# SQUID.CONF - Philippe Bourcier
# WITH HOSTS FILE BLACKLIST
# NO CACHE
# NO LOGS
# NO PROBLEMS :)

# GENERAL
cache_effective_user nobody
cache_effective_group nobody       # might be nogroup, depending on your OS
http_port 192.168.0.254:8080       # don't put a public IP in there...
icp_port 0
#htcp_port 0                       # this depends on your squid installation
#snmp_port 0                       # this too
#snmp_incoming_address 127.0.0.1   # and this too
udp_incoming_address 127.0.0.1
udp_outgoing_address 127.0.0.1
auth_param basic children 5
auth_param basic realm Squid
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
cache_mgr root@localho.st          # your email
visible_hostname 192.168.0.254     # IP or hostname of your proxy
client_db off
error_directory /usr/local/squid/share/errors/English
prefer_direct on

# DNS
fqdncache_size 409600
positive_dns_ttl 1 minutes
negative_dns_ttl 1 minutes

# BLACKLIST
hosts_file /usr/local/squid/etc/hosts

# LOGS
logfile_rotate 0
cache_access_log /dev/null
cache_log none
cache_store_log none
log_icp_queries off

# ACL
acl all src 0.0.0.0/0.0.0.0
acl lan src 127.0.0.0/255.0.0.0
acl lan src 192.168.0.0/255.255.0.0
acl manager proto cache_object

# NO CACHE
cache_dir null /usr/local/squid/var/cache
no_cache deny all
cache_mem 3 MB 

# ACCESS IS RESTRICTED TO RFC 1918 HOSTS
http_access allow lan
http_access deny manager
http_access allow all
http_reply_access allow all

# SECURITY
forwarded_for off
header_access Via deny all
header_access X-Forwarded-For deny all
cachemgr_passwd disable all

# EOF