acl SSL_ports port 443
acl CONNECT method CONNECT
acl lan src 172.29.236.0/22

http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access allow lan
http_access deny manager
http_access allow localhost
http_access deny all

http_port 3128

coredump_dir /var/spool/squid

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
refresh_pattern .               0       20%     4320