Squid Proxy

Squid is an http proxy. Ive installed the software to optimize my internet bandwith -
more precisly my transfer volume.
Squid helps my by caching DNS-Requests and of course all my internet-used-files.

v4.x

compile

$ make distclean
$ ./configure  --prefix=/opt/squid --enable-ssl --enable-http-violations 
   --enable-icmp --disable-ipv6 CFLAGS="-march=native -O3 -fomit-frame-pointer -pipe"
$ make 
$ make install
# chown -R nobody:nobody /opt/squid/var/*

configure
Online Subnet Calculator

# ./squid -z
in combination with firewall rules to block all other traffic
SteamEndpoints
TCP/80, TCP/443, TCP/27015-27030,
UDP/27000-27030, UDP/4380
steampowered.com
steamcommunity.com
steamgames.com
steamusercontent.com
steamcontent.com
steamstatic.com
akamaihd.net
TOR NetworkEntry Points in torrc
TCP/80, TCP/443,
TCP/9001, TCP/9030
EntryNodes 176.10.104.240,176.10.104.243,94.230.208.147,94.230.208.148,195.176.3.19,195.176.3.20,195.176.3.23,195.176.3.24
Steam KB - TOR Nodelist / TOR-Servers der Digitale-Gesellschaft / TOR Network Status
DataDirectory C:\Users\todo\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor
EntryNodes 176.10.104.240,176.10.104.243,94.230.208.147,94.230.208.148,195.176.3.19,195.176.3.20,195.176.3.23,195.176.3.24
ExcludeNodes {fr},{??}
ExcludeExitNodes {us},{au},{ca},{nz},{gb},{fr},{??}
GeoIPFile C:\Users\todo\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip
GeoIPv6File C:\Users\todo\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6
StrictNodes 1

ReachableDirAddresses *:80
ReachableORAddresses *:443
ReachableORAddresses *:9001
ReachableORAddresses *:9030

squid-acls - How to read SQUID Logs
HTTP Header Check by xhaus.com - by urih.com

Microsoft Update Blacklist

$ cat squid.conf
acl blacklistwindowsupdate dstdomain "/opt/squid/etc/blacklist-windows-update.lst"
# Deny Windows Update URLs
http_access deny blacklistwindowsupdate
$ cat blacklist-windows-update.lst
update.microsoft.com
download.microsoft.com
windowsupdate.com
ntservicepack.microsoft.com
wustat.windows.com
mp.microsoft.com
Anonymize
$ cat squid.conf
# Privacy Settings
via off

#forwarded_for off
forwarded_for delete

request_header_access Allow allow all
request_header_access Authorization allow all
request_header_access WWW-Authenticate allow all
request_header_access Proxy-Authorization allow all
request_header_access Proxy-Authenticate allow all
request_header_access Cache-Control allow all
request_header_access Content-Encoding allow all
request_header_access Content-Length allow all
request_header_access Content-Type allow all
request_header_access Date allow all
request_header_access Expires allow all
request_header_access Host allow all
request_header_access If-Modified-Since allow all
request_header_access Last-Modified allow all
request_header_access Location allow all
request_header_access Pragma allow all
request_header_access Accept allow all
request_header_access Accept-Charset allow all
request_header_access Accept-Encoding allow all
request_header_access Accept-Language allow all
request_header_access Content-Language allow all
request_header_access Mime-Version allow all
request_header_access Retry-After allow all
request_header_access Title allow all
request_header_access Connection allow all
request_header_access Proxy-Connection allow all
request_header_access Cookie allow all
request_header_access All deny all

reply_header_access From deny all
reply_header_access Referer deny all
reply_header_access Server deny all
reply_header_access User-Agent deny all
reply_header_access Link deny all
reply_header_access Via deny all

request_header_access User-Agent deny all
request_header_replace User-Agent Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
header_replace User-Agent Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:20.0) Gecko/20100101 Firefox/20.0

v2.x

configure

# ./configure  --prefix=/opt/squid --enable-kill-parent-hack --enable-ssl
  --with-ssl=/opt/openssl --disable-hostname-checks
# make all
# make install

dont forget to create the temp-directories before the first start and the directory /var/squid needs the permission nobody:nogroup.

# ./squid -z

manuals

configuration manual (PDF) -- guide
FAQ -- User Guide

links

www.squid-cache.org -- Blocking IE using squid