Skip to content

Commit 32c20a3

Browse files
authored
chore(proxy): fix bad squid conf (#2002)
1 parent 06a76ad commit 32c20a3

File tree

2 files changed

+6
-3
lines changed

2 files changed

+6
-3
lines changed

e2e/scripts/enable-squid-whitelist.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ function main() {
7676
maybe_install curl curl
7777

7878
# update the squid config to disable allow access from local networks
79-
sed -i 's/http_access allow localnet/# http_access allow localnet/' /etc/squid/conf.d/ec.conf
79+
sed -i 's/^http_access allow localnet$/http_access allow localnet whitelist/' /etc/squid/conf.d/ec.conf
8080

8181
# restart the squid service
8282
squid -k reconfigure

e2e/scripts/install-and-configure-squid.sh

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,10 +9,13 @@ acl step1 at_step SslBump1
99
ssl_bump peek step1
1010
ssl_bump bump all
1111
12+
acl whitelist dstdomain \"/etc/squid/sites.whitelist.txt\"
13+
14+
# this will allow all access to the internet from local IPs
1215
http_access allow localnet
1316
14-
acl whitelist dstdomain \"/etc/squid/sites.whitelist.txt\"
15-
http_access allow whitelist
17+
# to restrict access so only local IPs can access the internet and only sites on the whitelist, instead use
18+
# http_access allow localnet whitelist
1619
"
1720

1821
whitelist_txt="

0 commit comments

Comments
 (0)