Squid PL@Net on Fedora Core 6

http_port 3128 transparent

#request_body_max_size 0 KB

icp_query_timeout 0
maximum_icp_query_timeout 5000
mcast_icp_query_timeout 2000
dead_peer_timeout 10 seconds
hierarchy_stoplist cgi-bin ? localhost
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY

### Opsi Cache
cache_mem 6 MB
cache_swap_low 98
cache_swap_high 99
maximum_object_size 128 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 32 KB
ipcache_size 10240
ipcache_low 98
ipcache_high 99
fqdncache_size 256
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

refresh_pattern -i \.(swf|png|jpg|jpeg|bmp|tiff|png|gif) 43200 90% 129600 reload-into-ims override-lastmod
refresh_pattern -i \.(mov|mpg|mpeg|flv|avi|mp3|3gp|sis|wma) 43200 90% 129600 reload-into-ims override-lastmod
refresh_pattern -i \.(zip|rar|ace|bz|bz2|tar|gz|exe) 43200 90% 129600 reload-into-ims override-lastmod
refresh_pattern -i (.*html$|.*htm|.*shtml|.*aspx|.*asp) 43200 90% 1440 reload-into-ims override-lastmod
refresh_pattern -i \.(class|css|js|gif|jpg)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(jpe|jpeg|png|bmp|tif)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(tiff|mov|avi|qt|mpeg)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(mpg|mpe|wav|au|mid)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(asp|acgi|pl|shtml|php3|php)$ 2 20% 4320 reload-into-ims
refresh_pattern ^http://*.google.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*korea.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.akamai.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.windowsmedia.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.googlesyndication.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.plasa.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.telkom.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://www.friendster.com/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://mail.yahoo.com/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.yahoo.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.yimg.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.gmail.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^http://*.detik.*/.* 720 90% 4320 reload-into-ims override-lastmod
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern ^ftp: 43200 90% 129600 reload-into-ims override-expire
#refresh_pattern ^ftp: 1440 20% 10080
#refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
#refresh_pattern . 180 95% 120960 reload-into-ims override-lastmod

### Direktori cache
#cache_dir ufs /var/spool/squid 12000 28 256
cache_dir ufs /var/spool/squid 12000 16 256

### Log
access_log /var/log/squid/access.log squid
logfile_rotate 1
#cache_log /var/log/squid/cache.log
cache_log none
cache_store_log none
emulate_httpd_log off
log_ip_on_direct on
log_fqdn off
log_icp_queries off

### Opsi Timeout
connect_timeout 1 minute
peer_connect_timeout 5 seconds
read_timeout 30 minute
request_timeout 1 minute
#client_lifetime 10 hour
half_closed_clients off
pconn_timeout 15 second
shutdown_lifetime 15 second

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

acl idiot src 192.168.0.1
acl our_networks src 192.168.0.0/24
acl kev src 192.168.0.100

### ini adalah ACL tambahan buat mencegah situs porno dan beberapa virus ####

acl porn url_regex -i /etc/squid/bokep.txt time 08:00-22:00
acl noporn url_regex -i /etc/squid/nobokep.txt time 08:00-22:00

acl xxx1 dstdomain .cdrom.wip.digitalriver.com .sex.com .xxx.com .nyamuk.com .hotbar.com .whenusearch.com engage.everyone.net .gator.com .gay.com .xxxtoolbar.com .popuptraffic.com .mobile-software.ru xbs.sea.mtree.com .xbs.mtree.com ads.asiafriendfinder.com ads.bigchurch.com .theredlightworld.com .livejasmin.tk .livejasmin.com .livejasmin.tv .orbitexplorer.com .toolbar.versimedia.com .180solutions.com cdn.climaxbucks.com .gaybeef.com .hotpop.com .view.atdmt.com .teen.pornparks.com .rapid-pass.net .sex-explorer.com .crazyholes.com update.outerinfo.com .dailytoolbar.com
acl xxx2 dstdomain .mirror2.simtel.net .17tahun.com .online-dialer.com .jasmin.hu m3.doubleclick.net a.tribalfusion.com .happy-new-year.biz .pcmesh.com .dotcomtoolbar.com .paypopup.com rb4.worldsex.com .adultprofitcenter.com ads.yeek.com adv.alsscan.com .registrarads.com img.fuck1ng.com sidebar.angelfire.com m2.doubleclick.net .yes-movies.com .sexlist.com .sites-xxx.com .click.silvercash.com .weblive.com .786.abbraxaporn.com .free-fast.net .stembolt.parkyourporn.com .teen.pcadult.com .cybernetentertainment.com .tylersroom.net .eagle.dnspropagation.com .toolbar.locators.com
acl virusexe dstdomain .ad-w-a-r-e.com .ah-me.com .port.aconti.net .ultraload.net .thepaymentcentre.com .akamai.downloadv3.com .mt-download.com .a1540.g.akamai.net .secure.aconti.net ads.dealhelper.com .mainentrypoint.com .sitetracking.info .sessa.isprime.com .static.flingstone.com .cum4me.tv .bintang.fasthost.tv .download.websearch.com .isurfplus.com .searchmiracle.com .cabs.media-motor.net .xxxmyporno.com

acl tolak urlpath_regex -i \.mpg$ \.wmv$ \.gsz$ \.mpe$ \.yim$ \.avi$ \.mpeg$
acl ipsetan dst 193.86.3.36/30 66.199.187.179/32 213.248.55.45/32 64.255.164.70/32 69.61.61.30/32 64.237.41.215/32 69.50.170.212/32 209.8.161.54/32 204.177.92.198/32 204.177.92.201/32 64.156.213.249/32 62.219.250.70/32 206.161.125.149/32 205.252.48.67/32 65.59.189.3/32 63.217.29.115/32 212.239.39.154/32 65.110.38.219/32 195.225.177.14/32 209.8.25.99/32

acl file_terlarang url_regex -i hot_indonesia.exe
acl file_terlarang url_regex -i hotsurprise_id.exe
acl file_terlarang url_regex -i best-mp3-download.exe
acl file_terlarang url_regex -i R32.exe
acl file_terlarang url_regex -i rb32.exe
acl file_terlarang url_regex -i mp3.exe
acl file_terlarang url_regex -i HOTSEX.exe
acl file_terlarang url_regex -i Browser_Plugin.exe
acl file_terlarang url_regex -i DDialer.exe
acl file_terlarang url_regex -i od-teen
acl file_terlarang url_regex -i URLDownload.exe
acl file_terlarang url_regex -i od-stnd67.exe
acl file_terlarang url_regex -i Download_Plugin.exe
acl file_terlarang url_regex -i od-teen52.exe
acl file_terlarang url_regex -i malaysex
acl file_terlarang url_regex -i edita.html
acl file_terlarang url_regex -i info.exe
acl file_terlarang url_regex -i run.exe
acl file_terlarang url_regex -i Lovers2Go
acl file_terlarang url_regex -i GlobalDialer
acl file_terlarang url_regex -i WebDialer
acl file_terlarang url_regex -i britneynude
acl file_terlarang url_regex -i download.exe
acl file_terlarang url_regex -i backup.exe
acl file_terlarang url_regex -i GnoOS2003
acl file_terlarang url_regex -i wintrim.exe
acl file_terlarang url_regex -i MPREXE.EXE
acl file_terlarang url_regex -i exengd.EXE
acl file_terlarang url_regex -i xxxvideo.exe
acl file_terlarang url_regex -i Save.exe
acl file_terlarang url_regex -i ATLBROWSER.DLL
acl file_terlarang url_regex -i NawaL_rm
acl file_terlarang url_regex -i Socks32.dll
acl file_terlarang url_regex -i Sc32Lnch.exe
acl file_terlarang url_regex -i dat0.exe
acl IIX dst_as 7713 4622 4795 7597 4787 4795 4800
acl block url_regex -i \.(aiff|asf|avi|dif|divx|mov|movie|mp3|mpe?g?|mpv2|ogg|ra?m|snd|qt|wav|wmf|wmv)$
acl local-domain dstdomain localhost
acl Bad_ports port 7 9 11 19 22 23 25 53 110 119 513 514
acl Safe_ports port 21 70 80 210 443 488 563 591 777 1025-65535
acl Virus urlpath_regex winnt/system32/cmd.exe?
acl connect method CONNECT
acl post method POST
acl ssl method CONNECT
acl purge method PURGE

http_access allow idiot
#http_access allow localhost
http_access allow our_networks
http_access allow kev
http_access allow localhost
http_access allow manager IIX Safe_ports
#http_access deny porn !noporn
http_access deny Bad_ports Virus
http_access deny file_terlarang
http_access deny ipsetan
http_access deny tolak
http_access deny xxx1
http_access deny xxx2
http_access deny virusexe
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports

http_access deny all

http_reply_access allow all
icp_access allow all
coredump_dir /var/spool/squid

### Paramater Administratif
cache_mgr idiots@linuxmail.org
cache_effective_user squid
cache_effective_group squid
visible_hostname proxy.planet.web.id

acl apache rep_header Server ^Apache
broken_vary_encoding allow apache