evolix/minifirewall
21
0
Fork 0
Code Issues 4 Pull requests 3 Releases 1 Activity

proxy: simplification de la boucle

Browse source
This commit is contained in:
Jérémy Lecour 2021-06-04 14:06:37 +02:00 committed by Jérémy Lecour
parent f87bbe5442
commit 9ae2a03955
2 changed files with 4 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
minifirewall
View file

@ -415,10 +415,6 @@ start() {
# Proxy (Squid)
if is_proxy_enabled; then
${IPT} -t nat -A OUTPUT -p tcp --dport 80 -m owner --uid-owner proxy -j ACCEPT
if [ -n "${INTLAN}" ]; then
${IPT} -t nat -A OUTPUT -p tcp --dport 80 -d "${INTLAN}" -j ACCEPT
fi
${IPT} -t nat -A OUTPUT -p tcp --dport 80 -d "127.0.0.0/8" -j ACCEPT
for dstip in ${PROXYBYPASS}; do
${IPT} -t nat -A OUTPUT -p tcp --dport 80 -d "${dstip}" -j ACCEPT
done

8
minifirewall.conf
View file

@ -79,10 +79,10 @@ NTPOK='0.0.0.0/0'
# Proxy (Squid)
PROXY='off'
# (destinations that bypass the proxy. ${INTLAN} and '127.0.0.0/8' are always added to the list)
PROXYBYPASS=''
# (proxy port, default if missing: '8888')
PROXYPORT=''
# (proxy port)
PROXYPORT='8888'
# (destinations that bypass the proxy)
PROXYBYPASS="${INTLAN} 127.0.0.0/8"
# Backup servers
# (add IP:PORT for each one, example: '192.168.10.1:1234 192.168.10.2:5678')