]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - html/cgi-bin/optionsfw.cgi
firewall: Make logging of conntrack INVALIDs configureable
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / optionsfw.cgi
1 #!/usr/bin/perl
2 ###############################################################################
3 # #
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2007-2022 IPFire Team <info@ipfire.org> #
6 # #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
11 # #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
16 # #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 # #
20 ###############################################################################
21
22 # enable only the following on debugging purpose
23 #use warnings;
24 #use CGI::Carp 'fatalsToBrowser';
25
26 require '/var/ipfire/general-functions.pl';
27 require "${General::swroot}/lang.pl";
28 require "${General::swroot}/header.pl";
29
30
31 my %checked =(); # Checkbox manipulations
32 our %settings=();
33 my %fwdfwsettings=();
34 my %configfwdfw=();
35 my %configoutgoingfw=();
36
37 my $configfwdfw = "${General::swroot}/firewall/config";
38 my $configoutgoing = "${General::swroot}/firewall/outgoing";
39 my $errormessage = '';
40 my $warnmessage = '';
41 my $filename = "${General::swroot}/optionsfw/settings";
42
43 &General::readhash("${General::swroot}/firewall/settings", \%fwdfwsettings);
44 &Header::showhttpheaders();
45
46 #Get GUI values
47 &Header::getcgihash(\%settings);
48 if ($settings{'ACTION'} eq $Lang::tr{'save'}) {
49 if ($settings{'defpol'} ne '1'){
50 $errormessage .= $Lang::tr{'new optionsfw later'};
51 &General::writehash($filename, \%settings); # Save good settings
52 &General::system("/usr/local/bin/firewallctrl");
53 }else{
54 if ($settings{'POLICY'} ne ''){
55 $fwdfwsettings{'POLICY'} = $settings{'POLICY'};
56 }
57 if ($settings{'POLICY1'} ne ''){
58 $fwdfwsettings{'POLICY1'} = $settings{'POLICY1'};
59 }
60 my $MODE = $fwdfwsettings{'POLICY'};
61 my $MODE1 = $fwdfwsettings{'POLICY1'};
62 %fwdfwsettings = ();
63 $fwdfwsettings{'POLICY'} = "$MODE";
64 $fwdfwsettings{'POLICY1'} = "$MODE1";
65 &General::writehash("${General::swroot}/firewall/settings", \%fwdfwsettings);
66 &General::readhash("${General::swroot}/firewall/settings", \%fwdfwsettings);
67 &General::system("/usr/local/bin/firewallctrl");
68 }
69 &General::readhash($filename, \%settings); # Load good settings
70 }
71
72 &Header::openpage($Lang::tr{'options fw'}, 1, '');
73 &Header::openbigbox('100%', 'left', '', $errormessage);
74 &General::readhash($filename, \%settings);
75 if ($errormessage) {
76 &Header::openbox('100%', 'left', $Lang::tr{'warning messages'});
77 print "<font color='red'>$errormessage&nbsp;</font>";
78 &Header::closebox();
79 }
80
81 # Set new defaults
82 if (!$settings{'MASQUERADE_GREEN'}) {
83 $settings{'MASQUERADE_GREEN'} = 'on';
84 }
85 if (!$settings{'MASQUERADE_ORANGE'}) {
86 $settings{'MASQUERADE_ORANGE'} = 'on';
87 }
88 if (!$settings{'MASQUERADE_BLUE'}) {
89 $settings{'MASQUERADE_BLUE'} = 'on';
90 }
91
92 $checked{'DROPNEWNOTSYN'}{'off'} = '';
93 $checked{'DROPNEWNOTSYN'}{'on'} = '';
94 $checked{'DROPNEWNOTSYN'}{$settings{'DROPNEWNOTSYN'}} = "checked='checked'";
95 $checked{'DROPINPUT'}{'off'} = '';
96 $checked{'DROPINPUT'}{'on'} = '';
97 $checked{'DROPINPUT'}{$settings{'DROPINPUT'}} = "checked='checked'";
98 $checked{'DROPFORWARD'}{'off'} = '';
99 $checked{'DROPFORWARD'}{'on'} = '';
100 $checked{'DROPFORWARD'}{$settings{'DROPFORWARD'}} = "checked='checked'";
101 $checked{'DROPOUTGOING'}{'off'} = '';
102 $checked{'DROPOUTGOING'}{'on'} = '';
103 $checked{'DROPOUTGOING'}{$settings{'DROPOUTGOING'}} = "checked='checked'";
104 $checked{'DROPPORTSCAN'}{'off'} = '';
105 $checked{'DROPPORTSCAN'}{'on'} = '';
106 $checked{'DROPPORTSCAN'}{$settings{'DROPPORTSCAN'}} = "checked='checked'";
107 $checked{'DROPWIRELESSINPUT'}{'off'} = '';
108 $checked{'DROPWIRELESSINPUT'}{'on'} = '';
109 $checked{'DROPWIRELESSINPUT'}{$settings{'DROPWIRELESSINPUT'}} = "checked='checked'";
110 $checked{'DROPWIRELESSFORWARD'}{'off'} = '';
111 $checked{'DROPWIRELESSFORWARD'}{'on'} = '';
112 $checked{'DROPWIRELESSFORWARD'}{$settings{'DROPWIRELESSFORWARD'}} = "checked='checked'";
113 $checked{'DROPSPOOFEDMARTIAN'}{'off'} = '';
114 $checked{'DROPSPOOFEDMARTIAN'}{'on'} = '';
115 $checked{'DROPSPOOFEDMARTIAN'}{$settings{'DROPSPOOFEDMARTIAN'}} = "checked='checked'";
116 $checked{'DROPHOSTILE'}{'off'} = '';
117 $checked{'DROPHOSTILE'}{'on'} = '';
118 $checked{'DROPHOSTILE'}{$settings{'DROPHOSTILE'}} = "checked='checked'";
119 $checked{'LOGDROPCTINVALID'}{'off'} = '';
120 $checked{'LOGDROPCTINVALID'}{'on'} = '';
121 $checked{'LOGDROPCTINVALID'}{$settings{'LOGDROPCTINVALID'}} = "checked='checked'";
122 $checked{'DROPPROXY'}{'off'} = '';
123 $checked{'DROPPROXY'}{'on'} = '';
124 $checked{'DROPPROXY'}{$settings{'DROPPROXY'}} = "checked='checked'";
125 $checked{'DROPSAMBA'}{'off'} = '';
126 $checked{'DROPSAMBA'}{'on'} = '';
127 $checked{'DROPSAMBA'}{$settings{'DROPSAMBA'}} = "checked='checked'";
128 $checked{'SHOWCOLORS'}{'off'} = '';
129 $checked{'SHOWCOLORS'}{'on'} = '';
130 $checked{'SHOWCOLORS'}{$settings{'SHOWCOLORS'}} = "checked='checked'";
131 $checked{'SHOWREMARK'}{'off'} = '';
132 $checked{'SHOWREMARK'}{'on'} = '';
133 $checked{'SHOWREMARK'}{$settings{'SHOWREMARK'}} = "checked='checked'";
134 $checked{'SHOWTABLES'}{'off'} = '';
135 $checked{'SHOWTABLES'}{'on'} = '';
136 $checked{'SHOWTABLES'}{$settings{'SHOWTABLES'}} = "checked='checked'";
137 $checked{'SHOWDROPDOWN'}{'off'} = '';
138 $checked{'SHOWDROPDOWN'}{'on'} = '';
139 $checked{'SHOWDROPDOWN'}{$settings{'SHOWDROPDOWN'}} = "checked='checked'";
140 $selected{'FWPOLICY'}{$settings{'FWPOLICY'}}= 'selected';
141 $selected{'FWPOLICY1'}{$settings{'FWPOLICY1'}}= 'selected';
142 $selected{'FWPOLICY2'}{$settings{'FWPOLICY2'}}= 'selected';
143 $selected{'MASQUERADE_GREEN'}{'off'} = '';
144 $selected{'MASQUERADE_GREEN'}{'on'} = '';
145 $selected{'MASQUERADE_GREEN'}{$settings{'MASQUERADE_GREEN'}} = 'selected="selected"';
146 $selected{'MASQUERADE_ORANGE'}{'off'} = '';
147 $selected{'MASQUERADE_ORANGE'}{'on'} = '';
148 $selected{'MASQUERADE_ORANGE'}{$settings{'MASQUERADE_ORANGE'}} = 'selected="selected"';
149 $selected{'MASQUERADE_BLUE'}{'off'} = '';
150 $selected{'MASQUERADE_BLUE'}{'on'} = '';
151 $selected{'MASQUERADE_BLUE'}{$settings{'MASQUERADE_BLUE'}} = 'selected="selected"';
152
153 &Header::openbox('100%', 'center',);
154 print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>";
155
156 print <<END;
157 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
158 <table width='95%' cellspacing='0'>
159 <tr bgcolor='$color{'color20'}'>
160 <td colspan='2' align='left'><b>$Lang::tr{'masquerading'}</b></td>
161 </tr>
162 <tr>
163 <td align='left' width='60%'>$Lang::tr{'masquerade green'}</td>
164 <td>
165 <select name='MASQUERADE_GREEN'>
166 <option value='on' $selected{'MASQUERADE_GREEN'}{'on'}>$Lang::tr{'masquerading enabled'}</option>
167 <option value='off' $selected{'MASQUERADE_GREEN'}{'off'}>$Lang::tr{'masquerading disabled'}</option>
168 </select>
169 </td>
170 </tr>
171 END
172
173 if (&Header::orange_used()) {
174 print <<END;
175 <tr>
176 <td align='left' width='60%'>$Lang::tr{'masquerade orange'}</td>
177 <td>
178 <select name='MASQUERADE_ORANGE'>
179 <option value='on' $selected{'MASQUERADE_ORANGE'}{'on'}>$Lang::tr{'masquerading enabled'}</option>
180 <option value='off' $selected{'MASQUERADE_ORANGE'}{'off'}>$Lang::tr{'masquerading disabled'}</option>
181 </select>
182 </td>
183 </tr>
184 END
185 }
186
187 if (&Header::blue_used()) {
188 print <<END;
189 <tr>
190 <td align='left' width='60%'>$Lang::tr{'masquerade blue'}</td>
191 <td>
192 <select name='MASQUERADE_BLUE'>
193 <option value='on' $selected{'MASQUERADE_BLUE'}{'on'}>$Lang::tr{'masquerading enabled'}</option>
194 <option value='off' $selected{'MASQUERADE_BLUE'}{'off'}>$Lang::tr{'masquerading disabled'}</option>
195 </select>
196 </td>
197 </tr>
198 END
199 }
200
201 print <<END
202 </table>
203
204 <br>
205
206 <table width='95%' cellspacing='0'>
207 <tr bgcolor='$color{'color20'}'>
208 <td colspan='2' align='left'><b>$Lang::tr{'fw logging'}</b></td>
209 </tr>
210 <tr>
211 <td align='left' width='60%'>$Lang::tr{'drop newnotsyn'}</td>
212 <td align='left'>
213 $Lang::tr{'on'} <input type='radio' name='DROPNEWNOTSYN' value='on' $checked{'DROPNEWNOTSYN'}{'on'} />/
214 <input type='radio' name='DROPNEWNOTSYN' value='off' $checked{'DROPNEWNOTSYN'}{'off'} /> $Lang::tr{'off'}
215 </td>
216 </tr>
217 <tr>
218 <td align='left' width='60%'>$Lang::tr{'log dropped conntrack invalids'}</td>
219 <td align='left'>
220 $Lang::tr{'on'} <input type='radio' name='LOGDROPCTINVALID' value='on' $checked{'LOGDROPCTINVALID'}{'on'} />/
221 <input type='radio' name='LOGDROPCTINVALID' value='off' $checked{'LOGDROPCTINVALID'}{'off'} /> $Lang::tr{'off'}
222 </td>
223 </tr>
224 <tr>
225 <td align='left' width='60%'>$Lang::tr{'drop input'}</td>
226 <td align='left'>
227 $Lang::tr{'on'} <input type='radio' name='DROPINPUT' value='on' $checked{'DROPINPUT'}{'on'} />/
228 <input type='radio' name='DROPINPUT' value='off' $checked{'DROPINPUT'}{'off'} /> $Lang::tr{'off'}
229 </td>
230 </tr>
231 <tr>
232 <td align='left' width='60%'>$Lang::tr{'drop forward'}</td>
233 <td align='left'>
234 $Lang::tr{'on'} <input type='radio' name='DROPFORWARD' value='on' $checked{'DROPFORWARD'}{'on'} />/
235 <input type='radio' name='DROPFORWARD' value='off' $checked{'DROPFORWARD'}{'off'} /> $Lang::tr{'off'}
236 </td>
237 </tr>
238 <tr>
239 <td align='left' width='60%'>$Lang::tr{'drop outgoing'}</td>
240 <td align='left'>
241 $Lang::tr{'on'} <input type='radio' name='DROPOUTGOING' value='on' $checked{'DROPOUTGOING'}{'on'} />/
242 <input type='radio' name='DROPOUTGOING' value='off' $checked{'DROPOUTGOING'}{'off'} /> $Lang::tr{'off'}
243 </td>
244 </tr>
245 <tr>
246 <td align='left' width='60%'>$Lang::tr{'drop portscan'}</td>
247 <td align='left'>
248 $Lang::tr{'on'} <input type='radio' name='DROPPORTSCAN' value='on' $checked{'DROPPORTSCAN'}{'on'} />/
249 <input type='radio' name='DROPPORTSCAN' value='off' $checked{'DROPPORTSCAN'}{'off'} /> $Lang::tr{'off'}
250 </td>
251 </tr>
252 <tr>
253 <td align='left' width='60%'>$Lang::tr{'drop wirelessinput'}</td>
254 <td align='left'>
255 $Lang::tr{'on'} <input type='radio' name='DROPWIRELESSINPUT' value='on' $checked{'DROPWIRELESSINPUT'}{'on'} />/
256 <input type='radio' name='DROPWIRELESSINPUT' value='off' $checked{'DROPWIRELESSINPUT'}{'off'} /> $Lang::tr{'off'}
257 </td>
258 </tr>
259 <tr>
260 <td align='left' width='60%'>$Lang::tr{'drop wirelessforward'}</td>
261 <td align='left'>
262 $Lang::tr{'on'} <input type='radio' name='DROPWIRELESSFORWARD' value='on' $checked{'DROPWIRELESSFORWARD'}{'on'} />/
263 <input type='radio' name='DROPWIRELESSFORWARD' value='off' $checked{'DROPWIRELESSFORWARD'}{'off'} /> $Lang::tr{'off'}
264 </td>
265 </tr>
266 <tr>
267 <td align='left' width='60%'>$Lang::tr{'drop spoofed martians'}</td>
268 <td align='left'>
269 $Lang::tr{'on'} <input type='radio' name='DROPSPOOFEDMARTIAN' value='on' $checked{'DROPSPOOFEDMARTIAN'}{'on'} />/
270 <input type='radio' name='DROPSPOOFEDMARTIAN' value='off' $checked{'DROPSPOOFEDMARTIAN'}{'off'} /> $Lang::tr{'off'}
271 </td>
272 </tr>
273 </table>
274 <br/>
275
276 <table width='95%' cellspacing='0'>
277 <tr bgcolor='$color{'color20'}'>
278 <td colspan='2' align='left'><b>$Lang::tr{'fw red'}</b></td>
279 </tr>
280 <tr>
281 <td align='left' width='60%'>$Lang::tr{'drop hostile'}</td>
282 <td align='left'>
283 $Lang::tr{'on'} <input type='radio' name='DROPHOSTILE' value='on' $checked{'DROPHOSTILE'}{'on'} />/
284 <input type='radio' name='DROPHOSTILE' value='off' $checked{'DROPHOSTILE'}{'off'} /> $Lang::tr{'off'}
285 </td>
286 </tr>
287 </table>
288 <br>
289
290 <table width='95%' cellspacing='0'>
291 <tr bgcolor='$color{'color20'}'><td colspan='2' align='left'><b>$Lang::tr{'fw blue'}</b></td></tr>
292 <tr><td align='left' width='60%'>$Lang::tr{'drop proxy'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='DROPPROXY' value='on' $checked{'DROPPROXY'}{'on'} />/
293 <input type='radio' name='DROPPROXY' value='off' $checked{'DROPPROXY'}{'off'} /> $Lang::tr{'off'}</td></tr>
294 <tr><td align='left' width='60%'>$Lang::tr{'drop samba'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='DROPSAMBA' value='on' $checked{'DROPSAMBA'}{'on'} />/
295 <input type='radio' name='DROPSAMBA' value='off' $checked{'DROPSAMBA'}{'off'} /> $Lang::tr{'off'}</td></tr>
296 </table>
297 <br>
298 <table width='95%' cellspacing='0'>
299 <tr bgcolor='$color{'color20'}'><td colspan='2' align='left'><b>$Lang::tr{'fw settings'}</b></td></tr>
300 <tr><td align='left' width='60%'>$Lang::tr{'fw settings color'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWCOLORS' value='on' $checked{'SHOWCOLORS'}{'on'} />/
301 <input type='radio' name='SHOWCOLORS' value='off' $checked{'SHOWCOLORS'}{'off'} /> $Lang::tr{'off'}</td></tr>
302 <tr><td align='left' width='60%'>$Lang::tr{'fw settings remark'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWREMARK' value='on' $checked{'SHOWREMARK'}{'on'} />/
303 <input type='radio' name='SHOWREMARK' value='off' $checked{'SHOWREMARK'}{'off'} /> $Lang::tr{'off'}</td></tr>
304 <tr><td align='left' width='60%'>$Lang::tr{'fw settings ruletable'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWTABLES' value='on' $checked{'SHOWTABLES'}{'on'} />/
305 <input type='radio' name='SHOWTABLES' value='off' $checked{'SHOWTABLES'}{'off'} /> $Lang::tr{'off'}</td></tr>
306 <tr><td align='left' width='60%'>$Lang::tr{'fw settings dropdown'}</td><td align='left'>$Lang::tr{'on'} <input type='radio' name='SHOWDROPDOWN' value='on' $checked{'SHOWDROPDOWN'}{'on'} />/
307 <input type='radio' name='SHOWDROPDOWN' value='off' $checked{'SHOWDROPDOWN'}{'off'} /> $Lang::tr{'off'}</td></tr>
308 </table>
309
310 <br />
311 <table width='95%' cellspacing='0'>
312 <tr bgcolor='$color{'color20'}'><td colspan='2' align='left'><b>$Lang::tr{'fw default drop'}</b></td></tr>
313 <tr><td align='left' width='60%'>$Lang::tr{'drop action'}</td><td><select name='FWPOLICY'>
314 <option value='DROP' $selected{'FWPOLICY'}{'DROP'}>DROP</option>
315 <option value='REJECT' $selected{'FWPOLICY'}{'REJECT'}>REJECT</option></select>
316 </td></tr>
317 <tr><td align='left' width='60%'>$Lang::tr{'drop action1'}</td><td><select name='FWPOLICY1'>
318 <option value='DROP' $selected{'FWPOLICY1'}{'DROP'}>DROP</option>
319 <option value='REJECT' $selected{'FWPOLICY1'}{'REJECT'}>REJECT</option></select>
320 </td></tr>
321 <tr><td align='left' width='60%'>$Lang::tr{'drop action2'}</td><td><select name='FWPOLICY2'>
322 <option value='DROP' $selected{'FWPOLICY2'}{'DROP'}>DROP</option>
323 <option value='REJECT' $selected{'FWPOLICY2'}{'REJECT'}>REJECT</option></select>
324 </td></tr>
325 </table>
326
327 <br />
328 <table width='100%' cellspacing='0'>
329 <tr><td align='right'><form method='post' action='$ENV{'SCRIPT_NAME'}'>
330 <input type='submit' name='ACTION' value='$Lang::tr{'save'}' />
331 </form></td></tr>
332 </table>
333 </form>
334 END
335 ;
336 &Header::closebox();
337
338 &Header::openbox('100%', 'center', $Lang::tr{'fwdfw pol title'});
339 if ($fwdfwsettings{'POLICY'} eq 'MODE1'){ $selected{'POLICY'}{'MODE1'} = 'selected'; } else { $selected{'POLICY'}{'MODE1'} = ''; }
340 if ($fwdfwsettings{'POLICY'} eq 'MODE2'){ $selected{'POLICY'}{'MODE2'} = 'selected'; } else { $selected{'POLICY'}{'MODE2'} = ''; }
341 if ($fwdfwsettings{'POLICY1'} eq 'MODE1'){ $selected{'POLICY1'}{'MODE1'} = 'selected'; } else { $selected{'POLICY1'}{'MODE1'} = ''; }
342 if ($fwdfwsettings{'POLICY1'} eq 'MODE2'){ $selected{'POLICY1'}{'MODE2'} = 'selected'; } else { $selected{'POLICY1'}{'MODE2'} = ''; }
343 print <<END;
344 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
345 <table width='100%' border='0'>
346 <tr><td colspan='3' style='font-weight:bold;color:red;' align='left'>FORWARD </td></tr>
347 <tr><td colspan='3' align='left'>$Lang::tr{'fwdfw pol text'}</td></tr>
348 <tr><td colspan='3'><hr /></td></tr>
349 <tr><td width='15%' align='left'> <select name='POLICY' style="width: 100px">
350 <option value='MODE1' $selected{'POLICY'}{'MODE1'}>$Lang::tr{'fwdfw pol block'}</option>
351 <option value='MODE2' $selected{'POLICY'}{'MODE2'}>$Lang::tr{'fwdfw pol allow'}</option></select>
352 <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /><input type='hidden' name='defpol' value='1'></td>
353 END
354 print "</tr></table></form>";
355 print"<br><br>";
356 print <<END;
357 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
358 <table width='100%' border='0'>
359 <tr><td colspan='3' style='font-weight:bold;color:red;' align='left'>OUTGOING </td></tr>
360 <tr><td colspan='3' align='left'>$Lang::tr{'fwdfw pol text1'}</td></tr>
361 <tr><td colspan='3'><hr /></td></tr>
362 <tr><td width='15%' align='left'> <select name='POLICY1' style="width: 100px">
363 <option value='MODE1' $selected{'POLICY1'}{'MODE1'}>$Lang::tr{'fwdfw pol block'}</option>
364 <option value='MODE2' $selected{'POLICY1'}{'MODE2'}>$Lang::tr{'fwdfw pol allow'}</option></select>
365 <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /><input type='hidden' name='defpol' value='1'></td>
366 END
367 print "</tr></table></form>";
368 &Header::closebox();
369
370 &Header::closebigbox();
371 &Header::closepage();