
#-----------------------------------------------------------------------
# CHANGES
#-----------------------------------------------------------------------
#
# 2001-04-14  Dougal Holmes <dholmes@bigpond.net.au>
#             Added outgoing tcp connections to port 3128
# 2001-02-07  Jean-Sebastien Morisset <jsmoriss@mvlan.net>
#             Added check for CLUSTER_NAME and related rules.
# 2000-10-26  Jean-Sebastien Morisset <jsmoriss@jsm-mv.dyndns.org>
#             Added the "#m# 123" module config.
# 2000-10-20  Jean-Sebastien Morisset <jsmoriss@jsm-mv.dyndns.org>
#             Added OUTCHAIN rule.
# 2000-10-14  Jean-Sebastien Morisset <jsmoriss@jsm-mv.dyndns.org>
#             Initial module written for v5.0.
#
#-----------------------------------------------------------------------
# MODULE CONFIGURATION
#-----------------------------------------------------------------------
#
#m# 23
#a# accept
#i# cluster
#n# squidicp
#t# servers
#
#   |--------------------------------------------------------------------|
#d# If you've configured Squid to receive ICP queries from neighboring 
#d# caches, enter these host names below. Access will be granted to port
#d# 3130 in UDP.
#   |--------------------------------------------------------------------|
#
#-----------------------------------------------------------------------
# START OF MODULE CODE
#-----------------------------------------------------------------------

for host in `Option_Value accept $INTOPT squidicp servers`
do
	echo "Accept $INTOPT $IPADDR Squid ICP <- $host $LOG_MSG"
	if [ "$CLUSTER_NAME" ]
	then
		ipchains -A $OUTCHAIN -j ACCEPT -p udp -s $host 3130 -d $IPADDR 3130 $LOG
		ipchains -A $INCHAIN  -j ACCEPT -p udp -s $IPADDR 3130 -d $host 3130 $LOG
	else
		ipchains -A $INCHAIN  -j ACCEPT -p udp -s $host 3130 -d $IPADDR 3130 $LOG
		ipchains -A $OUTCHAIN -j ACCEPT -p udp -s $IPADDR 3130 -d $host 3130 $LOG
	fi
	[ "$MODE" -ge "3" ] && Hostports accept remote tcp "Squid ICP" $host 3128
done
unset host

