<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_ym19_1_1496094820873_2765" dir="ltr">I will be remotely accessing squid 3.5 for general web usage, using an encrypted browser-to-proxy connection, and username/password authentication. I believe my config is reasonably secure as it's based off the default config, but I'm unsure of myself due to some confusion. Are there any glaring issues with what I have?</div><div id="yui_3_16_0_ym19_1_1496094820873_2765" dir="ltr"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3075">https_port PORTNUMBER cert=/etc/squid/squid.pem<br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3079"><br id="yui_3_16_0_ym19_1_1496094820873_3080"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3081">acl localnet src 192.168.0.0/16 # RFC1918 possible internal network</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3082">acl localnet src fc00::/7 # RFC 4193 local private network range</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3083">acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3084">acl SSL_ports port 443</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3085">acl Safe_ports port 80 # http</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3086">acl Safe_ports port 21 # ftp</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3087">acl Safe_ports port 443 # https</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3088">acl Safe_ports port 70 # gopher</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3089">acl Safe_ports port 210 # wais</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3090">acl Safe_ports port 280 # http-mgmt</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3091">acl Safe_ports port 488 # gss-http</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3092">acl Safe_ports port 591 # filemaker</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3093">acl Safe_ports port 777 # multiling http</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3094">acl Safe_ports port 1025-65535 # unregistered ports</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3095">acl CONNECT method CONNECT</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3096">http_access deny !Safe_ports</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3097">http_access deny CONNECT !SSL_ports</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3098">http_access deny manager</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3099">#</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3100"># INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3101">#</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3102">auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3103">auth_param basic children 5</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3104">auth_param basic realm Squid proxy-caching web server</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3105">auth_param basic credentialsttl 2 hours</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3106">auth_param basic casesensitive on</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3107">acl ncsa_users proxy_auth REQUIRED</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3108"><br id="yui_3_16_0_ym19_1_1496094820873_3109"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3110">http_access allow ncsa_users</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3111">http_access deny all</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3112"><br id="yui_3_16_0_ym19_1_1496094820873_3113"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3114">refresh_pattern ^ftp: 1440 20% 10080</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3115">refresh_pattern ^gopher: 1440 0% 1440</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3116">refresh_pattern -i (/cgi-bin/|\?) 0 0% 0</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3117">refresh_pattern . 0 20% 4320</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3118"><br id="yui_3_16_0_ym19_1_1496094820873_3119"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3120">cache deny all</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3121">access_log none</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3122">netdb_filename none</div><div dir="ltr" id="yui_3_16_0_ym19_1_1496094820873_3123"><br id="yui_3_16_0_ym19_1_1496094820873_3124"></div></div></body></html>