Freesco, NND, CDN, EOS

#!/bin/sh
#
# User startup/shutdown and firewall script.

. /etc/system.cfg
. /etc/live.cfg
. /etc/chat.pwd

if [ "$1" = firewall ]; then
# Add your custom firewall rules here. Warning, incorrect rules could
# leave your system insecure. $INET always represents the internet
# interface. These rules come before standard system rules. Example:
# reject incomming tcp connections to port 22 from the internet and log
#ipfwadm -I -a reject -P tcp -W $INET -D 0.0.0.0/0 22 -y -o

# Blokada stron pornograficznych
#ipfwadm -I -i accept -P tcp -S 192.168.1.0/24 -D 0.0.0.0/0 80 -r 3128

# Blokada IP
#ipfwadm -I -i reject -S 192.168.1.8

# Blokada internetu z wezwaniem do zaplaty
ipfwadm -I -i accept -P tcp -S 192.168.1.9 -r 80
ipfwadm -I -i accept -P tcp -S 192.168.1.9 -D 192.168.1.1 8080 -r 8080
#ipfwadm -I -i accept -P tcp -S 192.168.1.14 -r 80
#ipfwadm -I -i accept -P tcp -S 192.168.1.14 -D 192.168.1.1 8080 -r 8080
#ipfwadm -I -i accept -P tcp -S 192.168.1.16 -r 80
#ipfwadm -I -i accept -P tcp -S 192.168.1.16 -D 192.168.1.1 8080 -r 8080
#ipfwadm -I -i accept -P tcp -S 192.168.1.18 -r 80
#ipfwadm -I -i accept -P tcp -S 192.168.1.18 -D 192.168.1.1 8080 -r 8080

# Blokada portow
#ipfwadm -I -i reject -P tcp -S 0/0 -D 192.168.1.1 4000:8000
#ipfwadm -I -i reject -P udp -S 0/0 -D 192.168.1.1 4000:8000


#----------------------------------------------------------------------
exit; fi

if [ "$1" = stop -o "$1" = restart ]; then
echo -n "Stopping rc_user...         "
# Add commands here you want to execute when shutting down or rebooting.
# Be careful not to use any commands which wait for user input.




#----------------------------------------------------------------------
$DONE; [ "$1" = stop ] && exit; fi

echo -n "Starting rc_user...         "
# Add commands here you want to execute when booting. Use the fork
# command to launch programs which normally stay in the foreground.
thttpd -p 90 -u nobody -d mnt/router/wwz -l /dev/null



#----------------------------------------------------------------------
$DONE

http_port 10.5.0.1:3128
icp_port 0

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

cache_mem  4 MB
maximum_object_size 1024 KB

cache_dir ufs /mnt/router/packages/squid/cache 100 16 32
#cache_access_log /mnt/router/packages/squid/logs/access.log
#cache_log /mnt/router/packages/squid/logs/cache.log
#cache_store_log /mnt/router/packages/squid/logs/store.log
#mime_table /mnt/router/packages/squid/etc/mime.conf
#pid_filename /mnt/router/packages/squid/logs/squid.pid
#debug_options ALL,1

#cache_dns_program /mnt/router/packages/squid/bin/dnsserver
#dns_children 5

#unlinkd_program /mnt/router/packages/squid/bin/unlinkd

#redirect_program none
#redirect_children 5
#redirect_rewrites_host_header on

# redirector_access

#   authenticate_program /mnt/router/packages/squid/bin/ncsa_auth /mnt/router/packages/squid/etc/passwd
#authenticate_children 5
#authenticate_ttl 3600
#authenticate_ip_ttl 0


#request_header_max_size 10 KB
#request_body_max_size 1 MB
#reply_body_max_size 0

acl all src 0.0.0.0/0.0.0.0
acl localnet src 10.5.0.1/255.255.255.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280      # http-mgmt
acl Safe_ports port 488      # gss-http
acl Safe_ports port 591      # filemaker
acl Safe_ports port 777      # multiling http
acl CONNECT method CONNECT
#obyczajowka
acl zakazane_urlsy url_regex -i "/mnt/router/packages/squid/etc/zakazane_urlsy"
acl zakazane_domeny dstdom_regex -i "/mnt/router/packages/squid/etc/zakazane_domeny"

http_access allow manager localnet
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
http_access deny zakazane_urlsy
http_access deny zakazane_domeny
http_access allow localnet
http_access deny all

icp_access allow all
miss_access allow all

cache_mgr webmaster
cache_effective_user nobody
cache_effective_group nobody

#transparentny squid
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
hddpd_accel_uses_host_header on

dns_testnames localhost irongate

#logfile_rotate 10

memory_pools off
# memory_pools_limit 12 MB

log_icp_queries off

cachemgr_passwd webmaster all

buffered_logs on

# Blokada internetu z wezwaniem do zaplaty
# ACCESS CONTROLS
# -----------------------------------------------------------------------------
acl beznetu src 192.168.1.9/255.255.255.255
#acl beznetu src 192.168.1.14/255.255.255.255
#acl beznetu src 192.168.1.16/255.255.255.255
#acl beznetu src 192.168.1.18/255.255.255.255
# TAG: http_access
http_access deny beznetu