]> git.ipfire.org Git - ipfire-2.x.git/commitdiff
fix downloading Snort rules if behind upstream proxy
authorPeter Müller <peter.mueller@link38.eu>
Mon, 29 Oct 2018 17:49:49 +0000 (18:49 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Thu, 1 Nov 2018 10:30:08 +0000 (10:30 +0000)
Currently, the wget call only uses proxy information for HTTP.
Since rulesets are downloaded via HTTPS now, the same information
also needs to be applied for HTTPS.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/ids.cgi

index d9d697debb7e830dfd40e16f1bc6dfddc1b9d8af..eddfc387c65c6a90f794d08624679fc02b173084 100644 (file)
@@ -692,7 +692,7 @@ sub downloadrulesfile {
        }
 
        if ($peer) {
-               system("wget -r --proxy=on --proxy-user=$proxysettings{'UPSTREAM_USER'} --proxy-passwd=$proxysettings{'UPSTREAM_PASSWORD'} -e http_proxy=http://$peer:$peerport/ -o /var/tmp/log --output-document=/var/tmp/snortrules.tar.gz $url");
+               system("wget -r --proxy=on --proxy-user=$proxysettings{'UPSTREAM_USER'} --proxy-passwd=$proxysettings{'UPSTREAM_PASSWORD'} -e http_proxy=http://$peer:$peerport/ -e https_proxy=http://$peer:$peerport/ -o /var/tmp/log --output-document=/var/tmp/snortrules.tar.gz $url");
        } else {
                system("wget -r -o /var/tmp/log --output-document=/var/tmp/snortrules.tar.gz $url");
        }