Squid.conf гляньте

# Доступ к прокси с внутр. интерфейса и прозрачное проксирование
http_port 3128 transparent
# Каталог для  хранения кэша  размером  1 Gb, 16 каталогов первого уровня и 256 второго
cache_dir ufs /var/spool/squid 1024 16 256
# Размер оперативной памяти, предоставляемой кэшу
cache_mem 64 MB
# Максимальный размер объекта, записываемого в кэш
maximum_object_size 10 MB
# Не кешировать динамически генерируемые страницы (поисковые сервера, некоторые другие серверы и чаты), а напрямую перенаправлять запрос серверу.
hierarchy_stoplist cgi-bin ?
#HAVP
cache_peer 127.0.0.1 parent 8088 0 no-query no-digest no-netdb-exchange default
# токо HTTP в HAVP
acl Scan_HTTP proto HTTP
never_direct allow Scan_HTTP
forwarded_for on
#Список доступа
acl all src 0.0.0.0/0.0.0.0
acl localnet src 172.16.0.0/24
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
#REJIK
redirect_program /usr/local/rejik3/redirector /usr/local/rejik3/redirector.conf
#Запрещённые порты
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
#Порты
acl https port 443                      #443
acl http port 80          # http
acl ftp port 21          # ftp
acl other port 1025-65535       # other
#Режем размер файлов 10 мб
reply_body_max_size 10000000 allow localnet
reply_body_max_size 0 deny all
#Блокируем сайты
acl banner url_regex "/etc/squid/ban.txt"
http_access deny banner
# Режем банеры
acl     bad_url_path    urlpath_regex   "/etc/squid/bad_url_path.txt"
http_access deny bad_url_path
# Режем порно
acl     bad_porno       url_regex       "/etc/squid/porno.txt"
http_access deny bad_porno
#Блокируем конент
acl media urlpath_regex -i \.mpeg \.mov \.asf$ \.wma$ \.iso \.nrg \.tib \.wav \.wmv \.mpg \.vob \.ogg \.exe \.com \.bat \.cmd \.mp3 \.avi \.flv
http_reply_access deny media
#Кеш
refresh_pattern -i \.gif$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.png$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.jpg$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.jpeg$ 43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.pdf$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.zip$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.tar$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.gz$   43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.tgz$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.exe$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.prz$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.ppt$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.inf$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.swf$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.mid$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.wav$  43200 100% 43200 override-lastmod override-expire
refresh_pattern -i \.mp3$  43200 100% 43200 override-lastmod override-expire
#Режем скорость по портам
delay_pools 4
# сначала ограничим https
delay_class 1 1
delay_parameters 1 300000/300000
delay_access 1 allow https
delay_access 1 deny all
# ограничим http
delay_class 2 1
delay_parameters 2 600000/600000
delay_access 2 allow http
delay_access 2 deny all
# ограничим ftp
delay_class 3 1
delay_parameters 3 300000/300000
delay_access 3 allow ftp
delay_access 3 deny all
# ограничим other
delay_class 4 1
delay_parameters 4 300000/300000
delay_access 4 allow other
delay_access 4 deny all
#Политика
#http_access deny Safe_ports
http_access allow localnet
http_access allow localhost
http_access allow to_localhost
http_access deny all

acl all src 0.0.0.0/0.0.0.0

cache_peer 127.0.0.1 parent 8000 0 no-query no-digest no-netdb-exchange default
cache_peer_access 127.0.0.1 allow all

http_port Ваш IP:3128
icp_port 0

# Доступ к прокси с внутр. интерфейса и прозрачное проксирование
http_port 3128 transparent

===== Прикручиваем AVG =====
**cd /usr/src**
**wget http://download.avgfree.com/filedir/inst/avg85flx-r874-a3473.i386.deb**
**dpkg -i avg85flx-r874-a3473.i386.deb**
**/etc/init.d/avgd start**
**/usr/bin/avgupdate**
**sockstat | grep avg**
    root     avgtcpd              1303     tcp4   127.0.0.1:54321           *:*                       LISTEN
    root     avgtcpd              1303     tcp4   127.0.0.1:**54322**           *:*                       LISTEN
**nano /usr/local/etc/havp/havp.config**
в конец
    ENABLEAVG true
    
    # AVG daemon needs to run on the same server as HAVP
    #
    # Default:
    AVGSERVER 127.0.0.1
    AVGPORT 54322
**/etc/init.d/havp restart**

# ClamAV Socket Scanner (clamd)
#####
##### NOTE: ClamAV Library Scanner should be preferred (less overhead)
#####
ENABLECLAMD true
# Path to clamd socket
#
# Default:
CLAMDSOCKET /var/run/clamav/clamd.ctl
# ..OR if you use clamd TCP socket, uncomment to enable use
#
# Clamd daemon needs to run on the same server as HAVP
#
# Default: NONE
# CLAMDSERVER 127.0.0.1
# CLAMDPORT 3310