]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - html/cgi-bin/proxy.cgi
projects / people / pmueller / ipfire-2.x.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Removed the old svn commands and started with git.
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / proxy.cgi
CommitLineData
ac1cfefa 1#!/usr/bin/perl
70df8302
MT		 2###############################################################################
3# #
4# IPFire.org - A linux based firewall #
5# Copyright (C) 2007 Michael Tremer & Christian Schmidt #
6# #
7# This program is free software: you can redistribute it and/or modify #
8# it under the terms of the GNU General Public License as published by #
9# the Free Software Foundation, either version 3 of the License, or #
10# (at your option) any later version. #
11# #
12# This program is distributed in the hope that it will be useful, #
13# but WITHOUT ANY WARRANTY; without even the implied warranty of #
14# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15# GNU General Public License for more details. #
16# #
17# You should have received a copy of the GNU General Public License #
18# along with this program. If not, see <http://www.gnu.org/licenses/>. #
19# #
20###############################################################################
ac1cfefa
MT		 21
22use strict;
23
24# enable only the following on debugging purpose
cb5e9c6c
CS		 25#use warnings;
26#use CGI::Carp 'fatalsToBrowser';
ac1cfefa 27
ed38f89d 28require '/var/ipfire/general-functions.pl';
ac1cfefa
MT		 29require "${General::swroot}/lang.pl";
30require "${General::swroot}/header.pl";
31
363fb6af
MT		 32my @squidversion = `/usr/sbin/squid -v`;
33my $http_port='81';
34my $https_port='444';
35
18322edf
CS		 36my %color = ();
37my %mainsettings = ();
38&General::readhash("${General::swroot}/main/settings", \%mainsettings);
39&General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
40
ac1cfefa
MT		 41my %proxysettings=();
42my %netsettings=();
ed38f89d 43my %filtersettings=();
9fb25b1c 44my %xlratorsettings=();
ed38f89d 45my %stdproxysettings=();
ac1cfefa 46my %mainsettings=();
ed38f89d
MT		 47
48my %checked=();
49my %selected=();
50
51my @throttle_limits=(64,128,256,384,512,1024,2048,3072,5120);
52my $throttle_binary="bin|cab|exe|gz|rar|sea|tar|tgz|zip";
53my $throttle_dskimg="b5t|bin|bwt|ccd|cdi|cue|gho|img|iso|mds|nrg|pqi";
54my $throttle_mmedia="aiff?|asf|avi|divx|mov|mp3|mpe?g|qt|ra?m";
55
363fb6af
MT		 56my $def_ports_safe="80 # http\n21 # ftp\n443 # https\n563 # snews\n70 # gopher\n210 # wais\n1025-65535 # unregistered ports\n280 # http-mgmt\n488 # gss-http\n591 # filemaker\n777 # multiling http\n800 # Squids port (for icons)\n";
57my $def_ports_ssl="443 # https\n563 # snews\n";
58
ed38f89d
MT		 59my @useragent=();
60my @useragentlist=();
61
62my $hintcolour='#FFFFCC';
63my $ncsa_buttontext='';
64my $language='';
65my $i=0;
66my $n=0;
67my $id=0;
68my $line='';
69my $user='';
70my @userlist=();
71my @grouplist=();
72my @temp=();
73my @templist=();
74
75my $cachemem=0;
76my $proxy1='';
77my $proxy2='';
78my $replybodymaxsize=0;
79my $browser_regexp='';
80my $needhup = 0;
81my $errormessage='';
82
83my $acldir = "${General::swroot}/proxy/advanced/acls";
84my $ncsadir = "${General::swroot}/proxy/advanced/ncsa";
85my $ntlmdir = "${General::swroot}/proxy/advanced/ntlm";
86my $raddir = "${General::swroot}/proxy/advanced/radius";
87my $identdir = "${General::swroot}/proxy/advanced/ident";
88my $credir = "${General::swroot}/proxy/advanced/cre";
89
90my $userdb = "$ncsadir/passwd";
91my $stdgrp = "$ncsadir/standard.grp";
92my $extgrp = "$ncsadir/extended.grp";
93my $disgrp = "$ncsadir/disabled.grp";
94
95my $browserdb = "${General::swroot}/proxy/advanced/useragents";
96my $mimetypes = "${General::swroot}/proxy/advanced/mimetypes";
97my $throttled_urls = "${General::swroot}/proxy/advanced/throttle";
98
99my $cre_enabled = "${General::swroot}/proxy/advanced/cre/enable";
100my $cre_groups = "${General::swroot}/proxy/advanced/cre/classrooms";
101my $cre_svhosts = "${General::swroot}/proxy/advanced/cre/supervisors";
102
103my $identhosts = "$identdir/hosts";
104
8c55860f 105my $authdir = "/usr/lib/squid/";
f1baee3e 106my $errordir = "/usr/lib/squid/errors";
ed38f89d
MT		 107
108my $acl_src_subnets = "$acldir/src_subnets.acl";
109my $acl_src_banned_ip = "$acldir/src_banned_ip.acl";
110my $acl_src_banned_mac = "$acldir/src_banned_mac.acl";
111my $acl_src_unrestricted_ip = "$acldir/src_unrestricted_ip.acl";
112my $acl_src_unrestricted_mac = "$acldir/src_unrestricted_mac.acl";
113my $acl_src_noaccess_ip = "$acldir/src_noaccess_ip.acl";
114my $acl_src_noaccess_mac = "$acldir/src_noaccess_mac.acl";
115my $acl_dst_nocache = "$acldir/dst_nocache.acl";
116my $acl_dst_noauth = "$acldir/dst_noauth.acl";
117my $acl_dst_throttle = "$acldir/dst_throttle.acl";
363fb6af
MT		 118my $acl_ports_safe = "$acldir/ports_safe.acl";
119my $acl_ports_ssl = "$acldir/ports_ssl.acl";
ed38f89d
MT		 120my $acl_include = "$acldir/include.acl";
121
363fb6af
MT		 122my $updaccelversion = 'n/a';
123my $urlfilterversion = 'n/a';
124
ed38f89d
MT		 125unless (-d "$acldir") { mkdir("$acldir"); }
126unless (-d "$ncsadir") { mkdir("$ncsadir"); }
127unless (-d "$ntlmdir") { mkdir("$ntlmdir"); }
128unless (-d "$raddir") { mkdir("$raddir"); }
129unless (-d "$identdir") { mkdir("$identdir"); }
130unless (-d "$credir") { mkdir("$credir"); }
131
132unless (-e $cre_groups) { system("touch $cre_groups"); }
133unless (-e $cre_svhosts) { system("touch $cre_svhosts"); }
134
135unless (-e $userdb) { system("touch $userdb"); }
136unless (-e $stdgrp) { system("touch $stdgrp"); }
137unless (-e $extgrp) { system("touch $extgrp"); }
138unless (-e $disgrp) { system("touch $disgrp"); }
139
140unless (-e $acl_src_subnets) { system("touch $acl_src_subnets"); }
141unless (-e $acl_src_banned_ip) { system("touch $acl_src_banned_ip"); }
142unless (-e $acl_src_banned_mac) { system("touch $acl_src_banned_mac"); }
143unless (-e $acl_src_unrestricted_ip) { system("touch $acl_src_unrestricted_ip"); }
144unless (-e $acl_src_unrestricted_mac) { system("touch $acl_src_unrestricted_mac"); }
145unless (-e $acl_src_noaccess_ip) { system("touch $acl_src_noaccess_ip"); }
146unless (-e $acl_src_noaccess_mac) { system("touch $acl_src_noaccess_mac"); }
147unless (-e $acl_dst_nocache) { system("touch $acl_dst_nocache"); }
148unless (-e $acl_dst_noauth) { system("touch $acl_dst_noauth"); }
149unless (-e $acl_dst_throttle) { system("touch $acl_dst_throttle"); }
363fb6af
MT		 150unless (-e $acl_ports_safe) { system("touch $acl_ports_safe"); }
151unless (-e $acl_ports_ssl) { system("touch $acl_ports_ssl"); }
ed38f89d
MT		 152unless (-e $acl_include) { system("touch $acl_include"); }
153
154unless (-e $browserdb) { system("touch $browserdb"); }
155unless (-e $mimetypes) { system("touch $mimetypes"); }
156
157open FILE, $browserdb;
158@useragentlist = sort { reverse(substr(reverse(substr($a,index($a,',')+1)),index(reverse(substr($a,index($a,','))),',')+1)) cmp reverse(substr(reverse(substr($b,index($b,',')+1)),index(reverse(substr($b,index($b,','))),',')+1))} grep !/(^$)|(^\s*#)/,<FILE>;
159close(FILE);
ac1cfefa
MT		 160
161&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
162&General::readhash("${General::swroot}/main/settings", \%mainsettings);
163
9fb25b1c
MT		 164$filtersettings{'CHILDREN'} = '5';
165if (-e "${General::swroot}/urlfilter/settings") {
166 &General::readhash("${General::swroot}/urlfilter/settings", \%filtersettings);
ed38f89d
MT		 167}
168
9fb25b1c
MT		 169$xlratorsettings{'CHILDREN'} = '5';
170if (-e "${General::swroot}/updatexlrator/settings") {
171 &General::readhash("${General::swroot}/updatexlrator/settings", \%xlratorsettings);
ed38f89d
MT		 172}
173
ac1cfefa
MT		 174&Header::showhttpheaders();
175
176$proxysettings{'ACTION'} = '';
177$proxysettings{'VALID'} = '';
178
ac1cfefa
MT		 179$proxysettings{'ENABLE'} = 'off';
180$proxysettings{'ENABLE_BLUE'} = 'off';
ac1cfefa
MT		 181$proxysettings{'TRANSPARENT'} = 'off';
182$proxysettings{'TRANSPARENT_BLUE'} = 'off';
ed38f89d
MT		 183$proxysettings{'PROXY_PORT'} = '800';
184$proxysettings{'VISIBLE_HOSTNAME'} = '';
185$proxysettings{'ADMIN_MAIL_ADDRESS'} = '';
0d948999
CS		 186$proxysettings{'ERR_LANGUAGE'} = 'German';
187$proxysettings{'ERR_DESIGN'} = 'ipfire';
363fb6af 188$proxysettings{'SUPPRESS_VERSION'} = 'off';
ed38f89d
MT		 189$proxysettings{'FORWARD_VIA'} = 'off';
190$proxysettings{'FORWARD_IPADDRESS'} = 'off';
191$proxysettings{'FORWARD_USERNAME'} = 'off';
363fb6af 192$proxysettings{'NO_CONNECTION_AUTH'} = 'off';
ed38f89d
MT		 193$proxysettings{'UPSTREAM_PROXY'} = '';
194$proxysettings{'UPSTREAM_USER'} = '';
195$proxysettings{'UPSTREAM_PASSWORD'} = '';
196$proxysettings{'LOGGING'} = 'off';
197$proxysettings{'LOGQUERY'} = 'off';
198$proxysettings{'LOGUSERAGENT'} = 'off';
199$proxysettings{'CACHE_MEM'} = '2';
200$proxysettings{'CACHE_SIZE'} = '50';
ac1cfefa
MT		 201$proxysettings{'MAX_SIZE'} = '4096';
202$proxysettings{'MIN_SIZE'} = '0';
ed38f89d
MT		 203$proxysettings{'MEM_POLICY'} = 'LRU';
204$proxysettings{'CACHE_POLICY'} = 'LRU';
205$proxysettings{'L1_DIRS'} = '16';
206$proxysettings{'OFFLINE_MODE'} = 'off';
207$proxysettings{'CLASSROOM_EXT'} = 'off';
208$proxysettings{'SUPERVISOR_PASSWORD'} = '';
9fb25b1c
MT		 209$proxysettings{'NO_PROXY_LOCAL'} = 'off';
210$proxysettings{'NO_PROXY_LOCAL_BLUE'} = 'off';
ed38f89d
MT		 211$proxysettings{'TIME_ACCESS_MODE'} = 'allow';
212$proxysettings{'TIME_FROM_HOUR'} = '00';
213$proxysettings{'TIME_FROM_MINUTE'} = '00';
214$proxysettings{'TIME_TO_HOUR'} = '24';
215$proxysettings{'TIME_TO_MINUTE'} = '00';
ac1cfefa
MT		 216$proxysettings{'MAX_OUTGOING_SIZE'} = '0';
217$proxysettings{'MAX_INCOMING_SIZE'} = '0';
ed38f89d
MT		 218$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';
219$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';
220$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';
221$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';
222$proxysettings{'THROTTLE_BINARY'} = 'off';
223$proxysettings{'THROTTLE_DSKIMG'} = 'off';
224$proxysettings{'THROTTLE_MMEDIA'} = 'off';
225$proxysettings{'ENABLE_MIME_FILTER'} = 'off';
226$proxysettings{'ENABLE_BROWSER_CHECK'} = 'off';
227$proxysettings{'FAKE_USERAGENT'} = '';
228$proxysettings{'FAKE_REFERER'} = '';
229$proxysettings{'AUTH_METHOD'} = 'none';
230$proxysettings{'AUTH_REALM'} = '';
231$proxysettings{'AUTH_MAX_USERIP'} = '';
232$proxysettings{'AUTH_CACHE_TTL'} = '60';
233$proxysettings{'AUTH_IPCACHE_TTL'} = '0';
234$proxysettings{'AUTH_CHILDREN'} = '5';
235$proxysettings{'NCSA_MIN_PASS_LEN'} = '6';
236$proxysettings{'NCSA_BYPASS_REDIR'} = 'off';
237$proxysettings{'NCSA_USERNAME'} = '';
238$proxysettings{'NCSA_GROUP'} = '';
239$proxysettings{'NCSA_PASS'} = '';
240$proxysettings{'NCSA_PASS_CONFIRM'} = '';
241$proxysettings{'LDAP_BASEDN'} = '';
242$proxysettings{'LDAP_TYPE'} = 'ADS';
243$proxysettings{'LDAP_SERVER'} = '';
244$proxysettings{'LDAP_PORT'} = '389';
245$proxysettings{'LDAP_BINDDN_USER'} = '';
246$proxysettings{'LDAP_BINDDN_PASS'} = '';
247$proxysettings{'LDAP_GROUP'} = '';
248$proxysettings{'NTLM_DOMAIN'} = '';
249$proxysettings{'NTLM_PDC'} = '';
250$proxysettings{'NTLM_BDC'} = '';
251$proxysettings{'NTLM_ENABLE_ACL'} = 'off';
252$proxysettings{'NTLM_USER_ACL'} = 'positive';
253$proxysettings{'RADIUS_SERVER'} = '';
363fb6af 254$proxysettings{'RADIUS_PORT'} = '1812';
ed38f89d
MT		 255$proxysettings{'RADIUS_IDENTIFIER'} = '';
256$proxysettings{'RADIUS_SECRET'} = '';
257$proxysettings{'RADIUS_ENABLE_ACL'} = 'off';
258$proxysettings{'RADIUS_USER_ACL'} = 'positive';
259$proxysettings{'IDENT_REQUIRED'} = 'off';
260$proxysettings{'IDENT_TIMEOUT'} = '10';
261$proxysettings{'IDENT_ENABLE_ACL'} = 'off';
262$proxysettings{'IDENT_USER_ACL'} = 'positive';
9fb25b1c
MT		 263$proxysettings{'ENABLE_FILTER'} = 'off';
264$proxysettings{'ENABLE_UPDXLRATOR'} = 'off';
d12aede7 265$proxysettings{'ENABLE_CLAMAV'} = 'off';
ed38f89d
MT		 266
267$ncsa_buttontext = $Lang::tr{'advproxy NCSA create user'};
ac1cfefa
MT		 268
269&Header::getcgihash(\%proxysettings);
270
ed38f89d
MT		 271if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 0) {$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';}
272if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 0) {$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';}
273if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 0) {$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';}
274if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 0) {$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';}
ac1cfefa 275
ed38f89d 276if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy NCSA user management'})
ac1cfefa 277{
ed38f89d
MT		 278 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
279}
280
281if ($proxysettings{'ACTION'} eq $Lang::tr{'add'})
282{
283 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
284 if (length($proxysettings{'NCSA_PASS'}) < $proxysettings{'NCSA_MIN_PASS_LEN'}) {
285 $errormessage = $Lang::tr{'advproxy errmsg password length 1'}.$proxysettings{'NCSA_MIN_PASS_LEN'}.$Lang::tr{'advproxy errmsg password length 2'};
286 }
287 if (!($proxysettings{'NCSA_PASS'} eq $proxysettings{'NCSA_PASS_CONFIRM'})) {
288 $errormessage = $Lang::tr{'advproxy errmsg passwords different'};
289 }
290 if ($proxysettings{'NCSA_USERNAME'} eq '') {
291 $errormessage = $Lang::tr{'advproxy errmsg no username'};
292 }
293 if (!$errormessage) {
294 $proxysettings{'NCSA_USERNAME'} =~ tr/A-Z/a-z/;
295 &adduser($proxysettings{'NCSA_USERNAME'}, $proxysettings{'NCSA_PASS'}, $proxysettings{'NCSA_GROUP'});
296 }
297 $proxysettings{'NCSA_USERNAME'} = '';
298 $proxysettings{'NCSA_GROUP'} = '';
299 $proxysettings{'NCSA_PASS'} = '';
300 $proxysettings{'NCSA_PASS_CONFIRM'} = '';
301}
ac1cfefa 302
ed38f89d
MT		 303if ($proxysettings{'ACTION'} eq $Lang::tr{'remove'})
304{
305 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
306 &deluser($proxysettings{'ID'});
307}
308
9fb25b1c
MT		 309$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
310$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
311$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
312
ed38f89d
MT		 313if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'})
314{
315 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
316 $ncsa_buttontext = $Lang::tr{'advproxy NCSA update user'};
317 @temp = split(/:/,$proxysettings{'ID'});
318 $proxysettings{'NCSA_USERNAME'} = $temp[0];
319 $proxysettings{'NCSA_GROUP'} = $temp[1];
320 $proxysettings{'NCSA_PASS'} = "lEaVeAlOnE";
321 $proxysettings{'NCSA_PASS_CONFIRM'} = $proxysettings{'NCSA_PASS'};
322}
323
324if (($proxysettings{'ACTION'} eq $Lang::tr{'save'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}))
325{
ac1cfefa
MT		 326 if ($proxysettings{'ENABLE'} !~ /^(on|off)$/ ||
327 $proxysettings{'TRANSPARENT'} !~ /^(on|off)$/ ||
328 $proxysettings{'ENABLE_BLUE'} !~ /^(on|off)$/ ||
329 $proxysettings{'TRANSPARENT_BLUE'} !~ /^(on|off)$/ ) {
330 $errormessage = $Lang::tr{'invalid input'};
331 goto ERROR;
332 }
f2fdd0c1 333 if (!(&General::validport($proxysettings{'PROXY_PORT'})))
363fb6af
MT		 334 {
335 $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'};
336 goto ERROR;
337 }
ac1cfefa
MT		 338 if (!($proxysettings{'CACHE_SIZE'} =~ /^\d+/) ||
339 ($proxysettings{'CACHE_SIZE'} < 10))
340 {
ed38f89d
MT		 341 $errormessage = $Lang::tr{'advproxy errmsg hdd cache size'};
342 goto ERROR;
343 }
344 if (!($proxysettings{'CACHE_MEM'} =~ /^\d+/) ||
345 ($proxysettings{'CACHE_MEM'} < 1))
346 {
347 $errormessage = $Lang::tr{'advproxy errmsg mem cache size'};
ac1cfefa
MT		 348 goto ERROR;
349 }
ed38f89d
MT		 350 my @free = `/usr/bin/free`;
351 $free[1] =~ m/(\d+)/;
352 $cachemem = int $1 / 2048;
353 if ($proxysettings{'CACHE_MEM'} > $cachemem) {
354 $proxysettings{'CACHE_MEM'} = $cachemem;
355 }
ac1cfefa
MT		 356 if (!($proxysettings{'MAX_SIZE'} =~ /^\d+/))
357 {
358 $errormessage = $Lang::tr{'invalid maximum object size'};
359 goto ERROR;
360 }
361 if (!($proxysettings{'MIN_SIZE'} =~ /^\d+/))
362 {
363 $errormessage = $Lang::tr{'invalid minimum object size'};
364 goto ERROR;
365 }
366 if (!($proxysettings{'MAX_OUTGOING_SIZE'} =~ /^\d+/))
367 {
368 $errormessage = $Lang::tr{'invalid maximum outgoing size'};
369 goto ERROR;
370 }
ed38f89d
MT		 371 if (!($proxysettings{'TIME_TO_HOUR'}.$proxysettings{'TIME_TO_MINUTE'} gt $proxysettings{'TIME_FROM_HOUR'}.$proxysettings{'TIME_FROM_MINUTE'}))
372 {
373 $errormessage = $Lang::tr{'advproxy errmsg time restriction'};
374 goto ERROR;
375 }
ac1cfefa
MT		 376 if (!($proxysettings{'MAX_INCOMING_SIZE'} =~ /^\d+/))
377 {
378 $errormessage = $Lang::tr{'invalid maximum incoming size'};
379 goto ERROR;
380 }
ed38f89d 381 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on')
ac1cfefa 382 {
ed38f89d
MT		 383 $browser_regexp = '';
384 foreach (@useragentlist)
385 {
386 chomp;
387 @useragent = split(/,/);
4e17adad 388 if ($proxysettings{'UA_'.$useragent[0]} eq 'on') { $browser_regexp .= "$useragent[2]|"; }
ed38f89d
MT		 389 }
390 chop($browser_regexp);
391 if (!$browser_regexp)
392 {
393 $errormessage = $Lang::tr{'advproxy errmsg no browser'};
394 goto ERROR;
395 }
396 }
397 if (!($proxysettings{'AUTH_METHOD'} eq 'none'))
398 {
363fb6af 399 unless (($proxysettings{'AUTH_METHOD'} eq 'ident') &&
ed38f89d
MT		 400 ($proxysettings{'IDENT_REQUIRED'} eq 'off') &&
401 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'off'))
402 {
403 if ($netsettings{'BLUE_DEV'})
363fb6af 404 {
ed38f89d
MT		 405 if ((($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on')) &&
406 (($proxysettings{'ENABLE_BLUE'} eq 'off') || ($proxysettings{'TRANSPARENT_BLUE'} eq 'on')))
407 {
408 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
409 goto ERROR;
410 }
411 } else {
412 if (($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on'))
413 {
414 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
415 goto ERROR;
416 }
417 }
418 }
419 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) &&
420 ((!($proxysettings{'AUTH_MAX_USERIP'} =~ /^\d+/)) || ($proxysettings{'AUTH_MAX_USERIP'} < 1) || ($proxysettings{'AUTH_MAX_USERIP'} > 255)))
421 {
422 $errormessage = $Lang::tr{'advproxy errmsg max userip'};
423 goto ERROR;
424 }
425 if (!($proxysettings{'AUTH_CACHE_TTL'} =~ /^\d+/))
426 {
427 $errormessage = $Lang::tr{'advproxy errmsg auth cache ttl'};
428 goto ERROR;
429 }
430 if (!($proxysettings{'AUTH_IPCACHE_TTL'} =~ /^\d+/))
431 {
432 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache ttl'};
433 goto ERROR;
434 }
435 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && ($proxysettings{'AUTH_IPCACHE_TTL'} eq '0'))
436 {
437 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache may not be null'};
438 goto ERROR;
439 }
440 if ((!($proxysettings{'AUTH_CHILDREN'} =~ /^\d+/)) || ($proxysettings{'AUTH_CHILDREN'} < 1) || ($proxysettings{'AUTH_CHILDREN'} > 255))
441 {
442 $errormessage = $Lang::tr{'advproxy errmsg auth children'};
443 goto ERROR;
444 }
445 }
446 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
447 {
448 if ((!($proxysettings{'NCSA_MIN_PASS_LEN'} =~ /^\d+/)) || ($proxysettings{'NCSA_MIN_PASS_LEN'} < 1) || ($proxysettings{'NCSA_MIN_PASS_LEN'} > 255))
449 {
450 $errormessage = $Lang::tr{'advproxy errmsg password length'};
451 goto ERROR;
452 }
453 }
454 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
455 {
456 if ((!($proxysettings{'IDENT_TIMEOUT'} =~ /^\d+/)) || ($proxysettings{'IDENT_TIMEOUT'} < 1))
457 {
458 $errormessage = $Lang::tr{'advproxy errmsg ident timeout'};
459 goto ERROR;
460 }
461 }
462 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
463 {
464 if ($proxysettings{'LDAP_BASEDN'} eq '')
465 {
466 $errormessage = $Lang::tr{'advproxy errmsg ldap base dn'};
467 goto ERROR;
468 }
469 if (!&General::validip($proxysettings{'LDAP_SERVER'}))
470 {
471 $errormessage = $Lang::tr{'advproxy errmsg ldap server'};
472 goto ERROR;
473 }
474 if (!&General::validport($proxysettings{'LDAP_PORT'}))
475 {
476 $errormessage = $Lang::tr{'advproxy errmsg ldap port'};
477 goto ERROR;
478 }
479 if (($proxysettings{'LDAP_TYPE'} eq 'ADS') || ($proxysettings{'LDAP_TYPE'} eq 'NDS'))
480 {
481 if (($proxysettings{'LDAP_BINDDN_USER'} eq '') || ($proxysettings{'LDAP_BINDDN_PASS'} eq ''))
482 {
483 $errormessage = $Lang::tr{'advproxy errmsg ldap bind dn'};
484 goto ERROR;
485 }
486 }
487 }
488 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
489 {
490 if ($proxysettings{'NTLM_DOMAIN'} eq '')
491 {
492 $errormessage = $Lang::tr{'advproxy errmsg ntlm domain'};
493 goto ERROR;
494 }
495 if ($proxysettings{'NTLM_PDC'} eq '')
496 {
497 $errormessage = $Lang::tr{'advproxy errmsg ntlm pdc'};
498 goto ERROR;
499 }
500 if (!&General::validhostname($proxysettings{'NTLM_PDC'}))
501 {
502 $errormessage = $Lang::tr{'advproxy errmsg invalid pdc'};
503 goto ERROR;
504 }
505 if ((!($proxysettings{'NTLM_BDC'} eq '')) && (!&General::validhostname($proxysettings{'NTLM_BDC'})))
506 {
507 $errormessage = $Lang::tr{'advproxy errmsg invalid bdc'};
508 goto ERROR;
509 }
510 }
511 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
512 {
513 if (!&General::validip($proxysettings{'RADIUS_SERVER'}))
514 {
515 $errormessage = $Lang::tr{'advproxy errmsg radius server'};
516 goto ERROR;
517 }
518 if (!&General::validport($proxysettings{'RADIUS_PORT'}))
519 {
520 $errormessage = $Lang::tr{'advproxy errmsg radius port'};
521 goto ERROR;
522 }
523 if ($proxysettings{'RADIUS_SECRET'} eq '')
524 {
525 $errormessage = $Lang::tr{'advproxy errmsg radius secret'};
526 goto ERROR;
527 }
ac1cfefa
MT		 528 }
529
363fb6af
MT		 530 # Quick parent proxy error checking of username and password info. If username password don't both exist give an error.
531 $proxy1 = 'YES';
532 $proxy2 = 'YES';
533 if (($proxysettings{'UPSTREAM_USER'} eq '')) {$proxy1 = '';}
534 if (($proxysettings{'UPSTREAM_PASSWORD'} eq '')) {$proxy2 = '';}
535 if ($proxysettings{'UPSTREAM_USER'} eq 'PASS') {$proxy1=$proxy2='PASS'; $proxysettings{'UPSTREAM_PASSWORD'} = '';}
536 if (($proxy1 ne $proxy2))
537 {
538 $errormessage = $Lang::tr{'advproxy errmsg invalid upstream proxy username or password setting'};
539 goto ERROR;
540 }
ac1cfefa 541
ed38f89d
MT		 542ERROR:
543 &check_acls;
ac1cfefa 544
ed38f89d
MT		 545 if ($errormessage) {
546 $proxysettings{'VALID'} = 'no'; }
547 else {
363fb6af 548 $proxysettings{'VALID'} = 'yes'; }
ac1cfefa 549
ed38f89d 550 if ($proxysettings{'VALID'} eq 'yes')
ac1cfefa 551 {
ed38f89d 552 &write_acls;
ac1cfefa 553
ed38f89d
MT		 554 delete $proxysettings{'SRC_SUBNETS'};
555 delete $proxysettings{'SRC_BANNED_IP'};
556 delete $proxysettings{'SRC_BANNED_MAC'};
557 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
558 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
559 delete $proxysettings{'DST_NOCACHE'};
560 delete $proxysettings{'DST_NOAUTH'};
363fb6af
MT		 561 delete $proxysettings{'PORTS_SAFE'};
562 delete $proxysettings{'PORTS_SSL'};
ed38f89d
MT		 563 delete $proxysettings{'MIME_TYPES'};
564 delete $proxysettings{'NTLM_ALLOW_USERS'};
565 delete $proxysettings{'NTLM_DENY_USERS'};
566 delete $proxysettings{'RADIUS_ALLOW_USERS'};
567 delete $proxysettings{'RADIUS_DENY_USERS'};
568 delete $proxysettings{'IDENT_HOSTS'};
569 delete $proxysettings{'IDENT_ALLOW_USERS'};
570 delete $proxysettings{'IDENT_DENY_USERS'};
ac1cfefa 571
ed38f89d
MT		 572 delete $proxysettings{'CRE_GROUPS'};
573 delete $proxysettings{'CRE_SVHOSTS'};
ac1cfefa 574
ed38f89d
MT		 575 delete $proxysettings{'NCSA_USERNAME'};
576 delete $proxysettings{'NCSA_GROUP'};
577 delete $proxysettings{'NCSA_PASS'};
578 delete $proxysettings{'NCSA_PASS_CONFIRM'};
ac1cfefa 579
ed38f89d
MT		 580 $proxysettings{'TIME_MON'} = 'off' unless exists $proxysettings{'TIME_MON'};
581 $proxysettings{'TIME_TUE'} = 'off' unless exists $proxysettings{'TIME_TUE'};
582 $proxysettings{'TIME_WED'} = 'off' unless exists $proxysettings{'TIME_WED'};
583 $proxysettings{'TIME_THU'} = 'off' unless exists $proxysettings{'TIME_THU'};
584 $proxysettings{'TIME_FRI'} = 'off' unless exists $proxysettings{'TIME_FRI'};
585 $proxysettings{'TIME_SAT'} = 'off' unless exists $proxysettings{'TIME_SAT'};
586 $proxysettings{'TIME_SUN'} = 'off' unless exists $proxysettings{'TIME_SUN'};
ac1cfefa 587
ed38f89d
MT		 588 $proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'off' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
589 $proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'off' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
ac1cfefa 590
ed38f89d 591 &General::writehash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
ac1cfefa 592
363fb6af
MT		 593 if (-e "${General::swroot}/proxy/settings") { &General::readhash("${General::swroot}/proxy/settings", \%stdproxysettings); }
594 $stdproxysettings{'PROXY_PORT'} = $proxysettings{'PROXY_PORT'};
9fb25b1c
MT		 595 $stdproxysettings{'ENABLE_FILTER'} = $proxysettings{'ENABLE_FILTER'};
596 $stdproxysettings{'ENABLE_UPDXLRATOR'} = $proxysettings{'ENABLE_UPDXLRATOR'};
d12aede7 597 $stdproxysettings{'ENABLE_CLAMAV'} = $proxysettings{'ENABLE_CLAMAV'};
363fb6af 598 &General::writehash("${General::swroot}/proxy/settings", \%stdproxysettings);
ac1cfefa 599
ed38f89d
MT		 600 &writeconfig;
601 &writepacfile;
602
d56fc335 603 system ('/usr/local/bin/squidctrl', 'disable');
ed38f89d
MT		 604 unlink "${General::swroot}/proxy/enable";
605 unlink "${General::swroot}/proxy/transparent";
606 unlink "${General::swroot}/proxy/enable_blue";
607 unlink "${General::swroot}/proxy/transparent_blue";
ac1cfefa 608
ac1cfefa 609 if ($proxysettings{'ENABLE'} eq 'on') {
d56fc335
MT		 610 system ('/usr/bin/touch', "${General::swroot}/proxy/enable");
611 system ('/usr/local/bin/squidctrl', 'enable'); }
6c689591 612 if ($proxysettings{'TRANSPARENT'} eq 'on' && $proxysettings{'ENABLE'} eq 'on') {
9833e7d8 613 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent"); }
ac1cfefa 614 if ($proxysettings{'ENABLE_BLUE'} eq 'on') {
d56fc335
MT		 615 system ('/usr/bin/touch', "${General::swroot}/proxy/enable_blue");
616 system ('/usr/local/bin/squidctrl', 'enable'); }
6c689591 617 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on' && $proxysettings{'ENABLE_BLUE'} eq 'on') {
9833e7d8 618 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent_blue"); }
ed38f89d 619
d56fc335 620 if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) { system('/usr/local/bin/squidctrl restart >/dev/null 2>&1'); }
ac1cfefa
MT		 621 }
622}
623
363fb6af 624if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy clear cache'})
ac1cfefa 625{
d56fc335 626 system('/usr/local/bin/squidctrl flush >/dev/null 2>&1');
ac1cfefa
MT		 627}
628
ed38f89d
MT		 629if (!$errormessage)
630{
631 if (-e "${General::swroot}/proxy/advanced/settings") {
632 &General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
633 } elsif (-e "${General::swroot}/proxy/settings") {
634 &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
635 }
636 &read_acls;
637}
ac1cfefa
MT		 638
639$checked{'ENABLE'}{'off'} = '';
640$checked{'ENABLE'}{'on'} = '';
641$checked{'ENABLE'}{$proxysettings{'ENABLE'}} = "checked='checked'";
642
643$checked{'TRANSPARENT'}{'off'} = '';
644$checked{'TRANSPARENT'}{'on'} = '';
645$checked{'TRANSPARENT'}{$proxysettings{'TRANSPARENT'}} = "checked='checked'";
646
647$checked{'ENABLE_BLUE'}{'off'} = '';
648$checked{'ENABLE_BLUE'}{'on'} = '';
649$checked{'ENABLE_BLUE'}{$proxysettings{'ENABLE_BLUE'}} = "checked='checked'";
650
651$checked{'TRANSPARENT_BLUE'}{'off'} = '';
652$checked{'TRANSPARENT_BLUE'}{'on'} = '';
653$checked{'TRANSPARENT_BLUE'}{$proxysettings{'TRANSPARENT_BLUE'}} = "checked='checked'";
654
363fb6af
MT		 655$checked{'SUPPRESS_VERSION'}{'off'} = '';
656$checked{'SUPPRESS_VERSION'}{'on'} = '';
657$checked{'SUPPRESS_VERSION'}{$proxysettings{'SUPPRESS_VERSION'}} = "checked='checked'";
658
ed38f89d
MT		 659$checked{'FORWARD_IPADDRESS'}{'off'} = '';
660$checked{'FORWARD_IPADDRESS'}{'on'} = '';
661$checked{'FORWARD_IPADDRESS'}{$proxysettings{'FORWARD_IPADDRESS'}} = "checked='checked'";
662$checked{'FORWARD_USERNAME'}{'off'} = '';
663$checked{'FORWARD_USERNAME'}{'on'} = '';
664$checked{'FORWARD_USERNAME'}{$proxysettings{'FORWARD_USERNAME'}} = "checked='checked'";
665$checked{'FORWARD_VIA'}{'off'} = '';
666$checked{'FORWARD_VIA'}{'on'} = '';
667$checked{'FORWARD_VIA'}{$proxysettings{'FORWARD_VIA'}} = "checked='checked'";
363fb6af
MT		 668$checked{'NO_CONNECTION_AUTH'}{'off'} = '';
669$checked{'NO_CONNECTION_AUTH'}{'on'} = '';
670$checked{'NO_CONNECTION_AUTH'}{$proxysettings{'NO_CONNECTION_AUTH'}} = "checked='checked'";
ed38f89d
MT		 671
672$selected{'MEM_POLICY'}{$proxysettings{'MEM_POLICY'}} = "selected='selected'";
673$selected{'CACHE_POLICY'}{$proxysettings{'CACHE_POLICY'}} = "selected='selected'";
674$selected{'L1_DIRS'}{$proxysettings{'L1_DIRS'}} = "selected='selected'";
675$checked{'OFFLINE_MODE'}{'off'} = '';
676$checked{'OFFLINE_MODE'}{'on'} = '';
677$checked{'OFFLINE_MODE'}{$proxysettings{'OFFLINE_MODE'}} = "checked='checked'";
678
ac1cfefa
MT		 679$checked{'LOGGING'}{'off'} = '';
680$checked{'LOGGING'}{'on'} = '';
681$checked{'LOGGING'}{$proxysettings{'LOGGING'}} = "checked='checked'";
ed38f89d
MT		 682$checked{'LOGQUERY'}{'off'} = '';
683$checked{'LOGQUERY'}{'on'} = '';
684$checked{'LOGQUERY'}{$proxysettings{'LOGQUERY'}} = "checked='checked'";
685$checked{'LOGUSERAGENT'}{'off'} = '';
686$checked{'LOGUSERAGENT'}{'on'} = '';
687$checked{'LOGUSERAGENT'}{$proxysettings{'LOGUSERAGENT'}} = "checked='checked'";
688
689$selected{'ERR_LANGUAGE'}{$proxysettings{'ERR_LANGUAGE'}} = "selected='selected'";
363fb6af 690$selected{'ERR_DESIGN'}{$proxysettings{'ERR_DESIGN'}} = "selected='selected'";
ed38f89d 691
9fb25b1c
MT		 692$checked{'NO_PROXY_LOCAL'}{'off'} = '';
693$checked{'NO_PROXY_LOCAL'}{'on'} = '';
694$checked{'NO_PROXY_LOCAL'}{$proxysettings{'NO_PROXY_LOCAL'}} = "checked='checked'";
695$checked{'NO_PROXY_LOCAL_BLUE'}{'off'} = '';
696$checked{'NO_PROXY_LOCAL_BLUE'}{'on'} = '';
697$checked{'NO_PROXY_LOCAL_BLUE'}{$proxysettings{'NO_PROXY_LOCAL_BLUE'}} = "checked='checked'";
698
ed38f89d
MT		 699$checked{'CLASSROOM_EXT'}{'off'} = '';
700$checked{'CLASSROOM_EXT'}{'on'} = '';
701$checked{'CLASSROOM_EXT'}{$proxysettings{'CLASSROOM_EXT'}} = "checked='checked'";
702
703$selected{'TIME_ACCESS_MODE'}{$proxysettings{'TIME_ACCESS_MODE'}} = "selected='selected'";
704$selected{'TIME_FROM_HOUR'}{$proxysettings{'TIME_FROM_HOUR'}} = "selected='selected'";
705$selected{'TIME_FROM_MINUTE'}{$proxysettings{'TIME_FROM_MINUTE'}} = "selected='selected'";
706$selected{'TIME_TO_HOUR'}{$proxysettings{'TIME_TO_HOUR'}} = "selected='selected'";
707$selected{'TIME_TO_MINUTE'}{$proxysettings{'TIME_TO_MINUTE'}} = "selected='selected'";
708
709$proxysettings{'TIME_MON'} = 'on' unless exists $proxysettings{'TIME_MON'};
710$proxysettings{'TIME_TUE'} = 'on' unless exists $proxysettings{'TIME_TUE'};
711$proxysettings{'TIME_WED'} = 'on' unless exists $proxysettings{'TIME_WED'};
712$proxysettings{'TIME_THU'} = 'on' unless exists $proxysettings{'TIME_THU'};
713$proxysettings{'TIME_FRI'} = 'on' unless exists $proxysettings{'TIME_FRI'};
714$proxysettings{'TIME_SAT'} = 'on' unless exists $proxysettings{'TIME_SAT'};
715$proxysettings{'TIME_SUN'} = 'on' unless exists $proxysettings{'TIME_SUN'};
716
717$checked{'TIME_MON'}{'off'} = '';
718$checked{'TIME_MON'}{'on'} = '';
719$checked{'TIME_MON'}{$proxysettings{'TIME_MON'}} = "checked='checked'";
720$checked{'TIME_TUE'}{'off'} = '';
721$checked{'TIME_TUE'}{'on'} = '';
722$checked{'TIME_TUE'}{$proxysettings{'TIME_TUE'}} = "checked='checked'";
723$checked{'TIME_WED'}{'off'} = '';
724$checked{'TIME_WED'}{'on'} = '';
725$checked{'TIME_WED'}{$proxysettings{'TIME_WED'}} = "checked='checked'";
726$checked{'TIME_THU'}{'off'} = '';
727$checked{'TIME_THU'}{'on'} = '';
728$checked{'TIME_THU'}{$proxysettings{'TIME_THU'}} = "checked='checked'";
729$checked{'TIME_FRI'}{'off'} = '';
730$checked{'TIME_FRI'}{'on'} = '';
731$checked{'TIME_FRI'}{$proxysettings{'TIME_FRI'}} = "checked='checked'";
732$checked{'TIME_SAT'}{'off'} = '';
733$checked{'TIME_SAT'}{'on'} = '';
734$checked{'TIME_SAT'}{$proxysettings{'TIME_SAT'}} = "checked='checked'";
735$checked{'TIME_SUN'}{'off'} = '';
736$checked{'TIME_SUN'}{'on'} = '';
737$checked{'TIME_SUN'}{$proxysettings{'TIME_SUN'}} = "checked='checked'";
738
739$selected{'THROTTLING_GREEN_TOTAL'}{$proxysettings{'THROTTLING_GREEN_TOTAL'}} = "selected='selected'";
740$selected{'THROTTLING_GREEN_HOST'}{$proxysettings{'THROTTLING_GREEN_HOST'}} = "selected='selected'";
741$selected{'THROTTLING_BLUE_TOTAL'}{$proxysettings{'THROTTLING_BLUE_TOTAL'}} = "selected='selected'";
742$selected{'THROTTLING_BLUE_HOST'}{$proxysettings{'THROTTLING_BLUE_HOST'}} = "selected='selected'";
743
744$checked{'THROTTLE_BINARY'}{'off'} = '';
745$checked{'THROTTLE_BINARY'}{'on'} = '';
746$checked{'THROTTLE_BINARY'}{$proxysettings{'THROTTLE_BINARY'}} = "checked='checked'";
747$checked{'THROTTLE_DSKIMG'}{'off'} = '';
748$checked{'THROTTLE_DSKIMG'}{'on'} = '';
749$checked{'THROTTLE_DSKIMG'}{$proxysettings{'THROTTLE_DSKIMG'}} = "checked='checked'";
750$checked{'THROTTLE_MMEDIA'}{'off'} = '';
751$checked{'THROTTLE_MMEDIA'}{'on'} = '';
752$checked{'THROTTLE_MMEDIA'}{$proxysettings{'THROTTLE_MMEDIA'}} = "checked='checked'";
753
754$checked{'ENABLE_MIME_FILTER'}{'off'} = '';
755$checked{'ENABLE_MIME_FILTER'}{'on'} = '';
756$checked{'ENABLE_MIME_FILTER'}{$proxysettings{'ENABLE_MIME_FILTER'}} = "checked='checked'";
757
758$checked{'ENABLE_BROWSER_CHECK'}{'off'} = '';
759$checked{'ENABLE_BROWSER_CHECK'}{'on'} = '';
760$checked{'ENABLE_BROWSER_CHECK'}{$proxysettings{'ENABLE_BROWSER_CHECK'}} = "checked='checked'";
761
762foreach (@useragentlist) {
763 @useragent = split(/,/);
4e17adad
CS		 764 $checked{'UA_'.$useragent[0]}{'off'} = '';
765 $checked{'UA_'.$useragent[0]}{'on'} = '';
766 $checked{'UA_'.$useragent[0]}{$proxysettings{'UA_'.$useragent[0]}} = "checked='checked'";
ed38f89d
MT		 767}
768
769$checked{'AUTH_METHOD'}{'none'} = '';
770$checked{'AUTH_METHOD'}{'ncsa'} = '';
771$checked{'AUTH_METHOD'}{'ident'} = '';
772$checked{'AUTH_METHOD'}{'ldap'} = '';
773$checked{'AUTH_METHOD'}{'ntlm'} = '';
774$checked{'AUTH_METHOD'}{'radius'} = '';
775$checked{'AUTH_METHOD'}{$proxysettings{'AUTH_METHOD'}} = "checked='checked'";
ac1cfefa 776
ed38f89d
MT		 777$proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'on' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
778
779$checked{'AUTH_ALWAYS_REQUIRED'}{'off'} = '';
780$checked{'AUTH_ALWAYS_REQUIRED'}{'on'} = '';
781$checked{'AUTH_ALWAYS_REQUIRED'}{$proxysettings{'AUTH_ALWAYS_REQUIRED'}} = "checked='checked'";
782
783$checked{'NCSA_BYPASS_REDIR'}{'off'} = '';
784$checked{'NCSA_BYPASS_REDIR'}{'on'} = '';
785$checked{'NCSA_BYPASS_REDIR'}{$proxysettings{'NCSA_BYPASS_REDIR'}} = "checked='checked'";
786
787$selected{'NCSA_GROUP'}{$proxysettings{'NCSA_GROUP'}} = "selected='selected'";
788
789$selected{'LDAP_TYPE'}{$proxysettings{'LDAP_TYPE'}} = "selected='selected'";
790
791$proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'on' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
792
793$checked{'NTLM_ENABLE_INT_AUTH'}{'off'} = '';
794$checked{'NTLM_ENABLE_INT_AUTH'}{'on'} = '';
795$checked{'NTLM_ENABLE_INT_AUTH'}{$proxysettings{'NTLM_ENABLE_INT_AUTH'}} = "checked='checked'";
796
797$checked{'NTLM_ENABLE_ACL'}{'off'} = '';
798$checked{'NTLM_ENABLE_ACL'}{'on'} = '';
799$checked{'NTLM_ENABLE_ACL'}{$proxysettings{'NTLM_ENABLE_ACL'}} = "checked='checked'";
800
801$checked{'NTLM_USER_ACL'}{'positive'} = '';
802$checked{'NTLM_USER_ACL'}{'negative'} = '';
803$checked{'NTLM_USER_ACL'}{$proxysettings{'NTLM_USER_ACL'}} = "checked='checked'";
804
805$checked{'RADIUS_ENABLE_ACL'}{'off'} = '';
806$checked{'RADIUS_ENABLE_ACL'}{'on'} = '';
807$checked{'RADIUS_ENABLE_ACL'}{$proxysettings{'RADIUS_ENABLE_ACL'}} = "checked='checked'";
808
809$checked{'RADIUS_USER_ACL'}{'positive'} = '';
810$checked{'RADIUS_USER_ACL'}{'negative'} = '';
811$checked{'RADIUS_USER_ACL'}{$proxysettings{'RADIUS_USER_ACL'}} = "checked='checked'";
812
813$checked{'IDENT_REQUIRED'}{'off'} = '';
814$checked{'IDENT_REQUIRED'}{'on'} = '';
815$checked{'IDENT_REQUIRED'}{$proxysettings{'IDENT_REQUIRED'}} = "checked='checked'";
816
817$checked{'IDENT_ENABLE_ACL'}{'off'} = '';
818$checked{'IDENT_ENABLE_ACL'}{'on'} = '';
819$checked{'IDENT_ENABLE_ACL'}{$proxysettings{'IDENT_ENABLE_ACL'}} = "checked='checked'";
820
821$checked{'IDENT_USER_ACL'}{'positive'} = '';
822$checked{'IDENT_USER_ACL'}{'negative'} = '';
823$checked{'IDENT_USER_ACL'}{$proxysettings{'IDENT_USER_ACL'}} = "checked='checked'";
824
9fb25b1c
MT		 825$checked{'ENABLE_FILTER'}{'off'} = '';
826$checked{'ENABLE_FILTER'}{'on'} = '';
827$checked{'ENABLE_FILTER'}{$proxysettings{'ENABLE_FILTER'}} = "checked='checked'";
ed38f89d 828
9fb25b1c
MT		 829$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
830$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
831$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
ed38f89d 832
d12aede7
CS		 833$checked{'ENABLE_CLAMAV'}{'off'} = '';
834$checked{'ENABLE_CLAMAV'}{'on'} = '';
835$checked{'ENABLE_CLAMAV'}{$proxysettings{'ENABLE_CLAMAV'}} = "checked='checked'";
836
ed38f89d 837&Header::openpage($Lang::tr{'advproxy advanced web proxy configuration'}, 1, '');
ac1cfefa
MT		 838
839&Header::openbigbox('100%', 'left', '', $errormessage);
840
841if ($errormessage) {
842 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
843 print "<font class='base'>$errormessage&nbsp;</font>\n";
844 &Header::closebox();
845}
846
363fb6af
MT		 847if ($squidversion[0] =~ /^Squid\sCache:\sVersion\s/i)
848{
849 $squidversion[0] =~ s/^Squid\sCache:\sVersion//i;
850 $squidversion[0] =~ s/^\s+//g;
851 $squidversion[0] =~ s/\s+$//g;
852} else {
853 $squidversion[0] = $Lang::tr{'advproxy unknown'};
854}
855
ed38f89d
MT		 856# ===================================================================
857# Main settings
858# ===================================================================
859
860unless ($proxysettings{'NCSA_EDIT_MODE'} eq 'yes') {
861
ac1cfefa
MT		 862print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
863
ed38f89d
MT		 864&Header::openbox('100%', 'left', "$Lang::tr{'advproxy advanced web proxy'}");
865
ac1cfefa
MT		 866print <<END
867<table width='100%'>
868<tr>
ed38f89d
MT		 869 <td colspan='4' class='base'><b>$Lang::tr{'advproxy common settings'}</b></td>
870</tr>
871<tr>
872 <td width='25%' class='base'>$Lang::tr{'advproxy enabled on'} <font color="$Header::colourgreen">Green</font>:</td>
873 <td width='20%'><input type='checkbox' name='ENABLE' $checked{'ENABLE'}{'on'} /></td>
874 <td width='25%' class='base'>$Lang::tr{'advproxy proxy port'}:</td>
875 <td width='30%'><input type='text' name='PROXY_PORT' value='$proxysettings{'PROXY_PORT'}' size='5' /></td>
ac1cfefa
MT		 876</tr>
877<tr>
ed38f89d 878 <td class='base'>$Lang::tr{'advproxy transparent on'} <font color="$Header::colourgreen">Green</font>:</td>
ac1cfefa 879 <td><input type='checkbox' name='TRANSPARENT' $checked{'TRANSPARENT'}{'on'} /></td>
ed38f89d
MT		 880 <td class='base'>$Lang::tr{'advproxy visible hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
881 <td><input type='text' name='VISIBLE_HOSTNAME' value='$proxysettings{'VISIBLE_HOSTNAME'}' /></td>
ac1cfefa
MT		 882</tr>
883<tr>
884END
885;
886if ($netsettings{'BLUE_DEV'}) {
ed38f89d 887 print "<td class='base'>$Lang::tr{'advproxy enabled on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 888 print "<td><input type='checkbox' name='ENABLE_BLUE' $checked{'ENABLE_BLUE'}{'on'} /></td>";
889} else {
890 print "<td colspan='2'>&nbsp;</td>";
891}
892print <<END
ed38f89d
MT		 893 <td class='base'>$Lang::tr{'advproxy admin mail'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
894 <td><input type='text' name='ADMIN_MAIL_ADDRESS' value='$proxysettings{'ADMIN_MAIL_ADDRESS'}' /></td>
ac1cfefa
MT		 895</tr>
896<tr>
897END
898;
899if ($netsettings{'BLUE_DEV'}) {
ed38f89d 900 print "<td class='base'>$Lang::tr{'advproxy transparent on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 901 print "<td><input type='checkbox' name='TRANSPARENT_BLUE' $checked{'TRANSPARENT_BLUE'}{'on'} /></td>";
902} else {
903 print "<td colspan='2'>&nbsp;</td>";
904}
905print <<END
ed38f89d
MT		 906 <td class='base'>$Lang::tr{'advproxy error language'}:</td>
907 <td class='base'>
908 <select name='ERR_LANGUAGE'>
909END
910;
363fb6af 911 foreach (<$errordir/*>) {
ed38f89d
MT		 912 if (-d) {
913 $language = substr($_,rindex($_,"/")+1);
914 print "<option value='$language' $selected{'ERR_LANGUAGE'}{$language}>$language</option>\n";
915 }
916 }
917print <<END
918 </select>
919 </td>
920</tr>
10e4f239 921<tr>
363fb6af
MT		 922 <td class='base'>$Lang::tr{'advproxy suppress version'}:</td>
923 <td><input type='checkbox' name='SUPPRESS_VERSION' $checked{'SUPPRESS_VERSION'}{'on'} /></td>
924 <td class='base'>$Lang::tr{'advproxy error design'}:</td>
925 <td class='base'><select name='ERR_DESIGN'>
0d948999 926 <option value='ipfire' $selected{'ERR_DESIGN'}{'ipfire'}>IPFire</option>
363fb6af
MT		 927 <option value='squid' $selected{'ERR_DESIGN'}{'squid'}>$Lang::tr{'advproxy standard'}</option>
928 </select></td>
10e4f239
MT		 929</tr>
930<tr>
363fb6af
MT		 931 <td class='base'>$Lang::tr{'advproxy squid version'}:</td>
932 <td class='base'>&nbsp;[<font color='$Header::colourred'> $squidversion[0] </font>]</td>
933 <td>&nbsp;</td>
934 <td>&nbsp;</td>
10e4f239 935</tr>
ed38f89d
MT		 936</table>
937<hr size='1'>
938<table width='100%'>
d12aede7
CS		 939END
940;
941if ( -e "/usr/bin/squidclamav" ) {
942 print "<td class='base' width='33%'><b>$Lang::tr{'advproxy url filter'}</b> $Lang::tr{'advproxy enabled'}<input type='checkbox' name='ENABLE_FILTER' $checked{'ENABLE_FILTER'}{'on'} /></td>";
943 print "<td class='base' width='33%'><b>$Lang::tr{'advproxy update accelerator'}</b> $Lang::tr{'advproxy enabled'}<input type='checkbox' name='ENABLE_UPDXLRATOR' $checked{'ENABLE_UPDXLRATOR'}{'on'} /></td>";
944 print "<td class='base' width='33%'><b>$Lang::tr{'advproxy squidclamav'}</b> $Lang::tr{'advproxy enabled'}<input type='checkbox' name='ENABLE_CLAMAV' $checked{'ENABLE_CLAMAV'}{'on'} /></td>";
945}
946else
947{
948 print "<td class='base' width='50%'><b>$Lang::tr{'advproxy url filter'}</b> $Lang::tr{'advproxy enabled'}<input type='checkbox' name='ENABLE_FILTER' $checked{'ENABLE_FILTER'}{'on'} /></td>";
949 print "<td class='base' width='50%'><b>$Lang::tr{'advproxy update accelerator'}</b> $Lang::tr{'advproxy enabled'}<input type='checkbox' name='ENABLE_UPDXLRATOR' $checked{'ENABLE_UPDXLRATOR'}{'on'} /></td>";
950}
951print <<END
9141bd34
CS		 952</tr>
953</table>
954<hr size='1'>
955<table width='100%'>
ed38f89d
MT		 956<tr>
957 <td colspan='4' class='base'><b>$Lang::tr{'advproxy upstream proxy'}</b></td>
958</tr>
959<tr>
9141bd34
CS		 960 <td class='base'>$Lang::tr{'advproxy via forwarding'}:</td><td><input type='checkbox' name='FORWARD_VIA' $checked{'FORWARD_VIA'}{'on'} /></td>
961 <td class='base'>$Lang::tr{'advproxy upstream proxy host:port'}<img src='/blob.gif' alt='*' /></td><td><input type='text' name='UPSTREAM_PROXY' value='$proxysettings{'UPSTREAM_PROXY'}' /></td>
ed38f89d
MT		 962</tr>
963<tr>
9141bd34
CS		 964 <td class='base'>$Lang::tr{'advproxy client IP forwarding'}:</td><td><input type='checkbox' name='FORWARD_IPADDRESS' $checked{'FORWARD_IPADDRESS'}{'on'} /></td>
965 <td class='base'>$Lang::tr{'advproxy upstream username'}<img src='/blob.gif' alt='*' /></td><td><input type='text' name='UPSTREAM_USER' value='$proxysettings{'UPSTREAM_USER'}' /></td>
ac1cfefa 966</tr>
ac1cfefa 967<tr>
9141bd34
CS		 968 <td class='base'>$Lang::tr{'advproxy username forwarding'}:</td><td><input type='checkbox' name='FORWARD_USERNAME' $checked{'FORWARD_USERNAME'}{'on'} />
969 <td class='base'>$Lang::tr{'advproxy upstream password'}:<img src='/blob.gif' alt='*' /></td><td><input type='password' name='UPSTREAM_PASSWORD' value='$proxysettings{'UPSTREAM_PASSWORD'}' /></td>
ed38f89d 970</tr>
363fb6af 971<tr>
9141bd34 972 <td class='base' colspan='4'>$Lang::tr{'advproxy no connection auth'}:<input type='checkbox' name='NO_CONNECTION_AUTH' $checked{'NO_CONNECTION_AUTH'}{'on'} /></td>
363fb6af 973</tr>
ed38f89d
MT		 974</table>
975<hr size='1'>
976<table width='100%'>
977<tr>
978 <td colspan='4' class='base'><b>$Lang::tr{'advproxy log settings'}</b></td>
979</tr>
980<tr>
9141bd34
CS		 981 <td class='base'>$Lang::tr{'advproxy log enabled'}:<input type='checkbox' name='LOGGING' $checked{'LOGGING'}{'on'} /></td>
982 <td class='base'>$Lang::tr{'advproxy log query'}:<input type='checkbox' name='LOGQUERY' $checked{'LOGQUERY'}{'on'} /></td>
983 <td class='base'>$Lang::tr{'advproxy log useragent'}:<input type='checkbox' name='LOGUSERAGENT' $checked{'LOGUSERAGENT'}{'on'} /></td>
ed38f89d
MT		 984</tr>
985</table>
986<hr size='1'>
987<table width='100%'>
988<tr>
989 <td colspan='4'><b>$Lang::tr{'advproxy cache management'}</b></td>
990</tr>
991<tr>
9141bd34 992 <td width='35%'></td><td width='15%'></td><td width='35%'></td><td width='15%'></td>
ac1cfefa
MT		 993</tr>
994<tr>
ed38f89d
MT		 995 <td class='base'>$Lang::tr{'advproxy ram cache size'}:</td>
996 <td><input type='text' name='CACHE_MEM' value='$proxysettings{'CACHE_MEM'}' size='5' /></td>
997 <td class='base'>$Lang::tr{'advproxy hdd cache size'}:</td>
ac1cfefa
MT		 998 <td><input type='text' name='CACHE_SIZE' value='$proxysettings{'CACHE_SIZE'}' size='5' /></td>
999</tr>
1000<tr>
ed38f89d 1001 <td class='base'>$Lang::tr{'advproxy min size'}:</td>
ac1cfefa 1002 <td><input type='text' name='MIN_SIZE' value='$proxysettings{'MIN_SIZE'}' size='5' /></td>
ed38f89d 1003 <td class='base'>$Lang::tr{'advproxy max size'}:</td>
ac1cfefa
MT		 1004 <td><input type='text' name='MAX_SIZE' value='$proxysettings{'MAX_SIZE'}' size='5' /></td>
1005</tr>
1006<tr>
ed38f89d 1007 <td class='base'>$Lang::tr{'advproxy number of L1 dirs'}:</td>
363fb6af
MT		 1008 <td class='base'><select name='L1_DIRS'>
1009 <option value='16' $selected{'L1_DIRS'}{'16'}>16</option>
1010 <option value='32' $selected{'L1_DIRS'}{'32'}>32</option>
1011 <option value='64' $selected{'L1_DIRS'}{'64'}>64</option>
1012 <option value='128' $selected{'L1_DIRS'}{'128'}>128</option>
1013 <option value='256' $selected{'L1_DIRS'}{'256'}>256</option>
1014 </select></td>
ed38f89d 1015 <td colspan='2' rowspan= '5' valign='top' class='base'>
363fb6af 1016 <table cellspacing='0' cellpadding='0'>
ed38f89d
MT		 1017 <tr>
1018 <!-- intentionally left empty -->
1019 </tr>
1020 <tr>
1021 <td>$Lang::tr{'advproxy no cache sites'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1022 </tr>
1023 <tr>
1024 <!-- intentionally left empty -->
1025 </tr>
1026 <tr>
1027 <!-- intentionally left empty -->
1028 </tr>
1029 <tr>
9141bd34 1030 <td align=center><textarea name='DST_NOCACHE' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1031END
1032;
1033
1034print $proxysettings{'DST_NOCACHE'};
1035
1036print <<END
1037</textarea></td>
1038 </tr>
1039 </table>
1040 </td>
1041</tr>
1042<tr>
363fb6af
MT		 1043 <td class='base'>$Lang::tr{'advproxy memory replacement policy'}:</td>
1044 <td class='base'><select name='MEM_POLICY'>
1045 <option value='LRU' $selected{'MEM_POLICY'}{'LRU'}>LRU</option>
1046 <option value='heap LFUDA' $selected{'MEM_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1047 <option value='heap GDSF' $selected{'MEM_POLICY'}{'heap GDSF'}>heap GDSF</option>
1048 <option value='heap LRU' $selected{'MEM_POLICY'}{'heap LRU'}>heap LRU</option>
1049 </select></td>
ed38f89d
MT		 1050</tr>
1051<tr>
363fb6af
MT		 1052 <td class='base'>$Lang::tr{'advproxy cache replacement policy'}:</td>
1053 <td class='base'><select name='CACHE_POLICY'>
1054 <option value='LRU' $selected{'CACHE_POLICY'}{'LRU'}>LRU</option>
1055 <option value='heap LFUDA' $selected{'CACHE_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1056 <option value='heap GDSF' $selected{'CACHE_POLICY'}{'heap GDSF'}>heap GDSF</option>
1057 <option value='heap LRU' $selected{'CACHE_POLICY'}{'heap LRU'}>heap LRU</option>
1058 </select></td>
ed38f89d
MT		 1059</tr>
1060<tr>
1061 <td colspan='2'>&nbsp;</td>
1062</tr>
1063<tr>
363fb6af 1064 <td class='base'>$Lang::tr{'advproxy offline mode'}:</td>
ed38f89d
MT		 1065 <td><input type='checkbox' name='OFFLINE_MODE' $checked{'OFFLINE_MODE'}{'on'} /></td>
1066</tr>
1067</table>
1068<hr size='1'>
1069<table width='100%'>
363fb6af
MT		 1070<tr>
1071 <td colspan='4'><b>$Lang::tr{'advproxy destination ports'}</b></td>
1072</tr>
1073<tr>
9141bd34 1074 <td width='25%' align=center></td> <td width='20%' align=center></td><td width='25%' align=center></td><td width='30%' align=center></td>
363fb6af
MT		 1075</tr>
1076<tr>
1077 <td colspan='2' class='base'>$Lang::tr{'advproxy standard ports'}:</td>
1078 <td colspan='2' class='base'>$Lang::tr{'advproxy ssl ports'}:</td>
1079</tr>
1080<tr>
1081 <td colspan='2'><textarea name='PORTS_SAFE' cols='32' rows='6' wrap='off'>
1082END
1083;
1084 if (!$proxysettings{'PORTS_SAFE'}) { print $def_ports_safe; } else { print $proxysettings{'PORTS_SAFE'}; }
1085
1086print <<END
1087</textarea></td>
1088 <td colspan='2'><textarea name='PORTS_SSL' cols='32' rows='6' wrap='off'>
1089END
1090;
1091 if (!$proxysettings{'PORTS_SSL'}) { print $def_ports_ssl; } else { print $proxysettings{'PORTS_SSL'}; }
1092
1093print <<END
1094</textarea></td>
1095</tr>
1096</table>
1097<hr size='1'>
1098<table width='100%'>
ed38f89d
MT		 1099<tr>
1100 <td colspan='4'><b>$Lang::tr{'advproxy network based access'}</b></td>
1101</tr>
1102<tr>
1103 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1104</tr>
1105<tr>
9fb25b1c 1106 <td colspan='4' class='base'>$Lang::tr{'advproxy allowed subnets'}:</td>
ed38f89d
MT		 1107</tr>
1108<tr>
9141bd34 1109 <td colspan='2' rowspan='4'><textarea name='SRC_SUBNETS' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1110END
1111;
1112
363fb6af
MT		 1113if (!$proxysettings{'SRC_SUBNETS'})
1114{
ed38f89d 1115 print "$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}\n";
363fb6af
MT		 1116 if ($netsettings{'BLUE_DEV'})
1117 {
1118 print "$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}\n";
ed38f89d 1119 }
363fb6af 1120} else { print $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 1121
1122print <<END
1123</textarea></td>
9fb25b1c
MT		 1124END
1125;
1126
1127$line = $Lang::tr{'advproxy no internal proxy on green'};
1128$line =~ s/Green/<font color="$Header::colourgreen">Green<\/font>/i;
1129print "<td class='base'>$line:</td>\n";
1130print <<END
1131 <td><input type='checkbox' name='NO_PROXY_LOCAL' $checked{'NO_PROXY_LOCAL'}{'on'} /></td>
1132</tr>
1133END
1134;
1135if ($netsettings{'BLUE_DEV'}) {
1136 $line = $Lang::tr{'advproxy no internal proxy on blue'};
1137 $line =~ s/Blue/<font color="$Header::colourblue">Blue<\/font>/i;
1138 print "<tr>\n";
1139 print "<td class='base'>$line:</td>\n";
1140 print <<END
1141 <td><input type='checkbox' name='NO_PROXY_LOCAL_BLUE' $checked{'NO_PROXY_LOCAL_BLUE'}{'on'} /></td>
1142</tr>
1143END
1144;
1145}
1146print <<END
1147<tr>
1148 <td colspan='2'>&nbsp;</td>
1149</tr>
1150<tr>
ed38f89d
MT		 1151 <td colspan='2'>&nbsp;</td>
1152</tr>
1153</table>
1154<table width='100%'>
1155<tr>
1156 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1157</tr>
1158<tr>
1159 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1160 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1161</tr>
1162<tr>
9141bd34 1163 <td colspan='2'><textarea name='SRC_UNRESTRICTED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1164END
1165;
1166
1167 print $proxysettings{'SRC_UNRESTRICTED_IP'};
1168
1169print <<END
1170</textarea></td>
9141bd34 1171 <td colspan='2'><textarea name='SRC_UNRESTRICTED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1172END
1173;
1174
1175print $proxysettings{'SRC_UNRESTRICTED_MAC'};
1176
1177print <<END
1178</textarea></td>
1179</tr>
1180</table>
1181<table width='100%'>
1182<tr>
1183 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1184</tr>
1185<tr>
1186 <td colspan='2' class='base'>$Lang::tr{'advproxy banned ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1187 <td colspan='2' class='base'>$Lang::tr{'advproxy banned mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1188</tr>
1189<tr>
9141bd34 1190 <td colspan='2'><textarea name='SRC_BANNED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1191END
1192;
1193
1194 print $proxysettings{'SRC_BANNED_IP'};
1195
1196print <<END
1197</textarea></td>
9141bd34 1198 <td colspan='2'><textarea name='SRC_BANNED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1199END
1200;
1201
1202print $proxysettings{'SRC_BANNED_MAC'};
1203
1204print <<END
1205</textarea></td>
1206</tr>
1207</table>
1208
1209<hr size='1'>
1210
1211END
1212;
1213# -------------------------------------------------------------------
1214# CRE GUI - optional
1215# -------------------------------------------------------------------
1216
1217if (-e $cre_enabled) { print <<END
1218<table width='100%'>
1219
1220<tr>
9141bd34 1221 <td colspan='4'><b>$Lang::tr{'advproxy classroom extensions'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='CLASSROOM_EXT' $checked{'CLASSROOM_EXT'}{'on'} /></td>
ed38f89d
MT		 1222</tr>
1223<tr>
1224 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1225</tr>
1226<tr>
9141bd34
CS		 1227
1228END
1229;
1230if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1231print <<END
ed38f89d
MT		 1232 <td class='base'>$Lang::tr{'advproxy supervisor password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1233 <td><input type='password' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' size='12' /></td>
1234</tr>
1235<tr>
1236 <td colspan='2' class='base'>$Lang::tr{'advproxy cre group definitions'}:</td>
1237 <td colspan='2' class='base'>$Lang::tr{'advproxy cre supervisors'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
9141bd34
CS		 1238END
1239;
1240}
1241print "</tr>";
1242if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1243print <<END
ed38f89d
MT		 1244<tr>
1245 <td colspan='2'><textarea name='CRE_GROUPS' cols='32' rows='6' wrap='off'>
1246END
1247;
1248
1249 print $proxysettings{'CRE_GROUPS'};
1250
1251print <<END
1252</textarea></td>
1253 <td colspan='2'><textarea name='CRE_SVHOSTS' cols='32' rows='6' wrap='off'>
1254END
1255;
1256 print $proxysettings{'CRE_SVHOSTS'};
1257
1258print <<END
1259</textarea></td>
1260</tr>
ed38f89d
MT		 1261END
1262;
9141bd34
CS		 1263}
1264print "</table><hr size='1'>";
1265
ed38f89d
MT		 1266} else {
1267 print <<END
1268 <input type='hidden' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' />
1269 <input type='hidden' name='CRE_GROUPS' value='$proxysettings{'CRE_GROUPS'}' />
1270 <input type='hidden' name='CRE_SVHOSTS' value='$proxysettings{'CRE_SVHOSTS'}' />
1271END
1272;
1273}
363fb6af 1274
ed38f89d
MT		 1275# -------------------------------------------------------------------
1276
1277print <<END
1278
1279<table width='100%'>
1280<tr>
363fb6af 1281 <td colspan='4'><b>$Lang::tr{'advproxy time restrictions'}</b></td>
ed38f89d
MT		 1282</tr>
1283<table width='100%'>
1284<tr>
1285 <td width='2%'>$Lang::tr{'advproxy access'}</td>
1286 <td width='1%'>&nbsp;</td>
1287 <td width='2%' align='center'>$Lang::tr{'advproxy monday'}</td>
1288 <td width='2%' align='center'>$Lang::tr{'advproxy tuesday'}</td>
1289 <td width='2%' align='center'>$Lang::tr{'advproxy wednesday'}</td>
1290 <td width='2%' align='center'>$Lang::tr{'advproxy thursday'}</td>
1291 <td width='2%' align='center'>$Lang::tr{'advproxy friday'}</td>
1292 <td width='2%' align='center'>$Lang::tr{'advproxy saturday'}</td>
1293 <td width='2%' align='center'>$Lang::tr{'advproxy sunday'}</td>
1294 <td width='1%'>&nbsp;&nbsp;</td>
1295 <td width='7%' colspan=3>$Lang::tr{'advproxy from'}</td>
1296 <td width='1%'>&nbsp;</td>
1297 <td width='7%' colspan=3>$Lang::tr{'advproxy to'}</td>
1298 <td>&nbsp;</td>
1299</tr>
1300<tr>
1301 <td class='base'>
1302 <select name='TIME_ACCESS_MODE'>
1303 <option value='allow' $selected{'TIME_ACCESS_MODE'}{'allow'}>$Lang::tr{'advproxy mode allow'}</option>
1304 <option value='deny' $selected{'TIME_ACCESS_MODE'}{'deny'}>$Lang::tr{'advproxy mode deny'}</option>
1305 </select>
1306 </td>
1307 <td>&nbsp;</td>
1308 <td class='base'><input type='checkbox' name='TIME_MON' $checked{'TIME_MON'}{'on'} /></td>
1309 <td class='base'><input type='checkbox' name='TIME_TUE' $checked{'TIME_TUE'}{'on'} /></td>
1310 <td class='base'><input type='checkbox' name='TIME_WED' $checked{'TIME_WED'}{'on'} /></td>
1311 <td class='base'><input type='checkbox' name='TIME_THU' $checked{'TIME_THU'}{'on'} /></td>
1312 <td class='base'><input type='checkbox' name='TIME_FRI' $checked{'TIME_FRI'}{'on'} /></td>
1313 <td class='base'><input type='checkbox' name='TIME_SAT' $checked{'TIME_SAT'}{'on'} /></td>
1314 <td class='base'><input type='checkbox' name='TIME_SUN' $checked{'TIME_SUN'}{'on'} /></td>
1315 <td>&nbsp;</td>
1316 <td class='base'>
1317 <select name='TIME_FROM_HOUR'>
1318END
1319;
1320for ($i=0;$i<=24;$i++) {
1321 $_ = sprintf("%02s",$i);
1322 print "<option $selected{'TIME_FROM_HOUR'}{$_}>$_</option>\n";
1323}
1324print <<END
1325 </select>
1326 </td>
1327 <td>:</td>
1328 <td class='base'>
1329 <select name='TIME_FROM_MINUTE'>
1330END
1331;
1332for ($i=0;$i<=45;$i+=15) {
1333 $_ = sprintf("%02s",$i);
1334 print "<option $selected{'TIME_FROM_MINUTE'}{$_}>$_</option>\n";
1335}
1336print <<END
1337 </select>
1338 <td> - </td>
1339 </td>
1340 <td class='base'>
1341 <select name='TIME_TO_HOUR'>
1342END
1343;
1344for ($i=0;$i<=24;$i++) {
1345 $_ = sprintf("%02s",$i);
1346 print "<option $selected{'TIME_TO_HOUR'}{$_}>$_</option>\n";
1347}
1348print <<END
1349 </select>
1350 </td>
1351 <td>:</td>
1352 <td class='base'>
1353 <select name='TIME_TO_MINUTE'>
1354END
1355;
1356for ($i=0;$i<=45;$i+=15) {
1357 $_ = sprintf("%02s",$i);
1358 print "<option $selected{'TIME_TO_MINUTE'}{$_}>$_</option>\n";
1359}
1360print <<END
1361 </select>
1362 </td>
1363</tr>
1364</table>
1365<hr size='1'>
1366<table width='100%'>
1367<tr>
1368 <td colspan='4'><b>$Lang::tr{'advproxy transfer limits'}</b></td>
ac1cfefa
MT		 1369</tr>
1370<tr>
ed38f89d
MT		 1371 <td width='25%' class='base'>$Lang::tr{'advproxy max download size'}:</td>
1372 <td width='20%'><input type='text' name='MAX_INCOMING_SIZE' value='$proxysettings{'MAX_INCOMING_SIZE'}' size='5' /></td>
1373 <td width='25%' class='base'>$Lang::tr{'advproxy max upload size'}:</td>
1374 <td width='30%'><input type='text' name='MAX_OUTGOING_SIZE' value='$proxysettings{'MAX_OUTGOING_SIZE'}' size='5' /></td>
ac1cfefa
MT		 1375</tr>
1376</table>
ed38f89d 1377<hr size='1'>
ac1cfefa 1378<table width='100%'>
ac1cfefa 1379<tr>
ed38f89d
MT		 1380 <td colspan='4'><b>$Lang::tr{'advproxy download throttling'}</b></td>
1381</tr>
1382<tr>
1383 <td width='25%' class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourgreen">Green</font>:</td>
1384 <td width='20%' class='base'>
1385 <select name='THROTTLING_GREEN_TOTAL'>
1386END
1387;
1388
1389foreach (@throttle_limits) {
1390 print "\t<option value='$_' $selected{'THROTTLING_GREEN_TOTAL'}{$_}>$_ kBit/s</option>\n";
1391}
1392
1393print <<END
1394 <option value='0' $selected{'THROTTLING_GREEN_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1395 </select>
1396 </td>
1397 <td width='25%' class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourgreen">Green</font>:</td>
1398 <td width='30%' class='base'>
1399 <select name='THROTTLING_GREEN_HOST'>
1400END
1401;
1402
1403foreach (@throttle_limits) {
1404 print "\t<option value='$_' $selected{'THROTTLING_GREEN_HOST'}{$_}>$_ kBit/s</option>\n";
1405}
1406
1407print <<END
1408 <option value='0' $selected{'THROTTLING_GREEN_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1409 </select>
1410 </td>
1411</tr>
1412END
1413;
1414
1415if ($netsettings{'BLUE_DEV'}) {
1416 print <<END
1417<tr>
1418 <td class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourblue">Blue</font>:</td>
1419 <td class='base'>
1420 <select name='THROTTLING_BLUE_TOTAL'>
1421END
1422;
1423
1424foreach (@throttle_limits) {
1425 print "\t<option value='$_' $selected{'THROTTLING_BLUE_TOTAL'}{$_}>$_ kBit/s</option>\n";
1426}
1427
1428print <<END
1429 <option value='0' $selected{'THROTTLING_BLUE_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1430 </select>
1431 </td>
1432 <td class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourblue">Blue</font>:</td>
1433 <td class='base'>
1434 <select name='THROTTLING_BLUE_HOST'>
1435END
1436;
1437
1438foreach (@throttle_limits) {
1439 print "\t<option value='$_' $selected{'THROTTLING_BLUE_HOST'}{$_}>$_ kBit/s</option>\n";
1440}
1441
1442print <<END
1443 <option value='0' $selected{'THROTTLING_BLUE_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1444 </select>
ac1cfefa 1445 </td>
ac1cfefa 1446</tr>
ed38f89d
MT		 1447END
1448;
1449}
ac1cfefa 1450
ed38f89d
MT		 1451print <<END
1452</table>
1453<table width='100%'>
1454<tr>
1455 <td colspan='4'><i>$Lang::tr{'advproxy content based throttling'}:</i></td>
1456</tr>
1457<tr>
1458 <td width='15%' class='base'>$Lang::tr{'advproxy throttle binary'}:</td>
1459 <td width='10%'><input type='checkbox' name='THROTTLE_BINARY' $checked{'THROTTLE_BINARY'}{'on'} /></td>
1460 <td width='15%' class='base'>$Lang::tr{'advproxy throttle dskimg'}:</td>
1461 <td width='10%'><input type='checkbox' name='THROTTLE_DSKIMG' $checked{'THROTTLE_DSKIMG'}{'on'} /></td>
1462 <td width='15%' class='base'>$Lang::tr{'advproxy throttle mmedia'}:</td>
1463 <td width='10%'><input type='checkbox' name='THROTTLE_MMEDIA' $checked{'THROTTLE_MMEDIA'}{'on'} /></td>
363fb6af
MT		 1464 <td width='15%'>&nbsp;</td>
1465 <td width='10%'>&nbsp;</td>
ed38f89d 1466</tr>
ac1cfefa 1467</table>
ed38f89d
MT		 1468<hr size='1'>
1469<table width='100%'>
1470<tr>
9141bd34 1471 <td colspan='4'><b>$Lang::tr{'advproxy MIME filter'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='ENABLE_MIME_FILTER' $checked{'ENABLE_MIME_FILTER'}{'on'} /></td>
ed38f89d 1472</tr>
9141bd34
CS		 1473END
1474;
1475if ( $proxysettings{'ENABLE_MIME_FILTER'} eq 'on' ){
1476print <<END
ed38f89d
MT		 1477<tr>
1478 <td colspan='2' class='base'>$Lang::tr{'advproxy MIME block types'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
363fb6af
MT		 1479 <td>&nbsp;</td>
1480 <td>&nbsp;</td>
ed38f89d
MT		 1481</tr>
1482<tr>
1483 <td colspan='2'><textarea name='MIME_TYPES' cols='32' rows='6' wrap='off'>
ac1cfefa
MT		 1484END
1485;
ac1cfefa 1486
ed38f89d 1487print $proxysettings{'MIME_TYPES'};
ac1cfefa 1488
ed38f89d
MT		 1489print <<END
1490</textarea></td>
363fb6af
MT		 1491 <td>&nbsp;</td>
1492 <td>&nbsp;</td>
ed38f89d 1493</tr>
9141bd34
CS		 1494END
1495;
1496}
1497print <<END
ed38f89d 1498</table>
9141bd34 1499
ed38f89d
MT		 1500<hr size='1'>
1501<table width='100%'>
1502<tr>
9141bd34 1503 <td colspan='4'><b>$Lang::tr{'advproxy web browser'}</b> $Lang::tr{'advproxy UA enable filter'}:<input type='checkbox' name='ENABLE_BROWSER_CHECK' $checked{'ENABLE_BROWSER_CHECK'}{'on'} /></td>
ed38f89d 1504</tr>
9141bd34
CS		 1505END
1506;
1507if ( $proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on' ){
1508print <<END
ed38f89d
MT		 1509<tr>
1510 <td colspan='4'><i>
1511END
1512;
1513if (@useragentlist) { print "$Lang::tr{'advproxy allowed web browsers'}:"; } else { print "$Lang::tr{'advproxy no clients defined'}"; }
1514print <<END
1515</i></td>
1516</tr>
1517</table>
1518<table width='100%'>
1519END
1520;
ac1cfefa 1521
ed38f89d
MT		 1522for ($n=0; $n<=@useragentlist; $n = $n + $i) {
1523 for ($i=0; $i<=3; $i++) {
1524 if ($i eq 0) { print "<tr>\n"; }
1525 if (($n+$i) < @useragentlist) {
1526 @useragent = split(/,/,@useragentlist[$n+$i]);
4e17adad
CS		 1527 print "<td width='15%'>$useragent[1]:<\/td>\n";
1528 print "<td width='10%'><input type='checkbox' name='UA_$useragent[0]' $checked{'UA_'.$useragent[0]}{'on'} /></td>\n";
ed38f89d
MT		 1529 }
1530 if ($i eq 3) { print "<\/tr>\n"; }
1531 }
1532}
9141bd34 1533}
ed38f89d
MT		 1534print <<END
1535</table>
1536<hr size='1'>
1537<table width='100%'>
1538<tr>
1539 <td><b>$Lang::tr{'advproxy privacy'}</b></td>
1540</tr>
1541<tr>
1542 <td class='base'>$Lang::tr{'advproxy fake useragent'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
ed38f89d
MT		 1543 <td class='base'>$Lang::tr{'advproxy fake referer'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1544</tr>
1545<tr>
9141bd34 1546 <td><input type='text' name='FAKE_USERAGENT' value='$proxysettings{'FAKE_USERAGENT'}' size='56' /></td>
ed38f89d
MT		 1547 <td><input type='text' name='FAKE_REFERER' value='$proxysettings{'FAKE_REFERER'}' size='56' /></td>
1548</tr>
1549</table>
1550<hr size='1'>
1551END
1552;
1553
9fb25b1c 1554print <<END
ed38f89d
MT		 1555<table width='100%'>
1556<tr>
363fb6af 1557 <td colspan='5'><b>$Lang::tr{'advproxy AUTH method'}</b></td>
ed38f89d
MT		 1558</tr>
1559<tr>
1560 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='none' $checked{'AUTH_METHOD'}{'none'} />$Lang::tr{'advproxy AUTH method none'}</td>
1561 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ncsa' $checked{'AUTH_METHOD'}{'ncsa'} />$Lang::tr{'advproxy AUTH method ncsa'}</td>
1562 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ident' $checked{'AUTH_METHOD'}{'ident'} />$Lang::tr{'advproxy AUTH method ident'}</td>
1563 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ldap' $checked{'AUTH_METHOD'}{'ldap'} />$Lang::tr{'advproxy AUTH method ldap'}</td>
1564 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ntlm' $checked{'AUTH_METHOD'}{'ntlm'} />$Lang::tr{'advproxy AUTH method ntlm'}</td>
1565 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='radius' $checked{'AUTH_METHOD'}{'radius'} />$Lang::tr{'advproxy AUTH method radius'}</td>
1566</tr>
1567</table>
1568END
1569;
1570
1571if (!($proxysettings{'AUTH_METHOD'} eq 'none')) { if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) { print <<END
1572<hr size='1'>
1573<table width='100%'>
1574<tr>
363fb6af 1575 <td colspan='4'><b>$Lang::tr{'advproxy AUTH global settings'}</b></td>
ed38f89d
MT		 1576</tr>
1577<tr>
1578 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1579</tr>
1580<tr>
1581 <td class='base'>$Lang::tr{'advproxy AUTH number of auth processes'}:</td>
1582 <td><input type='text' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}' size='5' /></td>
1583 <td colspan='2' rowspan= '6' valign='top' class='base'>
1584 <table cellpadding='0' cellspacing='0'>
1585 <tr>
1586 <td class='base'>$Lang::tr{'advproxy AUTH realm'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1587 </tr>
1588 <tr>
1589 <!-- intentionally left empty -->
1590 </tr>
1591 <tr>
1592 <!-- intentionally left empty -->
1593 </tr>
1594 <tr>
1595 <td><input type='text' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}' size='40' /></td>
1596 </tr>
1597 <tr>
1598 <!-- intentionally left empty -->
1599 </tr>
1600 <tr>
1601 <!-- intentionally left empty -->
1602 </tr>
1603 <tr>
1604 <td>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1605 </tr>
1606 <tr>
1607 <!-- intentionally left empty -->
1608 </tr>
1609 <tr>
1610 <!-- intentionally left empty -->
1611 </tr>
1612 <tr>
1613 <td><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1614END
1615;
1616
1617print $proxysettings{'DST_NOAUTH'};
1618
1619print <<END
1620</textarea></td>
1621 </tr>
1622 </table>
1623 </td>
1624</tr>
1625<tr>
1626 <td class='base'>$Lang::tr{'advproxy AUTH auth cache TTL'}:</td>
1627 <td><input type='text' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1628</tr>
1629<tr>
1630 <td class='base'>$Lang::tr{'advproxy AUTH limit of IP addresses'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1631 <td><input type='text' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1632</tr>
1633<tr>
1634 <td class='base'>$Lang::tr{'advproxy AUTH user IP cache TTL'}:</td>
1635 <td><input type='text' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1636</tr>
1637<tr>
363fb6af
MT		 1638 <td class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1639 <td><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1640</tr>
1641<tr>
1642 <td colspan='2'>&nbsp;</td>
1643</tr>
1644</table>
1645END
1646;
1647}
1648
1649# ===================================================================
1650# NCSA auth settings
1651# ===================================================================
1652
1653if ($proxysettings{'AUTH_METHOD'} eq 'ncsa') {
1654print <<END
1655<hr size='1'>
1656<table width='100%'>
1657<tr>
1658 <td colspan='4'><b>$Lang::tr{'advproxy NCSA auth'}</b></td>
1659</tr>
1660<tr>
1661 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA min password length'}:</td>
1662 <td width='20%'><input type='text' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}' size='5' /></td>
1663 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA redirector bypass'} \'$Lang::tr{'advproxy NCSA grp extended'}\':</td>
363fb6af 1664 <td width='20%'><input type='checkbox' name='NCSA_BYPASS_REDIR' $checked{'NCSA_BYPASS_REDIR'}{'on'} /></td>
ed38f89d
MT		 1665</tr>
1666<tr>
1667 <td colspan='2'><br>&nbsp;<input type='submit' name='ACTION' value='$Lang::tr{'advproxy NCSA user management'}'></td>
1668 <td>&nbsp;</td>
1669 <td>&nbsp;</td>
1670</tr>
1671</table>
1672END
1673; }
1674
1675# ===================================================================
1676# IDENTD auth settings
1677# ===================================================================
1678
1679if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
1680print <<END
1681<hr size ='1'>
1682<table width='100%'>
1683<tr>
1684 <td colspan='4'><b>$Lang::tr{'advproxy IDENT identd settings'}</b></td>
1685</tr>
1686<tr>
1687 <td width='25%' class='base'>$Lang::tr{'advproxy IDENT required'}:</td>
363fb6af
MT		 1688 <td width='20%'><input type='checkbox' name='IDENT_REQUIRED' $checked{'IDENT_REQUIRED'}{'on'} /></td>
1689 <td width='25%' class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1690 <td width='30%'><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1691</tr>
1692<tr>
1693 <td class='base'>$Lang::tr{'advproxy IDENT timeout'}:</td>
1694 <td><input type='text' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}' size='5' /></td>
1695 <td>&nbsp;</td>
1696 <td>&nbsp;</td>
1697</tr>
1698<tr>
1699 <td colspan='2' class='base'>$Lang::tr{'advproxy IDENT aware hosts'}:</td>
1700 <td colspan='2' class='base'>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1701</tr>
1702<tr>
1703 <td colspan='2'><textarea name='IDENT_HOSTS' cols='32' rows='6' wrap='off'>
1704END
1705;
1706if (!$proxysettings{'IDENT_HOSTS'}) {
1707 print "$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}\n";
1708 if ($netsettings{'BLUE_DEV'}) {
1709 print "$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}\n";
1710 }
1711} else {
1712 print $proxysettings{'IDENT_HOSTS'};
1713}
1714
1715print <<END
1716</textarea></td>
1717 <td colspan='2'><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1718END
1719;
1720
1721print $proxysettings{'DST_NOAUTH'};
1722
1723print <<END
1724</textarea></td>
1725</tr>
1726</table>
1727<hr size ='1'>
1728<table width='100%'>
1729<tr>
1730 <td colspan='4'><b>$Lang::tr{'advproxy IDENT user based access restrictions'}</b></td>
1731</tr>
1732<tr>
1733 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1734 <td width='20%'><input type='checkbox' name='IDENT_ENABLE_ACL' $checked{'IDENT_ENABLE_ACL'}{'on'} /></td>
1735 <td width='25%'>&nbsp;</td>
1736 <td width='30%'>&nbsp;</td>
1737</tr>
1738<tr>
1739 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='positive' $checked{'IDENT_USER_ACL'}{'positive'} />
1740 $Lang::tr{'advproxy IDENT use positive access list'}:</td>
1741 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='negative' $checked{'IDENT_USER_ACL'}{'negative'} />
1742 $Lang::tr{'advproxy IDENT use negative access list'}:</td>
1743</tr>
1744<tr>
1745 <td colspan='2'>$Lang::tr{'advproxy IDENT authorized users'}</td>
1746 <td colspan='2'>$Lang::tr{'advproxy IDENT unauthorized users'}</td>
1747</tr>
1748<tr>
363fb6af 1749 <td colspan='2'><textarea name='IDENT_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1750END
1751; }
1752
1753if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_ALLOW_USERS'}; }
1754
1755if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1756</textarea></td>
363fb6af 1757 <td colspan='2'><textarea name='IDENT_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1758END
1759; }
1760
1761if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_DENY_USERS'}; }
1762
1763if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1764</textarea></td>
1765</tr>
1766</table>
1767END
1768; }
1769
1770# ===================================================================
1771# NTLM auth settings
1772# ===================================================================
1773
1774if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') {
1775print <<END
1776<hr size='1'>
1777<table width='100%'>
1778<tr>
1779 <td colspan='6'><b>$Lang::tr{'advproxy NTLM domain settings'}</b></td>
1780</tr>
1781<tr>
1782 <td class='base'>$Lang::tr{'advproxy NTLM domain'}:</td>
1783 <td><input type='text' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}' size='15' /></td>
1784 <td class='base'>$Lang::tr{'advproxy NTLM PDC hostname'}:</td>
1785 <td><input type='text' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}' size='14' /></td>
1786 <td class='base'>$Lang::tr{'advproxy NTLM BDC hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1787 <td><input type='text' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}' size='14' /></td>
1788</tr>
1789</table>
1790<hr size ='1'>
1791<table width='100%'>
1792<tr>
1793 <td colspan='3'><b>$Lang::tr{'advproxy NTLM auth mode'}</b></td>
1794</tr>
1795<tr>
1796 <td width='25%' class='base' width='25%'>$Lang::tr{'advproxy NTLM use integrated auth'}:</td>
1797 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_INT_AUTH' $checked{'NTLM_ENABLE_INT_AUTH'}{'on'} /></td>
1798 <td>&nbsp;</td>
1799</tr>
1800</table>
1801<hr size ='1'>
1802<table width='100%'>
1803<tr>
1804 <td colspan='4'><b>$Lang::tr{'advproxy NTLM user based access restrictions'}</b></td>
1805</tr>
1806<tr>
1807 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1808 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_ACL' $checked{'NTLM_ENABLE_ACL'}{'on'} /></td>
1809 <td width='25%'>&nbsp;</td>
1810 <td width='30%'>&nbsp;</td>
1811</tr>
1812<tr>
1813 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='positive' $checked{'NTLM_USER_ACL'}{'positive'} />
1814 $Lang::tr{'advproxy NTLM use positive access list'}:</td>
1815 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='negative' $checked{'NTLM_USER_ACL'}{'negative'} />
1816 $Lang::tr{'advproxy NTLM use negative access list'}:</td>
1817</tr>
1818<tr>
1819 <td colspan='2'>$Lang::tr{'advproxy NTLM authorized users'}</td>
1820 <td colspan='2'>$Lang::tr{'advproxy NTLM unauthorized users'}</td>
1821</tr>
1822<tr>
363fb6af 1823 <td colspan='2'><textarea name='NTLM_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1824END
1825; }
1826
1827if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_ALLOW_USERS'}; }
1828
1829if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1830</textarea></td>
363fb6af 1831 <td colspan='2'><textarea name='NTLM_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1832END
1833; }
1834
1835if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_DENY_USERS'}; }
1836
1837if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1838</textarea></td>
1839</tr>
1840</table>
1841END
1842; }
1843
1844# ===================================================================
1845# LDAP auth settings
1846# ===================================================================
1847
1848if ($proxysettings{'AUTH_METHOD'} eq 'ldap') {
1849print <<END
1850<hr size='1'>
1851<table width='100%'>
1852<tr>
1853 <td colspan='4'><b>$Lang::tr{'advproxy LDAP common settings'}</b></td>
1854</tr>
1855<tr>
1856 <td class='base'>$Lang::tr{'advproxy LDAP basedn'}:</td>
1857 <td><input type='text' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}' size='37' /></td>
1858 <td class='base'>$Lang::tr{'advproxy LDAP type'}:</td>
1859 <td class='base'><select name='LDAP_TYPE'>
1860 <option value='ADS' $selected{'LDAP_TYPE'}{'ADS'}>$Lang::tr{'advproxy LDAP ADS'}</option>
1861 <option value='NDS' $selected{'LDAP_TYPE'}{'NDS'}>$Lang::tr{'advproxy LDAP NDS'}</option>
1862 <option value='V2' $selected{'LDAP_TYPE'}{'V2'}>$Lang::tr{'advproxy LDAP V2'}</option>
1863 <option value='V3' $selected{'LDAP_TYPE'}{'V3'}>$Lang::tr{'advproxy LDAP V3'}</option>
1864 </select></td>
1865</tr>
1866<tr>
1867 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP server'}:</td>
1868 <td width='40%'><input type='text' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}' size='14' /></td>
1869 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP port'}:</td>
1870 <td><input type='text' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}' size='3' /></td>
1871</tr>
1872</table>
1873<hr size ='1'>
1874<table width='100%'>
1875<tr>
1876 <td colspan='4'><b>$Lang::tr{'advproxy LDAP binddn settings'}</b></td>
1877</tr>
1878<tr>
1879 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn username'}:</td>
1880 <td width='40%'><input type='text' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}' size='37' /></td>
1881 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn password'}:</td>
1882 <td><input type='password' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}' size='14' /></td>
1883</tr>
1884</table>
1885<hr size ='1'>
1886<table width='100%'>
1887<tr>
1888 <td colspan='4'><b>$Lang::tr{'advproxy LDAP group access control'}</b></td>
1889</tr>
1890<tr>
1891 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP group required'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1892 <td width='40%'><input type='text' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}' size='37' /></td>
1893 <td>&nbsp;</td>
1894 <td>&nbsp;</td>
1895</tr>
1896</table>
1897END
1898; }
1899
1900# ===================================================================
1901# RADIUS auth settings
1902# ===================================================================
1903
1904if ($proxysettings{'AUTH_METHOD'} eq 'radius') {
1905print <<END
1906<hr size='1'>
1907<table width='100%'>
1908<tr>
1909 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS radius settings'}</b></td>
1910</tr>
1911<tr>
1912 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS server'}:</td>
1913 <td width='20%'><input type='text' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}' size='14' /></td>
1914 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS port'}:</td>
1915 <td width='30%'><input type='text' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}' size='3' /></td>
1916</tr>
1917<tr>
1918 <td class='base'>$Lang::tr{'advproxy RADIUS identifier'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1919 <td><input type='text' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}' size='14' /></td>
1920 <td class='base'>$Lang::tr{'advproxy RADIUS secret'}:</td>
1921 <td><input type='password' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}' size='14' /></td>
1922</tr>
1923</table>
1924<hr size ='1'>
1925<table width='100%'>
1926<tr>
1927 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS user based access restrictions'}</b></td>
1928</tr>
1929<tr>
1930 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1931 <td width='20%'><input type='checkbox' name='RADIUS_ENABLE_ACL' $checked{'RADIUS_ENABLE_ACL'}{'on'} /></td>
1932 <td width='25%'>&nbsp;</td>
1933 <td width='30%'>&nbsp;</td>
1934</tr>
1935<tr>
1936 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='positive' $checked{'RADIUS_USER_ACL'}{'positive'} />
1937 $Lang::tr{'advproxy RADIUS use positive access list'}:</td>
1938 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='negative' $checked{'RADIUS_USER_ACL'}{'negative'} />
1939 $Lang::tr{'advproxy RADIUS use negative access list'}:</td>
1940</tr>
1941<tr>
1942 <td colspan='2'>$Lang::tr{'advproxy RADIUS authorized users'}</td>
1943 <td colspan='2'>$Lang::tr{'advproxy RADIUS unauthorized users'}</td>
1944</tr>
1945<tr>
363fb6af 1946 <td colspan='2'><textarea name='RADIUS_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1947END
1948; }
1949
1950if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_ALLOW_USERS'}; }
1951
1952if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
1953</textarea></td>
363fb6af 1954 <td colspan='2'><textarea name='RADIUS_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1955END
1956; }
1957
1958if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_DENY_USERS'}; }
1959
1960if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
1961</textarea></td>
1962</tr>
1963</table>
1964END
1965; }
1966
1967# ===================================================================
1968
1969}
1970
1971print "<table>\n";
1972
1973if ($proxysettings{'AUTH_METHOD'} eq 'none') {
1974print <<END
1975<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
1976<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1977<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1978<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1979<td><input type='hidden' name='AUTH_ALWAYS_REQUIRED' value='$proxysettings{'AUTH_ALWAYS_REQUIRED'}'></td>
1980<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
1981<td><input type='hidden' name='DST_NOAUTH' value='$proxysettings{'DST_NOAUTH'}'></td>
1982END
1983; }
1984
1985if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
1986print <<END
1987<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
1988<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1989<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1990<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1991<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
1992END
1993; }
1994
1995if (!($proxysettings{'AUTH_METHOD'} eq 'ncsa')) {
1996print <<END
1997<td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
1998<td><input type='hidden' name='NCSA_BYPASS_REDIR' value='$proxysettings{'NCSA_BYPASS_REDIR'}'></td>
1999END
2000; }
2001
2002if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) {
2003print <<END
2004<td><input type='hidden' name='IDENT_REQUIRED' value='$proxysettings{'IDENT_REQUIRED'}'></td>
2005<td><input type='hidden' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}'></td>
2006<td><input type='hidden' name='IDENT_HOSTS' value='$proxysettings{'IDENT_HOSTS'}'></td>
2007<td><input type='hidden' name='IDENT_ENABLE_ACL' value='$proxysettings{'IDENT_ENABLE_ACL'}'></td>
2008<td><input type='hidden' name='IDENT_USER_ACL' value='$proxysettings{'IDENT_USER_ACL'}'></td>
2009<td><input type='hidden' name='IDENT_ALLOW_USERS' value='$proxysettings{'IDENT_ALLOW_USERS'}'></td>
2010<td><input type='hidden' name='IDENT_DENY_USERS' value='$proxysettings{'IDENT_DENY_USERS'}'></td>
2011END
2012; }
2013
2014if (!($proxysettings{'AUTH_METHOD'} eq 'ldap')) {
2015print <<END
2016<td><input type='hidden' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}'></td>
2017<td><input type='hidden' name='LDAP_TYPE' value='$proxysettings{'LDAP_TYPE'}'></td>
2018<td><input type='hidden' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}'></td>
2019<td><input type='hidden' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}'></td>
2020<td><input type='hidden' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}'></td>
2021<td><input type='hidden' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}'></td>
2022<td><input type='hidden' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}'></td>
2023END
2024; }
2025
2026if (!($proxysettings{'AUTH_METHOD'} eq 'ntlm')) {
2027print <<END
2028<td><input type='hidden' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}'></td>
2029<td><input type='hidden' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}'></td>
2030<td><input type='hidden' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}'></td>
2031<td><input type='hidden' name='NTLM_ENABLE_INT_AUTH' value='$proxysettings{'NTLM_ENABLE_INT_AUTH'}'></td>
2032<td><input type='hidden' name='NTLM_ENABLE_ACL' value='$proxysettings{'NTLM_ENABLE_ACL'}'></td>
2033<td><input type='hidden' name='NTLM_USER_ACL' value='$proxysettings{'NTLM_USER_ACL'}'></td>
2034<td><input type='hidden' name='NTLM_ALLOW_USERS' value='$proxysettings{'NTLM_ALLOW_USERS'}'></td>
2035<td><input type='hidden' name='NTLM_DENY_USERS' value='$proxysettings{'NTLM_DENY_USERS'}'></td>
2036END
2037; }
2038
2039if (!($proxysettings{'AUTH_METHOD'} eq 'radius')) {
2040print <<END
2041<td><input type='hidden' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}'></td>
2042<td><input type='hidden' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}'></td>
2043<td><input type='hidden' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}'></td>
2044<td><input type='hidden' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}'></td>
2045<td><input type='hidden' name='RADIUS_ENABLE_ACL' value='$proxysettings{'RADIUS_ENABLE_ACL'}'></td>
2046<td><input type='hidden' name='RADIUS_USER_ACL' value='$proxysettings{'RADIUS_USER_ACL'}'></td>
2047<td><input type='hidden' name='RADIUS_ALLOW_USERS' value='$proxysettings{'RADIUS_ALLOW_USERS'}'></td>
2048<td><input type='hidden' name='RADIUS_DENY_USERS' value='$proxysettings{'RADIUS_DENY_USERS'}'></td>
2049END
2050; }
2051
2052print "</table>\n";
2053
2054print <<END
2055<hr size='1'>
2056END
2057;
2058
2059print <<END
2060<table width='100%'>
2061<tr>
363fb6af 2062 <td>&nbsp;</td>
ed38f89d
MT		 2063 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
2064 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy save and restart'}' /></td>
363fb6af
MT		 2065 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy clear cache'}' /></td>
2066 <td>&nbsp;</td>
ed38f89d
MT		 2067</tr>
2068
2069</table>
2070<br />
2071<table width='100%'>
2072<tr>
2073 <td><img src='/blob.gif' align='top' alt='*' />&nbsp;
2074 <font class='base'>$Lang::tr{'this field may be blank'}</font>
2075 </td>
363fb6af 2076 <td align='right'>&nbsp;</td>
ed38f89d
MT		 2077</tr>
2078</table>
2079</form>
2080END
2081;
2082
2083&Header::closebox();
2084
2085} else {
2086
2087# ===================================================================
2088# NCSA user management
2089# ===================================================================
2090
2091&Header::openbox('100%', 'left', "$Lang::tr{'advproxy NCSA auth'}");
2092print <<END
2093<form method='post' action='$ENV{'SCRIPT_NAME'}'>
2094<table width='100%'>
2095<tr>
363fb6af 2096 <td colspan='4'><b>$Lang::tr{'advproxy NCSA user management'}</b></td>
ed38f89d
MT		 2097</tr>
2098<tr>
2099 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA username'}:</td>
2100 <td width='25%'><input type='text' name='NCSA_USERNAME' value='$proxysettings{'NCSA_USERNAME'}' size='12'
2101END
2102;
2103 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) { print " readonly "; }
2104 print <<END
2105 /></td>
2106 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA group'}:</td>
2107 <td class='base'>
2108 <select name='NCSA_GROUP'>
2109 <option value='standard' $selected{'NCSA_GROUP'}{'standard'}>$Lang::tr{'advproxy NCSA grp standard'}</option>
2110 <option value='extended' $selected{'NCSA_GROUP'}{'extended'}>$Lang::tr{'advproxy NCSA grp extended'}</option>
2111 <option value='disabled' $selected{'NCSA_GROUP'}{'disabled'}>$Lang::tr{'advproxy NCSA grp disabled'}</option>
2112 </select>
2113 </td>
2114
2115</tr>
2116<tr>
2117 <td class='base'>$Lang::tr{'advproxy NCSA password'}:</td>
2118 <td><input type='password' name='NCSA_PASS' value='$proxysettings{'NCSA_PASS'}' size='14' /></td>
2119 <td class='base'>$Lang::tr{'advproxy NCSA password confirm'}:</td>
2120 <td><input type='password' name='NCSA_PASS_CONFIRM' value='$proxysettings{'NCSA_PASS_CONFIRM'}' size='14' /></td>
2121</tr>
2122</table>
2123<br>
2124<table>
2125<tr>
2126 <td>&nbsp;</td>
2127 <td><input type='submit' name='SUBMIT' value='$ncsa_buttontext' /></td>
2128 <td><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /></td>
2129 <td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2130END
2131;
2132 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) {
2133 print "<td><input type='reset' name='ACTION' value='$Lang::tr{'advproxy reset'}' /></td>\n";
2134 }
2135
2136print <<END
2137 <td>&nbsp;</td>
2138 <td>&nbsp;</td>
2139 <td><input type='button' name='return2main' value='$Lang::tr{'advproxy back to main page'}' onClick='self.location.href="$ENV{'SCRIPT_NAME'}"'></td>
2140</tr>
2141</table>
2142</form>
2143<hr size='1'>
2144<table width='100%'>
2145<tr>
363fb6af 2146 <td><b>$Lang::tr{'advproxy NCSA user accounts'}:</b></td>
ed38f89d
MT		 2147</tr>
2148</table>
2149<table width='100%' align='center'>
2150END
2151;
2152
2153if (-e $extgrp)
2154{
2155 open(FILE, $extgrp); @grouplist = <FILE>; close(FILE);
2156 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":extended"); }
2157}
2158if (-e $stdgrp)
2159{
2160 open(FILE, $stdgrp); @grouplist = <FILE>; close(FILE);
2161 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":standard"); }
2162}
2163if (-e $disgrp)
2164{
2165 open(FILE, $disgrp); @grouplist = <FILE>; close(FILE);
2166 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":disabled"); }
2167}
2168
2169@userlist = sort(@userlist);
2170
2171# If the password file contains entries, print entries and action icons
2172
22527178 2173if ( $userdb ne "" ) {
ed38f89d
MT		 2174 print <<END
2175 <tr>
2176 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA username'}</i></b></td>
2177 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA group membership'}</i></b></td>
2178 <td class='boldbase' colspan='2' align='center'>&nbsp;</td>
2179 </tr>
2180END
2181;
2182 $id = 0;
2183 foreach $line (@userlist)
2184 {
2185 $id++;
2186 chomp($line);
2187 @temp = split(/:/,$line);
2188 if($proxysettings{'ACTION'} eq $Lang::tr{'edit'} && $proxysettings{'ID'} eq $line) {
2189 print "<tr bgcolor='$Header::colouryellow'>\n"; }
2190 elsif ($id % 2) {
4e17adad 2191 print "<tr bgcolor='$color{'color20'}'>\n"; }
ed38f89d 2192 else {
4e17adad 2193 print "<tr bgcolor='$color{'color22'}'>\n"; }
ed38f89d
MT		 2194
2195 print <<END
2196 <td align='center'>$temp[0]</td>
2197 <td align='center'>
2198END
2199;
2200 if ($temp[1] eq 'standard') {
2201 print $Lang::tr{'advproxy NCSA grp standard'};
2202 } elsif ($temp[1] eq 'extended') {
2203 print $Lang::tr{'advproxy NCSA grp extended'};
2204 } elsif ($temp[1] eq 'disabled') {
2205 print $Lang::tr{'advproxy NCSA grp disabled'}; }
2206 print <<END
2207 </td>
2208 <td width='8%' align='center'>
2209 <form method='post' name='frma$id' action='$ENV{'SCRIPT_NAME'}'>
2210 <input type='image' name='$Lang::tr{'edit'}' src='/images/edit.gif' title='$Lang::tr{'edit'}' alt='$Lang::tr{'edit'}' />
2211 <input type='hidden' name='ID' value='$line' />
2212 <input type='hidden' name='ACTION' value='$Lang::tr{'edit'}' />
2213 </form>
2214 </td>
2215
2216 <td width='8%' align='center'>
2217 <form method='post' name='frmb$id' action='$ENV{'SCRIPT_NAME'}'>
2218 <input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' title='$Lang::tr{'remove'}' alt='$Lang::tr{'remove'}' />
2219 <input type='hidden' name='ID' value='$temp[0]' />
2220 <input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
2221 </form>
2222 </td>
2223 </tr>
2224END
2225;
2226 }
2227
2228print <<END
2229</table>
2230<br>
9fb25b1c 2231<table>
ed38f89d
MT		 2232<tr>
2233 <td class='boldbase'>&nbsp; <b>$Lang::tr{'legend'}:</b></td>
2234 <td>&nbsp; &nbsp; <img src='/images/edit.gif' alt='$Lang::tr{'edit'}' /></td>
2235 <td class='base'>$Lang::tr{'edit'}</td>
2236 <td>&nbsp; &nbsp; <img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
2237 <td class='base'>$Lang::tr{'remove'}</td>
2238</tr>
2239END
2240;
2241} else {
2242 print <<END
2243 <tr>
363fb6af 2244 <td><i>$Lang::tr{'advproxy NCSA no accounts'}</i></td>
ed38f89d
MT		 2245 </tr>
2246END
2247;
2248}
2249
2250print <<END
2251</table>
2252END
2253;
2254
2255&Header::closebox();
2256
2257}
2258
2259# ===================================================================
2260
2261&Header::closebigbox();
2262
2263&Header::closepage();
2264
2265# -------------------------------------------------------------------
2266
2267sub read_acls
2268{
2269 if (-e "$acl_src_subnets") {
2270 open(FILE,"$acl_src_subnets");
2271 delete $proxysettings{'SRC_SUBNETS'};
2272 while (<FILE>) { $proxysettings{'SRC_SUBNETS'} .= $_ };
2273 close(FILE);
2274 }
2275 if (-e "$acl_src_banned_ip") {
2276 open(FILE,"$acl_src_banned_ip");
2277 delete $proxysettings{'SRC_BANNED_IP'};
2278 while (<FILE>) { $proxysettings{'SRC_BANNED_IP'} .= $_ };
2279 close(FILE);
2280 }
2281 if (-e "$acl_src_banned_mac") {
2282 open(FILE,"$acl_src_banned_mac");
2283 delete $proxysettings{'SRC_BANNED_MAC'};
2284 while (<FILE>) { $proxysettings{'SRC_BANNED_MAC'} .= $_ };
2285 close(FILE);
2286 }
2287 if (-e "$acl_src_unrestricted_ip") {
2288 open(FILE,"$acl_src_unrestricted_ip");
2289 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
2290 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_ };
2291 close(FILE);
2292 }
2293 if (-e "$acl_src_unrestricted_mac") {
2294 open(FILE,"$acl_src_unrestricted_mac");
2295 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
2296 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_ };
2297 close(FILE);
2298 }
2299 if (-e "$acl_dst_nocache") {
2300 open(FILE,"$acl_dst_nocache");
2301 delete $proxysettings{'DST_NOCACHE'};
2302 while (<FILE>) { $proxysettings{'DST_NOCACHE'} .= $_ };
2303 close(FILE);
2304 }
2305 if (-e "$acl_dst_noauth") {
2306 open(FILE,"$acl_dst_noauth");
2307 delete $proxysettings{'DST_NOAUTH'};
2308 while (<FILE>) { $proxysettings{'DST_NOAUTH'} .= $_ };
2309 close(FILE);
2310 }
363fb6af
MT		 2311 if (-e "$acl_ports_safe") {
2312 open(FILE,"$acl_ports_safe");
2313 delete $proxysettings{'PORTS_SAFE'};
2314 while (<FILE>) { $proxysettings{'PORTS_SAFE'} .= $_ };
2315 close(FILE);
2316 }
2317 if (-e "$acl_ports_ssl") {
2318 open(FILE,"$acl_ports_ssl");
2319 delete $proxysettings{'PORTS_SSL'};
2320 while (<FILE>) { $proxysettings{'PORTS_SSL'} .= $_ };
2321 close(FILE);
2322 }
ed38f89d
MT		 2323 if (-e "$mimetypes") {
2324 open(FILE,"$mimetypes");
2325 delete $proxysettings{'MIME_TYPES'};
2326 while (<FILE>) { $proxysettings{'MIME_TYPES'} .= $_ };
2327 close(FILE);
2328 }
2329 if (-e "$ntlmdir/msntauth.allowusers") {
2330 open(FILE,"$ntlmdir/msntauth.allowusers");
2331 delete $proxysettings{'NTLM_ALLOW_USERS'};
2332 while (<FILE>) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_ };
2333 close(FILE);
2334 }
2335 if (-e "$ntlmdir/msntauth.denyusers") {
2336 open(FILE,"$ntlmdir/msntauth.denyusers");
2337 delete $proxysettings{'NTLM_DENY_USERS'};
2338 while (<FILE>) { $proxysettings{'NTLM_DENY_USERS'} .= $_ };
2339 close(FILE);
2340 }
2341 if (-e "$raddir/radauth.allowusers") {
2342 open(FILE,"$raddir/radauth.allowusers");
2343 delete $proxysettings{'RADIUS_ALLOW_USERS'};
2344 while (<FILE>) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_ };
2345 close(FILE);
2346 }
2347 if (-e "$raddir/radauth.denyusers") {
2348 open(FILE,"$raddir/radauth.denyusers");
2349 delete $proxysettings{'RADIUS_DENY_USERS'};
2350 while (<FILE>) { $proxysettings{'RADIUS_DENY_USERS'} .= $_ };
2351 close(FILE);
2352 }
2353 if (-e "$identdir/identauth.allowusers") {
2354 open(FILE,"$identdir/identauth.allowusers");
2355 delete $proxysettings{'IDENT_ALLOW_USERS'};
2356 while (<FILE>) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_ };
2357 close(FILE);
2358 }
2359 if (-e "$identdir/identauth.denyusers") {
2360 open(FILE,"$identdir/identauth.denyusers");
2361 delete $proxysettings{'IDENT_DENY_USERS'};
2362 while (<FILE>) { $proxysettings{'IDENT_DENY_USERS'} .= $_ };
2363 close(FILE);
2364 }
2365 if (-e "$identhosts") {
2366 open(FILE,"$identhosts");
2367 delete $proxysettings{'IDENT_HOSTS'};
2368 while (<FILE>) { $proxysettings{'IDENT_HOSTS'} .= $_ };
2369 close(FILE);
2370 }
2371 if (-e "$cre_groups") {
2372 open(FILE,"$cre_groups");
2373 delete $proxysettings{'CRE_GROUPS'};
2374 while (<FILE>) { $proxysettings{'CRE_GROUPS'} .= $_ };
2375 close(FILE);
2376 }
2377 if (-e "$cre_svhosts") {
2378 open(FILE,"$cre_svhosts");
2379 delete $proxysettings{'CRE_SVHOSTS'};
2380 while (<FILE>) { $proxysettings{'CRE_SVHOSTS'} .= $_ };
2381 close(FILE);
2382 }
2383}
2384
2385# -------------------------------------------------------------------
2386
2387sub check_acls
2388{
363fb6af
MT		 2389 @temp = split(/\n/,$proxysettings{'PORTS_SAFE'});
2390 undef $proxysettings{'PORTS_SAFE'};
2391 foreach (@temp)
2392 {
2393 s/^\s+//g; s/\s+$//g;
2394 if ($_)
2395 {
2396 $line = $_;
2397 if (/^[^#]+\s+#\sSquids\sport/) { s/(^[^#]+)(\s+#\sSquids\sport)/$proxysettings{'PROXY_PORT'}\2/; $line=$_; }
2398 s/#.*//g; s/\s+//g;
2399 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2400 @templist = split(/-/);
2401 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2402 $proxysettings{'PORTS_SAFE'} .= $line."\n";
2403 }
2404 }
2405
2406 @temp = split(/\n/,$proxysettings{'PORTS_SSL'});
2407 undef $proxysettings{'PORTS_SSL'};
2408 foreach (@temp)
2409 {
2410 s/^\s+//g; s/\s+$//g;
2411 if ($_)
2412 {
2413 $line = $_;
2414 s/#.*//g; s/\s+//g;
2415 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2416 @templist = split(/-/);
2417 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2418 $proxysettings{'PORTS_SSL'} .= $line."\n";
2419 }
2420 }
2421
2422 @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2423 undef $proxysettings{'DST_NOCACHE'};
2424 foreach (@temp)
2425 {
2426 s/^\s+//g; s/\s+$//g;
2427 if ($_)
2428 {
2429 unless (/^\./) { $_ = '.'.$_; }
2430 $proxysettings{'DST_NOCACHE'} .= $_."\n";
2431 }
2432 }
2433
ed38f89d
MT		 2434 @temp = split(/\n/,$proxysettings{'SRC_SUBNETS'});
2435 undef $proxysettings{'SRC_SUBNETS'};
2436 foreach (@temp)
2437 {
2438 s/^\s+//g; s/\s+$//g;
2439 if ($_)
2440 {
2441 unless (&General::validipandmask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2442 $proxysettings{'SRC_SUBNETS'} .= $_."\n";
2443 }
2444 }
2445
2446 @temp = split(/\n/,$proxysettings{'SRC_BANNED_IP'});
2447 undef $proxysettings{'SRC_BANNED_IP'};
2448 foreach (@temp)
2449 {
2450 s/^\s+//g; s/\s+$//g;
2451 if ($_)
2452 {
2453 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2454 $proxysettings{'SRC_BANNED_IP'} .= $_."\n";
2455 }
2456 }
2457
2458 @temp = split(/\n/,$proxysettings{'SRC_BANNED_MAC'});
2459 undef $proxysettings{'SRC_BANNED_MAC'};
2460 foreach (@temp)
2461 {
2462 s/^\s+//g; s/\s+$//g; s/-/:/g;
2463 if ($_)
2464 {
2465 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2466 $proxysettings{'SRC_BANNED_MAC'} .= $_."\n";
2467 }
2468 }
2469
2470 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_IP'});
2471 undef $proxysettings{'SRC_UNRESTRICTED_IP'};
2472 foreach (@temp)
2473 {
2474 s/^\s+//g; s/\s+$//g;
2475 if ($_)
2476 {
2477 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2478 $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_."\n";
2479 }
2480 }
2481
2482 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_MAC'});
2483 undef $proxysettings{'SRC_UNRESTRICTED_MAC'};
2484 foreach (@temp)
2485 {
2486 s/^\s+//g; s/\s+$//g; s/-/:/g;
2487 if ($_)
2488 {
2489 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2490 $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_."\n";
2491 }
2492 }
2493
363fb6af
MT		 2494 @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
2495 undef $proxysettings{'DST_NOAUTH'};
2496 foreach (@temp)
2497 {
2498 s/^\s+//g; s/\s+$//g;
2499 if ($_)
2500 {
2501 unless (/^\./) { $_ = '.'.$_; }
2502 $proxysettings{'DST_NOAUTH'} .= $_."\n";
2503 }
2504 }
2505
ed38f89d
MT		 2506 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
2507 {
2508 @temp = split(/\n/,$proxysettings{'NTLM_ALLOW_USERS'});
2509 undef $proxysettings{'NTLM_ALLOW_USERS'};
2510 foreach (@temp)
2511 {
2512 s/^\s+//g; s/\s+$//g;
2513 if ($_) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_."\n"; }
2514 }
2515 if ($proxysettings{'NTLM_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2516 }
2517
2518 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
2519 {
2520 @temp = split(/\n/,$proxysettings{'NTLM_DENY_USERS'});
2521 undef $proxysettings{'NTLM_DENY_USERS'};
2522 foreach (@temp)
2523 {
2524 s/^\s+//g; s/\s+$//g;
2525 if ($_) { $proxysettings{'NTLM_DENY_USERS'} .= $_."\n"; }
2526 }
2527 if ($proxysettings{'NTLM_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2528 }
2529
2530 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
2531 {
2532 @temp = split(/\n/,$proxysettings{'IDENT_ALLOW_USERS'});
2533 undef $proxysettings{'IDENT_ALLOW_USERS'};
2534 foreach (@temp)
2535 {
2536 s/^\s+//g; s/\s+$//g;
2537 if ($_) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_."\n"; }
2538 }
2539 if ($proxysettings{'IDENT_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2540 }
2541
2542 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
2543 {
2544 @temp = split(/\n/,$proxysettings{'IDENT_DENY_USERS'});
2545 undef $proxysettings{'IDENT_DENY_USERS'};
2546 foreach (@temp)
2547 {
2548 s/^\s+//g; s/\s+$//g;
2549 if ($_) { $proxysettings{'IDENT_DENY_USERS'} .= $_."\n"; }
2550 }
2551 if ($proxysettings{'IDENT_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2552 }
2553
2554 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
2555 {
2556 @temp = split(/\n/,$proxysettings{'RADIUS_ALLOW_USERS'});
2557 undef $proxysettings{'RADIUS_ALLOW_USERS'};
2558 foreach (@temp)
2559 {
2560 s/^\s+//g; s/\s+$//g;
2561 if ($_) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_."\n"; }
2562 }
2563 if ($proxysettings{'RADIUS_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2564 }
2565
2566 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
2567 {
2568 @temp = split(/\n/,$proxysettings{'RADIUS_DENY_USERS'});
2569 undef $proxysettings{'RADIUS_DENY_USERS'};
2570 foreach (@temp)
2571 {
2572 s/^\s+//g; s/\s+$//g;
2573 if ($_) { $proxysettings{'RADIUS_DENY_USERS'} .= $_."\n"; }
2574 }
2575 if ($proxysettings{'RADIUS_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2576 }
2577
2578 @temp = split(/\n/,$proxysettings{'IDENT_HOSTS'});
2579 undef $proxysettings{'IDENT_HOSTS'};
2580 foreach (@temp)
2581 {
2582 s/^\s+//g; s/\s+$//g;
2583 if ($_)
2584 {
2585 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2586 $proxysettings{'IDENT_HOSTS'} .= $_."\n";
2587 }
2588 }
2589
2590 @temp = split(/\n/,$proxysettings{'CRE_SVHOSTS'});
2591 undef $proxysettings{'CRE_SVHOSTS'};
2592 foreach (@temp)
2593 {
2594 s/^\s+//g; s/\s+$//g;
2595 if ($_)
2596 {
2597 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2598 $proxysettings{'CRE_SVHOSTS'} .= $_."\n";
2599 }
2600 }
2601}
2602
ed38f89d
MT		 2603# -------------------------------------------------------------------
2604
2605sub write_acls
2606{
2607 open(FILE, ">$acl_src_subnets");
2608 flock(FILE, 2);
363fb6af
MT		 2609 if (!$proxysettings{'SRC_SUBNETS'})
2610 {
2611 print FILE "$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}\n";
2612 if ($netsettings{'BLUE_DEV'})
2613 {
2614 print FILE "$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}\n";
2615 }
2616 } else { print FILE $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 2617 close(FILE);
2618
2619 open(FILE, ">$acl_src_banned_ip");
2620 flock(FILE, 2);
2621 print FILE $proxysettings{'SRC_BANNED_IP'};
2622 close(FILE);
2623
2624 open(FILE, ">$acl_src_banned_mac");
2625 flock(FILE, 2);
2626 print FILE $proxysettings{'SRC_BANNED_MAC'};
2627 close(FILE);
2628
2629 open(FILE, ">$acl_src_unrestricted_ip");
2630 flock(FILE, 2);
2631 print FILE $proxysettings{'SRC_UNRESTRICTED_IP'};
2632 close(FILE);
2633
2634 open(FILE, ">$acl_src_unrestricted_mac");
2635 flock(FILE, 2);
2636 print FILE $proxysettings{'SRC_UNRESTRICTED_MAC'};
2637 close(FILE);
2638
2639 open(FILE, ">$acl_dst_nocache");
2640 flock(FILE, 2);
2641 print FILE $proxysettings{'DST_NOCACHE'};
2642 close(FILE);
2643
2644 open(FILE, ">$acl_dst_noauth");
2645 flock(FILE, 2);
2646 print FILE $proxysettings{'DST_NOAUTH'};
2647 close(FILE);
2648
363fb6af
MT		 2649 open(FILE, ">$acl_ports_safe");
2650 flock(FILE, 2);
2651 if (!$proxysettings{'PORTS_SAFE'}) { print FILE $def_ports_safe; } else { print FILE $proxysettings{'PORTS_SAFE'}; }
2652 close(FILE);
2653
2654 open(FILE, ">$acl_ports_ssl");
2655 flock(FILE, 2);
2656 if (!$proxysettings{'PORTS_SSL'}) { print FILE $def_ports_ssl; } else { print FILE $proxysettings{'PORTS_SSL'}; }
2657 close(FILE);
2658
ed38f89d
MT		 2659 open(FILE, ">$acl_dst_throttle");
2660 flock(FILE, 2);
2661 if ($proxysettings{'THROTTLE_BINARY'} eq 'on')
2662 {
2663 @temp = split(/\|/,$throttle_binary);
363fb6af 2664 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2665 }
2666 if ($proxysettings{'THROTTLE_DSKIMG'} eq 'on')
2667 {
2668 @temp = split(/\|/,$throttle_dskimg);
363fb6af 2669 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2670 }
2671 if ($proxysettings{'THROTTLE_MMEDIA'} eq 'on')
2672 {
2673 @temp = split(/\|/,$throttle_mmedia);
363fb6af 2674 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2675 }
2676 if (-s $throttled_urls)
2677 {
2678 open(URLFILE, $throttled_urls);
2679 @temp = <URLFILE>;
2680 close(URLFILE);
363fb6af 2681 foreach (@temp) { print FILE; }
ed38f89d
MT		 2682 }
2683 close(FILE);
2684
2685 open(FILE, ">$mimetypes");
2686 flock(FILE, 2);
2687 print FILE $proxysettings{'MIME_TYPES'};
2688 close(FILE);
2689
2690 open(FILE, ">$ntlmdir/msntauth.allowusers");
2691 flock(FILE, 2);
2692 print FILE $proxysettings{'NTLM_ALLOW_USERS'};
2693 close(FILE);
2694
2695 open(FILE, ">$ntlmdir/msntauth.denyusers");
2696 flock(FILE, 2);
2697 print FILE $proxysettings{'NTLM_DENY_USERS'};
2698 close(FILE);
2699
2700 open(FILE, ">$raddir/radauth.allowusers");
2701 flock(FILE, 2);
2702 print FILE $proxysettings{'RADIUS_ALLOW_USERS'};
2703 close(FILE);
2704
2705 open(FILE, ">$raddir/radauth.denyusers");
2706 flock(FILE, 2);
2707 print FILE $proxysettings{'RADIUS_DENY_USERS'};
2708 close(FILE);
2709
2710 open(FILE, ">$identdir/identauth.allowusers");
2711 flock(FILE, 2);
2712 print FILE $proxysettings{'IDENT_ALLOW_USERS'};
2713 close(FILE);
2714
2715 open(FILE, ">$identdir/identauth.denyusers");
2716 flock(FILE, 2);
2717 print FILE $proxysettings{'IDENT_DENY_USERS'};
2718 close(FILE);
2719
2720 open(FILE, ">$identhosts");
2721 flock(FILE, 2);
2722 print FILE $proxysettings{'IDENT_HOSTS'};
2723 close(FILE);
2724
2725 open(FILE, ">$cre_groups");
2726 flock(FILE, 2);
2727 print FILE $proxysettings{'CRE_GROUPS'};
2728 close(FILE);
2729
2730 open(FILE, ">$cre_svhosts");
2731 flock(FILE, 2);
2732 print FILE $proxysettings{'CRE_SVHOSTS'};
2733 close(FILE);
2734}
2735
2736# -------------------------------------------------------------------
2737
2738sub writepacfile
2739{
22527178 2740 open(FILE, ">/srv/web/ipfire/html/proxy.pac");
ed38f89d
MT		 2741 flock(FILE, 2);
2742 print FILE "function FindProxyForURL(url, host)\n";
2743 print FILE "{\n";
2744 if (($proxysettings{'ENABLE'} eq 'on') || ($proxysettings{'ENABLE_BLUE'} eq 'on'))
2745 {
2746 print FILE <<END
2747if (
2748 (isPlainHostName(host)) ||
2749 (dnsDomainIs(host, ".$mainsettings{'DOMAINNAME'}")) ||
2750 (isInNet(host, "10.0.0.0", "255.0.0.0")) ||
2751 (isInNet(host, "172.16.0.0", "255.240.0.0")) ||
2752 (isInNet(host, "169.254.0.0", "255.255.0.0")) ||
2753 (isInNet(host, "192.168.0.0", "255.255.0.0"))
2754 )
2755 return "DIRECT";
2756
2757 else
2758
2759END
2760;
2761 if ($proxysettings{'ENABLE'} eq 'on')
2762 {
268292e7
CS		 2763 print FILE "if (\n";
2764 print FILE " (isInNet(myIpAddress(), \"$netsettings{'GREEN_NETADDRESS'}\", \"$netsettings{'GREEN_NETMASK'}\"))";
2765
2766 undef @templist;
2767 if (-e "$acl_src_subnets") {
2768 open(SUBNETS,"$acl_src_subnets");
2769 @templist = <SUBNETS>;
2770 close(SUBNETS);
2771 }
2772
2773 foreach (@templist)
2774 {
2775 @temp = split(/\//);
2776 if (
2777 ($temp[0] ne $netsettings{'GREEN_NETADDRESS'}) && ($temp[1] ne $netsettings{'GREEN_NETMASK'}) &&
2778 ($temp[0] ne $netsettings{'BLUE_NETADDRESS'}) && ($temp[1] ne $netsettings{'BLUE_NETMASK'})
2779 )
2780 {
2781 chomp $temp[1];
2782 print FILE " ||\n (isInNet(myIpAddress(), \"$temp[0]\", \"$temp[1]\"))";
2783 }
2784 }
2785
2786 print FILE "\n";
2787
ed38f89d 2788 print FILE <<END
268292e7
CS		 2789
2790
ed38f89d
MT		 2791 )
2792 return "PROXY $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2793END
2794;
2795 }
2796 if (($proxysettings{'ENABLE'} eq 'on') && ($proxysettings{'ENABLE_BLUE'} eq 'on') && ($netsettings{'BLUE_DEV'}))
2797 {
2798 print FILE "\n else\n\n";
2799 }
2800 if (($netsettings{'BLUE_DEV'}) && ($proxysettings{'ENABLE_BLUE'} eq 'on'))
2801 {
2802 print FILE <<END
2803if (
2804 (isInNet(myIpAddress(), "$netsettings{'BLUE_NETADDRESS'}", "$netsettings{'BLUE_NETMASK'}"))
2805 )
2806 return "PROXY $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2807END
2808;
2809 }
2810 }
2811 print FILE "}\n";
2812 close(FILE);
2813}
2814
2815# -------------------------------------------------------------------
2816
2817sub writeconfig
2818{
2819 my $authrealm;
2820 my $delaypools;
2821
363fb6af 2822 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} +
ed38f89d
MT		 2823 $proxysettings{'THROTTLING_GREEN_HOST'} +
2824 $proxysettings{'THROTTLING_BLUE_TOTAL'} +
2825 $proxysettings{'THROTTLING_BLUE_HOST'} gt 0)
2826 {
2827 $delaypools = 1; } else { $delaypools = 0;
2828 }
2829
2830 if ($proxysettings{'AUTH_REALM'} eq '')
2831 {
d12aede7 2832 $authrealm = "IPFire Advanced Proxy Server";
ed38f89d
MT		 2833 } else {
2834 $authrealm = $proxysettings{'AUTH_REALM'};
2835 }
2836
2837 $_ = $proxysettings{'UPSTREAM_PROXY'};
2838 my ($remotehost, $remoteport) = (/^(?:[a-zA-Z ]+\:\/\/)?(?:[A-Za-z0-9\_\.\-]*?(?:\:[A-Za-z0-9\_\.\-]*?)?\@)?([a-zA-Z0-9\.\_\-]*?)(?:\:([0-9]{1,5}))?(?:\/.*?)?$/);
2839
2840 if ($remoteport eq '') { $remoteport = 80; }
2841
2842 open(FILE, ">${General::swroot}/proxy/squid.conf");
2843 flock(FILE, 2);
2844 print FILE <<END
363fb6af
MT		 2845# Do not modify '${General::swroot}/proxy/squid.conf' directly since any changes
2846# you make will be overwritten whenever you resave proxy settings using the
2847# web interface!
2848#
2849# Instead, modify the file '$acl_include' and
2850# then restart the proxy service using the web interface. Changes made to the
2851# 'include.acl' file will propagate to the 'squid.conf' file at that time.
2852
ed38f89d
MT		 2853shutdown_lifetime 5 seconds
2854icp_port 0
2855
ed38f89d
MT		 2856END
2857 ;
363fb6af
MT		 2858 print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2859 if ($proxysettings{'TRANSPARENT'} eq 'on') { print FILE " transparent" }
2860 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
2861 print FILE "\n";
2862
ed38f89d 2863 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
363fb6af
MT		 2864 print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2865 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') { print FILE " transparent" }
2866 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
2867 print FILE "\n";
ed38f89d
MT		 2868 }
2869
2870 print FILE <<END
2871
2872acl QUERY urlpath_regex cgi-bin \\?
363fb6af 2873cache deny QUERY
ed38f89d
MT		 2874END
2875 ;
2876 if (!-z $acl_dst_nocache) {
2877 print FILE "acl no_cache_domains dstdomain \"$acl_dst_nocache\"\n";
363fb6af 2878 print FILE "cache deny no_cache_domains\n";
ed38f89d
MT		 2879 }
2880
2881 print FILE <<END
2882
2883cache_effective_user squid
2884cache_effective_group squid
363fb6af 2885umask 022
ed38f89d
MT		 2886
2887pid_filename /var/run/squid.pid
2888
2889cache_mem $proxysettings{'CACHE_MEM'} MB
2890cache_dir aufs /var/log/cache $proxysettings{'CACHE_SIZE'} $proxysettings{'L1_DIRS'} 256
2891
ed38f89d
MT		 2892END
2893 ;
2894
0d948999 2895 if (($proxysettings{'ERR_DESIGN'} eq 'ipfire' ))
363fb6af 2896 {
0d948999 2897 print FILE "error_directory $errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}\n\n";
363fb6af
MT		 2898 } else {
2899 print FILE "error_directory $errordir/$proxysettings{'ERR_LANGUAGE'}\n\n";
2900 }
2901
ed38f89d
MT		 2902 if ($proxysettings{'OFFLINE_MODE'} eq 'on') { print FILE "offline_mode on\n\n"; }
2903
2904 if ((!($proxysettings{'MEM_POLICY'} eq 'LRU')) || (!($proxysettings{'CACHE_POLICY'} eq 'LRU')))
2905 {
2906 if (!($proxysettings{'MEM_POLICY'} eq 'LRU'))
2907 {
2908 print FILE "memory_replacement_policy $proxysettings{'MEM_POLICY'}\n";
2909 }
2910 if (!($proxysettings{'CACHE_POLICY'} eq 'LRU'))
2911 {
2912 print FILE "cache_replacement_policy $proxysettings{'CACHE_POLICY'}\n";
2913 }
2914 print FILE "\n";
2915 }
2916
2917 if ($proxysettings{'LOGGING'} eq 'on')
2918 {
363fb6af
MT		 2919 print FILE <<END
2920access_log /var/log/squid/access.log
ed38f89d
MT		 2921cache_log /var/log/squid/cache.log
2922cache_store_log none
2923END
2924 ;
2925 if ($proxysettings{'LOGUSERAGENT'} eq 'on') { print FILE "useragent_log \/var\/log\/squid\/user_agent.log\n"; }
2926 if ($proxysettings{'LOGQUERY'} eq 'on') { print FILE "\nstrip_query_terms off\n"; }
2927 } else {
2928 print FILE <<END
363fb6af 2929access_log /dev/null
ed38f89d
MT		 2930cache_log /dev/null
2931cache_store_log none
2932END
2933 ;}
2934 print FILE <<END
2935
2936log_mime_hdrs off
2937END
2938 ;
2939
2940 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'on')
2941 {
363fb6af 2942 print FILE "forwarded_for on\n";
ed38f89d 2943 } else {
363fb6af 2944 print FILE "forwarded_for off\n";
ed38f89d 2945 }
363fb6af
MT		 2946 if ($proxysettings{'FORWARD_VIA'} eq 'on')
2947 {
2948 print FILE "via on\n";
2949 } else {
2950 print FILE "via off\n";
2951 }
2952 print FILE "\n";
ed38f89d
MT		 2953
2954 if ((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
2955 {
2956 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
2957 {
363fb6af 2958 print FILE "auth_param basic program $authdir/ncsa_auth $userdb\n";
ed38f89d
MT		 2959 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
2960 print FILE "auth_param basic realm $authrealm\n";
2961 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
2962 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
2963 }
2964
2965 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
2966 {
363fb6af 2967 print FILE "auth_param basic program $authdir/squid_ldap_auth -b \"$proxysettings{'LDAP_BASEDN'}\"";
ed38f89d
MT		 2968 if (!($proxysettings{'LDAP_BINDDN_USER'} eq '')) { print FILE " -D \"$proxysettings{'LDAP_BINDDN_USER'}\""; }
2969 if (!($proxysettings{'LDAP_BINDDN_PASS'} eq '')) { print FILE " -w $proxysettings{'LDAP_BINDDN_PASS'}"; }
2970 if ($proxysettings{'LDAP_TYPE'} eq 'ADS')
2971 {
2972 if ($proxysettings{'LDAP_GROUP'} eq '')
2973 {
2974 print FILE " -f \"(\&(objectClass=person)(sAMAccountName=\%s))\"";
2975 } else {
2976 print FILE " -f \"(\&(\&(objectClass=person)(sAMAccountName=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
2977 }
2978 print FILE " -u sAMAccountName -P";
2979 }
2980 if ($proxysettings{'LDAP_TYPE'} eq 'NDS')
2981 {
2982 if ($proxysettings{'LDAP_GROUP'} eq '')
2983 {
2984 print FILE " -f \"(\&(objectClass=person)(cn=\%s))\"";
2985 } else {
2986 print FILE " -f \"(\&(\&(objectClass=person)(cn=\%s))(groupMembership=$proxysettings{'LDAP_GROUP'}))\"";
2987 }
2988 print FILE " -u cn -P";
2989 }
2990 if (($proxysettings{'LDAP_TYPE'} eq 'V2') || ($proxysettings{'LDAP_TYPE'} eq 'V3'))
2991 {
2992 if ($proxysettings{'LDAP_GROUP'} eq '')
2993 {
2994 print FILE " -f \"(\&(objectClass=person)(uid=\%s))\"";
2995 } else {
2996 print FILE " -f \"(\&(\&(objectClass=person)(uid=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
2997 }
2998 if ($proxysettings{'LDAP_TYPE'} eq 'V2') { print FILE " -v 2"; }
2999 if ($proxysettings{'LDAP_TYPE'} eq 'V3') { print FILE " -v 3"; }
3000 print FILE " -u uid -P";
3001 }
3002 print FILE " $proxysettings{'LDAP_SERVER'}:$proxysettings{'LDAP_PORT'}\n";
3003 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3004 print FILE "auth_param basic realm $authrealm\n";
3005 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3006 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3007 }
3008
3009 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
3010 {
3011 if ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on')
3012 {
363fb6af 3013 print FILE "auth_param ntlm program $authdir/ntlm_auth $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_PDC'}";
ed38f89d
MT		 3014 if ($proxysettings{'NTLM_BDC'} eq '') { print FILE "\n"; } else { print FILE " $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_BDC'}\n"; }
3015 print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n";
ed38f89d
MT		 3016 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3017 } else {
363fb6af 3018 print FILE "auth_param basic program $authdir/msnt_auth\n";
ed38f89d
MT		 3019 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3020 print FILE "auth_param basic realm $authrealm\n";
3021 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3022 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3023
3024 open(MSNTCONF, ">$ntlmdir/msntauth.conf");
3025 flock(MSNTCONF,2);
3026 print MSNTCONF "server $proxysettings{'NTLM_PDC'}";
3027 if ($proxysettings{'NTLM_BDC'} eq '') { print MSNTCONF " $proxysettings{'NTLM_PDC'}"; } else { print MSNTCONF " $proxysettings{'NTLM_BDC'}"; }
3028 print MSNTCONF " $proxysettings{'NTLM_DOMAIN'}\n";
3029 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3030 {
3031 if ($proxysettings{'NTLM_USER_ACL'} eq 'positive')
3032 {
3033 print MSNTCONF "allowusers $ntlmdir/msntauth.allowusers\n";
3034 } else {
3035 print MSNTCONF "denyusers $ntlmdir/msntauth.denyusers\n";
3036 }
3037 }
3038 close(MSNTCONF);
3039 }
3040 }
3041
3042 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
3043 {
363fb6af 3044 print FILE "auth_param basic program $authdir/squid_radius_auth -h $proxysettings{'RADIUS_SERVER'} -p $proxysettings{'RADIUS_PORT'} ";
ed38f89d
MT		 3045 if (!($proxysettings{'RADIUS_IDENTIFIER'} eq '')) { print FILE "-i $proxysettings{'RADIUS_IDENTIFIER'} "; }
3046 print FILE "-w $proxysettings{'RADIUS_SECRET'}\n";
3047 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3048 print FILE "auth_param basic realm $authrealm\n";
3049 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3050 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3051 }
3052
3053 print FILE "\n";
3054 print FILE "acl for_inetusers proxy_auth REQUIRED\n";
3055 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') && ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on'))
3056 {
3057 if ((!-z "$ntlmdir/msntauth.allowusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
3058 {
3059 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.allowusers\"\n";
3060 }
3061 if ((!-z "$ntlmdir/msntauth.denyusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
3062 {
3063 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.denyusers\"\n";
3064 }
3065 }
3066 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
3067 {
3068 if ((!-z "$raddir/radauth.allowusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
3069 {
3070 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.allowusers\"\n";
3071 }
3072 if ((!-z "$raddir/radauth.denyusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
3073 {
3074 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.denyusers\"\n";
3075 }
3076 }
3077 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3078 {
3079 print FILE "\n";
3080 if (!-z $extgrp) { print FILE "acl for_extended_users proxy_auth \"$extgrp\"\n"; }
3081 if (!-z $disgrp) { print FILE "acl for_disabled_users proxy_auth \"$disgrp\"\n"; }
3082 }
3083 if (!($proxysettings{'AUTH_MAX_USERIP'} eq '')) { print FILE "\nacl concurrent max_user_ip -s $proxysettings{'AUTH_MAX_USERIP'}\n"; }
3084 print FILE "\n";
3085
363fb6af
MT		 3086 if (!-z $acl_dst_noauth) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth\"\n"; }
3087 print FILE "\n";
ed38f89d
MT		 3088 }
3089
3090 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3091 {
3092 if ($proxysettings{'IDENT_REQUIRED'} eq 'on')
3093 {
3094 print FILE "acl for_inetusers ident REQUIRED\n";
3095 }
3096 if ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on')
3097 {
3098 if ((!-z "$identdir/identauth.allowusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
3099 {
3100 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.allowusers\"\n\n";
3101 }
3102 if ((!-z "$identdir/identauth.denyusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
3103 {
3104 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.denyusers\"\n\n";
3105 }
3106 }
363fb6af
MT		 3107 if (!-z $acl_dst_noauth) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth\"\n"; }
3108 print FILE "\n";
ed38f89d
MT		 3109 }
3110
3111 if (($delaypools) && (!-z $acl_dst_throttle)) { print FILE "acl for_throttled_urls url_regex -i \"$acl_dst_throttle\"\n\n"; }
3112
3113 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE "acl with_allowed_useragents browser $browser_regexp\n\n"; }
3114
3115 print FILE "acl within_timeframe time ";
3116 if ($proxysettings{'TIME_MON'} eq 'on') { print FILE "M"; }
3117 if ($proxysettings{'TIME_TUE'} eq 'on') { print FILE "T"; }
3118 if ($proxysettings{'TIME_WED'} eq 'on') { print FILE "W"; }
3119 if ($proxysettings{'TIME_THU'} eq 'on') { print FILE "H"; }
3120 if ($proxysettings{'TIME_FRI'} eq 'on') { print FILE "F"; }
3121 if ($proxysettings{'TIME_SAT'} eq 'on') { print FILE "A"; }
3122 if ($proxysettings{'TIME_SUN'} eq 'on') { print FILE "S"; }
363fb6af
MT		 3123 print FILE " $proxysettings{'TIME_FROM_HOUR'}:";
3124 print FILE "$proxysettings{'TIME_FROM_MINUTE'}-";
3125 print FILE "$proxysettings{'TIME_TO_HOUR'}:";
3126 print FILE "$proxysettings{'TIME_TO_MINUTE'}\n\n";
ed38f89d
MT		 3127
3128 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
3129 print FILE "acl blocked_mimetypes rep_mime_type \"$mimetypes\"\n\n";
3130 }
3131
3132 print FILE <<END
3133acl all src 0.0.0.0/0.0.0.0
3134acl localhost src 127.0.0.1/255.255.255.255
363fb6af
MT		 3135END
3136;
3137open (PORTS,"$acl_ports_ssl");
3138@temp = <PORTS>;
3139close PORTS;
3140if (@temp)
3141{
3142 foreach (@temp) { print FILE "acl SSL_ports port $_"; }
3143}
3144open (PORTS,"$acl_ports_safe");
3145@temp = <PORTS>;
3146close PORTS;
3147if (@temp)
3148{
3149 foreach (@temp) { print FILE "acl Safe_ports port $_"; }
3150}
3151 print FILE <<END
3152
3153acl IPCop_http port $http_port
3154acl IPCop_https port $https_port
ed38f89d
MT		 3155acl IPCop_ips dst $netsettings{'GREEN_ADDRESS'}
3156acl IPCop_networks src "$acl_src_subnets"
9fb25b1c 3157acl IPCop_servers dst "$acl_src_subnets"
ed38f89d 3158acl IPCop_green_network src $netsettings{'GREEN_NETADDRESS'}/$netsettings{'GREEN_NETMASK'}
9fb25b1c 3159acl IPCop_green_servers dst $netsettings{'GREEN_NETADDRESS'}/$netsettings{'GREEN_NETMASK'}
ed38f89d
MT		 3160END
3161 ;
363fb6af 3162 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPCop_blue_network src $netsettings{'BLUE_NETADDRESS'}/$netsettings{'BLUE_NETMASK'}\n"; }
9fb25b1c 3163 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPCop_blue_servers dst $netsettings{'BLUE_NETADDRESS'}/$netsettings{'BLUE_NETMASK'}\n"; }
ed38f89d
MT		 3164 if (!-z $acl_src_banned_ip) { print FILE "acl IPCop_banned_ips src \"$acl_src_banned_ip\"\n"; }
3165 if (!-z $acl_src_banned_mac) { print FILE "acl IPCop_banned_mac arp \"$acl_src_banned_mac\"\n"; }
3166 if (!-z $acl_src_unrestricted_ip) { print FILE "acl IPCop_unrestricted_ips src \"$acl_src_unrestricted_ip\"\n"; }
3167 if (!-z $acl_src_unrestricted_mac) { print FILE "acl IPCop_unrestricted_mac arp \"$acl_src_unrestricted_mac\"\n"; }
3168 print FILE <<END
3169acl CONNECT method CONNECT
3170END
3171 ;
3172
3173 if ($proxysettings{'CLASSROOM_EXT'} eq 'on') {
3174 print FILE <<END
3175
3176#Classroom extensions
3177acl IPCop_no_access_ips src "$acl_src_noaccess_ip"
3178acl IPCop_no_access_mac arp "$acl_src_noaccess_mac"
3179END
3180 ;
3181 print FILE "deny_info ";
0d948999 3182 if ((($proxysettings{'ERR_DESIGN'} eq 'ipfire') && (-e "$errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")) ||
363fb6af
MT		 3183 (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")))
3184 {
3185 print FILE "ERR_ACCESS_DISABLED";
3186 } else {
3187 print FILE "ERR_ACCESS_DENIED";
3188 }
ed38f89d
MT		 3189 print FILE " IPCop_no_access_ips\n";
3190 print FILE "deny_info ";
0d948999 3191 if ((($proxysettings{'ERR_DESIGN'} eq 'ipfire') && (-e "$errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")) ||
363fb6af
MT		 3192 (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")))
3193 {
3194 print FILE "ERR_ACCESS_DISABLED";
3195 } else {
3196 print FILE "ERR_ACCESS_DENIED";
3197 }
ed38f89d
MT		 3198 print FILE " IPCop_no_access_mac\n";
3199
3200 print FILE <<END
3201http_access deny IPCop_no_access_ips
3202http_access deny IPCop_no_access_mac
3203END
3204 ;
3205 }
3206
363fb6af
MT		 3207 #Insert acl file and replace __VAR__ with correct values
3208 my $blue_net = ''; #BLUE empty by default
3209 my $blue_ip = '';
3210 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
3211 $blue_net = "$netsettings{'BLUE_NETADDRESS'}/$netsettings{'BLUE_NETMASK'}";
3212 $blue_ip = "$netsettings{'BLUE_ADDRESS'}";
3213 }
3214 if (!-z $acl_include)
ed38f89d
MT		 3215 {
3216 open (ACL, "$acl_include");
3217 print FILE "\n#Start of custom includes\n";
3218 while (<ACL>) {
3219 $_ =~ s/__GREEN_IP__/$netsettings{'GREEN_ADDRESS'}/;
3220 $_ =~ s/__GREEN_NET__/$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}/;
3221 $_ =~ s/__BLUE_IP__/$blue_ip/;
3222 $_ =~ s/__BLUE_NET__/$blue_net/;
363fb6af 3223 $_ =~ s/__PROXY_PORT__/$proxysettings{'PROXY_PORT'}/;
ed38f89d
MT		 3224 print FILE $_;
3225 }
3226 print FILE "#End of custom includes\n";
3227 close (ACL);
3228 }
3229 if ((!-z $extgrp) && ($proxysettings{'AUTH_METHOD'} eq 'ncsa') && ($proxysettings{'NCSA_BYPASS_REDIR'} eq 'on')) { print FILE "\nredirector_access deny for_extended_users\n"; }
3230 print FILE <<END
3231
3232#Access to squid:
3233#local machine, no restriction
3234http_access allow localhost
3235
3236#GUI admin if local machine connects
3237http_access allow IPCop_ips IPCop_networks IPCop_http
3238http_access allow CONNECT IPCop_ips IPCop_networks IPCop_https
3239
3240#Deny not web services
3241http_access deny !Safe_ports
3242http_access deny CONNECT !SSL_ports
3243
3244END
3245 ;
3246
3247if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3248{
3249print FILE "#Set ident ACLs\n";
3250if (!-z $identhosts)
3251 {
3252 print FILE "acl on_ident_aware_hosts src \"$identhosts\"\n";
3253 print FILE "ident_lookup_access allow on_ident_aware_hosts\n";
3254 print FILE "ident_lookup_access deny all\n";
3255 } else {
3256 print FILE "ident_lookup_access allow all\n";
3257 }
3258 print FILE "ident_timeout $proxysettings{'IDENT_TIMEOUT'} seconds\n\n";
3259}
3260
3261if ($delaypools) {
3262 print FILE "#Set download throttling\n";
3263
3264 if ($netsettings{'BLUE_DEV'})
3265 {
3266 print FILE "delay_pools 2\n";
3267 } else {
3268 print FILE "delay_pools 1\n";
3269 }
3270
3271 print FILE "delay_class 1 3\n";
3272 if ($netsettings{'BLUE_DEV'}) { print FILE "delay_class 2 3\n"; }
3273
3274 print FILE "delay_parameters 1 ";
3275 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 'unlimited')
3276 {
3277 print FILE "-1/-1";
3278 } else {
3279 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 125;
3280 print FILE "/";
3281 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 250;
3282 }
3283
3284 print FILE " -1/-1 ";
3285 if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 'unlimited')
3286 {
3287 print FILE "-1/-1";
3288 } else {
3289 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 125;
3290 print FILE "/";
3291 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 250;
3292 }
3293 print FILE "\n";
3294
3295 if ($netsettings{'BLUE_DEV'})
3296 {
3297 print FILE "delay_parameters 2 ";
3298 if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 'unlimited')
3299 {
3300 print FILE "-1/-1";
3301 } else {
3302 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 125;
3303 print FILE "/";
3304 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 250;
3305 }
3306 print FILE " -1/-1 ";
3307 if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 'unlimited')
3308 {
3309 print FILE "-1/-1";
3310 } else {
3311 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 125;
3312 print FILE "/";
3313 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 250;
3314 }
3315 print FILE "\n";
3316 }
3317
363fb6af 3318 print FILE "delay_access 1 deny IPCop_ips\n";
ed38f89d
MT		 3319 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 1 deny IPCop_unrestricted_ips\n"; }
3320 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 1 deny IPCop_unrestricted_mac\n"; }
3321 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 1 deny for_extended_users\n"; }
3322
3323 if ($netsettings{'BLUE_DEV'})
3324 {
3325 print FILE "delay_access 1 allow IPCop_green_network";
363fb6af 3326 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3327 print FILE "\n";
3328 print FILE "delay_access 1 deny all\n";
3329 } else {
3330 print FILE "delay_access 1 allow all";
363fb6af 3331 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3332 print FILE "\n";
3333 }
3334
3335 if ($netsettings{'BLUE_DEV'})
3336 {
363fb6af 3337 print FILE "delay_access 2 deny IPCop_ips\n";
ed38f89d
MT		 3338 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 2 deny IPCop_unrestricted_ips\n"; }
3339 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 2 deny IPCop_unrestricted_mac\n"; }
3340 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 2 deny for_extended_users\n"; }
3341 print FILE "delay_access 2 allow IPCop_blue_network";
363fb6af 3342 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3343 print FILE "\n";
3344 print FILE "delay_access 2 deny all\n";
3345 }
3346
9fb25b1c 3347 print FILE "delay_initial_bucket_level 100\n";
ed38f89d
MT		 3348 print FILE "\n";
3349}
9fb25b1c
MT		 3350
3351if ($proxysettings{'NO_PROXY_LOCAL'} eq 'on')
3352{
3353 print FILE "#Prevent internal proxy access to Green\n";
3354 print FILE "http_access deny IPCop_green_servers !IPCop_green_network\n\n";
3355}
3356
3357if ($proxysettings{'NO_PROXY_LOCAL_BLUE'} eq 'on')
3358{
3359 print FILE "#Prevent internal proxy access from Blue\n";
3360 print FILE "http_access allow IPCop_blue_network IPCop_blue_servers\n";
3361 print FILE "http_access deny IPCop_blue_network IPCop_servers\n\n";
3362}
3363
ed38f89d
MT		 3364 print FILE <<END
3365#Set custom configured ACLs
3366END
3367 ;
3368 if (!-z $acl_src_banned_ip) { print FILE "http_access deny IPCop_banned_ips\n"; }
3369 if (!-z $acl_src_banned_mac) { print FILE "http_access deny IPCop_banned_mac\n"; }
3370
3371 if ((!-z $acl_dst_noauth) && (!($proxysettings{'AUTH_METHOD'} eq 'none')))
3372 {
3373 if (!-z $acl_src_unrestricted_ip)
3374 {
3375 print FILE "http_access allow IPCop_unrestricted_ips to_domains_without_auth\n";
3376 }
3377 if (!-z $acl_src_unrestricted_mac)
3378 {
3379 print FILE "http_access allow IPCop_unrestricted_mac to_domains_without_auth\n";
3380 }
3381 print FILE "http_access allow IPCop_networks";
3382 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3383 print FILE " !within_timeframe";
3384 } else {
3385 print FILE " within_timeframe"; }
3386 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3387 print FILE " to_domains_without_auth\n";
3388 }
3389
3390 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on'))
3391 {
3392 print FILE "http_access deny !for_inetusers";
3393 if (!-z $identhosts) { print FILE " on_ident_aware_hosts"; }
3394 print FILE "\n";
3395 }
3396
3397 if (
3398 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3399 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on') &&
3400 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3401 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3402 (!-z "$identdir/identauth.denyusers")
3403 )
3404 {
3405 print FILE "http_access deny for_acl_users";
3406 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3407 print FILE "\n";
3408 }
3409
3410 if (!-z $acl_src_unrestricted_ip)
3411 {
3412 print FILE "http_access allow IPCop_unrestricted_ips";
3413 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3414 {
3415 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3416 {
3417 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3418 }
3419 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3420 {
3421 print FILE " for_inetusers";
3422 }
3423 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3424 {
3425 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3426 {
3427 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3428 {
3429 print FILE " for_acl_users";
3430 }
3431 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3432 {
3433 print FILE " !for_acl_users";
3434 }
3435 } else { print FILE " for_inetusers"; }
3436 }
3437 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3438 {
ed38f89d 3439 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3440 {
ed38f89d
MT		 3441 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3442 {
3443 print FILE " for_acl_users";
3444 }
3445 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3446 {
3447 print FILE " !for_acl_users";
3448 }
3449 } else { print FILE " for_inetusers"; }
3450 }
3451 }
3452 print FILE "\n";
3453 }
3454
3455 if (!-z $acl_src_unrestricted_mac)
3456 {
3457 print FILE "http_access allow IPCop_unrestricted_mac";
3458 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3459 {
3460 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3461 {
3462 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3463 }
3464 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3465 {
3466 print FILE " for_inetusers";
3467 }
3468 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3469 {
3470 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3471 {
3472 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3473 {
3474 print FILE " for_acl_users";
3475 }
3476 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3477 {
3478 print FILE " !for_acl_users";
3479 }
3480 } else { print FILE " for_inetusers"; }
3481 }
3482 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3483 {
ed38f89d 3484 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3485 {
ed38f89d
MT		 3486 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3487 {
3488 print FILE " for_acl_users";
3489 }
3490 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3491 {
3492 print FILE " !for_acl_users";
3493 }
3494 } else { print FILE " for_inetusers"; }
3495 }
3496 }
3497 print FILE "\n";
3498 }
3499
3500 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3501 {
3502 if (!-z $disgrp) { print FILE "http_access deny for_disabled_users\n"; }
3503 if (!-z $extgrp) { print FILE "http_access allow IPCop_networks for_extended_users\n"; }
3504 }
3505
3506 if (
3507 (
3508 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3509 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3510 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3511 ($proxysettings{'NTLM_USER_ACL'} eq 'negative') &&
3512 (!-z "$ntlmdir/msntauth.denyusers")
3513 )
3514 ||
3515 (
3516 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3517 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3518 ($proxysettings{'RADIUS_USER_ACL'} eq 'negative') &&
3519 (!-z "$raddir/radauth.denyusers")
3520 )
3521 ||
3522 (
3523 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3524 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'off') &&
3525 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3526 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3527 (!-z "$identdir/identauth.denyusers")
3528 )
3529 )
3530 {
3531 print FILE "http_access deny for_acl_users";
3532 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3533 print FILE "\n";
3534 }
3535
3536 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && (!-z "$identhosts"))
3537 {
3538 print FILE "http_access allow";
3539 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3540 print FILE " !within_timeframe";
3541 } else {
3542 print FILE " within_timeframe"; }
3543 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3544 print FILE " !on_ident_aware_hosts\n";
3545 }
3546
3547 print FILE "http_access allow IPCop_networks";
3548 if (
3549 (
3550 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3551 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3552 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3553 ($proxysettings{'NTLM_USER_ACL'} eq 'positive') &&
3554 (!-z "$ntlmdir/msntauth.allowusers")
3555 )
3556 ||
3557 (
3558 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3559 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3560 ($proxysettings{'RADIUS_USER_ACL'} eq 'positive') &&
3561 (!-z "$raddir/radauth.allowusers")
3562 )
3563 ||
3564 (
3565 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3566 ($proxysettings{'IDENT_REQUIRED'} eq 'on') &&
3567 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3568 ($proxysettings{'IDENT_USER_ACL'} eq 'positive') &&
3569 (!-z "$identdir/identauth.allowusers")
3570 )
3571 )
3572 {
3573 print FILE " for_acl_users";
3574 } elsif (((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident'))) ||
3575 (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on'))) {
3576 print FILE " for_inetusers";
3577 }
3578 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && (!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3579 {
3580 print FILE " !concurrent";
3581 }
3582 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3583 print FILE " !within_timeframe";
3584 } else {
3585 print FILE " within_timeframe"; }
3586 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3587 print FILE "\n";
3588
3589 print FILE "http_access deny all\n\n";
3590
3591 if (($proxysettings{'FORWARD_IPADDRESS'} eq 'off') || ($proxysettings{'FORWARD_VIA'} eq 'off') ||
3592 (!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
3593 {
3594 print FILE "#Strip HTTP Header\n";
3595
3596 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'off')
3597 {
3598 print FILE "header_access X-Forwarded-For deny all\n";
3599 }
3600 if ($proxysettings{'FORWARD_VIA'} eq 'off')
3601 {
3602 print FILE "header_access Via deny all\n";
3603 }
3604 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
3605 {
3606 print FILE "header_access User-Agent deny all\n";
3607 }
3608 if (!($proxysettings{'FAKE_REFERER'} eq ''))
3609 {
3610 print FILE "header_access Referer deny all\n";
3611 }
3612
3613 print FILE "\n";
3614
3615 if ((!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
3616 {
3617 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
3618 {
3619 print FILE "header_replace User-Agent $proxysettings{'FAKE_USERAGENT'}\n";
3620 }
3621 if (!($proxysettings{'FAKE_REFERER'} eq ''))
3622 {
3623 print FILE "header_replace Referer $proxysettings{'FAKE_REFERER'}\n";
3624 }
3625 print FILE "\n";
3626 }
3627 }
3628
363fb6af
MT		 3629 if ($proxysettings{'SUPPRESS_VERSION'} eq 'on') { print FILE "httpd_suppress_version_string on\n\n" }
3630
ed38f89d
MT		 3631 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
3632 if (!-z $acl_src_unrestricted_ip) { print FILE "http_reply_access allow IPCop_unrestricted_ips\n"; }
3633 if (!-z $acl_src_unrestricted_mac) { print FILE "http_reply_access allow IPCop_unrestricted_mac\n"; }
3634 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3635 {
3636 if (!-z $extgrp) { print FILE "http_reply_access allow for_extended_users\n"; }
3637 }
3638 print FILE "http_reply_access deny blocked_mimetypes\n";
3639 print FILE "http_reply_access allow all\n\n";
3640 }
3641
3642 print FILE <<END
3643maximum_object_size $proxysettings{'MAX_SIZE'} KB
3644minimum_object_size $proxysettings{'MIN_SIZE'} KB
3645
3646request_body_max_size $proxysettings{'MAX_OUTGOING_SIZE'} KB
3647END
3648 ;
3649 $replybodymaxsize = 1024 * $proxysettings{'MAX_INCOMING_SIZE'};
3650 if ($proxysettings{'MAX_INCOMING_SIZE'} > 0) {
3651 if (!-z $acl_src_unrestricted_ip) { print FILE "reply_body_max_size 0 allow IPCop_unrestricted_ips\n"; }
3652 if (!-z $acl_src_unrestricted_mac) { print FILE "reply_body_max_size 0 allow IPCop_unrestricted_mac\n"; }
3653 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3654 {
3655 if (!-z $extgrp) { print FILE "reply_body_max_size 0 allow for_extended_users\n"; }
3656 }
3657 }
3658 print FILE "reply_body_max_size $replybodymaxsize allow all\n\n";
3659
3660 print FILE "visible_hostname";
3661 if ($proxysettings{'VISIBLE_HOSTNAME'} eq '')
3662 {
3663 print FILE " $mainsettings{'HOSTNAME'}.$mainsettings{'DOMAINNAME'}\n\n";
3664 } else {
3665 print FILE " $proxysettings{'VISIBLE_HOSTNAME'}\n\n";
3666 }
3667
3668 if (!($proxysettings{'ADMIN_MAIL_ADDRESS'} eq '')) { print FILE "cache_mgr $proxysettings{'ADMIN_MAIL_ADDRESS'}\n\n"; }
3669
3670 # Write the parent proxy info, if needed.
3671 if ($remotehost ne '')
3672 {
ed38f89d 3673 print FILE "cache_peer $remotehost parent $remoteport 3130 default no-query";
363fb6af
MT		 3674
3675 # Enter authentication for the parent cache. Option format is
3676 # login=user:password ($proxy1='YES')
3677 # login=PASS ($proxy1='PASS')
3678 # login=*:password ($proxysettings{'FORWARD_USERNAME'} eq 'on')
3679 if (($proxy1 eq 'YES') || ($proxy1 eq 'PASS'))
3680 {
3681 print FILE " login=$proxysettings{'UPSTREAM_USER'}";
3682 if ($proxy1 eq 'YES') { print FILE ":$proxysettings{'UPSTREAM_PASSWORD'}"; }
ed38f89d 3683 }
363fb6af
MT		 3684 elsif ($proxysettings{'FORWARD_USERNAME'} eq 'on') { print FILE " login=*:password"; }
3685
3686 print FILE "\nnever_direct allow all\n\n";
ed38f89d 3687 }
9fb25b1c 3688 if (($proxysettings{'ENABLE_FILTER'} eq 'on') && ($proxysettings{'ENABLE_UPDXLRATOR'} eq 'on'))
363fb6af
MT		 3689 {
3690 print FILE "url_rewrite_program /usr/sbin/redirect_wrapper\n";
9fb25b1c 3691 if ($filtersettings{'CHILDREN'} > $xlratorsettings{'CHILDREN'})
363fb6af
MT		 3692 {
3693 print FILE "url_rewrite_children $filtersettings{'CHILDREN'}\n\n";
3694 } else {
9fb25b1c 3695 print FILE "url_rewrite_children $xlratorsettings{'CHILDREN'}\n\n";
363fb6af
MT		 3696 }
3697 } else
3698 {
9fb25b1c
MT		 3699
3700 if ($proxysettings{'ENABLE_FILTER'} eq 'on')
3701 {
3702 print FILE <<END
d12aede7 3703url_rewrite_program /usr/sbin/redirect_wrapper
363fb6af 3704url_rewrite_children $filtersettings{'CHILDREN'}
ed38f89d
MT		 3705
3706END
9fb25b1c 3707 ;
ed38f89d 3708 }
9fb25b1c
MT		 3709 if ($proxysettings{'ENABLE_UPDXLRATOR'} eq 'on')
3710 {
3711 print FILE <<END
d12aede7 3712url_rewrite_program /usr/sbin/redirect_wrapper
9fb25b1c 3713url_rewrite_children $xlratorsettings{'CHILDREN'}
ed38f89d
MT		 3714
3715END
9fb25b1c 3716 ;
ed38f89d
MT		 3717 }
3718 }
ed38f89d
MT		 3719 close FILE;
3720}
3721
3722# -------------------------------------------------------------------
3723
3724sub adduser
3725{
3726 my ($str_user, $str_pass, $str_group) = @_;
3727 my @groupmembers=();
3728
3729 if ($str_pass eq 'lEaVeAlOnE')
3730 {
3731 open(FILE, "$userdb");
3732 @groupmembers = <FILE>;
3733 close(FILE);
3734 foreach $line (@groupmembers) { if ($line =~ /^$str_user:/i) { $str_pass = substr($line,index($line,":")); } }
3735 &deluser($str_user);
3736 open(FILE, ">>$userdb");
3737 flock FILE,2;
3738 print FILE "$str_user$str_pass";
3739 close(FILE);
3740 } else {
3741 &deluser($str_user);
d12aede7 3742 system("/usr/sbin/htpasswd -b $userdb $str_user $str_pass");
ed38f89d
MT		 3743 }
3744
3745 if ($str_group eq 'standard') { open(FILE, ">>$stdgrp");
3746 } elsif ($str_group eq 'extended') { open(FILE, ">>$extgrp");
3747 } elsif ($str_group eq 'disabled') { open(FILE, ">>$disgrp"); }
3748 flock FILE, 2;
3749 print FILE "$str_user\n";
3750 close(FILE);
3751
3752 return;
3753}
3754
3755# -------------------------------------------------------------------
3756
3757sub deluser
3758{
3759 my ($str_user) = @_;
3760 my $groupfile='';
3761 my @groupmembers=();
3762 my @templist=();
3763
3764 foreach $groupfile ($stdgrp, $extgrp, $disgrp)
3765 {
3766 undef @templist;
3767 open(FILE, "$groupfile");
3768 @groupmembers = <FILE>;
3769 close(FILE);
3770 foreach $line (@groupmembers) { if (!($line =~ /^$str_user$/i)) { push(@templist, $line); } }
3771 open(FILE, ">$groupfile");
3772 flock FILE, 2;
3773 print FILE @templist;
3774 close(FILE);
3775 }
3776
3777 undef @templist;
3778 open(FILE, "$userdb");
3779 @groupmembers = <FILE>;
3780 close(FILE);
3781 foreach $line (@groupmembers) { if (!($line =~ /^$str_user:/i)) { push(@templist, $line); } }
3782 open(FILE, ">$userdb");
3783 flock FILE, 2;
3784 print FILE @templist;
3785 close(FILE);
3786
3787 return;
3788}
ac1cfefa 3789
ed38f89d 3790# -------------------------------------------------------------------
Peter's tree of IPFire 2.x