html/cgi-bin/index.cgi

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007-2023  IPFire Team  <info@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 use strict;
  23 use Net::Telnet;
  24 use Sort::Naturally;
  25
  26 # enable only the following on debugging purpose
  27 #use warnings;
  28 #use CGI::Carp 'fatalsToBrowser';
  29
  30 require '/var/ipfire/general-functions.pl';
  31 require "${General::swroot}/lang.pl";
  32 require "${General::swroot}/header.pl";
  33 require "/opt/pakfire/lib/functions.pl";
  34
  35 my %cgiparams=();
  36 my %pppsettings=();
  37 my %modemsettings=();
  38 my %netsettings=();
  39 my %ddnssettings=();
  40 my %proxysettings=();
  41 my %vpnsettings=();
  42 my %vpnconfig=();
  43 my %ovpnconfig=();
  44 my $warnmessage = '';
  45 my $refresh = "";
  46 my $ipaddr='';
  47 my $showbox=0;
  48 my $showipsec=0;
  49 my $showovpn=0;
  50
  51 if ( ! -e "/var/ipfire/main/gpl_accepted" ) {
  52         print "Status: 302 Moved Temporarily\n";
  53         print "Location: gpl.cgi\n\n";
  54         exit (0);
  55 }
  56
  57 &Header::showhttpheaders();
  58
  59 $cgiparams{'ACTION'} = '';
  60 &Header::getcgihash(\%cgiparams);
  61 $pppsettings{'VALID'} = '';
  62 $pppsettings{'PROFILENAME'} = 'None';
  63 &General::readhash("${General::swroot}/ppp/settings", \%pppsettings);
  64 &General::readhash("${General::swroot}/modem/settings", \%modemsettings);
  65 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
  66 &General::readhash("${General::swroot}/ddns/settings", \%ddnssettings);
  67 &General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
  68 &General::readhash("${General::swroot}/vpn/settings", \%vpnsettings);
  69
  70 my %color = ();
  71 my %mainsettings = ();
  72 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
  73 &General::readhash("/srv/web/ipfire/html/themes/ipfire/include/colors.txt", \%color);
  74
  75 my $connstate = &Header::connectionstatus();
  76
  77 if ( -e "/var/ipfire/main/gpl_accepted" ) {
  78         if ($connstate =~ /$Lang::tr{'connecting'}/ || /$Lang::tr{'connection closed'}/ ){
  79                 $refresh = "<meta http-equiv='refresh' content='5;'>";
  80         }elsif ($connstate =~ /$Lang::tr{'dod waiting'}/ || -e "${General::swroot}/main/refreshindex") {
  81                 $refresh = "<meta http-equiv='refresh' content='30;'>";
  82         }
  83 }
  84
  85 if ($cgiparams{'ACTION'} eq $Lang::tr{'dial profile'})
  86 {
  87         my $profile = $cgiparams{'PROFILE'};
  88         my %tempcgiparams = ();
  89         $tempcgiparams{'PROFILE'} = '';
  90         &General::readhash("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
  91                 \%tempcgiparams);
  92
  93         # make a link from the selected profile to the "default" one.
  94         unlink("${General::swroot}/ppp/settings");
  95         link("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
  96                 "${General::swroot}/ppp/settings");
  97         open (TMP, ">${General::swroot}/ppp/updatesettings");
  98         close TMP;
  99         # read in the new params "early" so we can write secrets.
 100         %cgiparams = ();
 101         &General::readhash("${General::swroot}/ppp/settings", \%cgiparams);
 102         $cgiparams{'PROFILE'} = $profile;
 103         $cgiparams{'BACKUPPROFILE'} = $profile;
 104         &General::writehash("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
 105                 \%cgiparams);
 106
 107         # write secrets file.
 108         open(FILE, ">/${General::swroot}/ppp/secrets") or die "Unable to write secrets file.";
 109         flock(FILE, 2);
 110         my $username = $cgiparams{'USERNAME'};
 111         my $password = $cgiparams{'PASSWORD'};
 112         print FILE "'$username' * '$password'\n";
 113         chmod 0600, "${General::swroot}/ppp/secrets";
 114         close FILE;
 115
 116         &General::log("$Lang::tr{'profile made current'} $tempcgiparams{'PROFILENAME'}");
 117         $cgiparams{'ACTION'} = "$Lang::tr{'dial'}";
 118 }
 119
 120 if ($cgiparams{'ACTION'} eq $Lang::tr{'dial'}) {
 121         &General::system('/usr/local/bin/redctrl', 'start') == 0
 122         or &General::log("Dial failed: $?"); sleep 1;
 123 }elsif ($cgiparams{'ACTION'} eq $Lang::tr{'hangup'}) {
 124         &General::system('/usr/local/bin/redctrl', 'stop') == 0
 125         or &General::log("Hangup failed: $?"); sleep 1;
 126 }
 127
 128 my $c;
 129 my $maxprofiles = 5;
 130 my @profilenames = ();
 131
 132 for ($c = 1; $c <= $maxprofiles; $c++)
 133 {
 134         my %temppppsettings = ();
 135         $temppppsettings{'PROFILENAME'} = '';
 136         &General::readhash("${General::swroot}/ppp/settings-$c", \%temppppsettings);
 137         $profilenames[$c] = $temppppsettings{'PROFILENAME'};
 138 }
 139 my %selected;
 140 for ($c = 1; $c <= $maxprofiles; $c++) {
 141         $selected{'PROFILE'}{$c} = '';
 142 }
 143 $selected{'PROFILE'}{$pppsettings{'PROFILE'}} = "selected='selected'";
 144 my $dialButtonDisabled = "disabled='disabled'";
 145
 146 &Header::openpage($Lang::tr{'main page'}, 1, $refresh);
 147 &Header::openbigbox('', 'center');
 148 if (open(IPADDR,"${General::swroot}/red/local-ipaddress")) {
 149             $ipaddr = <IPADDR>;
 150             close IPADDR;
 151             chomp ($ipaddr);
 152         }
 153
 154 &Header::openbox('100%', 'center', '');
 155 if ( ( $pppsettings{'VALID'} eq 'yes' && $modemsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ )) {
 156         if (open(IPADDR,"${General::swroot}/ddns/ipcache")) {
 157             $ipaddr = <IPADDR>;
 158             close IPADDR;
 159             chomp ($ipaddr);
 160         }
 161         if (open(IPADDR,"${General::swroot}/red/local-ipaddress")) {
 162             $ipaddr = <IPADDR>;
 163             close IPADDR;
 164             chomp ($ipaddr);
 165         }
 166 } elsif ($modemsettings{'VALID'} eq 'no') {
 167         print "$Lang::tr{'modem settings have errors'}\n </b></font>\n";
 168 } else {
 169         print "$Lang::tr{'profile has errors'}\n </b></font>\n";
 170 }
 171
 172 print <<END;
 173 <!-- Table of networks -->
 174 <table class='tbl' style='width:80%;'>
 175   <tr>
 176         <th>$Lang::tr{'network'}</th>
 177         <th>$Lang::tr{'ip address'}</th>
 178         <th>$Lang::tr{'status'}</th>
 179   </tr>
 180   <tr>
 181         <td style='width:25%; text-align:center; background-color:$Header::colourred;'><a href='/cgi-bin/pppsetup.cgi' style='color:white;'><b>$Lang::tr{'internet'}</b></a><br/></td>
 182         <td style='width:30%; text-align:center;'>$ipaddr </td>
 183         <td style='width:45%; text-align:center;'>$connstate </td>
 184   </tr>
 185 END
 186         my $HOSTNAME = (gethostbyaddr(pack("C4", split(/\./, $ipaddr)), 2))[0];
 187         if ( "$HOSTNAME" ne "" ) {
 188                 print <<END;
 189         <tr><td><b>$Lang::tr{'hostname'}:</b><td style='text-align:center;'>$HOSTNAME</td><td></td>
 190 END
 191         }
 192
 193         if ( -e "${General::swroot}/red/remote-ipaddress" ) {
 194                 open (TMP, "<${General::swroot}/red/remote-ipaddress");
 195                 my $GATEWAY = <TMP>;
 196                 chomp($GATEWAY);
 197                 close TMP;
 198                 print <<END;
 199         <tr><td><b>$Lang::tr{'gateway'}:</b><td style='text-align:center;'>$GATEWAY</td><td></td></tr>
 200 END
 201         }
 202
 203         if (&General::RedIsWireless()) {
 204                 my $iface = $netsettings{"RED_DEV"} || "red0";
 205
 206                 my $essid        = &Network::wifi_get_essid($iface);
 207                 my $frequency    = &Network::wifi_get_frequency($iface);
 208                 my $access_point = &Network::wifi_get_access_point($iface);
 209                 my $bit_rate     = &Network::wifi_get_bit_rate($iface);
 210                 my $link_quality = &Network::wifi_get_link_quality($iface);
 211                 my $signal_level = &Network::wifi_get_signal_level($iface);
 212
 213                 print <<END;
 214                         <tr>
 215                                 <td>
 216                                         <strong>$Lang::tr{'wireless network'}:</strong>
 217                                 </td>
 218                                 <td style="text-align: center">
 219                                         $essid
 220                                 </td>
 221                                 <td style="text-align: center">
 222                                         $access_point @ $frequency
 223                                 </td>
 224                         </tr>
 225                         <tr>
 226                                 <td>
 227                                         <strong>
 228                                                 $Lang::tr{'uplink bit rate'}:
 229                                         </strong>
 230                                 </td>
 231                                 <td style="text-align: center">
 232                                         $bit_rate
 233                                 </td>
 234                                 <td style="text-align: center">
 235                                         $link_quality% @ $signal_level
 236                                 </td>
 237                         </tr>
 238 END
 239         }
 240
 241         print <<END;
 242                 </table>
 243 END
 244
 245 #Dial profiles
 246 if ( $netsettings{'RED_TYPE'} ne "STATIC" && $netsettings{'RED_TYPE'} ne "DHCP" ){
 247         if ( ( $pppsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ ) ) {
 248                 print <<END;
 249                 <br/>
 250                 <table style='width:80%;'>
 251                 <tr><td>
 252                 <form method='post' action='$ENV{'SCRIPT_NAME'}'>$Lang::tr{'profile'}:
 253                         <select name='PROFILE'>
 254 END
 255                 for ($c = 1; $c <= $maxprofiles; $c++)
 256                 {
 257                         if ($profilenames[$c] ne '') {
 258                                 $dialButtonDisabled = "";
 259                                 print "<option value='$c' $selected{'PROFILE'}{$c}>$c. $profilenames[$c]</option>";
 260                         }
 261                 }
 262                 $dialButtonDisabled = "disabled='disabled'" if (-e '/var/run/ppp-ipfire.pid' || -e "${General::swroot}/red/active");
 263                 print <<END;
 264                         </select>
 265                         <input type='submit' name='ACTION' value='$Lang::tr{'dial profile'}' $dialButtonDisabled />
 266                 </form>
 267                 </td>
 268                 <td style='text-align:center;'>
 269                         <table style='width:100%;'>
 270                                 <tr>
 271                                 <td style='width=50%; text-align:right;'>
 272                                         <form method='post' action='$ENV{'SCRIPT_NAME'}'>
 273                                                 <input type='submit' name='ACTION' value='$Lang::tr{'dial'}'>
 274                                         </form>
 275                                 </td>
 276                                 <td style='width=50%; text-align:left;'>
 277                                         <form method='post' action='$ENV{'SCRIPT_NAME'}'>
 278                                                 <input type='submit' name='ACTION' value='$Lang::tr{'hangup'}'>
 279                                         </form>
 280                                 </td>
 281                                 </tr>
 282                         </table>
 283                 </td>
 284                 </tr>
 285                 </table>
 286 END
 287         } else {
 288                 print "<br/><span style='color:red;'>$Lang::tr{'profile has errors'}</span><br/>";
 289         }
 290 }
 291
 292
 293 print <<END;
 294 <br/>
 295 <table class='tbl' style='width:80%;'>
 296 <tr>
 297         <th>$Lang::tr{'network'}</th>
 298         <th>$Lang::tr{'ip address'}</th>
 299         <th>$Lang::tr{'status'}</th>
 300 </tr>
 301 END
 302
 303 if ( $netsettings{'GREEN_DEV'} ) {
 304                 my $sub=&General::iporsubtocidr($netsettings{'GREEN_NETMASK'});
 305                 print <<END;
 306                 <tr>
 307                         <td style='width:25%; text-align:center; background-color:$Header::colourgreen;'>
 308                                 <a href='/cgi-bin/dhcp.cgi' style='color:white'><b>$Lang::tr{'lan'}</b></a>
 309                         </td>
 310                         <td style='width:30%; text-align:center;'>$netsettings{'GREEN_ADDRESS'}/$sub</td>
 311                         <td style='width:45%; text-align:center;'>
 312 END
 313                 if ( $proxysettings{'ENABLE'} eq 'on' ) {
 314                         print $Lang::tr{'advproxy on'};
 315                         if ( $proxysettings{'TRANSPARENT'} eq 'on' ) { print " (transparent)"; }
 316                 }       else { print $Lang::tr{'advproxy off'};  }
 317                 print '</td>';
 318                 print '</tr>';
 319         }
 320 if (&Header::blue_used()) {
 321                 my $sub=&General::iporsubtocidr($netsettings{'BLUE_NETMASK'});
 322                 print <<END;
 323                 <tr>
 324                         <td style='width:25%; text-align:center; background-color:$Header::colourblue;'>
 325                                 <a href='/cgi-bin/wireless.cgi' style='color:white'><b>$Lang::tr{'wireless'}</b></a>
 326                         </td>
 327                         <td style='width:30%; text-align:center;'>$netsettings{'BLUE_ADDRESS'}/$sub
 328                         <td style='width:45%; text-align:center;'>
 329 END
 330                 if ( $proxysettings{'ENABLE_BLUE'} eq 'on' ) {
 331                         print $Lang::tr{'advproxy on'};
 332                         if ( $proxysettings{'TRANSPARENT_BLUE'} eq 'on' ) { print " (transparent)"; }
 333                 }       else { print $Lang::tr{'advproxy off'};  }
 334                 print '</td>';
 335                 print '</tr>';
 336         }
 337 if (&Header::orange_used()) {
 338                 my $sub=&General::iporsubtocidr($netsettings{'ORANGE_NETMASK'});
 339                 print <<END;
 340                 <tr>
 341                         <td style='width:25%; text-align:center; background-color:$Header::colourorange;'>
 342                                 <a href='/cgi-bin/firewall.cgi' style='color:white'><b>$Lang::tr{'dmz'}</b></a>
 343                         </td>
 344                         <td style='width:30%; text-align:center;'>$netsettings{'ORANGE_ADDRESS'}/$sub</td>
 345                         <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
 346                 </tr>
 347 END
 348         }
 349 #check if IPSEC is running
 350 if ( $vpnsettings{'ENABLED'} eq 'on' || $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {
 351 print<<END;
 352                 <tr>
 353                         <td style='width:25%; text-align:center; background-color:$Header::colourvpn;'>
 354                                 <a href='/cgi-bin/vpnmain.cgi' style='color:white'><b>$Lang::tr{'ipsec'}</b></a>
 355                         </td>
 356                         <td style='width:30%; text-align:center;'></td>
 357                         <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
 358                 </tr>
 359 END
 360 }
 361
 362 #check if OpenVPN is running
 363 my %confighash=();
 364 &General::readhash("${General::swroot}/ovpn/settings", \%confighash);
 365
 366 if (($confighash{'ENABLED'} eq "on") ||
 367     ($confighash{'ENABLED_BLUE'} eq "on") ||
 368     ($confighash{'ENABLED_ORANGE'} eq "on")) {
 369         my ($ovpnip,$sub) = split("/",$confighash{'DOVPN_SUBNET'});
 370         $sub=&General::iporsubtocidr($sub);
 371         $ovpnip="$ovpnip/$sub";
 372 print <<END;
 373         <tr>
 374                 <td style='width:25%; text-align:center; background-color:$Header::colourovpn;'>
 375                         <a href='/cgi-bin/ovpnmain.cgi' style='color:white'><b>OpenVPN</b></a>
 376                 </td>
 377                 <td style='width:30%; text-align:center;'>$ovpnip</td>
 378                 <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
 379         </tr>
 380 END
 381         }
 382 print"</table>";
 383 &Header::closebox();
 384
 385 #Check if there are any vpns configured (ipsec and openvpn)
 386 &General::readhasharray("${General::swroot}/vpn/config", \%vpnconfig);
 387 foreach my $key (sort { ncmp($vpnconfig{$a}[1],$vpnconfig{$b}[1]) } keys %vpnconfig) {
 388         if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host'){
 389                 $showipsec=1;
 390                 $showbox=1;
 391                 last;
 392         }
 393 }
 394 &General::readhasharray("${General::swroot}/ovpn/ovpnconfig", \%ovpnconfig);
 395 foreach my $dkey (sort { ncmp($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
 396         if (($ovpnconfig{$dkey}[3] eq 'net') && (-e "/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
 397                 $showbox=1;
 398                 $showovpn=1;
 399                 last;
 400         }
 401 }
 402
 403 if ($showbox){
 404 # Start of Box wich contains all vpn connections
 405         &Header::openbox('100%', 'center', $Lang::tr{'vpn'});
 406
 407         #show ipsec connectiontable
 408         if ( $showipsec ) {
 409                 my $ipsecip = $vpnsettings{'VPN_IP'};
 410                 my @status = `/usr/local/bin/ipsecctrl I`;
 411                 my %confighash = ();
 412                 my $id = 0;
 413                 my $gif;
 414                 my $col="";
 415                 my $count=0;
 416                 print <<END;
 417                 <table class='tbl' style='width:80%;'>
 418                 <tr>
 419                         <th style='width:40%;'>$Lang::tr{'ipsec network'}</th>
 420                         <th style='width:30%;'>$Lang::tr{'ip address'}</th>
 421                         <th style='width:30%;'>$Lang::tr{'status'}</th>
 422                 </tr>
 423 END
 424                 foreach my $key (sort { uc($vpnconfig{$a}[1]) cmp uc($vpnconfig{$b}[1]) } keys %vpnconfig) {
 425                         if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host') {
 426                                 $count++;
 427
 428                                 my @n = ();
 429
 430                                 my @networks = split(/\|/, $vpnconfig{$key}[11]);
 431                                 foreach my $network (@networks) {
 432                                         my ($vpnip, $vpnsub) = split("/", $network);
 433                                         $vpnsub = &Network::convert_netmask2prefix($vpnsub) || $vpnsub;
 434                                         push(@n, "$vpnip/$vpnsub");
 435                                 }
 436
 437                                 if ($count % 2){
 438                                         $col = $color{'color22'};
 439                                 }else{
 440                                         $col = $color{'color20'};
 441                                 }
 442                                 print "<tr>";
 443                                 print "<td style='text-align:left; color:white; background-color:$Header::colourvpn;'>$vpnconfig{$key}[1]</td>";
 444                                 print "<td style='text-align:center; background-color:$col'>" . join("<br>", @n) . "</td>";
 445
 446                                 my $activecolor = $Header::colourred;
 447                                 my $activestatus = $Lang::tr{'capsclosed'};
 448                                 if ($vpnconfig{$key}[33] eq "add") {
 449                                         $activecolor = ${Header::colourorange};
 450                                         $activestatus = $Lang::tr{'vpn wait'};
 451                                 }
 452                                 if ($vpnconfig{$key}[0] eq 'off') {
 453                                         $activecolor = $Header::colourblue;
 454                                         $activestatus = $Lang::tr{'capsclosed'};
 455                                 } else {
 456                                         foreach my $line (@status) {
 457                                                 if (($line =~ /\"$vpnconfig{$key}[1]\".*IPsec SA established/) || ($line =~/$vpnconfig{$key}[1]\{.*INSTALLED/ )){
 458                                                         $activecolor = $Header::colourgreen;
 459                                                         $activestatus = $Lang::tr{'capsopen'};
 460                                                         last;
 461                                                 } elsif ($line =~ /$vpnconfig{$key}[1]\[.*CONNECTING/) {
 462                                                         $activecolor = $Header::colourorange;
 463                                                         $activestatus = $Lang::tr{'vpn connecting'};
 464                                                 } elsif ($line =~ /$vpnconfig{$key}[1]\{.*ROUTED/) {
 465                                                         $activecolor = $Header::colourorange;
 466                                                         $activestatus = $Lang::tr{'vpn on-demand'};
 467                                                 }
 468                                         }
 469                                 }
 470                                 print "<td style='text-align:center; color:white; background-color:$activecolor;'><b>$activestatus</b></td>";
 471                                 print "</tr>";
 472                         }
 473                 }
 474                 print "</table>";
 475         }
 476
 477         # Check if there is any OpenVPN connection configured.
 478         if ( $showovpn ){
 479                 print <<END;
 480                 <br/>
 481                 <table class='tbl' style='width:80%;'>
 482                 <tr>
 483                         <th style='width:40%;'>$Lang::tr{'openvpn network'}</th>
 484                         <th style='width:30%;'>$Lang::tr{'ip address'}</th>
 485                         <th style='width:30%;'>$Lang::tr{'status'}</th>
 486 END
 487
 488                 # Check if the OpenVPN server for Road Warrior Connections is running and display status information.
 489                 my $active;
 490                 my $count=0;
 491                 # Print the OpenVPN N2N connection status.
 492                 if ( -d "${General::swroot}/ovpn/n2nconf") {
 493                         my $col="";
 494                         foreach my $dkey (sort { ncmp ($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
 495                                 if (($ovpnconfig{$dkey}[3] eq 'net') && (-e "/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
 496                                         $count++;
 497                                         my $tport = $ovpnconfig{$dkey}[22];
 498                                         next if ($tport eq '');
 499                                         my $tnet = new Net::Telnet ( Timeout=>5, Errmode=>'return', Port=>$tport);
 500                                         $tnet->open('127.0.0.1');
 501                                         my @output = $tnet->cmd(String => 'state', Prompt => '/(END.*\n|ERROR:.*\n)/');
 502                                         my @tustate = split(/\,/, $output[1]);
 503                                         my $display;
 504                                         my $display_colour = $Header::colourred;
 505                                         if ( $tustate[1] eq 'CONNECTED' || ($tustate[1] eq 'WAIT')) {
 506                                                 $display_colour = $Header::colourgreen;
 507                                                 $display = $Lang::tr{'capsopen'};
 508                                         } else {
 509                                                 $display = $tustate[1];
 510                                         }
 511                                         if ($count %2){
 512                                                 $col = $color{'color22'};
 513                                         }else{
 514                                                 $col = $color{'color20'};
 515                                         }
 516                                         $active='off';
 517                                         #make cidr from ip
 518                                         my ($vpnip,$vpnsub) = split("/",$ovpnconfig{$dkey}[11]);
 519                                         my $vpnsub=&General::iporsubtocidr($vpnsub);
 520                                         my $vpnip="$vpnip/$vpnsub";
 521                                         print <<END;
 522                                         <tr>
 523                                                 <td style='text-align:left; color:white; background-color:$Header::colourovpn;'>$ovpnconfig{$dkey}[1]</td>
 524                                                 <td style='text-align:center; background-color:$col'>$vpnip</td>
 525                                                 <td style='text-align:center; color:white; background-color:$display_colour' ><b>$display</b></td>
 526                                         </tr>
 527 END
 528                                 }
 529                         }
 530                 }
 531                 if ($active ne 'off'){
 532                         print "<tr><td colspan='3' style='text-align:center;'>$Lang::tr{'ovpn no connections'}</td></tr>";
 533                 }
 534                 print"</table>";
 535         }
 536 &Header::closebox();
 537 }
 538
 539 # Fireinfo
 540 if ( ! -e "/var/ipfire/main/send_profile") {
 541         $warnmessage .= "<li><a style='color: white;' href='fireinfo.cgi'>$Lang::tr{'fireinfo please enable'}</a></li>";
 542 }
 543
 544 # EOL architecture
 545 my ($sysname, $nodename, $release, $version, $machine) = &POSIX::uname();
 546 if ($machine =~ m/^arm/) {
 547         $warnmessage .= "<li><a href='https://wiki.ipfire.org/hardware/requirements' style='color:white;'>$Lang::tr{'eol architecture warning'}</a></li>";
 548 }
 549
 550 # Memory usage warning
 551 my @free = `/usr/bin/free`;
 552 $free[1] =~ m/(\d+)/;
 553 my $mem = $1;
 554 $free[2] =~ m/(\d+)/;
 555 my $used = $1;
 556 my $pct = int 100 * ($mem - $used) / $mem;
 557 if ($used / $mem > 90) {
 558         $warnmessage .= "<li>$Lang::tr{'high memory usage'}: $pct% !</li>";
 559 }
 560
 561 # Diskspace usage warning
 562 my @temp=();
 563 my $temp2=();
 564 my @df = `/bin/df -B M -P -x rootfs`;
 565 foreach my $line (@df) {
 566         next if $line =~ m/^Filesystem/;
 567         if ($line =~ m/root/ ) {
 568                 $line =~ m/^.* (\d+)M.*$/;
 569                 @temp = split(/ +/,$line);
 570                 if ($1<5) {
 571                         # available:plain value in MB, and not %used as 10% is too much to waste on small disk
 572                         # and root size should not vary during time
 573                         $warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$1M</b> !</li>";
 574                 }
 575
 576         } else {
 577                 # $line =~ m/^.* (\d+)m.*$/;
 578                 $line =~ m/^.* (\d+)\%.*$/;
 579                 if ($1>90) {
 580                         @temp = split(/ /,$line);
 581                         $temp2=int(100-$1);
 582                         $warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$temp2%</b> !</li>";
 583                 }
 584         }
 585 }
 586
 587 # S.M.A.R.T. health warning
 588 my @files = `/bin/ls /var/run/smartctl_out_hddtemp-* 2>/dev/null`;
 589 foreach my $file (@files) {
 590         chomp ($file);
 591         my $disk=`echo $file | cut -d"-" -f2`;
 592         chomp ($disk);
 593         if (`/bin/grep "SAVE ALL DATA" $file`) {
 594                 $warnmessage .= "<li>$Lang::tr{'smartwarn1'} /dev/$disk $Lang::tr{'smartwarn2'} !</li>";
 595         }
 596 }
 597
 598 if ($warnmessage) {
 599         &Header::openbox('100%','center', );
 600         print "<table class='tbl' style='width:80%;'>";
 601         print "<tr><th>$Lang::tr{'fwhost hint'}</th></tr>";
 602         print "<tr><td style='color:white; background-color:$Header::colourred;'>$warnmessage</td></tr>";
 603     print "</table>";
 604         &Header::closebox();
 605 }
 606
 607 my %coredb = &Pakfire::coredbinfo();
 608 if (defined $coredb{'AvailableRelease'}) {
 609         print "<br /><br /><br /><a href='pakfire.cgi'>$Lang::tr{'core notice 1'} $coredb{'Release'} $Lang::tr{'core notice 2'} $coredb{'AvailableRelease'} $Lang::tr{'core notice 3'}</a>";
 610 }
 611
 612 if ( -e "/var/run/need_reboot" ) {
 613         print "<div style='text-align:center; color:red;'>";
 614         print "<br/><br/>$Lang::tr{'needreboot'}!";
 615         print "</div>";
 616 }
 617
 618 if ( `/bin/grep -c "reiserfs" /proc/self/mounts`  > 0 ) {
 619         print "<div style='text-align:center; color:blue;'>";
 620         print "<br/><br/>$Lang::tr{'reiserfs warning1'}";
 621         print "<br/>$Lang::tr{'reiserfs warning2'}";
 622         print "</div>";
 623 }
 624
 625 &Header::closebigbox();
 626 &Header::closepage();
 627