proxy.cgi: Fix for Bug #12826 'squid >=5 crashes on literal IPv6 addresses'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
This commit is contained in:
Matthias Fischer
2022-09-30 21:05:56 +02:00
committed by Peter Müller
parent 1c8e23c869
commit e0be9eab47

View File

@@ -3525,9 +3525,19 @@ END
$_ =~ s/__PROXY_PORT__/$proxysettings{'PROXY_PORT'}/;
print FILE $_;
}
print FILE "\n#End of custom includes\n";
print FILE "\n#End of custom includes\n\n";
close (ACL);
}
print FILE <<END
# Prevent ipv6 requests to avoid crash in squid > 5.x
acl to_ipv6 dst ipv6
acl from_ipv6 src ipv6
http_access deny to_ipv6
http_access deny from_ipv6
END
;
if ((!-z $extgrp) && ($proxysettings{'AUTH_METHOD'} eq 'ncsa') && ($proxysettings{'NCSA_BYPASS_REDIR'} eq 'on')) { print FILE "\nredirector_access deny for_extended_users\n"; }
# Check if squidclamav is enabled.