summaryrefslogtreecommitdiff
path: root/data/templates
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2022-08-03 14:53:02 +0100
committerGitHub <noreply@github.com>2022-08-03 14:53:02 +0100
commite199ae2dd5636f9177234bb05b77f4a0c9543428 (patch)
tree6bb352a1be574b5501a002d345a047c9e42728df /data/templates
parent89890f5b07a3d59eefe5ce210a20715068c10e0e (diff)
parent3c97f09dcd77636217215e1aa406f00bfc3e5631 (diff)
downloadvyos-1x-e199ae2dd5636f9177234bb05b77f4a0c9543428.tar.gz
vyos-1x-e199ae2dd5636f9177234bb05b77f4a0c9543428.zip
Merge pull request #1369 from nicolas-fort/T4480
T4480: webproxy: Add safe-ports and ssl-safe-ports for acl squid config
Diffstat (limited to 'data/templates')
-rw-r--r--data/templates/squid/squid.conf.j210
1 files changed, 10 insertions, 0 deletions
diff --git a/data/templates/squid/squid.conf.j2 b/data/templates/squid/squid.conf.j2
index a0fdeb20e..5781c883f 100644
--- a/data/templates/squid/squid.conf.j2
+++ b/data/templates/squid/squid.conf.j2
@@ -2,6 +2,11 @@
acl net src all
acl SSL_ports port 443
+{% if ssl_safe_ports is vyos_defined %}
+{% for port in ssl_safe_ports %}
+acl SSL_ports port {{ port }}
+{% endfor %}
+{% endif %}
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
@@ -13,6 +18,11 @@ acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
+{% if safe_ports is vyos_defined %}
+{% for port in safe_ports %}
+acl Safe_ports port {{ port }}
+{% endfor %}
+{% endif %}
acl CONNECT method CONNECT
{% if authentication is vyos_defined %}