# SQUID.CONF for Windows - Philippe Bourcier
# WITH HOSTS FILE BLACKLIST
# NO CACHE
# NO LOGS
# NO PROBLEMS :)

# GENERAL
http_port 192.168.0.254:8080       # don't put a public IP in there
icp_port 0
htcp_port 0
snmp_port 0
snmp_incoming_address 127.0.0.1
udp_incoming_address 127.0.0.1
udp_outgoing_address 127.0.0.1
auth_param basic children 5
auth_param basic realm Squid
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
cache_mgr root@localho.st           # your email...
visible_hostname 192.168.0.254      # IP or hostname of your proxy
client_db off
error_directory C:/squid/share/errors/English
prefer_direct on
icon_directory C:/squid/share/icons
mime_table C:/squid/etc/mime.conf

# DNS
fqdncache_size 409600
positive_dns_ttl 1 minutes
negative_dns_ttl 1 minutes

# BLACKLIST
hosts_file C:/squid/etc/hosts.win

# LOGS
logfile_rotate 5
cache_log none
cache_store_log none
log_icp_queries off
emulate_httpd_log off

# ACL
acl all src 0.0.0.0/0.0.0.0
acl lan src 127.0.0.0/255.0.0.0
acl lan src 192.168.0.0/255.255.0.0
acl manager proto cache_object

# NO CACHE
cache_dir null C:\squid\
no_cache deny all
cache_mem 3 MB

# ACCESS IS RESTRICTED TO RFC 1918 HOSTS
http_access allow lan
http_access deny manager
http_access allow all
http_reply_access allow all

# SECURITY
forwarded_for off
header_access Via deny all
header_access X-Forwarded-For deny all
cachemgr_passwd disable all

# EOF