Technical data

4. Packages
OAC_INPUT (optional)
Provides protection against circumvention via proxy.
OAC_INPUT=’default’ blocks default ports for Privoxy, Squid, Tor, SS5, Transproxy.
OAC_INPUT=’tcp:8080 tcp:3128’ blocks TCP Port 8080 and 3128. This is a space
separated list of ports to be blocked and their respective protocol (udp, tcp). Omitting
protocols blocks both udp and tcp.
Omitting this variable or setting it to 'no' deactivates the function.
OAC_ALL_INVISIBLE (optional)
Turns off overview if at least one group exists. If no groups exist the variable is without
effect.
OAC_LIMITS (optional)
List of available time limits separated by spaces. Limits are set in minutes. This allows
time period based blocking or access definition.
Default: ’30 60 90 120 180 360 540’
OAC_MODE (optional)
Possible values: ’DROP’ or ’REJECT’ (default)
OAC_GROUP_N (optional)
Number of client groups. Used for clarity but also allows to block or allow access for a
whole group at once over the web interface.
OAC_GROUP_x_NAME (optional)
Name of the group - this name will be displayed in the web interface and may be used
in console script ’oac.sh’.
OAC_GROUP_x_BOOTBLOCK (optional)
If set to 'yes' all clients of the group are blocked at boot. Useful if PCs should be
blocked in general.
OAC_GROUP_x_INVISIBLE (optional)
Marks the group as invisible. Useful to block a PC in general which should not be visible
in the web interface. The console script oac.sh is not affected by this (for use in easycron).
OAC_GROUP_x_CLIENT_N (optional)
Number of clients in the group.
OAC_GROUP_x_CLIENT_x (optional)
Name of the client - See package dns_dhcp (Page 93).
OAC_BLOCK_UNKNOWN_IF_x (optional)
List of interfaces defined in base.txt allowing internet access only to hosts defined in
dns_dhcp.txt. Hosts not defined are blocked in general.
126