www/squid: same for SslPorts

This commit is contained in:
Franco Fichtner 2024-07-30 11:56:39 +02:00
parent 3ab6e06aaa
commit b560bdb92b
2 changed files with 5 additions and 6 deletions

View file

@ -362,12 +362,14 @@
</OptionValues>
</youtube>
<safePorts type="CSVListField">
<default>80:http,21:ftp,443:https,70:gopher,210:wais,1025-65535:unregistered ports,280:http-mgmt,488:gss-http,591:filemaker,777:multiling http</default>
<Default>80:http,21:ftp,443:https,70:gopher,210:wais,1025-65535:unregistered ports,280:http-mgmt,488:gss-http,591:filemaker,777:multiling http</Default>
<mask>/^([ \-0-9a-zA-Z:,])*/u</mask>
<Required>Y</Required>
</safePorts>
<sslPorts type="CSVListField">
<Default>443:https</Default>
<Mask>/^([ \-0-9a-zA-Z:,])*/u</Mask>
<Required>Y</Required>
</sslPorts>
<remoteACLs>
<blacklists>

View file

@ -219,12 +219,9 @@ acl blockmimetypes_requests req_mime_type {{element}}
{% endif %}
# ACL - SSL ports, default are configured in config.xml
# Configured SSL ports (if defaults are not listed, then they have been removed from the configuration!):
{% if helpers.exists('OPNsense.proxy.forward.acl.sslPorts') %}
{% for element in OPNsense.proxy.forward.acl.sslPorts.split(",") %}
{% for element in OPNsense.proxy.forward.acl.sslPorts.split(",") %}
acl SSL_ports port {{element.split(":")[0]}} # {{element.split(":")[1]|default('unknown')}}
{% endfor %}
{% endif %}
{% endfor %}
# Default Safe ports are now defined in config.xml
# ACL - Safe_ports