Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SHARE SQUID.CONF kamu disini

    Scheduled Pinned Locked Moved Indonesian
    61 Posts 17 Posters 82.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kaptenhook
      last edited by

      ga ada yang mau duluan nih tak tungguin….ya udah ni cuba mau berbagi pengalaman aja, kalo ada yang kurang mohon para master sudi memberikan tambahan......

      Do not edit manually !

      http_port 192.168.x.x:3128 transparent
      http_port 127.0.0.1:80 transparent
      icp_port 3130

      pid_filename /var/run/squid.pid
      cache_effective_user proxy
      cache_effective_group proxy
      error_directory /usr/local/etc/squid/errors/English
      icon_directory /usr/local/etc/squid/icons
      visible_hostname alexa
      cache_mgr alexa@enterprise
      access_log /var/squid/log/access.log
      cache_log /var/squid/log/cache.log
      cache_store_log none
      logfile_rotate 5
      shutdown_lifetime 30 seconds

      Allow local network(s) on interface(s)

      acl localnet src  192.168.x.0/255.255.255.224
      uri_whitespace strip
      dns_nameservers 127.0.0.1

      cache_mem 16 MB
      maximum_object_size_in_memory 32 KB
      memory_replacement_policy heap GDSF
      cache_replacement_policy heap LFUDA
      cache_dir coss /cache0/coss 10000 max-size=8192 block-size=1024
      cache_dir aufs /cache1 40960 16 256 min-size=8192
      cache_dir aufs /cache2 40960 16 256 min-size=8192
      store dir select algorithm round robin
      minimum_object_size 0 KB
      maximum_object_size 32 MB
      offline_mode off
      cache_swap_low 90
      cache_swap_high 95

      No redirector configured

      cache_peer 192.168.1.1 parent 3130 7 no-query

      Setup some default acls

      acl all src 0.0.0.0/0.0.0.0
      acl localhost src 127.0.0.1/255.255.255.255
      acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
      acl sslports port 443 563
      acl manager proto cache_object
      acl purge method PURGE
      acl connect method CONNECT
      acl partialcontent_req req_header Range .*
      acl mallware url_regex "/usr/local/etc/squid/mallware.url"
      acl conficker url_regex "/usr/local/etc/squid/conficker.url"
      #acl dynamic urlpath_regex cgi-bin ?
      #include /usr/local/etc/squid/include.conf
      include /usr/local/etc/squid/tunning.conf
      acl allowed_subnets src 192.168.x.0/27
      #cache deny dynamic
      http_access allow manager localhost

      Allow external cache managers

      acl ext_manager_1 src 192.168.1.1
      http_access allow manager ext_manager_1

      http_access deny mallware
      http_access deny conficker
      http_access deny manager
      http_access allow purge localhost
      http_access deny purge
      http_access deny !safeports
      http_access deny CONNECT !sslports

      Always allow localhost connections

      http_access allow localhost

      quick_abort_min 32 KB
      quick_abort_max 128 KB
      quick_abort_pct 75
      range_offset_limit 0 MB
      request_body_max_size 0 allow all
      reply_body_max_size 0 deny all

      Custom options

      zph_mode tos
      zph_local 0x04
      zph_parent 0
      zph_option 136

      redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
      redirector_bypass on
      redirect_children 3

      Allow local network(s) on interface(s)

      http_access allow localnet
      http_access allow allowed_subnets

      Default block all to be sure

      http_access deny all

      1 Reply Last reply Reply Quote 0
      • A
        asepyulisman
        last edited by

        izin nyontek yah om ;D

        1 Reply Last reply Reply Quote 0
        • K
          kambeeng
          last edited by

          wah ….. silahkan broo

          1 Reply Last reply Reply Quote 0
          • Y
            yhudi
            last edited by

            untuk masuk di squid.conf lewat console…lokasi pathnya dimana ya kalo pfsense 1.2.3 dgn squid 2.7.9_4.1

            1 Reply Last reply Reply Quote 0
            • K
              kaptenhook
              last edited by

              bisa pake putty atau juga dengan winSCP

              1 Reply Last reply Reply Quote 0
              • Y
                yhudi
                last edited by

                @kaptenhook:

                bisa pake putty atau juga dengan winSCP

                lokasi path nya di aman ya ?

                1 Reply Last reply Reply Quote 0
                • I
                  iwanmahe
                  last edited by

                  @yhudi:

                  @kaptenhook:

                  bisa pake putty atau juga dengan winSCP

                  lokasi path nya di aman ya ?

                  Lewat web configurator :
                  Diagnostic –--> edit file :
                  /usr/local/etc/squid/squid.conf <--- klik load

                  1 Reply Last reply Reply Quote 0
                  • I
                    iwanmahe
                    last edited by

                    Mohon dikoreksi para master

                    Do not edit manually !

                    http_port 192.168.222.222:3128 transparent
                    http_port 127.0.0.1:80 transparent
                    icp_port 3131

                    pid_filename /var/run/squid.pid
                    cache_effective_user proxy
                    cache_effective_group proxy
                    error_directory /usr/local/etc/squid/errors/English
                    icon_directory /usr/local/etc/squid/icons
                    visible_hostname localhost
                    cache_mgr admin@localhost
                    access_log /var/squid/logs/access.log
                    cache_log /var/squid/logs/cache.log
                    cache_store_log none
                    logfile_rotate 5
                    shutdown_lifetime 0 seconds

                    Allow local network(s) on interface(s)

                    acl localnet src  192.168.222.0/255.255.255.0
                    forwarded_for transparent
                    via off
                    uri_whitespace strip
                    dns_nameservers 127.0.0.1

                    cache_mem 8 MB
                    maximum_object_size_in_memory 4 KB
                    memory_replacement_policy heap GDSF
                    cache_replacement_policy heap LFUDA

                    cache_dir aufs /var/squid/cache 60000 16 256
                    minimum_object_size 0 KB
                    maximum_object_size 32 MB
                    offline_mode off
                    cache_swap_low 90
                    cache_swap_high 95

                    No redirector configured

                    Setup some default acls

                    acl all src 0.0.0.0/0.0.0.0
                    acl localhost src 127.0.0.1/255.255.255.255
                    acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
                    acl sslports port 443 563 81
                    acl manager proto cache_object
                    acl purge method PURGE
                    acl connect method CONNECT
                    acl mallware url_regex "/usr/local/etc/squid/mallware.url"
                    acl conficker url_regex "/usr/local/etc/squid/conficker.url"
                    acl partialcontent_req req_header Range .*
                    #acl dynamic urlpath_regex cgi-bin ?
                    include /usr/local/etc/squid/include.conf
                    #cache deny dynamic
                    http_access allow manager localhost

                    http_access deny mallware
                    http_access deny conficker
                    http_access deny manager
                    http_access allow purge localhost
                    http_access deny purge
                    http_access deny !safeports
                    http_access deny CONNECT !sslports

                    Always allow localhost connections

                    http_access allow localhost

                    quick_abort_min 32 KB
                    quick_abort_max 128 KB
                    quick_abort_pct 75
                    range_offset_limit 0 MB
                    request_body_max_size 0 allow all
                    reply_body_max_size 0 deny all

                    Custom options

                    zph_mode tos
                    zph_local 0x04
                    zph_parent 0
                    zph_option 136
                    redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                    redirector_bypass on
                    redirect_children 3

                    Allow local network(s) on interface(s)

                    http_access allow localnet

                    Default block all to be sure

                    http_access deny all

                    1 Reply Last reply Reply Quote 0
                    • S
                      syedadi
                      last edited by

                      Tolong betulngin dong =)
                      Adakah # Custom options gue betul?

                      Do not edit manually !

                      http_port 192.168.X.X:3128
                      http_port 127.0.0.1:80 transparent
                      icp_port 0

                      pid_filename /var/run/squid.pid
                      cache_effective_user proxy
                      cache_effective_group proxy
                      error_directory /usr/local/etc/squid/errors/English
                      icon_directory /usr/local/etc/squid/icons
                      visible_hostname localhost
                      cache_mgr admin@localhost
                      access_log /var/squid/log/access.log
                      cache_log /var/squid/log/cache.log
                      cache_store_log none
                      shutdown_lifetime 3 seconds

                      Allow local network(s) on interface(s)

                      acl localnet src  192.168.0.0/255.255.255.0
                      forwarded_for off
                      via off
                      uri_whitespace strip

                      cache_mem 50 MB
                      maximum_object_size_in_memory 32 KB
                      memory_replacement_policy heap GDSF
                      cache_replacement_policy heap LFUDA
                      cache_dir ufs /var/squid/cache 40000 16 256
                      minimum_object_size 0 KB
                      maximum_object_size 3000 KB
                      offline_mode on
                      cache_swap_low 90
                      cache_swap_high 95
                      acl donotcache dstdomain "/var/squid/acl/donotcache.acl"
                      cache deny donotcache

                      No redirector configured

                      Setup some default acls

                      acl all src 0.0.0.0/0.0.0.0
                      acl localhost src 127.0.0.1/255.255.255.255
                      acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
                      acl sslports port 443 563 
                      acl manager proto cache_object
                      acl purge method PURGE
                      acl connect method CONNECT
                      acl dynamic urlpath_regex cgi-bin ?
                      acl allowed_subnets src 192.168.0.0/24
                      acl unrestricted_hosts src "/var/squid/acl/unrestricted_hosts.acl"
                      acl whitelist dstdom_regex -i "/var/squid/acl/whitelist.acl"
                      cache deny dynamic

                      http_access allow manager localhost 
                      http_access deny manager
                      http_access allow purge localhost
                      http_access deny purge
                      http_access deny !safeports
                      http_access deny CONNECT !sslports

                      Always allow localhost connections

                      http_access allow localhost

                      quick_abort_min 0 KB
                      quick_abort_max 0 KB
                      request_body_max_size 0 KB
                      reply_body_max_size 5120000 deny all
                      delay_pools 1
                      delay_class 1 2
                      delay_parameters 1 -1/-1 -1/-1
                      delay_initial_bucket_level 100

                      Throttle extensions matched in the url

                      acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
                      delay_access 1 allow throttle_exts
                      delay_access 1 deny all

                      These hosts do not have any restrictions

                      http_access allow unrestricted_hosts

                      Always allow access to whitelist domains

                      http_access allow whitelist

                      Setup allowed acls

                      Allow local network(s) on interface(s)

                      http_access allow allowed_subnets
                      http_access allow localnet

                      Custom options

                      refresh_pattern ([^.]+.|)(download|(windows|)update|).(microsoft.|)com/..(cab|exe|msi|msp) 4320 100% 43200 reload-into-ims
                      range_offset_limit -1
                      refresh_pattern ([^.]+.|)avg.com/.                      .(bin) 4320 100% 43200 reload-into-ims
                      refresh_pattern ([^.]+.|)spywareblaster.net/..(dtb) 4320 100% 64800 reload-into-ims
                      refresh_pattern ([^.]+.|)symantecliveupdate.com/.                      .(zip|exe) 43200 100% 43200 reload-into-ims
                      refresh_pattern ([^.]+.|)avast.com/.*.(vpu|vpaa|vpx) 4320 100% 43200 reload-into-ims
                      redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                      redirector_bypass on
                      redirect_children 3

                      Default block all to be sure

                      http_access deny all

                      1 Reply Last reply Reply Quote 0
                      • S
                        syedadi
                        last edited by

                        Setup some default acls

                        acl all src 0.0.0.0/0.0.0.0
                        acl localhost src 127.0.0.1/255.255.255.255
                        acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
                        acl sslports port 443 563
                        acl manager proto cache_object
                        acl purge method PURGE
                        acl connect method CONNECT
                        acl partialcontent_req req_header Range .*
                        acl mallware url_regex "/usr/local/etc/squid/mallware.url"
                        acl conficker url_regex "/usr/local/etc/squid/conficker.url"
                        #acl dynamic urlpath_regex cgi-bin ?
                        #include /usr/local/etc/squid/include.conf
                        include /usr/local/etc/squid/tunning.conf
                        acl allowed_subnets src 192.168.x.0/27
                        #cache deny dynamic
                        http_access allow manager localhost

                        Allow external cache managers

                        acl ext_manager_1 src 192.168.1.1
                        http_access allow manager ext_manager_1

                        http_access deny mallware
                        http_access deny conficker
                        http_access deny manager
                        http_access allow purge localhost
                        http_access deny purge
                        http_access deny !safeports
                        http_access deny CONNECT !sslports

                        gimana letaknya page untuk mallware, conficker dong? aku engak paham….apa codingnya?

                        1 Reply Last reply Reply Quote 0
                        • P
                          pfz
                          last edited by

                          @syedadi:

                          Tolong betulngin dong =)
                          Adakah # Custom options gue betul?

                          Custom options

                          refresh_pattern ([^.]+.|)(download|(windows|)update|).(microsoft.|)com/..(cab|exe|msi|msp) 4320 100% 43200 reload-into-ims
                          range_offset_limit -1
                          refresh_pattern ([^.]+.|)avg.com/.                          .(bin) 4320 100% 43200 reload-into-ims
                          refresh_pattern ([^.]+.|)spywareblaster.net/..(dtb) 4320 100% 64800 reload-into-ims
                          refresh_pattern ([^.]+.|)symantecliveupdate.com/.                          .(zip|exe) 43200 100% 43200 reload-into-ims
                          refresh_pattern ([^.]+.|)avast.com/.*.(vpu|vpaa|vpx) 4320 100% 43200 reload-into-ims
                          redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                          redirector_bypass on
                          redirect_children 3

                          Default block all to be sure

                          http_access deny all

                          download update windows… >>>> apa semua client mengupdate windows... ???? kalo enggak kenapa harus di cache..bahkan cache otomatis.. .. tanpa pcclient yg mengupdate..nya.. . kalimat sederhananya... Ketika pc cleint mengupdate windows.. lalu di stop ato dibatalkan.... maka squid akan mendownload otomatis.. sebesar.  .. kb.

                          apa ini gak bikin mubadzir bandwithd. ??

                          1 Reply Last reply Reply Quote 0
                          • S
                            serangku
                            last edited by

                            untuk pattern …

                            lihat saja kebiasaan user yg inetan
                            darimana tahunya kebiasaan user ?
                            mudah kok ...
                            package lightsquid bisa untuk keperluan itu

                            semoga membantu

                            1 Reply Last reply Reply Quote 0
                            • S
                              syedadi
                              last edited by

                              betulkh aku punya command untuk cache AV DB ini?

                              refresh_pattern ([^.]+.|)avast.com/.*\.(vpu|vpaa|vpx) 4320 100% 43200 reload-into-ims

                              ada sesiapa boleh terangkan apa semua maksud code ini..

                              1 Reply Last reply Reply Quote 0
                              • S
                                syedadi
                                last edited by

                                @PakDe:

                                @syedadi:

                                Tolong betulngin dong =)
                                Adakah # Custom options gue betul?

                                Custom options

                                refresh_pattern ([^.]+.|)(download|(windows|)update|).(microsoft.|)com/..(cab|exe|msi|msp) 4320 100% 43200 reload-into-ims
                                range_offset_limit -1
                                refresh_pattern ([^.]+.|)avg.com/.                                .(bin) 4320 100% 43200 reload-into-ims
                                refresh_pattern ([^.]+.|)spywareblaster.net/..(dtb) 4320 100% 64800 reload-into-ims
                                refresh_pattern ([^.]+.|)symantecliveupdate.com/.                                .(zip|exe) 43200 100% 43200 reload-into-ims
                                refresh_pattern ([^.]+.|)avast.com/.*.(vpu|vpaa|vpx) 4320 100% 43200 reload-into-ims
                                redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                                redirector_bypass on
                                redirect_children 3

                                Default block all to be sure

                                http_access deny all

                                download update windows… >>>> apa semua client mengupdate windows... ???? kalo enggak kenapa harus di cache..bahkan cache otomatis.. .. tanpa pcclient yg mengupdate..nya.. . kalimat sederhananya... Ketika pc cleint mengupdate windows.. lalu di stop ato dibatalkan.... maka squid akan mendownload otomatis.. sebesar.  .. kb.

                                apa ini gak bikin mubadzir bandwithd. ??

                                IA ka? hehe  :o …aku masih baru...setakat ini HDD aku masih kosong baru guna 3% dari HDD aku yang 80GB...  ;D

                                1 Reply Last reply Reply Quote 0
                                • O
                                  orkeys
                                  last edited by

                                  om-om sekalian kira-kira confignya salah gak nih  :'( ..!!maklum newbie abis…. xixixi ;D
                                  sekalian om upload dong list malware.url ama conficker.url

                                  Do not edit manually !

                                  http_port 192.168.x.64:3128 transparent
                                  http_port 127.0.0.1:80 transparent
                                  icp_port 0

                                  pid_filename /var/run/squid.pid
                                  cache_effective_user proxy
                                  cache_effective_group proxy
                                  error_directory /usr/local/etc/squid/errors/English
                                  icon_directory /usr/local/etc/squid/icons
                                  visible_hostname localhost
                                  cache_mgr admin@localhost
                                  access_log /var/squid/log/access.log
                                  cache_log /var/squid/log/cache.log
                                  cache_store_log none
                                  logfile_rotate 5
                                  shutdown_lifetime 3 seconds

                                  Allow local network(s) on interface(s)

                                  acl localnet src  192.168.54.0/255.255.255.0
                                  forwarded_for transparent
                                  uri_whitespace strip
                                  dns_nameservers 127.0.0.1

                                  cache_mem 8 MB
                                  maximum_object_size_in_memory 32 KB
                                  memory_replacement_policy heap GDSF
                                  cache_replacement_policy heap LFUDA
                                  cache_dir coss /var/squid/coss 10000 max-size=8192 block-size=1024
                                  cache_dir aufs /var/squid/cache 300000 16 256 min-size=4096
                                  store dir select algorithm round robin
                                  minimum_object_size 0 KB
                                  maximum_object_size 50000 MB
                                  offline_mode off
                                  cache_swap_low 90
                                  cache_swap_high 95

                                  No redirector configured

                                  Setup some default acls

                                  acl all src 0.0.0.0/0.0.0.0
                                  acl localhost src 127.0.0.1/255.255.255.255
                                  acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
                                  acl sslports port 443 563 81
                                  acl manager proto cache_object
                                  acl purge method PURGE
                                  acl connect method CONNECT
                                  acl partialcontent_req req_header Range .*
                                  #acl dynamic urlpath_regex cgi-bin ?
                                  #include /usr/local/etc/squid/include.conf
                                  include /usr/local/etc/squid/include.conf
                                  acl allowed_subnets src 192.168.x.0/24
                                  #cache deny dynamic
                                  http_access allow manager localhost

                                  http_access deny manager
                                  http_access allow purge localhost
                                  http_access deny purge
                                  http_access deny !safeports
                                  http_access deny CONNECT !sslports

                                  Always allow localhost connections

                                  http_access allow localhost

                                  quick_abort_min 0 KB
                                  quick_abort_max 0 KB
                                  quick_abort_pct 75
                                  range_offset_limit 0 MB
                                  request_body_max_size 0 allow all
                                  reply_body_max_size 5120000 deny all
                                  delay_pools 1
                                  delay_class 1 2
                                  dealy_parameters 1 -1/-1 -1/-1
                                  delay_inital_bucket_level 100

                                  Throttle extensions matched in the url

                                  acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
                                  delay_access 1 allow throttle_exts
                                  delay_access 1 deny all

                                  Manual configuration

                                  refresh_pattern ^http://.facebook.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://                                  .kaskus.us/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://.google.co*./ 10080 90% 43200 reload-into-ims
                                  refresh_pattern ^http://.yahoo.co./ 10080 90% 43200 reload-into-ims
                                  refresh_pattern ^http://.                                  .windowsupdate.microsoft.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://office.microsoft.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://windowsupdate.microsoft.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://w?xpsp[0-9].microsoft.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://w2ksp[0-9].microsoft.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://download.microsoft.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://download.macromedia.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^ftp://ftp.nai.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://ftp.software.ibm.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://.friendster.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://                                  .detik.com/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://.kaskus.us/ 10080 80% 43200 reload-into-ims
                                  refresh_pattern ^http://                                  .google.co*./ 10080 90% 43200 reload-into-ims
                                  refresh_pattern ^http://                                  .yahoo.co*.*/ 10080 90% 43200 reload-into-ims

                                  refresh_pattern ^http://.facebook.com/.* 720 100% 4320
                                  refresh_pattern ^http://.apps.facebook.com/.* 720 100% 4320
                                  refresh_pattern ^http://.profile.ak.fbcdn.net/. 720 100% 4320
                                  refresh_pattern ^http://.creative.ak.fbcdn.net/. 720 100% 4320
                                  refresh_pattern ^http://.static.ak.fbcdn.net/. 720 100% 4320
                                  refresh_pattern ^http://.facebook.poker.zynga.com/. 720 100% 4320
                                  refresh_pattern ^http://.statics.poker.static.zynga.com/. 720 100% 4320
                                  refresh_pattern ^http://.zynga./.* 720 100% 4320
                                  refresh_pattern ^http://.texas_holdem./.* 720 100% 4320
                                  refresh_pattern ^http://.google./.* 720 100% 4320
                                  refresh_pattern ^http://.indowebster./.* 720 100% 4320
                                  refresh_pattern ^http://.4shared./.* 720 100% 4320
                                  refresh_pattern ^http://.yahoo.com/. 720 100% 4320
                                  refresh_pattern ^http://.yimg./.* 720 100% 4320
                                  refresh_pattern ^http://.plasa.com/. 720 100% 4320
                                  refresh_pattern ^http://.boleh./.* 720 100% 4320
                                  refresh_pattern ^http://.detik./.* 180 100% 4320
                                  refresh_pattern ^http://.detikinet./.* 180 100% 4320
                                  refresh_pattern ^http://.detikhot./.* 180 100% 4320
                                  refresh_pattern ^http://.detiportal./.* 180 100% 4320
                                  refresh_pattern ^http://.kompas./.* 180 100% 4320
                                  refresh_pattern ^http://.kapanlagi./.* 720 100% 4320
                                  refresh_pattern ^http://.google-analytics./.* 720 100% 4320

                                  Manual configuration

                                  refresh_pattern ^http://(.?)/get_video? 10080 90% 999999 override-expire ignore-no-cache ignore-private
                                  refresh_pattern ^http://(.                                  ?)/videoplayback? 10080 90% 999999 override-expire ignore-no-cache ignore-private
                                  refresh_pattern -i (get_video?|videoplayback?id|videoplayback.*id) 161280 50000% 525948 override-expire ignore-reload

                                  Manual configuration

                                  compressed

                                  refresh_pattern -i .gz$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .cab$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .bzip2$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .bz2$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .gz2$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .tgz$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .tar.gz$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .zip$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .rar$ 1008000 90% 99999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .tar$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .ace$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .7z$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  documents

                                  refresh_pattern -i .xls$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .doc$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .xlsx$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .docx$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .pdf$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .ppt$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .pptx$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .rtf?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  multimedia

                                  refresh_pattern -i .mid$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .wav$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .viv$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .mpg$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .mov$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .avi$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .asf$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .qt$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .rm$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .rmvb$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .mpeg$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .wmp$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .3gp$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .mp3$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .mp4$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  web content

                                  refresh_pattern -i .js$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .psf$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .html$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .htm$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .css$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .swf$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .js?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .css?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .xml$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  images

                                  refresh_pattern -i .gif$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .jpg$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .png$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .jpeg$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .bmp$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .psd$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .ad$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .gif?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .jpg?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .png?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .jpeg?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .psd?$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  application

                                  refresh_pattern -i .deb$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .rpm$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .msi$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .exe$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .dmg$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  misc

                                  refresh_pattern -i .dat$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .qtm$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  itunes

                                  refresh_pattern -i .m4p$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload
                                  refresh_pattern -i .mpa$ 10080 90% 999999 override-expire override-lastmod reload-into-ims ignore-reload

                                  refresh_pattern ^ftp: 1440 20% 10080
                                  refresh_pattern ^gopher: 1440 0% 1440

                                  refresh_pattern cgi-bin 0 0% 0
                                  refresh_pattern ? 0 20% 4320
                                  refresh_pattern . 0 20% 4320

                                  storeurl_access deny all

                                  Custom options

                                  zph_mode tos
                                  zph_local 0x04
                                  zph_parent 0
                                  zph_option 136

                                  redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
                                  redirector_bypass on
                                  redirect_children 3

                                  Allow local network(s) on interface(s)

                                  http_access allow localnet
                                  http_access allow allowed_subnets

                                  Default block all to be sure

                                  http_access deny all

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    serangku
                                    last edited by

                                    mantap …  ;D

                                    sedikit deh mengomentari, boleh ?

                                    cache_dir coss /var/squid/coss 10000 max-size=8192 block-size=1024
cache_dir aufs /var/squid/cache 300000 16 256 min-size=4096
store dir select algorithm round robin
minimum_object_size 0 KB
maximum_object_size 50000 MB

                                    disarankan kalau mau menggunakan coss dan aufs, gunakan 2 disk yg terpisah
                                    supaya performa tetap terjaga
                                    tdk terlalu kebesaran ukuran maximum object nya ? 50000 MB ?

                                    1 Reply Last reply Reply Quote 0
                                    • O
                                      orkeys
                                      last edited by

                                      @serangku:

                                      mantap …  ;D

                                      sedikit deh mengomentari, boleh ?

                                      cache_dir coss /var/squid/coss 10000 max-size=8192 block-size=1024
cache_dir aufs /var/squid/cache 300000 16 256 min-size=4096
store dir select algorithm round robin
minimum_object_size 0 KB
maximum_object_size 50000 MB

                                      disarankan kalau mau menggunakan coss dan aufs, gunakan 2 disk yg terpisah
                                      supaya performa tetap terjaga
                                      tdk terlalu kebesaran ukuran maximum object nya ? 50000 MB ?

                                      maaf om tidak boleh dikomentari…........'kalo cuman sedikit' xixixi :P becanda "mode on"
                                      harus yang banyak om dikomentari biar saya yang bodoh ini bertambah ilmunya..

                                      kepengennya sih om tambah hdd tapi, lagi nunggu hujan hdd dari langit biar bisa di nambah hdd nih

                                      50000 MB hehe kelebihan angka 0 nya.... biasa itung duit gini nih om tapi sayang masih yg receh di itung

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        serangku
                                        last edited by

                                        ampun dj …
                                        bisa aja nih  ;D ;D ;D ;D

                                        1 Reply Last reply Reply Quote 0
                                        • A
                                          asepyulisman
                                          last edited by

                                          wahhh mancap sekali squidnya om orkeys

                                          1 Reply Last reply Reply Quote 0
                                          • O
                                            orkeys
                                            last edited by

                                            Om tadi malam otak-atik dikit squid.conf kok gak jalan ya… ??? ???
                                            rencananya ingin limt bandwitdh tapi kok tidak terlimit ya... saya coba dengan download .exe :-\

                                            nih settingan delay poolsnya yang di masukan di squid.conf

                                            Parameter Delaypool

                                            acl umum src 192.168.1.0/24
                                            acl teknisi src 192.168.1.120/24
                                            acl teknisi2 src 192.168.1.130/24

                                            acl TIME time SMTWHFA 07:00-22:00

                                            acl download url_regex -i ftp .exe$ .mp3$ .mp4$ .tar.gz$ .gz$ .tar.bz2$ .rpm$ .zip$ .rar$
                                            acl download url_regex -i ftp .mp3$ .mp4$ .tar.gz$ .gz$ .tar.bz2$ .rpm$ .zip$ .rar$
                                            acl download url_regex -i .avi$ .mpg$ .flv$ .mpeg$ .rm$ .iso$ .wav$ .mov$ .dat$ .mpe$ .mid$ .mkv$
                                            acl download url_regex -i .midi$ .rmi$ .wma$ .wmv$ .ogg$ .ogm$ .m1v$ .mp2$ .mpa$ .wax$
                                            acl download url_regex -i .m3u$ .asx$ .wpl$ .wmx$ .dvr-ms$ .snd$ .au$ .aif$ .asf$ .m2v$
                                            acl download url_regex -i .m2p$ .ts$ .tp$ .trp$ .div$ .divx$ .mod$ .vob$ .aob$ .dts$
                                            acl download url_regex -i .ac3$ .cda$ .vro$ .deb$

                                            delaypools

                                            delay_pools 2
                                            delay_class 1 1
                                            delay_parameters 1 -1/-1
                                            delay_access 1 allow teknisi
                                            delay_access 1 allow teknisi2
                                            delay_access 1 deny all

                                            bandwidth 10 kbytes/sec, bila file yang diakses melebihi 1 Mb

                                            bandwidth 2 Mbps(speedol) dengan batas kecepatan rata2 1 Mbps(speedol)

                                            delay_class 2 2
                                            delay_parameters 2 128000/128000 1280/10240
                                            delay_access 2 allow umum
                                            delay_access 2 allow download TIME
                                            delay_access 2 deny all

                                            apa ada yang salah.. atau harus ditambahkan di custom optionnya kah ??
                                            squidnya yg pake yang baru fresh instal  + lusca + squidguard baru ditambah dgn delay pools saja
                                            mohon bantuannya  ;D ;D

                                            tanpa hari tanpa membuka forum tercinta ini

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.