#Examples:
#acl myexample ds.t_as 12.41域名
#acl p.assword proxy_a.uth REQUIRED教育
#acl fileupload re.q_mime_type -i ^.multipart/form-data$外贸
#acl javascript rep_mime_type -i ^a.pplicat.ion/x-javascript$ 外汇
#
#Recommende.d minimum configura.tion:.
acl all sr.c 0.0.0.0./0.0.0.0 杀毒
a.cl manager proto .cache_object外贸
acl localhost src 127.0.0.1./2.55.255.255.255--- 印刷
acl t.o_localhost dst 127.0.0..0/8外贸
acl SS.L_ports port. 443 563 女人
acl Safe_ports port 80 . #. http<性病>
acl Safe_ports port 21 .. # ftp健康
acl Safe_ports port 443 563. .# https, snews服务器
acl Safe_por.ts port 70 . # gopher外贸
acl Safe_ports port 210 . . # wais外贸
acl Safe_ports port 10.25-65535 # unr.egistered ports电影
acl Safe_ports port 280 . # http-mg.mt电脑
acl Safe_ports port 488 . . # gss-http投资
acl Safe_ports por.t 591 . # filemaker[成人用品]
a.cl Safe_ports port 777 # mul.tiling http.
acl CONNECT method C.ONNEC.T 婚庆
# TAG: http_ac.cess 婚庆
# Allowing .or Denying access based on defi.ned access lists 乙肝
#
# .Access to t.he HTTP port:.
# . http_access a.llow|deny [!]aclname ... 美容
#
# NOTE on default val..ues: 建材
#
# . If there are no "a.ccess" lines present, the default is to deny电脑
# . the request. 鲜花
#
# If none of the "access" li.nes cause a match, the. default is the投资
# opposite of the l.ast line in the list. If the last .line was域名
# deny, the.n the .default is allow. Conversely, if the last line 外汇
# . is allow, the default will be deny. For these re.asons, it is a[成人用品]
# good idea to .have an "deny all" or "allow .all" entry at the end.
# of your. access lists to avoid potential confu.sion.域名
#
#Default:
# htt.p_access deny all 乙肝
#
#Recommend.ed minimum configu.ration:外贸
#
# Only allow cachemgr .access from l.ocalhost 电子
http_access allow. manag.er localhost域名
http_access de.ny manager 汽车
# .Deny requests to unknown. ports[成人用品]
http_.access. deny !Safe_ports.
# Deny CONNECT to. other than .SSL ports域名
htt.p_access deny CONNECT !SSL_por.ts.
#
# We stron.gly recommend to uncomment the following to pro.tect innocent.
# web app.lications running on the proxy server. who think that the only.
# one who can access services. on "localhost" i.s a local user电脑
#http_acce.ss deny to_localho.st 乙肝
#
# INSERT YOUR OWN RULE(S). HERE TO ALLOW ACCESS FROM YOUR CLIEN.TS( 游戏 )
# Ex.ampe rule allowing access from your local networks. A.dapt学习
#. .to list your (internal) IP networks from where browsing should.
# be allowed
#acl our_networks sr.c 192.168.1.0./24 192.168.2.0/24服务器
#.http_access allow our_netw.orks学习
# And finally deny all other ac.cess to this pro.xy.
htt.p_access allow localh.ost 健康
htt.p_access allow all.
# TAG: http_reply_access.(广告)
# Allow replies. to client requests. This. is .complementary to http_access.外贸
#
# http_r.ep.ly_access allow|deny [!] aclname ... 建材
#
# NOT.E: if there are no access lin.e.s present, the default is to allow( 游戏 )
# all r.eplies.
#
# If none. of the access lines cause a match, then t.h.e opposite of the
# last li.ne will apply. Thus it is goo.d practice to end the rules电影
# with. an "allow all." or "deny all" entry. 外汇
#
#Default:
# http_reply_acce.ss .allow all 外汇
#
#Recommended minimum co.nfiguration:. 美容
#
# Insert yo.ur own rules he.re.学习
#
#
# and finally a.llo.w by default.
http._reply_acce.ss allow all 外汇
# TAG: icp_ac.cess.
# Allowing or Denying access to. the .ICP port based on defined( 游戏 )
# access list.s.
#
# ic.p_access allow|deny [!].aclname ...域名
#
# See h.ttp_acc.ess for details( 游戏 )
#
#Default:
# icp_.access allow all.
#
#Allow .ICP queries. from everyone域名
icp_access allow al.l电影
# TAG: miss._access.
# . Use to force. your neighbors to use you as a sibling instead of.
# . a parent. For examp.le:投资
#
# . acl localc.lients src 172.16.0.0/16域名
# . miss_access allow. localclients 健康
# . miss_access deny .!localclients 汽车
#
# This means that only your local cl.ie.nts are allowed to fetch健康
# . MISSES and all other clients can only fetc.h HITS.--------------彩票
#
# By default, allow al.l clien.ts who passed the http_access rules 女人
#. to fetch. MISSES from us.虚拟主机
#
#Default setting:.电脑
# miss_access allow a.ll.
# TAG: cache._peer_access.
# Similar to 'cache_peer_domain' but .provi.des more flexibility by电脑
# usi.ng ACL eleme.nts. 杀毒
#
# cache_peer_acc.ess cache-host allow|deny [!]aclname .... 女人
#
# The synta.x is identical to 'http_acces.s' and the other lists of[成人用品]
# ACL elements. S.ee the comments for 'http_access'. below, or( 游戏 )
# the Squid FAQ (
http://www.squid-cache.org/FAQ/FAQ-10.html).[成人用品]
#
#Default:
# none
# TAG: ident_lookup_acces..s 建材
# A list of ACL el.ements which, if matched, cause an id.ent健康
# (RFC 931) lookup to. be perfo.rmed for this request. For.
# . example, you might choose to always. perform ident lookups 健康
# for. your main multi-user Unix boxes, but not .for your Macs 婚庆
# an.d PCs. By default., ident lookups are not performed for.
# . any requests..
#
# To enable ident l.ookups for spec.ific client addresses, you<性病>
# can fol.low this e.xample:.
#
# . acl iden.t_aware_hosts src 198.168.1.0/255.255.255.0 乙肝
# ident_lookup_ac.cess allow iden.t_aware_hosts.
# . ident_lookup._access deny all域名
#
# Only s.rc type ACL checks are fully su.pported. A src_domain学习
# ACL m.ight work at times, but it will not always pro.vide 汽车
# . the co.rrect result. 汽车
#
#Default:
# ident_looku.p_access deny .all.
# .TAG: tcp_outgoing_tos 电子
# . Allows you to select a T.OS/Diffserv value to mark outgoing 婚庆
# connections w.ith, based on the username or sourc.e address( 游戏 )
# . making the request..教育
#
# tcp_ou.tg.oing_tos ds-field [!]aclname ...(广告)
#
# Example where norm.al_service_net uses the TOS value. 0x00.
# .and normal_service._net uses 0x20.
#
# acl normal_ser.vice_net src 10..0.0.0/255.255.255.0电脑
# . ac.l good_service_net src 10.0.1.0/255.255.255.0教育
# tc.p_outgoing_tos 0x00 normal_servi.ce_net 0x00.
# . . tcp_outgoing_tos 0x20 good_service_net电脑
#
# . TOS/DSCP values really only have .lo.cal significance - so you should虚拟主机
# know what you're s.pecifying.. For more, see RFC 2474 鲜花
#
# The TOS/DSCP byte must be exactly that .- a byte, value . 0 - 25.5, or服务器
# "defaul.t" to use whatever default your host has..健康
#
#. Proc.essing proceeds in the .order specified, and stops at first fully投资
# . matching line.学习
#
#Default:
# none
#. TAG: tcp_outgoing_addr.ess 美容
# Allows you. to map requests .to different outgoing IP addresses电影
# .. based on the username or sourceaddress of the user making--- 印刷
# the reque.st. 汽车
#
# . tcp_outgoing_.address ipaddr [[!]aclname] ... 建材
#
# Example where requests fr.om 10..0.0.0/24 will be forwareded.
# with source addr.ess 10.1.0.1, 10.0.2.0/24 forwarded .with 女人
# source address 10.1.0.2 and the rest will .be forwarde.d with外贸
# so.urce address 10.1..0.3..
#
# acl normal_ser.vice_net src 1.0.0.0.0/255.255.255.0.
# acl .go.od_service_net src 10.0.1.0/255.255.255.0 外汇
# . tcp_outgoing_address 10.0.0.1 .normal_service_net.
# tcp_outgoing_address 1.0.0.0.2 good_service_n.et 婚庆
# . tcp_o.utgoing_address 10.0.0.3 电子
#
# Processing pr.oceeds in the order specified, an.d stops at .first fully.
#. matching line. 女人
#
#Default:
# none
# TAG: reply_body_max_size byte.s allow|deny acl acl....投资
# Th.is option .specifies the maximum size of a reply body. It.
# can be use.d to prevent users f.rom downloading very large files, 婚庆
# such. as MP3's and movies. When th.e reply headers are recieved,投资
# . the reply_body_m.ax_size. lines are processed, and the first line with电脑
# . a result of "allow" is used as the maxi.mum body size for .this reply..
# . This size is .then checked twice. First when we get the reply headers,.服务器
# we ch.eck the content-le.ngth value. If .the content length value exists--- 印刷
# . and is larger than the allowed size, the requ.est is denied and the( 游戏 )
# . . user receives an error message that says "the request or reply[成人用品]
#. is too large." If there is no content-length., and the reply 婚庆
# size excee.ds this limit, the client's connection is just. closed.
# an.d they will recei.ve a partial reply.域名
#
# . WARNING: downstream caches probably can not detect a. partial reply 健康
# if .there is no content-length head.er, so they will cache 外汇
# partial responses and. give them out as hits. . You should NOT 建材
# use this option if you have downstream ca..ches. 汽车
#
# WARNING: A maximum size larger than th.e. size of squid's error messag.es.
# will cause an infinite loop and crash sq.uid. Ensure t.hat the small.est( 游戏 )
# non-zero. value you use is .greater that. the maximum header size plus投资
# the size of your largest e.rror pag.e..
#
# If you set this parameter t.o zero (the default), .there will be 乙肝
# no lim.it imposed.. 外汇
#
#Default:
# reply_body_m.a.x_size 0 allow all--------------彩票
# ADMINIST.RATIV.E PARAMETERS.
# ---------------------.-------------------.------.---------------------------------------------彩票
# TAG:. cache_mgr--- 印刷
# .Email-address of local cache manager who. will receive服务器
# mail if the cache dies. The. d.efault is "webmaster."健康
#cache_mgr r.oot.
#
#Default:
# cache_.mgr root.
# TAG.: cac.he_effective_user.
# TAG: cache_effec.tive._group 女人
#
# If the ca.che is run as root, it will .change its effective/real电影
# U.ID/GID to the UID/GID specif.ied below. The default is to教育
# change to UID to. squid and GID. to the default group of squid.域名
#
#. .If Squid is not started as root, the default is to keep the.
# current .UID/GID, and only the GID can be ch.anged to any of 杀毒
# . the g.roups the user starting Squid is member of. Note that if(广告)
# Squid is not started as .ro.ot then you cannot set http_port to( 游戏 )
# . a valu.e lower than 1024..
#
#cache_eff.ective_user. squid外贸
#.cache_effective_group squi.d.
#
#Default:
# ca.ch.e_effective_user squid--------------彩票
# ca.che_ef.fective_group squid.
# TAG: visib.le_hostname.
# If you want to present. a special hostname in error. messages, etc, 电子
# then define this. Otherwise, .the return v.alue of gethostname().
# will be used. If you have multiple caches in a c.lu.ster and<性病>
# g.et errors about IP-forwar.ding you must. set them to have individual 鲜花
# na.mes with this setti.ng.健康
#
#Default:
# none
# TAG: unique_ho.stname 汽车
# If you want to have multiple machines with the ..same.
# 'visible_host.nam.e' then you must give each machine a different外贸
# . 'unique_hostname' so that forwarding loops can .be detected.教育
#
#Default:
# none
# TAG: hostname_aliases.--------------彩票
# A list of o.ther DNS na.mes that your cache has.--------------彩票
#
#Default:
# none
#. O.PTIONS FOR THE CACHE REGISTRATION SERVICE( 游戏 )
# -.--------------------.------------------------------------------------.--------服务器
#
# T.his section contains parameters. for the (optional) cache<性病>
# announcemen.t service. This service is provi.ded to help健康
# cache adm.inistrat.ors locate one another in order to join or服务器
# . .create cache hierarchies..
#
# An 'announceme.nt' message is sent (via. UDP) to the registration--- 印刷
# service by Sq.uid. By default, the announcement message i.s NOT[成人用品]
# SEN.T unless. you enable it with 'announce_period' below..
#
# . The announcement messag.e includes your hostname, plus the域名
# fo.llowing informa.tion from this configuration file:.
#
# . http_por.t.
# icp_po.rt域名
# . cach.e_mgr 杀毒
#
# All current information. is processed regu.larly and made.
# available on the Web at
http://www.ircache.net/Cache/Tracker/. 外汇
# TAG: announce._period.
# This is how .frequently to send cache announce.ments. The.
# . . default is `0' which disables sending the announcement 健康
# . messages.域名
#
# To enable announcing yo.u.r cache, just uncomment the line 汽车
#. below..
#
#Default:
# announce._period 0.
#
#To enable annou.ncing your cache, just uncomment the line belo.w..
#announce_p.eriod 1 day.
# TAG: announce_ho.st投资
# TAG: announ.ce_file.
# TA.G: announce_port<性病>
# announce_host and announc.e_port set t.he hostname and port外贸
#. number where the registration message will .be sent.域名
#
# Hostna.me will default to. 'tracker.ircache.net' and port will.
# default d.efault to 3131. .If the 'filename' argument is given,外贸
# the contents of that .file will be included in. the announce外贸
# m.essage.外贸
#
#Default:
# announce_.host .tracker.ircache.net( 游戏 )
# an.nounce_port 3131[成人用品]
# HTT.PD-ACCELE.RATOR OPTIONS健康
# -----.-----------------.------------------.-------------------------------------学习
# TAG: httpd_acc.el_host--------------彩票
# TA.G: httpd_accel_port.
# If you want to run Squid as an .httpd accel.erator, define the--------------彩票
# host name and port numbe.r where the real HTTP server .is.电脑
#
# If you want IP based virtual host supp.ort then specify t.he教育
# . hostname as "virtual". Th.is will make Squid use the IP address--------------彩票
# where it accepted the request .as hos.tname in the URL..
#
# . If you want virtual port support then specify the port as ".0".电脑
#
# NOTE: enabling httpd_accel_host disabl.es proxy-cach.ing and教育
# ICP. If you wan.t these features en.abled also, then set 鲜花
# the 'httpd_accel_with_proxy'. opt.ion.电脑
#
#Default:
# httpd_accel_por.t 80教育
# TAG.: httpd_accel_sing.le_host on|off 鲜花
# If you are r.unning Squid as an acce.lerator and have a single .backend 健康
# server then set this to on. This cau.ses Squid to .forw.ard the request外贸
# to this serv.er irregardles o.f what any redirectors or Host headers 乙肝
# says.
#
# Leave this a.t off if you ha.ve multiple backend servers, and use a[成人用品]
# redirector (or host table or private DNS) t..o map. the requests to the.
# appropriate backe.nd s.ervers. Note that the mapping needs to be a[成人用品]
# 1-1 mapp.ing between r.equested and backend (from redirector) domain--- 印刷
# names or caching will fail, as caci.ng is. performed using the.
#. URL return.ed from the redirector. 健康
#
# See also redi.rect_rew.rites_host_header.服务器
#
#Default:
# httpd_acc.el_sing.le_host off( 游戏 )
# T.AG: httpd_accel._with_proxy on|off.
# If yo.u want to use Squid as both a local h.ttpd accelerator教育
#. and as a proxy, chan.ge this to 'on'. Note however that your.
# proxy users. may have trouble to reac.h the accelerated domains.
# unless their br.owsers are configured not to use this. proxy for--- 印刷
# . those d.omains (for example via the no_proxy browser configuration.
# setting). 建材
#
#Default:
# httpd_acc.el_wi.th_proxy off.
# TAG: httpd_ac.cel_us.es_host_header on|off 美容
# HTTP/1.1 requests includ.e a Host: header which is. basically the 女人
# hostname from the URL. The Host: header is used for domain. ba.sed 乙肝
# virutal hosts. If your accelerator needs. to provi.de domain based电影
# virtual hosts. on the same IP address then you will need t.o. turn this投资
# on.
#
# Note that Squid does. NOT check the v.alue of the Host header. matches 建材
# any of your accelerated server, so it may open a. big securi.ty hole--- 印刷
# u.nless you take care to set up access controls. proper. .We recommend教育
# that this option remain disable.d .unless you are sure of what you[成人用品]
# . are doing.<性病>
#
# However, you will need .to enable this option if you run Squi.d 外汇
# as a tran.sparent proxy. Otherwise, virtual se.rvers which教育
# . require the Host: .header will not be properly cached. 汽车
#
#Default:
# ht.tpd_accel_u.ses_host_header off.
# MISCEL.LANEOUS服务器
# --------------------.-.------------------------------------------------------.----------------彩票
# TAG: dns_testname.s 鲜花
#. The DNS. tests exit as so.on as the first site is successfully looked up 汽车
#
# . This test can be disabled with the -.D command line option.[成人用品]
#
#Default:
# dns_testnames ne.tscape.com internic.net nlanr.net. microsoft.com健康
# TAG: l.ogfile_rotate.
# . Specifies the number of logfile .rotations to make when you电影
#. t.ype 'squid -k rotate'. The default is 10, which will rotate.
# with extensions .0 through 9. Setting logfile_rotate to 0 w.ill.
#. disable the rotation, but the .logfiles are still closed and 女人
# .re-opened. .This will enable you to rename the logfiles 电子
# .yourself just before sen.ding the rotate signal.学习
#
# Note, .the 'squid -k rotate' command norm.ally sends a USR1.
# signal to the running squid process. In certain s.ituatio.ns 外汇
# (e.g. on Linux with Async .I/O), USR1 is used for other..
# purposes, so -k rotate uses another signa.l.. It is best to get.
# in the. habit of u.sing 'squid -k rotate' instead of 'kill -USR1[成人用品]
# . <pid>;'.<性病>
#
#logfile_rotate. 0 健康
#
#Default:
#. logfile_rotate 0.
# TAG: app.end_domain 电子
# Appends local dom.ain name to hostnames wi.thout any dots in[成人用品]
# them. append_d.omain must .begin with a period.
#
# Be. warned that there today is Internet names w.ith no dots in 婚庆
# them using only top.-domain name.s, so setting this may<性病>
# cause ..some Internet sites to become unavailable.健康
#
#Example:
# append_d.omain ..yourdomain.com<性病>
#
#Default:
# none
# TAG: tcp_recv_bufsize. (byt.es).
# Size of receiv.e buffe.r to set for TCP sockets. Probably just电影
# . as .easy to change your kernel's default. Set to zero to use[成人用品]
# the defaul.t buf.fer size. 电子
#
#Default:
#. tcp_recv_bufsize 0 .bytes.
# TAG: err_html._text.
# HTML text to include in error messages. .Make this a "mail.to"学习
# URL to your. admi.n address, or maybe just a link to your 美容
# organizations Web. p.age.(广告)
#
# . To include this in your error messa.ges, you must rewrite 汽车
# the error template files (found in the "errors" dire..ctory). 建材
# Wherever you want the ..'err_html_text' line to appear,学习
# insert a %L tag in the e.rror template f.ile..
#
#Default:
# none
# TAG: d.eny_info虚拟主机
# . Usage: deny_info err_page_name. acl 鲜花
# Example: deny_..info ERR_CUSTOM_ACCESS_DENIED bad_guys<性病>
#
# This can be used to return a ERR_ page for req.ue.sts which[成人用品]
# do not pa.ss the 'http_acces.s' rules. A single ACL will cause.
# the http_access check to fail. If ..a 'deny_info' line exists学习
# . . for that ACL then Squid returns a corresponding error page.虚拟主机
#
# You m.ay use ERR_ pages that come with Squid or crea.t.e your own pages 杀毒
# and put them into the co.nfigured errors/ d.irectory. 杀毒
#
# . Alternatively you can tell .Squid to reset the TCP connection.
# by specify.ing TCP_.RESET.外贸
#
#Default:
# none
# TAG: memory_pools .on|off..
# If set., Squid will keep po.ols of allocated (but unused) memory--------------彩票
# available for future use. If memory i.s a premium on. your--------------彩票
# syst.em and you believe your mall.oc library outperforms Squid( 游戏 )
# .r.outines, disable this.[成人用品]
#
#Default:
#. memory_pools on外贸
#. TAG: m.emory_pools_limit (bytes)--------------彩票
# Used only w.ith memory_po.ols on:( 游戏 )
# m.emory_pools_limit 50 M.B.
#
# If set to. a non-zero value, Squid will keep at most the specifie.d[成人用品]
# limit of allocated (but unused) memor.y in mem.ory pools. All free() 建材
# requests that exceed this l.imit will be han.dled by your malloc.
# library. Squ.id does not pre-allocate any me.mory, just safe-keeps--------------彩票
# objects th.at otherwise. would be free()d. Thus, it is safe to set电脑
# memory_p.ools_limit to .a reasonably high value even if your.
# configurat.i.on will use less memory. 美容
#
# . If. not set (default) or set to zero, Squid will keep all memory it 杀毒
# can. That is, there wil.l be no limit on .the total amount of memory健康
# . used for safe.-keeping. 杀毒
#
# . . To disable memory allocation optimization, do not set电影
# memory_pools_limit to 0. S.et. memory_pools to "off" instead..
#
# An overhead .for maintaining memory pools is not taken int.o account.
# when the limit is checked. This overhead is cl.os.e to four byt.es per学习
# object kept. Ho.wever, pools may actuall.y _save_ memory because of.
#. reduced memory thrashing in your malloc libr.ary. 乙肝
#
#Default:
# none
# TAG: forwar.ded_for . on|off 婚庆
# If set, Squid will include. your system's IP addre.ss or name.
# in the HTTP requests it forwards. By. defaul.t it looks like 外汇
# this:
#
#. X-Forwarded-For: 192..1.2.3
#
# If you disable this, it will appear a..s电脑
#
# . X-Forwar.ded-For: unknown外贸
#
#Default:
# forwarded_for. on健康
# TAG: log_icp_queries . on|off. 鲜花
#. If set, ICP queries are logged to access.log. You may w.ish投资
# .do disable this if your ICP load is. VERY high to speed things 建材
# up or to simplify lo.g an.alysis.外贸
#
#Default:
# lo.g_icp_queries on服务器
# TAG:.. icp_hit_stale on|off 外汇
# . If yo.u want to return ICP_HIT for stale cache objects, set this.
# option to 'on'. If you have sibling relationships with. cach.es.
# . i.n other administrative dom.ains, this should be 'off'. If you only.
# h.ave sibling relationships with caches under y.our control, then.
# . it is probably .okay to set this to 'on'. 鲜花
# If set to. 'on', then y.our siblings .should use the option "allow-miss".
# on th.eir cache_peer lines for connecti.ng to you.健康
#
#Default:
# icp_hit_stal.e off 杀毒
# TAG: minimu.m_direct_ho.ps.
# If using the ICMP pi.nging stuff,. do direct fetches for sites[成人用品]
# which. are no more than this many hops away...
#
#Default:
# minimum_direct_h.ops 4<性病>
# TAG: minimum_dir.ec.t_rtt--- 印刷
# If using. the IC.MP pinging stuff, do direct fetches for sites.
#. which are no more than this many rtt millise.conds away..
#
#Default:
# minimum_direct_rtt 40.0.
# TAG: cachemg.r_passwd( 游戏 )
# . S.pecify passwords for cachemgr operations. 美容
#
# Usage: cachemgr_passwd password action act.ion ....投资
#
# . Some. valid actions are (see cache manager menu for a full list):.
# 5.min.
# . 60min 外汇
# asnd.b 杀毒
# . . authenticator.
# . cbdata 鲜花
# .client._list 乙肝
# comm_.in.coming.
# . config *.
# . counters 女人
# . delay 婚庆
# . .digest_stats.
# . dns 外汇
# even.ts.
# . filedesc.riptors 女人
# . . fqdncache.
# hist.o.grams域名
# . .http_headers.
# . info.
# . io.
# . ipcache.
# .mem<性病>
# . menu<性病>
# . netdb<性病>
# . . non_peers--- 印刷
#. objects电脑
# . pconn.
# . peer_se.lect教育
# . . redirector--- 印刷
# refre.sh( 游戏 )
# . server_lis.t投资
# .shutdown. *(广告)
# . . store_digest[成人用品]
# . storedir 电子
# . utiliz.ation[成人用品]
# . via_header.s.
# vm_.obj.ects--------------彩票
#
# * In.dicates actions wh.ich will not be performed without a电脑
# valid password, others can be .per.formed if not listed here.<性病>
#
# .. To disable an action, set the password to "disable".外贸
# To all.ow performing .an action without a password, set the 汽车
# pa.ssword to "no.ne". 美容
#
# Us.e the key.word "all" to set the same password for all actions.外贸
#
#Example:
# .cachemgr_passwd secret s.hutdown 建材
# cachemgr_passwd lesssssssec.ret info. stats/objects.
# cachemgr_passwd. disable al.l 电子
#
#Default:
# none
# TAG: .store_avg_obj.ect_size (kbytes).
# Average object size, used to e.stimate numbe.r of objects your 杀毒
# . cache can hold. See doc/Release-Not.es-1.1.txt. The default is教育
# 13. KB..
#
#Default:
#. store._avg_object_size 13 KB<性病>
#. TAG: store_objects_per_.bucket教育
# Targ.et number .of objects per bucket in the store hash table.--- 印刷
# Lowering th.is value increases the total number of bu.ckets and 建材
# also the storage main.tenance rate. The defaul.t is 50.教育
#
#Default:
# stor.e_objects_p.er_bucket 20投资
# TAG: client_.db . on|off 汽车
# . If you want to dis.able collecting per-client statistics, then( 游戏 )
# tur.n off cli.ent_db here.--------------彩票
#
#Default:
# client_db on
#. TAG: netdb_low.
# TAG: ne.tdb_high<性病>
# . The low and hi.gh water marks for the ICMP measurement.
# database. These a.re counts, not percents. The. defaults are 外汇
# 900 and 1000. When .the high water mar.k is reached, database 鲜花
# entries will b.e deleted until the low mark is. reached.外贸
#
#Default:
# netdb_low .900 美容
# netdb_high. 1000健康
#. TAG: netdb_ping_period.
# The. minimum period for measuring a site. There will b.e at电脑
# least this much .delay between successive pings to the sa.me 汽车
# network. The de.fault is five mi.nutes.投资
#
#Default:
# n.etdb_ping_period 5 minutes..
# . TAG: query_i.cmp on|off电影
# . If you want to. ask your peers to include ICMP data in their ICP 鲜花
# re.plies, enable this opt.ion.学习
#
# . If your peer has configured Squid (during compilation) wi.th 婚庆
# . '--ena.ble-icmp' then that peer will send ICMP ping.s to origin server 乙肝
# sites of the URLs .it r.eceives. If you enable this option then the.
# ICP replies from that pee.r will in.clude t.he ICMP data (if available).学习
# Then, .when .choosing a pare.nt cache, Squid will choose the parent with.
# the minimal RTT to th.e origin server. When this happens, th.e 婚庆
# hierarchy field of .the access.log .will be 乙肝
# . "CLOSEST_PARENT_MISS". Thi.s option is off by default.教育
#
#Default:
# q.uery_icmp off电影
# TA.G: test_r.eachability on|off--------------彩票
# . When this is 'on', ICP MISS replies will be ICP_MISS_NOFETC.H.
# .instead of ICP_MISS if the target hos.t is NOT in the ICMP( 游戏 )
# . database, o.r has a zero RTT..
#
#Default:
# te.st_reachability off.
# TA.G: buffered_lo.gs on|off<性病>
# cache.log log file is written with stdio .functions,. and as such--------------彩票
# it can be buffered or unbuffered. By. defau.lt it will be unbuffered.. 鲜花
# Buffering it can speed. up the writi.ng slightly (though you are(广告)
# unlikel.y to need to worry unless you run with tons. of debugging教育
# enabled in wh.ich case performance will su.ffer badly anyway..).[成人用品]
#
#Default:
# b.uffered_logs off学习
# TAG: reload._into_ims. on|off.
# When you. enable this option, client no-cac.he or ``reload''电脑
# requests will be chan.ged to I.f-Modified-Since requests.服务器
# . Doing this VIOLATES the HTTP. standard. Enabling this(广告)
# . feature could make you liable for problems .which it<性病>
#. causes..
#
# see also refre.sh_pattern for a m.ore selective approach.--- 印刷
#
#Default:
# reload_into._ims off.
# TAG: a.lways_direct.
# . Usage: always_direct allow|deny [!]ac.lname ....
#
# . Here you can use ACL elements to specify requests which shou.ld(广告)
# ALWAYS be forwarded directly to origin .se.rvers. For example,域名
# t.o always directly for.ward requests for local servers use电脑
# some.thing like:.
#
# . acl local-servers .dstdomain my.domain.net学习
# . . always_direct allow local-servers<性病>
#
# . . To always forward FTP requests directly, use电影
#
# . acl FTP pro.to FTP.
#. always_direct. allow FTP外贸
#
# NOTE: There is a simila.r, but opposite. option named.
# . 'never_direct'. You need to be aware .that "always_direct deny--- 印刷
# foo" is NOT. t.he same thing as "never_direct allow foo". You.
# may need to use a deny rule to .exclude a more-speci.fic case of 健康
# . some o.ther rule. Example: 建材
#
# acl local-external dstd.omain external.foo.n.et服务器
# . acl local-servers dstdomain .fo.o.net 女人
# always_dir.ect deny local-ext.ernal.
# . alw.ays_direct allow local-servers健康
#
# This option .replaces so.me v1.1 options such as local_domain电影
# . and local_ip..
#
#Default:
# none
# TAG: never_dir.ect(广告)
# . . Usage: never_direct allow|deny [!]aclname ....
#
# never_dire..ct is the opposite of always_direct. Please read 杀毒
# the description for. always_direct if you have. not already..
#
# . With. 'never_direct' you can use ACL elements to specify--- 印刷
# reques.ts .which should NEVER be forwarded directly to origin 美容
# servers. For example, to force the use of a pr.oxy .for all投资
# requests, except those in yo.ur local domain us.e something like:<性病>
#
# . . acl local-servers dstdomain .foo.net
# acl all. src 0.0.0.0/0..0.0.0 杀毒
# . never_direct d.eny local-servers 电子
# .never_d.irect allow all 美容
#
# or if squid is inside a firewall and there. is l.ocal intranet 女人
# servers. inside the firew.all then use something like:投资
#
# acl local-intranet dstdo.main .foo.n.et教育
# . acl lo.cal-external dstdomain external.foo.net.
#. always_direct. deny local-external( 游戏 )
#. . always_direct allow local-intranet域名
# . .never_direct allow all.
#
# This option replaces some v1.1 options such .as in.side_firewall 美容
# and firewall_.ip.电影
#
#Default:
# none
# TAG: header_ac.cess--- 印刷
# . Usage: header_access header_name allow|deny [.!]aclname ....
#
# W.ARNING: Doing this VIOLATES the HTTP standard. E.nabling虚拟主机
# . this feature. could make you liable for problems which it[成人用品]
# .causes.教育
#
#. This option replaces the old 'ano.nymize_headers' and the服务器
# . older 'http_anonymizer' option with something that is. much.
# more conf.igurable. This new method cre.ates a list of ACLs.
# fo.r each header,. allowing you very fine-tuned header教育
# ma.ngling.虚拟主机
#
# Y.ou can only. specify known headers for the header name.外贸
# Other headers are reclassified as 'Other.'. You can a.lso投资
#. refer .to all the headers with 'All'.学习
#
# For example,. to ac.hieve the same behaviour as the old 健康
# . 'http_an.onymizer standard' option, you should use:--- 印刷
#
#. h.eader_access From deny all外贸
# head.er_access Referer de.ny all.
# header_access Serve.r. deny all.
# . header_access User-Agent. deny all 汽车
# heade.r_access WWW-Authenticate d.eny all.
# . header_access Link deny .all(广告)
#
#. Or, to reproduce the old 'http_anonymi.zer paranoid' feature.
# . you should use: 电子
#
# header_.acce.ss Allow allow all[成人用品]
# . header_access Authorization allow. all 杀毒
# . header_access Cache-Control all.ow all.
# . header_.access Content-Encoding allow all虚拟主机
# header_a.cces.s Content-Length allow all.
# header_access C..ontent-Type allow all 杀毒
# header_acces.s Date. allow all.
# . header_access Expires .allow all[成人用品]
# heade..r_access Host allow all
# header_access .I.f-Modified-Since allow all.
# header_ac.cess Last-Modified. allow all投资
# . header_ac.cess Location allow all域名
# header_.access Pragma allow. all服务器
# . . header_access Accept allow all学习
# heade.r_access A.ccept-Charset allow all.
#. header_access Accept-Encoding .allow all外贸
# . header_access Accept-La.nguage allow all[成人用品]
# head.er_access Content-Language. allow all.
# . header_acc.ess Mime-Version allow all.
# h.eader_acces.s Retry-After allow all电影
# hea.der_access Tit.le allow all.
# . header_access Conn.ection allow all 建材
# header_.access Proxy-Connection allow. all 女人
# . . header_access All deny all(广告)
#
# By default, all header.s are all.owed (no anonymizing is学习
# .performed).学习
#
#Default:
# none
#. TAG: header_replace 婚庆
# Usage: header_repl.ace h.eader_name message电脑
# Example: header_r.eplace User-Agent Nutscrape/1.0 (CP./M; 8-bit)外贸
#
# This. option. allows you to change the contents of headers 电子
# denied with he.ader_access above, by repl.acing them with--- 印刷
# some fixed st.ring. This r.eplaces the old fake_user_agent.
#. option. 杀毒
#
# B.y default, headers are removed. if denied..
#
#Default:
# none
# TAG: icon_direc.tory教育
# Wh.ere the icons are sto.red. These are normally kept in.
# /usr/sha.re/squid/icons.服务器
#
#Default:
# icon_direc.tory /usr/share/squid/i.cons.
# TAG: error_direct.ory--------------彩票
# Directory where the er.ror files are read .from.电影
# /usr/l.ib/.squid/errors contains sets of error files 乙肝
# in different languages. The default e.rror .directory 乙肝
# is /etc/squid/errors,. which is a link to. one of these.
# error set.s.教育
#
# . If you wish to create your own versions .of the error files, 婚庆
# either to c.ustomize them to suit y.our language or company, 汽车
# copy .the templat.e English files to another.
# directo.ry and point. this tag at them.教育
#
#error_directory ./usr/sh.are/squid/errors电影
#
#Default:
#. error_director.y /usr/share/squid/errors 建材
# TAG: minimum_retry_timeout . .(seconds)学习
# This specifies. the mini.mum connect timeout, for when the 乙肝
# connect timeo.ut is reduced to .compensate for the availability(广告)
#. of multiple IP a.ddresses.外贸
#
# When a connection to a host is. initiated, and t.hat host has 美容
# several IP addresses, the default connection tim.eout is r.educed 乙肝
# by. dividing it by the number of addresses. So, a. site with 15电脑
# addres.ses would then have a timeout of 8 second.s for each.
# address attempted. To avoid having .the tim.eout reduced to the 美容
# point where even a .working host would. not have a chance to.
# respond, this setting i.s provid.ed. The default, and the域名
# minimum value,. is five seconds, and the maximum value is .sixty 健康
# seconds, or half of connect_timeou..t, whichever is greater and.
# less. than connect_timeou.t. 杀毒
#
#Default:
# mini.mum_retry_timeout 5 se.conds.
# TAG.: ma.ximum_single_addr_tries电影
# This .sets the maximum number of .connection attempts for a 女人
# hos.t that only has one address (for. multiple-address hosts, 建材
# . each address. is tried once).<性病>
#
# . The default value is thre.e tries, the (not recommended)--- 印刷
# . maximum is 255 tries. A .warning message will be generated 电子
# if it is set to .a val.ue greater than ten. 健康
#
#Default:
# maximum_singl.e_addr_t.ries 3.
# TAG: .snmp_port虚拟主机
# Squid can .now serve statistics and status inf.ormation via SNMP.电影
# . A value of "0" d.isables SNMP support. If you wish to use SNMP,电脑
# . set this to "3401". to use the normal SNMP support.教育
#
#Default:
# snmp_port 0
#. TAG: snmp_access--- 印刷
# Allowing or deny.ing access to the SNMP po.rt. 健康
#
# All access t.o the agent is denied by defau.lt.( 游戏 )
# . usage:.
#
# snmp_access allow|deny [.!]aclname ....(广告)
#
#Example:
# snmp_ac.cess allow snmppublic localho.st
#. snmp_access deny all.
#
#Default:
#. snmp_access deny all.
# TA.G: snmp_incoming_addr.ess.
# TAG: .snmp_outgoing_.address 乙肝
# . Just like 'udp_incoming_ad.dress' above, but for the SNMP port.域名
#
# snmp_incoming._address is used for. the SNMP socket receiving.
# . messag.es from SNMP agents. 建材
# snmp_outgoing._addre.ss is used for SNMP packets returne.d to SNMP--------------彩票
# . . agents.学习
#
# The .default. snmp_incoming_address (0.0.0.0) is to listen on all 汽车
# a.v.ailable network interfaces.健康
#
# If snmp_o.utgoing_address is set to 255.255.2.55.255 (the default)(广告)
# the.n it will use the same s.ocket as snmp_incoming_address. Only健康
# change this if you want to hav.e SNMP replies sent using. another投资
# . address than whe.re this Squid listens for SNMP queries.健康
#
# NOTE, snmp_incoming_address .and snmp_outgoing_address can .not have电影
# the same value since they bo.t.h use port 3401.电脑
#
#Default:
# snmp_incoming_addr.es.s 0.0.0.0 鲜花
# snmp_outgoing_addre.ss .255.255.255.255虚拟主机
# TAG: as_whois_serv.er 杀毒
# WHOIS server to query for AS n.umbers. NOTE: AS num.bers are 女人
# queried only when Squid starts up, not for ev.ery request.. 乙肝
#
#Default:
# as_whois_server who.is.ra.ne.t学习
#. a.s_whois_server whois.ra.net.
# TAG: wccp_rout.er外贸
# . Use this option to define your WCCP ``home'.' router for教育
# Squid. Setti.ng the 'wccp_router' to 0.0.0.0 .(the default)外贸
# . disables WCCP..
#
#Default:
# wccp_router 0.0.0..0[成人用品]
# TAG: wc.cp_version( 游戏 )
# According. to .some users, Cisco IOS 11.2 only supports WCCP<性病>
# version 3. If you.'r.e using that version of IOS, change.
# . this value to 3. 美容
#
#Default:
# wccp_version. 4.
# TAG: wcc.p_incom.ing_address.
# TAG: wccp_o.utgoing_ad.dress外贸
# w.cc.p_incoming_address Use this option if you require WCCP(广告)
# message.s to b.e received on only one--- 印刷
# inter.face. Do NOT use this opti.on if 乙肝
# . you're unsure how many interfaces y.ou.
# . . have, or if you know you have only one电脑
# . . interface..
#
# wccp_outgoing_addr.ess Use this opt.ion if you require WCCP--------------彩票
# mes.sages to be sent out on onl.y one.
#. . interface. Do NOT use this option if
# . . you're unsure how many interfaces you.
# have., or if you know you have onl.y one 健康
# . interfa.ce..
#
# . . The default behavior is to not bind to any specific address.(广告)
#
# NOTE, wccp_incoming_address and wccp_.outgoing_address can .not have.
# . the same value since t.hey both use port 2048. 外汇
#
#Default:
# wccp_in.coming_address 0..0.0.0[成人用品]
# wccp_outgoing_addre.ss 255.255.255..255.
# DELAY POOL PARAME.TERS. (all require DELAY_POOLS compilation option).
# -----.---------------.------.---------------------------------------------------.
# TAG: delay_poo.ls[成人用品]
# . . This repres.ents the number of delay pools to be used. For example,.
# if you h.ave one class 2 delay poo.l and one. class 3 delays pool, you 健康
#. have a total of 2 delay po.ols..
#
#Default:
# dela.y_pools 0教育
# T.AG: delay_class教育
# This defines the clas.s of eac.h delay. pool. There must be exactly one.
# . del.ay_class line for each delay pool. For example, to define two 鲜花
# delay pools, one of class. 2 and one o.f class 3, the settings above.
# . and here w.ould be:.
#
#Example:
#. dela.y_pools 2 # 2 delay pools 鲜花
# delay_c.lass 1 .2 # pool 1 is a class 2 pool学习
# del.ay_class 2 3 # pool 2 is a c.lass 3 pool电影
#
# The delay pool .classe.s are: 鲜花
#
# class 1 . . Everything is lim.ited by a single aggregate.
# . . bucket..
#
# class 2 . .Everything is limited by a sin.gle aggregate 电子
# . . bucket as well as an "individual" bucket cho.sen 健康
# . from bits .25 through 32 of the IP address. 乙肝
#
# clas.s 3 Everything is lim.ited by. a single aggregate 婚庆
# . bucket as wel.l as a "networ.k" bucket chosen.
# fro.m bits 17 through 24 of t.he IP. address and a.
# . . "individual" bucket c.hosen from bits 17 through投资
# . .32 of the IP address. 杀毒
#
# . NOTE: If an IP address is a.b..c.d 美容
# ->; bits 25. through 32. are "d" 婚庆
# ->; bits 17 through 24. are ".c"<性病>
# ->; bits 17 through 32. are "c. * 256 + d".
#
#Default:
# none
# TAG: dela.y_access.
# This i.s used to determine which delay pool a request falls .into. 鲜花
# . The first matched delay poo.l is always used, i.e., if a .request falls 乙肝
# . int.o delay pool number one, no more delay are .checked, otherwise the电影
# rest are checked in order of their delay pool number. until .they h.ave 乙肝
# . all been checked. For example, if you want som.e_big_clients .in delay电脑
# pool 1 an.d lotsa_little_clients in del.ay pool 2:外贸
#
#Example:
# delay_access 1 allo.w some_big_cl.ients[成人用品]
# delay_access 1 de.ny all外贸
#.. delay_access 2 allow lotsa_little_clients(广告)
# delay_access. 2 deny all.
#
#Default:
# none
# TAG: delay_paramete.rs.
# This de.fines the parameters for a delay pool. E.ach delay pool has电影
# a number of "buckets" associated with it, ..as explained in the域名
# . description of delay_class. For a class 1 delay pool,. the syntax. is:<性病>
#
#delay_par.ame.ters pool aggregate外贸
#
# For. a c.lass 2 delay pool: 乙肝
#
#delay_parameters pool aggregate ind.ividua.l 外汇
#
# . For a class 3 delay. pool:.
#
#delay_parameters p.ool aggregate network indiv.idual
#
# . . The variables here are: 乙肝
#
# pool . a pool number - ie, a. .number between 1 and the服务器
# . numb.er specified in delay_pools as used in.
# delay_cla.ss li.nes. 美容
#
# aggregate . th.e "delay pa.rameters" for the aggregate bucket 婚庆
# (class 1, 2.., 3). 汽车
#
# individual . the "delay p.arameters" for the. individual 汽车
# buckets .(cla.ss 2, 3). 乙肝
#
# network . .the "delay parameters" for the network .buckets电脑
# . (cla.ss 3)..
#
# A pair of delay pa.rameters is writt.en restore/maximum, where. restore is.
# the number .of. b.ytes (not bits - modem and network speeds are usually教育
# . quoted in bi.ts) per second placed into the bu.cket, and maximum is the 美容
# m.aximum number of bytes which can b.e in the bucket at any time. 乙肝
#
# For .example, if delay pool .number 1 .is a class 2 delay pool as in the(广告)
# abo.ve example, and is being used to strictly limit each host. to 64kbp.s 健康
# (plus .o.verheads), with no overall limit, the line is:.
#
#delay_parameters 1. -1/-1 8000./8000 美容
#
# Note that the fi.gure -1 is used to represent "unlimited.". 健康
#
# An.d,. if delay pool number 2 is a class 3 del.ay pool as in the above.
# . example, .and you want to limit it t.o a total of 256kbps (strict limit).
# with each 8-bit network .permitted 64kbps (strict. limit) and each投资
# individual host permitt.ed 4..800bps with a bucket maximum size of 64kb外贸
# to permit a dece.nt web page to be downloaded at .a decent speed 电子
# (if the network is not being limited due to overuse). b.ut slow down--- 印刷
# large downloads more significan.tly:. 健康
#
#delay_parameters 2 32000/32000 8000/8000 600/64..000教育
#
# Ther.e must be o.ne delay_parameters line for each delay pool.电脑
#
#Default:
# none
# TAG: d.elay_initial_bucket_leve.l (percent, 0-100)外贸
# The initial bucket percentage is used to ..determine how much is put 外汇
# . . in each bucket when squid starts, is reconfigured, or firs.t notices健康
# . a host accessing it (in class 2 and class 3, individual host.s and<性病>
# networks only have buckets ass.oci.ated with .them once they have been 汽车
# ."seen" by squid.).教育
#
#Default:
# d.elay_initial_.bucket_level 50.
# TAG: .incoming_.icp_average.
# TA.G: incomin.g_http_average域名
# TAG: inc.oming_dns_avera.ge 建材
# TAG: mi.n_icp_poll_cnt 外汇
# TAG: min_dns_poll._cnt.
# TAG: min._http_poll_cnt.
# Heavy voodoo her.e. I can't even believe you are. reading this. 汽车
# . Are you crazy? Don't even think about ad.justing these unless(广告)
# . y.ou understand the algorithms in comm_select.c first!.
#
#Default:
# inco.ming_icp_average 6电脑
# incoming_htt.p_average 4学习
# incoming_dn.s_average 4.
# min_icp_poll_cnt .8虚拟主机
# min_dns_poll_.cnt 8教育
# min._http_poll_cnt 8外贸
# TAG: max_open_d.isk_fds.
# . To avoid having disk as the I/O bottl.eneck Squid can optionally 杀毒
# bypass the on-disk. cache if more .than this amount of disk file.
# descr..iptors are open. 健康
#
# . A value of 0 indicates no. limit..
#
#Default:
# max_open_.disk_fds 0.
# TAG: .offline_mode.
# Enable this .option an.d Squid will never try to validate cached--- 印刷
# ob.jects.教育
#
#Default:
# offline_.mode off服务器
# TAG: uri_whit.espace.
#. What to do with requests that have whitespace ch.aracters in the 外汇
# URI. Options:.[成人用品]
#
# strip: The whitespace character.s are stripped out of the U.RL.学习
# . This is the behavior recommended .by RFC2616. 婚庆
# deny: The req.uest is denied. The user .receives an "Invalid.
#. . Request" message. 鲜花
# allow: The request is a.llowed and the .URI is not changed. The.
# whitespace chara.cters remain in the URI. Not.e the.
# whitespace is passed to redirector.. processes if they.
# . . are in use..
# e.ncode: The request i.s allowed and the whites.pace characters are(广告)
# encoded according to R.FC1738. This coul.d be considered外贸
# . a violation of the. HTTP/1.1--- 印刷
# RFC because proxies are .not allowed to rewrite URI's..外贸
# chop: The reque.st is allowed and. the URI is chopped at the(广告)
#. fi.rst whitespace. This might also be considered a
# violation...电影
#
#Default:
# uri_whi.tespace strip<性病>
# TAG: brok.en_posts.
# A list .of ACL elements which, if matched, causes S.quid to send 女人
# an extra CR.LF pair after the body of a PUT/POST request..域名
#
# Some HTTP servers h.as broken implementations of PUT/PO.ST, 汽车
# and rely on an extra CRLF pair sent by some WWW. .clients. 女人
#
# .Quote from RFC 2068 section 4.1 on this matt.er:外贸
#
# Note: certain buggy HTTP/1.0 c.lient imp.lementations generate an[成人用品]
# . extra CRLF's after a POST request. To restate what is explic.itly 杀毒
# forbid.den by the BNF, an HTTP/1.1 cli.ent must not preface or follo.w 电子
# a re.quest with an extra. CRLF..
#
#Example:
# acl buggy_server url_regex ^
http://....投资
# broken_.posts. allow buggy_server 杀毒
#
#Default:
# none
# TAG: mcast_.miss_addr.
# Note: This. option is only available if Squid is r.ebuilt with the健康
# -D..MULTICAST_MISS_STREAM option投资
#
# . If you enable this option, every "cache miss" URL wi.ll电影
# .b.e sent out on the specified multicast address. 杀毒
#
# Do not enable this option unless. you are are ab.solutely 杀毒
# certain. you understand what you. are doing.外贸
#
#Default:
# mcast_miss_addr ..255.255.255.255外贸
# TAG: mcast._miss_ttl
# Note: This option is o..nly available if Squid is rebuilt with the[成人用品]
# . -DMUL.TICAST_MISS_TTL option外贸
#
#. This is the time-to-live value for pack.ets multicasted( 游戏 )
# when multicasting off cache mi.ss URLs i.s enabled. By健康
# default this is set to 'site scope',. i.e. 1.6..
#
#Default:
# mcast_mi.ss_ttl 16 外汇
# TAG: mcast._miss_port 女人
# Note:. This option is only availabl.e if Squid is rebuilt with the<性病>
# -DMULTICAST_M.IS.S_STREAM option 汽车
#
# This is the port number to be us.ed in conjunction .with 杀毒
# . 'mcast_miss_ad.dr'. 美容
#
#Default:
# mca.st_miss_port 3135 汽车
# .TAG: mcast_mis.s_encode_key 健康
# Note: This optio.n is only avail.able if Squid is rebuilt with the学习
#. -DMULTICAST_MISS_STREAM o.ption(广告)
#
# The URLs that are sen.t in the multicast miss. stream are服务器
# encrypted. This is the encryption. k.ey.教育
#
#Default:
# mcast_miss._encode_key XXXXXXXXXXXXXXX.X 汽车
# TAG: nonhierarc.hical_direct. 建材
# . By default, Squid will send any non-hierarchical r.equests学习
# .(matching .hierarchy_stoplist or not cachable request type) direct.
# . to origin serv.ers. 女人
#
# If you set this to off, then S.quid .will prefer to send these.
# . requests to .parents.<性病>
#
# Note that in most confi.gurati.o.ns, by turning this off you will only[成人用品]
# add latency to these r.equest without any improvement in .global hit.
# ra.tio..
#
# If you are inside an fir.ew.all then see never_direct instead of外贸
# . this directive..
#
#Default:
# no.nhierarchical_direc.t on( 游戏 )
# . TAG: prefer_direct虚拟主机
#. Nor.m.ally Squid tries to use parents for most requests. If you by some电脑
# r.eason like it to f.irst try going direct and only use a parent if.
#. going direct fails. then set this to on. 婚庆
#
# By combining nonhierarchi.cal_di.rect off and prefer_direct on you 鲜花
# can set up Squid to us.e a .parent as a backup path if going direct--- 印刷
# . fails.<性病>
#
#Default:
# prefer._direct off 鲜花
# TAG: st.rip_query_terms.
# By default,. Squid .strips query terms from requested URLs before.
# logging. This prote.cts your user's pr.ivacy.学习
#
#Default:
# str.ip_query_terms on(广告)
# TAG: cor.edump_dir.
# By default S.quid leaves core f.iles in the directory from where投资
# it was started. If you set 'coredum.p_dir' to a direct.ory--------------彩票
# that exists, Squid .will chdi.r() to that directory at startup域名
#. and cor.edump files will be left there. 电子
#
#Default:
# coredump_dir .none 外汇
#
# Leave cored.umps in the first ca.che dir 婚庆
coredump_dir /var/sp.ool/s.quid.
# TAG: r.edirector_bypass学习
# When this i.s 'on.', a request will not go through the域名
# redirector if all re.directors are busy. I.f this is 'off'.
# and .t.he redirector queue grows too large, Squid will exit电影
# . with a FATAL error and ask you to increase the nu.mber of健康
# redirectors. . You should only enable th.is if the redirectors.
# are .not critical to your caching .system. If you use.
# red.irectors for access con.trol, and you enable this option,服务器
# then use.rs may have access to pages that they should no.t教育
# be allowed to requ.est...
#
#Default:
#. redirector_bypass off 婚庆
# TAG: ignore_u.nk.nown_nameservers.
# By default Squi.d check.s that DNS responses are received教育
# from the same. IP addresse.s that they are sent to. If they 建材
#. don't match, Squid ignores the respon.se and writes a warning--------------彩票
# message to cache.log. . You can allow .responses from unknown服务器
# . nameservers by setti.ng this option to 'off'. 建材
#
#Default:
# ignore_unknow.n_nameserve.rs on--------------彩票
# TAG: digest_ge.neration.
# Note: This option is on.ly available if Sq.uid is rebuilt with the电影
# . . --enable-cache-digests option.
#
# This controls whether. the server w.ill generate a Cache Digest 杀毒
# of its contents. .By default, Cache. Digest generation is投资
# enabled if Squid is. compiled with USE_CACHE_DIGES.TS defined. 女人
#
#Default:
# d.igest_generation on(广告)
# TAG: dige.st_bits_per_e.ntry.
# Note: This option is only ava..ilable if Squid is rebuilt with the教育
# .--enable-cach.e-digests option.
#
# . This is the number of bits of the server's Cache Diges.t which--- 印刷
# will be associated with the Digest ent.ry for. a given HTTP.
# Method and URL (public key) combin.a.tion. The default is 5. 汽车
#
#Default:
# digest_.bits_per_entry 5.
#. TAG: digest_rebuild_perio.d (seconds)健康
#. Note: This option is only available if Squid is rebuilt with. the.
# . --enable-.cache-digests option.
#
# This is the number of seconds b.etween Cache Digest. rebuilds. 婚庆
#
#Default:
#. digest_rebui.ld_period 1 hour.
# TAG: d.igest_rewrite_period (seconds.)学习
# Note: This option is only availab.le if Squid is reb.uilt with the.
# --e.nable-c.ache-digests option 美容
#
# .. This is the number of seconds between Cache Digest writes to.
# disk.
#
#Default:
# digest_rewr.ite_pe.riod 1 hour服务器
# TAG: digest_swapout._chunk_size. (bytes) 健康
# Note: This option is only availabl.e if Squid is rebui.lt with the.
# . --enable-cache-digest.s option外贸
#
# . This is the numb.er of bytes of the Cache Digest to write to 鲜花
# di.sk at a time. It defaults t.o 4096 bytes (4KB), the Squid 鲜花
# . default s.wap page.学习
#
#Default:
# digest_swapout_c.hunk_siz.e 4096 bytes电影
# TAG: .digest_r.ebuild_chunk_percentage (percent, 0-100)健康
# .Note: This option is only available if Squid is rebuilt w.ith the.
# --.enable-cache-.digests option.
#
# This is the percentage of the Cache Digest. to be. scanned at a虚拟主机
# time. By. default it is set to 10% of the. Cache Digest..
#
#Default:
# digest_rebuild_ch.unk_percen.tage 10--- 印刷
# TAG: chroot
# Use t.his to have Squid do a chroot() while initial.izing. This虚拟主机
# also causes Squid to fully .drop root privileges .after.
# in.itializing. This means, for example, that if you use .a HTTP 电子
# .port less than 1024 and tr.y to reconfigure, you will get an 建材
# e.rror..
#
#Default:
# none
# TAG: cli.ent_persistent_connec.tions.
# TAG: server_persistent_co.n.nections健康
# Persistent connect.ion. support for clients and servers. By.
# default, Squi.d uses persistent connections (when all.owed).
# with its clients. an.d servers. You can use these options to 电子
# disable persistent co.nn.ections with clients and/or servers.虚拟主机
#
#Default:
# client_persistent_con.nection.s on.
# se.rver_persistent_connections .on 美容
# TAG: pipe.line_prefetch域名
# To .boost the performanc.e of pipelined requests to closer.
# match that of a non-proxied environment Squid can try t.o fetch.学习
# up t.o two requests in parallell from a .pipeline.--------------彩票
#
# D.efaults to off for bandwidth management and access lo.gging.
# reasons.. 健康
#
#Default:
# p.ipeline_prefetch off.
# TAG: extension_method.s 健康
# Squid only knows about standardized HTTP. req.uest methods..
# You .can .add up to 20 additional "extension" methods here.域名
#
#Default:
# none
#. TAG: request_entities.
# Squid defaults to deny GET and HEA.D reque.sts with reques.t entities,.
# as the meaning of .such requests .are undefined in the HTTP standard--------------彩票
# . ev.en if not explicitly forbidden. 建材
#
# Set this directiv.e to on if you ha.ve clients which insists.
# on sending re.quest entities in GET or HEAD .requests.--------------彩票
#
#Default:
# request_entiti.es off[成人用品]
# TAG: high_response_time_warning (m.sec.).
# If the one.-minute median respon.se time exceeds this value, 电子
# Squid prints a WARNING with debug. level 0 to ge.t the(广告)
# administrators attention. The val.ue is in millis.econds.健康
#
#Default:
# hi.gh_response._time_warning 0.
# TAG: high_p.ag.e_fault_warning<性病>
# If t.he one-minute average page fault r.ate exceeds this教育
# . value, Squid prints a WARNING wi.th debug level 0 to get(广告)
# . the administ.rators attention. The value is in page faults 外汇
# per. second.电脑
#
#Default:
# high_p.age._fault_warning 0 建材
# TAG:. h.igh_memory_warning.
# . If the. memory usage (as determined by mallinfo) exceeds[成人用品]
# value, Squid. prints a WARNING with debug level .0 to get电脑
# the adminis.trators attenti.on. 婚庆
#
#Default:
# hi.gh_memory_warning 0 美容
# TAG: store._.dir_select_algorithm.
# Set this. to. 'round-robin' as an alternative.健康
#
#Default:
#. store_dir_select_algorithm least-load.学习
# .TAG: forward_log( 游戏 )
# Note: This option is only avai.lable if Squid is .rebuilt with the 电子
# . -DWI.P_FWD_LOG option电影
#
# . Logs t.he server-side requests.电影
#
# This is cur.rently work in progr.ess..
#
#Default:
# none
# TAG: .ie_refresh. on|off(广告)
# Micro.soft Internet Explorer up until version 5.5 S.ervice教育
# . Pack 1 has an issue with transparent proxies, .wherein it--- 印刷
# is impossible to force a refresh. Turning th.is on. provides[成人用品]
#. a partial fix to the proble.m, by causing all IMS-REFRESH.
# requests from o.lder IE versions to check the orig.in server 乙肝
# for fresh content.. This reduces hit ratio by .some amount 建材
# (~10% in my experience), but allows .users to actually ge.t 建材
# fresh content when they want it. Note that .because. Squid 鲜花
# cann.ot tell if the us.er is using 5.5 or 5.5SP1, the behavior--- 印刷
# of 5.5 is unchanged f.rom old versions of Squid (i.e.. a 美容
# forced refresh is imp.oss.ible). Newer versions of IE will, 美容
# . hopefully, continue to have the new behavior and wil.l be教育
# handled .based on that assumption. This option defaults .to 外汇
# . the old Squid behavior, which i.s better for hit ratios but外贸
# wo.rse for clients using IE, if they .need to be able to 女人
# force. fresh .content.(广告)
#
#Default:
# .ie_refresh off--- 印刷
# .TAG: vary_ignore_expire . on|off.
# Many HTTP servers .s.upporting Vary gives such objects.
# immediat.e expiry time w.ith no cache-control header教育
# . when requested by a HTTP/1.0 cli.ent. This option投资
#. enables Squid to ignore such expiry time.s until.
# HTTP./1.1 is fully impl.emented.健康
# . WARNING: This may eventually cause some varying.( 游戏 )
# obj.ects not. intended for caching to get cached. 婚庆
#
#Default:
# vary_i.gnore_expire off.
# TAG: sleep_after_fork . (mi.croseconds).
# When this is se.t to a non-zero value, the main Squid pro.cess 杀毒
# sleeps the specified number of. microseconds. after a fork()(广告)
# syst.em call. Thi.s sleep may help the situation where your--------------彩票
# system re.ports fork() .failures due to lack of (virtual) 乙肝
# . . memory. Note, however, that if you have a lot of child.
# processes, then these s.leep delays wil.l add up and your.
# Squid will not s.ervi.ce requests for some amount of time(广告)
# until all the child ..processes have been started.教育
#
#Default:
#. sleep_after_fork 0 婚庆
httpd_a.ccel_host virtual 健康
h.ttpd_accel_port 80 婚庆
httpd_accel_with_pr.oxy on虚拟主机
httpd_accel_uses_host_head..er on服务器
我的rc.local:
#!/bin/sh
#
# This script will. be executed *afte.r* all the other init scripts..
# You can put your own initialization stuff in here if you. don'.t.
# want to do the fu.ll Sys .V style init stuff. 建材
iptables -t nat -A PREROUTING -s 192.168.0.0/24 -p .tcp --.dport 80 -j DNAT -.-to 192.168.0.1:3128电影
客户端是一台WINDOWS-XP，INTERNET连接设置为192.168.0..1端口：3128，.IP为192.168.0.2网关.192.168.0.1，DNS与LINUX设置一样211.136.121.22 外汇
在LINUX上浏览网页没有问题，只是在WINDOW-XP客户端浏览网岸.头会很慢。。。请高手帮忙看一下，哪有问题，还是我哪没做到，我看了很多关于SQUID透明代理的文章，我头都看大了，还望高手能够简明的指点小弟，小.弟不胜感激！谢谢.！--- 印刷
