squid.conf

; This is exemplary squid.conf program for serving squid-imposter with squid
; In Ubuntu, you should:
; $ sudo apt-get install squid
; edit and copy this file to /etc/squid/squid.conf
; $ sudo service squid start
; Autor: Krzysztof Kotowicz <kkotowicz at gmail dot com>
; @see http://blog.kotowicz.net
; @see http://github.com/koto/squid-imposter

access_log /var/log/squid/access.log squid

; full path to squid-imposter
url_rewrite_program /var/www/squid-imposter/rewrite.php

; tcp port
http_port 8080 transparent

; who will be able to communicate with squid proxy
; see also setup_gw.sh for localnet settings
acl localhost src 127.0.0.1/32
acl localnet src 192.168.0.0/16

acl all src all
acl CONNECT method CONNECT
acl manager proto cache_object
acl purge method PURGE
acl Safe_ports port 1025-65535    # unregistered ports
acl Safe_ports port 210      # wais
acl Safe_ports port 21        # ftp
acl Safe_ports port 280        # http-mgmt
acl Safe_ports port 443      # https
acl Safe_ports port 488        # gss-http
acl Safe_ports port 591        # filemaker
acl Safe_ports port 70        # gopher
acl Safe_ports port 777        # multiling http
acl Safe_ports port 80        # http
acl SSL_ports port 443 563
always_direct    allow    all
cache_dir ufs /var/spool/squid 2048 16 256
cache_mem 256 MB
cache_mgr admin@email.com
coredump_dir /var/spool/squid
forwarded_for off
hierarchy_stoplist cgi-bin ?
http_access allow localhost
http_access allow localnet
http_access allow manager localhost
http_access deny all
http_access deny CONNECT !SSL_ports
http_access deny manager
http_access deny !Safe_ports
http_reply_access allow localnet
http_reply_access allow localhost
http_reply_access deny all
icp_access allow localnet
icp_access deny all
icp_port 3130
refresh_pattern .        0    20%    4320
refresh_pattern (cgi-bin|\?)    0    0%    0
refresh_pattern ^ftp:        1440    20%    10080
refresh_pattern ^gopher:    1440    0%    1440
visible_hostname yourdomain.com