]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - html/cgi-bin/optionsfw.cgi
projects / people / pmueller / ipfire-2.x.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
optionsfw.cgi: Make logging of spoofed/martians packets and the DROP_HOSTILE filter...
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / optionsfw.cgi
CommitLineData
5595bc03 1#!/usr/bin/perl
33389bfe
PM		 2###############################################################################
3# #
4# IPFire.org - A linux based firewall #
f871a115 5# Copyright (C) 2014-2021 IPFire Team <info@ipfire.org> #
33389bfe
PM		 6# #
7# This program is free software: you can redistribute it and/or modify #
8# it under the terms of the GNU General Public License as published by #
9# the Free Software Foundation, either version 3 of the License, or #
10# (at your option) any later version. #
11# #
12# This program is distributed in the hope that it will be useful, #
13# but WITHOUT ANY WARRANTY; without even the implied warranty of #
14# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15# GNU General Public License for more details. #
16# #
17# You should have received a copy of the GNU General Public License #
18# along with this program. If not, see <http://www.gnu.org/licenses/>. #
19# #
20###############################################################################
21
5595bc03
CS		 22# enable only the following on debugging purpose
23#use warnings;
24#use CGI::Carp 'fatalsToBrowser';
25
26require '/var/ipfire/general-functions.pl';
27require "${General::swroot}/lang.pl";
28require "${General::swroot}/header.pl";
29
30
31my %checked =(); # Checkbox manipulations
5595bc03 32our %settings=();
3b2ad4a1
AM		 33my %fwdfwsettings=();
34my %configfwdfw=();
35my %configoutgoingfw=();
36
6d8eb5de
AM		 37my $configfwdfw = "${General::swroot}/firewall/config";
38my $configoutgoing = "${General::swroot}/firewall/outgoing";
5595bc03
CS		 39my $errormessage = '';
40my $warnmessage = '';
34f30c5f 41my $filename = "${General::swroot}/optionsfw/settings";
5595bc03 42
6d8eb5de 43&General::readhash("${General::swroot}/firewall/settings", \%fwdfwsettings);
5595bc03
CS		 44&Header::showhttpheaders();
45
46#Get GUI values
47&Header::getcgihash(\%settings);
5595bc03 48if ($settings{'ACTION'} eq $Lang::tr{'save'}) {
3b2ad4a1 49 if ($settings{'defpol'} ne '1'){
34f30c5f 50 $errormessage .= $Lang::tr{'new optionsfw later'};
3b2ad4a1 51 &General::writehash($filename, \%settings); # Save good settings
3be1e3c6 52 &General::system("/usr/local/bin/firewallctrl");
3b2ad4a1
AM		 53 }else{
54 if ($settings{'POLICY'} ne ''){
55 $fwdfwsettings{'POLICY'} = $settings{'POLICY'};
56 }
57 if ($settings{'POLICY1'} ne ''){
58 $fwdfwsettings{'POLICY1'} = $settings{'POLICY1'};
59 }
60 my $MODE = $fwdfwsettings{'POLICY'};
61 my $MODE1 = $fwdfwsettings{'POLICY1'};
62 %fwdfwsettings = ();
63 $fwdfwsettings{'POLICY'} = "$MODE";
64 $fwdfwsettings{'POLICY1'} = "$MODE1";
6d8eb5de
AM		 65 &General::writehash("${General::swroot}/firewall/settings", \%fwdfwsettings);
66 &General::readhash("${General::swroot}/firewall/settings", \%fwdfwsettings);
3be1e3c6 67 &General::system("/usr/local/bin/firewallctrl");
3b2ad4a1 68 }
34f30c5f 69 &General::readhash($filename, \%settings); # Load good settings
3b2ad4a1
AM		 70}
71
5595bc03
CS		 72&Header::openpage($Lang::tr{'options fw'}, 1, '');
73&Header::openbigbox('100%', 'left', '', $errormessage);
34f30c5f 74&General::readhash($filename, \%settings);
5595bc03
CS		 75if ($errormessage) {
76 &Header::openbox('100%', 'left', $Lang::tr{'warning messages'});
77 print "<font color='red'>$errormessage&nbsp;</font>";
78 &Header::closebox();
79}
80
83ef9c40
MT		 81# Set new defaults
82if (!$settings{'MASQUERADE_GREEN'}) {
83 $settings{'MASQUERADE_GREEN'} = 'on';
84}
85if (!$settings{'MASQUERADE_ORANGE'}) {
86 $settings{'MASQUERADE_ORANGE'} = 'on';
87}
88if (!$settings{'MASQUERADE_BLUE'}) {
89 $settings{'MASQUERADE_BLUE'} = 'on';
90}
91
5595bc03
CS		 92$checked{'DROPNEWNOTSYN'}{'off'} = '';
93$checked{'DROPNEWNOTSYN'}{'on'} = '';
94$checked{'DROPNEWNOTSYN'}{$settings{'DROPNEWNOTSYN'}} = "checked='checked'";
95$checked{'DROPINPUT'}{'off'} = '';
96$checked{'DROPINPUT'}{'on'} = '';
97$checked{'DROPINPUT'}{$settings{'DROPINPUT'}} = "checked='checked'";
6be0579b
AM		 98$checked{'DROPFORWARD'}{'off'} = '';
99$checked{'DROPFORWARD'}{'on'} = '';
100$checked{'DROPFORWARD'}{$settings{'DROPFORWARD'}} = "checked='checked'";
5d7faa45
AM		 101$checked{'DROPOUTGOING'}{'off'} = '';
102$checked{'DROPOUTGOING'}{'on'} = '';
103$checked{'DROPOUTGOING'}{$settings{'DROPOUTGOING'}} = "checked='checked'";
5595bc03
CS		 104$checked{'DROPPORTSCAN'}{'off'} = '';
105$checked{'DROPPORTSCAN'}{'on'} = '';
106$checked{'DROPPORTSCAN'}{$settings{'DROPPORTSCAN'}} = "checked='checked'";
42dc0090
CS		 107$checked{'DROPWIRELESSINPUT'}{'off'} = '';
108$checked{'DROPWIRELESSINPUT'}{'on'} = '';
109$checked{'DROPWIRELESSINPUT'}{$settings{'DROPWIRELESSINPUT'}} = "checked='checked'";
110$checked{'DROPWIRELESSFORWARD'}{'off'} = '';
111$checked{'DROPWIRELESSFORWARD'}{'on'} = '';
112$checked{'DROPWIRELESSFORWARD'}{$settings{'DROPWIRELESSFORWARD'}} = "checked='checked'";
f871a115
PM		 113$checked{'DROPSPOOFEDMARTIAN'}{'off'} = '';
114$checked{'DROPSPOOFEDMARTIAN'}{'on'} = '';
115$checked{'DROPSPOOFEDMARTIAN'}{$settings{'DROPSPOOFEDMARTIAN'}} = "checked='checked'";
116$checked{'DROPHOSTILE'}{'off'} = '';
117$checked{'DROPHOSTILE'}{'on'} = '';
118$checked{'DROPHOSTILE'}{$settings{'DROPHOSTILE'}} = "checked='checked'";
0aaef8e9
CS		 119$checked{'DROPPROXY'}{'off'} = '';
120$checked{'DROPPROXY'}{'on'} = '';
121$checked{'DROPPROXY'}{$settings{'DROPPROXY'}} = "checked='checked'";
122$checked{'DROPSAMBA'}{'off'} = '';
123$checked{'DROPSAMBA'}{'on'} = '';
124$checked{'DROPSAMBA'}{$settings{'DROPSAMBA'}} = "checked='checked'";
15add1c8
AM		 125$checked{'SHOWCOLORS'}{'off'} = '';
126$checked{'SHOWCOLORS'}{'on'} = '';
127$checked{'SHOWCOLORS'}{$settings{'SHOWCOLORS'}} = "checked='checked'";
96502a5a
AM		 128$checked{'SHOWREMARK'}{'off'} = '';
129$checked{'SHOWREMARK'}{'on'} = '';
130$checked{'SHOWREMARK'}{$settings{'SHOWREMARK'}} = "checked='checked'";
770140a7
AM		 131$checked{'SHOWTABLES'}{'off'} = '';
132$checked{'SHOWTABLES'}{'on'} = '';
133$checked{'SHOWTABLES'}{$settings{'SHOWTABLES'}} = "checked='checked'";
d9987841
AM		 134$checked{'SHOWDROPDOWN'}{'off'} = '';
135$checked{'SHOWDROPDOWN'}{'on'} = '';
136$checked{'SHOWDROPDOWN'}{$settings{'SHOWDROPDOWN'}} = "checked='checked'";
137$selected{'FWPOLICY'}{$settings{'FWPOLICY'}}= 'selected';
138$selected{'FWPOLICY1'}{$settings{'FWPOLICY1'}}= 'selected';
d47bb8a1 139$selected{'FWPOLICY2'}{$settings{'FWPOLICY2'}}= 'selected';
83ef9c40
MT		 140$selected{'MASQUERADE_GREEN'}{'off'} = '';
141$selected{'MASQUERADE_GREEN'}{'on'} = '';
142$selected{'MASQUERADE_GREEN'}{$settings{'MASQUERADE_GREEN'}} = 'selected="selected"';
143$selected{'MASQUERADE_ORANGE'}{'off'} = '';
144$selected{'MASQUERADE_ORANGE'}{'on'} = '';
145$selected{'MASQUERADE_ORANGE'}{$settings{'MASQUERADE_ORANGE'}} = 'selected="selected"';
146$selected{'MASQUERADE_BLUE'}{'off'} = '';
147$selected{'MASQUERADE_BLUE'}{'on'} = '';
148$selected{'MASQUERADE_BLUE'}{$settings{'MASQUERADE_BLUE'}} = 'selected="selected"';
35fb9164 149
d00b3548 150&Header::openbox('100%', 'center',);
5595bc03
CS		 151print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>";
152
83ef9c40 153print <<END;
5595bc03 154<form method='post' action='$ENV{'SCRIPT_NAME'}'>
83ef9c40
MT		 155 <table width='95%' cellspacing='0'>
156 <tr bgcolor='$color{'color20'}'>
157 <td colspan='2' align='left'><b>$Lang::tr{'masquerading'}</b></td>
158 </tr>
159 <tr>
160 <td align='left' width='60%'>$Lang::tr{'masquerade green'}</td>
161 <td>
162 <select name='MASQUERADE_GREEN'>
163 <option value='on' $selected{'MASQUERADE_GREEN'}{'on'}>$Lang::tr{'masquerading enabled'}</option>
164 <option value='off' $selected{'MASQUERADE_GREEN'}{'off'}>$Lang::tr{'masquerading disabled'}</option>
165 </select>
166 </td>
167 </tr>
168END
169
170 if (&Header::orange_used()) {
171 print <<END;
172 <tr>
173 <td align='left' width='60%'>$Lang::tr{'masquerade orange'}</td>
174 <td>
175 <select name='MASQUERADE_ORANGE'>
176 <option value='on' $selected{'MASQUERADE_ORANGE'}{'on'}>$Lang::tr{'masquerading enabled'}</option>
177 <option value='off' $selected{'MASQUERADE_ORANGE'}{'off'}>$Lang::tr{'masquerading disabled'}</option>
178 </select>
179 </td>
180 </tr>
181END
182 }
183
184 if (&Header::blue_used()) {
185 print <<END;
186 <tr>
187 <td align='left' width='60%'>$Lang::tr{'masquerade blue'}</td>
188 <td>
189 <select name='MASQUERADE_BLUE'>
190 <option value='on' $selected{'MASQUERADE_BLUE'}{'on'}>$Lang::tr{'masquerading enabled'}</option>
191 <option value='off' $selected{'MASQUERADE_BLUE'}{'off'}>$Lang::tr{'masquerading disabled'}</option>
192 </select>
193 </td>
194 </tr>
195END
196 }
197
198 print <<END
199 </table>
200
201 <br>
202
5595bc03 203<table width='95%' cellspacing='0'>
f871a115
PM		 204 <tr bgcolor='$color{'color20'}'>
205 <td colspan='2' align='left'><b>$Lang::tr{'fw logging'}</b></td>
206 </tr>
207 <tr>
208 <td align='left' width='60%'>$Lang::tr{'drop newnotsyn'}</td>
209 <td align='left'>
210 $Lang::tr{'on'} <input type='radio' name='DROPNEWNOTSYN' value='on' $checked{'DROPNEWNOTSYN'}{'on'} />/
211 <input type='radio' name='DROPNEWNOTSYN' value='off' $checked{'DROPNEWNOTSYN'}{'off'} /> $Lang::tr{'off'}
212 </td>
213 </tr>
214 <tr>
215 <td align='left' width='60%'>$Lang::tr{'drop input'}</td>
216 <td align='left'>
217 $Lang::tr{'on'} <input type='radio' name='DROPINPUT' value='on' $checked{'DROPINPUT'}{'on'} />/
218 <input type='radio' name='DROPINPUT' value='off' $checked{'DROPINPUT'}{'off'} /> $Lang::tr{'off'}
219 </td>
220 </tr>
221 <tr>
222 <td align='left' width='60%'>$Lang::tr{'drop forward'}</td>
223 <td align='left'>
224 $Lang::tr{'on'} <input type='radio' name='DROPFORWARD' value='on' $checked{'DROPFORWARD'}{'on'} />/
225 <input type='radio' name='DROPFORWARD' value='off' $checked{'DROPFORWARD'}{'off'} /> $Lang::tr{'off'}
226 </td>
227 </tr>
228 <tr>
229 <td align='left' width='60%'>$Lang::tr{'drop outgoing'}</td>
230 <td align='left'>
231 $Lang::tr{'on'} <input type='radio' name='DROPOUTGOING' value='on' $checked{'DROPOUTGOING'}{'on'} />/
232 <input type='radio' name='DROPOUTGOING' value='off' $checked{'DROPOUTGOING'}{'off'} /> $Lang::tr{'off'}
233 </td>
234 </tr>
235 <tr>
236 <td align='left' width='60%'>$Lang::tr{'drop portscan'}</td>
237 <td align='left'>
238 $Lang::tr{'on'} <input type='radio' name='DROPPORTSCAN' value='on' $checked{'DROPPORTSCAN'}{'on'} />/
239 <input type='radio' name='DROPPORTSCAN' value='off' $checked{'DROPPORTSCAN'}{'off'} /> $Lang::tr{'off'}
240 </td>
241 </tr>
242 <tr>
243 <td align='left' width='60%'>$Lang::tr{'drop wirelessinput'}</td>
244 <td align='left'>
245 $Lang::tr{'on'} <input type='radio' name='DROPWIRELESSINPUT' value='on' $checked{'DROPWIRELESSINPUT'}{'on'} />/
246 <input type='radio' name='DROPWIRELESSINPUT' value='off' $checked{'DROPWIRELESSINPUT'}{'off'} /> $Lang::tr{'off'}
247 </td>
248 </tr>
249 <tr>
250 <td align='left' width='60%'>$Lang::tr{'drop wirelessforward'}</td>
251 <td align='left'>
252 $Lang::tr{'on'} <input type='radio' name='DROPWIRELESSFORWARD' value='on' $checked{'DROPWIRELESSFORWARD'}{'on'} />/
253 <input type='radio' name='DROPWIRELESSFORWARD' value='off' $checked{'DROPWIRELESSFORWARD'}{'off'} /> $Lang::tr{'off'}
254 </td>
255 </tr>
256 <tr>
257 <td align='left' width='60%'>$Lang::tr{'drop spoofed martians'}</td>
258 <td align='left'>
259 $Lang::tr{'on'} <input type='radio' name='DROPSPOOFEDMARTIAN' value='on' $checked{'DROPSPOOFEDMARTIAN'}{'on'} />/
260 <input type='radio' name='DROPSPOOFEDMARTIAN' value='off' $checked{'DROPSPOOFEDMARTIAN'}{'off'} /> $Lang::tr{'off'}
261 </td>
262 </tr>
5595bc03 263</table>
15add1c8
AM		 264<br/>
265
f871a115
PM		 266<table width='95%' cellspacing='0'>
267 <tr bgcolor='$color{'color20'}'>
268 <td colspan='2' align='left'><b>$Lang::tr{'fw red'}</b></td>
269 </tr>
270 <tr>
271 <td align='left' width='60%'>$Lang::tr{'drop hostile'}</td>
272 <td align='left'>
273 $Lang::tr{'on'} <input type='radio' name='DROPHOSTILE' value='on' $checked{'DROPHOSTILE'}{'on'} />/
274 <input type='radio' name='DROPHOSTILE' value='off' $checked{'DROPHOSTILE'}{'off'} /> $Lang::tr{'off'}
275 </td>
276 </tr>
277</table>
278<br>
279
0aaef8e9
CS		 280<table width='95%' cellspacing='0'>
281<tr bgcolor='$color{'color20'}'><td colspan='2' align='left'><b>$Lang::tr{'fw blue'}</b></td></tr>
33389bfe
PM		 282<tr><td align='left' width='60%'>$Lang::tr{'drop proxy'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='DROPPROXY' value='on' $checked{'DROPPROXY'}{'on'} />/
283 <input type='radio' name='DROPPROXY' value='off' $checked{'DROPPROXY'}{'off'} /> $Lang::tr{'off'}</td></tr>
284<tr><td align='left' width='60%'>$Lang::tr{'drop samba'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='DROPSAMBA' value='on' $checked{'DROPSAMBA'}{'on'} />/
285 <input type='radio' name='DROPSAMBA' value='off' $checked{'DROPSAMBA'}{'off'} /> $Lang::tr{'off'}</td></tr>
0aaef8e9 286</table>
15add1c8
AM		 287<br>
288<table width='95%' cellspacing='0'>
289<tr bgcolor='$color{'color20'}'><td colspan='2' align='left'><b>$Lang::tr{'fw settings'}</b></td></tr>
33389bfe
PM		 290<tr><td align='left' width='60%'>$Lang::tr{'fw settings color'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWCOLORS' value='on' $checked{'SHOWCOLORS'}{'on'} />/
291 <input type='radio' name='SHOWCOLORS' value='off' $checked{'SHOWCOLORS'}{'off'} /> $Lang::tr{'off'}</td></tr>
292<tr><td align='left' width='60%'>$Lang::tr{'fw settings remark'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWREMARK' value='on' $checked{'SHOWREMARK'}{'on'} />/
293 <input type='radio' name='SHOWREMARK' value='off' $checked{'SHOWREMARK'}{'off'} /> $Lang::tr{'off'}</td></tr>
294<tr><td align='left' width='60%'>$Lang::tr{'fw settings ruletable'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWTABLES' value='on' $checked{'SHOWTABLES'}{'on'} />/
295 <input type='radio' name='SHOWTABLES' value='off' $checked{'SHOWTABLES'}{'off'} /> $Lang::tr{'off'}</td></tr>
296<tr><td align='left' width='60%'>$Lang::tr{'fw settings dropdown'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWDROPDOWN' value='on' $checked{'SHOWDROPDOWN'}{'on'} />/
297 <input type='radio' name='SHOWDROPDOWN' value='off' $checked{'SHOWDROPDOWN'}{'off'} /> $Lang::tr{'off'}</td></tr>
63fd1354 298</table>
2f662bf0 299
62fc8511
AM		 300<br />
301<table width='95%' cellspacing='0'>
302<tr bgcolor='$color{'color20'}'><td colspan='2' align='left'><b>$Lang::tr{'fw default drop'}</b></td></tr>
d9987841
AM		 303<tr><td align='left' width='60%'>$Lang::tr{'drop action'}</td><td><select name='FWPOLICY'>
304<option value='DROP' $selected{'FWPOLICY'}{'DROP'}>DROP</option>
305<option value='REJECT' $selected{'FWPOLICY'}{'REJECT'}>REJECT</option></select>
306</td></tr>
307<tr><td align='left' width='60%'>$Lang::tr{'drop action1'}</td><td><select name='FWPOLICY1'>
308<option value='DROP' $selected{'FWPOLICY1'}{'DROP'}>DROP</option>
309<option value='REJECT' $selected{'FWPOLICY1'}{'REJECT'}>REJECT</option></select>
310</td></tr>
d47bb8a1
AM		 311<tr><td align='left' width='60%'>$Lang::tr{'drop action2'}</td><td><select name='FWPOLICY2'>
312<option value='DROP' $selected{'FWPOLICY2'}{'DROP'}>DROP</option>
313<option value='REJECT' $selected{'FWPOLICY2'}{'REJECT'}>REJECT</option></select>
314</td></tr>
62fc8511
AM		 315</table>
316
0aaef8e9 317<br />
f9a3c1c8
AM		 318<table width='100%' cellspacing='0'>
319<tr><td align='right'><form method='post' action='$ENV{'SCRIPT_NAME'}'>
1d55fccd 320<input type='submit' name='ACTION' value='$Lang::tr{'save'}' />
62fc8511 321</form></td></tr>
5595bc03
CS		 322</table>
323</form>
324END
325;
326&Header::closebox();
3b2ad4a1
AM		 327
328&Header::openbox('100%', 'center', $Lang::tr{'fwdfw pol title'});
329 if ($fwdfwsettings{'POLICY'} eq 'MODE1'){ $selected{'POLICY'}{'MODE1'} = 'selected'; } else { $selected{'POLICY'}{'MODE1'} = ''; }
330 if ($fwdfwsettings{'POLICY'} eq 'MODE2'){ $selected{'POLICY'}{'MODE2'} = 'selected'; } else { $selected{'POLICY'}{'MODE2'} = ''; }
331 if ($fwdfwsettings{'POLICY1'} eq 'MODE1'){ $selected{'POLICY1'}{'MODE1'} = 'selected'; } else { $selected{'POLICY1'}{'MODE1'} = ''; }
332 if ($fwdfwsettings{'POLICY1'} eq 'MODE2'){ $selected{'POLICY1'}{'MODE2'} = 'selected'; } else { $selected{'POLICY1'}{'MODE2'} = ''; }
333print <<END;
334 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
335 <table width='100%' border='0'>
336 <tr><td colspan='3' style='font-weight:bold;color:red;' align='left'>FORWARD </td></tr>
337 <tr><td colspan='3' align='left'>$Lang::tr{'fwdfw pol text'}</td></tr>
338 <tr><td colspan='3'><hr /></td></tr>
339 <tr><td width='15%' align='left'> <select name='POLICY' style="width: 100px">
340 <option value='MODE1' $selected{'POLICY'}{'MODE1'}>$Lang::tr{'fwdfw pol block'}</option>
341 <option value='MODE2' $selected{'POLICY'}{'MODE2'}>$Lang::tr{'fwdfw pol allow'}</option></select>
1d55fccd 342 <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /><input type='hidden' name='defpol' value='1'></td>
3b2ad4a1
AM		 343END
344 print "</tr></table></form>";
345 print"<br><br>";
346 print <<END;
347 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
348 <table width='100%' border='0'>
349 <tr><td colspan='3' style='font-weight:bold;color:red;' align='left'>OUTGOING </td></tr>
350 <tr><td colspan='3' align='left'>$Lang::tr{'fwdfw pol text1'}</td></tr>
351 <tr><td colspan='3'><hr /></td></tr>
352 <tr><td width='15%' align='left'> <select name='POLICY1' style="width: 100px">
353 <option value='MODE1' $selected{'POLICY1'}{'MODE1'}>$Lang::tr{'fwdfw pol block'}</option>
354 <option value='MODE2' $selected{'POLICY1'}{'MODE2'}>$Lang::tr{'fwdfw pol allow'}</option></select>
355 <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /><input type='hidden' name='defpol' value='1'></td>
356END
357 print "</tr></table></form>";
358 &Header::closebox();
359
5595bc03
CS		 360&Header::closebigbox();
361&Header::closepage();
Peter's tree of IPFire 2.x