Proxy work in progress, tweak for unrestricted ips

This commit is contained in:
Jos Schellevis 2015-04-24 17:01:57 +02:00
parent 957709f3c8
commit 08bcaf16ba

View File

@ -173,15 +173,15 @@ http_access deny blockuseragents
{% if helpers.exists('OPNsense.proxy.forward.acl.mimeType') %}
# ACL list (Deny) blockmimetypes
http_reply_access deny blockmimetypes
http_access deny blockmimetypes_requests
http_reply_access deny blockmimetypes {% if helpers.exists('OPNsense.proxy.forward.acl.unrestricted') %}!unrestricted{% endif %}
http_access deny blockmimetypes_requests {% if helpers.exists('OPNsense.proxy.forward.acl.unrestricted') %}!unrestricted{% endif %}
{% endif %}
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
http_access deny !Safe_ports {% if helpers.exists('OPNsense.proxy.forward.acl.unrestricted') %}!unrestricted{% endif %}
# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports
http_access deny CONNECT !SSL_ports {% if helpers.exists('OPNsense.proxy.forward.acl.unrestricted') %}!unrestricted{% endif %}
{% if helpers.exists('OPNsense.proxy.forward.acl.bannedHosts') %}
http_access deny bannedHosts