]> git.ipfire.org Git - ipfire-2.x.git/blame - html/cgi-bin/remote.cgi
hostapd: make client isolation configurable via WebUI
[ipfire-2.x.git] / html / cgi-bin / remote.cgi
CommitLineData
ac1cfefa 1#!/usr/bin/perl
70df8302
MT
2###############################################################################
3# #
4# IPFire.org - A linux based firewall #
c924c7d1 5# Copyright (C) 2007-2014 IPFire Team <info@ipfire.org> #
70df8302
MT
6# #
7# This program is free software: you can redistribute it and/or modify #
8# it under the terms of the GNU General Public License as published by #
9# the Free Software Foundation, either version 3 of the License, or #
10# (at your option) any later version. #
11# #
12# This program is distributed in the hope that it will be useful, #
13# but WITHOUT ANY WARRANTY; without even the implied warranty of #
14# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15# GNU General Public License for more details. #
16# #
17# You should have received a copy of the GNU General Public License #
18# along with this program. If not, see <http://www.gnu.org/licenses/>. #
19# #
20###############################################################################
ac1cfefa
MT
21
22use strict;
23
24# enable only the following on debugging purpose
25#use warnings;
26#use CGI::Carp 'fatalsToBrowser';
27
9159bd4b
PM
28use IO::Socket;
29
986e08d9 30require '/var/ipfire/general-functions.pl';
9159bd4b 31require "${General::swroot}/geoip-functions.pl";
ac1cfefa
MT
32require "${General::swroot}/lang.pl";
33require "${General::swroot}/header.pl";
34
9159bd4b
PM
35my %color = ();
36my %mainsettings = ();
ac1cfefa
MT
37my %remotesettings=();
38my %checked=();
39my $errormessage='';
113cd628 40my $counter = 0;
ac1cfefa 41
9159bd4b
PM
42&General::readhash("${General::swroot}/main/settings", \%mainsettings);
43&General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
44
ac1cfefa
MT
45&Header::showhttpheaders();
46
47$remotesettings{'ENABLE_SSH'} = 'off';
ac1cfefa
MT
48$remotesettings{'ENABLE_SSH_PORTFW'} = 'off';
49$remotesettings{'ACTION'} = '';
50&Header::getcgihash(\%remotesettings);
51
05c71989 52if ( (($remotesettings{'ACTION'} eq $Lang::tr{'save'}) || ($remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'}) || ($remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'})) && $remotesettings{'ACTION'} ne "" )
ac1cfefa
MT
53{
54 # not existing here indicates the box is unticked
55 $remotesettings{'ENABLE_SSH_PASSWORDS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
56 $remotesettings{'ENABLE_SSH_KEYS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_KEYS'};
57
58
59 &General::writehash("${General::swroot}/remote/settings", \%remotesettings);
60 if ($remotesettings{'ENABLE_SSH'} eq 'on')
61 {
62 &General::log($Lang::tr{'ssh is enabled'});
63 if ($remotesettings{'ENABLE_SSH_PASSWORDS'} eq 'off'
64 and $remotesettings{'ENABLE_SSH_KEYS'} eq 'off')
65 {
66 $errormessage = $Lang::tr{'ssh no auth'};
67 }
9833e7d8 68 system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
ac1cfefa
MT
69 }
70 else
71 {
72 &General::log($Lang::tr{'ssh is disabled'});
73 unlink "${General::swroot}/remote/enablessh";
74 }
6624878a
JPT
75
76 if ($remotesettings{'SSH_PORT'} eq 'on')
77 {
78 &General::log("SSH Port 22");
79 }
80 else
81 {
82 &General::log("SSH Port 222");
83 }
84
113cd628
CS
85if ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'} || $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'} ){
86 if ($remotesettings{'ENABLE_SSH'} eq 'off')
87 {
88 system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
89 system('/usr/local/bin/sshctrl');
90 }
91 if ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'} ) { $counter = 900;}
92 elsif ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'} ) { $counter = 1800;}
93
94 system("/usr/local/bin/sshctrl tempstart $counter >/dev/null");
70db8683
CS
95 }
96else {
900832fa 97 system('/usr/local/bin/sshctrl') == 0
ac1cfefa 98 or $errormessage = "$Lang::tr{'bad return code'} " . $?/256;
70db8683 99 }
ac1cfefa
MT
100}
101
102&General::readhash("${General::swroot}/remote/settings", \%remotesettings);
103
104# not existing here means they're undefined and the default value should be
105# used
106 $remotesettings{'ENABLE_SSH_PASSWORDS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
107 $remotesettings{'ENABLE_SSH_KEYS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_KEYS'};
108
109$checked{'ENABLE_SSH'}{'off'} = '';
110$checked{'ENABLE_SSH'}{'on'} = '';
111$checked{'ENABLE_SSH'}{$remotesettings{'ENABLE_SSH'}} = "checked='checked'";
ac1cfefa
MT
112$checked{'ENABLE_SSH_PORTFW'}{'off'} = '';
113$checked{'ENABLE_SSH_PORTFW'}{'on'} = '';
114$checked{'ENABLE_SSH_PORTFW'}{$remotesettings{'ENABLE_SSH_PORTFW'}} = "checked='checked'";
115$checked{'ENABLE_SSH_PASSWORDS'}{'off'} = '';
116$checked{'ENABLE_SSH_PASSWORDS'}{'on'} = '';
117$checked{'ENABLE_SSH_PASSWORDS'}{$remotesettings{'ENABLE_SSH_PASSWORDS'}} = "checked='checked'";
118$checked{'ENABLE_SSH_KEYS'}{'off'} = '';
119$checked{'ENABLE_SSH_KEYS'}{'on'} = '';
120$checked{'ENABLE_SSH_KEYS'}{$remotesettings{'ENABLE_SSH_KEYS'}} = "checked='checked'";
6624878a
JPT
121$checked{'SSH_PORT'}{'off'} = '';
122$checked{'SSH_PORT'}{'on'} = '';
123$checked{'SSH_PORT'}{$remotesettings{'SSH_PORT'}} = "checked='checked'";
ac1cfefa
MT
124
125&Header::openpage($Lang::tr{'remote access'}, 1, '');
126
127&Header::openbigbox('100%', 'left', '', $errormessage);
128
129if ($errormessage) {
130 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
c1a07263 131 print "<font class='base'>$errormessage&nbsp;</font>\n";
ac1cfefa
MT
132 &Header::closebox();
133}
134
135print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
136
748cfb0b 137&Header::openbox('100%', 'left', $Lang::tr{'ssh'});
ac1cfefa
MT
138print <<END
139<table width='100%'>
140<tr>
141 <td><input type='checkbox' name='ENABLE_SSH' $checked{'ENABLE_SSH'}{'on'} /></td>
142 <td class='base' colspan='2'>$Lang::tr{'ssh access'}</td>
143</tr>
ac1cfefa
MT
144<tr>
145 <td>&nbsp;</td>
146 <td><input type='checkbox' name='ENABLE_SSH_PORTFW' $checked{'ENABLE_SSH_PORTFW'}{'on'} /></td>
147 <td width='100%' class='base'>$Lang::tr{'ssh portfw'}</td>
148</tr>
149<tr>
150 <td>&nbsp;</td>
151 <td><input type='checkbox' name='ENABLE_SSH_PASSWORDS' $checked{'ENABLE_SSH_PASSWORDS'}{'on'} /></td>
152 <td width='100%' class='base'>$Lang::tr{'ssh passwords'}</td>
153</tr>
154<tr>
155 <td>&nbsp;</td>
156 <td><input type='checkbox' name='ENABLE_SSH_KEYS' $checked{'ENABLE_SSH_KEYS'}{'on'} /></td>
157 <td width='100%' class='base'>$Lang::tr{'ssh keys'}</td>
158</tr>
6624878a
JPT
159<tr>
160 <td>&nbsp;</td>
161 <td><input type='checkbox' name='SSH_PORT' $checked{'SSH_PORT'}{'on'} /></td>
162 <td width='100%' class='base'>$Lang::tr{'ssh port'}</td>
163</tr>
ac1cfefa 164<tr>
748cfb0b 165 <td align='right' colspan='3'>
bba7212c
MT
166 <input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart15'}' />
167 <input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart30'}' />
168 <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
ac1cfefa
MT
169</tr>
170</table>
171END
172;
173&Header::closebox();
174
175print "</form>\n";
176
ea566f84 177&Header::openbox('100%', 'center', $Lang::tr{'ssh host keys'});
ac1cfefa 178
ea566f84 179print "<table class='tbl'>\n";
ac1cfefa
MT
180
181print <<END
ea566f84
PM
182<thead>
183 <tr>
184 <th align="center"><strong>$Lang::tr{'ssh key'}</strong></th>
185 <th align="center"><strong>$Lang::tr{'type'}</strong></th>
186 <th align="center"><strong>$Lang::tr{'ssh fingerprint'}</strong></th>
187 <th align="center"><strong>$Lang::tr{'ssh key size'}</strong></th>
188 </tr>
189</thead>
190<tbody>
ac1cfefa
MT
191END
192;
193
194&viewkey("/etc/ssh/ssh_host_key.pub","RSA1");
195&viewkey("/etc/ssh/ssh_host_rsa_key.pub","RSA2");
196&viewkey("/etc/ssh/ssh_host_dsa_key.pub","DSA");
abcbbd1f 197&viewkey("/etc/ssh/ssh_host_ecdsa_key.pub","ECDSA");
c924c7d1 198&viewkey("/etc/ssh/ssh_host_ed25519_key.pub","ED25519");
ac1cfefa 199
ea566f84 200print "</tbody>\n</table>\n";
ac1cfefa
MT
201
202&Header::closebox();
203
ea566f84 204&Header::openbox('100%', 'center', $Lang::tr{'ssh active sessions'});
9159bd4b
PM
205
206print <<END;
207 <table class="tbl" width='66%'>
208 <thead>
209 <tr>
210 <th align="center">
211 <strong>$Lang::tr{'ssh username'}</strong>
212 </th>
213 <th align="center">
214 <strong>$Lang::tr{'ssh login time'}</strong>
215 </th>
216 <th align="center">
217 <strong>$Lang::tr{'ip address'}</strong>
218 </th>
219 <th align="center">
220 <strong>$Lang::tr{'country'}</strong>
221 </th>
222 <th align="center">
223 <strong>$Lang::tr{'rdns'}</strong>
224 </th>
225 </tr>
226 </thead>
227 <tbody>
228END
229
230&printactivelogins();
231
232print "</tbody>\n</table>\n";
233
234&Header::closebox();
235
ac1cfefa
MT
236&Header::closebigbox();
237
238&Header::closepage();
239
240
241sub viewkey
242{
243 my $key = $_[0];
244 my $name = $_[1];
245
246 if ( -e $key )
247 {
248 my @temp = split(/ /,`/usr/bin/ssh-keygen -l -f $key`);
249 my $keysize = &Header::cleanhtml($temp[0],"y");
250 my $fingerprint = &Header::cleanhtml($temp[1],"y");
ea566f84 251 print "<tr><td><code>$key</code></td><td align='center'>$name</td><td><code>$fingerprint</code></td><td align='center'>$keysize</td></tr>\n";
ac1cfefa
MT
252 }
253}
9159bd4b
PM
254
255sub printactivelogins()
256{
257 # print active SSH logins (grep outpout of "who -s")
258 my $command = "who -s";
259 my @output = `$command`;
260 chomp(@output);
261
262 my $id = 0;
263
264 if ( scalar(@output) == 0 )
265 {
266 # no logins appeared
267 my $table_colour = ($id++ % 2) ? $color{'color22'} : $color{'color20'};
268 print "<tr bgcolor='$table_colour'><td colspan='5'>$Lang::tr{'ssh no active logins'}</td></tr>\n";
269 } else {
270 # list active logins...
271
272 foreach my $line (@output)
273 {
274 my @arry = split(/\ +/, $line);
275
276 my $username = @arry[0];
277 my $logintime = join(' ', @arry[2..4]);
278 my $remoteip = @arry[5];
279 $remoteip =~ s/[()]//g;
280
281 # display more information about that IP adress...
282 my $ccode = &GeoIP::lookup($remoteip);
283 my $flag_icon = &GeoIP::get_flag_icon($ccode);
284
285 # get rDNS...
286 my $iaddr = inet_aton($remoteip);
287 my $rdns = gethostbyaddr($iaddr, AF_INET);
288 if (!$rdns) { $rdns = $Lang::tr{'lookup failed'}; };
289
290 my $table_colour = ($id++ % 2) ? $color{'color22'} : $color{'color20'};
291
292 print <<END;
293 <tr bgcolor='$table_colour'>
294 <td>$username</td>
295 <td>$logintime</td>
ea566f84 296 <td align='center'><a href='ipinfo.cgi?ip=$remoteip'>$remoteip</a></td>
9159bd4b
PM
297 <td align='center'><a href='country.cgi#$ccode'><img src='$flag_icon' border='0' alt='$ccode' title='$ccode' /></a></td>
298 <td>$rdns</td>
299 </tr>
300END
301;
302 }
303 }
304}