From cad777b11345d253172a0c0413c32c5fad51c684 Mon Sep 17 00:00:00 2001 From: Seth Lyons Date: Fri, 17 Jun 2016 16:08:55 -0400 Subject: [PATCH] we shouldn't allow 'http_access allow localnet' by default. if needed, it should be added manually. closes #17' --- templates/squid.conf.documented | 1 - templates/squid.conf.long.erb | 1 - templates/squid.conf.short.erb | 1 - 3 files changed, 3 deletions(-) diff --git a/templates/squid.conf.documented b/templates/squid.conf.documented index d4c8fd2..3be9c05 100644 --- a/templates/squid.conf.documented +++ b/templates/squid.conf.documented @@ -783,7 +783,6 @@ http_access deny CONNECT !SSL_ports # Example rule allowing access from your local networks. # Adapt localnet in the ACL section to list your (internal) IP networks # from where browsing should be allowed -http_access allow localnet http_access allow localhost # And finally deny all other access to this proxy diff --git a/templates/squid.conf.long.erb b/templates/squid.conf.long.erb index 8df1b62..1734d54 100644 --- a/templates/squid.conf.long.erb +++ b/templates/squid.conf.long.erb @@ -786,7 +786,6 @@ http_access <%= line %> # Example rule allowing access from your local networks. # Adapt localnet in the ACL section to list your (internal) IP networks # from where browsing should be allowed -http_access allow localnet http_access allow localhost # And finally deny all other access to this proxy diff --git a/templates/squid.conf.short.erb b/templates/squid.conf.short.erb index 40599af..21987c7 100644 --- a/templates/squid.conf.short.erb +++ b/templates/squid.conf.short.erb @@ -35,7 +35,6 @@ acl <%= line %> <% @http_access.each do |line| -%> http_access <%= line %> <% end -%> -http_access allow localnet http_access allow localhost http_access deny all