summaryrefslogtreecommitdiff
path: root/data/templates/squid/squid.conf.j2
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-12-08 11:24:08 +0000
committerGitHub <noreply@github.com>2022-12-08 11:24:08 +0000
commitd37387dd4510502144f33192923e7060f311d2a2 (patch)
tree9cda1db80da6843ee187134308d48a628bea7b22 /data/templates/squid/squid.conf.j2
parent1669f59f2a9708a11e932a3a004e2f08a8cf257f (diff)
parentd846f000424522bc2e26d554ada61d0ae7e10ecc (diff)
downloadvyos-1x-d37387dd4510502144f33192923e7060f311d2a2.tar.gz
vyos-1x-d37387dd4510502144f33192923e7060f311d2a2.zip
Merge pull request #1695 from aapostoliuk/T4862-sagitta
T4862: Added the generation config for webproxy domain-block
Diffstat (limited to 'data/templates/squid/squid.conf.j2')
-rw-r--r--data/templates/squid/squid.conf.j27
1 files changed, 6 insertions, 1 deletions
diff --git a/data/templates/squid/squid.conf.j2 b/data/templates/squid/squid.conf.j2
index 5781c883f..b953c8b18 100644
--- a/data/templates/squid/squid.conf.j2
+++ b/data/templates/squid/squid.conf.j2
@@ -24,7 +24,12 @@ acl Safe_ports port {{ port }}
{% endfor %}
{% endif %}
acl CONNECT method CONNECT
-
+{% if domain_block is vyos_defined %}
+{% for domain in domain_block %}
+acl BLOCKDOMAIN dstdomain {{ domain }}
+{% endfor %}
+http_access deny BLOCKDOMAIN
+{% endif %}
{% if authentication is vyos_defined %}
{% if authentication.children is vyos_defined %}
auth_param basic children {{ authentication.children }}