| - GREEN Snort | -- BLUE Snort | - -END -; -} -if ($netsettings{'ORANGE_DEV'} ne '') { -print <- ORANGE Snort | - -END -; -} -print <- RED Snort | - -
| $Lang::tr{'ids rules update'} | -
| - $Lang::tr{'no'} | -
| - $Lang::tr{'registered user rules'} | -
| - $Lang::tr{'subscripted user rules'} | -
- $Lang::tr{'ids rules license'} http://www.snort.org. - - $Lang::tr{'ids rules license2'} USER PREFERENCES, $Lang::tr{'ids rules license3'} - |
-
| Oink Code: | -
| -END -; - -if ($snortsettings{'INSTALLMD5'} eq $md5) { - print " $Lang::tr{'rules already up to date'} | "; -} else { - if ( $snortsettings{'ACTION'} eq $Lang::tr{'download new ruleset'} && $md5 eq $realmd5 ) { - $snortsettings{'INSTALLMD5'} = $realmd5; - $snortsettings{'INSTALLDATE'} = `/bin/date +'%Y-%m-%d'`; - &General::writehash("${General::swroot}/snort/settings", \%snortsettings); - } - print " $Lang::tr{'updates installed'}: $snortsettings{'INSTALLDATE'}"; -} -print <
-
| - | - | - - | -
$Lang::tr{'pagerefresh'}
".$return.""; + } else { + system("/usr/local/bin/oinkmaster.pl -v -s -u file:///var/tmp/snortrules.tar.gz -C /var/ipfire/snort/oinkmaster.conf -o /etc/snort/rules >>/var/tmp/log 2>&1 &"); + sleep(2); + } + } + } + } +} + +$checked{'ENABLE_SNORT'}{'off'} = ''; +$checked{'ENABLE_SNORT'}{'on'} = ''; +$checked{'ENABLE_SNORT'}{$snortsettings{'ENABLE_SNORT'}} = "checked='checked'"; +$checked{'ENABLE_SNORT_GREEN'}{'off'} = ''; +$checked{'ENABLE_SNORT_GREEN'}{'on'} = ''; +$checked{'ENABLE_SNORT_GREEN'}{$snortsettings{'ENABLE_SNORT_GREEN'}} = "checked='checked'"; +$checked{'ENABLE_SNORT_BLUE'}{'off'} = ''; +$checked{'ENABLE_SNORT_BLUE'}{'on'} = ''; +$checked{'ENABLE_SNORT_BLUE'}{$snortsettings{'ENABLE_SNORT_BLUE'}} = "checked='checked'"; +$checked{'ENABLE_SNORT_ORANGE'}{'off'} = ''; +$checked{'ENABLE_SNORT_ORANGE'}{'on'} = ''; +$checked{'ENABLE_SNORT_ORANGE'}{$snortsettings{'ENABLE_SNORT_ORANGE'}} = "checked='checked'"; +$checked{'ENABLE_GUARDIAN'}{'off'} = ''; +$checked{'ENABLE_GUARDIAN'}{'on'} = ''; +$checked{'ENABLE_GUARDIAN'}{$snortsettings{'ENABLE_GUARDIAN'}} = "checked='checked'"; +$selected{'RULES'}{'nothing'} = ''; +$selected{'RULES'}{'community'} = ''; +$selected{'RULES'}{'registered'} = ''; +$selected{'RULES'}{'subscripted'} = ''; +$selected{'RULES'}{$snortsettings{'RULES'}} = "selected='selected'"; + +&Header::openpage($Lang::tr{'intrusion detection system'}, 1, ''); + +####################### Added for snort rules control ################################# +print ""; +print <
\n"; +# $debugCount++; +# } +# print " Count: $debugCount\n"; +# &Header::closebox(); +# DEBUG DEBUG +############### + +if ($errormessage) { + &Header::openbox('100%', 'left', $Lang::tr{'error messages'}); + print "
+
+END
+ my @output = `tail -20 /var/tmp/log`;
+ foreach (@output) {
+ print "$_";
+ }
+ print <
+
+END
+ &Header::closebox();
+ &Header::closebigbox();
+ &Header::closepage();
+ exit;
+ refreshpage();
+}
+
+&Header::openbox('100%', 'left', $Lang::tr{'intrusion detection system2'});
+print <
+GREEN Snort
+END
+;
+if ($netsettings{'BLUE_DEV'} ne '') {
+ print " BLUE Snort";
+}
+if ($netsettings{'ORANGE_DEV'} ne '') {
+ print " ORANGE Snort";
+}
+ print " RED Snort";
+if ( -e "/var/ipfire/guardian/guardian.conf" ) {
+ print " Guardian";
+}
+
+print <
+
+
+ $Lang::tr{'ids rules update'}
+
+
+
+
+
+
+
+ $Lang::tr{'ids rules license'} www.snort.org$Lang::tr{'ids rules license1'}
+ $Lang::tr{'ids rules license2'} Get an Oinkcode, $Lang::tr{'ids rules license3'}
+
+
+ Oinkcode:
+
+
+
+END
+;
+
+if ( $snortsettings{'ACTION'} eq $Lang::tr{'download new ruleset'} ) {
+ $snortsettings{'INSTALLDATE'} = `/bin/date +'%Y-%m-%d'`;
+ &General::writehash("${General::swroot}/snort/settings", \%snortsettings);
+}
+print " $Lang::tr{'updates installed'}: $snortsettings{'INSTALLDATE'} ";
+
+print <
+
+
+
+
+
+
+
+END
+;
+
+if ($results ne '') {
+ print "$results";
+}
+
+&Header::closebox();
+
+####################### Added for guardian control ####################################
+if ( -e "/var/ipfire/guardian/guardian.conf" ) {
+ &Header::openbox('100%', 'LEFT', $Lang::tr{'guardian configuration'});
+print <
+$Lang::tr{'guardian interface'} $Lang::tr{'guardian timelimit'} $Lang::tr{'guardian logfile'} $Lang::tr{'guardian alertfile'} $Lang::tr{'guardian ignorefile'}
+
+END
+;
+ &Header::closebox();
+}
+
+
+
+
+####################### Added for snort rules control #################################
+if ( -e "${General::swroot}/snort/enable" || -e "${General::swroot}/snort/enable_green" || -e "${General::swroot}/snort/enable_blue" || -e "${General::swroot}/snort/enable_orange" ) {
+ &Header::openbox('100%', 'LEFT', $Lang::tr{'intrusion detection system rules'});
+ # Output display table for rule files
+ print "";
+
+ print "
";
+ $ruledisplaycnt = 0;
+ }
+
+ # Check if rule file is enabled
+ if ($snortrules{$rulefile}{"State"} eq 'Enabled') {
+ $rulechecked = 'CHECKED';
+ }
+
+ # Create rule file link, vars array, and display flag
+ my $rulefilelink = "?RULEFILE=$rulefile";
+ my $rulefiletoclose = '';
+ my @queryvars = ();
+ my $displayrulefilerules = 0;
+
+ # Check for passed in query string
+ if ($ENV{'QUERY_STRING'}) {
+ # Split out vars
+ @queryvars = split(/\&/, $ENV{'QUERY_STRING'});
+
+ # Loop over values
+ foreach $value (@queryvars) {
+ # Split out var pairs
+ ($var, $linkedrulefile) = split(/=/, $value);
+
+ # Check if var is 'RULEFILE'
+ if ($var eq 'RULEFILE') {
+ # Check if rulefile equals linkedrulefile
+ if ($rulefile eq $linkedrulefile) {
+ # Set display flag
+ $displayrulefilerules = 1;
+
+ # Strip out rulefile from rulefilelink
+ $rulefilelink =~ s/RULEFILE=$linkedrulefile//g;
+ } else {
+ # Add linked rule file to rulefilelink
+ $rulefilelink .= "&RULEFILE=$linkedrulefile";
+ }
+ }
+ }
+ }
+
+ # Strip out extra & & ? from rulefilelink
+ $rulefilelink =~ s/^\?\&/\?/i;
+
+ # Check for a single '?' and replace with page for proper link display
+ if ($rulefilelink eq '?') {
+ $rulefilelink = "ids.cgi";
+ }
+
+ # Output rule file name and checkbox
+ print " $rulefile ";
+
+ # Check for empty 'Description'
+ if ($snortrules{$rulefile}{'Description'} eq '') {
+ print "No description available $snortrules{$rulefile}{'Description'} ";
+
+ # Local vars
+ my $ruledefdisplaycnt = 0;
+ my $ruledefcnt = keys %{$snortrules{$rulefile}{"Definition"}};
+ $ruledefcnt++;
+ $ruledefcnt = $ruledefcnt / 2;
+
+ # Loop over rule file rules
+ foreach my $ruledef (sort {$a <=> $b} keys(%{$snortrules{$rulefile}{"Definition"}})) {
+ # Local vars
+ my $ruledefchecked = '';
+
+ # If have display 2 rules, start new row
+ if (($ruledefdisplaycnt % 2) == 0) {
+ print " ";
+ $ruledefdisplaycnt = 0;
+ }
+
+ # Check for rules state
+ if ($snortrules{$rulefile}{'Definition'}{$ruledef}{'State'} eq 'Enabled') {
+ $ruledefchecked = 'CHECKED';
+ }
+
+ # Create rule file rule's checkbox
+ $checkboxname = "SNORT_RULE_$rulefile";
+ $checkboxname .= "_$ruledef";
+ print " $snortrules{$rulefile}{'Definition'}{$ruledef}{'Description'} ";
+
+ # Increment count
+ $ruledefdisplaycnt++;
+ }
+
+ # If do not have second rule for row, create empty cell
+ if (($ruledefdisplaycnt % 2) != 0) {
+ print "
";
+
+ # Increment ruledisplaycnt
+ $ruledisplaycnt++;
+ }
+ print "
";
+ print <
+
+
+
+
+
+
+
+
+END
+;
+ &Header::closebox();
+}
+
+####################### End added for snort rules control #################################
+&Header::closebigbox();
+&Header::closepage();
+
+sub downloadrulesfile {
+ my $peer;
+ my $peerport;
+
+ unlink("/var/tmp/log");
+
+ unless (-e "${General::swroot}/red/active") {
+ $errormessage = $Lang::tr{'could not download latest updates'};
+ return undef;
+ }
+
+ my %proxysettings=();
+ &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
+
+ if ($_=$proxysettings{'UPSTREAM_PROXY'}) {
+ ($peer, $peerport) = (/^(?:[a-zA-Z ]+\:\/\/)?(?:[A-Za-z0-9\_\.\-]*?(?:\:[A-Za-z0-9\_\.\-]*?)?\@)?([a-zA-Z0-9\.\_\-]*?)(?:\:([0-9]{1,5}))?(?:\/.*?)?$/);
+ }
+
+ if ($peer) {
+ system("wget -r --proxy=on --proxy-user=$proxysettings{'UPSTREAM_USER'} --proxy-passwd=$proxysettings{'UPSTREAM_PASSWORD'} -e http_proxy=http://$peer:$peerport/ -o /var/tmp/log --no-check-certificate --output-document=/var/tmp/snortrules.tar.gz $url");
+ } else {
+ system("wget -r --no-check-certificate -o /var/tmp/log --output-document=/var/tmp/snortrules.tar.gz $url");
+ }
+}