This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, next has been updated via 8dc177053fc97d89afb99bb2ab4849656d550833 (commit) via 81c43f61b09f70f1402b5db6d7c468eae2bbe956 (commit) via 0f6b606785f640bfa5dcbc78616ebb4d194f578e (commit) from 6e77821da801d9714230c649c3748b19b697817d (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 8dc177053fc97d89afb99bb2ab4849656d550833 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Oct 14 14:07:35 2013 +0200
squid: Increase default number of file descriptors.
commit 81c43f61b09f70f1402b5db6d7c468eae2bbe956 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Oct 14 14:06:59 2013 +0200
core73: Add transparent proxy port configuration.
commit 0f6b606785f640bfa5dcbc78616ebb4d194f578e Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Oct 14 13:54:24 2013 +0200
squid: Implement intercept mode.
-----------------------------------------------------------------------
Summary of changes: config/rootfiles/core/73/update.sh | 9 +++++++++ doc/language_issues.es | 2 ++ doc/language_issues.fr | 2 ++ doc/language_issues.nl | 2 ++ doc/language_issues.pl | 2 ++ doc/language_issues.ru | 2 ++ doc/language_issues.tr | 2 ++ doc/language_missings | 8 ++++++++ html/cgi-bin/proxy.cgi | 35 ++++++++++++++++++++++++++++------- langs/de/cgi-bin/de.pl | 2 ++ langs/en/cgi-bin/en.pl | 2 ++ src/initscripts/init.d/squid | 6 +++--- 12 files changed, 64 insertions(+), 10 deletions(-)
Difference in files: diff --git a/config/rootfiles/core/73/update.sh b/config/rootfiles/core/73/update.sh index 1fb3ac6..6730e0d 100644 --- a/config/rootfiles/core/73/update.sh +++ b/config/rootfiles/core/73/update.sh @@ -42,6 +42,15 @@ done #Extract files extract_files
+if [ -e "/var/ipfire/proxy/enable" ] || [ -e "/var/ipfire/proxy/enable_blue" ]; then + ( + eval $(/usr/local/bin/readhash /var/ipfire/proxy/advanced/settings) + + TRANSPARENT_PORT="$(( ${PROXY_PORT} + 1 ))" + echo "TRANSPORT_PORT=${TRANSPARENT_PORT}" >> /var/ipfire/proxy/advanced/settings + ) +fi + # Regenerate squid configuration files. /srv/web/ipfire/cgi-bin/proxy.cgi
diff --git a/doc/language_issues.es b/doc/language_issues.es index afe7ed6..f46723e 100644 --- a/doc/language_issues.es +++ b/doc/language_issues.es @@ -506,6 +506,8 @@ WARNING: untranslated string: Set time on boot WARNING: untranslated string: advproxy cache-digest WARNING: untranslated string: advproxy errmsg cache WARNING: untranslated string: advproxy errmsg invalid upstream proxy +WARNING: untranslated string: advproxy errmsg proxy ports equal +WARNING: untranslated string: advproxy proxy port transparent WARNING: untranslated string: age second WARNING: untranslated string: age seconds WARNING: untranslated string: age shour diff --git a/doc/language_issues.fr b/doc/language_issues.fr index b62d16e..32aa9b5 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -505,6 +505,8 @@ WARNING: untranslated string: Scan for Songs WARNING: untranslated string: advproxy cache-digest WARNING: untranslated string: advproxy errmsg cache WARNING: untranslated string: advproxy errmsg invalid upstream proxy +WARNING: untranslated string: advproxy errmsg proxy ports equal +WARNING: untranslated string: advproxy proxy port transparent WARNING: untranslated string: age second WARNING: untranslated string: age seconds WARNING: untranslated string: age shour diff --git a/doc/language_issues.nl b/doc/language_issues.nl index 42fedc5..cdde0f3 100644 --- a/doc/language_issues.nl +++ b/doc/language_issues.nl @@ -506,6 +506,8 @@ WARNING: translation string unused: year-graph WARNING: translation string unused: yearly firewallhits WARNING: untranslated string: Scan for Songs WARNING: untranslated string: advproxy cache-digest +WARNING: untranslated string: advproxy errmsg proxy ports equal +WARNING: untranslated string: advproxy proxy port transparent WARNING: untranslated string: age second WARNING: untranslated string: age seconds WARNING: untranslated string: age shour diff --git a/doc/language_issues.pl b/doc/language_issues.pl index afe7ed6..f46723e 100644 --- a/doc/language_issues.pl +++ b/doc/language_issues.pl @@ -506,6 +506,8 @@ WARNING: untranslated string: Set time on boot WARNING: untranslated string: advproxy cache-digest WARNING: untranslated string: advproxy errmsg cache WARNING: untranslated string: advproxy errmsg invalid upstream proxy +WARNING: untranslated string: advproxy errmsg proxy ports equal +WARNING: untranslated string: advproxy proxy port transparent WARNING: untranslated string: age second WARNING: untranslated string: age seconds WARNING: untranslated string: age shour diff --git a/doc/language_issues.ru b/doc/language_issues.ru index cc5dd64..a7d46db 100644 --- a/doc/language_issues.ru +++ b/doc/language_issues.ru @@ -497,6 +497,8 @@ WARNING: untranslated string: Scan for Songs WARNING: untranslated string: advproxy cache-digest WARNING: untranslated string: advproxy errmsg cache WARNING: untranslated string: advproxy errmsg invalid upstream proxy +WARNING: untranslated string: advproxy errmsg proxy ports equal +WARNING: untranslated string: advproxy proxy port transparent WARNING: untranslated string: age second WARNING: untranslated string: age seconds WARNING: untranslated string: age shour diff --git a/doc/language_issues.tr b/doc/language_issues.tr index 27ca634..d58bcc3 100644 --- a/doc/language_issues.tr +++ b/doc/language_issues.tr @@ -509,6 +509,8 @@ WARNING: translation string unused: xtaccess bad transfert WARNING: translation string unused: year-graph WARNING: translation string unused: yearly firewallhits WARNING: untranslated string: Scan for Songs +WARNING: untranslated string: advproxy errmsg proxy ports equal +WARNING: untranslated string: advproxy proxy port transparent WARNING: untranslated string: bytes WARNING: untranslated string: dnsforward WARNING: untranslated string: dnsforward add a new entry diff --git a/doc/language_missings b/doc/language_missings index fca3f3e..7c7b082 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -14,6 +14,8 @@ < advproxy cache-digest < advproxy errmsg cache < advproxy errmsg invalid upstream proxy +< advproxy errmsg proxy ports equal +< advproxy proxy port transparent < age second < age seconds < age shour @@ -241,6 +243,8 @@ < advproxy cache-digest < advproxy errmsg cache < advproxy errmsg invalid upstream proxy +< advproxy errmsg proxy ports equal +< advproxy proxy port transparent < age second < age seconds < age shour @@ -461,6 +465,8 @@ < advproxy cache-digest < advproxy errmsg cache < advproxy errmsg invalid upstream proxy +< advproxy errmsg proxy ports equal +< advproxy proxy port transparent < age second < age seconds < age shour @@ -657,6 +663,8 @@ < advproxy cache-digest < advproxy errmsg cache < advproxy errmsg invalid upstream proxy +< advproxy errmsg proxy ports equal +< advproxy proxy port transparent < age second < age seconds < age shour diff --git a/html/cgi-bin/proxy.cgi b/html/cgi-bin/proxy.cgi index bcdc202..25e935b 100644 --- a/html/cgi-bin/proxy.cgi +++ b/html/cgi-bin/proxy.cgi @@ -195,6 +195,7 @@ $proxysettings{'ENABLE_BLUE'} = 'off'; $proxysettings{'TRANSPARENT'} = 'off'; $proxysettings{'TRANSPARENT_BLUE'} = 'off'; $proxysettings{'PROXY_PORT'} = '800'; +$proxysettings{'TRANSPARENT_PORT'} = '3128'; $proxysettings{'VISIBLE_HOSTNAME'} = ''; $proxysettings{'ADMIN_MAIL_ADDRESS'} = ''; $proxysettings{'ADMIN_PASSWORD'} = ''; @@ -212,7 +213,7 @@ $proxysettings{'LOGGING'} = 'off'; $proxysettings{'CACHEMGR'} = 'off'; $proxysettings{'LOGQUERY'} = 'off'; $proxysettings{'LOGUSERAGENT'} = 'off'; -$proxysettings{'FILEDESCRIPTORS'} = '4096'; +$proxysettings{'FILEDESCRIPTORS'} = '16384'; $proxysettings{'CACHE_MEM'} = '2'; $proxysettings{'CACHE_SIZE'} = '50'; $proxysettings{'MAX_SIZE'} = '4096'; @@ -359,6 +360,15 @@ if (($proxysettings{'ACTION'} eq $Lang::tr{'save'}) || ($proxysettings{'ACTION'} $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'}; goto ERROR; } + if (!(&General::validport($proxysettings{'TRANSPARENT_PORT'}))) + { + $errormessage = $Lang::tr{'advproxy errmsg invalid proxy port'}; + goto ERROR; + } + if ($proxysettings{'PROXY_PORT'} eq $proxysettings{'TRANSPARENT_PORT'}) { + $errormessage = $Lang::tr{'advproxy errmsg proxy ports equal'}; + goto ERROR; + } if (!($proxysettings{'UPSTREAM_PROXY'} eq '')) { my @temp = split(/:/,$proxysettings{'UPSTREAM_PROXY'}); @@ -956,8 +966,8 @@ print <<END <tr> <td class='base'>$Lang::tr{'advproxy transparent on'} <font color="$Header::colourgreen">Green</font>:</td> <td><input type='checkbox' name='TRANSPARENT' $checked{'TRANSPARENT'}{'on'} /></td> - <td class='base'>$Lang::tr{'advproxy visible hostname'}: <img src='/blob.gif' alt='*' /></td> - <td><input type='text' name='VISIBLE_HOSTNAME' value='$proxysettings{'VISIBLE_HOSTNAME'}' /></td> + <td width='25%' class='base'>$Lang::tr{'advproxy proxy port transparent'}:</td> + <td width='30%'><input type='text' name='TRANSPARENT_PORT' value='$proxysettings{'TRANSPARENT_PORT'}' size='5' /></td> </tr> <tr> END @@ -969,7 +979,8 @@ if ($netsettings{'BLUE_DEV'}) { print "<td colspan='2'> </td>"; } print <<END - <td colspan='2'> </td> + <td class='base'>$Lang::tr{'advproxy visible hostname'}: <img src='/blob.gif' alt='*' /></td> + <td><input type='text' name='VISIBLE_HOSTNAME' value='$proxysettings{'VISIBLE_HOSTNAME'}' /></td> </tr> <tr> END @@ -3078,15 +3089,25 @@ END }
print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'PROXY_PORT'}"; - if ($proxysettings{'TRANSPARENT'} eq 'on') { print FILE " transparent" } if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" } print FILE "\n";
+ if ($proxysettings{'TRANSPARENT'} eq 'on') { + print FILE "http_port $netsettings{'GREEN_ADDRESS'}:$proxysettings{'TRANSPARENT_PORT'} intercept"; + if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" } + print FILE "\n"; + } + if ($netsettings{'BLUE_DEV'} && $proxysettings{'ENABLE_BLUE'} eq 'on') { print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'PROXY_PORT'}"; - if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') { print FILE " transparent" } if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" } print FILE "\n"; + + if ($proxysettings{'TRANSPARENT_BLUE'} eq 'on') { + print FILE "http_port $netsettings{'BLUE_ADDRESS'}:$proxysettings{'TRANSPARENT_PORT'} intercept"; + if ($proxysettings{'NO_CONNECTION_AUTH'} eq 'on') { print FILE " no-connection-auth" } + print FILE "\n"; + } }
if ($proxysettings{'CACHE_SIZE'} > 0) @@ -3457,7 +3478,7 @@ END # Check if squidclamav is enabled. if ($proxysettings{'ENABLE_CLAMAV'} eq 'on') { print FILE "\n#Settings for squidclamav:\n"; - print FILE "http_port 127.0.0.1:$proxysettings{'PROXY_PORT'} transparent\n"; + print FILE "http_port 127.0.0.1:$proxysettings{'PROXY_PORT'}\n"; print FILE "acl purge method PURGE\n"; print FILE "http_access deny to_localhost\n"; print FILE "http_access allow localhost\n"; diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 58dc88e..d85981f 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -244,6 +244,7 @@ 'advproxy errmsg password length 1' => 'Passwort muss mindestens', 'advproxy errmsg password length 2' => ' Zeichen enthalten', 'advproxy errmsg passwords different' => 'Passwörter stimmen nicht überein', +'advproxy errmsg proxy ports equal' => 'Der Proxy-Port darf nicht identisch mit dem transparenten Port sein.', 'advproxy errmsg radius port' => 'Ungültige RADIUS Portnummer', 'advproxy errmsg radius secret' => 'Shared Secret erforderlich', 'advproxy errmsg radius server' => 'Ungültige IP-Adresse für den RADIUS-Server', @@ -281,6 +282,7 @@ 'advproxy on' => 'Proxy an', 'advproxy privacy' => 'Datenschutz', 'advproxy proxy port' => 'Proxy-Port', +'advproxy proxy port transparent' => 'Transparenter Port', 'advproxy ram cache size' => 'Cachegröße im Arbeitsspeicher (MB)', 'advproxy redirector children' => 'Anzahl der Filterprozesse', 'advproxy reset' => 'Zurücksetzen', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 94eb828..d6ccfaf 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -244,6 +244,7 @@ 'advproxy errmsg password length 1' => 'Password must have at least ', 'advproxy errmsg password length 2' => ' characters', 'advproxy errmsg passwords different' => 'Passwords don't match', +'advproxy errmsg proxy ports equal' => 'The proxy port and the transparent port cannot be equal.', 'advproxy errmsg radius port' => 'Invalid RADIUS port number', 'advproxy errmsg radius secret' => 'RADIUS shared secret required', 'advproxy errmsg radius server' => 'Invalid IP address for RADIUS Server', @@ -281,6 +282,7 @@ 'advproxy on' => 'Proxy on', 'advproxy privacy' => 'Privacy', 'advproxy proxy port' => 'Proxy port', +'advproxy proxy port transparent' => 'Transparent port', 'advproxy ram cache size' => 'Memory cache size (MB)', 'advproxy redirector children' => 'Number of filter processes', 'advproxy reset' => 'Reset', diff --git a/src/initscripts/init.d/squid b/src/initscripts/init.d/squid index 62d5bea..c641c7d 100644 --- a/src/initscripts/init.d/squid +++ b/src/initscripts/init.d/squid @@ -15,8 +15,8 @@ transparent() { eval $(/usr/local/bin/readhash /var/ipfire/proxy/settings)
# If the proxy port is not set we set the default to 800. - if [ -z $PROXY_PORT ]; then - PROXY_PORT=800 + if [ -z "${TRANSPARENT_PORT}" ]; then + TRANSPARENT_PORT=800 fi
LOCALIP=`cat /var/ipfire/red/local-ipaddress | tr -d \n` @@ -43,7 +43,7 @@ transparent() { iptables -t nat -A SQUID -i $1 -p tcp -d $LOCALIP --dport 80 -j RETURN - iptables -t nat -A SQUID -i $1 -p tcp --dport 80 -j REDIRECT --to-port $PROXY_PORT + iptables -t nat -A SQUID -i $1 -p tcp --dport 80 -j REDIRECT --to-port "${TRANSPARENT_PORT}" }
case "$1" in
hooks/post-receive -- IPFire 2.x development tree