smeserver-dansguardian/contribs8/smeserver-dansguardian-2.9-block8080.patch

--- smeserver-dansguardian-2.9/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90local_chk40networks.block8080  2008-05-30 18:07:28.000000000 +1000
+++ smeserver-dansguardian-2.9/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90local_chk40networks    2008-05-30 18:12:04.000000000 +1000
@@ -1,15 +1,17 @@
 {
-       return "" unless ( ($dansguardian{portblocking} || "no") eq 'yes');
+    return "" unless ( ($dansguardian{portblocking} || "no") eq 'yes');
 
     my $locals = "@locals";
     if (@locals)
     {
-       $OUT .=<<"EOF";
-        for network in $locals
-        do
-            /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port 3128 -j DROP
-            /sbin/iptables -A \$NEW_local_chk -d \$network -p tcp --destination-port 3128 -j DROP
-        done
+    $OUT .=<<"EOF";
+    for network in $locals
+    do
+        /sbin/iptables -A \$NEW_local_chk -d $LocalIP/$LocalNetmask -j ACCEPT
+        /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port $squid{TransparentPort} -j DROP
+        /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port $squid{TCPPort} -j DROP
+        /sbin/iptables -A \$NEW_local_chk -d \$network -p tcp --destination-port $squid{TCPPort} -j DROP
+    done
 EOF
     }
 }
1	unnilennium	1.1	--- smeserver-dansguardian-2.9/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90local_chk40networks.block8080 2008-05-30 18:07:28.000000000 +1000
2			+++ smeserver-dansguardian-2.9/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90local_chk40networks 2008-05-30 18:12:04.000000000 +1000
3			@@ -1,15 +1,17 @@
4			{
5			- return "" unless ( ($dansguardian{portblocking} \|\| "no") eq 'yes');
6			+ return "" unless ( ($dansguardian{portblocking} \|\| "no") eq 'yes');
7
8			my $locals = "@locals";
9			if (@locals)
10			{
11			- $OUT .=<<"EOF";
12			- for network in $locals
13			- do
14			- /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port 3128 -j DROP
15			- /sbin/iptables -A \$NEW_local_chk -d \$network -p tcp --destination-port 3128 -j DROP
16			- done
17			+ $OUT .=<<"EOF";
18			+ for network in $locals
19			+ do
20			+ /sbin/iptables -A \$NEW_local_chk -d $LocalIP/$LocalNetmask -j ACCEPT
21			+ /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port $squid{TransparentPort} -j DROP
22			+ /sbin/iptables -A \$NEW_local_chk -s \$network -p tcp --destination-port $squid{TCPPort} -j DROP
23			+ /sbin/iptables -A \$NEW_local_chk -d \$network -p tcp --destination-port $squid{TCPPort} -j DROP
24			+ done
25			EOF
26			}
27			}