[HaBo]

auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/squid.passwd
acl password proxy_auth REQUIRED
http_access allow password

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8

acl SSL_ports port 25		# default smtp
acl SSL_ports port 110		# default pop3
acl SSL_ports port 443
acl SSL_ports port 587		# smtp for gmail
acl SSL_ports port 995		# pop3 for gmail
acl SSL_ports port 1863		# msn messenger
acl SSL_ports port 5190		# misc messenger
acl SSL_ports port 8443		# management plesk

acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443		# https
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http

acl CONNECT method GET POST CONNECT HEAD SEARCH BMOVE BCOPY MOVE PROPPATCH BPROPPATCH DELETE SUBSCRIBE PROPFIND BDELETE MKCOL POLL

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

acl our_networks src 192.168.7.0/24 192.168.8.0/24 192.168.9.0/24
http_access allow our_networks
http_access allow localhost
http_access deny all

icp_access allow all

http_port 3128

hierarchy_stoplist cgi-bin ?

cache_mem 64 MB

cache_dir ufs /var/spool/squid 100 16 256

store_dir_select_algorithm least-load

access_log /var/log/squid/access.log squid

url_rewrite_program /usr/bin/squidguard -c /etc/squid/squidguard.conf

url_rewrite_children 100

acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY

refresh_pattern ^ftp:		1440	20%	10080
refresh_pattern ^gopher:	1440	0%	1440
refresh_pattern .		0	20%	4320

acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

hosts_file /etc/hosts

coredump_dir /var/spool/squid

dbhome /etc/squid/blacklists
logdir /var/log/squid 
dest porn {
	domainlist porn/domains
	urllist porn/urls
}
dest aggressive {
	domainlist aggressive/domains
	urllist aggressive/urls
}
dest drugs {
	domainlist drugs/domains
	urllist drugs/urls
}
dest hacking {
	domainlist hacking/domains
	urllist hacking/urls
}
dest violence {
	domainlist violence/domains
	urllist violence/urls
}
dest warez {
	domainlist warez/domains
	urllist warez/urls
}
src admin {
	user bikmaek
	user xxxx
	log adminpc.log
}
src client {
	user xxxx
	user xxxx
	user xxxx
	user xxxx
	user xxxx
	log clientpc.log
}
acl {
	admin {
		pass all
		redirect http://127.0.0.1/access-deny.php?a=%a&i=%i&s=%s&&u=%u
	}
	client {
		pass !porn !aggressive !drugs !hacking !violence !warez all
		redirect http://127.0.0.1/access-deny.php?a=%a&i=%i&s=%s&&u=%u
	}
	default {
		pass none
		redirect http://127.0.0.1/access-deny.php?a=%a&i=%i&s=%s&&u=%u
	}
}