http_port 8080
icp_port 0
htcp_port 0

visible_hostname CDLINUXPROXY

cache_replacement_policy heap LFUDA
memory_replacement_policy heap LFUDA

cache_mem 16 MB
cache_swap_low 90
cache_swap_high 95
minimum_object_size 0 KB
maximum_object_size 204800 KB
maximum_object_size_in_memory 8 KB
icp_query_timeout 0
dead_peer_timeout 10 seconds

emulate_httpd_log on
buffered_logs on
log_ip_on_direct off

ftp_user john.doe@server.com
hierarchy_stoplist cgi-bin ?

cache_dir ufs /var/cache/squid 100 16 256 
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
icon_directory /usr/lib/squid/icons
error_directory /etc/squid/errors
coredump_dir /var/cache/squid
mime_table /etc/squid/mime.conf
pid_filename /var/log/squid/squid.pid

refresh_pattern ^ftp:     1440  20%  10080
refresh_pattern ^gopher:  1440  0%   1440
refresh_pattern .            0  20%  4320

acl password proxy_auth REQUIRED

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

acl safe_ports port 80            #  http
acl safe_ports port 21            #  ftp
acl safe_ports port 443 563       #  https, snews
acl safe_ports port 70            #  gopher
acl safe_ports port 210           #  wais
acl safe_ports port 1025-65535    #  unregistered ports
acl safe_ports port 280           #  http-mgmt
acl safe_ports port 488           #  gss-http
acl safe_ports port 591           #  filemaker
acl safe_ports port 777           #  multiling http
acl SSL_ports  port 443 563
acl CONNECT method CONNECT

acl all src 0.0.0.0/0.0.0.0
acl TRUST src 10.12.0.0/255.255.0.0
acl DMZ   src 10.13.0.0/255.255.0.0

http_access deny !safe_ports
http_access deny CONNECT !SSL_ports
http_access allow TRUST
http_access allow DMZ
http_access deny all

http_reply_access allow TRUST
http_reply_access allow DMZ
http_reply_access deny all

proxy_auth_realm enterprise web gateway
authenticate_program /usr/lib/squid/msnt_auth
authenticate_ttl 5
authenticate_children 20

