]>
git.ipfire.org Git - ipfire-2.x.git/blob - html/cgi-bin/index.cgi
2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2007-2014 IPFire Team <info@ipfire.org> #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
26 # enable only the following on debugging purpose
28 #use CGI::Carp 'fatalsToBrowser';
30 require '/var/ipfire/general-functions.pl';
31 require "${General::swroot}/lang.pl";
32 require "${General::swroot}/header.pl";
33 require "/opt/pakfire/lib/functions.pl";
51 if ( ! -e
"/var/ipfire/main/gpl_accepted" ) {
52 print "Status: 302 Moved Temporarily\n";
53 print "Location: gpl.cgi\n\n";
57 &Header
::showhttpheaders
();
59 $cgiparams{'ACTION'} = '';
60 &Header
::getcgihash
(\
%cgiparams);
61 $pppsettings{'VALID'} = '';
62 $pppsettings{'PROFILENAME'} = 'None';
63 &General
::readhash
("${General::swroot}/ppp/settings", \
%pppsettings);
64 &General
::readhash
("${General::swroot}/modem/settings", \
%modemsettings);
65 &General
::readhash
("${General::swroot}/ethernet/settings", \
%netsettings);
66 &General
::readhash
("${General::swroot}/ddns/settings", \
%ddnssettings);
67 &General
::readhash
("${General::swroot}/proxy/advanced/settings", \
%proxysettings);
68 &General
::readhash
("${General::swroot}/vpn/settings", \
%vpnsettings);
71 my %mainsettings = ();
72 &General
::readhash
("${General::swroot}/main/settings", \
%mainsettings);
73 &General
::readhash
("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \
%color);
75 my $connstate = &Header
::connectionstatus
();
77 if ( -e
"/var/ipfire/main/gpl-accepted" ) {
78 if ($connstate =~ /$Lang::tr{'connecting'}/ || /$Lang::tr{'connection closed'}/ ){
79 $refresh = "<meta http-equiv='refresh' content='5;'>";
80 }elsif ($connstate =~ /$Lang::tr{'dod waiting'}/ || -e
"${General::swroot}/main/refreshindex") {
81 $refresh = "<meta http-equiv='refresh' content='30;'>";
85 if ($cgiparams{'ACTION'} eq $Lang::tr
{'dial profile'})
87 my $profile = $cgiparams{'PROFILE'};
88 my %tempcgiparams = ();
89 $tempcgiparams{'PROFILE'} = '';
90 &General
::readhash
("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
93 # make a link from the selected profile to the "default" one.
94 unlink("${General::swroot}/ppp/settings");
95 link("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
96 "${General::swroot}/ppp/settings");
97 open (TMP
, ">${General::swroot}/ppp/updatesettings");
99 # read in the new params "early" so we can write secrets.
101 &General
::readhash
("${General::swroot}/ppp/settings", \
%cgiparams);
102 $cgiparams{'PROFILE'} = $profile;
103 $cgiparams{'BACKUPPROFILE'} = $profile;
104 &General
::writehash
("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
107 # write secrets file.
108 open(FILE
, ">/${General::swroot}/ppp/secrets") or die "Unable to write secrets file.";
110 my $username = $cgiparams{'USERNAME'};
111 my $password = $cgiparams{'PASSWORD'};
112 print FILE
"'$username' * '$password'\n";
113 chmod 0600, "${General::swroot}/ppp/secrets";
116 &General
::log("$Lang::tr{'profile made current'} $tempcgiparams{'PROFILENAME'}");
117 $cgiparams{'ACTION'} = "$Lang::tr{'dial'}";
120 if ($cgiparams{'ACTION'} eq $Lang::tr
{'dial'}) {
121 system('/usr/local/bin/redctrl start > /dev/null') == 0
122 or &General
::log("Dial failed: $?"); sleep 1;
123 }elsif ($cgiparams{'ACTION'} eq $Lang::tr
{'hangup'}) {
124 system('/usr/local/bin/redctrl stop > /dev/null') == 0
125 or &General
::log("Hangup failed: $?"); sleep 1;
130 my @profilenames = ();
132 for ($c = 1; $c <= $maxprofiles; $c++)
134 my %temppppsettings = ();
135 $temppppsettings{'PROFILENAME'} = '';
136 &General
::readhash
("${General::swroot}/ppp/settings-$c", \
%temppppsettings);
137 $profilenames[$c] = $temppppsettings{'PROFILENAME'};
140 for ($c = 1; $c <= $maxprofiles; $c++) {
141 $selected{'PROFILE'}{$c} = '';
143 $selected{'PROFILE'}{$pppsettings{'PROFILE'}} = "selected='selected'";
144 my $dialButtonDisabled = "disabled='disabled'";
146 &Header
::openpage
($Lang::tr
{'main page'}, 1, $refresh);
147 &Header
::openbigbox
('', 'center');
148 if (open(IPADDR
,"${General::swroot}/red/local-ipaddress")) {
154 &Header
::openbox
('100%', 'center', '');
155 if ( ( $pppsettings{'VALID'} eq 'yes' && $modemsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ )) {
156 if (open(IPADDR
,"${General::swroot}/ddns/ipcache")) {
161 if (open(IPADDR
,"${General::swroot}/red/local-ipaddress")) {
166 } elsif ($modemsettings{'VALID'} eq 'no') {
167 print "$Lang::tr{'modem settings have errors'}\n </b></font>\n";
169 print "$Lang::tr{'profile has errors'}\n </b></font>\n";
173 <!-- Table of networks -->
174 <table class='tbl' style='width:80%;'>
176 <th style='background-color:$color{'color20'};'>$Lang::tr{'network'}</th>
177 <th style='background-color:$color{'color20'};'>$Lang::tr{'ip address'}</th>
178 <th style='background-color:$color{'color20'};'>$Lang::tr{'status'}</th>
181 <td style='width:25%; text-align:center; background-color:$Header::colourred;'><a href='/cgi-bin/pppsetup.cgi' style='color:white;'><b>$Lang::tr{'internet'}</b></a><br/></td>
182 <td style='width:30%; text-align:center;'>$ipaddr </td>
183 <td style='width:45%; text-align:center;'>$connstate </td>
186 my $HOSTNAME = (gethostbyaddr(pack("C4", split(/\./, $ipaddr)), 2))[0];
187 if ( "$HOSTNAME" ne "" ) {
189 <tr><td><b>$Lang::tr{'hostname'}:</b><td style='text-align:center;'>$HOSTNAME</td><td></td>
193 if ( -e
"${General::swroot}/red/remote-ipaddress" ) {
194 open (TMP
, "<${General::swroot}/red/remote-ipaddress");
199 <tr><td><b>$Lang::tr{'gateway'}:</b><td style='text-align:center;'>$GATEWAY</td><td></td></tr>
204 if ( -e
"${General::swroot}/red/dns" ) {
205 open (TMP
, "<${General::swroot}/red/dns");
206 $dns_servers = <TMP
>;
213 <b>$Lang::tr{'dns servers'}:</b>
215 <td style='text-align:center;'>
224 if ( $netsettings{'RED_TYPE'} ne "STATIC" && $netsettings{'RED_TYPE'} ne "DHCP" ){
225 if ( ( $pppsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ ) ) {
228 <table style='width:80%;'>
230 <form method='post' action='$ENV{'SCRIPT_NAME'}'>$Lang::tr{'profile'}:
231 <select name='PROFILE'>
233 for ($c = 1; $c <= $maxprofiles; $c++)
235 if ($profilenames[$c] ne '') {
236 $dialButtonDisabled = "";
237 print "<option value='$c' $selected{'PROFILE'}{$c}>$c. $profilenames[$c]</option>";
240 $dialButtonDisabled = "disabled='disabled'" if (-e
'/var/run/ppp-ipfire.pid' || -e
"${General::swroot}/red/active");
243 <input type='submit' name='ACTION' value='$Lang::tr{'dial profile'}' $dialButtonDisabled />
246 <td style='text-align:center;'>
247 <table style='width:100%;'>
249 <td style='width=50%; text-align:right;'>
250 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
251 <input type='submit' name='ACTION' value='$Lang::tr{'dial'}'>
254 <td style='width=50%; text-align:left;'>
255 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
256 <input type='submit' name='ACTION' value='$Lang::tr{'hangup'}'>
266 print "<br/><span style='color:red;'>$Lang::tr{'profile has errors'}</span><br/>";
273 <table class='tbl' style='width:80%;'>
275 <th>$Lang::tr{'network'}</th>
276 <th>$Lang::tr{'ip address'}</th>
277 <th>$Lang::tr{'status'}</th>
281 if ( $netsettings{'GREEN_DEV'} ) {
282 my $sub=&General
::iporsubtocidr
($netsettings{'GREEN_NETMASK'});
285 <td style='width:25%; text-align:center; background-color:$Header::colourgreen;'>
286 <a href='/cgi-bin/dhcp.cgi' style='color:white'><b>$Lang::tr{'lan'}</b></a>
288 <td style='width:30%; text-align:center;'>$netsettings{'GREEN_ADDRESS'}/$sub</td>
289 <td style='width:45%; text-align:center;'>
291 if ( $proxysettings{'ENABLE'} eq 'on' ) {
292 print $Lang::tr
{'advproxy on'};
293 if ( $proxysettings{'TRANSPARENT'} eq 'on' ) { print " (transparent)"; }
294 } else { print $Lang::tr
{'advproxy off'}; }
298 if (&Header
::blue_used
()) {
299 my $sub=&General
::iporsubtocidr
($netsettings{'BLUE_NETMASK'});
302 <td style='width:25%; text-align:center; background-color:$Header::colourblue;'>
303 <a href='/cgi-bin/wireless.cgi' style='color:white'><b>$Lang::tr{'wireless'}</b></a>
305 <td style='width:30%; text-align:center;'>$netsettings{'BLUE_ADDRESS'}/$sub
306 <td style='width:45%; text-align:center;'>
308 if ( $proxysettings{'ENABLE_BLUE'} eq 'on' ) {
309 print $Lang::tr
{'advproxy on'};
310 if ( $proxysettings{'TRANSPARENT_BLUE'} eq 'on' ) { print " (transparent)"; }
311 } else { print $Lang::tr
{'advproxy off'}; }
315 if (&Header
::orange_used
()) {
316 my $sub=&General
::iporsubtocidr
($netsettings{'ORANGE_NETMASK'});
319 <td style='width:25%; text-align:center; background-color:$Header::colourorange;'>
320 <a href='/cgi-bin/firewall.cgi' style='color:white'><b>$Lang::tr{'dmz'}</b></a>
322 <td style='width:30%; text-align:center;'>$netsettings{'ORANGE_ADDRESS'}/$sub</td>
323 <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
327 #check if IPSEC is running
328 if ( $vpnsettings{'ENABLED'} eq 'on' || $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {
329 my $ipsecip = $vpnsettings{'VPN_IP'};
332 <td style='width:25%; text-align:center; background-color:$Header::colourvpn;'>
333 <a href='/cgi-bin/vpnmain.cgi' style='color:white'><b>$Lang::tr{'ipsec'}</b></a>
335 <td style='width:30%; text-align:center;'>$ipsecip</td>
336 <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
341 #check if OpenVPN is running
343 &General
::readhash
("${General::swroot}/ovpn/settings", \
%confighash);
345 if (($confighash{'ENABLED'} eq "on") ||
346 ($confighash{'ENABLED_BLUE'} eq "on") ||
347 ($confighash{'ENABLED_ORANGE'} eq "on")) {
348 my ($ovpnip,$sub) = split("/",$confighash{'DOVPN_SUBNET'});
349 $sub=&General
::iporsubtocidr
($sub);
350 $ovpnip="$ovpnip/$sub";
353 <td style='width:25%; text-align:center; background-color:$Header::colourovpn;'>
354 <a href='/cgi-bin/ovpnmain.cgi' style='color:white'><b>OpenVPN</b></a>
356 <td style='width:30%; text-align:center;'>$ovpnip</td>
357 <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
364 #Check if there are any vpns configured (ipsec and openvpn)
365 &General
::readhasharray
("${General::swroot}/vpn/config", \
%vpnconfig);
366 foreach my $key (sort { ncmp
($vpnconfig{$a}[1],$vpnconfig{$b}[1]) } keys %vpnconfig) {
367 if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host'){
373 &General
::readhasharray
("${General::swroot}/ovpn/ovpnconfig", \
%ovpnconfig);
374 foreach my $dkey (sort { ncmp
($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
375 if (($ovpnconfig{$dkey}[3] eq 'net') && (-e
"/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
383 # Start of Box wich contains all vpn connections
384 &Header
::openbox
('100%', 'center', $Lang::tr
{'vpn'});
386 #show ipsec connectiontable
388 my $ipsecip = $vpnsettings{'VPN_IP'};
389 my @status = `/usr/local/bin/ipsecctrl I`;
396 <table class='tbl' style='width:80%;'>
398 <th style='width:40%;'>$Lang::tr{'ipsec network'}</th>
399 <th style='width:30%;'>$Lang::tr{'ip address'}</th>
400 <th style='width:30%;'>$Lang::tr{'status'}</th>
403 foreach my $key (sort { uc($vpnconfig{$a}[1]) cmp uc($vpnconfig{$b}[1]) } keys %vpnconfig) {
404 if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host') {
406 my ($vpnip,$vpnsub) = split("/",$vpnconfig{$key}[11]);
407 $vpnsub=&General
::iporsubtocidr
($vpnsub);
408 $vpnip="$vpnip/$vpnsub";
410 $col = $color{'color22'};
412 $col = $color{'color20'};
415 print "<td style='text-align:left; color:white; background-color:$Header::colourvpn;'>$vpnconfig{$key}[1]</td>";
416 print "<td style='text-align:center; background-color:$col'>$vpnip</td>";
418 my $activecolor = $Header::colourred
;
419 my $activestatus = $Lang::tr
{'capsclosed'};
420 if ($vpnconfig{$key}[0] eq 'off') {
421 $activecolor = $Header::colourblue
;
422 $activestatus = $Lang::tr
{'capsclosed'};
424 foreach my $line (@status) {
425 if (($line =~ /\"$vpnconfig{$key}[1]\".*IPsec SA established/) || ($line =~/$vpnconfig{$key}[1]\{.*INSTALLED/ )){
426 $activecolor = $Header::colourgreen
;
427 $activestatus = $Lang::tr
{'capsopen'};
428 } elsif ($line =~ /$vpnconfig{$key}[1]\{.*ROUTED/) {
429 $activecolor = $Header::colourorange
;
430 $activestatus = $Lang::tr
{'vpn on-demand'};
434 print "<td style='text-align:center; color:white; background-color:$activecolor;'><b>$activestatus</b></td>";
441 # Check if there is any OpenVPN connection configured.
445 <table class='tbl' style='width:80%;'>
447 <th style='width:40%;'>$Lang::tr{'openvpn network'}</th>
448 <th style='width:30%;'>$Lang::tr{'ip address'}</th>
449 <th style='width:30%;'>$Lang::tr{'status'}</th>
452 # Check if the OpenVPN server for Road Warrior Connections is running and display status information.
455 # Print the OpenVPN N2N connection status.
456 if ( -d
"${General::swroot}/ovpn/n2nconf") {
458 foreach my $dkey (sort { ncmp
($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
459 if (($ovpnconfig{$dkey}[3] eq 'net') && (-e
"/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
461 my $tport = $ovpnconfig{$dkey}[22];
462 next if ($tport eq '');
463 my $tnet = new Net
::Telnet
( Timeout
=>5, Errmode
=>'return', Port
=>$tport);
464 $tnet->open('127.0.0.1');
465 my @output = $tnet->cmd(String
=> 'state', Prompt
=> '/(END.*\n|ERROR:.*\n)/');
466 my @tustate = split(/\,/, $output[1]);
468 my $display_colour = $Header::colourred
;
469 if ( $tustate[1] eq 'CONNECTED' || ($tustate[1] eq 'WAIT')) {
470 $display_colour = $Header::colourgreen
;
471 $display = $Lang::tr
{'capsopen'};
473 $display = $tustate[1];
476 $col = $color{'color22'};
478 $col = $color{'color20'};
482 my ($vpnip,$vpnsub) = split("/",$ovpnconfig{$dkey}[11]);
483 my $vpnsub=&General
::iporsubtocidr
($vpnsub);
484 my $vpnip="$vpnip/$vpnsub";
487 <td style='text-align:left; color:white; background-color:$Header::colourovpn;'>$ovpnconfig{$dkey}[1]</td>
488 <td style='text-align:center; background-color:$col'>$vpnip</td>
489 <td style='text-align:center; color:white; background-color:$display_colour' ><b>$display</b></td>
495 if ($active ne 'off'){
496 print "<tr><td colspan='3' style='text-align:center;'>$Lang::tr{'ovpn no connections'}</td></tr>";
504 if ( ! -e
"/var/ipfire/main/send_profile") {
505 $warnmessage .= "<li><a style='color: white;' href='fireinfo.cgi'>$Lang::tr{'fireinfo please enable'}</a></li>";
508 # Memory usage warning
509 my @free = `/usr/bin/free`;
510 $free[1] =~ m/(\d+)/;
512 $free[2] =~ m/(\d+)/;
514 my $pct = int 100 * ($mem - $used) / $mem;
515 if ($used / $mem > 90) {
516 $warnmessage .= "<li>$Lang::tr{'high memory usage'}: $pct% !</li>";
519 # Diskspace usage warning
522 my @df = `/bin/df -B M -P -x rootfs`;
523 foreach my $line (@df) {
524 next if $line =~ m/^Filesystem/;
525 if ($line =~ m/root/ ) {
526 $line =~ m/^.* (\d+)M.*$/;
527 @temp = split(/ +/,$line);
529 # available:plain value in MB, and not %used as 10% is too much to waste on small disk
530 # and root size should not vary during time
531 $warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$1M</b> !</li>";
535 # $line =~ m/^.* (\d+)m.*$/;
536 $line =~ m/^.* (\d+)\%.*$/;
538 @temp = split(/ /,$line);
540 $warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$temp2%</b> !</li>";
545 # S.M.A.R.T. health warning
546 my @files = `/bin/ls /var/run/smartctl_out_hddtemp-* 2>/dev/null`;
547 foreach my $file (@files) {
549 my $disk=`echo $file | cut -d"-" -f2`;
551 if (`/bin/grep "SAVE ALL DATA" $file`) {
552 $warnmessage .= "<li>$Lang::tr{'smartwarn1'} /dev/$disk $Lang::tr{'smartwarn2'} !</li>";
557 my @files = `mount | grep " reiser4 (" 2>/dev/null`;
558 foreach my $disk (@files) {
560 $warnmessage .= "<li>$disk - $Lang::tr{'deprecated fs warn'}</li>";
564 &Header
::openbox
('100%','center', );
565 print "<table class='tbl' style='width:80%;'>";
566 print "<tr><th>$Lang::tr{'fwhost hint'}</th></tr>";
567 print "<tr><td style='color:white; background-color:$Header::colourred;'>$warnmessage</td></tr>";
572 &Pakfire
::dblist
("upgrade", "notice");
573 if ( -e
"/var/run/need_reboot" ) {
574 print "<div style='text-align:center; color:red;'>";
575 print "<br/><br/>$Lang::tr{'needreboot'}!";
579 &Header
::closebigbox
();
580 &Header
::closepage
();