mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-10 02:55:55 +02:00
130 lines
2.9 KiB
Bash
130 lines
2.9 KiB
Bash
#!/bin/sh
|
|
# Begin $rc_base/init.d/squid
|
|
|
|
. /etc/sysconfig/rc
|
|
. $rc_functions
|
|
|
|
chown -R squid:squid /var/log/squid
|
|
chown -R squid:squid /var/log/squidGuard
|
|
|
|
|
|
transparent() {
|
|
DEVICE=$1
|
|
|
|
eval $(/usr/local/bin/readhash /var/ipfire/ethernet/settings)
|
|
eval $(/usr/local/bin/readhash /var/ipfire/proxy/settings)
|
|
|
|
# If the proxy port is not set we set the default to 800.
|
|
if [ -z $PROXY_PORT ]; then
|
|
PROXY_PORT=800
|
|
fi
|
|
|
|
LOCALIP=`cat /var/ipfire/red/local-ipaddress | tr -d \n`
|
|
if [ -z $LOCALIP ]; then
|
|
boot_mesg "Couldn't read local-ipaddress" ${FAILURE}
|
|
exit 1
|
|
fi
|
|
|
|
COUNT=1
|
|
FILE=/var/ipfire/vpn/config
|
|
|
|
while read LINE; do
|
|
let COUNT=$COUNT+1
|
|
CONN_TYPE=`echo "$LINE" | awk -F, '{ print $5 }'`
|
|
if [ "$CONN_TYPE" != "net" ]; then
|
|
continue
|
|
fi
|
|
iptables -t nat -A SQUID -i $1 -p tcp -d `echo "$LINE" | awk -F, '{ print $13 }'` --dport 80 -j RETURN
|
|
done < $FILE
|
|
|
|
if [ "$RED_TYPE" == "STATIC" ]; then
|
|
iptables -t nat -A SQUID -i $1 -p tcp -d $RED_NETADDRESS/$RED_NETMASK --dport 80 -j RETURN
|
|
fi
|
|
|
|
iptables -t nat -A SQUID -i $1 -p tcp -d $LOCALIP --dport 80 -j RETURN
|
|
|
|
iptables -t nat -A SQUID -i $1 -p tcp --dport 80 -j REDIRECT --to-port $PROXY_PORT
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
getpids "squid"
|
|
|
|
if [ -n "${pidlist}" ]; then
|
|
echo -e "Squid is already running with Process"\
|
|
"ID(s) ${pidlist}.${NORMAL}"
|
|
evaluate_retval
|
|
exit
|
|
fi
|
|
|
|
|
|
eval $(/usr/local/bin/readhash /var/ipfire/proxy/advanced/settings)
|
|
eval $(/usr/local/bin/readhash /var/ipfire/ethernet/settings)
|
|
|
|
if [ -e /var/ipfire/proxy/enable -o -e /var/ipfire/proxy/enable_blue ]; then
|
|
|
|
# Add Address to errorpage stylesheet
|
|
sed "s|XXXhostXXX|$GREEN_ADDRESS|g" /var/ipfire/proxy/errorpage-$ERR_DESIGN.css > \
|
|
/etc/squid/errorpage.css
|
|
|
|
boot_mesg "Starting Squid Proxy Server..."
|
|
loadproc /usr/sbin/squid -z >/dev/null 2>&1
|
|
loadproc /usr/sbin/squid
|
|
fi
|
|
|
|
if [ -e /var/ipfire/proxy/transparent ]; then
|
|
transparent $GREEN_DEV
|
|
fi
|
|
if [ -e /var/ipfire/proxy/transparent_blue ]; then
|
|
transparent $BLUE_DEV
|
|
fi
|
|
;;
|
|
|
|
stop)
|
|
iptables -t nat -F SQUID
|
|
if [ -e /var/run/squid.pid ]; then
|
|
boot_mesg "Stopping Squid Proxy Server..."
|
|
squid -k shutdown >/dev/null 2>&1
|
|
evaluate_retval
|
|
killproc /usr/bin/squidGuard >/dev/null
|
|
killproc /usr/sbin/updxlrator >/dev/null
|
|
killproc /usr/bin/squidclamav >/dev/null
|
|
killproc /usr/sbin/squid >/dev/null
|
|
rm -rf /var/run/squid.pid
|
|
fi
|
|
;;
|
|
|
|
restart)
|
|
$0 stop
|
|
sleep 5
|
|
$0 start
|
|
;;
|
|
|
|
reconfigure)
|
|
/usr/sbin/squid -k reconfigure
|
|
;;
|
|
|
|
status)
|
|
statusproc /usr/sbin/squid
|
|
statusproc /usr/lib/squid/unlinkd
|
|
;;
|
|
|
|
flush)
|
|
$0 stop
|
|
echo > /var/log/cache/swap.state
|
|
chown squid.squid /var/log/cache/swap.state
|
|
sleep 1
|
|
$0 start
|
|
;;
|
|
setperms)
|
|
chown -R nobody.squid /var/updatecache/
|
|
;;
|
|
|
|
*)
|
|
echo "Usage: $0 {start|stop|restart|status|flush}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
# End $rc_base/init.d/squid
|