config 3proxy 'global'
	option enabled '0'
	option nscache '65536'
#	option nscache6 '65536'
	# static records, added to the cache; 0.0.0.0 blackholes a name
#	list nsrecord 'ads.example.com 0.0.0.0'
	option maxconn '128'
	option auth 'iponly'
	option log 'syslog'
#	option timeouts '1 5 30 60 180 1800 15 60 15 5 5'
#	list include '/etc/3proxy/extra.cfg'
	list nserver '8.8.8.8'
	list nserver '8.8.4.4'
#	list user 'admin:CL:password'
#	list extra_config 'timeouts 1 5 30 60 180 1800 15 60'
	# access list used by services which do not define their own
	list acl 'lan'

# Access rules are named sections referenced by services. The order of the
# references decides precedence: 3proxy stops at the first rule that matches.
config acl 'lan'
	option action 'allow'
	option src '192.168.1.0/24'

config acl 'deny_private'
	option action 'deny'
	option dst '10.0.0.0/8,172.16.0.0/12,192.168.0.0/16'

#config acl 'via_upstream'
#	option action 'allow'
#	list parent 'upstream'

# Parent proxies extend an allow rule to build a chain. Weights group them:
# parents whose weights sum to 1000 form one group and one is picked at random,
# several groups are chained in order.
#config parent 'upstream'
#	option weight '1000'
#	option type 'socks5'
#	option ip '10.0.0.1'
#	option port '1080'
#	option username ''
#	option password ''

config service 'proxy'
	option enabled '0'
	option type 'proxy'
	option port '3128'
#	option bind ''
#	option external ''
#	option extra ''
#	option auth 'strong'
	list acl 'deny_private'
	list acl 'lan'

config service 'socks'
	option enabled '0'
	option type 'socks'
	option port '1080'
	list acl 'lan'