| Server IP : 49.231.201.246 / Your IP : 216.73.216.248 Web Server : Apache/2.4.18 (Ubuntu) System : Linux 246 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64 User : root ( 0) PHP Version : 7.0.33-0ubuntu0.16.04.16 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/share/webmin/squid/ |
Upload File : |
#!/usr/bin/perl
# Enable or disable the iptables rule
use strict;
use warnings;
no warnings 'redefine';
no warnings 'uninitialized';
our (%text, %in, %access, $squid_version, %config);
require './squid-lib.pl';
&foreign_require("firewall", "firewall-lib.pl");
my $conf = &get_config();
my $port = &get_squid_port();
&error_setup($text{'iptables_err'});
&ReadParse();
# Validate inputs
my $iface;
if ($in{'enabled'} == 1) {
&to_ipaddress($in{'net'}) ||
($in{'net'} =~ /^([0-9\.]+)\/(\d+)$/ &&
&check_ipaddress($1) && $2 > 0 && $2 <= 32) ||
&error($text{'iptables_enet'});
}
elsif ($in{'enabled'} == 2) {
$iface = $in{'iface'} eq 'other' ? $in{'iface_other'} : $in{'iface'};
$iface =~ /^\S+$/ || &error($text{'iptables_eiface'});
}
# Get the old rule
my @tables = &firewall::get_iptables_save();
my ($nat) = grep { $_->{'name'} eq 'nat'} @tables;
my $rule;
if ($in{'rule'} ne "") {
($rule) = $nat->{'rules'}->[$in{'rule'}];
}
my $apply;
if ($in{'enabled'} && !$rule) {
# Need to create
$rule = { 'chain' => 'PREROUTING',
'j' => [ '', 'REDIRECT' ],
'p' => [ '', 'tcp' ],
'm' => [ '', 'tcp' ],
'dport' => [ '', 80 ],
'to-ports' => [ '', $port ],
( $iface ? ( 'i' => [ '', $iface ] )
: ( 's' => [ '', $in{'net'} ] ) ),
'cmt' => 'Forward HTTP connections to Squid proxy' };
push(@{$nat->{'rules'}}, $rule);
$apply = 1;
}
elsif ($in{'enabled'} && $rule) {
# Need to update
if ($iface) {
delete($rule->{'s'});
$rule->{'i'} = [ '', $iface ];
}
else {
delete($rule->{'i'});
$rule->{'s'} = [ '', $in{'net'} ];
}
$apply = 1;
}
elsif (!$in{'enabled'} && $rule) {
# Need to delete
splice(@{$nat->{'rules'}}, $in{'rule'}, 1);
$apply = 2;
}
else {
$apply = 0;
}
if ($in{'enabled'}) {
# Add appropriate httpd_accel directives
&lock_file($config{'squid_conf'});
if ($squid_version < 2.6) {
# Old directives
&save_directive($conf, "httpd_accel_port",
[ { 'name' => 'httpd_accel_port',
'values' => [ 80 ] } ]);
&save_directive($conf, "httpd_accel_host",
[ { 'name' => 'httpd_accel_host',
'values' => [ 'virtual' ] } ]);
}
else {
# In Squid 2.6+, acceleration is a port option
my @ports = &find_config("http_port", $conf);
foreach my $p (@ports) {
my $trans = 0;
foreach my $v (@{$p->{'values'}}) {
$trans++ if ($v eq "transparent");
}
if (!$trans) {
push(@{$p->{'values'}}, "transparent");
}
}
&save_directive($conf, "http_port", \@ports);
}
&flush_file_lines();
&unlock_file($config{'squid_conf'});
}
if ($apply && $in{'apply'}) {
# Save and apply firewall
&lock_file($firewall::iptables_save_file);
&firewall::save_table($nat);
&unlock_file($firewall::iptables_save_file);
my $err = &firewall::apply_configuration();
&error(&text('iptables_eapply', $err)) if ($err);
# And Squid
$err = &apply_configuration();
&error(&text('iptables_eapply2', $err)) if ($err);
&webmin_log("iptables", $apply);
}
&redirect("");