# make sure you use rc.firewall
http_port 3128
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 16 MB
cache_dir diskd /var/spool/squid 200 16 256
cache_store_log none
debug_options ALL,1
redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
half_closed_clients off
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl mynetwork src 192.168.2.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80		# http
acl Safe_ports port 21		# ftp
acl Safe_ports port 443 563	# https, snews
acl Safe_ports port 70		# gopher
acl Safe_ports port 210		# wais
acl Safe_ports port 1025-65535	# unregistered ports
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow mynetwork
http_access deny all
icp_access allow all
miss_access allow all
proxy_auth_realm MandrakeSoft Squid proxy-caching web server
visible_hostname firewall.example.com
httpd_accel_host virtual
httpd_accel_with_proxy  on
httpd_accel_uses_host_header on
append_domain .example.com
err_html_text webmaster@example.com
memory_pools off
deny_info ERR_ACCESS_DENIED all