squid 2.4
http_port 3128
icp_port 3130
tcp_outgoing_address 255.255.255.255
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 128 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 32 MB
maximum_object_size_in_memory 64 KB
ipcache_size 32000
ipcache_high 100
fqdncache_size 16000

# rep policy
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF

# cache
cache_dir ufs /cache1 5500 12 256 (tergantung ukuran
hardware anda)



 cache log dir
#cache_log /usr/local/squid/logs/cache.log
cache_access_log /usr/local/squid/logs/access.log
cache_store_log /usr/local/squid/logs/store.log
#cache_swap_log /usr/local/squid/logs/swap.log

refresh_pattern ^ftp:           1440    80%     10080
refresh_pattern -i \.gif$       96000   9000%   262800
override-expire ignore-reload
refresh_pattern -i \.png$       96000   9000%   262800
override-expire ignore-reload
refresh_pattern -i \.jpg$       96000   9000%   262800
override-expire ignore-reload
refresh_pattern -i \.jpeg$      96000   9000%   262800
override-expire ignore-reload
refresh_pattern -i \.gif[\?]$   96000   9000%   262800
override-expire ignore-reload
refresh_pattern -i \.jpg[\?]$   96000   9000%   262800
override-expire ignore-reload
refresh_pattern -i \.htm$       7200    1000%   40320
refresh_pattern -i \.html$      7200    1000%   40320
refresh_pattern -i \/$          360     75%     20160
refresh_pattern -i \.scr$       720     100%    4320
refresh_pattern -i \.css$       720     750%    4320
refresh_pattern -i \.js$        720     3000%   4320
refresh_pattern -i \.ezp$       1440    1000%   4320  
override-expire
refresh_pattern -i \.swf        7200    1000%   28800 
override-expire
refresh_pattern -i \.cab$       4440    4500%   144400
refresh_pattern -i \.exe$       27880   5000%   262800
override-expire
refresh_pattern -i \.pdf$       27880   5000%   262800
override-expire
refresh_pattern -i \.zip$       27880   5000%   262800
override-expire
refresh_pattern -i \.mov$       27880   5000%   262800
override-expire
refresh_pattern -i \.mpg$       27880   5000%   262800
override-expire
refresh_pattern -i \.mpeg$      27880   5000%   262800
override-expire
refresh_pattern -i \.asf$       27880   5000%   262800
override-expire
refresh_pattern -i \.asx$       27880   5000%   262800
override-expire
refresh_pattern -i \.wmv$       27880   5000%   262800
override-expire
refresh_pattern .               360     40%     40000 
reload-into-ims
reference_age 1 year
connect_timeout 2 minutes
pconn_timeout 120 seconds
shutdown_lifetime 30 seconds

# mboh
debug_options ALL,1
ftp_user [EMAIL PROTECTED]
half_closed_clients off
logfile_rotate 10
redirect_rewrites_host_header off
dns_nameservers 202.152.254.245
# acl
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
l Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
acl snmppublic snmp_community public

# rule host  allow
htacl Safe_ports port 591         #
filemaker^@tp_access allow manager localhost
http_access allow aku

#acl host di sini
acl aku src 202.152.2.10/255.255.255.255

#rule host deny
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
icp_access allow all
miss_access allow all

# user
cache_mgr [EMAIL PROTECTED]
cache_effective_user nobody
cache_effective_group nogroup

# transparent proxy
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

# mboh2
forwarded_for off
icp_hit_stale on
anonymize_headers deny User-Agent
log_icp_queries off
buffered_logs on
# snmp
snmp_port 3401
snmp_access allow localhost
snmp_access deny all
snmp_incoming_address 0.0.0.0
snmp_outgoing_address 255.255.255.255

offline_mode on
store_dir_select_algorithm round-robin
ie_refresh on
(sory kalo rada benatakan tapi coba dan berhasil deh)

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

-- 
Utk berhenti langganan, kirim email ke [EMAIL PROTECTED]
Informasi arsip di http://www.linux.or.id/milis.php3

Reply via email to