]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - html/cgi-bin/remote.cgi
2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2007-2019 IPFire Team <info@ipfire.org> #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
24 # enable only the following on debugging purpose
26 #use CGI::Carp 'fatalsToBrowser';
30 require '/var/ipfire/general-functions.pl';
31 require "${General::swroot}/geoip-functions.pl";
32 require "${General::swroot}/lang.pl";
33 require "${General::swroot}/header.pl";
36 my %mainsettings = ();
37 my %remotesettings=();
42 &General
::readhash
("${General::swroot}/main/settings", \
%mainsettings);
43 &General
::readhash
("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \
%color);
45 &Header
::showhttpheaders
();
47 $remotesettings{'ENABLE_SSH'} = 'off';
48 $remotesettings{'ENABLE_SSH_PORTFW'} = 'off';
49 $remotesettings{'ACTION'} = '';
50 &Header
::getcgihash
(\
%remotesettings);
52 if ( (($remotesettings{'ACTION'} eq $Lang::tr
{'save'}) || ($remotesettings{'ACTION'} eq $Lang::tr
{'ssh tempstart15'}) || ($remotesettings{'ACTION'} eq $Lang::tr
{'ssh tempstart30'})) && $remotesettings{'ACTION'} ne "" )
54 # not existing here indicates the box is unticked
55 $remotesettings{'ENABLE_SSH_PASSWORDS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
56 $remotesettings{'ENABLE_SSH_KEYS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_KEYS'};
59 &General
::writehash
("${General::swroot}/remote/settings", \
%remotesettings);
60 if ($remotesettings{'ENABLE_SSH'} eq 'on')
62 &General
::log($Lang::tr
{'ssh is enabled'});
63 if ($remotesettings{'ENABLE_SSH_PASSWORDS'} eq 'off'
64 and $remotesettings{'ENABLE_SSH_KEYS'} eq 'off')
66 $errormessage = $Lang::tr
{'ssh no auth'};
68 system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
72 &General
::log($Lang::tr
{'ssh is disabled'});
73 unlink "${General::swroot}/remote/enablessh";
76 if ($remotesettings{'SSH_PORT'} eq 'on')
78 &General
::log("SSH Port 22");
82 &General
::log("SSH Port 222");
85 if ( $remotesettings{'ACTION'} eq $Lang::tr
{'ssh tempstart15'} || $remotesettings{'ACTION'} eq $Lang::tr
{'ssh tempstart30'} ){
86 if ($remotesettings{'ENABLE_SSH'} eq 'off')
88 system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
89 system('/usr/local/bin/sshctrl');
91 if ( $remotesettings{'ACTION'} eq $Lang::tr
{'ssh tempstart15'} ) { $counter = 900;}
92 elsif ( $remotesettings{'ACTION'} eq $Lang::tr
{'ssh tempstart30'} ) { $counter = 1800;}
94 system("/usr/local/bin/sshctrl tempstart $counter >/dev/null");
97 system('/usr/local/bin/sshctrl') == 0
98 or $errormessage = "$Lang::tr{'bad return code'} " . $?
/256;
102 &General
::readhash
("${General::swroot}/remote/settings", \
%remotesettings);
104 # not existing here means they're undefined and the default value should be
106 $remotesettings{'ENABLE_SSH_PASSWORDS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
107 $remotesettings{'ENABLE_SSH_KEYS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_KEYS'};
108 $remotesettings{'SSH_AGENT_FORWARDING'} = 'off' unless exists $remotesettings{'SSH_AGENT_FORWARDING'};
110 $checked{'ENABLE_SSH'}{'off'} = '';
111 $checked{'ENABLE_SSH'}{'on'} = '';
112 $checked{'ENABLE_SSH'}{$remotesettings{'ENABLE_SSH'}} = "checked='checked'";
113 $checked{'ENABLE_SSH_PORTFW'}{'off'} = '';
114 $checked{'ENABLE_SSH_PORTFW'}{'on'} = '';
115 $checked{'ENABLE_SSH_PORTFW'}{$remotesettings{'ENABLE_SSH_PORTFW'}} = "checked='checked'";
116 $checked{'ENABLE_SSH_PASSWORDS'}{'off'} = '';
117 $checked{'ENABLE_SSH_PASSWORDS'}{'on'} = '';
118 $checked{'ENABLE_SSH_PASSWORDS'}{$remotesettings{'ENABLE_SSH_PASSWORDS'}} = "checked='checked'";
119 $checked{'ENABLE_SSH_KEYS'}{'off'} = '';
120 $checked{'ENABLE_SSH_KEYS'}{'on'} = '';
121 $checked{'ENABLE_SSH_KEYS'}{$remotesettings{'ENABLE_SSH_KEYS'}} = "checked='checked'";
122 $checked{'SSH_PORT'}{'off'} = '';
123 $checked{'SSH_PORT'}{'on'} = '';
124 $checked{'SSH_PORT'}{$remotesettings{'SSH_PORT'}} = "checked='checked'";
125 $checked{'SSH_AGENT_FORWARDING'}{'off'} = '';
126 $checked{'SSH_AGENT_FORWARDING'}{'on'} = '';
127 $checked{'SSH_AGENT_FORWARDING'}{$remotesettings{'SSH_AGENT_FORWARDING'}} = "checked='checked'";
129 &Header
::openpage
($Lang::tr
{'remote access'}, 1, '');
131 &Header
::openbigbox
('100%', 'left', '', $errormessage);
134 &Header
::openbox
('100%', 'left', $Lang::tr
{'error messages'});
135 print "<font class='base'>$errormessage </font>\n";
139 print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
141 &Header
::openbox
('100%', 'left', $Lang::tr
{'ssh'});
145 <td><input type='checkbox' name='ENABLE_SSH' $checked{'ENABLE_SSH'}{'on'} /></td>
146 <td class='base' colspan='2'>$Lang::tr{'ssh access'}</td>
150 <td><input type='checkbox' name='SSH_AGENT_FORWARDING' $checked{'SSH_AGENT_FORWARDING'}{'on'} /></td>
151 <td width='100%' class='base'>$Lang::tr{'ssh agent forwarding'}</td>
155 <td><input type='checkbox' name='ENABLE_SSH_PORTFW' $checked{'ENABLE_SSH_PORTFW'}{'on'} /></td>
156 <td width='100%' class='base'>$Lang::tr{'ssh portfw'}</td>
160 <td><input type='checkbox' name='ENABLE_SSH_PASSWORDS' $checked{'ENABLE_SSH_PASSWORDS'}{'on'} /></td>
161 <td width='100%' class='base'>$Lang::tr{'ssh passwords'}</td>
165 <td><input type='checkbox' name='ENABLE_SSH_KEYS' $checked{'ENABLE_SSH_KEYS'}{'on'} /></td>
166 <td width='100%' class='base'>$Lang::tr{'ssh keys'}</td>
170 <td><input type='checkbox' name='SSH_PORT' $checked{'SSH_PORT'}{'on'} /></td>
171 <td width='100%' class='base'>$Lang::tr{'ssh port'}</td>
174 <td align='right' colspan='3'>
175 <input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart15'}' />
176 <input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart30'}' />
177 <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
186 &Header
::openbox
('100%', 'center', $Lang::tr
{'ssh host keys'});
188 print "<table class='tbl'>\n";
193 <th align="center"><strong>$Lang::tr{'ssh key'}</strong></th>
194 <th align="center"><strong>$Lang::tr{'type'}</strong></th>
195 <th align="center"><strong>$Lang::tr{'ssh fingerprint'}</strong></th>
196 <th align="center"><strong>$Lang::tr{'ssh key size'}</strong></th>
203 &viewkey
("/etc/ssh/ssh_host_key.pub","RSA1");
204 &viewkey
("/etc/ssh/ssh_host_rsa_key.pub","RSA2");
205 &viewkey
("/etc/ssh/ssh_host_dsa_key.pub","DSA");
206 &viewkey
("/etc/ssh/ssh_host_ecdsa_key.pub","ECDSA");
207 &viewkey
("/etc/ssh/ssh_host_ed25519_key.pub","ED25519");
209 print "</tbody>\n</table>\n";
213 &Header
::openbox
('100%', 'center', $Lang::tr
{'ssh active sessions'});
216 <table class="tbl" width='66%'>
220 <strong>$Lang::tr{'ssh username'}</strong>
223 <strong>$Lang::tr{'ssh login time'}</strong>
226 <strong>$Lang::tr{'ip address'}</strong>
229 <strong>$Lang::tr{'country'}</strong>
232 <strong>$Lang::tr{'rdns'}</strong>
239 &printactivelogins
();
241 print "</tbody>\n</table>\n";
245 &Header
::closebigbox
();
247 &Header
::closepage
();
257 my @temp = split(/ /,`/usr/bin/ssh-keygen -l -f $key`);
258 my $keysize = &Header
::cleanhtml
($temp[0],"y");
259 my $fingerprint = &Header
::cleanhtml
($temp[1],"y");
260 print "<tr><td><code>$key</code></td><td align='center'>$name</td><td><code>$fingerprint</code></td><td align='center'>$keysize</td></tr>\n";
264 sub printactivelogins
()
266 # print active SSH logins (grep outpout of "who -s")
267 my $command = "who -s";
268 my @output = `$command`;
273 if ( scalar(@output) == 0 )
276 my $table_colour = ($id++ % 2) ?
$color{'color22'} : $color{'color20'};
277 print "<tr bgcolor='$table_colour'><td colspan='5'>$Lang::tr{'ssh no active logins'}</td></tr>\n";
279 # list active logins...
281 foreach my $line (@output)
283 my @arry = split(/\ +/, $line);
285 my $username = @arry[0];
286 my $logintime = join(' ', @arry[2..4]);
287 my $remoteip = @arry[5];
288 $remoteip =~ s/[()]//g;
290 # display more information about that IP adress...
291 my $ccode = &GeoIP
::lookup
($remoteip);
292 my $flag_icon = &GeoIP
::get_flag_icon
($ccode);
295 my $iaddr = inet_aton
($remoteip);
296 my $rdns = gethostbyaddr($iaddr, AF_INET
);
297 if (!$rdns) { $rdns = $Lang::tr
{'lookup failed'}; };
299 my $table_colour = ($id++ % 2) ?
$color{'color22'} : $color{'color20'};
302 <tr bgcolor='$table_colour'>
305 <td align='center'><a href='ipinfo.cgi?ip=$remoteip'>$remoteip</a></td>
306 <td align='center'><a href='country.cgi#$ccode'><img src='$flag_icon' border='0' alt='$ccode' title='$ccode' /></a></td>