From 396c72a9a8d78301e34503f4a28e027e06045469 Mon Sep 17 00:00:00 2001 From: Martin Fuchs Date: Mon, 29 Oct 2007 13:51:48 +0000 Subject: squid: use ip-group for RFC1918 --- packages/squid/squid.inc | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'packages/squid') diff --git a/packages/squid/squid.inc b/packages/squid/squid.inc index 6835be33..22af123b 100644 --- a/packages/squid/squid.inc +++ b/packages/squid/squid.inc @@ -1046,9 +1046,7 @@ function squid_generate_rules($type) { $rules .= "\n# Setup Squid proxy redirect\n"; if ($squid_conf['private_subnet_proxy'] == 'on') { foreach ($ifaces as $iface){ - $rules .= "no rdr on $iface proto tcp from any to 10.0.0.0/8 port 80\n"; - $rules .= "no rdr on $iface proto tcp from any to 172.16.0.0/12 port 80\n"; - $rules .= "no rdr on $iface proto tcp from any to 192.168.0.0/16 port 80\n"; + $rules .= "no rdr on $iface proto tcp from any to { 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 } port 80\n"; } } foreach ($ifaces as $iface){ -- cgit v1.2.3