lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-13 08:09:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

Proxy: don't try to force cachemanager access to use icap when enabled, it's highly unlikely the icap server understands these requests.

Browse Source 
Originally all http_access tags where filtered in 25449ffd49 , it seems like a slip of the pen to wrap the cache manager as well (probably nobody uses this combination)
This commit is contained in:
Ad Schellevis 2020-07-21 23:36:46 +02:00
parent 58e3c45655
commit 1da0a432a4
1 changed files with 0 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/opnsense/service/templates/OPNsense/Proxy/squid.acl.conf
View File

@ -138,20 +138,6 @@ http_access deny bannedHosts
{% endif %}
# Only allow cachemgr access from localhost
{% if helpers.exists('OPNsense.proxy.forward.icap.enable') and OPNsense.proxy.forward.icap.enable == '1' %}
{% if helpers.exists('OPNsense.proxy.forward.icap.ResponseURL') %}
adaptation_access response_mod allow localhost manager
{% endif %}
{% if helpers.exists('OPNsense.proxy.forward.icap.RequestURL') %}
adaptation_access request_mod allow localhost manager
{% endif %}
{% if helpers.exists('OPNsense.proxy.forward.icap.ResponseURL') %}
adaptation_access response_mod deny manager
{% endif %}
{% if helpers.exists('OPNsense.proxy.forward.icap.RequestURL') %}
adaptation_access request_mod deny manager
{% endif %}
{% endif %}
http_access allow localhost manager
http_access deny manager