X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;ds=sidebyside;f=html%2Fcgi-bin%2Foutgoingfw.cgi;h=3b740ab633b6f29d05c4e71f39115a294213d768;hb=1d6384bed903eb6c42f20881ecf3bca0d8f33d43;hp=e8cef70030e829727598066b37ea39e203cb6d17;hpb=f2fdd0c1e9a3ccf539cd477a6111281eadc200a7;p=ipfire-2.x.git
diff --git a/html/cgi-bin/outgoingfw.cgi b/html/cgi-bin/outgoingfw.cgi
index e8cef70030..3b740ab633 100644
--- a/html/cgi-bin/outgoingfw.cgi
+++ b/html/cgi-bin/outgoingfw.cgi
@@ -1,16 +1,28 @@
#!/usr/bin/perl
-#
-# IPFire CGIs
-#
-# This code is distributed under the terms of the GPL
-#
-# (c) The IPFire Team
-#
+###############################################################################
+# #
+# IPFire.org - A linux based firewall #
+# Copyright (C) 2010 Michael Tremer & Christian Schmidt #
+# #
+# This program is free software: you can redistribute it and/or modify #
+# it under the terms of the GNU General Public License as published by #
+# the Free Software Foundation, either version 3 of the License, or #
+# (at your option) any later version. #
+# #
+# This program is distributed in the hope that it will be useful, #
+# but WITHOUT ANY WARRANTY; without even the implied warranty of #
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
+# GNU General Public License for more details. #
+# #
+# You should have received a copy of the GNU General Public License #
+# along with this program. If not, see . #
+# #
+###############################################################################
use strict;
# enable only the following on debugging purpose
-use warnings;
-use CGI::Carp 'fatalsToBrowser';
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
@@ -59,14 +71,80 @@ $outfwsettings{'DISPLAY_DPORT'} = '';
$outfwsettings{'DISPLAY_SMAC'} = '';
$outfwsettings{'DISPLAY_SIP'} = '';
$outfwsettings{'POLICY'} = 'MODE0';
+$outfwsettings{'MODE1LOG'} = 'off';
+
+$outfwsettings{'TIME_FROM'} = '00:00';
+$outfwsettings{'TIME_TO'} = '00:00';
&General::readhash("${General::swroot}/outgoing/settings", \%outfwsettings);
&Header::getcgihash(\%outfwsettings);
+###############
+# DEBUG DEBUG
+#&Header::openbox('100%', 'left', 'DEBUG');
+#my $debugCount = 0;
+#foreach my $line (sort keys %outfwsettings) {
+#print "$line = $outfwsettings{$line}
\n";
+# $debugCount++;
+#}
+#print " Count: $debugCount\n";
+#&Header::closebox();
+# DEBUG DEBUG
+###############
+
+$selected{'TIME_FROM'}{$outfwsettings{'TIME_FROM'}} = "selected='selected'";
+$selected{'TIME_TO'}{$outfwsettings{'TIME_TO'}} = "selected='selected'";
+
+$checked{'MODE1LOG'}{'off'} = '';
+$checked{'MODE1LOG'}{'on'} = '';
+$checked{'MODE1LOG'}{$outfwsettings{'MODE1LOG'}} = "checked='checked'";
+$checked{'TIME_MON'}{'off'} = '';
+$checked{'TIME_MON'}{'on'} = '';
+$checked{'TIME_MON'}{$outfwsettings{'TIME_MON'}} = "checked='checked'";
+$checked{'TIME_TUE'}{'off'} = '';
+$checked{'TIME_TUE'}{'on'} = '';
+$checked{'TIME_TUE'}{$outfwsettings{'TIME_TUE'}} = "checked='checked'";
+$checked{'TIME_WED'}{'off'} = '';
+$checked{'TIME_WED'}{'on'} = '';
+$checked{'TIME_WED'}{$outfwsettings{'TIME_WED'}} = "checked='checked'";
+$checked{'TIME_THU'}{'off'} = '';
+$checked{'TIME_THU'}{'on'} = '';
+$checked{'TIME_THU'}{$outfwsettings{'TIME_THU'}} = "checked='checked'";
+$checked{'TIME_FRI'}{'off'} = '';
+$checked{'TIME_FRI'}{'on'} = '';
+$checked{'TIME_FRI'}{$outfwsettings{'TIME_FRI'}} = "checked='checked'";
+$checked{'TIME_SAT'}{'off'} = '';
+$checked{'TIME_SAT'}{'on'} = '';
+$checked{'TIME_SAT'}{$outfwsettings{'TIME_SAT'}} = "checked='checked'";
+$checked{'TIME_SUN'}{'off'} = '';
+$checked{'TIME_SUN'}{'on'} = '';
+$checked{'TIME_SUN'}{$outfwsettings{'TIME_SUN'}} = "checked='checked'";
+
if ($outfwsettings{'POLICY'} eq 'MODE0'){ $selected{'POLICY'}{'MODE0'} = 'selected'; } else { $selected{'POLICY'}{'MODE0'} = ''; }
if ($outfwsettings{'POLICY'} eq 'MODE1'){ $selected{'POLICY'}{'MODE1'} = 'selected'; } else { $selected{'POLICY'}{'MODE1'} = ''; }
if ($outfwsettings{'POLICY'} eq 'MODE2'){ $selected{'POLICY'}{'MODE2'} = 'selected'; } else { $selected{'POLICY'}{'MODE2'} = ''; }
+# This is a little hack if poeple donĀ“t mark any date then all will be selected, because they might have forgotten to select
+# a valid day. A Rule without any matching day will never work, because the timeranges are new feature people might not notice
+# that they have to select a day for the rule.
+
+if ( $outfwsettings{'TIME_MON'} eq "" &&
+ $outfwsettings{'TIME_TUE'} eq "" &&
+ $outfwsettings{'TIME_WED'} eq "" &&
+ $outfwsettings{'TIME_THU'} eq "" &&
+ $outfwsettings{'TIME_FRI'} eq "" &&
+ $outfwsettings{'TIME_SAT'} eq "" &&
+ $outfwsettings{'TIME_SUN'} eq "" )
+ {
+ $outfwsettings{'TIME_MON'} = "on";
+ $outfwsettings{'TIME_TUE'} = "on";
+ $outfwsettings{'TIME_WED'} = "on";
+ $outfwsettings{'TIME_THU'} = "on";
+ $outfwsettings{'TIME_FRI'} = "on";
+ $outfwsettings{'TIME_SAT'} = "on";
+ $outfwsettings{'TIME_SUN'} = "on";
+ }
+
&Header::openpage('Ausgehende Firewall', 1, '');
&Header::openbigbox('100%', 'left', '', $errormessage);
@@ -78,11 +156,20 @@ if ($outfwsettings{'ACTION'} eq $Lang::tr{'reset'})
$outfwsettings{'POLICY'}='MODE0';
unlink $configfile;
system("/usr/bin/touch $configfile");
+ my $MODE = $outfwsettings{'POLICY'};
+ %outfwsettings = ();
+ $outfwsettings{'POLICY'} = "$MODE";
&General::writehash("${General::swroot}/outgoing/settings", \%outfwsettings);
}
if ($outfwsettings{'ACTION'} eq $Lang::tr{'save'})
{
+ my $MODE = $outfwsettings{'POLICY'};
+ my $MODE1LOG = $outfwsettings{'MODE1LOG'};
+ %outfwsettings = ();
+ $outfwsettings{'POLICY'} = "$MODE";
+ $outfwsettings{'MODE1LOG'} = "$MODE1LOG";
&General::writehash("${General::swroot}/outgoing/settings", \%outfwsettings);
+ system("/usr/local/bin/outgoingfwctrl");
}
if ($outfwsettings{'ACTION'} eq 'enable')
{
@@ -100,6 +187,7 @@ if ($outfwsettings{'ACTION'} eq 'enable')
}
}
close FILE;
+ system("/usr/local/bin/outgoingfwctrl");
}
if ($outfwsettings{'ACTION'} eq 'disable')
{
@@ -117,6 +205,7 @@ if ($outfwsettings{'ACTION'} eq 'disable')
}
}
close FILE;
+ system("/usr/local/bin/outgoingfwctrl");
}
if ($outfwsettings{'ACTION'} eq $Lang::tr{'edit'})
{
@@ -127,6 +216,17 @@ if ($outfwsettings{'ACTION'} eq $Lang::tr{'edit'})
foreach $configentry (sort @configs)
{
@configline = split( /\;/, $configentry );
+
+ $configline[10] = "on" if not exists $configline[10];
+ $configline[11] = "on" if not exists $configline[11];
+ $configline[12] = "on" if not exists $configline[12];
+ $configline[13] = "on" if not exists $configline[13];
+ $configline[14] = "on" if not exists $configline[14];
+ $configline[15] = "on" if not exists $configline[15];
+ $configline[16] = "on" if not exists $configline[16];
+ $configline[17] = "00:00" if not exists $configline[17];
+ $configline[18] = "00:00" if not exists $configline[18];
+
unless (($configline[0] eq $outfwsettings{'STATE'}) &&
($configline[1] eq $outfwsettings{'ENABLED'}) &&
($configline[2] eq $outfwsettings{'SNET'}) &&
@@ -134,8 +234,18 @@ if ($outfwsettings{'ACTION'} eq $Lang::tr{'edit'})
($configline[4] eq $outfwsettings{'NAME'}) &&
($configline[5] eq $outfwsettings{'SIP'}) &&
($configline[6] eq $outfwsettings{'SMAC'}) &&
- ($configline[7] eq $outfwsettings{'DIP'}) &&
- ($configline[8] eq $outfwsettings{'DPORT'}))
+ ($configline[7] eq $outfwsettings{'DIP'}) &&
+ ($configline[9] eq $outfwsettings{'LOG'}) &&
+ ($configline[8] eq $outfwsettings{'DPORT'}) &&
+ ($configline[10] eq $outfwsettings{'TIME_MON'}) &&
+ ($configline[11] eq $outfwsettings{'TIME_TUE'}) &&
+ ($configline[12] eq $outfwsettings{'TIME_WED'}) &&
+ ($configline[13] eq $outfwsettings{'TIME_THU'}) &&
+ ($configline[14] eq $outfwsettings{'TIME_FRI'}) &&
+ ($configline[15] eq $outfwsettings{'TIME_SAT'}) &&
+ ($configline[16] eq $outfwsettings{'TIME_SUN'}) &&
+ ($configline[17] eq $outfwsettings{'TIME_FROM'}) &&
+ ($configline[18] eq $outfwsettings{'TIME_TO'}))
{
print FILE $configentry;
}
@@ -143,10 +253,12 @@ if ($outfwsettings{'ACTION'} eq $Lang::tr{'edit'})
close FILE;
$selected{'SNET'}{"$outfwsettings{'SNET'}"} = 'selected';
$selected{'PROT'}{"$outfwsettings{'PROT'}"} = 'selected';
+ $selected{'LOG'}{"$outfwsettings{'LOG'}"} = 'selected';
&addrule();
&Header::closebigbox();
&Header::closepage();
- exit
+ exit
+ system("/usr/local/bin/outgoingfwctrl");
}
if ($outfwsettings{'ACTION'} eq $Lang::tr{'delete'})
{
@@ -157,6 +269,17 @@ if ($outfwsettings{'ACTION'} eq $Lang::tr{'delete'})
foreach $configentry (sort @configs)
{
@configline = split( /\;/, $configentry );
+
+ $configline[10] = "on" if not exists $configline[10];
+ $configline[11] = "on" if not exists $configline[11];
+ $configline[12] = "on" if not exists $configline[12];
+ $configline[13] = "on" if not exists $configline[13];
+ $configline[14] = "on" if not exists $configline[14];
+ $configline[15] = "on" if not exists $configline[15];
+ $configline[16] = "on" if not exists $configline[16];
+ $configline[17] = "00:00" if not exists $configline[17];
+ $configline[18] = "00:00" if not exists $configline[18];
+
unless (($configline[0] eq $outfwsettings{'STATE'}) &&
($configline[1] eq $outfwsettings{'ENABLED'}) &&
($configline[2] eq $outfwsettings{'SNET'}) &&
@@ -165,22 +288,34 @@ if ($outfwsettings{'ACTION'} eq $Lang::tr{'delete'})
($configline[5] eq $outfwsettings{'SIP'}) &&
($configline[6] eq $outfwsettings{'SMAC'}) &&
($configline[7] eq $outfwsettings{'DIP'}) &&
- ($configline[8] eq $outfwsettings{'DPORT'}))
+ ($configline[9] eq $outfwsettings{'LOG'}) &&
+ ($configline[8] eq $outfwsettings{'DPORT'}) &&
+ ($configline[10] eq $outfwsettings{'TIME_MON'}) &&
+ ($configline[11] eq $outfwsettings{'TIME_TUE'}) &&
+ ($configline[12] eq $outfwsettings{'TIME_WED'}) &&
+ ($configline[13] eq $outfwsettings{'TIME_THU'}) &&
+ ($configline[14] eq $outfwsettings{'TIME_FRI'}) &&
+ ($configline[15] eq $outfwsettings{'TIME_SAT'}) &&
+ ($configline[16] eq $outfwsettings{'TIME_SUN'}) &&
+ ($configline[17] eq $outfwsettings{'TIME_FROM'}) &&
+ ($configline[18] eq $outfwsettings{'TIME_TO'}))
{
print FILE $configentry;
}
}
close FILE;
+ system("/usr/local/bin/outgoingfwctrl");
}
if ($outfwsettings{'ACTION'} eq $Lang::tr{'add'})
{
if ( $outfwsettings{'VALID'} eq 'yes' ) {
open( FILE, ">> $configfile" ) or die "Unable to write $configfile";
print FILE <
- Protokoll
- | Netzwerk
- | Ziel
- | Anmerkung
- | Politik
- | Aktionen
+ | $Lang::tr{'protocol'} |
+ $Lang::tr{'network'} |
+ $Lang::tr{'destination'} |
+ $Lang::tr{'description'} |
+ $Lang::tr{'policy'} |
+ $Lang::tr{'logging'} |
+ $Lang::tr{'action'} |
END
;
foreach $configentry (sort @configs)
@@ -239,10 +375,32 @@ END
$outfwsettings{'SMAC'} = $configline[6];
$outfwsettings{'DIP'} = $configline[7];
$outfwsettings{'DPORT'} = $configline[8];
+ $outfwsettings{'LOG'} = $configline[9];
+
+ $configline[10] = "on" if not exists $configline[10];
+ $configline[11] = "on" if not exists $configline[11];
+ $configline[12] = "on" if not exists $configline[12];
+ $configline[13] = "on" if not exists $configline[13];
+ $configline[14] = "on" if not exists $configline[14];
+ $configline[15] = "on" if not exists $configline[15];
+ $configline[16] = "on" if not exists $configline[16];
+ $configline[17] = "00:00" if not exists $configline[17];
+ $configline[18] = "00:00" if not exists $configline[18];
+
+ $outfwsettings{'TIME_MON'} = $configline[10];
+ $outfwsettings{'TIME_TUE'} = $configline[11];
+ $outfwsettings{'TIME_WED'} = $configline[12];
+ $outfwsettings{'TIME_THU'} = $configline[13];
+ $outfwsettings{'TIME_FRI'} = $configline[14];
+ $outfwsettings{'TIME_SAT'} = $configline[15];
+ $outfwsettings{'TIME_SUN'} = $configline[16];
+ $outfwsettings{'TIME_FROM'} = $configline[17];
+ $outfwsettings{'TIME_TO'} = $configline[18];
+
if ($outfwsettings{'DIP'} eq ''){ $outfwsettings{'DISPLAY_DIP'} = 'ALL'; } else { $outfwsettings{'DISPLAY_DIP'} = $outfwsettings{'DIP'}; }
if ($outfwsettings{'DPORT'} eq ''){ $outfwsettings{'DISPLAY_DPORT'} = 'ALL'; } else { $outfwsettings{'DISPLAY_DPORT'} = $outfwsettings{'DPORT'}; }
- if ($outfwsettings{'STATE'} eq 'DENY'){ $outfwsettings{'DISPLAY_STATE'} = ""; }
- if ($outfwsettings{'STATE'} eq 'ALLOW'){ $outfwsettings{'DISPLAY_STATE'} = ""; }
+ if ($outfwsettings{'STATE'} eq 'DENY'){ $outfwsettings{'DISPLAY_STATE'} = ""; }
+ if ($outfwsettings{'STATE'} eq 'ALLOW'){ $outfwsettings{'DISPLAY_STATE'} = ""; }
if ((($outfwsettings{'POLICY'} eq 'MODE1') && ($outfwsettings{'STATE'} eq 'ALLOW')) || (($outfwsettings{'POLICY'} eq 'MODE2') && ($outfwsettings{'STATE'} eq 'DENY'))){
print <
@@ -251,33 +409,54 @@ END
$outfwsettings{'DISPLAY_DIP'}:$outfwsettings{'DISPLAY_DPORT'}
| $outfwsettings{'NAME'}
| $outfwsettings{'DISPLAY_STATE'}
- |
+ | $outfwsettings{'LOG'}
+ |
END
;
@@ -285,20 +464,63 @@ END
unless ($outfwsettings{'SIP'}) { $outfwsettings{'DISPLAY_SIP'} = 'ALL'; } else { $outfwsettings{'DISPLAY_SIP'} = $outfwsettings{'SIP'}; }
unless ($outfwsettings{'SMAC'}) { $outfwsettings{'DISPLAY_SMAC'} = 'ALL'; } else { $outfwsettings{'DISPLAY_SMAC'} = $outfwsettings{'SMAC'}; }
print <Quell-IP-Adresse:
+ | $Lang::tr{'source ip'}:
| $outfwsettings{'DISPLAY_SIP'}
- | Quell-MAC-Adresse:
- | $outfwsettings{'DISPLAY_SMAC'}
|
END
;
}
- print <$Lang::tr{'time'} - |
+
+END
+;
+ if ($outfwsettings{'TIME_MON'} eq 'on') { print "";}
+ else { print "";}
+ print "$Lang::tr{'advproxy monday'},";
+ if ($outfwsettings{'TIME_TUE'} eq 'on') { print "";}
+ else { print "";}
+ print "$Lang::tr{'advproxy tuesday'},";
+ if ($outfwsettings{'TIME_WED'} eq 'on') { print "";}
+ else { print "";}
+ print "$Lang::tr{'advproxy wednesday'},";
+ if ($outfwsettings{'TIME_THU'} eq 'on') { print "";}
+ else { print "";}
+ print "$Lang::tr{'advproxy thursday'},";
+ if ($outfwsettings{'TIME_FRI'} eq 'on') { print "";}
+ else { print "";}
+ print "$Lang::tr{'advproxy friday'},";
+ if ($outfwsettings{'TIME_SAT'} eq 'on') { print "";}
+ else { print "";}
+ print "$Lang::tr{'advproxy saturday'},";
+ if ($outfwsettings{'TIME_SUN'} eq 'on') { print "";}
+ else { print "";}
+ print "$Lang::tr{'advproxy sunday'}";
+ print <
+ $Lang::tr{'advproxy from'} $outfwsettings{'TIME_FROM'} |
+ $Lang::tr{'advproxy to'} $outfwsettings{'TIME_TO'} |
END
;
}
}
+if ($outfwsettings{'POLICY'} eq 'MODE1'){
+print < | |
+
+END
+;
+}
print <
END
@@ -308,15 +530,15 @@ END
&Header::closebox();
}
-if ($outfwsettings{'POLICY'} eq 'MODE2'){
+if ($outfwsettings{'POLICY'} ne 'MODE0'){
open( FILE, "< $p2pfile" ) or die "Unable to read $p2pfile";
@p2ps = ;
close FILE;
&Header::openbox('100%', 'center', 'P2P-Block');
print <
- Protokoll
- | Status
+ | $Lang::tr{'protocol'}
+ | $Lang::tr{'status'}
END
;
my $id = 1;
@@ -327,22 +549,22 @@ END
| |
+
$Lang::tr{'outgoingfw p2p description'}
END
;
&Header::closebox();
@@ -363,18 +585,18 @@ END
print <