<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE packagegui SYSTEM "../schema/packages.dtd">
<?xml-stylesheet type="text/xsl" href="../xsl/package.xsl"?>
<packagegui>
	<description><![CDATA[Describe your package here]]></description>
	<requirements>Describe your package requirements here</requirements>
	<faq>Currently there are no FAQ items provided.</faq>
	<name>squidguardacl</name>
	<version>none</version>
	<title>Proxy filter SquidGuard: Groups Access Control List (ACL)</title>
	<include_file>/usr/local/pkg/squidguard.inc</include_file>
	<delete_string>A proxy server user has been deleted.</delete_string>
	<addedit_string>A proxy server user has been created/modified.</addedit_string>
	<tabs>
		<tab>
			<text>General settings</text>
			<url>/pkg_edit.php?xml=squidguard.xml&amp;id=0</url>
		</tab>
		<tab>
			<text>Common ACL</text>
			<url>/pkg_edit.php?xml=squidguard_default.xml&amp;id=0</url>
		</tab>
		<tab>
			<text>Groups ACL</text>
			<url>/pkg.php?xml=squidguard_acl.xml</url>
			<active/>
		</tab>
		<tab>
			<text>Target categories</text>
			<url>/pkg.php?xml=squidguard_dest.xml</url>
		</tab>
		<tab>
			<text>Times</text>
			<url>/pkg.php?xml=squidguard_time.xml</url>
		</tab>
		<tab>
			<text>Rewrites</text>
			<url>/pkg.php?xml=squidguard_rewr.xml</url>
		</tab>
		<tab>
			<text>Blacklist</text>
			<url>/squidGuard/squidguard_blacklist.php</url>
		</tab>
		<tab>
			<text>Log</text>
			<url>/squidGuard/squidguard_log.php</url>
		</tab>
		<tab>
			<text>XMLRPC Sync</text>
			<url>/pkg_edit.php?xml=squidguard_sync.xml</url>
		</tab>
	</tabs>
	<adddeleteeditpagefields>
				<columnitem>
						<fielddescr>Disabled</fielddescr>
						<fieldname>disabled</fieldname>
				</columnitem>
				<columnitem>
						<fielddescr>Name</fielddescr>
						<fieldname>name</fieldname>
				</columnitem>
				<columnitem>
						<fielddescr>Time</fielddescr>
						<fieldname>time</fieldname>
				</columnitem>
				<columnitem>
						<fielddescr>Description</fielddescr>
						<fieldname>description</fieldname>
				</columnitem>
	</adddeleteeditpagefields>
	<fields>
				<field>
						<fielddescr>Disabled</fielddescr>
						<fieldname>disabled</fieldname>
						<description><![CDATA[Check this to disable this ACL rule.]]></description>
						<type>checkbox</type>
				</field>
				<field>
						<fielddescr>Name</fielddescr>
						<fieldname>name</fieldname>
						<description><![CDATA[
								Enter a unique name of this rule here.<br>
								The name must consist between 2 and 15 symbols [a-Z_0-9]. The first one must be a letter.<br>
						]]></description>
						<type>input</type>
						<required/>
						<size>100</size>
				</field>
				<field>
						<fielddescr>Order</fielddescr>
						<fieldname>order</fieldname>
						<description><![CDATA[
								Select the new position for this ACL item. ACLs are evaluated on a first-match source basis.<br>
								<b>Note:</b><br>
								Search for a suitable ACL by field 'source' will occur before the first match. If you want to define an exception for some sources (IP) from the IP range, put them on first of the list.<br>
								<b>Example:</b><br>
								ACL with single (or short range) source ip 10.0.0.15 must be placed before ACL with more large ip range 10.0.0.0/24.<br>
						]]></description>
						<type>select</type>
				</field>
				<field>
						<fielddescr>Client (source)</fielddescr>
						<fieldname>source</fieldname>
						<description><![CDATA[
								Enter client's IP address or domain or "username" here. To separate them use space.<br>
								<b>Example:</b><br>
								<b>IP:</b> 192.168.0.1 - <b>Subnet:</b> 192.168.0.0/24 or 192.168.1.0/255.255.255.0 - <b>IP-Range:</b> 192.168.1.1-192.168.1.10<br>
								<b>Domain:</b> foo.bar matches foo.bar or *.foo.bar<br>
								<b>Username:</b> 'user1' <br>
                                                                <b>Ldap search (Ldap filter must be enabled in General Settings):</b> <br>
                                                                ldapusersearch "ldap://192.168.0.100/DC=domain,DC=com?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=it%2cCN=Users%2cDC=domain%2cDC=com))"<br>
                                                                <i>Attention: these line don't have break line, all on one line and use double quotes ("") in ldap expression</i>
						]]></description>
						<type>textarea</type>
						<cols>65</cols>
						<rows>3</rows>
						<required/>
				</field>
				<field>
						<fielddescr>Time</fielddescr>
						<fieldname>time</fieldname>
						<description><![CDATA[Select the time in which 'Target Rules' will operate or leave 'none' for rules without time restriction. If this option is set then in off-time the second ruleset will operate.]]></description>
						<type>select</type>
				</field>
				<field>
						<fielddescr>Target Rules</fielddescr>
						<fieldname>dest</fieldname>
						<description><![CDATA[]]></description>
						<type>input</type>
						<size>100</size>
				</field>
				<field>
						<fielddescr>Do not allow IP-Addresses in URL</fielddescr>
						<fieldname>notallowingip</fieldname>
						<description><![CDATA[To make sure that people do not bypass the URL filter by simply using the IP-Addresses instead of the FQDN you can check this option. This option has no effect on the whitelist.]]></description>
						<type>checkbox</type>
				</field>
				<field>
						<fielddescr>Redirect mode</fielddescr>
						<fieldname>redirect_mode</fieldname>
						<description>
								Select redirect mode here.
								&lt;br&gt; Note: if you use 'transparent proxy', then 'int' redirect mode will not accessible.
<!--								&lt;br&gt;&lt;b&gt; int size limit  :&lt;/b&gt;    if content size 0 or > 'size limit', then client moved to 'blank image' page; -->
								&lt;br&gt; Options:
								&lt;A title="To 'url' will added special client information;" &gt;
								&lt;span style="background-color: #dddddd;" &gt;ext url err page&lt;/span&gt;&lt;/A&gt; ,
								&lt;A title="Client view 'url' content without any notification about;" &gt;
								&lt;span style="background-color: #dddddd;" &gt; ext url redirect&lt;/span&gt;&lt;/A&gt; ,
								&lt;A title="Client will moved to specified url with displaying url in addres bar;" &gt;
								&lt;span style="background-color: #dddddd;" &gt; ext url as 'move'&lt;/span&gt;&lt;/A&gt; ,
								&lt;A title="Client will moved to specified url with showing progress(only!) in status bar;" &gt;
								&lt;span style="background-color: #dddddd;" &gt; ext url as 'found'.&lt;/span&gt;&lt;/A&gt;
								&lt;/u&gt;
						</description>
						<type>select</type>
						<value>rmod_none</value>
						<options>
								<option><name>none</name>										<value>rmod_none</value></option>
								<option><name>int error page (enter error message)</name>		<value>rmod_int</value></option>
								<option><name>int blank page </name>							<value>rmod_int_bpg</value></option>
<!--								<option><name>int blank image</name>							<value>rmod_int_bim</value></option> -->
<!--								<option><name>int size limit (enter size in bytes)</name>		<value>rmod_int_szl</value></option> -->
								<option><name>ext url err page (enter URL)</name>				<value>rmod_ext_err</value></option>
								<option><name>ext url redirect (enter URL)</name>				<value>rmod_ext_rdr</value></option>
								<option><name>ext url move  (enter URL)</name>					<value>rmod_ext_mov</value></option>
								<option><name>ext url found (enter URL)</name>					<value>rmod_ext_fnd</value></option>
						</options>
				</field>
				<field>
						<fielddescr>Redirect</fielddescr>
						<fieldname>redirect</fieldname>
						<description><![CDATA[Enter the external redirection URL, error message or size (bytes) here.]]></description>
						<type>textarea</type>
						<cols>65</cols>
						<rows>2</rows>
				</field>
<!-- not need now
				<field>
						<fielddescr>Redirect for off-time</fielddescr>
						<fieldname>overredirect</fieldname>
						<description><![CDATA[
						    Enter external redirection URL, error message or size (bytes) here.
						]]></description>
						<type>textarea</type>
						<cols>65</cols>
						<rows>2</rows>
				</field>
-->
				<field>
						<fielddescr>Use SafeSearch engine</fielddescr>
						<fieldname>safesearch</fieldname>
						<description><![CDATA[
								To protect your children from adult content you can use the protected mode of search engines.<br>
								At the moment it is supported by Google, Yandex, Yahoo, MSN, Live Search and Bing. Make sure that the search engines can be accessed. It is recommended to prohibit access to others.<br>
								<b>Note:</b> This option overrides 'Rewrite' setting.
						]]></description>
						<type>checkbox</type>
				</field>
				<field>
						<fielddescr>Rewrite</fielddescr>
						<fieldname>rewrite</fieldname>
						<description><![CDATA[Enter the rewrite condition name for this rule or leave it blank.]]></description>
						<type>select</type>
				</field>
				<field>
						<fielddescr>Rewrite for off-time</fielddescr>
						<fieldname>overrewrite</fieldname>
						<description><![CDATA[Enter the rewrite condition name for this rule or leave it blank.]]></description>
						<type>select</type>
				</field>
				<field>
						<fielddescr>Description</fielddescr>
						<fieldname>description</fieldname>
						<description><![CDATA[You may enter any description here for your reference.]]></description>
						<type>input</type>
						<size>100</size>
				</field>
				<field>
						<fielddescr>Log</fielddescr>
						<fieldname>enablelog</fieldname>
						<description><![CDATA[Check this option to enable logging for this ACL.]]></description>
						<type>checkbox</type>
				</field>
	</fields>
	<custom_php_validation_command>
				squidguard_validate_acl($_POST, $input_errors);
	</custom_php_validation_command>
	<custom_php_command_before_form>
				squidguard_before_form_acl($pkg);
	</custom_php_command_before_form>
	<custom_php_after_form_command>
				squidGuard_print_javascript();
	</custom_php_after_form_command>
	<custom_php_resync_config_command>
				squidguard_resync_acl();
	</custom_php_resync_config_command>
	<custom_delete_php_command>
				squidguard_resync_acl();
	</custom_delete_php_command>
	<custom_add_php_command>
	</custom_add_php_command>
	<custom_add_php_command_late>
	</custom_add_php_command_late>
</packagegui>