diff options
| author | Daniil Baturin <daniil@vyos.io> | 2022-08-03 14:53:02 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-08-03 14:53:02 +0100 |
| commit | e199ae2dd5636f9177234bb05b77f4a0c9543428 (patch) | |
| tree | 6bb352a1be574b5501a002d345a047c9e42728df /data/templates/squid/squid.conf.j2 | |
| parent | 89890f5b07a3d59eefe5ce210a20715068c10e0e (diff) | |
| parent | 3c97f09dcd77636217215e1aa406f00bfc3e5631 (diff) | |
| download | vyos-1x-e199ae2dd5636f9177234bb05b77f4a0c9543428.tar.gz vyos-1x-e199ae2dd5636f9177234bb05b77f4a0c9543428.zip | |
Merge pull request #1369 from nicolas-fort/T4480
T4480: webproxy: Add safe-ports and ssl-safe-ports for acl squid config
Diffstat (limited to 'data/templates/squid/squid.conf.j2')
| -rw-r--r-- | data/templates/squid/squid.conf.j2 | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/data/templates/squid/squid.conf.j2 b/data/templates/squid/squid.conf.j2 index a0fdeb20e..5781c883f 100644 --- a/data/templates/squid/squid.conf.j2 +++ b/data/templates/squid/squid.conf.j2 @@ -2,6 +2,11 @@ acl net src all acl SSL_ports port 443 +{% if ssl_safe_ports is vyos_defined %} +{% for port in ssl_safe_ports %} +acl SSL_ports port {{ port }} +{% endfor %} +{% endif %} acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https @@ -13,6 +18,11 @@ acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http +{% if safe_ports is vyos_defined %} +{% for port in safe_ports %} +acl Safe_ports port {{ port }} +{% endfor %} +{% endif %} acl CONNECT method CONNECT {% if authentication is vyos_defined %} |