VMware Site Recovery Manager 5.1安装配置-Part4-使用

关于squid,我就不多说了,想必大家都对它很了解,以下是我负责维护的一台squid server 的配置:
vi /etc/squid/squid.conf
#配置为透明模式http_port 192.168.1.10:8080 transparentcache_mem 128 MBcache_dir ufs /var/spool/squid 4096 16 256cache_effective_user squidcache_effective_group squiddns_nameservers 202.96.209.133 202.96.209.6error_directory /etc/squid/errors/Simplify_Chinesecache_access_log /var/log/squid/access.logcache_log /var/log/squid/cache.logvisible_hostname 192.168.1.10cache_mgr sj0621@gmail.comclient_db on
coredump_dir /var/spool/squid
acl yoursite urlpath_regex www\.andy\.com no_cache deny yoursite
refresh_pattern ^ftp: 1440 20% 10080refresh_pattern ^gopher: 1440 0% 1440refresh_pattern . 0 20% 4320
acl QUERY urlpath_regex -i cgi-bin \? \.asp$ \.php$ \.jsp$ \.cgi$acl denyssl urlpath_regex -i ^https:\\no_cache deny QUERYno_cache deny denyssl
#no cacheacl andy.com dstdomain "/etc/squid/conf/no_cache"no_cache deny andy.com

#downacl down urlpath_regex -i \.rmvb$ \.rm$ \.bt$ \.wmv$ \.wma$ \.avi$ \.exe$ \.pmp$ \.torrent$ \.mp4$ \.iso$ \.msi$ \.mp3$ \.rar$ \.zip$ \.asx$ \.flv$
#videoacl video_web dstdomain "/etc/squid/conf/deny_web"
#worktimeacl worktime time MTWHFA 8:30-11:30
#worktime2acl worktime2 time MTWHFA 12:30-17:30

#taobaoacl taobao_web dstdomain .taobao.com .paipai.com .qzone.qq.com .xunlei.com .tudou.com .kuaiche.comacl taobao time MTWHFA 8:30-11:30http_access deny taobao taobao_web
acl taobao_web2 dstdomain .taobao.com .paipai.com .qzone.qq.com .xunlei.com .tudou.com .kuaiche.comacl taobao2 time MTWHFA 12:30-17:30http_access deny taobao2 taobao_web2
# localhostacl localhost src 127.0.0.1/255.255.255.255acl to_localhost dst 127.0.0.0/8
#down_ipacl down_ip src "/etc/squid/conf/allow_ip"
#maxconnacl connip src 192.168.1.0/255.255.255.0acl conn maxconn 50
#safeacl SSL_ports port 443 563 8000acl Safe_ports port 443 563 # https, snewsacl Safe_ports port 25 110acl Safe_ports port 70 # gopheracl Safe_ports port 210 # waisacl Safe_ports port 1025-65535 # unregistered portsacl Safe_ports port 280 # http-mgmtacl Safe_ports port 488 # gss-httpacl Safe_ports port 591 # filemakeracl Safe_ports port 777 # multiling httpacl CONNECT method CONNECT
#allow_iphttp_access allow down_ip
#deny_ip#http_access deny deny_ip
#http_accesshttp_access deny down worktimehttp_access deny connip connhttp_access deny video_web worktimehttp_access deny video_web worktime2http_access allow !safe_ports
http_access deny CONNECT !SSL_ports
#localhosthttp_access allow localhostacl all src 0.0.0.0/0.0.0.0http_access deny allident_lookup_access allow yoursite QUERY denyssl s520.cc down video_web worktime worktime2 test_ip taobao_web taobao taobao_web2 taobao2 localhost to_localhost down_ip connip conn deny_ip SSL_ports Safe_ports CONNECT all

本文出自 “Grok” 博客，请务必保留此出处http://sj0621.blog.51cto.com/753618/275748