вот конфиг 
## OPTIONS FOR AUTHENTICATION 
# ----------------------------------------------------------------------------- 
# TAG: auth_param 
# Negotiate Kerberos and NTLM authentication 
auth_param negotiate program /usr/lib/squid3/negotiate_wrapper_auth --ntlm /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --kerberos /usr/lib/squid3/negotiate_kerberos_auth -r -s HTTP/
dc2.ber.local@BER.LOCAL 
auth_param negotiate children 200 startup=50 idle=10 
auth_param negotiate keep_alive off 
auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp 
auth_param ntlm children 20 
auth_param ntlm keep_alive on 
auth_param basic program /usr/lib/squid3/basic_ldap_auth 
auth_param basic children 5 
auth_param basic realm "dc2.BER.LOCAL SQUID Proxy Server Basic authentication!" 
auth_param basic credentialsttl 2 hour 
# TAG: authenticate_cache_garbage_interval 
# TAG: authenticate_ttl 
# TAG: authenticate_ip_ttl 
## ACCESS CONTROLS 
# ----------------------------------------------------------------------------- 
# TAG: external_acl_type 
# TAG: acl 
acl Sams2Time1 time MTWHFAS 00:00-23:59 
acl Sams2Template1 proxy_auth user 
acl Sams2Template2 proxy_auth администратор 
acl Sams2Template3 proxy_auth update 
acl localnet src 192.168.1.0/24 
acl SSL_ports port 443 
acl Safe_ports port 80	# http 
acl Safe_ports port 21	# ftp 
acl Safe_ports port 443	# https 
acl Safe_ports port 70	# gopher 
acl Safe_ports port 210	# wais 
acl Safe_ports port 1025-65535	# unregistered ports 
acl Safe_ports port 280	# http-mgmt 
acl Safe_ports port 488	# gss-http 
acl Safe_ports port 591	# filemaker 
acl Safe_ports port 777	# multiling http 
acl CONNECT method CONNECT 
# TAG: http_access 
# Setup Sams2 HTTP Access here 
http_access allow Sams2Template1 
http_access allow Sams2Template2 
http_access allow Sams2Template3 
http_access deny !Safe_ports 
http_access deny CONNECT !SSL_ports 
http_access allow localhost manager 
http_access allow localnet manager 
http_access deny manager 
# Deny all 
http_access deny all 
## NETWORK OPTIONS 
# ----------------------------------------------------------------------------- 
# TAG: http_port 
http_port 3128 
## MEMORY CACHE OPTIONS 
# ----------------------------------------------------------------------------- 
# TAG: cache_mem 
cache_mem 1024 MB 
maximum_object_size_in_memory 1024 KB 
## DISK CACHE OPTIONS 
# ----------------------------------------------------------------------------- 
# TAG: cache_dir 
cache_dir ufs /var/spool/squid3 8192 16 256 
maximum_object_size 32 MB 
## LOGFILE OPTIONS 
# ----------------------------------------------------------------------------- 
# TAG: access_log 
access_log daemon:/var/log/squid3/access.log squid 
## OPTIONS FOR TROUBLESHOOTING 
# TAG: cache_log 
cache_log /var/log/squid3/cache.log 
# TAG: coredump_dir 
coredump_dir /var/spool/squid3 
## OPTIONS FOR URL REWRITING 
# ----------------------------------------------------------------------------- 
# TAG: url_rewrite_program 
# TAG: url_rewrite_children 
# TAG: url_rewrite_host_header 
# TAG: url_rewrite_access 
url_rewrite_program /usr/bin/samsredir 
## OPTIONS FOR TUNING THE CACHE 
# ----------------------------------------------------------------------------- 
# TAG: refresh_pattern 
refresh_pattern ^ftp:	1440	20%	10080 
refresh_pattern ^gopher:	1440	0%	1440 
refresh_pattern -i (/cgi-bin/|\?) 0	0%	0 
refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880 
# example lin deb packages 
#refresh_pattern (\.deb|\.udeb)$ 129600 100% 129600 
refresh_pattern .	0	20%	4320 
# TAG: quick_abort_min	(KB) 
quick_abort_min 0 KB 
# TAG: quick_abort_max	(KB) 
quick_abort_max 0 KB 
# TAG: quick_abort_pct	(percent) 
quick_abort_pct 100 
fqdncache_size 1024 
cache_swap_high 95 
cache_swap_low 90 
ipcache_size 1024 
ipcache_high 95 
ipcache_low 90