#puertos
http_port 3128
icp_port 0
htcp_port 0
snmp_port 0

#miscelaneos
hosts_file /etc/hosts
coredump_dir /var/spool/squid
dns_nameservers 192.168.0.10 8.8.8.8 8.8.4.4
check_hostnames off
log_icp_queries off
half_closed_clients off
cache_effective_user proxy
cache_effective_group proxy
pipeline_prefetch on
access_log /var/log/squid/access.log
shutdown_lifetime 1 second

#memoria y cache
#se utiliza COSS para objetos pequeños y AUFS para objetos grandes
cache_mem 640 MB
maximum_object_size 32010 KB
cache_replacement_policy heap LFUDA
memory_replacement_policy heap LFUDA
cache_dir coss /var/spool/coss 2000 max-size=65535 block-size=4096 max-stripe-waste=32768 membufs=15 
cache_dir aufs /var/spool/squid 4000 16 256 min-size=65536

#reglas de control de acceso
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 192.168.0.0/24	# internal network
acl Safe_ports port 21		# ftp
acl Safe_ports port 22		# Sftp
acl Safe_ports port 25		# pop
acl Safe_ports port 70		# gopher
acl Safe_ports port 80		# http
acl Safe_ports port 110		# smtp
acl Safe_ports port 143		# imap
acl SSL_ports port  143		# imap
acl Safe_ports port 210		# wais
acl Safe_ports port 280		# http-mgmt
acl SSL_ports port  443		# https
acl Safe_ports port 443		# https
acl Safe_ports port 465		# gmail imap
acl SSL_ports port  465		# gmail imap
acl Safe_ports port 488		# gss-http
acl SSL_ports port  563		# snews
acl Safe_ports port 587		# Plesk eMail
acl SSL_ports port  587		# Plesk eMail
acl Safe_ports port 591		# filemaker
acl Safe_ports port 631		# cups
acl Safe_ports port 777		# multiling http
acl Safe_ports port 873		# rsync
acl SSL_ports port  873		# rsync
acl Safe_ports port 901		# SWAT
acl Safe_ports port 993	 	# IMAP gmail
acl Safe_ports port 993		# IMAP gmail
acl Safe_ports port 5222	# gtalk
acl SSL_ports port  5222	# gtalk
acl Safe_ports port 5223	# gtalk
acl SSL_ports port  5223	# gtalk
acl Safe_ports port 8880 	# Panel Plesk
acl Safe_ports port 8443 	# Panel Plesk
acl SSL_ports port  8443 	# Panel Plesk
acl Safe_ports port 1025-65535	# unregistered ports
acl purge method PURGE
acl CONNECT method CONNECT

#accesos
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_access allow localnet
http_access allow localhost
http_reply_access allow all 
icp_access deny all
htcp_access deny all
snmp_access deny all
http_access deny all

#patron de refresco
refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern -i (/cgi-bin/|\?) 0	0%	0
refresh_pattern .		0	20%	4320
refresh_pattern (Release|Package(.gz)*)$	0	20%	2880
refresh_pattern (\.deb|\.udeb)$   129600 100% 129600