On Thu, 2009-10-01 at 14:02 +0100, Paul Mansfield wrote:
> 
> I assume you're retyping the config rather than giving us
> "grep -v ^# squid.conf"
> 
> you sure the cache size 1500 is 1500MB and not 1500KB? is it using 
> sufficient disk space? if the disk cache is too small it'll be pointless 
> having it.
> 
> also, have you turned logging level up too far, if you log too much it 
> can thrash a small system.

"grep -v ^# squid.conf"

doh!!!

mcq


here's the conf in its entirety

http_port 172.16.32.254:3128
http_port 127.0.0.1:80 transparent
icp_port 0

pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname localhost
cache_mgr ad...@localhost
access_log /dev/null
cache_log /var/squid/log/cache.log
cache_store_log none
shutdown_lifetime 3 seconds
acl localnet src  172.16.32.0/255.255.255.0
forwarded_for off
via off
httpd_suppress_version_string on
uri_whitespace allow

cache_dir aufs /var/squid/cache 1500 16 256
cache_mem 64 MB
maximum_object_size 1000000 KB
minimum_object_size 100 KB
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
offline_mode off
dns_children 32
cache_swap_low 90
cache_swap_high 95

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128
1025-65535
acl sslports port 443 563 
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl dynamic urlpath_regex cgi-bin \?
cache deny dynamic

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports
http_access allow localhost

request_body_max_size 0 KB
reply_body_max_size 0 allow all
delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100
delay_access 1 allow all

http_access allow localnet
http_access deny all



---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org

Reply via email to