]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - html/cgi-bin/proxy.cgi
projects / people / pmueller / ipfire-2.x.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
general-functions.pl: validdomainname misinterprets RFC1035
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / proxy.cgi
CommitLineData
ac1cfefa 1#!/usr/bin/perl
70df8302
MT		 2###############################################################################
3# #
4# IPFire.org - A linux based firewall #
b34fdcae 5# Copyright (C) 2007-2013 IPFire Team <info@ipfire.org> #
70df8302
MT		 6# #
7# This program is free software: you can redistribute it and/or modify #
8# it under the terms of the GNU General Public License as published by #
9# the Free Software Foundation, either version 3 of the License, or #
10# (at your option) any later version. #
11# #
12# This program is distributed in the hope that it will be useful, #
13# but WITHOUT ANY WARRANTY; without even the implied warranty of #
14# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15# GNU General Public License for more details. #
16# #
17# You should have received a copy of the GNU General Public License #
18# along with this program. If not, see <http://www.gnu.org/licenses/>. #
19# #
20###############################################################################
488d1b7c 21#
37273bc6 22# (c) 2004-2009 marco.s - http://www.advproxy.net
488d1b7c
CS		 23#
24# This code is distributed under the terms of the GPL
25#
37273bc6 26# $Id: advproxy.cgi,v 3.0.2 2009/02/04 00:00:00 marco.s Exp $
488d1b7c 27#
ac1cfefa
MT		 28
29use strict;
30
31# enable only the following on debugging purpose
cb5e9c6c
CS		 32#use warnings;
33#use CGI::Carp 'fatalsToBrowser';
ac1cfefa 34
ed38f89d 35require '/var/ipfire/general-functions.pl';
ac1cfefa
MT		 36require "${General::swroot}/lang.pl";
37require "${General::swroot}/header.pl";
38
363fb6af
MT		 39my @squidversion = `/usr/sbin/squid -v`;
40my $http_port='81';
41my $https_port='444';
42
18322edf
CS		 43my %color = ();
44my %mainsettings = ();
45&General::readhash("${General::swroot}/main/settings", \%mainsettings);
46&General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
47
ac1cfefa
MT		 48my %proxysettings=();
49my %netsettings=();
ed38f89d 50my %filtersettings=();
9fb25b1c 51my %xlratorsettings=();
ed38f89d 52my %stdproxysettings=();
ac1cfefa 53my %mainsettings=();
ed38f89d
MT		 54
55my %checked=();
56my %selected=();
57
7d971077
AF		 58my @throttle_limits=(64,128,256,384,512,768,1024,1280,1536,1792,2048,2560,3072,3584,4096,5120,6144,7168,8192,10240,12288,16384,20480);
59my $throttle_binary="7z|arj|bin|bz2|cab|exe|gz|lzh|rar|sea|tar|tgz|xz|zip";
60my $throttle_dskimg="b5t|bin|bwt|ccd|cdi|cue|gho|img|iso|mds|nrg|pqi|vmdk";
61my $throttle_mmedia="aiff?|asf|avi|divx|mov|mp3|mpe?g|ogg|qt|ra?m|ts|vob";
ed38f89d 62
363fb6af
MT		 63my $def_ports_safe="80 # http\n21 # ftp\n443 # https\n563 # snews\n70 # gopher\n210 # wais\n1025-65535 # unregistered ports\n280 # http-mgmt\n488 # gss-http\n591 # filemaker\n777 # multiling http\n800 # Squids port (for icons)\n";
64my $def_ports_ssl="443 # https\n563 # snews\n";
65
ed38f89d
MT		 66my @useragent=();
67my @useragentlist=();
68
69my $hintcolour='#FFFFCC';
70my $ncsa_buttontext='';
71my $language='';
72my $i=0;
73my $n=0;
74my $id=0;
75my $line='';
76my $user='';
77my @userlist=();
78my @grouplist=();
79my @temp=();
80my @templist=();
81
82my $cachemem=0;
83my $proxy1='';
84my $proxy2='';
ed38f89d
MT		 85my $browser_regexp='';
86my $needhup = 0;
87my $errormessage='';
88
89my $acldir = "${General::swroot}/proxy/advanced/acls";
90my $ncsadir = "${General::swroot}/proxy/advanced/ncsa";
91my $ntlmdir = "${General::swroot}/proxy/advanced/ntlm";
92my $raddir = "${General::swroot}/proxy/advanced/radius";
93my $identdir = "${General::swroot}/proxy/advanced/ident";
94my $credir = "${General::swroot}/proxy/advanced/cre";
95
96my $userdb = "$ncsadir/passwd";
97my $stdgrp = "$ncsadir/standard.grp";
98my $extgrp = "$ncsadir/extended.grp";
99my $disgrp = "$ncsadir/disabled.grp";
100
101my $browserdb = "${General::swroot}/proxy/advanced/useragents";
102my $mimetypes = "${General::swroot}/proxy/advanced/mimetypes";
103my $throttled_urls = "${General::swroot}/proxy/advanced/throttle";
104
105my $cre_enabled = "${General::swroot}/proxy/advanced/cre/enable";
106my $cre_groups = "${General::swroot}/proxy/advanced/cre/classrooms";
107my $cre_svhosts = "${General::swroot}/proxy/advanced/cre/supervisors";
108
109my $identhosts = "$identdir/hosts";
110
8c55860f 111my $authdir = "/usr/lib/squid/";
f1baee3e 112my $errordir = "/usr/lib/squid/errors";
ed38f89d
MT		 113
114my $acl_src_subnets = "$acldir/src_subnets.acl";
115my $acl_src_banned_ip = "$acldir/src_banned_ip.acl";
116my $acl_src_banned_mac = "$acldir/src_banned_mac.acl";
117my $acl_src_unrestricted_ip = "$acldir/src_unrestricted_ip.acl";
118my $acl_src_unrestricted_mac = "$acldir/src_unrestricted_mac.acl";
119my $acl_src_noaccess_ip = "$acldir/src_noaccess_ip.acl";
120my $acl_src_noaccess_mac = "$acldir/src_noaccess_mac.acl";
ed38f89d 121my $acl_dst_noauth = "$acldir/dst_noauth.acl";
488d1b7c
CS		 122my $acl_dst_noauth_dom = "$acldir/dst_noauth_dom.acl";
123my $acl_dst_noauth_net = "$acldir/dst_noauth_net.acl";
124my $acl_dst_noauth_url = "$acldir/dst_noauth_url.acl";
125my $acl_dst_nocache = "$acldir/dst_nocache.acl";
126my $acl_dst_nocache_dom = "$acldir/dst_nocache_dom.acl";
127my $acl_dst_nocache_net = "$acldir/dst_nocache_net.acl";
128my $acl_dst_nocache_url = "$acldir/dst_nocache_url.acl";
ed38f89d 129my $acl_dst_throttle = "$acldir/dst_throttle.acl";
363fb6af
MT		 130my $acl_ports_safe = "$acldir/ports_safe.acl";
131my $acl_ports_ssl = "$acldir/ports_ssl.acl";
ed38f89d
MT		 132my $acl_include = "$acldir/include.acl";
133
363fb6af
MT		 134my $updaccelversion = 'n/a';
135my $urlfilterversion = 'n/a';
136
ed38f89d
MT		 137unless (-d "$acldir") { mkdir("$acldir"); }
138unless (-d "$ncsadir") { mkdir("$ncsadir"); }
139unless (-d "$ntlmdir") { mkdir("$ntlmdir"); }
140unless (-d "$raddir") { mkdir("$raddir"); }
141unless (-d "$identdir") { mkdir("$identdir"); }
142unless (-d "$credir") { mkdir("$credir"); }
143
144unless (-e $cre_groups) { system("touch $cre_groups"); }
145unless (-e $cre_svhosts) { system("touch $cre_svhosts"); }
146
147unless (-e $userdb) { system("touch $userdb"); }
148unless (-e $stdgrp) { system("touch $stdgrp"); }
149unless (-e $extgrp) { system("touch $extgrp"); }
150unless (-e $disgrp) { system("touch $disgrp"); }
151
152unless (-e $acl_src_subnets) { system("touch $acl_src_subnets"); }
153unless (-e $acl_src_banned_ip) { system("touch $acl_src_banned_ip"); }
154unless (-e $acl_src_banned_mac) { system("touch $acl_src_banned_mac"); }
155unless (-e $acl_src_unrestricted_ip) { system("touch $acl_src_unrestricted_ip"); }
156unless (-e $acl_src_unrestricted_mac) { system("touch $acl_src_unrestricted_mac"); }
157unless (-e $acl_src_noaccess_ip) { system("touch $acl_src_noaccess_ip"); }
158unless (-e $acl_src_noaccess_mac) { system("touch $acl_src_noaccess_mac"); }
488d1b7c
CS		 159unless (-e $acl_dst_noauth) { system("touch $acl_dst_noauth"); }
160unless (-e $acl_dst_noauth_dom) { system("touch $acl_dst_noauth_dom"); }
161unless (-e $acl_dst_noauth_net) { system("touch $acl_dst_noauth_net"); }
162unless (-e $acl_dst_noauth_url) { system("touch $acl_dst_noauth_url"); }
163unless (-e $acl_dst_nocache) { system("touch $acl_dst_nocache"); }
164unless (-e $acl_dst_nocache_dom) { system("touch $acl_dst_nocache_dom"); }
165unless (-e $acl_dst_nocache_net) { system("touch $acl_dst_nocache_net"); }
166unless (-e $acl_dst_nocache_url) { system("touch $acl_dst_nocache_url"); }
ed38f89d 167unless (-e $acl_dst_throttle) { system("touch $acl_dst_throttle"); }
363fb6af
MT		 168unless (-e $acl_ports_safe) { system("touch $acl_ports_safe"); }
169unless (-e $acl_ports_ssl) { system("touch $acl_ports_ssl"); }
ed38f89d
MT		 170unless (-e $acl_include) { system("touch $acl_include"); }
171
172unless (-e $browserdb) { system("touch $browserdb"); }
173unless (-e $mimetypes) { system("touch $mimetypes"); }
174
603248db
MT		 175my $HAVE_NTLM_AUTH = (-e "/usr/bin/ntlm_auth");
176
ed38f89d
MT		 177open FILE, $browserdb;
178@useragentlist = sort { reverse(substr(reverse(substr($a,index($a,',')+1)),index(reverse(substr($a,index($a,','))),',')+1)) cmp reverse(substr(reverse(substr($b,index($b,',')+1)),index(reverse(substr($b,index($b,','))),',')+1))} grep !/(^$)|(^\s*#)/,<FILE>;
179close(FILE);
ac1cfefa
MT		 180
181&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
182&General::readhash("${General::swroot}/main/settings", \%mainsettings);
183
f09a0af5 184my $green_cidr = &General::ipcidr("$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}");
d3527a38
MT		 185my $blue_cidr = "";
186if (&Header::blue_used() && $netsettings{'BLUE_DEV'}) {
f09a0af5
AF		 187 $blue_cidr = &General::ipcidr("$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}");
188}
189
ac1cfefa
MT		 190&Header::showhttpheaders();
191
192$proxysettings{'ACTION'} = '';
193$proxysettings{'VALID'} = '';
194
ac1cfefa
MT		 195$proxysettings{'ENABLE'} = 'off';
196$proxysettings{'ENABLE_BLUE'} = 'off';
ac1cfefa
MT		 197$proxysettings{'TRANSPARENT'} = 'off';
198$proxysettings{'TRANSPARENT_BLUE'} = 'off';
ed38f89d 199$proxysettings{'PROXY_PORT'} = '800';
0f6b6067 200$proxysettings{'TRANSPARENT_PORT'} = '3128';
ed38f89d
MT		 201$proxysettings{'VISIBLE_HOSTNAME'} = '';
202$proxysettings{'ADMIN_MAIL_ADDRESS'} = '';
fe1656d2 203$proxysettings{'ADMIN_PASSWORD'} = '';
0d948999
CS		 204$proxysettings{'ERR_LANGUAGE'} = 'German';
205$proxysettings{'ERR_DESIGN'} = 'ipfire';
363fb6af 206$proxysettings{'SUPPRESS_VERSION'} = 'off';
ed38f89d
MT		 207$proxysettings{'FORWARD_VIA'} = 'off';
208$proxysettings{'FORWARD_IPADDRESS'} = 'off';
209$proxysettings{'FORWARD_USERNAME'} = 'off';
363fb6af 210$proxysettings{'NO_CONNECTION_AUTH'} = 'off';
ed38f89d
MT		 211$proxysettings{'UPSTREAM_PROXY'} = '';
212$proxysettings{'UPSTREAM_USER'} = '';
213$proxysettings{'UPSTREAM_PASSWORD'} = '';
214$proxysettings{'LOGGING'} = 'off';
fe1656d2 215$proxysettings{'CACHEMGR'} = 'off';
ed38f89d
MT		 216$proxysettings{'LOGQUERY'} = 'off';
217$proxysettings{'LOGUSERAGENT'} = 'off';
8dc17705 218$proxysettings{'FILEDESCRIPTORS'} = '16384';
ed38f89d
MT		 219$proxysettings{'CACHE_MEM'} = '2';
220$proxysettings{'CACHE_SIZE'} = '50';
ac1cfefa
MT		 221$proxysettings{'MAX_SIZE'} = '4096';
222$proxysettings{'MIN_SIZE'} = '0';
ed38f89d
MT		 223$proxysettings{'MEM_POLICY'} = 'LRU';
224$proxysettings{'CACHE_POLICY'} = 'LRU';
225$proxysettings{'L1_DIRS'} = '16';
226$proxysettings{'OFFLINE_MODE'} = 'off';
6bea848d 227$proxysettings{'CACHE_DIGESTS'} = 'off';
ed38f89d
MT		 228$proxysettings{'CLASSROOM_EXT'} = 'off';
229$proxysettings{'SUPERVISOR_PASSWORD'} = '';
9fb25b1c
MT		 230$proxysettings{'NO_PROXY_LOCAL'} = 'off';
231$proxysettings{'NO_PROXY_LOCAL_BLUE'} = 'off';
ed38f89d
MT		 232$proxysettings{'TIME_ACCESS_MODE'} = 'allow';
233$proxysettings{'TIME_FROM_HOUR'} = '00';
234$proxysettings{'TIME_FROM_MINUTE'} = '00';
235$proxysettings{'TIME_TO_HOUR'} = '24';
236$proxysettings{'TIME_TO_MINUTE'} = '00';
ac1cfefa
MT		 237$proxysettings{'MAX_OUTGOING_SIZE'} = '0';
238$proxysettings{'MAX_INCOMING_SIZE'} = '0';
ed38f89d
MT		 239$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';
240$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';
241$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';
242$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';
243$proxysettings{'THROTTLE_BINARY'} = 'off';
244$proxysettings{'THROTTLE_DSKIMG'} = 'off';
245$proxysettings{'THROTTLE_MMEDIA'} = 'off';
246$proxysettings{'ENABLE_MIME_FILTER'} = 'off';
247$proxysettings{'ENABLE_BROWSER_CHECK'} = 'off';
248$proxysettings{'FAKE_USERAGENT'} = '';
249$proxysettings{'FAKE_REFERER'} = '';
250$proxysettings{'AUTH_METHOD'} = 'none';
251$proxysettings{'AUTH_REALM'} = '';
252$proxysettings{'AUTH_MAX_USERIP'} = '';
253$proxysettings{'AUTH_CACHE_TTL'} = '60';
254$proxysettings{'AUTH_IPCACHE_TTL'} = '0';
255$proxysettings{'AUTH_CHILDREN'} = '5';
256$proxysettings{'NCSA_MIN_PASS_LEN'} = '6';
257$proxysettings{'NCSA_BYPASS_REDIR'} = 'off';
258$proxysettings{'NCSA_USERNAME'} = '';
259$proxysettings{'NCSA_GROUP'} = '';
260$proxysettings{'NCSA_PASS'} = '';
261$proxysettings{'NCSA_PASS_CONFIRM'} = '';
262$proxysettings{'LDAP_BASEDN'} = '';
263$proxysettings{'LDAP_TYPE'} = 'ADS';
264$proxysettings{'LDAP_SERVER'} = '';
265$proxysettings{'LDAP_PORT'} = '389';
266$proxysettings{'LDAP_BINDDN_USER'} = '';
267$proxysettings{'LDAP_BINDDN_PASS'} = '';
268$proxysettings{'LDAP_GROUP'} = '';
b5674643 269$proxysettings{'NTLM_AUTH_GROUP'} = '';
ed38f89d
MT		 270$proxysettings{'NTLM_DOMAIN'} = '';
271$proxysettings{'NTLM_PDC'} = '';
272$proxysettings{'NTLM_BDC'} = '';
273$proxysettings{'NTLM_ENABLE_ACL'} = 'off';
274$proxysettings{'NTLM_USER_ACL'} = 'positive';
275$proxysettings{'RADIUS_SERVER'} = '';
363fb6af 276$proxysettings{'RADIUS_PORT'} = '1812';
ed38f89d
MT		 277$proxysettings{'RADIUS_IDENTIFIER'} = '';
278$proxysettings{'RADIUS_SECRET'} = '';
279$proxysettings{'RADIUS_ENABLE_ACL'} = 'off';
280$proxysettings{'RADIUS_USER_ACL'} = 'positive';
281$proxysettings{'IDENT_REQUIRED'} = 'off';
282$proxysettings{'IDENT_TIMEOUT'} = '10';
283$proxysettings{'IDENT_ENABLE_ACL'} = 'off';
284$proxysettings{'IDENT_USER_ACL'} = 'positive';
9fb25b1c
MT		 285$proxysettings{'ENABLE_FILTER'} = 'off';
286$proxysettings{'ENABLE_UPDXLRATOR'} = 'off';
d12aede7 287$proxysettings{'ENABLE_CLAMAV'} = 'off';
28c9dec6 288$proxysettings{'CHILDREN'} = '10';
ed38f89d
MT		 289
290$ncsa_buttontext = $Lang::tr{'advproxy NCSA create user'};
ac1cfefa
MT		 291
292&Header::getcgihash(\%proxysettings);
293
ed38f89d
MT		 294if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 0) {$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';}
295if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 0) {$proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';}
296if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 0) {$proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';}
297if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 0) {$proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';}
ac1cfefa 298
ed38f89d 299if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy NCSA user management'})
ac1cfefa 300{
ed38f89d
MT		 301 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
302}
303
304if ($proxysettings{'ACTION'} eq $Lang::tr{'add'})
305{
306 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
307 if (length($proxysettings{'NCSA_PASS'}) < $proxysettings{'NCSA_MIN_PASS_LEN'}) {
308 $errormessage = $Lang::tr{'advproxy errmsg password length 1'}.$proxysettings{'NCSA_MIN_PASS_LEN'}.$Lang::tr{'advproxy errmsg password length 2'};
309 }
310 if (!($proxysettings{'NCSA_PASS'} eq $proxysettings{'NCSA_PASS_CONFIRM'})) {
311 $errormessage = $Lang::tr{'advproxy errmsg passwords different'};
312 }
313 if ($proxysettings{'NCSA_USERNAME'} eq '') {
314 $errormessage = $Lang::tr{'advproxy errmsg no username'};
315 }
316 if (!$errormessage) {
317 $proxysettings{'NCSA_USERNAME'} =~ tr/A-Z/a-z/;
318 &adduser($proxysettings{'NCSA_USERNAME'}, $proxysettings{'NCSA_PASS'}, $proxysettings{'NCSA_GROUP'});
319 }
320 $proxysettings{'NCSA_USERNAME'} = '';
321 $proxysettings{'NCSA_GROUP'} = '';
322 $proxysettings{'NCSA_PASS'} = '';
323 $proxysettings{'NCSA_PASS_CONFIRM'} = '';
324}
ac1cfefa 325
ed38f89d
MT		 326if ($proxysettings{'ACTION'} eq $Lang::tr{'remove'})
327{
328 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
329 &deluser($proxysettings{'ID'});
330}
331
9fb25b1c
MT		 332$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
333$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
334$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
335
ed38f89d
MT		 336if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'})
337{
338 $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
339 $ncsa_buttontext = $Lang::tr{'advproxy NCSA update user'};
340 @temp = split(/:/,$proxysettings{'ID'});
341 $proxysettings{'NCSA_USERNAME'} = $temp[0];
342 $proxysettings{'NCSA_GROUP'} = $temp[1];
343 $proxysettings{'NCSA_PASS'} = "lEaVeAlOnE";
344 $proxysettings{'NCSA_PASS_CONFIRM'} = $proxysettings{'NCSA_PASS'};
345}
346
fe1656d2 347if (($proxysettings{'ACTION'} eq $Lang::tr{'save'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'proxy reconfigure'}))
28c9dec6
CS		 348{
349 if ($proxysettings{'ENABLE'} !~ /^(on|off)$/ ||
350 $proxysettings{'TRANSPARENT'} !~ /^(on|off)$/ ||
351 $proxysettings{'ENABLE_BLUE'} !~ /^(on|off)$/ ||
ac1cfefa
MT		 352 $proxysettings{'TRANSPARENT_BLUE'} !~ /^(on|off)$/ ) {
353 $errormessage = $Lang::tr{'invalid input'};
354 goto ERROR;
28c9dec6 355 }
8b6f424c 356 if($proxysettings{'CACHE_MEM'} > $proxysettings{'CACHE_SIZE'} && $proxysettings{'CACHE_SIZE'} > 0){
d5a7ff95
AM		 357 $errormessage = $Lang::tr{'advproxy errmsg cache'}." ".$proxysettings{'CACHE_MEM'}." > ".$proxysettings{'CACHE_SIZE'};
358 goto ERROR;
359 }
360
f2fdd0c1 361 if (!(&General::validport($proxysettings{'PROXY_PORT'})))
363fb6af
MT		 362 {
363 $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'};
364 goto ERROR;
365 }
0f6b6067
MT		 366 if (!(&General::validport($proxysettings{'TRANSPARENT_PORT'})))
367 {
368 $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'};
369 goto ERROR;
370 }
371 if ($proxysettings{'PROXY_PORT'} eq $proxysettings{'TRANSPARENT_PORT'}) {
372 $errormessage = $Lang::tr{'advproxy errmsg proxy ports equal'};
373 goto ERROR;
374 }
dcfc6334
SS		 375 if (!($proxysettings{'UPSTREAM_PROXY'} eq ''))
376 {
377 my @temp = split(/:/,$proxysettings{'UPSTREAM_PROXY'});
378 if (!(&General::validip($temp[0])))
379 {
380 if (!(&General::validdomainname($temp[0])))
381 {
382 $errormessage = $Lang::tr{'advproxy errmsg invalid upstream proxy'};
383 goto ERROR;
384 }
385 }
69491545 386 }
ac1cfefa
MT		 387 if (!($proxysettings{'CACHE_SIZE'} =~ /^\d+/) ||
388 ($proxysettings{'CACHE_SIZE'} < 10))
389 {
488d1b7c
CS		 390 if (!($proxysettings{'CACHE_SIZE'} eq '0'))
391 {
392 $errormessage = $Lang::tr{'advproxy errmsg hdd cache size'};
393 goto ERROR;
394 }
ed38f89d 395 }
fe1656d2 396 if (!($proxysettings{'FILEDESCRIPTORS'} =~ /^\d+/) ||
4f160f04 397 ($proxysettings{'FILEDESCRIPTORS'} < 1) || ($proxysettings{'FILEDESCRIPTORS'} > 1048576))
fe1656d2
CS		 398 {
399 $errormessage = $Lang::tr{'proxy errmsg filedescriptors'};
400 goto ERROR;
401 }
ed38f89d
MT		 402 if (!($proxysettings{'CACHE_MEM'} =~ /^\d+/) ||
403 ($proxysettings{'CACHE_MEM'} < 1))
404 {
405 $errormessage = $Lang::tr{'advproxy errmsg mem cache size'};
ac1cfefa 406 goto ERROR;
28c9dec6 407 }
ed38f89d
MT		 408 my @free = `/usr/bin/free`;
409 $free[1] =~ m/(\d+)/;
410 $cachemem = int $1 / 2048;
411 if ($proxysettings{'CACHE_MEM'} > $cachemem) {
412 $proxysettings{'CACHE_MEM'} = $cachemem;
413 }
ac1cfefa
MT		 414 if (!($proxysettings{'MAX_SIZE'} =~ /^\d+/))
415 {
416 $errormessage = $Lang::tr{'invalid maximum object size'};
417 goto ERROR;
418 }
419 if (!($proxysettings{'MIN_SIZE'} =~ /^\d+/))
420 {
421 $errormessage = $Lang::tr{'invalid minimum object size'};
422 goto ERROR;
423 }
424 if (!($proxysettings{'MAX_OUTGOING_SIZE'} =~ /^\d+/))
425 {
426 $errormessage = $Lang::tr{'invalid maximum outgoing size'};
427 goto ERROR;
428 }
ed38f89d
MT		 429 if (!($proxysettings{'TIME_TO_HOUR'}.$proxysettings{'TIME_TO_MINUTE'} gt $proxysettings{'TIME_FROM_HOUR'}.$proxysettings{'TIME_FROM_MINUTE'}))
430 {
431 $errormessage = $Lang::tr{'advproxy errmsg time restriction'};
432 goto ERROR;
433 }
ac1cfefa
MT		 434 if (!($proxysettings{'MAX_INCOMING_SIZE'} =~ /^\d+/))
435 {
436 $errormessage = $Lang::tr{'invalid maximum incoming size'};
437 goto ERROR;
62459123
CS		 438 }
439 if (!($proxysettings{'CHILDREN'} =~ /^\d+$/) || ($proxysettings{'CHILDREN'} < 1))
440 {
441 $errormessage = $Lang::tr{'advproxy invalid num of children'};
442 goto ERROR;
ac1cfefa 443 }
ed38f89d 444 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on')
ac1cfefa 445 {
ed38f89d
MT		 446 $browser_regexp = '';
447 foreach (@useragentlist)
448 {
449 chomp;
450 @useragent = split(/,/);
4e17adad 451 if ($proxysettings{'UA_'.$useragent[0]} eq 'on') { $browser_regexp .= "$useragent[2]|"; }
ed38f89d
MT		 452 }
453 chop($browser_regexp);
454 if (!$browser_regexp)
455 {
456 $errormessage = $Lang::tr{'advproxy errmsg no browser'};
457 goto ERROR;
458 }
459 }
460 if (!($proxysettings{'AUTH_METHOD'} eq 'none'))
461 {
363fb6af 462 unless (($proxysettings{'AUTH_METHOD'} eq 'ident') &&
ed38f89d
MT		 463 ($proxysettings{'IDENT_REQUIRED'} eq 'off') &&
464 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'off'))
465 {
466 if ($netsettings{'BLUE_DEV'})
363fb6af 467 {
ed38f89d
MT		 468 if ((($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on')) &&
469 (($proxysettings{'ENABLE_BLUE'} eq 'off') || ($proxysettings{'TRANSPARENT_BLUE'} eq 'on')))
470 {
471 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
472 goto ERROR;
473 }
474 } else {
475 if (($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on'))
476 {
477 $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
478 goto ERROR;
479 }
480 }
481 }
28c9dec6
CS		 482 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) &&
483 ((!($proxysettings{'AUTH_MAX_USERIP'} =~ /^\d+/)) || ($proxysettings{'AUTH_MAX_USERIP'} < 1) || ($proxysettings{'AUTH_MAX_USERIP'} > 255)))
ed38f89d
MT		 484 {
485 $errormessage = $Lang::tr{'advproxy errmsg max userip'};
486 goto ERROR;
487 }
488 if (!($proxysettings{'AUTH_CACHE_TTL'} =~ /^\d+/))
489 {
490 $errormessage = $Lang::tr{'advproxy errmsg auth cache ttl'};
491 goto ERROR;
492 }
493 if (!($proxysettings{'AUTH_IPCACHE_TTL'} =~ /^\d+/))
494 {
495 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache ttl'};
496 goto ERROR;
497 }
498 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && ($proxysettings{'AUTH_IPCACHE_TTL'} eq '0'))
499 {
500 $errormessage = $Lang::tr{'advproxy errmsg auth ipcache may not be null'};
501 goto ERROR;
502 }
503 if ((!($proxysettings{'AUTH_CHILDREN'} =~ /^\d+/)) || ($proxysettings{'AUTH_CHILDREN'} < 1) || ($proxysettings{'AUTH_CHILDREN'} > 255))
504 {
505 $errormessage = $Lang::tr{'advproxy errmsg auth children'};
506 goto ERROR;
507 }
508 }
509 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
510 {
511 if ((!($proxysettings{'NCSA_MIN_PASS_LEN'} =~ /^\d+/)) || ($proxysettings{'NCSA_MIN_PASS_LEN'} < 1) || ($proxysettings{'NCSA_MIN_PASS_LEN'} > 255))
512 {
513 $errormessage = $Lang::tr{'advproxy errmsg password length'};
514 goto ERROR;
515 }
516 }
517 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
518 {
519 if ((!($proxysettings{'IDENT_TIMEOUT'} =~ /^\d+/)) || ($proxysettings{'IDENT_TIMEOUT'} < 1))
520 {
521 $errormessage = $Lang::tr{'advproxy errmsg ident timeout'};
522 goto ERROR;
523 }
524 }
525 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
526 {
527 if ($proxysettings{'LDAP_BASEDN'} eq '')
528 {
529 $errormessage = $Lang::tr{'advproxy errmsg ldap base dn'};
530 goto ERROR;
531 }
532 if (!&General::validip($proxysettings{'LDAP_SERVER'}))
533 {
e201b6d5
SS		 534 if (!&General::validdomainname($proxysettings{'LDAP_SERVER'}))
535 {
536 $errormessage = $Lang::tr{'advproxy errmsg ldap server'};
537 goto ERROR;
538 }
ed38f89d
MT		 539 }
540 if (!&General::validport($proxysettings{'LDAP_PORT'}))
541 {
542 $errormessage = $Lang::tr{'advproxy errmsg ldap port'};
543 goto ERROR;
544 }
545 if (($proxysettings{'LDAP_TYPE'} eq 'ADS') || ($proxysettings{'LDAP_TYPE'} eq 'NDS'))
546 {
547 if (($proxysettings{'LDAP_BINDDN_USER'} eq '') || ($proxysettings{'LDAP_BINDDN_PASS'} eq ''))
548 {
549 $errormessage = $Lang::tr{'advproxy errmsg ldap bind dn'};
550 goto ERROR;
551 }
552 }
553 }
554 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
555 {
556 if ($proxysettings{'NTLM_DOMAIN'} eq '')
557 {
558 $errormessage = $Lang::tr{'advproxy errmsg ntlm domain'};
559 goto ERROR;
560 }
561 if ($proxysettings{'NTLM_PDC'} eq '')
562 {
563 $errormessage = $Lang::tr{'advproxy errmsg ntlm pdc'};
564 goto ERROR;
565 }
566 if (!&General::validhostname($proxysettings{'NTLM_PDC'}))
567 {
568 $errormessage = $Lang::tr{'advproxy errmsg invalid pdc'};
569 goto ERROR;
570 }
571 if ((!($proxysettings{'NTLM_BDC'} eq '')) && (!&General::validhostname($proxysettings{'NTLM_BDC'})))
572 {
573 $errormessage = $Lang::tr{'advproxy errmsg invalid bdc'};
574 goto ERROR;
575 }
488d1b7c
CS		 576
577 $proxysettings{'NTLM_DOMAIN'} = lc($proxysettings{'NTLM_DOMAIN'});
578 $proxysettings{'NTLM_PDC'} = lc($proxysettings{'NTLM_PDC'});
579 $proxysettings{'NTLM_BDC'} = lc($proxysettings{'NTLM_BDC'});
ed38f89d
MT		 580 }
581 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
582 {
583 if (!&General::validip($proxysettings{'RADIUS_SERVER'}))
584 {
585 $errormessage = $Lang::tr{'advproxy errmsg radius server'};
586 goto ERROR;
587 }
588 if (!&General::validport($proxysettings{'RADIUS_PORT'}))
589 {
590 $errormessage = $Lang::tr{'advproxy errmsg radius port'};
591 goto ERROR;
592 }
593 if ($proxysettings{'RADIUS_SECRET'} eq '')
594 {
595 $errormessage = $Lang::tr{'advproxy errmsg radius secret'};
596 goto ERROR;
597 }
ac1cfefa
MT		 598 }
599
363fb6af
MT		 600 # Quick parent proxy error checking of username and password info. If username password don't both exist give an error.
601 $proxy1 = 'YES';
602 $proxy2 = 'YES';
603 if (($proxysettings{'UPSTREAM_USER'} eq '')) {$proxy1 = '';}
604 if (($proxysettings{'UPSTREAM_PASSWORD'} eq '')) {$proxy2 = '';}
605 if ($proxysettings{'UPSTREAM_USER'} eq 'PASS') {$proxy1=$proxy2='PASS'; $proxysettings{'UPSTREAM_PASSWORD'} = '';}
606 if (($proxy1 ne $proxy2))
607 {
608 $errormessage = $Lang::tr{'advproxy errmsg invalid upstream proxy username or password setting'};
609 goto ERROR;
610 }
ac1cfefa 611
ed38f89d
MT		 612ERROR:
613 &check_acls;
ac1cfefa 614
ed38f89d
MT		 615 if ($errormessage) {
616 $proxysettings{'VALID'} = 'no'; }
617 else {
363fb6af 618 $proxysettings{'VALID'} = 'yes'; }
ac1cfefa 619
ed38f89d 620 if ($proxysettings{'VALID'} eq 'yes')
ac1cfefa 621 {
ed38f89d 622 &write_acls;
ac1cfefa 623
ed38f89d
MT		 624 delete $proxysettings{'SRC_SUBNETS'};
625 delete $proxysettings{'SRC_BANNED_IP'};
626 delete $proxysettings{'SRC_BANNED_MAC'};
627 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
628 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
629 delete $proxysettings{'DST_NOCACHE'};
630 delete $proxysettings{'DST_NOAUTH'};
363fb6af
MT		 631 delete $proxysettings{'PORTS_SAFE'};
632 delete $proxysettings{'PORTS_SSL'};
ed38f89d
MT		 633 delete $proxysettings{'MIME_TYPES'};
634 delete $proxysettings{'NTLM_ALLOW_USERS'};
635 delete $proxysettings{'NTLM_DENY_USERS'};
636 delete $proxysettings{'RADIUS_ALLOW_USERS'};
637 delete $proxysettings{'RADIUS_DENY_USERS'};
638 delete $proxysettings{'IDENT_HOSTS'};
639 delete $proxysettings{'IDENT_ALLOW_USERS'};
640 delete $proxysettings{'IDENT_DENY_USERS'};
ac1cfefa 641
ed38f89d
MT		 642 delete $proxysettings{'CRE_GROUPS'};
643 delete $proxysettings{'CRE_SVHOSTS'};
ac1cfefa 644
ed38f89d
MT		 645 delete $proxysettings{'NCSA_USERNAME'};
646 delete $proxysettings{'NCSA_GROUP'};
647 delete $proxysettings{'NCSA_PASS'};
648 delete $proxysettings{'NCSA_PASS_CONFIRM'};
ac1cfefa 649
ed38f89d
MT		 650 $proxysettings{'TIME_MON'} = 'off' unless exists $proxysettings{'TIME_MON'};
651 $proxysettings{'TIME_TUE'} = 'off' unless exists $proxysettings{'TIME_TUE'};
652 $proxysettings{'TIME_WED'} = 'off' unless exists $proxysettings{'TIME_WED'};
653 $proxysettings{'TIME_THU'} = 'off' unless exists $proxysettings{'TIME_THU'};
654 $proxysettings{'TIME_FRI'} = 'off' unless exists $proxysettings{'TIME_FRI'};
655 $proxysettings{'TIME_SAT'} = 'off' unless exists $proxysettings{'TIME_SAT'};
656 $proxysettings{'TIME_SUN'} = 'off' unless exists $proxysettings{'TIME_SUN'};
ac1cfefa 657
ed38f89d
MT		 658 $proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'off' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
659 $proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'off' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
ac1cfefa 660
ed38f89d 661 &General::writehash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
ac1cfefa 662
363fb6af
MT		 663 if (-e "${General::swroot}/proxy/settings") { &General::readhash("${General::swroot}/proxy/settings", \%stdproxysettings); }
664 $stdproxysettings{'PROXY_PORT'} = $proxysettings{'PROXY_PORT'};
488d1b7c
CS		 665 $stdproxysettings{'UPSTREAM_PROXY'} = $proxysettings{'UPSTREAM_PROXY'};
666 $stdproxysettings{'UPSTREAM_USER'} = $proxysettings{'UPSTREAM_USER'};
667 $stdproxysettings{'UPSTREAM_PASSWORD'} = $proxysettings{'UPSTREAM_PASSWORD'};
9fb25b1c
MT		 668 $stdproxysettings{'ENABLE_FILTER'} = $proxysettings{'ENABLE_FILTER'};
669 $stdproxysettings{'ENABLE_UPDXLRATOR'} = $proxysettings{'ENABLE_UPDXLRATOR'};
d12aede7 670 $stdproxysettings{'ENABLE_CLAMAV'} = $proxysettings{'ENABLE_CLAMAV'};
363fb6af 671 &General::writehash("${General::swroot}/proxy/settings", \%stdproxysettings);
ac1cfefa 672
ed38f89d
MT		 673 &writeconfig;
674 &writepacfile;
675
fe1656d2
CS		 676 if ($proxysettings{'CACHEMGR'} eq 'on'){&writecachemgr;}
677
d56fc335 678 system ('/usr/local/bin/squidctrl', 'disable');
ed38f89d
MT		 679 unlink "${General::swroot}/proxy/enable";
680 unlink "${General::swroot}/proxy/transparent";
681 unlink "${General::swroot}/proxy/enable_blue";
682 unlink "${General::swroot}/proxy/transparent_blue";
ac1cfefa 683
ac1cfefa 684 if ($proxysettings{'ENABLE'} eq 'on') {
d56fc335
MT		 685 system ('/usr/bin/touch', "${General::swroot}/proxy/enable");
686 system ('/usr/local/bin/squidctrl', 'enable'); }
6c689591 687 if ($proxysettings{'TRANSPARENT'} eq 'on' && $proxysettings{'ENABLE'} eq 'on') {
9833e7d8 688 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent"); }
ac1cfefa 689 if ($proxysettings{'ENABLE_BLUE'} eq 'on') {
d56fc335
MT		 690 system ('/usr/bin/touch', "${General::swroot}/proxy/enable_blue");
691 system ('/usr/local/bin/squidctrl', 'enable'); }
6c689591 692 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on' && $proxysettings{'ENABLE_BLUE'} eq 'on') {
9833e7d8 693 system ('/usr/bin/touch', "${General::swroot}/proxy/transparent_blue"); }
ed38f89d 694
d56fc335 695 if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) { system('/usr/local/bin/squidctrl restart >/dev/null 2>&1'); }
fe1656d2
CS		 696 if ($proxysettings{'ACTION'} eq $Lang::tr{'proxy reconfigure'}) { system('/usr/local/bin/squidctrl reconfigure >/dev/null 2>&1'); }
697 }
ac1cfefa
MT		 698}
699
363fb6af 700if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy clear cache'})
ac1cfefa 701{
d56fc335 702 system('/usr/local/bin/squidctrl flush >/dev/null 2>&1');
ac1cfefa
MT		 703}
704
ed38f89d
MT		 705if (!$errormessage)
706{
707 if (-e "${General::swroot}/proxy/advanced/settings") {
708 &General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
709 } elsif (-e "${General::swroot}/proxy/settings") {
710 &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
711 }
712 &read_acls;
713}
ac1cfefa 714
dfee7582
SS		 715# ------------------------------------------------------------------
716
717# Hook to regenerate the configuration files, if cgi got called from command line.
718if ($ENV{"REMOTE_ADDR"} eq "") {
719 writeconfig();
720 exit(0);
721}
722
723# -------------------------------------------------------------------
724
ac1cfefa
MT		 725$checked{'ENABLE'}{'off'} = '';
726$checked{'ENABLE'}{'on'} = '';
727$checked{'ENABLE'}{$proxysettings{'ENABLE'}} = "checked='checked'";
728
729$checked{'TRANSPARENT'}{'off'} = '';
730$checked{'TRANSPARENT'}{'on'} = '';
731$checked{'TRANSPARENT'}{$proxysettings{'TRANSPARENT'}} = "checked='checked'";
732
733$checked{'ENABLE_BLUE'}{'off'} = '';
734$checked{'ENABLE_BLUE'}{'on'} = '';
735$checked{'ENABLE_BLUE'}{$proxysettings{'ENABLE_BLUE'}} = "checked='checked'";
736
737$checked{'TRANSPARENT_BLUE'}{'off'} = '';
738$checked{'TRANSPARENT_BLUE'}{'on'} = '';
739$checked{'TRANSPARENT_BLUE'}{$proxysettings{'TRANSPARENT_BLUE'}} = "checked='checked'";
740
363fb6af
MT		 741$checked{'SUPPRESS_VERSION'}{'off'} = '';
742$checked{'SUPPRESS_VERSION'}{'on'} = '';
743$checked{'SUPPRESS_VERSION'}{$proxysettings{'SUPPRESS_VERSION'}} = "checked='checked'";
744
ed38f89d
MT		 745$checked{'FORWARD_IPADDRESS'}{'off'} = '';
746$checked{'FORWARD_IPADDRESS'}{'on'} = '';
747$checked{'FORWARD_IPADDRESS'}{$proxysettings{'FORWARD_IPADDRESS'}} = "checked='checked'";
748$checked{'FORWARD_USERNAME'}{'off'} = '';
749$checked{'FORWARD_USERNAME'}{'on'} = '';
750$checked{'FORWARD_USERNAME'}{$proxysettings{'FORWARD_USERNAME'}} = "checked='checked'";
751$checked{'FORWARD_VIA'}{'off'} = '';
752$checked{'FORWARD_VIA'}{'on'} = '';
753$checked{'FORWARD_VIA'}{$proxysettings{'FORWARD_VIA'}} = "checked='checked'";
363fb6af
MT		 754$checked{'NO_CONNECTION_AUTH'}{'off'} = '';
755$checked{'NO_CONNECTION_AUTH'}{'on'} = '';
756$checked{'NO_CONNECTION_AUTH'}{$proxysettings{'NO_CONNECTION_AUTH'}} = "checked='checked'";
ed38f89d
MT		 757
758$selected{'MEM_POLICY'}{$proxysettings{'MEM_POLICY'}} = "selected='selected'";
759$selected{'CACHE_POLICY'}{$proxysettings{'CACHE_POLICY'}} = "selected='selected'";
760$selected{'L1_DIRS'}{$proxysettings{'L1_DIRS'}} = "selected='selected'";
761$checked{'OFFLINE_MODE'}{'off'} = '';
762$checked{'OFFLINE_MODE'}{'on'} = '';
763$checked{'OFFLINE_MODE'}{$proxysettings{'OFFLINE_MODE'}} = "checked='checked'";
6bea848d
JB		 764$checked{'CACHE_DIGESTS'}{'off'} = '';
765$checked{'CACHE_DIGESTS'}{'on'} = '';
766$checked{'CACHE_DIGESTS'}{$proxysettings{'CACHE_DIGESTS'}} = "checked='checked'";
ed38f89d 767
ac1cfefa
MT		 768$checked{'LOGGING'}{'off'} = '';
769$checked{'LOGGING'}{'on'} = '';
770$checked{'LOGGING'}{$proxysettings{'LOGGING'}} = "checked='checked'";
fe1656d2
CS		 771$checked{'CACHEMGR'}{'off'} = '';
772$checked{'CACHEMGR'}{'on'} = '';
773$checked{'CACHEMGR'}{$proxysettings{'CACHEMGR'}} = "checked='checked'";
ed38f89d
MT		 774$checked{'LOGQUERY'}{'off'} = '';
775$checked{'LOGQUERY'}{'on'} = '';
776$checked{'LOGQUERY'}{$proxysettings{'LOGQUERY'}} = "checked='checked'";
777$checked{'LOGUSERAGENT'}{'off'} = '';
778$checked{'LOGUSERAGENT'}{'on'} = '';
779$checked{'LOGUSERAGENT'}{$proxysettings{'LOGUSERAGENT'}} = "checked='checked'";
780
781$selected{'ERR_LANGUAGE'}{$proxysettings{'ERR_LANGUAGE'}} = "selected='selected'";
363fb6af 782$selected{'ERR_DESIGN'}{$proxysettings{'ERR_DESIGN'}} = "selected='selected'";
ed38f89d 783
9fb25b1c
MT		 784$checked{'NO_PROXY_LOCAL'}{'off'} = '';
785$checked{'NO_PROXY_LOCAL'}{'on'} = '';
786$checked{'NO_PROXY_LOCAL'}{$proxysettings{'NO_PROXY_LOCAL'}} = "checked='checked'";
787$checked{'NO_PROXY_LOCAL_BLUE'}{'off'} = '';
788$checked{'NO_PROXY_LOCAL_BLUE'}{'on'} = '';
789$checked{'NO_PROXY_LOCAL_BLUE'}{$proxysettings{'NO_PROXY_LOCAL_BLUE'}} = "checked='checked'";
790
ed38f89d
MT		 791$checked{'CLASSROOM_EXT'}{'off'} = '';
792$checked{'CLASSROOM_EXT'}{'on'} = '';
793$checked{'CLASSROOM_EXT'}{$proxysettings{'CLASSROOM_EXT'}} = "checked='checked'";
794
795$selected{'TIME_ACCESS_MODE'}{$proxysettings{'TIME_ACCESS_MODE'}} = "selected='selected'";
796$selected{'TIME_FROM_HOUR'}{$proxysettings{'TIME_FROM_HOUR'}} = "selected='selected'";
797$selected{'TIME_FROM_MINUTE'}{$proxysettings{'TIME_FROM_MINUTE'}} = "selected='selected'";
798$selected{'TIME_TO_HOUR'}{$proxysettings{'TIME_TO_HOUR'}} = "selected='selected'";
799$selected{'TIME_TO_MINUTE'}{$proxysettings{'TIME_TO_MINUTE'}} = "selected='selected'";
800
801$proxysettings{'TIME_MON'} = 'on' unless exists $proxysettings{'TIME_MON'};
802$proxysettings{'TIME_TUE'} = 'on' unless exists $proxysettings{'TIME_TUE'};
803$proxysettings{'TIME_WED'} = 'on' unless exists $proxysettings{'TIME_WED'};
804$proxysettings{'TIME_THU'} = 'on' unless exists $proxysettings{'TIME_THU'};
805$proxysettings{'TIME_FRI'} = 'on' unless exists $proxysettings{'TIME_FRI'};
806$proxysettings{'TIME_SAT'} = 'on' unless exists $proxysettings{'TIME_SAT'};
807$proxysettings{'TIME_SUN'} = 'on' unless exists $proxysettings{'TIME_SUN'};
808
809$checked{'TIME_MON'}{'off'} = '';
810$checked{'TIME_MON'}{'on'} = '';
811$checked{'TIME_MON'}{$proxysettings{'TIME_MON'}} = "checked='checked'";
812$checked{'TIME_TUE'}{'off'} = '';
813$checked{'TIME_TUE'}{'on'} = '';
814$checked{'TIME_TUE'}{$proxysettings{'TIME_TUE'}} = "checked='checked'";
815$checked{'TIME_WED'}{'off'} = '';
816$checked{'TIME_WED'}{'on'} = '';
817$checked{'TIME_WED'}{$proxysettings{'TIME_WED'}} = "checked='checked'";
818$checked{'TIME_THU'}{'off'} = '';
819$checked{'TIME_THU'}{'on'} = '';
820$checked{'TIME_THU'}{$proxysettings{'TIME_THU'}} = "checked='checked'";
821$checked{'TIME_FRI'}{'off'} = '';
822$checked{'TIME_FRI'}{'on'} = '';
823$checked{'TIME_FRI'}{$proxysettings{'TIME_FRI'}} = "checked='checked'";
824$checked{'TIME_SAT'}{'off'} = '';
825$checked{'TIME_SAT'}{'on'} = '';
826$checked{'TIME_SAT'}{$proxysettings{'TIME_SAT'}} = "checked='checked'";
827$checked{'TIME_SUN'}{'off'} = '';
828$checked{'TIME_SUN'}{'on'} = '';
829$checked{'TIME_SUN'}{$proxysettings{'TIME_SUN'}} = "checked='checked'";
830
831$selected{'THROTTLING_GREEN_TOTAL'}{$proxysettings{'THROTTLING_GREEN_TOTAL'}} = "selected='selected'";
832$selected{'THROTTLING_GREEN_HOST'}{$proxysettings{'THROTTLING_GREEN_HOST'}} = "selected='selected'";
833$selected{'THROTTLING_BLUE_TOTAL'}{$proxysettings{'THROTTLING_BLUE_TOTAL'}} = "selected='selected'";
834$selected{'THROTTLING_BLUE_HOST'}{$proxysettings{'THROTTLING_BLUE_HOST'}} = "selected='selected'";
835
836$checked{'THROTTLE_BINARY'}{'off'} = '';
837$checked{'THROTTLE_BINARY'}{'on'} = '';
838$checked{'THROTTLE_BINARY'}{$proxysettings{'THROTTLE_BINARY'}} = "checked='checked'";
839$checked{'THROTTLE_DSKIMG'}{'off'} = '';
840$checked{'THROTTLE_DSKIMG'}{'on'} = '';
841$checked{'THROTTLE_DSKIMG'}{$proxysettings{'THROTTLE_DSKIMG'}} = "checked='checked'";
842$checked{'THROTTLE_MMEDIA'}{'off'} = '';
843$checked{'THROTTLE_MMEDIA'}{'on'} = '';
844$checked{'THROTTLE_MMEDIA'}{$proxysettings{'THROTTLE_MMEDIA'}} = "checked='checked'";
845
846$checked{'ENABLE_MIME_FILTER'}{'off'} = '';
847$checked{'ENABLE_MIME_FILTER'}{'on'} = '';
848$checked{'ENABLE_MIME_FILTER'}{$proxysettings{'ENABLE_MIME_FILTER'}} = "checked='checked'";
849
850$checked{'ENABLE_BROWSER_CHECK'}{'off'} = '';
851$checked{'ENABLE_BROWSER_CHECK'}{'on'} = '';
852$checked{'ENABLE_BROWSER_CHECK'}{$proxysettings{'ENABLE_BROWSER_CHECK'}} = "checked='checked'";
853
854foreach (@useragentlist) {
855 @useragent = split(/,/);
4e17adad
CS		 856 $checked{'UA_'.$useragent[0]}{'off'} = '';
857 $checked{'UA_'.$useragent[0]}{'on'} = '';
858 $checked{'UA_'.$useragent[0]}{$proxysettings{'UA_'.$useragent[0]}} = "checked='checked'";
ed38f89d
MT		 859}
860
861$checked{'AUTH_METHOD'}{'none'} = '';
862$checked{'AUTH_METHOD'}{'ncsa'} = '';
863$checked{'AUTH_METHOD'}{'ident'} = '';
864$checked{'AUTH_METHOD'}{'ldap'} = '';
865$checked{'AUTH_METHOD'}{'ntlm'} = '';
603248db 866$checked{'AUTH_METHOD'}{'ntlm-auth'} = '';
ed38f89d
MT		 867$checked{'AUTH_METHOD'}{'radius'} = '';
868$checked{'AUTH_METHOD'}{$proxysettings{'AUTH_METHOD'}} = "checked='checked'";
ac1cfefa 869
ed38f89d
MT		 870$proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'on' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
871
872$checked{'AUTH_ALWAYS_REQUIRED'}{'off'} = '';
873$checked{'AUTH_ALWAYS_REQUIRED'}{'on'} = '';
874$checked{'AUTH_ALWAYS_REQUIRED'}{$proxysettings{'AUTH_ALWAYS_REQUIRED'}} = "checked='checked'";
875
876$checked{'NCSA_BYPASS_REDIR'}{'off'} = '';
877$checked{'NCSA_BYPASS_REDIR'}{'on'} = '';
878$checked{'NCSA_BYPASS_REDIR'}{$proxysettings{'NCSA_BYPASS_REDIR'}} = "checked='checked'";
879
880$selected{'NCSA_GROUP'}{$proxysettings{'NCSA_GROUP'}} = "selected='selected'";
881
882$selected{'LDAP_TYPE'}{$proxysettings{'LDAP_TYPE'}} = "selected='selected'";
883
884$proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'on' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
885
886$checked{'NTLM_ENABLE_INT_AUTH'}{'off'} = '';
887$checked{'NTLM_ENABLE_INT_AUTH'}{'on'} = '';
888$checked{'NTLM_ENABLE_INT_AUTH'}{$proxysettings{'NTLM_ENABLE_INT_AUTH'}} = "checked='checked'";
889
890$checked{'NTLM_ENABLE_ACL'}{'off'} = '';
891$checked{'NTLM_ENABLE_ACL'}{'on'} = '';
892$checked{'NTLM_ENABLE_ACL'}{$proxysettings{'NTLM_ENABLE_ACL'}} = "checked='checked'";
893
894$checked{'NTLM_USER_ACL'}{'positive'} = '';
895$checked{'NTLM_USER_ACL'}{'negative'} = '';
896$checked{'NTLM_USER_ACL'}{$proxysettings{'NTLM_USER_ACL'}} = "checked='checked'";
897
898$checked{'RADIUS_ENABLE_ACL'}{'off'} = '';
899$checked{'RADIUS_ENABLE_ACL'}{'on'} = '';
900$checked{'RADIUS_ENABLE_ACL'}{$proxysettings{'RADIUS_ENABLE_ACL'}} = "checked='checked'";
901
902$checked{'RADIUS_USER_ACL'}{'positive'} = '';
903$checked{'RADIUS_USER_ACL'}{'negative'} = '';
904$checked{'RADIUS_USER_ACL'}{$proxysettings{'RADIUS_USER_ACL'}} = "checked='checked'";
905
906$checked{'IDENT_REQUIRED'}{'off'} = '';
907$checked{'IDENT_REQUIRED'}{'on'} = '';
908$checked{'IDENT_REQUIRED'}{$proxysettings{'IDENT_REQUIRED'}} = "checked='checked'";
909
910$checked{'IDENT_ENABLE_ACL'}{'off'} = '';
911$checked{'IDENT_ENABLE_ACL'}{'on'} = '';
912$checked{'IDENT_ENABLE_ACL'}{$proxysettings{'IDENT_ENABLE_ACL'}} = "checked='checked'";
913
914$checked{'IDENT_USER_ACL'}{'positive'} = '';
915$checked{'IDENT_USER_ACL'}{'negative'} = '';
916$checked{'IDENT_USER_ACL'}{$proxysettings{'IDENT_USER_ACL'}} = "checked='checked'";
917
9fb25b1c
MT		 918$checked{'ENABLE_FILTER'}{'off'} = '';
919$checked{'ENABLE_FILTER'}{'on'} = '';
920$checked{'ENABLE_FILTER'}{$proxysettings{'ENABLE_FILTER'}} = "checked='checked'";
ed38f89d 921
9fb25b1c
MT		 922$checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
923$checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
924$checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
ed38f89d 925
d12aede7
CS		 926$checked{'ENABLE_CLAMAV'}{'off'} = '';
927$checked{'ENABLE_CLAMAV'}{'on'} = '';
928$checked{'ENABLE_CLAMAV'}{$proxysettings{'ENABLE_CLAMAV'}} = "checked='checked'";
929
ed38f89d 930&Header::openpage($Lang::tr{'advproxy advanced web proxy configuration'}, 1, '');
ac1cfefa
MT		 931
932&Header::openbigbox('100%', 'left', '', $errormessage);
933
934if ($errormessage) {
935 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
936 print "<font class='base'>$errormessage&nbsp;</font>\n";
937 &Header::closebox();
938}
939
363fb6af
MT		 940if ($squidversion[0] =~ /^Squid\sCache:\sVersion\s/i)
941{
942 $squidversion[0] =~ s/^Squid\sCache:\sVersion//i;
943 $squidversion[0] =~ s/^\s+//g;
944 $squidversion[0] =~ s/\s+$//g;
945} else {
946 $squidversion[0] = $Lang::tr{'advproxy unknown'};
947}
948
ed38f89d
MT		 949# ===================================================================
950# Main settings
951# ===================================================================
952
953unless ($proxysettings{'NCSA_EDIT_MODE'} eq 'yes') {
954
ac1cfefa
MT		 955print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
956
ed38f89d
MT		 957&Header::openbox('100%', 'left', "$Lang::tr{'advproxy advanced web proxy'}");
958
ac1cfefa
MT		 959print <<END
960<table width='100%'>
961<tr>
ed38f89d
MT		 962 <td colspan='4' class='base'><b>$Lang::tr{'advproxy common settings'}</b></td>
963</tr>
964<tr>
965 <td width='25%' class='base'>$Lang::tr{'advproxy enabled on'} <font color="$Header::colourgreen">Green</font>:</td>
966 <td width='20%'><input type='checkbox' name='ENABLE' $checked{'ENABLE'}{'on'} /></td>
967 <td width='25%' class='base'>$Lang::tr{'advproxy proxy port'}:</td>
968 <td width='30%'><input type='text' name='PROXY_PORT' value='$proxysettings{'PROXY_PORT'}' size='5' /></td>
ac1cfefa
MT		 969</tr>
970<tr>
ed38f89d 971 <td class='base'>$Lang::tr{'advproxy transparent on'} <font color="$Header::colourgreen">Green</font>:</td>
ac1cfefa 972 <td><input type='checkbox' name='TRANSPARENT' $checked{'TRANSPARENT'}{'on'} /></td>
0f6b6067
MT		 973 <td width='25%' class='base'>$Lang::tr{'advproxy proxy port transparent'}:</td>
974 <td width='30%'><input type='text' name='TRANSPARENT_PORT' value='$proxysettings{'TRANSPARENT_PORT'}' size='5' /></td>
ac1cfefa
MT		 975</tr>
976<tr>
977END
978;
979if ($netsettings{'BLUE_DEV'}) {
ed38f89d 980 print "<td class='base'>$Lang::tr{'advproxy enabled on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 981 print "<td><input type='checkbox' name='ENABLE_BLUE' $checked{'ENABLE_BLUE'}{'on'} /></td>";
982} else {
983 print "<td colspan='2'>&nbsp;</td>";
984}
985print <<END
0f6b6067
MT		 986 <td class='base'>$Lang::tr{'advproxy visible hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
987 <td><input type='text' name='VISIBLE_HOSTNAME' value='$proxysettings{'VISIBLE_HOSTNAME'}' /></td>
ac1cfefa
MT		 988</tr>
989<tr>
990END
991;
992if ($netsettings{'BLUE_DEV'}) {
ed38f89d 993 print "<td class='base'>$Lang::tr{'advproxy transparent on'} <font color='$Header::colourblue'>Blue</font>:</td>";
ac1cfefa
MT		 994 print "<td><input type='checkbox' name='TRANSPARENT_BLUE' $checked{'TRANSPARENT_BLUE'}{'on'} /></td>";
995} else {
996 print "<td colspan='2'>&nbsp;</td>";
997}
998print <<END
ed38f89d
MT		 999 <td class='base'>$Lang::tr{'advproxy error language'}:</td>
1000 <td class='base'>
1001 <select name='ERR_LANGUAGE'>
1002END
1003;
363fb6af 1004 foreach (<$errordir/*>) {
ed38f89d
MT		 1005 if (-d) {
1006 $language = substr($_,rindex($_,"/")+1);
1007 print "<option value='$language' $selected{'ERR_LANGUAGE'}{$language}>$language</option>\n";
1008 }
1009 }
1010print <<END
1011 </select>
1012 </td>
1013</tr>
10e4f239 1014<tr>
363fb6af
MT		 1015 <td class='base'>$Lang::tr{'advproxy suppress version'}:</td>
1016 <td><input type='checkbox' name='SUPPRESS_VERSION' $checked{'SUPPRESS_VERSION'}{'on'} /></td>
1017 <td class='base'>$Lang::tr{'advproxy error design'}:</td>
1018 <td class='base'><select name='ERR_DESIGN'>
0d948999 1019 <option value='ipfire' $selected{'ERR_DESIGN'}{'ipfire'}>IPFire</option>
363fb6af
MT		 1020 <option value='squid' $selected{'ERR_DESIGN'}{'squid'}>$Lang::tr{'advproxy standard'}</option>
1021 </select></td>
10e4f239
MT		 1022</tr>
1023<tr>
363fb6af
MT		 1024 <td class='base'>$Lang::tr{'advproxy squid version'}:</td>
1025 <td class='base'>&nbsp;[<font color='$Header::colourred'> $squidversion[0] </font>]</td>
1026 <td>&nbsp;</td>
1027 <td>&nbsp;</td>
10e4f239 1028</tr>
ed38f89d
MT		 1029</table>
1030<hr size='1'>
1031<table width='100%'>
01212e04
CS		 1032<tr><td class='base' colspan='4'><b>$Lang::tr{'advproxy redirector children'}</b></td></tr>
1033<tr><td class='base' >$Lang::tr{'processes'}<input type='text' name='CHILDREN' value='$proxysettings{'CHILDREN'}' size='5' /></td>
d12aede7
CS		 1034END
1035;
69491545 1036my $count = `ip n| wc -l`;
01212e04 1037if ( $count < 1 ){$count = 1;}
d12aede7 1038if ( -e "/usr/bin/squidclamav" ) {
01212e04 1039 print "<td class='base'><b>".$Lang::tr{'advproxy squidclamav'}."</b><br />";
bd027d94
CS		 1040 if ( ! -e "/var/run/clamav/clamd.pid" ){
1041 print "<font color='red'>clamav not running</font><br /><br />";
1042 $proxysettings{'ENABLE_CLAMAV'} = 'off';
1043 }
1044 else {
1045 print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_CLAMAV' ".$checked{'ENABLE_CLAMAV'}{'on'}." /><br />";
1046 print "+ ".int(( $count**(1/3)) * 8);}
01212e04
CS		 1047 print "</td>";
1048} else {
1049 print "<td></td>";
d12aede7 1050}
01212e04
CS		 1051print "<td class='base'><b>".$Lang::tr{'advproxy url filter'}."</b><br />";
1052print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_FILTER' ".$checked{'ENABLE_FILTER'}{'on'}." /><br />";
28c9dec6 1053print "+ ".int(($count**(1/3)) * 6);
01212e04
CS		 1054print "</td>";
1055print "<td class='base'><b>".$Lang::tr{'advproxy update accelerator'}."</b><br />";
1056print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_UPDXLRATOR' ".$checked{'ENABLE_UPDXLRATOR'}{'on'}." /><br />";
28c9dec6 1057print "+ ".int(($count**(1/3)) * 5);
01212e04 1058print "</td></tr>";
d12aede7 1059print <<END
9141bd34
CS		 1060</table>
1061<hr size='1'>
1062<table width='100%'>
ed38f89d
MT		 1063<tr>
1064 <td colspan='4' class='base'><b>$Lang::tr{'advproxy upstream proxy'}</b></td>
1065</tr>
1066<tr>
488d1b7c
CS		 1067 <td width='25%' class='base'>$Lang::tr{'advproxy via forwarding'}:</td>
1068 <td width='20%'><input type='checkbox' name='FORWARD_VIA' $checked{'FORWARD_VIA'}{'on'} /></td>
1069 <td width='25%' class='base'>$Lang::tr{'advproxy upstream proxy host:port'}&nbsp;<img src='/blob.gif' alt='*' /></td>
1070 <td width='30%'><input type='text' name='UPSTREAM_PROXY' value='$proxysettings{'UPSTREAM_PROXY'}' /></td>
ed38f89d
MT		 1071</tr>
1072<tr>
488d1b7c
CS		 1073 <td class='base'>$Lang::tr{'advproxy client IP forwarding'}:</td>
1074 <td><input type='checkbox' name='FORWARD_IPADDRESS' $checked{'FORWARD_IPADDRESS'}{'on'} /></td>
1075 <td class='base'>$Lang::tr{'advproxy upstream username'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1076 <td><input type='text' name='UPSTREAM_USER' value='$proxysettings{'UPSTREAM_USER'}' /></td>
ac1cfefa 1077</tr>
ac1cfefa 1078<tr>
488d1b7c
CS		 1079 <td class='base'>$Lang::tr{'advproxy username forwarding'}:</td>
1080 <td><input type='checkbox' name='FORWARD_USERNAME' $checked{'FORWARD_USERNAME'}{'on'} /></td>
1081 <td class='base'>$Lang::tr{'advproxy upstream password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1082 <td><input type='password' name='UPSTREAM_PASSWORD' value='$proxysettings{'UPSTREAM_PASSWORD'}' /></td>
ed38f89d 1083</tr>
363fb6af 1084<tr>
488d1b7c
CS		 1085 <td class='base'>$Lang::tr{'advproxy no connection auth'}:</td>
1086 <td><input type='checkbox' name='NO_CONNECTION_AUTH' $checked{'NO_CONNECTION_AUTH'}{'on'} /></td>
1087 <td>&nbsp;</td>
1088 <td>&nbsp;</td>
363fb6af 1089</tr>
ed38f89d
MT		 1090</table>
1091<hr size='1'>
1092<table width='100%'>
1093<tr>
1094 <td colspan='4' class='base'><b>$Lang::tr{'advproxy log settings'}</b></td>
1095</tr>
1096<tr>
488d1b7c
CS		 1097 <td width='25%' class='base'>$Lang::tr{'advproxy log enabled'}:</td>
1098 <td width='20%'><input type='checkbox' name='LOGGING' $checked{'LOGGING'}{'on'} /></td>
1099 <td width='25%'class='base'>$Lang::tr{'advproxy log query'}:</td>
1100 <td width='30%'><input type='checkbox' name='LOGQUERY' $checked{'LOGQUERY'}{'on'} /></td>
1101</tr>
1102<tr>
1103 <td>&nbsp;</td>
1104 <td>&nbsp;</td>
1105 <td class='base'>$Lang::tr{'advproxy log useragent'}:</td>
1106 <td><input type='checkbox' name='LOGUSERAGENT' $checked{'LOGUSERAGENT'}{'on'} /></td>
ed38f89d
MT		 1107</tr>
1108</table>
1109<hr size='1'>
1110<table width='100%'>
1111<tr>
1112 <td colspan='4'><b>$Lang::tr{'advproxy cache management'}</b></td>
1113</tr>
fe1656d2
CS		 1114<tr>
1115 <td class='base'>$Lang::tr{'proxy cachemgr'}:</td>
1116 <td><input type='checkbox' name='CACHEMGR' $checked{'CACHEMGR'}{'on'} /></td>
1117 <td class='base'>$Lang::tr{'advproxy admin mail'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1118 <td><input type='text' name='ADMIN_MAIL_ADDRESS' value='$proxysettings{'ADMIN_MAIL_ADDRESS'}' /></td>
1119</tr>
1120<tr>
1121 <td class='base'>$Lang::tr{'proxy filedescriptors'}:</td>
1122 <td><input type='text' name='FILEDESCRIPTORS' value='$proxysettings{'FILEDESCRIPTORS'}' size='5' /></td>
1123 <td class='base'>$Lang::tr{'proxy admin password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1124 <td><input type='text' name='ADMIN_PASSWORD' value='$proxysettings{'ADMIN_PASSWORD'}' /></td>
1125</tr>
ed38f89d 1126<tr>
488d1b7c 1127 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
ac1cfefa
MT		 1128</tr>
1129<tr>
ed38f89d
MT		 1130 <td class='base'>$Lang::tr{'advproxy ram cache size'}:</td>
1131 <td><input type='text' name='CACHE_MEM' value='$proxysettings{'CACHE_MEM'}' size='5' /></td>
1132 <td class='base'>$Lang::tr{'advproxy hdd cache size'}:</td>
ac1cfefa
MT		 1133 <td><input type='text' name='CACHE_SIZE' value='$proxysettings{'CACHE_SIZE'}' size='5' /></td>
1134</tr>
1135<tr>
ed38f89d 1136 <td class='base'>$Lang::tr{'advproxy min size'}:</td>
ac1cfefa 1137 <td><input type='text' name='MIN_SIZE' value='$proxysettings{'MIN_SIZE'}' size='5' /></td>
ed38f89d 1138 <td class='base'>$Lang::tr{'advproxy max size'}:</td>
ac1cfefa
MT		 1139 <td><input type='text' name='MAX_SIZE' value='$proxysettings{'MAX_SIZE'}' size='5' /></td>
1140</tr>
1141<tr>
ed38f89d 1142 <td class='base'>$Lang::tr{'advproxy number of L1 dirs'}:</td>
363fb6af
MT		 1143 <td class='base'><select name='L1_DIRS'>
1144 <option value='16' $selected{'L1_DIRS'}{'16'}>16</option>
1145 <option value='32' $selected{'L1_DIRS'}{'32'}>32</option>
1146 <option value='64' $selected{'L1_DIRS'}{'64'}>64</option>
1147 <option value='128' $selected{'L1_DIRS'}{'128'}>128</option>
1148 <option value='256' $selected{'L1_DIRS'}{'256'}>256</option>
1149 </select></td>
ed38f89d 1150 <td colspan='2' rowspan= '5' valign='top' class='base'>
363fb6af 1151 <table cellspacing='0' cellpadding='0'>
ed38f89d
MT		 1152 <tr>
1153 <!-- intentionally left empty -->
1154 </tr>
1155 <tr>
1156 <td>$Lang::tr{'advproxy no cache sites'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1157 </tr>
1158 <tr>
1159 <!-- intentionally left empty -->
1160 </tr>
1161 <tr>
1162 <!-- intentionally left empty -->
1163 </tr>
1164 <tr>
488d1b7c 1165 <td><textarea name='DST_NOCACHE' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1166END
1167;
1168
1169print $proxysettings{'DST_NOCACHE'};
1170
1171print <<END
1172</textarea></td>
1173 </tr>
1174 </table>
1175 </td>
1176</tr>
1177<tr>
363fb6af
MT		 1178 <td class='base'>$Lang::tr{'advproxy memory replacement policy'}:</td>
1179 <td class='base'><select name='MEM_POLICY'>
1180 <option value='LRU' $selected{'MEM_POLICY'}{'LRU'}>LRU</option>
1181 <option value='heap LFUDA' $selected{'MEM_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1182 <option value='heap GDSF' $selected{'MEM_POLICY'}{'heap GDSF'}>heap GDSF</option>
1183 <option value='heap LRU' $selected{'MEM_POLICY'}{'heap LRU'}>heap LRU</option>
1184 </select></td>
ed38f89d
MT		 1185</tr>
1186<tr>
363fb6af
MT		 1187 <td class='base'>$Lang::tr{'advproxy cache replacement policy'}:</td>
1188 <td class='base'><select name='CACHE_POLICY'>
1189 <option value='LRU' $selected{'CACHE_POLICY'}{'LRU'}>LRU</option>
1190 <option value='heap LFUDA' $selected{'CACHE_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1191 <option value='heap GDSF' $selected{'CACHE_POLICY'}{'heap GDSF'}>heap GDSF</option>
1192 <option value='heap LRU' $selected{'CACHE_POLICY'}{'heap LRU'}>heap LRU</option>
1193 </select></td>
ed38f89d
MT		 1194</tr>
1195<tr>
1196 <td colspan='2'>&nbsp;</td>
1197</tr>
1198<tr>
363fb6af 1199 <td class='base'>$Lang::tr{'advproxy offline mode'}:</td>
ed38f89d
MT		 1200 <td><input type='checkbox' name='OFFLINE_MODE' $checked{'OFFLINE_MODE'}{'on'} /></td>
1201</tr>
6bea848d
JB		 1202<tr>
1203 <td class='base'>$Lang::tr{'advproxy cache-digest'}:</td>
1204 <td><input type='checkbox' name='CACHE_DIGESTS' $checked{'CACHE_DIGESTS'}{'on'} /></td>
1205</tr>
ed38f89d
MT		 1206</table>
1207<hr size='1'>
1208<table width='100%'>
363fb6af
MT		 1209<tr>
1210 <td colspan='4'><b>$Lang::tr{'advproxy destination ports'}</b></td>
1211</tr>
1212<tr>
631b67b7 1213 <td width='25%' align='center'></td> <td width='20%' align='center'></td><td width='25%' align='center'></td><td width='30%' align='center'></td>
363fb6af
MT		 1214</tr>
1215<tr>
1216 <td colspan='2' class='base'>$Lang::tr{'advproxy standard ports'}:</td>
1217 <td colspan='2' class='base'>$Lang::tr{'advproxy ssl ports'}:</td>
1218</tr>
1219<tr>
1220 <td colspan='2'><textarea name='PORTS_SAFE' cols='32' rows='6' wrap='off'>
1221END
1222;
1223 if (!$proxysettings{'PORTS_SAFE'}) { print $def_ports_safe; } else { print $proxysettings{'PORTS_SAFE'}; }
1224
1225print <<END
1226</textarea></td>
1227 <td colspan='2'><textarea name='PORTS_SSL' cols='32' rows='6' wrap='off'>
1228END
1229;
1230 if (!$proxysettings{'PORTS_SSL'}) { print $def_ports_ssl; } else { print $proxysettings{'PORTS_SSL'}; }
1231
1232print <<END
1233</textarea></td>
1234</tr>
1235</table>
1236<hr size='1'>
1237<table width='100%'>
ed38f89d
MT		 1238<tr>
1239 <td colspan='4'><b>$Lang::tr{'advproxy network based access'}</b></td>
1240</tr>
1241<tr>
1242 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1243</tr>
1244<tr>
9fb25b1c 1245 <td colspan='4' class='base'>$Lang::tr{'advproxy allowed subnets'}:</td>
ed38f89d
MT		 1246</tr>
1247<tr>
9141bd34 1248 <td colspan='2' rowspan='4'><textarea name='SRC_SUBNETS' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1249END
1250;
1251
363fb6af
MT		 1252if (!$proxysettings{'SRC_SUBNETS'})
1253{
f09a0af5 1254 print "$green_cidr\n";
363fb6af
MT		 1255 if ($netsettings{'BLUE_DEV'})
1256 {
f09a0af5 1257 print "$blue_cidr\n";
ed38f89d 1258 }
363fb6af 1259} else { print $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 1260
1261print <<END
1262</textarea></td>
9fb25b1c
MT		 1263END
1264;
1265
1266$line = $Lang::tr{'advproxy no internal proxy on green'};
1267$line =~ s/Green/<font color="$Header::colourgreen">Green<\/font>/i;
1268print "<td class='base'>$line:</td>\n";
1269print <<END
1270 <td><input type='checkbox' name='NO_PROXY_LOCAL' $checked{'NO_PROXY_LOCAL'}{'on'} /></td>
1271</tr>
1272END
1273;
1274if ($netsettings{'BLUE_DEV'}) {
1275 $line = $Lang::tr{'advproxy no internal proxy on blue'};
1276 $line =~ s/Blue/<font color="$Header::colourblue">Blue<\/font>/i;
1277 print "<tr>\n";
1278 print "<td class='base'>$line:</td>\n";
1279 print <<END
1280 <td><input type='checkbox' name='NO_PROXY_LOCAL_BLUE' $checked{'NO_PROXY_LOCAL_BLUE'}{'on'} /></td>
1281</tr>
1282END
1283;
1284}
1285print <<END
1286<tr>
1287 <td colspan='2'>&nbsp;</td>
1288</tr>
1289<tr>
ed38f89d
MT		 1290 <td colspan='2'>&nbsp;</td>
1291</tr>
1292</table>
1293<table width='100%'>
1294<tr>
1295 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1296</tr>
1297<tr>
1298 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1299 <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1300</tr>
1301<tr>
9141bd34 1302 <td colspan='2'><textarea name='SRC_UNRESTRICTED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1303END
1304;
1305
1306 print $proxysettings{'SRC_UNRESTRICTED_IP'};
1307
1308print <<END
1309</textarea></td>
9141bd34 1310 <td colspan='2'><textarea name='SRC_UNRESTRICTED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1311END
1312;
1313
1314print $proxysettings{'SRC_UNRESTRICTED_MAC'};
1315
1316print <<END
1317</textarea></td>
1318</tr>
1319</table>
1320<table width='100%'>
1321<tr>
1322 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1323</tr>
1324<tr>
1325 <td colspan='2' class='base'>$Lang::tr{'advproxy banned ip clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1326 <td colspan='2' class='base'>$Lang::tr{'advproxy banned mac clients'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1327</tr>
1328<tr>
9141bd34 1329 <td colspan='2'><textarea name='SRC_BANNED_IP' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1330END
1331;
1332
1333 print $proxysettings{'SRC_BANNED_IP'};
1334
1335print <<END
1336</textarea></td>
9141bd34 1337 <td colspan='2'><textarea name='SRC_BANNED_MAC' cols='32' rows='3' wrap='off'>
ed38f89d
MT		 1338END
1339;
1340
1341print $proxysettings{'SRC_BANNED_MAC'};
1342
1343print <<END
1344</textarea></td>
1345</tr>
1346</table>
1347
1348<hr size='1'>
1349
1350END
1351;
1352# -------------------------------------------------------------------
1353# CRE GUI - optional
1354# -------------------------------------------------------------------
1355
1356if (-e $cre_enabled) { print <<END
1357<table width='100%'>
1358
1359<tr>
9141bd34 1360 <td colspan='4'><b>$Lang::tr{'advproxy classroom extensions'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='CLASSROOM_EXT' $checked{'CLASSROOM_EXT'}{'on'} /></td>
ed38f89d
MT		 1361</tr>
1362<tr>
1363 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1364</tr>
1365<tr>
9141bd34
CS		 1366
1367END
1368;
1369if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1370print <<END
ed38f89d
MT		 1371 <td class='base'>$Lang::tr{'advproxy supervisor password'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1372 <td><input type='password' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' size='12' /></td>
1373</tr>
1374<tr>
1375 <td colspan='2' class='base'>$Lang::tr{'advproxy cre group definitions'}:</td>
1376 <td colspan='2' class='base'>$Lang::tr{'advproxy cre supervisors'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
9141bd34
CS		 1377END
1378;
1379}
1380print "</tr>";
1381if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1382print <<END
ed38f89d
MT		 1383<tr>
1384 <td colspan='2'><textarea name='CRE_GROUPS' cols='32' rows='6' wrap='off'>
1385END
1386;
1387
1388 print $proxysettings{'CRE_GROUPS'};
1389
1390print <<END
1391</textarea></td>
1392 <td colspan='2'><textarea name='CRE_SVHOSTS' cols='32' rows='6' wrap='off'>
1393END
1394;
1395 print $proxysettings{'CRE_SVHOSTS'};
1396
1397print <<END
1398</textarea></td>
1399</tr>
ed38f89d
MT		 1400END
1401;
9141bd34
CS		 1402}
1403print "</table><hr size='1'>";
1404
ed38f89d
MT		 1405} else {
1406 print <<END
1407 <input type='hidden' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' />
1408 <input type='hidden' name='CRE_GROUPS' value='$proxysettings{'CRE_GROUPS'}' />
1409 <input type='hidden' name='CRE_SVHOSTS' value='$proxysettings{'CRE_SVHOSTS'}' />
1410END
1411;
1412}
363fb6af 1413
ed38f89d
MT		 1414# -------------------------------------------------------------------
1415
28c9dec6 1416print <<END
ed38f89d
MT		 1417
1418<table width='100%'>
1419<tr>
363fb6af 1420 <td colspan='4'><b>$Lang::tr{'advproxy time restrictions'}</b></td>
ed38f89d
MT		 1421</tr>
1422<table width='100%'>
1423<tr>
1424 <td width='2%'>$Lang::tr{'advproxy access'}</td>
1425 <td width='1%'>&nbsp;</td>
1426 <td width='2%' align='center'>$Lang::tr{'advproxy monday'}</td>
1427 <td width='2%' align='center'>$Lang::tr{'advproxy tuesday'}</td>
1428 <td width='2%' align='center'>$Lang::tr{'advproxy wednesday'}</td>
1429 <td width='2%' align='center'>$Lang::tr{'advproxy thursday'}</td>
1430 <td width='2%' align='center'>$Lang::tr{'advproxy friday'}</td>
1431 <td width='2%' align='center'>$Lang::tr{'advproxy saturday'}</td>
1432 <td width='2%' align='center'>$Lang::tr{'advproxy sunday'}</td>
1433 <td width='1%'>&nbsp;&nbsp;</td>
1434 <td width='7%' colspan=3>$Lang::tr{'advproxy from'}</td>
1435 <td width='1%'>&nbsp;</td>
1436 <td width='7%' colspan=3>$Lang::tr{'advproxy to'}</td>
1437 <td>&nbsp;</td>
1438</tr>
1439<tr>
1440 <td class='base'>
1441 <select name='TIME_ACCESS_MODE'>
1442 <option value='allow' $selected{'TIME_ACCESS_MODE'}{'allow'}>$Lang::tr{'advproxy mode allow'}</option>
1443 <option value='deny' $selected{'TIME_ACCESS_MODE'}{'deny'}>$Lang::tr{'advproxy mode deny'}</option>
1444 </select>
1445 </td>
1446 <td>&nbsp;</td>
1447 <td class='base'><input type='checkbox' name='TIME_MON' $checked{'TIME_MON'}{'on'} /></td>
1448 <td class='base'><input type='checkbox' name='TIME_TUE' $checked{'TIME_TUE'}{'on'} /></td>
1449 <td class='base'><input type='checkbox' name='TIME_WED' $checked{'TIME_WED'}{'on'} /></td>
1450 <td class='base'><input type='checkbox' name='TIME_THU' $checked{'TIME_THU'}{'on'} /></td>
1451 <td class='base'><input type='checkbox' name='TIME_FRI' $checked{'TIME_FRI'}{'on'} /></td>
1452 <td class='base'><input type='checkbox' name='TIME_SAT' $checked{'TIME_SAT'}{'on'} /></td>
1453 <td class='base'><input type='checkbox' name='TIME_SUN' $checked{'TIME_SUN'}{'on'} /></td>
1454 <td>&nbsp;</td>
1455 <td class='base'>
1456 <select name='TIME_FROM_HOUR'>
1457END
1458;
1459for ($i=0;$i<=24;$i++) {
1460 $_ = sprintf("%02s",$i);
1461 print "<option $selected{'TIME_FROM_HOUR'}{$_}>$_</option>\n";
1462}
1463print <<END
1464 </select>
1465 </td>
1466 <td>:</td>
1467 <td class='base'>
1468 <select name='TIME_FROM_MINUTE'>
1469END
1470;
1471for ($i=0;$i<=45;$i+=15) {
1472 $_ = sprintf("%02s",$i);
1473 print "<option $selected{'TIME_FROM_MINUTE'}{$_}>$_</option>\n";
1474}
1475print <<END
1476 </select>
1477 <td> - </td>
1478 </td>
1479 <td class='base'>
1480 <select name='TIME_TO_HOUR'>
1481END
1482;
1483for ($i=0;$i<=24;$i++) {
1484 $_ = sprintf("%02s",$i);
1485 print "<option $selected{'TIME_TO_HOUR'}{$_}>$_</option>\n";
1486}
1487print <<END
1488 </select>
1489 </td>
1490 <td>:</td>
1491 <td class='base'>
1492 <select name='TIME_TO_MINUTE'>
1493END
1494;
1495for ($i=0;$i<=45;$i+=15) {
1496 $_ = sprintf("%02s",$i);
1497 print "<option $selected{'TIME_TO_MINUTE'}{$_}>$_</option>\n";
1498}
1499print <<END
1500 </select>
1501 </td>
1502</tr>
1503</table>
1504<hr size='1'>
1505<table width='100%'>
1506<tr>
1507 <td colspan='4'><b>$Lang::tr{'advproxy transfer limits'}</b></td>
ac1cfefa
MT		 1508</tr>
1509<tr>
ed38f89d
MT		 1510 <td width='25%' class='base'>$Lang::tr{'advproxy max download size'}:</td>
1511 <td width='20%'><input type='text' name='MAX_INCOMING_SIZE' value='$proxysettings{'MAX_INCOMING_SIZE'}' size='5' /></td>
1512 <td width='25%' class='base'>$Lang::tr{'advproxy max upload size'}:</td>
1513 <td width='30%'><input type='text' name='MAX_OUTGOING_SIZE' value='$proxysettings{'MAX_OUTGOING_SIZE'}' size='5' /></td>
ac1cfefa
MT		 1514</tr>
1515</table>
ed38f89d 1516<hr size='1'>
ac1cfefa 1517<table width='100%'>
ac1cfefa 1518<tr>
ed38f89d
MT		 1519 <td colspan='4'><b>$Lang::tr{'advproxy download throttling'}</b></td>
1520</tr>
1521<tr>
1522 <td width='25%' class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourgreen">Green</font>:</td>
1523 <td width='20%' class='base'>
1524 <select name='THROTTLING_GREEN_TOTAL'>
1525END
1526;
1527
1528foreach (@throttle_limits) {
1529 print "\t<option value='$_' $selected{'THROTTLING_GREEN_TOTAL'}{$_}>$_ kBit/s</option>\n";
1530}
1531
1532print <<END
1533 <option value='0' $selected{'THROTTLING_GREEN_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1534 </select>
1535 </td>
1536 <td width='25%' class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourgreen">Green</font>:</td>
1537 <td width='30%' class='base'>
1538 <select name='THROTTLING_GREEN_HOST'>
1539END
1540;
1541
1542foreach (@throttle_limits) {
1543 print "\t<option value='$_' $selected{'THROTTLING_GREEN_HOST'}{$_}>$_ kBit/s</option>\n";
1544}
1545
1546print <<END
1547 <option value='0' $selected{'THROTTLING_GREEN_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1548 </select>
1549 </td>
1550</tr>
1551END
1552;
1553
1554if ($netsettings{'BLUE_DEV'}) {
1555 print <<END
1556<tr>
1557 <td class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourblue">Blue</font>:</td>
1558 <td class='base'>
1559 <select name='THROTTLING_BLUE_TOTAL'>
1560END
1561;
1562
1563foreach (@throttle_limits) {
1564 print "\t<option value='$_' $selected{'THROTTLING_BLUE_TOTAL'}{$_}>$_ kBit/s</option>\n";
1565}
1566
1567print <<END
1568 <option value='0' $selected{'THROTTLING_BLUE_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1569 </select>
1570 </td>
1571 <td class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourblue">Blue</font>:</td>
1572 <td class='base'>
1573 <select name='THROTTLING_BLUE_HOST'>
1574END
1575;
1576
1577foreach (@throttle_limits) {
1578 print "\t<option value='$_' $selected{'THROTTLING_BLUE_HOST'}{$_}>$_ kBit/s</option>\n";
1579}
1580
1581print <<END
1582 <option value='0' $selected{'THROTTLING_BLUE_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1583 </select>
ac1cfefa 1584 </td>
ac1cfefa 1585</tr>
ed38f89d
MT		 1586END
1587;
1588}
ac1cfefa 1589
ed38f89d
MT		 1590print <<END
1591</table>
1592<table width='100%'>
1593<tr>
1594 <td colspan='4'><i>$Lang::tr{'advproxy content based throttling'}:</i></td>
1595</tr>
1596<tr>
1597 <td width='15%' class='base'>$Lang::tr{'advproxy throttle binary'}:</td>
1598 <td width='10%'><input type='checkbox' name='THROTTLE_BINARY' $checked{'THROTTLE_BINARY'}{'on'} /></td>
1599 <td width='15%' class='base'>$Lang::tr{'advproxy throttle dskimg'}:</td>
1600 <td width='10%'><input type='checkbox' name='THROTTLE_DSKIMG' $checked{'THROTTLE_DSKIMG'}{'on'} /></td>
1601 <td width='15%' class='base'>$Lang::tr{'advproxy throttle mmedia'}:</td>
1602 <td width='10%'><input type='checkbox' name='THROTTLE_MMEDIA' $checked{'THROTTLE_MMEDIA'}{'on'} /></td>
363fb6af
MT		 1603 <td width='15%'>&nbsp;</td>
1604 <td width='10%'>&nbsp;</td>
28c9dec6 1605</tr>
ac1cfefa 1606</table>
ed38f89d
MT		 1607<hr size='1'>
1608<table width='100%'>
1609<tr>
9141bd34 1610 <td colspan='4'><b>$Lang::tr{'advproxy MIME filter'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='ENABLE_MIME_FILTER' $checked{'ENABLE_MIME_FILTER'}{'on'} /></td>
ed38f89d 1611</tr>
9141bd34
CS		 1612END
1613;
1614if ( $proxysettings{'ENABLE_MIME_FILTER'} eq 'on' ){
1615print <<END
ed38f89d
MT		 1616<tr>
1617 <td colspan='2' class='base'>$Lang::tr{'advproxy MIME block types'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
363fb6af
MT		 1618 <td>&nbsp;</td>
1619 <td>&nbsp;</td>
ed38f89d
MT		 1620</tr>
1621<tr>
1622 <td colspan='2'><textarea name='MIME_TYPES' cols='32' rows='6' wrap='off'>
ac1cfefa
MT		 1623END
1624;
ac1cfefa 1625
ed38f89d 1626print $proxysettings{'MIME_TYPES'};
ac1cfefa 1627
ed38f89d
MT		 1628print <<END
1629</textarea></td>
363fb6af
MT		 1630 <td>&nbsp;</td>
1631 <td>&nbsp;</td>
ed38f89d 1632</tr>
9141bd34
CS		 1633END
1634;
1635}
1636print <<END
ed38f89d 1637</table>
9141bd34 1638
ed38f89d
MT		 1639<hr size='1'>
1640<table width='100%'>
1641<tr>
9141bd34 1642 <td colspan='4'><b>$Lang::tr{'advproxy web browser'}</b> $Lang::tr{'advproxy UA enable filter'}:<input type='checkbox' name='ENABLE_BROWSER_CHECK' $checked{'ENABLE_BROWSER_CHECK'}{'on'} /></td>
ed38f89d 1643</tr>
9141bd34
CS		 1644END
1645;
1646if ( $proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on' ){
1647print <<END
ed38f89d
MT		 1648<tr>
1649 <td colspan='4'><i>
1650END
1651;
1652if (@useragentlist) { print "$Lang::tr{'advproxy allowed web browsers'}:"; } else { print "$Lang::tr{'advproxy no clients defined'}"; }
1653print <<END
1654</i></td>
1655</tr>
1656</table>
1657<table width='100%'>
1658END
1659;
ac1cfefa 1660
ed38f89d
MT		 1661for ($n=0; $n<=@useragentlist; $n = $n + $i) {
1662 for ($i=0; $i<=3; $i++) {
1663 if ($i eq 0) { print "<tr>\n"; }
1664 if (($n+$i) < @useragentlist) {
1665 @useragent = split(/,/,@useragentlist[$n+$i]);
4e17adad
CS		 1666 print "<td width='15%'>$useragent[1]:<\/td>\n";
1667 print "<td width='10%'><input type='checkbox' name='UA_$useragent[0]' $checked{'UA_'.$useragent[0]}{'on'} /></td>\n";
ed38f89d
MT		 1668 }
1669 if ($i eq 3) { print "<\/tr>\n"; }
1670 }
1671}
9141bd34 1672}
ed38f89d
MT		 1673print <<END
1674</table>
1675<hr size='1'>
1676<table width='100%'>
1677<tr>
1678 <td><b>$Lang::tr{'advproxy privacy'}</b></td>
1679</tr>
1680<tr>
1681 <td class='base'>$Lang::tr{'advproxy fake useragent'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
ed38f89d
MT		 1682 <td class='base'>$Lang::tr{'advproxy fake referer'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1683</tr>
1684<tr>
73cb6627
AM		 1685 <td><input type='text' name='FAKE_USERAGENT' value='$proxysettings{'FAKE_USERAGENT'}' size='40%' /></td>
1686 <td><input type='text' name='FAKE_REFERER' value='$proxysettings{'FAKE_REFERER'}' size='40%' /></td>
ed38f89d
MT		 1687</tr>
1688</table>
1689<hr size='1'>
1690END
1691;
1692
603248db
MT		 1693my $auth_columns = 5;
1694if ($HAVE_NTLM_AUTH) {
1695 $auth_columns++;
1696}
1697my $auth_column_width = 100 / $auth_columns;
1698
1699print <<END;
ed38f89d
MT		 1700<table width='100%'>
1701<tr>
603248db 1702 <td colspan='$auth_columns'><b>$Lang::tr{'advproxy AUTH method'}</b></td>
ed38f89d
MT		 1703</tr>
1704<tr>
603248db
MT		 1705 <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='none' $checked{'AUTH_METHOD'}{'none'} />$Lang::tr{'advproxy AUTH method none'}</td>
1706 <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ncsa' $checked{'AUTH_METHOD'}{'ncsa'} />$Lang::tr{'advproxy AUTH method ncsa'}</td>
1707 <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ident' $checked{'AUTH_METHOD'}{'ident'} />$Lang::tr{'advproxy AUTH method ident'}</td>
1708 <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ldap' $checked{'AUTH_METHOD'}{'ldap'} />$Lang::tr{'advproxy AUTH method ldap'}</td>
1709 <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ntlm' $checked{'AUTH_METHOD'}{'ntlm'} />$Lang::tr{'advproxy AUTH method ntlm'}</td>
1710END
1711
1712if ($HAVE_NTLM_AUTH) {
1713 print <<END;
1714 <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ntlm-auth' $checked{'AUTH_METHOD'}{'ntlm-auth'} />$Lang::tr{'advproxy AUTH method ntlm auth'}</td>
1715END
1716}
1717
1718print <<END
1719 <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='radius' $checked{'AUTH_METHOD'}{'radius'} />$Lang::tr{'advproxy AUTH method radius'}</td>
ed38f89d
MT		 1720</tr>
1721</table>
1722END
1723;
1724
1725if (!($proxysettings{'AUTH_METHOD'} eq 'none')) { if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) { print <<END
1726<hr size='1'>
1727<table width='100%'>
1728<tr>
363fb6af 1729 <td colspan='4'><b>$Lang::tr{'advproxy AUTH global settings'}</b></td>
ed38f89d
MT		 1730</tr>
1731<tr>
1732 <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1733</tr>
1734<tr>
1735 <td class='base'>$Lang::tr{'advproxy AUTH number of auth processes'}:</td>
1736 <td><input type='text' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}' size='5' /></td>
1737 <td colspan='2' rowspan= '6' valign='top' class='base'>
1738 <table cellpadding='0' cellspacing='0'>
1739 <tr>
1740 <td class='base'>$Lang::tr{'advproxy AUTH realm'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1741 </tr>
1742 <tr>
1743 <!-- intentionally left empty -->
1744 </tr>
1745 <tr>
1746 <!-- intentionally left empty -->
1747 </tr>
1748 <tr>
1749 <td><input type='text' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}' size='40' /></td>
1750 </tr>
1751 <tr>
1752 <!-- intentionally left empty -->
1753 </tr>
1754 <tr>
1755 <!-- intentionally left empty -->
1756 </tr>
1757 <tr>
1758 <td>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1759 </tr>
1760 <tr>
1761 <!-- intentionally left empty -->
1762 </tr>
1763 <tr>
1764 <!-- intentionally left empty -->
1765 </tr>
1766 <tr>
1767 <td><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1768END
1769;
1770
1771print $proxysettings{'DST_NOAUTH'};
1772
1773print <<END
1774</textarea></td>
1775 </tr>
1776 </table>
1777 </td>
1778</tr>
1779<tr>
1780 <td class='base'>$Lang::tr{'advproxy AUTH auth cache TTL'}:</td>
1781 <td><input type='text' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1782</tr>
1783<tr>
1784 <td class='base'>$Lang::tr{'advproxy AUTH limit of IP addresses'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1785 <td><input type='text' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1786</tr>
1787<tr>
1788 <td class='base'>$Lang::tr{'advproxy AUTH user IP cache TTL'}:</td>
1789 <td><input type='text' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1790</tr>
1791<tr>
363fb6af
MT		 1792 <td class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1793 <td><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1794</tr>
1795<tr>
1796 <td colspan='2'>&nbsp;</td>
1797</tr>
1798</table>
1799END
1800;
1801}
1802
1803# ===================================================================
1804# NCSA auth settings
1805# ===================================================================
1806
1807if ($proxysettings{'AUTH_METHOD'} eq 'ncsa') {
1808print <<END
1809<hr size='1'>
1810<table width='100%'>
1811<tr>
1812 <td colspan='4'><b>$Lang::tr{'advproxy NCSA auth'}</b></td>
1813</tr>
1814<tr>
1815 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA min password length'}:</td>
1816 <td width='20%'><input type='text' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}' size='5' /></td>
1817 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA redirector bypass'} \'$Lang::tr{'advproxy NCSA grp extended'}\':</td>
363fb6af 1818 <td width='20%'><input type='checkbox' name='NCSA_BYPASS_REDIR' $checked{'NCSA_BYPASS_REDIR'}{'on'} /></td>
ed38f89d
MT		 1819</tr>
1820<tr>
1821 <td colspan='2'><br>&nbsp;<input type='submit' name='ACTION' value='$Lang::tr{'advproxy NCSA user management'}'></td>
1822 <td>&nbsp;</td>
1823 <td>&nbsp;</td>
1824</tr>
1825</table>
1826END
1827; }
1828
1829# ===================================================================
1830# IDENTD auth settings
1831# ===================================================================
1832
1833if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
1834print <<END
1835<hr size ='1'>
1836<table width='100%'>
1837<tr>
1838 <td colspan='4'><b>$Lang::tr{'advproxy IDENT identd settings'}</b></td>
1839</tr>
1840<tr>
1841 <td width='25%' class='base'>$Lang::tr{'advproxy IDENT required'}:</td>
363fb6af
MT		 1842 <td width='20%'><input type='checkbox' name='IDENT_REQUIRED' $checked{'IDENT_REQUIRED'}{'on'} /></td>
1843 <td width='25%' class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1844 <td width='30%'><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
ed38f89d
MT		 1845</tr>
1846<tr>
1847 <td class='base'>$Lang::tr{'advproxy IDENT timeout'}:</td>
1848 <td><input type='text' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}' size='5' /></td>
1849 <td>&nbsp;</td>
1850 <td>&nbsp;</td>
1851</tr>
1852<tr>
1853 <td colspan='2' class='base'>$Lang::tr{'advproxy IDENT aware hosts'}:</td>
1854 <td colspan='2' class='base'>$Lang::tr{'advproxy AUTH no auth'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1855</tr>
1856<tr>
1857 <td colspan='2'><textarea name='IDENT_HOSTS' cols='32' rows='6' wrap='off'>
1858END
1859;
1860if (!$proxysettings{'IDENT_HOSTS'}) {
f09a0af5 1861 print "$green_cidr\n";
ed38f89d 1862 if ($netsettings{'BLUE_DEV'}) {
f09a0af5 1863 print "$blue_cidr\n";
ed38f89d
MT		 1864 }
1865} else {
1866 print $proxysettings{'IDENT_HOSTS'};
1867}
1868
1869print <<END
1870</textarea></td>
1871 <td colspan='2'><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1872END
1873;
1874
1875print $proxysettings{'DST_NOAUTH'};
1876
1877print <<END
1878</textarea></td>
1879</tr>
1880</table>
1881<hr size ='1'>
1882<table width='100%'>
1883<tr>
1884 <td colspan='4'><b>$Lang::tr{'advproxy IDENT user based access restrictions'}</b></td>
1885</tr>
1886<tr>
1887 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1888 <td width='20%'><input type='checkbox' name='IDENT_ENABLE_ACL' $checked{'IDENT_ENABLE_ACL'}{'on'} /></td>
1889 <td width='25%'>&nbsp;</td>
1890 <td width='30%'>&nbsp;</td>
1891</tr>
1892<tr>
1893 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='positive' $checked{'IDENT_USER_ACL'}{'positive'} />
1894 $Lang::tr{'advproxy IDENT use positive access list'}:</td>
1895 <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='negative' $checked{'IDENT_USER_ACL'}{'negative'} />
1896 $Lang::tr{'advproxy IDENT use negative access list'}:</td>
1897</tr>
1898<tr>
1899 <td colspan='2'>$Lang::tr{'advproxy IDENT authorized users'}</td>
1900 <td colspan='2'>$Lang::tr{'advproxy IDENT unauthorized users'}</td>
1901</tr>
1902<tr>
363fb6af 1903 <td colspan='2'><textarea name='IDENT_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1904END
1905; }
1906
1907if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_ALLOW_USERS'}; }
1908
1909if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1910</textarea></td>
363fb6af 1911 <td colspan='2'><textarea name='IDENT_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1912END
1913; }
1914
1915if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_DENY_USERS'}; }
1916
1917if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1918</textarea></td>
1919</tr>
1920</table>
1921END
1922; }
1923
1924# ===================================================================
1925# NTLM auth settings
1926# ===================================================================
1927
1928if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') {
1929print <<END
1930<hr size='1'>
1931<table width='100%'>
1932<tr>
1933 <td colspan='6'><b>$Lang::tr{'advproxy NTLM domain settings'}</b></td>
1934</tr>
1935<tr>
1936 <td class='base'>$Lang::tr{'advproxy NTLM domain'}:</td>
1937 <td><input type='text' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}' size='15' /></td>
1938 <td class='base'>$Lang::tr{'advproxy NTLM PDC hostname'}:</td>
1939 <td><input type='text' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}' size='14' /></td>
1940 <td class='base'>$Lang::tr{'advproxy NTLM BDC hostname'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1941 <td><input type='text' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}' size='14' /></td>
1942</tr>
1943</table>
1944<hr size ='1'>
1945<table width='100%'>
1946<tr>
1947 <td colspan='3'><b>$Lang::tr{'advproxy NTLM auth mode'}</b></td>
1948</tr>
1949<tr>
1950 <td width='25%' class='base' width='25%'>$Lang::tr{'advproxy NTLM use integrated auth'}:</td>
1951 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_INT_AUTH' $checked{'NTLM_ENABLE_INT_AUTH'}{'on'} /></td>
1952 <td>&nbsp;</td>
1953</tr>
1954</table>
1955<hr size ='1'>
1956<table width='100%'>
1957<tr>
1958 <td colspan='4'><b>$Lang::tr{'advproxy NTLM user based access restrictions'}</b></td>
1959</tr>
1960<tr>
1961 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1962 <td width='20%'><input type='checkbox' name='NTLM_ENABLE_ACL' $checked{'NTLM_ENABLE_ACL'}{'on'} /></td>
1963 <td width='25%'>&nbsp;</td>
1964 <td width='30%'>&nbsp;</td>
1965</tr>
1966<tr>
1967 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='positive' $checked{'NTLM_USER_ACL'}{'positive'} />
1968 $Lang::tr{'advproxy NTLM use positive access list'}:</td>
1969 <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='negative' $checked{'NTLM_USER_ACL'}{'negative'} />
1970 $Lang::tr{'advproxy NTLM use negative access list'}:</td>
1971</tr>
1972<tr>
1973 <td colspan='2'>$Lang::tr{'advproxy NTLM authorized users'}</td>
1974 <td colspan='2'>$Lang::tr{'advproxy NTLM unauthorized users'}</td>
1975</tr>
1976<tr>
363fb6af 1977 <td colspan='2'><textarea name='NTLM_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1978END
1979; }
1980
1981if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_ALLOW_USERS'}; }
1982
1983if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1984</textarea></td>
363fb6af 1985 <td colspan='2'><textarea name='NTLM_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 1986END
1987; }
1988
1989if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_DENY_USERS'}; }
1990
1991if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1992</textarea></td>
1993</tr>
1994</table>
1995END
1996; }
1997
b5674643
MT		 1998# ===================================================================
1999# NTLM-AUTH settings
2000# ===================================================================
2001
2002if ($proxysettings{'AUTH_METHOD'} eq 'ntlm-auth') {
2003 print <<END;
2004 <hr size ='1'>
2005 <table width='100%'>
2006 <tr>
2007 <td colspan='4'><b>$Lang::tr{'advproxy group access control'}</b></td>
2008 </tr>
2009 <tr>
2010 <td width='20%' class='base'>$Lang::tr{'advproxy group required'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
2011 <td width='40%'><input type='text' name='NTLM_AUTH_GROUP' value='$proxysettings{'NTLM_AUTH_GROUP'}' size='37' /></td>
2012 <td>&nbsp;</td>
2013 <td>&nbsp;</td>
2014 </tr>
2015 </table>
2016END
2017}
2018
ed38f89d
MT		 2019# ===================================================================
2020# LDAP auth settings
2021# ===================================================================
2022
2023if ($proxysettings{'AUTH_METHOD'} eq 'ldap') {
2024print <<END
2025<hr size='1'>
2026<table width='100%'>
2027<tr>
2028 <td colspan='4'><b>$Lang::tr{'advproxy LDAP common settings'}</b></td>
2029</tr>
2030<tr>
2031 <td class='base'>$Lang::tr{'advproxy LDAP basedn'}:</td>
2032 <td><input type='text' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}' size='37' /></td>
2033 <td class='base'>$Lang::tr{'advproxy LDAP type'}:</td>
2034 <td class='base'><select name='LDAP_TYPE'>
2035 <option value='ADS' $selected{'LDAP_TYPE'}{'ADS'}>$Lang::tr{'advproxy LDAP ADS'}</option>
2036 <option value='NDS' $selected{'LDAP_TYPE'}{'NDS'}>$Lang::tr{'advproxy LDAP NDS'}</option>
2037 <option value='V2' $selected{'LDAP_TYPE'}{'V2'}>$Lang::tr{'advproxy LDAP V2'}</option>
2038 <option value='V3' $selected{'LDAP_TYPE'}{'V3'}>$Lang::tr{'advproxy LDAP V3'}</option>
2039 </select></td>
2040</tr>
2041<tr>
2042 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP server'}:</td>
2043 <td width='40%'><input type='text' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}' size='14' /></td>
2044 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP port'}:</td>
2045 <td><input type='text' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}' size='3' /></td>
2046</tr>
2047</table>
2048<hr size ='1'>
2049<table width='100%'>
2050<tr>
2051 <td colspan='4'><b>$Lang::tr{'advproxy LDAP binddn settings'}</b></td>
2052</tr>
2053<tr>
2054 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn username'}:</td>
2055 <td width='40%'><input type='text' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}' size='37' /></td>
2056 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn password'}:</td>
2057 <td><input type='password' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}' size='14' /></td>
2058</tr>
2059</table>
2060<hr size ='1'>
2061<table width='100%'>
2062<tr>
2063 <td colspan='4'><b>$Lang::tr{'advproxy LDAP group access control'}</b></td>
2064</tr>
2065<tr>
2066 <td width='20%' class='base'>$Lang::tr{'advproxy LDAP group required'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
2067 <td width='40%'><input type='text' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}' size='37' /></td>
2068 <td>&nbsp;</td>
2069 <td>&nbsp;</td>
2070</tr>
2071</table>
2072END
2073; }
2074
2075# ===================================================================
2076# RADIUS auth settings
2077# ===================================================================
2078
2079if ($proxysettings{'AUTH_METHOD'} eq 'radius') {
2080print <<END
2081<hr size='1'>
2082<table width='100%'>
2083<tr>
2084 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS radius settings'}</b></td>
2085</tr>
2086<tr>
2087 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS server'}:</td>
2088 <td width='20%'><input type='text' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}' size='14' /></td>
2089 <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS port'}:</td>
2090 <td width='30%'><input type='text' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}' size='3' /></td>
2091</tr>
2092<tr>
2093 <td class='base'>$Lang::tr{'advproxy RADIUS identifier'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
2094 <td><input type='text' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}' size='14' /></td>
2095 <td class='base'>$Lang::tr{'advproxy RADIUS secret'}:</td>
2096 <td><input type='password' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}' size='14' /></td>
2097</tr>
2098</table>
2099<hr size ='1'>
2100<table width='100%'>
2101<tr>
2102 <td colspan='4'><b>$Lang::tr{'advproxy RADIUS user based access restrictions'}</b></td>
2103</tr>
2104<tr>
2105 <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
2106 <td width='20%'><input type='checkbox' name='RADIUS_ENABLE_ACL' $checked{'RADIUS_ENABLE_ACL'}{'on'} /></td>
2107 <td width='25%'>&nbsp;</td>
2108 <td width='30%'>&nbsp;</td>
2109</tr>
2110<tr>
2111 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='positive' $checked{'RADIUS_USER_ACL'}{'positive'} />
2112 $Lang::tr{'advproxy RADIUS use positive access list'}:</td>
2113 <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='negative' $checked{'RADIUS_USER_ACL'}{'negative'} />
2114 $Lang::tr{'advproxy RADIUS use negative access list'}:</td>
2115</tr>
2116<tr>
2117 <td colspan='2'>$Lang::tr{'advproxy RADIUS authorized users'}</td>
2118 <td colspan='2'>$Lang::tr{'advproxy RADIUS unauthorized users'}</td>
2119</tr>
2120<tr>
363fb6af 2121 <td colspan='2'><textarea name='RADIUS_ALLOW_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 2122END
2123; }
2124
2125if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_ALLOW_USERS'}; }
2126
2127if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
2128</textarea></td>
363fb6af 2129 <td colspan='2'><textarea name='RADIUS_DENY_USERS' cols='32' rows='6' wrap='off'>
ed38f89d
MT		 2130END
2131; }
2132
2133if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_DENY_USERS'}; }
2134
2135if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
2136</textarea></td>
2137</tr>
2138</table>
2139END
2140; }
2141
2142# ===================================================================
2143
2144}
2145
2146print "<table>\n";
2147
2148if ($proxysettings{'AUTH_METHOD'} eq 'none') {
2149print <<END
2150<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
2151<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
2152<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
2153<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
2154<td><input type='hidden' name='AUTH_ALWAYS_REQUIRED' value='$proxysettings{'AUTH_ALWAYS_REQUIRED'}'></td>
2155<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
2156<td><input type='hidden' name='DST_NOAUTH' value='$proxysettings{'DST_NOAUTH'}'></td>
2157END
2158; }
2159
2160if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
2161print <<END
2162<td><input type='hidden' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}'></td>
2163<td><input type='hidden' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
2164<td><input type='hidden' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
2165<td><input type='hidden' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
2166<td><input type='hidden' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}'></td>
2167END
2168; }
2169
2170if (!($proxysettings{'AUTH_METHOD'} eq 'ncsa')) {
2171print <<END
2172<td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2173<td><input type='hidden' name='NCSA_BYPASS_REDIR' value='$proxysettings{'NCSA_BYPASS_REDIR'}'></td>
2174END
2175; }
2176
2177if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) {
2178print <<END
2179<td><input type='hidden' name='IDENT_REQUIRED' value='$proxysettings{'IDENT_REQUIRED'}'></td>
2180<td><input type='hidden' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}'></td>
2181<td><input type='hidden' name='IDENT_HOSTS' value='$proxysettings{'IDENT_HOSTS'}'></td>
2182<td><input type='hidden' name='IDENT_ENABLE_ACL' value='$proxysettings{'IDENT_ENABLE_ACL'}'></td>
2183<td><input type='hidden' name='IDENT_USER_ACL' value='$proxysettings{'IDENT_USER_ACL'}'></td>
2184<td><input type='hidden' name='IDENT_ALLOW_USERS' value='$proxysettings{'IDENT_ALLOW_USERS'}'></td>
2185<td><input type='hidden' name='IDENT_DENY_USERS' value='$proxysettings{'IDENT_DENY_USERS'}'></td>
2186END
2187; }
2188
2189if (!($proxysettings{'AUTH_METHOD'} eq 'ldap')) {
2190print <<END
2191<td><input type='hidden' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}'></td>
2192<td><input type='hidden' name='LDAP_TYPE' value='$proxysettings{'LDAP_TYPE'}'></td>
2193<td><input type='hidden' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}'></td>
2194<td><input type='hidden' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}'></td>
2195<td><input type='hidden' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}'></td>
2196<td><input type='hidden' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}'></td>
2197<td><input type='hidden' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}'></td>
2198END
2199; }
2200
2201if (!($proxysettings{'AUTH_METHOD'} eq 'ntlm')) {
2202print <<END
2203<td><input type='hidden' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}'></td>
2204<td><input type='hidden' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}'></td>
2205<td><input type='hidden' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}'></td>
2206<td><input type='hidden' name='NTLM_ENABLE_INT_AUTH' value='$proxysettings{'NTLM_ENABLE_INT_AUTH'}'></td>
2207<td><input type='hidden' name='NTLM_ENABLE_ACL' value='$proxysettings{'NTLM_ENABLE_ACL'}'></td>
2208<td><input type='hidden' name='NTLM_USER_ACL' value='$proxysettings{'NTLM_USER_ACL'}'></td>
2209<td><input type='hidden' name='NTLM_ALLOW_USERS' value='$proxysettings{'NTLM_ALLOW_USERS'}'></td>
2210<td><input type='hidden' name='NTLM_DENY_USERS' value='$proxysettings{'NTLM_DENY_USERS'}'></td>
2211END
2212; }
2213
2214if (!($proxysettings{'AUTH_METHOD'} eq 'radius')) {
2215print <<END
2216<td><input type='hidden' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}'></td>
2217<td><input type='hidden' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}'></td>
2218<td><input type='hidden' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}'></td>
2219<td><input type='hidden' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}'></td>
2220<td><input type='hidden' name='RADIUS_ENABLE_ACL' value='$proxysettings{'RADIUS_ENABLE_ACL'}'></td>
2221<td><input type='hidden' name='RADIUS_USER_ACL' value='$proxysettings{'RADIUS_USER_ACL'}'></td>
2222<td><input type='hidden' name='RADIUS_ALLOW_USERS' value='$proxysettings{'RADIUS_ALLOW_USERS'}'></td>
2223<td><input type='hidden' name='RADIUS_DENY_USERS' value='$proxysettings{'RADIUS_DENY_USERS'}'></td>
2224END
2225; }
2226
2227print "</table>\n";
2228
2229print <<END
2230<hr size='1'>
2231END
2232;
2233
2234print <<END
2235<table width='100%'>
2236<tr>
363fb6af 2237 <td>&nbsp;</td>
ed38f89d 2238 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
fe1656d2 2239 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'proxy reconfigure'}' /></td>
ed38f89d 2240 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy save and restart'}' /></td>
363fb6af
MT		 2241 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy clear cache'}' /></td>
2242 <td>&nbsp;</td>
ed38f89d
MT		 2243</tr>
2244
2245</table>
2246<br />
2247<table width='100%'>
2248<tr>
2249 <td><img src='/blob.gif' align='top' alt='*' />&nbsp;
2250 <font class='base'>$Lang::tr{'this field may be blank'}</font>
2251 </td>
363fb6af 2252 <td align='right'>&nbsp;</td>
ed38f89d
MT		 2253</tr>
2254</table>
2255</form>
2256END
2257;
2258
2259&Header::closebox();
2260
2261} else {
2262
2263# ===================================================================
2264# NCSA user management
2265# ===================================================================
2266
2267&Header::openbox('100%', 'left', "$Lang::tr{'advproxy NCSA auth'}");
2268print <<END
2269<form method='post' action='$ENV{'SCRIPT_NAME'}'>
2270<table width='100%'>
2271<tr>
363fb6af 2272 <td colspan='4'><b>$Lang::tr{'advproxy NCSA user management'}</b></td>
ed38f89d
MT		 2273</tr>
2274<tr>
2275 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA username'}:</td>
2276 <td width='25%'><input type='text' name='NCSA_USERNAME' value='$proxysettings{'NCSA_USERNAME'}' size='12'
2277END
2278;
153cf640 2279 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) { print " readonly='readonly' "; }
ed38f89d
MT		 2280 print <<END
2281 /></td>
2282 <td width='25%' class='base'>$Lang::tr{'advproxy NCSA group'}:</td>
2283 <td class='base'>
2284 <select name='NCSA_GROUP'>
2285 <option value='standard' $selected{'NCSA_GROUP'}{'standard'}>$Lang::tr{'advproxy NCSA grp standard'}</option>
2286 <option value='extended' $selected{'NCSA_GROUP'}{'extended'}>$Lang::tr{'advproxy NCSA grp extended'}</option>
2287 <option value='disabled' $selected{'NCSA_GROUP'}{'disabled'}>$Lang::tr{'advproxy NCSA grp disabled'}</option>
2288 </select>
2289 </td>
2290
2291</tr>
2292<tr>
2293 <td class='base'>$Lang::tr{'advproxy NCSA password'}:</td>
2294 <td><input type='password' name='NCSA_PASS' value='$proxysettings{'NCSA_PASS'}' size='14' /></td>
2295 <td class='base'>$Lang::tr{'advproxy NCSA password confirm'}:</td>
2296 <td><input type='password' name='NCSA_PASS_CONFIRM' value='$proxysettings{'NCSA_PASS_CONFIRM'}' size='14' /></td>
2297</tr>
2298</table>
2299<br>
2300<table>
2301<tr>
2302 <td>&nbsp;</td>
2303 <td><input type='submit' name='SUBMIT' value='$ncsa_buttontext' /></td>
2304 <td><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /></td>
2305 <td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2306END
2307;
2308 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) {
2309 print "<td><input type='reset' name='ACTION' value='$Lang::tr{'advproxy reset'}' /></td>\n";
2310 }
2311
2312print <<END
2313 <td>&nbsp;</td>
2314 <td>&nbsp;</td>
2315 <td><input type='button' name='return2main' value='$Lang::tr{'advproxy back to main page'}' onClick='self.location.href="$ENV{'SCRIPT_NAME'}"'></td>
2316</tr>
2317</table>
2318</form>
2319<hr size='1'>
2320<table width='100%'>
2321<tr>
363fb6af 2322 <td><b>$Lang::tr{'advproxy NCSA user accounts'}:</b></td>
ed38f89d
MT		 2323</tr>
2324</table>
2325<table width='100%' align='center'>
2326END
2327;
2328
2329if (-e $extgrp)
2330{
2331 open(FILE, $extgrp); @grouplist = <FILE>; close(FILE);
2332 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":extended"); }
2333}
2334if (-e $stdgrp)
2335{
2336 open(FILE, $stdgrp); @grouplist = <FILE>; close(FILE);
2337 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":standard"); }
2338}
2339if (-e $disgrp)
2340{
2341 open(FILE, $disgrp); @grouplist = <FILE>; close(FILE);
2342 foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":disabled"); }
2343}
2344
2345@userlist = sort(@userlist);
2346
2347# If the password file contains entries, print entries and action icons
2348
488d1b7c 2349if ( ! -z "$userdb" ) {
ed38f89d
MT		 2350 print <<END
2351 <tr>
2352 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA username'}</i></b></td>
2353 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA group membership'}</i></b></td>
2354 <td class='boldbase' colspan='2' align='center'>&nbsp;</td>
2355 </tr>
2356END
2357;
2358 $id = 0;
2359 foreach $line (@userlist)
2360 {
2361 $id++;
2362 chomp($line);
2363 @temp = split(/:/,$line);
2364 if($proxysettings{'ACTION'} eq $Lang::tr{'edit'} && $proxysettings{'ID'} eq $line) {
2365 print "<tr bgcolor='$Header::colouryellow'>\n"; }
2366 elsif ($id % 2) {
4e17adad 2367 print "<tr bgcolor='$color{'color20'}'>\n"; }
ed38f89d 2368 else {
4e17adad 2369 print "<tr bgcolor='$color{'color22'}'>\n"; }
ed38f89d
MT		 2370
2371 print <<END
2372 <td align='center'>$temp[0]</td>
2373 <td align='center'>
2374END
2375;
2376 if ($temp[1] eq 'standard') {
2377 print $Lang::tr{'advproxy NCSA grp standard'};
2378 } elsif ($temp[1] eq 'extended') {
2379 print $Lang::tr{'advproxy NCSA grp extended'};
2380 } elsif ($temp[1] eq 'disabled') {
2381 print $Lang::tr{'advproxy NCSA grp disabled'}; }
2382 print <<END
2383 </td>
2384 <td width='8%' align='center'>
2385 <form method='post' name='frma$id' action='$ENV{'SCRIPT_NAME'}'>
2386 <input type='image' name='$Lang::tr{'edit'}' src='/images/edit.gif' title='$Lang::tr{'edit'}' alt='$Lang::tr{'edit'}' />
2387 <input type='hidden' name='ID' value='$line' />
2388 <input type='hidden' name='ACTION' value='$Lang::tr{'edit'}' />
2389 </form>
2390 </td>
2391
2392 <td width='8%' align='center'>
2393 <form method='post' name='frmb$id' action='$ENV{'SCRIPT_NAME'}'>
2394 <input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' title='$Lang::tr{'remove'}' alt='$Lang::tr{'remove'}' />
2395 <input type='hidden' name='ID' value='$temp[0]' />
2396 <input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
2397 </form>
2398 </td>
2399 </tr>
2400END
2401;
2402 }
2403
2404print <<END
2405</table>
2406<br>
9fb25b1c 2407<table>
ed38f89d
MT		 2408<tr>
2409 <td class='boldbase'>&nbsp; <b>$Lang::tr{'legend'}:</b></td>
2410 <td>&nbsp; &nbsp; <img src='/images/edit.gif' alt='$Lang::tr{'edit'}' /></td>
2411 <td class='base'>$Lang::tr{'edit'}</td>
2412 <td>&nbsp; &nbsp; <img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
2413 <td class='base'>$Lang::tr{'remove'}</td>
2414</tr>
2415END
2416;
2417} else {
2418 print <<END
2419 <tr>
363fb6af 2420 <td><i>$Lang::tr{'advproxy NCSA no accounts'}</i></td>
ed38f89d
MT		 2421 </tr>
2422END
2423;
2424}
2425
2426print <<END
2427</table>
2428END
2429;
2430
2431&Header::closebox();
2432
2433}
2434
2435# ===================================================================
2436
2437&Header::closebigbox();
2438
2439&Header::closepage();
2440
2441# -------------------------------------------------------------------
2442
2443sub read_acls
2444{
2445 if (-e "$acl_src_subnets") {
2446 open(FILE,"$acl_src_subnets");
2447 delete $proxysettings{'SRC_SUBNETS'};
2448 while (<FILE>) { $proxysettings{'SRC_SUBNETS'} .= $_ };
2449 close(FILE);
2450 }
2451 if (-e "$acl_src_banned_ip") {
2452 open(FILE,"$acl_src_banned_ip");
2453 delete $proxysettings{'SRC_BANNED_IP'};
2454 while (<FILE>) { $proxysettings{'SRC_BANNED_IP'} .= $_ };
2455 close(FILE);
2456 }
2457 if (-e "$acl_src_banned_mac") {
2458 open(FILE,"$acl_src_banned_mac");
2459 delete $proxysettings{'SRC_BANNED_MAC'};
2460 while (<FILE>) { $proxysettings{'SRC_BANNED_MAC'} .= $_ };
2461 close(FILE);
2462 }
2463 if (-e "$acl_src_unrestricted_ip") {
2464 open(FILE,"$acl_src_unrestricted_ip");
2465 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
2466 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_ };
2467 close(FILE);
2468 }
2469 if (-e "$acl_src_unrestricted_mac") {
2470 open(FILE,"$acl_src_unrestricted_mac");
2471 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
2472 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_ };
2473 close(FILE);
2474 }
2475 if (-e "$acl_dst_nocache") {
2476 open(FILE,"$acl_dst_nocache");
2477 delete $proxysettings{'DST_NOCACHE'};
2478 while (<FILE>) { $proxysettings{'DST_NOCACHE'} .= $_ };
2479 close(FILE);
2480 }
2481 if (-e "$acl_dst_noauth") {
2482 open(FILE,"$acl_dst_noauth");
2483 delete $proxysettings{'DST_NOAUTH'};
2484 while (<FILE>) { $proxysettings{'DST_NOAUTH'} .= $_ };
2485 close(FILE);
2486 }
363fb6af
MT		 2487 if (-e "$acl_ports_safe") {
2488 open(FILE,"$acl_ports_safe");
2489 delete $proxysettings{'PORTS_SAFE'};
2490 while (<FILE>) { $proxysettings{'PORTS_SAFE'} .= $_ };
2491 close(FILE);
2492 }
2493 if (-e "$acl_ports_ssl") {
2494 open(FILE,"$acl_ports_ssl");
2495 delete $proxysettings{'PORTS_SSL'};
2496 while (<FILE>) { $proxysettings{'PORTS_SSL'} .= $_ };
2497 close(FILE);
2498 }
ed38f89d
MT		 2499 if (-e "$mimetypes") {
2500 open(FILE,"$mimetypes");
2501 delete $proxysettings{'MIME_TYPES'};
2502 while (<FILE>) { $proxysettings{'MIME_TYPES'} .= $_ };
2503 close(FILE);
2504 }
2505 if (-e "$ntlmdir/msntauth.allowusers") {
2506 open(FILE,"$ntlmdir/msntauth.allowusers");
2507 delete $proxysettings{'NTLM_ALLOW_USERS'};
2508 while (<FILE>) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_ };
2509 close(FILE);
2510 }
2511 if (-e "$ntlmdir/msntauth.denyusers") {
2512 open(FILE,"$ntlmdir/msntauth.denyusers");
2513 delete $proxysettings{'NTLM_DENY_USERS'};
2514 while (<FILE>) { $proxysettings{'NTLM_DENY_USERS'} .= $_ };
2515 close(FILE);
2516 }
2517 if (-e "$raddir/radauth.allowusers") {
2518 open(FILE,"$raddir/radauth.allowusers");
2519 delete $proxysettings{'RADIUS_ALLOW_USERS'};
2520 while (<FILE>) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_ };
2521 close(FILE);
2522 }
2523 if (-e "$raddir/radauth.denyusers") {
2524 open(FILE,"$raddir/radauth.denyusers");
2525 delete $proxysettings{'RADIUS_DENY_USERS'};
2526 while (<FILE>) { $proxysettings{'RADIUS_DENY_USERS'} .= $_ };
2527 close(FILE);
2528 }
2529 if (-e "$identdir/identauth.allowusers") {
2530 open(FILE,"$identdir/identauth.allowusers");
2531 delete $proxysettings{'IDENT_ALLOW_USERS'};
2532 while (<FILE>) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_ };
2533 close(FILE);
2534 }
2535 if (-e "$identdir/identauth.denyusers") {
2536 open(FILE,"$identdir/identauth.denyusers");
2537 delete $proxysettings{'IDENT_DENY_USERS'};
2538 while (<FILE>) { $proxysettings{'IDENT_DENY_USERS'} .= $_ };
2539 close(FILE);
2540 }
2541 if (-e "$identhosts") {
2542 open(FILE,"$identhosts");
2543 delete $proxysettings{'IDENT_HOSTS'};
2544 while (<FILE>) { $proxysettings{'IDENT_HOSTS'} .= $_ };
2545 close(FILE);
2546 }
2547 if (-e "$cre_groups") {
2548 open(FILE,"$cre_groups");
2549 delete $proxysettings{'CRE_GROUPS'};
2550 while (<FILE>) { $proxysettings{'CRE_GROUPS'} .= $_ };
2551 close(FILE);
2552 }
2553 if (-e "$cre_svhosts") {
2554 open(FILE,"$cre_svhosts");
2555 delete $proxysettings{'CRE_SVHOSTS'};
2556 while (<FILE>) { $proxysettings{'CRE_SVHOSTS'} .= $_ };
2557 close(FILE);
2558 }
2559}
2560
2561# -------------------------------------------------------------------
2562
2563sub check_acls
2564{
363fb6af
MT		 2565 @temp = split(/\n/,$proxysettings{'PORTS_SAFE'});
2566 undef $proxysettings{'PORTS_SAFE'};
2567 foreach (@temp)
2568 {
2569 s/^\s+//g; s/\s+$//g;
2570 if ($_)
2571 {
2572 $line = $_;
2573 if (/^[^#]+\s+#\sSquids\sport/) { s/(^[^#]+)(\s+#\sSquids\sport)/$proxysettings{'PROXY_PORT'}\2/; $line=$_; }
2574 s/#.*//g; s/\s+//g;
2575 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2576 @templist = split(/-/);
2577 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2578 $proxysettings{'PORTS_SAFE'} .= $line."\n";
2579 }
2580 }
2581
2582 @temp = split(/\n/,$proxysettings{'PORTS_SSL'});
2583 undef $proxysettings{'PORTS_SSL'};
2584 foreach (@temp)
2585 {
2586 s/^\s+//g; s/\s+$//g;
2587 if ($_)
2588 {
2589 $line = $_;
2590 s/#.*//g; s/\s+//g;
2591 if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2592 @templist = split(/-/);
2593 foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2594 $proxysettings{'PORTS_SSL'} .= $line."\n";
2595 }
2596 }
2597
2598 @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2599 undef $proxysettings{'DST_NOCACHE'};
2600 foreach (@temp)
2601 {
488d1b7c
CS		 2602 s/^\s+//g;
2603 unless (/^#/) { s/\s+//g; }
363fb6af
MT		 2604 if ($_)
2605 {
488d1b7c 2606 if (/^\./) { $_ = '*'.$_; }
363fb6af
MT		 2607 $proxysettings{'DST_NOCACHE'} .= $_."\n";
2608 }
2609 }
2610
ed38f89d
MT		 2611 @temp = split(/\n/,$proxysettings{'SRC_SUBNETS'});
2612 undef $proxysettings{'SRC_SUBNETS'};
2613 foreach (@temp)
2614 {
2615 s/^\s+//g; s/\s+$//g;
2616 if ($_)
2617 {
2618 unless (&General::validipandmask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2619 $proxysettings{'SRC_SUBNETS'} .= $_."\n";
2620 }
2621 }
2622
2623 @temp = split(/\n/,$proxysettings{'SRC_BANNED_IP'});
2624 undef $proxysettings{'SRC_BANNED_IP'};
2625 foreach (@temp)
2626 {
2627 s/^\s+//g; s/\s+$//g;
2628 if ($_)
2629 {
2630 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2631 $proxysettings{'SRC_BANNED_IP'} .= $_."\n";
2632 }
2633 }
2634
2635 @temp = split(/\n/,$proxysettings{'SRC_BANNED_MAC'});
2636 undef $proxysettings{'SRC_BANNED_MAC'};
2637 foreach (@temp)
2638 {
2639 s/^\s+//g; s/\s+$//g; s/-/:/g;
2640 if ($_)
2641 {
2642 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2643 $proxysettings{'SRC_BANNED_MAC'} .= $_."\n";
2644 }
2645 }
2646
2647 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_IP'});
2648 undef $proxysettings{'SRC_UNRESTRICTED_IP'};
2649 foreach (@temp)
2650 {
2651 s/^\s+//g; s/\s+$//g;
2652 if ($_)
2653 {
2654 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2655 $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_."\n";
2656 }
2657 }
2658
2659 @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_MAC'});
2660 undef $proxysettings{'SRC_UNRESTRICTED_MAC'};
2661 foreach (@temp)
2662 {
2663 s/^\s+//g; s/\s+$//g; s/-/:/g;
2664 if ($_)
2665 {
2666 unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2667 $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_."\n";
2668 }
2669 }
2670
363fb6af 2671 @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
37273bc6 2672 undef $proxysettings{'DST_NOAUTH'};
363fb6af
MT		 2673 foreach (@temp)
2674 {
488d1b7c
CS		 2675 s/^\s+//g;
2676 unless (/^#/) { s/\s+//g; }
363fb6af
MT		 2677 if ($_)
2678 {
488d1b7c 2679 if (/^\./) { $_ = '*'.$_; }
363fb6af
MT		 2680 $proxysettings{'DST_NOAUTH'} .= $_."\n";
2681 }
2682 }
2683
ed38f89d
MT		 2684 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
2685 {
2686 @temp = split(/\n/,$proxysettings{'NTLM_ALLOW_USERS'});
2687 undef $proxysettings{'NTLM_ALLOW_USERS'};
2688 foreach (@temp)
2689 {
2690 s/^\s+//g; s/\s+$//g;
2691 if ($_) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_."\n"; }
2692 }
2693 if ($proxysettings{'NTLM_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2694 }
2695
2696 if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
2697 {
2698 @temp = split(/\n/,$proxysettings{'NTLM_DENY_USERS'});
2699 undef $proxysettings{'NTLM_DENY_USERS'};
2700 foreach (@temp)
2701 {
2702 s/^\s+//g; s/\s+$//g;
2703 if ($_) { $proxysettings{'NTLM_DENY_USERS'} .= $_."\n"; }
2704 }
2705 if ($proxysettings{'NTLM_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2706 }
2707
2708 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
2709 {
2710 @temp = split(/\n/,$proxysettings{'IDENT_ALLOW_USERS'});
2711 undef $proxysettings{'IDENT_ALLOW_USERS'};
2712 foreach (@temp)
2713 {
2714 s/^\s+//g; s/\s+$//g;
2715 if ($_) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_."\n"; }
2716 }
2717 if ($proxysettings{'IDENT_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2718 }
2719
2720 if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
2721 {
2722 @temp = split(/\n/,$proxysettings{'IDENT_DENY_USERS'});
2723 undef $proxysettings{'IDENT_DENY_USERS'};
2724 foreach (@temp)
2725 {
2726 s/^\s+//g; s/\s+$//g;
2727 if ($_) { $proxysettings{'IDENT_DENY_USERS'} .= $_."\n"; }
2728 }
2729 if ($proxysettings{'IDENT_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2730 }
2731
2732 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
2733 {
2734 @temp = split(/\n/,$proxysettings{'RADIUS_ALLOW_USERS'});
2735 undef $proxysettings{'RADIUS_ALLOW_USERS'};
2736 foreach (@temp)
2737 {
2738 s/^\s+//g; s/\s+$//g;
2739 if ($_) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_."\n"; }
2740 }
2741 if ($proxysettings{'RADIUS_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2742 }
2743
2744 if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
2745 {
2746 @temp = split(/\n/,$proxysettings{'RADIUS_DENY_USERS'});
2747 undef $proxysettings{'RADIUS_DENY_USERS'};
2748 foreach (@temp)
2749 {
2750 s/^\s+//g; s/\s+$//g;
2751 if ($_) { $proxysettings{'RADIUS_DENY_USERS'} .= $_."\n"; }
2752 }
2753 if ($proxysettings{'RADIUS_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2754 }
2755
2756 @temp = split(/\n/,$proxysettings{'IDENT_HOSTS'});
2757 undef $proxysettings{'IDENT_HOSTS'};
2758 foreach (@temp)
2759 {
2760 s/^\s+//g; s/\s+$//g;
2761 if ($_)
2762 {
2763 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2764 $proxysettings{'IDENT_HOSTS'} .= $_."\n";
2765 }
2766 }
2767
2768 @temp = split(/\n/,$proxysettings{'CRE_SVHOSTS'});
2769 undef $proxysettings{'CRE_SVHOSTS'};
2770 foreach (@temp)
2771 {
2772 s/^\s+//g; s/\s+$//g;
2773 if ($_)
2774 {
2775 unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2776 $proxysettings{'CRE_SVHOSTS'} .= $_."\n";
2777 }
2778 }
2779}
2780
ed38f89d
MT		 2781# -------------------------------------------------------------------
2782
2783sub write_acls
2784{
2785 open(FILE, ">$acl_src_subnets");
2786 flock(FILE, 2);
363fb6af
MT		 2787 if (!$proxysettings{'SRC_SUBNETS'})
2788 {
f09a0af5 2789 print FILE "$green_cidr\n";
363fb6af
MT		 2790 if ($netsettings{'BLUE_DEV'})
2791 {
f09a0af5 2792 print FILE "$blue_cidr\n";
363fb6af
MT		 2793 }
2794 } else { print FILE $proxysettings{'SRC_SUBNETS'}; }
ed38f89d
MT		 2795 close(FILE);
2796
2797 open(FILE, ">$acl_src_banned_ip");
2798 flock(FILE, 2);
2799 print FILE $proxysettings{'SRC_BANNED_IP'};
2800 close(FILE);
2801
2802 open(FILE, ">$acl_src_banned_mac");
2803 flock(FILE, 2);
2804 print FILE $proxysettings{'SRC_BANNED_MAC'};
2805 close(FILE);
2806
2807 open(FILE, ">$acl_src_unrestricted_ip");
2808 flock(FILE, 2);
2809 print FILE $proxysettings{'SRC_UNRESTRICTED_IP'};
2810 close(FILE);
2811
2812 open(FILE, ">$acl_src_unrestricted_mac");
2813 flock(FILE, 2);
2814 print FILE $proxysettings{'SRC_UNRESTRICTED_MAC'};
2815 close(FILE);
2816
488d1b7c
CS		 2817 open(FILE, ">$acl_dst_noauth");
2818 flock(FILE, 2);
2819 print FILE $proxysettings{'DST_NOAUTH'};
2820 close(FILE);
2821
2822 open(FILE, ">$acl_dst_noauth_net");
2823 close(FILE);
2824 open(FILE, ">$acl_dst_noauth_dom");
2825 close(FILE);
2826 open(FILE, ">$acl_dst_noauth_url");
2827 close(FILE);
2828
2829 @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
2830 foreach(@temp)
2831 {
2832 unless (/^#/)
2833 {
2834 if (/^\*\.\w/)
2835 {
2836 s/^\*//;
2837 open(FILE, ">>$acl_dst_noauth_dom");
2838 flock(FILE, 2);
2839 print FILE "$_\n";
2840 close(FILE);
2841 }
2842 elsif (&General::validipormask($_))
2843 {
2844 open(FILE, ">>$acl_dst_noauth_net");
2845 flock(FILE, 2);
2846 print FILE "$_\n";
2847 close(FILE);
2848 }
2849 elsif (/\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?-\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?/)
2850 {
2851 open(FILE, ">>$acl_dst_noauth_net");
2852 flock(FILE, 2);
2853 print FILE "$_\n";
2854 close(FILE);
2855 }
2856 else
2857 {
2858 open(FILE, ">>$acl_dst_noauth_url");
2859 flock(FILE, 2);
2860 if (/^[fh]tt?ps?:\/\//) { print FILE "$_\n"; } else { print FILE "^[fh]tt?ps?://$_\n"; }
2861 close(FILE);
2862 }
2863 }
2864 }
2865
ed38f89d
MT		 2866 open(FILE, ">$acl_dst_nocache");
2867 flock(FILE, 2);
2868 print FILE $proxysettings{'DST_NOCACHE'};
2869 close(FILE);
2870
488d1b7c
CS		 2871 open(FILE, ">$acl_dst_nocache_net");
2872 close(FILE);
2873 open(FILE, ">$acl_dst_nocache_dom");
2874 close(FILE);
2875 open(FILE, ">$acl_dst_nocache_url");
ed38f89d
MT		 2876 close(FILE);
2877
488d1b7c
CS		 2878 @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2879 foreach(@temp)
2880 {
2881 unless (/^#/)
2882 {
2883 if (/^\*\.\w/)
2884 {
2885 s/^\*//;
2886 open(FILE, ">>$acl_dst_nocache_dom");
2887 flock(FILE, 2);
2888 print FILE "$_\n";
2889 close(FILE);
2890 }
2891 elsif (&General::validipormask($_))
2892 {
2893 open(FILE, ">>$acl_dst_nocache_net");
2894 flock(FILE, 2);
2895 print FILE "$_\n";
2896 close(FILE);
2897 }
2898 elsif (/\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?-\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?/)
2899 {
2900 open(FILE, ">>$acl_dst_nocache_net");
2901 flock(FILE, 2);
2902 print FILE "$_\n";
2903 close(FILE);
2904 }
2905 else
2906 {
2907 open(FILE, ">>$acl_dst_nocache_url");
2908 flock(FILE, 2);
2909 if (/^[fh]tt?ps?:\/\//) { print FILE "$_\n"; } else { print FILE "^[fh]tt?ps?://$_\n"; }
2910 close(FILE);
2911 }
2912 }
2913 }
2914
363fb6af
MT		 2915 open(FILE, ">$acl_ports_safe");
2916 flock(FILE, 2);
2917 if (!$proxysettings{'PORTS_SAFE'}) { print FILE $def_ports_safe; } else { print FILE $proxysettings{'PORTS_SAFE'}; }
2918 close(FILE);
2919
2920 open(FILE, ">$acl_ports_ssl");
2921 flock(FILE, 2);
2922 if (!$proxysettings{'PORTS_SSL'}) { print FILE $def_ports_ssl; } else { print FILE $proxysettings{'PORTS_SSL'}; }
2923 close(FILE);
2924
ed38f89d
MT		 2925 open(FILE, ">$acl_dst_throttle");
2926 flock(FILE, 2);
2927 if ($proxysettings{'THROTTLE_BINARY'} eq 'on')
2928 {
2929 @temp = split(/\|/,$throttle_binary);
363fb6af 2930 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2931 }
2932 if ($proxysettings{'THROTTLE_DSKIMG'} eq 'on')
2933 {
2934 @temp = split(/\|/,$throttle_dskimg);
363fb6af 2935 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2936 }
2937 if ($proxysettings{'THROTTLE_MMEDIA'} eq 'on')
2938 {
2939 @temp = split(/\|/,$throttle_mmedia);
363fb6af 2940 foreach (@temp) { print FILE "\\.$_\$\n"; }
ed38f89d
MT		 2941 }
2942 if (-s $throttled_urls)
2943 {
2944 open(URLFILE, $throttled_urls);
2945 @temp = <URLFILE>;
2946 close(URLFILE);
363fb6af 2947 foreach (@temp) { print FILE; }
ed38f89d
MT		 2948 }
2949 close(FILE);
2950
2951 open(FILE, ">$mimetypes");
2952 flock(FILE, 2);
2953 print FILE $proxysettings{'MIME_TYPES'};
2954 close(FILE);
2955
2956 open(FILE, ">$ntlmdir/msntauth.allowusers");
2957 flock(FILE, 2);
2958 print FILE $proxysettings{'NTLM_ALLOW_USERS'};
2959 close(FILE);
2960
2961 open(FILE, ">$ntlmdir/msntauth.denyusers");
2962 flock(FILE, 2);
2963 print FILE $proxysettings{'NTLM_DENY_USERS'};
2964 close(FILE);
2965
2966 open(FILE, ">$raddir/radauth.allowusers");
2967 flock(FILE, 2);
2968 print FILE $proxysettings{'RADIUS_ALLOW_USERS'};
2969 close(FILE);
2970
2971 open(FILE, ">$raddir/radauth.denyusers");
2972 flock(FILE, 2);
2973 print FILE $proxysettings{'RADIUS_DENY_USERS'};
2974 close(FILE);
2975
2976 open(FILE, ">$identdir/identauth.allowusers");
2977 flock(FILE, 2);
2978 print FILE $proxysettings{'IDENT_ALLOW_USERS'};
2979 close(FILE);
2980
2981 open(FILE, ">$identdir/identauth.denyusers");
2982 flock(FILE, 2);
2983 print FILE $proxysettings{'IDENT_DENY_USERS'};
2984 close(FILE);
2985
2986 open(FILE, ">$identhosts");
2987 flock(FILE, 2);
2988 print FILE $proxysettings{'IDENT_HOSTS'};
2989 close(FILE);
2990
2991 open(FILE, ">$cre_groups");
2992 flock(FILE, 2);
2993 print FILE $proxysettings{'CRE_GROUPS'};
2994 close(FILE);
2995
2996 open(FILE, ">$cre_svhosts");
2997 flock(FILE, 2);
2998 print FILE $proxysettings{'CRE_SVHOSTS'};
2999 close(FILE);
3000}
3001
3002# -------------------------------------------------------------------
3003
3004sub writepacfile
3005{
22527178 3006 open(FILE, ">/srv/web/ipfire/html/proxy.pac");
ed38f89d
MT		 3007 flock(FILE, 2);
3008 print FILE "function FindProxyForURL(url, host)\n";
3009 print FILE "{\n";
3010 if (($proxysettings{'ENABLE'} eq 'on') || ($proxysettings{'ENABLE_BLUE'} eq 'on'))
3011 {
3012 print FILE <<END
3013if (
3014 (isPlainHostName(host)) ||
c03cf9ea 3015 (isInNet(host, "127.0.0.1", "255.0.0.0")) ||
7c1b7d3e
BB		 3016END
3017;
3018
3019 if ($netsettings{'GREEN_DEV'}) {
3020 print FILE " (isInNet(host, \"$netsettings{'GREEN_NETADDRESS'}\", \"$netsettings{'GREEN_NETMASK'}\")) ||\n";
3021 }
3022
3023 if (&Header::blue_used() && $netsettings{'BLUE_DEV'}) {
3024 print FILE " (isInNet(host, \"$netsettings{'BLUE_NETADDRESS'}\", \"$netsettings{'BLUE_NETMASK'}\")) ||\n";
3025 }
3026
3027 if (&Header::orange_used() && $netsettings{'ORANGE_DEV'}) {
3028 print FILE " (isInNet(host, \"$netsettings{'ORANGE_NETADDRESS'}\", \"$netsettings{'ORANGE_NETMASK'}\")) ||\n";
3029 }
3030
3031 print FILE <<END
488d1b7c 3032 (isInNet(host, "169.254.0.0", "255.255.0.0"))
ed38f89d
MT		 3033 )
3034 return "DIRECT";
3035
3036 else
3037
3038END
3039;
3040 if ($proxysettings{'ENABLE'} eq 'on')
3041 {
268292e7
CS		 3042 print FILE "if (\n";
3043 print FILE " (isInNet(myIpAddress(), \"$netsettings{'GREEN_NETADDRESS'}\", \"$netsettings{'GREEN_NETMASK'}\"))";
3044
3045 undef @templist;
3046 if (-e "$acl_src_subnets") {
3047 open(SUBNETS,"$acl_src_subnets");
3048 @templist = <SUBNETS>;
3049 close(SUBNETS);
3050 }
3051
3052 foreach (@templist)
3053 {
3054 @temp = split(/\//);
3055 if (
28c9dec6 3056 ($temp[0] ne $netsettings{'GREEN_NETADDRESS'}) && ($temp[1] ne $netsettings{'GREEN_NETMASK'}) &&
268292e7
CS		 3057 ($temp[0] ne $netsettings{'BLUE_NETADDRESS'}) && ($temp[1] ne $netsettings{'BLUE_NETMASK'})
3058 )
3059 {
3060 chomp $temp[1];
3061 print FILE " ||\n (isInNet(myIpAddress(), \"$temp[0]\", \"$temp[1]\"))";
3062 }
3063 }
3064
3065 print FILE "\n";
3066
ed38f89d 3067 print FILE <<END
268292e7
CS		 3068
3069
ed38f89d
MT		 3070 )
3071 return "PROXY $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3072END
3073;
3074 }
3075 if (($proxysettings{'ENABLE'} eq 'on') && ($proxysettings{'ENABLE_BLUE'} eq 'on') && ($netsettings{'BLUE_DEV'}))
3076 {
3077 print FILE "\n else\n\n";
3078 }
3079 if (($netsettings{'BLUE_DEV'}) && ($proxysettings{'ENABLE_BLUE'} eq 'on'))
3080 {
3081 print FILE <<END
3082if (
3083 (isInNet(myIpAddress(), "$netsettings{'BLUE_NETADDRESS'}", "$netsettings{'BLUE_NETMASK'}"))
3084 )
3085 return "PROXY $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3086END
3087;
3088 }
3089 }
3090 print FILE "}\n";
3091 close(FILE);
3092}
3093
3094# -------------------------------------------------------------------
3095
3096sub writeconfig
3097{
3098 my $authrealm;
3099 my $delaypools;
3100
363fb6af 3101 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} +
ed38f89d
MT		 3102 $proxysettings{'THROTTLING_GREEN_HOST'} +
3103 $proxysettings{'THROTTLING_BLUE_TOTAL'} +
3104 $proxysettings{'THROTTLING_BLUE_HOST'} gt 0)
3105 {
3106 $delaypools = 1; } else { $delaypools = 0;
3107 }
3108
3109 if ($proxysettings{'AUTH_REALM'} eq '')
3110 {
d12aede7 3111 $authrealm = "IPFire Advanced Proxy Server";
ed38f89d
MT		 3112 } else {
3113 $authrealm = $proxysettings{'AUTH_REALM'};
3114 }
3115
3116 $_ = $proxysettings{'UPSTREAM_PROXY'};
69491545 3117 my ($remotehost, $remoteport) = split(/:/,$_);
ed38f89d
MT		 3118
3119 if ($remoteport eq '') { $remoteport = 80; }
3120
3121 open(FILE, ">${General::swroot}/proxy/squid.conf");
3122 flock(FILE, 2);
3123 print FILE <<END
363fb6af
MT		 3124# Do not modify '${General::swroot}/proxy/squid.conf' directly since any changes
3125# you make will be overwritten whenever you resave proxy settings using the
3126# web interface!
3127#
3128# Instead, modify the file '$acl_include' and
3129# then restart the proxy service using the web interface. Changes made to the
3130# 'include.acl' file will propagate to the 'squid.conf' file at that time.
3131
ed38f89d
MT		 3132shutdown_lifetime 5 seconds
3133icp_port 0
3134
ed38f89d
MT		 3135END
3136 ;
8b417dd1
MT		 3137
3138 # Include file with user defined settings.
3139 if (-e "/etc/squid/squid.conf.pre.local") {
3140 print FILE "include /etc/squid/squid.conf.pre.local\n\n";
3141 }
3142
363fb6af 3143 print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
363fb6af
MT		 3144 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3145 print FILE "\n";
3146
0f6b6067
MT		 3147 if ($proxysettings{'TRANSPARENT'} eq 'on') {
3148 print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'TRANSPARENT_PORT'} intercept";
3149 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3150 print FILE "\n";
3151 }
3152
ed38f89d 3153 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
363fb6af 3154 print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
363fb6af
MT		 3155 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3156 print FILE "\n";
0f6b6067
MT		 3157
3158 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') {
3159 print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'TRANSPARENT_PORT'} intercept";
3160 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3161 print FILE "\n";
3162 }
ed38f89d
MT		 3163 }
3164
488d1b7c
CS		 3165 if ($proxysettings{'CACHE_SIZE'} > 0)
3166 {
3167 print FILE "\n";
ed38f89d 3168
488d1b7c
CS		 3169 if (!-z $acl_dst_nocache_dom) {
3170 print FILE "acl no_cache_domains dstdomain \"$acl_dst_nocache_dom\"\n";
3171 print FILE "cache deny no_cache_domains\n";
3172 }
3173 if (!-z $acl_dst_nocache_net) {
37273bc6 3174 print FILE "acl no_cache_ipaddr dst \"$acl_dst_nocache_net\"\n";
488d1b7c
CS		 3175 print FILE "cache deny no_cache_ipaddr\n";
3176 }
3177 if (!-z $acl_dst_nocache_url) {
3178 print FILE "acl no_cache_hosts url_regex -i \"$acl_dst_nocache_url\"\n";
3179 print FILE "cache deny no_cache_hosts\n";
3180 }
ed38f89d
MT		 3181 }
3182
3183 print FILE <<END
3184
3185cache_effective_user squid
363fb6af 3186umask 022
ed38f89d
MT		 3187
3188pid_filename /var/run/squid.pid
3189
3190cache_mem $proxysettings{'CACHE_MEM'} MB
ed38f89d
MT		 3191END
3192 ;
ab4a5a35 3193 print FILE "error_directory $errordir/$proxysettings{'ERR_LANGUAGE'}\n\n";
363fb6af 3194
ed38f89d 3195 if ($proxysettings{'OFFLINE_MODE'} eq 'on') { print FILE "offline_mode on\n\n"; }
6bea848d
JB		 3196 if ($proxysettings{'CACHE_DIGESTS'} eq 'on') { print FILE "digest_generation on\n\n"; } else { print FILE "digest_generation off\n\n"; }
3197
ed38f89d
MT		 3198 if ((!($proxysettings{'MEM_POLICY'} eq 'LRU')) || (!($proxysettings{'CACHE_POLICY'} eq 'LRU')))
3199 {
3200 if (!($proxysettings{'MEM_POLICY'} eq 'LRU'))
3201 {
3202 print FILE "memory_replacement_policy $proxysettings{'MEM_POLICY'}\n";
3203 }
3204 if (!($proxysettings{'CACHE_POLICY'} eq 'LRU'))
3205 {
3206 print FILE "cache_replacement_policy $proxysettings{'CACHE_POLICY'}\n";
3207 }
3208 print FILE "\n";
3209 }
3210
f0b7534f
MT		 3211 if ($proxysettings{'CACHE_SIZE'} > 0) {
3212 print FILE <<END
3213maximum_object_size $proxysettings{'MAX_SIZE'} KB
3214minimum_object_size $proxysettings{'MIN_SIZE'} KB
3215
3216cache_dir aufs /var/log/cache $proxysettings{'CACHE_SIZE'} $proxysettings{'L1_DIRS'} 256
3217END
3218 ;
3219 } else {
3220 print FILE "cache deny all\n\n";
3221 }
3222
3223 print FILE <<END
3224request_body_max_size $proxysettings{'MAX_OUTGOING_SIZE'} KB
3225END
3226 ;
3227
3228 if ($proxysettings{'MAX_INCOMING_SIZE'} > 0) {
3229 if (!-z $acl_src_unrestricted_ip) { print FILE "reply_body_max_size none IPFire_unrestricted_ips\n"; }
3230 if (!-z $acl_src_unrestricted_mac) { print FILE "reply_body_max_size none IPFire_unrestricted_mac\n"; }
3231 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3232 {
3233 if (!-z $extgrp) { print FILE "reply_body_max_size none for_extended_users\n"; }
3234 }
3235 }
3236
3237 if ( $proxysettings{'MAX_INCOMING_SIZE'} != '0' )
e7b7cbae 3238 {
f0b7534f 3239 print FILE "reply_body_max_size $proxysettings{'MAX_INCOMING_SIZE'} KB all\n\n";
e7b7cbae
AF		 3240 }
3241
ed38f89d
MT		 3242 if ($proxysettings{'LOGGING'} eq 'on')
3243 {
363fb6af 3244 print FILE <<END
754f508b 3245access_log stdio:/var/log/squid/access.log
ed38f89d
MT		 3246cache_log /var/log/squid/cache.log
3247cache_store_log none
3248END
3249 ;
754f508b 3250 if ($proxysettings{'LOGUSERAGENT'} eq 'on') { print FILE "access_log stdio:\/var\/log\/squid\/user_agent.log useragent\n"; }
ed38f89d
MT		 3251 if ($proxysettings{'LOGQUERY'} eq 'on') { print FILE "\nstrip_query_terms off\n"; }
3252 } else {
3253 print FILE <<END
363fb6af 3254access_log /dev/null
ed38f89d
MT		 3255cache_log /dev/null
3256cache_store_log none
3257END
3258 ;}
3259 print FILE <<END
3260
3261log_mime_hdrs off
3262END
3263 ;
3264
3265 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'on')
3266 {
363fb6af 3267 print FILE "forwarded_for on\n";
ed38f89d 3268 } else {
363fb6af 3269 print FILE "forwarded_for off\n";
ed38f89d 3270 }
363fb6af
MT		 3271 if ($proxysettings{'FORWARD_VIA'} eq 'on')
3272 {
3273 print FILE "via on\n";
3274 } else {
3275 print FILE "via off\n";
3276 }
3277 print FILE "\n";
ed38f89d
MT		 3278
3279 if ((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3280 {
3281 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3282 {
754f508b 3283 print FILE "auth_param basic program $authdir/basic_ncsa_auth $userdb\n";
ed38f89d
MT		 3284 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3285 print FILE "auth_param basic realm $authrealm\n";
3286 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3287 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3288 }
3289
3290 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
3291 {
725e3869 3292 print FILE "auth_param basic utf8 on\n";
754f508b 3293 print FILE "auth_param basic program $authdir/basic_ldap_auth -b \"$proxysettings{'LDAP_BASEDN'}\"";
ed38f89d
MT		 3294 if (!($proxysettings{'LDAP_BINDDN_USER'} eq '')) { print FILE " -D \"$proxysettings{'LDAP_BINDDN_USER'}\""; }
3295 if (!($proxysettings{'LDAP_BINDDN_PASS'} eq '')) { print FILE " -w $proxysettings{'LDAP_BINDDN_PASS'}"; }
3296 if ($proxysettings{'LDAP_TYPE'} eq 'ADS')
3297 {
3298 if ($proxysettings{'LDAP_GROUP'} eq '')
3299 {
3300 print FILE " -f \"(\&(objectClass=person)(sAMAccountName=\%s))\"";
3301 } else {
3302 print FILE " -f \"(\&(\&(objectClass=person)(sAMAccountName=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
3303 }
3304 print FILE " -u sAMAccountName -P";
3305 }
3306 if ($proxysettings{'LDAP_TYPE'} eq 'NDS')
3307 {
3308 if ($proxysettings{'LDAP_GROUP'} eq '')
3309 {
3310 print FILE " -f \"(\&(objectClass=person)(cn=\%s))\"";
3311 } else {
3312 print FILE " -f \"(\&(\&(objectClass=person)(cn=\%s))(groupMembership=$proxysettings{'LDAP_GROUP'}))\"";
3313 }
3314 print FILE " -u cn -P";
3315 }
3316 if (($proxysettings{'LDAP_TYPE'} eq 'V2') || ($proxysettings{'LDAP_TYPE'} eq 'V3'))
3317 {
3318 if ($proxysettings{'LDAP_GROUP'} eq '')
3319 {
3320 print FILE " -f \"(\&(objectClass=person)(uid=\%s))\"";
3321 } else {
3322 print FILE " -f \"(\&(\&(objectClass=person)(uid=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
3323 }
3324 if ($proxysettings{'LDAP_TYPE'} eq 'V2') { print FILE " -v 2"; }
3325 if ($proxysettings{'LDAP_TYPE'} eq 'V3') { print FILE " -v 3"; }
3326 print FILE " -u uid -P";
3327 }
3328 print FILE " $proxysettings{'LDAP_SERVER'}:$proxysettings{'LDAP_PORT'}\n";
3329 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3330 print FILE "auth_param basic realm $authrealm\n";
3331 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3332 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3333 }
3334
3335 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
3336 {
3337 if ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on')
3338 {
bbb7dc04 3339 print FILE "auth_param ntlm program $authdir/ntlm_smb_lm_auth $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_PDC'}";
ed38f89d
MT		 3340 if ($proxysettings{'NTLM_BDC'} eq '') { print FILE "\n"; } else { print FILE " $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_BDC'}\n"; }
3341 print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n";
ed38f89d
MT		 3342 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3343 } else {
754f508b 3344 print FILE "auth_param basic program $authdir/basic_msnt_auth\n";
ed38f89d
MT		 3345 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3346 print FILE "auth_param basic realm $authrealm\n";
3347 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3348 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3349
3350 open(MSNTCONF, ">$ntlmdir/msntauth.conf");
3351 flock(MSNTCONF,2);
3352 print MSNTCONF "server $proxysettings{'NTLM_PDC'}";
3353 if ($proxysettings{'NTLM_BDC'} eq '') { print MSNTCONF " $proxysettings{'NTLM_PDC'}"; } else { print MSNTCONF " $proxysettings{'NTLM_BDC'}"; }
3354 print MSNTCONF " $proxysettings{'NTLM_DOMAIN'}\n";
3355 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3356 {
3357 if ($proxysettings{'NTLM_USER_ACL'} eq 'positive')
3358 {
3359 print MSNTCONF "allowusers $ntlmdir/msntauth.allowusers\n";
3360 } else {
3361 print MSNTCONF "denyusers $ntlmdir/msntauth.denyusers\n";
28c9dec6 3362 }
ed38f89d
MT		 3363 }
3364 close(MSNTCONF);
3365 }
3366 }
3367
603248db
MT		 3368 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm-auth')
3369 {
b5674643
MT		 3370 print FILE "auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp";
3371 if ($proxysettings{'NTLM_AUTH_GROUP'}) {
3372 my $ntlm_auth_group = $proxysettings{'NTLM_AUTH_GROUP'};
3373 $ntlm_auth_group =~ s/\\/\+/;
3374
3375 print FILE " --require-membership-of=\"$ntlm_auth_group\"";
3376 }
3377 print FILE "\n";
3378
603248db
MT		 3379 print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n";
3380 }
3381
ed38f89d
MT		 3382 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
3383 {
754f508b 3384 print FILE "auth_param basic program $authdir/basic_radius_auth -h $proxysettings{'RADIUS_SERVER'} -p $proxysettings{'RADIUS_PORT'} ";
ed38f89d
MT		 3385 if (!($proxysettings{'RADIUS_IDENTIFIER'} eq '')) { print FILE "-i $proxysettings{'RADIUS_IDENTIFIER'} "; }
3386 print FILE "-w $proxysettings{'RADIUS_SECRET'}\n";
3387 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3388 print FILE "auth_param basic realm $authrealm\n";
3389 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3390 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3391 }
3392
3393 print FILE "\n";
3394 print FILE "acl for_inetusers proxy_auth REQUIRED\n";
3395 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') && ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on'))
3396 {
3397 if ((!-z "$ntlmdir/msntauth.allowusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
3398 {
3399 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.allowusers\"\n";
3400 }
3401 if ((!-z "$ntlmdir/msntauth.denyusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
3402 {
3403 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.denyusers\"\n";
3404 }
3405 }
3406 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
3407 {
3408 if ((!-z "$raddir/radauth.allowusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
3409 {
3410 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.allowusers\"\n";
3411 }
3412 if ((!-z "$raddir/radauth.denyusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
3413 {
3414 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.denyusers\"\n";
3415 }
3416 }
3417 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3418 {
3419 print FILE "\n";
3420 if (!-z $extgrp) { print FILE "acl for_extended_users proxy_auth \"$extgrp\"\n"; }
3421 if (!-z $disgrp) { print FILE "acl for_disabled_users proxy_auth \"$disgrp\"\n"; }
3422 }
3423 if (!($proxysettings{'AUTH_MAX_USERIP'} eq '')) { print FILE "\nacl concurrent max_user_ip -s $proxysettings{'AUTH_MAX_USERIP'}\n"; }
3424 print FILE "\n";
3425
488d1b7c
CS		 3426 if (!-z $acl_dst_noauth_net) { print FILE "acl to_ipaddr_without_auth dst \"$acl_dst_noauth_net\"\n"; }
3427 if (!-z $acl_dst_noauth_dom) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth_dom\"\n"; }
3428 if (!-z $acl_dst_noauth_url) { print FILE "acl to_hosts_without_auth url_regex -i \"$acl_dst_noauth_url\"\n"; }
363fb6af 3429 print FILE "\n";
488d1b7c 3430
ed38f89d
MT		 3431 }
3432
3433 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3434 {
3435 if ($proxysettings{'IDENT_REQUIRED'} eq 'on')
3436 {
3437 print FILE "acl for_inetusers ident REQUIRED\n";
3438 }
3439 if ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on')
3440 {
3441 if ((!-z "$identdir/identauth.allowusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
3442 {
3443 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.allowusers\"\n\n";
3444 }
3445 if ((!-z "$identdir/identauth.denyusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
3446 {
3447 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.denyusers\"\n\n";
3448 }
3449 }
488d1b7c
CS		 3450 if (!-z $acl_dst_noauth_net) { print FILE "acl to_ipaddr_without_auth dst \"$acl_dst_noauth_net\"\n"; }
3451 if (!-z $acl_dst_noauth_dom) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth_dom\"\n"; }
3452 if (!-z $acl_dst_noauth_url) { print FILE "acl to_hosts_without_auth url_regex -i \"$acl_dst_noauth_url\"\n"; }
363fb6af 3453 print FILE "\n";
ed38f89d
MT		 3454 }
3455
3456 if (($delaypools) && (!-z $acl_dst_throttle)) { print FILE "acl for_throttled_urls url_regex -i \"$acl_dst_throttle\"\n\n"; }
3457
3458 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE "acl with_allowed_useragents browser $browser_regexp\n\n"; }
3459
28c9dec6 3460 print FILE "acl within_timeframe time ";
ed38f89d
MT		 3461 if ($proxysettings{'TIME_MON'} eq 'on') { print FILE "M"; }
3462 if ($proxysettings{'TIME_TUE'} eq 'on') { print FILE "T"; }
3463 if ($proxysettings{'TIME_WED'} eq 'on') { print FILE "W"; }
3464 if ($proxysettings{'TIME_THU'} eq 'on') { print FILE "H"; }
3465 if ($proxysettings{'TIME_FRI'} eq 'on') { print FILE "F"; }
3466 if ($proxysettings{'TIME_SAT'} eq 'on') { print FILE "A"; }
3467 if ($proxysettings{'TIME_SUN'} eq 'on') { print FILE "S"; }
363fb6af
MT		 3468 print FILE " $proxysettings{'TIME_FROM_HOUR'}:";
3469 print FILE "$proxysettings{'TIME_FROM_MINUTE'}-";
3470 print FILE "$proxysettings{'TIME_TO_HOUR'}:";
3471 print FILE "$proxysettings{'TIME_TO_MINUTE'}\n\n";
ed38f89d
MT		 3472
3473 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
3474 print FILE "acl blocked_mimetypes rep_mime_type \"$mimetypes\"\n\n";
3475 }
3476
363fb6af 3477open (PORTS,"$acl_ports_ssl");
3ebc0da7 3478my @ssl_ports = <PORTS>;
363fb6af 3479close PORTS;
3ebc0da7
MT		 3480
3481if (@ssl_ports) {
3482 foreach (@ssl_ports) {
3483 print FILE "acl SSL_ports port $_";
3484 }
363fb6af 3485}
3ebc0da7 3486
363fb6af 3487open (PORTS,"$acl_ports_safe");
3ebc0da7 3488my @safe_ports = <PORTS>;
363fb6af 3489close PORTS;
3ebc0da7
MT		 3490
3491if (@safe_ports) {
3492 foreach (@safe_ports) {
3493 print FILE "acl Safe_ports port $_";
3494 }
363fb6af 3495}
3ebc0da7 3496
363fb6af
MT		 3497 print FILE <<END
3498
488d1b7c
CS		 3499acl IPFire_http port $http_port
3500acl IPFire_https port $https_port
3501acl IPFire_ips dst $netsettings{'GREEN_ADDRESS'}
3502acl IPFire_networks src "$acl_src_subnets"
3503acl IPFire_servers dst "$acl_src_subnets"
f09a0af5
AF		 3504acl IPFire_green_network src $green_cidr
3505acl IPFire_green_servers dst $green_cidr
ed38f89d
MT		 3506END
3507 ;
f09a0af5
AF		 3508 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPFire_blue_network src $blue_cidr\n"; }
3509 if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPFire_blue_servers dst $blue_cidr\n"; }
488d1b7c
CS		 3510 if (!-z $acl_src_banned_ip) { print FILE "acl IPFire_banned_ips src \"$acl_src_banned_ip\"\n"; }
3511 if (!-z $acl_src_banned_mac) { print FILE "acl IPFire_banned_mac arp \"$acl_src_banned_mac\"\n"; }
3512 if (!-z $acl_src_unrestricted_ip) { print FILE "acl IPFire_unrestricted_ips src \"$acl_src_unrestricted_ip\"\n"; }
3513 if (!-z $acl_src_unrestricted_mac) { print FILE "acl IPFire_unrestricted_mac arp \"$acl_src_unrestricted_mac\"\n"; }
ed38f89d
MT		 3514 print FILE <<END
3515acl CONNECT method CONNECT
3516END
3517 ;
3518
3519 if ($proxysettings{'CLASSROOM_EXT'} eq 'on') {
3520 print FILE <<END
3521
3522#Classroom extensions
488d1b7c
CS		 3523acl IPFire_no_access_ips src "$acl_src_noaccess_ip"
3524acl IPFire_no_access_mac arp "$acl_src_noaccess_mac"
ed38f89d
MT		 3525END
3526 ;
3527 print FILE "deny_info ";
ab4a5a35 3528 if (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED"))
363fb6af
MT		 3529 {
3530 print FILE "ERR_ACCESS_DISABLED";
3531 } else {
3532 print FILE "ERR_ACCESS_DENIED";
3533 }
488d1b7c 3534 print FILE " IPFire_no_access_ips\n";
ed38f89d 3535 print FILE "deny_info ";
ab4a5a35 3536 if (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED"))
363fb6af
MT		 3537 {
3538 print FILE "ERR_ACCESS_DISABLED";
3539 } else {
3540 print FILE "ERR_ACCESS_DENIED";
3541 }
488d1b7c 3542 print FILE " IPFire_no_access_mac\n";
ed38f89d
MT		 3543
3544 print FILE <<END
488d1b7c
CS		 3545http_access deny IPFire_no_access_ips
3546http_access deny IPFire_no_access_mac
ed38f89d
MT		 3547END
3548 ;
3549 }
3550
363fb6af
MT		 3551 #Insert acl file and replace __VAR__ with correct values
3552 my $blue_net = ''; #BLUE empty by default
3553 my $blue_ip = '';
3554 if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
f09a0af5 3555 $blue_net = "$blue_cidr";
363fb6af
MT		 3556 $blue_ip = "$netsettings{'BLUE_ADDRESS'}";
3557 }
3558 if (!-z $acl_include)
ed38f89d
MT		 3559 {
3560 open (ACL, "$acl_include");
488d1b7c 3561 print FILE "\n#Start of custom includes\n\n";
ed38f89d
MT		 3562 while (<ACL>) {
3563 $_ =~ s/__GREEN_IP__/$netsettings{'GREEN_ADDRESS'}/;
f09a0af5 3564 $_ =~ s/__GREEN_NET__/$green_cidr/;
ed38f89d
MT		 3565 $_ =~ s/__BLUE_IP__/$blue_ip/;
3566 $_ =~ s/__BLUE_NET__/$blue_net/;
363fb6af 3567 $_ =~ s/__PROXY_PORT__/$proxysettings{'PROXY_PORT'}/;
ed38f89d
MT		 3568 print FILE $_;
3569 }
488d1b7c 3570 print FILE "\n#End of custom includes\n";
ed38f89d
MT		 3571 close (ACL);
3572 }
3573 if ((!-z $extgrp) && ($proxysettings{'AUTH_METHOD'} eq 'ncsa') && ($proxysettings{'NCSA_BYPASS_REDIR'} eq 'on')) { print FILE "\nredirector_access deny for_extended_users\n"; }
dfee7582
SS		 3574
3575 # Check if squidclamav is enabled.
3576 if ($proxysettings{'ENABLE_CLAMAV'} eq 'on') {
3577 print FILE "\n#Settings for squidclamav:\n";
0f6b6067 3578 print FILE "http_port 127.0.0.1:$proxysettings{'PROXY_PORT'}\n";
dfee7582
SS		 3579 print FILE "acl purge method PURGE\n";
3580 print FILE "http_access deny to_localhost\n";
3581 print FILE "http_access allow localhost\n";
3582 print FILE "http_access allow purge localhost\n";
3583 print FILE "http_access deny purge\n";
3584 print FILE "url_rewrite_access deny localhost\n";
3585 }
3ebc0da7 3586 print FILE <<END;
ed38f89d
MT		 3587
3588#Access to squid:
3589#local machine, no restriction
3590http_access allow localhost
3591
3592#GUI admin if local machine connects
488d1b7c
CS		 3593http_access allow IPFire_ips IPFire_networks IPFire_http
3594http_access allow CONNECT IPFire_ips IPFire_networks IPFire_https
ed38f89d
MT		 3595
3596#Deny not web services
ed38f89d 3597END
3ebc0da7
MT		 3598
3599if (@safe_ports) {
3600 print FILE "http_access deny !Safe_ports\n";
3601}
3602
3603if (@ssl_ports) {
3604 print FILE "http_access deny CONNECT !SSL_ports\n";
3605}
ed38f89d
MT		 3606
3607if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3608{
3609print FILE "#Set ident ACLs\n";
3610if (!-z $identhosts)
3611 {
3612 print FILE "acl on_ident_aware_hosts src \"$identhosts\"\n";
3613 print FILE "ident_lookup_access allow on_ident_aware_hosts\n";
3614 print FILE "ident_lookup_access deny all\n";
3615 } else {
3616 print FILE "ident_lookup_access allow all\n";
3617 }
3618 print FILE "ident_timeout $proxysettings{'IDENT_TIMEOUT'} seconds\n\n";
3619}
3620
3621if ($delaypools) {
3622 print FILE "#Set download throttling\n";
3623
3624 if ($netsettings{'BLUE_DEV'})
3625 {
3626 print FILE "delay_pools 2\n";
3627 } else {
3628 print FILE "delay_pools 1\n";
3629 }
3630
3631 print FILE "delay_class 1 3\n";
3632 if ($netsettings{'BLUE_DEV'}) { print FILE "delay_class 2 3\n"; }
3633
3634 print FILE "delay_parameters 1 ";
3635 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 'unlimited')
3636 {
3637 print FILE "-1/-1";
3638 } else {
3639 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 125;
3640 print FILE "/";
3641 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 250;
3642 }
3643
3644 print FILE " -1/-1 ";
3645 if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 'unlimited')
3646 {
3647 print FILE "-1/-1";
3648 } else {
3649 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 125;
3650 print FILE "/";
3651 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 250;
3652 }
3653 print FILE "\n";
3654
3655 if ($netsettings{'BLUE_DEV'})
3656 {
3657 print FILE "delay_parameters 2 ";
3658 if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 'unlimited')
3659 {
3660 print FILE "-1/-1";
3661 } else {
3662 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 125;
3663 print FILE "/";
3664 print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 250;
3665 }
3666 print FILE " -1/-1 ";
3667 if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 'unlimited')
3668 {
3669 print FILE "-1/-1";
3670 } else {
3671 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 125;
3672 print FILE "/";
3673 print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 250;
3674 }
3675 print FILE "\n";
3676 }
3677
488d1b7c
CS		 3678 print FILE "delay_access 1 deny IPFire_ips\n";
3679 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 1 deny IPFire_unrestricted_ips\n"; }
3680 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 1 deny IPFire_unrestricted_mac\n"; }
ed38f89d
MT		 3681 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 1 deny for_extended_users\n"; }
3682
3683 if ($netsettings{'BLUE_DEV'})
3684 {
488d1b7c 3685 print FILE "delay_access 1 allow IPFire_green_network";
363fb6af 3686 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3687 print FILE "\n";
3688 print FILE "delay_access 1 deny all\n";
3689 } else {
3690 print FILE "delay_access 1 allow all";
363fb6af 3691 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3692 print FILE "\n";
3693 }
3694
3695 if ($netsettings{'BLUE_DEV'})
3696 {
488d1b7c
CS		 3697 print FILE "delay_access 2 deny IPFire_ips\n";
3698 if (!-z $acl_src_unrestricted_ip) { print FILE "delay_access 2 deny IPFire_unrestricted_ips\n"; }
3699 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 2 deny IPFire_unrestricted_mac\n"; }
ed38f89d 3700 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 2 deny for_extended_users\n"; }
488d1b7c 3701 print FILE "delay_access 2 allow IPFire_blue_network";
363fb6af 3702 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
ed38f89d
MT		 3703 print FILE "\n";
3704 print FILE "delay_access 2 deny all\n";
3705 }
3706
28c9dec6 3707 print FILE "delay_initial_bucket_level 100\n";
ed38f89d
MT		 3708 print FILE "\n";
3709}
9fb25b1c
MT		 3710
3711if ($proxysettings{'NO_PROXY_LOCAL'} eq 'on')
3712{
b34fdcae
AF		 3713 print FILE "#Prevent internal proxy access to Green except IPFire itself\n";
3714 print FILE "http_access deny IPFire_green_servers !IPFire_ips !IPFire_green_network\n\n";
9fb25b1c
MT		 3715}
3716
3717if ($proxysettings{'NO_PROXY_LOCAL_BLUE'} eq 'on')
3718{
b34fdcae 3719 print FILE "#Prevent internal proxy access from Blue except IPFire itself\n";
488d1b7c 3720 print FILE "http_access allow IPFire_blue_network IPFire_blue_servers\n";
b34fdcae 3721 print FILE "http_access deny IPFire_blue_network !IPFire_ips IPFire_servers\n\n";
9fb25b1c
MT		 3722}
3723
ed38f89d
MT		 3724 print FILE <<END
3725#Set custom configured ACLs
3726END
3727 ;
488d1b7c
CS		 3728 if (!-z $acl_src_banned_ip) { print FILE "http_access deny IPFire_banned_ips\n"; }
3729 if (!-z $acl_src_banned_mac) { print FILE "http_access deny IPFire_banned_mac\n"; }
ed38f89d
MT		 3730
3731 if ((!-z $acl_dst_noauth) && (!($proxysettings{'AUTH_METHOD'} eq 'none')))
3732 {
3733 if (!-z $acl_src_unrestricted_ip)
3734 {
488d1b7c
CS		 3735 if (!-z $acl_dst_noauth_net) { print FILE "http_access allow IPFire_unrestricted_ips to_ipaddr_without_auth\n"; }
3736 if (!-z $acl_dst_noauth_dom) { print FILE "http_access allow IPFire_unrestricted_ips to_domains_without_auth\n"; }
3737 if (!-z $acl_dst_noauth_url) { print FILE "http_access allow IPFire_unrestricted_ips to_hosts_without_auth\n"; }
ed38f89d
MT		 3738 }
3739 if (!-z $acl_src_unrestricted_mac)
3740 {
488d1b7c
CS		 3741 if (!-z $acl_dst_noauth_net) { print FILE "http_access allow IPFire_unrestricted_mac to_ipaddr_without_auth\n"; }
3742 if (!-z $acl_dst_noauth_dom) { print FILE "http_access allow IPFire_unrestricted_mac to_domains_without_auth\n"; }
3743 if (!-z $acl_dst_noauth_url) { print FILE "http_access allow IPFire_unrestricted_mac to_hosts_without_auth\n"; }
3744 }
3745 if (!-z $acl_dst_noauth_net)
3746 {
3747 print FILE "http_access allow IPFire_networks";
3748 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3749 print FILE " !within_timeframe";
3750 } else {
3751 print FILE " within_timeframe"; }
3752 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3753 print FILE " to_ipaddr_without_auth\n";
3754 }
3755 if (!-z $acl_dst_noauth_dom)
3756 {
3757 print FILE "http_access allow IPFire_networks";
3758 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3759 print FILE " !within_timeframe";
3760 } else {
3761 print FILE " within_timeframe"; }
3762 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3763 print FILE " to_domains_without_auth\n";
3764 }
3765 if (!-z $acl_dst_noauth_url)
3766 {
3767 print FILE "http_access allow IPFire_networks";
3768 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3769 print FILE " !within_timeframe";
3770 } else {
3771 print FILE " within_timeframe"; }
3772 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3773 print FILE " to_hosts_without_auth\n";
ed38f89d 3774 }
ed38f89d
MT		 3775 }
3776
3777 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on'))
3778 {
3779 print FILE "http_access deny !for_inetusers";
3780 if (!-z $identhosts) { print FILE " on_ident_aware_hosts"; }
3781 print FILE "\n";
3782 }
3783
3784 if (
3785 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3786 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on') &&
3787 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3788 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3789 (!-z "$identdir/identauth.denyusers")
3790 )
3791 {
3792 print FILE "http_access deny for_acl_users";
3793 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3794 print FILE "\n";
3795 }
3796
3797 if (!-z $acl_src_unrestricted_ip)
3798 {
488d1b7c 3799 print FILE "http_access allow IPFire_unrestricted_ips";
ed38f89d
MT		 3800 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3801 {
3802 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3803 {
3804 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3805 }
3806 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3807 {
3808 print FILE " for_inetusers";
3809 }
3810 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3811 {
3812 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
28c9dec6 3813 {
ed38f89d
MT		 3814 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3815 {
3816 print FILE " for_acl_users";
3817 }
3818 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3819 {
3820 print FILE " !for_acl_users";
3821 }
3822 } else { print FILE " for_inetusers"; }
3823 }
3824 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3825 {
ed38f89d 3826 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3827 {
ed38f89d
MT		 3828 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3829 {
3830 print FILE " for_acl_users";
3831 }
3832 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3833 {
3834 print FILE " !for_acl_users";
3835 }
3836 } else { print FILE " for_inetusers"; }
3837 }
3838 }
3839 print FILE "\n";
3840 }
3841
3842 if (!-z $acl_src_unrestricted_mac)
3843 {
488d1b7c 3844 print FILE "http_access allow IPFire_unrestricted_mac";
ed38f89d
MT		 3845 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3846 {
3847 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3848 {
3849 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3850 }
3851 if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3852 {
3853 print FILE " for_inetusers";
3854 }
3855 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3856 {
3857 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
28c9dec6 3858 {
ed38f89d
MT		 3859 if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3860 {
3861 print FILE " for_acl_users";
3862 }
3863 if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3864 {
3865 print FILE " !for_acl_users";
3866 }
3867 } else { print FILE " for_inetusers"; }
3868 }
3869 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
363fb6af 3870 {
ed38f89d 3871 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
363fb6af 3872 {
ed38f89d
MT		 3873 if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3874 {
3875 print FILE " for_acl_users";
3876 }
3877 if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3878 {
3879 print FILE " !for_acl_users";
3880 }
3881 } else { print FILE " for_inetusers"; }
3882 }
3883 }
3884 print FILE "\n";
3885 }
3886
3887 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3888 {
3889 if (!-z $disgrp) { print FILE "http_access deny for_disabled_users\n"; }
488d1b7c 3890 if (!-z $extgrp) { print FILE "http_access allow IPFire_networks for_extended_users\n"; }
ed38f89d
MT		 3891 }
3892
3893 if (
3894 (
3895 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3896 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3897 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3898 ($proxysettings{'NTLM_USER_ACL'} eq 'negative') &&
3899 (!-z "$ntlmdir/msntauth.denyusers")
3900 )
3901 ||
3902 (
3903 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3904 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3905 ($proxysettings{'RADIUS_USER_ACL'} eq 'negative') &&
3906 (!-z "$raddir/radauth.denyusers")
3907 )
3908 ||
3909 (
3910 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3911 ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'off') &&
3912 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3913 ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3914 (!-z "$identdir/identauth.denyusers")
3915 )
3916 )
3917 {
3918 print FILE "http_access deny for_acl_users";
3919 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3920 print FILE "\n";
3921 }
3922
3923 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && (!-z "$identhosts"))
3924 {
3925 print FILE "http_access allow";
3926 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3927 print FILE " !within_timeframe";
3928 } else {
3929 print FILE " within_timeframe"; }
3930 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3931 print FILE " !on_ident_aware_hosts\n";
3932 }
3933
488d1b7c 3934 print FILE "http_access allow IPFire_networks";
ed38f89d
MT		 3935 if (
3936 (
3937 ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3938 ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3939 ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3940 ($proxysettings{'NTLM_USER_ACL'} eq 'positive') &&
3941 (!-z "$ntlmdir/msntauth.allowusers")
3942 )
3943 ||
3944 (
3945 ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3946 ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3947 ($proxysettings{'RADIUS_USER_ACL'} eq 'positive') &&
3948 (!-z "$raddir/radauth.allowusers")
3949 )
3950 ||
3951 (
3952 ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3953 ($proxysettings{'IDENT_REQUIRED'} eq 'on') &&
3954 ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3955 ($proxysettings{'IDENT_USER_ACL'} eq 'positive') &&
3956 (!-z "$identdir/identauth.allowusers")
3957 )
3958 )
3959 {
3960 print FILE " for_acl_users";
3961 } elsif (((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident'))) ||
3962 (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on'))) {
3963 print FILE " for_inetusers";
3964 }
3965 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && (!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3966 {
3967 print FILE " !concurrent";
3968 }
3969 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3970 print FILE " !within_timeframe";
3971 } else {
3972 print FILE " within_timeframe"; }
3973 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3974 print FILE "\n";
3975
3976 print FILE "http_access deny all\n\n";
3977
3978 if (($proxysettings{'FORWARD_IPADDRESS'} eq 'off') || ($proxysettings{'FORWARD_VIA'} eq 'off') ||
3979 (!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
3980 {
3981 print FILE "#Strip HTTP Header\n";
3982
3983 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'off')
3984 {
30793ae1
AF		 3985 print FILE "request_header_access X-Forwarded-For deny all\n";
3986 print FILE "reply_header_access X-Forwarded-For deny all\n";
ed38f89d
MT		 3987 }
3988 if ($proxysettings{'FORWARD_VIA'} eq 'off')
3989 {
30793ae1
AF		 3990 print FILE "request_header_access Via deny all\n";
3991 print FILE "reply_header_access Via deny all\n";
ed38f89d
MT		 3992 }
3993 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
3994 {
30793ae1
AF		 3995 print FILE "request_header_access User-Agent deny all\n";
3996 print FILE "reply_header_access User-Agent deny all\n";
ed38f89d
MT		 3997 }
3998 if (!($proxysettings{'FAKE_REFERER'} eq ''))
3999 {
30793ae1
AF		 4000 print FILE "request_header_access Referer deny all\n";
4001 print FILE "reply_header_access Referer deny all\n";
ed38f89d
MT		 4002 }
4003
4004 print FILE "\n";
4005
4006 if ((!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
4007 {
4008 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
4009 {
4010 print FILE "header_replace User-Agent $proxysettings{'FAKE_USERAGENT'}\n";
4011 }
4012 if (!($proxysettings{'FAKE_REFERER'} eq ''))
4013 {
4014 print FILE "header_replace Referer $proxysettings{'FAKE_REFERER'}\n";
4015 }
4016 print FILE "\n";
4017 }
4018 }
4019
363fb6af
MT		 4020 if ($proxysettings{'SUPPRESS_VERSION'} eq 'on') { print FILE "httpd_suppress_version_string on\n\n" }
4021
ed38f89d 4022 if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
488d1b7c
CS		 4023 if (!-z $acl_src_unrestricted_ip) { print FILE "http_reply_access allow IPFire_unrestricted_ips\n"; }
4024 if (!-z $acl_src_unrestricted_mac) { print FILE "http_reply_access allow IPFire_unrestricted_mac\n"; }
ed38f89d
MT		 4025 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
4026 {
4027 if (!-z $extgrp) { print FILE "http_reply_access allow for_extended_users\n"; }
4028 }
4029 print FILE "http_reply_access deny blocked_mimetypes\n";
4030 print FILE "http_reply_access allow all\n\n";
4031 }
4032
ed38f89d
MT		 4033 print FILE "visible_hostname";
4034 if ($proxysettings{'VISIBLE_HOSTNAME'} eq '')
4035 {
4036 print FILE " $mainsettings{'HOSTNAME'}.$mainsettings{'DOMAINNAME'}\n\n";
4037 } else {
4038 print FILE " $proxysettings{'VISIBLE_HOSTNAME'}\n\n";
4039 }
4040
fe1656d2
CS		 4041 if (!($proxysettings{'ADMIN_MAIL_ADDRESS'} eq '')) { print FILE "cache_mgr $proxysettings{'ADMIN_MAIL_ADDRESS'}\n"; }
4042 if (!($proxysettings{'ADMIN_PASSWORD'} eq '')) { print FILE "cachemgr_passwd $proxysettings{'ADMIN_PASSWORD'} all\n"; }
4043 print FILE "\n";
4044
4045 print FILE "max_filedescriptors $proxysettings{'FILEDESCRIPTORS'}\n\n";
ed38f89d
MT		 4046
4047 # Write the parent proxy info, if needed.
4048 if ($remotehost ne '')
4049 {
ed38f89d 4050 print FILE "cache_peer $remotehost parent $remoteport 3130 default no-query";
363fb6af
MT		 4051
4052 # Enter authentication for the parent cache. Option format is
4053 # login=user:password ($proxy1='YES')
4054 # login=PASS ($proxy1='PASS')
4055 # login=*:password ($proxysettings{'FORWARD_USERNAME'} eq 'on')
4056 if (($proxy1 eq 'YES') || ($proxy1 eq 'PASS'))
4057 {
4058 print FILE " login=$proxysettings{'UPSTREAM_USER'}";
4059 if ($proxy1 eq 'YES') { print FILE ":$proxysettings{'UPSTREAM_PASSWORD'}"; }
ed38f89d 4060 }
363fb6af
MT		 4061 elsif ($proxysettings{'FORWARD_USERNAME'} eq 'on') { print FILE " login=*:password"; }
4062
488d1b7c
CS		 4063 print FILE "\nalways_direct allow IPFire_ips\n";
4064 print FILE "never_direct allow all\n\n";
ed38f89d 4065 }
3900a6c7 4066 if (($proxysettings{'ENABLE_FILTER'} eq 'on') || ($proxysettings{'ENABLE_UPDXLRATOR'} eq 'on') || ($proxysettings{'ENABLE_CLAMAV'} eq 'on'))
363fb6af
MT		 4067 {
4068 print FILE "url_rewrite_program /usr/sbin/redirect_wrapper\n";
62459123 4069 print FILE "url_rewrite_children $proxysettings{'CHILDREN'}\n\n";
ed38f89d 4070 }
eb3b93cc
MT		 4071
4072 # Include file with user defined settings.
4073 if (-e "/etc/squid/squid.conf.local") {
4074 print FILE "include /etc/squid/squid.conf.local\n";
4075 }
ed38f89d 4076 close FILE;
dfee7582
SS		 4077
4078 # Proxy settings for squidclamav - if installed.
4079 #
4080 # Check if squidclamav is enabled.
4081 if ($proxysettings{'ENABLE_CLAMAV'} eq 'on') {
4082
4083 my $configfile='/etc/squidclamav.conf';
4084
4085 my $data = &General::read_file_utf8($configfile);
4086 $data =~ s/squid_port [0-9]+/squid_port $proxysettings{'PROXY_PORT'}/g;
4087 &General::write_file_utf8($configfile, $data);
4088 }
ed38f89d
MT		 4089}
4090
4091# -------------------------------------------------------------------
4092
4093sub adduser
4094{
4095 my ($str_user, $str_pass, $str_group) = @_;
4096 my @groupmembers=();
4097
4098 if ($str_pass eq 'lEaVeAlOnE')
4099 {
4100 open(FILE, "$userdb");
4101 @groupmembers = <FILE>;
4102 close(FILE);
4103 foreach $line (@groupmembers) { if ($line =~ /^$str_user:/i) { $str_pass = substr($line,index($line,":")); } }
4104 &deluser($str_user);
4105 open(FILE, ">>$userdb");
4106 flock FILE,2;
4107 print FILE "$str_user$str_pass";
4108 close(FILE);
4109 } else {
4110 &deluser($str_user);
d12aede7 4111 system("/usr/sbin/htpasswd -b $userdb $str_user $str_pass");
ed38f89d
MT		 4112 }
4113
4114 if ($str_group eq 'standard') { open(FILE, ">>$stdgrp");
4115 } elsif ($str_group eq 'extended') { open(FILE, ">>$extgrp");
4116 } elsif ($str_group eq 'disabled') { open(FILE, ">>$disgrp"); }
4117 flock FILE, 2;
4118 print FILE "$str_user\n";
4119 close(FILE);
4120
4121 return;
4122}
4123
4124# -------------------------------------------------------------------
4125
4126sub deluser
4127{
4128 my ($str_user) = @_;
4129 my $groupfile='';
4130 my @groupmembers=();
4131 my @templist=();
4132
4133 foreach $groupfile ($stdgrp, $extgrp, $disgrp)
4134 {
4135 undef @templist;
4136 open(FILE, "$groupfile");
4137 @groupmembers = <FILE>;
4138 close(FILE);
4139 foreach $line (@groupmembers) { if (!($line =~ /^$str_user$/i)) { push(@templist, $line); } }
4140 open(FILE, ">$groupfile");
4141 flock FILE, 2;
4142 print FILE @templist;
4143 close(FILE);
4144 }
4145
4146 undef @templist;
4147 open(FILE, "$userdb");
4148 @groupmembers = <FILE>;
4149 close(FILE);
4150 foreach $line (@groupmembers) { if (!($line =~ /^$str_user:/i)) { push(@templist, $line); } }
4151 open(FILE, ">$userdb");
4152 flock FILE, 2;
4153 print FILE @templist;
4154 close(FILE);
4155
4156 return;
4157}
ac1cfefa 4158
ed38f89d 4159# -------------------------------------------------------------------
fe1656d2
CS		 4160
4161sub writecachemgr
4162{
4163 open(FILE, ">${General::swroot}/proxy/cachemgr.conf");
4164 flock(FILE, 2);
4165 print FILE "$netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}\n";
4166 print FILE "localhost";
d9f2cfa4 4167 close(FILE);
fe1656d2
CS		 4168 return;
4169}
4170
bd027d94 4171# -------------------------------------------------------------------
Peter's tree of IPFire 2.x