pid_filename /var/run/squid-authenticating-ntlm.pid
access_log /var/log/squid/access-authenticating-ntlm.log
cache_log /var/log/squid/cache-authenticating-ntlm.log
cache_store_log /var/log/squid/store-authenticating-ntlm.log
http_port 3130
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
refresh_pattern ^ftp:        1440    20%    10080
refresh_pattern ^gopher:    1440    0%    1440
refresh_pattern .        0    20%    4320
acl port3130 myport 3130
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80         # http
acl Safe_ports port 21         # ftp
acl Safe_ports port 443 563    # https, snews
acl Safe_ports port 70         # gopher
acl Safe_ports port 210        # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280        # http-mgmt
acl Safe_ports port 488        # gss-http
acl Safe_ports port 591        # filemaker
acl Safe_ports port 777        # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow localhost


# port 3130: ntlm auth
auth_param ntlm program /usr/lib/squid/ntlm_smb_lm_auth --debuglevel=5 --logfile=/var/log/ntlm --log-basename=/var/log/ntlm --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 2
acl ntlm_users proxy_auth REQUIRED
http_access allow port3130 ntlm_users
http_reply_access allow port3130 ntlm_users

icp_access allow all
coredump_dir /var/cache/squid