root@SERVER-SMP2WNO:~# squid -k reconfigure
2013/10/28 20:39:00| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2013/10/28 20:39:00| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2013/10/28 20:39:00| WARNING: You should probably remove '::/0' from the ACL named 'all'
2013/10/28 20:39:00| WARNING: (B) '127.0.0.1' is a subnetwork of (A) '127.0.0.1'
2013/10/28 20:39:00| WARNING: because of this '127.0.0.1' is ignored to keep splay tree searching predictable
2013/10/28 20:39:00| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost'
2013/10/28 20:39:00| WARNING: (B) '127.0.0.0/8' is a subnetwork of (A) '127.0.0.0/8'
2013/10/28 20:39:00| WARNING: because of this '127.0.0.0/8' is ignored to keep splay tree searching predictable
2013/10/28 20:39:00| WARNING: You should probably remove '127.0.0.0/8' from the ACL named 'to_localhost'
FATAL: Bungled squid.conf line 14: pipeline_prefetch 100
Squid Cache (Version 3.HEAD-20130412-r12755): Terminated abnormally.
CPU Usage: 0.004 seconds = 0.004 user + 0.000 sys
Maximum Resident Size: 19520 KB
Page faults with physical i/o: 0
root@SERVER-SMP2WNO:~#

cache_mem 8 MB
cache_swap_low 98
cache_swap_high 99

maximum_object_size 128 MB
maximum_object_size_in_memory 32 KB

ipcache_size 2048
ipcache_low 98
ipcache_high 99

memory_pools off
reload_into_ims on
pipeline_prefetch 100

cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
cache_dir aufs /cache1 40000 93 256
cache_dir aufs /cache2 40000 93 256

access_log /var/log/squid3/access.log
cache_store_log none
cache_log /var/log/squid3/cache.log


#acl all src
acl localnet src 192.168.5.0/24
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT

dns_nameservers 192.168.2.254

always_direct allow all
ssl_bump server-first all

http_access allow localnet
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow all
http_reply_access allow all
icp_access allow all

https_port 3127 tproxy ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid3/ssl_cert/myCA.pem
http_port 3128
http_port 3129 tproxy

sslcrtd_program /usr/lib/squid3/ssl_crtd -c -s /etc/squid3/ssl_db -M 4MB
sslcrtd_children 5
sslproxy_cert_error deny all

refresh_pattern ^ftp: 40320 20% 40320 override-expire reload-into-ims store-stale
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern \.(php|jsp|cgi|asx)\? 0 0% 0
refresh_pattern . 0 50% 525600 store-stale

cache_mgr mesaidlg@gmail.com
visible_hostname squid3Head