# Define the port Squid will listen on
http_port 3128
# Updated cache settings
cache_dir ufs C:/Squid/var/cache/squid 50000 20 280
coredump_dir C:/Squid/var/cache/squid
cache_mem 256 MB
minimum_object_size 8 MB
maximum_object_size 8192 MB
# Access control lists
acl localhost src [Link]/32 ::1
acl localnet src [Link]/16 # Adjust to match your home network
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
# Only allow manager access from localhost
http_access allow localhost manager
http_access deny manager
# Deny requests to unsafe ports
http_access deny !Safe_ports
# Deny CONNECT to non-SSL ports
http_access deny CONNECT !SSL_ports
# Allow localhost and local network
http_access allow localnet
http_access allow localhost
# Deny all other access
http_access deny all
# Security settings
forwarded_for off
request_header_access X-Forwarded-For deny all
request_header_access Via deny all
request_header_access Cache-Control deny all
# Recommended performance tuning
pconn_timeout 5 minutes
pipeline_prefetch on
# DNS settings
dns_v4_first on
dns_nameservers [Link] [Link] # Cloudflare and Google DNS
# Windows paths for log files - Diladele standard paths
access_log C:/Squid/var/log/squid/[Link]
cache_log C:/Squid/var/log/squid/[Link]
cache_store_log C:/Squid/var/log/squid/[Link]
# Log rotation - keeps logs from growing too large
logfile_rotate 10
# Refresh patterns for better caching
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320