2
# demo config for Proxy mode
16
bind 192.168.200.10:8080
28
acl allow_host src 192.168.200.150/32
31
# layer7: prevent private network relaying
32
acl forbidden_dst url_ip 192.168.0.0/24
33
acl forbidden_dst url_ip 172.16.0.0/12
34
acl forbidden_dst url_ip 10.0.0.0/8
35
block if forbidden_dst
37
default_backend test-proxy-srv
40
backend test-proxy-srv
48
# layer7: Only GET method is valid
49
acl valid_method method GET
50
block if !valid_method
52
# layer7: protect bad reply
53
rspdeny ^Content-Type:[\ ]*audio/mp3