1<number> HTTP connections established.   
  2  
  3#   
  4  
  5# acl aclname max_user_ip [-s] number   
  6  
  7# # This will be matched when the user attempts to log in from more   
  8  
  9# # than <number> different ip addresses. The authenticate_ip_ttl   
 10  
 11# # parameter controls the timeout on the ip entries.   
 12  
 13# # If -s is specified then the limit is strict, denying browsing   
 14  
 15# # from any further IP addresses until the ttl has expired. Without   
 16  
 17# # -s Squid will just annoy the user by "randomly" denying requests.   
 18  
 19# # (the counter is then reset each time the limit is reached and a   
 20  
 21# # request is denied)   
 22  
 23# # NOTE: in acceleration mode or where there is mesh of child proxies,   
 24  
 25# # clients may appear to come from multiple addresses if they are   
 26  
 27# # going through proxy farms, so a limit of 1 may cause user problems.   
 28  
 29#   
 30  
 31# acl aclname req_mime_type mime-type1 ...   
 32  
 33# # regex match agains the mime type of the request generated   
 34  
 35# # by the client. Can be used to detect file upload or some   
 36  
 37# # types HTTP tunelling requests.   
 38  
 39# # NOTE: This does NOT match the reply. You cannot use this   
 40  
 41# # to match the returned file type.   
 42  
 43#   
 44  
 45# acl aclname rep_mime_type mime-type1 ...   
 46  
 47# # regex match against the mime type of the reply recieved by   
 48  
 49# # squid. Can be used to detect file download or some   
 50  
 51# # types HTTP tunelling requests.   
 52  
 53# # NOTE: This has no effect in http_access rules. It only has   
 54  
 55# # effect in rules that affect the reply data stream such as   
 56  
 57# # http_reply_access.   
 58  
 59#   
 60  
 61# acl acl_name external class_name [arguments...]   
 62  
 63# # external ACL lookup via a helper class defined by the   
 64  
 65# # external_acl_type directive.   
 66  
 67#   
 68  
 69#Examples:   
 70  
 71#acl myexample dst_as 1241   
 72  
 73#acl password proxy_auth REQUIRED   
 74  
 75#acl fileupload req_mime_type -i ^multipart/form-data$   
 76  
 77#acl javascript rep_mime_type -i ^application/x-javascript$   
 78  
 79#   
 80  
 81#Recommended minimum configuration:   
 82  
 83acl all src 0.0.0.0/0.0.0.0   
 84  
 85acl manager proto cache_object   
 86  
 87acl localhost src 127.0.0.1/255.255.255.255   
 88  
 89acl to_localhost dst 127.0.0.0/8   
 90  
 91acl my_network src 192.168.0.0/24   
 92  
 93acl dyw src 192.168.0.2/24   
 94  
 95acl SSL_ports port 443 563   
 96  
 97acl Safe_ports port 80 # http   
 98  
 99acl Safe_ports port 21 # ftp   
100  
101acl Safe_ports port 443 563 # https, snews   
102  
103acl Safe_ports port 70 # gopher   
104  
105acl Safe_ports port 210 # wais   
106  
107acl Safe_ports port 1025-65535 # unregistered ports   
108  
109acl Safe_ports port 280 # http-mgmt   
110  
111acl Safe_ports port 488 # gss-http   
112  
113acl Safe_ports port 591 # filemaker   
114  
115acl Safe_ports port 777 # multiling http   
116  
117acl CONNECT method CONNECT   
118  
119  
120  
121# TAG: http_access   
122  
123# Allowing or Denying access based on defined access lists   
124  
125#   
126  
127# Access to the HTTP port:   
128  
129# http_access allow|deny [!]aclname ...   
130  
131#   
132  
133# NOTE on default values:   
134  
135#   
136  
137# If there are no "access" lines present, the default is to deny   
138  
139# the request.   
140  
141#   
142  
143# If none of the "access" lines cause a match, the default is the   
144  
145# opposite of the last line in the list. If the last line was   
146  
147# deny, then the default is allow. Conversely, if the last line   
148  
149# is allow, the default will be deny. For these reasons, it is a   
150  
151# good idea to have an "deny all" or "</number></number>