache_mgr cache@stocksy.co.uk #Tells Squid how to identify itself in error pages visible_hostname Power-Mac.local. # Caches #Where do you want Squid to store it's cache? I have a 120GB drive I use, but you may not, the commented out values might make more sense for you: #cache_dir ufs /usr/local/squid/var/cache 7000 16 256 #If you specify a cache outside /usr/local/squid, chown -R nobody:wheel it so squid has full access! cache_dir ufs /Volumes/Squid 102835 247 256 cache_swap_low 90 cache_swap_high 95 cache_mem 32 MB maximum_object_size 1 GB # Cache tweaks #These are useful tweaks to aggressively cache things that don't change often: refresh_pattern . 0 20% 4320 refresh_pattern -i \.gz$ 4320 100% 43200 reload-into-ims refresh_pattern -i \.bz2$ 4320 100% 43200 reload-into-ims refresh_pattern -i \.dmg$ 4320 100% 43200 reload-into-ims refresh_pattern -i \.bin$ 4320 100% 43200 reload-into-ims refresh_pattern -i windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims refresh_pattern -i download.microsoft.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims refresh_pattern -i uk.download.windowsupdate.com/.*\.(cab|exe) 4320 100% 43200 reload-into-ims #Ad filtering #Leave this commented out for now

#redirect_program /usr/local/bin/wrapzap # Logs #Just to let squid know where to keep its logs. cache_log /usr/local/squid/var/logs/cache.log cache_access_log /usr/local/squid/var/logs/access.log cache_store_log none #This can help troubleshooting, but leave commented out for now, it degrades performance #cache_store_log /usr/local/squid/var/logs/store.log # keep 4 versions of the logs logfile_rotate 4 # Access control # Who is allowed to access Squid? acl All src 0/0 acl Manager proto cache_object # Allow proxy to access itself acl Localhost src 127.0.0.1/32 # What ports should squid be allowed to proxy? These are sensible values acl Safe_ports port 80 21 443 563 70 210 280 488 591 777 1025-65535 acl SSL_ports port 443 563 acl CONNECT method CONNECT # Replace this with your lan's actual network address acl SpruceWayNetwork src 172.16.0.0/24 http_access allow Manager Localhost http_access deny Manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow SpruceWayNetwork http_access allow Localhost http_access deny All #The cache manager lets you see some squid stats cachemgr_passwd ******* all