]> git.ipfire.org Git - ipfire-2.x.git/blobdiff - html/cgi-bin/ids.cgi
Großes Update:
[ipfire-2.x.git] / html / cgi-bin / ids.cgi
index 56c9c77f65d4b2f1fb0e2ec5e4b3d0e97a07d521..df5f1c700320a29a33983c47e7455d25c9e4a700 100644 (file)
-#!/usr/bin/perl\r
-#\r
-# SmoothWall CGIs\r
-#\r
-# This code is distributed under the terms of the GPL\r
-#\r
-# (c) The SmoothWall Team\r
-#\r
-# $Id: ids.cgi,v 1.8.2.18 2005/07/27 21:35:22 franck78 Exp $\r
-#\r
-\r
-use LWP::UserAgent;\r
-use File::Copy;\r
-use File::Temp qw/ tempfile tempdir /;\r
-use strict;\r
-\r
-# enable only the following on debugging purpose\r
-#use warnings;\r
-#use CGI::Carp 'fatalsToBrowser';\r
-\r
-require 'CONFIG_ROOT/general-functions.pl';\r
-require "${General::swroot}/lang.pl";\r
-require "${General::swroot}/header.pl";\r
-\r
-my %snortsettings=();\r
-my %checked=();\r
-my %netsettings=();\r
-our $errormessage = '';\r
-our $md5 = '0';# not '' to avoid displaying the wrong message when INSTALLMD5 not set\r
-our $realmd5 = '';\r
-our $results = '';\r
-our $tempdir = '';\r
-our $url='';\r
-&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);\r
-\r
-&Header::showhttpheaders();\r
-\r
-$snortsettings{'ENABLE_SNORT'} = 'off';\r
-$snortsettings{'ENABLE_SNORT_GREEN'} = 'off';\r
-$snortsettings{'ENABLE_SNORT_BLUE'} = 'off';\r
-$snortsettings{'ENABLE_SNORT_ORANGE'} = 'off';\r
-$snortsettings{'ACTION'} = '';\r
-$snortsettings{'RULESTYPE'} = '';\r
-$snortsettings{'OINKCODE'} = '';\r
-$snortsettings{'INSTALLDATE'} = '';\r
-$snortsettings{'INSTALLMD5'} = '';\r
-\r
-&Header::getcgihash(\%snortsettings, {'wantfile' => 1, 'filevar' => 'FH'});\r
-\r
-if ($snortsettings{'RULESTYPE'} eq 'subscripted') {\r
-       $url="http://www.snort.org/pub-bin/oinkmaster.cgi/$snortsettings{'OINKCODE'}/snortrules-snapshot-2.3_s.tar.gz";\r
-} else {\r
-       $url="http://www.snort.org/pub-bin/oinkmaster.cgi/$snortsettings{'OINKCODE'}/snortrules-snapshot-2.3.tar.gz";\r
-}\r
-\r
-if ($snortsettings{'ACTION'} eq $Lang::tr{'save'})\r
-{\r
-       $errormessage = $Lang::tr{'invalid input for oink code'} unless (\r
-           ($snortsettings{'OINKCODE'} =~ /^[a-z0-9]+$/)  ||\r
-           ($snortsettings{'RULESTYPE'} eq 'nothing' )       );\r
-\r
-       &General::writehash("${General::swroot}/snort/settings", \%snortsettings);\r
-       if ($snortsettings{'ENABLE_SNORT'} eq 'on')\r
-       {\r
-               system ('/bin/touch', "${General::swroot}/snort/enable");\r
-       } else {\r
-               unlink "${General::swroot}/snort/enable";\r
-       } \r
-       if ($snortsettings{'ENABLE_SNORT_GREEN'} eq 'on')\r
-       {\r
-               system ('/bin/touch', "${General::swroot}/snort/enable_green");\r
-       } else {\r
-               unlink "${General::swroot}/snort/enable_green";\r
-       } \r
-       if ($snortsettings{'ENABLE_SNORT_BLUE'} eq 'on')\r
-       {\r
-               system ('/bin/touch', "${General::swroot}/snort/enable_blue");\r
-       } else {\r
-               unlink "${General::swroot}/snort/enable_blue";\r
-       } \r
-       if ($snortsettings{'ENABLE_SNORT_ORANGE'} eq 'on')\r
-       {\r
-               system ('/bin/touch', "${General::swroot}/snort/enable_orange");\r
-       } else {\r
-               unlink "${General::swroot}/snort/enable_orange";\r
-       }\r
-\r
-       system('/usr/local/bin/restartsnort','red','orange','blue','green');\r
-} else {\r
-        # INSTALLMD5 is not in the form, so not retrieved by getcgihash\r
-       &General::readhash("${General::swroot}/snort/settings", \%snortsettings);\r
-}\r
-\r
-if ($snortsettings{'ACTION'} eq $Lang::tr{'download new ruleset'}) {\r
-       $md5 = &getmd5;\r
-       if (($snortsettings{'INSTALLMD5'} ne $md5) && defined $md5 ) {\r
-               chomp($md5);\r
-               my $filename = &downloadrulesfile();\r
-               if (defined $filename) {\r
-                       # Check MD5sum\r
-                       $realmd5 = `/usr/bin/md5sum $filename`;\r
-                       chomp ($realmd5);\r
-                       $realmd5 =~ s/^(\w+)\s.*$/$1/;\r
-                       if ($md5 ne $realmd5) {\r
-                               $errormessage = "$Lang::tr{'invalid md5sum'}";\r
-                       } else {\r
-                               $results = "<b>$Lang::tr{'installed updates'}</b>\n<pre>";\r
-                               $results .=`/usr/local/bin/oinkmaster.pl -s -u file://$filename -C /var/ipcop/snort/oinkmaster.conf -o /etc/snort 2>&1`;\r
-                               $results .= "</pre>";\r
-                       }\r
-                       unlink ($filename);\r
-               }\r
-       }\r
-}\r
-\r
-$checked{'ENABLE_SNORT'}{'off'} = '';\r
-$checked{'ENABLE_SNORT'}{'on'} = '';\r
-$checked{'ENABLE_SNORT'}{$snortsettings{'ENABLE_SNORT'}} = "checked='checked'";\r
-$checked{'ENABLE_SNORT_GREEN'}{'off'} = '';\r
-$checked{'ENABLE_SNORT_GREEN'}{'on'} = '';\r
-$checked{'ENABLE_SNORT_GREEN'}{$snortsettings{'ENABLE_SNORT_GREEN'}} = "checked='checked'";\r
-$checked{'ENABLE_SNORT_BLUE'}{'off'} = '';\r
-$checked{'ENABLE_SNORT_BLUE'}{'on'} = '';\r
-$checked{'ENABLE_SNORT_BLUE'}{$snortsettings{'ENABLE_SNORT_BLUE'}} = "checked='checked'";\r
-$checked{'ENABLE_SNORT_ORANGE'}{'off'} = '';\r
-$checked{'ENABLE_SNORT_ORANGE'}{'on'} = '';\r
-$checked{'ENABLE_SNORT_ORANGE'}{$snortsettings{'ENABLE_SNORT_ORANGE'}} = "checked='checked'";\r
-$checked{'RULESTYPE'}{'nothing'} = '';\r
-$checked{'RULESTYPE'}{'registered'} = '';\r
-$checked{'RULESTYPE'}{'subscripted'} = '';\r
-$checked{'RULESTYPE'}{$snortsettings{'RULESTYPE'}} = "checked='checked'";\r
-\r
-&Header::openpage($Lang::tr{'intrusion detection system'}, 1, '');\r
-\r
-&Header::openbigbox('100%', 'left', '', $errormessage);\r
-\r
-if ($errormessage) {\r
-       &Header::openbox('100%', 'left', $Lang::tr{'error messages'});\r
-       print "<class name='base'>$errormessage\n";\r
-       print "&nbsp;</class>\n";\r
-       &Header::closebox();\r
-}\r
-\r
-&Header::openbox('100%', 'left', $Lang::tr{'intrusion detection system2'});\r
-print <<END\r
-<form method='post' action='$ENV{'SCRIPT_NAME'}'><table width='100%'>\r
-<tr>\r
-       <td class='base'><input type='checkbox' name='ENABLE_SNORT_GREEN' $checked{'ENABLE_SNORT_GREEN'}{'on'} />\r
-               GREEN Snort</td>\r
-</tr>\r
-END\r
-;\r
-if ($netsettings{'BLUE_DEV'} ne '') {\r
-print <<END\r
-<tr>\r
-       <td class='base'><input type='checkbox' name='ENABLE_SNORT_BLUE' $checked{'ENABLE_SNORT_BLUE'}{'on'} />\r
-               BLUE Snort</td>\r
-</tr>\r
-END\r
-;\r
-}\r
-if ($netsettings{'ORANGE_DEV'} ne '') {\r
-print <<END\r
-<tr>\r
-       <td class='base'><input type='checkbox' name='ENABLE_SNORT_ORANGE' $checked{'ENABLE_SNORT_ORANGE'}{'on'} />\r
-               ORANGE Snort</td>\r
-</tr>\r
-END\r
-;\r
-}\r
-print <<END\r
-<tr>\r
-       <td class='base'><input type='checkbox' name='ENABLE_SNORT' $checked{'ENABLE_SNORT'}{'on'} />\r
-               RED Snort</td>\r
-</tr>\r
-<tr>\r
-       <td><hr /></td>\r
-</tr>\r
-<tr>\r
-       <td><b>$Lang::tr{'ids rules update'}</b></td>\r
-</tr>\r
-<tr>\r
-       <td><input type='radio' name='RULESTYPE' value='nothing' $checked{'RULESTYPE'}{'nothing'} />\r
-               $Lang::tr{'no'}</td>\r
-</tr>\r
-<tr>\r
-       <td><input type='radio' name='RULESTYPE' value='registered' $checked{'RULESTYPE'}{'registered'} />\r
-               $Lang::tr{'registered user rules'}</td>\r
-</tr>\r
-<tr>\r
-       <td><input type='radio' name='RULESTYPE' value='subscripted' $checked{'RULESTYPE'}{'subscripted'} />\r
-               $Lang::tr{'subscripted user rules'}</td>\r
-</tr>\r
-<tr>\r
-       <td><br />\r
-               $Lang::tr{'ids rules license'} <a href='http://www.snort.org/' target='_blank'>http://www.snort.org</a>.<br />\r
-               <br />\r
-               $Lang::tr{'ids rules license2'} <a href='http://www.snort.org/reg-bin/userprefs.cgi' target='_blank'>USER PREFERENCES</a>, $Lang::tr{'ids rules license3'}<br />\r
-       </td>\r
-</tr>\r
-<tr>\r
-       <td nowrap='nowrap'>Oink Code:&nbsp;<input type='text' size='40' name='OINKCODE' value='$snortsettings{'OINKCODE'}' /></td>\r
-</tr>\r
-<tr>\r
-       <td width='30%' align='center'><input type='submit' name='ACTION' value='$Lang::tr{'download new ruleset'}' />\r
-END\r
-;\r
-\r
-if ($snortsettings{'INSTALLMD5'} eq $md5) {\r
-       print "&nbsp;$Lang::tr{'rules already up to date'}</td>";\r
-} else {\r
-       if ( $snortsettings{'ACTION'} eq $Lang::tr{'download new ruleset'} && $md5 eq $realmd5 ) {\r
-               $snortsettings{'INSTALLMD5'} = $realmd5;\r
-               $snortsettings{'INSTALLDATE'} = `/bin/date +'%Y-%m-%d'`;\r
-               &General::writehash("${General::swroot}/snort/settings", \%snortsettings);\r
-       }\r
-       print "&nbsp;$Lang::tr{'updates installed'}: $snortsettings{'INSTALLDATE'}</td>";\r
-}\r
-print <<END\r
-</tr>\r
-</table>\r
-<hr />\r
-<table width='100%'>\r
-<tr>\r
-       <td width='55%'>&nbsp;</td>\r
-       <td width='40%' align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>\r
-       <td width='5%'>\r
-               &nbsp; <!-- space for future online help link -->\r
-       </td>\r
-</tr>\r
-</table>\r
-</form>\r
-END\r
-;\r
-\r
-if ($results ne '') {\r
-       print "$results";\r
-}\r
-\r
-&Header::closebox();\r
-&Header::closebigbox();\r
-&Header::closepage();\r
-\r
-sub getmd5 {\r
-       # Retrieve MD5 sum from $url.md5 file\r
-       #\r
-       my $md5buf = &geturl("$url.md5");\r
-       return undef unless $md5buf;\r
-\r
-       if (0) { # 1 to debug\r
-               my $filename='';\r
-               my $fh='';\r
-               ($fh, $filename) = tempfile('/tmp/XXXXXXXX',SUFFIX => '.md5' );\r
-               binmode ($fh);\r
-               syswrite ($fh, $md5buf->content);\r
-               close($fh);\r
-       }\r
-       return $md5buf->content;\r
-}\r
-sub downloadrulesfile {\r
-       my $return = &geturl($url);\r
-       return undef unless $return;\r
-\r
-       if (index($return->content, "\037\213") == -1 ) { # \037\213 is .gz beginning\r
-               $errormessage = $Lang::tr{'invalid loaded file'};\r
-               return undef;\r
-       }\r
-\r
-       my $filename='';\r
-       my $fh='';\r
-       ($fh, $filename) = tempfile('/tmp/XXXXXXXX',SUFFIX => '.tar.gz' );#oinkmaster work only with this extension\r
-       binmode ($fh);\r
-       syswrite ($fh, $return->content);\r
-       close($fh);\r
-       return $filename;\r
-}\r
-\r
-sub geturl ($) {\r
-       my $url=$_[0];\r
-\r
-       unless (-e "${General::swroot}/red/active") {\r
-               $errormessage = $Lang::tr{'could not download latest updates'};\r
-               return undef;\r
-       }\r
-\r
-       my $downloader = LWP::UserAgent->new;\r
-       $downloader->timeout(5);\r
-\r
-       my %proxysettings=();\r
-       &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);\r
-\r
-       if ($_=$proxysettings{'UPSTREAM_PROXY'}) {\r
-               my ($peer, $peerport) = (/^(?:[a-zA-Z ]+\:\/\/)?(?:[A-Za-z0-9\_\.\-]*?(?:\:[A-Za-z0-9\_\.\-]*?)?\@)?([a-zA-Z0-9\.\_\-]*?)(?:\:([0-9]{1,5}))?(?:\/.*?)?$/);\r
-               if ($proxysettings{'UPSTREAM_USER'}) {\r
-                       $downloader->proxy("http","http://$proxysettings{'UPSTREAM_USER'}:$proxysettings{'UPSTREAM_PASSWORD'}@"."$peer:$peerport/");\r
-               } else {\r
-                       $downloader->proxy("http","http://$peer:$peerport/");\r
-               }\r
-       }\r
-\r
-       my $return = $downloader->get($url,'Cache-Control','no-cache');\r
-\r
-       if ($return->code == 403) {\r
-               $errormessage = $Lang::tr{'access refused with this oinkcode'};\r
-               return undef;\r
-       } elsif (!$return->is_success()) {\r
-               $errormessage = $Lang::tr{'could not download latest updates'};\r
-               return undef;\r
-       }\r
-\r
-       return $return;\r
-\r
-}\r
+#!/usr/bin/perl
+#
+# SmoothWall CGIs
+#
+# This code is distributed under the terms of the GPL
+#
+# (c) The SmoothWall Team
+#
+# $Id: ids.cgi,v 1.8.2.18 2005/07/27 21:35:22 franck78 Exp $
+#
+
+use LWP::UserAgent;
+use File::Copy;
+use File::Temp qw/ tempfile tempdir /;
+use strict;
+
+# enable only the following on debugging purpose
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
+
+require 'CONFIG_ROOT/general-functions.pl';
+require "${General::swroot}/lang.pl";
+require "${General::swroot}/header.pl";
+
+my %snortsettings=();
+my %checked=();
+my %netsettings=();
+our $errormessage = '';
+our $md5 = '0';# not '' to avoid displaying the wrong message when INSTALLMD5 not set
+our $realmd5 = '';
+our $results = '';
+our $tempdir = '';
+our $url='';
+&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
+
+&Header::showhttpheaders();
+
+$snortsettings{'ENABLE_SNORT'} = 'off';
+$snortsettings{'ENABLE_SNORT_GREEN'} = 'off';
+$snortsettings{'ENABLE_SNORT_BLUE'} = 'off';
+$snortsettings{'ENABLE_SNORT_ORANGE'} = 'off';
+$snortsettings{'ACTION'} = '';
+$snortsettings{'RULESTYPE'} = '';
+$snortsettings{'OINKCODE'} = '';
+$snortsettings{'INSTALLDATE'} = '';
+$snortsettings{'INSTALLMD5'} = '';
+
+&Header::getcgihash(\%snortsettings, {'wantfile' => 1, 'filevar' => 'FH'});
+
+if ($snortsettings{'RULESTYPE'} eq 'subscripted') {
+       $url="http://www.snort.org/pub-bin/oinkmaster.cgi/$snortsettings{'OINKCODE'}/snortrules-snapshot-2.3_s.tar.gz";
+} else {
+       $url="http://www.snort.org/pub-bin/oinkmaster.cgi/$snortsettings{'OINKCODE'}/snortrules-snapshot-2.3.tar.gz";
+}
+
+if ($snortsettings{'ACTION'} eq $Lang::tr{'save'})
+{
+       $errormessage = $Lang::tr{'invalid input for oink code'} unless (
+           ($snortsettings{'OINKCODE'} =~ /^[a-z0-9]+$/)  ||
+           ($snortsettings{'RULESTYPE'} eq 'nothing' )       );
+
+       &General::writehash("${General::swroot}/snort/settings", \%snortsettings);
+       if ($snortsettings{'ENABLE_SNORT'} eq 'on')
+       {
+               system ('/bin/touch', "${General::swroot}/snort/enable");
+       } else {
+               unlink "${General::swroot}/snort/enable";
+       } 
+       if ($snortsettings{'ENABLE_SNORT_GREEN'} eq 'on')
+       {
+               system ('/bin/touch', "${General::swroot}/snort/enable_green");
+       } else {
+               unlink "${General::swroot}/snort/enable_green";
+       } 
+       if ($snortsettings{'ENABLE_SNORT_BLUE'} eq 'on')
+       {
+               system ('/bin/touch', "${General::swroot}/snort/enable_blue");
+       } else {
+               unlink "${General::swroot}/snort/enable_blue";
+       } 
+       if ($snortsettings{'ENABLE_SNORT_ORANGE'} eq 'on')
+       {
+               system ('/bin/touch', "${General::swroot}/snort/enable_orange");
+       } else {
+               unlink "${General::swroot}/snort/enable_orange";
+       }
+
+       system('/usr/local/bin/restartsnort','red','orange','blue','green');
+} else {
+        # INSTALLMD5 is not in the form, so not retrieved by getcgihash
+       &General::readhash("${General::swroot}/snort/settings", \%snortsettings);
+}
+
+if ($snortsettings{'ACTION'} eq $Lang::tr{'download new ruleset'}) {
+       $md5 = &getmd5;
+       if (($snortsettings{'INSTALLMD5'} ne $md5) && defined $md5 ) {
+               chomp($md5);
+               my $filename = &downloadrulesfile();
+               if (defined $filename) {
+                       # Check MD5sum
+                       $realmd5 = `/usr/bin/md5sum $filename`;
+                       chomp ($realmd5);
+                       $realmd5 =~ s/^(\w+)\s.*$/$1/;
+                       if ($md5 ne $realmd5) {
+                               $errormessage = "$Lang::tr{'invalid md5sum'}";
+                       } else {
+                               $results = "<b>$Lang::tr{'installed updates'}</b>\n<pre>";
+                               $results .=`/usr/local/bin/oinkmaster.pl -s -u file://$filename -C /var/ipfire/snort/oinkmaster.conf -o /etc/snort 2>&1`;
+                               $results .= "</pre>";
+                       }
+                       unlink ($filename);
+               }
+       }
+}
+
+$checked{'ENABLE_SNORT'}{'off'} = '';
+$checked{'ENABLE_SNORT'}{'on'} = '';
+$checked{'ENABLE_SNORT'}{$snortsettings{'ENABLE_SNORT'}} = "checked='checked'";
+$checked{'ENABLE_SNORT_GREEN'}{'off'} = '';
+$checked{'ENABLE_SNORT_GREEN'}{'on'} = '';
+$checked{'ENABLE_SNORT_GREEN'}{$snortsettings{'ENABLE_SNORT_GREEN'}} = "checked='checked'";
+$checked{'ENABLE_SNORT_BLUE'}{'off'} = '';
+$checked{'ENABLE_SNORT_BLUE'}{'on'} = '';
+$checked{'ENABLE_SNORT_BLUE'}{$snortsettings{'ENABLE_SNORT_BLUE'}} = "checked='checked'";
+$checked{'ENABLE_SNORT_ORANGE'}{'off'} = '';
+$checked{'ENABLE_SNORT_ORANGE'}{'on'} = '';
+$checked{'ENABLE_SNORT_ORANGE'}{$snortsettings{'ENABLE_SNORT_ORANGE'}} = "checked='checked'";
+$checked{'RULESTYPE'}{'nothing'} = '';
+$checked{'RULESTYPE'}{'registered'} = '';
+$checked{'RULESTYPE'}{'subscripted'} = '';
+$checked{'RULESTYPE'}{$snortsettings{'RULESTYPE'}} = "checked='checked'";
+
+&Header::openpage($Lang::tr{'intrusion detection system'}, 1, '');
+
+&Header::openbigbox('100%', 'left', '', $errormessage);
+
+if ($errormessage) {
+       &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
+       print "<class name='base'>$errormessage\n";
+       print "&nbsp;</class>\n";
+       &Header::closebox();
+}
+
+&Header::openbox('100%', 'left', $Lang::tr{'intrusion detection system2'});
+print <<END
+<form method='post' action='$ENV{'SCRIPT_NAME'}'><table width='100%'>
+<tr>
+       <td class='base'><input type='checkbox' name='ENABLE_SNORT_GREEN' $checked{'ENABLE_SNORT_GREEN'}{'on'} />
+               GREEN Snort</td>
+</tr>
+END
+;
+if ($netsettings{'BLUE_DEV'} ne '') {
+print <<END
+<tr>
+       <td class='base'><input type='checkbox' name='ENABLE_SNORT_BLUE' $checked{'ENABLE_SNORT_BLUE'}{'on'} />
+               BLUE Snort</td>
+</tr>
+END
+;
+}
+if ($netsettings{'ORANGE_DEV'} ne '') {
+print <<END
+<tr>
+       <td class='base'><input type='checkbox' name='ENABLE_SNORT_ORANGE' $checked{'ENABLE_SNORT_ORANGE'}{'on'} />
+               ORANGE Snort</td>
+</tr>
+END
+;
+}
+print <<END
+<tr>
+       <td class='base'><input type='checkbox' name='ENABLE_SNORT' $checked{'ENABLE_SNORT'}{'on'} />
+               RED Snort</td>
+</tr>
+<tr>
+       <td><hr /></td>
+</tr>
+<tr>
+       <td><b>$Lang::tr{'ids rules update'}</b></td>
+</tr>
+<tr>
+       <td><input type='radio' name='RULESTYPE' value='nothing' $checked{'RULESTYPE'}{'nothing'} />
+               $Lang::tr{'no'}</td>
+</tr>
+<tr>
+       <td><input type='radio' name='RULESTYPE' value='registered' $checked{'RULESTYPE'}{'registered'} />
+               $Lang::tr{'registered user rules'}</td>
+</tr>
+<tr>
+       <td><input type='radio' name='RULESTYPE' value='subscripted' $checked{'RULESTYPE'}{'subscripted'} />
+               $Lang::tr{'subscripted user rules'}</td>
+</tr>
+<tr>
+       <td><br />
+               $Lang::tr{'ids rules license'} <a href='http://www.snort.org/' target='_blank'>http://www.snort.org</a>.<br />
+               <br />
+               $Lang::tr{'ids rules license2'} <a href='http://www.snort.org/reg-bin/userprefs.cgi' target='_blank'>USER PREFERENCES</a>, $Lang::tr{'ids rules license3'}<br />
+       </td>
+</tr>
+<tr>
+       <td nowrap='nowrap'>Oink Code:&nbsp;<input type='text' size='40' name='OINKCODE' value='$snortsettings{'OINKCODE'}' /></td>
+</tr>
+<tr>
+       <td width='30%' align='center'><input type='submit' name='ACTION' value='$Lang::tr{'download new ruleset'}' />
+END
+;
+
+if ($snortsettings{'INSTALLMD5'} eq $md5) {
+       print "&nbsp;$Lang::tr{'rules already up to date'}</td>";
+} else {
+       if ( $snortsettings{'ACTION'} eq $Lang::tr{'download new ruleset'} && $md5 eq $realmd5 ) {
+               $snortsettings{'INSTALLMD5'} = $realmd5;
+               $snortsettings{'INSTALLDATE'} = `/bin/date +'%Y-%m-%d'`;
+               &General::writehash("${General::swroot}/snort/settings", \%snortsettings);
+       }
+       print "&nbsp;$Lang::tr{'updates installed'}: $snortsettings{'INSTALLDATE'}</td>";
+}
+print <<END
+</tr>
+</table>
+<hr />
+<table width='100%'>
+<tr>
+       <td width='55%'>&nbsp;</td>
+       <td width='40%' align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
+       <td width='5%'>
+               &nbsp; <!-- space for future online help link -->
+       </td>
+</tr>
+</table>
+</form>
+END
+;
+
+if ($results ne '') {
+       print "$results";
+}
+
+&Header::closebox();
+&Header::closebigbox();
+&Header::closepage();
+
+sub getmd5 {
+       # Retrieve MD5 sum from $url.md5 file
+       #
+       my $md5buf = &geturl("$url.md5");
+       return undef unless $md5buf;
+
+       if (0) { # 1 to debug
+               my $filename='';
+               my $fh='';
+               ($fh, $filename) = tempfile('/tmp/XXXXXXXX',SUFFIX => '.md5' );
+               binmode ($fh);
+               syswrite ($fh, $md5buf->content);
+               close($fh);
+       }
+       return $md5buf->content;
+}
+sub downloadrulesfile {
+       my $return = &geturl($url);
+       return undef unless $return;
+
+       if (index($return->content, "\037\213") == -1 ) { # \037\213 is .gz beginning
+               $errormessage = $Lang::tr{'invalid loaded file'};
+               return undef;
+       }
+
+       my $filename='';
+       my $fh='';
+       ($fh, $filename) = tempfile('/tmp/XXXXXXXX',SUFFIX => '.tar.gz' );#oinkmaster work only with this extension
+       binmode ($fh);
+       syswrite ($fh, $return->content);
+       close($fh);
+       return $filename;
+}
+
+sub geturl ($) {
+       my $url=$_[0];
+
+       unless (-e "${General::swroot}/red/active") {
+               $errormessage = $Lang::tr{'could not download latest updates'};
+               return undef;
+       }
+
+       my $downloader = LWP::UserAgent->new;
+       $downloader->timeout(5);
+
+       my %proxysettings=();
+       &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
+
+       if ($_=$proxysettings{'UPSTREAM_PROXY'}) {
+               my ($peer, $peerport) = (/^(?:[a-zA-Z ]+\:\/\/)?(?:[A-Za-z0-9\_\.\-]*?(?:\:[A-Za-z0-9\_\.\-]*?)?\@)?([a-zA-Z0-9\.\_\-]*?)(?:\:([0-9]{1,5}))?(?:\/.*?)?$/);
+               if ($proxysettings{'UPSTREAM_USER'}) {
+                       $downloader->proxy("http","http://$proxysettings{'UPSTREAM_USER'}:$proxysettings{'UPSTREAM_PASSWORD'}@"."$peer:$peerport/");
+               } else {
+                       $downloader->proxy("http","http://$peer:$peerport/");
+               }
+       }
+
+       my $return = $downloader->get($url,'Cache-Control','no-cache');
+
+       if ($return->code == 403) {
+               $errormessage = $Lang::tr{'access refused with this oinkcode'};
+               return undef;
+       } elsif (!$return->is_success()) {
+               $errormessage = $Lang::tr{'could not download latest updates'};
+               return undef;
+       }
+
+       return $return;
+
+}