lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-16 17:44:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add GSuite and Youtube filtering in proxy (#4425)

Browse Source
This commit is contained in:
Julio Cesar Camargo (JCC) 2020-11-17 11:51:24 -03:00 committed by GitHub
parent 4632286c55
commit dae2efeee1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/opnsense/mvc/app/controllers/OPNsense/Proxy/forms/main.xml
View File

@ -439,6 +439,21 @@
<allownew>true</allownew>
<advanced>true</advanced>
</field>
<field>
<id>proxy.forward.acl.googleapps</id>
<label>Google GSuite restricted</label>
<type>text</type>
<advanced>true</advanced>
<help><![CDATA[Insert here the domain that will be allowed to use Google GSuite.
All accounts that are not in this domain will be blocked to use it.]]></help>
</field>
<field>
<id>proxy.forward.acl.youtube</id>
<label>YouTube Filter</label>
<type>dropdown</type>
<advanced>true</advanced>
<help><![CDATA[Select the Youtube filter level.]]></help>
</field>
<field>
<id>proxy.forward.acl.safePorts</id>
<label>Allowed destination TCP port</label>

12
src/opnsense/mvc/app/models/OPNsense/Proxy/Proxy.xml
View File

@ -394,6 +394,18 @@
<mimeType type="CSVListField">
<Required>N</Required>
</mimeType>
<googleapps type="HostnameField">
<Required>N</Required>
<mask>/^([a-zA-Z0-9]){0,}\.([a-zA-Z0-9].){0,}/</mask>
<ValidationMessage>Please enter a valid domain name here</ValidationMessage>
</googleapps>
<youtube type="OptionField">
<Required>N</Required>
<OptionValues>
<strict>Strict</strict>
<moderate>Moderate</moderate>
</OptionValues>
</youtube>
<safePorts type="CSVListField">
<default>80:http,21:ftp,443:https,70:gopher,210:wais,1025-65535:unregistered ports,280:http-mgmt,488:gss-http,591:filemaker,777:multiling http</default>
<mask>/^([ \-0-9a-zA-Z:,])*/u</mask>

11
src/opnsense/service/templates/OPNsense/Proxy/squid.acl.conf
View File

@ -99,6 +99,17 @@ http_access deny blockmimetypes_requests {% if helpers.exists('OPNsense.proxy.fo
{% endif %}
# Google Suite Filter
{% if not helpers.empty('OPNsense.proxy.forward.acl.googleapps') %}
OPNsense.proxy.forward.acl.googleapps|default('') != '' %}
request_header_add X-GoogApps-Allowed-Domains {{OPNsense.proxy.forward.acl.googleapps}}
{% endif %}
# YouTube Filter
{% if helpers.exists('OPNsense.proxy.forward.acl.youtube') and OPNsense.proxy.forward.acl.youtube|default('') != '' %}
request_header_add YouTube-Restrict {{OPNsense.proxy.forward.acl.youtube}}
{% endif %}
# Deny requests to certain unsafe ports
{% if helpers.exists('OPNsense.proxy.forward.icap.enable') and OPNsense.proxy.forward.icap.enable == '1' %}
{% if helpers.exists('OPNsense.proxy.forward.icap.ResponseURL') %}