]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - html/cgi-bin/proxy.cgi
projects / people / pmueller / ipfire-2.x.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Merge branch 'master' of ssh://git.ipfire.org/srv/git/ipfire-2.x
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / proxy.cgi
CommitLineData
ac1cfefa 1#!/usr/bin/perl
70df8302
MT		 2###############################################################################
3# #
4# IPFire.org - A linux based firewall #
37273bc6 5# Copyright (C) 2009 Michael Tremer & Christian Schmidt #
70df8302
MT		 6# #
7# This program is free software: you can redistribute it and/or modify #
8# it under the terms of the GNU General Public License as published by #
9# the Free Software Foundation, either version 3 of the License, or #
10# (at your option) any later version. #
11# #
12# This program is distributed in the hope that it will be useful, #
13# but WITHOUT ANY WARRANTY; without even the implied warranty of #
14# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15# GNU General Public License for more details. #
16# #
17# You should have received a copy of the GNU General Public License #
18# along with this program. If not, see <http://www.gnu.org/licenses/>. #
19# #
20###############################################################################
488d1b7c 21#
37273bc6 22# (c) 2004-2009 marco.s - http://www.advproxy.net
488d1b7c
CS		 23#
24# This code is distributed under the terms of the GPL
25#
37273bc6 26# $Id: advproxy.cgi,v 3.0.2 2009/02/04 00:00:00 marco.s Exp $
488d1b7c 27#
ac1cfefa
MT		 28
29use strict;
30
31# enable only the following on debugging purpose
cb5e9c6c
CS		 32#use warnings;
33#use CGI::Carp 'fatalsToBrowser';
ac1cfefa 34
ed38f89d 35require '/var/ipfire/general-functions.pl';
ac1cfefa
MT		 36require "${General::swroot}/lang.pl";
37require "${General::swroot}/header.pl";
38
363fb6af
MT		 39my @squidversion = `/usr/sbin/squid -v`;
40my $http_port='81';
41my $https_port='444';
42
18322edf
CS		 43my %color = ();
44my %mainsettings = ();
45&General::readhash("${General::swroot}/main/settings", \%mainsettings);
46&General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
47
ac1cfefa
MT		 48my %proxysettings=();
49my %netsettings=();
ed38f89d 50my %filtersettings=();
9fb25b1c 51my %xlratorsettings=();
ed38f89d 52my %stdproxysettings=();
ac1cfefa 53my %mainsettings=();
ed38f89d
MT		 54
55my %checked=();
56my %selected=();
57
58my @throttle_limits=(64,128,256,384,512,1024,2048,3072,5120);
59my $throttle_binary="bin|cab|exe|gz|rar|sea|tar|tgz|zip";
60my $throttle_dskimg="b5t|bin|bwt|ccd|cdi|cue|gho|img|iso|mds|nrg|pqi";
61my $throttle_mmedia="aiff?|asf|avi|divx|mov|mp3|mpe?g|qt|ra?m";
62
363fb6af
MT		 63my $def_ports_safe="80 # http\n21 # ftp\n443 # https\n563 # snews\n70 # gopher\n210 # wais\n1025-65535 # unregistered ports\n280 # http-mgmt\n488 # gss-http\n591 # filemaker\n777 # multiling http\n800 # Squids port (for icons)\n";
64my $def_ports_ssl="443 # https\n563 # snews\n";
65
ed38f89d
MT		 66my @useragent=();
67my @useragentlist=();
68
69my $hintcolour='#FFFFCC';
70my $ncsa_buttontext='';
71my $language='';
72my $i=0;
73my $n=0;
74my $id=0;
75my $line='';
76my $user='';
77my @userlist=();
78my @grouplist=();
79my @temp=();
80my @templist=();
81
82my $cachemem=0;
83my $proxy1='';
84my $proxy2='';
85my $replybodymaxsize=0;
86my $browser_regexp='';
87my $needhup = 0;
88my $errormessage='';
89
90my $acldir = "${General::swroot}/proxy/advanced/acls";
91my $ncsadir = "${General::swroot}/proxy/advanced/ncsa";
92my $ntlmdir = "${General::swroot}/proxy/advanced/ntlm";
93my $raddir = "${General::swroot}/proxy/advanced/radius";
94my $identdir = "${General::swroot}/proxy/advanced/ident";
95my $credir = "${General::swroot}/proxy/advanced/cre";
96
97my $userdb = "$ncsadir/passwd";
98my $stdgrp = "$ncsadir/standard.grp";
99my $extgrp = "$ncsadir/extended.grp";
100my $disgrp = "$ncsadir/disabled.grp";
101
102my $browserdb = "${General::swroot}/proxy/advanced/useragents";
103my $mimetypes = "${General::swroot}/proxy/advanced/mimetypes";
104my $throttled_urls = "${General::swroot}/proxy/advanced/throttle";
105
106my $cre_enabled = "${General::swroot}/proxy/advanced/cre/enable";
107my $cre_groups = "${General::swroot}/proxy/advanced/cre/classrooms";
108my $cre_svhosts = "${General::swroot}/proxy/advanced/cre/supervisors";
109
110my $identhosts = "$identdir/hosts";
111
8c55860f 112my $authdir = "/usr/lib/squid/";
f1baee3e 113my $errordir = "/usr/lib/squid/errors";
ed38f89d
MT		 114
115my $acl_src_subnets = "$acldir/src_subnets.acl";
116my $acl_src_banned_ip = "$acldir/src_banned_ip.acl";
117my $acl_src_banned_mac = "$acldir/src_banned_mac.acl";
118my $acl_src_unrestricted_ip = "$acldir/src_unrestricted_ip.acl";
119my $acl_src_unrestricted_mac = "$acldir/src_unrestricted_mac.acl";
120my $acl_src_noaccess_ip = "$acldir/src_noaccess_ip.acl";
121my $acl_src_noaccess_mac = "$acldir/src_noaccess_mac.acl";
ed38f89d 122my $acl_dst_noauth = "$acldir/dst_noauth.acl";
488d1b7c
CS		 123my $acl_dst_noauth_dom = "$acldir/dst_noauth_dom.acl";
124my $acl_dst_noauth_net = "$acldir/dst_noauth_net.acl";
125my $acl_dst_noauth_url = "$acldir/dst_noauth_url.acl";
126my $acl_dst_nocache = "$acldir/dst_nocache.acl";
127my $acl_dst_nocache_dom = "$acldir/dst_nocache_dom.acl";
128my $acl_dst_nocache_net = "$acldir/dst_nocache_net.acl";
129my $acl_dst_nocache_url = "$acldir/dst_nocache_url.acl";
ed38f89d 130my $acl_dst_throttle = "$acldir/dst_throttle.acl";
363fb6af
MT		 131my $acl_ports_safe = "$acldir/ports_safe.acl";
132my $acl_ports_ssl = "$acldir/ports_ssl.acl";
ed38f89d
MT		 133my $acl_include = "$acldir/include.acl";
134
363fb6af
MT		 135my $updaccelversion = 'n/a';
136my $urlfilterversion = 'n/a';
137
ed38f89d
MT		 138unless (-d "$acldir") { mkdir("$acldir"); }
139unless (-d "$ncsadir") { mkdir("$ncsadir"); }
140unless (-d "$ntlmdir") { mkdir("$ntlmdir"); }
141unless (-d "$raddir") { mkdir("$raddir"); }
142unless (-d "$identdir") { mkdir("$identdir"); }
143unless (-d "$credir") { mkdir("$credir"); }
144
145unless (-e $cre_groups) { system("touch $cre_groups"); }
146unless (-e $cre_svhosts) { system("touch $cre_svhosts"); }
147
148unless (-e $userdb) { system("touch $userdb"); }
149unless (-e $stdgrp) { system("touch $stdgrp"); }
150unless (-e $extgrp) { system("touch $extgrp"); }
151unless (-e $disgrp) { system("touch $disgrp"); }
152
153unless (-e $acl_src_subnets) { system("touch $acl_src_subnets"); }
154unless (-e $acl_src_banned_ip) { system("touch $acl_src_banned_ip"); }
155unless (-e $acl_src_banned_mac) { system("touch $acl_src_banned_mac"); }
156unless (-e $acl_src_unrestricted_ip) { system("touch $acl_src_unrestricted_ip"); }
157unless (-e $acl_src_unrestricted_mac) { system("touch $acl_src_unrestricted_mac"); }
158unless (-e $acl_src_noaccess_ip) { system("touch $acl_src_noaccess_ip"); }
159unless (-e $acl_src_noaccess_mac) { system("touch $acl_src_noaccess_mac"); }
488d1b7c
CS		 160unless (-e $acl_dst_noauth) { system("touch $acl_dst_noauth"); }
161unless (-e $acl_dst_noauth_dom) { system("touch $acl_dst_noauth_dom"); }
162unless (-e $acl_dst_noauth_net) { system("touch $acl_dst_noauth_net"); }
163unless (-e $acl_dst_noauth_url) { system("touch $acl_dst_noauth_url"); }
164unless (-e $acl_dst_nocache) { system("touch $acl_dst_nocache"); }
165unless (-e $acl_dst_nocache_dom) { system("touch $acl_dst_nocache_dom"); }
166unless (-e $acl_dst_nocache_net) { system("touch $acl_dst_nocache_net"); }
167unless (-e $acl_dst_nocache_url) { system("touch $acl_dst_nocache_url"); }
ed38f89d 168unless (-e $acl_dst_throttle) { system("touch $acl_dst_throttle"); }
363fb6af
MT		 169unless (-e $acl_ports_safe) { system("touch $acl_ports_safe"); }
170unless (-e $acl_ports_ssl) { system("touch $acl_ports_ssl"); }
ed38f89d
MT		 171unless (-e $acl_include) { system("touch $acl_include"); }
172
173unless (-e $browserdb) { system("touch $browserdb"); }
174unless (-e $mimetypes) { system("touch $mimetypes"); }
175
176open FILE, $browserdb;
177@useragentlist = sort { reverse(substr(reverse(substr($a,index($a,',')+1)),index(reverse(substr($a,index($a,','))),',')+1)) cmp reverse(substr(reverse(substr($b,index($b,',')+1)),index(reverse(substr($b,index($b,','))),',')+1))} grep !/(^$)|(^\s*#)/,<FILE>;
178close(FILE);
ac1cfefa
MT		 179
180&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
181&General::readhash("${General::swroot}/main/settings", \%mainsettings);
182
f09a0af5
AF		 183my $green_cidr = &General::ipcidr("$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}");
184my $blue_cidr = "# Blue not defined";
185if ($netsettings{'BLUE_DEV'}) {
186 $blue_cidr = &General::ipcidr("$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}");
187}
188
ac1cfefa
MT		 189&Header::showhttpheaders();
190
191$proxysettings{'ACTION'} = '';
192$proxysettings{'VALID'} = '';
193
ac1cfefa
MT		 194$proxysettings{'ENABLE'} = 'off';
195$proxysettings{'ENABLE_BLUE'} = 'off';
ac1cfefa
MT		 196$proxysettings{'TRANSPARENT'} = 'off';
197$proxysettings{'TRANSPARENT_BLUE'} = 'off';
ed38f89d
MT		 198$proxysettings{'PROXY_PORT'} = '800';
199$proxysettings{'VISIBLE_HOSTNAME'} = '';
200$proxysettings{'ADMIN_MAIL_ADDRESS'} = '';
fe1656d2 201$proxysettings{'ADMIN_PASSWORD'} = '';
0d948999
CS		 202$proxysettings{'ERR_LANGUAGE'} = 'German';
203$proxysettings{'ERR_DESIGN'} = 'ipfire';
363fb6af 204$proxysettings{'SUPPRESS_VERSION'} = 'off';
ed38f89d
MT		 205$proxysettings{'FORWARD_VIA'} = 'off';
206$proxysettings{'FORWARD_IPADDRESS'} = 'off';
207$proxysettings{'FORWARD_USERNAME'} = 'off';
363fb6af 208$proxysettings{'NO_CONNECTION_AUTH'} = 'off';
ed38f89d
MT		 209$proxysettings{'UPSTREAM_PROXY'} = '';
210$proxysettings{'UPSTREAM_USER'} = '';
211$proxysettings{'UPSTREAM_PASSWORD'} = '';
212$proxysettings{'LOGGING'} = 'off';
fe1656d2 213$proxysettings{'CACHEMGR'} = 'off';
ed38f89d
MT		 214$proxysettings{'LOGQUERY'} = 'off';
215$proxysettings{'LOGUSERAGENT'} = 'off';
fe1656d2 216$proxysettings{'FILEDESCRIPTORS'} = '4096';
ed38f89d
MT		 217$proxysettings{'CACHE_MEM'} = '2';
218$proxysettings{'CACHE_SIZE'} = '50';
ac1cfefa
MT		 219$proxysettings{'MAX_SIZE'} = '4096';
220$proxysettings{'MIN_SIZE'} = '0';
ed38f89d
MT		 221$proxysettings{'MEM_POLICY'} = 'LRU';
222$proxysettings{'CACHE_POLICY'} = 'LRU';
223$proxysettings{'L1_DIRS'} = '16';
224$proxysettings{'OFFLINE_MODE'} = 'off';
225$proxysettings{'CLASSROOM_EXT'} = 'off';
226$proxysettings{'SUPERVISOR_PASSWORD'} = '';
9fb25b1c
MT		 227$proxysettings{'NO_PROXY_LOCAL'} = 'off';
228$proxysettings{'NO_PROXY_LOCAL_BLUE'} = 'off';
ed38f89d
MT		 229$proxysettings{'TIME_ACCESS_MODE'} = 'allow';
230$proxysettings{'TIME_FROM_HOUR'} = '00';
231$proxysettings{'TIME_FROM_MINUTE'} = '00';
232$proxysettings{'TIME_TO_HOUR'} = '24';
233$proxysettings{'TIME_TO_MINUTE'} = '00';
ac1cfefa
MT		 234$proxysettings{'MAX_OUTGOING_SIZE'} = '0';
235$proxysettings{'MAX_INCOMING_SIZE'} = '0';
ed38f89d
MT		 236$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';
237$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';
238$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';
239$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';
240$proxysettings{'THROTTLE_BINARY'} = 'off';
241$proxysettings{'THROTTLE_DSKIMG'} = 'off';
242$proxysettings{'THROTTLE_MMEDIA'} = 'off';
243$proxysettings{'ENABLE_MIME_FILTER'} = 'off';
244$proxysettings{'ENABLE_BROWSER_CHECK'} = 'off';
245$proxysettings{'FAKE_USERAGENT'} = '';
246$proxysettings{'FAKE_REFERER'} = '';
247$proxysettings{'AUTH_METHOD'} = 'none';
248$proxysettings{'AUTH_REALM'} = '';
249$proxysettings{'AUTH_MAX_USERIP'} = '';
250$proxysettings{'AUTH_CACHE_TTL'} = '60';
251$proxysettings{'AUTH_IPCACHE_TTL'} = '0';
252$proxysettings{'AUTH_CHILDREN'} = '5';
253$proxysettings{'NCSA_MIN_PASS_LEN'} = '6';
254$proxysettings{'NCSA_BYPASS_REDIR'} = 'off';
255$proxysettings{'NCSA_USERNAME'} = '';
256$proxysettings{'NCSA_GROUP'} = '';
257$proxysettings{'NCSA_PASS'} = '';
258$proxysettings{'NCSA_PASS_CONFIRM'} = '';
259$proxysettings{'LDAP_BASEDN'} = '';
260$proxysettings{'LDAP_TYPE'} = 'ADS';
261$proxysettings{'LDAP_SERVER'} = '';
262$proxysettings{'LDAP_PORT'} = '389';
263$proxysettings{'LDAP_BINDDN_USER'} = '';
264$proxysettings{'LDAP_BINDDN_PASS'} = '';
265$proxysettings{'LDAP_GROUP'} = '';
266$proxysettings{'NTLM_DOMAIN'} = '';
267$proxysettings{'NTLM_PDC'} = '';
268$proxysettings{'NTLM_BDC'} = '';
269$proxysettings{'NTLM_ENABLE_ACL'} = 'off';
270$proxysettings{'NTLM_USER_ACL'} = 'positive';
271$proxysettings{'RADIUS_SERVER'} = '';
363fb6af 272$proxysettings{'RADIUS_PORT'} = '1812';
ed38f89d
MT		 273$proxysettings{'RADIUS_IDENTIFIER'} = '';
274$proxysettings{'RADIUS_SECRET'} = '';
275$proxysettings{'RADIUS_ENABLE_ACL'} = 'off';
276$proxysettings{'RADIUS_USER_ACL'} = 'positive';
277$proxysettings{'IDENT_REQUIRED'} = 'off';
278$proxysettings{'IDENT_TIMEOUT'} = '10';
279$proxysettings{'IDENT_ENABLE_ACL'} = 'off';
280$proxysettings{'IDENT_USER_ACL'} = 'positive';
9fb25b1c
MT		 281$proxysettings{'ENABLE_FILTER'} = 'off';
282$proxysettings{'ENABLE_UPDXLRATOR'} = 'off';
d12aede7 283$proxysettings{'ENABLE_CLAMAV'} = 'off';
28c9dec6 284$proxysettings{'CHILDREN'} = '10';
ed38f89d
MT		 285
286$ncsa_buttontext = $Lang::tr{'advproxy NCSA create user'};
ac1cfefa
MT		 287
288&Header::getcgihash(\%proxysettings);
289
ed38f89d
MT		 290if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 0) {$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';}
291if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 0) {$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';}
292if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 0) {$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';}
293if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 0) {$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';}
ac1cfefa 294
ed38f89d 295if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy NCSA user management'})
ac1cfefa 296{
ed38f89d
MT		 297 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
298}
299
300if ($proxysettings{'ACTION'} eq $Lang::tr{'add'})
301{
302 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
303 if (length($proxysettings{'NCSA_PASS'}) < $proxysettings{'NCSA_MIN_PASS_LEN'}) {
304 $errormessage = $Lang::tr{'advproxy errmsg password length 1'}.$proxysettings{'NCSA_MIN_PASS_LEN'}.$Lang::tr{'advproxy errmsg password length 2'};
305 }
306 if (!($proxysettings{'NCSA_PASS'} eq $proxysettings{'NCSA_PASS_CONFIRM'})) {
307 $errormessage = $Lang::tr{'advproxy errmsg passwords different'};
308 }
309 if ($proxysettings{'NCSA_USERNAME'} eq '') {
310 $errormessage = $Lang::tr{'advproxy errmsg no username'};
311 }
312 if (!$errormessage) {
313 $proxysettings{'NCSA_USERNAME'} =~ tr/A-Z/a-z/;
314 &adduser($proxysettings{'NCSA_USERNAME'}, $proxysettings{'NCSA_PASS'}, $proxysettings{'NCSA_GROUP'});
315 }
316 $proxysettings{'NCSA_USERNAME'} = '';
317 $proxysettings{'NCSA_GROUP'} = '';
318 $proxysettings{'NCSA_PASS'} = '';
319 $proxysettings{'NCSA_PASS_CONFIRM'} = '';
320}
ac1cfefa 321
ed38f89d
MT		 322if ($proxysettings{'ACTION'} eq $Lang::tr{'remove'})
323{
324 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
325 &deluser($proxysettings{'ID'});
326}
327
9fb25b1c
MT		 328$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
329$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
330$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
331
ed38f89d
MT		 332if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'})
333{
334 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
335 $ncsa_buttontext = $Lang::tr{'advproxy NCSA update user'};
336 @temp = split(/:/,$proxysettings{'ID'});
337 $proxysettings{'NCSA_USERNAME'} = $temp[0];
338 $proxysettings{'NCSA_GROUP'} = $temp[1];
339 $proxysettings{'NCSA_PASS'} = "lEaVeAlOnE";
340 $proxysettings{'NCSA_PASS_CONFIRM'} = $proxysettings{'NCSA_PASS'};
341}
342
fe1656d2 343if (($proxysettings{'ACTION'} eq $Lang::tr{'save'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'proxy reconfigure'}))
28c9dec6
CS		 344{
345 if ($proxysettings{'ENABLE'} !~ /^(on|off)$/ ||
346 $proxysettings{'TRANSPARENT'} !~ /^(on|off)$/ ||
347 $proxysettings{'ENABLE_BLUE'} !~ /^(on|off)$/ ||
ac1cfefa
MT		 348 $proxysettings{'TRANSPARENT_BLUE'} !~ /^(on|off)$/ ) {
349 $errormessage = $Lang::tr{'invalid input'};
350 goto ERROR;
28c9dec6 351 }
f2fdd0c1 352 if (!(&General::validport($proxysettings{'PROXY_PORT'})))
363fb6af
MT		 353 {
354 $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'};
355 goto ERROR;
356 }
ac1cfefa
MT		 357 if (!($proxysettings{'CACHE_SIZE'} =~ /^\d+/) ||
358 ($proxysettings{'CACHE_SIZE'} < 10))
359 {
488d1b7c
CS		 360 if (!($proxysettings{'CACHE_SIZE'} eq '0'))
361 {
362 $errormessage = $Lang::tr{'advproxy errmsg hdd cache size'};
363 goto ERROR;
364 }
ed38f89d 365 }
fe1656d2
CS		 366 if (!($proxysettings{'FILEDESCRIPTORS'} =~ /^\d+/) ||
367 ($proxysettings{'FILEDESCRIPTORS'} < 1) || ($proxysettings{'FILEDESCRIPTORS'} > 16384))
368 {
369 $errormessage = $Lang::tr{'proxy errmsg filedescriptors'};
370 goto ERROR;
371 }
ed38f89d
MT		 372 if (!($proxysettings{'CACHE_MEM'} =~ /^\d+/) ||
373 ($proxysettings{'CACHE_MEM'} < 1))
374 {
375 $errormessage = $Lang::tr{'advproxy errmsg mem cache size'};
ac1cfefa 376 goto ERROR;
28c9dec6 377 }
ed38f89d
MT		 378 my @free = `/usr/bin/free`;
379 $free[1] =~ m/(\d+)/;
380 $cachemem = int $1 / 2048;
381 if ($proxysettings{'CACHE_MEM'} > $cachemem) {
382 $proxysettings{'CACHE_MEM'} = $cachemem;
383 }
ac1cfefa
MT		 384 if (!($proxysettings{'MAX_SIZE'} =~ /^\d+/))
385 {
386 $errormessage = $Lang::tr{'invalid maximum object size'};
387 goto ERROR;
388 }
389 if (!($proxysettings{'MIN_SIZE'} =~ /^\d+/))
390 {
391 $errormessage = $Lang::tr{'invalid minimum object size'};
392 goto ERROR;
393 }
394 if (!($proxysettings{'MAX_OUTGOING_SIZE'} =~ /^\d+/))
395 {
396 $errormessage = $Lang::tr{'invalid maximum outgoing size'};
397 goto ERROR;
398 }
ed38f89d
MT		 399 if (!($proxysettings{'TIME_TO_HOUR'}.$proxysettings{'TIME_TO_MINUTE'} gt $proxysettings{'TIME_FROM_HOUR'}.$proxysettings{'TIME_FROM_MINUTE'}))
400 {
401 $errormessage = $Lang::tr{'advproxy errmsg time restriction'};
402 goto ERROR;
403 }
ac1cfefa
MT		 404 if (!($proxysettings{'MAX_INCOMING_SIZE'} =~ /^\d+/))
405 {
406 $errormessage = $Lang::tr{'invalid maximum incoming size'};
407 goto ERROR;
62459123
CS		 408 }
409 if (!($proxysettings{'CHILDREN'} =~ /^\d+$/) || ($proxysettings{'CHILDREN'} < 1))
410 {
411 $errormessage = $Lang::tr{'advproxy invalid num of children'};
412 goto ERROR;
ac1cfefa 413 }
ed38f89d 414 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on')
ac1cfefa 415 {
ed38f89d
MT		 416 $browser_regexp = '';
417 foreach (@useragentlist)
418 {
419 chomp;
420 @useragent = split(/,/);
4e17adad 421 if ($proxysettings{'UA_'.$useragent[0]} eq 'on') { $browser_regexp .= "$useragent[2]|"; }
ed38f89d
MT		 422 }
423 chop($browser_regexp);
424 if (!$browser_regexp)
425 {
426 $errormessage = $Lang::tr{'advproxy errmsg no browser'};
427 goto ERROR;
428 }
429 }
430 if (!($proxysettings{'AUTH_METHOD'} eq 'none'))
431 {
363fb6af 432 unless (($proxysettings{'AUTH_METHOD'} eq 'ident') &&
ed38f89d
MT		 433 ($proxysettings{'IDENT_REQUIRED'} eq 'off') &&
434 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'off'))
435 {
436 if ($netsettings{'BLUE_DEV'})
363fb6af 437 {
ed38f89d
MT		 438 if ((($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on')) &&
439 (($proxysettings{'ENABLE_BLUE'} eq 'off') || ($proxysettings{'TRANSPARENT_BLUE'} eq 'on')))
440 {
441 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
442 goto ERROR;
443 }
444 } else {
445 if (($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on'))
446 {
447 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
448 goto ERROR;
449 }
450 }
451 }
28c9dec6
CS		 452 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) &&
453 ((!($proxysettings{'AUTH_MAX_USERIP'} =~ /^\d+/)) || ($proxysettings{'AUTH_MAX_USERIP'} < 1) || ($proxysettings{'AUTH_MAX_USERIP'} > 255)))
ed38f89d
MT		 454 {
455 $errormessage = $Lang::tr{'advproxy errmsg max userip'};
456 goto ERROR;
457 }
458 if (!($proxysettings{'AUTH_CACHE_TTL'} =~ /^\d+/))
459 {
460 $errormessage = $Lang::tr{'advproxy errmsg auth cache ttl'};
461 goto ERROR;
462 }
463 if (!($proxysettings{'AUTH_IPCACHE_TTL'} =~ /^\d+/))
464 {
465 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache ttl'};
466 goto ERROR;
467 }
468 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && ($proxysettings{'AUTH_IPCACHE_TTL'} eq '0'))
469 {
470 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache may not be null'};
471 goto ERROR;
472 }
473 if ((!($proxysettings{'AUTH_CHILDREN'} =~ /^\d+/)) || ($proxysettings{'AUTH_CHILDREN'} < 1) || ($proxysettings{'AUTH_CHILDREN'} > 255))
474 {
475 $errormessage = $Lang::tr{'advproxy errmsg auth children'};
476 goto ERROR;
477 }
478 }
479 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
480 {
481 if ((!($proxysettings{'NCSA_MIN_PASS_LEN'} =~ /^\d+/)) || ($proxysettings{'NCSA_MIN_PASS_LEN'} < 1) || ($proxysettings{'NCSA_MIN_PASS_LEN'} > 255))
482 {
483 $errormessage = $Lang::tr{'advproxy errmsg password length'};
484 goto ERROR;
485 }
486 }
487 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
488 {
489 if ((!($proxysettings{'IDENT_TIMEOUT'} =~ /^\d+/)) || ($proxysettings{'IDENT_TIMEOUT'} < 1))
490 {
491 $errormessage = $Lang::tr{'advproxy errmsg ident timeout'};
492 goto ERROR;
493 }
494 }
495 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
496 {
497 if ($proxysettings{'LDAP_BASEDN'} eq '')
498 {
499 $errormessage = $Lang::tr{'advproxy errmsg ldap base dn'};
500 goto ERROR;
501 }
502 if (!&General::validip($proxysettings{'LDAP_SERVER'}))
503 {
504 $errormessage = $Lang::tr{'advproxy errmsg ldap server'};
505 goto ERROR;
506 }
507 if (!&General::validport($proxysettings{'LDAP_PORT'}))
508 {
509 $errormessage = $Lang::tr{'advproxy errmsg ldap port'};
510 goto ERROR;
511 }
512 if (($proxysettings{'LDAP_TYPE'} eq 'ADS') || ($proxysettings{'LDAP_TYPE'} eq 'NDS'))
513 {
514 if (($proxysettings{'LDAP_BINDDN_USER'} eq '') || ($proxysettings{'LDAP_BINDDN_PASS'} eq ''))
515 {
516 $errormessage = $Lang::tr{'advproxy errmsg ldap bind dn'};
517 goto ERROR;
518 }
519 }
520 }
521 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
522 {
523 if ($proxysettings{'NTLM_DOMAIN'} eq '')
524 {
525 $errormessage = $Lang::tr{'advproxy errmsg ntlm domain'};
526 goto ERROR;
527 }
528 if ($proxysettings{'NTLM_PDC'} eq '')
529 {
530 $errormessage = $Lang::tr{'advproxy errmsg ntlm pdc'};
531 goto ERROR;
532 }
533 if (!&General::validhostname($proxysettings{'NTLM_PDC'}))
534 {
535 $errormessage = $Lang::tr{'advproxy errmsg invalid pdc'};
536 goto ERROR;
537 }
538 if ((!($proxysettings{'NTLM_BDC'} eq '')) && (!&General::validhostname($proxysettings{'NTLM_BDC'})))
539 {
540 $errormessage = $Lang::tr{'advproxy errmsg invalid bdc'};
541 goto ERROR;
542 }
488d1b7c
CS		 543
544 $proxysettings{'NTLM_DOMAIN'} = lc($proxysettings{'NTLM_DOMAIN'});
545 $proxysettings{'NTLM_PDC'} = lc($proxysettings{'NTLM_PDC'});
546 $proxysettings{'NTLM_BDC'} = lc($proxysettings{'NTLM_BDC'});
ed38f89d
MT		 547 }
548 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
549 {
550 if (!&General::validip($proxysettings{'RADIUS_SERVER'}))
551 {
552 $errormessage = $Lang::tr{'advproxy errmsg radius server'};
553 goto ERROR;
554 }
555 if (!&General::validport($proxysettings{'RADIUS_PORT'}))
556 {
557 $errormessage = $Lang::tr{'advproxy errmsg radius port'};
558 goto ERROR;
559 }
560 if ($proxysettings{'RADIUS_SECRET'} eq '')
561 {
562 $errormessage = $Lang::tr{'advproxy errmsg radius secret'};
563 goto ERROR;
564 }
ac1cfefa
MT		 565 }
566
363fb6af
MT		 567 # Quick parent proxy error checking of username and password info. If username password don't both exist give an error.
568 $proxy1 = 'YES';
569 $proxy2 = 'YES';
570 if (($proxysettings{'UPSTREAM_USER'} eq '')) {$proxy1 = '';}
571 if (($proxysettings{'UPSTREAM_PASSWORD'} eq '')) {$proxy2 = '';}
572 if ($proxysettings{'UPSTREAM_USER'} eq 'PASS') {$proxy1=$proxy2='PASS'; $proxysettings{'UPSTREAM_PASSWORD'} = '';}
573 if (($proxy1 ne $proxy2))
574 {
575 $errormessage = $Lang::tr{'advproxy errmsg invalid upstream proxy username or password setting'};
576 goto ERROR;
577 }
ac1cfefa 578
ed38f89d
MT		 579ERROR:
580 &check_acls;
ac1cfefa 581
ed38f89d
MT		 582 if ($errormessage) {
583 $proxysettings{'VALID'} = 'no'; }
584 else {
363fb6af 585 $proxysettings{'VALID'} = 'yes'; }
ac1cfefa 586
ed38f89d 587 if ($proxysettings{'VALID'} eq 'yes')
ac1cfefa 588 {
ed38f89d 589 &write_acls;
ac1cfefa 590
ed38f89d
MT		 591 delete $proxysettings{'SRC_SUBNETS'};
592 delete $proxysettings{'SRC_BANNED_IP'};
593 delete $proxysettings{'SRC_BANNED_MAC'};
594 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
595 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
596 delete $proxysettings{'DST_NOCACHE'};
597 delete $proxysettings{'DST_NOAUTH'};
363fb6af
MT		 598 delete $proxysettings{'PORTS_SAFE'};
599 delete $proxysettings{'PORTS_SSL'};
ed38f89d
MT		 600 delete $proxysettings{'MIME_TYPES'};
601 delete $proxysettings{'NTLM_ALLOW_USERS'};
602 delete $proxysettings{'NTLM_DENY_USERS'};
603 delete $proxysettings{'RADIUS_ALLOW_USERS'};
604 delete $proxysettings{'RADIUS_DENY_USERS'};
605 delete $proxysettings{'IDENT_HOSTS'};
606 delete $proxysettings{'IDENT_ALLOW_USERS'};
607 delete $proxysettings{'IDENT_DENY_USERS'};
ac1cfefa 608
ed38f89d
MT		 609 delete $proxysettings{'CRE_GROUPS'};
610 delete $proxysettings{'CRE_SVHOSTS'};
ac1cfefa 611
ed38f89d
MT		 612 delete $proxysettings{'NCSA_USERNAME'};
613 delete $proxysettings{'NCSA_GROUP'};
614 delete $proxysettings{'NCSA_PASS'};
615 delete $proxysettings{'NCSA_PASS_CONFIRM'};
ac1cfefa 616
ed38f89d
MT		 617 $proxysettings{'TIME_MON'} = 'off' unless exists $proxysettings{'TIME_MON'};
618 $proxysettings{'TIME_TUE'} = 'off' unless exists $proxysettings{'TIME_TUE'};
619 $proxysettings{'TIME_WED'} = 'off' unless exists $proxysettings{'TIME_WED'};
620 $proxysettings{'TIME_THU'} = 'off' unless exists $proxysettings{'TIME_THU'};
621 $proxysettings{'TIME_FRI'} = 'off' unless exists $proxysettings{'TIME_FRI'};
622 $proxysettings{'TIME_SAT'} = 'off' unless exists $proxysettings{'TIME_SAT'};
623 $proxysettings{'TIME_SUN'} = 'off' unless exists $proxysettings{'TIME_SUN'};
ac1cfefa 624
ed38f89d
MT		 625 $proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'off' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
626 $proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'off' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
ac1cfefa 627
ed38f89d 628 &General::writehash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
ac1cfefa 629
363fb6af
MT		 630 if (-e "${General::swroot}/proxy/settings") { &General::readhash("${General::swroot}/proxy/settings", \%stdproxysettings); }
631 $stdproxysettings{'PROXY_PORT'} = $proxysettings{'PROXY_PORT'};
488d1b7c
CS		 632 $stdproxysettings{'UPSTREAM_PROXY'} = $proxysettings{'UPSTREAM_PROXY'};
633 $stdproxysettings{'UPSTREAM_USER'} = $proxysettings{'UPSTREAM_USER'};
634 $stdproxysettings{'UPSTREAM_PASSWORD'} = $proxysettings{'UPSTREAM_PASSWORD'};
9fb25b1c
MT		 635 $stdproxysettings{'ENABLE_FILTER'} = $proxysettings{'ENABLE_FILTER'};
636 $stdproxysettings{'ENABLE_UPDXLRATOR'} = $proxysettings{'ENABLE_UPDXLRATOR'};
d12aede7 637 $stdproxysettings{'ENABLE_CLAMAV'} = $proxysettings{'ENABLE_CLAMAV'};
363fb6af 638 &General::writehash("${General::swroot}/proxy/settings", \%stdproxysettings);
ac1cfefa 639
ed38f89d
MT		 640 &writeconfig;
641 &writepacfile;
642
fe1656d2
CS		 643 if ($proxysettings{'CACHEMGR'} eq 'on'){&writecachemgr;}
644
d56fc335 645 system ('/usr/local/bin/squidctrl', 'disable');
ed38f89d
MT		 646 unlink "${General::swroot}/proxy/enable";
647 unlink "${General::swroot}/proxy/transparent";
648 unlink "${General::swroot}/proxy/enable_blue";
649 unlink "${General::swroot}/proxy/transparent_blue";
ac1cfefa 650
ac1cfefa 651 if ($proxysettings{'ENABLE'} eq 'on') {
d56fc335
MT		 652 system ('/usr/bin/touch', "${General::swroot}/proxy/enable");
653 system ('/usr/local/bin/squidctrl', 'enable'); }
6c689591 654 if ($proxysettings{'TRANSPARENT'} eq 'on' && $proxysettings{'ENABLE'} eq 'on') {
9833e7d8 655 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent"); }
ac1cfefa 656 if ($proxysettings{'ENABLE_BLUE'} eq 'on') {
d56fc335
MT		 657 system ('/usr/bin/touch', "${General::swroot}/proxy/enable_blue");
658 system ('/usr/local/bin/squidctrl', 'enable'); }
6c689591 659 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on' && $proxysettings{'ENABLE_BLUE'} eq 'on') {
9833e7d8 660 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent_blue"); }
ed38f89d 661
d56fc335 662 if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) { system('/usr/local/bin/squidctrl restart >/dev/null 2>&1'); }
fe1656d2
CS		 663 if ($proxysettings{'ACTION'} eq $Lang::tr{'proxy reconfigure'}) { system('/usr/local/bin/squidctrl reconfigure >/dev/null 2>&1'); }
664 }
ac1cfefa
MT		 665}
666
363fb6af 667if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy clear cache'})
ac1cfefa 668{
d56fc335 669 system('/usr/local/bin/squidctrl flush >/dev/null 2>&1');
ac1cfefa
MT		 670}
671
ed38f89d
MT		 672if (!$errormessage)
673{
674 if (-e "${General::swroot}/proxy/advanced/settings") {
675 &General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
676 } elsif (-e "${General::swroot}/proxy/settings") {
677 &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
678 }
679 &read_acls;
680}
ac1cfefa
MT		 681
682$checked{'ENABLE'}{'off'} = '';
683$checked{'ENABLE'}{'on'} = '';
684$checked{'ENABLE'}{$proxysettings{'ENABLE'}} = "checked='checked'";
685
686$checked{'TRANSPARENT'}{'off'} = '';
687$checked{'TRANSPARENT'}{'on'} = '';
688$checked{'TRANSPARENT'}{$proxysettings{'TRANSPARENT'}} = "checked='checked'";
689
690$checked{'ENABLE_BLUE'}{'off'} = '';
691$checked{'ENABLE_BLUE'}{'on'} = '';
692$checked{'ENABLE_BLUE'}{$proxysettings{'ENABLE_BLUE'}} = "checked='checked'";
693
694$checked{'TRANSPARENT_BLUE'}{'off'} = '';
695$checked{'TRANSPARENT_BLUE'}{'on'} = '';
696$checked{'TRANSPARENT_BLUE'}{$proxysettings{'TRANSPARENT_BLUE'}} = "checked='checked'";
697
363fb6af
MT		 698$checked{'SUPPRESS_VERSION'}{'off'} = '';
699$checked{'SUPPRESS_VERSION'}{'on'} = '';
700$checked{'SUPPRESS_VERSION'}{$proxysettings{'SUPPRESS_VERSION'}} = "checked='checked'";
701
ed38f89d
MT		 702$checked{'FORWARD_IPADDRESS'}{'off'} = '';
703$checked{'FORWARD_IPADDRESS'}{'on'} = '';
704$checked{'FORWARD_IPADDRESS'}{$proxysettings{'FORWARD_IPADDRESS'}} = "checked='checked'";
705$checked{'FORWARD_USERNAME'}{'off'} = '';
706$checked{'FORWARD_USERNAME'}{'on'} = '';
707$checked{'FORWARD_USERNAME'}{$proxysettings{'FORWARD_USERNAME'}} = "checked='checked'";
708$checked{'FORWARD_VIA'}{'off'} = '';
709$checked{'FORWARD_VIA'}{'on'} = '';
710$checked{'FORWARD_VIA'}{$proxysettings{'FORWARD_VIA'}} = "checked='checked'";
363fb6af
MT		 711$checked{'NO_CONNECTION_AUTH'}{'off'} = '';
712$checked{'NO_CONNECTION_AUTH'}{'on'} = '';
713$checked{'NO_CONNECTION_AUTH'}{$proxysettings{'NO_CONNECTION_AUTH'}} = "checked='checked'";
ed38f89d
MT		 714
715$selected{'MEM_POLICY'}{$proxysettings{'MEM_POLICY'}} = "selected='selected'";
716$selected{'CACHE_POLICY'}{$proxysettings{'CACHE_POLICY'}} = "selected='selected'";
717$selected{'L1_DIRS'}{$proxysettings{'L1_DIRS'}} = "selected='selected'";
718$checked{'OFFLINE_MODE'}{'off'} = '';
719$checked{'OFFLINE_MODE'}{'on'} = '';
720$checked{'OFFLINE_MODE'}{$proxysettings{'OFFLINE_MODE'}} = "checked='checked'";
721
ac1cfefa
MT		 722$checked{'LOGGING'}{'off'} = '';
723$checked{'LOGGING'}{'on'} = '';
724$checked{'LOGGING'}{$proxysettings{'LOGGING'}} = "checked='checked'";
fe1656d2
CS		 725$checked{'CACHEMGR'}{'off'} = '';
726$checked{'CACHEMGR'}{'on'} = '';
727$checked{'CACHEMGR'}{$proxysettings{'CACHEMGR'}} = "checked='checked'";
ed38f89d
MT		 728$checked{'LOGQUERY'}{'off'} = '';
729$checked{'LOGQUERY'}{'on'} = '';
730$checked{'LOGQUERY'}{$proxysettings{'LOGQUERY'}} = "checked='checked'";
731$checked{'LOGUSERAGENT'}{'off'} = '';
732$checked{'LOGUSERAGENT'}{'on'} = '';
733$checked{'LOGUSERAGENT'}{$proxysettings{'LOGUSERAGENT'}} = "checked='checked'";
734
735$selected{'ERR_LANGUAGE'}{$proxysettings{'ERR_LANGUAGE'}} = "selected='selected'";
363fb6af 736$selected{'ERR_DESIGN'}{$proxysettings{'ERR_DESIGN'}} = "selected='selected'";
ed38f89d 737
9fb25b1c
MT		 738$checked{'NO_PROXY_LOCAL'}{'off'} = '';
739$checked{'NO_PROXY_LOCAL'}{'on'} = '';
740$checked{'NO_PROXY_LOCAL'}{$proxysettings{'NO_PROXY_LOCAL'}} = "checked='checked'";
741$checked{'NO_PROXY_LOCAL_BLUE'}{'off'} = '';
742$checked{'NO_PROXY_LOCAL_BLUE'}{'on'} = '';
743$checked{'NO_PROXY_LOCAL_BLUE'}{$proxysettings{'NO_PROXY_LOCAL_BLUE'}} = "checked='checked'";
744
ed38f89d
MT		 745$checked{'CLASSROOM_EXT'}{'off'} = '';
746$checked{'CLASSROOM_EXT'}{'on'} = '';
747$checked{'CLASSROOM_EXT'}{$proxysettings{'CLASSROOM_EXT'}} = "checked='checked'";
748
749$selected{'TIME_ACCESS_MODE'}{$proxysettings{'TIME_ACCESS_MODE'}} = "selected='selected'";
750$selected{'TIME_FROM_HOUR'}{$proxysettings{'TIME_FROM_HOUR'}} = "selected='selected'";
751$selected{'TIME_FROM_MINUTE'}{$proxysettings{'TIME_FROM_MINUTE'}} = "selected='selected'";
752$selected{'TIME_TO_HOUR'}{$proxysettings{'TIME_TO_HOUR'}} = "selected='selected'";
753$selected{'TIME_TO_MINUTE'}{$proxysettings{'TIME_TO_MINUTE'}} = "selected='selected'";
754
755$proxysettings{'TIME_MON'} = 'on' unless exists $proxysettings{'TIME_MON'};
756$proxysettings{'TIME_TUE'} = 'on' unless exists $proxysettings{'TIME_TUE'};
757$proxysettings{'TIME_WED'} = 'on' unless exists $proxysettings{'TIME_WED'};
758$proxysettings{'TIME_THU'} = 'on' unless exists $proxysettings{'TIME_THU'};
759$proxysettings{'TIME_FRI'} = 'on' unless exists $proxysettings{'TIME_FRI'};
760$proxysettings{'TIME_SAT'} = 'on' unless exists $proxysettings{'TIME_SAT'};
761$proxysettings{'TIME_SUN'} = 'on' unless exists $proxysettings{'TIME_SUN'};
762
763$checked{'TIME_MON'}{'off'} = '';
764$checked{'TIME_MON'}{'on'} = '';
765$checked{'TIME_MON'}{$proxysettings{'TIME_MON'}} = "checked='checked'";
766$checked{'TIME_TUE'}{'off'} = '';
767$checked{'TIME_TUE'}{'on'} = '';
768$checked{'TIME_TUE'}{$proxysettings{'TIME_TUE'}} = "checked='checked'";
769$checked{'TIME_WED'}{'off'} = '';
770$checked{'TIME_WED'}{'on'} = '';
771$checked{'TIME_WED'}{$proxysettings{'TIME_WED'}} = "checked='checked'";
772$checked{'TIME_THU'}{'off'} = '';
773$checked{'TIME_THU'}{'on'} = '';
774$checked{'TIME_THU'}{$proxysettings{'TIME_THU'}} = "checked='checked'";
775$checked{'TIME_FRI'}{'off'} = '';
776$checked{'TIME_FRI'}{'on'} = '';
777$checked{'TIME_FRI'}{$proxysettings{'TIME_FRI'}} = "checked='checked'";
778$checked{'TIME_SAT'}{'off'} = '';
779$checked{'TIME_SAT'}{'on'} = '';
780$checked{'TIME_SAT'}{$proxysettings{'TIME_SAT'}} = "checked='checked'";
781$checked{'TIME_SUN'}{'off'} = '';
782$checked{'TIME_SUN'}{'on'} = '';
783$checked{'TIME_SUN'}{$proxysettings{'TIME_SUN'}} = "checked='checked'";
784
785$selected{'THROTTLING_GREEN_TOTAL'}{$proxysettings{'THROTTLING_GREEN_TOTAL'}} = "selected='selected'";
786$selected{'THROTTLING_GREEN_HOST'}{$proxysettings{'THROTTLING_GREEN_HOST'}} = "selected='selected'";
787$selected{'THROTTLING_BLUE_TOTAL'}{$proxysettings{'THROTTLING_BLUE_TOTAL'}} = "selected='selected'";
788$selected{'THROTTLING_BLUE_HOST'}{$proxysettings{'THROTTLING_BLUE_HOST'}} = "selected='selected'";
789
790$checked{'THROTTLE_BINARY'}{'off'} = '';
791$checked{'THROTTLE_BINARY'}{'on'} = '';
792$checked{'THROTTLE_BINARY'}{$proxysettings{'THROTTLE_BINARY'}} = "checked='checked'";
793$checked{'THROTTLE_DSKIMG'}{'off'} = '';
794$checked{'THROTTLE_DSKIMG'}{'on'} = '';
795$checked{'THROTTLE_DSKIMG'}{$proxysettings{'THROTTLE_DSKIMG'}} = "checked='checked'";
796$checked{'THROTTLE_MMEDIA'}{'off'} = '';
797$checked{'THROTTLE_MMEDIA'}{'on'} = '';
798$checked{'THROTTLE_MMEDIA'}{$proxysettings{'THROTTLE_MMEDIA'}} = "checked='checked'";
799
800$checked{'ENABLE_MIME_FILTER'}{'off'} = '';
801$checked{'ENABLE_MIME_FILTER'}{'on'} = '';
802$checked{'ENABLE_MIME_FILTER'}{$proxysettings{'ENABLE_MIME_FILTER'}} = "checked='checked'";
803
804$checked{'ENABLE_BROWSER_CHECK'}{'off'} = '';
805$checked{'ENABLE_BROWSER_CHECK'}{'on'} = '';
806$checked{'ENABLE_BROWSER_CHECK'}{$proxysettings{'ENABLE_BROWSER_CHECK'}} = "checked='checked'";
807
808foreach (@useragentlist) {
809 @useragent = split(/,/);
4e17adad
CS		 810 $checked{'UA_'.$useragent[0]}{'off'} = '';
811 $checked{'UA_'.$useragent[0]}{'on'} = '';
812 $checked{'UA_'.$useragent[0]}{$proxysettings{'UA_'.$useragent[0]}} = "checked='checked'";
ed38f89d
MT		 813}
814
815$checked{'AUTH_METHOD'}{'none'} = '';
816$checked{'AUTH_METHOD'}{'ncsa'} = '';
817$checked{'AUTH_METHOD'}{'ident'} = '';
818$checked{'AUTH_METHOD'}{'ldap'} = '';
819$checked{'AUTH_METHOD'}{'ntlm'} = '';
820$checked{'AUTH_METHOD'}{'radius'} = '';
821$checked{'AUTH_METHOD'}{$proxysettings{'AUTH_METHOD'}} = "checked='checked'";
ac1cfefa 822
ed38f89d
MT		 823$proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'on' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
824
825$checked{'AUTH_ALWAYS_REQUIRED'}{'off'} = '';
826$checked{'AUTH_ALWAYS_REQUIRED'}{'on'} = '';
827$checked{'AUTH_ALWAYS_REQUIRED'}{$proxysettings{'AUTH_ALWAYS_REQUIRED'}} = "checked='checked'";
828
829$checked{'NCSA_BYPASS_REDIR'}{'off'} = '';
830$checked{'NCSA_BYPASS_REDIR'}{'on'} = '';
831$checked{'NCSA_BYPASS_REDIR'}{$proxysettings{'NCSA_BYPASS_REDIR'}} = "checked='checked'";
832
833$selected{'NCSA_GROUP'}{$proxysettings{'NCSA_GROUP'}} = "selected='selected'";
834
835$selected{'LDAP_TYPE'}{$proxysettings{'LDAP_TYPE'}} = "selected='selected'";
836
837$proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'on' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
838
839$checked{'NTLM_ENABLE_INT_AUTH'}{'off'} = '';
840$checked{'NTLM_ENABLE_INT_AUTH'}{'on'} = '';
841$checked{'NTLM_ENABLE_INT_AUTH'}{$proxysettings{'NTLM_ENABLE_INT_AUTH'}} = "checked='checked'";
842
843$checked{'NTLM_ENABLE_ACL'}{'off'} = '';
844$checked{'NTLM_ENABLE_ACL'}{'on'} = '';
845$checked{'NTLM_ENABLE_ACL'}{$proxysettings{'NTLM_ENABLE_ACL'}} = "checked='checked'";
846
847$checked{'NTLM_USER_ACL'}{'positive'} = '';
848$checked{'NTLM_USER_ACL'}{'negative'} = '';
849$checked{'NTLM_USER_ACL'}{$proxysettings{'NTLM_USER_ACL'}} = "checked='checked'";
850
851$checked{'RADIUS_ENABLE_ACL'}{'off'} = '';
852$checked{'RADIUS_ENABLE_ACL'}{'on'} = '';
853$checked{'RADIUS_ENABLE_ACL'}{$proxysettings{'RADIUS_ENABLE_ACL'}} = "checked='checked'";
854
855$checked{'RADIUS_USER_ACL'}{'positive'} = '';
856$checked{'RADIUS_USER_ACL'}{'negative'} = '';
857$checked{'RADIUS_USER_ACL'}{$proxysettings{'RADIUS_USER_ACL'}} = "checked='checked'";
858
859$checked{'IDENT_REQUIRED'}{'off'} = '';
860$checked{'IDENT_REQUIRED'}{'on'} = '';
861$checked{'IDENT_REQUIRED'}{$proxysettings{'IDENT_REQUIRED'}} = "checked='checked'";
862
863$checked{'IDENT_ENABLE_ACL'}{'off'} = '';
864$checked{'IDENT_ENABLE_ACL'}{'on'} = '';
865$checked{'IDENT_ENABLE_ACL'}{$proxysettings{'IDENT_ENABLE_ACL'}} = "checked='checked'";
866
867$checked{'IDENT_USER_ACL'}{'positive'} = '';
868$checked{'IDENT_USER_ACL'}{'negative'} = '';
869$checked{'IDENT_USER_ACL'}{$proxysettings{'IDENT_USER_ACL'}} = "checked='checked'";
870
9fb25b1c
MT		 871$checked{'ENABLE_FILTER'}{'off'} = '';
872$checked{'ENABLE_FILTER'}{'on'} = '';
873$checked{'ENABLE_FILTER'}{$proxysettings{'ENABLE_FILTER'}} = "checked='checked'";
ed38f89d 874
9fb25b1c
MT		 875$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
876$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
877$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
ed38f89d 878
d12aede7
CS		 879$checked{'ENABLE_CLAMAV'}{'off'} = '';
880$checked{'ENABLE_CLAMAV'}{'on'} = '';
881$checked{'ENABLE_CLAMAV'}{$proxysettings{'ENABLE_CLAMAV'}} = "checked='checked'";
882
ed38f89d 883&Header::openpage($Lang::tr{'advproxy advanced web proxy configuration'}, 1, '');
ac1cfefa
MT		 884
885&Header::openbigbox('100%', 'left', '', $errormessage);
886
887if ($errormessage) {
888 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
889 print "<font class='base'>$errormessage&nbsp;</font>\n";
890 &Header::closebox();
891}
892
363fb6af
MT		 893if ($squidversion[0] =~ /^Squid\sCache:\sVersion\s/i)
894{
895 $squidversion[0] =~ s/^Squid\sCache:\sVersion//i;
896 $squidversion[0] =~ s/^\s+//g;
897 $squidversion[0] =~ s/\s+$//g;
898} else {
899 $squidversion[0] = $Lang::tr{'advproxy unknown'};
900}
901
ed38f89d
MT		 902# ===================================================================
903# Main settings
904# ===================================================================
905
906unless ($proxysettings{'NCSA_EDIT_MODE'} eq 'yes') {
907
ac1cfefa
MT		 908print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
909
ed38f89d
MT		 910&Header::openbox('100%', 'left', "$Lang::tr{'advproxy advanced web proxy'}");
911
ac1cfefa
MT		 912print <<END
913<table width='100%'>
914<tr>
ed38f89d
MT		 915 <td colspan='4' class='base'><b>$Lang::tr{'advproxy common settings'}</b></td>
916</tr>
917<tr>
918 <td width='25%' class='base'>$Lang::tr{'advproxy enabled on'} <font color="$Header::colourgreen">Green</font>:</td>
919 <td width='20%'><input type='checkbox' name='ENABLE' $checked{'ENABLE'}{'on'} /></td>
920 <td width='25%' class='base'>$Lang::tr{'advproxy proxy port'}:</td>
921 <td width='30%'><input type='text' name='PROXY_PORT' value='$proxysettings{'PROXY_PORT'}' size='5' /></td>
ac1cfefa
MT		 922</tr>
923<tr>
ed38f89d 924 <td class='base'>$Lang::tr{'advproxy transparent on'} <font color="$Header::colourgreen">Green</font>:</td>
ac1cfefa 925 <td><input type='checkbox' name='TRANSPARENT' $checked{'TRANSPARENT'}{'on'} /></td>
ed38f89d
MT		 926 <td class='base'>$Lang::tr{'advproxy visible hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
927 <td><input type='text' name='VISIBLE_HOSTNAME' value='$proxysettings{'VISIBLE_HOSTNAME'}' /></td>
ac1cfefa
MT		 928</tr>
929<tr>
930END
931;
932if ($netsettings{'BLUE_DEV'}) {
ed38f89d 933 print "<td class='base'>$Lang::tr{'advproxy enabled on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 934 print "<td><input type='checkbox' name='ENABLE_BLUE' $checked{'ENABLE_BLUE'}{'on'} /></td>";
935} else {
936 print "<td colspan='2'>&nbsp;</td>";
937}
938print <<END
fe1656d2 939 <td colspan='2'>&nbsp;</td>
ac1cfefa
MT		 940</tr>
941<tr>
942END
943;
944if ($netsettings{'BLUE_DEV'}) {
ed38f89d 945 print "<td class='base'>$Lang::tr{'advproxy transparent on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 946 print "<td><input type='checkbox' name='TRANSPARENT_BLUE' $checked{'TRANSPARENT_BLUE'}{'on'} /></td>";
947} else {
948 print "<td colspan='2'>&nbsp;</td>";
949}
950print <<END
ed38f89d
MT		 951 <td class='base'>$Lang::tr{'advproxy error language'}:</td>
952 <td class='base'>
953 <select name='ERR_LANGUAGE'>
954END
955;
363fb6af 956 foreach (<$errordir/*>) {
ed38f89d
MT		 957 if (-d) {
958 $language = substr($_,rindex($_,"/")+1);
959 print "<option value='$language' $selected{'ERR_LANGUAGE'}{$language}>$language</option>\n";
960 }
961 }
962print <<END
963 </select>
964 </td>
965</tr>
10e4f239 966<tr>
363fb6af
MT		 967 <td class='base'>$Lang::tr{'advproxy suppress version'}:</td>
968 <td><input type='checkbox' name='SUPPRESS_VERSION' $checked{'SUPPRESS_VERSION'}{'on'} /></td>
969 <td class='base'>$Lang::tr{'advproxy error design'}:</td>
970 <td class='base'><select name='ERR_DESIGN'>
0d948999 971 <option value='ipfire' $selected{'ERR_DESIGN'}{'ipfire'}>IPFire</option>
363fb6af
MT		 972 <option value='squid' $selected{'ERR_DESIGN'}{'squid'}>$Lang::tr{'advproxy standard'}</option>
973 </select></td>
10e4f239
MT		 974</tr>
975<tr>
363fb6af
MT		 976 <td class='base'>$Lang::tr{'advproxy squid version'}:</td>
977 <td class='base'>&nbsp;[<font color='$Header::colourred'> $squidversion[0] </font>]</td>
978 <td>&nbsp;</td>
979 <td>&nbsp;</td>
10e4f239 980</tr>
ed38f89d
MT		 981</table>
982<hr size='1'>
983<table width='100%'>
01212e04
CS		 984<tr><td class='base' colspan='4'><b>$Lang::tr{'advproxy redirector children'}</b></td></tr>
985<tr><td class='base' >$Lang::tr{'processes'}<input type='text' name='CHILDREN' value='$proxysettings{'CHILDREN'}' size='5' /></td>
d12aede7
CS		 986END
987;
01212e04
CS		 988my $count = `arp -a | wc -l`;
989if ( $count < 1 ){$count = 1;}
d12aede7 990if ( -e "/usr/bin/squidclamav" ) {
01212e04 991 print "<td class='base'><b>".$Lang::tr{'advproxy squidclamav'}."</b><br />";
bd027d94
CS		 992 if ( ! -e "/var/run/clamav/clamd.pid" ){
993 print "<font color='red'>clamav not running</font><br /><br />";
994 $proxysettings{'ENABLE_CLAMAV'} = 'off';
995 }
996 else {
997 print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_CLAMAV' ".$checked{'ENABLE_CLAMAV'}{'on'}." /><br />";
998 print "+ ".int(( $count**(1/3)) * 8);}
01212e04
CS		 999 print "</td>";
1000} else {
1001 print "<td></td>";
d12aede7 1002}
01212e04
CS		 1003print "<td class='base'><b>".$Lang::tr{'advproxy url filter'}."</b><br />";
1004print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_FILTER' ".$checked{'ENABLE_FILTER'}{'on'}." /><br />";
28c9dec6 1005print "+ ".int(($count**(1/3)) * 6);
01212e04
CS		 1006print "</td>";
1007print "<td class='base'><b>".$Lang::tr{'advproxy update accelerator'}."</b><br />";
1008print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_UPDXLRATOR' ".$checked{'ENABLE_UPDXLRATOR'}{'on'}." /><br />";
28c9dec6 1009print "+ ".int(($count**(1/3)) * 5);
01212e04 1010print "</td></tr>";
d12aede7 1011print <<END
9141bd34
CS		 1012</table>
1013<hr size='1'>
1014<table width='100%'>
ed38f89d
MT		 1015<tr>
1016 <td colspan='4' class='base'><b>$Lang::tr{'advproxy upstream proxy'}</b></td>
1017</tr>
1018<tr>
488d1b7c
CS		 1019 <td width='25%' class='base'>$Lang::tr{'advproxy via forwarding'}:</td>
1020 <td width='20%'><input type='checkbox' name='FORWARD_VIA' $checked{'FORWARD_VIA'}{'on'} /></td>
1021 <td width='25%' class='base'>$Lang::tr{'advproxy upstream proxy host:port'}&nbsp;<img src='/blob.gif' alt='*' /></td>
1022 <td width='30%'><input type='text' name='UPSTREAM_PROXY' value='$proxysettings{'UPSTREAM_PROXY'}' /></td>
ed38f89d
MT		 1023</tr>
1024<tr>
488d1b7c
CS		 1025 <td class='base'>$Lang::tr{'advproxy client IP forwarding'}:</td>
1026 <td><input type='checkbox' name='FORWARD_IPADDRESS' $checked{'FORWARD_IPADDRESS'}{'on'} /></td>
1027 <td class='base'>$Lang::tr{'advproxy upstream username'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1028 <td><input type='text' name='UPSTREAM_USER' value='$proxysettings{'UPSTREAM_USER'}' /></td>
ac1cfefa 1029</tr>
ac1cfefa 1030<tr>
488d1b7c
CS		 1031 <td class='base'>$Lang::tr{'advproxy username forwarding'}:</td>
1032 <td><input type='checkbox' name='FORWARD_USERNAME' $checked{'FORWARD_USERNAME'}{'on'} /></td>
1033 <td class='base'>$Lang::tr{'advproxy upstream password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1034 <td><input type='password' name='UPSTREAM_PASSWORD' value='$proxysettings{'UPSTREAM_PASSWORD'}' /></td>
ed38f89d 1035</tr>
363fb6af 1036<tr>
488d1b7c
CS		 1037 <td class='base'>$Lang::tr{'advproxy no connection auth'}:</td>
1038 <td><input type='checkbox' name='NO_CONNECTION_AUTH' $checked{'NO_CONNECTION_AUTH'}{'on'} /></td>
1039 <td>&nbsp;</td>
1040 <td>&nbsp;</td>
363fb6af 1041</tr>
ed38f89d
MT		 1042</table>
1043<hr size='1'>
1044<table width='100%'>
1045<tr>
1046 <td colspan='4' class='base'><b>$Lang::tr{'advproxy log settings'}</b></td>
1047</tr>
1048<tr>
488d1b7c
CS		 1049 <td width='25%' class='base'>$Lang::tr{'advproxy log enabled'}:</td>
1050 <td width='20%'><input type='checkbox' name='LOGGING' $checked{'LOGGING'}{'on'} /></td>
1051 <td width='25%'class='base'>$Lang::tr{'advproxy log query'}:</td>
1052 <td width='30%'><input type='checkbox' name='LOGQUERY' $checked{'LOGQUERY'}{'on'} /></td>
1053</tr>
1054<tr>
1055 <td>&nbsp;</td>
1056 <td>&nbsp;</td>
1057 <td class='base'>$Lang::tr{'advproxy log useragent'}:</td>
1058 <td><input type='checkbox' name='LOGUSERAGENT' $checked{'LOGUSERAGENT'}{'on'} /></td>
ed38f89d
MT		 1059</tr>
1060</table>
1061<hr size='1'>
1062<table width='100%'>
1063<tr>
1064 <td colspan='4'><b>$Lang::tr{'advproxy cache management'}</b></td>
1065</tr>
fe1656d2
CS		 1066<tr>
1067 <td class='base'>$Lang::tr{'proxy cachemgr'}:</td>
1068 <td><input type='checkbox' name='CACHEMGR' $checked{'CACHEMGR'}{'on'} /></td>
1069 <td class='base'>$Lang::tr{'advproxy admin mail'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1070 <td><input type='text' name='ADMIN_MAIL_ADDRESS' value='$proxysettings{'ADMIN_MAIL_ADDRESS'}' /></td>
1071</tr>
1072<tr>
1073 <td class='base'>$Lang::tr{'proxy filedescriptors'}:</td>
1074 <td><input type='text' name='FILEDESCRIPTORS' value='$proxysettings{'FILEDESCRIPTORS'}' size='5' /></td>
1075 <td class='base'>$Lang::tr{'proxy admin password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1076 <td><input type='text' name='ADMIN_PASSWORD' value='$proxysettings{'ADMIN_PASSWORD'}' /></td>
1077</tr>
ed38f89d 1078<tr>
488d1b7c 1079 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
ac1cfefa
MT		 1080</tr>
1081<tr>
ed38f89d
MT		 1082 <td class='base'>$Lang::tr{'advproxy ram cache size'}:</td>
1083 <td><input type='text' name='CACHE_MEM' value='$proxysettings{'CACHE_MEM'}' size='5' /></td>
1084 <td class='base'>$Lang::tr{'advproxy hdd cache size'}:</td>
ac1cfefa
MT		 1085 <td><input type='text' name='CACHE_SIZE' value='$proxysettings{'CACHE_SIZE'}' size='5' /></td>
1086</tr>
1087<tr>
ed38f89d 1088 <td class='base'>$Lang::tr{'advproxy min size'}:</td>
ac1cfefa 1089 <td><input type='text' name='MIN_SIZE' value='$proxysettings{'MIN_SIZE'}' size='5' /></td>
ed38f89d 1090 <td class='base'>$Lang::tr{'advproxy max size'}:</td>
ac1cfefa
MT		 1091 <td><input type='text' name='MAX_SIZE' value='$proxysettings{'MAX_SIZE'}' size='5' /></td>
1092</tr>
1093<tr>
ed38f89d 1094 <td class='base'>$Lang::tr{'advproxy number of L1 dirs'}:</td>
363fb6af
MT		 1095 <td class='base'><select name='L1_DIRS'>
1096 <option value='16' $selected{'L1_DIRS'}{'16'}>16</option>
1097 <option value='32' $selected{'L1_DIRS'}{'32'}>32</option>
1098 <option value='64' $selected{'L1_DIRS'}{'64'}>64</option>
1099 <option value='128' $selected{'L1_DIRS'}{'128'}>128</option>
1100 <option value='256' $selected{'L1_DIRS'}{'256'}>256</option>
1101 </select></td>
ed38f89d 1102 <td colspan='2' rowspan= '5' valign='top' class='base'>
363fb6af 1103 <table cellspacing='0' cellpadding='0'>
ed38f89d
MT		 1104 <tr>
1105 <!-- intentionally left empty -->
1106 </tr>
1107 <tr>
1108 <td>$Lang::tr{'advproxy no cache sites'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1109 </tr>
1110 <tr>
1111 <!-- intentionally left empty -->
1112 </tr>
1113 <tr>
1114 <!-- intentionally left empty -->
1115 </tr>
1116 <tr>
488d1b7c 1117 <td><textarea name='DST_NOCACHE' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1118END
1119;
1120
1121print $proxysettings{'DST_NOCACHE'};
1122
1123print <<END
1124</textarea></td>
1125 </tr>
1126 </table>
1127 </td>
1128</tr>
1129<tr>
363fb6af
MT		 1130 <td class='base'>$Lang::tr{'advproxy memory replacement policy'}:</td>
1131 <td class='base'><select name='MEM_POLICY'>
1132 <option value='LRU' $selected{'MEM_POLICY'}{'LRU'}>LRU</option>
1133 <option value='heap LFUDA' $selected{'MEM_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1134 <option value='heap GDSF' $selected{'MEM_POLICY'}{'heap GDSF'}>heap GDSF</option>
1135 <option value='heap LRU' $selected{'MEM_POLICY'}{'heap LRU'}>heap LRU</option>
1136 </select></td>
ed38f89d
MT		 1137</tr>
1138<tr>
363fb6af
MT		 1139 <td class='base'>$Lang::tr{'advproxy cache replacement policy'}:</td>
1140 <td class='base'><select name='CACHE_POLICY'>
1141 <option value='LRU' $selected{'CACHE_POLICY'}{'LRU'}>LRU</option>
1142 <option value='heap LFUDA' $selected{'CACHE_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1143 <option value='heap GDSF' $selected{'CACHE_POLICY'}{'heap GDSF'}>heap GDSF</option>
1144 <option value='heap LRU' $selected{'CACHE_POLICY'}{'heap LRU'}>heap LRU</option>
1145 </select></td>
ed38f89d
MT		 1146</tr>
1147<tr>
1148 <td colspan='2'>&nbsp;</td>
1149</tr>
1150<tr>
363fb6af 1151 <td class='base'>$Lang::tr{'advproxy offline mode'}:</td>
ed38f89d
MT		 1152 <td><input type='checkbox' name='OFFLINE_MODE' $checked{'OFFLINE_MODE'}{'on'} /></td>
1153</tr>
1154</table>
1155<hr size='1'>
1156<table width='100%'>
363fb6af
MT		 1157<tr>
1158 <td colspan='4'><b>$Lang::tr{'advproxy destination ports'}</b></td>
1159</tr>
1160<tr>
9141bd34 1161 <td width='25%' align=center></td> <td width='20%' align=center></td><td width='25%' align=center></td><td width='30%' align=center></td>
363fb6af
MT		 1162</tr>
1163<tr>
1164 <td colspan='2' class='base'>$Lang::tr{'advproxy standard ports'}:</td>
1165 <td colspan='2' class='base'>$Lang::tr{'advproxy ssl ports'}:</td>
1166</tr>
1167<tr>
1168 <td colspan='2'><textarea name='PORTS_SAFE' cols='32' rows='6' wrap='off'>
1169END
1170;
1171 if (!$proxysettings{'PORTS_SAFE'}) { print $def_ports_safe; } else { print $proxysettings{'PORTS_SAFE'}; }
1172
1173print <<END
1174</textarea></td>
1175 <td colspan='2'><textarea name='PORTS_SSL' cols='32' rows='6' wrap='off'>
1176END
1177;
1178 if (!$proxysettings{'PORTS_SSL'}) { print $def_ports_ssl; } else { print $proxysettings{'PORTS_SSL'}; }
1179
1180print <<END
1181</textarea></td>
1182</tr>
1183</table>
1184<hr size='1'>
1185<table width='100%'>
ed38f89d
MT		 1186<tr>
1187 <td colspan='4'><b>$Lang::tr{'advproxy network based access'}</b></td>
1188</tr>
1189<tr>
1190 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1191</tr>
1192<tr>
9fb25b1c 1193 <td colspan='4' class='base'>$Lang::tr{'advproxy allowed subnets'}:</td>
ed38f89d
MT		 1194</tr>
1195<tr>
9141bd34 1196 <td colspan='2' rowspan='4'><textarea name='SRC_SUBNETS' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1197END
1198;
1199
363fb6af
MT		 1200if (!$proxysettings{'SRC_SUBNETS'})
1201{
f09a0af5 1202 print "$green_cidr\n";
363fb6af
MT		 1203 if ($netsettings{'BLUE_DEV'})
1204 {
f09a0af5 1205 print "$blue_cidr\n";
ed38f89d 1206 }
363fb6af 1207} else { print $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 1208
1209print <<END
1210</textarea></td>
9fb25b1c
MT		 1211END
1212;
1213
1214$line = $Lang::tr{'advproxy no internal proxy on green'};
1215$line =~ s/Green/<font color="$Header::colourgreen">Green<\/font>/i;
1216print "<td class='base'>$line:</td>\n";
1217print <<END
1218 <td><input type='checkbox' name='NO_PROXY_LOCAL' $checked{'NO_PROXY_LOCAL'}{'on'} /></td>
1219</tr>
1220END
1221;
1222if ($netsettings{'BLUE_DEV'}) {
1223 $line = $Lang::tr{'advproxy no internal proxy on blue'};
1224 $line =~ s/Blue/<font color="$Header::colourblue">Blue<\/font>/i;
1225 print "<tr>\n";
1226 print "<td class='base'>$line:</td>\n";
1227 print <<END
1228 <td><input type='checkbox' name='NO_PROXY_LOCAL_BLUE' $checked{'NO_PROXY_LOCAL_BLUE'}{'on'} /></td>
1229</tr>
1230END
1231;
1232}
1233print <<END
1234<tr>
1235 <td colspan='2'>&nbsp;</td>
1236</tr>
1237<tr>
ed38f89d
MT		 1238 <td colspan='2'>&nbsp;</td>
1239</tr>
1240</table>
1241<table width='100%'>
1242<tr>
1243 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1244</tr>
1245<tr>
1246 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1247 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1248</tr>
1249<tr>
9141bd34 1250 <td colspan='2'><textarea name='SRC_UNRESTRICTED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1251END
1252;
1253
1254 print $proxysettings{'SRC_UNRESTRICTED_IP'};
1255
1256print <<END
1257</textarea></td>
9141bd34 1258 <td colspan='2'><textarea name='SRC_UNRESTRICTED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1259END
1260;
1261
1262print $proxysettings{'SRC_UNRESTRICTED_MAC'};
1263
1264print <<END
1265</textarea></td>
1266</tr>
1267</table>
1268<table width='100%'>
1269<tr>
1270 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1271</tr>
1272<tr>
1273 <td colspan='2' class='base'>$Lang::tr{'advproxy banned ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1274 <td colspan='2' class='base'>$Lang::tr{'advproxy banned mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1275</tr>
1276<tr>
9141bd34 1277 <td colspan='2'><textarea name='SRC_BANNED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1278END
1279;
1280
1281 print $proxysettings{'SRC_BANNED_IP'};
1282
1283print <<END
1284</textarea></td>
9141bd34 1285 <td colspan='2'><textarea name='SRC_BANNED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1286END
1287;
1288
1289print $proxysettings{'SRC_BANNED_MAC'};
1290
1291print <<END
1292</textarea></td>
1293</tr>
1294</table>
1295
1296<hr size='1'>
1297
1298END
1299;
1300# -------------------------------------------------------------------
1301# CRE GUI - optional
1302# -------------------------------------------------------------------
1303
1304if (-e $cre_enabled) { print <<END
1305<table width='100%'>
1306
1307<tr>
9141bd34 1308 <td colspan='4'><b>$Lang::tr{'advproxy classroom extensions'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='CLASSROOM_EXT' $checked{'CLASSROOM_EXT'}{'on'} /></td>
ed38f89d
MT		 1309</tr>
1310<tr>
1311 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1312</tr>
1313<tr>
9141bd34
CS		 1314
1315END
1316;
1317if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1318print <<END
ed38f89d
MT		 1319 <td class='base'>$Lang::tr{'advproxy supervisor password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1320 <td><input type='password' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' size='12' /></td>
1321</tr>
1322<tr>
1323 <td colspan='2' class='base'>$Lang::tr{'advproxy cre group definitions'}:</td>
1324 <td colspan='2' class='base'>$Lang::tr{'advproxy cre supervisors'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
9141bd34
CS		 1325END
1326;
1327}
1328print "</tr>";
1329if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1330print <<END
ed38f89d
MT		 1331<tr>
1332 <td colspan='2'><textarea name='CRE_GROUPS' cols='32' rows='6' wrap='off'>
1333END
1334;
1335
1336 print $proxysettings{'CRE_GROUPS'};
1337
1338print <<END
1339</textarea></td>
1340 <td colspan='2'><textarea name='CRE_SVHOSTS' cols='32' rows='6' wrap='off'>
1341END
1342;
1343 print $proxysettings{'CRE_SVHOSTS'};
1344
1345print <<END
1346</textarea></td>
1347</tr>
ed38f89d
MT		 1348END
1349;
9141bd34
CS		 1350}
1351print "</table><hr size='1'>";
1352
ed38f89d
MT		 1353} else {
1354 print <<END
1355 <input type='hidden' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' />
1356 <input type='hidden' name='CRE_GROUPS' value='$proxysettings{'CRE_GROUPS'}' />
1357 <input type='hidden' name='CRE_SVHOSTS' value='$proxysettings{'CRE_SVHOSTS'}' />
1358END
1359;
1360}
363fb6af 1361
ed38f89d
MT		 1362# -------------------------------------------------------------------
1363
28c9dec6 1364print <<END
ed38f89d
MT		 1365
1366<table width='100%'>
1367<tr>
363fb6af 1368 <td colspan='4'><b>$Lang::tr{'advproxy time restrictions'}</b></td>
ed38f89d
MT		 1369</tr>
1370<table width='100%'>
1371<tr>
1372 <td width='2%'>$Lang::tr{'advproxy access'}</td>
1373 <td width='1%'>&nbsp;</td>
1374 <td width='2%' align='center'>$Lang::tr{'advproxy monday'}</td>
1375 <td width='2%' align='center'>$Lang::tr{'advproxy tuesday'}</td>
1376 <td width='2%' align='center'>$Lang::tr{'advproxy wednesday'}</td>
1377 <td width='2%' align='center'>$Lang::tr{'advproxy thursday'}</td>
1378 <td width='2%' align='center'>$Lang::tr{'advproxy friday'}</td>
1379 <td width='2%' align='center'>$Lang::tr{'advproxy saturday'}</td>
1380 <td width='2%' align='center'>$Lang::tr{'advproxy sunday'}</td>
1381 <td width='1%'>&nbsp;&nbsp;</td>
1382 <td width='7%' colspan=3>$Lang::tr{'advproxy from'}</td>
1383 <td width='1%'>&nbsp;</td>
1384 <td width='7%' colspan=3>$Lang::tr{'advproxy to'}</td>
1385 <td>&nbsp;</td>
1386</tr>
1387<tr>
1388 <td class='base'>
1389 <select name='TIME_ACCESS_MODE'>
1390 <option value='allow' $selected{'TIME_ACCESS_MODE'}{'allow'}>$Lang::tr{'advproxy mode allow'}</option>
1391 <option value='deny' $selected{'TIME_ACCESS_MODE'}{'deny'}>$Lang::tr{'advproxy mode deny'}</option>
1392 </select>
1393 </td>
1394 <td>&nbsp;</td>
1395 <td class='base'><input type='checkbox' name='TIME_MON' $checked{'TIME_MON'}{'on'} /></td>
1396 <td class='base'><input type='checkbox' name='TIME_TUE' $checked{'TIME_TUE'}{'on'} /></td>
1397 <td class='base'><input type='checkbox' name='TIME_WED' $checked{'TIME_WED'}{'on'} /></td>
1398 <td class='base'><input type='checkbox' name='TIME_THU' $checked{'TIME_THU'}{'on'} /></td>
1399 <td class='base'><input type='checkbox' name='TIME_FRI' $checked{'TIME_FRI'}{'on'} /></td>
1400 <td class='base'><input type='checkbox' name='TIME_SAT' $checked{'TIME_SAT'}{'on'} /></td>
1401 <td class='base'><input type='checkbox' name='TIME_SUN' $checked{'TIME_SUN'}{'on'} /></td>
1402 <td>&nbsp;</td>
1403 <td class='base'>
1404 <select name='TIME_FROM_HOUR'>
1405END
1406;
1407for ($i=0;$i<=24;$i++) {
1408 $_ = sprintf("%02s",$i);
1409 print "<option $selected{'TIME_FROM_HOUR'}{$_}>$_</option>\n";
1410}
1411print <<END
1412 </select>
1413 </td>
1414 <td>:</td>
1415 <td class='base'>
1416 <select name='TIME_FROM_MINUTE'>
1417END
1418;
1419for ($i=0;$i<=45;$i+=15) {
1420 $_ = sprintf("%02s",$i);
1421 print "<option $selected{'TIME_FROM_MINUTE'}{$_}>$_</option>\n";
1422}
1423print <<END
1424 </select>
1425 <td> - </td>
1426 </td>
1427 <td class='base'>
1428 <select name='TIME_TO_HOUR'>
1429END
1430;
1431for ($i=0;$i<=24;$i++) {
1432 $_ = sprintf("%02s",$i);
1433 print "<option $selected{'TIME_TO_HOUR'}{$_}>$_</option>\n";
1434}
1435print <<END
1436 </select>
1437 </td>
1438 <td>:</td>
1439 <td class='base'>
1440 <select name='TIME_TO_MINUTE'>
1441END
1442;
1443for ($i=0;$i<=45;$i+=15) {
1444 $_ = sprintf("%02s",$i);
1445 print "<option $selected{'TIME_TO_MINUTE'}{$_}>$_</option>\n";
1446}
1447print <<END
1448 </select>
1449 </td>
1450</tr>
1451</table>
1452<hr size='1'>
1453<table width='100%'>
1454<tr>
1455 <td colspan='4'><b>$Lang::tr{'advproxy transfer limits'}</b></td>
ac1cfefa
MT		 1456</tr>
1457<tr>
ed38f89d
MT		 1458 <td width='25%' class='base'>$Lang::tr{'advproxy max download size'}:</td>
1459 <td width='20%'><input type='text' name='MAX_INCOMING_SIZE' value='$proxysettings{'MAX_INCOMING_SIZE'}' size='5' /></td>
1460 <td width='25%' class='base'>$Lang::tr{'advproxy max upload size'}:</td>
1461 <td width='30%'><input type='text' name='MAX_OUTGOING_SIZE' value='$proxysettings{'MAX_OUTGOING_SIZE'}' size='5' /></td>
ac1cfefa
MT		 1462</tr>
1463</table>
ed38f89d 1464<hr size='1'>
ac1cfefa 1465<table width='100%'>
ac1cfefa 1466<tr>
ed38f89d
MT		 1467 <td colspan='4'><b>$Lang::tr{'advproxy download throttling'}</b></td>
1468</tr>
1469<tr>
1470 <td width='25%' class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourgreen">Green</font>:</td>
1471 <td width='20%' class='base'>
1472 <select name='THROTTLING_GREEN_TOTAL'>
1473END
1474;
1475
1476foreach (@throttle_limits) {
1477 print "\t<option value='$_' $selected{'THROTTLING_GREEN_TOTAL'}{$_}>$_ kBit/s</option>\n";
1478}
1479
1480print <<END
1481 <option value='0' $selected{'THROTTLING_GREEN_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1482 </select>
1483 </td>
1484 <td width='25%' class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourgreen">Green</font>:</td>
1485 <td width='30%' class='base'>
1486 <select name='THROTTLING_GREEN_HOST'>
1487END
1488;
1489
1490foreach (@throttle_limits) {
1491 print "\t<option value='$_' $selected{'THROTTLING_GREEN_HOST'}{$_}>$_ kBit/s</option>\n";
1492}
1493
1494print <<END
1495 <option value='0' $selected{'THROTTLING_GREEN_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1496 </select>
1497 </td>
1498</tr>
1499END
1500;
1501
1502if ($netsettings{'BLUE_DEV'}) {
1503 print <<END
1504<tr>
1505 <td class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourblue">Blue</font>:</td>
1506 <td class='base'>
1507 <select name='THROTTLING_BLUE_TOTAL'>
1508END
1509;
1510
1511foreach (@throttle_limits) {
1512 print "\t<option value='$_' $selected{'THROTTLING_BLUE_TOTAL'}{$_}>$_ kBit/s</option>\n";
1513}
1514
1515print <<END
1516 <option value='0' $selected{'THROTTLING_BLUE_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1517 </select>
1518 </td>
1519 <td class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourblue">Blue</font>:</td>
1520 <td class='base'>
1521 <select name='THROTTLING_BLUE_HOST'>
1522END
1523;
1524
1525foreach (@throttle_limits) {
1526 print "\t<option value='$_' $selected{'THROTTLING_BLUE_HOST'}{$_}>$_ kBit/s</option>\n";
1527}
1528
1529print <<END
1530 <option value='0' $selected{'THROTTLING_BLUE_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1531 </select>
ac1cfefa 1532 </td>
ac1cfefa 1533</tr>
ed38f89d
MT		 1534END
1535;
1536}
ac1cfefa 1537
ed38f89d
MT		 1538print <<END
1539</table>
1540<table width='100%'>
1541<tr>
1542 <td colspan='4'><i>$Lang::tr{'advproxy content based throttling'}:</i></td>
1543</tr>
1544<tr>
1545 <td width='15%' class='base'>$Lang::tr{'advproxy throttle binary'}:</td>
1546 <td width='10%'><input type='checkbox' name='THROTTLE_BINARY' $checked{'THROTTLE_BINARY'}{'on'} /></td>
1547 <td width='15%' class='base'>$Lang::tr{'advproxy throttle dskimg'}:</td>
1548 <td width='10%'><input type='checkbox' name='THROTTLE_DSKIMG' $checked{'THROTTLE_DSKIMG'}{'on'} /></td>
1549 <td width='15%' class='base'>$Lang::tr{'advproxy throttle mmedia'}:</td>
1550 <td width='10%'><input type='checkbox' name='THROTTLE_MMEDIA' $checked{'THROTTLE_MMEDIA'}{'on'} /></td>
363fb6af
MT		 1551 <td width='15%'>&nbsp;</td>
1552 <td width='10%'>&nbsp;</td>
28c9dec6 1553</tr>
ac1cfefa 1554</table>
ed38f89d
MT		 1555<hr size='1'>
1556<table width='100%'>
1557<tr>
9141bd34 1558 <td colspan='4'><b>$Lang::tr{'advproxy MIME filter'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='ENABLE_MIME_FILTER' $checked{'ENABLE_MIME_FILTER'}{'on'} /></td>
ed38f89d 1559</tr>
9141bd34
CS		 1560END
1561;
1562if ( $proxysettings{'ENABLE_MIME_FILTER'} eq 'on' ){
1563print <<END
ed38f89d
MT		 1564<tr>
1565 <td colspan='2' class='base'>$Lang::tr{'advproxy MIME block types'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
363fb6af
MT		 1566 <td>&nbsp;</td>
1567 <td>&nbsp;</td>
ed38f89d
MT		 1568</tr>
1569<tr>
1570 <td colspan='2'><textarea name='MIME_TYPES' cols='32' rows='6' wrap='off'>
ac1cfefa
MT		 1571END
1572;
ac1cfefa 1573
ed38f89d 1574print $proxysettings{'MIME_TYPES'};
ac1cfefa 1575
ed38f89d
MT		 1576print <<END
1577</textarea></td>
363fb6af
MT		 1578 <td>&nbsp;</td>
1579 <td>&nbsp;</td>
ed38f89d 1580</tr>
9141bd34
CS		 1581END
1582;
1583}
1584print <<END
ed38f89d 1585</table>
9141bd34 1586
ed38f89d
MT		 1587<hr size='1'>
1588<table width='100%'>
1589<tr>
9141bd34 1590 <td colspan='4'><b>$Lang::tr{'advproxy web browser'}</b> $Lang::tr{'advproxy UA enable filter'}:<input type='checkbox' name='ENABLE_BROWSER_CHECK' $checked{'ENABLE_BROWSER_CHECK'}{'on'} /></td>
ed38f89d 1591</tr>
9141bd34
CS		 1592END
1593;
1594if ( $proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on' ){
1595print <<END
ed38f89d
MT		 1596<tr>
1597 <td colspan='4'><i>
1598END
1599;
1600if (@useragentlist) { print "$Lang::tr{'advproxy allowed web browsers'}:"; } else { print "$Lang::tr{'advproxy no clients defined'}"; }
1601print <<END
1602</i></td>
1603</tr>
1604</table>
1605<table width='100%'>
1606END
1607;
ac1cfefa 1608
ed38f89d
MT		 1609for ($n=0; $n<=@useragentlist; $n = $n + $i) {
1610 for ($i=0; $i<=3; $i++) {
1611 if ($i eq 0) { print "<tr>\n"; }
1612 if (($n+$i) < @useragentlist) {
1613 @useragent = split(/,/,@useragentlist[$n+$i]);
4e17adad
CS		 1614 print "<td width='15%'>$useragent[1]:<\/td>\n";
1615 print "<td width='10%'><input type='checkbox' name='UA_$useragent[0]' $checked{'UA_'.$useragent[0]}{'on'} /></td>\n";
ed38f89d
MT		 1616 }
1617 if ($i eq 3) { print "<\/tr>\n"; }
1618 }
1619}
9141bd34 1620}
ed38f89d
MT		 1621print <<END
1622</table>
1623<hr size='1'>
1624<table width='100%'>
1625<tr>
1626 <td><b>$Lang::tr{'advproxy privacy'}</b></td>
1627</tr>
1628<tr>
1629 <td class='base'>$Lang::tr{'advproxy fake useragent'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
ed38f89d
MT		 1630 <td class='base'>$Lang::tr{'advproxy fake referer'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1631</tr>
1632<tr>
9141bd34 1633 <td><input type='text' name='FAKE_USERAGENT' value='$proxysettings{'FAKE_USERAGENT'}' size='56' /></td>
ed38f89d
MT		 1634 <td><input type='text' name='FAKE_REFERER' value='$proxysettings{'FAKE_REFERER'}' size='56' /></td>
1635</tr>
1636</table>
1637<hr size='1'>
1638END
1639;
1640
9fb25b1c 1641print <<END
ed38f89d
MT		 1642<table width='100%'>
1643<tr>
363fb6af 1644 <td colspan='5'><b>$Lang::tr{'advproxy AUTH method'}</b></td>
ed38f89d
MT		 1645</tr>
1646<tr>
1647 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='none' $checked{'AUTH_METHOD'}{'none'} />$Lang::tr{'advproxy AUTH method none'}</td>
1648 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ncsa' $checked{'AUTH_METHOD'}{'ncsa'} />$Lang::tr{'advproxy AUTH method ncsa'}</td>
1649 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ident' $checked{'AUTH_METHOD'}{'ident'} />$Lang::tr{'advproxy AUTH method ident'}</td>
1650 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ldap' $checked{'AUTH_METHOD'}{'ldap'} />$Lang::tr{'advproxy AUTH method ldap'}</td>
1651 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ntlm' $checked{'AUTH_METHOD'}{'ntlm'} />$Lang::tr{'advproxy AUTH method ntlm'}</td>
1652 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='radius' $checked{'AUTH_METHOD'}{'radius'} />$Lang::tr{'advproxy AUTH method radius'}</td>
1653</tr>
1654</table>
1655END
1656;
1657
1658if (!($proxysettings{'AUTH_METHOD'} eq 'none')) { if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) { print <<END
1659<hr size='1'>
1660<table width='100%'>
1661<tr>
363fb6af 1662 <td colspan='4'><b>$Lang::tr{'advproxy AUTH global settings'}</b></td>
ed38f89d
MT		 1663</tr>
1664<tr>
1665 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1666</tr>
1667<tr>
1668 <td class='base'>$Lang::tr{'advproxy AUTH number of auth processes'}:</td>
1669 <td><input type='text' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}' size='5' /></td>
1670 <td colspan='2' rowspan= '6' valign='top' class='base'>
1671 <table cellpadding='0' cellspacing='0'>
1672 <tr>
1673 <td class='base'>$Lang::tr{'advproxy AUTH realm'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1674 </tr>
1675 <tr>
1676 <!-- intentionally left empty -->
1677 </tr>
1678 <tr>
1679 <!-- intentionally left empty -->
1680 </tr>
1681 <tr>
1682 <td><input type='text' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}' size='40' /></td>
1683 </tr>
1684 <tr>
1685 <!-- intentionally left empty -->
1686 </tr>
1687 <tr>
1688 <!-- intentionally left empty -->
1689 </tr>
1690 <tr>
1691 <td>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1692 </tr>
1693 <tr>
1694 <!-- intentionally left empty -->
1695 </tr>
1696 <tr>
1697 <!-- intentionally left empty -->
1698 </tr>
1699 <tr>
1700 <td><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1701END
1702;
1703
1704print $proxysettings{'DST_NOAUTH'};
1705
1706print <<END
1707</textarea></td>
1708 </tr>
1709 </table>
1710 </td>
1711</tr>
1712<tr>
1713 <td class='base'>$Lang::tr{'advproxy AUTH auth cache TTL'}:</td>
1714 <td><input type='text' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1715</tr>
1716<tr>
1717 <td class='base'>$Lang::tr{'advproxy AUTH limit of IP addresses'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1718 <td><input type='text' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1719</tr>
1720<tr>
1721 <td class='base'>$Lang::tr{'advproxy AUTH user IP cache TTL'}:</td>
1722 <td><input type='text' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1723</tr>
1724<tr>
363fb6af
MT		 1725 <td class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1726 <td><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1727</tr>
1728<tr>
1729 <td colspan='2'>&nbsp;</td>
1730</tr>
1731</table>
1732END
1733;
1734}
1735
1736# ===================================================================
1737# NCSA auth settings
1738# ===================================================================
1739
1740if ($proxysettings{'AUTH_METHOD'} eq 'ncsa') {
1741print <<END
1742<hr size='1'>
1743<table width='100%'>
1744<tr>
1745 <td colspan='4'><b>$Lang::tr{'advproxy NCSA auth'}</b></td>
1746</tr>
1747<tr>
1748 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA min password length'}:</td>
1749 <td width='20%'><input type='text' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}' size='5' /></td>
1750 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA redirector bypass'} \'$Lang::tr{'advproxy NCSA grp extended'}\':</td>
363fb6af 1751 <td width='20%'><input type='checkbox' name='NCSA_BYPASS_REDIR' $checked{'NCSA_BYPASS_REDIR'}{'on'} /></td>
ed38f89d
MT		 1752</tr>
1753<tr>
1754 <td colspan='2'><br>&nbsp;<input type='submit' name='ACTION' value='$Lang::tr{'advproxy NCSA user management'}'></td>
1755 <td>&nbsp;</td>
1756 <td>&nbsp;</td>
1757</tr>
1758</table>
1759END
1760; }
1761
1762# ===================================================================
1763# IDENTD auth settings
1764# ===================================================================
1765
1766if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
1767print <<END
1768<hr size ='1'>
1769<table width='100%'>
1770<tr>
1771 <td colspan='4'><b>$Lang::tr{'advproxy IDENT identd settings'}</b></td>
1772</tr>
1773<tr>
1774 <td width='25%' class='base'>$Lang::tr{'advproxy IDENT required'}:</td>
363fb6af
MT		 1775 <td width='20%'><input type='checkbox' name='IDENT_REQUIRED' $checked{'IDENT_REQUIRED'}{'on'} /></td>
1776 <td width='25%' class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1777 <td width='30%'><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1778</tr>
1779<tr>
1780 <td class='base'>$Lang::tr{'advproxy IDENT timeout'}:</td>
1781 <td><input type='text' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}' size='5' /></td>
1782 <td>&nbsp;</td>
1783 <td>&nbsp;</td>
1784</tr>
1785<tr>
1786 <td colspan='2' class='base'>$Lang::tr{'advproxy IDENT aware hosts'}:</td>
1787 <td colspan='2' class='base'>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1788</tr>
1789<tr>
1790 <td colspan='2'><textarea name='IDENT_HOSTS' cols='32' rows='6' wrap='off'>
1791END
1792;
1793if (!$proxysettings{'IDENT_HOSTS'}) {
f09a0af5 1794 print "$green_cidr\n";
ed38f89d 1795 if ($netsettings{'BLUE_DEV'}) {
f09a0af5 1796 print "$blue_cidr\n";
ed38f89d
MT		 1797 }
1798} else {
1799 print $proxysettings{'IDENT_HOSTS'};
1800}
1801
1802print <<END
1803</textarea></td>
1804 <td colspan='2'><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1805END
1806;
1807
1808print $proxysettings{'DST_NOAUTH'};
1809
1810print <<END
1811</textarea></td>
1812</tr>
1813</table>
1814<hr size ='1'>
1815<table width='100%'>
1816<tr>
1817 <td colspan='4'><b>$Lang::tr{'advproxy IDENT user based access restrictions'}</b></td>
1818</tr>
1819<tr>
1820 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1821 <td width='20%'><input type='checkbox' name='IDENT_ENABLE_ACL' $checked{'IDENT_ENABLE_ACL'}{'on'} /></td>
1822 <td width='25%'>&nbsp;</td>
1823 <td width='30%'>&nbsp;</td>
1824</tr>
1825<tr>
1826 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='positive' $checked{'IDENT_USER_ACL'}{'positive'} />
1827 $Lang::tr{'advproxy IDENT use positive access list'}:</td>
1828 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='negative' $checked{'IDENT_USER_ACL'}{'negative'} />
1829 $Lang::tr{'advproxy IDENT use negative access list'}:</td>
1830</tr>
1831<tr>
1832 <td colspan='2'>$Lang::tr{'advproxy IDENT authorized users'}</td>
1833 <td colspan='2'>$Lang::tr{'advproxy IDENT unauthorized users'}</td>
1834</tr>
1835<tr>
363fb6af 1836 <td colspan='2'><textarea name='IDENT_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1837END
1838; }
1839
1840if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_ALLOW_USERS'}; }
1841
1842if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1843</textarea></td>
363fb6af 1844 <td colspan='2'><textarea name='IDENT_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1845END
1846; }
1847
1848if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_DENY_USERS'}; }
1849
1850if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1851</textarea></td>
1852</tr>
1853</table>
1854END
1855; }
1856
1857# ===================================================================
1858# NTLM auth settings
1859# ===================================================================
1860
1861if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') {
1862print <<END
1863<hr size='1'>
1864<table width='100%'>
1865<tr>
1866 <td colspan='6'><b>$Lang::tr{'advproxy NTLM domain settings'}</b></td>
1867</tr>
1868<tr>
1869 <td class='base'>$Lang::tr{'advproxy NTLM domain'}:</td>
1870 <td><input type='text' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}' size='15' /></td>
1871 <td class='base'>$Lang::tr{'advproxy NTLM PDC hostname'}:</td>
1872 <td><input type='text' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}' size='14' /></td>
1873 <td class='base'>$Lang::tr{'advproxy NTLM BDC hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1874 <td><input type='text' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}' size='14' /></td>
1875</tr>
1876</table>
1877<hr size ='1'>
1878<table width='100%'>
1879<tr>
1880 <td colspan='3'><b>$Lang::tr{'advproxy NTLM auth mode'}</b></td>
1881</tr>
1882<tr>
1883 <td width='25%' class='base' width='25%'>$Lang::tr{'advproxy NTLM use integrated auth'}:</td>
1884 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_INT_AUTH' $checked{'NTLM_ENABLE_INT_AUTH'}{'on'} /></td>
1885 <td>&nbsp;</td>
1886</tr>
1887</table>
1888<hr size ='1'>
1889<table width='100%'>
1890<tr>
1891 <td colspan='4'><b>$Lang::tr{'advproxy NTLM user based access restrictions'}</b></td>
1892</tr>
1893<tr>
1894 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1895 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_ACL' $checked{'NTLM_ENABLE_ACL'}{'on'} /></td>
1896 <td width='25%'>&nbsp;</td>
1897 <td width='30%'>&nbsp;</td>
1898</tr>
1899<tr>
1900 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='positive' $checked{'NTLM_USER_ACL'}{'positive'} />
1901 $Lang::tr{'advproxy NTLM use positive access list'}:</td>
1902 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='negative' $checked{'NTLM_USER_ACL'}{'negative'} />
1903 $Lang::tr{'advproxy NTLM use negative access list'}:</td>
1904</tr>
1905<tr>
1906 <td colspan='2'>$Lang::tr{'advproxy NTLM authorized users'}</td>
1907 <td colspan='2'>$Lang::tr{'advproxy NTLM unauthorized users'}</td>
1908</tr>
1909<tr>
363fb6af 1910 <td colspan='2'><textarea name='NTLM_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1911END
1912; }
1913
1914if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_ALLOW_USERS'}; }
1915
1916if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1917</textarea></td>
363fb6af 1918 <td colspan='2'><textarea name='NTLM_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1919END
1920; }
1921
1922if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_DENY_USERS'}; }
1923
1924if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1925</textarea></td>
1926</tr>
1927</table>
1928END
1929; }
1930
1931# ===================================================================
1932# LDAP auth settings
1933# ===================================================================
1934
1935if ($proxysettings{'AUTH_METHOD'} eq 'ldap') {
1936print <<END
1937<hr size='1'>
1938<table width='100%'>
1939<tr>
1940 <td colspan='4'><b>$Lang::tr{'advproxy LDAP common settings'}</b></td>
1941</tr>
1942<tr>
1943 <td class='base'>$Lang::tr{'advproxy LDAP basedn'}:</td>
1944 <td><input type='text' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}' size='37' /></td>
1945 <td class='base'>$Lang::tr{'advproxy LDAP type'}:</td>
1946 <td class='base'><select name='LDAP_TYPE'>
1947 <option value='ADS' $selected{'LDAP_TYPE'}{'ADS'}>$Lang::tr{'advproxy LDAP ADS'}</option>
1948 <option value='NDS' $selected{'LDAP_TYPE'}{'NDS'}>$Lang::tr{'advproxy LDAP NDS'}</option>
1949 <option value='V2' $selected{'LDAP_TYPE'}{'V2'}>$Lang::tr{'advproxy LDAP V2'}</option>
1950 <option value='V3' $selected{'LDAP_TYPE'}{'V3'}>$Lang::tr{'advproxy LDAP V3'}</option>
1951 </select></td>
1952</tr>
1953<tr>
1954 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP server'}:</td>
1955 <td width='40%'><input type='text' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}' size='14' /></td>
1956 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP port'}:</td>
1957 <td><input type='text' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}' size='3' /></td>
1958</tr>
1959</table>
1960<hr size ='1'>
1961<table width='100%'>
1962<tr>
1963 <td colspan='4'><b>$Lang::tr{'advproxy LDAP binddn settings'}</b></td>
1964</tr>
1965<tr>
1966 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn username'}:</td>
1967 <td width='40%'><input type='text' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}' size='37' /></td>
1968 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn password'}:</td>
1969 <td><input type='password' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}' size='14' /></td>
1970</tr>
1971</table>
1972<hr size ='1'>
1973<table width='100%'>
1974<tr>
1975 <td colspan='4'><b>$Lang::tr{'advproxy LDAP group access control'}</b></td>
1976</tr>
1977<tr>
1978 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP group required'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1979 <td width='40%'><input type='text' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}' size='37' /></td>
1980 <td>&nbsp;</td>
1981 <td>&nbsp;</td>
1982</tr>
1983</table>
1984END
1985; }
1986
1987# ===================================================================
1988# RADIUS auth settings
1989# ===================================================================
1990
1991if ($proxysettings{'AUTH_METHOD'} eq 'radius') {
1992print <<END
1993<hr size='1'>
1994<table width='100%'>
1995<tr>
1996 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS radius settings'}</b></td>
1997</tr>
1998<tr>
1999 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS server'}:</td>
2000 <td width='20%'><input type='text' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}' size='14' /></td>
2001 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS port'}:</td>
2002 <td width='30%'><input type='text' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}' size='3' /></td>
2003</tr>
2004<tr>
2005 <td class='base'>$Lang::tr{'advproxy RADIUS identifier'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
2006 <td><input type='text' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}' size='14' /></td>
2007 <td class='base'>$Lang::tr{'advproxy RADIUS secret'}:</td>
2008 <td><input type='password' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}' size='14' /></td>
2009</tr>
2010</table>
2011<hr size ='1'>
2012<table width='100%'>
2013<tr>
2014 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS user based access restrictions'}</b></td>
2015</tr>
2016<tr>
2017 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
2018 <td width='20%'><input type='checkbox' name='RADIUS_ENABLE_ACL' $checked{'RADIUS_ENABLE_ACL'}{'on'} /></td>
2019 <td width='25%'>&nbsp;</td>
2020 <td width='30%'>&nbsp;</td>
2021</tr>
2022<tr>
2023 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='positive' $checked{'RADIUS_USER_ACL'}{'positive'} />
2024 $Lang::tr{'advproxy RADIUS use positive access list'}:</td>
2025 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='negative' $checked{'RADIUS_USER_ACL'}{'negative'} />
2026 $Lang::tr{'advproxy RADIUS use negative access list'}:</td>
2027</tr>
2028<tr>
2029 <td colspan='2'>$Lang::tr{'advproxy RADIUS authorized users'}</td>
2030 <td colspan='2'>$Lang::tr{'advproxy RADIUS unauthorized users'}</td>
2031</tr>
2032<tr>
363fb6af 2033 <td colspan='2'><textarea name='RADIUS_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 2034END
2035; }
2036
2037if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_ALLOW_USERS'}; }
2038
2039if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
2040</textarea></td>
363fb6af 2041 <td colspan='2'><textarea name='RADIUS_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 2042END
2043; }
2044
2045if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_DENY_USERS'}; }
2046
2047if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
2048</textarea></td>
2049</tr>
2050</table>
2051END
2052; }
2053
2054# ===================================================================
2055
2056}
2057
2058print "<table>\n";
2059
2060if ($proxysettings{'AUTH_METHOD'} eq 'none') {
2061print <<END
2062<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
2063<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
2064<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
2065<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
2066<td><input type='hidden' name='AUTH_ALWAYS_REQUIRED' value='$proxysettings{'AUTH_ALWAYS_REQUIRED'}'></td>
2067<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
2068<td><input type='hidden' name='DST_NOAUTH' value='$proxysettings{'DST_NOAUTH'}'></td>
2069END
2070; }
2071
2072if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
2073print <<END
2074<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
2075<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
2076<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
2077<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
2078<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
2079END
2080; }
2081
2082if (!($proxysettings{'AUTH_METHOD'} eq 'ncsa')) {
2083print <<END
2084<td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2085<td><input type='hidden' name='NCSA_BYPASS_REDIR' value='$proxysettings{'NCSA_BYPASS_REDIR'}'></td>
2086END
2087; }
2088
2089if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) {
2090print <<END
2091<td><input type='hidden' name='IDENT_REQUIRED' value='$proxysettings{'IDENT_REQUIRED'}'></td>
2092<td><input type='hidden' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}'></td>
2093<td><input type='hidden' name='IDENT_HOSTS' value='$proxysettings{'IDENT_HOSTS'}'></td>
2094<td><input type='hidden' name='IDENT_ENABLE_ACL' value='$proxysettings{'IDENT_ENABLE_ACL'}'></td>
2095<td><input type='hidden' name='IDENT_USER_ACL' value='$proxysettings{'IDENT_USER_ACL'}'></td>
2096<td><input type='hidden' name='IDENT_ALLOW_USERS' value='$proxysettings{'IDENT_ALLOW_USERS'}'></td>
2097<td><input type='hidden' name='IDENT_DENY_USERS' value='$proxysettings{'IDENT_DENY_USERS'}'></td>
2098END
2099; }
2100
2101if (!($proxysettings{'AUTH_METHOD'} eq 'ldap')) {
2102print <<END
2103<td><input type='hidden' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}'></td>
2104<td><input type='hidden' name='LDAP_TYPE' value='$proxysettings{'LDAP_TYPE'}'></td>
2105<td><input type='hidden' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}'></td>
2106<td><input type='hidden' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}'></td>
2107<td><input type='hidden' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}'></td>
2108<td><input type='hidden' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}'></td>
2109<td><input type='hidden' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}'></td>
2110END
2111; }
2112
2113if (!($proxysettings{'AUTH_METHOD'} eq 'ntlm')) {
2114print <<END
2115<td><input type='hidden' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}'></td>
2116<td><input type='hidden' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}'></td>
2117<td><input type='hidden' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}'></td>
2118<td><input type='hidden' name='NTLM_ENABLE_INT_AUTH' value='$proxysettings{'NTLM_ENABLE_INT_AUTH'}'></td>
2119<td><input type='hidden' name='NTLM_ENABLE_ACL' value='$proxysettings{'NTLM_ENABLE_ACL'}'></td>
2120<td><input type='hidden' name='NTLM_USER_ACL' value='$proxysettings{'NTLM_USER_ACL'}'></td>
2121<td><input type='hidden' name='NTLM_ALLOW_USERS' value='$proxysettings{'NTLM_ALLOW_USERS'}'></td>
2122<td><input type='hidden' name='NTLM_DENY_USERS' value='$proxysettings{'NTLM_DENY_USERS'}'></td>
2123END
2124; }
2125
2126if (!($proxysettings{'AUTH_METHOD'} eq 'radius')) {
2127print <<END
2128<td><input type='hidden' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}'></td>
2129<td><input type='hidden' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}'></td>
2130<td><input type='hidden' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}'></td>
2131<td><input type='hidden' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}'></td>
2132<td><input type='hidden' name='RADIUS_ENABLE_ACL' value='$proxysettings{'RADIUS_ENABLE_ACL'}'></td>
2133<td><input type='hidden' name='RADIUS_USER_ACL' value='$proxysettings{'RADIUS_USER_ACL'}'></td>
2134<td><input type='hidden' name='RADIUS_ALLOW_USERS' value='$proxysettings{'RADIUS_ALLOW_USERS'}'></td>
2135<td><input type='hidden' name='RADIUS_DENY_USERS' value='$proxysettings{'RADIUS_DENY_USERS'}'></td>
2136END
2137; }
2138
2139print "</table>\n";
2140
2141print <<END
2142<hr size='1'>
2143END
2144;
2145
2146print <<END
2147<table width='100%'>
2148<tr>
363fb6af 2149 <td>&nbsp;</td>
ed38f89d 2150 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
fe1656d2 2151 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'proxy reconfigure'}' /></td>
ed38f89d 2152 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy save and restart'}' /></td>
363fb6af
MT		 2153 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy clear cache'}' /></td>
2154 <td>&nbsp;</td>
ed38f89d
MT		 2155</tr>
2156
2157</table>
2158<br />
2159<table width='100%'>
2160<tr>
2161 <td><img src='/blob.gif' align='top' alt='*' />&nbsp;
2162 <font class='base'>$Lang::tr{'this field may be blank'}</font>
2163 </td>
363fb6af 2164 <td align='right'>&nbsp;</td>
ed38f89d
MT		 2165</tr>
2166</table>
2167</form>
2168END
2169;
2170
2171&Header::closebox();
2172
2173} else {
2174
2175# ===================================================================
2176# NCSA user management
2177# ===================================================================
2178
2179&Header::openbox('100%', 'left', "$Lang::tr{'advproxy NCSA auth'}");
2180print <<END
2181<form method='post' action='$ENV{'SCRIPT_NAME'}'>
2182<table width='100%'>
2183<tr>
363fb6af 2184 <td colspan='4'><b>$Lang::tr{'advproxy NCSA user management'}</b></td>
ed38f89d
MT		 2185</tr>
2186<tr>
2187 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA username'}:</td>
2188 <td width='25%'><input type='text' name='NCSA_USERNAME' value='$proxysettings{'NCSA_USERNAME'}' size='12'
2189END
2190;
2191 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) { print " readonly "; }
2192 print <<END
2193 /></td>
2194 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA group'}:</td>
2195 <td class='base'>
2196 <select name='NCSA_GROUP'>
2197 <option value='standard' $selected{'NCSA_GROUP'}{'standard'}>$Lang::tr{'advproxy NCSA grp standard'}</option>
2198 <option value='extended' $selected{'NCSA_GROUP'}{'extended'}>$Lang::tr{'advproxy NCSA grp extended'}</option>
2199 <option value='disabled' $selected{'NCSA_GROUP'}{'disabled'}>$Lang::tr{'advproxy NCSA grp disabled'}</option>
2200 </select>
2201 </td>
2202
2203</tr>
2204<tr>
2205 <td class='base'>$Lang::tr{'advproxy NCSA password'}:</td>
2206 <td><input type='password' name='NCSA_PASS' value='$proxysettings{'NCSA_PASS'}' size='14' /></td>
2207 <td class='base'>$Lang::tr{'advproxy NCSA password confirm'}:</td>
2208 <td><input type='password' name='NCSA_PASS_CONFIRM' value='$proxysettings{'NCSA_PASS_CONFIRM'}' size='14' /></td>
2209</tr>
2210</table>
2211<br>
2212<table>
2213<tr>
2214 <td>&nbsp;</td>
2215 <td><input type='submit' name='SUBMIT' value='$ncsa_buttontext' /></td>
2216 <td><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /></td>
2217 <td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2218END
2219;
2220 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) {
2221 print "<td><input type='reset' name='ACTION' value='$Lang::tr{'advproxy reset'}' /></td>\n";
2222 }
2223
2224print <<END
2225 <td>&nbsp;</td>
2226 <td>&nbsp;</td>
2227 <td><input type='button' name='return2main' value='$Lang::tr{'advproxy back to main page'}' onClick='self.location.href="$ENV{'SCRIPT_NAME'}"'></td>
2228</tr>
2229</table>
2230</form>
2231<hr size='1'>
2232<table width='100%'>
2233<tr>
363fb6af 2234 <td><b>$Lang::tr{'advproxy NCSA user accounts'}:</b></td>
ed38f89d
MT		 2235</tr>
2236</table>
2237<table width='100%' align='center'>
2238END
2239;
2240
2241if (-e $extgrp)
2242{
2243 open(FILE, $extgrp); @grouplist = <FILE>; close(FILE);
2244 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":extended"); }
2245}
2246if (-e $stdgrp)
2247{
2248 open(FILE, $stdgrp); @grouplist = <FILE>; close(FILE);
2249 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":standard"); }
2250}
2251if (-e $disgrp)
2252{
2253 open(FILE, $disgrp); @grouplist = <FILE>; close(FILE);
2254 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":disabled"); }
2255}
2256
2257@userlist = sort(@userlist);
2258
2259# If the password file contains entries, print entries and action icons
2260
488d1b7c 2261if ( ! -z "$userdb" ) {
ed38f89d
MT		 2262 print <<END
2263 <tr>
2264 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA username'}</i></b></td>
2265 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA group membership'}</i></b></td>
2266 <td class='boldbase' colspan='2' align='center'>&nbsp;</td>
2267 </tr>
2268END
2269;
2270 $id = 0;
2271 foreach $line (@userlist)
2272 {
2273 $id++;
2274 chomp($line);
2275 @temp = split(/:/,$line);
2276 if($proxysettings{'ACTION'} eq $Lang::tr{'edit'} && $proxysettings{'ID'} eq $line) {
2277 print "<tr bgcolor='$Header::colouryellow'>\n"; }
2278 elsif ($id % 2) {
4e17adad 2279 print "<tr bgcolor='$color{'color20'}'>\n"; }
ed38f89d 2280 else {
4e17adad 2281 print "<tr bgcolor='$color{'color22'}'>\n"; }
ed38f89d
MT		 2282
2283 print <<END
2284 <td align='center'>$temp[0]</td>
2285 <td align='center'>
2286END
2287;
2288 if ($temp[1] eq 'standard') {
2289 print $Lang::tr{'advproxy NCSA grp standard'};
2290 } elsif ($temp[1] eq 'extended') {
2291 print $Lang::tr{'advproxy NCSA grp extended'};
2292 } elsif ($temp[1] eq 'disabled') {
2293 print $Lang::tr{'advproxy NCSA grp disabled'}; }
2294 print <<END
2295 </td>
2296 <td width='8%' align='center'>
2297 <form method='post' name='frma$id' action='$ENV{'SCRIPT_NAME'}'>
2298 <input type='image' name='$Lang::tr{'edit'}' src='/images/edit.gif' title='$Lang::tr{'edit'}' alt='$Lang::tr{'edit'}' />
2299 <input type='hidden' name='ID' value='$line' />
2300 <input type='hidden' name='ACTION' value='$Lang::tr{'edit'}' />
2301 </form>
2302 </td>
2303
2304 <td width='8%' align='center'>
2305 <form method='post' name='frmb$id' action='$ENV{'SCRIPT_NAME'}'>
2306 <input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' title='$Lang::tr{'remove'}' alt='$Lang::tr{'remove'}' />
2307 <input type='hidden' name='ID' value='$temp[0]' />
2308 <input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
2309 </form>
2310 </td>
2311 </tr>
2312END
2313;
2314 }
2315
2316print <<END
2317</table>
2318<br>
9fb25b1c 2319<table>
ed38f89d
MT		 2320<tr>
2321 <td class='boldbase'>&nbsp; <b>$Lang::tr{'legend'}:</b></td>
2322 <td>&nbsp; &nbsp; <img src='/images/edit.gif' alt='$Lang::tr{'edit'}' /></td>
2323 <td class='base'>$Lang::tr{'edit'}</td>
2324 <td>&nbsp; &nbsp; <img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
2325 <td class='base'>$Lang::tr{'remove'}</td>
2326</tr>
2327END
2328;
2329} else {
2330 print <<END
2331 <tr>
363fb6af 2332 <td><i>$Lang::tr{'advproxy NCSA no accounts'}</i></td>
ed38f89d
MT		 2333 </tr>
2334END
2335;
2336}
2337
2338print <<END
2339</table>
2340END
2341;
2342
2343&Header::closebox();
2344
2345}
2346
2347# ===================================================================
2348
2349&Header::closebigbox();
2350
2351&Header::closepage();
2352
2353# -------------------------------------------------------------------
2354
2355sub read_acls
2356{
2357 if (-e "$acl_src_subnets") {
2358 open(FILE,"$acl_src_subnets");
2359 delete $proxysettings{'SRC_SUBNETS'};
2360 while (<FILE>) { $proxysettings{'SRC_SUBNETS'} .= $_ };
2361 close(FILE);
2362 }
2363 if (-e "$acl_src_banned_ip") {
2364 open(FILE,"$acl_src_banned_ip");
2365 delete $proxysettings{'SRC_BANNED_IP'};
2366 while (<FILE>) { $proxysettings{'SRC_BANNED_IP'} .= $_ };
2367 close(FILE);
2368 }
2369 if (-e "$acl_src_banned_mac") {
2370 open(FILE,"$acl_src_banned_mac");
2371 delete $proxysettings{'SRC_BANNED_MAC'};
2372 while (<FILE>) { $proxysettings{'SRC_BANNED_MAC'} .= $_ };
2373 close(FILE);
2374 }
2375 if (-e "$acl_src_unrestricted_ip") {
2376 open(FILE,"$acl_src_unrestricted_ip");
2377 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
2378 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_ };
2379 close(FILE);
2380 }
2381 if (-e "$acl_src_unrestricted_mac") {
2382 open(FILE,"$acl_src_unrestricted_mac");
2383 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
2384 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_ };
2385 close(FILE);
2386 }
2387 if (-e "$acl_dst_nocache") {
2388 open(FILE,"$acl_dst_nocache");
2389 delete $proxysettings{'DST_NOCACHE'};
2390 while (<FILE>) { $proxysettings{'DST_NOCACHE'} .= $_ };
2391 close(FILE);
2392 }
2393 if (-e "$acl_dst_noauth") {
2394 open(FILE,"$acl_dst_noauth");
2395 delete $proxysettings{'DST_NOAUTH'};
2396 while (<FILE>) { $proxysettings{'DST_NOAUTH'} .= $_ };
2397 close(FILE);
2398 }
363fb6af
MT		 2399 if (-e "$acl_ports_safe") {
2400 open(FILE,"$acl_ports_safe");
2401 delete $proxysettings{'PORTS_SAFE'};
2402 while (<FILE>) { $proxysettings{'PORTS_SAFE'} .= $_ };
2403 close(FILE);
2404 }
2405 if (-e "$acl_ports_ssl") {
2406 open(FILE,"$acl_ports_ssl");
2407 delete $proxysettings{'PORTS_SSL'};
2408 while (<FILE>) { $proxysettings{'PORTS_SSL'} .= $_ };
2409 close(FILE);
2410 }
ed38f89d
MT		 2411 if (-e "$mimetypes") {
2412 open(FILE,"$mimetypes");
2413 delete $proxysettings{'MIME_TYPES'};
2414 while (<FILE>) { $proxysettings{'MIME_TYPES'} .= $_ };
2415 close(FILE);
2416 }
2417 if (-e "$ntlmdir/msntauth.allowusers") {
2418 open(FILE,"$ntlmdir/msntauth.allowusers");
2419 delete $proxysettings{'NTLM_ALLOW_USERS'};
2420 while (<FILE>) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_ };
2421 close(FILE);
2422 }
2423 if (-e "$ntlmdir/msntauth.denyusers") {
2424 open(FILE,"$ntlmdir/msntauth.denyusers");
2425 delete $proxysettings{'NTLM_DENY_USERS'};
2426 while (<FILE>) { $proxysettings{'NTLM_DENY_USERS'} .= $_ };
2427 close(FILE);
2428 }
2429 if (-e "$raddir/radauth.allowusers") {
2430 open(FILE,"$raddir/radauth.allowusers");
2431 delete $proxysettings{'RADIUS_ALLOW_USERS'};
2432 while (<FILE>) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_ };
2433 close(FILE);
2434 }
2435 if (-e "$raddir/radauth.denyusers") {
2436 open(FILE,"$raddir/radauth.denyusers");
2437 delete $proxysettings{'RADIUS_DENY_USERS'};
2438 while (<FILE>) { $proxysettings{'RADIUS_DENY_USERS'} .= $_ };
2439 close(FILE);
2440 }
2441 if (-e "$identdir/identauth.allowusers") {
2442 open(FILE,"$identdir/identauth.allowusers");
2443 delete $proxysettings{'IDENT_ALLOW_USERS'};
2444 while (<FILE>) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_ };
2445 close(FILE);
2446 }
2447 if (-e "$identdir/identauth.denyusers") {
2448 open(FILE,"$identdir/identauth.denyusers");
2449 delete $proxysettings{'IDENT_DENY_USERS'};
2450 while (<FILE>) { $proxysettings{'IDENT_DENY_USERS'} .= $_ };
2451 close(FILE);
2452 }
2453 if (-e "$identhosts") {
2454 open(FILE,"$identhosts");
2455 delete $proxysettings{'IDENT_HOSTS'};
2456 while (<FILE>) { $proxysettings{'IDENT_HOSTS'} .= $_ };
2457 close(FILE);
2458 }
2459 if (-e "$cre_groups") {
2460 open(FILE,"$cre_groups");
2461 delete $proxysettings{'CRE_GROUPS'};
2462 while (<FILE>) { $proxysettings{'CRE_GROUPS'} .= $_ };
2463 close(FILE);
2464 }
2465 if (-e "$cre_svhosts") {
2466 open(FILE,"$cre_svhosts");
2467 delete $proxysettings{'CRE_SVHOSTS'};
2468 while (<FILE>) { $proxysettings{'CRE_SVHOSTS'} .= $_ };
2469 close(FILE);
2470 }
2471}
2472
2473# -------------------------------------------------------------------
2474
2475sub check_acls
2476{
363fb6af
MT		 2477 @temp = split(/\n/,$proxysettings{'PORTS_SAFE'});
2478 undef $proxysettings{'PORTS_SAFE'};
2479 foreach (@temp)
2480 {
2481 s/^\s+//g; s/\s+$//g;
2482 if ($_)
2483 {
2484 $line = $_;
2485 if (/^[^#]+\s+#\sSquids\sport/) { s/(^[^#]+)(\s+#\sSquids\sport)/$proxysettings{'PROXY_PORT'}\2/; $line=$_; }
2486 s/#.*//g; s/\s+//g;
2487 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2488 @templist = split(/-/);
2489 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2490 $proxysettings{'PORTS_SAFE'} .= $line."\n";
2491 }
2492 }
2493
2494 @temp = split(/\n/,$proxysettings{'PORTS_SSL'});
2495 undef $proxysettings{'PORTS_SSL'};
2496 foreach (@temp)
2497 {
2498 s/^\s+//g; s/\s+$//g;
2499 if ($_)
2500 {
2501 $line = $_;
2502 s/#.*//g; s/\s+//g;
2503 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2504 @templist = split(/-/);
2505 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2506 $proxysettings{'PORTS_SSL'} .= $line."\n";
2507 }
2508 }
2509
2510 @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2511 undef $proxysettings{'DST_NOCACHE'};
2512 foreach (@temp)
2513 {
488d1b7c
CS		 2514 s/^\s+//g;
2515 unless (/^#/) { s/\s+//g; }
363fb6af
MT		 2516 if ($_)
2517 {
488d1b7c 2518 if (/^\./) { $_ = '*'.$_; }
363fb6af
MT		 2519 $proxysettings{'DST_NOCACHE'} .= $_."\n";
2520 }
2521 }
2522
ed38f89d
MT		 2523 @temp = split(/\n/,$proxysettings{'SRC_SUBNETS'});
2524 undef $proxysettings{'SRC_SUBNETS'};
2525 foreach (@temp)
2526 {
2527 s/^\s+//g; s/\s+$//g;
2528 if ($_)
2529 {
2530 unless (&General::validipandmask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2531 $proxysettings{'SRC_SUBNETS'} .= $_."\n";
2532 }
2533 }
2534
2535 @temp = split(/\n/,$proxysettings{'SRC_BANNED_IP'});
2536 undef $proxysettings{'SRC_BANNED_IP'};
2537 foreach (@temp)
2538 {
2539 s/^\s+//g; s/\s+$//g;
2540 if ($_)
2541 {
2542 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2543 $proxysettings{'SRC_BANNED_IP'} .= $_."\n";
2544 }
2545 }
2546
2547 @temp = split(/\n/,$proxysettings{'SRC_BANNED_MAC'});
2548 undef $proxysettings{'SRC_BANNED_MAC'};
2549 foreach (@temp)
2550 {
2551 s/^\s+//g; s/\s+$//g; s/-/:/g;
2552 if ($_)
2553 {
2554 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2555 $proxysettings{'SRC_BANNED_MAC'} .= $_."\n";
2556 }
2557 }
2558
2559 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_IP'});
2560 undef $proxysettings{'SRC_UNRESTRICTED_IP'};
2561 foreach (@temp)
2562 {
2563 s/^\s+//g; s/\s+$//g;
2564 if ($_)
2565 {
2566 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2567 $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_."\n";
2568 }
2569 }
2570
2571 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_MAC'});
2572 undef $proxysettings{'SRC_UNRESTRICTED_MAC'};
2573 foreach (@temp)
2574 {
2575 s/^\s+//g; s/\s+$//g; s/-/:/g;
2576 if ($_)
2577 {
2578 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2579 $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_."\n";
2580 }
2581 }
2582
363fb6af 2583 @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
37273bc6 2584 undef $proxysettings{'DST_NOAUTH'};
363fb6af
MT		 2585 foreach (@temp)
2586 {
488d1b7c
CS		 2587 s/^\s+//g;
2588 unless (/^#/) { s/\s+//g; }
363fb6af
MT		 2589 if ($_)
2590 {
488d1b7c 2591 if (/^\./) { $_ = '*'.$_; }
363fb6af
MT		 2592 $proxysettings{'DST_NOAUTH'} .= $_."\n";
2593 }
2594 }
2595
ed38f89d
MT		 2596 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
2597 {
2598 @temp = split(/\n/,$proxysettings{'NTLM_ALLOW_USERS'});
2599 undef $proxysettings{'NTLM_ALLOW_USERS'};
2600 foreach (@temp)
2601 {
2602 s/^\s+//g; s/\s+$//g;
2603 if ($_) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_."\n"; }
2604 }
2605 if ($proxysettings{'NTLM_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2606 }
2607
2608 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
2609 {
2610 @temp = split(/\n/,$proxysettings{'NTLM_DENY_USERS'});
2611 undef $proxysettings{'NTLM_DENY_USERS'};
2612 foreach (@temp)
2613 {
2614 s/^\s+//g; s/\s+$//g;
2615 if ($_) { $proxysettings{'NTLM_DENY_USERS'} .= $_."\n"; }
2616 }
2617 if ($proxysettings{'NTLM_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2618 }
2619
2620 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
2621 {
2622 @temp = split(/\n/,$proxysettings{'IDENT_ALLOW_USERS'});
2623 undef $proxysettings{'IDENT_ALLOW_USERS'};
2624 foreach (@temp)
2625 {
2626 s/^\s+//g; s/\s+$//g;
2627 if ($_) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_."\n"; }
2628 }
2629 if ($proxysettings{'IDENT_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2630 }
2631
2632 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
2633 {
2634 @temp = split(/\n/,$proxysettings{'IDENT_DENY_USERS'});
2635 undef $proxysettings{'IDENT_DENY_USERS'};
2636 foreach (@temp)
2637 {
2638 s/^\s+//g; s/\s+$//g;
2639 if ($_) { $proxysettings{'IDENT_DENY_USERS'} .= $_."\n"; }
2640 }
2641 if ($proxysettings{'IDENT_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2642 }
2643
2644 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
2645 {
2646 @temp = split(/\n/,$proxysettings{'RADIUS_ALLOW_USERS'});
2647 undef $proxysettings{'RADIUS_ALLOW_USERS'};
2648 foreach (@temp)
2649 {
2650 s/^\s+//g; s/\s+$//g;
2651 if ($_) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_."\n"; }
2652 }
2653 if ($proxysettings{'RADIUS_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2654 }
2655
2656 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
2657 {
2658 @temp = split(/\n/,$proxysettings{'RADIUS_DENY_USERS'});
2659 undef $proxysettings{'RADIUS_DENY_USERS'};
2660 foreach (@temp)
2661 {
2662 s/^\s+//g; s/\s+$//g;
2663 if ($_) { $proxysettings{'RADIUS_DENY_USERS'} .= $_."\n"; }
2664 }
2665 if ($proxysettings{'RADIUS_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2666 }
2667
2668 @temp = split(/\n/,$proxysettings{'IDENT_HOSTS'});
2669 undef $proxysettings{'IDENT_HOSTS'};
2670 foreach (@temp)
2671 {
2672 s/^\s+//g; s/\s+$//g;
2673 if ($_)
2674 {
2675 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2676 $proxysettings{'IDENT_HOSTS'} .= $_."\n";
2677 }
2678 }
2679
2680 @temp = split(/\n/,$proxysettings{'CRE_SVHOSTS'});
2681 undef $proxysettings{'CRE_SVHOSTS'};
2682 foreach (@temp)
2683 {
2684 s/^\s+//g; s/\s+$//g;
2685 if ($_)
2686 {
2687 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2688 $proxysettings{'CRE_SVHOSTS'} .= $_."\n";
2689 }
2690 }
2691}
2692
ed38f89d
MT		 2693# -------------------------------------------------------------------
2694
2695sub write_acls
2696{
2697 open(FILE, ">$acl_src_subnets");
2698 flock(FILE, 2);
363fb6af
MT		 2699 if (!$proxysettings{'SRC_SUBNETS'})
2700 {
f09a0af5 2701 print FILE "$green_cidr\n";
363fb6af
MT		 2702 if ($netsettings{'BLUE_DEV'})
2703 {
f09a0af5 2704 print FILE "$blue_cidr\n";
363fb6af
MT		 2705 }
2706 } else { print FILE $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 2707 close(FILE);
2708
2709 open(FILE, ">$acl_src_banned_ip");
2710 flock(FILE, 2);
2711 print FILE $proxysettings{'SRC_BANNED_IP'};
2712 close(FILE);
2713
2714 open(FILE, ">$acl_src_banned_mac");
2715 flock(FILE, 2);
2716 print FILE $proxysettings{'SRC_BANNED_MAC'};
2717 close(FILE);
2718
2719 open(FILE, ">$acl_src_unrestricted_ip");
2720 flock(FILE, 2);
2721 print FILE $proxysettings{'SRC_UNRESTRICTED_IP'};
2722 close(FILE);
2723
2724 open(FILE, ">$acl_src_unrestricted_mac");
2725 flock(FILE, 2);
2726 print FILE $proxysettings{'SRC_UNRESTRICTED_MAC'};
2727 close(FILE);
2728
488d1b7c
CS		 2729 open(FILE, ">$acl_dst_noauth");
2730 flock(FILE, 2);
2731 print FILE $proxysettings{'DST_NOAUTH'};
2732 close(FILE);
2733
2734 open(FILE, ">$acl_dst_noauth_net");
2735 close(FILE);
2736 open(FILE, ">$acl_dst_noauth_dom");
2737 close(FILE);
2738 open(FILE, ">$acl_dst_noauth_url");
2739 close(FILE);
2740
2741 @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
2742 foreach(@temp)
2743 {
2744 unless (/^#/)
2745 {
2746 if (/^\*\.\w/)
2747 {
2748 s/^\*//;
2749 open(FILE, ">>$acl_dst_noauth_dom");
2750 flock(FILE, 2);
2751 print FILE "$_\n";
2752 close(FILE);
2753 }
2754 elsif (&General::validipormask($_))
2755 {
2756 open(FILE, ">>$acl_dst_noauth_net");
2757 flock(FILE, 2);
2758 print FILE "$_\n";
2759 close(FILE);
2760 }
2761 elsif (/\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?-\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?/)
2762 {
2763 open(FILE, ">>$acl_dst_noauth_net");
2764 flock(FILE, 2);
2765 print FILE "$_\n";
2766 close(FILE);
2767 }
2768 else
2769 {
2770 open(FILE, ">>$acl_dst_noauth_url");
2771 flock(FILE, 2);
2772 if (/^[fh]tt?ps?:\/\//) { print FILE "$_\n"; } else { print FILE "^[fh]tt?ps?://$_\n"; }
2773 close(FILE);
2774 }
2775 }
2776 }
2777
ed38f89d
MT		 2778 open(FILE, ">$acl_dst_nocache");
2779 flock(FILE, 2);
2780 print FILE $proxysettings{'DST_NOCACHE'};
2781 close(FILE);
2782
488d1b7c
CS		 2783 open(FILE, ">$acl_dst_nocache_net");
2784 close(FILE);
2785 open(FILE, ">$acl_dst_nocache_dom");
2786 close(FILE);
2787 open(FILE, ">$acl_dst_nocache_url");
ed38f89d
MT		 2788 close(FILE);
2789
488d1b7c
CS		 2790 @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2791 foreach(@temp)
2792 {
2793 unless (/^#/)
2794 {
2795 if (/^\*\.\w/)
2796 {
2797 s/^\*//;
2798 open(FILE, ">>$acl_dst_nocache_dom");
2799 flock(FILE, 2);
2800 print FILE "$_\n";
2801 close(FILE);
2802 }
2803 elsif (&General::validipormask($_))
2804 {
2805 open(FILE, ">>$acl_dst_nocache_net");
2806 flock(FILE, 2);
2807 print FILE "$_\n";
2808 close(FILE);
2809 }
2810 elsif (/\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?-\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?/)
2811 {
2812 open(FILE, ">>$acl_dst_nocache_net");
2813 flock(FILE, 2);
2814 print FILE "$_\n";
2815 close(FILE);
2816 }
2817 else
2818 {
2819 open(FILE, ">>$acl_dst_nocache_url");
2820 flock(FILE, 2);
2821 if (/^[fh]tt?ps?:\/\//) { print FILE "$_\n"; } else { print FILE "^[fh]tt?ps?://$_\n"; }
2822 close(FILE);
2823 }
2824 }
2825 }
2826
363fb6af
MT		 2827 open(FILE, ">$acl_ports_safe");
2828 flock(FILE, 2);
2829 if (!$proxysettings{'PORTS_SAFE'}) { print FILE $def_ports_safe; } else { print FILE $proxysettings{'PORTS_SAFE'}; }
2830 close(FILE);
2831
2832 open(FILE, ">$acl_ports_ssl");
2833 flock(FILE, 2);
2834 if (!$proxysettings{'PORTS_SSL'}) { print FILE $def_ports_ssl; } else { print FILE $proxysettings{'PORTS_SSL'}; }
2835 close(FILE);
2836
ed38f89d
MT		 2837 open(FILE, ">$acl_dst_throttle");
2838 flock(FILE, 2);
2839 if ($proxysettings{'THROTTLE_BINARY'} eq 'on')
2840 {
2841 @temp = split(/\|/,$throttle_binary);
363fb6af 2842 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2843 }
2844 if ($proxysettings{'THROTTLE_DSKIMG'} eq 'on')
2845 {
2846 @temp = split(/\|/,$throttle_dskimg);
363fb6af 2847 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2848 }
2849 if ($proxysettings{'THROTTLE_MMEDIA'} eq 'on')
2850 {
2851 @temp = split(/\|/,$throttle_mmedia);
363fb6af 2852 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2853 }
2854 if (-s $throttled_urls)
2855 {
2856 open(URLFILE, $throttled_urls);
2857 @temp = <URLFILE>;
2858 close(URLFILE);
363fb6af 2859 foreach (@temp) { print FILE; }
ed38f89d
MT		 2860 }
2861 close(FILE);
2862
2863 open(FILE, ">$mimetypes");
2864 flock(FILE, 2);
2865 print FILE $proxysettings{'MIME_TYPES'};
2866 close(FILE);
2867
2868 open(FILE, ">$ntlmdir/msntauth.allowusers");
2869 flock(FILE, 2);
2870 print FILE $proxysettings{'NTLM_ALLOW_USERS'};
2871 close(FILE);
2872
2873 open(FILE, ">$ntlmdir/msntauth.denyusers");
2874 flock(FILE, 2);
2875 print FILE $proxysettings{'NTLM_DENY_USERS'};
2876 close(FILE);
2877
2878 open(FILE, ">$raddir/radauth.allowusers");
2879 flock(FILE, 2);
2880 print FILE $proxysettings{'RADIUS_ALLOW_USERS'};
2881 close(FILE);
2882
2883 open(FILE, ">$raddir/radauth.denyusers");
2884 flock(FILE, 2);
2885 print FILE $proxysettings{'RADIUS_DENY_USERS'};
2886 close(FILE);
2887
2888 open(FILE, ">$identdir/identauth.allowusers");
2889 flock(FILE, 2);
2890 print FILE $proxysettings{'IDENT_ALLOW_USERS'};
2891 close(FILE);
2892
2893 open(FILE, ">$identdir/identauth.denyusers");
2894 flock(FILE, 2);
2895 print FILE $proxysettings{'IDENT_DENY_USERS'};
2896 close(FILE);
2897
2898 open(FILE, ">$identhosts");
2899 flock(FILE, 2);
2900 print FILE $proxysettings{'IDENT_HOSTS'};
2901 close(FILE);
2902
2903 open(FILE, ">$cre_groups");
2904 flock(FILE, 2);
2905 print FILE $proxysettings{'CRE_GROUPS'};
2906 close(FILE);
2907
2908 open(FILE, ">$cre_svhosts");
2909 flock(FILE, 2);
2910 print FILE $proxysettings{'CRE_SVHOSTS'};
2911 close(FILE);
2912}
2913
2914# -------------------------------------------------------------------
2915
2916sub writepacfile
2917{
22527178 2918 open(FILE, ">/srv/web/ipfire/html/proxy.pac");
ed38f89d
MT		 2919 flock(FILE, 2);
2920 print FILE "function FindProxyForURL(url, host)\n";
2921 print FILE "{\n";
2922 if (($proxysettings{'ENABLE'} eq 'on') || ($proxysettings{'ENABLE_BLUE'} eq 'on'))
2923 {
2924 print FILE <<END
2925if (
2926 (isPlainHostName(host)) ||
2927 (dnsDomainIs(host, ".$mainsettings{'DOMAINNAME'}")) ||
2928 (isInNet(host, "10.0.0.0", "255.0.0.0")) ||
2929 (isInNet(host, "172.16.0.0", "255.240.0.0")) ||
488d1b7c
CS		 2930 (isInNet(host, "192.168.0.0", "255.255.0.0")) ||
2931 (isInNet(host, "169.254.0.0", "255.255.0.0"))
ed38f89d
MT		 2932 )
2933 return "DIRECT";
2934
2935 else
2936
2937END
2938;
2939 if ($proxysettings{'ENABLE'} eq 'on')
2940 {
268292e7
CS		 2941 print FILE "if (\n";
2942 print FILE " (isInNet(myIpAddress(), \"$netsettings{'GREEN_NETADDRESS'}\", \"$netsettings{'GREEN_NETMASK'}\"))";
2943
2944 undef @templist;
2945 if (-e "$acl_src_subnets") {
2946 open(SUBNETS,"$acl_src_subnets");
2947 @templist = <SUBNETS>;
2948 close(SUBNETS);
2949 }
2950
2951 foreach (@templist)
2952 {
2953 @temp = split(/\//);
2954 if (
28c9dec6 2955 ($temp[0] ne $netsettings{'GREEN_NETADDRESS'}) && ($temp[1] ne $netsettings{'GREEN_NETMASK'}) &&
268292e7
CS		 2956 ($temp[0] ne $netsettings{'BLUE_NETADDRESS'}) && ($temp[1] ne $netsettings{'BLUE_NETMASK'})
2957 )
2958 {
2959 chomp $temp[1];
2960 print FILE " ||\n (isInNet(myIpAddress(), \"$temp[0]\", \"$temp[1]\"))";
2961 }
2962 }
2963
2964 print FILE "\n";
2965
ed38f89d 2966 print FILE <<END
268292e7
CS		 2967
2968
ed38f89d
MT		 2969 )
2970 return "PROXY $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2971END
2972;
2973 }
2974 if (($proxysettings{'ENABLE'} eq 'on') && ($proxysettings{'ENABLE_BLUE'} eq 'on') && ($netsettings{'BLUE_DEV'}))
2975 {
2976 print FILE "\n else\n\n";
2977 }
2978 if (($netsettings{'BLUE_DEV'}) && ($proxysettings{'ENABLE_BLUE'} eq 'on'))
2979 {
2980 print FILE <<END
2981if (
2982 (isInNet(myIpAddress(), "$netsettings{'BLUE_NETADDRESS'}", "$netsettings{'BLUE_NETMASK'}"))
2983 )
2984 return "PROXY $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2985END
2986;
2987 }
2988 }
2989 print FILE "}\n";
2990 close(FILE);
2991}
2992
2993# -------------------------------------------------------------------
2994
2995sub writeconfig
2996{
2997 my $authrealm;
2998 my $delaypools;
2999
363fb6af 3000 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} +
ed38f89d
MT		 3001 $proxysettings{'THROTTLING_GREEN_HOST'} +
3002 $proxysettings{'THROTTLING_BLUE_TOTAL'} +
3003 $proxysettings{'THROTTLING_BLUE_HOST'} gt 0)
3004 {
3005 $delaypools = 1; } else { $delaypools = 0;
3006 }
3007
3008 if ($proxysettings{'AUTH_REALM'} eq '')
3009 {
d12aede7 3010 $authrealm = "IPFire Advanced Proxy Server";
ed38f89d
MT		 3011 } else {
3012 $authrealm = $proxysettings{'AUTH_REALM'};
3013 }
3014
3015 $_ = $proxysettings{'UPSTREAM_PROXY'};
3016 my ($remotehost, $remoteport) = (/^(?:[a-zA-Z ]+\:\/\/)?(?:[A-Za-z0-9\_\.\-]*?(?:\:[A-Za-z0-9\_\.\-]*?)?\@)?([a-zA-Z0-9\.\_\-]*?)(?:\:([0-9]{1,5}))?(?:\/.*?)?$/);
3017
3018 if ($remoteport eq '') { $remoteport = 80; }
3019
3020 open(FILE, ">${General::swroot}/proxy/squid.conf");
3021 flock(FILE, 2);
3022 print FILE <<END
363fb6af
MT		 3023# Do not modify '${General::swroot}/proxy/squid.conf' directly since any changes
3024# you make will be overwritten whenever you resave proxy settings using the
3025# web interface!
3026#
3027# Instead, modify the file '$acl_include' and
3028# then restart the proxy service using the web interface. Changes made to the
3029# 'include.acl' file will propagate to the 'squid.conf' file at that time.
3030
ed38f89d
MT		 3031shutdown_lifetime 5 seconds
3032icp_port 0
3033
ed38f89d
MT		 3034END
3035 ;
363fb6af
MT		 3036 print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3037 if ($proxysettings{'TRANSPARENT'} eq 'on') { print FILE " transparent" }
3038 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3039 print FILE "\n";
3040
ed38f89d 3041 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
363fb6af
MT		 3042 print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3043 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') { print FILE " transparent" }
3044 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3045 print FILE "\n";
ed38f89d
MT		 3046 }
3047
488d1b7c
CS		 3048 if ($proxysettings{'CACHE_SIZE'} > 0)
3049 {
3050 print FILE "\n";
ed38f89d 3051
488d1b7c
CS		 3052 if (!-z $acl_dst_nocache_dom) {
3053 print FILE "acl no_cache_domains dstdomain \"$acl_dst_nocache_dom\"\n";
3054 print FILE "cache deny no_cache_domains\n";
3055 }
3056 if (!-z $acl_dst_nocache_net) {
37273bc6 3057 print FILE "acl no_cache_ipaddr dst \"$acl_dst_nocache_net\"\n";
488d1b7c
CS		 3058 print FILE "cache deny no_cache_ipaddr\n";
3059 }
3060 if (!-z $acl_dst_nocache_url) {
3061 print FILE "acl no_cache_hosts url_regex -i \"$acl_dst_nocache_url\"\n";
3062 print FILE "cache deny no_cache_hosts\n";
3063 }
ed38f89d
MT		 3064 }
3065
3066 print FILE <<END
3067
3068cache_effective_user squid
3069cache_effective_group squid
363fb6af 3070umask 022
ed38f89d
MT		 3071
3072pid_filename /var/run/squid.pid
3073
3074cache_mem $proxysettings{'CACHE_MEM'} MB
ed38f89d
MT		 3075END
3076 ;
3077
488d1b7c
CS		 3078 if ($proxysettings{'CACHE_SIZE'} eq '0')
3079 {
3080 print FILE "cache_dir null /var/tmp\n\n";
3081 } else {
3082 print FILE "cache_dir aufs /var/log/cache $proxysettings{'CACHE_SIZE'} $proxysettings{'L1_DIRS'} 256\n\n";
3083 }
3084
0d948999 3085 if (($proxysettings{'ERR_DESIGN'} eq 'ipfire' ))
363fb6af 3086 {
0d948999 3087 print FILE "error_directory $errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}\n\n";
363fb6af
MT		 3088 } else {
3089 print FILE "error_directory $errordir/$proxysettings{'ERR_LANGUAGE'}\n\n";
3090 }
3091
ed38f89d
MT		 3092 if ($proxysettings{'OFFLINE_MODE'} eq 'on') { print FILE "offline_mode on\n\n"; }
3093
3094 if ((!($proxysettings{'MEM_POLICY'} eq 'LRU')) || (!($proxysettings{'CACHE_POLICY'} eq 'LRU')))
3095 {
3096 if (!($proxysettings{'MEM_POLICY'} eq 'LRU'))
3097 {
3098 print FILE "memory_replacement_policy $proxysettings{'MEM_POLICY'}\n";
3099 }
3100 if (!($proxysettings{'CACHE_POLICY'} eq 'LRU'))
3101 {
3102 print FILE "cache_replacement_policy $proxysettings{'CACHE_POLICY'}\n";
3103 }
3104 print FILE "\n";
3105 }
3106
3107 if ($proxysettings{'LOGGING'} eq 'on')
3108 {
363fb6af
MT		 3109 print FILE <<END
3110access_log /var/log/squid/access.log
ed38f89d
MT		 3111cache_log /var/log/squid/cache.log
3112cache_store_log none
3113END
3114 ;
3115 if ($proxysettings{'LOGUSERAGENT'} eq 'on') { print FILE "useragent_log \/var\/log\/squid\/user_agent.log\n"; }
3116 if ($proxysettings{'LOGQUERY'} eq 'on') { print FILE "\nstrip_query_terms off\n"; }
3117 } else {
3118 print FILE <<END
363fb6af 3119access_log /dev/null
ed38f89d
MT		 3120cache_log /dev/null
3121cache_store_log none
3122END
3123 ;}
3124 print FILE <<END
3125
3126log_mime_hdrs off
3127END
3128 ;
3129
3130 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'on')
3131 {
363fb6af 3132 print FILE "forwarded_for on\n";
ed38f89d 3133 } else {
363fb6af 3134 print FILE "forwarded_for off\n";
ed38f89d 3135 }
363fb6af
MT		 3136 if ($proxysettings{'FORWARD_VIA'} eq 'on')
3137 {
3138 print FILE "via on\n";
3139 } else {
3140 print FILE "via off\n";
3141 }
3142 print FILE "\n";
ed38f89d
MT		 3143
3144 if ((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3145 {
3146 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3147 {
363fb6af 3148 print FILE "auth_param basic program $authdir/ncsa_auth $userdb\n";
ed38f89d
MT		 3149 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3150 print FILE "auth_param basic realm $authrealm\n";
3151 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3152 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3153 }
3154
3155 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
3156 {
363fb6af 3157 print FILE "auth_param basic program $authdir/squid_ldap_auth -b \"$proxysettings{'LDAP_BASEDN'}\"";
ed38f89d
MT		 3158 if (!($proxysettings{'LDAP_BINDDN_USER'} eq '')) { print FILE " -D \"$proxysettings{'LDAP_BINDDN_USER'}\""; }
3159 if (!($proxysettings{'LDAP_BINDDN_PASS'} eq '')) { print FILE " -w $proxysettings{'LDAP_BINDDN_PASS'}"; }
3160 if ($proxysettings{'LDAP_TYPE'} eq 'ADS')
3161 {
3162 if ($proxysettings{'LDAP_GROUP'} eq '')
3163 {
3164 print FILE " -f \"(\&(objectClass=person)(sAMAccountName=\%s))\"";
3165 } else {
3166 print FILE " -f \"(\&(\&(objectClass=person)(sAMAccountName=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
3167 }
3168 print FILE " -u sAMAccountName -P";
3169 }
3170 if ($proxysettings{'LDAP_TYPE'} eq 'NDS')
3171 {
3172 if ($proxysettings{'LDAP_GROUP'} eq '')
3173 {
3174 print FILE " -f \"(\&(objectClass=person)(cn=\%s))\"";
3175 } else {
3176 print FILE " -f \"(\&(\&(objectClass=person)(cn=\%s))(groupMembership=$proxysettings{'LDAP_GROUP'}))\"";
3177 }
3178 print FILE " -u cn -P";
3179 }
3180 if (($proxysettings{'LDAP_TYPE'} eq 'V2') || ($proxysettings{'LDAP_TYPE'} eq 'V3'))
3181 {
3182 if ($proxysettings{'LDAP_GROUP'} eq '')
3183 {
3184 print FILE " -f \"(\&(objectClass=person)(uid=\%s))\"";
3185 } else {
3186 print FILE " -f \"(\&(\&(objectClass=person)(uid=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
3187 }
3188 if ($proxysettings{'LDAP_TYPE'} eq 'V2') { print FILE " -v 2"; }
3189 if ($proxysettings{'LDAP_TYPE'} eq 'V3') { print FILE " -v 3"; }
3190 print FILE " -u uid -P";
3191 }
3192 print FILE " $proxysettings{'LDAP_SERVER'}:$proxysettings{'LDAP_PORT'}\n";
3193 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3194 print FILE "auth_param basic realm $authrealm\n";
3195 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3196 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3197 }
3198
3199 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
3200 {
3201 if ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on')
3202 {
363fb6af 3203 print FILE "auth_param ntlm program $authdir/ntlm_auth $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_PDC'}";
ed38f89d
MT		 3204 if ($proxysettings{'NTLM_BDC'} eq '') { print FILE "\n"; } else { print FILE " $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_BDC'}\n"; }
3205 print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n";
ed38f89d
MT		 3206 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3207 } else {
363fb6af 3208 print FILE "auth_param basic program $authdir/msnt_auth\n";
ed38f89d
MT		 3209 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3210 print FILE "auth_param basic realm $authrealm\n";
3211 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3212 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3213
3214 open(MSNTCONF, ">$ntlmdir/msntauth.conf");
3215 flock(MSNTCONF,2);
3216 print MSNTCONF "server $proxysettings{'NTLM_PDC'}";
3217 if ($proxysettings{'NTLM_BDC'} eq '') { print MSNTCONF " $proxysettings{'NTLM_PDC'}"; } else { print MSNTCONF " $proxysettings{'NTLM_BDC'}"; }
3218 print MSNTCONF " $proxysettings{'NTLM_DOMAIN'}\n";
3219 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3220 {
3221 if ($proxysettings{'NTLM_USER_ACL'} eq 'positive')
3222 {
3223 print MSNTCONF "allowusers $ntlmdir/msntauth.allowusers\n";
3224 } else {
3225 print MSNTCONF "denyusers $ntlmdir/msntauth.denyusers\n";
28c9dec6 3226 }
ed38f89d
MT		 3227 }
3228 close(MSNTCONF);
3229 }
3230 }
3231
3232 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
3233 {
363fb6af 3234 print FILE "auth_param basic program $authdir/squid_radius_auth -h $proxysettings{'RADIUS_SERVER'} -p $proxysettings{'RADIUS_PORT'} ";
ed38f89d
MT		 3235 if (!($proxysettings{'RADIUS_IDENTIFIER'} eq '')) { print FILE "-i $proxysettings{'RADIUS_IDENTIFIER'} "; }
3236 print FILE "-w $proxysettings{'RADIUS_SECRET'}\n";
3237 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3238 print FILE "auth_param basic realm $authrealm\n";
3239 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3240 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3241 }
3242
3243 print FILE "\n";
3244 print FILE "acl for_inetusers proxy_auth REQUIRED\n";
3245 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') && ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on'))
3246 {
3247 if ((!-z "$ntlmdir/msntauth.allowusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
3248 {
3249 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.allowusers\"\n";
3250 }
3251 if ((!-z "$ntlmdir/msntauth.denyusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
3252 {
3253 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.denyusers\"\n";
3254 }
3255 }
3256 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
3257 {
3258 if ((!-z "$raddir/radauth.allowusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
3259 {
3260 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.allowusers\"\n";
3261 }
3262 if ((!-z "$raddir/radauth.denyusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
3263 {
3264 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.denyusers\"\n";
3265 }
3266 }
3267 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3268 {
3269 print FILE "\n";
3270 if (!-z $extgrp) { print FILE "acl for_extended_users proxy_auth \"$extgrp\"\n"; }
3271 if (!-z $disgrp) { print FILE "acl for_disabled_users proxy_auth \"$disgrp\"\n"; }
3272 }
3273 if (!($proxysettings{'AUTH_MAX_USERIP'} eq '')) { print FILE "\nacl concurrent max_user_ip -s $proxysettings{'AUTH_MAX_USERIP'}\n"; }
3274 print FILE "\n";
3275
488d1b7c
CS		 3276 if (!-z $acl_dst_noauth_net) { print FILE "acl to_ipaddr_without_auth dst \"$acl_dst_noauth_net\"\n"; }
3277 if (!-z $acl_dst_noauth_dom) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth_dom\"\n"; }
3278 if (!-z $acl_dst_noauth_url) { print FILE "acl to_hosts_without_auth url_regex -i \"$acl_dst_noauth_url\"\n"; }
363fb6af 3279 print FILE "\n";
488d1b7c 3280
ed38f89d
MT		 3281 }
3282
3283 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3284 {
3285 if ($proxysettings{'IDENT_REQUIRED'} eq 'on')
3286 {
3287 print FILE "acl for_inetusers ident REQUIRED\n";
3288 }
3289 if ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on')
3290 {
3291 if ((!-z "$identdir/identauth.allowusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
3292 {
3293 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.allowusers\"\n\n";
3294 }
3295 if ((!-z "$identdir/identauth.denyusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
3296 {
3297 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.denyusers\"\n\n";
3298 }
3299 }
488d1b7c
CS		 3300 if (!-z $acl_dst_noauth_net) { print FILE "acl to_ipaddr_without_auth dst \"$acl_dst_noauth_net\"\n"; }
3301 if (!-z $acl_dst_noauth_dom) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth_dom\"\n"; }
3302 if (!-z $acl_dst_noauth_url) { print FILE "acl to_hosts_without_auth url_regex -i \"$acl_dst_noauth_url\"\n"; }
363fb6af 3303 print FILE "\n";
ed38f89d
MT		 3304 }
3305
3306 if (($delaypools) && (!-z $acl_dst_throttle)) { print FILE "acl for_throttled_urls url_regex -i \"$acl_dst_throttle\"\n\n"; }
3307
3308 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE "acl with_allowed_useragents browser $browser_regexp\n\n"; }
3309
28c9dec6 3310 print FILE "acl within_timeframe time ";
ed38f89d
MT		 3311 if ($proxysettings{'TIME_MON'} eq 'on') { print FILE "M"; }
3312 if ($proxysettings{'TIME_TUE'} eq 'on') { print FILE "T"; }
3313 if ($proxysettings{'TIME_WED'} eq 'on') { print FILE "W"; }
3314 if ($proxysettings{'TIME_THU'} eq 'on') { print FILE "H"; }
3315 if ($proxysettings{'TIME_FRI'} eq 'on') { print FILE "F"; }
3316 if ($proxysettings{'TIME_SAT'} eq 'on') { print FILE "A"; }
3317 if ($proxysettings{'TIME_SUN'} eq 'on') { print FILE "S"; }
363fb6af
MT		 3318 print FILE " $proxysettings{'TIME_FROM_HOUR'}:";
3319 print FILE "$proxysettings{'TIME_FROM_MINUTE'}-";
3320 print FILE "$proxysettings{'TIME_TO_HOUR'}:";
3321 print FILE "$proxysettings{'TIME_TO_MINUTE'}\n\n";
ed38f89d
MT		 3322
3323 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
3324 print FILE "acl blocked_mimetypes rep_mime_type \"$mimetypes\"\n\n";
3325 }
3326
3327 print FILE <<END
f09a0af5
AF		 3328#acl all src all
3329acl localhost src 127.0.0.1/32
363fb6af
MT		 3330END
3331;
3332open (PORTS,"$acl_ports_ssl");
3333@temp = <PORTS>;
3334close PORTS;
3335if (@temp)
3336{
3337 foreach (@temp) { print FILE "acl SSL_ports port $_"; }
3338}
3339open (PORTS,"$acl_ports_safe");
3340@temp = <PORTS>;
3341close PORTS;
3342if (@temp)
3343{
3344 foreach (@temp) { print FILE "acl Safe_ports port $_"; }
3345}
3346 print FILE <<END
3347
488d1b7c
CS		 3348acl IPFire_http port $http_port
3349acl IPFire_https port $https_port
3350acl IPFire_ips dst $netsettings{'GREEN_ADDRESS'}
3351acl IPFire_networks src "$acl_src_subnets"
3352acl IPFire_servers dst "$acl_src_subnets"
f09a0af5
AF		 3353acl IPFire_green_network src $green_cidr
3354acl IPFire_green_servers dst $green_cidr
ed38f89d
MT		 3355END
3356 ;
f09a0af5
AF		 3357 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPFire_blue_network src $blue_cidr\n"; }
3358 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPFire_blue_servers dst $blue_cidr\n"; }
488d1b7c
CS		 3359 if (!-z $acl_src_banned_ip) { print FILE "acl IPFire_banned_ips src \"$acl_src_banned_ip\"\n"; }
3360 if (!-z $acl_src_banned_mac) { print FILE "acl IPFire_banned_mac arp \"$acl_src_banned_mac\"\n"; }
3361 if (!-z $acl_src_unrestricted_ip) { print FILE "acl IPFire_unrestricted_ips src \"$acl_src_unrestricted_ip\"\n"; }
3362 if (!-z $acl_src_unrestricted_mac) { print FILE "acl IPFire_unrestricted_mac arp \"$acl_src_unrestricted_mac\"\n"; }
ed38f89d
MT		 3363 print FILE <<END
3364acl CONNECT method CONNECT
3365END
3366 ;
3367
3368 if ($proxysettings{'CLASSROOM_EXT'} eq 'on') {
3369 print FILE <<END
3370
3371#Classroom extensions
488d1b7c
CS		 3372acl IPFire_no_access_ips src "$acl_src_noaccess_ip"
3373acl IPFire_no_access_mac arp "$acl_src_noaccess_mac"
ed38f89d
MT		 3374END
3375 ;
3376 print FILE "deny_info ";
0d948999 3377 if ((($proxysettings{'ERR_DESIGN'} eq 'ipfire') && (-e "$errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")) ||
363fb6af
MT		 3378 (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")))
3379 {
3380 print FILE "ERR_ACCESS_DISABLED";
3381 } else {
3382 print FILE "ERR_ACCESS_DENIED";
3383 }
488d1b7c 3384 print FILE " IPFire_no_access_ips\n";
ed38f89d 3385 print FILE "deny_info ";
0d948999 3386 if ((($proxysettings{'ERR_DESIGN'} eq 'ipfire') && (-e "$errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")) ||
363fb6af
MT		 3387 (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")))
3388 {
3389 print FILE "ERR_ACCESS_DISABLED";
3390 } else {
3391 print FILE "ERR_ACCESS_DENIED";
3392 }
488d1b7c 3393 print FILE " IPFire_no_access_mac\n";
ed38f89d
MT		 3394
3395 print FILE <<END
488d1b7c
CS		 3396http_access deny IPFire_no_access_ips
3397http_access deny IPFire_no_access_mac
ed38f89d
MT		 3398END
3399 ;
3400 }
3401
363fb6af
MT		 3402 #Insert acl file and replace __VAR__ with correct values
3403 my $blue_net = ''; #BLUE empty by default
3404 my $blue_ip = '';
3405 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
f09a0af5 3406 $blue_net = "$blue_cidr";
363fb6af
MT		 3407 $blue_ip = "$netsettings{'BLUE_ADDRESS'}";
3408 }
3409 if (!-z $acl_include)
ed38f89d
MT		 3410 {
3411 open (ACL, "$acl_include");
488d1b7c 3412 print FILE "\n#Start of custom includes\n\n";
ed38f89d
MT		 3413 while (<ACL>) {
3414 $_ =~ s/__GREEN_IP__/$netsettings{'GREEN_ADDRESS'}/;
f09a0af5 3415 $_ =~ s/__GREEN_NET__/$green_cidr/;
ed38f89d
MT		 3416 $_ =~ s/__BLUE_IP__/$blue_ip/;
3417 $_ =~ s/__BLUE_NET__/$blue_net/;
363fb6af 3418 $_ =~ s/__PROXY_PORT__/$proxysettings{'PROXY_PORT'}/;
ed38f89d
MT		 3419 print FILE $_;
3420 }
488d1b7c 3421 print FILE "\n#End of custom includes\n";
ed38f89d
MT		 3422 close (ACL);
3423 }
3424 if ((!-z $extgrp) && ($proxysettings{'AUTH_METHOD'} eq 'ncsa') && ($proxysettings{'NCSA_BYPASS_REDIR'} eq 'on')) { print FILE "\nredirector_access deny for_extended_users\n"; }
3425 print FILE <<END
3426
3427#Access to squid:
3428#local machine, no restriction
3429http_access allow localhost
3430
3431#GUI admin if local machine connects
488d1b7c
CS		 3432http_access allow IPFire_ips IPFire_networks IPFire_http
3433http_access allow CONNECT IPFire_ips IPFire_networks IPFire_https
ed38f89d
MT		 3434
3435#Deny not web services
3436http_access deny !Safe_ports
3437http_access deny CONNECT !SSL_ports
3438
3439END
3440 ;
3441
3442if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3443{
3444print FILE "#Set ident ACLs\n";
3445if (!-z $identhosts)
3446 {
3447 print FILE "acl on_ident_aware_hosts src \"$identhosts\"\n";
3448 print FILE "ident_lookup_access allow on_ident_aware_hosts\n";
3449 print FILE "ident_lookup_access deny all\n";
3450 } else {
3451 print FILE "ident_lookup_access allow all\n";
3452 }
3453 print FILE "ident_timeout $proxysettings{'IDENT_TIMEOUT'} seconds\n\n";
3454}
3455
3456if ($delaypools) {
3457 print FILE "#Set download throttling\n";
3458
3459 if ($netsettings{'BLUE_DEV'})
3460 {
3461 print FILE "delay_pools 2\n";
3462 } else {
3463 print FILE "delay_pools 1\n";
3464 }
3465
3466 print FILE "delay_class 1 3\n";
3467 if ($netsettings{'BLUE_DEV'}) { print FILE "delay_class 2 3\n"; }
3468
3469 print FILE "delay_parameters 1 ";
3470 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 'unlimited')
3471 {
3472 print FILE "-1/-1";
3473 } else {
3474 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 125;
3475 print FILE "/";
3476 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 250;
3477 }
3478
3479 print FILE " -1/-1 ";
3480 if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 'unlimited')
3481 {
3482 print FILE "-1/-1";
3483 } else {
3484 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 125;
3485 print FILE "/";
3486 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 250;
3487 }
3488 print FILE "\n";
3489
3490 if ($netsettings{'BLUE_DEV'})
3491 {
3492 print FILE "delay_parameters 2 ";
3493 if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 'unlimited')
3494 {
3495 print FILE "-1/-1";
3496 } else {
3497 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 125;
3498 print FILE "/";
3499 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 250;
3500 }
3501 print FILE " -1/-1 ";
3502 if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 'unlimited')
3503 {
3504 print FILE "-1/-1";
3505 } else {
3506 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 125;
3507 print FILE "/";
3508 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 250;
3509 }
3510 print FILE "\n";
3511 }
3512
488d1b7c
CS		 3513 print FILE "delay_access 1 deny IPFire_ips\n";
3514 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 1 deny IPFire_unrestricted_ips\n"; }
3515 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 1 deny IPFire_unrestricted_mac\n"; }
ed38f89d
MT		 3516 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 1 deny for_extended_users\n"; }
3517
3518 if ($netsettings{'BLUE_DEV'})
3519 {
488d1b7c 3520 print FILE "delay_access 1 allow IPFire_green_network";
363fb6af 3521 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3522 print FILE "\n";
3523 print FILE "delay_access 1 deny all\n";
3524 } else {
3525 print FILE "delay_access 1 allow all";
363fb6af 3526 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3527 print FILE "\n";
3528 }
3529
3530 if ($netsettings{'BLUE_DEV'})
3531 {
488d1b7c
CS		 3532 print FILE "delay_access 2 deny IPFire_ips\n";
3533 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 2 deny IPFire_unrestricted_ips\n"; }
3534 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 2 deny IPFire_unrestricted_mac\n"; }
ed38f89d 3535 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 2 deny for_extended_users\n"; }
488d1b7c 3536 print FILE "delay_access 2 allow IPFire_blue_network";
363fb6af 3537 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3538 print FILE "\n";
3539 print FILE "delay_access 2 deny all\n";
3540 }
3541
28c9dec6 3542 print FILE "delay_initial_bucket_level 100\n";
ed38f89d
MT		 3543 print FILE "\n";
3544}
9fb25b1c
MT		 3545
3546if ($proxysettings{'NO_PROXY_LOCAL'} eq 'on')
3547{
3548 print FILE "#Prevent internal proxy access to Green\n";
488d1b7c 3549 print FILE "http_access deny IPFire_green_servers !IPFire_green_network\n\n";
9fb25b1c
MT		 3550}
3551
3552if ($proxysettings{'NO_PROXY_LOCAL_BLUE'} eq 'on')
3553{
3554 print FILE "#Prevent internal proxy access from Blue\n";
488d1b7c
CS		 3555 print FILE "http_access allow IPFire_blue_network IPFire_blue_servers\n";
3556 print FILE "http_access deny IPFire_blue_network IPFire_servers\n\n";
9fb25b1c
MT		 3557}
3558
ed38f89d
MT		 3559 print FILE <<END
3560#Set custom configured ACLs
3561END
3562 ;
488d1b7c
CS		 3563 if (!-z $acl_src_banned_ip) { print FILE "http_access deny IPFire_banned_ips\n"; }
3564 if (!-z $acl_src_banned_mac) { print FILE "http_access deny IPFire_banned_mac\n"; }
ed38f89d
MT		 3565
3566 if ((!-z $acl_dst_noauth) && (!($proxysettings{'AUTH_METHOD'} eq 'none')))
3567 {
3568 if (!-z $acl_src_unrestricted_ip)
3569 {
488d1b7c
CS		 3570 if (!-z $acl_dst_noauth_net) { print FILE "http_access allow IPFire_unrestricted_ips to_ipaddr_without_auth\n"; }
3571 if (!-z $acl_dst_noauth_dom) { print FILE "http_access allow IPFire_unrestricted_ips to_domains_without_auth\n"; }
3572 if (!-z $acl_dst_noauth_url) { print FILE "http_access allow IPFire_unrestricted_ips to_hosts_without_auth\n"; }
ed38f89d
MT		 3573 }
3574 if (!-z $acl_src_unrestricted_mac)
3575 {
488d1b7c
CS		 3576 if (!-z $acl_dst_noauth_net) { print FILE "http_access allow IPFire_unrestricted_mac to_ipaddr_without_auth\n"; }
3577 if (!-z $acl_dst_noauth_dom) { print FILE "http_access allow IPFire_unrestricted_mac to_domains_without_auth\n"; }
3578 if (!-z $acl_dst_noauth_url) { print FILE "http_access allow IPFire_unrestricted_mac to_hosts_without_auth\n"; }
3579 }
3580 if (!-z $acl_dst_noauth_net)
3581 {
3582 print FILE "http_access allow IPFire_networks";
3583 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3584 print FILE " !within_timeframe";
3585 } else {
3586 print FILE " within_timeframe"; }
3587 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3588 print FILE " to_ipaddr_without_auth\n";
3589 }
3590 if (!-z $acl_dst_noauth_dom)
3591 {
3592 print FILE "http_access allow IPFire_networks";
3593 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3594 print FILE " !within_timeframe";
3595 } else {
3596 print FILE " within_timeframe"; }
3597 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3598 print FILE " to_domains_without_auth\n";
3599 }
3600 if (!-z $acl_dst_noauth_url)
3601 {
3602 print FILE "http_access allow IPFire_networks";
3603 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3604 print FILE " !within_timeframe";
3605 } else {
3606 print FILE " within_timeframe"; }
3607 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3608 print FILE " to_hosts_without_auth\n";
ed38f89d 3609 }
ed38f89d
MT		 3610 }
3611
3612 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on'))
3613 {
3614 print FILE "http_access deny !for_inetusers";
3615 if (!-z $identhosts) { print FILE " on_ident_aware_hosts"; }
3616 print FILE "\n";
3617 }
3618
3619 if (
3620 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3621 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on') &&
3622 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3623 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3624 (!-z "$identdir/identauth.denyusers")
3625 )
3626 {
3627 print FILE "http_access deny for_acl_users";
3628 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3629 print FILE "\n";
3630 }
3631
3632 if (!-z $acl_src_unrestricted_ip)
3633 {
488d1b7c 3634 print FILE "http_access allow IPFire_unrestricted_ips";
ed38f89d
MT		 3635 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3636 {
3637 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3638 {
3639 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3640 }
3641 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3642 {
3643 print FILE " for_inetusers";
3644 }
3645 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3646 {
3647 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
28c9dec6 3648 {
ed38f89d
MT		 3649 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3650 {
3651 print FILE " for_acl_users";
3652 }
3653 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3654 {
3655 print FILE " !for_acl_users";
3656 }
3657 } else { print FILE " for_inetusers"; }
3658 }
3659 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3660 {
ed38f89d 3661 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3662 {
ed38f89d
MT		 3663 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3664 {
3665 print FILE " for_acl_users";
3666 }
3667 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3668 {
3669 print FILE " !for_acl_users";
3670 }
3671 } else { print FILE " for_inetusers"; }
3672 }
3673 }
3674 print FILE "\n";
3675 }
3676
3677 if (!-z $acl_src_unrestricted_mac)
3678 {
488d1b7c 3679 print FILE "http_access allow IPFire_unrestricted_mac";
ed38f89d
MT		 3680 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3681 {
3682 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3683 {
3684 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3685 }
3686 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3687 {
3688 print FILE " for_inetusers";
3689 }
3690 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3691 {
3692 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
28c9dec6 3693 {
ed38f89d
MT		 3694 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3695 {
3696 print FILE " for_acl_users";
3697 }
3698 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3699 {
3700 print FILE " !for_acl_users";
3701 }
3702 } else { print FILE " for_inetusers"; }
3703 }
3704 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3705 {
ed38f89d 3706 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3707 {
ed38f89d
MT		 3708 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3709 {
3710 print FILE " for_acl_users";
3711 }
3712 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3713 {
3714 print FILE " !for_acl_users";
3715 }
3716 } else { print FILE " for_inetusers"; }
3717 }
3718 }
3719 print FILE "\n";
3720 }
3721
3722 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3723 {
3724 if (!-z $disgrp) { print FILE "http_access deny for_disabled_users\n"; }
488d1b7c 3725 if (!-z $extgrp) { print FILE "http_access allow IPFire_networks for_extended_users\n"; }
ed38f89d
MT		 3726 }
3727
3728 if (
3729 (
3730 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3731 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3732 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3733 ($proxysettings{'NTLM_USER_ACL'} eq 'negative') &&
3734 (!-z "$ntlmdir/msntauth.denyusers")
3735 )
3736 ||
3737 (
3738 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3739 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3740 ($proxysettings{'RADIUS_USER_ACL'} eq 'negative') &&
3741 (!-z "$raddir/radauth.denyusers")
3742 )
3743 ||
3744 (
3745 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3746 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'off') &&
3747 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3748 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3749 (!-z "$identdir/identauth.denyusers")
3750 )
3751 )
3752 {
3753 print FILE "http_access deny for_acl_users";
3754 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3755 print FILE "\n";
3756 }
3757
3758 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && (!-z "$identhosts"))
3759 {
3760 print FILE "http_access allow";
3761 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3762 print FILE " !within_timeframe";
3763 } else {
3764 print FILE " within_timeframe"; }
3765 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3766 print FILE " !on_ident_aware_hosts\n";
3767 }
3768
488d1b7c 3769 print FILE "http_access allow IPFire_networks";
ed38f89d
MT		 3770 if (
3771 (
3772 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3773 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3774 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3775 ($proxysettings{'NTLM_USER_ACL'} eq 'positive') &&
3776 (!-z "$ntlmdir/msntauth.allowusers")
3777 )
3778 ||
3779 (
3780 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3781 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3782 ($proxysettings{'RADIUS_USER_ACL'} eq 'positive') &&
3783 (!-z "$raddir/radauth.allowusers")
3784 )
3785 ||
3786 (
3787 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3788 ($proxysettings{'IDENT_REQUIRED'} eq 'on') &&
3789 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3790 ($proxysettings{'IDENT_USER_ACL'} eq 'positive') &&
3791 (!-z "$identdir/identauth.allowusers")
3792 )
3793 )
3794 {
3795 print FILE " for_acl_users";
3796 } elsif (((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident'))) ||
3797 (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on'))) {
3798 print FILE " for_inetusers";
3799 }
3800 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && (!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3801 {
3802 print FILE " !concurrent";
3803 }
3804 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3805 print FILE " !within_timeframe";
3806 } else {
3807 print FILE " within_timeframe"; }
3808 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3809 print FILE "\n";
3810
3811 print FILE "http_access deny all\n\n";
3812
3813 if (($proxysettings{'FORWARD_IPADDRESS'} eq 'off') || ($proxysettings{'FORWARD_VIA'} eq 'off') ||
3814 (!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
3815 {
3816 print FILE "#Strip HTTP Header\n";
3817
3818 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'off')
3819 {
30793ae1
AF		 3820 print FILE "request_header_access X-Forwarded-For deny all\n";
3821 print FILE "reply_header_access X-Forwarded-For deny all\n";
ed38f89d
MT		 3822 }
3823 if ($proxysettings{'FORWARD_VIA'} eq 'off')
3824 {
30793ae1
AF		 3825 print FILE "request_header_access Via deny all\n";
3826 print FILE "reply_header_access Via deny all\n";
ed38f89d
MT		 3827 }
3828 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
3829 {
30793ae1
AF		 3830 print FILE "request_header_access User-Agent deny all\n";
3831 print FILE "reply_header_access User-Agent deny all\n";
ed38f89d
MT		 3832 }
3833 if (!($proxysettings{'FAKE_REFERER'} eq ''))
3834 {
30793ae1
AF		 3835 print FILE "request_header_access Referer deny all\n";
3836 print FILE "reply_header_access Referer deny all\n";
ed38f89d
MT		 3837 }
3838
3839 print FILE "\n";
3840
3841 if ((!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
3842 {
3843 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
3844 {
3845 print FILE "header_replace User-Agent $proxysettings{'FAKE_USERAGENT'}\n";
3846 }
3847 if (!($proxysettings{'FAKE_REFERER'} eq ''))
3848 {
3849 print FILE "header_replace Referer $proxysettings{'FAKE_REFERER'}\n";
3850 }
3851 print FILE "\n";
3852 }
3853 }
3854
363fb6af
MT		 3855 if ($proxysettings{'SUPPRESS_VERSION'} eq 'on') { print FILE "httpd_suppress_version_string on\n\n" }
3856
ed38f89d 3857 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
488d1b7c
CS		 3858 if (!-z $acl_src_unrestricted_ip) { print FILE "http_reply_access allow IPFire_unrestricted_ips\n"; }
3859 if (!-z $acl_src_unrestricted_mac) { print FILE "http_reply_access allow IPFire_unrestricted_mac\n"; }
ed38f89d
MT		 3860 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3861 {
3862 if (!-z $extgrp) { print FILE "http_reply_access allow for_extended_users\n"; }
3863 }
3864 print FILE "http_reply_access deny blocked_mimetypes\n";
3865 print FILE "http_reply_access allow all\n\n";
3866 }
3867
488d1b7c
CS		 3868 if ($proxysettings{'CACHE_SIZE'} > 0)
3869 {
3870 print FILE <<END
ed38f89d
MT		 3871maximum_object_size $proxysettings{'MAX_SIZE'} KB
3872minimum_object_size $proxysettings{'MIN_SIZE'} KB
3873
488d1b7c
CS		 3874END
3875 ;
3876 } else { print FILE "cache deny all\n\n"; }
3877
3878 print FILE <<END
ed38f89d
MT		 3879request_body_max_size $proxysettings{'MAX_OUTGOING_SIZE'} KB
3880END
3881 ;
3882 $replybodymaxsize = 1024 * $proxysettings{'MAX_INCOMING_SIZE'};
3883 if ($proxysettings{'MAX_INCOMING_SIZE'} > 0) {
37273bc6
CS		 3884 if (!-z $acl_src_unrestricted_ip) { print FILE "reply_body_max_size 0 deny IPFire_unrestricted_ips\n"; }
3885 if (!-z $acl_src_unrestricted_mac) { print FILE "reply_body_max_size 0 deny IPFire_unrestricted_mac\n"; }
ed38f89d
MT		 3886 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3887 {
37273bc6 3888 if (!-z $extgrp) { print FILE "reply_body_max_size 0 deny for_extended_users\n"; }
ed38f89d
MT		 3889 }
3890 }
d9227212
CS		 3891
3892 if ( $replybodymaxsize != '0' )
3893 {
3894 print FILE "reply_body_max_size $replybodymaxsize deny all\n\n";
3895 }
ed38f89d
MT		 3896
3897 print FILE "visible_hostname";
3898 if ($proxysettings{'VISIBLE_HOSTNAME'} eq '')
3899 {
3900 print FILE " $mainsettings{'HOSTNAME'}.$mainsettings{'DOMAINNAME'}\n\n";
3901 } else {
3902 print FILE " $proxysettings{'VISIBLE_HOSTNAME'}\n\n";
3903 }
3904
fe1656d2
CS		 3905 if (!($proxysettings{'ADMIN_MAIL_ADDRESS'} eq '')) { print FILE "cache_mgr $proxysettings{'ADMIN_MAIL_ADDRESS'}\n"; }
3906 if (!($proxysettings{'ADMIN_PASSWORD'} eq '')) { print FILE "cachemgr_passwd $proxysettings{'ADMIN_PASSWORD'} all\n"; }
3907 print FILE "\n";
3908
3909 print FILE "max_filedescriptors $proxysettings{'FILEDESCRIPTORS'}\n\n";
ed38f89d
MT		 3910
3911 # Write the parent proxy info, if needed.
3912 if ($remotehost ne '')
3913 {
ed38f89d 3914 print FILE "cache_peer $remotehost parent $remoteport 3130 default no-query";
363fb6af
MT		 3915
3916 # Enter authentication for the parent cache. Option format is
3917 # login=user:password ($proxy1='YES')
3918 # login=PASS ($proxy1='PASS')
3919 # login=*:password ($proxysettings{'FORWARD_USERNAME'} eq 'on')
3920 if (($proxy1 eq 'YES') || ($proxy1 eq 'PASS'))
3921 {
3922 print FILE " login=$proxysettings{'UPSTREAM_USER'}";
3923 if ($proxy1 eq 'YES') { print FILE ":$proxysettings{'UPSTREAM_PASSWORD'}"; }
ed38f89d 3924 }
363fb6af
MT		 3925 elsif ($proxysettings{'FORWARD_USERNAME'} eq 'on') { print FILE " login=*:password"; }
3926
488d1b7c
CS		 3927 print FILE "\nalways_direct allow IPFire_ips\n";
3928 print FILE "never_direct allow all\n\n";
ed38f89d 3929 }
3900a6c7 3930 if (($proxysettings{'ENABLE_FILTER'} eq 'on') || ($proxysettings{'ENABLE_UPDXLRATOR'} eq 'on') || ($proxysettings{'ENABLE_CLAMAV'} eq 'on'))
363fb6af
MT		 3931 {
3932 print FILE "url_rewrite_program /usr/sbin/redirect_wrapper\n";
62459123 3933 print FILE "url_rewrite_children $proxysettings{'CHILDREN'}\n\n";
ed38f89d 3934 }
ed38f89d
MT		 3935 close FILE;
3936}
3937
3938# -------------------------------------------------------------------
3939
3940sub adduser
3941{
3942 my ($str_user, $str_pass, $str_group) = @_;
3943 my @groupmembers=();
3944
3945 if ($str_pass eq 'lEaVeAlOnE')
3946 {
3947 open(FILE, "$userdb");
3948 @groupmembers = <FILE>;
3949 close(FILE);
3950 foreach $line (@groupmembers) { if ($line =~ /^$str_user:/i) { $str_pass = substr($line,index($line,":")); } }
3951 &deluser($str_user);
3952 open(FILE, ">>$userdb");
3953 flock FILE,2;
3954 print FILE "$str_user$str_pass";
3955 close(FILE);
3956 } else {
3957 &deluser($str_user);
d12aede7 3958 system("/usr/sbin/htpasswd -b $userdb $str_user $str_pass");
ed38f89d
MT		 3959 }
3960
3961 if ($str_group eq 'standard') { open(FILE, ">>$stdgrp");
3962 } elsif ($str_group eq 'extended') { open(FILE, ">>$extgrp");
3963 } elsif ($str_group eq 'disabled') { open(FILE, ">>$disgrp"); }
3964 flock FILE, 2;
3965 print FILE "$str_user\n";
3966 close(FILE);
3967
3968 return;
3969}
3970
3971# -------------------------------------------------------------------
3972
3973sub deluser
3974{
3975 my ($str_user) = @_;
3976 my $groupfile='';
3977 my @groupmembers=();
3978 my @templist=();
3979
3980 foreach $groupfile ($stdgrp, $extgrp, $disgrp)
3981 {
3982 undef @templist;
3983 open(FILE, "$groupfile");
3984 @groupmembers = <FILE>;
3985 close(FILE);
3986 foreach $line (@groupmembers) { if (!($line =~ /^$str_user$/i)) { push(@templist, $line); } }
3987 open(FILE, ">$groupfile");
3988 flock FILE, 2;
3989 print FILE @templist;
3990 close(FILE);
3991 }
3992
3993 undef @templist;
3994 open(FILE, "$userdb");
3995 @groupmembers = <FILE>;
3996 close(FILE);
3997 foreach $line (@groupmembers) { if (!($line =~ /^$str_user:/i)) { push(@templist, $line); } }
3998 open(FILE, ">$userdb");
3999 flock FILE, 2;
4000 print FILE @templist;
4001 close(FILE);
4002
4003 return;
4004}
ac1cfefa 4005
ed38f89d 4006# -------------------------------------------------------------------
fe1656d2
CS		 4007
4008sub writecachemgr
4009{
4010 open(FILE, ">${General::swroot}/proxy/cachemgr.conf");
4011 flock(FILE, 2);
4012 print FILE "$netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}\n";
4013 print FILE "localhost";
d9f2cfa4 4014 close(FILE);
fe1656d2
CS		 4015 return;
4016}
4017
bd027d94 4018# -------------------------------------------------------------------
Peter's tree of IPFire 2.x