html/cgi-bin/proxy.cgi

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007-2013  IPFire Team  <info@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21 #
  22 # (c) 2004-2009 marco.s - http://www.advproxy.net
  23 #
  24 # This code is distributed under the terms of the GPL
  25 #
  26 # $Id: advproxy.cgi,v 3.0.2 2009/02/04 00:00:00 marco.s Exp $
  27 #
  28
  29 use strict;
  30 use Apache::Htpasswd;
  31
  32 # enable only the following on debugging purpose
  33 #use warnings;
  34 #use CGI::Carp 'fatalsToBrowser';
  35
  36 require '/var/ipfire/general-functions.pl';
  37 require "${General::swroot}/lang.pl";
  38 require "${General::swroot}/header.pl";
  39
  40 my @squidversion = `/usr/sbin/squid -v`;
  41 my $http_port='81';
  42 my $https_port='444';
  43
  44 my %color = ();
  45 my %mainsettings = ();
  46 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
  47 &General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
  48
  49 my %proxysettings=();
  50 my %netsettings=();
  51 my %filtersettings=();
  52 my %xlratorsettings=();
  53 my %stdproxysettings=();
  54 my %mainsettings=();
  55
  56 my %checked=();
  57 my %selected=();
  58
  59 my @throttle_limits=(64,128,256,384,512,768,1024,1280,1536,1792,2048,2560,3072,3584,4096,5120,6144,7168,8192,10240,12288,16384,20480);
  60 my $throttle_binary="7z|arj|bin|bz2|cab|exe|gz|lzh|rar|sea|tar|tgz|xz|zip";
  61 my $throttle_dskimg="b5t|bin|bwt|ccd|cdi|cue|gho|img|iso|mds|nrg|pqi|vmdk";
  62 my $throttle_mmedia="aiff?|asf|avi|divx|mov|mp3|mpe?g|ogg|qt|ra?m|ts|vob";
  63
  64 my $def_ports_safe="80 # http\n21 # ftp\n443 # https\n563 # snews\n70 # gopher\n210 # wais\n1025-65535 # unregistered ports\n280 # http-mgmt\n488 # gss-http\n591 # filemaker\n777 # multiling http\n800 # Squids port (for icons)\n";
  65 my $def_ports_ssl="443 # https\n563 # snews\n";
  66
  67 my @useragent=();
  68 my @useragentlist=();
  69
  70 my $hintcolour='#FFFFCC';
  71 my $ncsa_buttontext='';
  72 my $language='';
  73 my $i=0;
  74 my $n=0;
  75 my $id=0;
  76 my $line='';
  77 my $user='';
  78 my @userlist=();
  79 my @grouplist=();
  80 my @temp=();
  81 my @templist=();
  82
  83 my $cachemem=0;
  84 my $proxy1='';
  85 my $proxy2='';
  86 my $browser_regexp='';
  87 my $needhup = 0;
  88 my $errormessage='';
  89
  90 my $acldir   = "${General::swroot}/proxy/advanced/acls";
  91 my $ncsadir  = "${General::swroot}/proxy/advanced/ncsa";
  92 my $ntlmdir  = "${General::swroot}/proxy/advanced/ntlm";
  93 my $raddir   = "${General::swroot}/proxy/advanced/radius";
  94 my $identdir = "${General::swroot}/proxy/advanced/ident";
  95 my $credir   = "${General::swroot}/proxy/advanced/cre";
  96
  97 my $userdb = "$ncsadir/passwd";
  98 my $stdgrp = "$ncsadir/standard.grp";
  99 my $extgrp = "$ncsadir/extended.grp";
 100 my $disgrp = "$ncsadir/disabled.grp";
 101
 102 my $browserdb = "${General::swroot}/proxy/advanced/useragents";
 103 my $mimetypes = "${General::swroot}/proxy/advanced/mimetypes";
 104 my $throttled_urls = "${General::swroot}/proxy/advanced/throttle";
 105
 106 my $cre_enabled = "${General::swroot}/proxy/advanced/cre/enable";
 107 my $cre_groups  = "${General::swroot}/proxy/advanced/cre/classrooms";
 108 my $cre_svhosts = "${General::swroot}/proxy/advanced/cre/supervisors";
 109
 110 my $identhosts = "$identdir/hosts";
 111
 112 my $authdir  = "/usr/lib/squid/";
 113 my $errordir = "/usr/lib/squid/errors";
 114
 115 my $acl_src_subnets = "$acldir/src_subnets.acl";
 116 my $acl_src_banned_ip  = "$acldir/src_banned_ip.acl";
 117 my $acl_src_banned_mac = "$acldir/src_banned_mac.acl";
 118 my $acl_src_unrestricted_ip  = "$acldir/src_unrestricted_ip.acl";
 119 my $acl_src_unrestricted_mac = "$acldir/src_unrestricted_mac.acl";
 120 my $acl_src_noaccess_ip  = "$acldir/src_noaccess_ip.acl";
 121 my $acl_src_noaccess_mac = "$acldir/src_noaccess_mac.acl";
 122 my $acl_dst_noauth   = "$acldir/dst_noauth.acl";
 123 my $acl_dst_noauth_dom = "$acldir/dst_noauth_dom.acl";
 124 my $acl_dst_noauth_net = "$acldir/dst_noauth_net.acl";
 125 my $acl_dst_noauth_url = "$acldir/dst_noauth_url.acl";
 126 my $acl_dst_nocache  = "$acldir/dst_nocache.acl";
 127 my $acl_dst_nocache_dom = "$acldir/dst_nocache_dom.acl";
 128 my $acl_dst_nocache_net = "$acldir/dst_nocache_net.acl";
 129 my $acl_dst_nocache_url = "$acldir/dst_nocache_url.acl";
 130 my $acl_dst_throttle = "$acldir/dst_throttle.acl";
 131 my $acl_ports_safe = "$acldir/ports_safe.acl";
 132 my $acl_ports_ssl  = "$acldir/ports_ssl.acl";
 133 my $acl_include = "$acldir/include.acl";
 134
 135 my $updaccelversion  = 'n/a';
 136 my $urlfilterversion = 'n/a';
 137
 138 unless (-d "$acldir")   { mkdir("$acldir"); }
 139 unless (-d "$ncsadir")  { mkdir("$ncsadir"); }
 140 unless (-d "$ntlmdir")  { mkdir("$ntlmdir"); }
 141 unless (-d "$raddir")   { mkdir("$raddir"); }
 142 unless (-d "$identdir") { mkdir("$identdir"); }
 143 unless (-d "$credir")   { mkdir("$credir"); }
 144
 145 unless (-e $cre_groups)  { system("touch $cre_groups"); }
 146 unless (-e $cre_svhosts) { system("touch $cre_svhosts"); }
 147
 148 unless (-e $userdb) { system("touch $userdb"); }
 149 unless (-e $stdgrp) { system("touch $stdgrp"); }
 150 unless (-e $extgrp) { system("touch $extgrp"); }
 151 unless (-e $disgrp) { system("touch $disgrp"); }
 152
 153 unless (-e $acl_src_subnets)    { system("touch $acl_src_subnets"); }
 154 unless (-e $acl_src_banned_ip)  { system("touch $acl_src_banned_ip"); }
 155 unless (-e $acl_src_banned_mac) { system("touch $acl_src_banned_mac"); }
 156 unless (-e $acl_src_unrestricted_ip)  { system("touch $acl_src_unrestricted_ip"); }
 157 unless (-e $acl_src_unrestricted_mac) { system("touch $acl_src_unrestricted_mac"); }
 158 unless (-e $acl_src_noaccess_ip)  { system("touch $acl_src_noaccess_ip"); }
 159 unless (-e $acl_src_noaccess_mac) { system("touch $acl_src_noaccess_mac"); }
 160 unless (-e $acl_dst_noauth)     { system("touch $acl_dst_noauth"); }
 161 unless (-e $acl_dst_noauth_dom) { system("touch $acl_dst_noauth_dom"); }
 162 unless (-e $acl_dst_noauth_net) { system("touch $acl_dst_noauth_net"); }
 163 unless (-e $acl_dst_noauth_url) { system("touch $acl_dst_noauth_url"); }
 164 unless (-e $acl_dst_nocache)     { system("touch $acl_dst_nocache"); }
 165 unless (-e $acl_dst_nocache_dom) { system("touch $acl_dst_nocache_dom"); }
 166 unless (-e $acl_dst_nocache_net) { system("touch $acl_dst_nocache_net"); }
 167 unless (-e $acl_dst_nocache_url) { system("touch $acl_dst_nocache_url"); }
 168 unless (-e $acl_dst_throttle)  { system("touch $acl_dst_throttle"); }
 169 unless (-e $acl_ports_safe) { system("touch $acl_ports_safe"); }
 170 unless (-e $acl_ports_ssl)  { system("touch $acl_ports_ssl"); }
 171 unless (-e $acl_include) { system("touch $acl_include"); }
 172
 173 unless (-e $browserdb) { system("touch $browserdb"); }
 174 unless (-e $mimetypes) { system("touch $mimetypes"); }
 175
 176 my $HAVE_NTLM_AUTH = (-e "/usr/bin/ntlm_auth");
 177
 178 open FILE, $browserdb;
 179 @useragentlist = sort { reverse(substr(reverse(substr($a,index($a,',')+1)),index(reverse(substr($a,index($a,','))),',')+1)) cmp reverse(substr(reverse(substr($b,index($b,',')+1)),index(reverse(substr($b,index($b,','))),',')+1))} grep !/(^$)|(^\s*#)/,<FILE>;
 180 close(FILE);
 181
 182 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
 183 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
 184
 185 my $green_cidr = &General::ipcidr("$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}");
 186 my $blue_cidr = "";
 187 if (&Header::blue_used() && $netsettings{'BLUE_DEV'}) {
 188         $blue_cidr = &General::ipcidr("$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}");
 189 }
 190
 191 &Header::showhttpheaders();
 192
 193 $proxysettings{'ACTION'} = '';
 194 $proxysettings{'VALID'} = '';
 195
 196 $proxysettings{'ENABLE'} = 'off';
 197 $proxysettings{'ENABLE_BLUE'} = 'off';
 198 $proxysettings{'TRANSPARENT'} = 'off';
 199 $proxysettings{'TRANSPARENT_BLUE'} = 'off';
 200 $proxysettings{'PROXY_PORT'} = '800';
 201 $proxysettings{'TRANSPARENT_PORT'} = '3128';
 202 $proxysettings{'VISIBLE_HOSTNAME'} = '';
 203 $proxysettings{'ADMIN_MAIL_ADDRESS'} = '';
 204 $proxysettings{'ADMIN_PASSWORD'} = '';
 205 $proxysettings{'ERR_LANGUAGE'} = 'German';
 206 $proxysettings{'ERR_DESIGN'} = 'ipfire';
 207 $proxysettings{'SUPPRESS_VERSION'} = 'off';
 208 $proxysettings{'FORWARD_VIA'} = 'off';
 209 $proxysettings{'FORWARD_IPADDRESS'} = 'off';
 210 $proxysettings{'FORWARD_USERNAME'} = 'off';
 211 $proxysettings{'NO_CONNECTION_AUTH'} = 'off';
 212 $proxysettings{'UPSTREAM_PROXY'} = '';
 213 $proxysettings{'UPSTREAM_USER'} = '';
 214 $proxysettings{'UPSTREAM_PASSWORD'} = '';
 215 $proxysettings{'LOGGING'} = 'off';
 216 $proxysettings{'CACHEMGR'} = 'off';
 217 $proxysettings{'LOGQUERY'} = 'off';
 218 $proxysettings{'LOGUSERAGENT'} = 'off';
 219 $proxysettings{'FILEDESCRIPTORS'} = '16384';
 220 $proxysettings{'CACHE_MEM'} = '2';
 221 $proxysettings{'CACHE_SIZE'} = '50';
 222 $proxysettings{'MAX_SIZE'} = '4096';
 223 $proxysettings{'MIN_SIZE'} = '0';
 224 $proxysettings{'MEM_POLICY'} = 'LRU';
 225 $proxysettings{'CACHE_POLICY'} = 'LRU';
 226 $proxysettings{'L1_DIRS'} = '16';
 227 $proxysettings{'OFFLINE_MODE'} = 'off';
 228 $proxysettings{'CACHE_DIGESTS'} = 'off';
 229 $proxysettings{'CLASSROOM_EXT'} = 'off';
 230 $proxysettings{'SUPERVISOR_PASSWORD'} = '';
 231 $proxysettings{'NO_PROXY_LOCAL'} = 'off';
 232 $proxysettings{'NO_PROXY_LOCAL_BLUE'} = 'off';
 233 $proxysettings{'TIME_ACCESS_MODE'} = 'allow';
 234 $proxysettings{'TIME_FROM_HOUR'} = '00';
 235 $proxysettings{'TIME_FROM_MINUTE'} = '00';
 236 $proxysettings{'TIME_TO_HOUR'} = '24';
 237 $proxysettings{'TIME_TO_MINUTE'} = '00';
 238 $proxysettings{'MAX_OUTGOING_SIZE'} = '0';
 239 $proxysettings{'MAX_INCOMING_SIZE'} = '0';
 240 $proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';
 241 $proxysettings{'THROTTLING_GREEN_HOST'} = 'unlimited';
 242 $proxysettings{'THROTTLING_BLUE_TOTAL'} = 'unlimited';
 243 $proxysettings{'THROTTLING_BLUE_HOST'} = 'unlimited';
 244 $proxysettings{'THROTTLE_BINARY'} = 'off';
 245 $proxysettings{'THROTTLE_DSKIMG'} = 'off';
 246 $proxysettings{'THROTTLE_MMEDIA'} = 'off';
 247 $proxysettings{'ENABLE_MIME_FILTER'} = 'off';
 248 $proxysettings{'ENABLE_BROWSER_CHECK'} = 'off';
 249 $proxysettings{'FAKE_USERAGENT'} = '';
 250 $proxysettings{'FAKE_REFERER'} = '';
 251 $proxysettings{'AUTH_METHOD'} = 'none';
 252 $proxysettings{'AUTH_REALM'} = '';
 253 $proxysettings{'AUTH_MAX_USERIP'} = '';
 254 $proxysettings{'AUTH_CACHE_TTL'} = '60';
 255 $proxysettings{'AUTH_IPCACHE_TTL'} = '0';
 256 $proxysettings{'AUTH_CHILDREN'} = '5';
 257 $proxysettings{'NCSA_MIN_PASS_LEN'} = '6';
 258 $proxysettings{'NCSA_BYPASS_REDIR'} = 'off';
 259 $proxysettings{'NCSA_USERNAME'} = '';
 260 $proxysettings{'NCSA_GROUP'} = '';
 261 $proxysettings{'NCSA_PASS'} = '';
 262 $proxysettings{'NCSA_PASS_CONFIRM'} = '';
 263 $proxysettings{'LDAP_BASEDN'} = '';
 264 $proxysettings{'LDAP_TYPE'} = 'ADS';
 265 $proxysettings{'LDAP_SERVER'} = '';
 266 $proxysettings{'LDAP_PORT'} = '389';
 267 $proxysettings{'LDAP_BINDDN_USER'} = '';
 268 $proxysettings{'LDAP_BINDDN_PASS'} = '';
 269 $proxysettings{'LDAP_GROUP'} = '';
 270 $proxysettings{'NTLM_AUTH_GROUP'} = '';
 271 $proxysettings{'NTLM_AUTH_BASIC'} = 'off';
 272 $proxysettings{'NTLM_DOMAIN'} = '';
 273 $proxysettings{'NTLM_PDC'} = '';
 274 $proxysettings{'NTLM_BDC'} = '';
 275 $proxysettings{'NTLM_ENABLE_ACL'} = 'off';
 276 $proxysettings{'NTLM_USER_ACL'} = 'positive';
 277 $proxysettings{'RADIUS_SERVER'} = '';
 278 $proxysettings{'RADIUS_PORT'} = '1812';
 279 $proxysettings{'RADIUS_IDENTIFIER'} = '';
 280 $proxysettings{'RADIUS_SECRET'} = '';
 281 $proxysettings{'RADIUS_ENABLE_ACL'} = 'off';
 282 $proxysettings{'RADIUS_USER_ACL'} = 'positive';
 283 $proxysettings{'IDENT_REQUIRED'} = 'off';
 284 $proxysettings{'IDENT_TIMEOUT'} = '10';
 285 $proxysettings{'IDENT_ENABLE_ACL'} = 'off';
 286 $proxysettings{'IDENT_USER_ACL'} = 'positive';
 287 $proxysettings{'ENABLE_FILTER'} = 'off';
 288 $proxysettings{'ENABLE_UPDXLRATOR'} = 'off';
 289 $proxysettings{'ENABLE_CLAMAV'} = 'off';
 290 $proxysettings{'CHILDREN'} = '10';
 291
 292 $ncsa_buttontext = $Lang::tr{'advproxy NCSA create user'};
 293
 294 &Header::getcgihash(\%proxysettings);
 295
 296 if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 0) {$proxysettings{'THROTTLING_GREEN_TOTAL'} = 'unlimited';}
 297 if ($proxysettings{'THROTTLING_GREEN_HOST'}  eq 0) {$proxysettings{'THROTTLING_GREEN_HOST'}  = 'unlimited';}
 298 if ($proxysettings{'THROTTLING_BLUE_TOTAL'}  eq 0) {$proxysettings{'THROTTLING_BLUE_TOTAL'}  = 'unlimited';}
 299 if ($proxysettings{'THROTTLING_BLUE_HOST'}   eq 0) {$proxysettings{'THROTTLING_BLUE_HOST'}   = 'unlimited';}
 300
 301 if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy NCSA user management'})
 302 {
 303         $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
 304 }
 305
 306 if ($proxysettings{'ACTION'} eq $Lang::tr{'add'})
 307 {
 308         $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
 309         if (length($proxysettings{'NCSA_PASS'}) < $proxysettings{'NCSA_MIN_PASS_LEN'}) {
 310                 $errormessage = $Lang::tr{'advproxy errmsg password length 1'}.$proxysettings{'NCSA_MIN_PASS_LEN'}.$Lang::tr{'advproxy errmsg password length 2'};
 311         }
 312         if (!($proxysettings{'NCSA_PASS'} eq $proxysettings{'NCSA_PASS_CONFIRM'})) {
 313                 $errormessage = $Lang::tr{'advproxy errmsg passwords different'};
 314         }
 315         if ($proxysettings{'NCSA_USERNAME'} eq '') {
 316                 $errormessage = $Lang::tr{'advproxy errmsg no username'};
 317         }
 318         if (!$errormessage) {
 319                 $proxysettings{'NCSA_USERNAME'} =~ tr/A-Z/a-z/;
 320                 &adduser($proxysettings{'NCSA_USERNAME'}, $proxysettings{'NCSA_PASS'}, $proxysettings{'NCSA_GROUP'});
 321         }
 322         $proxysettings{'NCSA_USERNAME'} = '';
 323         $proxysettings{'NCSA_GROUP'} = '';
 324         $proxysettings{'NCSA_PASS'} = '';
 325         $proxysettings{'NCSA_PASS_CONFIRM'} = '';
 326 }
 327
 328 if ($proxysettings{'ACTION'} eq $Lang::tr{'remove'})
 329 {
 330         $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
 331         &deluser($proxysettings{'ID'});
 332 }
 333
 334 $checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
 335 $checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
 336 $checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
 337
 338 if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'})
 339 {
 340         $proxysettings{'NCSA_EDIT_MODE'} = 'yes';
 341         $ncsa_buttontext = $Lang::tr{'advproxy NCSA update user'};
 342         @temp = split(/:/,$proxysettings{'ID'});
 343         $proxysettings{'NCSA_USERNAME'} = $temp[0];
 344         $proxysettings{'NCSA_GROUP'} = $temp[1];
 345         $proxysettings{'NCSA_PASS'} = "lEaVeAlOnE";
 346         $proxysettings{'NCSA_PASS_CONFIRM'} = $proxysettings{'NCSA_PASS'};
 347 }
 348
 349 if (($proxysettings{'ACTION'} eq $Lang::tr{'save'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) || ($proxysettings{'ACTION'} eq $Lang::tr{'proxy reconfigure'}))
 350 {
 351         if ($proxysettings{'ENABLE'} !~ /^(on|off)$/ ||
 352             $proxysettings{'TRANSPARENT'} !~ /^(on|off)$/ ||
 353             $proxysettings{'ENABLE_BLUE'} !~ /^(on|off)$/ ||
 354             $proxysettings{'TRANSPARENT_BLUE'} !~ /^(on|off)$/ ) {
 355                 $errormessage = $Lang::tr{'invalid input'};
 356                 goto ERROR;
 357         }
 358         if($proxysettings{'CACHE_MEM'} > $proxysettings{'CACHE_SIZE'} && $proxysettings{'CACHE_SIZE'} > 0){
 359                 $errormessage = $Lang::tr{'advproxy errmsg cache'}." ".$proxysettings{'CACHE_MEM'}." > ".$proxysettings{'CACHE_SIZE'};
 360                 goto ERROR;
 361         }
 362
 363         if (!(&General::validport($proxysettings{'PROXY_PORT'})))
 364         {
 365                 $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'};
 366                 goto ERROR;
 367         }
 368         if (!(&General::validport($proxysettings{'TRANSPARENT_PORT'})))
 369         {
 370                 $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'};
 371                 goto ERROR;
 372         }
 373         if ($proxysettings{'PROXY_PORT'} eq $proxysettings{'TRANSPARENT_PORT'}) {
 374                 $errormessage = $Lang::tr{'advproxy errmsg proxy ports equal'};
 375                 goto ERROR;
 376         }
 377         if (!($proxysettings{'UPSTREAM_PROXY'} eq ''))
 378         {
 379                 my @temp = split(/:/,$proxysettings{'UPSTREAM_PROXY'});
 380                 if (!(&General::validip($temp[0])))
 381                 {
 382                         if (!(&General::validdomainname($temp[0])))
 383                         {
 384                                 $errormessage = $Lang::tr{'advproxy errmsg invalid upstream proxy'};
 385                                 goto ERROR;
 386                         }
 387                 }
 388         }
 389         if (!($proxysettings{'CACHE_SIZE'} =~ /^\d+/) ||
 390                 ($proxysettings{'CACHE_SIZE'} < 10))
 391         {
 392                 if (!($proxysettings{'CACHE_SIZE'} eq '0'))
 393                 {
 394                         $errormessage = $Lang::tr{'advproxy errmsg hdd cache size'};
 395                         goto ERROR;
 396                 }
 397         }
 398         if (!($proxysettings{'FILEDESCRIPTORS'} =~ /^\d+/) ||
 399                 ($proxysettings{'FILEDESCRIPTORS'} < 1) || ($proxysettings{'FILEDESCRIPTORS'} > 1048576))
 400         {
 401                 $errormessage = $Lang::tr{'proxy errmsg filedescriptors'};
 402                 goto ERROR;
 403         }
 404         if (!($proxysettings{'CACHE_MEM'} =~ /^\d+/) ||
 405                 ($proxysettings{'CACHE_MEM'} < 1))
 406         {
 407                 $errormessage = $Lang::tr{'advproxy errmsg mem cache size'};
 408                 goto ERROR;
 409         }
 410         my @free = `/usr/bin/free`;
 411         $free[1] =~ m/(\d+)/;
 412         $cachemem = int $1 / 2048;
 413         if ($proxysettings{'CACHE_MEM'} > $cachemem) {
 414                 $proxysettings{'CACHE_MEM'} = $cachemem;
 415         }
 416         if (!($proxysettings{'MAX_SIZE'} =~ /^\d+/))
 417         {
 418                 $errormessage = $Lang::tr{'invalid maximum object size'};
 419                 goto ERROR;
 420         }
 421         if (!($proxysettings{'MIN_SIZE'} =~ /^\d+/))
 422         {
 423                 $errormessage = $Lang::tr{'invalid minimum object size'};
 424                 goto ERROR;
 425         }
 426         if (!($proxysettings{'MAX_OUTGOING_SIZE'} =~ /^\d+/))
 427         {
 428                 $errormessage = $Lang::tr{'invalid maximum outgoing size'};
 429                 goto ERROR;
 430         }
 431         if (!($proxysettings{'TIME_TO_HOUR'}.$proxysettings{'TIME_TO_MINUTE'} gt $proxysettings{'TIME_FROM_HOUR'}.$proxysettings{'TIME_FROM_MINUTE'}))
 432         {
 433                 $errormessage = $Lang::tr{'advproxy errmsg time restriction'};
 434                 goto ERROR;
 435         }
 436         if (!($proxysettings{'MAX_INCOMING_SIZE'} =~ /^\d+/))
 437         {
 438                 $errormessage = $Lang::tr{'invalid maximum incoming size'};
 439                 goto ERROR;
 440         }
 441                 if (!($proxysettings{'CHILDREN'} =~ /^\d+$/) || ($proxysettings{'CHILDREN'} < 1))
 442         {
 443                 $errormessage = $Lang::tr{'advproxy invalid num of children'};
 444                 goto ERROR;
 445         }
 446         if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on')
 447         {
 448                 $browser_regexp = '';
 449                 foreach (@useragentlist)
 450                 {
 451                         chomp;
 452                         @useragent = split(/,/);
 453                         if ($proxysettings{'UA_'.$useragent[0]} eq 'on') { $browser_regexp .= "$useragent[2]|"; }
 454                 }
 455                 chop($browser_regexp);
 456                 if (!$browser_regexp)
 457                 {
 458                         $errormessage = $Lang::tr{'advproxy errmsg no browser'};
 459                         goto ERROR;
 460                 }
 461         }
 462         if (!($proxysettings{'AUTH_METHOD'} eq 'none'))
 463         {
 464                 unless (($proxysettings{'AUTH_METHOD'} eq 'ident') &&
 465                         ($proxysettings{'IDENT_REQUIRED'} eq 'off') &&
 466                         ($proxysettings{'IDENT_ENABLE_ACL'} eq 'off'))
 467                 {
 468                         if ($netsettings{'BLUE_DEV'})
 469                         {
 470                                 if ((($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on')) &&
 471                                         (($proxysettings{'ENABLE_BLUE'} eq 'off') || ($proxysettings{'TRANSPARENT_BLUE'} eq 'on')))
 472                                 {
 473                                         $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
 474                                         goto ERROR;
 475                                 }
 476                         } else {
 477                                 if (($proxysettings{'ENABLE'} eq 'off') || ($proxysettings{'TRANSPARENT'} eq 'on'))
 478                                 {
 479                                         $errormessage = $Lang::tr{'advproxy errmsg non-transparent proxy required'};
 480                                         goto ERROR;
 481                                 }
 482                         }
 483                 }
 484                 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) &&
 485                         ((!($proxysettings{'AUTH_MAX_USERIP'} =~ /^\d+/)) || ($proxysettings{'AUTH_MAX_USERIP'} < 1) || ($proxysettings{'AUTH_MAX_USERIP'} > 255)))
 486                 {
 487                         $errormessage = $Lang::tr{'advproxy errmsg max userip'};
 488                         goto ERROR;
 489                 }
 490                 if (!($proxysettings{'AUTH_CACHE_TTL'} =~ /^\d+/))
 491                 {
 492                         $errormessage = $Lang::tr{'advproxy errmsg auth cache ttl'};
 493                         goto ERROR;
 494                 }
 495                 if (!($proxysettings{'AUTH_IPCACHE_TTL'} =~ /^\d+/))
 496                 {
 497                         $errormessage = $Lang::tr{'advproxy errmsg auth ipcache ttl'};
 498                         goto ERROR;
 499                 }
 500                 if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && ($proxysettings{'AUTH_IPCACHE_TTL'} eq '0'))
 501                 {
 502                         $errormessage = $Lang::tr{'advproxy errmsg auth ipcache may not be null'};
 503                         goto ERROR;
 504                 }
 505                 if ((!($proxysettings{'AUTH_CHILDREN'} =~ /^\d+/)) || ($proxysettings{'AUTH_CHILDREN'} < 1) || ($proxysettings{'AUTH_CHILDREN'} > 255))
 506                 {
 507                         $errormessage = $Lang::tr{'advproxy errmsg auth children'};
 508                         goto ERROR;
 509                 }
 510         }
 511         if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
 512         {
 513                 if ((!($proxysettings{'NCSA_MIN_PASS_LEN'} =~ /^\d+/)) || ($proxysettings{'NCSA_MIN_PASS_LEN'} < 1) || ($proxysettings{'NCSA_MIN_PASS_LEN'} > 255))
 514                 {
 515                         $errormessage = $Lang::tr{'advproxy errmsg password length'};
 516                         goto ERROR;
 517                 }
 518         }
 519         if ($proxysettings{'AUTH_METHOD'} eq 'ident')
 520         {
 521                 if ((!($proxysettings{'IDENT_TIMEOUT'} =~ /^\d+/)) || ($proxysettings{'IDENT_TIMEOUT'} < 1))
 522                 {
 523                         $errormessage = $Lang::tr{'advproxy errmsg ident timeout'};
 524                         goto ERROR;
 525                 }
 526         }
 527         if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
 528         {
 529                 if ($proxysettings{'LDAP_BASEDN'} eq '')
 530                 {
 531                         $errormessage = $Lang::tr{'advproxy errmsg ldap base dn'};
 532                         goto ERROR;
 533                 }
 534                 if (!&General::validip($proxysettings{'LDAP_SERVER'}))
 535                 {
 536                         if (!&General::validdomainname($proxysettings{'LDAP_SERVER'}))
 537                         {
 538                                 $errormessage = $Lang::tr{'advproxy errmsg ldap server'};
 539                                 goto ERROR;
 540                         }
 541                 }
 542                 if (!&General::validport($proxysettings{'LDAP_PORT'}))
 543                 {
 544                         $errormessage = $Lang::tr{'advproxy errmsg ldap port'};
 545                         goto ERROR;
 546                 }
 547                 if (($proxysettings{'LDAP_TYPE'} eq 'ADS') || ($proxysettings{'LDAP_TYPE'} eq 'NDS'))
 548                 {
 549                         if (($proxysettings{'LDAP_BINDDN_USER'} eq '') || ($proxysettings{'LDAP_BINDDN_PASS'} eq ''))
 550                         {
 551                                 $errormessage = $Lang::tr{'advproxy errmsg ldap bind dn'};
 552                                 goto ERROR;
 553                         }
 554                 }
 555         }
 556         if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
 557         {
 558                 if ($proxysettings{'NTLM_DOMAIN'} eq '')
 559                 {
 560                         $errormessage = $Lang::tr{'advproxy errmsg ntlm domain'};
 561                         goto ERROR;
 562                 }
 563                 if ($proxysettings{'NTLM_PDC'} eq '')
 564                 {
 565                         $errormessage = $Lang::tr{'advproxy errmsg ntlm pdc'};
 566                         goto ERROR;
 567                 }
 568                 if (!&General::validhostname($proxysettings{'NTLM_PDC'}))
 569                 {
 570                         $errormessage = $Lang::tr{'advproxy errmsg invalid pdc'};
 571                         goto ERROR;
 572                 }
 573                 if ((!($proxysettings{'NTLM_BDC'} eq '')) && (!&General::validhostname($proxysettings{'NTLM_BDC'})))
 574                 {
 575                         $errormessage = $Lang::tr{'advproxy errmsg invalid bdc'};
 576                         goto ERROR;
 577                 }
 578
 579                 $proxysettings{'NTLM_DOMAIN'} = lc($proxysettings{'NTLM_DOMAIN'});
 580                 $proxysettings{'NTLM_PDC'}    = lc($proxysettings{'NTLM_PDC'});
 581                 $proxysettings{'NTLM_BDC'}    = lc($proxysettings{'NTLM_BDC'});
 582         }
 583         if ($proxysettings{'AUTH_METHOD'} eq 'radius')
 584         {
 585                 if (!&General::validip($proxysettings{'RADIUS_SERVER'}))
 586                 {
 587                         $errormessage = $Lang::tr{'advproxy errmsg radius server'};
 588                         goto ERROR;
 589                 }
 590                 if (!&General::validport($proxysettings{'RADIUS_PORT'}))
 591                 {
 592                         $errormessage = $Lang::tr{'advproxy errmsg radius port'};
 593                         goto ERROR;
 594                 }
 595                 if ($proxysettings{'RADIUS_SECRET'} eq '')
 596                 {
 597                         $errormessage = $Lang::tr{'advproxy errmsg radius secret'};
 598                         goto ERROR;
 599                 }
 600         }
 601
 602         # Quick parent proxy error checking of username and password info. If username password don't both exist give an error.
 603         $proxy1 = 'YES';
 604         $proxy2 = 'YES';
 605         if (($proxysettings{'UPSTREAM_USER'} eq '')) {$proxy1 = '';}
 606         if (($proxysettings{'UPSTREAM_PASSWORD'} eq '')) {$proxy2 = '';}
 607         if ($proxysettings{'UPSTREAM_USER'} eq 'PASS')  {$proxy1=$proxy2='PASS'; $proxysettings{'UPSTREAM_PASSWORD'} = '';}
 608         if (($proxy1 ne $proxy2))
 609         {
 610                 $errormessage = $Lang::tr{'advproxy errmsg invalid upstream proxy username or password setting'};
 611                 goto ERROR;
 612         }
 613
 614 ERROR:
 615         &check_acls;
 616
 617         if ($errormessage) {
 618                 $proxysettings{'VALID'} = 'no'; }
 619         else {
 620                 $proxysettings{'VALID'} = 'yes'; }
 621
 622         if ($proxysettings{'VALID'} eq 'yes')
 623         {
 624                 &write_acls;
 625
 626                 delete $proxysettings{'SRC_SUBNETS'};
 627                 delete $proxysettings{'SRC_BANNED_IP'};
 628                 delete $proxysettings{'SRC_BANNED_MAC'};
 629                 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
 630                 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
 631                 delete $proxysettings{'DST_NOCACHE'};
 632                 delete $proxysettings{'DST_NOAUTH'};
 633                 delete $proxysettings{'PORTS_SAFE'};
 634                 delete $proxysettings{'PORTS_SSL'};
 635                 delete $proxysettings{'MIME_TYPES'};
 636                 delete $proxysettings{'NTLM_ALLOW_USERS'};
 637                 delete $proxysettings{'NTLM_DENY_USERS'};
 638                 delete $proxysettings{'RADIUS_ALLOW_USERS'};
 639                 delete $proxysettings{'RADIUS_DENY_USERS'};
 640                 delete $proxysettings{'IDENT_HOSTS'};
 641                 delete $proxysettings{'IDENT_ALLOW_USERS'};
 642                 delete $proxysettings{'IDENT_DENY_USERS'};
 643
 644                 delete $proxysettings{'CRE_GROUPS'};
 645                 delete $proxysettings{'CRE_SVHOSTS'};
 646
 647                 delete $proxysettings{'NCSA_USERNAME'};
 648                 delete $proxysettings{'NCSA_GROUP'};
 649                 delete $proxysettings{'NCSA_PASS'};
 650                 delete $proxysettings{'NCSA_PASS_CONFIRM'};
 651
 652                 $proxysettings{'TIME_MON'} = 'off' unless exists $proxysettings{'TIME_MON'};
 653                 $proxysettings{'TIME_TUE'} = 'off' unless exists $proxysettings{'TIME_TUE'};
 654                 $proxysettings{'TIME_WED'} = 'off' unless exists $proxysettings{'TIME_WED'};
 655                 $proxysettings{'TIME_THU'} = 'off' unless exists $proxysettings{'TIME_THU'};
 656                 $proxysettings{'TIME_FRI'} = 'off' unless exists $proxysettings{'TIME_FRI'};
 657                 $proxysettings{'TIME_SAT'} = 'off' unless exists $proxysettings{'TIME_SAT'};
 658                 $proxysettings{'TIME_SUN'} = 'off' unless exists $proxysettings{'TIME_SUN'};
 659
 660                 $proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'off' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
 661                 $proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'off' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
 662
 663                 &General::writehash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
 664
 665                 if (-e "${General::swroot}/proxy/settings") { &General::readhash("${General::swroot}/proxy/settings", \%stdproxysettings); }
 666                 $stdproxysettings{'PROXY_PORT'} = $proxysettings{'PROXY_PORT'};
 667                 $stdproxysettings{'UPSTREAM_PROXY'}    = $proxysettings{'UPSTREAM_PROXY'};
 668                 $stdproxysettings{'UPSTREAM_USER'}     = $proxysettings{'UPSTREAM_USER'};
 669                 $stdproxysettings{'UPSTREAM_PASSWORD'} = $proxysettings{'UPSTREAM_PASSWORD'};
 670                 $stdproxysettings{'ENABLE_FILTER'} = $proxysettings{'ENABLE_FILTER'};
 671                 $stdproxysettings{'ENABLE_UPDXLRATOR'} = $proxysettings{'ENABLE_UPDXLRATOR'};
 672                 $stdproxysettings{'ENABLE_CLAMAV'} = $proxysettings{'ENABLE_CLAMAV'};
 673                 &General::writehash("${General::swroot}/proxy/settings", \%stdproxysettings);
 674
 675                 &writeconfig;
 676                 &writepacfile;
 677
 678                 if ($proxysettings{'CACHEMGR'} eq 'on'){&writecachemgr;}
 679
 680                 system ('/usr/local/bin/squidctrl', 'disable');
 681                 unlink "${General::swroot}/proxy/enable";
 682                 unlink "${General::swroot}/proxy/transparent";
 683                 unlink "${General::swroot}/proxy/enable_blue";
 684                 unlink "${General::swroot}/proxy/transparent_blue";
 685
 686                 if ($proxysettings{'ENABLE'} eq 'on') {
 687                         system ('/usr/bin/touch', "${General::swroot}/proxy/enable");
 688                         system ('/usr/local/bin/squidctrl', 'enable'); }
 689                 if ($proxysettings{'TRANSPARENT'} eq 'on' && $proxysettings{'ENABLE'} eq 'on') {
 690                         system ('/usr/bin/touch', "${General::swroot}/proxy/transparent"); }
 691                 if ($proxysettings{'ENABLE_BLUE'} eq 'on') {
 692                         system ('/usr/bin/touch', "${General::swroot}/proxy/enable_blue");
 693                         system ('/usr/local/bin/squidctrl', 'enable'); }
 694                 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on' && $proxysettings{'ENABLE_BLUE'} eq 'on') {
 695                         system ('/usr/bin/touch', "${General::swroot}/proxy/transparent_blue"); }
 696
 697                 if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy save and restart'}) { system('/usr/local/bin/squidctrl restart >/dev/null 2>&1'); }
 698                 if ($proxysettings{'ACTION'} eq $Lang::tr{'proxy reconfigure'}) { system('/usr/local/bin/squidctrl reconfigure >/dev/null 2>&1'); }
 699   }
 700 }
 701
 702 if ($proxysettings{'ACTION'} eq $Lang::tr{'advproxy clear cache'})
 703 {
 704         system('/usr/local/bin/squidctrl flush >/dev/null 2>&1');
 705 }
 706
 707 if (!$errormessage)
 708 {
 709         if (-e "${General::swroot}/proxy/advanced/settings") {
 710                 &General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
 711         } elsif (-e "${General::swroot}/proxy/settings") {
 712                 &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
 713         }
 714         &read_acls;
 715 }
 716
 717 # ------------------------------------------------------------------
 718
 719 # Hook to regenerate the configuration files, if cgi got called from command line.
 720 if ($ENV{"REMOTE_ADDR"} eq "") {
 721         writeconfig();
 722         exit(0);
 723 }
 724
 725 # -------------------------------------------------------------------
 726
 727 $checked{'ENABLE'}{'off'} = '';
 728 $checked{'ENABLE'}{'on'} = '';
 729 $checked{'ENABLE'}{$proxysettings{'ENABLE'}} = "checked='checked'";
 730
 731 $checked{'TRANSPARENT'}{'off'} = '';
 732 $checked{'TRANSPARENT'}{'on'} = '';
 733 $checked{'TRANSPARENT'}{$proxysettings{'TRANSPARENT'}} = "checked='checked'";
 734
 735 $checked{'ENABLE_BLUE'}{'off'} = '';
 736 $checked{'ENABLE_BLUE'}{'on'} = '';
 737 $checked{'ENABLE_BLUE'}{$proxysettings{'ENABLE_BLUE'}} = "checked='checked'";
 738
 739 $checked{'TRANSPARENT_BLUE'}{'off'} = '';
 740 $checked{'TRANSPARENT_BLUE'}{'on'} = '';
 741 $checked{'TRANSPARENT_BLUE'}{$proxysettings{'TRANSPARENT_BLUE'}} = "checked='checked'";
 742
 743 $checked{'SUPPRESS_VERSION'}{'off'} = '';
 744 $checked{'SUPPRESS_VERSION'}{'on'} = '';
 745 $checked{'SUPPRESS_VERSION'}{$proxysettings{'SUPPRESS_VERSION'}} = "checked='checked'";
 746
 747 $checked{'FORWARD_IPADDRESS'}{'off'} = '';
 748 $checked{'FORWARD_IPADDRESS'}{'on'} = '';
 749 $checked{'FORWARD_IPADDRESS'}{$proxysettings{'FORWARD_IPADDRESS'}} = "checked='checked'";
 750 $checked{'FORWARD_USERNAME'}{'off'} = '';
 751 $checked{'FORWARD_USERNAME'}{'on'} = '';
 752 $checked{'FORWARD_USERNAME'}{$proxysettings{'FORWARD_USERNAME'}} = "checked='checked'";
 753 $checked{'FORWARD_VIA'}{'off'} = '';
 754 $checked{'FORWARD_VIA'}{'on'} = '';
 755 $checked{'FORWARD_VIA'}{$proxysettings{'FORWARD_VIA'}} = "checked='checked'";
 756 $checked{'NO_CONNECTION_AUTH'}{'off'} = '';
 757 $checked{'NO_CONNECTION_AUTH'}{'on'} = '';
 758 $checked{'NO_CONNECTION_AUTH'}{$proxysettings{'NO_CONNECTION_AUTH'}} = "checked='checked'";
 759
 760 $selected{'MEM_POLICY'}{$proxysettings{'MEM_POLICY'}} = "selected='selected'";
 761 $selected{'CACHE_POLICY'}{$proxysettings{'CACHE_POLICY'}} = "selected='selected'";
 762 $selected{'L1_DIRS'}{$proxysettings{'L1_DIRS'}} = "selected='selected'";
 763 $checked{'OFFLINE_MODE'}{'off'} = '';
 764 $checked{'OFFLINE_MODE'}{'on'} = '';
 765 $checked{'OFFLINE_MODE'}{$proxysettings{'OFFLINE_MODE'}} = "checked='checked'";
 766 $checked{'CACHE_DIGESTS'}{'off'} = '';
 767 $checked{'CACHE_DIGESTS'}{'on'} = '';
 768 $checked{'CACHE_DIGESTS'}{$proxysettings{'CACHE_DIGESTS'}} = "checked='checked'";
 769
 770 $checked{'LOGGING'}{'off'} = '';
 771 $checked{'LOGGING'}{'on'} = '';
 772 $checked{'LOGGING'}{$proxysettings{'LOGGING'}} = "checked='checked'";
 773 $checked{'CACHEMGR'}{'off'} = '';
 774 $checked{'CACHEMGR'}{'on'} = '';
 775 $checked{'CACHEMGR'}{$proxysettings{'CACHEMGR'}} = "checked='checked'";
 776 $checked{'LOGQUERY'}{'off'} = '';
 777 $checked{'LOGQUERY'}{'on'} = '';
 778 $checked{'LOGQUERY'}{$proxysettings{'LOGQUERY'}} = "checked='checked'";
 779 $checked{'LOGUSERAGENT'}{'off'} = '';
 780 $checked{'LOGUSERAGENT'}{'on'} = '';
 781 $checked{'LOGUSERAGENT'}{$proxysettings{'LOGUSERAGENT'}} = "checked='checked'";
 782
 783 $selected{'ERR_LANGUAGE'}{$proxysettings{'ERR_LANGUAGE'}} = "selected='selected'";
 784 $selected{'ERR_DESIGN'}{$proxysettings{'ERR_DESIGN'}} = "selected='selected'";
 785
 786 $checked{'NO_PROXY_LOCAL'}{'off'} = '';
 787 $checked{'NO_PROXY_LOCAL'}{'on'} = '';
 788 $checked{'NO_PROXY_LOCAL'}{$proxysettings{'NO_PROXY_LOCAL'}} = "checked='checked'";
 789 $checked{'NO_PROXY_LOCAL_BLUE'}{'off'} = '';
 790 $checked{'NO_PROXY_LOCAL_BLUE'}{'on'} = '';
 791 $checked{'NO_PROXY_LOCAL_BLUE'}{$proxysettings{'NO_PROXY_LOCAL_BLUE'}} = "checked='checked'";
 792
 793 $checked{'CLASSROOM_EXT'}{'off'} = '';
 794 $checked{'CLASSROOM_EXT'}{'on'} = '';
 795 $checked{'CLASSROOM_EXT'}{$proxysettings{'CLASSROOM_EXT'}} = "checked='checked'";
 796
 797 $selected{'TIME_ACCESS_MODE'}{$proxysettings{'TIME_ACCESS_MODE'}} = "selected='selected'";
 798 $selected{'TIME_FROM_HOUR'}{$proxysettings{'TIME_FROM_HOUR'}} = "selected='selected'";
 799 $selected{'TIME_FROM_MINUTE'}{$proxysettings{'TIME_FROM_MINUTE'}} = "selected='selected'";
 800 $selected{'TIME_TO_HOUR'}{$proxysettings{'TIME_TO_HOUR'}} = "selected='selected'";
 801 $selected{'TIME_TO_MINUTE'}{$proxysettings{'TIME_TO_MINUTE'}} = "selected='selected'";
 802
 803 $proxysettings{'TIME_MON'} = 'on' unless exists $proxysettings{'TIME_MON'};
 804 $proxysettings{'TIME_TUE'} = 'on' unless exists $proxysettings{'TIME_TUE'};
 805 $proxysettings{'TIME_WED'} = 'on' unless exists $proxysettings{'TIME_WED'};
 806 $proxysettings{'TIME_THU'} = 'on' unless exists $proxysettings{'TIME_THU'};
 807 $proxysettings{'TIME_FRI'} = 'on' unless exists $proxysettings{'TIME_FRI'};
 808 $proxysettings{'TIME_SAT'} = 'on' unless exists $proxysettings{'TIME_SAT'};
 809 $proxysettings{'TIME_SUN'} = 'on' unless exists $proxysettings{'TIME_SUN'};
 810
 811 $checked{'TIME_MON'}{'off'} = '';
 812 $checked{'TIME_MON'}{'on'} = '';
 813 $checked{'TIME_MON'}{$proxysettings{'TIME_MON'}} = "checked='checked'";
 814 $checked{'TIME_TUE'}{'off'} = '';
 815 $checked{'TIME_TUE'}{'on'} = '';
 816 $checked{'TIME_TUE'}{$proxysettings{'TIME_TUE'}} = "checked='checked'";
 817 $checked{'TIME_WED'}{'off'} = '';
 818 $checked{'TIME_WED'}{'on'} = '';
 819 $checked{'TIME_WED'}{$proxysettings{'TIME_WED'}} = "checked='checked'";
 820 $checked{'TIME_THU'}{'off'} = '';
 821 $checked{'TIME_THU'}{'on'} = '';
 822 $checked{'TIME_THU'}{$proxysettings{'TIME_THU'}} = "checked='checked'";
 823 $checked{'TIME_FRI'}{'off'} = '';
 824 $checked{'TIME_FRI'}{'on'} = '';
 825 $checked{'TIME_FRI'}{$proxysettings{'TIME_FRI'}} = "checked='checked'";
 826 $checked{'TIME_SAT'}{'off'} = '';
 827 $checked{'TIME_SAT'}{'on'} = '';
 828 $checked{'TIME_SAT'}{$proxysettings{'TIME_SAT'}} = "checked='checked'";
 829 $checked{'TIME_SUN'}{'off'} = '';
 830 $checked{'TIME_SUN'}{'on'} = '';
 831 $checked{'TIME_SUN'}{$proxysettings{'TIME_SUN'}} = "checked='checked'";
 832
 833 $selected{'THROTTLING_GREEN_TOTAL'}{$proxysettings{'THROTTLING_GREEN_TOTAL'}} = "selected='selected'";
 834 $selected{'THROTTLING_GREEN_HOST'}{$proxysettings{'THROTTLING_GREEN_HOST'}} = "selected='selected'";
 835 $selected{'THROTTLING_BLUE_TOTAL'}{$proxysettings{'THROTTLING_BLUE_TOTAL'}} = "selected='selected'";
 836 $selected{'THROTTLING_BLUE_HOST'}{$proxysettings{'THROTTLING_BLUE_HOST'}} = "selected='selected'";
 837
 838 $checked{'THROTTLE_BINARY'}{'off'} = '';
 839 $checked{'THROTTLE_BINARY'}{'on'} = '';
 840 $checked{'THROTTLE_BINARY'}{$proxysettings{'THROTTLE_BINARY'}} = "checked='checked'";
 841 $checked{'THROTTLE_DSKIMG'}{'off'} = '';
 842 $checked{'THROTTLE_DSKIMG'}{'on'} = '';
 843 $checked{'THROTTLE_DSKIMG'}{$proxysettings{'THROTTLE_DSKIMG'}} = "checked='checked'";
 844 $checked{'THROTTLE_MMEDIA'}{'off'} = '';
 845 $checked{'THROTTLE_MMEDIA'}{'on'} = '';
 846 $checked{'THROTTLE_MMEDIA'}{$proxysettings{'THROTTLE_MMEDIA'}} = "checked='checked'";
 847
 848 $checked{'ENABLE_MIME_FILTER'}{'off'} = '';
 849 $checked{'ENABLE_MIME_FILTER'}{'on'} = '';
 850 $checked{'ENABLE_MIME_FILTER'}{$proxysettings{'ENABLE_MIME_FILTER'}} = "checked='checked'";
 851
 852 $checked{'ENABLE_BROWSER_CHECK'}{'off'} = '';
 853 $checked{'ENABLE_BROWSER_CHECK'}{'on'} = '';
 854 $checked{'ENABLE_BROWSER_CHECK'}{$proxysettings{'ENABLE_BROWSER_CHECK'}} = "checked='checked'";
 855
 856 foreach (@useragentlist) {
 857         @useragent = split(/,/);
 858         $checked{'UA_'.$useragent[0]}{'off'} = '';
 859         $checked{'UA_'.$useragent[0]}{'on'} = '';
 860         $checked{'UA_'.$useragent[0]}{$proxysettings{'UA_'.$useragent[0]}} = "checked='checked'";
 861 }
 862
 863 $checked{'AUTH_METHOD'}{'none'} = '';
 864 $checked{'AUTH_METHOD'}{'ncsa'} = '';
 865 $checked{'AUTH_METHOD'}{'ident'} = '';
 866 $checked{'AUTH_METHOD'}{'ldap'} = '';
 867 $checked{'AUTH_METHOD'}{'ntlm'} = '';
 868 $checked{'AUTH_METHOD'}{'ntlm-auth'} = '';
 869 $checked{'AUTH_METHOD'}{'radius'} = '';
 870 $checked{'AUTH_METHOD'}{$proxysettings{'AUTH_METHOD'}} = "checked='checked'";
 871
 872 $proxysettings{'AUTH_ALWAYS_REQUIRED'} = 'on' unless exists $proxysettings{'AUTH_ALWAYS_REQUIRED'};
 873
 874 $checked{'AUTH_ALWAYS_REQUIRED'}{'off'} = '';
 875 $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} = '';
 876 $checked{'AUTH_ALWAYS_REQUIRED'}{$proxysettings{'AUTH_ALWAYS_REQUIRED'}} = "checked='checked'";
 877
 878 $checked{'NCSA_BYPASS_REDIR'}{'off'} = '';
 879 $checked{'NCSA_BYPASS_REDIR'}{'on'} = '';
 880 $checked{'NCSA_BYPASS_REDIR'}{$proxysettings{'NCSA_BYPASS_REDIR'}} = "checked='checked'";
 881
 882 $selected{'NCSA_GROUP'}{$proxysettings{'NCSA_GROUP'}} = "selected='selected'";
 883
 884 $selected{'LDAP_TYPE'}{$proxysettings{'LDAP_TYPE'}} = "selected='selected'";
 885
 886 $proxysettings{'NTLM_ENABLE_INT_AUTH'} = 'on' unless exists $proxysettings{'NTLM_ENABLE_INT_AUTH'};
 887
 888 $checked{'NTLM_ENABLE_INT_AUTH'}{'off'} = '';
 889 $checked{'NTLM_ENABLE_INT_AUTH'}{'on'} = '';
 890 $checked{'NTLM_ENABLE_INT_AUTH'}{$proxysettings{'NTLM_ENABLE_INT_AUTH'}} = "checked='checked'";
 891
 892 $checked{'NTLM_ENABLE_ACL'}{'off'} = '';
 893 $checked{'NTLM_ENABLE_ACL'}{'on'} = '';
 894 $checked{'NTLM_ENABLE_ACL'}{$proxysettings{'NTLM_ENABLE_ACL'}} = "checked='checked'";
 895
 896 $checked{'NTLM_USER_ACL'}{'positive'} = '';
 897 $checked{'NTLM_USER_ACL'}{'negative'} = '';
 898 $checked{'NTLM_USER_ACL'}{$proxysettings{'NTLM_USER_ACL'}} = "checked='checked'";
 899
 900 $checked{'NTLM_AUTH_BASIC'}{'on'} = '';
 901 $checked{'NTLM_AUTH_BASIC'}{'off'} = '';
 902 $checked{'NTLM_AUTH_BASIC'}{$proxysettings{'NTLM_AUTH_BASIC'}} = "checked='checked'";
 903
 904 $checked{'RADIUS_ENABLE_ACL'}{'off'} = '';
 905 $checked{'RADIUS_ENABLE_ACL'}{'on'} = '';
 906 $checked{'RADIUS_ENABLE_ACL'}{$proxysettings{'RADIUS_ENABLE_ACL'}} = "checked='checked'";
 907
 908 $checked{'RADIUS_USER_ACL'}{'positive'} = '';
 909 $checked{'RADIUS_USER_ACL'}{'negative'} = '';
 910 $checked{'RADIUS_USER_ACL'}{$proxysettings{'RADIUS_USER_ACL'}} = "checked='checked'";
 911
 912 $checked{'IDENT_REQUIRED'}{'off'} = '';
 913 $checked{'IDENT_REQUIRED'}{'on'} = '';
 914 $checked{'IDENT_REQUIRED'}{$proxysettings{'IDENT_REQUIRED'}} = "checked='checked'";
 915
 916 $checked{'IDENT_ENABLE_ACL'}{'off'} = '';
 917 $checked{'IDENT_ENABLE_ACL'}{'on'} = '';
 918 $checked{'IDENT_ENABLE_ACL'}{$proxysettings{'IDENT_ENABLE_ACL'}} = "checked='checked'";
 919
 920 $checked{'IDENT_USER_ACL'}{'positive'} = '';
 921 $checked{'IDENT_USER_ACL'}{'negative'} = '';
 922 $checked{'IDENT_USER_ACL'}{$proxysettings{'IDENT_USER_ACL'}} = "checked='checked'";
 923
 924 $checked{'ENABLE_FILTER'}{'off'} = '';
 925 $checked{'ENABLE_FILTER'}{'on'} = '';
 926 $checked{'ENABLE_FILTER'}{$proxysettings{'ENABLE_FILTER'}} = "checked='checked'";
 927
 928 $checked{'ENABLE_UPDXLRATOR'}{'off'} = '';
 929 $checked{'ENABLE_UPDXLRATOR'}{'on'} = '';
 930 $checked{'ENABLE_UPDXLRATOR'}{$proxysettings{'ENABLE_UPDXLRATOR'}} = "checked='checked'";
 931
 932 $checked{'ENABLE_CLAMAV'}{'off'} = '';
 933 $checked{'ENABLE_CLAMAV'}{'on'} = '';
 934 $checked{'ENABLE_CLAMAV'}{$proxysettings{'ENABLE_CLAMAV'}} = "checked='checked'";
 935
 936 &Header::openpage($Lang::tr{'advproxy advanced web proxy configuration'}, 1, '');
 937
 938 &Header::openbigbox('100%', 'left', '', $errormessage);
 939
 940 if ($errormessage) {
 941         &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
 942         print "<font class='base'>$errormessage&nbsp;</font>\n";
 943         &Header::closebox();
 944 }
 945
 946 if ($squidversion[0] =~ /^Squid\sCache:\sVersion\s/i)
 947 {
 948         $squidversion[0] =~ s/^Squid\sCache:\sVersion//i;
 949         $squidversion[0] =~ s/^\s+//g;
 950         $squidversion[0] =~ s/\s+$//g;
 951 } else {
 952         $squidversion[0] = $Lang::tr{'advproxy unknown'};
 953 }
 954
 955 # ===================================================================
 956 #  Main settings
 957 # ===================================================================
 958
 959 unless ($proxysettings{'NCSA_EDIT_MODE'} eq 'yes') {
 960
 961 print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
 962
 963 &Header::openbox('100%', 'left', "$Lang::tr{'advproxy advanced web proxy'}");
 964
 965 print <<END
 966 <table width='100%'>
 967 <tr>
 968         <td colspan='4' class='base'><b>$Lang::tr{'advproxy common settings'}</b></td>
 969 </tr>
 970 <tr>
 971         <td width='25%' class='base'>$Lang::tr{'advproxy enabled on'} <font color="$Header::colourgreen">Green</font>:</td>
 972         <td width='20%'><input type='checkbox' name='ENABLE' $checked{'ENABLE'}{'on'} /></td>
 973         <td width='25%' class='base'>$Lang::tr{'advproxy proxy port'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
 974         <td width='30%'><input type='text' name='PROXY_PORT' value='$proxysettings{'PROXY_PORT'}' size='5' /></td>
 975 </tr>
 976 <tr>
 977         <td class='base'>$Lang::tr{'advproxy transparent on'} <font color="$Header::colourgreen">Green</font>:</td>
 978         <td><input type='checkbox' name='TRANSPARENT' $checked{'TRANSPARENT'}{'on'} /></td>
 979         <td width='25%' class='base'>$Lang::tr{'advproxy proxy port transparent'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
 980         <td width='30%'><input type='text' name='TRANSPARENT_PORT' value='$proxysettings{'TRANSPARENT_PORT'}' size='5' /></td>
 981 </tr>
 982 <tr>
 983 END
 984 ;
 985 if ($netsettings{'BLUE_DEV'}) {
 986         print "<td class='base'>$Lang::tr{'advproxy enabled on'} <font color='$Header::colourblue'>Blue</font>:</td>";
 987         print "<td><input type='checkbox' name='ENABLE_BLUE' $checked{'ENABLE_BLUE'}{'on'} /></td>";
 988 } else {
 989         print "<td colspan='2'>&nbsp;</td>";
 990 }
 991 print <<END
 992         <td class='base'>$Lang::tr{'advproxy visible hostname'}:</td>
 993         <td><input type='text' name='VISIBLE_HOSTNAME' value='$proxysettings{'VISIBLE_HOSTNAME'}' /></td>
 994 </tr>
 995 <tr>
 996 END
 997 ;
 998 if ($netsettings{'BLUE_DEV'}) {
 999         print "<td class='base'>$Lang::tr{'advproxy transparent on'} <font color='$Header::colourblue'>Blue</font>:</td>";
1000         print "<td><input type='checkbox' name='TRANSPARENT_BLUE' $checked{'TRANSPARENT_BLUE'}{'on'} /></td>";
1001 } else {
1002         print "<td colspan='2'>&nbsp;</td>";
1003 }
1004 print <<END
1005         <td class='base'>$Lang::tr{'advproxy error language'}:</td>
1006         <td class='base'>
1007         <select name='ERR_LANGUAGE'>
1008 END
1009 ;
1010         foreach (<$errordir/*>) {
1011                 if (-d) {
1012                         $language = substr($_,rindex($_,"/")+1);
1013                         print "<option value='$language' $selected{'ERR_LANGUAGE'}{$language}>$language</option>\n";
1014                 }
1015         }
1016 print <<END
1017         </select>
1018         </td>
1019 </tr>
1020 <tr>
1021         <td class='base'>$Lang::tr{'advproxy suppress version'}:</td>
1022         <td><input type='checkbox' name='SUPPRESS_VERSION' $checked{'SUPPRESS_VERSION'}{'on'} /></td>
1023         <td class='base'>$Lang::tr{'advproxy error design'}:</td>
1024         <td class='base'><select name='ERR_DESIGN'>
1025                 <option value='ipfire' $selected{'ERR_DESIGN'}{'ipfire'}>IPFire</option>
1026                 <option value='squid' $selected{'ERR_DESIGN'}{'squid'}>$Lang::tr{'advproxy standard'}</option>
1027         </select></td>
1028 </tr>
1029 <tr>
1030         <td class='base'>$Lang::tr{'advproxy squid version'}:</td>
1031         <td class='base'>&nbsp;[<font color='$Header::colourred'> $squidversion[0] </font>]</td>
1032         <td>&nbsp;</td>
1033         <td>&nbsp;</td>
1034 </tr>
1035 </table>
1036 <hr size='1'>
1037 <table width='100%'>
1038 <tr><td class='base' colspan='4'><b>$Lang::tr{'advproxy redirector children'}</b></td></tr>
1039 <tr><td class='base' >$Lang::tr{'processes'}:&nbsp;<img src='/blob.gif' alt='*' /><input type='text' name='CHILDREN' value='$proxysettings{'CHILDREN'}' size='5' /></td>
1040 END
1041 ;
1042 my $count = `ip n| wc -l`;
1043 if ( $count < 1 ){$count = 1;}
1044 if ( -e "/usr/bin/squidclamav" ) {
1045         print "<td class='base'><b>".$Lang::tr{'advproxy squidclamav'}."</b><br />";
1046         if ( ! -e "/var/run/clamav/clamd.pid" ){
1047                 print "<font color='red'>clamav not running</font><br /><br />";
1048                 $proxysettings{'ENABLE_CLAMAV'} = 'off';
1049                 }
1050         else {
1051                 print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_CLAMAV' ".$checked{'ENABLE_CLAMAV'}{'on'}." /><br />";
1052                 print "+ ".int(( $count**(1/3)) * 8);}
1053         print "</td>";
1054 } else {
1055         print "<td></td>";
1056 }
1057 print "<td class='base'><a href='/cgi-bin/urlfilter.cgi'><b>".$Lang::tr{'advproxy url filter'}."</a></b><br />";
1058 print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_FILTER' ".$checked{'ENABLE_FILTER'}{'on'}." /><br />";
1059 print "+ ".int(($count**(1/3)) * 6);
1060 print "</td>";
1061 print "<td class='base'><a href='/cgi-bin/updatexlrator.cgi'><b>".$Lang::tr{'advproxy update accelerator'}."</a></b><br />";
1062 print $Lang::tr{'advproxy enabled'}."<input type='checkbox' name='ENABLE_UPDXLRATOR' ".$checked{'ENABLE_UPDXLRATOR'}{'on'}." /><br />";
1063 print "+ ".int(($count**(1/3)) * 5);
1064 print "</td></tr>";
1065 print <<END
1066 </table>
1067 <hr size='1'>
1068 <table width='100%'>
1069 <tr>
1070         <td colspan='4' class='base'><b>$Lang::tr{'advproxy upstream proxy'}</b></td>
1071 </tr>
1072 <tr>
1073         <td width='25%' class='base'>$Lang::tr{'advproxy via forwarding'}:</td>
1074         <td width='20%'><input type='checkbox' name='FORWARD_VIA' $checked{'FORWARD_VIA'}{'on'} /></td>
1075         <td width='25%' class='base'>$Lang::tr{'advproxy upstream proxy host:port'}:</td>
1076         <td width='30%'><input type='text' name='UPSTREAM_PROXY' value='$proxysettings{'UPSTREAM_PROXY'}' /></td>
1077 </tr>
1078 <tr>
1079         <td class='base'>$Lang::tr{'advproxy client IP forwarding'}:</td>
1080         <td><input type='checkbox' name='FORWARD_IPADDRESS' $checked{'FORWARD_IPADDRESS'}{'on'} /></td>
1081         <td class='base'>$Lang::tr{'advproxy upstream username'}:</td>
1082         <td><input type='text' name='UPSTREAM_USER' value='$proxysettings{'UPSTREAM_USER'}' /></td>
1083 </tr>
1084 <tr>
1085         <td class='base'>$Lang::tr{'advproxy username forwarding'}:</td>
1086         <td><input type='checkbox' name='FORWARD_USERNAME' $checked{'FORWARD_USERNAME'}{'on'} /></td>
1087         <td class='base'>$Lang::tr{'advproxy upstream password'}:</td>
1088         <td><input type='password' name='UPSTREAM_PASSWORD' value='$proxysettings{'UPSTREAM_PASSWORD'}' /></td>
1089 </tr>
1090 <tr>
1091         <td class='base'>$Lang::tr{'advproxy no connection auth'}:</td>
1092         <td><input type='checkbox' name='NO_CONNECTION_AUTH' $checked{'NO_CONNECTION_AUTH'}{'on'} /></td>
1093         <td>&nbsp;</td>
1094         <td>&nbsp;</td>
1095 </tr>
1096 </table>
1097 <hr size='1'>
1098 <table width='100%'>
1099 <tr>
1100         <td colspan='4' class='base'><b>$Lang::tr{'advproxy log settings'}</b></td>
1101 </tr>
1102 <tr>
1103         <td width='25%' class='base'>$Lang::tr{'advproxy log enabled'}:</td>
1104         <td width='20%'><input type='checkbox' name='LOGGING' $checked{'LOGGING'}{'on'} /></td>
1105         <td width='25%'class='base'>$Lang::tr{'advproxy log query'}:</td>
1106         <td width='30%'><input type='checkbox' name='LOGQUERY' $checked{'LOGQUERY'}{'on'} /></td>
1107 </tr>
1108 <tr>
1109         <td>&nbsp;</td>
1110         <td>&nbsp;</td>
1111         <td class='base'>$Lang::tr{'advproxy log useragent'}:</td>
1112         <td><input type='checkbox' name='LOGUSERAGENT' $checked{'LOGUSERAGENT'}{'on'} /></td>
1113 </tr>
1114 </table>
1115 <hr size='1'>
1116 <table width='100%'>
1117 <tr>
1118         <td colspan='4'><b>$Lang::tr{'advproxy cache management'}</b></td>
1119 </tr>
1120 <tr>
1121         <td class='base'>$Lang::tr{'proxy cachemgr'}:</td>
1122         <td><input type='checkbox' name='CACHEMGR' $checked{'CACHEMGR'}{'on'} /></td>
1123         <td class='base'>$Lang::tr{'advproxy admin mail'}:</td>
1124         <td><input type='text' name='ADMIN_MAIL_ADDRESS' value='$proxysettings{'ADMIN_MAIL_ADDRESS'}' /></td>
1125 </tr>
1126 <tr>
1127         <td class='base'>$Lang::tr{'proxy filedescriptors'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1128         <td><input type='text' name='FILEDESCRIPTORS' value='$proxysettings{'FILEDESCRIPTORS'}' size='5' /></td>
1129         <td class='base'>$Lang::tr{'proxy admin password'}:</td>
1130         <td><input type='text' name='ADMIN_PASSWORD' value='$proxysettings{'ADMIN_PASSWORD'}' /></td>
1131 </tr>
1132 <tr>
1133         <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1134 </tr>
1135 <tr>
1136         <td class='base'>$Lang::tr{'advproxy ram cache size'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1137         <td><input type='text' name='CACHE_MEM' value='$proxysettings{'CACHE_MEM'}' size='5' /></td>
1138         <td class='base'>$Lang::tr{'advproxy hdd cache size'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1139         <td><input type='text' name='CACHE_SIZE' value='$proxysettings{'CACHE_SIZE'}' size='5' /></td>
1140 </tr>
1141 <tr>
1142         <td class='base'>$Lang::tr{'advproxy min size'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1143         <td><input type='text' name='MIN_SIZE' value='$proxysettings{'MIN_SIZE'}' size='5' /></td>
1144         <td class='base'>$Lang::tr{'advproxy max size'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1145         <td><input type='text' name='MAX_SIZE' value='$proxysettings{'MAX_SIZE'}' size='5' /></td>
1146 </tr>
1147 <tr>
1148         <td class='base'>$Lang::tr{'advproxy number of L1 dirs'}:</td>
1149         <td class='base'><select name='L1_DIRS'>
1150                 <option value='16'  $selected{'L1_DIRS'}{'16'}>16</option>
1151                 <option value='32'  $selected{'L1_DIRS'}{'32'}>32</option>
1152                 <option value='64'  $selected{'L1_DIRS'}{'64'}>64</option>
1153                 <option value='128' $selected{'L1_DIRS'}{'128'}>128</option>
1154                 <option value='256' $selected{'L1_DIRS'}{'256'}>256</option>
1155         </select></td>
1156         <td colspan='2' rowspan= '5' valign='top' class='base'>
1157                 <table cellspacing='0' cellpadding='0'>
1158                         <tr>
1159                                 <!-- intentionally left empty -->
1160                         </tr>
1161                         <tr>
1162                         <td>$Lang::tr{'advproxy no cache sites'}:</td>
1163                         </tr>
1164                         <tr>
1165                                 <!-- intentionally left empty -->
1166                         </tr>
1167                         <tr>
1168                                 <!-- intentionally left empty -->
1169                         </tr>
1170                         <tr>
1171                         <td><textarea name='DST_NOCACHE' cols='32' rows='6' wrap='off'>
1172 END
1173 ;
1174
1175 print $proxysettings{'DST_NOCACHE'};
1176
1177 print <<END
1178 </textarea></td>
1179                 </tr>
1180                 </table>
1181         </td>
1182 </tr>
1183 <tr>
1184         <td class='base'>$Lang::tr{'advproxy memory replacement policy'}:</td>
1185         <td class='base'><select name='MEM_POLICY'>
1186                 <option value='LRU' $selected{'MEM_POLICY'}{'LRU'}>LRU</option>
1187                 <option value='heap LFUDA' $selected{'MEM_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1188                 <option value='heap GDSF' $selected{'MEM_POLICY'}{'heap GDSF'}>heap GDSF</option>
1189                 <option value='heap LRU' $selected{'MEM_POLICY'}{'heap LRU'}>heap LRU</option>
1190         </select></td>
1191 </tr>
1192 <tr>
1193         <td class='base'>$Lang::tr{'advproxy cache replacement policy'}:</td>
1194         <td class='base'><select name='CACHE_POLICY'>
1195                 <option value='LRU' $selected{'CACHE_POLICY'}{'LRU'}>LRU</option>
1196                 <option value='heap LFUDA' $selected{'CACHE_POLICY'}{'heap LFUDA'}>heap LFUDA</option>
1197                 <option value='heap GDSF' $selected{'CACHE_POLICY'}{'heap GDSF'}>heap GDSF</option>
1198                 <option value='heap LRU' $selected{'CACHE_POLICY'}{'heap LRU'}>heap LRU</option>
1199         </select></td>
1200 </tr>
1201 <tr>
1202         <td colspan='2'>&nbsp;</td>
1203 </tr>
1204 <tr>
1205         <td class='base'>$Lang::tr{'advproxy offline mode'}:</td>
1206         <td><input type='checkbox' name='OFFLINE_MODE' $checked{'OFFLINE_MODE'}{'on'} /></td>
1207 </tr>
1208 <tr>
1209         <td class='base'>$Lang::tr{'advproxy cache-digest'}:</td>
1210         <td><input type='checkbox' name='CACHE_DIGESTS' $checked{'CACHE_DIGESTS'}{'on'} /></td>
1211 </tr>
1212 </table>
1213 <hr size='1'>
1214 <table width='100%'>
1215 <tr>
1216         <td colspan='4'><b>$Lang::tr{'advproxy destination ports'}</b></td>
1217 </tr>
1218 <tr>
1219         <td width='25%' align='center'></td> <td width='20%' align='center'></td><td width='25%' align='center'></td><td width='30%' align='center'></td>
1220 </tr>
1221 <tr>
1222         <td colspan='2' class='base'>$Lang::tr{'advproxy standard ports'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1223         <td colspan='2' class='base'>$Lang::tr{'advproxy ssl ports'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1224 </tr>
1225 <tr>
1226         <td colspan='2'><textarea name='PORTS_SAFE' cols='32' rows='6' wrap='off'>
1227 END
1228 ;
1229         if (!$proxysettings{'PORTS_SAFE'}) { print $def_ports_safe; } else { print $proxysettings{'PORTS_SAFE'}; }
1230
1231 print <<END
1232 </textarea></td>
1233         <td colspan='2'><textarea name='PORTS_SSL' cols='32' rows='6' wrap='off'>
1234 END
1235 ;
1236         if (!$proxysettings{'PORTS_SSL'}) { print $def_ports_ssl; } else { print $proxysettings{'PORTS_SSL'}; }
1237
1238 print <<END
1239 </textarea></td>
1240 </tr>
1241 </table>
1242 <hr size='1'>
1243 <table width='100%'>
1244 <tr>
1245         <td colspan='4'><b>$Lang::tr{'advproxy network based access'}</b></td>
1246 </tr>
1247 <tr>
1248         <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1249 </tr>
1250 <tr>
1251         <td colspan='4' class='base'>$Lang::tr{'advproxy allowed subnets'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1252 </tr>
1253 <tr>
1254         <td colspan='2' rowspan='4'><textarea name='SRC_SUBNETS' cols='32' rows='3' wrap='off'>
1255 END
1256 ;
1257
1258 if (!$proxysettings{'SRC_SUBNETS'})
1259 {
1260         print "$green_cidr\n";
1261         if ($netsettings{'BLUE_DEV'})
1262         {
1263                 print "$blue_cidr\n";
1264         }
1265 } else { print $proxysettings{'SRC_SUBNETS'}; }
1266
1267 print <<END
1268 </textarea></td>
1269 END
1270 ;
1271
1272 $line = $Lang::tr{'advproxy no internal proxy on green'};
1273 $line =~ s/Green/<font color="$Header::colourgreen">Green<\/font>/i;
1274 print "<td class='base'>$line:</td>\n";
1275 print <<END
1276         <td><input type='checkbox' name='NO_PROXY_LOCAL' $checked{'NO_PROXY_LOCAL'}{'on'} /></td>
1277 </tr>
1278 END
1279 ;
1280 if ($netsettings{'BLUE_DEV'}) {
1281         $line = $Lang::tr{'advproxy no internal proxy on blue'};
1282         $line =~ s/Blue/<font color="$Header::colourblue">Blue<\/font>/i;
1283         print "<tr>\n";
1284         print "<td class='base'>$line:</td>\n";
1285         print <<END
1286         <td><input type='checkbox' name='NO_PROXY_LOCAL_BLUE' $checked{'NO_PROXY_LOCAL_BLUE'}{'on'} /></td>
1287 </tr>
1288 END
1289 ;
1290 }
1291 print <<END
1292 <tr>
1293         <td colspan='2'>&nbsp;</td>
1294 </tr>
1295 <tr>
1296         <td colspan='2'>&nbsp;</td>
1297 </tr>
1298 </table>
1299 <table width='100%'>
1300 <tr>
1301         <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1302 </tr>
1303 <tr>
1304         <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted ip clients'}:</td>
1305         <td colspan='2' class='base'>$Lang::tr{'advproxy unrestricted mac clients'}:</td>
1306 </tr>
1307 <tr>
1308         <td colspan='2'><textarea name='SRC_UNRESTRICTED_IP' cols='32' rows='3' wrap='off'>
1309 END
1310 ;
1311
1312         print $proxysettings{'SRC_UNRESTRICTED_IP'};
1313
1314 print <<END
1315 </textarea></td>
1316         <td colspan='2'><textarea name='SRC_UNRESTRICTED_MAC' cols='32' rows='3' wrap='off'>
1317 END
1318 ;
1319
1320 print $proxysettings{'SRC_UNRESTRICTED_MAC'};
1321
1322 print <<END
1323 </textarea></td>
1324 </tr>
1325 </table>
1326 <table width='100%'>
1327 <tr>
1328         <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1329 </tr>
1330 <tr>
1331         <td colspan='2' class='base'>$Lang::tr{'advproxy banned ip clients'}:</td>
1332         <td colspan='2' class='base'>$Lang::tr{'advproxy banned mac clients'}:</td>
1333 </tr>
1334 <tr>
1335         <td colspan='2'><textarea name='SRC_BANNED_IP' cols='32' rows='3' wrap='off'>
1336 END
1337 ;
1338
1339         print $proxysettings{'SRC_BANNED_IP'};
1340
1341 print <<END
1342 </textarea></td>
1343         <td colspan='2'><textarea name='SRC_BANNED_MAC' cols='32' rows='3' wrap='off'>
1344 END
1345 ;
1346
1347 print $proxysettings{'SRC_BANNED_MAC'};
1348
1349 print <<END
1350 </textarea></td>
1351 </tr>
1352 </table>
1353
1354 <hr size='1'>
1355
1356 END
1357 ;
1358 # -------------------------------------------------------------------
1359 #  CRE GUI - optional
1360 # -------------------------------------------------------------------
1361
1362 if (-e $cre_enabled) { print <<END
1363 <table width='100%'>
1364
1365 <tr>
1366         <td colspan='4'><b>$Lang::tr{'advproxy classroom extensions'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='CLASSROOM_EXT' $checked{'CLASSROOM_EXT'}{'on'} /></td>
1367 </tr>
1368 <tr>
1369         <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1370 </tr>
1371 <tr>
1372
1373 END
1374 ;
1375 if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1376 print <<END
1377         <td class='base'>$Lang::tr{'advproxy supervisor password'}:</td>
1378         <td><input type='password' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' size='12' /></td>
1379 </tr>
1380 <tr>
1381         <td colspan='2' class='base'>$Lang::tr{'advproxy cre group definitions'}:</td>
1382         <td colspan='2' class='base'>$Lang::tr{'advproxy cre supervisors'}:</td>
1383 END
1384 ;
1385 }
1386 print "</tr>";
1387 if ($proxysettings{'CLASSROOM_EXT'} eq 'on'){
1388 print <<END
1389 <tr>
1390         <td colspan='2'><textarea name='CRE_GROUPS' cols='32' rows='6' wrap='off'>
1391 END
1392 ;
1393
1394         print $proxysettings{'CRE_GROUPS'};
1395
1396 print <<END
1397 </textarea></td>
1398         <td colspan='2'><textarea name='CRE_SVHOSTS' cols='32' rows='6' wrap='off'>
1399 END
1400 ;
1401         print $proxysettings{'CRE_SVHOSTS'};
1402
1403 print <<END
1404 </textarea></td>
1405 </tr>
1406 END
1407 ;
1408 }
1409 print "</table><hr size='1'>";
1410
1411 } else {
1412         print <<END
1413         <input type='hidden' name='SUPERVISOR_PASSWORD' value='$proxysettings{'SUPERVISOR_PASSWORD'}' />
1414         <input type='hidden' name='CRE_GROUPS'          value='$proxysettings{'CRE_GROUPS'}' />
1415         <input type='hidden' name='CRE_SVHOSTS'         value='$proxysettings{'CRE_SVHOSTS'}' />
1416 END
1417 ;
1418 }
1419
1420 # -------------------------------------------------------------------
1421
1422 print <<END
1423
1424 <table width='100%'>
1425 <tr>
1426         <td colspan='4'><b>$Lang::tr{'advproxy time restrictions'}</b></td>
1427 </tr>
1428 <table width='100%'>
1429 <tr>
1430         <td width='2%'>$Lang::tr{'advproxy access'}</td>
1431         <td width='1%'>&nbsp;</td>
1432         <td width='2%' align='center'>$Lang::tr{'advproxy monday'}</td>
1433         <td width='2%' align='center'>$Lang::tr{'advproxy tuesday'}</td>
1434         <td width='2%' align='center'>$Lang::tr{'advproxy wednesday'}</td>
1435         <td width='2%' align='center'>$Lang::tr{'advproxy thursday'}</td>
1436         <td width='2%' align='center'>$Lang::tr{'advproxy friday'}</td>
1437         <td width='2%' align='center'>$Lang::tr{'advproxy saturday'}</td>
1438         <td width='2%' align='center'>$Lang::tr{'advproxy sunday'}</td>
1439         <td width='1%'>&nbsp;&nbsp;</td>
1440         <td width='7%' colspan=3>$Lang::tr{'advproxy from'}</td>
1441         <td width='1%'>&nbsp;</td>
1442         <td width='7%' colspan=3>$Lang::tr{'advproxy to'}</td>
1443         <td>&nbsp;</td>
1444 </tr>
1445 <tr>
1446         <td class='base'>
1447         <select name='TIME_ACCESS_MODE'>
1448         <option value='allow' $selected{'TIME_ACCESS_MODE'}{'allow'}>$Lang::tr{'advproxy mode allow'}</option>
1449         <option value='deny'  $selected{'TIME_ACCESS_MODE'}{'deny'}>$Lang::tr{'advproxy mode deny'}</option>
1450         </select>
1451         </td>
1452         <td>&nbsp;</td>
1453         <td class='base'><input type='checkbox' name='TIME_MON' $checked{'TIME_MON'}{'on'} /></td>
1454         <td class='base'><input type='checkbox' name='TIME_TUE' $checked{'TIME_TUE'}{'on'} /></td>
1455         <td class='base'><input type='checkbox' name='TIME_WED' $checked{'TIME_WED'}{'on'} /></td>
1456         <td class='base'><input type='checkbox' name='TIME_THU' $checked{'TIME_THU'}{'on'} /></td>
1457         <td class='base'><input type='checkbox' name='TIME_FRI' $checked{'TIME_FRI'}{'on'} /></td>
1458         <td class='base'><input type='checkbox' name='TIME_SAT' $checked{'TIME_SAT'}{'on'} /></td>
1459         <td class='base'><input type='checkbox' name='TIME_SUN' $checked{'TIME_SUN'}{'on'} /></td>
1460         <td>&nbsp;</td>
1461         <td class='base'>
1462         <select name='TIME_FROM_HOUR'>
1463 END
1464 ;
1465 for ($i=0;$i<=24;$i++) {
1466         $_ = sprintf("%02s",$i);
1467         print "<option $selected{'TIME_FROM_HOUR'}{$_}>$_</option>\n";
1468 }
1469 print <<END
1470         </select>
1471         </td>
1472         <td>:</td>
1473         <td class='base'>
1474         <select name='TIME_FROM_MINUTE'>
1475 END
1476 ;
1477 for ($i=0;$i<=45;$i+=15) {
1478         $_ = sprintf("%02s",$i);
1479         print "<option $selected{'TIME_FROM_MINUTE'}{$_}>$_</option>\n";
1480 }
1481 print <<END
1482         </select>
1483         <td> - </td>
1484         </td>
1485         <td class='base'>
1486         <select name='TIME_TO_HOUR'>
1487 END
1488 ;
1489 for ($i=0;$i<=24;$i++) {
1490         $_ = sprintf("%02s",$i);
1491         print "<option $selected{'TIME_TO_HOUR'}{$_}>$_</option>\n";
1492 }
1493 print <<END
1494         </select>
1495         </td>
1496         <td>:</td>
1497         <td class='base'>
1498         <select name='TIME_TO_MINUTE'>
1499 END
1500 ;
1501 for ($i=0;$i<=45;$i+=15) {
1502         $_ = sprintf("%02s",$i);
1503         print "<option $selected{'TIME_TO_MINUTE'}{$_}>$_</option>\n";
1504 }
1505 print <<END
1506         </select>
1507         </td>
1508 </tr>
1509 </table>
1510 <hr size='1'>
1511 <table width='100%'>
1512 <tr>
1513         <td colspan='4'><b>$Lang::tr{'advproxy transfer limits'}</b></td>
1514 </tr>
1515 <tr>
1516         <td width='25%' class='base'>$Lang::tr{'advproxy max download size'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1517         <td width='20%'><input type='text' name='MAX_INCOMING_SIZE' value='$proxysettings{'MAX_INCOMING_SIZE'}' size='5' /></td>
1518         <td width='25%' class='base'>$Lang::tr{'advproxy max upload size'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
1519         <td width='30%'><input type='text' name='MAX_OUTGOING_SIZE' value='$proxysettings{'MAX_OUTGOING_SIZE'}' size='5' /></td>
1520 </tr>
1521 </table>
1522 <hr size='1'>
1523 <table width='100%'>
1524 <tr>
1525         <td colspan='4'><b>$Lang::tr{'advproxy download throttling'}</b></td>
1526 </tr>
1527 <tr>
1528         <td width='25%' class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourgreen">Green</font>:</td>
1529         <td width='20%' class='base'>
1530         <select name='THROTTLING_GREEN_TOTAL'>
1531 END
1532 ;
1533
1534 foreach (@throttle_limits) {
1535         print "\t<option value='$_' $selected{'THROTTLING_GREEN_TOTAL'}{$_}>$_ kbit/s</option>\n";
1536 }
1537
1538 print <<END
1539         <option value='0' $selected{'THROTTLING_GREEN_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1540         </select>
1541         </td>
1542         <td width='25%' class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourgreen">Green</font>:</td>
1543         <td width='30%' class='base'>
1544         <select name='THROTTLING_GREEN_HOST'>
1545 END
1546 ;
1547
1548 foreach (@throttle_limits) {
1549         print "\t<option value='$_' $selected{'THROTTLING_GREEN_HOST'}{$_}>$_ kbit/s</option>\n";
1550 }
1551
1552 print <<END
1553         <option value='0' $selected{'THROTTLING_GREEN_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1554         </select>
1555         </td>
1556 </tr>
1557 END
1558 ;
1559
1560 if ($netsettings{'BLUE_DEV'}) {
1561         print <<END
1562 <tr>
1563         <td class='base'>$Lang::tr{'advproxy throttling total on'} <font color="$Header::colourblue">Blue</font>:</td>
1564         <td class='base'>
1565         <select name='THROTTLING_BLUE_TOTAL'>
1566 END
1567 ;
1568
1569 foreach (@throttle_limits) {
1570         print "\t<option value='$_' $selected{'THROTTLING_BLUE_TOTAL'}{$_}>$_ kbit/s</option>\n";
1571 }
1572
1573 print <<END
1574         <option value='0' $selected{'THROTTLING_BLUE_TOTAL'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1575         </select>
1576         </td>
1577         <td class='base'>$Lang::tr{'advproxy throttling per host on'} <font color="$Header::colourblue">Blue</font>:</td>
1578         <td class='base'>
1579         <select name='THROTTLING_BLUE_HOST'>
1580 END
1581 ;
1582
1583 foreach (@throttle_limits) {
1584         print "\t<option value='$_' $selected{'THROTTLING_BLUE_HOST'}{$_}>$_ kbit/s</option>\n";
1585 }
1586
1587 print <<END
1588         <option value='0' $selected{'THROTTLING_BLUE_HOST'}{'unlimited'}>$Lang::tr{'advproxy throttling unlimited'}</option>\n";
1589         </select>
1590         </td>
1591 </tr>
1592 END
1593 ;
1594 }
1595
1596 print <<END
1597 </table>
1598 <table width='100%'>
1599 <tr>
1600         <td colspan='4'><i>$Lang::tr{'advproxy content based throttling'}:</i></td>
1601 </tr>
1602 <tr>
1603         <td width='15%' class='base'>$Lang::tr{'advproxy throttle binary'}:</td>
1604         <td width='10%'><input type='checkbox' name='THROTTLE_BINARY' $checked{'THROTTLE_BINARY'}{'on'} /></td>
1605         <td width='15%' class='base'>$Lang::tr{'advproxy throttle dskimg'}:</td>
1606         <td width='10%'><input type='checkbox' name='THROTTLE_DSKIMG' $checked{'THROTTLE_DSKIMG'}{'on'} /></td>
1607         <td width='15%' class='base'>$Lang::tr{'advproxy throttle mmedia'}:</td>
1608         <td width='10%'><input type='checkbox' name='THROTTLE_MMEDIA' $checked{'THROTTLE_MMEDIA'}{'on'} /></td>
1609         <td width='15%'>&nbsp;</td>
1610         <td width='10%'>&nbsp;</td>
1611 </tr>
1612 </table>
1613 <hr size='1'>
1614 <table width='100%'>
1615 <tr>
1616         <td colspan='4'><b>$Lang::tr{'advproxy MIME filter'}</b> $Lang::tr{'advproxy enabled'}:<input type='checkbox' name='ENABLE_MIME_FILTER' $checked{'ENABLE_MIME_FILTER'}{'on'} /></td>
1617 </tr>
1618 END
1619 ;
1620 if ( $proxysettings{'ENABLE_MIME_FILTER'} eq 'on' ){
1621 print <<END
1622 <tr>
1623         <td  colspan='2' class='base'>$Lang::tr{'advproxy MIME block types'}:</td>
1624         <td>&nbsp;</td>
1625         <td>&nbsp;</td>
1626 </tr>
1627 <tr>
1628         <td colspan='2'><textarea name='MIME_TYPES' cols='32' rows='6' wrap='off'>
1629 END
1630 ;
1631
1632 print $proxysettings{'MIME_TYPES'};
1633
1634 print <<END
1635 </textarea></td>
1636         <td>&nbsp;</td>
1637         <td>&nbsp;</td>
1638 </tr>
1639 END
1640 ;
1641 }
1642 print <<END
1643 </table>
1644
1645 <hr size='1'>
1646 <table width='100%'>
1647 <tr>
1648         <td colspan='4'><b>$Lang::tr{'advproxy web browser'}</b> $Lang::tr{'advproxy UA enable filter'}:<input type='checkbox' name='ENABLE_BROWSER_CHECK' $checked{'ENABLE_BROWSER_CHECK'}{'on'} /></td>
1649 </tr>
1650 END
1651 ;
1652 if ( $proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on' ){
1653 print <<END
1654 <tr>
1655         <td colspan='4'><i>
1656 END
1657 ;
1658 if (@useragentlist) { print "$Lang::tr{'advproxy allowed web browsers'}:"; } else { print "$Lang::tr{'advproxy no clients defined'}"; }
1659 print <<END
1660 </i></td>
1661 </tr>
1662 </table>
1663 <table width='100%'>
1664 END
1665 ;
1666
1667 for ($n=0; $n<=@useragentlist; $n = $n + $i) {
1668         for ($i=0; $i<=3; $i++) {
1669                 if ($i eq 0) { print "<tr>\n"; }
1670                 if (($n+$i) < @useragentlist) {
1671                         @useragent = split(/,/,@useragentlist[$n+$i]);
1672                         print "<td width='15%'>$useragent[1]:<\/td>\n";
1673                         print "<td width='10%'><input type='checkbox' name='UA_$useragent[0]' $checked{'UA_'.$useragent[0]}{'on'} /></td>\n";
1674                 }
1675                 if ($i eq 3) { print "<\/tr>\n"; }
1676         }
1677 }
1678 }
1679 print <<END
1680 </table>
1681 <hr size='1'>
1682 <table width='100%'>
1683 <tr>
1684         <td><b>$Lang::tr{'advproxy privacy'}</b></td>
1685 </tr>
1686 <tr>
1687         <td class='base'>$Lang::tr{'advproxy fake useragent'}:</td>
1688         <td class='base'>$Lang::tr{'advproxy fake referer'}:</td>
1689 </tr>
1690 <tr>
1691         <td><input type='text' name='FAKE_USERAGENT' value='$proxysettings{'FAKE_USERAGENT'}' size='40%' /></td>
1692         <td><input type='text' name='FAKE_REFERER' value='$proxysettings{'FAKE_REFERER'}' size='40%' /></td>
1693 </tr>
1694 </table>
1695 <hr size='1'>
1696 END
1697 ;
1698
1699 my $auth_columns = 5;
1700 if ($HAVE_NTLM_AUTH) {
1701         $auth_columns++;
1702 }
1703 my $auth_column_width = 100 / $auth_columns;
1704
1705 print <<END;
1706 <table width='100%'>
1707 <tr>
1708         <td colspan='$auth_columns'><b>$Lang::tr{'advproxy AUTH method'}</b></td>
1709 </tr>
1710 <tr>
1711         <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='none' $checked{'AUTH_METHOD'}{'none'} />$Lang::tr{'advproxy AUTH method none'}</td>
1712         <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ncsa' $checked{'AUTH_METHOD'}{'ncsa'} />$Lang::tr{'advproxy AUTH method ncsa'}</td>
1713         <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ident' $checked{'AUTH_METHOD'}{'ident'} />$Lang::tr{'advproxy AUTH method ident'}</td>
1714         <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ldap' $checked{'AUTH_METHOD'}{'ldap'} />$Lang::tr{'advproxy AUTH method ldap'}</td>
1715         <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ntlm' $checked{'AUTH_METHOD'}{'ntlm'} />$Lang::tr{'advproxy AUTH method ntlm'}</td>
1716 END
1717
1718 if ($HAVE_NTLM_AUTH) {
1719         print <<END;
1720         <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='ntlm-auth' $checked{'AUTH_METHOD'}{'ntlm-auth'} />$Lang::tr{'advproxy AUTH method ntlm auth'}</td>
1721 END
1722 }
1723
1724 print <<END
1725         <td width='$auth_column_width%' class='base'><input type='radio' name='AUTH_METHOD' value='radius' $checked{'AUTH_METHOD'}{'radius'} />$Lang::tr{'advproxy AUTH method radius'}</td>
1726 </tr>
1727 </table>
1728 END
1729 ;
1730
1731 if (!($proxysettings{'AUTH_METHOD'} eq 'none')) { if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) { print <<END
1732 <hr size='1'>
1733 <table width='100%'>
1734 <tr>
1735         <td colspan='4'><b>$Lang::tr{'advproxy AUTH global settings'}</b></td>
1736 </tr>
1737 <tr>
1738         <td width='25%'></td> <td width='20%'> </td><td width='25%'> </td><td width='30%'></td>
1739 </tr>
1740 <tr>
1741         <td class='base'>$Lang::tr{'advproxy AUTH number of auth processes'}:</td>
1742         <td><input type='text' name='AUTH_CHILDREN' value='$proxysettings{'AUTH_CHILDREN'}' size='5' /></td>
1743         <td colspan='2' rowspan= '6' valign='top' class='base'>
1744                 <table cellpadding='0' cellspacing='0'>
1745                         <tr>
1746                         <td class='base'>$Lang::tr{'advproxy AUTH realm'}:</td>
1747                         </tr>
1748                         <tr>
1749                                 <!-- intentionally left empty -->
1750                         </tr>
1751                         <tr>
1752                                 <!-- intentionally left empty -->
1753                         </tr>
1754                         <tr>
1755                         <td><input type='text' name='AUTH_REALM' value='$proxysettings{'AUTH_REALM'}' size='40' /></td>
1756                         </tr>
1757                         <tr>
1758                                 <!-- intentionally left empty -->
1759                         </tr>
1760                         <tr>
1761                                 <!-- intentionally left empty -->
1762                         </tr>
1763                         <tr>
1764                         <td>$Lang::tr{'advproxy AUTH no auth'}:</td>
1765                         </tr>
1766                         <tr>
1767                                 <!-- intentionally left empty -->
1768                         </tr>
1769                         <tr>
1770                                 <!-- intentionally left empty -->
1771                         </tr>
1772                         <tr>
1773                         <td><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1774 END
1775 ;
1776
1777 print $proxysettings{'DST_NOAUTH'};
1778
1779 print <<END
1780 </textarea></td>
1781                 </tr>
1782                 </table>
1783         </td>
1784 </tr>
1785 <tr>
1786         <td class='base'>$Lang::tr{'advproxy AUTH auth cache TTL'}:</td>
1787         <td><input type='text' name='AUTH_CACHE_TTL' value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
1788 </tr>
1789 <tr>
1790         <td class='base'>$Lang::tr{'advproxy AUTH limit of IP addresses'}:</td>
1791         <td><input type='text' name='AUTH_MAX_USERIP' value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
1792 </tr>
1793 <tr>
1794         <td class='base'>$Lang::tr{'advproxy AUTH user IP cache TTL'}:</td>
1795         <td><input type='text' name='AUTH_IPCACHE_TTL' value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
1796 </tr>
1797 <tr>
1798         <td class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1799         <td><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
1800 </tr>
1801 <tr>
1802         <td colspan='2'>&nbsp;</td>
1803 </tr>
1804 </table>
1805 END
1806 ;
1807 }
1808
1809 # ===================================================================
1810 #  NCSA auth settings
1811 # ===================================================================
1812
1813 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa') {
1814 print <<END
1815 <hr size='1'>
1816 <table width='100%'>
1817 <tr>
1818         <td colspan='4'><b>$Lang::tr{'advproxy NCSA auth'}</b></td>
1819 </tr>
1820 <tr>
1821         <td width='25%' class='base'>$Lang::tr{'advproxy NCSA min password length'}:</td>
1822         <td width='20%'><input type='text' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}' size='5' /></td>
1823         <td width='25%' class='base'>$Lang::tr{'advproxy NCSA redirector bypass'} \'$Lang::tr{'advproxy NCSA grp extended'}\':</td>
1824         <td width='20%'><input type='checkbox' name='NCSA_BYPASS_REDIR' $checked{'NCSA_BYPASS_REDIR'}{'on'} /></td>
1825 </tr>
1826 <tr>
1827         <td colspan='2'><br>&nbsp;<input type='submit' name='ACTION' value='$Lang::tr{'advproxy NCSA user management'}'></td>
1828         <td>&nbsp;</td>
1829         <td>&nbsp;</td>
1830 </tr>
1831 </table>
1832 END
1833 ; }
1834
1835 # ===================================================================
1836 #  IDENTD auth settings
1837 # ===================================================================
1838
1839 if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
1840 print <<END
1841 <hr size ='1'>
1842 <table width='100%'>
1843 <tr>
1844         <td colspan='4'><b>$Lang::tr{'advproxy IDENT identd settings'}</b></td>
1845 </tr>
1846 <tr>
1847         <td width='25%' class='base'>$Lang::tr{'advproxy IDENT required'}:</td>
1848         <td width='20%'><input type='checkbox' name='IDENT_REQUIRED' $checked{'IDENT_REQUIRED'}{'on'} /></td>
1849         <td width='25%' class='base'>$Lang::tr{'advproxy AUTH always required'}:</td>
1850         <td width='30%'><input type='checkbox' name='AUTH_ALWAYS_REQUIRED' $checked{'AUTH_ALWAYS_REQUIRED'}{'on'} /></td>
1851 </tr>
1852 <tr>
1853         <td class='base'>$Lang::tr{'advproxy IDENT timeout'}:</td>
1854         <td><input type='text' name='IDENT_TIMEOUT' value='$proxysettings{'IDENT_TIMEOUT'}' size='5' /></td>
1855         <td>&nbsp;</td>
1856         <td>&nbsp;</td>
1857 </tr>
1858 <tr>
1859         <td colspan='2' class='base'>$Lang::tr{'advproxy IDENT aware hosts'}:</td>
1860         <td colspan='2' class='base'>$Lang::tr{'advproxy AUTH no auth'}:</td>
1861 </tr>
1862 <tr>
1863         <td colspan='2'><textarea name='IDENT_HOSTS' cols='32' rows='6' wrap='off'>
1864 END
1865 ;
1866 if (!$proxysettings{'IDENT_HOSTS'}) {
1867         print "$green_cidr\n";
1868         if ($netsettings{'BLUE_DEV'}) {
1869                 print "$blue_cidr\n";
1870         }
1871 } else {
1872         print $proxysettings{'IDENT_HOSTS'};
1873 }
1874
1875 print <<END
1876 </textarea></td>
1877                         <td colspan='2'><textarea name='DST_NOAUTH' cols='32' rows='6' wrap='off'>
1878 END
1879 ;
1880
1881 print $proxysettings{'DST_NOAUTH'};
1882
1883 print <<END
1884 </textarea></td>
1885 </tr>
1886 </table>
1887 <hr size ='1'>
1888 <table width='100%'>
1889 <tr>
1890         <td colspan='4'><b>$Lang::tr{'advproxy IDENT user based access restrictions'}</b></td>
1891 </tr>
1892 <tr>
1893         <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1894         <td width='20%'><input type='checkbox' name='IDENT_ENABLE_ACL' $checked{'IDENT_ENABLE_ACL'}{'on'} /></td>
1895         <td width='25%'>&nbsp;</td>
1896         <td width='30%'>&nbsp;</td>
1897 </tr>
1898 <tr>
1899         <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='positive' $checked{'IDENT_USER_ACL'}{'positive'} />
1900         $Lang::tr{'advproxy IDENT use positive access list'}:</td>
1901         <td colspan='2'><input type='radio' name='IDENT_USER_ACL' value='negative' $checked{'IDENT_USER_ACL'}{'negative'} />
1902         $Lang::tr{'advproxy IDENT use negative access list'}:</td>
1903 </tr>
1904 <tr>
1905         <td colspan='2'>$Lang::tr{'advproxy IDENT authorized users'}</td>
1906         <td colspan='2'>$Lang::tr{'advproxy IDENT unauthorized users'}</td>
1907 </tr>
1908 <tr>
1909         <td colspan='2'><textarea name='IDENT_ALLOW_USERS' cols='32' rows='6' wrap='off'>
1910 END
1911 ; }
1912
1913 if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_ALLOW_USERS'}; }
1914
1915 if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1916 </textarea></td>
1917         <td colspan='2'><textarea name='IDENT_DENY_USERS' cols='32' rows='6' wrap='off'>
1918 END
1919 ; }
1920
1921 if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print $proxysettings{'IDENT_DENY_USERS'}; }
1922
1923 if ($proxysettings{'AUTH_METHOD'} eq 'ident') { print <<END
1924 </textarea></td>
1925 </tr>
1926 </table>
1927 END
1928 ; }
1929
1930 # ===================================================================
1931 #  NTLM auth settings
1932 # ===================================================================
1933
1934 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') {
1935 print <<END
1936 <hr size='1'>
1937 <table width='100%'>
1938 <tr>
1939         <td colspan='6'><b>$Lang::tr{'advproxy NTLM domain settings'}</b></td>
1940 </tr>
1941 <tr>
1942         <td class='base'>$Lang::tr{'advproxy NTLM domain'}:</td>
1943         <td><input type='text' name='NTLM_DOMAIN' value='$proxysettings{'NTLM_DOMAIN'}' size='15' /></td>
1944         <td class='base'>$Lang::tr{'advproxy NTLM PDC hostname'}:</td>
1945         <td><input type='text' name='NTLM_PDC' value='$proxysettings{'NTLM_PDC'}' size='14' /></td>
1946         <td class='base'>$Lang::tr{'advproxy NTLM BDC hostname'}:</td>
1947         <td><input type='text' name='NTLM_BDC' value='$proxysettings{'NTLM_BDC'}' size='14' /></td>
1948 </tr>
1949 </table>
1950 <hr size ='1'>
1951 <table width='100%'>
1952 <tr>
1953         <td colspan='3'><b>$Lang::tr{'advproxy NTLM auth mode'}</b></td>
1954 </tr>
1955 <tr>
1956         <td width='25%' class='base' width='25%'>$Lang::tr{'advproxy NTLM use integrated auth'}:</td>
1957         <td width='20%'><input type='checkbox' name='NTLM_ENABLE_INT_AUTH' $checked{'NTLM_ENABLE_INT_AUTH'}{'on'} /></td>
1958         <td>&nbsp;</td>
1959 </tr>
1960 </table>
1961 <hr size ='1'>
1962 <table width='100%'>
1963 <tr>
1964         <td colspan='4'><b>$Lang::tr{'advproxy NTLM user based access restrictions'}</b></td>
1965 </tr>
1966 <tr>
1967         <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
1968         <td width='20%'><input type='checkbox' name='NTLM_ENABLE_ACL' $checked{'NTLM_ENABLE_ACL'}{'on'} /></td>
1969         <td width='25%'>&nbsp;</td>
1970         <td width='30%'>&nbsp;</td>
1971 </tr>
1972 <tr>
1973         <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='positive' $checked{'NTLM_USER_ACL'}{'positive'} />
1974         $Lang::tr{'advproxy NTLM use positive access list'}:</td>
1975         <td colspan='2'><input type='radio' name='NTLM_USER_ACL' value='negative' $checked{'NTLM_USER_ACL'}{'negative'} />
1976         $Lang::tr{'advproxy NTLM use negative access list'}:</td>
1977 </tr>
1978 <tr>
1979         <td colspan='2'>$Lang::tr{'advproxy NTLM authorized users'}</td>
1980         <td colspan='2'>$Lang::tr{'advproxy NTLM unauthorized users'}</td>
1981 </tr>
1982 <tr>
1983         <td colspan='2'><textarea name='NTLM_ALLOW_USERS' cols='32' rows='6' wrap='off'>
1984 END
1985 ; }
1986
1987 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_ALLOW_USERS'}; }
1988
1989 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1990 </textarea></td>
1991         <td colspan='2'><textarea name='NTLM_DENY_USERS' cols='32' rows='6' wrap='off'>
1992 END
1993 ; }
1994
1995 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print $proxysettings{'NTLM_DENY_USERS'}; }
1996
1997 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm') { print <<END
1998 </textarea></td>
1999 </tr>
2000 </table>
2001 END
2002 ; }
2003
2004 # ===================================================================
2005 #  NTLM-AUTH settings
2006 # ===================================================================
2007
2008 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm-auth') {
2009         print <<END;
2010                 <hr size ='1'>
2011                 <table width='100%'>
2012                         <td width='20%' class='base'>$Lang::tr{'advproxy basic authentication'}:</td>
2013                         <td width='40%'><input type='checkbox' name='NTLM_AUTH_BASIC' $checked{'NTLM_AUTH_BASIC'}{'on'} /></td>
2014                         <td colspan='2'>&nbsp;</td>
2015                 </table>
2016
2017                 <hr size='1' />
2018
2019                 <table width='100%'>
2020                         <tr>
2021                                 <td colspan='4'><b>$Lang::tr{'advproxy group access control'}</b></td>
2022                         </tr>
2023                         <tr>
2024                                 <td width='20%' class='base'>$Lang::tr{'advproxy group required'}:</td>
2025                                 <td width='40%'><input type='text' name='NTLM_AUTH_GROUP' value='$proxysettings{'NTLM_AUTH_GROUP'}' size='37' /></td>
2026                                 <td>&nbsp;</td>
2027                                 <td>&nbsp;</td>
2028                         </tr>
2029         </table>
2030 END
2031 }
2032
2033 # ===================================================================
2034 #  LDAP auth settings
2035 # ===================================================================
2036
2037 if ($proxysettings{'AUTH_METHOD'} eq 'ldap') {
2038 print <<END
2039 <hr size='1'>
2040 <table width='100%'>
2041 <tr>
2042         <td colspan='4'><b>$Lang::tr{'advproxy LDAP common settings'}</b></td>
2043 </tr>
2044 <tr>
2045         <td class='base'>$Lang::tr{'advproxy LDAP basedn'}:</td>
2046         <td><input type='text' name='LDAP_BASEDN' value='$proxysettings{'LDAP_BASEDN'}' size='37' /></td>
2047         <td class='base'>$Lang::tr{'advproxy LDAP type'}:</td>
2048         <td class='base'><select name='LDAP_TYPE'>
2049                 <option value='ADS' $selected{'LDAP_TYPE'}{'ADS'}>$Lang::tr{'advproxy LDAP ADS'}</option>
2050                 <option value='NDS' $selected{'LDAP_TYPE'}{'NDS'}>$Lang::tr{'advproxy LDAP NDS'}</option>
2051                 <option value='V2' $selected{'LDAP_TYPE'}{'V2'}>$Lang::tr{'advproxy LDAP V2'}</option>
2052                 <option value='V3' $selected{'LDAP_TYPE'}{'V3'}>$Lang::tr{'advproxy LDAP V3'}</option>
2053         </select></td>
2054 </tr>
2055 <tr>
2056         <td width='20%' class='base'>$Lang::tr{'advproxy LDAP server'}:</td>
2057         <td width='40%'><input type='text' name='LDAP_SERVER' value='$proxysettings{'LDAP_SERVER'}' size='14' /></td>
2058         <td width='20%' class='base'>$Lang::tr{'advproxy LDAP port'}:</td>
2059         <td><input type='text' name='LDAP_PORT' value='$proxysettings{'LDAP_PORT'}' size='3' /></td>
2060 </tr>
2061 </table>
2062 <hr size ='1'>
2063 <table width='100%'>
2064 <tr>
2065         <td colspan='4'><b>$Lang::tr{'advproxy LDAP binddn settings'}</b></td>
2066 </tr>
2067 <tr>
2068         <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn username'}:</td>
2069         <td width='40%'><input type='text' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}' size='37' /></td>
2070         <td width='20%' class='base'>$Lang::tr{'advproxy LDAP binddn password'}:</td>
2071         <td><input type='password' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}' size='14' /></td>
2072 </tr>
2073 </table>
2074 <hr size ='1'>
2075 <table width='100%'>
2076 <tr>
2077         <td colspan='4'><b>$Lang::tr{'advproxy LDAP group access control'}</b></td>
2078 </tr>
2079 <tr>
2080         <td width='20%' class='base'>$Lang::tr{'advproxy LDAP group required'}:</td>
2081         <td width='40%'><input type='text' name='LDAP_GROUP' value='$proxysettings{'LDAP_GROUP'}' size='37' /></td>
2082         <td>&nbsp;</td>
2083         <td>&nbsp;</td>
2084 </tr>
2085 </table>
2086 END
2087 ; }
2088
2089 # ===================================================================
2090 #  RADIUS auth settings
2091 # ===================================================================
2092
2093 if ($proxysettings{'AUTH_METHOD'} eq 'radius') {
2094 print <<END
2095 <hr size='1'>
2096 <table width='100%'>
2097 <tr>
2098         <td colspan='4'><b>$Lang::tr{'advproxy RADIUS radius settings'}</b></td>
2099 </tr>
2100 <tr>
2101         <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS server'}:</td>
2102         <td width='20%'><input type='text' name='RADIUS_SERVER' value='$proxysettings{'RADIUS_SERVER'}' size='14' /></td>
2103         <td width='25%' class='base'>$Lang::tr{'advproxy RADIUS port'}:</td>
2104         <td width='30%'><input type='text' name='RADIUS_PORT' value='$proxysettings{'RADIUS_PORT'}' size='3' /></td>
2105 </tr>
2106 <tr>
2107         <td class='base'>$Lang::tr{'advproxy RADIUS identifier'}:</td>
2108         <td><input type='text' name='RADIUS_IDENTIFIER' value='$proxysettings{'RADIUS_IDENTIFIER'}' size='14' /></td>
2109         <td class='base'>$Lang::tr{'advproxy RADIUS secret'}:</td>
2110         <td><input type='password' name='RADIUS_SECRET' value='$proxysettings{'RADIUS_SECRET'}' size='14' /></td>
2111 </tr>
2112 </table>
2113 <hr size ='1'>
2114 <table width='100%'>
2115 <tr>
2116         <td colspan='4'><b>$Lang::tr{'advproxy RADIUS user based access restrictions'}</b></td>
2117 </tr>
2118 <tr>
2119         <td width='25%' class='base'>$Lang::tr{'advproxy enabled'}:</td>
2120         <td width='20%'><input type='checkbox' name='RADIUS_ENABLE_ACL' $checked{'RADIUS_ENABLE_ACL'}{'on'} /></td>
2121         <td width='25%'>&nbsp;</td>
2122         <td width='30%'>&nbsp;</td>
2123 </tr>
2124 <tr>
2125         <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='positive' $checked{'RADIUS_USER_ACL'}{'positive'} />
2126         $Lang::tr{'advproxy RADIUS use positive access list'}:</td>
2127         <td colspan='2'><input type='radio' name='RADIUS_USER_ACL' value='negative' $checked{'RADIUS_USER_ACL'}{'negative'} />
2128         $Lang::tr{'advproxy RADIUS use negative access list'}:</td>
2129 </tr>
2130 <tr>
2131         <td colspan='2'>$Lang::tr{'advproxy RADIUS authorized users'}</td>
2132         <td colspan='2'>$Lang::tr{'advproxy RADIUS unauthorized users'}</td>
2133 </tr>
2134 <tr>
2135         <td colspan='2'><textarea name='RADIUS_ALLOW_USERS' cols='32' rows='6' wrap='off'>
2136 END
2137 ; }
2138
2139 if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_ALLOW_USERS'}; }
2140
2141 if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
2142 </textarea></td>
2143         <td colspan='2'><textarea name='RADIUS_DENY_USERS' cols='32' rows='6' wrap='off'>
2144 END
2145 ; }
2146
2147 if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print $proxysettings{'RADIUS_DENY_USERS'}; }
2148
2149 if ($proxysettings{'AUTH_METHOD'} eq 'radius') { print <<END
2150 </textarea></td>
2151 </tr>
2152 </table>
2153 END
2154 ; }
2155
2156 # ===================================================================
2157
2158 }
2159
2160 print "<table>\n";
2161
2162 if ($proxysettings{'AUTH_METHOD'} eq 'none') {
2163 print <<END
2164 <td><input type='hidden' name='AUTH_CHILDREN'        value='$proxysettings{'AUTH_CHILDREN'}'></td>
2165 <td><input type='hidden' name='AUTH_CACHE_TTL'       value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
2166 <td><input type='hidden' name='AUTH_MAX_USERIP'      value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
2167 <td><input type='hidden' name='AUTH_IPCACHE_TTL'     value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
2168 <td><input type='hidden' name='AUTH_ALWAYS_REQUIRED' value='$proxysettings{'AUTH_ALWAYS_REQUIRED'}'></td>
2169 <td><input type='hidden' name='AUTH_REALM'           value='$proxysettings{'AUTH_REALM'}'></td>
2170 <td><input type='hidden' name='DST_NOAUTH'           value='$proxysettings{'DST_NOAUTH'}'></td>
2171 END
2172 ; }
2173
2174 if ($proxysettings{'AUTH_METHOD'} eq 'ident') {
2175 print <<END
2176 <td><input type='hidden' name='AUTH_CHILDREN'        value='$proxysettings{'AUTH_CHILDREN'}'></td>
2177 <td><input type='hidden' name='AUTH_CACHE_TTL'       value='$proxysettings{'AUTH_CACHE_TTL'}' size='5' /></td>
2178 <td><input type='hidden' name='AUTH_MAX_USERIP'      value='$proxysettings{'AUTH_MAX_USERIP'}' size='5' /></td>
2179 <td><input type='hidden' name='AUTH_IPCACHE_TTL'     value='$proxysettings{'AUTH_IPCACHE_TTL'}' size='5' /></td>
2180 <td><input type='hidden' name='AUTH_REALM'           value='$proxysettings{'AUTH_REALM'}'></td>
2181 END
2182 ; }
2183
2184 if (!($proxysettings{'AUTH_METHOD'} eq 'ncsa')) {
2185 print <<END
2186 <td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2187 <td><input type='hidden' name='NCSA_BYPASS_REDIR' value='$proxysettings{'NCSA_BYPASS_REDIR'}'></td>
2188 END
2189 ; }
2190
2191 if (!($proxysettings{'AUTH_METHOD'} eq 'ident')) {
2192 print <<END
2193 <td><input type='hidden' name='IDENT_REQUIRED'    value='$proxysettings{'IDENT_REQUIRED'}'></td>
2194 <td><input type='hidden' name='IDENT_TIMEOUT'     value='$proxysettings{'IDENT_TIMEOUT'}'></td>
2195 <td><input type='hidden' name='IDENT_HOSTS'       value='$proxysettings{'IDENT_HOSTS'}'></td>
2196 <td><input type='hidden' name='IDENT_ENABLE_ACL'  value='$proxysettings{'IDENT_ENABLE_ACL'}'></td>
2197 <td><input type='hidden' name='IDENT_USER_ACL'    value='$proxysettings{'IDENT_USER_ACL'}'></td>
2198 <td><input type='hidden' name='IDENT_ALLOW_USERS' value='$proxysettings{'IDENT_ALLOW_USERS'}'></td>
2199 <td><input type='hidden' name='IDENT_DENY_USERS'  value='$proxysettings{'IDENT_DENY_USERS'}'></td>
2200 END
2201 ; }
2202
2203 if (!($proxysettings{'AUTH_METHOD'} eq 'ldap')) {
2204 print <<END
2205 <td><input type='hidden' name='LDAP_BASEDN'      value='$proxysettings{'LDAP_BASEDN'}'></td>
2206 <td><input type='hidden' name='LDAP_TYPE'        value='$proxysettings{'LDAP_TYPE'}'></td>
2207 <td><input type='hidden' name='LDAP_SERVER'      value='$proxysettings{'LDAP_SERVER'}'></td>
2208 <td><input type='hidden' name='LDAP_PORT'        value='$proxysettings{'LDAP_PORT'}'></td>
2209 <td><input type='hidden' name='LDAP_BINDDN_USER' value='$proxysettings{'LDAP_BINDDN_USER'}'></td>
2210 <td><input type='hidden' name='LDAP_BINDDN_PASS' value='$proxysettings{'LDAP_BINDDN_PASS'}'></td>
2211 <td><input type='hidden' name='LDAP_GROUP'       value='$proxysettings{'LDAP_GROUP'}'></td>
2212 END
2213 ; }
2214
2215 if (!($proxysettings{'AUTH_METHOD'} eq 'ntlm')) {
2216 print <<END
2217 <td><input type='hidden' name='NTLM_DOMAIN'          value='$proxysettings{'NTLM_DOMAIN'}'></td>
2218 <td><input type='hidden' name='NTLM_PDC'             value='$proxysettings{'NTLM_PDC'}'></td>
2219 <td><input type='hidden' name='NTLM_BDC'             value='$proxysettings{'NTLM_BDC'}'></td>
2220 <td><input type='hidden' name='NTLM_ENABLE_INT_AUTH' value='$proxysettings{'NTLM_ENABLE_INT_AUTH'}'></td>
2221 <td><input type='hidden' name='NTLM_ENABLE_ACL'      value='$proxysettings{'NTLM_ENABLE_ACL'}'></td>
2222 <td><input type='hidden' name='NTLM_USER_ACL'        value='$proxysettings{'NTLM_USER_ACL'}'></td>
2223 <td><input type='hidden' name='NTLM_ALLOW_USERS'     value='$proxysettings{'NTLM_ALLOW_USERS'}'></td>
2224 <td><input type='hidden' name='NTLM_DENY_USERS'      value='$proxysettings{'NTLM_DENY_USERS'}'></td>
2225 END
2226 ; }
2227
2228 if (!($proxysettings{'AUTH_METHOD'} eq 'radius')) {
2229 print <<END
2230 <td><input type='hidden' name='RADIUS_SERVER'      value='$proxysettings{'RADIUS_SERVER'}'></td>
2231 <td><input type='hidden' name='RADIUS_PORT'        value='$proxysettings{'RADIUS_PORT'}'></td>
2232 <td><input type='hidden' name='RADIUS_IDENTIFIER'  value='$proxysettings{'RADIUS_IDENTIFIER'}'></td>
2233 <td><input type='hidden' name='RADIUS_SECRET'      value='$proxysettings{'RADIUS_SECRET'}'></td>
2234 <td><input type='hidden' name='RADIUS_ENABLE_ACL'  value='$proxysettings{'RADIUS_ENABLE_ACL'}'></td>
2235 <td><input type='hidden' name='RADIUS_USER_ACL'    value='$proxysettings{'RADIUS_USER_ACL'}'></td>
2236 <td><input type='hidden' name='RADIUS_ALLOW_USERS' value='$proxysettings{'RADIUS_ALLOW_USERS'}'></td>
2237 <td><input type='hidden' name='RADIUS_DENY_USERS'  value='$proxysettings{'RADIUS_DENY_USERS'}'></td>
2238 END
2239 ; }
2240
2241 print "</table>\n";
2242
2243 print <<END
2244 <hr size='1'>
2245 END
2246 ;
2247
2248 print <<END
2249 <table width='100%'>
2250 <tr>
2251         <td>&nbsp;</td>
2252         <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
2253         <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'proxy reconfigure'}' /></td>
2254         <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy save and restart'}' /></td>
2255         <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'advproxy clear cache'}' /></td>
2256         <td>&nbsp;</td>
2257 </tr>
2258
2259 </table>
2260 <br />
2261 <table width='100%'>
2262 <tr>
2263         <td><img src='/blob.gif' align='top' alt='*' />&nbsp;<font class='base'>$Lang::tr{'required field'}</font></td>
2264         <td align='right'>&nbsp;</td>
2265 </tr>
2266 </table>
2267 </form>
2268 END
2269 ;
2270
2271 &Header::closebox();
2272
2273 } else {
2274
2275 # ===================================================================
2276 #  NCSA user management
2277 # ===================================================================
2278
2279 &Header::openbox('100%', 'left', "$Lang::tr{'advproxy NCSA auth'}");
2280 print <<END
2281 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
2282 <table width='100%'>
2283 <tr>
2284         <td colspan='4'><b>$Lang::tr{'advproxy NCSA user management'}</b></td>
2285 </tr>
2286 <tr>
2287         <td width='25%' class='base'>$Lang::tr{'advproxy NCSA username'}:</td>
2288         <td width='25%'><input type='text' name='NCSA_USERNAME' value='$proxysettings{'NCSA_USERNAME'}' size='12'
2289 END
2290 ;
2291         if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) { print " readonly='readonly' "; }
2292         print <<END
2293          /></td>
2294         <td width='25%' class='base'>$Lang::tr{'advproxy NCSA group'}:</td>
2295         <td class='base'>
2296                 <select name='NCSA_GROUP'>
2297                 <option value='standard' $selected{'NCSA_GROUP'}{'standard'}>$Lang::tr{'advproxy NCSA grp standard'}</option>
2298                 <option value='extended' $selected{'NCSA_GROUP'}{'extended'}>$Lang::tr{'advproxy NCSA grp extended'}</option>
2299                 <option value='disabled' $selected{'NCSA_GROUP'}{'disabled'}>$Lang::tr{'advproxy NCSA grp disabled'}</option>
2300                 </select>
2301         </td>
2302
2303 </tr>
2304 <tr>
2305         <td class='base'>$Lang::tr{'advproxy NCSA password'}:</td>
2306         <td><input type='password' name='NCSA_PASS' value='$proxysettings{'NCSA_PASS'}' size='14' /></td>
2307         <td class='base'>$Lang::tr{'advproxy NCSA password confirm'}:</td>
2308         <td><input type='password' name='NCSA_PASS_CONFIRM' value='$proxysettings{'NCSA_PASS_CONFIRM'}' size='14' /></td>
2309 </tr>
2310 </table>
2311 <br>
2312 <table>
2313 <tr>
2314         <td>&nbsp;</td>
2315         <td><input type='submit' name='SUBMIT' value='$ncsa_buttontext' /></td>
2316         <td><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /></td>
2317         <td><input type='hidden' name='NCSA_MIN_PASS_LEN' value='$proxysettings{'NCSA_MIN_PASS_LEN'}'></td>
2318 END
2319 ;
2320         if ($proxysettings{'ACTION'} eq $Lang::tr{'edit'}) {
2321                 print "<td><input type='reset' name='ACTION' value='$Lang::tr{'advproxy reset'}' /></td>\n";
2322         }
2323
2324 print <<END
2325         <td>&nbsp;</td>
2326         <td>&nbsp;</td>
2327         <td><input type='button' name='return2main' value='$Lang::tr{'advproxy back to main page'}' onClick='self.location.href="$ENV{'SCRIPT_NAME'}"'></td>
2328 </tr>
2329 </table>
2330 </form>
2331 <hr size='1'>
2332 <table width='100%'>
2333 <tr>
2334         <td><b>$Lang::tr{'advproxy NCSA user accounts'}:</b></td>
2335 </tr>
2336 </table>
2337 <table width='100%' align='center'>
2338 END
2339 ;
2340
2341 if (-e $extgrp)
2342 {
2343         open(FILE, $extgrp); @grouplist = <FILE>; close(FILE);
2344         foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":extended"); }
2345 }
2346 if (-e $stdgrp)
2347 {
2348         open(FILE, $stdgrp); @grouplist = <FILE>; close(FILE);
2349         foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":standard"); }
2350 }
2351 if (-e $disgrp)
2352 {
2353         open(FILE, $disgrp); @grouplist = <FILE>; close(FILE);
2354         foreach $user (@grouplist) { chomp($user); push(@userlist,$user.":disabled"); }
2355 }
2356
2357 @userlist = sort(@userlist);
2358
2359 # If the password file contains entries, print entries and action icons
2360
2361 if ( ! -z "$userdb" ) {
2362         print <<END
2363         <tr>
2364                 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA username'}</i></b></td>
2365                 <td width='30%' class='boldbase' align='center'><b><i>$Lang::tr{'advproxy NCSA group membership'}</i></b></td>
2366                 <td class='boldbase' colspan='2' align='center'>&nbsp;</td>
2367         </tr>
2368 END
2369 ;
2370         $id = 0;
2371         foreach $line (@userlist)
2372         {
2373                 $id++;
2374                 chomp($line);
2375                 @temp = split(/:/,$line);
2376                 if($proxysettings{'ACTION'} eq $Lang::tr{'edit'} && $proxysettings{'ID'} eq $line) {
2377                         print "<tr bgcolor='$Header::colouryellow'>\n"; }
2378                 elsif ($id % 2) {
2379                         print "<tr bgcolor='$color{'color20'}'>\n"; }
2380                 else {
2381                         print "<tr bgcolor='$color{'color22'}'>\n"; }
2382
2383                 print <<END
2384                 <td align='center'>$temp[0]</td>
2385                 <td align='center'>
2386 END
2387 ;
2388                 if ($temp[1] eq 'standard') {
2389                         print $Lang::tr{'advproxy NCSA grp standard'};
2390                 } elsif ($temp[1] eq 'extended') {
2391                         print $Lang::tr{'advproxy NCSA grp extended'};
2392                 } elsif ($temp[1] eq 'disabled') {
2393                         print $Lang::tr{'advproxy NCSA grp disabled'}; }
2394                 print <<END
2395                 </td>
2396                 <td width='8%' align='center'>
2397                 <form method='post' name='frma$id' action='$ENV{'SCRIPT_NAME'}'>
2398                 <input type='image' name='$Lang::tr{'edit'}' src='/images/edit.gif' title='$Lang::tr{'edit'}' alt='$Lang::tr{'edit'}' />
2399                 <input type='hidden' name='ID' value='$line' />
2400                 <input type='hidden' name='ACTION' value='$Lang::tr{'edit'}' />
2401                 </form>
2402                 </td>
2403
2404                 <td width='8%' align='center'>
2405                 <form method='post' name='frmb$id' action='$ENV{'SCRIPT_NAME'}'>
2406                 <input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' title='$Lang::tr{'remove'}' alt='$Lang::tr{'remove'}' />
2407                 <input type='hidden' name='ID' value='$temp[0]' />
2408                 <input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
2409                 </form>
2410                 </td>
2411         </tr>
2412 END
2413 ;
2414         }
2415
2416 print <<END
2417 </table>
2418 <br>
2419 <table>
2420 <tr>
2421         <td class='boldbase'>&nbsp; <b>$Lang::tr{'legend'}:</b></td>
2422         <td>&nbsp; &nbsp; <img src='/images/edit.gif' alt='$Lang::tr{'edit'}' /></td>
2423         <td class='base'>$Lang::tr{'edit'}</td>
2424         <td>&nbsp; &nbsp; <img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
2425         <td class='base'>$Lang::tr{'remove'}</td>
2426 </tr>
2427 END
2428 ;
2429 } else {
2430         print <<END
2431         <tr>
2432                 <td><i>$Lang::tr{'advproxy NCSA no accounts'}</i></td>
2433         </tr>
2434 END
2435 ;
2436 }
2437
2438 print <<END
2439 </table>
2440 END
2441 ;
2442
2443 &Header::closebox();
2444
2445 }
2446
2447 # ===================================================================
2448
2449 &Header::closebigbox();
2450
2451 &Header::closepage();
2452
2453 # -------------------------------------------------------------------
2454
2455 sub read_acls
2456 {
2457         if (-e "$acl_src_subnets") {
2458                 open(FILE,"$acl_src_subnets");
2459                 delete $proxysettings{'SRC_SUBNETS'};
2460                 while (<FILE>) { $proxysettings{'SRC_SUBNETS'} .= $_ };
2461                 close(FILE);
2462         }
2463         if (-e "$acl_src_banned_ip") {
2464                 open(FILE,"$acl_src_banned_ip");
2465                 delete $proxysettings{'SRC_BANNED_IP'};
2466                 while (<FILE>) { $proxysettings{'SRC_BANNED_IP'} .= $_ };
2467                 close(FILE);
2468         }
2469         if (-e "$acl_src_banned_mac") {
2470                 open(FILE,"$acl_src_banned_mac");
2471                 delete $proxysettings{'SRC_BANNED_MAC'};
2472                 while (<FILE>) { $proxysettings{'SRC_BANNED_MAC'} .= $_ };
2473                 close(FILE);
2474         }
2475         if (-e "$acl_src_unrestricted_ip") {
2476                 open(FILE,"$acl_src_unrestricted_ip");
2477                 delete $proxysettings{'SRC_UNRESTRICTED_IP'};
2478                 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_ };
2479                 close(FILE);
2480         }
2481         if (-e "$acl_src_unrestricted_mac") {
2482                 open(FILE,"$acl_src_unrestricted_mac");
2483                 delete $proxysettings{'SRC_UNRESTRICTED_MAC'};
2484                 while (<FILE>) { $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_ };
2485                 close(FILE);
2486         }
2487         if (-e "$acl_dst_nocache") {
2488                 open(FILE,"$acl_dst_nocache");
2489                 delete $proxysettings{'DST_NOCACHE'};
2490                 while (<FILE>) { $proxysettings{'DST_NOCACHE'} .= $_ };
2491                 close(FILE);
2492         }
2493         if (-e "$acl_dst_noauth") {
2494                 open(FILE,"$acl_dst_noauth");
2495                 delete $proxysettings{'DST_NOAUTH'};
2496                 while (<FILE>) { $proxysettings{'DST_NOAUTH'} .= $_ };
2497                 close(FILE);
2498         }
2499         if (-e "$acl_ports_safe") {
2500                 open(FILE,"$acl_ports_safe");
2501                 delete $proxysettings{'PORTS_SAFE'};
2502                 while (<FILE>) { $proxysettings{'PORTS_SAFE'} .= $_ };
2503                 close(FILE);
2504         }
2505         if (-e "$acl_ports_ssl") {
2506                 open(FILE,"$acl_ports_ssl");
2507                 delete $proxysettings{'PORTS_SSL'};
2508                 while (<FILE>) { $proxysettings{'PORTS_SSL'} .= $_ };
2509                 close(FILE);
2510         }
2511         if (-e "$mimetypes") {
2512                 open(FILE,"$mimetypes");
2513                 delete $proxysettings{'MIME_TYPES'};
2514                 while (<FILE>) { $proxysettings{'MIME_TYPES'} .= $_ };
2515                 close(FILE);
2516         }
2517         if (-e "$ntlmdir/msntauth.allowusers") {
2518                 open(FILE,"$ntlmdir/msntauth.allowusers");
2519                 delete $proxysettings{'NTLM_ALLOW_USERS'};
2520                 while (<FILE>) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_ };
2521                 close(FILE);
2522         }
2523         if (-e "$ntlmdir/msntauth.denyusers") {
2524                 open(FILE,"$ntlmdir/msntauth.denyusers");
2525                 delete $proxysettings{'NTLM_DENY_USERS'};
2526                 while (<FILE>) { $proxysettings{'NTLM_DENY_USERS'} .= $_ };
2527                 close(FILE);
2528         }
2529         if (-e "$raddir/radauth.allowusers") {
2530                 open(FILE,"$raddir/radauth.allowusers");
2531                 delete $proxysettings{'RADIUS_ALLOW_USERS'};
2532                 while (<FILE>) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_ };
2533                 close(FILE);
2534         }
2535         if (-e "$raddir/radauth.denyusers") {
2536                 open(FILE,"$raddir/radauth.denyusers");
2537                 delete $proxysettings{'RADIUS_DENY_USERS'};
2538                 while (<FILE>) { $proxysettings{'RADIUS_DENY_USERS'} .= $_ };
2539                 close(FILE);
2540         }
2541         if (-e "$identdir/identauth.allowusers") {
2542                 open(FILE,"$identdir/identauth.allowusers");
2543                 delete $proxysettings{'IDENT_ALLOW_USERS'};
2544                 while (<FILE>) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_ };
2545                 close(FILE);
2546         }
2547         if (-e "$identdir/identauth.denyusers") {
2548                 open(FILE,"$identdir/identauth.denyusers");
2549                 delete $proxysettings{'IDENT_DENY_USERS'};
2550                 while (<FILE>) { $proxysettings{'IDENT_DENY_USERS'} .= $_ };
2551                 close(FILE);
2552         }
2553         if (-e "$identhosts") {
2554                 open(FILE,"$identhosts");
2555                 delete $proxysettings{'IDENT_HOSTS'};
2556                 while (<FILE>) { $proxysettings{'IDENT_HOSTS'} .= $_ };
2557                 close(FILE);
2558         }
2559         if (-e "$cre_groups") {
2560                 open(FILE,"$cre_groups");
2561                 delete $proxysettings{'CRE_GROUPS'};
2562                 while (<FILE>) { $proxysettings{'CRE_GROUPS'} .= $_ };
2563                 close(FILE);
2564         }
2565         if (-e "$cre_svhosts") {
2566                 open(FILE,"$cre_svhosts");
2567                 delete $proxysettings{'CRE_SVHOSTS'};
2568                 while (<FILE>) { $proxysettings{'CRE_SVHOSTS'} .= $_ };
2569                 close(FILE);
2570         }
2571 }
2572
2573 # -------------------------------------------------------------------
2574
2575 sub check_acls
2576 {
2577         @temp = split(/\n/,$proxysettings{'PORTS_SAFE'});
2578         undef $proxysettings{'PORTS_SAFE'};
2579         foreach (@temp)
2580         {
2581                 s/^\s+//g; s/\s+$//g;
2582                 if ($_)
2583                 {
2584                         $line = $_;
2585                         if (/^[^#]+\s+#\sSquids\sport/) { s/(^[^#]+)(\s+#\sSquids\sport)/$proxysettings{'PROXY_PORT'}\2/; $line=$_; }
2586                         s/#.*//g; s/\s+//g;
2587                         if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2588                         @templist = split(/-/);
2589                         foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2590                         $proxysettings{'PORTS_SAFE'} .= $line."\n";
2591                 }
2592         }
2593
2594         @temp = split(/\n/,$proxysettings{'PORTS_SSL'});
2595         undef $proxysettings{'PORTS_SSL'};
2596         foreach (@temp)
2597         {
2598                 s/^\s+//g; s/\s+$//g;
2599                 if ($_)
2600                 {
2601                         $line = $_;
2602                         s/#.*//g; s/\s+//g;
2603                         if (/.*-.*-.*/) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; }
2604                         @templist = split(/-/);
2605                         foreach (@templist) { unless (&General::validport($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid destination port'}; } }
2606                         $proxysettings{'PORTS_SSL'} .= $line."\n";
2607                 }
2608         }
2609
2610         @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2611         undef $proxysettings{'DST_NOCACHE'};
2612         foreach (@temp)
2613         {
2614                 s/^\s+//g;
2615                 unless (/^#/) { s/\s+//g; }
2616                 if ($_)
2617                 {
2618                         if (/^\./) { $_ = '*'.$_; }
2619                         $proxysettings{'DST_NOCACHE'} .= $_."\n";
2620                 }
2621         }
2622
2623         @temp = split(/\n/,$proxysettings{'SRC_SUBNETS'});
2624         undef $proxysettings{'SRC_SUBNETS'};
2625         foreach (@temp)
2626         {
2627                 s/^\s+//g; s/\s+$//g;
2628                 if ($_)
2629                 {
2630                         unless (&General::validipandmask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2631                         $proxysettings{'SRC_SUBNETS'} .= $_."\n";
2632                 }
2633         }
2634
2635         @temp = split(/\n/,$proxysettings{'SRC_BANNED_IP'});
2636         undef $proxysettings{'SRC_BANNED_IP'};
2637         foreach (@temp)
2638         {
2639                 s/^\s+//g; s/\s+$//g;
2640                 if ($_)
2641                 {
2642                         unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2643                         $proxysettings{'SRC_BANNED_IP'} .= $_."\n";
2644                 }
2645         }
2646
2647         @temp = split(/\n/,$proxysettings{'SRC_BANNED_MAC'});
2648         undef $proxysettings{'SRC_BANNED_MAC'};
2649         foreach (@temp)
2650         {
2651                 s/^\s+//g; s/\s+$//g; s/-/:/g;
2652                 if ($_)
2653                 {
2654                         unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2655                         $proxysettings{'SRC_BANNED_MAC'} .= $_."\n";
2656                 }
2657         }
2658
2659         @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_IP'});
2660         undef $proxysettings{'SRC_UNRESTRICTED_IP'};
2661         foreach (@temp)
2662         {
2663                 s/^\s+//g; s/\s+$//g;
2664                 if ($_)
2665                 {
2666                         unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2667                         $proxysettings{'SRC_UNRESTRICTED_IP'} .= $_."\n";
2668                 }
2669         }
2670
2671         @temp = split(/\n/,$proxysettings{'SRC_UNRESTRICTED_MAC'});
2672         undef $proxysettings{'SRC_UNRESTRICTED_MAC'};
2673         foreach (@temp)
2674         {
2675                 s/^\s+//g; s/\s+$//g; s/-/:/g;
2676                 if ($_)
2677                 {
2678                         unless (&General::validmac($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid mac'}; }
2679                         $proxysettings{'SRC_UNRESTRICTED_MAC'} .= $_."\n";
2680                 }
2681         }
2682
2683         @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
2684         undef $proxysettings{'DST_NOAUTH'};
2685         foreach (@temp)
2686         {
2687                 s/^\s+//g;
2688                 unless (/^#/) { s/\s+//g; }
2689                 if ($_)
2690                 {
2691                         if (/^\./) { $_ = '*'.$_; }
2692                         $proxysettings{'DST_NOAUTH'} .= $_."\n";
2693                 }
2694         }
2695
2696         if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
2697         {
2698                 @temp = split(/\n/,$proxysettings{'NTLM_ALLOW_USERS'});
2699                 undef $proxysettings{'NTLM_ALLOW_USERS'};
2700                 foreach (@temp)
2701                 {
2702                         s/^\s+//g; s/\s+$//g;
2703                         if ($_) { $proxysettings{'NTLM_ALLOW_USERS'} .= $_."\n"; }
2704                 }
2705                 if ($proxysettings{'NTLM_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2706         }
2707
2708         if (($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
2709         {
2710                 @temp = split(/\n/,$proxysettings{'NTLM_DENY_USERS'});
2711                 undef $proxysettings{'NTLM_DENY_USERS'};
2712                 foreach (@temp)
2713                 {
2714                         s/^\s+//g; s/\s+$//g;
2715                         if ($_) { $proxysettings{'NTLM_DENY_USERS'} .= $_."\n"; }
2716                 }
2717                 if ($proxysettings{'NTLM_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2718         }
2719
2720         if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
2721         {
2722                 @temp = split(/\n/,$proxysettings{'IDENT_ALLOW_USERS'});
2723                 undef $proxysettings{'IDENT_ALLOW_USERS'};
2724                 foreach (@temp)
2725                 {
2726                         s/^\s+//g; s/\s+$//g;
2727                         if ($_) { $proxysettings{'IDENT_ALLOW_USERS'} .= $_."\n"; }
2728                 }
2729                 if ($proxysettings{'IDENT_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2730         }
2731
2732         if (($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
2733         {
2734                 @temp = split(/\n/,$proxysettings{'IDENT_DENY_USERS'});
2735                 undef $proxysettings{'IDENT_DENY_USERS'};
2736                 foreach (@temp)
2737                 {
2738                         s/^\s+//g; s/\s+$//g;
2739                         if ($_) { $proxysettings{'IDENT_DENY_USERS'} .= $_."\n"; }
2740                 }
2741                 if ($proxysettings{'IDENT_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2742         }
2743
2744         if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
2745         {
2746                 @temp = split(/\n/,$proxysettings{'RADIUS_ALLOW_USERS'});
2747                 undef $proxysettings{'RADIUS_ALLOW_USERS'};
2748                 foreach (@temp)
2749                 {
2750                         s/^\s+//g; s/\s+$//g;
2751                         if ($_) { $proxysettings{'RADIUS_ALLOW_USERS'} .= $_."\n"; }
2752                 }
2753                 if ($proxysettings{'RADIUS_ALLOW_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2754         }
2755
2756         if (($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
2757         {
2758                 @temp = split(/\n/,$proxysettings{'RADIUS_DENY_USERS'});
2759                 undef $proxysettings{'RADIUS_DENY_USERS'};
2760                 foreach (@temp)
2761                 {
2762                         s/^\s+//g; s/\s+$//g;
2763                         if ($_) { $proxysettings{'RADIUS_DENY_USERS'} .= $_."\n"; }
2764                 }
2765                 if ($proxysettings{'RADIUS_DENY_USERS'} eq '') { $errormessage = $Lang::tr{'advproxy errmsg acl cannot be empty'}; }
2766         }
2767
2768         @temp = split(/\n/,$proxysettings{'IDENT_HOSTS'});
2769         undef $proxysettings{'IDENT_HOSTS'};
2770         foreach (@temp)
2771         {
2772                 s/^\s+//g; s/\s+$//g;
2773                 if ($_)
2774                 {
2775                         unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2776                         $proxysettings{'IDENT_HOSTS'} .= $_."\n";
2777                 }
2778         }
2779
2780         @temp = split(/\n/,$proxysettings{'CRE_SVHOSTS'});
2781         undef $proxysettings{'CRE_SVHOSTS'};
2782         foreach (@temp)
2783         {
2784                 s/^\s+//g; s/\s+$//g;
2785                 if ($_)
2786                 {
2787                         unless (&General::validipormask($_)) { $errormessage = $Lang::tr{'advproxy errmsg invalid ip or mask'}; }
2788                         $proxysettings{'CRE_SVHOSTS'} .= $_."\n";
2789                 }
2790         }
2791 }
2792
2793 # -------------------------------------------------------------------
2794
2795 sub write_acls
2796 {
2797         open(FILE, ">$acl_src_subnets");
2798         flock(FILE, 2);
2799         if (!$proxysettings{'SRC_SUBNETS'})
2800         {
2801                 print FILE "$green_cidr\n";
2802                 if ($netsettings{'BLUE_DEV'})
2803                 {
2804                         print FILE "$blue_cidr\n";
2805                 }
2806         } else { print FILE $proxysettings{'SRC_SUBNETS'}; }
2807         close(FILE);
2808
2809         open(FILE, ">$acl_src_banned_ip");
2810         flock(FILE, 2);
2811         print FILE $proxysettings{'SRC_BANNED_IP'};
2812         close(FILE);
2813
2814         open(FILE, ">$acl_src_banned_mac");
2815         flock(FILE, 2);
2816         print FILE $proxysettings{'SRC_BANNED_MAC'};
2817         close(FILE);
2818
2819         open(FILE, ">$acl_src_unrestricted_ip");
2820         flock(FILE, 2);
2821         print FILE $proxysettings{'SRC_UNRESTRICTED_IP'};
2822         close(FILE);
2823
2824         open(FILE, ">$acl_src_unrestricted_mac");
2825         flock(FILE, 2);
2826         print FILE $proxysettings{'SRC_UNRESTRICTED_MAC'};
2827         close(FILE);
2828
2829         open(FILE, ">$acl_dst_noauth");
2830         flock(FILE, 2);
2831         print FILE $proxysettings{'DST_NOAUTH'};
2832         close(FILE);
2833
2834         open(FILE, ">$acl_dst_noauth_net");
2835         close(FILE);
2836         open(FILE, ">$acl_dst_noauth_dom");
2837         close(FILE);
2838         open(FILE, ">$acl_dst_noauth_url");
2839         close(FILE);
2840
2841         @temp = split(/\n/,$proxysettings{'DST_NOAUTH'});
2842         foreach(@temp)
2843         {
2844                 unless (/^#/)
2845                 {
2846                         if (/^\*\.\w/)
2847                         {
2848                                 s/^\*//;
2849                                 open(FILE, ">>$acl_dst_noauth_dom");
2850                                 flock(FILE, 2);
2851                                 print FILE "$_\n";
2852                                 close(FILE);
2853                         }
2854                         elsif (&General::validipormask($_))
2855                         {
2856                                 open(FILE, ">>$acl_dst_noauth_net");
2857                                 flock(FILE, 2);
2858                                 print FILE "$_\n";
2859                                 close(FILE);
2860                         }
2861                         elsif (/\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?-\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?/)
2862                         {
2863                                 open(FILE, ">>$acl_dst_noauth_net");
2864                                 flock(FILE, 2);
2865                                 print FILE "$_\n";
2866                                 close(FILE);
2867                         }
2868                         else
2869                         {
2870                                 open(FILE, ">>$acl_dst_noauth_url");
2871                                 flock(FILE, 2);
2872                                 if (/^[fh]tt?ps?:\/\//) { print FILE "$_\n"; } else { print FILE "^[fh]tt?ps?://$_\n"; }
2873                                 close(FILE);
2874                         }
2875                 }
2876         }
2877
2878         open(FILE, ">$acl_dst_nocache");
2879         flock(FILE, 2);
2880         print FILE $proxysettings{'DST_NOCACHE'};
2881         close(FILE);
2882
2883         open(FILE, ">$acl_dst_nocache_net");
2884         close(FILE);
2885         open(FILE, ">$acl_dst_nocache_dom");
2886         close(FILE);
2887         open(FILE, ">$acl_dst_nocache_url");
2888         close(FILE);
2889
2890         @temp = split(/\n/,$proxysettings{'DST_NOCACHE'});
2891         foreach(@temp)
2892         {
2893                 unless (/^#/)
2894                 {
2895                         if (/^\*\.\w/)
2896                         {
2897                                 s/^\*//;
2898                                 open(FILE, ">>$acl_dst_nocache_dom");
2899                                 flock(FILE, 2);
2900                                 print FILE "$_\n";
2901                                 close(FILE);
2902                         }
2903                         elsif (&General::validipormask($_))
2904                         {
2905                                 open(FILE, ">>$acl_dst_nocache_net");
2906                                 flock(FILE, 2);
2907                                 print FILE "$_\n";
2908                                 close(FILE);
2909                         }
2910                         elsif (/\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?-\d\d?\d?\.\d\d?\d?\.\d\d?\d?\.\d\d?\d?/)
2911                         {
2912                                 open(FILE, ">>$acl_dst_nocache_net");
2913                                 flock(FILE, 2);
2914                                 print FILE "$_\n";
2915                                 close(FILE);
2916                         }
2917                         else
2918                         {
2919                                 open(FILE, ">>$acl_dst_nocache_url");
2920                                 flock(FILE, 2);
2921                                 if (/^[fh]tt?ps?:\/\//) { print FILE "$_\n"; } else { print FILE "^[fh]tt?ps?://$_\n"; }
2922                                 close(FILE);
2923                         }
2924                 }
2925         }
2926
2927         open(FILE, ">$acl_ports_safe");
2928         flock(FILE, 2);
2929         if (!$proxysettings{'PORTS_SAFE'}) { print FILE $def_ports_safe; } else { print FILE $proxysettings{'PORTS_SAFE'}; }
2930         close(FILE);
2931
2932         open(FILE, ">$acl_ports_ssl");
2933         flock(FILE, 2);
2934         if (!$proxysettings{'PORTS_SSL'}) { print FILE $def_ports_ssl; } else { print FILE $proxysettings{'PORTS_SSL'}; }
2935         close(FILE);
2936
2937         open(FILE, ">$acl_dst_throttle");
2938         flock(FILE, 2);
2939         if ($proxysettings{'THROTTLE_BINARY'} eq 'on')
2940         {
2941                 @temp = split(/\|/,$throttle_binary);
2942                 foreach (@temp) { print FILE "\\.$_\$\n"; }
2943         }
2944         if ($proxysettings{'THROTTLE_DSKIMG'} eq 'on')
2945         {
2946                 @temp = split(/\|/,$throttle_dskimg);
2947                 foreach (@temp) { print FILE "\\.$_\$\n"; }
2948         }
2949         if ($proxysettings{'THROTTLE_MMEDIA'} eq 'on')
2950         {
2951                 @temp = split(/\|/,$throttle_mmedia);
2952                 foreach (@temp) { print FILE "\\.$_\$\n"; }
2953         }
2954         if (-s $throttled_urls)
2955         {
2956                 open(URLFILE, $throttled_urls);
2957                 @temp = <URLFILE>;
2958                 close(URLFILE);
2959                 foreach (@temp) { print FILE; }
2960         }
2961         close(FILE);
2962
2963         open(FILE, ">$mimetypes");
2964         flock(FILE, 2);
2965         print FILE $proxysettings{'MIME_TYPES'};
2966         close(FILE);
2967
2968         open(FILE, ">$ntlmdir/msntauth.allowusers");
2969         flock(FILE, 2);
2970         print FILE $proxysettings{'NTLM_ALLOW_USERS'};
2971         close(FILE);
2972
2973         open(FILE, ">$ntlmdir/msntauth.denyusers");
2974         flock(FILE, 2);
2975         print FILE $proxysettings{'NTLM_DENY_USERS'};
2976         close(FILE);
2977
2978         open(FILE, ">$raddir/radauth.allowusers");
2979         flock(FILE, 2);
2980         print FILE $proxysettings{'RADIUS_ALLOW_USERS'};
2981         close(FILE);
2982
2983         open(FILE, ">$raddir/radauth.denyusers");
2984         flock(FILE, 2);
2985         print FILE $proxysettings{'RADIUS_DENY_USERS'};
2986         close(FILE);
2987
2988         open(FILE, ">$identdir/identauth.allowusers");
2989         flock(FILE, 2);
2990         print FILE $proxysettings{'IDENT_ALLOW_USERS'};
2991         close(FILE);
2992
2993         open(FILE, ">$identdir/identauth.denyusers");
2994         flock(FILE, 2);
2995         print FILE $proxysettings{'IDENT_DENY_USERS'};
2996         close(FILE);
2997
2998         open(FILE, ">$identhosts");
2999         flock(FILE, 2);
3000         print FILE $proxysettings{'IDENT_HOSTS'};
3001         close(FILE);
3002
3003         open(FILE, ">$cre_groups");
3004         flock(FILE, 2);
3005         print FILE $proxysettings{'CRE_GROUPS'};
3006         close(FILE);
3007
3008         open(FILE, ">$cre_svhosts");
3009         flock(FILE, 2);
3010         print FILE $proxysettings{'CRE_SVHOSTS'};
3011         close(FILE);
3012 }
3013
3014 # -------------------------------------------------------------------
3015
3016 sub writepacfile
3017 {
3018         open(FILE, ">/srv/web/ipfire/html/proxy.pac");
3019         flock(FILE, 2);
3020         print FILE "function FindProxyForURL(url, host)\n";
3021         print FILE "{\n";
3022         if (($proxysettings{'ENABLE'} eq 'on') || ($proxysettings{'ENABLE_BLUE'} eq 'on'))
3023         {
3024                 print FILE <<END
3025 if (
3026      (isPlainHostName(host)) ||
3027      (isInNet(host, "127.0.0.1", "255.0.0.0")) ||
3028 END
3029 ;
3030
3031         if ($netsettings{'GREEN_DEV'}) {
3032                 print FILE "     (isInNet(host, \"$netsettings{'GREEN_NETADDRESS'}\", \"$netsettings{'GREEN_NETMASK'}\")) ||\n";
3033         }
3034
3035         if (&Header::blue_used() && $netsettings{'BLUE_DEV'}) {
3036                 print FILE "     (isInNet(host, \"$netsettings{'BLUE_NETADDRESS'}\", \"$netsettings{'BLUE_NETMASK'}\")) ||\n";
3037         }
3038
3039         if (&Header::orange_used() && $netsettings{'ORANGE_DEV'}) {
3040                 print FILE "     (isInNet(host, \"$netsettings{'ORANGE_NETADDRESS'}\", \"$netsettings{'ORANGE_NETMASK'}\")) ||\n";
3041         }
3042
3043         print FILE <<END
3044      (isInNet(host, "169.254.0.0", "255.255.0.0"))
3045    )
3046      return "DIRECT";
3047
3048  else
3049
3050 END
3051 ;
3052                 if ($proxysettings{'ENABLE'} eq 'on')
3053                 {
3054                         print FILE "if (\n";
3055                         print FILE "     (isInNet(myIpAddress(), \"$netsettings{'GREEN_NETADDRESS'}\", \"$netsettings{'GREEN_NETMASK'}\"))";
3056
3057                         undef @templist;
3058                         if (-e "$acl_src_subnets") {
3059                                 open(SUBNETS,"$acl_src_subnets");
3060                                 @templist = <SUBNETS>;
3061                                 close(SUBNETS);
3062                         }
3063
3064                         foreach (@templist)
3065                         {
3066                                 @temp = split(/\//);
3067                                 if (
3068                                         ($temp[0] ne $netsettings{'GREEN_NETADDRESS'}) && ($temp[1] ne $netsettings{'GREEN_NETMASK'}) &&
3069                                         ($temp[0] ne $netsettings{'BLUE_NETADDRESS'}) && ($temp[1] ne $netsettings{'BLUE_NETMASK'})
3070                                         )
3071                                 {
3072                                         chomp $temp[1];
3073                                         print FILE " ||\n     (isInNet(myIpAddress(), \"$temp[0]\", \"$temp[1]\"))";
3074                                 }
3075                         }
3076
3077                         print FILE "\n";
3078
3079                         print FILE <<END
3080
3081
3082    )
3083      return "PROXY $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3084 END
3085 ;
3086                 }
3087                 if (($proxysettings{'ENABLE'} eq 'on') && ($proxysettings{'ENABLE_BLUE'} eq 'on') && ($netsettings{'BLUE_DEV'}))
3088                 {
3089                         print FILE "\n else\n\n";
3090                 }
3091                 if (($netsettings{'BLUE_DEV'}) && ($proxysettings{'ENABLE_BLUE'} eq 'on'))
3092                 {
3093                         print FILE <<END
3094 if (
3095      (isInNet(myIpAddress(), "$netsettings{'BLUE_NETADDRESS'}", "$netsettings{'BLUE_NETMASK'}"))
3096    )
3097      return "PROXY $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3098 END
3099 ;
3100                 }
3101         }
3102         print FILE "}\n";
3103         close(FILE);
3104 }
3105
3106 # -------------------------------------------------------------------
3107
3108 sub writeconfig
3109 {
3110         my $authrealm;
3111         my $delaypools;
3112
3113         if ($proxysettings{'THROTTLING_GREEN_TOTAL'} +
3114             $proxysettings{'THROTTLING_GREEN_HOST'}  +
3115             $proxysettings{'THROTTLING_BLUE_TOTAL'}  +
3116             $proxysettings{'THROTTLING_BLUE_HOST'} gt 0)
3117         {
3118                 $delaypools = 1; } else { $delaypools = 0;
3119         }
3120
3121         if ($proxysettings{'AUTH_REALM'} eq '')
3122         {
3123                 $authrealm = "IPFire Advanced Proxy Server";
3124         } else {
3125                 $authrealm = $proxysettings{'AUTH_REALM'};
3126         }
3127
3128         $_ = $proxysettings{'UPSTREAM_PROXY'};
3129         my ($remotehost, $remoteport) = split(/:/,$_);
3130
3131         if ($remoteport eq '') { $remoteport = 80; }
3132
3133         open(FILE, ">${General::swroot}/proxy/squid.conf");
3134         flock(FILE, 2);
3135         print FILE <<END
3136 # Do not modify '${General::swroot}/proxy/squid.conf' directly since any changes
3137 # you make will be overwritten whenever you resave proxy settings using the
3138 # web interface!
3139 #
3140 # Instead, modify the file '$acl_include' and
3141 # then restart the proxy service using the web interface. Changes made to the
3142 # 'include.acl' file will propagate to the 'squid.conf' file at that time.
3143
3144 shutdown_lifetime 5 seconds
3145 icp_port 0
3146
3147 END
3148         ;
3149
3150         # Include file with user defined settings.
3151         if (-e "/etc/squid/squid.conf.pre.local") {
3152                 print FILE "include /etc/squid/squid.conf.pre.local\n\n";
3153         }
3154
3155         print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3156         if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3157         print FILE "\n";
3158
3159         if ($proxysettings{'TRANSPARENT'} eq 'on') {
3160                 print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'TRANSPARENT_PORT'} intercept";
3161                 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3162                 print FILE "\n";
3163         }
3164
3165         if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
3166                 print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}";
3167                 if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3168                 print FILE "\n";
3169
3170                 if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') {
3171                         print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'TRANSPARENT_PORT'} intercept";
3172                         if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" }
3173                         print FILE "\n";
3174                 }
3175         }
3176
3177         if ($proxysettings{'CACHE_SIZE'} > 0)
3178         {
3179                 print FILE "\n";
3180
3181                 if (!-z $acl_dst_nocache_dom) {
3182                         print FILE "acl no_cache_domains dstdomain \"$acl_dst_nocache_dom\"\n";
3183                         print FILE "cache deny no_cache_domains\n";
3184                 }
3185                 if (!-z $acl_dst_nocache_net) {
3186                         print FILE "acl no_cache_ipaddr dst \"$acl_dst_nocache_net\"\n";
3187                         print FILE "cache deny no_cache_ipaddr\n";
3188                 }
3189                 if (!-z $acl_dst_nocache_url) {
3190                         print FILE "acl no_cache_hosts url_regex -i \"$acl_dst_nocache_url\"\n";
3191                         print FILE "cache deny no_cache_hosts\n";
3192                 }
3193         }
3194
3195         print FILE <<END
3196
3197 cache_effective_user squid
3198 umask 022
3199
3200 pid_filename /var/run/squid.pid
3201
3202 cache_mem $proxysettings{'CACHE_MEM'} MB
3203 END
3204         ;
3205         print FILE "error_directory $errordir/$proxysettings{'ERR_LANGUAGE'}\n\n";
3206
3207         if ($proxysettings{'OFFLINE_MODE'} eq 'on') {  print FILE "offline_mode on\n\n"; }
3208         if ($proxysettings{'CACHE_DIGESTS'} eq 'on') {  print FILE "digest_generation on\n\n"; } else {  print FILE "digest_generation off\n\n"; }
3209
3210         if ((!($proxysettings{'MEM_POLICY'} eq 'LRU')) || (!($proxysettings{'CACHE_POLICY'} eq 'LRU')))
3211         {
3212                 if (!($proxysettings{'MEM_POLICY'} eq 'LRU'))
3213                 {
3214                         print FILE "memory_replacement_policy $proxysettings{'MEM_POLICY'}\n";
3215                 }
3216                 if (!($proxysettings{'CACHE_POLICY'} eq 'LRU'))
3217                 {
3218                         print FILE "cache_replacement_policy $proxysettings{'CACHE_POLICY'}\n";
3219                 }
3220                 print FILE "\n";
3221         }
3222
3223         open (PORTS,"$acl_ports_ssl");
3224         my @ssl_ports = <PORTS>;
3225         close PORTS;
3226
3227         if (@ssl_ports) {
3228                 foreach (@ssl_ports) {
3229                         print FILE "acl SSL_ports port $_";
3230                 }
3231         }
3232
3233         open (PORTS,"$acl_ports_safe");
3234         my @safe_ports = <PORTS>;
3235         close PORTS;
3236
3237         if (@safe_ports) {
3238                 foreach (@safe_ports) {
3239                         print FILE "acl Safe_ports port $_";
3240                 }
3241         }
3242
3243         print FILE <<END
3244
3245 acl IPFire_http  port $http_port
3246 acl IPFire_https port $https_port
3247 acl IPFire_ips              dst $netsettings{'GREEN_ADDRESS'}
3248 acl IPFire_networks         src "$acl_src_subnets"
3249 acl IPFire_servers          dst "$acl_src_subnets"
3250 acl IPFire_green_network    src $green_cidr
3251 acl IPFire_green_servers    dst $green_cidr
3252 END
3253         ;
3254         if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPFire_blue_network     src $blue_cidr\n"; }
3255         if ($netsettings{'BLUE_DEV'}) { print FILE "acl IPFire_blue_servers     dst $blue_cidr\n"; }
3256         if (!-z $acl_src_banned_ip) { print FILE "acl IPFire_banned_ips       src \"$acl_src_banned_ip\"\n"; }
3257         if (!-z $acl_src_banned_mac) { print FILE "acl IPFire_banned_mac       arp \"$acl_src_banned_mac\"\n"; }
3258         if (!-z $acl_src_unrestricted_ip) { print FILE "acl IPFire_unrestricted_ips src \"$acl_src_unrestricted_ip\"\n"; }
3259         if (!-z $acl_src_unrestricted_mac) { print FILE "acl IPFire_unrestricted_mac arp \"$acl_src_unrestricted_mac\"\n"; }
3260         print FILE <<END
3261 acl CONNECT method CONNECT
3262 END
3263         ;
3264
3265         if ($proxysettings{'CACHE_SIZE'} > 0) {
3266                 print FILE <<END
3267 maximum_object_size $proxysettings{'MAX_SIZE'} KB
3268 minimum_object_size $proxysettings{'MIN_SIZE'} KB
3269
3270 cache_dir aufs /var/log/cache $proxysettings{'CACHE_SIZE'} $proxysettings{'L1_DIRS'} 256
3271 END
3272                 ;
3273         } else {
3274                 print FILE "cache deny all\n\n";
3275         }
3276
3277         print FILE <<END
3278 request_body_max_size $proxysettings{'MAX_OUTGOING_SIZE'} KB
3279 END
3280         ;
3281
3282         if ($proxysettings{'MAX_INCOMING_SIZE'} > 0) {
3283                 if (!-z $acl_src_unrestricted_ip) { print FILE "reply_body_max_size none IPFire_unrestricted_ips\n"; }
3284                 if (!-z $acl_src_unrestricted_mac) { print FILE "reply_body_max_size none IPFire_unrestricted_mac\n"; }
3285                 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3286                 {
3287                         if (!-z $extgrp) { print FILE "reply_body_max_size none for_extended_users\n"; }
3288                 }
3289         }
3290
3291         if ( $proxysettings{'MAX_INCOMING_SIZE'} != '0' )
3292         {
3293                 print FILE "reply_body_max_size $proxysettings{'MAX_INCOMING_SIZE'} KB all\n\n";
3294         }
3295
3296         if ($proxysettings{'LOGGING'} eq 'on')
3297         {
3298                 print FILE <<END
3299 access_log stdio:/var/log/squid/access.log
3300 cache_log /var/log/squid/cache.log
3301 cache_store_log none
3302 END
3303         ;
3304                 if ($proxysettings{'LOGUSERAGENT'} eq 'on') { print FILE "access_log stdio:\/var\/log\/squid\/user_agent.log useragent\n"; }
3305                 if ($proxysettings{'LOGQUERY'} eq 'on') { print FILE "\nstrip_query_terms off\n"; }
3306         } else {
3307                 print FILE <<END
3308 access_log /dev/null
3309 cache_log /dev/null
3310 cache_store_log none
3311 END
3312         ;}
3313         print FILE <<END
3314
3315 log_mime_hdrs off
3316 END
3317         ;
3318
3319         if ($proxysettings{'FORWARD_IPADDRESS'} eq 'on')
3320         {
3321                 print FILE "forwarded_for on\n";
3322         } else {
3323                 print FILE "forwarded_for off\n";
3324         }
3325         if ($proxysettings{'FORWARD_VIA'} eq 'on')
3326         {
3327                 print FILE "via on\n";
3328         } else {
3329                 print FILE "via off\n";
3330         }
3331         print FILE "\n";
3332
3333         if ((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3334         {
3335                 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3336                 {
3337                         print FILE "auth_param basic program $authdir/basic_ncsa_auth $userdb\n";
3338                         print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3339                         print FILE "auth_param basic realm $authrealm\n";
3340                         print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3341                         if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3342                 }
3343
3344                 if ($proxysettings{'AUTH_METHOD'} eq 'ldap')
3345                 {
3346                         print FILE "auth_param basic utf8 on\n";
3347                         print FILE "auth_param basic program $authdir/basic_ldap_auth -b \"$proxysettings{'LDAP_BASEDN'}\"";
3348                         if (!($proxysettings{'LDAP_BINDDN_USER'} eq '')) { print FILE " -D \"$proxysettings{'LDAP_BINDDN_USER'}\""; }
3349                         if (!($proxysettings{'LDAP_BINDDN_PASS'} eq '')) { print FILE " -w $proxysettings{'LDAP_BINDDN_PASS'}"; }
3350                         if ($proxysettings{'LDAP_TYPE'} eq 'ADS')
3351                         {
3352                                 if ($proxysettings{'LDAP_GROUP'} eq '')
3353                                 {
3354                                         print FILE " -f \"(\&(objectClass=person)(sAMAccountName=\%s))\"";
3355                                 } else {
3356                                         print FILE " -f \"(\&(\&(objectClass=person)(sAMAccountName=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
3357                                 }
3358                                 print FILE " -u sAMAccountName -P";
3359                         }
3360                         if ($proxysettings{'LDAP_TYPE'} eq 'NDS')
3361                         {
3362                                 if ($proxysettings{'LDAP_GROUP'} eq '')
3363                                 {
3364                                         print FILE " -f \"(\&(objectClass=person)(cn=\%s))\"";
3365                                 } else {
3366                                         print FILE " -f \"(\&(\&(objectClass=person)(cn=\%s))(groupMembership=$proxysettings{'LDAP_GROUP'}))\"";
3367                                 }
3368                                 print FILE " -u cn -P";
3369                         }
3370                         if (($proxysettings{'LDAP_TYPE'} eq 'V2') || ($proxysettings{'LDAP_TYPE'} eq 'V3'))
3371                         {
3372                                 if ($proxysettings{'LDAP_GROUP'} eq '')
3373                                 {
3374                                         print FILE " -f \"(\&(objectClass=person)(uid=\%s))\"";
3375                                 } else {
3376                                         print FILE " -f \"(\&(\&(objectClass=person)(uid=\%s))(memberOf=$proxysettings{'LDAP_GROUP'}))\"";
3377                                 }
3378                                 if ($proxysettings{'LDAP_TYPE'} eq 'V2') { print FILE " -v 2"; }
3379                                 if ($proxysettings{'LDAP_TYPE'} eq 'V3') { print FILE " -v 3"; }
3380                                 print FILE " -u uid -P";
3381                         }
3382                         print FILE " $proxysettings{'LDAP_SERVER'}:$proxysettings{'LDAP_PORT'}\n";
3383                         print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3384                         print FILE "auth_param basic realm $authrealm\n";
3385                         print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3386                         if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3387                 }
3388
3389                 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm')
3390                 {
3391                         if ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on')
3392                         {
3393                                 print FILE "auth_param ntlm program $authdir/ntlm_smb_lm_auth $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_PDC'}";
3394                                 if ($proxysettings{'NTLM_BDC'} eq '') { print FILE "\n"; } else { print FILE " $proxysettings{'NTLM_DOMAIN'}/$proxysettings{'NTLM_BDC'}\n"; }
3395                                 print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n";
3396                                 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3397                         } else {
3398                                 print FILE "auth_param basic program $authdir/basic_msnt_auth\n";
3399                                 print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3400                                 print FILE "auth_param basic realm $authrealm\n";
3401                                 print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3402                                 if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3403
3404                                 open(MSNTCONF, ">$ntlmdir/msntauth.conf");
3405                                 flock(MSNTCONF,2);
3406                                 print MSNTCONF "server $proxysettings{'NTLM_PDC'}";
3407                                 if ($proxysettings{'NTLM_BDC'} eq '') { print MSNTCONF " $proxysettings{'NTLM_PDC'}"; } else { print MSNTCONF " $proxysettings{'NTLM_BDC'}"; }
3408                                 print MSNTCONF " $proxysettings{'NTLM_DOMAIN'}\n";
3409                                 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3410                                 {
3411                                         if ($proxysettings{'NTLM_USER_ACL'} eq 'positive')
3412                                         {
3413                                                 print MSNTCONF "allowusers $ntlmdir/msntauth.allowusers\n";
3414                                         } else {
3415                                                 print MSNTCONF "denyusers $ntlmdir/msntauth.denyusers\n";
3416                                         }
3417                                 }
3418                                 close(MSNTCONF);
3419                         }
3420                 }
3421
3422                 if ($proxysettings{'AUTH_METHOD'} eq 'ntlm-auth')
3423                 {
3424                         print FILE "auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp";
3425                         if ($proxysettings{'NTLM_AUTH_GROUP'}) {
3426                                 my $ntlm_auth_group = $proxysettings{'NTLM_AUTH_GROUP'};
3427                                 $ntlm_auth_group =~ s/\\/\+/;
3428
3429                                 print FILE " --require-membership-of=\"$ntlm_auth_group\"";
3430                         }
3431                         print FILE "\n";
3432
3433                         print FILE "auth_param ntlm children $proxysettings{'AUTH_CHILDREN'}\n\n";
3434
3435                         # BASIC authentication
3436                         if ($proxysettings{'NTLM_AUTH_BASIC'} eq "on") {
3437                                 print FILE "auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic";
3438                                 if ($proxysettings{'NTLM_AUTH_GROUP'}) {
3439                                         my $ntlm_auth_group = $proxysettings{'NTLM_AUTH_GROUP'};
3440                                         $ntlm_auth_group =~ s/\\/\+/;
3441
3442                                         print FILE " --require-membership-of=\"$ntlm_auth_group\"";
3443                                 }
3444                                 print FILE "\n";
3445                                 print FILE "auth_param basic children 10\n";
3446                                 print FILE "auth_param basic realm IPFire Web Proxy Server\n";
3447                                 print FILE "auth_param basic credentialsttl 2 hours\n\n";
3448                         }
3449                 }
3450
3451                 if ($proxysettings{'AUTH_METHOD'} eq 'radius')
3452                 {
3453                         print FILE "auth_param basic program $authdir/basic_radius_auth -h $proxysettings{'RADIUS_SERVER'} -p $proxysettings{'RADIUS_PORT'} ";
3454                         if (!($proxysettings{'RADIUS_IDENTIFIER'} eq '')) { print FILE "-i $proxysettings{'RADIUS_IDENTIFIER'} "; }
3455                         print FILE "-w $proxysettings{'RADIUS_SECRET'}\n";
3456                         print FILE "auth_param basic children $proxysettings{'AUTH_CHILDREN'}\n";
3457                         print FILE "auth_param basic realm $authrealm\n";
3458                         print FILE "auth_param basic credentialsttl $proxysettings{'AUTH_CACHE_TTL'} minutes\n";
3459                         if (!($proxysettings{'AUTH_IPCACHE_TTL'} eq '0')) { print FILE "\nauthenticate_ip_ttl $proxysettings{'AUTH_IPCACHE_TTL'} minutes\n"; }
3460                 }
3461
3462                 print FILE "\n";
3463                 print FILE "acl for_inetusers proxy_auth REQUIRED\n";
3464                 if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') && ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on'))
3465                 {
3466                         if ((!-z "$ntlmdir/msntauth.allowusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'positive'))
3467                         {
3468                                 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.allowusers\"\n";
3469                         }
3470                         if ((!-z "$ntlmdir/msntauth.denyusers") && ($proxysettings{'NTLM_USER_ACL'} eq 'negative'))
3471                         {
3472                                 print FILE "acl for_acl_users proxy_auth \"$ntlmdir/msntauth.denyusers\"\n";
3473                         }
3474                 }
3475                 if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
3476                 {
3477                         if ((!-z "$raddir/radauth.allowusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'positive'))
3478                         {
3479                                 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.allowusers\"\n";
3480                         }
3481                         if ((!-z "$raddir/radauth.denyusers") && ($proxysettings{'RADIUS_USER_ACL'} eq 'negative'))
3482                         {
3483                                 print FILE "acl for_acl_users proxy_auth \"$raddir/radauth.denyusers\"\n";
3484                         }
3485                 }
3486                 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3487                 {
3488                         print FILE "\n";
3489                         if (!-z $extgrp) { print FILE "acl for_extended_users proxy_auth \"$extgrp\"\n"; }
3490                         if (!-z $disgrp) { print FILE "acl for_disabled_users proxy_auth \"$disgrp\"\n"; }
3491                 }
3492                 if (!($proxysettings{'AUTH_MAX_USERIP'} eq '')) { print FILE "\nacl concurrent max_user_ip -s $proxysettings{'AUTH_MAX_USERIP'}\n"; }
3493                 print FILE "\n";
3494
3495                 if (!-z $acl_dst_noauth_net) { print FILE "acl to_ipaddr_without_auth dst \"$acl_dst_noauth_net\"\n"; }
3496                 if (!-z $acl_dst_noauth_dom) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth_dom\"\n"; }
3497                 if (!-z $acl_dst_noauth_url) { print FILE "acl to_hosts_without_auth url_regex -i \"$acl_dst_noauth_url\"\n"; }
3498                 print FILE "\n";
3499
3500         }
3501
3502         if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3503         {
3504                 if ($proxysettings{'IDENT_REQUIRED'} eq 'on')
3505                 {
3506                         print FILE "acl for_inetusers ident REQUIRED\n";
3507                 }
3508                 if ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on')
3509                 {
3510                         if ((!-z "$identdir/identauth.allowusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'positive'))
3511                         {
3512                                 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.allowusers\"\n\n";
3513                         }
3514                         if ((!-z "$identdir/identauth.denyusers") && ($proxysettings{'IDENT_USER_ACL'} eq 'negative'))
3515                         {
3516                                 print FILE "acl for_acl_users ident_regex -i \"$identdir/identauth.denyusers\"\n\n";
3517                         }
3518                 }
3519                 if (!-z $acl_dst_noauth_net) { print FILE "acl to_ipaddr_without_auth dst \"$acl_dst_noauth_net\"\n"; }
3520                 if (!-z $acl_dst_noauth_dom) { print FILE "acl to_domains_without_auth dstdomain \"$acl_dst_noauth_dom\"\n"; }
3521                 if (!-z $acl_dst_noauth_url) { print FILE "acl to_hosts_without_auth url_regex -i \"$acl_dst_noauth_url\"\n"; }
3522                 print FILE "\n";
3523         }
3524
3525         if (($delaypools) && (!-z $acl_dst_throttle)) { print FILE "acl for_throttled_urls url_regex -i \"$acl_dst_throttle\"\n\n"; }
3526
3527         if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE "acl with_allowed_useragents browser $browser_regexp\n\n"; }
3528
3529         print FILE "acl within_timeframe time ";
3530         if ($proxysettings{'TIME_MON'} eq 'on') { print FILE "M"; }
3531         if ($proxysettings{'TIME_TUE'} eq 'on') { print FILE "T"; }
3532         if ($proxysettings{'TIME_WED'} eq 'on') { print FILE "W"; }
3533         if ($proxysettings{'TIME_THU'} eq 'on') { print FILE "H"; }
3534         if ($proxysettings{'TIME_FRI'} eq 'on') { print FILE "F"; }
3535         if ($proxysettings{'TIME_SAT'} eq 'on') { print FILE "A"; }
3536         if ($proxysettings{'TIME_SUN'} eq 'on') { print FILE "S"; }
3537         print FILE " $proxysettings{'TIME_FROM_HOUR'}:";
3538         print FILE "$proxysettings{'TIME_FROM_MINUTE'}-";
3539         print FILE "$proxysettings{'TIME_TO_HOUR'}:";
3540         print FILE "$proxysettings{'TIME_TO_MINUTE'}\n\n";
3541
3542         if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
3543                 print FILE "acl blocked_mimetypes rep_mime_type \"$mimetypes\"\n\n";
3544         }
3545
3546         if ($proxysettings{'CLASSROOM_EXT'} eq 'on') {
3547                 print FILE <<END
3548
3549 #Classroom extensions
3550 acl IPFire_no_access_ips src "$acl_src_noaccess_ip"
3551 acl IPFire_no_access_mac arp "$acl_src_noaccess_mac"
3552 END
3553                 ;
3554                 print FILE "deny_info ";
3555                 if (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED"))
3556                 {
3557                         print FILE "ERR_ACCESS_DISABLED";
3558                 } else {
3559                         print FILE "ERR_ACCESS_DENIED";
3560                 }
3561                 print FILE " IPFire_no_access_ips\n";
3562                 print FILE "deny_info ";
3563                 if (($proxysettings{'ERR_DESIGN'} eq 'squid') && (-e "$errordir/$proxysettings{'ERR_LANGUAGE'}/ERR_ACCESS_DISABLED"))
3564                 {
3565                         print FILE "ERR_ACCESS_DISABLED";
3566                 } else {
3567                         print FILE "ERR_ACCESS_DENIED";
3568                 }
3569                 print FILE " IPFire_no_access_mac\n";
3570
3571                 print FILE <<END
3572 http_access deny IPFire_no_access_ips
3573 http_access deny IPFire_no_access_mac
3574 END
3575         ;
3576         }
3577
3578         #Insert acl file and replace __VAR__ with correct values
3579         my $blue_net = ''; #BLUE empty by default
3580         my $blue_ip = '';
3581         if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') {
3582                 $blue_net = "$blue_cidr";
3583                 $blue_ip  = "$netsettings{'BLUE_ADDRESS'}";
3584         }
3585         if (!-z $acl_include)
3586         {
3587                 open (ACL, "$acl_include");
3588                 print FILE "\n#Start of custom includes\n\n";
3589                 while (<ACL>) {
3590                         $_ =~ s/__GREEN_IP__/$netsettings{'GREEN_ADDRESS'}/;
3591                         $_ =~ s/__GREEN_NET__/$green_cidr/;
3592                         $_ =~ s/__BLUE_IP__/$blue_ip/;
3593                         $_ =~ s/__BLUE_NET__/$blue_net/;
3594                         $_ =~ s/__PROXY_PORT__/$proxysettings{'PROXY_PORT'}/;
3595                         print FILE $_;
3596                 }
3597                 print FILE "\n#End of custom includes\n";
3598                 close (ACL);
3599         }
3600         if ((!-z $extgrp) && ($proxysettings{'AUTH_METHOD'} eq 'ncsa') && ($proxysettings{'NCSA_BYPASS_REDIR'} eq 'on')) { print FILE "\nredirector_access deny for_extended_users\n"; }
3601
3602         # Check if squidclamav is enabled.
3603         if ($proxysettings{'ENABLE_CLAMAV'} eq 'on') {
3604                 print FILE "\n#Settings for squidclamav:\n";
3605                 print FILE "http_port 127.0.0.1:$proxysettings{'PROXY_PORT'}\n";
3606                 print FILE "acl purge method PURGE\n";
3607                 print FILE "http_access deny to_localhost\n";
3608                 print FILE "http_access allow localhost\n";
3609                 print FILE "http_access allow purge localhost\n";
3610                 print FILE "http_access deny purge\n";
3611                 print FILE "url_rewrite_access deny localhost\n";
3612         }
3613         print FILE <<END;
3614
3615 #Access to squid:
3616 #local machine, no restriction
3617 http_access allow         localhost
3618
3619 #GUI admin if local machine connects
3620 http_access allow         IPFire_ips IPFire_networks IPFire_http
3621 http_access allow CONNECT IPFire_ips IPFire_networks IPFire_https
3622
3623 #Deny not web services
3624 END
3625
3626 if (@safe_ports) {
3627         print FILE "http_access deny          !Safe_ports\n";
3628 }
3629
3630 if (@ssl_ports) {
3631         print FILE "http_access deny  CONNECT !SSL_ports\n";
3632 }
3633
3634 if ($proxysettings{'AUTH_METHOD'} eq 'ident')
3635 {
3636 print FILE "#Set ident ACLs\n";
3637 if (!-z $identhosts)
3638         {
3639                 print FILE "acl on_ident_aware_hosts src \"$identhosts\"\n";
3640                 print FILE "ident_lookup_access allow on_ident_aware_hosts\n";
3641                 print FILE "ident_lookup_access deny all\n";
3642         } else {
3643                 print FILE "ident_lookup_access allow all\n";
3644         }
3645         print FILE "ident_timeout $proxysettings{'IDENT_TIMEOUT'} seconds\n\n";
3646 }
3647
3648 if ($delaypools) {
3649         print FILE "#Set download throttling\n";
3650
3651         if ($netsettings{'BLUE_DEV'})
3652         {
3653                 print FILE "delay_pools 2\n";
3654         } else {
3655                 print FILE "delay_pools 1\n";
3656         }
3657
3658         print FILE "delay_class 1 3\n";
3659         if ($netsettings{'BLUE_DEV'}) { print FILE "delay_class 2 3\n"; }
3660
3661         print FILE "delay_parameters 1 ";
3662         if ($proxysettings{'THROTTLING_GREEN_TOTAL'} eq 'unlimited')
3663         {
3664                 print FILE "-1/-1";
3665         } else {
3666                 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 125;
3667                 print FILE "/";
3668                 print FILE $proxysettings{'THROTTLING_GREEN_TOTAL'} * 250;
3669         }
3670
3671         print FILE " -1/-1 ";
3672         if ($proxysettings{'THROTTLING_GREEN_HOST'} eq 'unlimited')
3673         {
3674                 print FILE "-1/-1";
3675         } else {
3676                 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 125;
3677                 print FILE "/";
3678                 print FILE $proxysettings{'THROTTLING_GREEN_HOST'} * 250;
3679         }
3680         print FILE "\n";
3681
3682         if ($netsettings{'BLUE_DEV'})
3683         {
3684                 print FILE "delay_parameters 2 ";
3685                 if ($proxysettings{'THROTTLING_BLUE_TOTAL'} eq 'unlimited')
3686                 {
3687                         print FILE "-1/-1";
3688                 } else {
3689                         print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 125;
3690                         print FILE "/";
3691                         print FILE $proxysettings{'THROTTLING_BLUE_TOTAL'} * 250;
3692                 }
3693                 print FILE " -1/-1 ";
3694                 if ($proxysettings{'THROTTLING_BLUE_HOST'} eq 'unlimited')
3695                 {
3696                         print FILE "-1/-1";
3697                 } else {
3698                         print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 125;
3699                         print FILE "/";
3700                         print FILE $proxysettings{'THROTTLING_BLUE_HOST'} * 250;
3701                 }
3702                 print FILE "\n";
3703         }
3704
3705         print FILE "delay_access 1 deny  IPFire_ips\n";
3706         if (!-z $acl_src_unrestricted_ip)  { print FILE "delay_access 1 deny  IPFire_unrestricted_ips\n"; }
3707         if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 1 deny  IPFire_unrestricted_mac\n"; }
3708         if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 1 deny  for_extended_users\n"; }
3709
3710         if ($netsettings{'BLUE_DEV'})
3711         {
3712                 print FILE "delay_access 1 allow IPFire_green_network";
3713                 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
3714                 print FILE "\n";
3715                 print FILE "delay_access 1 deny  all\n";
3716         } else {
3717                 print FILE "delay_access 1 allow all";
3718                 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
3719                 print FILE "\n";
3720         }
3721
3722         if ($netsettings{'BLUE_DEV'})
3723         {
3724                 print FILE "delay_access 2 deny  IPFire_ips\n";
3725                 if (!-z $acl_src_unrestricted_ip)  { print FILE "delay_access 2 deny  IPFire_unrestricted_ips\n"; }
3726                 if (!-z $acl_src_unrestricted_mac) { print FILE "delay_access 2 deny  IPFire_unrestricted_mac\n"; }
3727                 if (($proxysettings{'AUTH_METHOD'} eq 'ncsa') && (!-z $extgrp)) { print FILE "delay_access 2 deny  for_extended_users\n"; }
3728                 print FILE "delay_access 2 allow IPFire_blue_network";
3729                 if (!-z $acl_dst_throttle) { print FILE " for_throttled_urls"; }
3730                 print FILE "\n";
3731                 print FILE "delay_access 2 deny  all\n";
3732         }
3733
3734         print FILE "delay_initial_bucket_level 100\n";
3735         print FILE "\n";
3736 }
3737
3738 if ($proxysettings{'NO_PROXY_LOCAL'} eq 'on')
3739 {
3740         print FILE "#Prevent internal proxy access to Green except IPFire itself\n";
3741         print FILE "http_access deny IPFire_green_servers !IPFire_ips !IPFire_green_network\n\n";
3742 }
3743
3744 if ($proxysettings{'NO_PROXY_LOCAL_BLUE'} eq 'on')
3745 {
3746         print FILE "#Prevent internal proxy access from Blue except IPFire itself\n";
3747         print FILE "http_access allow IPFire_blue_network IPFire_blue_servers\n";
3748         print FILE "http_access deny  IPFire_blue_network !IPFire_ips IPFire_servers\n\n";
3749 }
3750
3751         print FILE <<END
3752 #Set custom configured ACLs
3753 END
3754         ;
3755         if (!-z $acl_src_banned_ip) { print FILE "http_access deny  IPFire_banned_ips\n"; }
3756         if (!-z $acl_src_banned_mac) { print FILE "http_access deny  IPFire_banned_mac\n"; }
3757
3758         if ((!-z $acl_dst_noauth) && (!($proxysettings{'AUTH_METHOD'} eq 'none')))
3759         {
3760                 if (!-z $acl_src_unrestricted_ip)
3761                 {
3762                         if (!-z $acl_dst_noauth_net) { print FILE "http_access allow IPFire_unrestricted_ips to_ipaddr_without_auth\n"; }
3763                         if (!-z $acl_dst_noauth_dom) { print FILE "http_access allow IPFire_unrestricted_ips to_domains_without_auth\n"; }
3764                         if (!-z $acl_dst_noauth_url) { print FILE "http_access allow IPFire_unrestricted_ips to_hosts_without_auth\n"; }
3765                 }
3766                 if (!-z $acl_src_unrestricted_mac)
3767                 {
3768                         if (!-z $acl_dst_noauth_net) { print FILE "http_access allow IPFire_unrestricted_mac to_ipaddr_without_auth\n"; }
3769                         if (!-z $acl_dst_noauth_dom) { print FILE "http_access allow IPFire_unrestricted_mac to_domains_without_auth\n"; }
3770                         if (!-z $acl_dst_noauth_url) { print FILE "http_access allow IPFire_unrestricted_mac to_hosts_without_auth\n"; }
3771                 }
3772                 if (!-z $acl_dst_noauth_net)
3773                 {
3774                         print FILE "http_access allow IPFire_networks";
3775                         if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3776                                 print FILE " !within_timeframe";
3777                         } else {
3778                                 print FILE " within_timeframe"; }
3779                         if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3780                         print FILE " to_ipaddr_without_auth\n";
3781                 }
3782                 if (!-z $acl_dst_noauth_dom)
3783                 {
3784                         print FILE "http_access allow IPFire_networks";
3785                         if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3786                                 print FILE " !within_timeframe";
3787                         } else {
3788                                 print FILE " within_timeframe"; }
3789                         if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3790                         print FILE " to_domains_without_auth\n";
3791                 }
3792                 if (!-z $acl_dst_noauth_url)
3793                 {
3794                         print FILE "http_access allow IPFire_networks";
3795                         if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3796                                 print FILE " !within_timeframe";
3797                         } else {
3798                                 print FILE " within_timeframe"; }
3799                         if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3800                         print FILE " to_hosts_without_auth\n";
3801                 }
3802         }
3803
3804         if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on'))
3805         {
3806                 print FILE "http_access deny  !for_inetusers";
3807                 if (!-z $identhosts) { print FILE " on_ident_aware_hosts"; }
3808                 print FILE "\n";
3809         }
3810
3811         if (
3812              ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3813              ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on') &&
3814              ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3815              ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3816              (!-z "$identdir/identauth.denyusers")
3817            )
3818         {
3819                 print FILE "http_access deny  for_acl_users";
3820                 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3821                 print FILE "\n";
3822         }
3823
3824         if (!-z $acl_src_unrestricted_ip)
3825         {
3826                 print FILE "http_access allow IPFire_unrestricted_ips";
3827                 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3828                 {
3829                         if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3830                         {
3831                                 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3832                         }
3833                         if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3834                         {
3835                                 print FILE " for_inetusers";
3836                         }
3837                         if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3838                         {
3839                                 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3840                                 {
3841                                         if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3842                                         {
3843                                                 print FILE " for_acl_users";
3844                                         }
3845                                         if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3846                                         {
3847                                                 print FILE " !for_acl_users";
3848                                         }
3849                                 } else { print FILE " for_inetusers"; }
3850                         }
3851                         if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
3852                         {
3853                                 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
3854                                 {
3855                                         if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3856                                         {
3857                                                 print FILE " for_acl_users";
3858                                         }
3859                                         if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3860                                         {
3861                                                 print FILE " !for_acl_users";
3862                                         }
3863                                 } else { print FILE " for_inetusers"; }
3864                         }
3865                 }
3866                 print FILE "\n";
3867         }
3868
3869         if (!-z $acl_src_unrestricted_mac)
3870         {
3871                 print FILE "http_access allow IPFire_unrestricted_mac";
3872                 if ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'on')
3873                 {
3874                         if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3875                         {
3876                                 if (!-z $disgrp) { print FILE " !for_disabled_users"; } else { print FILE " for_inetusers"; }
3877                         }
3878                         if (($proxysettings{'AUTH_METHOD'} eq 'ldap') || (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'off')) || ($proxysettings{'AUTH_METHOD'} eq 'radius'))
3879                         {
3880                                 print FILE " for_inetusers";
3881                         }
3882                         if (($proxysettings{'AUTH_METHOD'} eq 'ntlm') && ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on'))
3883                         {
3884                                 if ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on')
3885                                 {
3886                                         if (($proxysettings{'NTLM_USER_ACL'} eq 'positive') && (!-z "$ntlmdir/msntauth.allowusers"))
3887                                         {
3888                                                 print FILE " for_acl_users";
3889                                         }
3890                                         if (($proxysettings{'NTLM_USER_ACL'} eq 'negative') && (!-z "$ntlmdir/msntauth.denyusers"))
3891                                         {
3892                                                 print FILE " !for_acl_users";
3893                                         }
3894                                 } else { print FILE " for_inetusers"; }
3895                         }
3896                         if (($proxysettings{'AUTH_METHOD'} eq 'radius') && ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on'))
3897                         {
3898                                 if ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on')
3899                                 {
3900                                         if (($proxysettings{'RADIUS_USER_ACL'} eq 'positive') && (!-z "$raddir/radauth.allowusers"))
3901                                         {
3902                                                 print FILE " for_acl_users";
3903                                         }
3904                                         if (($proxysettings{'RADIUS_USER_ACL'} eq 'negative') && (!-z "$raddir/radauth.denyusers"))
3905                                         {
3906                                                 print FILE " !for_acl_users";
3907                                         }
3908                                 } else { print FILE " for_inetusers"; }
3909                         }
3910                 }
3911                 print FILE "\n";
3912         }
3913
3914         if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
3915         {
3916                 if (!-z $disgrp) { print FILE "http_access deny  for_disabled_users\n"; }
3917                 if (!-z $extgrp) { print FILE "http_access allow IPFire_networks for_extended_users\n"; }
3918         }
3919
3920         if (
3921             (
3922              ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3923              ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3924              ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3925              ($proxysettings{'NTLM_USER_ACL'} eq 'negative') &&
3926              (!-z "$ntlmdir/msntauth.denyusers")
3927             )
3928                 ||
3929             (
3930              ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3931              ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3932              ($proxysettings{'RADIUS_USER_ACL'} eq 'negative') &&
3933              (!-z "$raddir/radauth.denyusers")
3934             )
3935                 ||
3936             (
3937              ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3938              ($proxysettings{'AUTH_ALWAYS_REQUIRED'} eq 'off') &&
3939              ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3940              ($proxysettings{'IDENT_USER_ACL'} eq 'negative') &&
3941              (!-z "$identdir/identauth.denyusers")
3942             )
3943            )
3944         {
3945                 print FILE "http_access deny  for_acl_users";
3946                 if (($proxysettings{'AUTH_METHOD'} eq 'ident') && (!-z "$identdir/hosts")) { print FILE " on_ident_aware_hosts"; }
3947                 print FILE "\n";
3948         }
3949
3950         if (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on') && (!-z "$identhosts"))
3951         {
3952                 print FILE "http_access allow";
3953                 if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3954                         print FILE " !within_timeframe";
3955                 } else {
3956                         print FILE " within_timeframe"; }
3957                 if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
3958                 print FILE " !on_ident_aware_hosts\n";
3959         }
3960
3961         print FILE "http_access allow IPFire_networks";
3962         if (
3963             (
3964              ($proxysettings{'AUTH_METHOD'} eq 'ntlm') &&
3965              ($proxysettings{'NTLM_ENABLE_INT_AUTH'} eq 'on') &&
3966              ($proxysettings{'NTLM_ENABLE_ACL'} eq 'on') &&
3967              ($proxysettings{'NTLM_USER_ACL'} eq 'positive') &&
3968              (!-z "$ntlmdir/msntauth.allowusers")
3969             )
3970                 ||
3971             (
3972              ($proxysettings{'AUTH_METHOD'} eq 'radius') &&
3973              ($proxysettings{'RADIUS_ENABLE_ACL'} eq 'on') &&
3974              ($proxysettings{'RADIUS_USER_ACL'} eq 'positive') &&
3975              (!-z "$raddir/radauth.allowusers")
3976             )
3977                 ||
3978             (
3979              ($proxysettings{'AUTH_METHOD'} eq 'ident') &&
3980              ($proxysettings{'IDENT_REQUIRED'} eq 'on') &&
3981              ($proxysettings{'IDENT_ENABLE_ACL'} eq 'on') &&
3982              ($proxysettings{'IDENT_USER_ACL'} eq 'positive') &&
3983              (!-z "$identdir/identauth.allowusers")
3984             )
3985            )
3986         {
3987                 print FILE " for_acl_users";
3988         } elsif (((!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident'))) ||
3989                 (($proxysettings{'AUTH_METHOD'} eq 'ident') && ($proxysettings{'IDENT_REQUIRED'} eq 'on'))) {
3990                 print FILE " for_inetusers";
3991         }
3992         if ((!($proxysettings{'AUTH_MAX_USERIP'} eq '')) && (!($proxysettings{'AUTH_METHOD'} eq 'none')) && (!($proxysettings{'AUTH_METHOD'} eq 'ident')))
3993         {
3994                 print FILE " !concurrent";
3995         }
3996         if ($proxysettings{'TIME_ACCESS_MODE'} eq 'deny') {
3997                 print FILE " !within_timeframe";
3998         } else {
3999                 print FILE " within_timeframe"; }
4000         if ($proxysettings{'ENABLE_BROWSER_CHECK'} eq 'on') { print FILE " with_allowed_useragents"; }
4001         print FILE "\n";
4002
4003         print FILE "http_access deny  all\n\n";
4004
4005         if (($proxysettings{'FORWARD_IPADDRESS'} eq 'off') || ($proxysettings{'FORWARD_VIA'} eq 'off') ||
4006                 (!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
4007         {
4008                 print FILE "#Strip HTTP Header\n";
4009
4010                 if ($proxysettings{'FORWARD_IPADDRESS'} eq 'off')
4011                 {
4012                         print FILE "request_header_access X-Forwarded-For deny all\n";
4013                         print FILE "reply_header_access X-Forwarded-For deny all\n";
4014                 }
4015                 if ($proxysettings{'FORWARD_VIA'} eq 'off')
4016                 {
4017                         print FILE "request_header_access Via deny all\n";
4018                         print FILE "reply_header_access Via deny all\n";
4019                 }
4020                 if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
4021                 {
4022                         print FILE "request_header_access User-Agent deny all\n";
4023                         print FILE "reply_header_access User-Agent deny all\n";
4024                 }
4025                 if (!($proxysettings{'FAKE_REFERER'} eq ''))
4026                 {
4027                         print FILE "request_header_access Referer deny all\n";
4028                         print FILE "reply_header_access Referer deny all\n";
4029                 }
4030
4031                 print FILE "\n";
4032
4033                 if ((!($proxysettings{'FAKE_USERAGENT'} eq '')) || (!($proxysettings{'FAKE_REFERER'} eq '')))
4034                 {
4035                         if (!($proxysettings{'FAKE_USERAGENT'} eq ''))
4036                         {
4037                                 print FILE "header_replace User-Agent $proxysettings{'FAKE_USERAGENT'}\n";
4038                         }
4039                         if (!($proxysettings{'FAKE_REFERER'} eq ''))
4040                         {
4041                                 print FILE "header_replace Referer $proxysettings{'FAKE_REFERER'}\n";
4042                         }
4043                         print FILE "\n";
4044                 }
4045         }
4046
4047         if ($proxysettings{'SUPPRESS_VERSION'} eq 'on') { print FILE "httpd_suppress_version_string on\n\n" }
4048
4049         if ((!-z $mimetypes) && ($proxysettings{'ENABLE_MIME_FILTER'} eq 'on')) {
4050                 if (!-z $acl_src_unrestricted_ip)  { print FILE "http_reply_access allow IPFire_unrestricted_ips\n"; }
4051                 if (!-z $acl_src_unrestricted_mac) { print FILE "http_reply_access allow IPFire_unrestricted_mac\n"; }
4052                 if ($proxysettings{'AUTH_METHOD'} eq 'ncsa')
4053                 {
4054                         if (!-z $extgrp) { print FILE "http_reply_access allow for_extended_users\n"; }
4055                 }
4056                 print FILE "http_reply_access deny  blocked_mimetypes\n";
4057                 print FILE "http_reply_access allow all\n\n";
4058         }
4059
4060         print FILE "visible_hostname";
4061         if ($proxysettings{'VISIBLE_HOSTNAME'} eq '')
4062         {
4063                 print FILE " $mainsettings{'HOSTNAME'}.$mainsettings{'DOMAINNAME'}\n\n";
4064         } else {
4065                 print FILE " $proxysettings{'VISIBLE_HOSTNAME'}\n\n";
4066         }
4067
4068         if (!($proxysettings{'ADMIN_MAIL_ADDRESS'} eq '')) { print FILE "cache_mgr $proxysettings{'ADMIN_MAIL_ADDRESS'}\n"; }
4069         if (!($proxysettings{'ADMIN_PASSWORD'} eq '')) { print FILE "cachemgr_passwd $proxysettings{'ADMIN_PASSWORD'} all\n"; }
4070         print FILE "\n";
4071
4072         print FILE "max_filedescriptors $proxysettings{'FILEDESCRIPTORS'}\n\n";
4073
4074         # Write the parent proxy info, if needed.
4075         if ($remotehost ne '')
4076         {
4077                 print FILE "cache_peer $remotehost parent $remoteport 3130 default no-query";
4078
4079                 # Enter authentication for the parent cache. Option format is
4080                 # login=user:password   ($proxy1='YES')
4081                 # login=PASS            ($proxy1='PASS')
4082                 # login=*:password      ($proxysettings{'FORWARD_USERNAME'} eq 'on')
4083                 if (($proxy1 eq 'YES') || ($proxy1 eq 'PASS'))
4084                 {
4085                         print FILE " login=$proxysettings{'UPSTREAM_USER'}";
4086                         if ($proxy1 eq 'YES') { print FILE ":$proxysettings{'UPSTREAM_PASSWORD'}"; }
4087                 }
4088                 elsif ($proxysettings{'FORWARD_USERNAME'} eq 'on') { print FILE " login=*:password"; }
4089
4090                 print FILE "\nalways_direct allow IPFire_ips\n";
4091                 print FILE "never_direct  allow all\n\n";
4092         }
4093         if (($proxysettings{'ENABLE_FILTER'} eq 'on') || ($proxysettings{'ENABLE_UPDXLRATOR'} eq 'on') || ($proxysettings{'ENABLE_CLAMAV'} eq 'on'))
4094         {
4095                 print FILE "url_rewrite_program /usr/sbin/redirect_wrapper\n";
4096                 print FILE "url_rewrite_children $proxysettings{'CHILDREN'}\n\n";
4097         }
4098
4099         # Include file with user defined settings.
4100         if (-e "/etc/squid/squid.conf.local") {
4101                 print FILE "include /etc/squid/squid.conf.local\n";
4102         }
4103         close FILE;
4104
4105         # Proxy settings for squidclamav - if installed.
4106         #
4107         # Check if squidclamav is enabled.
4108         if ($proxysettings{'ENABLE_CLAMAV'} eq 'on') {
4109
4110                 my $configfile='/etc/squidclamav.conf';
4111
4112                 my $data = &General::read_file_utf8($configfile);
4113                 $data =~ s/squid_port [0-9]+/squid_port $proxysettings{'PROXY_PORT'}/g;
4114                 &General::write_file_utf8($configfile, $data);
4115         }
4116 }
4117
4118 # -------------------------------------------------------------------
4119
4120 sub adduser
4121 {
4122         my ($str_user, $str_pass, $str_group) = @_;
4123         my @groupmembers=();
4124
4125         if ($str_pass eq 'lEaVeAlOnE')
4126         {
4127                 open(FILE, "$userdb");
4128                 @groupmembers = <FILE>;
4129                 close(FILE);
4130                 foreach $line (@groupmembers) { if ($line =~ /^$str_user:/i) { $str_pass = substr($line,index($line,":")); } }
4131                 &deluser($str_user);
4132                 open(FILE, ">>$userdb");
4133                 flock FILE,2;
4134                 print FILE "$str_user$str_pass";
4135                 close(FILE);
4136         } else {
4137                 &deluser($str_user);
4138
4139                 my $htpasswd = new Apache::Htpasswd("$userdb");
4140                 $htpasswd->htpasswd($str_user, $str_pass);
4141         }
4142
4143         if ($str_group eq 'standard') { open(FILE, ">>$stdgrp");
4144         } elsif ($str_group eq 'extended') { open(FILE, ">>$extgrp");
4145         } elsif ($str_group eq 'disabled') { open(FILE, ">>$disgrp"); }
4146         flock FILE, 2;
4147         print FILE "$str_user\n";
4148         close(FILE);
4149
4150         return;
4151 }
4152
4153 # -------------------------------------------------------------------
4154
4155 sub deluser
4156 {
4157         my ($str_user) = @_;
4158         my $groupfile='';
4159         my @groupmembers=();
4160         my @templist=();
4161
4162         foreach $groupfile ($stdgrp, $extgrp, $disgrp)
4163         {
4164                 undef @templist;
4165                 open(FILE, "$groupfile");
4166                 @groupmembers = <FILE>;
4167                 close(FILE);
4168                 foreach $line (@groupmembers) { if (!($line =~ /^$str_user$/i)) { push(@templist, $line); } }
4169                 open(FILE, ">$groupfile");
4170                 flock FILE, 2;
4171                 print FILE @templist;
4172                 close(FILE);
4173         }
4174
4175         undef @templist;
4176         open(FILE, "$userdb");
4177         @groupmembers = <FILE>;
4178         close(FILE);
4179         foreach $line (@groupmembers) { if (!($line =~ /^$str_user:/i)) { push(@templist, $line); } }
4180         open(FILE, ">$userdb");
4181         flock FILE, 2;
4182         print FILE @templist;
4183         close(FILE);
4184
4185         return;
4186 }
4187
4188 # -------------------------------------------------------------------
4189
4190 sub writecachemgr
4191 {
4192         open(FILE, ">${General::swroot}/proxy/cachemgr.conf");
4193         flock(FILE, 2);
4194         print FILE "$netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}\n";
4195         print FILE "localhost";
4196         close(FILE);
4197   return;
4198 }
4199
4200 # -------------------------------------------------------------------