From 7e8c9e1f6142912794d7fade24645a22651c84b4 Mon Sep 17 00:00:00 2001 From: Andy Binder Date: Thu, 1 May 2025 21:01:41 +0200 Subject: [PATCH] www/squid: authenticate before blacklist (#4670) --- .../opnsense/service/templates/OPNsense/Proxy/squid.acl.conf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.acl.conf b/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.acl.conf index b9e1f8787..16a07929d 100644 --- a/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.acl.conf +++ b/www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.acl.conf @@ -28,6 +28,10 @@ adaptation_access request_mod allow whiteList http_access allow whiteList {% endif %} +{% if not helpers.empty('OPNsense.proxy.forward.authentication.method') %} +http_access deny !local_auth +{% endif %} + {% if helpers.exists('OPNsense.proxy.forward.acl.blackList') %} #