動かざることバグの如し

近づきたいよ 君の理想に

squidの設定ジェネレーターが欲しい

たががプロキシサーバー、されどプロキシサーバー。

機能が豊富な分、設定項目が多すぎてつらいsquid

毎回ググるのも辛いので備忘録

# security
http_port xxxx

acl myhome src xxx.xxx.xxx.xxx/32
http_access allow myhome

http_access allow localhost

acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
http_access allow localnet

acl SSL_ports port 443
acl purge method PURGE
acl CONNECT method CONNECT

acl Safe_ports port 80
acl Safe_ports port 443
http_access deny !Safe_ports

http_access deny all

# privacy
forwarded_for off
request_header_access Referer deny all
request_header_access X-Forwarded-For deny all
request_header_access Via deny all
request_header_access Cache-Control deny all

# other
access_log /var/log/squid/access.log combined

no_cache deny all