Hinzugefügt:

[people/pmueller/ipfire-2.x.git] / config / cfgroot / proxy-acl

diff --git a/config/cfgroot/proxy-acl b/config/cfgroot/proxy-acl
index 038f64d8f7b21b42a92f17b35fad19113101c026..b7ebc6936273fe176470b49a00e0d551ee440aed 100644 (file)
--- a/config/cfgroot/proxy-acl
+++ b/config/cfgroot/proxy-acl
@@ -1,49 +1,49 @@
-# Do not modify '/var/ipcop/proxy/squid.conf' directly since any changes\r
-# you make will be overwritten whenever you resave proxy settings using the\r
-# web interface! Instead, modify the file '/var/ipcop/proxy/acl' and then\r
-# restart squid using the web interface. Changes made to the 'acl' file\r
-# will propagate to the 'squid.conf' file at that time.\r
-# [Scott Tregear, 22 Feb 2005]\r
-\r
-# Uncomment the following line to enable logging of User-Agent header:\r
-#useragent_log      /var/log/squid/user_agent.log\r
-\r
-# Uncomment the following line to enable logging of Referer header:\r
-#referer_log        /var/log/squid/referer.log\r
-\r
-acl all src 0.0.0.0/0.0.0.0\r
-acl localhost src 127.0.0.1/255.255.255.255\r
-acl SSL_ports port 443 563 \r
-acl Safe_ports port 80 # http \r
-acl Safe_ports port 21 # ftp \r
-acl Safe_ports port 443 563 # https, snews \r
-acl Safe_ports port 70 # gopher \r
-acl Safe_ports port 210 # wais \r
-acl Safe_ports port 1025-65535 # unregistered ports \r
-acl Safe_ports port 280 # http-mgmt \r
-acl Safe_ports port 488 # gss-http \r
-acl Safe_ports port 591 # filemaker \r
-acl Safe_ports port 777 # multiling http \r
-acl Safe_ports port __PROXY_PORT__ # Squid port (for icons) \r
-\r
-acl IPCop_http  port 81\r
-acl IPCop_https port 444\r
-acl IPCop_ips  dst __GREEN_IP__ __BLUE_IP__\r
-acl IPCop_networks src __GREEN_NET__ __BLUE_NET__\r
-acl CONNECT method CONNECT \r
-\r
-##Access to squid:\r
-#local machine, no restriction\r
-http_access allow         localhost\r
-\r
-#GUI admin if local machine connects\r
-http_access allow         IPCop_ips IPCop_networks IPCop_http\r
-http_access allow CONNECT IPCop_ips IPCop_networks IPCop_https\r
-\r
-#Deny not web services\r
-http_access deny          !Safe_ports\r
-http_access deny  CONNECT !SSL_ports\r
-\r
-#Finally allow IPCop_networks clients\r
-http_access allow         IPCop_networks\r
-http_access deny          all\r
+# Do not modify '/var/ipfire/proxy/squid.conf' directly since any changes
+# you make will be overwritten whenever you resave proxy settings using the
+# web interface! Instead, modify the file '/var/ipfire/proxy/acl' and then
+# restart squid using the web interface. Changes made to the 'acl' file
+# will propagate to the 'squid.conf' file at that time.
+# [Scott Tregear, 22 Feb 2005]
+
+# Uncomment the following line to enable logging of User-Agent header:
+#useragent_log      /var/log/squid/user_agent.log
+
+# Uncomment the following line to enable logging of Referer header:
+#referer_log        /var/log/squid/referer.log
+
+acl all src 0.0.0.0/0.0.0.0
+acl localhost src 127.0.0.1/255.255.255.255
+acl SSL_ports port 443 563 
+acl Safe_ports port 80 # http 
+acl Safe_ports port 21 # ftp 
+acl Safe_ports port 443 563 # https, snews 
+acl Safe_ports port 70 # gopher 
+acl Safe_ports port 210 # wais 
+acl Safe_ports port 1025-65535 # unregistered ports 
+acl Safe_ports port 280 # http-mgmt 
+acl Safe_ports port 488 # gss-http 
+acl Safe_ports port 591 # filemaker 
+acl Safe_ports port 777 # multiling http 
+acl Safe_ports port __PROXY_PORT__ # Squid port (for icons) 
+
+acl IPCop_http  port 81
+acl IPCop_https port 444
+acl IPCop_ips  dst __GREEN_IP__ __BLUE_IP__
+acl IPCop_networks src __GREEN_NET__ __BLUE_NET__
+acl CONNECT method CONNECT 
+
+##Access to squid:
+#local machine, no restriction
+http_access allow         localhost
+
+#GUI admin if local machine connects
+http_access allow         IPCop_ips IPCop_networks IPCop_http
+http_access allow CONNECT IPCop_ips IPCop_networks IPCop_https
+
+#Deny not web services
+http_access deny          !Safe_ports
+http_access deny  CONNECT !SSL_ports
+
+#Finally allow IPCop_networks clients
+http_access allow         IPCop_networks
+http_access deny          all