| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
and cache the information to authdb properly.
|
|
|
|
| |
and tweak the authdb a bit.
|
|
|
|
|
|
|
| |
do not have filter process to do auto login. this is required since
squid might have stale login info in cache, and we should not honor it.
need to fix auth-snmp to record logins in authdb too (should do that
anyway to store the additional snmp information in authdb).
|
|
|
|
| |
Implement logout function and some minor fixes.
|
|
|
|
| |
fix also some authdb bugs, and make it actually usable.
|
|
|
|
|
|
|
|
|
| |
Implement a shared memory based authentication cache. It's a simple
local cache indexed by IP-address, and keeps track of that IP's
auth info such as username, allowed categories and timeouts. This
provides basis for captive portal, per-user definable category
restrictions and implementation of soft blocks (block which can
be overridden by user by clicking a button on the blocked page).
|
|
|
|
| |
will need authentication db later too.
|
|
|
|
|
|
|
| |
Keep the modifications (which are needed for key lookup) inside the
lookup routine. This includes e.g. lower casing the URL. This way
can pass the exact original request string to our block page script.
This also changes the way 'www123.' is stripped from the request.
|
|
|
|
| |
and pass the denied url too.
|
|
|
|
| |
properly match them against db data.
|
|
|
|
|
| |
Properly embed the ipv4 address in database now. Teach filter
to understand the two new reserved component id's.
|
|
|
|
|
| |
Lower case the dns part of url. Also skip "www123" and similar
entries when determining if path components should be matched.
|
|
|
|
|
|
|
|
|
|
| |
Implement squid redirect protocol. It implements the "concurrent"
version even though the algorithm is non-blocking. Doing this can
reduce the amount of read system calls on busy system.
Minimum command line based configuration for banning specific
categories and specifying the redirect site. Will probably have
to add some sort of config file system later.
|
|
|
|
|
|
|
|
| |
Fixes has sub domains/paths hints to be correct. www<number> as
first domain entry matching now checks it won't remove second level
domain names.
And the filter code now looksup path components from the db.
|
|
|
|
|
|
| |
So we don't need explicit null terminator in most cases saving
space. It will also speed up comparisons as getting string blob is
now constant time (no strlen needed).
|
|
Analysing of the url host part, some simple tests. Not usable as
squid filter yet.
|