[people/pmueller/ipfire-2.x.git] / html / cgi-bin / aliases.cgi

#!/usr/bin/perl
###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2007  Michael Tremer & Christian Schmidt                      #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################
#
# this cgi is base on IPCop CGI - aliases.cgi
#

# to fully troubleshot your code, uncomment diagnostics, Carp and cluck lines
#use diagnostics; # need to add the file /usr/lib/perl5/5.8.x/pods/perldiag.pod before to work
# next look at /var/log/httpd/error_log , http://www.perl.com/pub/a/2002/05/07/mod_perl.html may help
#use warnings;
use strict;
#use Carp ();
#local $SIG{__WARN__} = \&Carp::cluck;

require '/var/ipfire/general-functions.pl';	# replace /var/ipcop with /var/ipcop in case of manual install
require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";
require "${General::swroot}/ids-functions.pl";

my $configfwdfw		= "${General::swroot}/firewall/config";
my $configinput		= "${General::swroot}/firewall/input";
my $configoutgoing	= "${General::swroot}/firewall/outgoing";
my %input=();
my %forward=();
my %output=();

#workaround to suppress a warning when a variable is used only once
my @dummy = ( ${Header::colouryellow} );
   @dummy = ( ${Header::table1colour} );
   @dummy = ( ${Header::table2colour} );
undef (@dummy);

# Files used
my $setting = "${General::swroot}/ethernet/settings";
our $datafile = "${General::swroot}/ethernet/aliases";


our %settings=();
#Settings1

#Settings2 for editing the multi-line list
#Must not be saved !
$settings{'IP'} = '';
$settings{'ENABLED'} = 'off';		# Every check box must be set to off
$settings{'NAME'} = '';
my @nosaved=('IP','ENABLED','NAME');	# List here ALL setting2 fields. Mandatory
    
$settings{'ACTION'} = '';		# add/edit/remove
$settings{'KEY1'} = '';			# point record for ACTION

#Define each field that can be used to sort columns
my $sortstring='^IP|^NAME';
my $errormessage = '';
my $warnmessage = '';

&Header::showhttpheaders();

# Read needed Ipcop netsettings
my %netsettings=();
$netsettings{'SORT_ALIASES'} = 'NAME'; 	# default sort
&General::readhash($setting, \%netsettings);

#Get GUI values
&Header::getcgihash(\%settings);

# Load multiline data
our @current = ();
if (open(FILE, "$datafile")) {
    @current = <FILE>;
    close (FILE);
}

#
# Check Settings1 first because they are needed before working on @current
#
# Remove if no Setting1 needed
#
if ($settings{'ACTION'} eq $Lang::tr{'save'}) {
    
    #
    #Validate static Settings1 here
    #
    unless ($errormessage) {					# Everything is ok, save settings
	#map (delete ($settings{$_}) ,(@nosaved,'ACTION','KEY1'));# Must never be saved 
	#&General::writehash($setting, \%settings);		# Save good settings
	#$settings{'ACTION'} = $Lang::tr{'save'};		# Recreate  'ACTION'
	#map ($settings{$_}= '',(@nosaved,'KEY1'));		# and reinit var to empty
	
	# Rebuild configuration file if needed
	&BuildConfiguration;

	# Handle suricata related actions.
	&HandleSuricata();
    }

    ERROR:						# Leave the faulty field untouched
} else {
    #&General::readhash($setting, \%settings);  	# Get saved settings and reset to good if needed
}

## Now manipulate the multi-line list with Settings2
# Basic actions are:
#	toggle the check box
#	add/update a new line
#	begin editing a line
#	remove a line


# Toggle enable/disable field.  Field is in second position
if ($settings{'ACTION'} eq $Lang::tr{'toggle enable disable'}) {
    #move out new line
    chomp(@current[$settings{'KEY1'}]);
    my @temp = split(/\,/,@current[$settings{'KEY1'}]);
    $temp[1] = $temp[1] eq 'on' ? 'off' : 'on';		# Toggle the field
    $temp[2] = '' if ( $temp[2] eq '' );
    @current[$settings{'KEY1'}] = join (',',@temp)."\n";
    $settings{'KEY1'} = ''; 				# End edit mode
    
    &General::log($Lang::tr{'ip alias changed'});
    
    #Save current
    open(FILE, ">$datafile") or die 'Unable to open aliases file.';
    print FILE @current;
    close(FILE);
	
    # Rebuild configuration file
    &BuildConfiguration;

    # Handle Suricata related actions.
    &HandleSuricata();
}

if ($settings{'ACTION'} eq $Lang::tr{'add'}) {
    # Validate inputs
    if (! &General::validip($settings{'IP'})) {$errormessage = "invalid ip"};
    $settings{'NAME'} = &Header::cleanhtml($settings{'NAME'});

    # Make sure we haven't duplicated an alias or RED
    my $spacer='';
    if ($settings{'IP'} eq $netsettings{'RED_ADDRESS'}) {
	$errormessage = $Lang::tr{'duplicate ip'} . ' (RED)';
        $spacer=" & ";
    }
    #Check if we have an emtpy name
    if (!$settings{'NAME'}){
		$errormessage=$Lang::tr{'fwhost err name1'};
	}elsif(! &General::validfqdn($settings{'NAME'}) && ! &General::validhostname($settings{'NAME'})){
		$errormessage=$Lang::tr{'invalid hostname'};
	}
    my $idx=0;
    foreach my $line (@current) {
        chomp ($line);
        my @temp = split (/\,/, $line);
        if ( ($settings{'KEY1'} eq '')||(($settings{'KEY1'} ne '') && ($settings{'KEY1'} != $idx))) { # update
	    if ($temp[0] eq $settings{'IP'}) {
	        $errormessage .= $spacer.$Lang::tr{'duplicate ip'};
	        $spacer=" & ";
	    }
	    if ($temp[2] eq $settings{'NAME'} && $temp[2] ne '') {
		$errormessage .= $spacer.$Lang::tr{'duplicate name'};
		$spacer=" & ";
		}
	}
	$idx++;
    }
	#Update firewallrules if aliasname is changed
	if ($settings{'OLDNAME'} ne $settings {'NAME'}){
		&General::readhasharray("$configfwdfw", \%forward);
		&General::readhasharray("$configinput", \%input);
		&General::readhasharray("$configoutgoing", \%output);
		#Check FORWARD
		foreach my $forwardkey (sort keys %forward){
			if ($forward{$forwardkey}[29] eq $settings{'OLDNAME'}){
				$forward{$forwardkey}[29] = $settings {'NAME'};
			}
		}
		&General::writehasharray($configfwdfw, \%forward);
		#Check INPUT
		foreach my $inputkey (sort keys %input){
			if ($input{$inputkey}[6] eq $settings{'OLDNAME'}){
				$input{$inputkey}[6] = $settings {'NAME'};
			}
		}
		&General::writehasharray($configinput, \%input);
		#Check OUTPUT
		foreach my $outputkey (sort keys %output){
			if ($output{$outputkey}[4] eq $settings{'OLDNAME'}){
				$output{$outputkey}[4] = $settings {'NAME'};
			}
		}
		&General::writehasharray($configoutgoing, \%output);
		&General::firewall_config_changed;
	}
	#If Alias IP has changed, set firewall_config_changed
	if($settings{'OLDIP'} ne $settings{'IP'} && $settings{'OLDIP'}){
		&General::firewall_config_changed;
	}
    unless ($errormessage) {
	if ($settings{'KEY1'} eq '') { #add or edit ?
	    unshift (@current, "$settings{'IP'},$settings{'ENABLED'},$settings{'NAME'}\n");
	    &General::log($Lang::tr{'ip alias added'});
	} else {
	    @current[$settings{'KEY1'}] = "$settings{'IP'},$settings{'ENABLED'},$settings{'NAME'}\n";
	    $settings{'KEY1'} = '';       # End edit mode
	    &General::log($Lang::tr{'ip alias changed'});
	}

	# Write changes to config file.
	&SortDataFile;				# sort newly added/modified entry

	&BuildConfiguration;			# then re-build conf which use new data

	# Handle Suricata related actions.
	&HandleSuricata();
	
##
## if entering data line is repetitive, choose here to not erase fields between each addition
##
	map ($settings{$_}='' ,@nosaved);	# Clear fields
    }
}

if ($settings{'ACTION'} eq $Lang::tr{'edit'}) {
    #move out new line
    my $line = @current[$settings{'KEY1'}];	# KEY1 is the index in current
    chomp($line);
    my @temp = split(/\,/, $line);

##
## move data fields to Setting2 for edition
##
    $settings{'IP'}=$temp[0];			# Prepare the screen for editing
    $settings{'ENABLED'}=$temp[1];
    $settings{'NAME'}=$temp[2];
}

if ($settings{'ACTION'} eq $Lang::tr{'remove'}) {
    splice (@current,$settings{'KEY1'},1);		# Delete line 
    open(FILE, ">$datafile") or die 'Unable to open aliases file.';
    print FILE @current;
    close(FILE);
    $settings{'KEY1'} = '';				# End remove mode
    &General::log($Lang::tr{'ip alias removed'});

    &BuildConfiguration;				# then re-build conf which use new data

    # Handle Suricata related actions.
    &HandleSuricata();
}


##  Check if sorting is asked
# If same column clicked, reverse the sort.
if ($ENV{'QUERY_STRING'} =~ /$sortstring/ ) {
    my $newsort=$ENV{'QUERY_STRING'};
    my $actual=$netsettings{'SORT_ALIASES'};
    #Reverse actual sort ?
    if ($actual =~ $newsort) {
	my $Rev='';
	if ($actual !~ 'Rev') {
	    $Rev='Rev';
	}
	$newsort.=$Rev;
    }
    $netsettings{'SORT_ALIASES'}=$newsort;
    &General::writehash($setting, \%netsettings);
    &SortDataFile;
    $settings{'ACTION'} = 'SORT';			# Recreate  'ACTION'
}

# Default initial value
if ($settings{'ACTION'} eq '' ) { # First launch from GUI
    $settings{'ENABLED'} ='on';
}
    
&Header::openpage($Lang::tr{'external aliases configuration'}, 1, '');
&Header::openbigbox('100%', 'left', '', $errormessage);
my %checked =();     # Checkbox manipulations

if ($errormessage) {
    &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
    print "$errormessage&nbsp;";
    &Header::closebox();
}
unless (( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ ) && ($netsettings{'RED_TYPE'} eq 'STATIC'))
{
    &Header::openbox('100%', 'left', $Lang::tr{'capswarning'});
    print <<END
    <table style='width:100%;'>
    <tr>
    <td class='boldbase' style='color:${Header::colourred};'><b>$Lang::tr{'aliases not active'}</b></td>
    </tr>
    </table>
END
;
    &Header::closebox();
}
									
#
# Second check box is for editing the list
#
$checked{'ENABLED'}{'on'} = ($settings{'ENABLED'} eq 'on') ? "checked='checked'" : '' ;

my $buttontext = $Lang::tr{'add'};
if ($settings{'KEY1'} ne '') {
    $buttontext = $Lang::tr{'update'};
    &Header::openbox('100%', 'left', $Lang::tr{'edit an existing alias'});
} else {
    &Header::openbox('100%', 'left', $Lang::tr{'add new alias'});
}

#Edited line number (KEY1) passed until cleared by 'save' or 'remove' or 'new sort order'
print <<END
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
<input type='hidden' name='KEY1' value='$settings{'KEY1'}' />
<input type='hidden' name='OLDNAME' value='$settings{'NAME'}' />
<input type='hidden' name='OLDIP' value='$settings{'IP'}' />
<table style='width:100%;'>
<tr>
<td class='base' style='color:${Header::colourred};'>$Lang::tr{'name'}:</td>
<td><input type='text' name='NAME' value='$settings{'NAME'}' size='32' /></td>
<td class='base' style='text-align:right; color:${Header::colourred};'>$Lang::tr{'alias ip'}:&nbsp;</td>
<td><input type='text' name='IP' value='$settings{'IP'}' size='16' /></td>
<td class='base' style='text-align:right;'>$Lang::tr{'enabled'}&nbsp;</td>
<td><input type='checkbox' name='ENABLED' $checked{'ENABLED'}{'on'} /></td>
</tr>
</table>
<br>
<hr />
<table style='width:100%;'>
<tr>
    <td style='text-align:right;'><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /><input type='submit' name='SUBMIT' value='$buttontext' /></td>
</tr>
</table>
</form>
END
;
&Header::closebox();

# Add visual indicators to column headings to show sort order - EO
my $sortarrow1 = '';
my $sortarrow2 = '';

if ($netsettings{'SORT_ALIASES'} eq 'NAMERev') {
	$sortarrow1 = $Header::sortdn;
} elsif ($netsettings{'SORT_ALIASES'} eq 'NAME') {
	$sortarrow1 = $Header::sortup;
} elsif ($netsettings{'SORT_ALIASES'} eq 'IPRev') {
	$sortarrow2 = $Header::sortdn;
} else {
	$sortarrow2 = $Header::sortup;
}

#
# Third box shows the list, in columns
#
# Columns headers may content a link. In this case it must be named in $sortstring
#
&Header::openbox('100%', 'left', $Lang::tr{'current aliases'});
print <<END
<table class='tbl' style='width:100%;'>
<tr>
    <th style='width:55%; text-align:center;'><a href='$ENV{'SCRIPT_NAME'}?NAME'><b>$Lang::tr{'name'}</b></a> $sortarrow1</th>
    <th style='width:45%; text-align:center;'><a href='$ENV{'SCRIPT_NAME'}?IP'><b>$Lang::tr{'alias ip'}</b></a> $sortarrow2</th>
    <th colspan='3' class='boldbase' style='width:5%; text-align:center;'><b>$Lang::tr{'action'}</b></th>
</tr>
END
;

#
# Print each line of @current list
#
# each data line is splitted into @temp.
#

my $key = 0;
my $col="";
foreach my $line (@current) {
    chomp($line);
    my @temp = split(/\,/,$line);

    #Choose icon for checkbox
    my $gif = '';
    my $gdesc = '';
    if ($temp[1] eq "on") {
	$gif = 'on.gif';
	$gdesc = $Lang::tr{'click to disable'};
    } else {
	$gif = 'off.gif';
	$gdesc = $Lang::tr{'click to enable'}; 
    }

    #Colorize each line
    if ($settings{'KEY1'} eq $key) {
        $col="background-color:${Header::colouryellow};";
    } elsif ($key % 2) {
        $col="background-color:${Header::table2colour};";
    } else {
        $col="background-color:${Header::table1colour};";
    }
    print "<tr style='$col'>";

    print <<END
<td style='text-align:center; $col'>$temp[2]</td>
<td style='text-align:center; $col'>$temp[0]</td>

<td style='text-align:center; $col'>
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
<input type='hidden' name='ACTION' value='$Lang::tr{'toggle enable disable'}' />
<input type='image' name='$Lang::tr{'toggle enable disable'}' src='/images/$gif' alt='$gdesc' title='$gdesc' />
<input type='hidden' name='KEY1' value='$key' />
</form>
</td>

<td style='text-align:center; $col'>
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
<input type='hidden' name='ACTION' value='$Lang::tr{'edit'}' />
<input type='image' name='$Lang::tr{'edit'}' src='/images/edit.gif' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' />
<input type='hidden' name='KEY1' value='$key' />
</form>
</td>

<td style='text-align:center; $col'>
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
<input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
<input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' alt='$Lang::tr{'remove'}' title='$Lang::tr{'remove'}' />
<input type='hidden' name='KEY1' value='$key' />
</form>
</td>
</tr>
END
;
    $key++;
}
print "</table>";

# If table contains entries, print 'Key to action icons'
if ($key) {
print <<END
<table>
<tr>
    <td class='boldbase'>&nbsp;<b>$Lang::tr{'legend'}:&nbsp;</b></td>
    <td><img src='/images/on.gif' alt='$Lang::tr{'click to disable'}' /></td>
    <td class='base'>$Lang::tr{'click to disable'}</td>
    <td>&nbsp;&nbsp;</td>
    <td><img src='/images/off.gif' alt='$Lang::tr{'click to enable'}' /></td>
    <td class='base'>$Lang::tr{'click to enable'}</td>
    <td>&nbsp;&nbsp;</td>
    <td><img src='/images/edit.gif' alt='$Lang::tr{'edit'}' /></td>
    <td class='base'>$Lang::tr{'edit'}</td>
    <td>&nbsp;&nbsp;</td>
    <td><img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
    <td class='base'>$Lang::tr{'remove'}</td>
</tr>
</table>
END
;
}

&Header::closebox();
&Header::closebigbox();
&Header::closepage();

## Ouf it's the end !


# Sort the "current" array according to choices
sub SortDataFile
{
    our %entries = ();
    
    # Sort pair of record received in $a $b special vars.
    # When IP is specified use numeric sort else alpha.
    # If sortname ends with 'Rev', do reverse sort.
    #
    sub fixedleasesort {
	my $qs='';             # The sort field specified minus 'Rev'
	if (rindex ($netsettings{'SORT_ALIASES'},'Rev') != -1) {
	    $qs=substr ($netsettings{'SORT_ALIASES'},0,length($netsettings{'SORT_ALIASES'})-3);
	    if ($qs eq 'IP') {
		my @a = split(/\./,$entries{$a}->{$qs});
		my @b = split(/\./,$entries{$b}->{$qs});
		($b[0]<=>$a[0]) ||
		($b[1]<=>$a[1]) ||
		($b[2]<=>$a[2]) ||
		($b[3]<=>$a[3]);
	    } else {
		$entries{$b}->{$qs} cmp $entries{$a}->{$qs};
	    }
	} else { #not reverse
	    $qs=$netsettings{'SORT_ALIASES'};
	    if ($qs eq 'IP') {
		my @a = split(/\./,$entries{$a}->{$qs});
		my @b = split(/\./,$entries{$b}->{$qs});
		($a[0]<=>$b[0]) ||
		($a[1]<=>$b[1]) ||
		($a[2]<=>$b[2]) ||
		($a[3]<=>$b[3]);
	    } else {
		$entries{$a}->{$qs} cmp $entries{$b}->{$qs};
	    }
	}
    }

    #Use an associative array (%entries)
    my $key = 0;
    foreach my $line (@current) {
	chomp( $line); #remove newline because can be on field 5 or 6 (addition of REMARK)
	my @temp = split (',',$line);
	
	# Build a pair 'Field Name',value for each of the data dataline.
	# Each SORTABLE field must have is pair.
	# Other data fields (non sortable) can be grouped in one
	
	# Exemple
	# F1,F2,F3,F4,F5       only F1 F2 for sorting
	# my @record = ('KEY',$key++,
	#		'F1',$temp[0],
	#		'F2',$temp[1],
	#		'DATA',join(',',@temp[2..4])	);  #group remainning values, with separator (,)
	
	# The KEY,key record permits doublons. If removed, then F1 becomes the key without doublon permitted.
	
	
	my @record = ('KEY',$key++,'IP',$temp[0],'ENABLED',$temp[1],'NAME',$temp[2]);
	my $record = {};                        	# create a reference to empty hash
	%{$record} = @record;                		# populate that hash with @record
	$entries{$record->{KEY}} = $record; 		# add this to a hash of hashes
    }
    
    open(FILE, ">$datafile") or die 'Unable to open aliases file.';

    # Each field value is printed , with the newline ! Don't forget separator and order of them.
    foreach my $entry (sort fixedleasesort keys %entries) {
	print FILE "$entries{$entry}->{IP},$entries{$entry}->{ENABLED},$entries{$entry}->{NAME}\n";
    }

    close(FILE);
    # Reload sorted  @current
    open (FILE, "$datafile");
    @current = <FILE>;
    close (FILE);
}

#						    
# Build the configuration file for application aliases
#
sub BuildConfiguration {
    # Restart service associated with this
    &General::system('/usr/local/bin/setaliases');
}

#
## Handle Suricata related actions.
#
sub HandleSuricata() {
	# Check if suricata is running.
	if(&IDS::ids_is_running()) {
		# Re-generate file which contains the HOME_NET declaration.
		&IDS::generate_home_net_file();

		# Call suricatactrl to perform a restart of suricata.
		&IDS::call_suricatactrl("restart");
	}
}
Commit	Line	Data
28b7d78a CS	1	#!/usr/bin/perl
	2	###############################################################################
	3	# #
	4	# IPFire.org - A linux based firewall #
	5	# Copyright (C) 2007 Michael Tremer & Christian Schmidt #
	6	# #
	7	# This program is free software: you can redistribute it and/or modify #
	8	# it under the terms of the GNU General Public License as published by #
	9	# the Free Software Foundation, either version 3 of the License, or #
	10	# (at your option) any later version. #
	11	# #
	12	# This program is distributed in the hope that it will be useful, #
	13	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	14	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	15	# GNU General Public License for more details. #
	16	# #
	17	# You should have received a copy of the GNU General Public License #
	18	# along with this program. If not, see <http://www.gnu.org/licenses/>. #
	19	# #
	20	###############################################################################
	21	#
	22	# this cgi is base on IPCop CGI - aliases.cgi
	23	#
	24
	25	# to fully troubleshot your code, uncomment diagnostics, Carp and cluck lines
	26	#use diagnostics; # need to add the file /usr/lib/perl5/5.8.x/pods/perldiag.pod before to work
	27	# next look at /var/log/httpd/error_log , http://www.perl.com/pub/a/2002/05/07/mod_perl.html may help
	28	#use warnings;
	29	use strict;
	30	#use Carp ();
	31	#local $SIG{__WARN__} = \&Carp::cluck;
	32
	33	require '/var/ipfire/general-functions.pl'; # replace /var/ipcop with /var/ipcop in case of manual install
	34	require "${General::swroot}/lang.pl";
	35	require "${General::swroot}/header.pl";
f6eb1a40	36	require "${General::swroot}/ids-functions.pl";
28b7d78a	37
747d030a AM	38	my $configfwdfw = "${General::swroot}/firewall/config";
	39	my $configinput = "${General::swroot}/firewall/input";
	40	my $configoutgoing = "${General::swroot}/firewall/outgoing";
	41	my %input=();
	42	my %forward=();
	43	my %output=();
	44
28b7d78a CS	45	#workaround to suppress a warning when a variable is used only once
	46	my @dummy = ( ${Header::colouryellow} );
	47	@dummy = ( ${Header::table1colour} );
	48	@dummy = ( ${Header::table2colour} );
	49	undef (@dummy);
	50
	51	# Files used
	52	my $setting = "${General::swroot}/ethernet/settings";
	53	our $datafile = "${General::swroot}/ethernet/aliases";
	54
	55
	56	our %settings=();
	57	#Settings1
	58
	59	#Settings2 for editing the multi-line list
	60	#Must not be saved !
	61	$settings{'IP'} = '';
	62	$settings{'ENABLED'} = 'off'; # Every check box must be set to off
	63	$settings{'NAME'} = '';
	64	my @nosaved=('IP','ENABLED','NAME'); # List here ALL setting2 fields. Mandatory
	65
	66	$settings{'ACTION'} = ''; # add/edit/remove
	67	$settings{'KEY1'} = ''; # point record for ACTION
	68
	69	#Define each field that can be used to sort columns
	70	my $sortstring='^IP\|^NAME';
	71	my $errormessage = '';
	72	my $warnmessage = '';
	73
	74	&Header::showhttpheaders();
	75
	76	# Read needed Ipcop netsettings
	77	my %netsettings=();
	78	$netsettings{'SORT_ALIASES'} = 'NAME'; # default sort
	79	&General::readhash($setting, \%netsettings);
	80
	81	#Get GUI values
	82	&Header::getcgihash(\%settings);
	83
	84	# Load multiline data
	85	our @current = ();
	86	if (open(FILE, "$datafile")) {
	87	@current = <FILE>;
	88	close (FILE);
	89	}
	90
	91	#
	92	# Check Settings1 first because they are needed before working on @current
	93	#
	94	# Remove if no Setting1 needed
	95	#
	96	if ($settings{'ACTION'} eq $Lang::tr{'save'}) {
	97
	98	#
	99	#Validate static Settings1 here
	100	#
28b7d78a CS	101	unless ($errormessage) { # Everything is ok, save settings
	102	#map (delete ($settings{$_}) ,(@nosaved,'ACTION','KEY1'));# Must never be saved
	103	#&General::writehash($setting, \%settings); # Save good settings
	104	#$settings{'ACTION'} = $Lang::tr{'save'}; # Recreate 'ACTION'
	105	#map ($settings{$_}= '',(@nosaved,'KEY1')); # and reinit var to empty
	106
	107	# Rebuild configuration file if needed
	108	&BuildConfiguration;
f6eb1a40 SS	109
	110	# Handle suricata related actions.
	111	&HandleSuricata();
28b7d78a CS	112	}
	113
	114	ERROR: # Leave the faulty field untouched
	115	} else {
	116	#&General::readhash($setting, \%settings); # Get saved settings and reset to good if needed
	117	}
	118
	119	## Now manipulate the multi-line list with Settings2
	120	# Basic actions are:
	121	# toggle the check box
	122	# add/update a new line
	123	# begin editing a line
	124	# remove a line
	125
	126
	127	# Toggle enable/disable field. Field is in second position
	128	if ($settings{'ACTION'} eq $Lang::tr{'toggle enable disable'}) {
	129	#move out new line
	130	chomp(@current[$settings{'KEY1'}]);
	131	my @temp = split(/\,/,@current[$settings{'KEY1'}]);
	132	$temp[1] = $temp[1] eq 'on' ? 'off' : 'on'; # Toggle the field
	133	$temp[2] = '' if ( $temp[2] eq '' );
	134	@current[$settings{'KEY1'}] = join (',',@temp)."\n";
	135	$settings{'KEY1'} = ''; # End edit mode
	136
	137	&General::log($Lang::tr{'ip alias changed'});
	138
	139	#Save current
	140	open(FILE, ">$datafile") or die 'Unable to open aliases file.';
	141	print FILE @current;
	142	close(FILE);
	143
	144	# Rebuild configuration file
	145	&BuildConfiguration;
f6eb1a40 SS	146
	147	# Handle Suricata related actions.
	148	&HandleSuricata();
28b7d78a CS	149	}
	150
	151	if ($settings{'ACTION'} eq $Lang::tr{'add'}) {
	152	# Validate inputs
	153	if (! &General::validip($settings{'IP'})) {$errormessage = "invalid ip"};
	154	$settings{'NAME'} = &Header::cleanhtml($settings{'NAME'});
	155
	156	# Make sure we haven't duplicated an alias or RED
	157	my $spacer='';
	158	if ($settings{'IP'} eq $netsettings{'RED_ADDRESS'}) {
	159	$errormessage = $Lang::tr{'duplicate ip'} . ' (RED)';
	160	$spacer=" & ";
	161	}
747d030a AM	162	#Check if we have an emtpy name
	163	if (!$settings{'NAME'}){
	164	$errormessage=$Lang::tr{'fwhost err name1'};
	165	}elsif(! &General::validfqdn($settings{'NAME'}) && ! &General::validhostname($settings{'NAME'})){
	166	$errormessage=$Lang::tr{'invalid hostname'};
	167	}
28b7d78a CS	168	my $idx=0;
	169	foreach my $line (@current) {
	170	chomp ($line);
	171	my @temp = split (/\,/, $line);
	172	if ( ($settings{'KEY1'} eq '')\|\|(($settings{'KEY1'} ne '') && ($settings{'KEY1'} != $idx))) { # update
	173	if ($temp[0] eq $settings{'IP'}) {
	174	$errormessage .= $spacer.$Lang::tr{'duplicate ip'};
	175	$spacer=" & ";
	176	}
	177	if ($temp[2] eq $settings{'NAME'} && $temp[2] ne '') {
	178	$errormessage .= $spacer.$Lang::tr{'duplicate name'};
	179	$spacer=" & ";
	180	}
	181	}
	182	$idx++;
	183	}
747d030a AM	184	#Update firewallrules if aliasname is changed
	185	if ($settings{'OLDNAME'} ne $settings {'NAME'}){
	186	&General::readhasharray("$configfwdfw", \%forward);
	187	&General::readhasharray("$configinput", \%input);
	188	&General::readhasharray("$configoutgoing", \%output);
	189	#Check FORWARD
	190	foreach my $forwardkey (sort keys %forward){
	191	if ($forward{$forwardkey}[29] eq $settings{'OLDNAME'}){
	192	$forward{$forwardkey}[29] = $settings {'NAME'};
	193	}
	194	}
	195	&General::writehasharray($configfwdfw, \%forward);
	196	#Check INPUT
	197	foreach my $inputkey (sort keys %input){
	198	if ($input{$inputkey}[6] eq $settings{'OLDNAME'}){
	199	$input{$inputkey}[6] = $settings {'NAME'};
	200	}
	201	}
	202	&General::writehasharray($configinput, \%input);
	203	#Check OUTPUT
	204	foreach my $outputkey (sort keys %output){
	205	if ($output{$outputkey}[4] eq $settings{'OLDNAME'}){
	206	$output{$outputkey}[4] = $settings {'NAME'};
	207	}
	208	}
	209	&General::writehasharray($configoutgoing, \%output);
	210	&General::firewall_config_changed;
	211	}
	212	#If Alias IP has changed, set firewall_config_changed
	213	if($settings{'OLDIP'} ne $settings{'IP'} && $settings{'OLDIP'}){
	214	&General::firewall_config_changed;
	215	}
28b7d78a CS	216	unless ($errormessage) {
	217	if ($settings{'KEY1'} eq '') { #add or edit ?
	218	unshift (@current, "$settings{'IP'},$settings{'ENABLED'},$settings{'NAME'}\n");
	219	&General::log($Lang::tr{'ip alias added'});
	220	} else {
	221	@current[$settings{'KEY1'}] = "$settings{'IP'},$settings{'ENABLED'},$settings{'NAME'}\n";
	222	$settings{'KEY1'} = ''; # End edit mode
	223	&General::log($Lang::tr{'ip alias changed'});
	224	}
	225
	226	# Write changes to config file.
	227	&SortDataFile; # sort newly added/modified entry
	228
	229	&BuildConfiguration; # then re-build conf which use new data
f6eb1a40 SS	230
	231	# Handle Suricata related actions.
	232	&HandleSuricata();
28b7d78a CS	233
	234	##
	235	## if entering data line is repetitive, choose here to not erase fields between each addition
	236	##
	237	map ($settings{$_}='' ,@nosaved); # Clear fields
	238	}
	239	}
	240
	241	if ($settings{'ACTION'} eq $Lang::tr{'edit'}) {
	242	#move out new line
	243	my $line = @current[$settings{'KEY1'}]; # KEY1 is the index in current
	244	chomp($line);
	245	my @temp = split(/\,/, $line);
	246
	247	##
	248	## move data fields to Setting2 for edition
	249	##
	250	$settings{'IP'}=$temp[0]; # Prepare the screen for editing
	251	$settings{'ENABLED'}=$temp[1];
	252	$settings{'NAME'}=$temp[2];
	253	}
	254
	255	if ($settings{'ACTION'} eq $Lang::tr{'remove'}) {
	256	splice (@current,$settings{'KEY1'},1); # Delete line
	257	open(FILE, ">$datafile") or die 'Unable to open aliases file.';
	258	print FILE @current;
	259	close(FILE);
	260	$settings{'KEY1'} = ''; # End remove mode
	261	&General::log($Lang::tr{'ip alias removed'});
	262
	263	&BuildConfiguration; # then re-build conf which use new data
f6eb1a40 SS	264
	265	# Handle Suricata related actions.
	266	&HandleSuricata();
28b7d78a CS	267	}
	268
	269
	270
	271	## Check if sorting is asked
	272	# If same column clicked, reverse the sort.
	273	if ($ENV{'QUERY_STRING'} =~ /$sortstring/ ) {
	274	my $newsort=$ENV{'QUERY_STRING'};
	275	my $actual=$netsettings{'SORT_ALIASES'};
	276	#Reverse actual sort ?
	277	if ($actual =~ $newsort) {
	278	my $Rev='';
	279	if ($actual !~ 'Rev') {
	280	$Rev='Rev';
	281	}
	282	$newsort.=$Rev;
	283	}
	284	$netsettings{'SORT_ALIASES'}=$newsort;
	285	&General::writehash($setting, \%netsettings);
	286	&SortDataFile;
	287	$settings{'ACTION'} = 'SORT'; # Recreate 'ACTION'
	288	}
	289
	290	# Default initial value
	291	if ($settings{'ACTION'} eq '' ) { # First launch from GUI
	292	$settings{'ENABLED'} ='on';
	293	}
	294
	295	&Header::openpage($Lang::tr{'external aliases configuration'}, 1, '');
	296	&Header::openbigbox('100%', 'left', '', $errormessage);
	297	my %checked =(); # Checkbox manipulations
	298
	299	if ($errormessage) {
	300	&Header::openbox('100%', 'left', $Lang::tr{'error messages'});
d7fe5d79	301	print "$errormessage ";
28b7d78a CS	302	&Header::closebox();
	303	}
	304	unless (( $netsettings{'CONFIG_TYPE'} =~ /^(1\|2\|3\|4)$/ ) && ($netsettings{'RED_TYPE'} eq 'STATIC'))
	305	{
	306	&Header::openbox('100%', 'left', $Lang::tr{'capswarning'});
	307	print <<END
d7fe5d79	308	<table style='width:100%;'>
28b7d78a	309	<tr>
d7fe5d79	310	<td class='boldbase' style='color:${Header::colourred};'><b>$Lang::tr{'aliases not active'}</b></td>
28b7d78a CS	311	</tr>
	312	</table>
	313	END
	314	;
	315	&Header::closebox();
	316	}
	317
	318	#
	319	# Second check box is for editing the list
	320	#
	321	$checked{'ENABLED'}{'on'} = ($settings{'ENABLED'} eq 'on') ? "checked='checked'" : '' ;
	322
	323	my $buttontext = $Lang::tr{'add'};
	324	if ($settings{'KEY1'} ne '') {
	325	$buttontext = $Lang::tr{'update'};
	326	&Header::openbox('100%', 'left', $Lang::tr{'edit an existing alias'});
	327	} else {
	328	&Header::openbox('100%', 'left', $Lang::tr{'add new alias'});
	329	}
	330
	331	#Edited line number (KEY1) passed until cleared by 'save' or 'remove' or 'new sort order'
	332	print <<END
	333	<form method='post' action='$ENV{'SCRIPT_NAME'}'>
	334	<input type='hidden' name='KEY1' value='$settings{'KEY1'}' />
747d030a AM	335	<input type='hidden' name='OLDNAME' value='$settings{'NAME'}' />
747d030a AM	336	<input type='hidden' name='OLDIP' value='$settings{'IP'}' />
d7fe5d79	337	<table style='width:100%;'>
28b7d78a	338	<tr>
48fde0b6	339	<td class='base' style='color:${Header::colourred};'>$Lang::tr{'name'}:</td>
28b7d78a	340	<td><input type='text' name='NAME' value='$settings{'NAME'}' size='32' /></td>
d7fe5d79	341	<td class='base' style='text-align:right; color:${Header::colourred};'>$Lang::tr{'alias ip'}: </td>
28b7d78a	342	<td><input type='text' name='IP' value='$settings{'IP'}' size='16' /></td>
d7fe5d79	343	<td class='base' style='text-align:right;'>$Lang::tr{'enabled'} </td>
28b7d78a CS	344	<td><input type='checkbox' name='ENABLED' $checked{'ENABLED'}{'on'} /></td>
	345	</tr>
	346	</table>
bfe4320c	347	<br>
28b7d78a	348	<hr />
d7fe5d79	349	<table style='width:100%;'>
28b7d78a	350	<tr>
d7fe5d79	351	<td style='text-align:right;'><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /><input type='submit' name='SUBMIT' value='$buttontext' /></td>
28b7d78a CS	352	</tr>
	353	</table>
	354	</form>
	355	END
	356	;
	357	&Header::closebox();
	358
	359	# Add visual indicators to column headings to show sort order - EO
	360	my $sortarrow1 = '';
	361	my $sortarrow2 = '';
	362
	363	if ($netsettings{'SORT_ALIASES'} eq 'NAMERev') {
	364	$sortarrow1 = $Header::sortdn;
	365	} elsif ($netsettings{'SORT_ALIASES'} eq 'NAME') {
	366	$sortarrow1 = $Header::sortup;
	367	} elsif ($netsettings{'SORT_ALIASES'} eq 'IPRev') {
	368	$sortarrow2 = $Header::sortdn;
	369	} else {
	370	$sortarrow2 = $Header::sortup;
	371	}
	372
	373	#
	374	# Third box shows the list, in columns
	375	#
	376	# Columns headers may content a link. In this case it must be named in $sortstring
	377	#
	378	&Header::openbox('100%', 'left', $Lang::tr{'current aliases'});
	379	print <<END
d7fe5d79	380	<table class='tbl' style='width:100%;'>
28b7d78a	381	<tr>
d7fe5d79 AH	382	<th style='width:55%; text-align:center;'><a href='$ENV{'SCRIPT_NAME'}?NAME'><b>$Lang::tr{'name'}</b></a> $sortarrow1</th>
	383	<th style='width:45%; text-align:center;'><a href='$ENV{'SCRIPT_NAME'}?IP'><b>$Lang::tr{'alias ip'}</b></a> $sortarrow2</th>
	384	<th colspan='3' class='boldbase' style='width:5%; text-align:center;'><b>$Lang::tr{'action'}</b></th>
28b7d78a CS	385	</tr>
	386	END
	387	;
	388
	389	#
	390	# Print each line of @current list
	391	#
	392	# each data line is splitted into @temp.
	393	#
	394
	395	my $key = 0;
c7edc1c7	396	my $col="";
28b7d78a CS	397	foreach my $line (@current) {
	398	chomp($line);
	399	my @temp = split(/\,/,$line);
	400
	401	#Choose icon for checkbox
	402	my $gif = '';
	403	my $gdesc = '';
	404	if ($temp[1] eq "on") {
	405	$gif = 'on.gif';
	406	$gdesc = $Lang::tr{'click to disable'};
	407	} else {
	408	$gif = 'off.gif';
	409	$gdesc = $Lang::tr{'click to enable'};
	410	}
	411
	412	#Colorize each line
	413	if ($settings{'KEY1'} eq $key) {
d7fe5d79	414	$col="background-color:${Header::colouryellow};";
28b7d78a	415	} elsif ($key % 2) {
d7fe5d79	416	$col="background-color:${Header::table2colour};";
28b7d78a	417	} else {
d7fe5d79	418	$col="background-color:${Header::table1colour};";
28b7d78a	419	}
d7fe5d79	420	print "<tr style='$col'>";
28b7d78a CS	421
28b7d78a CS	422	print <<END
d7fe5d79 AH	423	<td style='text-align:center; $col'>$temp[2]</td>
d7fe5d79 AH	424	<td style='text-align:center; $col'>$temp[0]</td>
28b7d78a	425
d7fe5d79	426	<td style='text-align:center; $col'>
28b7d78a CS	427	<form method='post' action='$ENV{'SCRIPT_NAME'}'>
	428	<input type='hidden' name='ACTION' value='$Lang::tr{'toggle enable disable'}' />
	429	<input type='image' name='$Lang::tr{'toggle enable disable'}' src='/images/$gif' alt='$gdesc' title='$gdesc' />
	430	<input type='hidden' name='KEY1' value='$key' />
	431	</form>
	432	</td>
	433
d7fe5d79	434	<td style='text-align:center; $col'>
28b7d78a CS	435	<form method='post' action='$ENV{'SCRIPT_NAME'}'>
	436	<input type='hidden' name='ACTION' value='$Lang::tr{'edit'}' />
	437	<input type='image' name='$Lang::tr{'edit'}' src='/images/edit.gif' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' />
	438	<input type='hidden' name='KEY1' value='$key' />
	439	</form>
	440	</td>
	441
d7fe5d79	442	<td style='text-align:center; $col'>
28b7d78a CS	443	<form method='post' action='$ENV{'SCRIPT_NAME'}'>
	444	<input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
	445	<input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' alt='$Lang::tr{'remove'}' title='$Lang::tr{'remove'}' />
	446	<input type='hidden' name='KEY1' value='$key' />
	447	</form>
	448	</td>
	449	</tr>
	450	END
	451	;
	452	$key++;
	453	}
	454	print "</table>";
	455
	456	# If table contains entries, print 'Key to action icons'
	457	if ($key) {
	458	print <<END
	459	<table>
	460	<tr>
	461	<td class='boldbase'> <b>$Lang::tr{'legend'}: </b></td>
	462	<td><img src='/images/on.gif' alt='$Lang::tr{'click to disable'}' /></td>
	463	<td class='base'>$Lang::tr{'click to disable'}</td>
	464	<td>  </td>
	465	<td><img src='/images/off.gif' alt='$Lang::tr{'click to enable'}' /></td>
	466	<td class='base'>$Lang::tr{'click to enable'}</td>
	467	<td>  </td>
	468	<td><img src='/images/edit.gif' alt='$Lang::tr{'edit'}' /></td>
	469	<td class='base'>$Lang::tr{'edit'}</td>
	470	<td>  </td>
	471	<td><img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
	472	<td class='base'>$Lang::tr{'remove'}</td>
	473	</tr>
	474	</table>
	475	END
	476	;
	477	}
	478
	479	&Header::closebox();
	480	&Header::closebigbox();
	481	&Header::closepage();
	482
	483	## Ouf it's the end !
	484
	485
	486
	487	# Sort the "current" array according to choices
	488	sub SortDataFile
	489	{
	490	our %entries = ();
	491
	492	# Sort pair of record received in $a $b special vars.
	493	# When IP is specified use numeric sort else alpha.
	494	# If sortname ends with 'Rev', do reverse sort.
	495	#
	496	sub fixedleasesort {
	497	my $qs=''; # The sort field specified minus 'Rev'
	498	if (rindex ($netsettings{'SORT_ALIASES'},'Rev') != -1) {
	499	$qs=substr ($netsettings{'SORT_ALIASES'},0,length($netsettings{'SORT_ALIASES'})-3);
	500	if ($qs eq 'IP') {
	501	my @a = split(/\./,$entries{$a}->{$qs});
	502	my @b = split(/\./,$entries{$b}->{$qs});
	503	($b[0]<=>$a[0]) \|\|
	504	($b[1]<=>$a[1]) \|\|
	505	($b[2]<=>$a[2]) \|\|
	506	($b[3]<=>$a[3]);
507	} else {
508	$entries{$b}->{$qs} cmp $entries{$a}->{$qs};
509	}
510	} else { #not reverse
511	$qs=$netsettings{'SORT_ALIASES'};
512	if ($qs eq 'IP') {
513	my @a = split(/\./,$entries{$a}->{$qs});
514	my @b = split(/\./,$entries{$b}->{$qs});
515	($a[0]<=>$b[0]) \|\|
516	($a[1]<=>$b[1]) \|\|
517	($a[2]<=>$b[2]) \|\|
518	($a[3]<=>$b[3]);
519	} else {
520	$entries{$a}->{$qs} cmp $entries{$b}->{$qs};
521	}
522	}
523	}
524
525	#Use an associative array (%entries)
526	my $key = 0;
527	foreach my $line (@current) {
528	chomp( $line); #remove newline because can be on field 5 or 6 (addition of REMARK)
529	my @temp = split (',',$line);
530
531	# Build a pair 'Field Name',value for each of the data dataline.
532	# Each SORTABLE field must have is pair.
533	# Other data fields (non sortable) can be grouped in one
534
535	# Exemple
536	# F1,F2,F3,F4,F5 only F1 F2 for sorting
537	# my @record = ('KEY',$key++,
538	# 'F1',$temp[0],
539	# 'F2',$temp[1],
540	# 'DATA',join(',',@temp[2..4]) ); #group remainning values, with separator (,)
541
542	# The KEY,key record permits doublons. If removed, then F1 becomes the key without doublon permitted.
543
544
545	my @record = ('KEY',$key++,'IP',$temp[0],'ENABLED',$temp[1],'NAME',$temp[2]);
546	my $record = {}; # create a reference to empty hash
547	%{$record} = @record; # populate that hash with @record
548	$entries{$record->{KEY}} = $record; # add this to a hash of hashes
549	}
550
551	open(FILE, ">$datafile") or die 'Unable to open aliases file.';
552
553	# Each field value is printed , with the newline ! Don't forget separator and order of them.
554	foreach my $entry (sort fixedleasesort keys %entries) {
555	print FILE "$entries{$entry}->{IP},$entries{$entry}->{ENABLED},$entries{$entry}->{NAME}\n";
556	}
557
558	close(FILE);
559	# Reload sorted @current
560	open (FILE, "$datafile");
561	@current = <FILE>;
562	close (FILE);
563	}
564
565	#
566	# Build the configuration file for application aliases
567	#
568	sub BuildConfiguration {
569	# Restart service associated with this
c4391a01	570	&General::system('/usr/local/bin/setaliases');
28b7d78a	571	}
d7fe5d79	572
f6eb1a40 SS	573	#
	574	## Handle Suricata related actions.
	575	#
	576	sub HandleSuricata() {
	577	# Check if suricata is running.
	578	if(&IDS::ids_is_running()) {
	579	# Re-generate file which contains the HOME_NET declaration.
	580	&IDS::generate_home_net_file();
	581
	582	# Call suricatactrl to perform a restart of suricata.
	583	&IDS::call_suricatactrl("restart");
	584	}
	585	}