Ubuntu-fr

cache_peer localhost parent 8118 0 default no-query no-digest no-netdb-exchange
never_direct allow all
#
#
# Autoriser son réseau local dans les ALC avec la ligne ci-dessous :
acl localnet src 192.168.1.0/24

acl SSL_ports port 443          # https
acl Safe_ports port 80        # http
acl Safe_ports port 21        # ftp
acl SSL_ports port 22           # ssh
acl Safe_ports port 443        # https
acl Safe_ports port 70        # gopher
acl Safe_ports port 22
acl Safe_ports port 210        # wais
acl Safe_ports port 1025-65535    # unregistered ports
acl Safe_ports port 280        # http-mgmt
acl Safe_ports port 488        # gss-http
acl Safe_ports port 591        # filemaker
acl Safe_ports port 777        # multiling http
acl CONNECT method CONNECT

http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# Only allow cachemgr access from localhost
http_access allow localhost manager
http_access deny manager

http_access allow localnet # Autorise les machines de votre réseau à accéder au Proxy
http_access allow localhost
# And finally deny all other access to this proxy
http_access deny all

# Squid normally listens to port 3128
http_port 3128 # Déclaration du port d'écoute de Squid (3128 par défaut mais peut être changé ici)

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# Add any of your own refresh_pattern entries above these.

refresh_pattern ^ftp:        1440    20%    10080
refresh_pattern ^gopher:    1440    0%    1440
refresh_pattern -i (/cgi-bin/|\?) 0    0%    0
refresh_pattern .        0    20%    4320

# Déclaration du répertoire de cache utilisé par Squid et de la taille utilisable (ici 80%)
cache_mem 256 MB # cache en RAM
#cache_dir ufs /CacheSquid 358 16 256
cache_replacement_policy lru
memory_replacement_policy lru

# Les valeurs off et deny all servent à masquer les adresses IP locales dans les requêtes HTTP.
# Un peu de confidentialité ne peut jamais faire de mal ;)
via off
forwarded_for off
follow_x_forwarded_for deny all
request_header_access X-Forwarded-For deny all
#header_access X_Forwarded_For deny all

# Paramètres des connections persistantes
half_closed_clients off
server_persistent_connections off # on interdit les connexions persistantes des serveurs
client_persistent_connections on
client_lifetime 15 minutes
persistent_request_timeout 2 minutes

# Delais de connexions des serveurs
connect_timeout 30 seconds
request_timeout 2 minutes
read_timeout 2 minutes

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90% 432000 override-expire ignore-no-cache ignore-no-store ignore-priv>
refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|tiff)$ 10080 90% 43200 override-expire ignore-no-cache ignore-no-store ig>
refresh_pattern -i \.index.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
refresh_pattern -i . 0 40% 40320

###ICI on peut spécifier un autre serveur DNS si on le souhaite
dns_nameservers 192.168.1.100
#
# fix timeouts#
#dns_v4_first on

/etc/init.d/squid start
Starting squid (via systemctl): squid.serviceJob for squid.service failed because a timeout was exceeded.
See "systemctl status squid.service" and "journalctl -xeu squid.service" for details.
 failed!

journalctl -xeu squid.service
déc. 12 14:37:05 freedombox squid[6182]: WARNING: BCP 177 violation. Detected non-functional IPv6 loopback.
déc. 12 14:37:05 freedombox squid[6182]: Squid Parent: will start 1 kids
déc. 12 14:37:05 freedombox squid[6182]: Squid Parent: (squid-1) process 6184 started
déc. 12 14:37:06 freedombox (squid-1)[6184]: WARNING: BCP 177 violation. Detected non-functional IPv6 loopback.
déc. 12 14:37:06 freedombox squid[6184]: Set Current Directory to /var/spool/squid
déc. 12 14:37:06 freedombox squid[6184]: Starting Squid Cache version 5.2 for arm-unknown-linux-gnueabihf...
déc. 12 14:37:06 freedombox squid[6184]: Service Name: squid
déc. 12 14:37:06 freedombox squid[6184]: Process ID 6184
déc. 12 14:37:06 freedombox squid[6184]: Process Roles: worker
déc. 12 14:37:06 freedombox squid[6184]: With 1024 file descriptors available
déc. 12 14:37:06 freedombox squid[6184]: Initializing IP Cache...
déc. 12 14:38:35 freedombox systemd[1]: squid.service: start operation timed out. Terminating.
déc. 12 14:38:35 freedombox systemd[1]: squid.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ 
░░ An ExecStart= process belonging to unit squid.service has exited.
░░ 
░░ The process' exit code is 'exited' and its exit status is 1.
déc. 12 14:38:35 freedombox systemd[1]: squid.service: Failed with result 'timeout'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ 
░░ The unit squid.service has entered the 'failed' state with result 'timeout'.
déc. 12 14:38:35 freedombox systemd[1]: Failed to start Squid Web Proxy Server.
░░ Subject: L'unité (unit) squid.service a échoué
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ 
░░ L'unité (unit) squid.service a échoué, avec le résultat failed.
déc. 12 14:38:35 freedombox systemd[1]: squid.service: Consumed 1min 29.855s CPU time.
Subject: Ressources consommées durant l'éxécution de l'unité (unit)
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ 
░░ L'unité (unit) squid.service s'est arrêtée et a consommé les ressources indiquées.

  firewall-cmd --zone=internal --list-all 

 internal (active)
  target: default
  icmp-block-inversion: no
  interfaces: enxb827ebf409a1
  sources: 
  services: dhcp dhcpv6-client dns http https mdns privoxy samba samba-client ssh wireguard-freedombox
  ports: 3129/tcp
  protocols: 
  forward: no
  masquerade: no
  forward-ports: 
	port=80:proto=tcp:toport=3128:toaddr=192.168.1.99
	port=443:proto=tcp:toport=3129:toaddr=192.168.1.99
  source-ports: 
  icmp-blocks: 
  rich rules: