diff options
author | Renato Botelho <garga@FreeBSD.org> | 2014-12-31 12:55:48 -0200 |
---|---|---|
committer | Renato Botelho <garga@FreeBSD.org> | 2014-12-31 12:55:48 -0200 |
commit | 276aced37cdce18a94b9aa182b539d3290baf745 (patch) | |
tree | d57b84b5746cbb26dc6717d8e08fcef720031d03 /config/squid3/34/squid.inc | |
parent | 081a958949c4efcfeb8221b2184b2a337a509ab8 (diff) | |
parent | 1aab45a41e4f0bc3b493bac0cbd25a32bff129ac (diff) | |
download | pfsense-packages-276aced37cdce18a94b9aa182b539d3290baf745.tar.gz pfsense-packages-276aced37cdce18a94b9aa182b539d3290baf745.tar.bz2 pfsense-packages-276aced37cdce18a94b9aa182b539d3290baf745.zip |
Merge pull request #763 from marcelloc/squid34_20141229
Diffstat (limited to 'config/squid3/34/squid.inc')
-rwxr-xr-x | config/squid3/34/squid.inc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/config/squid3/34/squid.inc b/config/squid3/34/squid.inc index a2917515..0e5a173c 100755 --- a/config/squid3/34/squid.inc +++ b/config/squid3/34/squid.inc @@ -1698,6 +1698,11 @@ function squid_resync_auth() { $conf .="http_access deny sglog\n"; } if ($auth_method == 'none' ) { + // SSL interception acl options part 2 without authentication + if ($settingsconfig['ssl_proxy'] == "on"){ + $conf .= "always_direct allow all\n"; + $conf .= "ssl_bump server-first all\n"; + } $conf .="# Setup allowed acls\n"; $allowed = array('allowed_subnets'); if ($settingsconfig['allow_interface'] == 'on') { |