我的配置：赛扬图拉丁1G，.精英815EPT主板256M内存，TNT16M显卡，昆腾火球15G硬盘，etho(.8139.)是接.INTERNET的(1.2.3.4)，eth1(MX98715)是内网的(192.168.0.1)，我的系统是REDHAT-LINUX9.0，机器装有SQUID2.5， 杀毒
squid.conf:
# . WELCOME TO SQU.ID 2健康
# ------.---.---------<性病>
#
# This is the default Squid con.figuration file. You. may wish.
# to look at the Squid home page (
http://www.squid-cache.org/) 建材
# for the FAQ. and other .documentation.电脑
#
# The default Sq.uid config file shows what th.e defaults for.
# various options happen to be.. If you don't need to cha.nge the 婚庆
# default, you shouldn't uncomment th.e line. Doing so may caus.e.
# run-time problems. In some cases "n.one" r.efers to no default
# se.tting at all, while in o.ther cases it refers to a valid 外汇
# op.tion - the comments for that keyword indicate if t.his is the.
# case.
#
# NETWORK OPTIO.NS.
# ---.----------------------------------------------------------------.-------.---外贸
# T.AG: http_port.
# . Usage: port.
# . hostname:por.t 外汇
# . .1.2.3.4:port.
#
# Th.e s.ocket addresses where Squid will listen for HTTP client域名
# . requests. You may .specify multiple socket addresses.投资
# T.here are three forms: port alone, hostname with .port, and.
# IP address with port. If you spe.cify a h.ostname or IP[成人用品]
# address, then Squid bin.d.s the socket to that specific 乙肝
# . address. This replaces the old 'tcp_incoming_.address' 汽车
# option. . Most likely, you do not need to bind t.o a specific.
# address, so you can us.e the port number. alone.( 游戏 )
#
# The. default port number i.s 3128.虚拟主机
#
# If you are runni.ng Squid in accelerator mo.de, then you--------------彩票
# .probab.ly want to listen on port 80 also, or instead. 婚庆
#
#. The -a .command line option will override the *first* port( 游戏 )
# number listed here. That option will NOT. override an .IP 美容
# address, ho..wever..
#
# .You may specify multipl.e socket addresses on multiple lines.电影
#
# If you run Squid on a dual-homed mac.hine wit.h an internal--------------彩票
# and an external inte.rface then we recomm.end you to specify the 美容
# . internal address:po.rt in http_port. This way Squid will only be 女人
# . v.isible on the internal address..
#
#Default:
# htt.p_port 3128教育
# T.AG: https_port 鲜花
# Usage: [ip:]p.ort cert=certificate.pem [key=key..pem] [options...]电影
#
# The socket address where Squid. will listen for HTTPS clie.nt健康
# request.s.健康
#
# This .is really only u.seful for situations where you are running<性病>
# squid in accelera..tor mode and you want to do the SSL work at the教育
# . accelerator. level.--- 印刷
#
# You may specify. multiple socket addres.ses on multiple lines,学习
# each wit.h their own SSL cer.tificate and/or options.( 游戏 )
# . . 域名
#. Options:服务器
#
# . cert= Path to SSL certificate (P.EM format).
# . 鲜花
# key= Path to SSL p.r.ivate key file (PEM format).
# if not specified, t.he certificate f.ile is电影
# assu.med to be a combined certificat.e and电脑
# . ke.y file电影
#
# . version= The version of SSL/TL.S supported( 游戏 )
# . 1 . automatic (default) 婚庆
# . 2 . SSLv2 only 鲜花
# . 3 SSLv3 onl.y(广告)
# . 4 TLSv1 o.nly 女人
#
# cipher.= Colon separated list of supported ciph.ers--- 印刷
#
# . options= Varion.s SSL engine options. The most important.
# . . being:服务器
# . NO_SSLv2 D.isallow the use of SSLv2服务器
# . NO_.SSLv3 Disallow the use of SSLv3 女人
# . NO_TLSv1 Disallow the use. of TLSv1 女人
# See src/ssl_supp.ort.c or OpenSSL d.ocumentation.
#. for a more complete lis.t.虚拟主机
#
#Default:
# none
# TAG: ssl_uncle.an_shu.tdown[成人用品]
# Some browsers (especially MSI.E) .bugs out on SSL shutdown(广告)
# . messages.学习
#
#Default:
# s.sl_unclean_shu.tdown off 建材
# . TAG: icp_port.
# The port .number where Squid sends and re.ceives ICP queries to 乙肝
# and from neighbor .caches. Default is 3130. . To disable use.
# "0". . May be overridden with -u. on the command line.虚拟主机
#
#Default:
# icp._port 3130外贸
# TAG: htcp_port.--------------彩票
# Note: This option i.s onl.y available if Squid is rebuilt with the电脑
# . --enable-htcp opti.on 外汇
#
# The port number where. Squid sends and recei.ves HTCP queries to 婚庆
# . and from neighbor caches. Default. is 4827. To disable use.
# "0".
#
#Default:
# htcp._port 4827 汽车
# TAG: mcast_groups. 女人
# This tag specifies a list of multi.cast groups wh.ich your server--------------彩票
# should .join to receive multicast.ed ICP queries.<性病>
#
# . NOTE! Be very careful what you put. here! Be sure you 女人
# . understand the .difference between an ICP _query_ and an ICP服务器
# _.reply._. This option is to be set only if you want to RECEIVE投资
# multica.st queries. Do NOT. set this option to SEND multicast.
# ICP (u.se cache_peer for that). ICP rep.lies are always sent via(广告)
# unicast, so this op.tio.n does not affect whether or not you will( 游戏 )
# recei.ve replies from. multicast group members. 电子
#
# You must be very ca.reful to NOT use a multicast a.ddress which 健康
# is already. in use by another group of cache.s.服务器
#
# If you are unsure about mu.lticast, please read t.he Multicast( 游戏 )
# chapter in the Squid FAQ (
http://www.squid-cache.org/FAQ/).外贸
#
#. Usage: mcast_groups 239.128.16.128 224.0..1.20虚拟主机
#
#. B.y default, Squid doesn't listen on any multicast groups..
#
#Default:
# none
# TAG: udp._i.ncoming_address.
# T.AG: udp_outgoing_addre.ss--------------彩票
# udp._incoming_address . is used for the ICP socket. receiving packets.
# from o.ther c.aches.<性病>
# udp_.outgoing_.address is used for IC.P packets sent out to other.
# . caches.. 鲜花
#
# Th.e default be.havior is to not bind to any specific address.电影
#
# A udp_incoming_address value of 0.0.0.0 indicat.es th.a.t Squid should域名
# listen for UDP messages on al.l available inter.faces.电影
#
# If udp_o.utgoing._address is set to 255.255.255.255 (the default) 外汇
# then it will use the same socket as udp._incoming._address. Only 健康
#. change th.is if you want to have ICP queries sent using another.
# address than where this Squid listens for I.C.P queries from other 建材
# . caches.投资
#
# N.OTE, udp_inco.ming_address and udp_outgoing_address can not.
# have the same value. since they both us.e port 3130..
#
#Default:
# udp_incoming_addr.ess. 0.0.0.0服务器
# udp_outgoing_ad.dress 255.255.255.25.5外贸
# OPTIONS WHICH AFFECT THE NEIG.HBOR SELECTION ALGORI.THM 健康
# -----------------------------------------------------.---------..---------------域名
# TAG:. cache_peer(广告)
# To specify o.ther caches in a hierarchy, .use the format:<性病>
#
# cache_peer hostname type http._port. icp_port--------------彩票
#
# For exampl.e,.
#
# . # . proxy icp 鲜花
# # hostname . type po.rt port options.
# # -------------.------- -------- --.--- ----- -----------( 游戏 )
# cache_peer parent.foo.net . parent . 3128 3130 [proxy-only](广告)
# cache_peer sib1.f.oo.net sibling 3128 3.130 [proxy-only].
# cache_.peer sib2.foo.net sibling 3128. 3130 [proxy-only] 外汇
#
# . type: ei.ther 'parent', 'sibling', or 'multicast'. 杀毒
#
# prox.y_port: The port numbe.r where the cache listens for proxy.
# . .requests. 建材
#
# icp._port: Used for querying neighbor .caches about教育
# . objects. To have a non-ICP nei.ghbor.
# specify '7' for the ICP .port. and make sure the.
# . neigh.bor machine has the UDP echo port 建材
# . enabled in its /etc/inetd.con.f file. 鲜花
#
# . opt.ions: proxy-only 汽车
# .weight=.n.
# . t.tl=n.
# . no-quer.y外贸
# . def.ault--- 印刷
# . . round-robin 鲜花
# . mult.icast-responder[成人用品]
# . closest-o.nly.
# . . no-digest 女人
# . no-netdb-.exchange.
# . . no-delay.
# lo.gin=user:password | P.ASS | *:password 美容
# . . connect-timeout=nn
# . digest-url=.url
# . . allow-miss 电子
# . max-.conn虚拟主机
#
# . . use 'proxy-only' to specify that objects fetched--------------彩票
# from this cache shou.ld not be. saved locally..
#
# . use .'weight=n' to specify a weighted parent. 女人
# The weight must be an intege.r. . The default weight 建材
# . is 1, larger wei.ghts are favored more..
#
# use 'ttl=n' to specify a IP multicast T.TL to. use( 游戏 )
# when sendi.ng an ICP queries to this addres.s.投资
# . Only useful when send.ing to a multicast group.电脑
# Because we don't accep.t ICP replies from .random 婚庆
# hosts., you must configure other g.roup members as外贸
# peers with t.he 'multicast-res.ponder' option below. 汽车
#
# . use 'no-query' t.o NOT send ICP queries to this 外汇
# . ne.ighbor.电影
#
# . us.e 'default' if this is a parent cache which can投资
# be used.. as a "last-resort." You should probably 电子
# only. use 'de.fault' in situations where you cannot学习
# . . use ICP with your parent cache(s)..
#
# . use '.round-robin' to define a set of parents which虚拟主机
# .should. be used in a round-robin fashion in the 杀毒
# . absence of any ICP querie.s.<性病>
#
# . 'multicast-responder' indicates that the named. peer电影
# . is a member of a multicast group. ICP queries wil.l域名
# not be sent directly to the .peer, but ICP repl.ies.
# . will be a.ccepted from it. 鲜花
#
# . 'closest-only' indicates that, fo.r ICP_OP_MISS.
# replies., we'l.l only forward CLOSEST_PARENT_MISSes<性病>
# . and never FIRST_PARENT_MISSes..( 游戏 )
#
# use 'no-digest' to NOT reques.t ca.che digests from 健康
# this. neigh.bor.投资
#
# 'no-n.etdb-exchange' disables requesting. ICMP域名
# . RTT da.tabase (NetDB) from the neighbor.电影
#
# use 'no-delay' to prevent ac.cess .to this neighbor 鲜花
# . from influencing the d.elay pools. 女人
#
# use .'login=u.ser:password' if this is a personal/.workgroup--- 印刷
# . . proxy and your parent requires proxy authentication..
# Note: The string can include URL escapes .(.i.e. %20 f.or电影
# spaces.). This also me.ans t.hat % must be written as %%.域名
#
# us.e 'login=P.ASS' if users must authenticate against教育
# . the ups.tream proxy.. This will pass the users credentials.
# . as th.ey are to the peer proxy. This only works. for the( 游戏 )
# . . Basic HTTP authentication. sheme. Note: To combine this<性病>
# with .proxy_auth both proxies must share the same .user健康
# . database as HTTP only allows .for one proxy login.
# . Also be warned that this will e.xpose your users proxy.
#. password to the peer. USE WITH C.AUTION.
#
# . use '.login=*:password' to pass the username to the.
# ups.t.ream cach.e, but with a fixed password. This is meant域名
# to be used when the peer is in another a.dministra.tive 外汇
# domain, but it. is still need.ed to identify each user.[成人用品]
# . . The star can optionally be followed by some extra 电子
# . information which is added to the usern.ame. This can教育
# . . be used to identify this proxy to the p.eer, similar to<性病>
# the lo.gin=username:pass.word option above.电脑
#
# . use. 'connect-timeout=nn' to specify a peer 建材
# . specific connect timeout .(also see the 健康
#. peer_connect_timeout .directive)--- 印刷
#
# . use '.digest-url=url' to tell Squid to fetch the cache 婚庆
# . . digest (if digests are enabled) for this host from(广告)
# the s.pecified UR.L rather than the Squid default 建材
# locat.i.on.(广告)
#
# . use 'allow-miss' to disable Squid's. us.e of only-if-cached域名
# . when fo.rwarding. requests to siblings. This is primarily健康
# useful whe.n icp_hit._stale is used by the sibling. To域名
#. e.xtensive use of this option may result in forwarding 汽车
# loops, and you sho.uld avoid hav.ing two-way peerings投资
# . .with this option. (for example to deny peer usage on 汽车
# req.uests from peer by denying cac.he_peer_access .if the 鲜花
# .. source is a peer).
#
# use 'max-conn' to limit the amou.nt of c.onnections .Squid虚拟主机
# . may .open to this peer.( 游戏 )
#
# NOTE: n.on-ICP neighbors must be spe.cified as 'parent'. 汽车
#
#Default:
# none
# TAG: cache_peer_domai.n.
# Use to limit the domains fo.r which a neighbor cache .will be--------------彩票
# queried. Usa.ge:
#
# cache_peer_doma.in cache-host domain [domain ....].
# cache_peer_domain cache-host !d..omain 电子
#
# .F.or example, specifying--- 印刷
#
# . cache_peer_domain parent.fo.o.net .edu
#
# has the effect such that UDP qu.ery .packets are sent to投资
# . 'bigserver' only when. the requested object exists on a.
# s.erv.er in the .edu domain. Prefixing the domainname
# with '!' means that the cache. will. be queried for objects.
#. NOT in that doma.in.教育
#
# NOTE: . * An.y number of domains may be .given for a cache-host,--------------彩票
# either o.n the same or se.parate lines..
# . * When multiple domain.s are given for a particular教育
# cache-host, t.he. first matched domain is applied. 乙肝
# * Cache h.osts with no domain restri.ctions are queried教育
# . .for all requests. 健康
# . . * There are no defaults. 杀毒
# . * There is also a 'cache_peer_access' .tag in the ACL.
# . . section.服务器
#
#Default:
# none
# TAG: neighbor._t.ype_domain 健康
# . u.sage: neighbor_type_domain parent|sibling domain domain ...学习
#
# Modifying the neighbo.r type for specific domai.ns is now 鲜花
# possible. .You can treat some domain.s differently than the the电脑
# default neighbor t.ype specified on the 'cache_peer.' line. 鲜花
# Nor.mally it should on.ly be necessary to list domains which投资
# should be. treated differently because the default n.eighbor type 美容
# applies for hostnames which do .not match domains listed .here..
#
#EXAMPLE:
# cache_peer pa..rent cache.foo.org 3128 3130.
# neighbor_type_domain c.ache.foo..org sibling .com .net域名
# . neighbor_type_domain cac.he.foo.org sibling .au .de
#
#Default:
# none
# TAG: icp_q.uery_timeout (msec.).
# . Normally Squid will automatically determine an opt.imal ICP外贸
# query timeout value based on the round-trip-time of r.ece.nt ICP.
# . . queries. If you want to override the value determined by 健康
# Squid,. se.t this 'icp_query_timeout' to a non-zero value. This 建材
# value is specified in MILLISECONDS, so, to .use a 2-seco.nd 女人
# timeout (.the old default), you woul.d write:学习
#
# . icp_query_tim.eout 2000 婚庆
#
#Default:
# icp_query_timeo.ut 0--- 印刷
# TAG.: maximum_icp_query_time.out (msec).
# . Normally the ICP qu.ery timeout is determined dynamically. But 鲜花
# sometimes it can lead to very .large values (say .5 seconds)..
#. Use this option to put an up.per limit on the dynamic timeout电影
# . value. Do NOT use this o.ption to always use a fixed (instead健康
# of a dynamic) timeo.ut value. To set a fixed time.out see the 鲜花
# '.icp_query_timeout'. directive.<性病>
#
#Default:
# .maximum_icp_query_.timeout 2000虚拟主机
# TAG: mcast_icp._query_timeout . (msec).
# For Mul.ticast peers, Squid regularly s.ends out ICP "probes" to 鲜花
# count how many other peers are liste.ning on the given multic.ast电脑
# address. .Thi.s value specifies how long Squid should wait to域名
# count all. the replies. The defaul.t is 2000 msec, or 2.
# second.s..
#
#Default:
# mcast_icp_que.ry_timeout. 2000.
# TAG: dead_peer_ti.meout . (seconds) 婚庆
# .This controls how long Squid waits to declare a peer .cache 汽车
# as "dead.". If there are no. ICP replies received in this 乙肝
# amoun.t of ti.me, Squid will declare the peer dead and not 外汇
# . . expect to receive any further ICP replies. However, it.
# continues .to send ICP quer.ies, and will mark the peer as学习
# . alive upon recei.pt of the first subsequent ICP reply..
#
# . . This timeout also affects when Squid expects to receive ICP虚拟主机
# replies from peers. If more th.an 'dead_peer' seco.nds have.
# passed since the last ICP reply .was rece.ived, Squid will not投资
# expect to recei.ve an ICP reply on the next query.. Thus, if电脑
# your time between requests is. greater than this .timeout, you 乙肝
# will see a lot of requests sent DIR.ECT to or.igin servers<性病>
# . inst.ead of to your parents.( 游戏 )
#
#Default:
#. dead_peer_timeout .10 seconds 鲜花
# TAG: h.ierarchy._stoplist健康
# A list .of words which, if found in a URL, cause the obj.ect to服务器
# be handled directly by this c.ache. In other words, use th.is 杀毒
# to not .query neighbor caches for certa.in objects. You may.
# lis.t this option. multiple times. 外汇
#.We recommend you to use at least the fol.lowing line. 婚庆
hierarchy._s.toplist cgi-bin ? 女人
# TAG:. no_cache 女人
# A list of .ACL elements which, if matched, caus.e the request to学习
# not be satisfied from the cache and the reply to not be cac.hed.. 外汇
# In other words., use this to force certain obje.cts to never b.e cached..
#
# You must us.e the wor.d 'DEN.Y' to indicate the ACL names which should<性病>
# . NOT be cached.学习
#
#We recommend you to use the fol.lowing two l.ines.<性病>
acl QUERY urlpath_regex .c.gi-bin \?外贸
no_cache deny QU.ERY投资
# OPTIONS WHICH AFFEC.T .THE CACHE SIZE服务器
# -------------------------------.--------------------------------------.-----.---电脑
# TAG: cache_mem . (by.tes) 健康
# . NOTE: THIS PARAMETER DOES NOT SPECIFY THE MAXIMUM PROCESS S.IZE. 汽车
# . IT ONLY PLACES A LIMIT ON HOW MUCH .ADDITIONAL MEMORY SQUID WILL.
# U.SE AS A MEMORY. CACHE OF OBJECTS. SQUID USES MEMORY FOR OTHER投资
# THI.NGS AS WELL. SEE THE .SQUID FAQ SECTION 8 FOR DETAILS.--------------彩票
#
# 'cache_mem' specifies the .ideal amoun.t of memory to be used.
# for:
# * In-Transit objec.t.s域名
# * Hot O.bjec.ts--- 印刷
# . * Negative.-Cached objects.
#
# Data for t.hese objects are store.d in 4 KB blocks. This--------------彩票
# parameter specifies .the ideal upper limit on the total .size of教育
# 4 KB blocks all.ocated.. In-Transit objects take the highest 婚庆
# . priority. 女人
#
# In-transit objects have priority. over the others. When.--- 印刷
# addition.al space is needed. for incoming data, negative-cached.
#. and hot objects will be released. In other words, th.e 电子
# negative-cached and hot objects w.ill fill up. any unused space 美容
# . not needed for in-transit o.bjects. 美容
#
# If circumstances require, this limit will be exc..eeded.[成人用品]
# Specifically, if your .incoming re.quest rate requires more than 乙肝
# 'cache_m.em' of memory to hold in-transit objects, Squi.d will 乙肝
# exceed this limit to satisfy th.e new requests. Wh.en the load<性病>
# d.ecreases,. blocks will be freed until the high-water mark is.
# . reached. Thereafter, blocks will .be used to store hot学习
# . objects. 外汇
#
#Default:
# cache_m.em 32 MB 乙肝
# TAG: cac.he_swap_low (percent, 0-10.0).
# TAG: cache_swap_high . (.percent, 0-100)( 游戏 )
#
# The .low- and high-water marks for cache object replac.ement.--------------彩票
# Replacement begins when the swap (.disk) u.sage is above the 外汇
# low-water mark and attemp.ts to mai.ntain utilization near the 乙肝
# low-water mark. As swap ut.ilization gets close to .high-water域名
# .mark object eviction becomes more aggressive. If util.ization is 外汇
# close to the low-water mark less replacem.ent is. done each time.电影
#
# Defaults are 90% and 95%. If you have a. large cache, 5% could .be.
# hundreds of MB. If this is the case you may. wish t.o set these.
#. numbers clo.ser together.教育
#
#Default:
# cache_swa.p_low 90 健康
# cache_swap_h.igh 95.
# TAG: maximum_object_size (b.ytes.).
# Obj.ects larger than this size will NOT be saved .on disk. The 女人
# . value is specified in kiloby.tes, and the default is 4MB. If 女人
# you wish to get a high BYTES hit rat.io, you should probab.ly.
# increase thi.s (one 32 MB object hit counts for 32.00 10KB.
# . hits). If you wish to. increase speed more than your want to 鲜花
# save bandwidth .you should leave this .low..
#
# NOTE: if using the LFUDA r.eplac.ement policy you should increase(广告)
# th.is value to maximize the byte hit rate improvement. of LFUDA![成人用品]
# See re.placement_policy be.low for a discussion of this policy..
#
#Default:
#. maximum_object_size 40.96 KB 鲜花
# TAG: minim.um_object._size (bytes)--- 印刷
# Objects smaller than this size will N.OT be saved on disk. .The电脑
# value is specified. in kilobytes, .and the default is 0 KB, which 电子
# mean.s there. is no minimum. 电子
#
#Default:
# minimu.m._object_size 0 KB[成人用品]
# TAG: maximum_object_size_in_memory (byt.es). 电子
# Obje.cts greater than this size wil.l not be attempted to kept in 鲜花
# th.e memory cache. This should. be set high enough to keep objects 健康
# accessed frequently in memory to improve performanc.e whilst. low电影
# enough to keep lar.ger objects fro.m hoarding cache_mem .(广告)
#
#Default:
# maximum_object_size._in_memo.ry 8 KB--------------彩票
# TAG: ipcach.e_.size (number of entries) 鲜花
# TAG: ipca.che_low (perc.ent)学习
# TAG: ipca.che_high. (percent) 杀毒
# The size, low-, and high-water mar.ks for. the IP cache. 外汇
#
#Default:
# ip.cache_size 1024.
#. ipcache_low 90服务器
# ipcach.e_high 95.
# TAG.: fqdncach.e_size (number of entries)--------------彩票
# . .Maximum number of FQDN cache entries..
#
#Default:
# fqdnc.ache_size 1024.
# TAG: cache_replacemen.t._policy.
# The ca.che replacement poli.cy parameter determines which 乙肝
# objects .are evicted (replaced) when disk .space is needed.(广告)
#
# lru . : Squid's original li.st based LRU policy.
# heap GDSF : Greedy-Du.al Si.ze Frequency域名
# heap LFUDA: Least Frequently Us.ed with Dynam.ic Aging.
# heap LRU : L.RU policy implemented u.sing a heap.
#
# . Applies to any cache_dir .lines listed below this.虚拟主机
#
# . The LRU policies keeps. recently referenced objects.投资
#
# The heap GDSF policy opt.imizes object hit ra.te by keeping smaller.
# popular objects in. ca.che so it has a better chance of getting a
# . hit. It achieves a low.er byte hit rate than LFUDA though since( 游戏 )
# it evicts large.r (possibly popula.r) objects..
#
# The heap LFUDA policy keep.s po.pular objects in cache regardless of 外汇
# their size and thus opti.mizes byte hi.t rate at the expense of服务器
# hit rate. since one large, popular .object will prevent many学习
# smaller.., slightly less popular objects from being cached. 电子
#
# Both pol.icies utilize a dynamic aging mechanism that preve.nts(广告)
# cache pollution that can otherwise occur wit.h. frequency-based.
# replac.ement po.licies.--------------彩票
#
# NOTE: if using the LFUDA replacement poli.cy you sho.uld increase
# the value of .maximum_object_size above i.ts default of 4096 KB to.
# . to maximize the potentia.l byte hit rate improvement of LFUDA. 健康
#
# F.or more information about the GDSF and LFUDA cache replaceme.nt( 游戏 )
# policies see
http://www.hpl.hp.com/techreports/1999/HPL-1999-69.html 汽车
# and
http://fog.hpl.external.hp.com/techreports/98/HPL-98-173.html. 电子
#
#Default:
#.. cache_replacement_policy lru.
#.. TAG: memory_replacement_policy.
#. The memory replace.ment policy parameter determines which 电子
# objec.ts are purged .from memory when memory space is needed.电脑
#
# . See cache_replacement_policy f.or details.电影
#
#Default:
# memo.ry_replacement_p.olicy lru域名
# LOGFI.LE PATHNAME.S AND CACHE DIRECTORIES健康
# .-------------------------------------------.-----------------------------.-----.
# . TAG: cache_dir学习
# . Usage:服务器
#
# cache_dir .Type Directory-Name Fs-specific-da.ta [options].
#
# ca.c.he_dir diskd Maxobjsize Directory-Name MB L1 L2 Q1 Q2.
#
# You can .specify multiple ca.che_dir lines to spread the 女人
# cac.he among different disk par.titions..
#
# Type specifies the kind. of storage syst.em to use. Only "ufs".
# .is built by default. To eanble any of the other s.torage systems<性病>
# see the --enable-storeio conf.igure op.tion. 电子
#
# 'Directory' is a top-level directory where cach.e .swap( 游戏 )
# files will be .sto.red. If you want to use an entire disk 女人
# for caching, then this .can be th.e mount-point directory..
# . The director.y must exist and be writable by the Squid.
# process. Squid will NOT create thi.s director.y for you..
#
# The ufs .st.ore type: 美容
#
# "ufs" is the old we.ll-known Squi.d storage format that has always--- 印刷
# . been there..
#
# . cache_dir ufs Directory-.Name Mbytes L1 L2 [options].
#
# 'Mbytes' is the amount of disk .space (MB) to use under .this.
# directory. The default is .100 MB. Change this to suit .your[成人用品]
# configuration. Do N.OT put the size of your. disk drive here.(广告)
# . Instead, if you .want Squid to use the entire disk drive,.
# subtract 20% and use .that v.alue..
#
# 'Level-1'. is the number. of first-level subdirectories which 杀毒
# will be created under the 'Directory'. T.h.e default is 16. 汽车
#
# . 'Level-2' is the number of. second-level subdirectories which虚拟主机
# will be created under each .first-.level directory. The default.
# i.s 256.学习
#
# The aufs store type.:. 建材
#
# . "aufs" uses the same storage format as ."ufs", utilizing.
# POSIX-threads. .to avoid blocking the main Squid process on(广告)
# di.sk-I/O. This was form.erly known in Squid as async-io. 乙肝
#
# cache_dir aufs D.irec.tory-Name Mbytes L1 L2 [options] 电子
#
# see argument d.escriptions unde.r ufs above
#
# The diskd st.o.re type:电影
#
# "diskd" uses. the same storage f.ormat as "ufs", utilizing a
# separate process to avoid bloc.king the. main Squid process on.
# . disk-I/O..
#
# cac.he_dir disk.d Directory-Name Mbytes L1 L2 [op.tions] [Q1=n] [Q2=n] 健康
#
# se.e argument d.escriptions under ufs above[成人用品]
#
# . Q1 specifies the .number of unacknowledged I/O requests when Squid--------------彩票
# stops opening new files. If this man.y messages are .in the queues,.
# Squid won't open new file.s. De.fault is 64[成人用品]
#
# Q2 specifies the n.umber of unacknowledged .messages when Squid--- 印刷
# starts blocking. If this many messages are in t.he queues,.<性病>
# . Squid blocks until it recevies some r.eplies. Default is 72服务器
#
# .Common options:.
#
#. read-only, this cac.he_dir is read only..
#
# max-size=n, refers to the max ob.ject size this store.dir supports. 汽车
# It is used to ini.tially choose the storedir to dump th.e object.学习
# . Note: To .make optimal use of the max-size limits you should order虚拟主机
# the .cache_dir lines with the smalles.t max-size value first and the 婚庆
# . . ones with no max-size specification last.电脑
#
#Default:
# cache_dir ufs /var/spool/sq.uid 100. 16 256 汽车
# TAG: cache._access_log.
# Logs the cl.ient request activity. .Contains an entry for<性病>
# every HTTP .and ICP queries rece.ived. To disable, enter "none". 女人
#
#Default:
# .cache_access_log /var/log/squid/acc.ess.log.
# TAG: cach.e_log.
# C.ache logging file. This is where general informatio.n about.
# y.our cache's behavior goes. You can increase the amount of d.ata虚拟主机
# . logged to thi.s file with the "debug_options" tag below.教育
#
#Default:
# cache_log /va.r/log/squid/cac.he.log.
# TAG: cache_store._log.
# .Logs the activities of the storage manage.r. Shows which 乙肝
# objects are ejected from the c.ache, and which. objects are[成人用品]
# saved and for how long. To. disable., enter "none". There are
#. not rea.lly utilities to analyze this data, so you can safely.
# . disable it.服务器
#
#Default:
# cache_.store_log /var/log./squid/store.log 鲜花
# TAG: cache_swap._log.
# Location for the cache "swap.lo.g." This log fil.e holds the.
# meta.data of objects save.d on disk. It is used to rebuild the外贸
# cache during startup. Norm.ally th.is file resides in each 健康
# 'cache_dir' directory, but you may spe.ci.fy an alternate 美容
# pathname here. No.te .you must give a full filename, not just.
# a .directory. S.ince this is the index for the whole object电脑
# list you .CANNOT per.iodically rotate it!教育
#
# . If %s can be used in the file name then it will be replaced wi.th a 女人
# a re.presentation of the cache_dir name where each. / is replaced[成人用品]
# .. with '.'. This is needed to allow adding/removing cache_dir域名
# li.nes when cache_swap_log is being. used..
#
# . If have more than one 'cache_dir', and %s is not used in the nam.e.
# . then these swap logs. will have names such as:电影
#
# . cache_swap_log.00. 建材
# . cache_swa.p_log.01 杀毒
# .. cache_swap_log.02电影
#
# The numbe.re.d extension (which is added automatically).
# corre.sponds to the orde.r of the 'cache_dir' lines in this教育
# configuration file. If. you change the order of the 'ca.che_dir'电影
# lines in this file, then these. log files will NOT corre.spond to<性病>
# the corr.ect 'cache._dir' entry (unless you manually rename投资
# them.). We recommend that y.ou do NOT use this option. It is 建材
# better to k.eep these log files in each 'cache._dir' directory. 电子
#
#Default:
# none
# TAG: emulate_.httpd_log . on|off( 游戏 )
# The Cache can emul.ate the log file format whic.h many 'httpd' 建材
# programs use.. To disable/enable thi.s emulation, set.
# em.ulate._httpd_log to 'off' or 'on'. The default--- 印刷
# is to use the n.ative lo.g format since it includes useful 乙肝
# . . information that Squid-specific log analyzers use. 杀毒
#
#Default:
# e.mulate_httpd_log off教育
# TAG: log_ip_on_direct . .on|off( 游戏 )
# Log the des.tinat.ion IP address in the hierarchy log tag when going<性病>
# .direct. Earlier Squid versions logged the hostname here.. If you服务器
# pr.efer the old way set thi.s to off..
#
#Default:
# l.og_ip_on_direct on健康
# TAG: mim.e_table 女人
# Pathname to. Squid's MIM.E table. You shouldn't need to change电脑
# . this, but the default file contains examples and formattin.g外贸
# . informa.tion if you do. 美容
#
#Default:
# mime_table /etc/.s.quid/mime.conf健康
# TAG: log_mime_hdrs . on.|off(广告)
# The Cache can record both the request an.d the r.esponse MIME.
# headers for each HTTP transaction. Th.e headers .are encoded教育
# safely and wil.l appear as tw.o bracketed fields at the end of投资
#. the access log (for either the native or http.d-emulated log.
# . formats). To enable this logging set l.og_mime_hdrs to 'on'..
#
#Default:
# log_mime_hd.rs off(广告)
# TAG: useragent_lo.g学习
# Note: This option is o.nly available if Squid is rebuilt with .the.
# . --enable-.useragent-log option电脑
#
# Squid will write the User-A.ge.nt field from HTTP requests 女人
# . to the filename specifie.d here. By default useragent_log.
# is disabl.ed. 外汇
#
#Default:
# none
# TAG:. referer_log.
# Note: This .option is only availab.le if Squid is rebuilt with the.
# --enable-referer-l.og opti.on.
#
# Squid wil.l write the .Referer field from HTTP requests to the投资
# filename .specified here. By default refer.er_log is disabled.--------------彩票
#
#Default:
# none
# TAG: pid_fi.lename( 游戏 )
# A filename t.o write the process-id .to. To disable, enter "none"..
#
#Default:
#. pid_filename /var/run/.squid.pid 鲜花
# TAG: debug._options 电子
# Logging options are set as sec.tio.n,level where each source file 乙肝
# is assigned. a unique section.. Lower levels result in less 乙肝
# output, Full debuggin.g (le.vel 9) can result in a very large[成人用品]
# log file, so be careful. The magic word. "ALL" sets debugg.ing--------------彩票
# levels for all sections.. We r.ecommend normally running with教育
# . "ALL,1". 外汇
#
#Default:
# debug_optio.ns ALL,1 电子
# TAG: log_fqdn .on|.off.
# Turn this on i.f you wish to log fully qualified domain name.s域名
# in th.e access.log. To do. this Squid does a DNS lookup of all.
# IP'.s connecting to it. This can (in some si.tuations) increase--- 印刷
# . latency, which makes your cac.he seem slower for interactive.
# .browsing..
#
#Default:
# log_fqdn off
# TA.G: client_netmask.
# A netmask for client add.resses in logfiles and cachemgr out.put.电影
# Change this to protect the privacy of your cache .cli.ents.(广告)
# A netmas.k of 255.255..255.0 will log all IP's in that range with.
# the last digit. set .to '0'. 汽车
#
#Default:
# clien.t_netmask 255.255.255.2.55 婚庆
# OPTIONS FOR EXT.ERNAL SUPP.ORT PROGRAMS--- 印刷
# -------.-----------------------------.-------.----------------------------------教育
# TAG: .ftp_user
# .If you want the anonymous login pa.ssword to be more informative 汽车
# (and. enable the u.se of picky ftp servers), set this to something.
# reasonable for you.r dom.ain, like
wwwuser@somewhere.net健康
#
# The reason wh.y this is domainless by defau.lt is that the--- 印刷
# reques.t can be made on the behalf of a user in any dom.ain, 女人
# . depending on .how the cache is used. 电子
# . Some ftp server also validate that the email address is va.lid 鲜花
# (for example p.erl.com).. 鲜花
#
#Default:
# ft.p_user Squid@.
# TAG: ftp_list_widt.h.
# Sets t.he width of ftp listings. This should be. set to fit in服务器
# the width of a standard .browser. Setting. this too small.
# . . can cut off long filenames when browsing ftp sites.(广告)
#
#Default:
# ftp_lis.t_width 32
# TAG: ft.p_passive电影
# If your firewall do.es not al.low Squid to use passive 汽车
# co.nnections, then .turn off this option..
#
#Default:
# ftp_passi.ve on电脑
# TAG: ftp_sanityche.ck.
# For security and data .integrity reasons Squ.id by default performs.
# sanity checks of the addr.esses of FTP data connec.tions ensure the域名
# data .connection is to the requested ser.ver. If you need to allow.
# . FTP connections to ser.vers using another IP address for the data服务器
# . connection then turn this of.f.域名
#
#Default:
# ftp_.sanitycheck on 健康
# TAG: cach.e_dns_program--- 印刷
# Note: .This option is only available if Squid is rebu.ilt with the.
# -.-disable-internal.-dns option[成人用品]
#
# Specify the location of the ex.ecutable for dnslookup pr.ocess. 美容
#
#Default:
# cache_dns_.pr.ogram /usr/lib/squid/电脑
# T.AG: dns_children.
# Note: This option is only available if Squid is rebu.ilt with. the域名
# --disable-interna.l-dns .option 婚庆
#
# The number of pro.cesses spawn to s.ervice DNS name lookups.投资
# For heavil.y loaded caches on large s.ervers, you should.
#. probably increase this value to at lea.st 10. The maximum 鲜花
# is 32.. . The default is 5.--------------彩票
#
# . You must have at least one dnsserve.r process..
#
#Default:
# dns_childr.en 5--------------彩票
# TAG: dns_retransmit_inte.r.val电影
# Initial r.etra.nsmit interval for DNS queries. The interval is外贸
# . doubled eac.h time all configured DNS servers have been tried.域名
#
#
#Default:
# dns_re.trans.mit_interval 5 seconds 乙肝
# TAG: dns_t.imeout 健康
# DNS Query timeout. If no response .is received to a DNS q.uery 杀毒
# w.ithin this ti.me then all DNS servers for the queried domain投资
# is assumed to be unav.ailabl.e.学习
#
#Default:
# dns_timeout .5 minutes虚拟主机
# TAG: dns_.defnames . on|off 健康
#. Note: Thi.s option is only available if Squid is rebuilt with the电影
# --disa.ble-internal-dn.s option服务器
#
# Normally the 'dnsserver' disables the RES._DEFNA.MES resolver<性病>
# . option (see res_.init(3)). This prevents caches in a hierarchy虚拟主机
# from interpreting sin.gle-compon.ent hostnames locally. To allow--- 印刷
# dnsserver to handle single-.component .names, enable this教育
# opt.ion..
#
#Default:
# dns_defnames off. 杀毒
# T.AG: dns_nameservers电脑
# Use this if you want to spe.cify. a list of DNS name servers 建材
# (IP addresses) to use instead of those.. given in your[成人用品]
# /etc/.r.esolv.conf file.电影
# On. Windows .platforms, if no value is specified here or in 杀毒
# the /etc/resolv.conf file, the list of DNS name serv..ers are.
# taken from the Windows registry, both static an.d dynamic. DHCP虚拟主机
# . configurations a.re supported.(广告)
#
# . Ex.ample: dns_nameservers 10.0.0.1 192.172.0.4.
#
#Default:
# none
# TAG:. hosts_file( 游戏 )
# Location .of the host-local IP .name-address associations教育
# . database. Most Operating Systems have such .a file: under虚拟主机
# . Un*X it's by default in /etc/hosts MS-Windows NT/2.000 places 婚庆
# that in %.SystemRoot%(by defaul.t服务器
# c:\win.nt)\system32\drivers\etc\hosts, whil.e Windows 9x/ME.
# places th.at in %windir%(.usually c:\windows)\hosts.
#
#. The file cont.ains newline-separated definitions, in the电脑
# form ip_addr.ess_in_dotted_for.m name [name ...] names are 汽车
# whitespace-s.eparated. lines beginnng with an. hash (#) 鲜花
# char.acter .are comments. 女人
#
# The file is checked at startup and. upon conf.iguration. If 外汇
# .set to 'none'., it won't be checked. If append_domain is.
# used, that domain will be added to domain-local.. (i.e. not 鲜花
# . containing any do.t character) host definitions..
#
#Default:
#. hosts_file /etc/hosts 电子
# .TAG: diskd_program服务器
# Specify the loca.tion of the diskd executable.. 婚庆
# Note t.hat this is only useful if you hav.e compiled in 女人
# diskd as one of the st.ore .io modules. 汽车
#
#Default:
# diskd_prog.ram /usr/lib/squi.d/diskd.
#. TAG: unlinkd_program 婚庆
# Speci.fy the location of the executable for file deletio.n process.[成人用品]
#
#Default:
# unlinkd._program /usr/lib/sq.uid/unlinkd投资
# TAG: ping.er_program 鲜花
# Note: This option is .only availa.ble if Squid is rebuilt with the.
# --enab.le-.icmp option--------------彩票
#
# Speci.fy the location of the. executable for the pinger process..
#
#Default:
# pinger_program /usr/li.b/squid./ 杀毒
# TAG: red.irect_program.
# Specify the location of. the executable for the URL .redirector..
# Since .they can perfo.rm almost any funct.ion there isn't one included.投资
# See the FAQ. (section 15) for information on how to wr.ite one. 汽车
# . By. default, a redirector is not used.域名
#
#Default:
# none
# TAG: redir.ect_children域名
# The number. of redirector processes to spawn. If you st.art<性病>
# too few Squid will .have to wait for them to .process a backlog of投资
# URLs, .slowing it down. I.f you start too many they will use RAM 婚庆
# a.nd other. system resources..
#
#Default:
# redirect_chi.ldren 5.
# TAG: redirect_rewrit.es_host_hea.der.
# By default Squid re.writes any Host: he.ader in redirected 美容
# requests. .If you are running an accelerator .then this may电影
# not .be. a wanted effect of a redirector..
#
#Default:
# redirect_rewr..ites_host_header on虚拟主机
# T.AG: redirector_access.
# If defined, this. access list specifies .which requests are 乙肝
# sent to the redirector processes. . By d.efault all requests 杀毒
#. are sent. 女人
#
#Default:
# none
# TAG:. auth_param电影
# This is used to .pas.s parameters to the various authentication教育
# schemes..外贸
# format: auth._.param scheme parameter [setting] 鲜花
#
# auth_param basic program /usr/.bin/ncsa_auth /u.sr/etc/passwd. 健康
# would tell the basic authentication scheme it's progr.am p.arameter. 女人
#
# Th.e order that authentication prompts are presented to .the cli.ent_agent电脑
# is. depen.dant on the order the scheme first appears in config file.<性病>
# . IE has a bug (it's not rfc 2617 compliant) in .that it will use the. basic 美容
# . scheme if basic is the fir.st entry .presented, even if more secure schemes.
#.. are presented. For now use the order in the file below. .If other browsers.
# . hav.e difficulties (don't recognise the schemes .offered even if you are using.
# basic). then either put basic first, or disable the othe.r schemes .(by commenting虚拟主机
# out their pro..gram entry)..
#
# . Once an authentication scheme is fully configured, it can only b.e shutd.own.
# by shuttin.g squid d.own and restarting. Cha.nges can be made on the fly and外贸
# . activated with a reconfigure. I..E. You can change to a di.fferent helper, 外汇
# but not. unconfigure. the helper completely. 健康
#
# ==.= Parameters for the basic scheme follow.. === 美容
#
# . "program" cm.dline 婚庆
# Specify the command for the ex.ternal authentic.ator. Such a 乙肝
# program reads a li.ne containing "usern.ame password" and replies电影
# "OK" .or "ERR" in an endless loop. If you use an authentica.tor,域名
# make sure y.ou have 1 ac.l of type proxy_auth. By default, the--- 印刷
# . authenticate_program i.s not used. 乙肝
#
# If you want to use the tra.ditional proxy. authentication,--- 印刷
# . jump over. to the ../auth_modules/NCSA directory and.
# type:
# . % make[成人用品]
# . % make in.stall.
#
# Then, set .this line to somethin.g like<性病>
#
# auth_para.m basic program /usr/bin/ncsa_auth /usr/etc./passwd.
#
# "children" numb.erofch.ildren.
# The number of. authenticato.r processes to spawn (no default). 婚庆
# If you. start too few Squid will have to wait for. them to<性病>
# process a b.acklog of usercode/password verificat.ions, slowing.
# it do.wn. When password verifications are done via. a (slow)外贸
# network y.ou are likel.y to need lots of authenticator(广告)
# proces.ses.服务器
# au.th_param basic. children 5电脑
#
#. "re.alm" realmstring.
# Specifies the. realm name which is to be .reported to the.
# client for the basic p.roxy authenticat.ion scheme (part of 汽车
# th.e text the user will see when prompt.ed their username and 汽车
# password). Ther.e is no default..学习
# . auth_param basic realm Squid proxy-caching web ser.ver 建材
#
# "cr.eden.tialsttl" timetolive( 游戏 )
# Specifies how long squid assumes an external.l.y validated域名
# username:password pair i.s va.lid for - in other words how 美容
# often the helper program is called .for that user. .Set this[成人用品]
# low to force revalidation. with short lived passwor.ds. Note--------------彩票
# . that setting this high does. not impact your susceptability投资
# . to replay attacks unless you. are using an one-time password健康
# system (su.ch as SecureID). If you .are using such a system, 女人
# you wil.l .be vulnerable to replay attacks unless you also.
# use the max_user_ip .ACL in an http_access ru.le.电影
#
# === Paramete.rs for the diges.t scheme follow ===电影
#
# "prog.ram". cmdline投资
# . Specify the comm.and for the external authenticator. Such 美容
# a program reads a line. containing "u.sername":"realm" and.
# replies with .the appropriate H(A1) value base64 e.ncoded.学习
# See rfc 2616 for the definit.ion of H.(A1). If you use an 鲜花
# . authenticator, make sure you have 1 acl of type p.roxy_auth. 建材
# . By default, authentication is. not used. 乙肝
#
# If y.ou want to .use build an authenticator,服务器
# jump over. to the ../digest_auth_modu.les directory and choose the.
# authen.ticator .to use. It it's directory type 鲜花
# % m.ake.
# . . % make install 外汇
#
# Then., set this line to .something like电脑
#
# auth_param. digest program /usr/bin/dige.st_auth_pw /usr/etc/digpass学习
#
#
# . "children" numberofch.ildren健康
# The number of authentic.ator processes to spawn (no de.fault).(广告)
# If you start too few Squid will have to wait f.or them to.教育
# process a backlog o.f H(A1) ca.lculations, slowing it down. 电子
# When. the H(A1) calculations are .done via a (slow) network.
# you are likely t.o n.eed lots of authenticator processes..
#. auth_.param digest children 5投资
#
# "real.m" realm.string.
#. Specifies the realm n.ame which is to be reported to the--- 印刷
#. client for t.he digest proxy authentication scheme (part of服务器
# the text the user will see when pr.ompted th.eir username and 汽车
# . p.assword). There is no default.电影
# aut.h_para.m digest realm Squid proxy-caching web server
#
# "nonce_garbag.e_interval" ti.meinterval--------------彩票
# . Specifies the interval that nonces that .have been issued.
# to client_agent's .are .checked for validity..
#
# "nonce_max_durati.o.n" timeinterval 健康
# . Specifies the maximum length of time a given nonce. will be 美容
# valid .for..
#
# . "nonce_ma.x_count" number 杀毒
# Spec.ifies the maximum number of times a giv.en nonce can be<性病>
# used.
#
# . "nonc.e_strictness" on|off 电子
# Determines if squid requires increm.ent-by.-1 behaviour for<性病>
# nonce counts (on - the default),.. or strictly incrementing 乙肝
# . (off - for use when useragents generate n.once counts that电影
# . occasi.onally miss 1 (ie, 1,2,4,6)). 美容
#
# === NTLM. scheme options f.ollow ===.
#
# . . "program" cmdline 汽车
# Sp.ecify the. command for the external ntlm authenticator.( 游戏 )
# Such a program rea.ds a line containing the uuencoded NE.GOTIATE电影
# and. replies with the ntlm CHALLENGE, then waits .for the.
# response and .answers with "OK" or "ER.R" in an endless loop.服务器
# If you us.e an ntlm authenticator, make sure you have 1 acl..
# of type proxy_auth. By defa.ult, the ntlm authenticator_progr.am( 游戏 )
#. is not used. 女人
#
# auth_pa.ram ntlm progra.m /usr/bin/ntlm_auth 婚庆
#
# . "children" .numberofchildren[成人用品]
# The num.ber of authentica.tor processes to spawn (no default).域名
# If you start too few. Squid will have to wait for .them to 乙肝
# process a back.log of credential verifications, slowing .it.
# . do.wn. When crendential verifications are done via a (slow)( 游戏 )
# network you are likely to need .lots of authentica.tor健康
# pro.cesses. 健康
#. auth_param ntlm child.ren 5 鲜花
#
# . . "max_challenge_reuses" number--------------彩票
# The maximum n.umber of times a challenge given by a ntl.m学习
# authen.tication helper can be reused. Increasing this .number外贸
# increases your exposu.re to replay a.ttacks on your network. 健康
# 0 means use the challenge only on.ce. (disable challen.ge 汽车
# caching) See max_ntlm_challenge_lif.etime for more infor.mation..
# auth_param. ntlm max_challenge_.reuses 0.
#
# "max_challe.nge_lifetime" timespa.n 美容
#. .The maximum time period that a ntlm challenge is reused健康
# over. The actual period wil.l be th.e minimum of this time( 游戏 )
# A.N.D the number of reused challenges. 美容
# auth_param ntlm max_challenge_.lifetime 2 min.utes.
#
#Recommended. mi.nimum configuration:域名
#a.uth_param digest program <uncomment and com.plete this line>;.
#aut.h_param digest children .5.
#auth._param digest realm Sq.uid proxy-caching web server 汽车
#auth_param digest nonce_garbage_inter.val 5 minutes. 汽车
#a.uth_pa.ram digest nonce_max_duration 30 minutes.
#auth._param digest nonce_max_count .50 外汇
#auth._param ntlm program <uncomment and complete this line to. activate>;.
#auth_param. ntlm c.hildren 5(广告)
#auth_param .ntlm max_challenge_reu.ses 0虚拟主机
#auth_param .ntlm max_challenge_life.time 2 minutes.
#.auth_param basic program <uncom.ment and complete this line>;.
aut.h_param basic c.hildren 5电脑
au.th_param basic realm Squid .proxy-caching web server.
auth_param basic c.redentialsttl 2 .hours健康
# TAG: authenticate.._cache_garbage_interval电脑
# The time period between garbage .collection across .the 杀毒
# username cache. This is a t.radeoff between memor.y utilisation.
# (long intervals - say 2 days) and .CPU (short intervals .-教育
# say 1 minute.). Only change if you h.ave good reason to. 美容
#
#Default:
# authenticate_cache._garb.age_interval 1 hour
# TAG:. authenticate_ttl.
# The time a user & .their credentials stay .in the logged in电影
# user cache since t.heir last request. When the garbage. 杀毒
# interval passes, all user cred.entials tha.t have passed their[成人用品]
# . TTL. are removed from memory.学习
#
#Default:
# authenticate_ttl 1. hour.
# TAG: authentica.t.e_ip_ttl( 游戏 )
# If you use proxy auth..entication and the 'max_user_ip' ACL,虚拟主机
# this directive co.ntrols how long Squid rememb.ers the IP.
# addresses. associated with each user. Use a small va.lue.
# (e..g., 60 seconds) if your users. might change addresses 建材
# quickly, as is the .case with dialups. You might be sa.fe服务器
# us.ing a larger value (e.g., 2 hou.rs) in a corporate LAN.
# env.ironment with relatively sta.tic address assignments..
#
#Default:
# authen.ticate_ip_ttl 0 .seconds.
# TAG: external_a.cl_type学习
# This option defines external acl classes using. a helper prog.ram服务器
# to. look up the. status--------------彩票
#
#. . . external_acl_type name [options] FORMAT.. /path/to/helper [helper arguments..]投资
#
# .Options: 外汇
#
# ttl=n TTL in seconds for cached results (defau.lts .to .3600.
# . . for 1 hour)(广告)
# . negative_ttl=n 美容
# . TTL for cached negative loo.kups (default same学习
# . as ttl.)服务器
# con.curre.ncy=n Concurrency lev.el / number of processes spawn 汽车
# . to service externa.l acl lookups of this type. 建材
# . cac.he=n result cache size, 0 is unbounded (default)虚拟主机
#
# . FORMAT specificat.ions.
#
# %LOGIN . . Authenticated user login name 杀毒
#. . %IDENT Ident user name.
# . %SRC . Client IP.
# . %.DST Requested host 杀毒
# %PROTO Requested prot.oco.l.
# %PORT . .Requested port<性病>
# . %METHOD . Request method 建材
# %{Header} . HTTP .request header域名
# %{Hdr:member} . HTTP request header list membe.r 美容
# . %{Hdr:;member}(广告)
# . HTTP request header list me.mber using ; as--------------彩票
# list separ.ator. ; can be. any non-alphanumeric投资
# c.hara.cter..
#
# . In addition, any string specified in the refer.encing acl will.
# . als.o be included in the helper request line, after the specified电脑
# formats. (see the "ac.l external" directive)教育
#
# The helper receives line.s per the above format s.pecification, 电子
# and returns lines starting with OK or ERR i.ndicating. the validity电脑
# of the request and optionally followed by additional keyw.ords wi.th虚拟主机
# m.ore details.服务器
#
# Ge..neral result syntax: 鲜花
#
# .. OK/ERR keyword=value ... 婚庆
#
# Defined .ke.ywords:( 游戏 )
#
# user.= .The users name (login).
# erro.r= Error desc.ription (only defined for ERR results)教育
#
# . Keyword values need to be enclosed in quotes if they. may contain 杀毒
# white.space, or the .whitespace escaped using \. Any quotes or \ 乙肝
# characters .within the keyword value must be. \ escaped..
#
#Default:
# none
# OPTIONS FOR T.UNING .THE CACHE[成人用品]
# -------------.------------------------.-------------.---------------------------.
# TAG: wais_rela.y_host教育
# T.AG: wais_relay_port.
# Relay WAIS request to host. (1st arg) at port (.2 arg).电脑
#
#Default:
# wais_re.lay_port 0教育
# TAG: .request_header_m.ax_size (KB).
# Thi.s spe.cifies the maximum size for HTTP headers in a request.健康
# Request headers are usual..ly relatively small (about 512 bytes).电影
# Placing a lim.it on the request header size will .catch certain 女人
# bugs (for example with persistent conn.ections) an.d possibly投资
# buffer-overflow or denial-of-se.rv.ice attacks.投资
#
#Default:
# req.uest_header_max_s.ize 10 KB电影
# . TAG: request_body_max_s.ize (KB) 电子
# This specifies .the max.imum size for an HTTP request body. 健康
# . In other words, the maximum size of. a PUT/POST request. 婚庆
# A user who attempts .to send a request with a b.ody larger.
# than this. limit receives an "Invalid Request" err.or message.域名
# If you set this paramet.er to a z.ero (the default), there will--------------彩票
# be n.o limit .imposed. 电子
#
#Default:
# reque.st_body_max_size. 0 KB.
# TAG: refresh_.pattern服务器
# usage: refresh_pattern [-i] regex min percent m.ax [options].电影
#
# . By default, re.gular expressions are CASE-SENSITIVE. To make 女人
# them case-.insensitive., use the -i option. 建材
#
# . . 'Min' is the time (in minutes) an object without an explicit域名
# .expiry time should be conside.red fresh. The recommended 婚庆
#. . value is 0, any higher values may cause dynamic applications外贸
# . to be erro.neously cached unless the application designer.
# h.as taken the app.ropriate actions. 杀毒
#
# 'Perc.ent' is a percent.age of the objects age (time since last 健康
# modification age) an obje.ct without explicit expir.y time电脑
# will .be considere.d fresh. 杀毒
#
# 'Max' is an upper limit on how long objects .without .an explicit健康
# expiry time w.ill be consi.dered fresh. 汽车
#
# options: override-ex.pir.e( 游戏 )
# . . override-lastmod 婚庆
# relo.ad-in.to-ims.
# . . ignore-reload电脑
#
# over.ride-expire enforces mi.n age even if the server--------------彩票
# . sent a Expires: header. Doing t.his VIOLATES the HTTP--------------彩票
# standard.. Enabling this fea.ture could make you liable--- 印刷
# . for problems which i.t causes.--------------彩票
#
# overrid.e-lastmod enforces min age even on. objects电影
# . that. was modified recently.( 游戏 )
#
#. reload-into-ims changes client no-cache or ``rel.oad'' 乙肝
# to .If-Modified-Sin.ce requests. Doing this VIOLATES the 建材
# . HTTP standard. Enabling this feature could. make you<性病>
# lia.b.le for problems which it causes. 乙肝
#
# ignore-reload i.gno.res a client no-cache or ``reload'' 鲜花
#. . header. Doing this VIOLATES the HTTP standard. Enabling--- 印刷
# this .feature could mak.e you liable for problems which 汽车
# . . it causes.服务器
# . 乙肝
#. Basically a cached ob.ject is: 外汇
#
# . . FRESH if expires < now, else STALE教育
# . STALE i.f age >; max服务器
# FRES.H if lm-factor .< percent, else STALE 婚庆
# . FRESH if age. < min.
# . e.lse STALE.
#
# . The refresh_pat.tern lines are checked in the order listed here.--- 印刷
# The first entry w.hich matches is used. If none of .the entries 美容
# . match, then the default wi.ll be used..
#
# Note, you must uncom.ment a.ll the default lines if you want.
# to change one. The def.ault setting is only active if non.e is 健康
# used.
#
#.Suggested default:.
ref.res.h_pattern ^ftp: 1440 20% 10080 外汇
refresh_p.attern ^gopher: . 1440 0% 1440[成人用品]
refresh_p.attern . . 0 20% 4320--- 印刷
# TAG: quick_a.bort._min (KB)服务器
# TAG: quick_abort_max . .(KB).
# . TAG: quick_abort_pct. (percent)投资
# The cach.e by default continues .downloading aborted requests电脑
# which are almost complete.d (less than 1.6 KB remaining). This.
# may be undesirable on slow (e.g. S.LIP) links and/or very b.usy 女人
# caches. Impat..ient users may tie up file descriptors and学习
#. . bandwidth by repeatedly requesting and immediately aborting 杀毒
# d.ownloads. 杀毒
#
# When the user aborts a requ.est, Squid will che.ck the.
# quick_abort valu.es to the amount of dat.a transfered until
# then.
#
# If the transfer h.as less than 'quick_abort_min' KB. remaining, 汽车
# . it wil.l finish the retrieval. 美容
#
# If the transfer has m.ore than 'quick_abort_max'. KB remaining,.
# i.t will abort the. retrieval.服务器
#
# If more than 'quick_abort_pct' of the tran.sfer has com.pleted,<性病>
# it will .finish the. retrieval. 建材
#
# . If you do not want any retrie.val to continue after the client.
# . has aborte.d, set both 'quick_abort_min' and 'quick_abort_max'.
# . to '0 KB'. 乙肝
#
# If you want ret.rievals t.o always continue if they are being 女人
# cached then set 'quick_abort_.min' t.o '-1 KB'. 乙肝
#
#Default:
# quick_abort._min 16 KB 健康
# qu.ick_abort_max 16 KB健康
# .quick_abort_pct 95
# .TAG: negative_ttl . time-units 汽车
# .Tim.e-to-Live (TTL) for failed requests. Certain types of 乙肝
# failures (such as "connection refused" and "404 Not Found" arehttp://upload.bbs.csuboy.com/Mon_1004/126_7047_94b8e503d334f2e.gif[/img].
# . .negatively-cached for a configurable amount of time. The投资
# default is 5 minutes. Note tha.t this is dif.ferent from.
# n.egative. caching of DNS lookups.[成人用品]
#
#Default:
# negative_ttl 5. minutes.
#. TAG: positive_dns_ttl time-uni.ts.
# . . Time-to-Live (TTL) for positive caching of successful DNS lookups.<性病>
# . Default. is 6 hours (360 minutes). If you want to minimize the.
# use of Squid's ipcac.he, se.t this to 1, not 0..
#
#Default:
#. posi.tive_dns_ttl 6 hours.
# .TAG: negative_dns_ttl time-u.nits( 游戏 )
# Time-to-Live (TTL) for .negative caching of failed D.NS lookups..
#
#Default:
# neg.ative._dns_ttl 5 minutes.
# TAG: range_offset_limit . (byt.es) 电子
#. Sets a upper limit on how far into the the file .a Range request 乙肝
# .may be to cause Squid to prefetch. the whole file. If beyond this 婚庆
# . limit then Squid forwards the Range. request as it is and t.he result<性病>
# is NOT .cached. 建材
#
# . This is to stop a far. ahead range request (lets say start at 17MB).
# from making Squid fet.ch the whole object up to that point b.efore域名
# sendi.ng .anything to the client.教育
#
# A .value of -1 causes Squid to always fetch t.he object from the 美容
# .beginning so that it. may cache the result. (2.0 style)(广告)
#
# . A val.ue of 0 causes Squid to never fetch more than the学习
# . client re.quested. (default).
#
#Default:
# range_offset_limi.t 0 KB.
# TIMEOUTS
# ---------------------------------------------------.--------------.----.--------.
# TAG: connect_timeout . . time-units.
# . Some systems (notabl.y Linux) can not be relied upon to properly投资
# time out connect(2). requests. .Therefore the Squid process[成人用品]
# e.nforces its own timeout on server conne.ctions. This parameter.
# specifies how lon.g to wait for the connect to complete. The..
# . default .is two minutes (120 seconds). 汽车
#
#Default:
# connect_t.imeout 2. minutes 婚庆
#. . TAG: peer_connect_timeout time-units外贸
# . This parameter spec.ifies how long to wait for a pending TCP.
# connection to .a peer c.ache. The default is 30 seconds. You<性病>
# may also set d.ifferent timeout values for individual n.eighbors.
# .with. the 'connect-timeout' option on a 'cache_peer' line. 电子
#
#Default:
# peer_connect_timeout 30 se.co.nds 汽车
# TAG: read_timeout ti..me-units.
# The read_timeout is appl.ied. on server-side connections. After 电子
# each. successful read(), the timeout will be extended by this.投资
# . amount.. If no data is read again after this amount of time,.
# the request i.s aborted and logged with ERR_R.EAD_TIMEOUT. The.
# . default is 15 minut.es.--- 印刷
#
#Default:
# .read_timeout 15 minutes 汽车
# TAG: reques.t_timeout.
# How long to wait f.or an HTTP request after ini.tial电脑
# . connection establ.ishment. 汽车
#
#Default:
# re.quest_time.out 5 minutes 鲜花
# .TAG: persistent_request_t.imeout 美容
# How long to wa.it f.or the next HTTP request on a persistent学习
# connection a.fter t.he previous request completes..
#
#Default:
# per.sistent_request_tim.eout 1 minute.
# TAG: client_li.fetime time.-units 婚庆
# T.he ma.ximum amount of time that a client (browser) is allowed to 健康
# remain connected to t.he cache process. This protects the Cac.he.
# from having a lot of sockets (and .hence file descriptor.s) tied up 建材
# .in. a CLOSE_WAIT state from remote clients that go away without.
# . properly shutting down (either because of a ne.twork failure or健康
#. because o.f a poor client implementation). The default is one 外汇
# . day., 1440 minutes.(广告)
#
# . NOTE: The defa.ult value is intended to be much larger than any.
# . client would ever need to be connec.ted to your cache. You 汽车
# should .probably change client_lifetime only as a .last resort..
# If you seem to have many client connecti.ons tying .up.
# . filedescriptors, we reco.mmend first tuning the read_timeout,电脑
# request_.timeout, persistent_request_ti.meout an.d quick_abort values.学习
#
#Default:
# client._lifetime 1 day外贸
# TAG: half_closed_cl.ient.s 杀毒
# Som.e clients may shutdown the sending sid.e of their TCP 汽车
# connectio.ns, while leaving their re.ceiving sides open. Sometimes.,.
# Squid can not te.ll the difference be.tween a half-closed and a 女人
# fully-closed TCP co.n.nection. By default, half-closed client.
# connections are kept open until a read(2) or w.rite(2.) on the投资
# .socket returns an er.ror. Change this option to 'off' and Squid.
# will immediately. close client connections when. read(2) returns.
# "no .more data to r.ead." 外汇
#
#Default:
# half_closed_clien.ts on 健康
# TAG: pco.nn_timeout( 游戏 )
# Timeout f.or idle persistent connectio.ns to servers and other投资
# proxies...
#
#Default:
#. pconn_time.out 120 seconds 电子
# TAG:. ident_timeout虚拟主机
# Maxi.mum time to wait for. IDENT lookups to complete..
#
# If .this is too high, and you en.abled IDENT lookups from untrusted 乙肝
#. . users, then you might be susceptible to denial-of-servi.ce by having电影
# many ide.nt requests going .at once. 杀毒
#
#Default:
# i.dent_timeout 10. seconds.
#. TAG: shutdown_lifetime time-.units学习
# When SIGTERM or SIGHUP is rec.eived, .the cache is put into 乙肝
# "shutdown p.ending" mode until all active sockets a.re closed.外贸
# This value is the l.ifetime to set for all open .descriptors 杀毒
# during shutdown mode. Any active client.s afte.r this many虚拟主机
# . seconds .will receive a 'timeout' message..
#
#Default:
# shutdown_l.ifetime 30 s.econds学习
#. ACCESS CONTROLS教育
# ----------------.-----------------------------------------------------..--------电脑
# TAG: acl
# Defining .an Acces.s List--------------彩票
#
# acl aclname.. acltype string1 ....
# .acl aclname aclty.pe "file" ... 女人
#
# when using "file", the file sh.ould contain o.ne item per line 女人
#
# acltype is on.e of the types d.escribed below 鲜花
#
# By default, regular expressions ar.e CASE-SENSITIVE. .To make电脑
# . them case-insensitive, use the -i op.tion.--- 印刷
#
# acl .aclname src ip-address/netmask ... (.clients IP address)服务器
# acl aclname src . addr1-addr2/netmask ... (r.ange of addresses).
# acl aclname dst ip-addre.ss/netmask .... (URL host's .IP address) 健康
# acl acl.name myip . ip-address/netm.ask ... (local socket IP address)<性病>
#
# acl aclname srcdom.ain .foo.com. ... # re.verse lookup, client IP服务器
# acl a.clname d.stdomain .f.oo.com ... # Destination server from URL投资
# acl aclname s.rcdom_regex [-i]. xxx ... # regex matching client na.me.
# acl. aclname dstdom_regex [-i] xxx ... .# regex matching server.
# . # For dstdomain and dstdom_reg.ex a reverse lookup. is tried if a IP 美容
# .. # based. URL is used. The name "none" is used if the reverse lookup 电子
# .# fails. 女人
#
# acl aclname time [da.y-a.bbrevs] [h1:m1-h2]学习
# day-abbre.vs: 建材
# . . S - Sunday服务器
# . M - Mond.ay 美容
# . . T - Tuesday 健康
# W -. We.dnesday.
# . H -. Thursday 婚庆
# . . F - Friday.
# . . A - Saturday 美容
# h1:m1 must be less than ..h2:m2域名
# acl aclname url_regex [-i] ^http:// ... # regex matching on whole URL虚拟主机
#. acl aclname urlpa.th_regex [-i] \.gif$ ... # regex ma.tching on URL path 电子
# acl .aclname port . 80 70 21 ...投资
# acl aclnam.e port 0-1024 ... . # ranges allowed.
# acl aclname myport . 3.128 ... . # (local socket TCP port).
# acl acl.name proto HTTP FTP ....--------------彩票
# .acl aclname meth.od GET POST ...投资
# acl aclname .browser [-i] reg.exp ...[成人用品]
# # patte.rn match on User-Agen.t header.
# acl aclnam.e referer_regex [-i]. regexp ...( 游戏 )
# # pattern match. on .Referer header.
# # Referer is high.ly unreliable, so use w.ith care 电子
# . acl aclname ident username ....投资
# acl aclname .ident_regex [-i] patte.rn ... 建材
#. # str.ing match on ident output. 鲜花
# # use REQUIRED to accept any non-.null i.dent..
# acl .aclname src_as . number ...电脑
#. acl aclnam.e dst_as number ...--------------彩票
# # E.xcept. for access control, AS numbers can be used for( 游戏 )
# # routing .of requests to s.pecific caches. Here's an.
# # example for routing all. requests for. AS#1241 and only 婚庆
# #. those to mycache.mydomain.n.et: 杀毒
# . # .acl asexample dst_as 1241 健康
# # cache_pe.er_access mycache.mydoma.in.net allow asexample<性病>
# # c.ache_peer_access mycach.e_mydomain.net deny all.
#
# acl aclname proxy_auth userna.me ....<性病>
# acl aclna.me p.roxy_auth_regex [-i] pattern ....
# # l.ist of. valid usernames.
# . # use RE.QUIRED to accept any valid username..
# #
# . # NOTE.: when a Proxy-Authentication header is sent but it is not 杀毒
# . # needed during ACL checking th.e username is NOT logged
# . # in acces.s.log. 外汇
# #
# . # NOTE: proxy_auth require.s a EXTERNAL authentication program外贸
# . # to ch.eck username/password combinations (see.
# . .# authenticate_program)..
# #
# # WARNING: proxy_auth can't be used in a trans.paren.t proxy. It 建材
# # collides wi.th any authentication done by origin se.rvers.. It may--- 印刷
# . # seem like it works at first, but it does.n't. 美容
#
# acl ..aclname snmp_community string ....
# . # A community str.ing to limit access to your SNMP Agent 乙肝
# # Example.:.
# #
# # . acl snmppublic snmp_co.mmunity public学习
#
# acl ac.lname maxcon.n number[成人用品]
# # This will.. be matched when the client's IP address has学习
# # more than <number>; .HTTP connections establis.hed. 外汇
#
# acl aclname .max_user_ip [-s] numbe.r 外汇
#. # This will ..be matched when the user attempts to log in from more 美容
# # than <number>; differ.ent ip addresses. Th.e authenticate_ip_ttl 建材
# . # parameter controls the timeout on the ip entries..电影
# # If -s is specified. then the limit is strict, denying browsin.g学习
# # from any fu.rther IP add.resses. until the ttl has expired. Without 电子
# # -s Squid will just annoy the user by "randomly". de.ny.ing requests.服务器
# # (the. counter is then reset each time the limit is. r.eached and a.
# # request is de.nied.)<性病>
# .# NOTE: in acceleration mod.e or where there is mesh of child pro.xies,.
# . # clients may appea.r to come from multiple addresses if they are.
# . # go.ing through proxy farms, so a limit of 1 may cause user probl.ems..
#
# . acl aclname req_mime_type mime-ty.pe1 ... 外汇
# # regex match agains the .mime type of the request gen.erated.
# # .by the client. Can be used to detect f.ile upload or some.
#. # types HTTP tunelli.ng requests..
# . # NOTE: This does NOT ma.tch the reply. You cannot use this--- 印刷
# . # to match the returned file ty.pe. 外汇
#
# acl aclname rep_mim.e_type mim.e-type1 ...学习
# # regex match against .the mime type of the reply recieved b.y.
# # squid. Can be used to de.tect file download. or some 汽车
# # types H.TTP tu.nelling requests. 电子
# . # NOTE: This has no effect in http_access ru.les. It only has 婚庆
# # effect .in rules that affect the r.eply data stream such as( 游戏 )
# . # http._reply_access. 电子
#
# . acl acl_name external .class_name [arguments...]健康
# # external ACL .lookup via a helper c.lass defined by the教育
# . # external_.acl_type directive. 乙肝
#
#Examples:
#acl myexam.ple dst_as 12.41<性病>
#acl pa.ssword proxy_auth R.EQUIRED.
#acl fileupload req_mime_type -i ^.multipart/form-dat.a$学习
#acl javascript rep_mime_typ.e -i ^application/x-javascript.$--- 印刷
#
#Recommended minimum co.nf.iguration: 电子
acl all src 0.0.0.0/0..0.0..0 外汇
acl manager proto cache_obj.e.ct电脑
acl localhost s.rc 127..0.0.1/255.255.255.255.
acl to_l.ocalhost dst. 127.0.0.0/8 外汇
acl SSL_po.r.ts port 443 563.
acl Safe_.ports port 80. # http.
acl Safe_ports port 21. # ft.p<性病>
acl Safe_ports port 443. 563 .# https, snews.
acl Safe_ports port 70 . . # gopher<性病>
acl Safe_ports port 2.10 . # wais( 游戏 )
acl Safe_ports port 1025-65535 # unregistere..d ports 美容
acl Safe_po.rts port 280 # h.ttp-mgmt.
acl Safe_port.s port 4.88 # gss-http.
acl Safe_port.s po.rt 591 # filemaker外贸
acl Safe_ports po.rt 777 . # multiling http电影
acl CONNE.CT m.ethod CONNECT.
# TAG: http_acce.ss 女人
# Allow.ing or Denying access based on defined acce.ss lists--------------彩票
#
# Acce.ss to th.e HTTP port: 乙肝
# . . http_access allow|deny [!]aclname ...(广告)
#
# NOTE on def.aul.t values:健康
#
# If there are no "a.ccess" lines present, the d.efault is to deny学习
# the r.equest.服务器
#
# . If none of the "access" lines cause a match, the d.efault is the--------------彩票
# . opposite of the .last line in the list. If the last line was.
# deny, then the def.ault is allow. Conversely, if the. last line--------------彩票
# is allo.w, the default will be deny. For these re.asons, it is a
# . good idea to have. an "deny all" or "allow all" entry at the end 婚庆
# of y.our access lists to avoid potential .confusion..
#
#Default:
# http._access deny all 外汇
#
#Recommended minimum co.nfigurat.ion:服务器
#
# Only a.ll.ow cachemgr access from localhost.
http_acc.ess allow mana.ger localhost 建材
http_access deny mana.ger 建材
# Deny requests t.o unkno.wn ports 女人
htt.p_access deny !Safe_p.orts 鲜花
# Deny CONNECT t.o other than SSL. ports投资
http_a.ccess deny CONNECT. !SSL_ports 乙肝
#
# We strongly recommend to uncomment. the following to protect inn.ocent虚拟主机
# web applications running on the proxy ser.ver who think that .the only 杀毒
# one who can access services. on ."localhost" is a local user 建材
#http_access deny to_.localho.st 健康
#
# INSERT YOUR OWN R.ULE.(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS.
# Exampe rule allowing access .from your local networks. Adap.t( 游戏 )
# to list your (internal) IP networks f.rom wh.ere browsing should( 游戏 )
# be allowed
#acl our_netw.orks src 192..168.1.0/24 192.168.2.0/24健康
#http_acces.s .allow our_networks(广告)
# And finally deny all .other ac.cess to this proxy学习
http_access allow l.o.calhost.
http_access allow all.服务器
# TAG: http_reply_ac.cess[成人用品]
#. Allow replies. to client req.uests. This is complementary to http_access..
#
# htt.p_.reply_access allow|deny [!] aclname ...--- 印刷
#
# NOTE: if the.re are no access lines present, t.he default is. to allow电脑
# . all replies 健康
#
# If no.ne of the access lines cause a match, then .the opposit.e of the
# last line will apply. Thus it is good practice to end the. ru.les 建材
# with a.n "allow all" or "deny all" e.ntry.<性病>
#
#Default:
# http_r.eply_a.ccess allow all--- 印刷
#
#Recommended minimum.. configuration: 鲜花
#
#. Insert you.r own rules here. 婚庆
#
#
# and fina.lly allow by .default 女人
ht..tp_reply_access allow all
# TAG: ic.p_access.
# Allowing or Deny.ing acc.ess to the ICP port based on defined.
# . access lists服务器
#
# . icp_acces.s allow|deny [!]aclname ....
#
#. See ht.tp_access for details 鲜花
#
#Default:
# icp_.access allow all服务器
#
#Allow ICP queries from. everyo.ne.
icp_acces.s allow all外贸
# . TAG: miss_access.
# Use to force. your neighbors to use you as a sibl.ing instead of 鲜花
# . a parent. For exa.mple:.
#
# acl localclients s.r.c 172.16.0.0/16 女人
# . miss_access allow local.clients电脑
# .miss_access deny !localcl.ients 汽车
#
# This mea.ns that. only your local clients are allowed to fetch学习
# MISSES and all other clients can only fe.tch HIT.S. 外汇
#
# By default, allow al.l clients who passed the http_acces.s rules.
# . to fetc.h MISSES from us. 健康
#
#Defau.lt setting:.
# m.iss_access allow all 外汇
# TAG: cache_peer_a.ccess 建材
# Similar to 'cache_peer_domain' .but provides m.ore flexibility by 建材
# using ACL elemen.t.s.外贸
#
# cache_peer_ac.cess cache-host allow|den.y [!]aclname ....
#
# The syntax is identical .to 'http_access' and the other l.ists of 女人
# ACL elements. See the comments for 'ht.tp_access' .below, or 婚庆
# the Squid FAQ (
http://www.squid-cache.org/FAQ/FAQ-10.html).电影
#
#Default:
# none
# T.AG: ident_loo.kup_access.
# . A list of ACL elements which, if matched, cause .an ident[成人用品]
# (RFC 931) look.up to be perfo.rmed for this request. For 外汇
# example, you m.ight choose to always perform ide.nt lookups虚拟主机
# f.or .your main multi-us 女人
