#ACL
external_acl_type proxy-access children-startup=5 children-max=200 ipv4 %LOGIN /usr/lib/squid3/ext_kerberos_ldap_group_acl -g G_Proxy_Access -m 64 -D DOMAIN.LOCAL
external_acl_type proxy-access-vip children-startup=5 children-max=200 ipv4 %LOGIN /usr/lib/squid3/ext_kerberos_ldap_group_acl -g G_Proxy_Access_Vip -m 64 -D DOMAIN.LOCAL
external_acl_type proxy-stat children-startup=5 children-max=10 ipv4 %LOGIN /usr/lib/squid3/ext_kerberos_ldap_group_acl -g G_Proxy_Stat -m 64 -D DOMAIN.LOCAL
acl InetAccess external proxy-access
acl InetAccessVip external proxy-access-vip
acl ProxyStat external proxy-stat
#####Skype
acl numeric_IPs dstdom_regex ^(([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)|(\[([0-9a-f]+)?
[0-9a-f:]+)?
[0-9a-f]+|0-9\.]+)?\])):443
acl Skype_UA browser ^skype
#####
acl Stat dstdomain proxy
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl CONNECT method CONNECT
#Временная acl
acl uk-pc src 10.10.5.220
acl yv-ws src 10.10.5.30
#Правила доступа
http_access allow SSL_ports
http_access deny !Safe_ports
http_access allow CONNECT numeric_IPS Skype_UA
http_access deny CONNECT !SSL_ports
#Временное правило
http_access allow uk-pc
http_access allow yv-ws
#
http_access deny Stat !ProxyStat
http_access allow InetAccessVip
http_access allow InetAccess
http_access deny to_localhost
http_access allow localhost
http_access deny all