aboutsummaryrefslogtreecommitdiffstats
path: root/config/squid3/34/squid.inc
Commit message (Collapse)AuthorAgeFilesLines
* Comment fixdoktornotor2015-11-281-1/+1
|
* Re-enable SSL/MITM junk even without transparent proxydoktornotor2015-11-281-7/+4
|
* Add lots of input validations to sanitize configuration, plus other fixesdoktornotor2015-11-281-38/+121
| | | | | | | | | | - Allow reverse proxy to be used without running normal Squid proxy - Force users to select at least one proxy or reverse proxy interface when enabling Squid (unless reverse proxy is enabled) - Only allow to configure transparent proxy on interfaces where Squid is actually running (never had any effect otherwise anyway) - Only allow to configure HTTPS/SSL Interception on interfaces where transparent proxy is enabled (never had any effect otherwise anyway) - Do not add loopback interface twice when transparent proxy is enabled and loopback is selected in Proxy Interface(s) - Avoid adding empty localnet ACL - Fix HTTPS proxy default port - Some code style fixes and cleanups
* squid3 - add bunch of missing includesdoktornotor2015-11-231-2/+6
|
* Squid3 - do not add invalid subnets for 'Allow Users on Interface' to ACL ↵doktornotor2015-11-181-8/+14
| | | | (Bug #4331, Bug #4526)
* Remove broken dynamic caching patternsdoktornotor2015-11-081-56/+8
| | | Avast/Symantec have been completely no-op and useless for years since AV updates for those are streamed to clients hundreds time every day. Suspect same story for Avira. The WU refresh_patterns was broken and don't work reliably anyway. People can define their own patterns if needed without maintenance burden for package maintainers.
* Merge pull request #1127 from doktornotor/patch-11Renato Botelho2015-11-031-51/+70
|\
| * Improve XMLRPC syncdoktornotor2015-11-011-51/+70
| | | | | | | | | | | | | | | | - Fix CARP/HA sync option - Add enable/disable checkbox per replication target - Add protocol selection - Add timeout setting - Fix literal IPv6 handling for sync targets - Do settings validation and only try to sync when configuration is valid
* | Nuke update_output_window cruftdoktornotor2015-10-301-10/+0
|/ | | Doesn't work plus this is gone in 2.3 anyway.
* Accept "all" in 'Allowed Subnets' (Bug #4525)doktornotor2015-10-191-2/+2
|
* Don't downgrade client SSL/TLS connections with SSL MITM junk (Bug #4453)doktornotor2015-10-151-1/+10
|
* Unset reverse proxy mappings if 'Keep Settings/Data' is disableddoktornotor2015-10-141-0/+3
| | | Reported by stanthewizard @ https://forum.pfsense.org/index.php?topic=100783.0
* Unlink throttle_exts.acl if 'Throttle Only Specific Extensions' is disableddoktornotor2015-10-141-0/+1
|
* Fix linebreaks heredoktornotor2015-10-141-1/+1
| | | Reported by dsefcik @ https://forum.pfsense.org/index.php?topic=100825.0
* Put validation to 'Throttle Only Specific Extensions' to avoid an empty ACLdoktornotor2015-10-141-0/+8
|
* Some package install/deinstall tweaksdoktornotor2015-10-141-2/+5
| | | | - Nuke one more state broken cronjob people happen to have on their systems from previous versions - Kill the right processes on uninstall
* Fix "Finish transfer if less than x KB remaining" validationdoktornotor2015-10-141-1/+1
|
* Move reverse proxy config migration to squid_reverse.incdoktornotor2015-10-121-49/+2
|
* Move antivirus config migration to squid_antivirus.incdoktornotor2015-10-111-6/+2
|
* Re-add swapstate_check.php cronjob, add manually clear disk cache featuredoktornotor2015-10-111-0/+19
| | | | | - The swapstate_check.php cronjob, is here purely to prevent Squid from filling disk completely on misconfigured boxes; the script will only clear the disk cache on the following conditions:either if the swap.state file is taking up more than 75% of disk space, or the drive is 90% full and swap.state is larger than 1GB. - Added a button to manually clear disk cache from the GUI
* Remove 'Clear Cache on Log Rotate' misfeature from local cache settingsdoktornotor2015-10-101-21/+7
| | | This has only been a source of complaints, breakage and confusion, plus was breaking Save on the General tab for people.
* Clean up and prefix log messages.doktornotor2015-10-061-32/+32
|
* unset broken antivirus settings on upgradedoktornotor2015-10-061-0/+8
|
* squid.inc - more cleanups and small bugfixesdoktornotor2015-10-061-186/+165
| | | | | - Completely split antivirus install/uninstall to squid_antivirus.inc - Move the config migration cruft to separate squid_upgrade_config() function - Some cachedr creation fixes
* Reoder functions into logical sections and add descriptions to themdoktornotor2015-10-031-207/+266
|
* Move antivirus integration features to a separate filedoktornotor2015-10-031-389/+2
|
* Move squid_validate_reverse() to squid_reverse.inc where it belongsdoktornotor2015-10-031-69/+0
|
* Move javascript helpers to a separate filedoktornotor2015-10-031-196/+4
| | | squid.inc is already huge enough as it is, without bloating it even more.
* Do not loop when trying to chown inaccessible directory and log some debug infodoktornotor2015-10-031-10/+14
| | | Some whacky issue with screwed filesystem/permissions reported at https://forum.pfsense.org/index.php?topic=100167.msg559007#msg559007 - cannot get any meaningful info from the guy there.
* Get rid of remaining PBI rcfiles and handle clamav with write_rcfiledoktornotor2015-10-021-37/+54
|
* Not needed any more and the symlinking misfeature was fixeddoktornotor2015-10-021-4/+0
|
* Stop symlinking the damned PBI rcfiles over and over againdoktornotor2015-10-021-7/+0
|
* write_rcfile() does not handle custom restart commanddoktornotor2015-10-021-7/+0
|
* Do not use the c-icap rcfile to stop c-icap when AV is being disabled - the ↵doktornotor2015-10-011-1/+1
| | | | rcfile may not exist
* Remove useless buggy /etc/rc.conf.local crapdoktornotor2015-10-011-26/+1
| | | Adding to the file was broken -- when run multiple times, it added a separate ="YES" line to the file. Moreover, the _enable variable is being patched to default to YES in individual rc scripts, so this junk is just not needed. Leaving the squid_deinstall_command() stuff in here for now, hopefully most users will get the "settings" removed and never added back.
* Implement a generic setting to enable/disable Squid services, bugfixes and ↵doktornotor2015-10-011-87/+158
| | | | | | | cleanups - add squid_enabled() function to check whether Squid is enabled; if not, disable all services (proxy, clamav, c-icap, monitor script) and cronjobs - handle antivirus services in a separate function - make it possible to disable Google Safe Browsing via the antivirus GUI options
* Fix the numdirs comparison here (int vs. string), make this more readable as ↵doktornotor2015-10-011-1/+1
| | | | | well Cache is getting always recreated because of strict comparison.
* Implement keep data/settings featuresdoktornotor2015-10-011-25/+74
|
* Code style and whitespace fixesdoktornotor2015-10-011-20/+8
|
* Remove squid_resync_redirector()doktornotor2015-10-011-15/+0
| | | Deprecated dead cruft. See http://www.freshports.org/www/squirm
* Mute rename() to stop spitting out useless junk in console...doktornotor2015-10-011-2/+2
|
* Antivirus GUI behaviour sanitization - first partdoktornotor2015-10-011-0/+42
| | | Use JS to toggle access to different parts of the GUI, depending on whether the users want to configure things by editing config files or via the GUI options.
* Fix C-ICAPdoktornotor2015-10-011-22/+50
|
* Add Google Safe Browsing featuredoktornotor2015-09-301-1/+12
|
* Fix squidclamav.conf.sample handling to match the rest of the config filesdoktornotor2015-09-301-9/+7
|
* Do not do useless checks for freshclam cronjobdoktornotor2015-09-301-5/+1
|
* Code style and comment tweaksdoktornotor2015-09-301-2/+3
|
* When antivirus/C-ICAP is disabled, actually stop and disable related servicesdoktornotor2015-09-301-0/+27
|
* Add freshclam mirror settings, manual AV defs update and cron updatesdoktornotor2015-09-301-9/+94
|
* Patch squidclamav.conf so that is uses WebGUI URL by defaultdoktornotor2015-09-301-2/+2
| | | Stop nagging users with confusing nonsense and make it work out of the box.