http_port 3128
visible_hostname coloque aqui o nome da sua maquina
cache_mem  60 MB
maximum_object_size 4096 KB
minimum_object_size 0 KB
cache_dir ufs /var/cache/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
mime_table /etc/squid/mime.conf
client_netmask 255.255.255.255
#Default:
refresh_pattern         ^ftp:           1440    20%     10080
refresh_pattern         ^gopher:        1440    0%      1440
refresh_pattern         .               0       20%     4320
#Defaults:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
auth_param basic program /usr/bin/ncsa_auth /etc/squid/regras/passwd
auth_param basic children 5
auth_param basic realm Digite login e senha:
auth_param basic credentialsttl 1 hours

acl passwd proxy_auth REQUIRED
#usuarios com acesso a tudo
acl master proxy_auth "/etc/squid/regras/master"
#usuários controlados
acl users proxy_auth "/etc/squid/regras/users"
acl anderson proxy_auth "/etc/squid/regras/anderson" #usuário(s) amarados ao anderson-sites.txt
acl anderson_sites url_regex "/etc/squid/regras/anderson_sites.txt"
acl negapalavra url_regex "/etc/squid/regras/negapalavra.txt"
acl minharede src 192.168.1.0/255.255.255.0
 
# Nega tudo e libera somente para os usarios master
http_access deny  negapalavra !master

#http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

# Acesso liberado para os usuáios masters
http_access allow master

# Libera tudo para os usuários anderson anderson_sites
http_access allow anderson anderson_sites

# Libera tudo para os usuários users menos o negapalavra
http_access allow users !negapalavra

# Nega todo o resto da rede
http_access deny all

http_access allow minharede
icp_access allow all
miss_access allow all
cache_effective_user proxy
cache_effective_group proxy