Commit Graph

82 Commits

Author SHA1 Message Date
Michael Tremer
2fc5124b7e proxy: Allow HTTP Basic authentication against Active Directory servers
Some clients may not support NTLMv2. Basic authentication can
now be activated. This is dangerous as it sends the credentials
in cleartext to the proxy server.
2014-08-11 11:49:56 +02:00
Michael Tremer
2deb75c0f3 Merge remote-tracking branch 'ms/squid-ad' into next 2014-07-27 12:01:50 +02:00
Michael Tremer
f0b7534f7f proxy.cgi: Move {minimum,maximum}_object_size before cache_dir.
The cache_dir directive ignores the object size directives
if those have not been set prior to cache_dir.

http://bugs.squid-cache.org/show_bug.cgi?id=3830
2014-07-10 14:04:05 +02:00
Michael Tremer
3ebc0da70f proxy.cgi: Allow safe/SSL ports to be empty.
Fixes a syntax error in the generated squid configuration
file.
2014-07-10 13:30:02 +02:00
Michael Tremer
b56746432b proxy: Add option to require a certain group for Internet access. 2014-06-12 11:29:18 +02:00
Michael Tremer
603248db53 squid: Add NTLM authentication against Windows Active Directory servers. 2014-06-10 20:15:58 +02:00
Michael Tremer
dd58c50c3e proxy.pac: Don't use proxy for direct domain access. 2014-05-12 13:21:24 +02:00
Bernhard Bitsch
7c1b7d3e22 proxy.pac: Only grant direct access for actual subnets.
Fixes #10324.
2014-05-12 13:16:43 +02:00
Alf Høgemark
153cf6406c cgi-bin: Use readonly="readonly" attribute on html input elements
The proper way to mark readonly is to use readonly="readonly", not
readonly="true", like it was done some places.
2014-02-18 18:48:57 +01:00
Alf Høgemark
631b67b7cd cgi-bin: HTML cleanup, add quotes for attribute values 2014-02-15 16:54:38 +01:00
Alexander Marx
73cb6627fc SQUID: fixed length of FAKE_REFERRER field 2014-01-06 13:03:06 +01:00
Michael Tremer
4f160f04cb proxy: Set number of file descriptors much higher.
Some users are hitting the 65k limit regularly, so
we set the limit to a much higher number.
2013-11-21 21:36:02 +01:00
Michael Tremer
d3527a38c1 Multiple CGI files: Check if BLUE or ORANGE are actually configured. 2013-11-08 14:32:08 +01:00
Michael Tremer
8dc177053f squid: Increase default number of file descriptors. 2013-10-14 14:07:35 +02:00
Michael Tremer
0f6b606785 squid: Implement intercept mode. 2013-10-14 13:54:24 +02:00
Michael Tremer
754f508b5b squid: Update to 3.3.8. 2013-08-22 12:57:56 +02:00
Michael Tremer
8b417dd143 proxy.cgi: Re-apply accidentially removed changes.
Removed in dfee7582f9,
originally introduced in 49c7cb2328.
2013-07-16 19:38:54 +02:00
Michael Tremer
920cc72333 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2013-07-15 22:05:12 +02:00
Michael Tremer
a610e13655 squid: Allow to set more FDs in CGI. 2013-07-15 22:04:59 +02:00
Stefan Schantl
dfee7582f9 Increase performance of the squidclamav redirector.
To boost up the performance, now we trust the proxy cache.

I add some changes to the proxy.cgi to configure the proxy and the
squidclamav in the right way.

I also add a hook that allows us to generate a new configuration
if the cgi script will be launched from the shell.

Fixes #10367.
2013-06-30 11:21:42 +02:00
Michael Tremer
49c7cb2328 squid: Include /etc/squid/squid.conf.pre.local.
This configuration file is included _before_ the
default IPFire configuration.
2013-06-18 15:59:03 +02:00
Jan Behrens
6bea848d34 squid: Compile with --enable-cache-digests.
Bug #10311
https://bugzilla.ipfire.org/show_bug.cgi?id=10311
2013-03-01 00:03:20 +01:00
Arne Fitzenreiter
b34fdcae83 proxy: allow access to IPFire itself if nets are blocked.
This fixes missing pictures on blocking pages.
fixes #10138
2013-02-14 19:33:37 +01:00
Stefan Schantl
dcfc6334b9 proxy.cgi: Allow to set a hostname as upstream proxy.
Fixes #10215.
2013-01-22 19:38:12 +01:00
Stefan Schantl
e201b6d537 proxy.cgi: Also allow to use a hostname for the LDAP server.
Fixes #10265.
2013-01-21 21:15:50 +01:00
Alexander Marx
8b6f424c03 SQUID : BUG 10280: extended patch, so that 0 is a valid value for disk-cache 2013-01-20 17:06:48 +01:00
Arne Fitzenreiter
e7b7cbae36 proxy: fix cache_replacement_policy setting.
fixes: 10264
thx to SAHC for help.
2013-01-13 22:46:49 +01:00
Alexander Marx
d5a7ff9500 Squid: added check if ram cache is greater than harddisk cache 2013-01-10 16:40:52 +01:00
Arne Fitzenreiter
cd025baace close core61. 2012-07-22 10:25:10 +02:00
Michael Tremer
eb3b93ccb5 proxy.cgi: Add option to add own configuration settings. 2012-07-18 13:04:49 +02:00
Bernhard Bitsch
69491545a3 proxy.cgi: Check upstream proxy address and better neighbour detection. 2012-07-18 12:56:41 +02:00
Arne Fitzenreiter
7d9710774c proxy.cgi: add more speed steps and some filetypes. 2012-07-03 15:00:45 +02:00
Arne Fitzenreiter
725e3869f4 proxy.cgi: fix ldap utf8 authentification.
Fixes: #786
2011-09-05 11:29:08 +02:00
Christian Schmidt
c03cf9ea9d Fixed the last commit. A 0 was missing. 2011-04-02 14:37:42 +02:00
Christian Schmidt
e3341bc216 Fixded localhost webservers are directed to the proxy if auto
configuration is used.

Fixes bug #770
2011-04-02 14:32:31 +02:00
Arne Fitzenreiter
bbb7dc0420 proxy.cgi: fix filename of ntlm authenticator. 2011-02-24 08:10:59 +01:00
Arne Fitzenreiter
73c7eff80e Remove some httpd errorlog entries. 2011-01-19 17:47:56 +01:00
Christian Schmidt
512d54a98f Fixed Proxy unable to handle max download size correct. Added and started to core 45. 2011-01-18 19:20:48 +01:00
Arne Fitzenreiter
ab4a5a35af squid: Add french and spanish errorpages.
reworked ipfire design pages by using stylesheets.
2011-01-02 09:17:50 +01:00
Arne Fitzenreiter
e07587fc59 Fix squid configuration if no hdd cache should be used. 2010-12-27 00:28:26 +01:00
Christian Schmidt
d9227212da Fixed reply_body_max_size for new squid version. 2010-12-03 09:49:43 +01:00
Arne Fitzenreiter
f09a0af571 proxy.cgi: write networks in cidr notation. 2010-11-15 19:39:48 +01:00
Arne Fitzenreiter
30793ae111 Proxy.cgi changes for new squid. 2010-11-01 09:18:46 +01:00
maniacikarus
bd027d948f Changed proxy page and redirector detections 2009-05-30 01:44:22 +02:00
Arne Fitzenreiter
ca5912d367 removed empty first line from proxy.cgi 2009-02-18 14:02:12 +01:00
maniacikarus
d9f2cfa419 Need to close the filehandle 2009-02-18 07:02:19 +01:00
maniacikarus
fe1656d2ad Added recent proxy modifications to core27
Ability to change filedescriptors up to 16000
Ability to use cachemanager website to monitor squid
Ability to reconfigure squid wihtout restart
2009-02-17 19:31:14 +01:00
maniacikarus
37273bc652 Updated proxy to latest stable 2009-02-09 18:10:15 +01:00
maniacikarus
4894d87017 Just a lot of things changed for squid 2009-02-07 14:41:28 +01:00
Daniel Glanzmann
585893aa46 changed max_filedescriptors in squid to system ulimit 2008-12-17 23:29:12 +01:00