]>
git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - html/cgi-bin/tor.cgi
2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2007-2020 IPFire Team <info@ipfire.org> #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
24 # enable only the following on debugging purpose
26 #use CGI::Carp 'fatalsToBrowser';
28 require '/var/ipfire/general-functions.pl';
29 require "${General::swroot}/location-functions.pl";
30 require "${General::swroot}/lang.pl";
31 require "${General::swroot}/header.pl";
33 #workaround to suppress a warning when a variable is used only once
34 my @dummy = ( ${Header
::colouryellow
} );
37 my @bandwidth_limits = (
38 1000 * 1024, # 1 GBit/s
41 100 * 1024, # 100 MBit/s
53 my @accounting_periods = ('daily', 'weekly', 'monthly');
55 my $TOR_CONTROL_PORT = 9051;
66 open(FILE
, '/usr/local/bin/addonctrl tor status | ');
69 $string = join("", @tor);
70 $string =~ s/[a-z_]//gi;
71 $string =~ s/\[[0-1]\;[0-9]+//gi;
72 $string =~ s/[\(\)\.]//gi;
75 @pid = split(/\s/,$string);
76 if (open(FILE
, "/proc/$pid[0]/statm")){
78 @memory = split(/ /,$temp);
85 our %netsettings = ();
86 &General
::readhash
("${General::swroot}/ethernet/settings", \
%netsettings);
89 our %mainsettings = ();
90 &General
::readhash
("${General::swroot}/main/settings", \
%mainsettings);
91 &General
::readhash
("/srv/web/ipfire/html/themes/ipfire/include/colors.txt", \
%color);
95 $settings{'TOR_ENABLED'} = 'off';
96 $settings{'TOR_SOCKS_PORT'} = 9050;
97 $settings{'TOR_EXIT_COUNTRY'} = '';
98 $settings{'TOR_USE_EXIT_NODES'} = '';
99 $settings{'TOR_GUARD_COUNTRY'} = '';
100 $settings{'TOR_USE_GUARD_NODES'} = '';
101 $settings{'TOR_ALLOWED_SUBNETS'} = "$netsettings{'GREEN_NETADDRESS'}\/$netsettings{'GREEN_NETMASK'}";
102 if (&Header
::blue_used
()) {
103 $settings{'TOR_ALLOWED_SUBNETS'} .= ",$netsettings{'BLUE_NETADDRESS'}\/$netsettings{'BLUE_NETMASK'}";
106 $settings{'TOR_RELAY_ENABLED'} = 'off';
107 $settings{'TOR_RELAY_MODE'} = 'relay';
108 $settings{'TOR_RELAY_ADDRESS'} = '';
109 $settings{'TOR_RELAY_PORT'} = 9001;
110 $settings{'TOR_RELAY_DIRPORT'} = 0;
111 $settings{'TOR_RELAY_NICKNAME'} = '';
112 $settings{'TOR_RELAY_CONTACT_INFO'} = '';
113 $settings{'TOR_RELAY_BANDWIDTH_RATE'} = 0;
114 $settings{'TOR_RELAY_BANDWIDTH_BURST'} = 0;
115 $settings{'TOR_RELAY_ACCOUNTING_LIMIT'} = 0;
116 $settings{'TOR_RELAY_ACCOUNTING_PERIOD'} = 'daily';
118 $settings{'ACTION'} = '';
120 my $errormessage = '';
121 my $warnmessage = '';
123 &Header
::showhttpheaders
();
126 &Header
::getcgihash
(\
%settings);
128 # Create tor command connection.
129 our $torctrl = &TorConnect
();
131 # Toggle enable/disable field.
132 if ($settings{'ACTION'} eq $Lang::tr
{'save'}) {
133 if ($settings{'TOR_RELAY_NICKNAME'} ne '') {
134 if ($settings{'TOR_RELAY_NICKNAME'} !~ /^[a-zA-Z0-9]+$/) {
135 $errormessage = "$Lang::tr{'tor errmsg invalid relay name'}: $settings{'TOR_RELAY_NICKNAME'}";
139 if (!&General
::validport
($settings{'TOR_SOCKS_PORT'})) {
140 $errormessage = "$Lang::tr{'tor errmsg invalid socks port'}: $settings{'TOR_SOCKS_PORT'}";
143 if (!&General
::validport
($settings{'TOR_RELAY_PORT'})) {
144 $errormessage = "$Lang::tr{'tor errmsg invalid relay port'}: $settings{'TOR_RELAY_PORT'}";
146 if ($settings{'TOR_RELAY_DIRPORT'} ne '0') {
147 if (!&General
::validport
($settings{'TOR_RELAY_DIRPORT'})) {
148 $errormessage = "$Lang::tr{'tor errmsg invalid directory port'}: $settings{'TOR_RELAY_DIRPORT'}";
152 if ($settings{'TOR_RELAY_ADDRESS'} ne '') {
153 if ((!&General
::validfqdn
($settings{'TOR_RELAY_ADDRESS'})) && (!&General
::validip
($settings{'TOR_RELAY_ADDRESS'}))) {
154 $errormessage = "$Lang::tr{'tor errmsg invalid relay address'}: $settings{'TOR_RELAY_ADDRESS'}";
158 if ($settings{'TOR_RELAY_ACCOUNTING_LIMIT'} !~ /^\d+$/) {
159 $errormessage = "$Lang::tr{'tor errmsg invalid accounting limit'}: $settings{'TOR_RELAY_ACCOUNTING_LIMIT'}";
162 my @temp = split(/[\n,]/,$settings{'TOR_ALLOWED_SUBNETS'});
163 $settings{'TOR_ALLOWED_SUBNETS'} = "";
165 s/^\s+//g; s/\s+$//g;
167 unless (&General
::validipandmask
($_)) {
168 $errormessage = "$Lang::tr{'tor errmsg invalid ip or mask'}: $_";
170 $settings{'TOR_ALLOWED_SUBNETS'} .= $_.",";
174 @temp = split(/[\n,]/,$settings{'TOR_USE_EXIT_NODES'});
175 $settings{'TOR_USE_EXIT_NODES'} = "";
177 s/^\s+//g; s/\s+$//g;
179 $settings{'TOR_USE_EXIT_NODES'} .= $_.",";
183 @temp = split(/[\n,]/,$settings{'TOR_USE_GUARD_NODES'});
184 $settings{'TOR_USE_GUARD_NODES'} = "";
186 s/^\s+//g; s/\s+$//g;
188 $settings{'TOR_USE_GUARD_NODES'} .= $_.",";
192 # Burst bandwidth must be less or equal to bandwidth rate.
193 if ($settings{'TOR_RELAY_BANDWIDTH_RATE'} == 0) {
194 $settings{'TOR_RELAY_BANDWIDTH_BURST'} = 0;
196 } elsif ($settings{'TOR_RELAY_BANDWIDTH_BURST'} < $settings{'TOR_RELAY_BANDWIDTH_RATE'}) {
197 $settings{'TOR_RELAY_BANDWIDTH_BURST'} = $settings{'TOR_RELAY_BANDWIDTH_RATE'};
200 if ($errormessage eq '') {
201 # Write configuration settings to file.
202 &General
::writehash
("${General::swroot}/tor/settings", \
%settings);
204 # Update configuration files.
205 &BuildConfiguration
();
208 # Load settings from file.
209 &General
::readhash
("${General::swroot}/tor/settings", \
%settings);
214 # Close Tor control connection.
223 $checked{'TOR_ENABLED'}{'on'} = '';
224 $checked{'TOR_ENABLED'}{'off'} = '';
225 $checked{'TOR_ENABLED'}{$settings{'TOR_ENABLED'}} = 'checked';
227 $checked{'TOR_RELAY_ENABLED'}{'on'} = '';
228 $checked{'TOR_RELAY_ENABLED'}{'off'} = '';
229 $checked{'TOR_RELAY_ENABLED'}{$settings{'TOR_RELAY_ENABLED'}} = 'checked';
231 &Header
::openpage
($Lang::tr
{'tor configuration'}, 1, '');
232 &Header
::openbigbox
('100%', 'left', '', $errormessage);
235 &Header
::openbox
('100%', 'left', $Lang::tr
{'error messages'});
236 print "<font class='base'>$errormessage </font>\n";
240 print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
242 &Header
::openbox
('100%', 'center', $Lang::tr
{'tor'});
245 if ( ($memory != 0) && (@pid[0] ne "///") ){
246 print "<table width='95%' cellspacing='0' class='tbl'>";
247 print "<tr><th bgcolor='$color{'color20'}' colspan='3' align='left'><strong>$Lang::tr{'tor service'}</strong></th></tr>";
248 print "<tr><td class='base'>$Lang::tr{'tor daemon'}</td>";
249 print "<td align='center' colspan='2' width='75%' bgcolor='${Header::colourgreen}'><font color='white'><strong>$Lang::tr{'running'}</strong></font></td></tr>";
250 print "<tr><td class='base'></td>";
251 print "<td bgcolor='$color{'color20'}' align='center'><strong>PID</strong></td>";
252 print "<td bgcolor='$color{'color20'}' align='center'><strong>$Lang::tr{'memory'}</strong></td></tr>";
253 print "<tr><td class='base'></td>";
254 print "<td bgcolor='$color{'color22'}' align='center'>@pid[0]</td>";
255 print "<td bgcolor='$color{'color22'}' align='center'>$memory KB</td></tr>";
258 print "<table width='95%' cellspacing='0' class='tbl'>";
259 print "<tr><th bgcolor='$color{'color20'}' colspan='3' align='left'><strong>$Lang::tr{'tor service'}</strong></th></tr>";
260 print "<tr><td class='base'>$Lang::tr{'tor daemon'}</td>";
261 print "<td align='center' width='75%' bgcolor='${Header::colourred}'><font color='white'><strong>$Lang::tr{'stopped'}</strong></font></td></tr>";
267 &Header
::openbox
('100%', 'center', $Lang::tr
{'tor configuration'});
272 <td colspan='4' class='base' bgcolor='$color{'color20'}'><b>$Lang::tr{'tor common settings'}</b></td>
275 <td width='25%' class='base'>$Lang::tr{'tor enabled'}:</td>
276 <td width='30%'><input type='checkbox' name='TOR_ENABLED' $checked{'TOR_ENABLED'}{'on'} /></td>
277 <td width='25%' class='base'>$Lang::tr{'tor socks port'}: <img src='/blob.gif' alt='*' /></td>
278 <td width='20%'><input type='text' name='TOR_SOCKS_PORT' value='$settings{'TOR_SOCKS_PORT'}' size='5' /></td>
281 <td width='25%' class='base'>$Lang::tr{'tor relay enabled'}:</td>
282 <td width='30%'><input type='checkbox' name='TOR_RELAY_ENABLED' $checked{'TOR_RELAY_ENABLED'}{'on'} /></td>
283 <td width='25%' class='base'></td>
284 <td width='20%'></td>
289 my @temp = split(",", $settings{'TOR_ALLOWED_SUBNETS'});
290 $settings{'TOR_ALLOWED_SUBNETS'} = join("\n", @temp);
292 @temp = split(",", $settings{'TOR_USE_EXIT_NODES'});
293 $settings{'TOR_USE_EXIT_NODES'} = join("\n", @temp);
295 @temp = split(",", $settings{'TOR_USE_GUARD_NODES'});
296 $settings{'TOR_USE_GUARD_NODES'} = join("\n", @temp);
304 <td colspan='4' class='base' bgcolor='$color{'color20'}'><b>$Lang::tr{'tor acls'}</b></td>
307 <td colspan='2' class='base' width='55%'>
308 $Lang::tr{'tor allowed subnets'}:
310 <td colspan='2' width='45%'></td>
313 <td colspan='2' class='base' width='55%'>
314 <textarea name='TOR_ALLOWED_SUBNETS' cols='32' rows='3' wrap='off'>$settings{'TOR_ALLOWED_SUBNETS'}</textarea>
316 <td colspan='2' width='45%'></td>
325 <td colspan='4' class='base' bgcolor='$color{'color20'}'><b>$Lang::tr{'tor guard nodes'}</b></td>
328 <td colspan='2' class='base' width='55%'></td>
329 <td colspan='2' class='base' width='45%'>$Lang::tr{'tor use guard nodes'}:</td>
332 <td width='50%' colspan='2'>
333 <select name='TOR_GUARD_COUNTRY' multiple='multiple'>
334 <option value=''>- $Lang::tr{'tor guard country any'} -</option>
337 # Convert Guard country strings into lists to make comparison easier
339 if ($settings{'TOR_GUARD_COUNTRY'} ne '') {
340 @guard_countries = split(/\|/, $settings{'TOR_GUARD_COUNTRY'});
343 my @country_codes = &Location
::Functions
::get_locations
("no_special_locations");
344 foreach my $country_code (@country_codes) {
345 # Convert country code into upper case format.
346 $country_code = uc($country_code);
349 my $country_name = &Location
::Functions
::get_full_country_name
($country_code);
351 print "<option value='$country_code'";
353 if ($settings{'TOR_GUARD_COUNTRY'} ne '') {
354 print " selected" if grep /$country_code/, @guard_countries;
357 print ">$country_name ($country_code)</option>\n";
363 <td width='50%' colspan='2'>
364 <textarea name='TOR_USE_GUARD_NODES' cols='32' rows='3' wrap='off'>$settings{'TOR_USE_GUARD_NODES'}</textarea>
374 <td colspan='4' class='base' bgcolor='$color{'color20'}'><b>$Lang::tr{'tor exit nodes'}</b></td>
377 <td colspan='2' class='base' width='55%'></td>
378 <td colspan='2' class='base' width='45%'>$Lang::tr{'tor use exit nodes'}:</td>
381 <td width='50%' colspan='2'>
382 <select name='TOR_EXIT_COUNTRY' multiple='multiple'>
383 <option value=''>- $Lang::tr{'tor exit country any'} -</option>
385 my @country_codes = &Location
::Functions
::get_locations
("no_special_locations");
387 # Convert Exit country strings into lists to make comparison easier
389 if ($settings{'TOR_EXIT_COUNTRY'} ne '') {
390 @exit_countries = split(/\|/, $settings{'TOR_EXIT_COUNTRY'});
393 foreach my $country_code (@country_codes) {
394 # Convert country code into upper case format.
395 $country_code = uc($country_code);
398 my $country_name = &Location
::Functions
::get_full_country_name
($country_code);
400 print "<option value='$country_code'";
402 if ($settings{'TOR_EXIT_COUNTRY'} ne '') {
403 print " selected" if grep /$country_code/, @exit_countries;
406 print ">$country_name ($country_code)</option>\n";
412 <td width='50%' colspan='2'>
413 <textarea name='TOR_USE_EXIT_NODES' cols='32' rows='3' wrap='off'>$settings{'TOR_USE_EXIT_NODES'}</textarea>
422 $selected{'TOR_RELAY_MODE'}{'bridge'} = '';
423 $selected{'TOR_RELAY_MODE'}{'exit'} = '';
424 $selected{'TOR_RELAY_MODE'}{'private-bridge'} = '';
425 $selected{'TOR_RELAY_MODE'}{'relay'} = '';
426 $selected{'TOR_RELAY_MODE'}{$settings{'TOR_RELAY_MODE'}} = 'selected';
428 $selected{'TOR_RELAY_BANDWIDTH_RATE'}{'0'} = '';
429 foreach (@bandwidth_limits) {
430 $selected{'TOR_RELAY_BANDWIDTH_RATE'}{$_} = '';
432 $selected{'TOR_RELAY_BANDWIDTH_RATE'}{$settings{'TOR_RELAY_BANDWIDTH_RATE'}} = 'selected';
434 $selected{'TOR_RELAY_BANDWIDTH_BURST'}{'0'} = '';
435 foreach (@bandwidth_limits) {
436 $selected{'TOR_RELAY_BANDWIDTH_BURST'}{$_} = '';
438 $selected{'TOR_RELAY_BANDWIDTH_BURST'}{$settings{'TOR_RELAY_BANDWIDTH_BURST'}} = 'selected';
440 foreach (@accounting_periods) {
441 $selected{'TOR_RELAY_ACCOUNTING_PERIOD'}{$_} = '';
443 $selected{'TOR_RELAY_ACCOUNTING_PERIOD'}{$settings{'TOR_RELAY_ACCOUNTING_PERIOD'}} = 'selected';
445 &Header
::openbox
('100%', 'center', $Lang::tr
{'tor relay configuration'});
450 <td width='25%' class='base'>$Lang::tr{'tor relay mode'}:</td>
452 <select name='TOR_RELAY_MODE'>
453 <option value='exit' $selected{'TOR_RELAY_MODE'}{'exit'}>$Lang::tr{'tor relay mode exit'}</option>
454 <option value='relay' $selected{'TOR_RELAY_MODE'}{'relay'}>$Lang::tr{'tor relay mode relay'}</option>
455 <option value='bridge' $selected{'TOR_RELAY_MODE'}{'bridge'}>$Lang::tr{'tor relay mode bridge'}</option>
456 <option value='private-bridge' $selected{'TOR_RELAY_MODE'}{'private-bridge'}>$Lang::tr{'tor relay mode private bridge'}</option>
459 <td width='25%' class='base'>$Lang::tr{'tor relay nickname'}:</td>
461 <input type='text' name='TOR_RELAY_NICKNAME' value='$settings{'TOR_RELAY_NICKNAME'}' maxlength='19' />
465 <td width='25%' class='base'>$Lang::tr{'tor relay address'}:</td>
467 <input type='text' name='TOR_RELAY_ADDRESS' value='$settings{'TOR_RELAY_ADDRESS'}' />
469 <td width='25%' class='base'>$Lang::tr{'tor relay port'}: <img src='/blob.gif' alt='*' /></td>
471 <input type='text' name='TOR_RELAY_PORT' value='$settings{'TOR_RELAY_PORT'}' size='5' />
475 <td width='25%'> </td>
476 <td width='30%'> </td>
477 <td width='25%' class='base'>$Lang::tr{'tor directory port'}: <img src='/blob.gif' alt='*' /></td>
479 <input type='text' name='TOR_RELAY_DIRPORT' value='$settings{'TOR_RELAY_DIRPORT'}' size='5' /> $Lang::tr{'tor 0 = disabled'}
483 <td width='25%' class='base'>$Lang::tr{'tor contact info'}:</td>
484 <td width='75%' colspan='3'>
485 <input type='text' name='TOR_RELAY_CONTACT_INFO' value='$settings{'TOR_RELAY_CONTACT_INFO'}' style='width: 98%;' />
494 <td colspan='4' class='base' bgcolor='$color{'color20'}'><b>$Lang::tr{'tor bandwidth settings'}</b></td>
497 <td width='25%' class='base'>$Lang::tr{'tor bandwidth rate'}:</td>
498 <td width='30%' class='base'>
499 <select name='TOR_RELAY_BANDWIDTH_RATE'>
502 foreach (@bandwidth_limits) {
504 print "<option value='$_' $selected{'TOR_RELAY_BANDWIDTH_RATE'}{$_}>". $_ / 1024 ." Mbit/s</option
>\n";
506 print "<option value
='$_' $selected{'TOR_RELAY_BANDWIDTH_RATE'}{$_}>$_ kbit
/s</option
>\n";
511 <option value='0' $selected{'TOR_RELAY_BANDWIDTH_RATE'}{'0'}>$Lang::tr{'tor bandwidth unlimited'}</option>
514 <td width='25%' class='base'>$Lang::tr{'tor accounting limit'}: <img src='/blob.gif' alt='*' /></td>
516 <input type='text' name='TOR_RELAY_ACCOUNTING_LIMIT' value='$settings{'TOR_RELAY_ACCOUNTING_LIMIT'}' size='12' />
520 <td width='25%' class='base'>$Lang::tr{'tor bandwidth burst'}:</td>
521 <td width='20%' class='base'>
522 <select name='TOR_RELAY_BANDWIDTH_BURST'>
525 foreach (@bandwidth_limits) {
527 print "<option value='$_' $selected{'TOR_RELAY_BANDWIDTH_BURST'}{$_}>". $_ / 1024 ." Mbit/s</option
>\n";
529 print "<option value
='$_' $selected{'TOR_RELAY_BANDWIDTH_BURST'}{$_}>$_ kbit
/s</option
>\n";
533 <option value='0' $selected{'TOR_RELAY_BANDWIDTH_BURST'}{'0'}>$Lang::tr{'tor bandwidth unlimited'}</option>
536 <td width='25%' class='base'>$Lang::tr{'tor accounting period'}:</td>
538 <select name='TOR_RELAY_ACCOUNTING_PERIOD'>
541 foreach (@accounting_periods) {
542 print "<option value='$_' $selected{'TOR_RELAY_ACCOUNTING_PERIOD'}{$_}>$Lang::tr{'tor accounting period '.$_}</option>";
557 <td><img src='/blob.gif' align='top' alt='*' /> <font class='base'>$Lang::tr{'required field'}</font></td>
558 <td align='right'> </td>
567 <td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
573 # If we have a control connection, show the stats.
575 &Header
::openbox
('100%', 'center', $Lang::tr
{'tor stats'});
577 my @traffic = &TorTrafficStats
($torctrl);
584 if ($settings{'TOR_RELAY_ENABLED'} eq 'on') {
585 my $fingerprint = &TorRelayFingerprint
($torctrl);
589 <td width='40%' class='base'>$Lang::tr{'tor relay fingerprint'}:</td>
591 <a href='https://metrics.torproject.org/rs.html#details/$fingerprint' target='_blank'>$fingerprint</a>
598 my $address = TorGetInfo
($torctrl, "address");
602 <td width='40%' class='base'>$Lang::tr{'tor relay external address'}:</td>
603 <td width='60%'>$address</td>
610 <td width='40%'>$Lang::tr{'tor traffic read written'}:</td>
612 print "<td width='60%'>" . &FormatBytes
($traffic[0]) ."/". &FormatBytes
($traffic[1]) . "</td>";
619 my $accounting = &TorAccountingStats
($torctrl);
624 <td colspan='2' class='base'><b>$Lang::tr{'tor accounting'}</b></td>
628 if ($accounting->{'hibernating'} eq "hard") {
631 <td class='base' colspan='2' bgcolor="$Header::colourred" align='center'>
632 <font color='white'>$Lang::tr{'tor traffic limit hard'}</font>
636 } elsif ($accounting->{'hibernating'} eq "soft") {
639 <td class='base' colspan='2' bgcolor="$Header::colourorange" align='center'>
640 <font color='white'>$Lang::tr{'tor traffic limit soft'}</font>
648 <td width='40%' class='base'>$Lang::tr{'tor accounting interval'}</td>
650 $accounting->{'interval-start'} - $accounting->{'interval-end'}
654 <td width='40%' class='base'>$Lang::tr{'tor accounting bytes'}</td>
658 print &FormatBytes
($accounting->{'bytes_read'}) . "/" . &FormatBytes
($accounting->{'bytes_written'});
659 print " (" . &FormatBytes
($accounting->{'bytes-left_read'}) . "/" . &FormatBytes
($accounting->{'bytes-left_written'});
660 print " $Lang::tr{'tor accounting bytes left'})";
669 my @nodes = &TorORConnStatus
($torctrl);
671 my $nodes_length = scalar @nodes;
675 <td width='40%' class='base'><b>$Lang::tr{'tor connected relays'}</b></td>
676 <td width='60%' colspan='2'>($nodes_length)</td>
680 foreach my $node (@nodes) {
684 <a href='https://metrics.torproject.org/rs.html#details/$node->{'fingerprint'}' target='_blank'>
691 if (exists($node->{'country_code'})) {
692 # Get the flag icon of the country.
693 my $flag_icon = &Location
::Functions
::get_flag_icon
($node->{'country_code'});
695 # Check if a flag for the given country is available.
697 print "<a href='country.cgi#$node->{'country_code'}'><img src='$flag_icon' border='0' align='absmiddle' alt='$node->{'country_code'}'></a>";
699 print "<img src='/images/flags/blank.png' border='0' align='absmiddle'/>";
704 <a href='ipinfo.cgi?ip=$node->{'address'}'>$node->{'address'}</a>:$node->{'port'}
706 <td width='30%' align='right'>
707 ~$node->{'bandwidth_string'}
720 &Header
::closebigbox
();
721 &Header
::closepage
();
724 sub BuildConfiguration
() {
726 &General
::readhash
("${General::swroot}/tor/settings", \
%settings);
728 my $torrc = "${General::swroot}/tor/torrc";
730 open(FILE
, ">$torrc");
733 print FILE
"ControlPort $TOR_CONTROL_PORT\n";
735 if ($settings{'TOR_ENABLED'} eq 'on') {
736 my $strict_nodes = 0;
738 print FILE
"SocksPort 0.0.0.0:$settings{'TOR_SOCKS_PORT'}\n";
740 my @subnets = split(",", $settings{'TOR_ALLOWED_SUBNETS'});
742 print FILE
"SocksPolicy accept $_\n" if (&General
::validipandmask
($_));
744 print FILE
"SocksPolicy reject *\n" if (@subnets);
746 if ($settings{'TOR_GUARD_COUNTRY'} ne '') {
750 for my $singlecountry (split(/\|/, $settings{'TOR_GUARD_COUNTRY'})) {
751 if ($countrylist eq '') {
752 $countrylist = "{" . lc $singlecountry . "}";
754 $countrylist = $countrylist . "," . "{" . lc $singlecountry . "}";
758 print FILE
"EntryNodes $countrylist\n";
761 if ($settings{'TOR_USE_GUARD_NODES'} ne '') {
764 my @nodes = split(",", $settings{'TOR_USE_GUARD_NODES'});
766 print FILE
"EntryNode $_\n";
770 if ($settings{'TOR_EXIT_COUNTRY'} ne '') {
774 for my $singlecountry (split(/\|/, $settings{'TOR_EXIT_COUNTRY'})) {
775 if ($countrylist eq '') {
776 $countrylist = "{" . lc $singlecountry . "}";
778 $countrylist = $countrylist . "," . "{" . lc $singlecountry . "}";
782 print FILE
"ExitNodes $countrylist\n";
785 if ($settings{'TOR_USE_EXIT_NODES'} ne '') {
788 my @nodes = split(",", $settings{'TOR_USE_EXIT_NODES'});
790 print FILE
"ExitNode $_\n";
794 if ($strict_nodes > 0) {
795 print FILE
"StrictNodes 1\n";
799 if ($settings{'TOR_RELAY_ENABLED'} eq 'on') {
800 # Reject access to private networks.
801 print FILE
"ExitPolicyRejectPrivate 1\n";
803 print FILE
"ORPort $settings{'TOR_RELAY_PORT'}\n";
805 if ($settings{'TOR_RELAY_DIRPORT'} ne '0') {
806 print FILE
"DirPort $settings{'TOR_RELAY_DIRPORT'}\n";
809 if ($settings{'TOR_RELAY_ADDRESS'} ne '') {
810 print FILE
"Address $settings{'TOR_RELAY_ADDRESS'}\n";
813 if ($settings{'TOR_RELAY_NICKNAME'} ne '') {
814 print FILE
"Nickname $settings{'TOR_RELAY_NICKNAME'}\n";
817 if ($settings{'TOR_RELAY_CONTACT_INFO'} ne '') {
818 print FILE
"ContactInfo $settings{'TOR_RELAY_CONTACT_INFO'}\n";
821 # Limit to bridge mode.
824 if ($settings{'TOR_RELAY_MODE'} eq 'bridge') {
828 } elsif ($settings{'TOR_RELAY_MODE'} eq 'private-bridge') {
831 print FILE
"PublishServerDescriptor 0\n";
834 } elsif ($settings{'TOR_RELAY_MODE'} eq 'exit') {
835 print FILE
"ExitPolicy accept *:*\n";
838 } elsif ($settings{'TOR_RELAY_MODE'} eq 'relay') {
839 print FILE
"ExitPolicy reject *:*\n";
842 if ($is_bridge > 0) {
843 print FILE
"BridgeRelay 1\n";
844 print FILE
"Exitpolicy reject *:*\n";
847 if ($settings{'TOR_RELAY_BANDWIDTH_RATE'} > 0) {
848 print FILE
"RelayBandwidthRate ";
849 print FILE
$settings{'TOR_RELAY_BANDWIDTH_RATE'} / 8;
852 if ($settings{'TOR_RELAY_BANDWIDTH_BURST'} > 0) {
853 print FILE
"RelayBandwidthBurst ";
854 print FILE
$settings{'TOR_RELAY_BANDWIDTH_BURST'} / 8;
859 if ($settings{'TOR_RELAY_ACCOUNTING_LIMIT'} > 0) {
860 print FILE
"AccountingMax ".$settings{'TOR_RELAY_ACCOUNTING_LIMIT'}." MB\n";
862 if ($settings{'TOR_RELAY_ACCOUNTING_PERIOD'} eq 'daily') {
863 print FILE
"AccountingStart day 00:00\n";
864 } elsif ($settings{'TOR_RELAY_ACCOUNTING_PERIOD'} eq 'weekly') {
865 print FILE
"AccountingStart week 1 00:00\n";
866 } elsif ($settings{'TOR_RELAY_ACCOUNTING_PERIOD'} eq 'monthly') {
867 print FILE
"AccountingStart month 1 00:00\n";
874 # Restart the service.
875 if (($settings{'TOR_ENABLED'} eq 'on') || ($settings{'TOR_RELAY_ENABLED'} eq 'on')) {
876 system("/usr/local/bin/torctrl restart &>/dev/null");
878 system("/usr/local/bin/torctrl stop &>/dev/null");
880 # Update pid and memory
885 my $socket = new IO
::Socket
::INET
(
886 Proto
=> 'tcp', PeerAddr
=> '127.0.0.1', PeerPort
=> $TOR_CONTROL_PORT,
889 $socket->autoflush(1);
892 &TorSendCommand
($socket, "AUTHENTICATE");
897 sub TorSendCommand
() {
898 my ($socket, $cmd) = @_;
900 # Replace line ending with \r\n.
907 while (my $line = <$socket>) {
909 if ($line =~ /^.\r\n$/) {
913 # Command has been successfully executed.
914 if ($line =~ /250 OK/) {
918 } elsif ($line =~ /^5\d+/) {
922 # Remove line endings.
925 push(@output, $line);
932 sub TorSendCommandOneLine
() {
933 my ($tor, $cmd) = @_;
935 my @output = &TorSendCommand
($tor, $cmd);
940 my ($tor, $cmd) = @_;
942 my $output = &TorSendCommandOneLine
($tor, "GETINFO ".$cmd);
944 my ($key, $value) = split("=", $output);
952 $socket->shutdown(2);
956 sub TorTrafficStats
() {
959 my $output_read = &TorGetInfo
($tor, "traffic/read");
960 my $output_written = &TorGetInfo
($tor, "traffic/written");
962 return ($output_read, $output_written);
965 sub TorRelayFingerprint
() {
968 return &TorGetInfo
($tor, "fingerprint");
971 sub TorORConnStatus
() {
975 my @output = &TorSendCommand
($tor, "GETINFO orconn-status");
977 $_ =~ s/^250[\+-]orconn-status=//;
980 next unless ($_ =~ /^\$/);
982 my @line = split(" ", $_);
983 my @node = split(/[=~]/, $line[0]);
985 my $node = &TorNodeDescription
($tor, $node[0]);
992 @nodes = sort { $a->{'name'} cmp $b->{'name'} } @nodes;
997 sub TorNodeDescription
() {
998 my ($tor, $fingerprint) = @_;
999 $fingerprint =~ s/\$//;
1002 fingerprint
=> $fingerprint,
1006 my @output = &TorSendCommand
($tor, "GETINFO ns/id/$node->{'fingerprint'}");
1010 if ($_ =~ /^r (\w+) (.*) (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) (\d+)/) {
1011 $node->{'name'} = $1;
1012 $node->{'address'} = $3;
1013 $node->{'port'} = $4;
1015 my $country_code = &Location
::Functions
::lookup_country_code
($node->{'address'});
1016 $node->{'country_code'} = $country_code;
1019 } elsif ($_ =~ /^s (.*)$/) {
1020 $node->{'flags'} = split(" ", $1);
1022 foreach my $flag ($node->{'flags'}) {
1023 if ($flag eq "Exit") {
1024 $node->{'exit_node'}++;
1029 } elsif ($_ =~ /^w Bandwidth=(\d+)/) {
1030 $node->{'bandwidth'} = $1 * 8;
1031 $node->{'bandwidth_string'} = &FormatBitsPerSecond
($node->{'bandwidth'});
1035 if (exists($node->{'name'})) {
1040 sub TorAccountingStats
() {
1044 my $enabled = &TorGetInfo
($tor, "accounting/enabled");
1045 if ($enabled ne '1') {
1049 my @cmds = ("hibernating", "interval-start", "interval-end");
1051 $ret->{$_} = &TorGetInfo
($tor, "accounting/$_");
1054 my @cmds = ("bytes", "bytes-left");
1056 my $output = &TorGetInfo
($tor, "accounting/$_");
1057 my @bytes = split(" ", $output);
1059 $ret->{$_."_read"} = $bytes[0];
1060 $ret->{$_."_written"} = $bytes[1];
1069 my @units = ("B", "KB", "MB", "GB", "TB");
1070 my $units_index = 0;
1072 while (($units_index <= $#units) && ($bytes >= 1024)) {
1077 return sprintf("%.2f %s", $bytes, $units[$units_index]);
1080 sub FormatBitsPerSecond
() {
1083 my @units = ("bit/s", "kbit/s", "Mbit/s", "Gbit/s", "Tbit/s");
1084 my $units_index = 0;
1086 while (($units_index <= $#units) && ($bits >= 1024)) {
1091 return sprintf("%.2f %s", $bits, $units[$units_index]);