#   Squid.conf preconfig for LinuxSIS 5.5
#WebA means such lines will be edited by WebAdmin in order to advance proxy configuration.

# SIS 5.5 Config WebA
http_port 8080 transparent

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

# SIS 5.5 Config WebA
cache_dir ufs /var/spool/squid 1024 16 256

# SIS 5.5 Config WebA
#redirect_program /usr/bin/squidGuard -c /etc/squid/squidguard-blacklists.conf

# SIS 5.5 Config WebA
redirect_children 5
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server

# SIS 5.5 Config WebA
# Dont forget to edit network here

acl SIS5_Network src 192.168.0.0/16
http_access allow SIS5_Network

# SIS 5.5 Config WebA LDAP auth Mod
#auth_param basic credentialsttl 2 hours
auth_param basic credentialsttl 30 seconds
auth_param basic casesensitive off

#--ตรงนี้ใช่ไมครับที่ให้แก้ เพื่อที่จะให้ถาม User password --- 

# SIS 5.5 Config WebA LDAP auth chk
#auth_param basic program /usr/lib/squid/squid_ldap_auth -b "ou=People,dc=sis,dc=com" localhost
auth_param basic program /usr/lib/squid/squid_ldap_auth -b "ou=People,dc=sis,dc=com" -f "(&(uid=%s)(l=web))" localhost

auth_param basic children 5
auth_param basic credentialsttl 30 seconds

acl SIS55_ldpass proxy_auth REQUIRED
http_access allow SIS5_Network SIS55_ldpass #-เห็นในกระทู้http://www.opentle.org/th/node/4237 คุณumphai2008 บอกว่าเป็นปัญหาทำให้ไม่ถามผมก็ใส่แต่ก็ไม่ถามอยู่ดี

#-------------------------------------------------

# SIS 5.5 BW_Control  WebA Mod for Gaysorn
#acl SIS55_Big src 192.168.10.7/32
#acl all_network src 192.168.0.0/16
#delay_pools 2
#delay_class 1 2
#delay_parameters 1 64000/64000 32000/32000
#delay_access 1 deny SIS55_Big
#delay_access 1 allow !SIS55_Big #all_network
#delay_class 2 2
#delay_parameters 2 64000/64000 64000/64000
#delay_access 2 allow SIS55_Big

#SIS 5.5 WebA authen by mac address

#acl SIS55_MacAdd arp 11:12:13:14:15:16
#http allow SIS55_MacAdd
#http deny !SIS55_MacAdd

#Default value from org squid

refresh_pattern ^ftp:  1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern .  0 20% 4320

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80  # http
acl Safe_ports port 21  # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70  # gopher
acl Safe_ports port 210  # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280  # http-mgmt
acl Safe_ports port 488  # gss-http
acl Safe_ports port 591  # filemaker
acl Safe_ports port 777  # multiling http
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all

# SIS 5.5 Config
visible_hostname LinuxSIS_55_Test1

# SIS 5.0 Config_Trans WebA in 55 is change to one line in the same line with port

#httpd_accel_host virtual
#httpd_accel_port 80
#httpd_accel_with_proxy on
#httpd_accel_uses_host_header on

coredump_dir /var/spool/squid
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log squid