]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - html/cgi-bin/proxy.cgi
projects / people / pmueller / ipfire-2.x.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Pakfire laedt die Listen jetzt besser und hat eine veraenderte Oberflaeche bekommen.
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / proxy.cgi
CommitLineData
ac1cfefa
MT		 1#!/usr/bin/perl
2#
9fb25b1c 3# (c) 2004-2007 marco.s - http://www.advproxy.net
ac1cfefa
MT		 4#
5# This code is distributed under the terms of the GPL
6#
9fb25b1c 7# $Id: advproxy.cgi,v 2.1.0 2007/03/06 00:00:00 marco.s Exp $
ac1cfefa
MT		 8#
9
10use strict;
11
12# enable only the following on debugging purpose
cb5e9c6c
CS		 13#use warnings;
14#use CGI::Carp 'fatalsToBrowser';
ac1cfefa 15
ed38f89d 16require '/var/ipfire/general-functions.pl';
ac1cfefa
MT		 17require "${General::swroot}/lang.pl";
18require "${General::swroot}/header.pl";
19
363fb6af
MT		 20my @squidversion = `/usr/sbin/squid -v`;
21my $http_port='81';
22my $https_port='444';
23
18322edf
CS		 24my %color = ();
25my %mainsettings = ();
26&General::readhash("${General::swroot}/main/settings", \%mainsettings);
27&General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
28
ac1cfefa
MT		 29my %proxysettings=();
30my %netsettings=();
ed38f89d 31my %filtersettings=();
9fb25b1c 32my %xlratorsettings=();
ed38f89d 33my %stdproxysettings=();
ac1cfefa 34my %mainsettings=();
ed38f89d
MT		 35
36my %checked=();
37my %selected=();
38
39my @throttle_limits=(64,128,256,384,512,1024,2048,3072,5120);
40my $throttle_binary="bin|cab|exe|gz|rar|sea|tar|tgz|zip";
41my $throttle_dskimg="b5t|bin|bwt|ccd|cdi|cue|gho|img|iso|mds|nrg|pqi";
42my $throttle_mmedia="aiff?|asf|avi|divx|mov|mp3|mpe?g|qt|ra?m";
43
363fb6af
MT		 44my $def_ports_safe="80 # http\n21 # ftp\n443 # https\n563 # snews\n70 # gopher\n210 # wais\n1025-65535 # unregistered ports\n280 # http-mgmt\n488 # gss-http\n591 # filemaker\n777 # multiling http\n800 # Squids port (for icons)\n";
45my $def_ports_ssl="443 # https\n563 # snews\n";
46
ed38f89d
MT		 47my @useragent=();
48my @useragentlist=();
49
50my $hintcolour='#FFFFCC';
51my $ncsa_buttontext='';
52my $language='';
53my $i=0;
54my $n=0;
55my $id=0;
56my $line='';
57my $user='';
58my @userlist=();
59my @grouplist=();
60my @temp=();
61my @templist=();
62
63my $cachemem=0;
64my $proxy1='';
65my $proxy2='';
66my $replybodymaxsize=0;
67my $browser_regexp='';
68my $needhup = 0;
69my $errormessage='';
70
71my $acldir = "${General::swroot}/proxy/advanced/acls";
72my $ncsadir = "${General::swroot}/proxy/advanced/ncsa";
73my $ntlmdir = "${General::swroot}/proxy/advanced/ntlm";
74my $raddir = "${General::swroot}/proxy/advanced/radius";
75my $identdir = "${General::swroot}/proxy/advanced/ident";
76my $credir = "${General::swroot}/proxy/advanced/cre";
77
78my $userdb = "$ncsadir/passwd";
79my $stdgrp = "$ncsadir/standard.grp";
80my $extgrp = "$ncsadir/extended.grp";
81my $disgrp = "$ncsadir/disabled.grp";
82
83my $browserdb = "${General::swroot}/proxy/advanced/useragents";
84my $mimetypes = "${General::swroot}/proxy/advanced/mimetypes";
85my $throttled_urls = "${General::swroot}/proxy/advanced/throttle";
86
87my $cre_enabled = "${General::swroot}/proxy/advanced/cre/enable";
88my $cre_groups = "${General::swroot}/proxy/advanced/cre/classrooms";
89my $cre_svhosts = "${General::swroot}/proxy/advanced/cre/supervisors";
90
91my $identhosts = "$identdir/hosts";
92
f1baee3e
MT		 93my $authdir = "/usr/lib/squid/auth";
94my $errordir = "/usr/lib/squid/errors";
ed38f89d
MT		 95
96my $acl_src_subnets = "$acldir/src_subnets.acl";
97my $acl_src_banned_ip = "$acldir/src_banned_ip.acl";
98my $acl_src_banned_mac = "$acldir/src_banned_mac.acl";
99my $acl_src_unrestricted_ip = "$acldir/src_unrestricted_ip.acl";
100my $acl_src_unrestricted_mac = "$acldir/src_unrestricted_mac.acl";
101my $acl_src_noaccess_ip = "$acldir/src_noaccess_ip.acl";
102my $acl_src_noaccess_mac = "$acldir/src_noaccess_mac.acl";
103my $acl_dst_nocache = "$acldir/dst_nocache.acl";
104my $acl_dst_noauth = "$acldir/dst_noauth.acl";
105my $acl_dst_throttle = "$acldir/dst_throttle.acl";
363fb6af
MT		 106my $acl_ports_safe = "$acldir/ports_safe.acl";
107my $acl_ports_ssl = "$acldir/ports_ssl.acl";
ed38f89d
MT		 108my $acl_include = "$acldir/include.acl";
109
363fb6af
MT		 110my $updaccelversion = 'n/a';
111my $urlfilterversion = 'n/a';
112
ed38f89d
MT		 113unless (-d "$acldir") { mkdir("$acldir"); }
114unless (-d "$ncsadir") { mkdir("$ncsadir"); }
115unless (-d "$ntlmdir") { mkdir("$ntlmdir"); }
116unless (-d "$raddir") { mkdir("$raddir"); }
117unless (-d "$identdir") { mkdir("$identdir"); }
118unless (-d "$credir") { mkdir("$credir"); }
119
120unless (-e $cre_groups) { system("touch $cre_groups"); }
121unless (-e $cre_svhosts) { system("touch $cre_svhosts"); }
122
123unless (-e $userdb) { system("touch $userdb"); }
124unless (-e $stdgrp) { system("touch $stdgrp"); }
125unless (-e $extgrp) { system("touch $extgrp"); }
126unless (-e $disgrp) { system("touch $disgrp"); }
127
128unless (-e $acl_src_subnets) { system("touch $acl_src_subnets"); }
129unless (-e $acl_src_banned_ip) { system("touch $acl_src_banned_ip"); }
130unless (-e $acl_src_banned_mac) { system("touch $acl_src_banned_mac"); }
131unless (-e $acl_src_unrestricted_ip) { system("touch $acl_src_unrestricted_ip"); }
132unless (-e $acl_src_unrestricted_mac) { system("touch $acl_src_unrestricted_mac"); }
133unless (-e $acl_src_noaccess_ip) { system("touch $acl_src_noaccess_ip"); }
134unless (-e $acl_src_noaccess_mac) { system("touch $acl_src_noaccess_mac"); }
135unless (-e $acl_dst_nocache) { system("touch $acl_dst_nocache"); }
136unless (-e $acl_dst_noauth) { system("touch $acl_dst_noauth"); }
137unless (-e $acl_dst_throttle) { system("touch $acl_dst_throttle"); }
363fb6af
MT		 138unless (-e $acl_ports_safe) { system("touch $acl_ports_safe"); }
139unless (-e $acl_ports_ssl) { system("touch $acl_ports_ssl"); }
ed38f89d
MT		 140unless (-e $acl_include) { system("touch $acl_include"); }
141
142unless (-e $browserdb) { system("touch $browserdb"); }
143unless (-e $mimetypes) { system("touch $mimetypes"); }
144
145open FILE, $browserdb;
146@useragentlist = sort { reverse(substr(reverse(substr($a,index($a,',')+1)),index(reverse(substr($a,index($a,','))),',')+1)) cmp reverse(substr(reverse(substr($b,index($b,',')+1)),index(reverse(substr($b,index($b,','))),',')+1))} grep !/(^$)|(^\s*#)/,<FILE>;
147close(FILE);
ac1cfefa
MT		 148
149&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
150&General::readhash("${General::swroot}/main/settings", \%mainsettings);
151
9fb25b1c
MT		 152$filtersettings{'CHILDREN'} = '5';
153if (-e "${General::swroot}/urlfilter/settings") {
154 &General::readhash("${General::swroot}/urlfilter/settings", \%filtersettings);
ed38f89d
MT		 155}
156
9fb25b1c
MT		 157$xlratorsettings{'CHILDREN'} = '5';
158if (-e "${General::swroot}/updatexlrator/settings") {
159 &General::readhash("${General::swroot}/updatexlrator/settings", \%xlratorsettings);
ed38f89d
MT		 160}
161
ac1cfefa
MT		 162&Header::showhttpheaders();
163
164$proxysettings{'ACTION'} = '';
165$proxysettings{'VALID'} = '';
166
ac1cfefa
MT		 167$proxysettings{'ENABLE'} = 'off';
168$proxysettings{'ENABLE_BLUE'} = 'off';
ac1cfefa
MT		 169$proxysettings{'TRANSPARENT'} = 'off';
170$proxysettings{'TRANSPARENT_BLUE'} = 'off';
ed38f89d
MT		 171$proxysettings{'PROXY_PORT'} = '800';
172$proxysettings{'VISIBLE_HOSTNAME'} = '';
173$proxysettings{'ADMIN_MAIL_ADDRESS'} = '';
0d948999
CS		 174$proxysettings{'ERR_LANGUAGE'} = 'German';
175$proxysettings{'ERR_DESIGN'} = 'ipfire';
363fb6af 176$proxysettings{'SUPPRESS_VERSION'} = 'off';
ed38f89d
MT		 177$proxysettings{'FORWARD_VIA'} = 'off';
178$proxysettings{'FORWARD_IPADDRESS'} = 'off';
179$proxysettings{'FORWARD_USERNAME'} = 'off';
363fb6af 180$proxysettings{'NO_CONNECTION_AUTH'} = 'off';
ed38f89d
MT		 181$proxysettings{'UPSTREAM_PROXY'} = '';
182$proxysettings{'UPSTREAM_USER'} = '';
183$proxysettings{'UPSTREAM_PASSWORD'} = '';
184$proxysettings{'LOGGING'} = 'off';
185$proxysettings{'LOGQUERY'} = 'off';
186$proxysettings{'LOGUSERAGENT'} = 'off';
187$proxysettings{'CACHE_MEM'} = '2';
188$proxysettings{'CACHE_SIZE'} = '50';
ac1cfefa
MT		 189$proxysettings{'MAX_SIZE'} = '4096';
190$proxysettings{'MIN_SIZE'} = '0';
ed38f89d
MT		 191$proxysettings{'MEM_POLICY'} = 'LRU';
192$proxysettings{'CACHE_POLICY'} = 'LRU';
193$proxysettings{'L1_DIRS'} = '16';
194$proxysettings{'OFFLINE_MODE'} = 'off';
195$proxysettings{'CLASSROOM_EXT'} = 'off';
196$proxysettings{'SUPERVISOR_PASSWORD'} = '';
9fb25b1c
MT		 197$proxysettings{'NO_PROXY_LOCAL'} = 'off';
198$proxysettings{'NO_PROXY_LOCAL_BLUE'} = 'off';
ed38f89d
MT		 199$proxysettings{'TIME_ACCESS_MODE'} = 'allow';
200$proxysettings{'TIME_FROM_HOUR'} = '00';
201$proxysettings{'TIME_FROM_MINUTE'} = '00';
202$proxysettings{'TIME_TO_HOUR'} = '24';
203$proxysettings{'TIME_TO_MINUTE'} = '00';
ac1cfefa
MT		 204$proxysettings{'MAX_OUTGOING_SIZE'} = '0';
205$proxysettings{'MAX_INCOMING_SIZE'} = '0';
ed38f89d
MT		 206$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';
207$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';
208$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';
209$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';
210$proxysettings{'THROTTLE_BINARY'} = 'off';
211$proxysettings{'THROTTLE_DSKIMG'} = 'off';
212$proxysettings{'THROTTLE_MMEDIA'} = 'off';
213$proxysettings{'ENABLE_MIME_FILTER'} = 'off';
214$proxysettings{'ENABLE_BROWSER_CHECK'} = 'off';
215$proxysettings{'FAKE_USERAGENT'} = '';
216$proxysettings{'FAKE_REFERER'} = '';
217$proxysettings{'AUTH_METHOD'} = 'none';
218$proxysettings{'AUTH_REALM'} = '';
219$proxysettings{'AUTH_MAX_USERIP'} = '';
220$proxysettings{'AUTH_CACHE_TTL'} = '60';
221$proxysettings{'AUTH_IPCACHE_TTL'} = '0';
222$proxysettings{'AUTH_CHILDREN'} = '5';
223$proxysettings{'NCSA_MIN_PASS_LEN'} = '6';
224$proxysettings{'NCSA_BYPASS_REDIR'} = 'off';
225$proxysettings{'NCSA_USERNAME'} = '';
226$proxysettings{'NCSA_GROUP'} = '';
227$proxysettings{'NCSA_PASS'} = '';
228$proxysettings{'NCSA_PASS_CONFIRM'} = '';
229$proxysettings{'LDAP_BASEDN'} = '';
230$proxysettings{'LDAP_TYPE'} = 'ADS';
231$proxysettings{'LDAP_SERVER'} = '';
232$proxysettings{'LDAP_PORT'} = '389';
233$proxysettings{'LDAP_BINDDN_USER'} = '';
234$proxysettings{'LDAP_BINDDN_PASS'} = '';
235$proxysettings{'LDAP_GROUP'} = '';
236$proxysettings{'NTLM_DOMAIN'} = '';
237$proxysettings{'NTLM_PDC'} = '';
238$proxysettings{'NTLM_BDC'} = '';
239$proxysettings{'NTLM_ENABLE_ACL'} = 'off';
240$proxysettings{'NTLM_USER_ACL'} = 'positive';
241$proxysettings{'RADIUS_SERVER'} = '';
363fb6af 242$proxysettings{'RADIUS_PORT'} = '1812';
ed38f89d
MT		 243$proxysettings{'RADIUS_IDENTIFIER'} = '';
244$proxysettings{'RADIUS_SECRET'} = '';
245$proxysettings{'RADIUS_ENABLE_ACL'} = 'off';
246$proxysettings{'RADIUS_USER_ACL'} = 'positive';
247$proxysettings{'IDENT_REQUIRED'} = 'off';
248$proxysettings{'IDENT_TIMEOUT'} = '10';
249$proxysettings{'IDENT_ENABLE_ACL'} = 'off';
250$proxysettings{'IDENT_USER_ACL'} = 'positive';
9fb25b1c
MT		 251$proxysettings{'ENABLE_FILTER'} = 'off';
252$proxysettings{'ENABLE_UPDXLRATOR'} = 'off';
ed38f89d
MT		 253
254$ncsa_buttontext = $Lang::tr{'advproxy NCSA create user'};
ac1cfefa
MT		 255
256&Header::getcgihash(\%proxysettings);
257
ed38f89d
MT		 258if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 0) {$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';}
259if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 0) {$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';}
260if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 0) {$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';}
261if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 0) {$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';}
ac1cfefa 262
ed38f89d 263if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy NCSA user management'})
ac1cfefa 264{
ed38f89d
MT		 265 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
266}
267
268if ($proxysettings{'ACTION'} eq $Lang::tr{'add'})
269{
270 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
271 if (length($proxysettings{'NCSA_PASS'}) < $proxysettings{'NCSA_MIN_PASS_LEN'}) {
272 $errormessage = $Lang::tr{'advproxy errmsg password length 1'}.$proxysettings{'NCSA_MIN_PASS_LEN'}.$Lang::tr{'advproxy errmsg password length 2'};
273 }
274 if (!($proxysettings{'NCSA_PASS'} eq $proxysettings{'NCSA_PASS_CONFIRM'})) {
275 $errormessage = $Lang::tr{'advproxy errmsg passwords different'};
276 }
277 if ($proxysettings{'NCSA_USERNAME'} eq '') {
278 $errormessage = $Lang::tr{'advproxy errmsg no username'};
279 }
280 if (!$errormessage) {
281 $proxysettings{'NCSA_USERNAME'} =~ tr/A-Z/a-z/;
282 &adduser($proxysettings{'NCSA_USERNAME'}, $proxysettings{'NCSA_PASS'}, $proxysettings{'NCSA_GROUP'});
283 }
284 $proxysettings{'NCSA_USERNAME'} = '';
285 $proxysettings{'NCSA_GROUP'} = '';
286 $proxysettings{'NCSA_PASS'} = '';
287 $proxysettings{'NCSA_PASS_CONFIRM'} = '';
288}
ac1cfefa 289
ed38f89d
MT		 290if ($proxysettings{'ACTION'} eq $Lang::tr{'remove'})
291{
292 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
293 &deluser($proxysettings{'ID'});
294}
295
9fb25b1c
MT		 296$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
297$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
298$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
299
ed38f89d
MT		 300if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'})
301{
302 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
303 $ncsa_buttontext = $Lang::tr{'advproxy NCSA update user'};
304 @temp = split(/:/,$proxysettings{'ID'});
305 $proxysettings{'NCSA_USERNAME'} = $temp[0];
306 $proxysettings{'NCSA_GROUP'} = $temp[1];
307 $proxysettings{'NCSA_PASS'} = "lEaVeAlOnE";
308 $proxysettings{'NCSA_PASS_CONFIRM'} = $proxysettings{'NCSA_PASS'};
309}
310
311if (($proxysettings{'ACTION'} eq $Lang::tr{'save'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}))
312{
ac1cfefa
MT		 313 if ($proxysettings{'ENABLE'} !~ /^(on|off)$/ ||
314 $proxysettings{'TRANSPARENT'} !~ /^(on|off)$/ ||
315 $proxysettings{'ENABLE_BLUE'} !~ /^(on|off)$/ ||
316 $proxysettings{'TRANSPARENT_BLUE'} !~ /^(on|off)$/ ) {
317 $errormessage = $Lang::tr{'invalid input'};
318 goto ERROR;
319 }
f2fdd0c1 320 if (!(&General::validport($proxysettings{'PROXY_PORT'})))
363fb6af
MT		 321 {
322 $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'};
323 goto ERROR;
324 }
ac1cfefa
MT		 325 if (!($proxysettings{'CACHE_SIZE'} =~ /^\d+/) ||
326 ($proxysettings{'CACHE_SIZE'} < 10))
327 {
ed38f89d
MT		 328 $errormessage = $Lang::tr{'advproxy errmsg hdd cache size'};
329 goto ERROR;
330 }
331 if (!($proxysettings{'CACHE_MEM'} =~ /^\d+/) ||
332 ($proxysettings{'CACHE_MEM'} < 1))
333 {
334 $errormessage = $Lang::tr{'advproxy errmsg mem cache size'};
ac1cfefa
MT		 335 goto ERROR;
336 }
ed38f89d
MT		 337 my @free = `/usr/bin/free`;
338 $free[1] =~ m/(\d+)/;
339 $cachemem = int $1 / 2048;
340 if ($proxysettings{'CACHE_MEM'} > $cachemem) {
341 $proxysettings{'CACHE_MEM'} = $cachemem;
342 }
ac1cfefa
MT		 343 if (!($proxysettings{'MAX_SIZE'} =~ /^\d+/))
344 {
345 $errormessage = $Lang::tr{'invalid maximum object size'};
346 goto ERROR;
347 }
348 if (!($proxysettings{'MIN_SIZE'} =~ /^\d+/))
349 {
350 $errormessage = $Lang::tr{'invalid minimum object size'};
351 goto ERROR;
352 }
353 if (!($proxysettings{'MAX_OUTGOING_SIZE'} =~ /^\d+/))
354 {
355 $errormessage = $Lang::tr{'invalid maximum outgoing size'};
356 goto ERROR;
357 }
ed38f89d
MT		 358 if (!($proxysettings{'TIME_TO_HOUR'}.$proxysettings{'TIME_TO_MINUTE'} gt $proxysettings{'TIME_FROM_HOUR'}.$proxysettings{'TIME_FROM_MINUTE'}))
359 {
360 $errormessage = $Lang::tr{'advproxy errmsg time restriction'};
361 goto ERROR;
362 }
ac1cfefa
MT		 363 if (!($proxysettings{'MAX_INCOMING_SIZE'} =~ /^\d+/))
364 {
365 $errormessage = $Lang::tr{'invalid maximum incoming size'};
366 goto ERROR;
367 }
ed38f89d 368 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on')
ac1cfefa 369 {
ed38f89d
MT		 370 $browser_regexp = '';
371 foreach (@useragentlist)
372 {
373 chomp;
374 @useragent = split(/,/);
4e17adad 375 if ($proxysettings{'UA_'.$useragent[0]} eq 'on') { $browser_regexp .= "$useragent[2]|"; }
ed38f89d
MT		 376 }
377 chop($browser_regexp);
378 if (!$browser_regexp)
379 {
380 $errormessage = $Lang::tr{'advproxy errmsg no browser'};
381 goto ERROR;
382 }
383 }
384 if (!($proxysettings{'AUTH_METHOD'} eq 'none'))
385 {
363fb6af 386 unless (($proxysettings{'AUTH_METHOD'} eq 'ident') &&
ed38f89d
MT		 387 ($proxysettings{'IDENT_REQUIRED'} eq 'off') &&
388 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'off'))
389 {
390 if ($netsettings{'BLUE_DEV'})
363fb6af 391 {
ed38f89d
MT		 392 if ((($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on')) &&
393 (($proxysettings{'ENABLE_BLUE'} eq 'off') || ($proxysettings{'TRANSPARENT_BLUE'} eq 'on')))
394 {
395 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
396 goto ERROR;
397 }
398 } else {
399 if (($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on'))
400 {
401 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
402 goto ERROR;
403 }
404 }
405 }
406 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) &&
407 ((!($proxysettings{'AUTH_MAX_USERIP'} =~ /^\d+/)) || ($proxysettings{'AUTH_MAX_USERIP'} < 1) || ($proxysettings{'AUTH_MAX_USERIP'} > 255)))
408 {
409 $errormessage = $Lang::tr{'advproxy errmsg max userip'};
410 goto ERROR;
411 }
412 if (!($proxysettings{'AUTH_CACHE_TTL'} =~ /^\d+/))
413 {
414 $errormessage = $Lang::tr{'advproxy errmsg auth cache ttl'};
415 goto ERROR;
416 }
417 if (!($proxysettings{'AUTH_IPCACHE_TTL'} =~ /^\d+/))
418 {
419 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache ttl'};
420 goto ERROR;
421 }
422 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && ($proxysettings{'AUTH_IPCACHE_TTL'} eq '0'))
423 {
424 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache may not be null'};
425 goto ERROR;
426 }
427 if ((!($proxysettings{'AUTH_CHILDREN'} =~ /^\d+/)) || ($proxysettings{'AUTH_CHILDREN'} < 1) || ($proxysettings{'AUTH_CHILDREN'} > 255))
428 {
429 $errormessage = $Lang::tr{'advproxy errmsg auth children'};
430 goto ERROR;
431 }
432 }
433 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
434 {
435 if ((!($proxysettings{'NCSA_MIN_PASS_LEN'} =~ /^\d+/)) || ($proxysettings{'NCSA_MIN_PASS_LEN'} < 1) || ($proxysettings{'NCSA_MIN_PASS_LEN'} > 255))
436 {
437 $errormessage = $Lang::tr{'advproxy errmsg password length'};
438 goto ERROR;
439 }
440 }
441 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
442 {
443 if ((!($proxysettings{'IDENT_TIMEOUT'} =~ /^\d+/)) || ($proxysettings{'IDENT_TIMEOUT'} < 1))
444 {
445 $errormessage = $Lang::tr{'advproxy errmsg ident timeout'};
446 goto ERROR;
447 }
448 }
449 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
450 {
451 if ($proxysettings{'LDAP_BASEDN'} eq '')
452 {
453 $errormessage = $Lang::tr{'advproxy errmsg ldap base dn'};
454 goto ERROR;
455 }
456 if (!&General::validip($proxysettings{'LDAP_SERVER'}))
457 {
458 $errormessage = $Lang::tr{'advproxy errmsg ldap server'};
459 goto ERROR;
460 }
461 if (!&General::validport($proxysettings{'LDAP_PORT'}))
462 {
463 $errormessage = $Lang::tr{'advproxy errmsg ldap port'};
464 goto ERROR;
465 }
466 if (($proxysettings{'LDAP_TYPE'} eq 'ADS') || ($proxysettings{'LDAP_TYPE'} eq 'NDS'))
467 {
468 if (($proxysettings{'LDAP_BINDDN_USER'} eq '') || ($proxysettings{'LDAP_BINDDN_PASS'} eq ''))
469 {
470 $errormessage = $Lang::tr{'advproxy errmsg ldap bind dn'};
471 goto ERROR;
472 }
473 }
474 }
475 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
476 {
477 if ($proxysettings{'NTLM_DOMAIN'} eq '')
478 {
479 $errormessage = $Lang::tr{'advproxy errmsg ntlm domain'};
480 goto ERROR;
481 }
482 if ($proxysettings{'NTLM_PDC'} eq '')
483 {
484 $errormessage = $Lang::tr{'advproxy errmsg ntlm pdc'};
485 goto ERROR;
486 }
487 if (!&General::validhostname($proxysettings{'NTLM_PDC'}))
488 {
489 $errormessage = $Lang::tr{'advproxy errmsg invalid pdc'};
490 goto ERROR;
491 }
492 if ((!($proxysettings{'NTLM_BDC'} eq '')) && (!&General::validhostname($proxysettings{'NTLM_BDC'})))
493 {
494 $errormessage = $Lang::tr{'advproxy errmsg invalid bdc'};
495 goto ERROR;
496 }
497 }
498 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
499 {
500 if (!&General::validip($proxysettings{'RADIUS_SERVER'}))
501 {
502 $errormessage = $Lang::tr{'advproxy errmsg radius server'};
503 goto ERROR;
504 }
505 if (!&General::validport($proxysettings{'RADIUS_PORT'}))
506 {
507 $errormessage = $Lang::tr{'advproxy errmsg radius port'};
508 goto ERROR;
509 }
510 if ($proxysettings{'RADIUS_SECRET'} eq '')
511 {
512 $errormessage = $Lang::tr{'advproxy errmsg radius secret'};
513 goto ERROR;
514 }
ac1cfefa
MT		 515 }
516
363fb6af
MT		 517 # Quick parent proxy error checking of username and password info. If username password don't both exist give an error.
518 $proxy1 = 'YES';
519 $proxy2 = 'YES';
520 if (($proxysettings{'UPSTREAM_USER'} eq '')) {$proxy1 = '';}
521 if (($proxysettings{'UPSTREAM_PASSWORD'} eq '')) {$proxy2 = '';}
522 if ($proxysettings{'UPSTREAM_USER'} eq 'PASS') {$proxy1=$proxy2='PASS'; $proxysettings{'UPSTREAM_PASSWORD'} = '';}
523 if (($proxy1 ne $proxy2))
524 {
525 $errormessage = $Lang::tr{'advproxy errmsg invalid upstream proxy username or password setting'};
526 goto ERROR;
527 }
ac1cfefa 528
ed38f89d
MT		 529ERROR:
530 &check_acls;
ac1cfefa 531
ed38f89d
MT		 532 if ($errormessage) {
533 $proxysettings{'VALID'} = 'no'; }
534 else {
363fb6af 535 $proxysettings{'VALID'} = 'yes'; }
ac1cfefa 536
ed38f89d 537 if ($proxysettings{'VALID'} eq 'yes')
ac1cfefa 538 {
ed38f89d 539 &write_acls;
ac1cfefa 540
ed38f89d
MT		 541 delete $proxysettings{'SRC_SUBNETS'};
542 delete $proxysettings{'SRC_BANNED_IP'};
543 delete $proxysettings{'SRC_BANNED_MAC'};
544 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
545 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
546 delete $proxysettings{'DST_NOCACHE'};
547 delete $proxysettings{'DST_NOAUTH'};
363fb6af
MT		 548 delete $proxysettings{'PORTS_SAFE'};
549 delete $proxysettings{'PORTS_SSL'};
ed38f89d
MT		 550 delete $proxysettings{'MIME_TYPES'};
551 delete $proxysettings{'NTLM_ALLOW_USERS'};
552 delete $proxysettings{'NTLM_DENY_USERS'};
553 delete $proxysettings{'RADIUS_ALLOW_USERS'};
554 delete $proxysettings{'RADIUS_DENY_USERS'};
555 delete $proxysettings{'IDENT_HOSTS'};
556 delete $proxysettings{'IDENT_ALLOW_USERS'};
557 delete $proxysettings{'IDENT_DENY_USERS'};
ac1cfefa 558
ed38f89d
MT		 559 delete $proxysettings{'CRE_GROUPS'};
560 delete $proxysettings{'CRE_SVHOSTS'};
ac1cfefa 561
ed38f89d
MT		 562 delete $proxysettings{'NCSA_USERNAME'};
563 delete $proxysettings{'NCSA_GROUP'};
564 delete $proxysettings{'NCSA_PASS'};
565 delete $proxysettings{'NCSA_PASS_CONFIRM'};
ac1cfefa 566
ed38f89d
MT		 567 $proxysettings{'TIME_MON'} = 'off' unless exists $proxysettings{'TIME_MON'};
568 $proxysettings{'TIME_TUE'} = 'off' unless exists $proxysettings{'TIME_TUE'};
569 $proxysettings{'TIME_WED'} = 'off' unless exists $proxysettings{'TIME_WED'};
570 $proxysettings{'TIME_THU'} = 'off' unless exists $proxysettings{'TIME_THU'};
571 $proxysettings{'TIME_FRI'} = 'off' unless exists $proxysettings{'TIME_FRI'};
572 $proxysettings{'TIME_SAT'} = 'off' unless exists $proxysettings{'TIME_SAT'};
573 $proxysettings{'TIME_SUN'} = 'off' unless exists $proxysettings{'TIME_SUN'};
ac1cfefa 574
ed38f89d
MT		 575 $proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'off' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
576 $proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'off' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
ac1cfefa 577
ed38f89d 578 &General::writehash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
ac1cfefa 579
363fb6af
MT		 580 if (-e "${General::swroot}/proxy/settings") { &General::readhash("${General::swroot}/proxy/settings", \%stdproxysettings); }
581 $stdproxysettings{'PROXY_PORT'} = $proxysettings{'PROXY_PORT'};
9fb25b1c
MT		 582 $stdproxysettings{'ENABLE_FILTER'} = $proxysettings{'ENABLE_FILTER'};
583 $stdproxysettings{'ENABLE_UPDXLRATOR'} = $proxysettings{'ENABLE_UPDXLRATOR'};
363fb6af 584 &General::writehash("${General::swroot}/proxy/settings", \%stdproxysettings);
ac1cfefa 585
ed38f89d
MT		 586 &writeconfig;
587 &writepacfile;
588
d56fc335 589 system ('/usr/local/bin/squidctrl', 'disable');
ed38f89d
MT		 590 unlink "${General::swroot}/proxy/enable";
591 unlink "${General::swroot}/proxy/transparent";
592 unlink "${General::swroot}/proxy/enable_blue";
593 unlink "${General::swroot}/proxy/transparent_blue";
ac1cfefa 594
ac1cfefa 595 if ($proxysettings{'ENABLE'} eq 'on') {
d56fc335
MT		 596 system ('/usr/bin/touch', "${General::swroot}/proxy/enable");
597 system ('/usr/local/bin/squidctrl', 'enable'); }
ac1cfefa 598 if ($proxysettings{'TRANSPARENT'} eq 'on') {
9833e7d8 599 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent"); }
ac1cfefa 600 if ($proxysettings{'ENABLE_BLUE'} eq 'on') {
d56fc335
MT		 601 system ('/usr/bin/touch', "${General::swroot}/proxy/enable_blue");
602 system ('/usr/local/bin/squidctrl', 'enable'); }
ac1cfefa 603 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') {
9833e7d8 604 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent_blue"); }
ed38f89d 605
d56fc335 606 if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) { system('/usr/local/bin/squidctrl restart >/dev/null 2>&1'); }
ac1cfefa
MT		 607 }
608}
609
363fb6af 610if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy clear cache'})
ac1cfefa 611{
d56fc335 612 system('/usr/local/bin/squidctrl flush >/dev/null 2>&1');
ac1cfefa
MT		 613}
614
ed38f89d
MT		 615if (!$errormessage)
616{
617 if (-e "${General::swroot}/proxy/advanced/settings") {
618 &General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
619 } elsif (-e "${General::swroot}/proxy/settings") {
620 &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
621 }
622 &read_acls;
623}
ac1cfefa
MT		 624
625$checked{'ENABLE'}{'off'} = '';
626$checked{'ENABLE'}{'on'} = '';
627$checked{'ENABLE'}{$proxysettings{'ENABLE'}} = "checked='checked'";
628
629$checked{'TRANSPARENT'}{'off'} = '';
630$checked{'TRANSPARENT'}{'on'} = '';
631$checked{'TRANSPARENT'}{$proxysettings{'TRANSPARENT'}} = "checked='checked'";
632
633$checked{'ENABLE_BLUE'}{'off'} = '';
634$checked{'ENABLE_BLUE'}{'on'} = '';
635$checked{'ENABLE_BLUE'}{$proxysettings{'ENABLE_BLUE'}} = "checked='checked'";
636
637$checked{'TRANSPARENT_BLUE'}{'off'} = '';
638$checked{'TRANSPARENT_BLUE'}{'on'} = '';
639$checked{'TRANSPARENT_BLUE'}{$proxysettings{'TRANSPARENT_BLUE'}} = "checked='checked'";
640
363fb6af
MT		 641$checked{'SUPPRESS_VERSION'}{'off'} = '';
642$checked{'SUPPRESS_VERSION'}{'on'} = '';
643$checked{'SUPPRESS_VERSION'}{$proxysettings{'SUPPRESS_VERSION'}} = "checked='checked'";
644
ed38f89d
MT		 645$checked{'FORWARD_IPADDRESS'}{'off'} = '';
646$checked{'FORWARD_IPADDRESS'}{'on'} = '';
647$checked{'FORWARD_IPADDRESS'}{$proxysettings{'FORWARD_IPADDRESS'}} = "checked='checked'";
648$checked{'FORWARD_USERNAME'}{'off'} = '';
649$checked{'FORWARD_USERNAME'}{'on'} = '';
650$checked{'FORWARD_USERNAME'}{$proxysettings{'FORWARD_USERNAME'}} = "checked='checked'";
651$checked{'FORWARD_VIA'}{'off'} = '';
652$checked{'FORWARD_VIA'}{'on'} = '';
653$checked{'FORWARD_VIA'}{$proxysettings{'FORWARD_VIA'}} = "checked='checked'";
363fb6af
MT		 654$checked{'NO_CONNECTION_AUTH'}{'off'} = '';
655$checked{'NO_CONNECTION_AUTH'}{'on'} = '';
656$checked{'NO_CONNECTION_AUTH'}{$proxysettings{'NO_CONNECTION_AUTH'}} = "checked='checked'";
ed38f89d
MT		 657
658$selected{'MEM_POLICY'}{$proxysettings{'MEM_POLICY'}} = "selected='selected'";
659$selected{'CACHE_POLICY'}{$proxysettings{'CACHE_POLICY'}} = "selected='selected'";
660$selected{'L1_DIRS'}{$proxysettings{'L1_DIRS'}} = "selected='selected'";
661$checked{'OFFLINE_MODE'}{'off'} = '';
662$checked{'OFFLINE_MODE'}{'on'} = '';
663$checked{'OFFLINE_MODE'}{$proxysettings{'OFFLINE_MODE'}} = "checked='checked'";
664
ac1cfefa
MT		 665$checked{'LOGGING'}{'off'} = '';
666$checked{'LOGGING'}{'on'} = '';
667$checked{'LOGGING'}{$proxysettings{'LOGGING'}} = "checked='checked'";
ed38f89d
MT		 668$checked{'LOGQUERY'}{'off'} = '';
669$checked{'LOGQUERY'}{'on'} = '';
670$checked{'LOGQUERY'}{$proxysettings{'LOGQUERY'}} = "checked='checked'";
671$checked{'LOGUSERAGENT'}{'off'} = '';
672$checked{'LOGUSERAGENT'}{'on'} = '';
673$checked{'LOGUSERAGENT'}{$proxysettings{'LOGUSERAGENT'}} = "checked='checked'";
674
675$selected{'ERR_LANGUAGE'}{$proxysettings{'ERR_LANGUAGE'}} = "selected='selected'";
363fb6af 676$selected{'ERR_DESIGN'}{$proxysettings{'ERR_DESIGN'}} = "selected='selected'";
ed38f89d 677
9fb25b1c
MT		 678$checked{'NO_PROXY_LOCAL'}{'off'} = '';
679$checked{'NO_PROXY_LOCAL'}{'on'} = '';
680$checked{'NO_PROXY_LOCAL'}{$proxysettings{'NO_PROXY_LOCAL'}} = "checked='checked'";
681$checked{'NO_PROXY_LOCAL_BLUE'}{'off'} = '';
682$checked{'NO_PROXY_LOCAL_BLUE'}{'on'} = '';
683$checked{'NO_PROXY_LOCAL_BLUE'}{$proxysettings{'NO_PROXY_LOCAL_BLUE'}} = "checked='checked'";
684
ed38f89d
MT		 685$checked{'CLASSROOM_EXT'}{'off'} = '';
686$checked{'CLASSROOM_EXT'}{'on'} = '';
687$checked{'CLASSROOM_EXT'}{$proxysettings{'CLASSROOM_EXT'}} = "checked='checked'";
688
689$selected{'TIME_ACCESS_MODE'}{$proxysettings{'TIME_ACCESS_MODE'}} = "selected='selected'";
690$selected{'TIME_FROM_HOUR'}{$proxysettings{'TIME_FROM_HOUR'}} = "selected='selected'";
691$selected{'TIME_FROM_MINUTE'}{$proxysettings{'TIME_FROM_MINUTE'}} = "selected='selected'";
692$selected{'TIME_TO_HOUR'}{$proxysettings{'TIME_TO_HOUR'}} = "selected='selected'";
693$selected{'TIME_TO_MINUTE'}{$proxysettings{'TIME_TO_MINUTE'}} = "selected='selected'";
694
695$proxysettings{'TIME_MON'} = 'on' unless exists $proxysettings{'TIME_MON'};
696$proxysettings{'TIME_TUE'} = 'on' unless exists $proxysettings{'TIME_TUE'};
697$proxysettings{'TIME_WED'} = 'on' unless exists $proxysettings{'TIME_WED'};
698$proxysettings{'TIME_THU'} = 'on' unless exists $proxysettings{'TIME_THU'};
699$proxysettings{'TIME_FRI'} = 'on' unless exists $proxysettings{'TIME_FRI'};
700$proxysettings{'TIME_SAT'} = 'on' unless exists $proxysettings{'TIME_SAT'};
701$proxysettings{'TIME_SUN'} = 'on' unless exists $proxysettings{'TIME_SUN'};
702
703$checked{'TIME_MON'}{'off'} = '';
704$checked{'TIME_MON'}{'on'} = '';
705$checked{'TIME_MON'}{$proxysettings{'TIME_MON'}} = "checked='checked'";
706$checked{'TIME_TUE'}{'off'} = '';
707$checked{'TIME_TUE'}{'on'} = '';
708$checked{'TIME_TUE'}{$proxysettings{'TIME_TUE'}} = "checked='checked'";
709$checked{'TIME_WED'}{'off'} = '';
710$checked{'TIME_WED'}{'on'} = '';
711$checked{'TIME_WED'}{$proxysettings{'TIME_WED'}} = "checked='checked'";
712$checked{'TIME_THU'}{'off'} = '';
713$checked{'TIME_THU'}{'on'} = '';
714$checked{'TIME_THU'}{$proxysettings{'TIME_THU'}} = "checked='checked'";
715$checked{'TIME_FRI'}{'off'} = '';
716$checked{'TIME_FRI'}{'on'} = '';
717$checked{'TIME_FRI'}{$proxysettings{'TIME_FRI'}} = "checked='checked'";
718$checked{'TIME_SAT'}{'off'} = '';
719$checked{'TIME_SAT'}{'on'} = '';
720$checked{'TIME_SAT'}{$proxysettings{'TIME_SAT'}} = "checked='checked'";
721$checked{'TIME_SUN'}{'off'} = '';
722$checked{'TIME_SUN'}{'on'} = '';
723$checked{'TIME_SUN'}{$proxysettings{'TIME_SUN'}} = "checked='checked'";
724
725$selected{'THROTTLING_GREEN_TOTAL'}{$proxysettings{'THROTTLING_GREEN_TOTAL'}} = "selected='selected'";
726$selected{'THROTTLING_GREEN_HOST'}{$proxysettings{'THROTTLING_GREEN_HOST'}} = "selected='selected'";
727$selected{'THROTTLING_BLUE_TOTAL'}{$proxysettings{'THROTTLING_BLUE_TOTAL'}} = "selected='selected'";
728$selected{'THROTTLING_BLUE_HOST'}{$proxysettings{'THROTTLING_BLUE_HOST'}} = "selected='selected'";
729
730$checked{'THROTTLE_BINARY'}{'off'} = '';
731$checked{'THROTTLE_BINARY'}{'on'} = '';
732$checked{'THROTTLE_BINARY'}{$proxysettings{'THROTTLE_BINARY'}} = "checked='checked'";
733$checked{'THROTTLE_DSKIMG'}{'off'} = '';
734$checked{'THROTTLE_DSKIMG'}{'on'} = '';
735$checked{'THROTTLE_DSKIMG'}{$proxysettings{'THROTTLE_DSKIMG'}} = "checked='checked'";
736$checked{'THROTTLE_MMEDIA'}{'off'} = '';
737$checked{'THROTTLE_MMEDIA'}{'on'} = '';
738$checked{'THROTTLE_MMEDIA'}{$proxysettings{'THROTTLE_MMEDIA'}} = "checked='checked'";
739
740$checked{'ENABLE_MIME_FILTER'}{'off'} = '';
741$checked{'ENABLE_MIME_FILTER'}{'on'} = '';
742$checked{'ENABLE_MIME_FILTER'}{$proxysettings{'ENABLE_MIME_FILTER'}} = "checked='checked'";
743
744$checked{'ENABLE_BROWSER_CHECK'}{'off'} = '';
745$checked{'ENABLE_BROWSER_CHECK'}{'on'} = '';
746$checked{'ENABLE_BROWSER_CHECK'}{$proxysettings{'ENABLE_BROWSER_CHECK'}} = "checked='checked'";
747
748foreach (@useragentlist) {
749 @useragent = split(/,/);
4e17adad
CS		 750 $checked{'UA_'.$useragent[0]}{'off'} = '';
751 $checked{'UA_'.$useragent[0]}{'on'} = '';
752 $checked{'UA_'.$useragent[0]}{$proxysettings{'UA_'.$useragent[0]}} = "checked='checked'";
ed38f89d
MT		 753}
754
755$checked{'AUTH_METHOD'}{'none'} = '';
756$checked{'AUTH_METHOD'}{'ncsa'} = '';
757$checked{'AUTH_METHOD'}{'ident'} = '';
758$checked{'AUTH_METHOD'}{'ldap'} = '';
759$checked{'AUTH_METHOD'}{'ntlm'} = '';
760$checked{'AUTH_METHOD'}{'radius'} = '';
761$checked{'AUTH_METHOD'}{$proxysettings{'AUTH_METHOD'}} = "checked='checked'";
ac1cfefa 762
ed38f89d
MT		 763$proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'on' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
764
765$checked{'AUTH_ALWAYS_REQUIRED'}{'off'} = '';
766$checked{'AUTH_ALWAYS_REQUIRED'}{'on'} = '';
767$checked{'AUTH_ALWAYS_REQUIRED'}{$proxysettings{'AUTH_ALWAYS_REQUIRED'}} = "checked='checked'";
768
769$checked{'NCSA_BYPASS_REDIR'}{'off'} = '';
770$checked{'NCSA_BYPASS_REDIR'}{'on'} = '';
771$checked{'NCSA_BYPASS_REDIR'}{$proxysettings{'NCSA_BYPASS_REDIR'}} = "checked='checked'";
772
773$selected{'NCSA_GROUP'}{$proxysettings{'NCSA_GROUP'}} = "selected='selected'";
774
775$selected{'LDAP_TYPE'}{$proxysettings{'LDAP_TYPE'}} = "selected='selected'";
776
777$proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'on' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
778
779$checked{'NTLM_ENABLE_INT_AUTH'}{'off'} = '';
780$checked{'NTLM_ENABLE_INT_AUTH'}{'on'} = '';
781$checked{'NTLM_ENABLE_INT_AUTH'}{$proxysettings{'NTLM_ENABLE_INT_AUTH'}} = "checked='checked'";
782
783$checked{'NTLM_ENABLE_ACL'}{'off'} = '';
784$checked{'NTLM_ENABLE_ACL'}{'on'} = '';
785$checked{'NTLM_ENABLE_ACL'}{$proxysettings{'NTLM_ENABLE_ACL'}} = "checked='checked'";
786
787$checked{'NTLM_USER_ACL'}{'positive'} = '';
788$checked{'NTLM_USER_ACL'}{'negative'} = '';
789$checked{'NTLM_USER_ACL'}{$proxysettings{'NTLM_USER_ACL'}} = "checked='checked'";
790
791$checked{'RADIUS_ENABLE_ACL'}{'off'} = '';
792$checked{'RADIUS_ENABLE_ACL'}{'on'} = '';
793$checked{'RADIUS_ENABLE_ACL'}{$proxysettings{'RADIUS_ENABLE_ACL'}} = "checked='checked'";
794
795$checked{'RADIUS_USER_ACL'}{'positive'} = '';
796$checked{'RADIUS_USER_ACL'}{'negative'} = '';
797$checked{'RADIUS_USER_ACL'}{$proxysettings{'RADIUS_USER_ACL'}} = "checked='checked'";
798
799$checked{'IDENT_REQUIRED'}{'off'} = '';
800$checked{'IDENT_REQUIRED'}{'on'} = '';
801$checked{'IDENT_REQUIRED'}{$proxysettings{'IDENT_REQUIRED'}} = "checked='checked'";
802
803$checked{'IDENT_ENABLE_ACL'}{'off'} = '';
804$checked{'IDENT_ENABLE_ACL'}{'on'} = '';
805$checked{'IDENT_ENABLE_ACL'}{$proxysettings{'IDENT_ENABLE_ACL'}} = "checked='checked'";
806
807$checked{'IDENT_USER_ACL'}{'positive'} = '';
808$checked{'IDENT_USER_ACL'}{'negative'} = '';
809$checked{'IDENT_USER_ACL'}{$proxysettings{'IDENT_USER_ACL'}} = "checked='checked'";
810
9fb25b1c
MT		 811$checked{'ENABLE_FILTER'}{'off'} = '';
812$checked{'ENABLE_FILTER'}{'on'} = '';
813$checked{'ENABLE_FILTER'}{$proxysettings{'ENABLE_FILTER'}} = "checked='checked'";
ed38f89d 814
9fb25b1c
MT		 815$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
816$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
817$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
ed38f89d
MT		 818
819&Header::openpage($Lang::tr{'advproxy advanced web proxy configuration'}, 1, '');
ac1cfefa
MT		 820
821&Header::openbigbox('100%', 'left', '', $errormessage);
822
823if ($errormessage) {
824 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
825 print "<font class='base'>$errormessage&nbsp;</font>\n";
826 &Header::closebox();
827}
828
363fb6af
MT		 829if ($squidversion[0] =~ /^Squid\sCache:\sVersion\s/i)
830{
831 $squidversion[0] =~ s/^Squid\sCache:\sVersion//i;
832 $squidversion[0] =~ s/^\s+//g;
833 $squidversion[0] =~ s/\s+$//g;
834} else {
835 $squidversion[0] = $Lang::tr{'advproxy unknown'};
836}
837
ed38f89d
MT		 838# ===================================================================
839# Main settings
840# ===================================================================
841
842unless ($proxysettings{'NCSA_EDIT_MODE'} eq 'yes') {
843
ac1cfefa
MT		 844print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
845
ed38f89d
MT		 846&Header::openbox('100%', 'left', "$Lang::tr{'advproxy advanced web proxy'}");
847
ac1cfefa
MT		 848print <<END
849<table width='100%'>
850<tr>
ed38f89d
MT		 851 <td colspan='4' class='base'><b>$Lang::tr{'advproxy common settings'}</b></td>
852</tr>
853<tr>
854 <td width='25%' class='base'>$Lang::tr{'advproxy enabled on'} <font color="$Header::colourgreen">Green</font>:</td>
855 <td width='20%'><input type='checkbox' name='ENABLE' $checked{'ENABLE'}{'on'} /></td>
856 <td width='25%' class='base'>$Lang::tr{'advproxy proxy port'}:</td>
857 <td width='30%'><input type='text' name='PROXY_PORT' value='$proxysettings{'PROXY_PORT'}' size='5' /></td>
ac1cfefa
MT		 858</tr>
859<tr>
ed38f89d 860 <td class='base'>$Lang::tr{'advproxy transparent on'} <font color="$Header::colourgreen">Green</font>:</td>
ac1cfefa 861 <td><input type='checkbox' name='TRANSPARENT' $checked{'TRANSPARENT'}{'on'} /></td>
ed38f89d
MT		 862 <td class='base'>$Lang::tr{'advproxy visible hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
863 <td><input type='text' name='VISIBLE_HOSTNAME' value='$proxysettings{'VISIBLE_HOSTNAME'}' /></td>
ac1cfefa
MT		 864</tr>
865<tr>
866END
867;
868if ($netsettings{'BLUE_DEV'}) {
ed38f89d 869 print "<td class='base'>$Lang::tr{'advproxy enabled on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 870 print "<td><input type='checkbox' name='ENABLE_BLUE' $checked{'ENABLE_BLUE'}{'on'} /></td>";
871} else {
872 print "<td colspan='2'>&nbsp;</td>";
873}
874print <<END
ed38f89d
MT		 875 <td class='base'>$Lang::tr{'advproxy admin mail'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
876 <td><input type='text' name='ADMIN_MAIL_ADDRESS' value='$proxysettings{'ADMIN_MAIL_ADDRESS'}' /></td>
ac1cfefa
MT		 877</tr>
878<tr>
879END
880;
881if ($netsettings{'BLUE_DEV'}) {
ed38f89d 882 print "<td class='base'>$Lang::tr{'advproxy transparent on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 883 print "<td><input type='checkbox' name='TRANSPARENT_BLUE' $checked{'TRANSPARENT_BLUE'}{'on'} /></td>";
884} else {
885 print "<td colspan='2'>&nbsp;</td>";
886}
887print <<END
ed38f89d
MT		 888 <td class='base'>$Lang::tr{'advproxy error language'}:</td>
889 <td class='base'>
890 <select name='ERR_LANGUAGE'>
891END
892;
363fb6af 893 foreach (<$errordir/*>) {
ed38f89d
MT		 894 if (-d) {
895 $language = substr($_,rindex($_,"/")+1);
896 print "<option value='$language' $selected{'ERR_LANGUAGE'}{$language}>$language</option>\n";
897 }
898 }
899print <<END
900 </select>
901 </td>
902</tr>
10e4f239 903<tr>
363fb6af
MT		 904 <td class='base'>$Lang::tr{'advproxy suppress version'}:</td>
905 <td><input type='checkbox' name='SUPPRESS_VERSION' $checked{'SUPPRESS_VERSION'}{'on'} /></td>
906 <td class='base'>$Lang::tr{'advproxy error design'}:</td>
907 <td class='base'><select name='ERR_DESIGN'>
0d948999 908 <option value='ipfire' $selected{'ERR_DESIGN'}{'ipfire'}>IPFire</option>
363fb6af
MT		 909 <option value='squid' $selected{'ERR_DESIGN'}{'squid'}>$Lang::tr{'advproxy standard'}</option>
910 </select></td>
10e4f239
MT		 911</tr>
912<tr>
363fb6af
MT		 913 <td class='base'>$Lang::tr{'advproxy squid version'}:</td>
914 <td class='base'>&nbsp;[<font color='$Header::colourred'> $squidversion[0] </font>]</td>
915 <td>&nbsp;</td>
916 <td>&nbsp;</td>
10e4f239 917</tr>
ed38f89d
MT		 918</table>
919<hr size='1'>
920<table width='100%'>
9141bd34
CS		 921<tr>
922 <td class='base' width='50%'><b>$Lang::tr{'advproxy url filter'}</b> $Lang::tr{'advproxy enabled'}<input type='checkbox' name='ENABLE_FILTER' $checked{'ENABLE_FILTER'}{'on'} /></td>
923 <td class='base' width='50%'><b>$Lang::tr{'advproxy update accelerator'}</b> $Lang::tr{'advproxy enabled'}<input type='checkbox' name='ENABLE_UPDXLRATOR' $checked{'ENABLE_UPDXLRATOR'}{'on'} /></td>
924</tr>
925</table>
926<hr size='1'>
927<table width='100%'>
ed38f89d
MT		 928<tr>
929 <td colspan='4' class='base'><b>$Lang::tr{'advproxy upstream proxy'}</b></td>
930</tr>
931<tr>
9141bd34
CS		 932 <td class='base'>$Lang::tr{'advproxy via forwarding'}:</td><td><input type='checkbox' name='FORWARD_VIA' $checked{'FORWARD_VIA'}{'on'} /></td>
933 <td class='base'>$Lang::tr{'advproxy upstream proxy host:port'}<img src='/blob.gif' alt='*' /></td><td><input type='text' name='UPSTREAM_PROXY' value='$proxysettings{'UPSTREAM_PROXY'}' /></td>
ed38f89d
MT		 934</tr>
935<tr>
9141bd34
CS		 936 <td class='base'>$Lang::tr{'advproxy client IP forwarding'}:</td><td><input type='checkbox' name='FORWARD_IPADDRESS' $checked{'FORWARD_IPADDRESS'}{'on'} /></td>
937 <td class='base'>$Lang::tr{'advproxy upstream username'}<img src='/blob.gif' alt='*' /></td><td><input type='text' name='UPSTREAM_USER' value='$proxysettings{'UPSTREAM_USER'}' /></td>
ac1cfefa 938</tr>
ac1cfefa 939<tr>
9141bd34
CS		 940 <td class='base'>$Lang::tr{'advproxy username forwarding'}:</td><td><input type='checkbox' name='FORWARD_USERNAME' $checked{'FORWARD_USERNAME'}{'on'} />
941 <td class='base'>$Lang::tr{'advproxy upstream password'}:<img src='/blob.gif' alt='*' /></td><td><input type='password' name='UPSTREAM_PASSWORD' value='$proxysettings{'UPSTREAM_PASSWORD'}' /></td>
ed38f89d 942</tr>
363fb6af 943<tr>
9141bd34 944 <td class='base' colspan='4'>$Lang::tr{'advproxy no connection auth'}:<input type='checkbox' name='NO_CONNECTION_AUTH' $checked{'NO_CONNECTION_AUTH'}{'on'} /></td>
363fb6af 945</tr>
ed38f89d
MT		 946</table>
947<hr size='1'>
948<table width='100%'>
949<tr>
950 <td colspan='4' class='base'><b>$Lang::tr{'advproxy log settings'}</b></td>
951</tr>
952<tr>
9141bd34
CS		 953 <td class='base'>$Lang::tr{'advproxy log enabled'}:<input type='checkbox' name='LOGGING' $checked{'LOGGING'}{'on'} /></td>
954 <td class='base'>$Lang::tr{'advproxy log query'}:<input type='checkbox' name='LOGQUERY' $checked{'LOGQUERY'}{'on'} /></td>
955 <td class='base'>$Lang::tr{'advproxy log useragent'}:<input type='checkbox' name='LOGUSERAGENT' $checked{'LOGUSERAGENT'}{'on'} /></td>
ed38f89d
MT		 956</tr>
957</table>
958<hr size='1'>
959<table width='100%'>
960<tr>
961 <td colspan='4'><b>$Lang::tr{'advproxy cache management'}</b></td>
962</tr>
963<tr>
9141bd34 964 <td width='35%'></td><td width='15%'></td><td width='35%'></td><td width='15%'></td>
ac1cfefa
MT		 965</tr>
966<tr>
ed38f89d
MT		 967 <td class='base'>$Lang::tr{'advproxy ram cache size'}:</td>
968 <td><input type='text' name='CACHE_MEM' value='$proxysettings{'CACHE_MEM'}' size='5' /></td>
969 <td class='base'>$Lang::tr{'advproxy hdd cache size'}:</td>
ac1cfefa
MT		 970 <td><input type='text' name='CACHE_SIZE' value='$proxysettings{'CACHE_SIZE'}' size='5' /></td>
971</tr>
972<tr>
ed38f89d 973 <td class='base'>$Lang::tr{'advproxy min size'}:</td>
ac1cfefa 974 <td><input type='text' name='MIN_SIZE' value='$proxysettings{'MIN_SIZE'}' size='5' /></td>
ed38f89d 975 <td class='base'>$Lang::tr{'advproxy max size'}:</td>
ac1cfefa
MT		 976 <td><input type='text' name='MAX_SIZE' value='$proxysettings{'MAX_SIZE'}' size='5' /></td>
977</tr>
978<tr>
ed38f89d 979 <td class='base'>$Lang::tr{'advproxy number of L1 dirs'}:</td>
363fb6af
MT		 980 <td class='base'><select name='L1_DIRS'>
981 <option value='16' $selected{'L1_DIRS'}{'16'}>16</option>
982 <option value='32' $selected{'L1_DIRS'}{'32'}>32</option>
983 <option value='64' $selected{'L1_DIRS'}{'64'}>64</option>
984 <option value='128' $selected{'L1_DIRS'}{'128'}>128</option>
985 <option value='256' $selected{'L1_DIRS'}{'256'}>256</option>
986 </select></td>
ed38f89d 987 <td colspan='2' rowspan= '5' valign='top' class='base'>
363fb6af 988 <table cellspacing='0' cellpadding='0'>
ed38f89d
MT		 989 <tr>
990 <!-- intentionally left empty -->
991 </tr>
992 <tr>
993 <td>$Lang::tr{'advproxy no cache sites'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
994 </tr>
995 <tr>
996 <!-- intentionally left empty -->
997 </tr>
998 <tr>
999 <!-- intentionally left empty -->
1000 </tr>
1001 <tr>
9141bd34 1002 <td align=center><textarea name='DST_NOCACHE' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1003END
1004;
1005
1006print $proxysettings{'DST_NOCACHE'};
1007
1008print <<END
1009</textarea></td>
1010 </tr>
1011 </table>
1012 </td>
1013</tr>
1014<tr>
363fb6af
MT		 1015 <td class='base'>$Lang::tr{'advproxy memory replacement policy'}:</td>
1016 <td class='base'><select name='MEM_POLICY'>
1017 <option value='LRU' $selected{'MEM_POLICY'}{'LRU'}>LRU</option>
1018 <option value='heap LFUDA' $selected{'MEM_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1019 <option value='heap GDSF' $selected{'MEM_POLICY'}{'heap GDSF'}>heap GDSF</option>
1020 <option value='heap LRU' $selected{'MEM_POLICY'}{'heap LRU'}>heap LRU</option>
1021 </select></td>
ed38f89d
MT		 1022</tr>
1023<tr>
363fb6af
MT		 1024 <td class='base'>$Lang::tr{'advproxy cache replacement policy'}:</td>
1025 <td class='base'><select name='CACHE_POLICY'>
1026 <option value='LRU' $selected{'CACHE_POLICY'}{'LRU'}>LRU</option>
1027 <option value='heap LFUDA' $selected{'CACHE_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1028 <option value='heap GDSF' $selected{'CACHE_POLICY'}{'heap GDSF'}>heap GDSF</option>
1029 <option value='heap LRU' $selected{'CACHE_POLICY'}{'heap LRU'}>heap LRU</option>
1030 </select></td>
ed38f89d
MT		 1031</tr>
1032<tr>
1033 <td colspan='2'>&nbsp;</td>
1034</tr>
1035<tr>
363fb6af 1036 <td class='base'>$Lang::tr{'advproxy offline mode'}:</td>
ed38f89d
MT		 1037 <td><input type='checkbox' name='OFFLINE_MODE' $checked{'OFFLINE_MODE'}{'on'} /></td>
1038</tr>
1039</table>
1040<hr size='1'>
1041<table width='100%'>
363fb6af
MT		 1042<tr>
1043 <td colspan='4'><b>$Lang::tr{'advproxy destination ports'}</b></td>
1044</tr>
1045<tr>
9141bd34 1046 <td width='25%' align=center></td> <td width='20%' align=center></td><td width='25%' align=center></td><td width='30%' align=center></td>
363fb6af
MT		 1047</tr>
1048<tr>
1049 <td colspan='2' class='base'>$Lang::tr{'advproxy standard ports'}:</td>
1050 <td colspan='2' class='base'>$Lang::tr{'advproxy ssl ports'}:</td>
1051</tr>
1052<tr>
1053 <td colspan='2'><textarea name='PORTS_SAFE' cols='32' rows='6' wrap='off'>
1054END
1055;
1056 if (!$proxysettings{'PORTS_SAFE'}) { print $def_ports_safe; } else { print $proxysettings{'PORTS_SAFE'}; }
1057
1058print <<END
1059</textarea></td>
1060 <td colspan='2'><textarea name='PORTS_SSL' cols='32' rows='6' wrap='off'>
1061END
1062;
1063 if (!$proxysettings{'PORTS_SSL'}) { print $def_ports_ssl; } else { print $proxysettings{'PORTS_SSL'}; }
1064
1065print <<END
1066</textarea></td>
1067</tr>
1068</table>
1069<hr size='1'>
1070<table width='100%'>
ed38f89d
MT		 1071<tr>
1072 <td colspan='4'><b>$Lang::tr{'advproxy network based access'}</b></td>
1073</tr>
1074<tr>
1075 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1076</tr>
1077<tr>
9fb25b1c 1078 <td colspan='4' class='base'>$Lang::tr{'advproxy allowed subnets'}:</td>
ed38f89d
MT		 1079</tr>
1080<tr>
9141bd34 1081 <td colspan='2' rowspan='4'><textarea name='SRC_SUBNETS' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1082END
1083;
1084
363fb6af
MT		 1085if (!$proxysettings{'SRC_SUBNETS'})
1086{
ed38f89d 1087 print "$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}\n";
363fb6af
MT		 1088 if ($netsettings{'BLUE_DEV'})
1089 {
1090 print "$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}\n";
ed38f89d 1091 }
363fb6af 1092} else { print $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 1093
1094print <<END
1095</textarea></td>
9fb25b1c
MT		 1096END
1097;
1098
1099$line = $Lang::tr{'advproxy no internal proxy on green'};
1100$line =~ s/Green/<font color="$Header::colourgreen">Green<\/font>/i;
1101print "<td class='base'>$line:</td>\n";
1102print <<END
1103 <td><input type='checkbox' name='NO_PROXY_LOCAL' $checked{'NO_PROXY_LOCAL'}{'on'} /></td>
1104</tr>
1105END
1106;
1107if ($netsettings{'BLUE_DEV'}) {
1108 $line = $Lang::tr{'advproxy no internal proxy on blue'};
1109 $line =~ s/Blue/<font color="$Header::colourblue">Blue<\/font>/i;
1110 print "<tr>\n";
1111 print "<td class='base'>$line:</td>\n";
1112 print <<END
1113 <td><input type='checkbox' name='NO_PROXY_LOCAL_BLUE' $checked{'NO_PROXY_LOCAL_BLUE'}{'on'} /></td>
1114</tr>
1115END
1116;
1117}
1118print <<END
1119<tr>
1120 <td colspan='2'>&nbsp;</td>
1121</tr>
1122<tr>
ed38f89d
MT		 1123 <td colspan='2'>&nbsp;</td>
1124</tr>
1125</table>
1126<table width='100%'>
1127<tr>
1128 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1129</tr>
1130<tr>
1131 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1132 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1133</tr>
1134<tr>
9141bd34 1135 <td colspan='2'><textarea name='SRC_UNRESTRICTED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1136END
1137;
1138
1139 print $proxysettings{'SRC_UNRESTRICTED_IP'};
1140
1141print <<END
1142</textarea></td>
9141bd34 1143 <td colspan='2'><textarea name='SRC_UNRESTRICTED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1144END
1145;
1146
1147print $proxysettings{'SRC_UNRESTRICTED_MAC'};
1148
1149print <<END
1150</textarea></td>
1151</tr>
1152</table>
1153<table width='100%'>
1154<tr>
1155 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1156</tr>
1157<tr>
1158 <td colspan='2' class='base'>$Lang::tr{'advproxy banned ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1159 <td colspan='2' class='base'>$Lang::tr{'advproxy banned mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1160</tr>
1161<tr>
9141bd34 1162 <td colspan='2'><textarea name='SRC_BANNED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1163END
1164;
1165
1166 print $proxysettings{'SRC_BANNED_IP'};
1167
1168print <<END
1169</textarea></td>
9141bd34 1170 <td colspan='2'><textarea name='SRC_BANNED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1171END
1172;
1173
1174print $proxysettings{'SRC_BANNED_MAC'};
1175
1176print <<END
1177</textarea></td>
1178</tr>
1179</table>
1180
1181<hr size='1'>
1182
1183END
1184;
1185# -------------------------------------------------------------------
1186# CRE GUI - optional
1187# -------------------------------------------------------------------
1188
1189if (-e $cre_enabled) { print <<END
1190<table width='100%'>
1191
1192<tr>
9141bd34 1193 <td colspan='4'><b>$Lang::tr{'advproxy classroom extensions'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='CLASSROOM_EXT' $checked{'CLASSROOM_EXT'}{'on'} /></td>
ed38f89d
MT		 1194</tr>
1195<tr>
1196 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1197</tr>
1198<tr>
9141bd34
CS		 1199
1200END
1201;
1202if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1203print <<END
ed38f89d
MT		 1204 <td class='base'>$Lang::tr{'advproxy supervisor password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1205 <td><input type='password' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' size='12' /></td>
1206</tr>
1207<tr>
1208 <td colspan='2' class='base'>$Lang::tr{'advproxy cre group definitions'}:</td>
1209 <td colspan='2' class='base'>$Lang::tr{'advproxy cre supervisors'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
9141bd34
CS		 1210END
1211;
1212}
1213print "</tr>";
1214if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1215print <<END
ed38f89d
MT		 1216<tr>
1217 <td colspan='2'><textarea name='CRE_GROUPS' cols='32' rows='6' wrap='off'>
1218END
1219;
1220
1221 print $proxysettings{'CRE_GROUPS'};
1222
1223print <<END
1224</textarea></td>
1225 <td colspan='2'><textarea name='CRE_SVHOSTS' cols='32' rows='6' wrap='off'>
1226END
1227;
1228 print $proxysettings{'CRE_SVHOSTS'};
1229
1230print <<END
1231</textarea></td>
1232</tr>
ed38f89d
MT		 1233END
1234;
9141bd34
CS		 1235}
1236print "</table><hr size='1'>";
1237
ed38f89d
MT		 1238} else {
1239 print <<END
1240 <input type='hidden' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' />
1241 <input type='hidden' name='CRE_GROUPS' value='$proxysettings{'CRE_GROUPS'}' />
1242 <input type='hidden' name='CRE_SVHOSTS' value='$proxysettings{'CRE_SVHOSTS'}' />
1243END
1244;
1245}
363fb6af 1246
ed38f89d
MT		 1247# -------------------------------------------------------------------
1248
1249print <<END
1250
1251<table width='100%'>
1252<tr>
363fb6af 1253 <td colspan='4'><b>$Lang::tr{'advproxy time restrictions'}</b></td>
ed38f89d
MT		 1254</tr>
1255<table width='100%'>
1256<tr>
1257 <td width='2%'>$Lang::tr{'advproxy access'}</td>
1258 <td width='1%'>&nbsp;</td>
1259 <td width='2%' align='center'>$Lang::tr{'advproxy monday'}</td>
1260 <td width='2%' align='center'>$Lang::tr{'advproxy tuesday'}</td>
1261 <td width='2%' align='center'>$Lang::tr{'advproxy wednesday'}</td>
1262 <td width='2%' align='center'>$Lang::tr{'advproxy thursday'}</td>
1263 <td width='2%' align='center'>$Lang::tr{'advproxy friday'}</td>
1264 <td width='2%' align='center'>$Lang::tr{'advproxy saturday'}</td>
1265 <td width='2%' align='center'>$Lang::tr{'advproxy sunday'}</td>
1266 <td width='1%'>&nbsp;&nbsp;</td>
1267 <td width='7%' colspan=3>$Lang::tr{'advproxy from'}</td>
1268 <td width='1%'>&nbsp;</td>
1269 <td width='7%' colspan=3>$Lang::tr{'advproxy to'}</td>
1270 <td>&nbsp;</td>
1271</tr>
1272<tr>
1273 <td class='base'>
1274 <select name='TIME_ACCESS_MODE'>
1275 <option value='allow' $selected{'TIME_ACCESS_MODE'}{'allow'}>$Lang::tr{'advproxy mode allow'}</option>
1276 <option value='deny' $selected{'TIME_ACCESS_MODE'}{'deny'}>$Lang::tr{'advproxy mode deny'}</option>
1277 </select>
1278 </td>
1279 <td>&nbsp;</td>
1280 <td class='base'><input type='checkbox' name='TIME_MON' $checked{'TIME_MON'}{'on'} /></td>
1281 <td class='base'><input type='checkbox' name='TIME_TUE' $checked{'TIME_TUE'}{'on'} /></td>
1282 <td class='base'><input type='checkbox' name='TIME_WED' $checked{'TIME_WED'}{'on'} /></td>
1283 <td class='base'><input type='checkbox' name='TIME_THU' $checked{'TIME_THU'}{'on'} /></td>
1284 <td class='base'><input type='checkbox' name='TIME_FRI' $checked{'TIME_FRI'}{'on'} /></td>
1285 <td class='base'><input type='checkbox' name='TIME_SAT' $checked{'TIME_SAT'}{'on'} /></td>
1286 <td class='base'><input type='checkbox' name='TIME_SUN' $checked{'TIME_SUN'}{'on'} /></td>
1287 <td>&nbsp;</td>
1288 <td class='base'>
1289 <select name='TIME_FROM_HOUR'>
1290END
1291;
1292for ($i=0;$i<=24;$i++) {
1293 $_ = sprintf("%02s",$i);
1294 print "<option $selected{'TIME_FROM_HOUR'}{$_}>$_</option>\n";
1295}
1296print <<END
1297 </select>
1298 </td>
1299 <td>:</td>
1300 <td class='base'>
1301 <select name='TIME_FROM_MINUTE'>
1302END
1303;
1304for ($i=0;$i<=45;$i+=15) {
1305 $_ = sprintf("%02s",$i);
1306 print "<option $selected{'TIME_FROM_MINUTE'}{$_}>$_</option>\n";
1307}
1308print <<END
1309 </select>
1310 <td> - </td>
1311 </td>
1312 <td class='base'>
1313 <select name='TIME_TO_HOUR'>
1314END
1315;
1316for ($i=0;$i<=24;$i++) {
1317 $_ = sprintf("%02s",$i);
1318 print "<option $selected{'TIME_TO_HOUR'}{$_}>$_</option>\n";
1319}
1320print <<END
1321 </select>
1322 </td>
1323 <td>:</td>
1324 <td class='base'>
1325 <select name='TIME_TO_MINUTE'>
1326END
1327;
1328for ($i=0;$i<=45;$i+=15) {
1329 $_ = sprintf("%02s",$i);
1330 print "<option $selected{'TIME_TO_MINUTE'}{$_}>$_</option>\n";
1331}
1332print <<END
1333 </select>
1334 </td>
1335</tr>
1336</table>
1337<hr size='1'>
1338<table width='100%'>
1339<tr>
1340 <td colspan='4'><b>$Lang::tr{'advproxy transfer limits'}</b></td>
ac1cfefa
MT		 1341</tr>
1342<tr>
ed38f89d
MT		 1343 <td width='25%' class='base'>$Lang::tr{'advproxy max download size'}:</td>
1344 <td width='20%'><input type='text' name='MAX_INCOMING_SIZE' value='$proxysettings{'MAX_INCOMING_SIZE'}' size='5' /></td>
1345 <td width='25%' class='base'>$Lang::tr{'advproxy max upload size'}:</td>
1346 <td width='30%'><input type='text' name='MAX_OUTGOING_SIZE' value='$proxysettings{'MAX_OUTGOING_SIZE'}' size='5' /></td>
ac1cfefa
MT		 1347</tr>
1348</table>
ed38f89d 1349<hr size='1'>
ac1cfefa 1350<table width='100%'>
ac1cfefa 1351<tr>
ed38f89d
MT		 1352 <td colspan='4'><b>$Lang::tr{'advproxy download throttling'}</b></td>
1353</tr>
1354<tr>
1355 <td width='25%' class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourgreen">Green</font>:</td>
1356 <td width='20%' class='base'>
1357 <select name='THROTTLING_GREEN_TOTAL'>
1358END
1359;
1360
1361foreach (@throttle_limits) {
1362 print "\t<option value='$_' $selected{'THROTTLING_GREEN_TOTAL'}{$_}>$_ kBit/s</option>\n";
1363}
1364
1365print <<END
1366 <option value='0' $selected{'THROTTLING_GREEN_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1367 </select>
1368 </td>
1369 <td width='25%' class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourgreen">Green</font>:</td>
1370 <td width='30%' class='base'>
1371 <select name='THROTTLING_GREEN_HOST'>
1372END
1373;
1374
1375foreach (@throttle_limits) {
1376 print "\t<option value='$_' $selected{'THROTTLING_GREEN_HOST'}{$_}>$_ kBit/s</option>\n";
1377}
1378
1379print <<END
1380 <option value='0' $selected{'THROTTLING_GREEN_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1381 </select>
1382 </td>
1383</tr>
1384END
1385;
1386
1387if ($netsettings{'BLUE_DEV'}) {
1388 print <<END
1389<tr>
1390 <td class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourblue">Blue</font>:</td>
1391 <td class='base'>
1392 <select name='THROTTLING_BLUE_TOTAL'>
1393END
1394;
1395
1396foreach (@throttle_limits) {
1397 print "\t<option value='$_' $selected{'THROTTLING_BLUE_TOTAL'}{$_}>$_ kBit/s</option>\n";
1398}
1399
1400print <<END
1401 <option value='0' $selected{'THROTTLING_BLUE_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1402 </select>
1403 </td>
1404 <td class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourblue">Blue</font>:</td>
1405 <td class='base'>
1406 <select name='THROTTLING_BLUE_HOST'>
1407END
1408;
1409
1410foreach (@throttle_limits) {
1411 print "\t<option value='$_' $selected{'THROTTLING_BLUE_HOST'}{$_}>$_ kBit/s</option>\n";
1412}
1413
1414print <<END
1415 <option value='0' $selected{'THROTTLING_BLUE_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1416 </select>
ac1cfefa 1417 </td>
ac1cfefa 1418</tr>
ed38f89d
MT		 1419END
1420;
1421}
ac1cfefa 1422
ed38f89d
MT		 1423print <<END
1424</table>
1425<table width='100%'>
1426<tr>
1427 <td colspan='4'><i>$Lang::tr{'advproxy content based throttling'}:</i></td>
1428</tr>
1429<tr>
1430 <td width='15%' class='base'>$Lang::tr{'advproxy throttle binary'}:</td>
1431 <td width='10%'><input type='checkbox' name='THROTTLE_BINARY' $checked{'THROTTLE_BINARY'}{'on'} /></td>
1432 <td width='15%' class='base'>$Lang::tr{'advproxy throttle dskimg'}:</td>
1433 <td width='10%'><input type='checkbox' name='THROTTLE_DSKIMG' $checked{'THROTTLE_DSKIMG'}{'on'} /></td>
1434 <td width='15%' class='base'>$Lang::tr{'advproxy throttle mmedia'}:</td>
1435 <td width='10%'><input type='checkbox' name='THROTTLE_MMEDIA' $checked{'THROTTLE_MMEDIA'}{'on'} /></td>
363fb6af
MT		 1436 <td width='15%'>&nbsp;</td>
1437 <td width='10%'>&nbsp;</td>
ed38f89d 1438</tr>
ac1cfefa 1439</table>
ed38f89d
MT		 1440<hr size='1'>
1441<table width='100%'>
1442<tr>
9141bd34 1443 <td colspan='4'><b>$Lang::tr{'advproxy MIME filter'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='ENABLE_MIME_FILTER' $checked{'ENABLE_MIME_FILTER'}{'on'} /></td>
ed38f89d 1444</tr>
9141bd34
CS		 1445END
1446;
1447if ( $proxysettings{'ENABLE_MIME_FILTER'} eq 'on' ){
1448print <<END
ed38f89d
MT		 1449<tr>
1450 <td colspan='2' class='base'>$Lang::tr{'advproxy MIME block types'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
363fb6af
MT		 1451 <td>&nbsp;</td>
1452 <td>&nbsp;</td>
ed38f89d
MT		 1453</tr>
1454<tr>
1455 <td colspan='2'><textarea name='MIME_TYPES' cols='32' rows='6' wrap='off'>
ac1cfefa
MT		 1456END
1457;
ac1cfefa 1458
ed38f89d 1459print $proxysettings{'MIME_TYPES'};
ac1cfefa 1460
ed38f89d
MT		 1461print <<END
1462</textarea></td>
363fb6af
MT		 1463 <td>&nbsp;</td>
1464 <td>&nbsp;</td>
ed38f89d 1465</tr>
9141bd34
CS		 1466END
1467;
1468}
1469print <<END
ed38f89d 1470</table>
9141bd34 1471
ed38f89d
MT		 1472<hr size='1'>
1473<table width='100%'>
1474<tr>
9141bd34 1475 <td colspan='4'><b>$Lang::tr{'advproxy web browser'}</b> $Lang::tr{'advproxy UA enable filter'}:<input type='checkbox' name='ENABLE_BROWSER_CHECK' $checked{'ENABLE_BROWSER_CHECK'}{'on'} /></td>
ed38f89d 1476</tr>
9141bd34
CS		 1477END
1478;
1479if ( $proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on' ){
1480print <<END
ed38f89d
MT		 1481<tr>
1482 <td colspan='4'><i>
1483END
1484;
1485if (@useragentlist) { print "$Lang::tr{'advproxy allowed web browsers'}:"; } else { print "$Lang::tr{'advproxy no clients defined'}"; }
1486print <<END
1487</i></td>
1488</tr>
1489</table>
1490<table width='100%'>
1491END
1492;
ac1cfefa 1493
ed38f89d
MT		 1494for ($n=0; $n<=@useragentlist; $n = $n + $i) {
1495 for ($i=0; $i<=3; $i++) {
1496 if ($i eq 0) { print "<tr>\n"; }
1497 if (($n+$i) < @useragentlist) {
1498 @useragent = split(/,/,@useragentlist[$n+$i]);
4e17adad
CS		 1499 print "<td width='15%'>$useragent[1]:<\/td>\n";
1500 print "<td width='10%'><input type='checkbox' name='UA_$useragent[0]' $checked{'UA_'.$useragent[0]}{'on'} /></td>\n";
ed38f89d
MT		 1501 }
1502 if ($i eq 3) { print "<\/tr>\n"; }
1503 }
1504}
9141bd34 1505}
ed38f89d
MT		 1506print <<END
1507</table>
1508<hr size='1'>
1509<table width='100%'>
1510<tr>
1511 <td><b>$Lang::tr{'advproxy privacy'}</b></td>
1512</tr>
1513<tr>
1514 <td class='base'>$Lang::tr{'advproxy fake useragent'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
ed38f89d
MT		 1515 <td class='base'>$Lang::tr{'advproxy fake referer'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1516</tr>
1517<tr>
9141bd34 1518 <td><input type='text' name='FAKE_USERAGENT' value='$proxysettings{'FAKE_USERAGENT'}' size='56' /></td>
ed38f89d
MT		 1519 <td><input type='text' name='FAKE_REFERER' value='$proxysettings{'FAKE_REFERER'}' size='56' /></td>
1520</tr>
1521</table>
1522<hr size='1'>
1523END
1524;
1525
9fb25b1c 1526print <<END
ed38f89d
MT		 1527<table width='100%'>
1528<tr>
363fb6af 1529 <td colspan='5'><b>$Lang::tr{'advproxy AUTH method'}</b></td>
ed38f89d
MT		 1530</tr>
1531<tr>
1532 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='none' $checked{'AUTH_METHOD'}{'none'} />$Lang::tr{'advproxy AUTH method none'}</td>
1533 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ncsa' $checked{'AUTH_METHOD'}{'ncsa'} />$Lang::tr{'advproxy AUTH method ncsa'}</td>
1534 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ident' $checked{'AUTH_METHOD'}{'ident'} />$Lang::tr{'advproxy AUTH method ident'}</td>
1535 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ldap' $checked{'AUTH_METHOD'}{'ldap'} />$Lang::tr{'advproxy AUTH method ldap'}</td>
1536 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='ntlm' $checked{'AUTH_METHOD'}{'ntlm'} />$Lang::tr{'advproxy AUTH method ntlm'}</td>
1537 <td width='16%' class='base'><input type='radio' name='AUTH_METHOD' value='radius' $checked{'AUTH_METHOD'}{'radius'} />$Lang::tr{'advproxy AUTH method radius'}</td>
1538</tr>
1539</table>
1540END
1541;
1542
1543if (!($proxysettings{'AUTH_METHOD'} eq 'none')) { if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) { print <<END
1544<hr size='1'>
1545<table width='100%'>
1546<tr>
363fb6af 1547 <td colspan='4'><b>$Lang::tr{'advproxy AUTH global settings'}</b></td>
ed38f89d
MT		 1548</tr>
1549<tr>
1550 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1551</tr>
1552<tr>
1553 <td class='base'>$Lang::tr{'advproxy AUTH number of auth processes'}:</td>
1554 <td><input type='text' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}' size='5' /></td>
1555 <td colspan='2' rowspan= '6' valign='top' class='base'>
1556 <table cellpadding='0' cellspacing='0'>
1557 <tr>
1558 <td class='base'>$Lang::tr{'advproxy AUTH realm'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1559 </tr>
1560 <tr>
1561 <!-- intentionally left empty -->
1562 </tr>
1563 <tr>
1564 <!-- intentionally left empty -->
1565 </tr>
1566 <tr>
1567 <td><input type='text' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}' size='40' /></td>
1568 </tr>
1569 <tr>
1570 <!-- intentionally left empty -->
1571 </tr>
1572 <tr>
1573 <!-- intentionally left empty -->
1574 </tr>
1575 <tr>
1576 <td>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1577 </tr>
1578 <tr>
1579 <!-- intentionally left empty -->
1580 </tr>
1581 <tr>
1582 <!-- intentionally left empty -->
1583 </tr>
1584 <tr>
1585 <td><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1586END
1587;
1588
1589print $proxysettings{'DST_NOAUTH'};
1590
1591print <<END
1592</textarea></td>
1593 </tr>
1594 </table>
1595 </td>
1596</tr>
1597<tr>
1598 <td class='base'>$Lang::tr{'advproxy AUTH auth cache TTL'}:</td>
1599 <td><input type='text' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1600</tr>
1601<tr>
1602 <td class='base'>$Lang::tr{'advproxy AUTH limit of IP addresses'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1603 <td><input type='text' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1604</tr>
1605<tr>
1606 <td class='base'>$Lang::tr{'advproxy AUTH user IP cache TTL'}:</td>
1607 <td><input type='text' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1608</tr>
1609<tr>
363fb6af
MT		 1610 <td class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1611 <td><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1612</tr>
1613<tr>
1614 <td colspan='2'>&nbsp;</td>
1615</tr>
1616</table>
1617END
1618;
1619}
1620
1621# ===================================================================
1622# NCSA auth settings
1623# ===================================================================
1624
1625if ($proxysettings{'AUTH_METHOD'} eq 'ncsa') {
1626print <<END
1627<hr size='1'>
1628<table width='100%'>
1629<tr>
1630 <td colspan='4'><b>$Lang::tr{'advproxy NCSA auth'}</b></td>
1631</tr>
1632<tr>
1633 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA min password length'}:</td>
1634 <td width='20%'><input type='text' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}' size='5' /></td>
1635 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA redirector bypass'} \'$Lang::tr{'advproxy NCSA grp extended'}\':</td>
363fb6af 1636 <td width='20%'><input type='checkbox' name='NCSA_BYPASS_REDIR' $checked{'NCSA_BYPASS_REDIR'}{'on'} /></td>
ed38f89d
MT		 1637</tr>
1638<tr>
1639 <td colspan='2'><br>&nbsp;<input type='submit' name='ACTION' value='$Lang::tr{'advproxy NCSA user management'}'></td>
1640 <td>&nbsp;</td>
1641 <td>&nbsp;</td>
1642</tr>
1643</table>
1644END
1645; }
1646
1647# ===================================================================
1648# IDENTD auth settings
1649# ===================================================================
1650
1651if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
1652print <<END
1653<hr size ='1'>
1654<table width='100%'>
1655<tr>
1656 <td colspan='4'><b>$Lang::tr{'advproxy IDENT identd settings'}</b></td>
1657</tr>
1658<tr>
1659 <td width='25%' class='base'>$Lang::tr{'advproxy IDENT required'}:</td>
363fb6af
MT		 1660 <td width='20%'><input type='checkbox' name='IDENT_REQUIRED' $checked{'IDENT_REQUIRED'}{'on'} /></td>
1661 <td width='25%' class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1662 <td width='30%'><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1663</tr>
1664<tr>
1665 <td class='base'>$Lang::tr{'advproxy IDENT timeout'}:</td>
1666 <td><input type='text' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}' size='5' /></td>
1667 <td>&nbsp;</td>
1668 <td>&nbsp;</td>
1669</tr>
1670<tr>
1671 <td colspan='2' class='base'>$Lang::tr{'advproxy IDENT aware hosts'}:</td>
1672 <td colspan='2' class='base'>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1673</tr>
1674<tr>
1675 <td colspan='2'><textarea name='IDENT_HOSTS' cols='32' rows='6' wrap='off'>
1676END
1677;
1678if (!$proxysettings{'IDENT_HOSTS'}) {
1679 print "$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}\n";
1680 if ($netsettings{'BLUE_DEV'}) {
1681 print "$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}\n";
1682 }
1683} else {
1684 print $proxysettings{'IDENT_HOSTS'};
1685}
1686
1687print <<END
1688</textarea></td>
1689 <td colspan='2'><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1690END
1691;
1692
1693print $proxysettings{'DST_NOAUTH'};
1694
1695print <<END
1696</textarea></td>
1697</tr>
1698</table>
1699<hr size ='1'>
1700<table width='100%'>
1701<tr>
1702 <td colspan='4'><b>$Lang::tr{'advproxy IDENT user based access restrictions'}</b></td>
1703</tr>
1704<tr>
1705 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1706 <td width='20%'><input type='checkbox' name='IDENT_ENABLE_ACL' $checked{'IDENT_ENABLE_ACL'}{'on'} /></td>
1707 <td width='25%'>&nbsp;</td>
1708 <td width='30%'>&nbsp;</td>
1709</tr>
1710<tr>
1711 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='positive' $checked{'IDENT_USER_ACL'}{'positive'} />
1712 $Lang::tr{'advproxy IDENT use positive access list'}:</td>
1713 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='negative' $checked{'IDENT_USER_ACL'}{'negative'} />
1714 $Lang::tr{'advproxy IDENT use negative access list'}:</td>
1715</tr>
1716<tr>
1717 <td colspan='2'>$Lang::tr{'advproxy IDENT authorized users'}</td>
1718 <td colspan='2'>$Lang::tr{'advproxy IDENT unauthorized users'}</td>
1719</tr>
1720<tr>
363fb6af 1721 <td colspan='2'><textarea name='IDENT_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1722END
1723; }
1724
1725if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_ALLOW_USERS'}; }
1726
1727if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1728</textarea></td>
363fb6af 1729 <td colspan='2'><textarea name='IDENT_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1730END
1731; }
1732
1733if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_DENY_USERS'}; }
1734
1735if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1736</textarea></td>
1737</tr>
1738</table>
1739END
1740; }
1741
1742# ===================================================================
1743# NTLM auth settings
1744# ===================================================================
1745
1746if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') {
1747print <<END
1748<hr size='1'>
1749<table width='100%'>
1750<tr>
1751 <td colspan='6'><b>$Lang::tr{'advproxy NTLM domain settings'}</b></td>
1752</tr>
1753<tr>
1754 <td class='base'>$Lang::tr{'advproxy NTLM domain'}:</td>
1755 <td><input type='text' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}' size='15' /></td>
1756 <td class='base'>$Lang::tr{'advproxy NTLM PDC hostname'}:</td>
1757 <td><input type='text' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}' size='14' /></td>
1758 <td class='base'>$Lang::tr{'advproxy NTLM BDC hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1759 <td><input type='text' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}' size='14' /></td>
1760</tr>
1761</table>
1762<hr size ='1'>
1763<table width='100%'>
1764<tr>
1765 <td colspan='3'><b>$Lang::tr{'advproxy NTLM auth mode'}</b></td>
1766</tr>
1767<tr>
1768 <td width='25%' class='base' width='25%'>$Lang::tr{'advproxy NTLM use integrated auth'}:</td>
1769 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_INT_AUTH' $checked{'NTLM_ENABLE_INT_AUTH'}{'on'} /></td>
1770 <td>&nbsp;</td>
1771</tr>
1772</table>
1773<hr size ='1'>
1774<table width='100%'>
1775<tr>
1776 <td colspan='4'><b>$Lang::tr{'advproxy NTLM user based access restrictions'}</b></td>
1777</tr>
1778<tr>
1779 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1780 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_ACL' $checked{'NTLM_ENABLE_ACL'}{'on'} /></td>
1781 <td width='25%'>&nbsp;</td>
1782 <td width='30%'>&nbsp;</td>
1783</tr>
1784<tr>
1785 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='positive' $checked{'NTLM_USER_ACL'}{'positive'} />
1786 $Lang::tr{'advproxy NTLM use positive access list'}:</td>
1787 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='negative' $checked{'NTLM_USER_ACL'}{'negative'} />
1788 $Lang::tr{'advproxy NTLM use negative access list'}:</td>
1789</tr>
1790<tr>
1791 <td colspan='2'>$Lang::tr{'advproxy NTLM authorized users'}</td>
1792 <td colspan='2'>$Lang::tr{'advproxy NTLM unauthorized users'}</td>
1793</tr>
1794<tr>
363fb6af 1795 <td colspan='2'><textarea name='NTLM_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1796END
1797; }
1798
1799if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_ALLOW_USERS'}; }
1800
1801if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1802</textarea></td>
363fb6af 1803 <td colspan='2'><textarea name='NTLM_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1804END
1805; }
1806
1807if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_DENY_USERS'}; }
1808
1809if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1810</textarea></td>
1811</tr>
1812</table>
1813END
1814; }
1815
1816# ===================================================================
1817# LDAP auth settings
1818# ===================================================================
1819
1820if ($proxysettings{'AUTH_METHOD'} eq 'ldap') {
1821print <<END
1822<hr size='1'>
1823<table width='100%'>
1824<tr>
1825 <td colspan='4'><b>$Lang::tr{'advproxy LDAP common settings'}</b></td>
1826</tr>
1827<tr>
1828 <td class='base'>$Lang::tr{'advproxy LDAP basedn'}:</td>
1829 <td><input type='text' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}' size='37' /></td>
1830 <td class='base'>$Lang::tr{'advproxy LDAP type'}:</td>
1831 <td class='base'><select name='LDAP_TYPE'>
1832 <option value='ADS' $selected{'LDAP_TYPE'}{'ADS'}>$Lang::tr{'advproxy LDAP ADS'}</option>
1833 <option value='NDS' $selected{'LDAP_TYPE'}{'NDS'}>$Lang::tr{'advproxy LDAP NDS'}</option>
1834 <option value='V2' $selected{'LDAP_TYPE'}{'V2'}>$Lang::tr{'advproxy LDAP V2'}</option>
1835 <option value='V3' $selected{'LDAP_TYPE'}{'V3'}>$Lang::tr{'advproxy LDAP V3'}</option>
1836 </select></td>
1837</tr>
1838<tr>
1839 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP server'}:</td>
1840 <td width='40%'><input type='text' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}' size='14' /></td>
1841 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP port'}:</td>
1842 <td><input type='text' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}' size='3' /></td>
1843</tr>
1844</table>
1845<hr size ='1'>
1846<table width='100%'>
1847<tr>
1848 <td colspan='4'><b>$Lang::tr{'advproxy LDAP binddn settings'}</b></td>
1849</tr>
1850<tr>
1851 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn username'}:</td>
1852 <td width='40%'><input type='text' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}' size='37' /></td>
1853 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn password'}:</td>
1854 <td><input type='password' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}' size='14' /></td>
1855</tr>
1856</table>
1857<hr size ='1'>
1858<table width='100%'>
1859<tr>
1860 <td colspan='4'><b>$Lang::tr{'advproxy LDAP group access control'}</b></td>
1861</tr>
1862<tr>
1863 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP group required'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1864 <td width='40%'><input type='text' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}' size='37' /></td>
1865 <td>&nbsp;</td>
1866 <td>&nbsp;</td>
1867</tr>
1868</table>
1869END
1870; }
1871
1872# ===================================================================
1873# RADIUS auth settings
1874# ===================================================================
1875
1876if ($proxysettings{'AUTH_METHOD'} eq 'radius') {
1877print <<END
1878<hr size='1'>
1879<table width='100%'>
1880<tr>
1881 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS radius settings'}</b></td>
1882</tr>
1883<tr>
1884 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS server'}:</td>
1885 <td width='20%'><input type='text' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}' size='14' /></td>
1886 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS port'}:</td>
1887 <td width='30%'><input type='text' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}' size='3' /></td>
1888</tr>
1889<tr>
1890 <td class='base'>$Lang::tr{'advproxy RADIUS identifier'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1891 <td><input type='text' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}' size='14' /></td>
1892 <td class='base'>$Lang::tr{'advproxy RADIUS secret'}:</td>
1893 <td><input type='password' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}' size='14' /></td>
1894</tr>
1895</table>
1896<hr size ='1'>
1897<table width='100%'>
1898<tr>
1899 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS user based access restrictions'}</b></td>
1900</tr>
1901<tr>
1902 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1903 <td width='20%'><input type='checkbox' name='RADIUS_ENABLE_ACL' $checked{'RADIUS_ENABLE_ACL'}{'on'} /></td>
1904 <td width='25%'>&nbsp;</td>
1905 <td width='30%'>&nbsp;</td>
1906</tr>
1907<tr>
1908 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='positive' $checked{'RADIUS_USER_ACL'}{'positive'} />
1909 $Lang::tr{'advproxy RADIUS use positive access list'}:</td>
1910 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='negative' $checked{'RADIUS_USER_ACL'}{'negative'} />
1911 $Lang::tr{'advproxy RADIUS use negative access list'}:</td>
1912</tr>
1913<tr>
1914 <td colspan='2'>$Lang::tr{'advproxy RADIUS authorized users'}</td>
1915 <td colspan='2'>$Lang::tr{'advproxy RADIUS unauthorized users'}</td>
1916</tr>
1917<tr>
363fb6af 1918 <td colspan='2'><textarea name='RADIUS_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1919END
1920; }
1921
1922if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_ALLOW_USERS'}; }
1923
1924if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
1925</textarea></td>
363fb6af 1926 <td colspan='2'><textarea name='RADIUS_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1927END
1928; }
1929
1930if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_DENY_USERS'}; }
1931
1932if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
1933</textarea></td>
1934</tr>
1935</table>
1936END
1937; }
1938
1939# ===================================================================
1940
1941}
1942
1943print "<table>\n";
1944
1945if ($proxysettings{'AUTH_METHOD'} eq 'none') {
1946print <<END
1947<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
1948<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1949<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1950<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1951<td><input type='hidden' name='AUTH_ALWAYS_REQUIRED' value='$proxysettings{'AUTH_ALWAYS_REQUIRED'}'></td>
1952<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
1953<td><input type='hidden' name='DST_NOAUTH' value='$proxysettings{'DST_NOAUTH'}'></td>
1954END
1955; }
1956
1957if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
1958print <<END
1959<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
1960<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1961<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1962<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1963<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
1964END
1965; }
1966
1967if (!($proxysettings{'AUTH_METHOD'} eq 'ncsa')) {
1968print <<END
1969<td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
1970<td><input type='hidden' name='NCSA_BYPASS_REDIR' value='$proxysettings{'NCSA_BYPASS_REDIR'}'></td>
1971END
1972; }
1973
1974if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) {
1975print <<END
1976<td><input type='hidden' name='IDENT_REQUIRED' value='$proxysettings{'IDENT_REQUIRED'}'></td>
1977<td><input type='hidden' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}'></td>
1978<td><input type='hidden' name='IDENT_HOSTS' value='$proxysettings{'IDENT_HOSTS'}'></td>
1979<td><input type='hidden' name='IDENT_ENABLE_ACL' value='$proxysettings{'IDENT_ENABLE_ACL'}'></td>
1980<td><input type='hidden' name='IDENT_USER_ACL' value='$proxysettings{'IDENT_USER_ACL'}'></td>
1981<td><input type='hidden' name='IDENT_ALLOW_USERS' value='$proxysettings{'IDENT_ALLOW_USERS'}'></td>
1982<td><input type='hidden' name='IDENT_DENY_USERS' value='$proxysettings{'IDENT_DENY_USERS'}'></td>
1983END
1984; }
1985
1986if (!($proxysettings{'AUTH_METHOD'} eq 'ldap')) {
1987print <<END
1988<td><input type='hidden' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}'></td>
1989<td><input type='hidden' name='LDAP_TYPE' value='$proxysettings{'LDAP_TYPE'}'></td>
1990<td><input type='hidden' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}'></td>
1991<td><input type='hidden' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}'></td>
1992<td><input type='hidden' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}'></td>
1993<td><input type='hidden' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}'></td>
1994<td><input type='hidden' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}'></td>
1995END
1996; }
1997
1998if (!($proxysettings{'AUTH_METHOD'} eq 'ntlm')) {
1999print <<END
2000<td><input type='hidden' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}'></td>
2001<td><input type='hidden' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}'></td>
2002<td><input type='hidden' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}'></td>
2003<td><input type='hidden' name='NTLM_ENABLE_INT_AUTH' value='$proxysettings{'NTLM_ENABLE_INT_AUTH'}'></td>
2004<td><input type='hidden' name='NTLM_ENABLE_ACL' value='$proxysettings{'NTLM_ENABLE_ACL'}'></td>
2005<td><input type='hidden' name='NTLM_USER_ACL' value='$proxysettings{'NTLM_USER_ACL'}'></td>
2006<td><input type='hidden' name='NTLM_ALLOW_USERS' value='$proxysettings{'NTLM_ALLOW_USERS'}'></td>
2007<td><input type='hidden' name='NTLM_DENY_USERS' value='$proxysettings{'NTLM_DENY_USERS'}'></td>
2008END
2009; }
2010
2011if (!($proxysettings{'AUTH_METHOD'} eq 'radius')) {
2012print <<END
2013<td><input type='hidden' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}'></td>
2014<td><input type='hidden' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}'></td>
2015<td><input type='hidden' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}'></td>
2016<td><input type='hidden' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}'></td>
2017<td><input type='hidden' name='RADIUS_ENABLE_ACL' value='$proxysettings{'RADIUS_ENABLE_ACL'}'></td>
2018<td><input type='hidden' name='RADIUS_USER_ACL' value='$proxysettings{'RADIUS_USER_ACL'}'></td>
2019<td><input type='hidden' name='RADIUS_ALLOW_USERS' value='$proxysettings{'RADIUS_ALLOW_USERS'}'></td>
2020<td><input type='hidden' name='RADIUS_DENY_USERS' value='$proxysettings{'RADIUS_DENY_USERS'}'></td>
2021END
2022; }
2023
2024print "</table>\n";
2025
2026print <<END
2027<hr size='1'>
2028END
2029;
2030
2031print <<END
2032<table width='100%'>
2033<tr>
363fb6af 2034 <td>&nbsp;</td>
ed38f89d
MT		 2035 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
2036 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy save and restart'}' /></td>
363fb6af
MT		 2037 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy clear cache'}' /></td>
2038 <td>&nbsp;</td>
ed38f89d
MT		 2039</tr>
2040
2041</table>
2042<br />
2043<table width='100%'>
2044<tr>
2045 <td><img src='/blob.gif' align='top' alt='*' />&nbsp;
2046 <font class='base'>$Lang::tr{'this field may be blank'}</font>
2047 </td>
363fb6af 2048 <td align='right'>&nbsp;</td>
ed38f89d
MT		 2049</tr>
2050</table>
2051</form>
2052END
2053;
2054
2055&Header::closebox();
2056
2057} else {
2058
2059# ===================================================================
2060# NCSA user management
2061# ===================================================================
2062
2063&Header::openbox('100%', 'left', "$Lang::tr{'advproxy NCSA auth'}");
2064print <<END
2065<form method='post' action='$ENV{'SCRIPT_NAME'}'>
2066<table width='100%'>
2067<tr>
363fb6af 2068 <td colspan='4'><b>$Lang::tr{'advproxy NCSA user management'}</b></td>
ed38f89d
MT		 2069</tr>
2070<tr>
2071 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA username'}:</td>
2072 <td width='25%'><input type='text' name='NCSA_USERNAME' value='$proxysettings{'NCSA_USERNAME'}' size='12'
2073END
2074;
2075 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) { print " readonly "; }
2076 print <<END
2077 /></td>
2078 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA group'}:</td>
2079 <td class='base'>
2080 <select name='NCSA_GROUP'>
2081 <option value='standard' $selected{'NCSA_GROUP'}{'standard'}>$Lang::tr{'advproxy NCSA grp standard'}</option>
2082 <option value='extended' $selected{'NCSA_GROUP'}{'extended'}>$Lang::tr{'advproxy NCSA grp extended'}</option>
2083 <option value='disabled' $selected{'NCSA_GROUP'}{'disabled'}>$Lang::tr{'advproxy NCSA grp disabled'}</option>
2084 </select>
2085 </td>
2086
2087</tr>
2088<tr>
2089 <td class='base'>$Lang::tr{'advproxy NCSA password'}:</td>
2090 <td><input type='password' name='NCSA_PASS' value='$proxysettings{'NCSA_PASS'}' size='14' /></td>
2091 <td class='base'>$Lang::tr{'advproxy NCSA password confirm'}:</td>
2092 <td><input type='password' name='NCSA_PASS_CONFIRM' value='$proxysettings{'NCSA_PASS_CONFIRM'}' size='14' /></td>
2093</tr>
2094</table>
2095<br>
2096<table>
2097<tr>
2098 <td>&nbsp;</td>
2099 <td><input type='submit' name='SUBMIT' value='$ncsa_buttontext' /></td>
2100 <td><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /></td>
2101 <td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2102END
2103;
2104 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) {
2105 print "<td><input type='reset' name='ACTION' value='$Lang::tr{'advproxy reset'}' /></td>\n";
2106 }
2107
2108print <<END
2109 <td>&nbsp;</td>
2110 <td>&nbsp;</td>
2111 <td><input type='button' name='return2main' value='$Lang::tr{'advproxy back to main page'}' onClick='self.location.href="$ENV{'SCRIPT_NAME'}"'></td>
2112</tr>
2113</table>
2114</form>
2115<hr size='1'>
2116<table width='100%'>
2117<tr>
363fb6af 2118 <td><b>$Lang::tr{'advproxy NCSA user accounts'}:</b></td>
ed38f89d
MT		 2119</tr>
2120</table>
2121<table width='100%' align='center'>
2122END
2123;
2124
2125if (-e $extgrp)
2126{
2127 open(FILE, $extgrp); @grouplist = <FILE>; close(FILE);
2128 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":extended"); }
2129}
2130if (-e $stdgrp)
2131{
2132 open(FILE, $stdgrp); @grouplist = <FILE>; close(FILE);
2133 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":standard"); }
2134}
2135if (-e $disgrp)
2136{
2137 open(FILE, $disgrp); @grouplist = <FILE>; close(FILE);
2138 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":disabled"); }
2139}
2140
2141@userlist = sort(@userlist);
2142
2143# If the password file contains entries, print entries and action icons
2144
22527178 2145if ( $userdb ne "" ) {
ed38f89d
MT		 2146 print <<END
2147 <tr>
2148 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA username'}</i></b></td>
2149 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA group membership'}</i></b></td>
2150 <td class='boldbase' colspan='2' align='center'>&nbsp;</td>
2151 </tr>
2152END
2153;
2154 $id = 0;
2155 foreach $line (@userlist)
2156 {
2157 $id++;
2158 chomp($line);
2159 @temp = split(/:/,$line);
2160 if($proxysettings{'ACTION'} eq $Lang::tr{'edit'} && $proxysettings{'ID'} eq $line) {
2161 print "<tr bgcolor='$Header::colouryellow'>\n"; }
2162 elsif ($id % 2) {
4e17adad 2163 print "<tr bgcolor='$color{'color20'}'>\n"; }
ed38f89d 2164 else {
4e17adad 2165 print "<tr bgcolor='$color{'color22'}'>\n"; }
ed38f89d
MT		 2166
2167 print <<END
2168 <td align='center'>$temp[0]</td>
2169 <td align='center'>
2170END
2171;
2172 if ($temp[1] eq 'standard') {
2173 print $Lang::tr{'advproxy NCSA grp standard'};
2174 } elsif ($temp[1] eq 'extended') {
2175 print $Lang::tr{'advproxy NCSA grp extended'};
2176 } elsif ($temp[1] eq 'disabled') {
2177 print $Lang::tr{'advproxy NCSA grp disabled'}; }
2178 print <<END
2179 </td>
2180 <td width='8%' align='center'>
2181 <form method='post' name='frma$id' action='$ENV{'SCRIPT_NAME'}'>
2182 <input type='image' name='$Lang::tr{'edit'}' src='/images/edit.gif' title='$Lang::tr{'edit'}' alt='$Lang::tr{'edit'}' />
2183 <input type='hidden' name='ID' value='$line' />
2184 <input type='hidden' name='ACTION' value='$Lang::tr{'edit'}' />
2185 </form>
2186 </td>
2187
2188 <td width='8%' align='center'>
2189 <form method='post' name='frmb$id' action='$ENV{'SCRIPT_NAME'}'>
2190 <input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' title='$Lang::tr{'remove'}' alt='$Lang::tr{'remove'}' />
2191 <input type='hidden' name='ID' value='$temp[0]' />
2192 <input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
2193 </form>
2194 </td>
2195 </tr>
2196END
2197;
2198 }
2199
2200print <<END
2201</table>
2202<br>
9fb25b1c 2203<table>
ed38f89d
MT		 2204<tr>
2205 <td class='boldbase'>&nbsp; <b>$Lang::tr{'legend'}:</b></td>
2206 <td>&nbsp; &nbsp; <img src='/images/edit.gif' alt='$Lang::tr{'edit'}' /></td>
2207 <td class='base'>$Lang::tr{'edit'}</td>
2208 <td>&nbsp; &nbsp; <img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
2209 <td class='base'>$Lang::tr{'remove'}</td>
2210</tr>
2211END
2212;
2213} else {
2214 print <<END
2215 <tr>
363fb6af 2216 <td><i>$Lang::tr{'advproxy NCSA no accounts'}</i></td>
ed38f89d
MT		 2217 </tr>
2218END
2219;
2220}
2221
2222print <<END
2223</table>
2224END
2225;
2226
2227&Header::closebox();
2228
2229}
2230
2231# ===================================================================
2232
2233&Header::closebigbox();
2234
2235&Header::closepage();
2236
2237# -------------------------------------------------------------------
2238
2239sub read_acls
2240{
2241 if (-e "$acl_src_subnets") {
2242 open(FILE,"$acl_src_subnets");
2243 delete $proxysettings{'SRC_SUBNETS'};
2244 while (<FILE>) { $proxysettings{'SRC_SUBNETS'} .= $_ };
2245 close(FILE);
2246 }
2247 if (-e "$acl_src_banned_ip") {
2248 open(FILE,"$acl_src_banned_ip");
2249 delete $proxysettings{'SRC_BANNED_IP'};
2250 while (<FILE>) { $proxysettings{'SRC_BANNED_IP'} .= $_ };
2251 close(FILE);
2252 }
2253 if (-e "$acl_src_banned_mac") {
2254 open(FILE,"$acl_src_banned_mac");
2255 delete $proxysettings{'SRC_BANNED_MAC'};
2256 while (<FILE>) { $proxysettings{'SRC_BANNED_MAC'} .= $_ };
2257 close(FILE);
2258 }
2259 if (-e "$acl_src_unrestricted_ip") {
2260 open(FILE,"$acl_src_unrestricted_ip");
2261 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
2262 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_ };
2263 close(FILE);
2264 }
2265 if (-e "$acl_src_unrestricted_mac") {
2266 open(FILE,"$acl_src_unrestricted_mac");
2267 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
2268 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_ };
2269 close(FILE);
2270 }
2271 if (-e "$acl_dst_nocache") {
2272 open(FILE,"$acl_dst_nocache");
2273 delete $proxysettings{'DST_NOCACHE'};
2274 while (<FILE>) { $proxysettings{'DST_NOCACHE'} .= $_ };
2275 close(FILE);
2276 }
2277 if (-e "$acl_dst_noauth") {
2278 open(FILE,"$acl_dst_noauth");
2279 delete $proxysettings{'DST_NOAUTH'};
2280 while (<FILE>) { $proxysettings{'DST_NOAUTH'} .= $_ };
2281 close(FILE);
2282 }
363fb6af
MT		 2283 if (-e "$acl_ports_safe") {
2284 open(FILE,"$acl_ports_safe");
2285 delete $proxysettings{'PORTS_SAFE'};
2286 while (<FILE>) { $proxysettings{'PORTS_SAFE'} .= $_ };
2287 close(FILE);
2288 }
2289 if (-e "$acl_ports_ssl") {
2290 open(FILE,"$acl_ports_ssl");
2291 delete $proxysettings{'PORTS_SSL'};
2292 while (<FILE>) { $proxysettings{'PORTS_SSL'} .= $_ };
2293 close(FILE);
2294 }
ed38f89d
MT		 2295 if (-e "$mimetypes") {
2296 open(FILE,"$mimetypes");
2297 delete $proxysettings{'MIME_TYPES'};
2298 while (<FILE>) { $proxysettings{'MIME_TYPES'} .= $_ };
2299 close(FILE);
2300 }
2301 if (-e "$ntlmdir/msntauth.allowusers") {
2302 open(FILE,"$ntlmdir/msntauth.allowusers");
2303 delete $proxysettings{'NTLM_ALLOW_USERS'};
2304 while (<FILE>) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_ };
2305 close(FILE);
2306 }
2307 if (-e "$ntlmdir/msntauth.denyusers") {
2308 open(FILE,"$ntlmdir/msntauth.denyusers");
2309 delete $proxysettings{'NTLM_DENY_USERS'};
2310 while (<FILE>) { $proxysettings{'NTLM_DENY_USERS'} .= $_ };
2311 close(FILE);
2312 }
2313 if (-e "$raddir/radauth.allowusers") {
2314 open(FILE,"$raddir/radauth.allowusers");
2315 delete $proxysettings{'RADIUS_ALLOW_USERS'};
2316 while (<FILE>) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_ };
2317 close(FILE);
2318 }
2319 if (-e "$raddir/radauth.denyusers") {
2320 open(FILE,"$raddir/radauth.denyusers");
2321 delete $proxysettings{'RADIUS_DENY_USERS'};
2322 while (<FILE>) { $proxysettings{'RADIUS_DENY_USERS'} .= $_ };
2323 close(FILE);
2324 }
2325 if (-e "$identdir/identauth.allowusers") {
2326 open(FILE,"$identdir/identauth.allowusers");
2327 delete $proxysettings{'IDENT_ALLOW_USERS'};
2328 while (<FILE>) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_ };
2329 close(FILE);
2330 }
2331 if (-e "$identdir/identauth.denyusers") {
2332 open(FILE,"$identdir/identauth.denyusers");
2333 delete $proxysettings{'IDENT_DENY_USERS'};
2334 while (<FILE>) { $proxysettings{'IDENT_DENY_USERS'} .= $_ };
2335 close(FILE);
2336 }
2337 if (-e "$identhosts") {
2338 open(FILE,"$identhosts");
2339 delete $proxysettings{'IDENT_HOSTS'};
2340 while (<FILE>) { $proxysettings{'IDENT_HOSTS'} .= $_ };
2341 close(FILE);
2342 }
2343 if (-e "$cre_groups") {
2344 open(FILE,"$cre_groups");
2345 delete $proxysettings{'CRE_GROUPS'};
2346 while (<FILE>) { $proxysettings{'CRE_GROUPS'} .= $_ };
2347 close(FILE);
2348 }
2349 if (-e "$cre_svhosts") {
2350 open(FILE,"$cre_svhosts");
2351 delete $proxysettings{'CRE_SVHOSTS'};
2352 while (<FILE>) { $proxysettings{'CRE_SVHOSTS'} .= $_ };
2353 close(FILE);
2354 }
2355}
2356
2357# -------------------------------------------------------------------
2358
2359sub check_acls
2360{
363fb6af
MT		 2361 @temp = split(/\n/,$proxysettings{'PORTS_SAFE'});
2362 undef $proxysettings{'PORTS_SAFE'};
2363 foreach (@temp)
2364 {
2365 s/^\s+//g; s/\s+$//g;
2366 if ($_)
2367 {
2368 $line = $_;
2369 if (/^[^#]+\s+#\sSquids\sport/) { s/(^[^#]+)(\s+#\sSquids\sport)/$proxysettings{'PROXY_PORT'}\2/; $line=$_; }
2370 s/#.*//g; s/\s+//g;
2371 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2372 @templist = split(/-/);
2373 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2374 $proxysettings{'PORTS_SAFE'} .= $line."\n";
2375 }
2376 }
2377
2378 @temp = split(/\n/,$proxysettings{'PORTS_SSL'});
2379 undef $proxysettings{'PORTS_SSL'};
2380 foreach (@temp)
2381 {
2382 s/^\s+//g; s/\s+$//g;
2383 if ($_)
2384 {
2385 $line = $_;
2386 s/#.*//g; s/\s+//g;
2387 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2388 @templist = split(/-/);
2389 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2390 $proxysettings{'PORTS_SSL'} .= $line."\n";
2391 }
2392 }
2393
2394 @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2395 undef $proxysettings{'DST_NOCACHE'};
2396 foreach (@temp)
2397 {
2398 s/^\s+//g; s/\s+$//g;
2399 if ($_)
2400 {
2401 unless (/^\./) { $_ = '.'.$_; }
2402 $proxysettings{'DST_NOCACHE'} .= $_."\n";
2403 }
2404 }
2405
ed38f89d
MT		 2406 @temp = split(/\n/,$proxysettings{'SRC_SUBNETS'});
2407 undef $proxysettings{'SRC_SUBNETS'};
2408 foreach (@temp)
2409 {
2410 s/^\s+//g; s/\s+$//g;
2411 if ($_)
2412 {
2413 unless (&General::validipandmask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2414 $proxysettings{'SRC_SUBNETS'} .= $_."\n";
2415 }
2416 }
2417
2418 @temp = split(/\n/,$proxysettings{'SRC_BANNED_IP'});
2419 undef $proxysettings{'SRC_BANNED_IP'};
2420 foreach (@temp)
2421 {
2422 s/^\s+//g; s/\s+$//g;
2423 if ($_)
2424 {
2425 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2426 $proxysettings{'SRC_BANNED_IP'} .= $_."\n";
2427 }
2428 }
2429
2430 @temp = split(/\n/,$proxysettings{'SRC_BANNED_MAC'});
2431 undef $proxysettings{'SRC_BANNED_MAC'};
2432 foreach (@temp)
2433 {
2434 s/^\s+//g; s/\s+$//g; s/-/:/g;
2435 if ($_)
2436 {
2437 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2438 $proxysettings{'SRC_BANNED_MAC'} .= $_."\n";
2439 }
2440 }
2441
2442 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_IP'});
2443 undef $proxysettings{'SRC_UNRESTRICTED_IP'};
2444 foreach (@temp)
2445 {
2446 s/^\s+//g; s/\s+$//g;
2447 if ($_)
2448 {
2449 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2450 $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_."\n";
2451 }
2452 }
2453
2454 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_MAC'});
2455 undef $proxysettings{'SRC_UNRESTRICTED_MAC'};
2456 foreach (@temp)
2457 {
2458 s/^\s+//g; s/\s+$//g; s/-/:/g;
2459 if ($_)
2460 {
2461 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2462 $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_."\n";
2463 }
2464 }
2465
363fb6af
MT		 2466 @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
2467 undef $proxysettings{'DST_NOAUTH'};
2468 foreach (@temp)
2469 {
2470 s/^\s+//g; s/\s+$//g;
2471 if ($_)
2472 {
2473 unless (/^\./) { $_ = '.'.$_; }
2474 $proxysettings{'DST_NOAUTH'} .= $_."\n";
2475 }
2476 }
2477
ed38f89d
MT		 2478 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
2479 {
2480 @temp = split(/\n/,$proxysettings{'NTLM_ALLOW_USERS'});
2481 undef $proxysettings{'NTLM_ALLOW_USERS'};
2482 foreach (@temp)
2483 {
2484 s/^\s+//g; s/\s+$//g;
2485 if ($_) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_."\n"; }
2486 }
2487 if ($proxysettings{'NTLM_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2488 }
2489
2490 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
2491 {
2492 @temp = split(/\n/,$proxysettings{'NTLM_DENY_USERS'});
2493 undef $proxysettings{'NTLM_DENY_USERS'};
2494 foreach (@temp)
2495 {
2496 s/^\s+//g; s/\s+$//g;
2497 if ($_) { $proxysettings{'NTLM_DENY_USERS'} .= $_."\n"; }
2498 }
2499 if ($proxysettings{'NTLM_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2500 }
2501
2502 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
2503 {
2504 @temp = split(/\n/,$proxysettings{'IDENT_ALLOW_USERS'});
2505 undef $proxysettings{'IDENT_ALLOW_USERS'};
2506 foreach (@temp)
2507 {
2508 s/^\s+//g; s/\s+$//g;
2509 if ($_) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_."\n"; }
2510 }
2511 if ($proxysettings{'IDENT_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2512 }
2513
2514 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
2515 {
2516 @temp = split(/\n/,$proxysettings{'IDENT_DENY_USERS'});
2517 undef $proxysettings{'IDENT_DENY_USERS'};
2518 foreach (@temp)
2519 {
2520 s/^\s+//g; s/\s+$//g;
2521 if ($_) { $proxysettings{'IDENT_DENY_USERS'} .= $_."\n"; }
2522 }
2523 if ($proxysettings{'IDENT_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2524 }
2525
2526 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
2527 {
2528 @temp = split(/\n/,$proxysettings{'RADIUS_ALLOW_USERS'});
2529 undef $proxysettings{'RADIUS_ALLOW_USERS'};
2530 foreach (@temp)
2531 {
2532 s/^\s+//g; s/\s+$//g;
2533 if ($_) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_."\n"; }
2534 }
2535 if ($proxysettings{'RADIUS_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2536 }
2537
2538 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
2539 {
2540 @temp = split(/\n/,$proxysettings{'RADIUS_DENY_USERS'});
2541 undef $proxysettings{'RADIUS_DENY_USERS'};
2542 foreach (@temp)
2543 {
2544 s/^\s+//g; s/\s+$//g;
2545 if ($_) { $proxysettings{'RADIUS_DENY_USERS'} .= $_."\n"; }
2546 }
2547 if ($proxysettings{'RADIUS_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2548 }
2549
2550 @temp = split(/\n/,$proxysettings{'IDENT_HOSTS'});
2551 undef $proxysettings{'IDENT_HOSTS'};
2552 foreach (@temp)
2553 {
2554 s/^\s+//g; s/\s+$//g;
2555 if ($_)
2556 {
2557 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2558 $proxysettings{'IDENT_HOSTS'} .= $_."\n";
2559 }
2560 }
2561
2562 @temp = split(/\n/,$proxysettings{'CRE_SVHOSTS'});
2563 undef $proxysettings{'CRE_SVHOSTS'};
2564 foreach (@temp)
2565 {
2566 s/^\s+//g; s/\s+$//g;
2567 if ($_)
2568 {
2569 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2570 $proxysettings{'CRE_SVHOSTS'} .= $_."\n";
2571 }
2572 }
2573}
2574
ed38f89d
MT		 2575# -------------------------------------------------------------------
2576
2577sub write_acls
2578{
2579 open(FILE, ">$acl_src_subnets");
2580 flock(FILE, 2);
363fb6af
MT		 2581 if (!$proxysettings{'SRC_SUBNETS'})
2582 {
2583 print FILE "$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}\n";
2584 if ($netsettings{'BLUE_DEV'})
2585 {
2586 print FILE "$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}\n";
2587 }
2588 } else { print FILE $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 2589 close(FILE);
2590
2591 open(FILE, ">$acl_src_banned_ip");
2592 flock(FILE, 2);
2593 print FILE $proxysettings{'SRC_BANNED_IP'};
2594 close(FILE);
2595
2596 open(FILE, ">$acl_src_banned_mac");
2597 flock(FILE, 2);
2598 print FILE $proxysettings{'SRC_BANNED_MAC'};
2599 close(FILE);
2600
2601 open(FILE, ">$acl_src_unrestricted_ip");
2602 flock(FILE, 2);
2603 print FILE $proxysettings{'SRC_UNRESTRICTED_IP'};
2604 close(FILE);
2605
2606 open(FILE, ">$acl_src_unrestricted_mac");
2607 flock(FILE, 2);
2608 print FILE $proxysettings{'SRC_UNRESTRICTED_MAC'};
2609 close(FILE);
2610
2611 open(FILE, ">$acl_dst_nocache");
2612 flock(FILE, 2);
2613 print FILE $proxysettings{'DST_NOCACHE'};
2614 close(FILE);
2615
2616 open(FILE, ">$acl_dst_noauth");
2617 flock(FILE, 2);
2618 print FILE $proxysettings{'DST_NOAUTH'};
2619 close(FILE);
2620
363fb6af
MT		 2621 open(FILE, ">$acl_ports_safe");
2622 flock(FILE, 2);
2623 if (!$proxysettings{'PORTS_SAFE'}) { print FILE $def_ports_safe; } else { print FILE $proxysettings{'PORTS_SAFE'}; }
2624 close(FILE);
2625
2626 open(FILE, ">$acl_ports_ssl");
2627 flock(FILE, 2);
2628 if (!$proxysettings{'PORTS_SSL'}) { print FILE $def_ports_ssl; } else { print FILE $proxysettings{'PORTS_SSL'}; }
2629 close(FILE);
2630
ed38f89d
MT		 2631 open(FILE, ">$acl_dst_throttle");
2632 flock(FILE, 2);
2633 if ($proxysettings{'THROTTLE_BINARY'} eq 'on')
2634 {
2635 @temp = split(/\|/,$throttle_binary);
363fb6af 2636 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2637 }
2638 if ($proxysettings{'THROTTLE_DSKIMG'} eq 'on')
2639 {
2640 @temp = split(/\|/,$throttle_dskimg);
363fb6af 2641 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2642 }
2643 if ($proxysettings{'THROTTLE_MMEDIA'} eq 'on')
2644 {
2645 @temp = split(/\|/,$throttle_mmedia);
363fb6af 2646 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2647 }
2648 if (-s $throttled_urls)
2649 {
2650 open(URLFILE, $throttled_urls);
2651 @temp = <URLFILE>;
2652 close(URLFILE);
363fb6af 2653 foreach (@temp) { print FILE; }
ed38f89d
MT		 2654 }
2655 close(FILE);
2656
2657 open(FILE, ">$mimetypes");
2658 flock(FILE, 2);
2659 print FILE $proxysettings{'MIME_TYPES'};
2660 close(FILE);
2661
2662 open(FILE, ">$ntlmdir/msntauth.allowusers");
2663 flock(FILE, 2);
2664 print FILE $proxysettings{'NTLM_ALLOW_USERS'};
2665 close(FILE);
2666
2667 open(FILE, ">$ntlmdir/msntauth.denyusers");
2668 flock(FILE, 2);
2669 print FILE $proxysettings{'NTLM_DENY_USERS'};
2670 close(FILE);
2671
2672 open(FILE, ">$raddir/radauth.allowusers");
2673 flock(FILE, 2);
2674 print FILE $proxysettings{'RADIUS_ALLOW_USERS'};
2675 close(FILE);
2676
2677 open(FILE, ">$raddir/radauth.denyusers");
2678 flock(FILE, 2);
2679 print FILE $proxysettings{'RADIUS_DENY_USERS'};
2680 close(FILE);
2681
2682 open(FILE, ">$identdir/identauth.allowusers");
2683 flock(FILE, 2);
2684 print FILE $proxysettings{'IDENT_ALLOW_USERS'};
2685 close(FILE);
2686
2687 open(FILE, ">$identdir/identauth.denyusers");
2688 flock(FILE, 2);
2689 print FILE $proxysettings{'IDENT_DENY_USERS'};
2690 close(FILE);
2691
2692 open(FILE, ">$identhosts");
2693 flock(FILE, 2);
2694 print FILE $proxysettings{'IDENT_HOSTS'};
2695 close(FILE);
2696
2697 open(FILE, ">$cre_groups");
2698 flock(FILE, 2);
2699 print FILE $proxysettings{'CRE_GROUPS'};
2700 close(FILE);
2701
2702 open(FILE, ">$cre_svhosts");
2703 flock(FILE, 2);
2704 print FILE $proxysettings{'CRE_SVHOSTS'};
2705 close(FILE);
2706}
2707
2708# -------------------------------------------------------------------
2709
2710sub writepacfile
2711{
22527178 2712 open(FILE, ">/srv/web/ipfire/html/proxy.pac");
ed38f89d
MT		 2713 flock(FILE, 2);
2714 print FILE "function FindProxyForURL(url, host)\n";
2715 print FILE "{\n";
2716 if (($proxysettings{'ENABLE'} eq 'on') || ($proxysettings{'ENABLE_BLUE'} eq 'on'))
2717 {
2718 print FILE <<END
2719if (
2720 (isPlainHostName(host)) ||
2721 (dnsDomainIs(host, ".$mainsettings{'DOMAINNAME'}")) ||
2722 (isInNet(host, "10.0.0.0", "255.0.0.0")) ||
2723 (isInNet(host, "172.16.0.0", "255.240.0.0")) ||
2724 (isInNet(host, "169.254.0.0", "255.255.0.0")) ||
2725 (isInNet(host, "192.168.0.0", "255.255.0.0"))
2726 )
2727 return "DIRECT";
2728
2729 else
2730
2731END
2732;
2733 if ($proxysettings{'ENABLE'} eq 'on')
2734 {
268292e7
CS		 2735 print FILE "if (\n";
2736 print FILE " (isInNet(myIpAddress(), \"$netsettings{'GREEN_NETADDRESS'}\", \"$netsettings{'GREEN_NETMASK'}\"))";
2737
2738 undef @templist;
2739 if (-e "$acl_src_subnets") {
2740 open(SUBNETS,"$acl_src_subnets");
2741 @templist = <SUBNETS>;
2742 close(SUBNETS);
2743 }
2744
2745 foreach (@templist)
2746 {
2747 @temp = split(/\//);
2748 if (
2749 ($temp[0] ne $netsettings{'GREEN_NETADDRESS'}) && ($temp[1] ne $netsettings{'GREEN_NETMASK'}) &&
2750 ($temp[0] ne $netsettings{'BLUE_NETADDRESS'}) && ($temp[1] ne $netsettings{'BLUE_NETMASK'})
2751 )
2752 {
2753 chomp $temp[1];
2754 print FILE " ||\n (isInNet(myIpAddress(), \"$temp[0]\", \"$temp[1]\"))";
2755 }
2756 }
2757
2758 print FILE "\n";
2759
ed38f89d 2760 print FILE <<END
268292e7
CS		 2761
2762
ed38f89d
MT		 2763 )
2764 return "PROXY $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2765END
2766;
2767 }
2768 if (($proxysettings{'ENABLE'} eq 'on') && ($proxysettings{'ENABLE_BLUE'} eq 'on') && ($netsettings{'BLUE_DEV'}))
2769 {
2770 print FILE "\n else\n\n";
2771 }
2772 if (($netsettings{'BLUE_DEV'}) && ($proxysettings{'ENABLE_BLUE'} eq 'on'))
2773 {
2774 print FILE <<END
2775if (
2776 (isInNet(myIpAddress(), "$netsettings{'BLUE_NETADDRESS'}", "$netsettings{'BLUE_NETMASK'}"))
2777 )
2778 return "PROXY $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2779END
2780;
2781 }
2782 }
2783 print FILE "}\n";
2784 close(FILE);
2785}
2786
2787# -------------------------------------------------------------------
2788
2789sub writeconfig
2790{
2791 my $authrealm;
2792 my $delaypools;
2793
363fb6af 2794 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} +
ed38f89d
MT		 2795 $proxysettings{'THROTTLING_GREEN_HOST'} +
2796 $proxysettings{'THROTTLING_BLUE_TOTAL'} +
2797 $proxysettings{'THROTTLING_BLUE_HOST'} gt 0)
2798 {
2799 $delaypools = 1; } else { $delaypools = 0;
2800 }
2801
2802 if ($proxysettings{'AUTH_REALM'} eq '')
2803 {
363fb6af 2804 $authrealm = "IPCop Advanced Proxy Server";
ed38f89d
MT		 2805 } else {
2806 $authrealm = $proxysettings{'AUTH_REALM'};
2807 }
2808
2809 $_ = $proxysettings{'UPSTREAM_PROXY'};
2810 my ($remotehost, $remoteport) = (/^(?:[a-zA-Z ]+\:\/\/)?(?:[A-Za-z0-9\_\.\-]*?(?:\:[A-Za-z0-9\_\.\-]*?)?\@)?([a-zA-Z0-9\.\_\-]*?)(?:\:([0-9]{1,5}))?(?:\/.*?)?$/);
2811
2812 if ($remoteport eq '') { $remoteport = 80; }
2813
2814 open(FILE, ">${General::swroot}/proxy/squid.conf");
2815 flock(FILE, 2);
2816 print FILE <<END
363fb6af
MT		 2817# Do not modify '${General::swroot}/proxy/squid.conf' directly since any changes
2818# you make will be overwritten whenever you resave proxy settings using the
2819# web interface!
2820#
2821# Instead, modify the file '$acl_include' and
2822# then restart the proxy service using the web interface. Changes made to the
2823# 'include.acl' file will propagate to the 'squid.conf' file at that time.
2824
ed38f89d
MT		 2825shutdown_lifetime 5 seconds
2826icp_port 0
2827
ed38f89d
MT		 2828END
2829 ;
363fb6af
MT		 2830 print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2831 if ($proxysettings{'TRANSPARENT'} eq 'on') { print FILE " transparent" }
2832 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
2833 print FILE "\n";
2834
ed38f89d 2835 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
363fb6af
MT		 2836 print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
2837 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') { print FILE " transparent" }
2838 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
2839 print FILE "\n";
ed38f89d
MT		 2840 }
2841
2842 print FILE <<END
2843
2844acl QUERY urlpath_regex cgi-bin \\?
363fb6af 2845cache deny QUERY
ed38f89d
MT		 2846END
2847 ;
2848 if (!-z $acl_dst_nocache) {
2849 print FILE "acl no_cache_domains dstdomain \"$acl_dst_nocache\"\n";
363fb6af 2850 print FILE "cache deny no_cache_domains\n";
ed38f89d
MT		 2851 }
2852
2853 print FILE <<END
2854
2855cache_effective_user squid
2856cache_effective_group squid
363fb6af 2857umask 022
ed38f89d
MT		 2858
2859pid_filename /var/run/squid.pid
2860
2861cache_mem $proxysettings{'CACHE_MEM'} MB
2862cache_dir aufs /var/log/cache $proxysettings{'CACHE_SIZE'} $proxysettings{'L1_DIRS'} 256
2863
ed38f89d
MT		 2864END
2865 ;
2866
0d948999 2867 if (($proxysettings{'ERR_DESIGN'} eq 'ipfire' ))
363fb6af 2868 {
0d948999 2869 print FILE "error_directory $errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}\n\n";
363fb6af
MT		 2870 } else {
2871 print FILE "error_directory $errordir/$proxysettings{'ERR_LANGUAGE'}\n\n";
2872 }
2873
ed38f89d
MT		 2874 if ($proxysettings{'OFFLINE_MODE'} eq 'on') { print FILE "offline_mode on\n\n"; }
2875
2876 if ((!($proxysettings{'MEM_POLICY'} eq 'LRU')) || (!($proxysettings{'CACHE_POLICY'} eq 'LRU')))
2877 {
2878 if (!($proxysettings{'MEM_POLICY'} eq 'LRU'))
2879 {
2880 print FILE "memory_replacement_policy $proxysettings{'MEM_POLICY'}\n";
2881 }
2882 if (!($proxysettings{'CACHE_POLICY'} eq 'LRU'))
2883 {
2884 print FILE "cache_replacement_policy $proxysettings{'CACHE_POLICY'}\n";
2885 }
2886 print FILE "\n";
2887 }
2888
2889 if ($proxysettings{'LOGGING'} eq 'on')
2890 {
363fb6af
MT		 2891 print FILE <<END
2892access_log /var/log/squid/access.log
ed38f89d
MT		 2893cache_log /var/log/squid/cache.log
2894cache_store_log none
2895END
2896 ;
2897 if ($proxysettings{'LOGUSERAGENT'} eq 'on') { print FILE "useragent_log \/var\/log\/squid\/user_agent.log\n"; }
2898 if ($proxysettings{'LOGQUERY'} eq 'on') { print FILE "\nstrip_query_terms off\n"; }
2899 } else {
2900 print FILE <<END
363fb6af 2901access_log /dev/null
ed38f89d
MT		 2902cache_log /dev/null
2903cache_store_log none
2904END
2905 ;}
2906 print FILE <<END
2907
2908log_mime_hdrs off
2909END
2910 ;
2911
2912 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'on')
2913 {
363fb6af 2914 print FILE "forwarded_for on\n";
ed38f89d 2915 } else {
363fb6af 2916 print FILE "forwarded_for off\n";
ed38f89d 2917 }
363fb6af
MT		 2918 if ($proxysettings{'FORWARD_VIA'} eq 'on')
2919 {
2920 print FILE "via on\n";
2921 } else {
2922 print FILE "via off\n";
2923 }
2924 print FILE "\n";
ed38f89d
MT		 2925
2926 if ((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
2927 {
2928 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
2929 {
363fb6af 2930 print FILE "auth_param basic program $authdir/ncsa_auth $userdb\n";
ed38f89d
MT		 2931 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
2932 print FILE "auth_param basic realm $authrealm\n";
2933 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
2934 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
2935 }
2936
2937 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
2938 {
363fb6af 2939 print FILE "auth_param basic program $authdir/squid_ldap_auth -b \"$proxysettings{'LDAP_BASEDN'}\"";
ed38f89d
MT		 2940 if (!($proxysettings{'LDAP_BINDDN_USER'} eq '')) { print FILE " -D \"$proxysettings{'LDAP_BINDDN_USER'}\""; }
2941 if (!($proxysettings{'LDAP_BINDDN_PASS'} eq '')) { print FILE " -w $proxysettings{'LDAP_BINDDN_PASS'}"; }
2942 if ($proxysettings{'LDAP_TYPE'} eq 'ADS')
2943 {
2944 if ($proxysettings{'LDAP_GROUP'} eq '')
2945 {
2946 print FILE " -f \"(\&(objectClass=person)(sAMAccountName=\%s))\"";
2947 } else {
2948 print FILE " -f \"(\&(\&(objectClass=person)(sAMAccountName=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
2949 }
2950 print FILE " -u sAMAccountName -P";
2951 }
2952 if ($proxysettings{'LDAP_TYPE'} eq 'NDS')
2953 {
2954 if ($proxysettings{'LDAP_GROUP'} eq '')
2955 {
2956 print FILE " -f \"(\&(objectClass=person)(cn=\%s))\"";
2957 } else {
2958 print FILE " -f \"(\&(\&(objectClass=person)(cn=\%s))(groupMembership=$proxysettings{'LDAP_GROUP'}))\"";
2959 }
2960 print FILE " -u cn -P";
2961 }
2962 if (($proxysettings{'LDAP_TYPE'} eq 'V2') || ($proxysettings{'LDAP_TYPE'} eq 'V3'))
2963 {
2964 if ($proxysettings{'LDAP_GROUP'} eq '')
2965 {
2966 print FILE " -f \"(\&(objectClass=person)(uid=\%s))\"";
2967 } else {
2968 print FILE " -f \"(\&(\&(objectClass=person)(uid=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
2969 }
2970 if ($proxysettings{'LDAP_TYPE'} eq 'V2') { print FILE " -v 2"; }
2971 if ($proxysettings{'LDAP_TYPE'} eq 'V3') { print FILE " -v 3"; }
2972 print FILE " -u uid -P";
2973 }
2974 print FILE " $proxysettings{'LDAP_SERVER'}:$proxysettings{'LDAP_PORT'}\n";
2975 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
2976 print FILE "auth_param basic realm $authrealm\n";
2977 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
2978 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
2979 }
2980
2981 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
2982 {
2983 if ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on')
2984 {
363fb6af 2985 print FILE "auth_param ntlm program $authdir/ntlm_auth $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_PDC'}";
ed38f89d
MT		 2986 if ($proxysettings{'NTLM_BDC'} eq '') { print FILE "\n"; } else { print FILE " $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_BDC'}\n"; }
2987 print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n";
ed38f89d
MT		 2988 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
2989 } else {
363fb6af 2990 print FILE "auth_param basic program $authdir/msnt_auth\n";
ed38f89d
MT		 2991 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
2992 print FILE "auth_param basic realm $authrealm\n";
2993 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
2994 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
2995
2996 open(MSNTCONF, ">$ntlmdir/msntauth.conf");
2997 flock(MSNTCONF,2);
2998 print MSNTCONF "server $proxysettings{'NTLM_PDC'}";
2999 if ($proxysettings{'NTLM_BDC'} eq '') { print MSNTCONF " $proxysettings{'NTLM_PDC'}"; } else { print MSNTCONF " $proxysettings{'NTLM_BDC'}"; }
3000 print MSNTCONF " $proxysettings{'NTLM_DOMAIN'}\n";
3001 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3002 {
3003 if ($proxysettings{'NTLM_USER_ACL'} eq 'positive')
3004 {
3005 print MSNTCONF "allowusers $ntlmdir/msntauth.allowusers\n";
3006 } else {
3007 print MSNTCONF "denyusers $ntlmdir/msntauth.denyusers\n";
3008 }
3009 }
3010 close(MSNTCONF);
3011 }
3012 }
3013
3014 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
3015 {
363fb6af 3016 print FILE "auth_param basic program $authdir/squid_radius_auth -h $proxysettings{'RADIUS_SERVER'} -p $proxysettings{'RADIUS_PORT'} ";
ed38f89d
MT		 3017 if (!($proxysettings{'RADIUS_IDENTIFIER'} eq '')) { print FILE "-i $proxysettings{'RADIUS_IDENTIFIER'} "; }
3018 print FILE "-w $proxysettings{'RADIUS_SECRET'}\n";
3019 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3020 print FILE "auth_param basic realm $authrealm\n";
3021 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3022 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3023 }
3024
3025 print FILE "\n";
3026 print FILE "acl for_inetusers proxy_auth REQUIRED\n";
3027 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') && ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on'))
3028 {
3029 if ((!-z "$ntlmdir/msntauth.allowusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
3030 {
3031 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.allowusers\"\n";
3032 }
3033 if ((!-z "$ntlmdir/msntauth.denyusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
3034 {
3035 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.denyusers\"\n";
3036 }
3037 }
3038 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
3039 {
3040 if ((!-z "$raddir/radauth.allowusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
3041 {
3042 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.allowusers\"\n";
3043 }
3044 if ((!-z "$raddir/radauth.denyusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
3045 {
3046 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.denyusers\"\n";
3047 }
3048 }
3049 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3050 {
3051 print FILE "\n";
3052 if (!-z $extgrp) { print FILE "acl for_extended_users proxy_auth \"$extgrp\"\n"; }
3053 if (!-z $disgrp) { print FILE "acl for_disabled_users proxy_auth \"$disgrp\"\n"; }
3054 }
3055 if (!($proxysettings{'AUTH_MAX_USERIP'} eq '')) { print FILE "\nacl concurrent max_user_ip -s $proxysettings{'AUTH_MAX_USERIP'}\n"; }
3056 print FILE "\n";
3057
363fb6af
MT		 3058 if (!-z $acl_dst_noauth) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth\"\n"; }
3059 print FILE "\n";
ed38f89d
MT		 3060 }
3061
3062 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3063 {
3064 if ($proxysettings{'IDENT_REQUIRED'} eq 'on')
3065 {
3066 print FILE "acl for_inetusers ident REQUIRED\n";
3067 }
3068 if ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on')
3069 {
3070 if ((!-z "$identdir/identauth.allowusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
3071 {
3072 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.allowusers\"\n\n";
3073 }
3074 if ((!-z "$identdir/identauth.denyusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
3075 {
3076 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.denyusers\"\n\n";
3077 }
3078 }
363fb6af
MT		 3079 if (!-z $acl_dst_noauth) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth\"\n"; }
3080 print FILE "\n";
ed38f89d
MT		 3081 }
3082
3083 if (($delaypools) && (!-z $acl_dst_throttle)) { print FILE "acl for_throttled_urls url_regex -i \"$acl_dst_throttle\"\n\n"; }
3084
3085 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE "acl with_allowed_useragents browser $browser_regexp\n\n"; }
3086
3087 print FILE "acl within_timeframe time ";
3088 if ($proxysettings{'TIME_MON'} eq 'on') { print FILE "M"; }
3089 if ($proxysettings{'TIME_TUE'} eq 'on') { print FILE "T"; }
3090 if ($proxysettings{'TIME_WED'} eq 'on') { print FILE "W"; }
3091 if ($proxysettings{'TIME_THU'} eq 'on') { print FILE "H"; }
3092 if ($proxysettings{'TIME_FRI'} eq 'on') { print FILE "F"; }
3093 if ($proxysettings{'TIME_SAT'} eq 'on') { print FILE "A"; }
3094 if ($proxysettings{'TIME_SUN'} eq 'on') { print FILE "S"; }
363fb6af
MT		 3095 print FILE " $proxysettings{'TIME_FROM_HOUR'}:";
3096 print FILE "$proxysettings{'TIME_FROM_MINUTE'}-";
3097 print FILE "$proxysettings{'TIME_TO_HOUR'}:";
3098 print FILE "$proxysettings{'TIME_TO_MINUTE'}\n\n";
ed38f89d
MT		 3099
3100 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
3101 print FILE "acl blocked_mimetypes rep_mime_type \"$mimetypes\"\n\n";
3102 }
3103
3104 print FILE <<END
3105acl all src 0.0.0.0/0.0.0.0
3106acl localhost src 127.0.0.1/255.255.255.255
363fb6af
MT		 3107END
3108;
3109open (PORTS,"$acl_ports_ssl");
3110@temp = <PORTS>;
3111close PORTS;
3112if (@temp)
3113{
3114 foreach (@temp) { print FILE "acl SSL_ports port $_"; }
3115}
3116open (PORTS,"$acl_ports_safe");
3117@temp = <PORTS>;
3118close PORTS;
3119if (@temp)
3120{
3121 foreach (@temp) { print FILE "acl Safe_ports port $_"; }
3122}
3123 print FILE <<END
3124
3125acl IPCop_http port $http_port
3126acl IPCop_https port $https_port
ed38f89d
MT		 3127acl IPCop_ips dst $netsettings{'GREEN_ADDRESS'}
3128acl IPCop_networks src "$acl_src_subnets"
9fb25b1c 3129acl IPCop_servers dst "$acl_src_subnets"
ed38f89d 3130acl IPCop_green_network src $netsettings{'GREEN_NETADDRESS'}/$netsettings{'GREEN_NETMASK'}
9fb25b1c 3131acl IPCop_green_servers dst $netsettings{'GREEN_NETADDRESS'}/$netsettings{'GREEN_NETMASK'}
ed38f89d
MT		 3132END
3133 ;
363fb6af 3134 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPCop_blue_network src $netsettings{'BLUE_NETADDRESS'}/$netsettings{'BLUE_NETMASK'}\n"; }
9fb25b1c 3135 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPCop_blue_servers dst $netsettings{'BLUE_NETADDRESS'}/$netsettings{'BLUE_NETMASK'}\n"; }
ed38f89d
MT		 3136 if (!-z $acl_src_banned_ip) { print FILE "acl IPCop_banned_ips src \"$acl_src_banned_ip\"\n"; }
3137 if (!-z $acl_src_banned_mac) { print FILE "acl IPCop_banned_mac arp \"$acl_src_banned_mac\"\n"; }
3138 if (!-z $acl_src_unrestricted_ip) { print FILE "acl IPCop_unrestricted_ips src \"$acl_src_unrestricted_ip\"\n"; }
3139 if (!-z $acl_src_unrestricted_mac) { print FILE "acl IPCop_unrestricted_mac arp \"$acl_src_unrestricted_mac\"\n"; }
3140 print FILE <<END
3141acl CONNECT method CONNECT
3142END
3143 ;
3144
3145 if ($proxysettings{'CLASSROOM_EXT'} eq 'on') {
3146 print FILE <<END
3147
3148#Classroom extensions
3149acl IPCop_no_access_ips src "$acl_src_noaccess_ip"
3150acl IPCop_no_access_mac arp "$acl_src_noaccess_mac"
3151END
3152 ;
3153 print FILE "deny_info ";
0d948999 3154 if ((($proxysettings{'ERR_DESIGN'} eq 'ipfire') && (-e "$errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")) ||
363fb6af
MT		 3155 (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")))
3156 {
3157 print FILE "ERR_ACCESS_DISABLED";
3158 } else {
3159 print FILE "ERR_ACCESS_DENIED";
3160 }
ed38f89d
MT		 3161 print FILE " IPCop_no_access_ips\n";
3162 print FILE "deny_info ";
0d948999 3163 if ((($proxysettings{'ERR_DESIGN'} eq 'ipfire') && (-e "$errordir.ipfire/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")) ||
363fb6af
MT		 3164 (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED")))
3165 {
3166 print FILE "ERR_ACCESS_DISABLED";
3167 } else {
3168 print FILE "ERR_ACCESS_DENIED";
3169 }
ed38f89d
MT		 3170 print FILE " IPCop_no_access_mac\n";
3171
3172 print FILE <<END
3173http_access deny IPCop_no_access_ips
3174http_access deny IPCop_no_access_mac
3175END
3176 ;
3177 }
3178
363fb6af
MT		 3179 #Insert acl file and replace __VAR__ with correct values
3180 my $blue_net = ''; #BLUE empty by default
3181 my $blue_ip = '';
3182 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
3183 $blue_net = "$netsettings{'BLUE_NETADDRESS'}/$netsettings{'BLUE_NETMASK'}";
3184 $blue_ip = "$netsettings{'BLUE_ADDRESS'}";
3185 }
3186 if (!-z $acl_include)
ed38f89d
MT		 3187 {
3188 open (ACL, "$acl_include");
3189 print FILE "\n#Start of custom includes\n";
3190 while (<ACL>) {
3191 $_ =~ s/__GREEN_IP__/$netsettings{'GREEN_ADDRESS'}/;
3192 $_ =~ s/__GREEN_NET__/$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}/;
3193 $_ =~ s/__BLUE_IP__/$blue_ip/;
3194 $_ =~ s/__BLUE_NET__/$blue_net/;
363fb6af 3195 $_ =~ s/__PROXY_PORT__/$proxysettings{'PROXY_PORT'}/;
ed38f89d
MT		 3196 print FILE $_;
3197 }
3198 print FILE "#End of custom includes\n";
3199 close (ACL);
3200 }
3201 if ((!-z $extgrp) && ($proxysettings{'AUTH_METHOD'} eq 'ncsa') && ($proxysettings{'NCSA_BYPASS_REDIR'} eq 'on')) { print FILE "\nredirector_access deny for_extended_users\n"; }
3202 print FILE <<END
3203
3204#Access to squid:
3205#local machine, no restriction
3206http_access allow localhost
3207
3208#GUI admin if local machine connects
3209http_access allow IPCop_ips IPCop_networks IPCop_http
3210http_access allow CONNECT IPCop_ips IPCop_networks IPCop_https
3211
3212#Deny not web services
3213http_access deny !Safe_ports
3214http_access deny CONNECT !SSL_ports
3215
3216END
3217 ;
3218
3219if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3220{
3221print FILE "#Set ident ACLs\n";
3222if (!-z $identhosts)
3223 {
3224 print FILE "acl on_ident_aware_hosts src \"$identhosts\"\n";
3225 print FILE "ident_lookup_access allow on_ident_aware_hosts\n";
3226 print FILE "ident_lookup_access deny all\n";
3227 } else {
3228 print FILE "ident_lookup_access allow all\n";
3229 }
3230 print FILE "ident_timeout $proxysettings{'IDENT_TIMEOUT'} seconds\n\n";
3231}
3232
3233if ($delaypools) {
3234 print FILE "#Set download throttling\n";
3235
3236 if ($netsettings{'BLUE_DEV'})
3237 {
3238 print FILE "delay_pools 2\n";
3239 } else {
3240 print FILE "delay_pools 1\n";
3241 }
3242
3243 print FILE "delay_class 1 3\n";
3244 if ($netsettings{'BLUE_DEV'}) { print FILE "delay_class 2 3\n"; }
3245
3246 print FILE "delay_parameters 1 ";
3247 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 'unlimited')
3248 {
3249 print FILE "-1/-1";
3250 } else {
3251 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 125;
3252 print FILE "/";
3253 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 250;
3254 }
3255
3256 print FILE " -1/-1 ";
3257 if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 'unlimited')
3258 {
3259 print FILE "-1/-1";
3260 } else {
3261 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 125;
3262 print FILE "/";
3263 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 250;
3264 }
3265 print FILE "\n";
3266
3267 if ($netsettings{'BLUE_DEV'})
3268 {
3269 print FILE "delay_parameters 2 ";
3270 if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 'unlimited')
3271 {
3272 print FILE "-1/-1";
3273 } else {
3274 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 125;
3275 print FILE "/";
3276 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 250;
3277 }
3278 print FILE " -1/-1 ";
3279 if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 'unlimited')
3280 {
3281 print FILE "-1/-1";
3282 } else {
3283 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 125;
3284 print FILE "/";
3285 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 250;
3286 }
3287 print FILE "\n";
3288 }
3289
363fb6af 3290 print FILE "delay_access 1 deny IPCop_ips\n";
ed38f89d
MT		 3291 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 1 deny IPCop_unrestricted_ips\n"; }
3292 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 1 deny IPCop_unrestricted_mac\n"; }
3293 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 1 deny for_extended_users\n"; }
3294
3295 if ($netsettings{'BLUE_DEV'})
3296 {
3297 print FILE "delay_access 1 allow IPCop_green_network";
363fb6af 3298 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3299 print FILE "\n";
3300 print FILE "delay_access 1 deny all\n";
3301 } else {
3302 print FILE "delay_access 1 allow all";
363fb6af 3303 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3304 print FILE "\n";
3305 }
3306
3307 if ($netsettings{'BLUE_DEV'})
3308 {
363fb6af 3309 print FILE "delay_access 2 deny IPCop_ips\n";
ed38f89d
MT		 3310 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 2 deny IPCop_unrestricted_ips\n"; }
3311 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 2 deny IPCop_unrestricted_mac\n"; }
3312 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 2 deny for_extended_users\n"; }
3313 print FILE "delay_access 2 allow IPCop_blue_network";
363fb6af 3314 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3315 print FILE "\n";
3316 print FILE "delay_access 2 deny all\n";
3317 }
3318
9fb25b1c 3319 print FILE "delay_initial_bucket_level 100\n";
ed38f89d
MT		 3320 print FILE "\n";
3321}
9fb25b1c
MT		 3322
3323if ($proxysettings{'NO_PROXY_LOCAL'} eq 'on')
3324{
3325 print FILE "#Prevent internal proxy access to Green\n";
3326 print FILE "http_access deny IPCop_green_servers !IPCop_green_network\n\n";
3327}
3328
3329if ($proxysettings{'NO_PROXY_LOCAL_BLUE'} eq 'on')
3330{
3331 print FILE "#Prevent internal proxy access from Blue\n";
3332 print FILE "http_access allow IPCop_blue_network IPCop_blue_servers\n";
3333 print FILE "http_access deny IPCop_blue_network IPCop_servers\n\n";
3334}
3335
ed38f89d
MT		 3336 print FILE <<END
3337#Set custom configured ACLs
3338END
3339 ;
3340 if (!-z $acl_src_banned_ip) { print FILE "http_access deny IPCop_banned_ips\n"; }
3341 if (!-z $acl_src_banned_mac) { print FILE "http_access deny IPCop_banned_mac\n"; }
3342
3343 if ((!-z $acl_dst_noauth) && (!($proxysettings{'AUTH_METHOD'} eq 'none')))
3344 {
3345 if (!-z $acl_src_unrestricted_ip)
3346 {
3347 print FILE "http_access allow IPCop_unrestricted_ips to_domains_without_auth\n";
3348 }
3349 if (!-z $acl_src_unrestricted_mac)
3350 {
3351 print FILE "http_access allow IPCop_unrestricted_mac to_domains_without_auth\n";
3352 }
3353 print FILE "http_access allow IPCop_networks";
3354 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3355 print FILE " !within_timeframe";
3356 } else {
3357 print FILE " within_timeframe"; }
3358 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3359 print FILE " to_domains_without_auth\n";
3360 }
3361
3362 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on'))
3363 {
3364 print FILE "http_access deny !for_inetusers";
3365 if (!-z $identhosts) { print FILE " on_ident_aware_hosts"; }
3366 print FILE "\n";
3367 }
3368
3369 if (
3370 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3371 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on') &&
3372 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3373 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3374 (!-z "$identdir/identauth.denyusers")
3375 )
3376 {
3377 print FILE "http_access deny for_acl_users";
3378 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3379 print FILE "\n";
3380 }
3381
3382 if (!-z $acl_src_unrestricted_ip)
3383 {
3384 print FILE "http_access allow IPCop_unrestricted_ips";
3385 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3386 {
3387 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3388 {
3389 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3390 }
3391 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3392 {
3393 print FILE " for_inetusers";
3394 }
3395 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3396 {
3397 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3398 {
3399 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3400 {
3401 print FILE " for_acl_users";
3402 }
3403 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3404 {
3405 print FILE " !for_acl_users";
3406 }
3407 } else { print FILE " for_inetusers"; }
3408 }
3409 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3410 {
ed38f89d 3411 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3412 {
ed38f89d
MT		 3413 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3414 {
3415 print FILE " for_acl_users";
3416 }
3417 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3418 {
3419 print FILE " !for_acl_users";
3420 }
3421 } else { print FILE " for_inetusers"; }
3422 }
3423 }
3424 print FILE "\n";
3425 }
3426
3427 if (!-z $acl_src_unrestricted_mac)
3428 {
3429 print FILE "http_access allow IPCop_unrestricted_mac";
3430 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3431 {
3432 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3433 {
3434 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3435 }
3436 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3437 {
3438 print FILE " for_inetusers";
3439 }
3440 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3441 {
3442 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3443 {
3444 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3445 {
3446 print FILE " for_acl_users";
3447 }
3448 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3449 {
3450 print FILE " !for_acl_users";
3451 }
3452 } else { print FILE " for_inetusers"; }
3453 }
3454 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3455 {
ed38f89d 3456 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3457 {
ed38f89d
MT		 3458 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3459 {
3460 print FILE " for_acl_users";
3461 }
3462 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3463 {
3464 print FILE " !for_acl_users";
3465 }
3466 } else { print FILE " for_inetusers"; }
3467 }
3468 }
3469 print FILE "\n";
3470 }
3471
3472 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3473 {
3474 if (!-z $disgrp) { print FILE "http_access deny for_disabled_users\n"; }
3475 if (!-z $extgrp) { print FILE "http_access allow IPCop_networks for_extended_users\n"; }
3476 }
3477
3478 if (
3479 (
3480 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3481 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3482 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3483 ($proxysettings{'NTLM_USER_ACL'} eq 'negative') &&
3484 (!-z "$ntlmdir/msntauth.denyusers")
3485 )
3486 ||
3487 (
3488 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3489 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3490 ($proxysettings{'RADIUS_USER_ACL'} eq 'negative') &&
3491 (!-z "$raddir/radauth.denyusers")
3492 )
3493 ||
3494 (
3495 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3496 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'off') &&
3497 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3498 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3499 (!-z "$identdir/identauth.denyusers")
3500 )
3501 )
3502 {
3503 print FILE "http_access deny for_acl_users";
3504 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3505 print FILE "\n";
3506 }
3507
3508 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && (!-z "$identhosts"))
3509 {
3510 print FILE "http_access allow";
3511 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3512 print FILE " !within_timeframe";
3513 } else {
3514 print FILE " within_timeframe"; }
3515 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3516 print FILE " !on_ident_aware_hosts\n";
3517 }
3518
3519 print FILE "http_access allow IPCop_networks";
3520 if (
3521 (
3522 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3523 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3524 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3525 ($proxysettings{'NTLM_USER_ACL'} eq 'positive') &&
3526 (!-z "$ntlmdir/msntauth.allowusers")
3527 )
3528 ||
3529 (
3530 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3531 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3532 ($proxysettings{'RADIUS_USER_ACL'} eq 'positive') &&
3533 (!-z "$raddir/radauth.allowusers")
3534 )
3535 ||
3536 (
3537 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3538 ($proxysettings{'IDENT_REQUIRED'} eq 'on') &&
3539 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3540 ($proxysettings{'IDENT_USER_ACL'} eq 'positive') &&
3541 (!-z "$identdir/identauth.allowusers")
3542 )
3543 )
3544 {
3545 print FILE " for_acl_users";
3546 } elsif (((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident'))) ||
3547 (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on'))) {
3548 print FILE " for_inetusers";
3549 }
3550 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && (!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3551 {
3552 print FILE " !concurrent";
3553 }
3554 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3555 print FILE " !within_timeframe";
3556 } else {
3557 print FILE " within_timeframe"; }
3558 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3559 print FILE "\n";
3560
3561 print FILE "http_access deny all\n\n";
3562
3563 if (($proxysettings{'FORWARD_IPADDRESS'} eq 'off') || ($proxysettings{'FORWARD_VIA'} eq 'off') ||
3564 (!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
3565 {
3566 print FILE "#Strip HTTP Header\n";
3567
3568 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'off')
3569 {
3570 print FILE "header_access X-Forwarded-For deny all\n";
3571 }
3572 if ($proxysettings{'FORWARD_VIA'} eq 'off')
3573 {
3574 print FILE "header_access Via deny all\n";
3575 }
3576 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
3577 {
3578 print FILE "header_access User-Agent deny all\n";
3579 }
3580 if (!($proxysettings{'FAKE_REFERER'} eq ''))
3581 {
3582 print FILE "header_access Referer deny all\n";
3583 }
3584
3585 print FILE "\n";
3586
3587 if ((!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
3588 {
3589 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
3590 {
3591 print FILE "header_replace User-Agent $proxysettings{'FAKE_USERAGENT'}\n";
3592 }
3593 if (!($proxysettings{'FAKE_REFERER'} eq ''))
3594 {
3595 print FILE "header_replace Referer $proxysettings{'FAKE_REFERER'}\n";
3596 }
3597 print FILE "\n";
3598 }
3599 }
3600
363fb6af
MT		 3601 if ($proxysettings{'SUPPRESS_VERSION'} eq 'on') { print FILE "httpd_suppress_version_string on\n\n" }
3602
ed38f89d
MT		 3603 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
3604 if (!-z $acl_src_unrestricted_ip) { print FILE "http_reply_access allow IPCop_unrestricted_ips\n"; }
3605 if (!-z $acl_src_unrestricted_mac) { print FILE "http_reply_access allow IPCop_unrestricted_mac\n"; }
3606 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3607 {
3608 if (!-z $extgrp) { print FILE "http_reply_access allow for_extended_users\n"; }
3609 }
3610 print FILE "http_reply_access deny blocked_mimetypes\n";
3611 print FILE "http_reply_access allow all\n\n";
3612 }
3613
3614 print FILE <<END
3615maximum_object_size $proxysettings{'MAX_SIZE'} KB
3616minimum_object_size $proxysettings{'MIN_SIZE'} KB
3617
3618request_body_max_size $proxysettings{'MAX_OUTGOING_SIZE'} KB
3619END
3620 ;
3621 $replybodymaxsize = 1024 * $proxysettings{'MAX_INCOMING_SIZE'};
3622 if ($proxysettings{'MAX_INCOMING_SIZE'} > 0) {
3623 if (!-z $acl_src_unrestricted_ip) { print FILE "reply_body_max_size 0 allow IPCop_unrestricted_ips\n"; }
3624 if (!-z $acl_src_unrestricted_mac) { print FILE "reply_body_max_size 0 allow IPCop_unrestricted_mac\n"; }
3625 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3626 {
3627 if (!-z $extgrp) { print FILE "reply_body_max_size 0 allow for_extended_users\n"; }
3628 }
3629 }
3630 print FILE "reply_body_max_size $replybodymaxsize allow all\n\n";
3631
3632 print FILE "visible_hostname";
3633 if ($proxysettings{'VISIBLE_HOSTNAME'} eq '')
3634 {
3635 print FILE " $mainsettings{'HOSTNAME'}.$mainsettings{'DOMAINNAME'}\n\n";
3636 } else {
3637 print FILE " $proxysettings{'VISIBLE_HOSTNAME'}\n\n";
3638 }
3639
3640 if (!($proxysettings{'ADMIN_MAIL_ADDRESS'} eq '')) { print FILE "cache_mgr $proxysettings{'ADMIN_MAIL_ADDRESS'}\n\n"; }
3641
3642 # Write the parent proxy info, if needed.
3643 if ($remotehost ne '')
3644 {
ed38f89d 3645 print FILE "cache_peer $remotehost parent $remoteport 3130 default no-query";
363fb6af
MT		 3646
3647 # Enter authentication for the parent cache. Option format is
3648 # login=user:password ($proxy1='YES')
3649 # login=PASS ($proxy1='PASS')
3650 # login=*:password ($proxysettings{'FORWARD_USERNAME'} eq 'on')
3651 if (($proxy1 eq 'YES') || ($proxy1 eq 'PASS'))
3652 {
3653 print FILE " login=$proxysettings{'UPSTREAM_USER'}";
3654 if ($proxy1 eq 'YES') { print FILE ":$proxysettings{'UPSTREAM_PASSWORD'}"; }
ed38f89d 3655 }
363fb6af
MT		 3656 elsif ($proxysettings{'FORWARD_USERNAME'} eq 'on') { print FILE " login=*:password"; }
3657
3658 print FILE "\nnever_direct allow all\n\n";
ed38f89d 3659 }
9fb25b1c 3660 if (($proxysettings{'ENABLE_FILTER'} eq 'on') && ($proxysettings{'ENABLE_UPDXLRATOR'} eq 'on'))
363fb6af
MT		 3661 {
3662 print FILE "url_rewrite_program /usr/sbin/redirect_wrapper\n";
9fb25b1c 3663 if ($filtersettings{'CHILDREN'} > $xlratorsettings{'CHILDREN'})
363fb6af
MT		 3664 {
3665 print FILE "url_rewrite_children $filtersettings{'CHILDREN'}\n\n";
3666 } else {
9fb25b1c 3667 print FILE "url_rewrite_children $xlratorsettings{'CHILDREN'}\n\n";
363fb6af
MT		 3668 }
3669 } else
3670 {
9fb25b1c
MT		 3671
3672 if ($proxysettings{'ENABLE_FILTER'} eq 'on')
3673 {
3674 print FILE <<END
f1baee3e 3675url_rewrite_program /usr/bin/squidGuard
363fb6af 3676url_rewrite_children $filtersettings{'CHILDREN'}
ed38f89d
MT		 3677
3678END
9fb25b1c 3679 ;
ed38f89d 3680 }
9fb25b1c
MT		 3681 if ($proxysettings{'ENABLE_UPDXLRATOR'} eq 'on')
3682 {
3683 print FILE <<END
363fb6af 3684url_rewrite_program /usr/sbin/updxlrator
9fb25b1c 3685url_rewrite_children $xlratorsettings{'CHILDREN'}
ed38f89d
MT		 3686
3687END
9fb25b1c 3688 ;
ed38f89d
MT		 3689 }
3690 }
ed38f89d
MT		 3691 close FILE;
3692}
3693
3694# -------------------------------------------------------------------
3695
3696sub adduser
3697{
3698 my ($str_user, $str_pass, $str_group) = @_;
3699 my @groupmembers=();
3700
3701 if ($str_pass eq 'lEaVeAlOnE')
3702 {
3703 open(FILE, "$userdb");
3704 @groupmembers = <FILE>;
3705 close(FILE);
3706 foreach $line (@groupmembers) { if ($line =~ /^$str_user:/i) { $str_pass = substr($line,index($line,":")); } }
3707 &deluser($str_user);
3708 open(FILE, ">>$userdb");
3709 flock FILE,2;
3710 print FILE "$str_user$str_pass";
3711 close(FILE);
3712 } else {
3713 &deluser($str_user);
3714 system("/usr/bin/htpasswd -b $userdb $str_user $str_pass");
3715 }
3716
3717 if ($str_group eq 'standard') { open(FILE, ">>$stdgrp");
3718 } elsif ($str_group eq 'extended') { open(FILE, ">>$extgrp");
3719 } elsif ($str_group eq 'disabled') { open(FILE, ">>$disgrp"); }
3720 flock FILE, 2;
3721 print FILE "$str_user\n";
3722 close(FILE);
3723
3724 return;
3725}
3726
3727# -------------------------------------------------------------------
3728
3729sub deluser
3730{
3731 my ($str_user) = @_;
3732 my $groupfile='';
3733 my @groupmembers=();
3734 my @templist=();
3735
3736 foreach $groupfile ($stdgrp, $extgrp, $disgrp)
3737 {
3738 undef @templist;
3739 open(FILE, "$groupfile");
3740 @groupmembers = <FILE>;
3741 close(FILE);
3742 foreach $line (@groupmembers) { if (!($line =~ /^$str_user$/i)) { push(@templist, $line); } }
3743 open(FILE, ">$groupfile");
3744 flock FILE, 2;
3745 print FILE @templist;
3746 close(FILE);
3747 }
3748
3749 undef @templist;
3750 open(FILE, "$userdb");
3751 @groupmembers = <FILE>;
3752 close(FILE);
3753 foreach $line (@groupmembers) { if (!($line =~ /^$str_user:/i)) { push(@templist, $line); } }
3754 open(FILE, ">$userdb");
3755 flock FILE, 2;
3756 print FILE @templist;
3757 close(FILE);
3758
3759 return;
3760}
ac1cfefa 3761
ed38f89d 3762# -------------------------------------------------------------------
Peter's tree of IPFire 2.x