From 27b72e99f0bda12dba159152b51d7bb119a72be1 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@sullrich-MacBookPro.local>
Date: Tue, 14 Apr 2009 13:35:16 -0400
Subject: Add rules for PPOE transparent

---
 config/squid/squid.inc | 53 +++++++++++++++++++++++++++-----------------------
 1 file changed, 29 insertions(+), 24 deletions(-)

(limited to 'config/squid')

diff --git a/config/squid/squid.inc b/config/squid/squid.inc
index ed610205..9a1d5840 100644
--- a/config/squid/squid.inc
+++ b/config/squid/squid.inc
@@ -1221,30 +1221,32 @@ function squid_generate_rules($type) {
 	switch($type) {
 	case 'nat':
 		$rules .= "\n# Setup Squid proxy redirect\n";
-    if ($squid_conf['private_subnet_proxy_off'] == 'on') {
-      foreach ($ifaces as $iface){
-       $rules .= "no rdr on $iface proto tcp from any to { 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 } port 80\n";         
-      }
-     }
-    
-    if (!empty($squid_conf['defined_ip_proxy_off'])) {
-      $defined_ip_proxy_off = explode(";", $squid_conf['defined_ip_proxy_off']);
-      $exempt_ip = "";
-        foreach ($defined_ip_proxy_off as $ip_proxy_off) {
-          if(!empty($ip_proxy_off)) {
-            $ip_proxy_off = trim($ip_proxy_off);
-            $exempt_ip .= ", $ip_proxy_off";
-          }
-        }
-        $exempt_ip = substr($exempt_ip,2);
-        foreach ($ifaces as $iface){
-          $rules .= "no rdr on $iface proto tcp from { $exempt_ip } to any port 80\n";         
-        }          
-    }
-     
-		foreach ($ifaces as $iface){
+		if ($squid_conf['private_subnet_proxy_off'] == 'on') {
+			foreach ($ifaces as $iface){
+				$rules .= "no rdr on $iface proto tcp from any to { 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 } port 80\n";         
+			}
+		}
+		if (!empty($squid_conf['defined_ip_proxy_off'])) {
+			$defined_ip_proxy_off = explode(";", $squid_conf['defined_ip_proxy_off']);
+			$exempt_ip = "";
+			foreach ($defined_ip_proxy_off as $ip_proxy_off) {
+				if(!empty($ip_proxy_off)) {
+					$ip_proxy_off = trim($ip_proxy_off);
+					$exempt_ip .= ", $ip_proxy_off";
+				}
+			}
+			$exempt_ip = substr($exempt_ip,2);
+			foreach ($ifaces as $iface) {
+				$rules .= "no rdr on $iface proto tcp from { $exempt_ip } to any port 80\n";         
+			}          
+		}     
+		foreach ($ifaces as $iface) {
 			$rules .= "rdr on $iface proto tcp from any to !($iface) port 80 -> 127.0.0.1 port 80\n";
-			};
+		}
+		/* Handle PPPOE case */
+		if($config['pppoe']['mode'] == "server") {
+			$rules .= "rdr on \$pppoe proto tcp from any to !(\$pppoe) port 80 -> 127.0.0.1 port 80\n";
+		}
 		$rules .= "\n";
 		break;
 	case 'filter':
@@ -1253,7 +1255,10 @@ function squid_generate_rules($type) {
 			$rules .= "pass in quick on $iface proto tcp from any to !($iface) port 80 flags S/SA keep state\n";
 			$rules .= "pass in quick on $iface proto tcp from any to !($iface) port $port flags S/SA keep state\n";
 			$rules .= "\n";
-			};
+		};
+		if($config['pppoe']['mode'] == "server") {
+			$rules .= "pass in quick on \$pppoe proto tcp from any to !(\$pppoe) port $port flags S/SA keep state\n";			
+		}			
 		break;
 	default:
 		break;
-- 
cgit v1.2.3