aboutsummaryrefslogtreecommitdiffstats
path: root/config
diff options
context:
space:
mode:
authorRenato Botelho <garga@FreeBSD.org>2015-04-07 18:27:49 -0300
committerRenato Botelho <garga@FreeBSD.org>2015-04-07 18:27:49 -0300
commit4740a98520f14dd9dd07b1324be753bc205d5023 (patch)
tree2ae6f5059280f026602dc2b44ae5198d49d76a8d /config
parent0f6e32810dabf2c257e5a7658c7163e0f0dacad5 (diff)
parent2a6bf8ff59a980e80004aa4c21ba110a92f58873 (diff)
downloadpfsense-packages-4740a98520f14dd9dd07b1324be753bc205d5023.tar.gz
pfsense-packages-4740a98520f14dd9dd07b1324be753bc205d5023.tar.bz2
pfsense-packages-4740a98520f14dd9dd07b1324be753bc205d5023.zip
Merge pull request #844 from dneuhaeuser/patch-1
Diffstat (limited to 'config')
-rwxr-xr-xconfig/squid3/34/squid.inc14
1 files changed, 7 insertions, 7 deletions
diff --git a/config/squid3/34/squid.inc b/config/squid3/34/squid.inc
index 69a50125..cce9bddd 100755
--- a/config/squid3/34/squid.inc
+++ b/config/squid3/34/squid.inc
@@ -639,19 +639,19 @@ function squid_validate_reverse($post, &$input_errors) {
$input_errors[] = 'The field \'external FQDN\' must contain a valid domain name';
$port = trim($post['reverse_http_port']);
- preg_match("/(\d+)/",`sysctl net.inet.ip.portrange.first`,$portrange);
+ preg_match("/(\d+)/",`sysctl net.inet.ip.portrange.reservedhigh`,$portrange);
if (!empty($port) && !is_port($port))
$input_errors[] = 'The field \'reverse HTTP port\' must contain a valid port number';
- if (!empty($port) && is_port($port) && $port < $portrange[1]){
- $input_errors[] = "The field 'reverse HTTP port' must contain a port number higher than net.inet.ip.portrange.first sysctl value({$portrange[1]}).";
- $input_errors[] = "To listen on low ports, change portrange.first sysctl value to 0 on system tunable options and restart squid daemon.";
+ if (!empty($port) && is_port($port) && $port <= $portrange[1]){
+ $input_errors[] = "The field 'reverse HTTP port' must contain a port number higher than net.inet.ip.portrange.reservedhigh sysctl value({$portrange[1]}).";
+ $input_errors[] = "To listen on low ports, change portrange.reservedhigh sysctl value to 0 on system tunable options and restart squid daemon.";
}
$port = trim($post['reverse_https_port']);
if (!empty($port) && !is_port($port))
$input_errors[] = 'The field \'reverse HTTPS port\' must contain a valid port number';
- if (!empty($port) && is_port($port) && $port < $portrange[1]){
- $input_errors[] = "The field 'reverse HTTPS port' must contain a port number higher than net.inet.ip.portrange.first sysctl value({$portrange[1]}).";
- $input_errors[] = "To listen on low ports, change portrange.first sysctl value to 0 on system tunable options and restart squid daemon.";
+ if (!empty($port) && is_port($port) && $port <= $portrange[1]){
+ $input_errors[] = "The field 'reverse HTTPS port' must contain a port number higher than net.inet.ip.portrange.reservedhigh sysctl value({$portrange[1]}).";
+ $input_errors[] = "To listen on low ports, change portrange.reservedhigh sysctl value to 0 on system tunable options and restart squid daemon.";
}
if ($post['reverse_ssl_cert'] == 'none')
$input_errors[] = 'A valid certificate for the external interface must be selected';