[people/pmueller/ipfire-2.x.git] / html / cgi-bin / index.cgi

#!/usr/bin/perl
###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2007-2014  IPFire Team  <info@ipfire.org>                     #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

use strict;
use Net::Telnet;
use Sort::Naturally;

# enable only the following on debugging purpose
#use warnings;
#use CGI::Carp 'fatalsToBrowser';

require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";
require "/opt/pakfire/lib/functions.pl";

my %cgiparams=();
my %pppsettings=();
my %modemsettings=();
my %netsettings=();
my %ddnssettings=();
my %proxysettings=();
my %vpnsettings=();
my %vpnconfig=();
my %ovpnconfig=();
my $warnmessage = '';
my $refresh = "";
my $ipaddr='';
my $showbox=0;
my $showipsec=0;
my $showovpn=0;

if ( ! -e "/var/ipfire/main/gpl_accepted" ) {
	print "Status: 302 Moved Temporarily\n";
	print "Location: gpl.cgi\n\n";
	exit (0);
}

&Header::showhttpheaders();

$cgiparams{'ACTION'} = '';
&Header::getcgihash(\%cgiparams);
$pppsettings{'VALID'} = '';
$pppsettings{'PROFILENAME'} = 'None';
&General::readhash("${General::swroot}/ppp/settings", \%pppsettings);
&General::readhash("${General::swroot}/modem/settings", \%modemsettings);
&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
&General::readhash("${General::swroot}/ddns/settings", \%ddnssettings);
&General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
&General::readhash("${General::swroot}/vpn/settings", \%vpnsettings);

my %color = ();
my %mainsettings = ();
&General::readhash("${General::swroot}/main/settings", \%mainsettings);
&General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);

my $connstate = &Header::connectionstatus();

if ( -e "/var/ipfire/main/gpl-accepted" ) {
	if ($connstate =~ /$Lang::tr{'connecting'}/ || /$Lang::tr{'connection closed'}/ ){
		$refresh = "<meta http-equiv='refresh' content='5;'>";
	}elsif ($connstate =~ /$Lang::tr{'dod waiting'}/ || -e "${General::swroot}/main/refreshindex") {
		$refresh = "<meta http-equiv='refresh' content='30;'>";
	}
}

if ($cgiparams{'ACTION'} eq $Lang::tr{'dial profile'})
{
	my $profile = $cgiparams{'PROFILE'};
	my %tempcgiparams = ();
	$tempcgiparams{'PROFILE'} = '';
	&General::readhash("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
		\%tempcgiparams);

	# make a link from the selected profile to the "default" one.
	unlink("${General::swroot}/ppp/settings");
	link("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
		"${General::swroot}/ppp/settings");
	open (TMP, ">${General::swroot}/ppp/updatesettings");
	close TMP;
	# read in the new params "early" so we can write secrets.
	%cgiparams = ();
	&General::readhash("${General::swroot}/ppp/settings", \%cgiparams);
	$cgiparams{'PROFILE'} = $profile;
	$cgiparams{'BACKUPPROFILE'} = $profile;
	&General::writehash("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
		\%cgiparams);

	# write secrets file.
	open(FILE, ">/${General::swroot}/ppp/secrets") or die "Unable to write secrets file.";
	flock(FILE, 2);
	my $username = $cgiparams{'USERNAME'};
	my $password = $cgiparams{'PASSWORD'};
	print FILE "'$username' * '$password'\n";
	chmod 0600, "${General::swroot}/ppp/secrets";
	close FILE;

	&General::log("$Lang::tr{'profile made current'} $tempcgiparams{'PROFILENAME'}"); 
	$cgiparams{'ACTION'} = "$Lang::tr{'dial'}";
}

if ($cgiparams{'ACTION'} eq $Lang::tr{'dial'}) {
	system('/usr/local/bin/redctrl start > /dev/null') == 0
	or &General::log("Dial failed: $?"); sleep 1;
}elsif ($cgiparams{'ACTION'} eq $Lang::tr{'hangup'}) {
	system('/usr/local/bin/redctrl stop > /dev/null') == 0
	or &General::log("Hangup failed: $?"); sleep 1;
}

my $c;
my $maxprofiles = 5;
my @profilenames = ();

for ($c = 1; $c <= $maxprofiles; $c++)
{
	my %temppppsettings = ();
	$temppppsettings{'PROFILENAME'} = '';
	&General::readhash("${General::swroot}/ppp/settings-$c", \%temppppsettings);
	$profilenames[$c] = $temppppsettings{'PROFILENAME'};
}
my %selected;
for ($c = 1; $c <= $maxprofiles; $c++) {
	$selected{'PROFILE'}{$c} = ''; 
}
$selected{'PROFILE'}{$pppsettings{'PROFILE'}} = "selected='selected'";
my $dialButtonDisabled = "disabled='disabled'";

&Header::openpage($Lang::tr{'main page'}, 1, $refresh);
&Header::openbigbox('', 'center');
if (open(IPADDR,"${General::swroot}/red/local-ipaddress")) {
	    $ipaddr = <IPADDR>;
	    close IPADDR;
	    chomp ($ipaddr);
	}

&Header::openbox('100%', 'center', '');
if ( ( $pppsettings{'VALID'} eq 'yes' && $modemsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ )) {
	if (open(IPADDR,"${General::swroot}/ddns/ipcache")) {
   	    $ipaddr = <IPADDR>;
    	    close IPADDR;
    	    chomp ($ipaddr);
	}
	if (open(IPADDR,"${General::swroot}/red/local-ipaddress")) {
	    $ipaddr = <IPADDR>;
	    close IPADDR;
	    chomp ($ipaddr);
	}
} elsif ($modemsettings{'VALID'} eq 'no') {
	print "$Lang::tr{'modem settings have errors'}\n </b></font>\n";
} else {
	print "$Lang::tr{'profile has errors'}\n </b></font>\n";
}

print <<END;
<!-- Table of networks -->
<table class='tbl' style='width:80%;'>
  <tr>
        <th style='background-color:$color{'color20'};'>$Lang::tr{'network'}</th>
        <th style='background-color:$color{'color20'};'>$Lang::tr{'ip address'}</th>
        <th style='background-color:$color{'color20'};'>$Lang::tr{'status'}</th>
  </tr>
  <tr>
        <td style='width:25%; text-align:center; background-color:$Header::colourred;'><a href='/cgi-bin/pppsetup.cgi' style='color:white;'><b>$Lang::tr{'internet'}</b></a><br/></td>
        <td style='width:30%; text-align:center;'>$ipaddr </td>
        <td style='width:45%; text-align:center;'>$connstate </td>
  </tr>
END
	my $HOSTNAME = (gethostbyaddr(pack("C4", split(/\./, $ipaddr)), 2))[0];
	if ( "$HOSTNAME" ne "" ) {
		print <<END;
	<tr><td><b>$Lang::tr{'hostname'}:</b><td style='text-align:center;'>$HOSTNAME</td><td></td>
END
	}

	if ( -e "${General::swroot}/red/remote-ipaddress" ) {
		open (TMP, "<${General::swroot}/red/remote-ipaddress");
		my $GATEWAY = <TMP>;
		chomp($GATEWAY);
		close TMP;
		print <<END;
	<tr><td><b>$Lang::tr{'gateway'}:</b><td style='text-align:center;'>$GATEWAY</td><td></td></tr>
END
	}

	my $dns_servers;
	if ( -e "${General::swroot}/red/dns" ) {
		open (TMP, "<${General::swroot}/red/dns");
		$dns_servers = <TMP>;
		chomp($dns_servers);
		close TMP;
	}
	print <<END;
		<tr>
			<td>
				<b>$Lang::tr{'dns servers'}:</b>
			</td>
			<td style='text-align:center;'>
				$dns_servers
			</td>
			<td></td>
		</tr>
	</table>
END

#Dial profiles
if ( $netsettings{'RED_TYPE'} ne "STATIC" && $netsettings{'RED_TYPE'} ne "DHCP" ){
	if ( ( $pppsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ ) ) {
		print <<END;
		<br/>
		<table style='width:80%;'>
		<tr><td>
		<form method='post' action='$ENV{'SCRIPT_NAME'}'>$Lang::tr{'profile'}:
			<select name='PROFILE'>
END
		for ($c = 1; $c <= $maxprofiles; $c++)
		{
			if ($profilenames[$c] ne '') {
				$dialButtonDisabled = "";
				print "<option value='$c' $selected{'PROFILE'}{$c}>$c. $profilenames[$c]</option>";
			}
		}
		$dialButtonDisabled = "disabled='disabled'" if (-e '/var/run/ppp-ipfire.pid' || -e "${General::swroot}/red/active");
		print <<END;
			</select>
			<input type='submit' name='ACTION' value='$Lang::tr{'dial profile'}' $dialButtonDisabled />
		</form>
		</td>
		<td style='text-align:center;'>
			<table style='width:100%;'>
				<tr>
				<td style='width=50%; text-align:right;'>
					<form method='post' action='$ENV{'SCRIPT_NAME'}'>
						<input type='submit' name='ACTION' value='$Lang::tr{'dial'}'>
					</form>
				</td>
				<td style='width=50%; text-align:left;'>
					<form method='post' action='$ENV{'SCRIPT_NAME'}'>
						<input type='submit' name='ACTION' value='$Lang::tr{'hangup'}'>
					</form>
				</td>
				</tr>
			</table>
		</td>
		</tr>
		</table>
END
	} else {
		print "<br/><span style='color:red;'>$Lang::tr{'profile has errors'}</span><br/>";
	}
}


print <<END;
<br/>
<table class='tbl' style='width:80%;'>
<tr>
	<th>$Lang::tr{'network'}</th>
	<th>$Lang::tr{'ip address'}</th>
	<th>$Lang::tr{'status'}</th>
</tr>
END

if ( $netsettings{'GREEN_DEV'} ) {
		my $sub=&General::iporsubtocidr($netsettings{'GREEN_NETMASK'});
		print <<END;
		<tr>
			<td style='width:25%; text-align:center; background-color:$Header::colourgreen;'>
				<a href='/cgi-bin/dhcp.cgi' style='color:white'><b>$Lang::tr{'lan'}</b></a>
			</td>
			<td style='width:30%; text-align:center;'>$netsettings{'GREEN_ADDRESS'}/$sub</td>
			<td style='width:45%; text-align:center;'>
END
		if ( $proxysettings{'ENABLE'} eq 'on' ) {
			print $Lang::tr{'advproxy on'};
			if ( $proxysettings{'TRANSPARENT'} eq 'on' ) { print " (transparent)"; }
		}	else { print $Lang::tr{'advproxy off'};  }
		print '</td>';
		print '</tr>';
	}
if (&Header::blue_used()) {
		my $sub=&General::iporsubtocidr($netsettings{'BLUE_NETMASK'});
		print <<END;
		<tr>
			<td style='width:25%; text-align:center; background-color:$Header::colourblue;'>
				<a href='/cgi-bin/wireless.cgi' style='color:white'><b>$Lang::tr{'wireless'}</b></a>
			</td>
			<td style='width:30%; text-align:center;'>$netsettings{'BLUE_ADDRESS'}/$sub
			<td style='width:45%; text-align:center;'>
END
		if ( $proxysettings{'ENABLE_BLUE'} eq 'on' ) {
			print $Lang::tr{'advproxy on'};
			if ( $proxysettings{'TRANSPARENT_BLUE'} eq 'on' ) { print " (transparent)"; }
		}	else { print $Lang::tr{'advproxy off'};  }
		print '</td>';
		print '</tr>';
	}
if (&Header::orange_used()) {
		my $sub=&General::iporsubtocidr($netsettings{'ORANGE_NETMASK'});
		print <<END;
		<tr>
			<td style='width:25%; text-align:center; background-color:$Header::colourorange;'>
				<a href='/cgi-bin/firewall.cgi' style='color:white'><b>$Lang::tr{'dmz'}</b></a>
			</td>
			<td style='width:30%; text-align:center;'>$netsettings{'ORANGE_ADDRESS'}/$sub</td>
			<td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
		</tr>
END
	}
#check if IPSEC is running
if ( $vpnsettings{'ENABLED'} eq 'on' || $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {
	my $ipsecip = $vpnsettings{'VPN_IP'};
print<<END;
		<tr>
			<td style='width:25%; text-align:center; background-color:$Header::colourvpn;'>
				<a href='/cgi-bin/vpnmain.cgi' style='color:white'><b>$Lang::tr{'ipsec'}</b></a>
			</td>
			<td style='width:30%; text-align:center;'>$ipsecip</td>
			<td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
		</tr>
END
}

#check if OpenVPN is running
my %confighash=();
&General::readhash("${General::swroot}/ovpn/settings", \%confighash);

if (($confighash{'ENABLED'} eq "on") ||
    ($confighash{'ENABLED_BLUE'} eq "on") ||
    ($confighash{'ENABLED_ORANGE'} eq "on")) {
	my ($ovpnip,$sub) = split("/",$confighash{'DOVPN_SUBNET'});
	$sub=&General::iporsubtocidr($sub);
	$ovpnip="$ovpnip/$sub";
print <<END;
	<tr>
		<td style='width:25%; text-align:center; background-color:$Header::colourovpn;'>
			<a href='/cgi-bin/ovpnmain.cgi' style='color:white'><b>OpenVPN</b></a>
		</td>
		<td style='width:30%; text-align:center;'>$ovpnip</td>
		<td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
	</tr>
END
	}
print"</table>";
&Header::closebox();

#Check if there are any vpns configured (ipsec and openvpn)
&General::readhasharray("${General::swroot}/vpn/config", \%vpnconfig);
foreach my $key (sort { ncmp($vpnconfig{$a}[1],$vpnconfig{$b}[1]) } keys %vpnconfig) {
	if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host'){
		$showipsec=1;
		$showbox=1;
		last;
	}
}
&General::readhasharray("${General::swroot}/ovpn/ovpnconfig", \%ovpnconfig);
foreach my $dkey (sort { ncmp($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
	if (($ovpnconfig{$dkey}[3] eq 'net') && (-e "/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
		$showbox=1;
		$showovpn=1;
		last;
	}
}

if ($showbox){
# Start of Box wich contains all vpn connections
	&Header::openbox('100%', 'center', $Lang::tr{'vpn'});

	#show ipsec connectiontable
	if ( $showipsec ) {
		my $ipsecip = $vpnsettings{'VPN_IP'};
		my @status = `/usr/local/bin/ipsecctrl I`;
		my %confighash = ();
		my $id = 0;
		my $gif;
		my $col="";
		my $count=0;
		print <<END;
		<table class='tbl' style='width:80%;'>
		<tr>
			<th style='width:40%;'>$Lang::tr{'ipsec network'}</th>
			<th style='width:30%;'>$Lang::tr{'ip address'}</th>
			<th style='width:30%;'>$Lang::tr{'status'}</th>
		</tr>
END
		foreach my $key (sort { uc($vpnconfig{$a}[1]) cmp uc($vpnconfig{$b}[1]) } keys %vpnconfig) {
			if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host') {
				$count++;
				my ($vpnip,$vpnsub) = split("/",$vpnconfig{$key}[11]);
				$vpnsub=&General::iporsubtocidr($vpnsub);
				$vpnip="$vpnip/$vpnsub";
				if ($count % 2){
					$col = $color{'color22'};
				}else{
					$col = $color{'color20'};
				}
				print "<tr>";
				print "<td style='text-align:left; color:white; background-color:$Header::colourvpn;'>$vpnconfig{$key}[1]</td>";
				print "<td style='text-align:center; background-color:$col'>$vpnip</td>";

				my $activecolor = $Header::colourred;
				my $activestatus = $Lang::tr{'capsclosed'};
				if ($vpnconfig{$key}[0] eq 'off') {
					$activecolor = $Header::colourblue;
					$activestatus = $Lang::tr{'capsclosed'};
				} else {
					foreach my $line (@status) {
						if (($line =~ /\"$vpnconfig{$key}[1]\".*IPsec SA established/) || ($line =~/$vpnconfig{$key}[1]\{.*INSTALLED/ )){
							$activecolor = $Header::colourgreen;
							$activestatus = $Lang::tr{'capsopen'};
						} elsif ($line =~ /$vpnconfig{$key}[1]\{.*ROUTED/) {
							$activecolor = $Header::colourorange;
							$activestatus = $Lang::tr{'vpn on-demand'};
						}
					}
				}
				print "<td style='text-align:center; color:white; background-color:$activecolor;'><b>$activestatus</b></td>";
				print "</tr>";
			}
		}
		print "</table>";
	}

	# Check if there is any OpenVPN connection configured.
	if ( $showovpn ){
		print <<END;
		<br/>
		<table class='tbl' style='width:80%;'>
		<tr>
			<th style='width:40%;'>$Lang::tr{'openvpn network'}</th>
			<th style='width:30%;'>$Lang::tr{'ip address'}</th>
			<th style='width:30%;'>$Lang::tr{'status'}</th>
END

		# Check if the OpenVPN server for Road Warrior Connections is running and display status information.
		my $active;
		my $count=0;
		# Print the OpenVPN N2N connection status.
		if ( -d "${General::swroot}/ovpn/n2nconf") {
			my $col="";
			foreach my $dkey (sort { ncmp ($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
				if (($ovpnconfig{$dkey}[3] eq 'net') && (-e "/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
					$count++;
					my $tport = $ovpnconfig{$dkey}[22];
					next if ($tport eq '');
					my $tnet = new Net::Telnet ( Timeout=>5, Errmode=>'return', Port=>$tport);
					$tnet->open('127.0.0.1');
					my @output = $tnet->cmd(String => 'state', Prompt => '/(END.*\n|ERROR:.*\n)/');
					my @tustate = split(/\,/, $output[1]);
					my $display;
					my $display_colour = $Header::colourred;
					if ( $tustate[1] eq 'CONNECTED' || ($tustate[1] eq 'WAIT')) {
						$display_colour = $Header::colourgreen;
						$display = $Lang::tr{'capsopen'};
					} else {
						$display = $tustate[1];
					}
					if ($count %2){
						$col = $color{'color22'};
					}else{
						$col = $color{'color20'};
					}
					$active='off';
					#make cidr from ip
					my ($vpnip,$vpnsub) = split("/",$ovpnconfig{$dkey}[11]);
					my $vpnsub=&General::iporsubtocidr($vpnsub);
					my $vpnip="$vpnip/$vpnsub";
					print <<END;
					<tr>
						<td style='text-align:left; color:white; background-color:$Header::colourovpn;'>$ovpnconfig{$dkey}[1]</td>
						<td style='text-align:center; background-color:$col'>$vpnip</td>
						<td style='text-align:center; color:white; background-color:$display_colour' ><b>$display</b></td>
					</tr>
END
				}
			}
		}
		if ($active ne 'off'){
			print "<tr><td colspan='3' style='text-align:center;'>$Lang::tr{'ovpn no connections'}</td></tr>";
		}
		print"</table>";
	}
&Header::closebox();
}

my $dnssec_status = &General::dnssec_status();
if ($dnssec_status eq "off") {
	$warnmessage .= "<li>$Lang::tr{'dnssec disabled warning'}</li>";
}

# Fireinfo
if ( ! -e "/var/ipfire/main/send_profile") {
	$warnmessage .= "<li><a style='color: white;' href='fireinfo.cgi'>$Lang::tr{'fireinfo please enable'}</a></li>";
}

# Memory usage warning
my @free = `/usr/bin/free`;
$free[1] =~ m/(\d+)/;
my $mem = $1;
$free[2] =~ m/(\d+)/;
my $used = $1;
my $pct = int 100 * ($mem - $used) / $mem;
if ($used / $mem > 90) {
	$warnmessage .= "<li>$Lang::tr{'high memory usage'}: $pct% !</li>";
}

# Diskspace usage warning
my @temp=();
my $temp2=();
my @df = `/bin/df -B M -P -x rootfs`;
foreach my $line (@df) {
	next if $line =~ m/^Filesystem/;
	if ($line =~ m/root/ ) {
		$line =~ m/^.* (\d+)M.*$/;
		@temp = split(/ +/,$line);
		if ($1<5) {
			# available:plain value in MB, and not %used as 10% is too much to waste on small disk
			# and root size should not vary during time
			$warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$1M</b> !</li>";
		}
		
	} else {
		# $line =~ m/^.* (\d+)m.*$/;
		$line =~ m/^.* (\d+)\%.*$/;
		if ($1>90) {
			@temp = split(/ /,$line);
			$temp2=int(100-$1);
			$warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$temp2%</b> !</li>";
		}
	}
}

# S.M.A.R.T. health warning
my @files = `/bin/ls /var/run/smartctl_out_hddtemp-* 2>/dev/null`;
foreach my $file (@files) {
	chomp ($file);
	my $disk=`echo $file | cut -d"-" -f2`;
	chomp ($disk);
	if (`/bin/grep "SAVE ALL DATA" $file`) {
		$warnmessage .= "<li>$Lang::tr{'smartwarn1'} /dev/$disk $Lang::tr{'smartwarn2'} !</li>";
	}
}

# Reiser4 warning
my @files = `mount | grep " reiser4 (" 2>/dev/null`;
foreach my $disk (@files) {
	chomp ($disk);
	$warnmessage .= "<li>$disk - $Lang::tr{'deprecated fs warn'}</li>";
}

if ($warnmessage) {
	&Header::openbox('100%','center', );
	print "<table class='tbl' style='width:80%;'>";
	print "<tr><th>$Lang::tr{'fwhost hint'}</th></tr>";
	print "<tr><td style='color:white; background-color:$Header::colourred;'>$warnmessage</td></tr>";
    print "</table>";
	&Header::closebox();
}

&Pakfire::dblist("upgrade", "notice");
if ( -e "/var/run/need_reboot" ) {
	print "<div style='text-align:center; color:red;'>";
	print "<br/><br/>$Lang::tr{'needreboot'}!";
	print "</div>";
}

&Header::closebigbox();
&Header::closepage();
Commit	Line	Data
	1	#!/usr/bin/perl
	2	###############################################################################
	3	# #
	4	# IPFire.org - A linux based firewall #
	5	# Copyright (C) 2007-2014 IPFire Team <info@ipfire.org> #
	6	# #
	7	# This program is free software: you can redistribute it and/or modify #
	8	# it under the terms of the GNU General Public License as published by #
	9	# the Free Software Foundation, either version 3 of the License, or #
	10	# (at your option) any later version. #
	11	# #
	12	# This program is distributed in the hope that it will be useful, #
	13	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	14	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	15	# GNU General Public License for more details. #
	16	# #
	17	# You should have received a copy of the GNU General Public License #
	18	# along with this program. If not, see <http://www.gnu.org/licenses/>. #
	19	# #
	20	###############################################################################
	21
	22	use strict;
	23	use Net::Telnet;
	24	use Sort::Naturally;
	25
	26	# enable only the following on debugging purpose
	27	#use warnings;
	28	#use CGI::Carp 'fatalsToBrowser';
	29
	30	require '/var/ipfire/general-functions.pl';
	31	require "${General::swroot}/lang.pl";
	32	require "${General::swroot}/header.pl";
	33	require "/opt/pakfire/lib/functions.pl";
	34
	35	my %cgiparams=();
	36	my %pppsettings=();
	37	my %modemsettings=();
	38	my %netsettings=();
	39	my %ddnssettings=();
	40	my %proxysettings=();
	41	my %vpnsettings=();
	42	my %vpnconfig=();
	43	my %ovpnconfig=();
	44	my $warnmessage = '';
	45	my $refresh = "";
	46	my $ipaddr='';
	47	my $showbox=0;
	48	my $showipsec=0;
	49	my $showovpn=0;
	50
	51	if ( ! -e "/var/ipfire/main/gpl_accepted" ) {
	52	print "Status: 302 Moved Temporarily\n";
	53	print "Location: gpl.cgi\n\n";
	54	exit (0);
	55	}
	56
	57	&Header::showhttpheaders();
	58
	59	$cgiparams{'ACTION'} = '';
	60	&Header::getcgihash(\%cgiparams);
	61	$pppsettings{'VALID'} = '';
	62	$pppsettings{'PROFILENAME'} = 'None';
	63	&General::readhash("${General::swroot}/ppp/settings", \%pppsettings);
	64	&General::readhash("${General::swroot}/modem/settings", \%modemsettings);
	65	&General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
	66	&General::readhash("${General::swroot}/ddns/settings", \%ddnssettings);
	67	&General::readhash("${General::swroot}/proxy/advanced/settings", \%proxysettings);
	68	&General::readhash("${General::swroot}/vpn/settings", \%vpnsettings);
	69
	70	my %color = ();
	71	my %mainsettings = ();
	72	&General::readhash("${General::swroot}/main/settings", \%mainsettings);
	73	&General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
	74
	75	my $connstate = &Header::connectionstatus();
	76
	77	if ( -e "/var/ipfire/main/gpl-accepted" ) {
	78	if ($connstate =~ /$Lang::tr{'connecting'}/ \|\| /$Lang::tr{'connection closed'}/ ){
	79	$refresh = "<meta http-equiv='refresh' content='5;'>";
	80	}elsif ($connstate =~ /$Lang::tr{'dod waiting'}/ \|\| -e "${General::swroot}/main/refreshindex") {
	81	$refresh = "<meta http-equiv='refresh' content='30;'>";
	82	}
	83	}
	84
	85	if ($cgiparams{'ACTION'} eq $Lang::tr{'dial profile'})
	86	{
	87	my $profile = $cgiparams{'PROFILE'};
	88	my %tempcgiparams = ();
	89	$tempcgiparams{'PROFILE'} = '';
	90	&General::readhash("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
	91	\%tempcgiparams);
	92
	93	# make a link from the selected profile to the "default" one.
	94	unlink("${General::swroot}/ppp/settings");
	95	link("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
	96	"${General::swroot}/ppp/settings");
	97	open (TMP, ">${General::swroot}/ppp/updatesettings");
	98	close TMP;
	99	# read in the new params "early" so we can write secrets.
	100	%cgiparams = ();
	101	&General::readhash("${General::swroot}/ppp/settings", \%cgiparams);
	102	$cgiparams{'PROFILE'} = $profile;
	103	$cgiparams{'BACKUPPROFILE'} = $profile;
	104	&General::writehash("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
	105	\%cgiparams);
	106
	107	# write secrets file.
	108	open(FILE, ">/${General::swroot}/ppp/secrets") or die "Unable to write secrets file.";
	109	flock(FILE, 2);
	110	my $username = $cgiparams{'USERNAME'};
	111	my $password = $cgiparams{'PASSWORD'};
	112	print FILE "'$username' * '$password'\n";
	113	chmod 0600, "${General::swroot}/ppp/secrets";
	114	close FILE;
	115
	116	&General::log("$Lang::tr{'profile made current'} $tempcgiparams{'PROFILENAME'}");
	117	$cgiparams{'ACTION'} = "$Lang::tr{'dial'}";
	118	}
	119
	120	if ($cgiparams{'ACTION'} eq $Lang::tr{'dial'}) {
	121	system('/usr/local/bin/redctrl start > /dev/null') == 0
	122	or &General::log("Dial failed: $?"); sleep 1;
	123	}elsif ($cgiparams{'ACTION'} eq $Lang::tr{'hangup'}) {
	124	system('/usr/local/bin/redctrl stop > /dev/null') == 0
	125	or &General::log("Hangup failed: $?"); sleep 1;
	126	}
	127
	128	my $c;
	129	my $maxprofiles = 5;
	130	my @profilenames = ();
	131
	132	for ($c = 1; $c <= $maxprofiles; $c++)
	133	{
	134	my %temppppsettings = ();
	135	$temppppsettings{'PROFILENAME'} = '';
	136	&General::readhash("${General::swroot}/ppp/settings-$c", \%temppppsettings);
	137	$profilenames[$c] = $temppppsettings{'PROFILENAME'};
	138	}
	139	my %selected;
	140	for ($c = 1; $c <= $maxprofiles; $c++) {
	141	$selected{'PROFILE'}{$c} = '';
	142	}
	143	$selected{'PROFILE'}{$pppsettings{'PROFILE'}} = "selected='selected'";
	144	my $dialButtonDisabled = "disabled='disabled'";
	145
	146	&Header::openpage($Lang::tr{'main page'}, 1, $refresh);
	147	&Header::openbigbox('', 'center');
	148	if (open(IPADDR,"${General::swroot}/red/local-ipaddress")) {
	149	$ipaddr = <IPADDR>;
	150	close IPADDR;
	151	chomp ($ipaddr);
	152	}
	153
	154	&Header::openbox('100%', 'center', '');
	155	if ( ( $pppsettings{'VALID'} eq 'yes' && $modemsettings{'VALID'} eq 'yes' ) \|\| ( $netsettings{'CONFIG_TYPE'} =~ /^(1\|2\|3\|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP\|STATIC)$/ )) {
	156	if (open(IPADDR,"${General::swroot}/ddns/ipcache")) {
	157	$ipaddr = <IPADDR>;
	158	close IPADDR;
	159	chomp ($ipaddr);
	160	}
	161	if (open(IPADDR,"${General::swroot}/red/local-ipaddress")) {
	162	$ipaddr = <IPADDR>;
	163	close IPADDR;
	164	chomp ($ipaddr);
	165	}
	166	} elsif ($modemsettings{'VALID'} eq 'no') {
	167	print "$Lang::tr{'modem settings have errors'}\n </b></font>\n";
	168	} else {
	169	print "$Lang::tr{'profile has errors'}\n </b></font>\n";
	170	}
	171
	172	print <<END;
	173	<!-- Table of networks -->
	174	<table class='tbl' style='width:80%;'>
	175	<tr>
	176	<th style='background-color:$color{'color20'};'>$Lang::tr{'network'}</th>
	177	<th style='background-color:$color{'color20'};'>$Lang::tr{'ip address'}</th>
	178	<th style='background-color:$color{'color20'};'>$Lang::tr{'status'}</th>
	179	</tr>
	180	<tr>
	181	<td style='width:25%; text-align:center; background-color:$Header::colourred;'><a href='/cgi-bin/pppsetup.cgi' style='color:white;'><b>$Lang::tr{'internet'}</b></a><br/></td>
	182	<td style='width:30%; text-align:center;'>$ipaddr </td>
	183	<td style='width:45%; text-align:center;'>$connstate </td>
	184	</tr>
	185	END
	186	my $HOSTNAME = (gethostbyaddr(pack("C4", split(/\./, $ipaddr)), 2))[0];
	187	if ( "$HOSTNAME" ne "" ) {
	188	print <<END;
	189	<tr><td><b>$Lang::tr{'hostname'}:</b><td style='text-align:center;'>$HOSTNAME</td><td></td>
	190	END
	191	}
	192
	193	if ( -e "${General::swroot}/red/remote-ipaddress" ) {
	194	open (TMP, "<${General::swroot}/red/remote-ipaddress");
	195	my $GATEWAY = <TMP>;
	196	chomp($GATEWAY);
	197	close TMP;
	198	print <<END;
	199	<tr><td><b>$Lang::tr{'gateway'}:</b><td style='text-align:center;'>$GATEWAY</td><td></td></tr>
	200	END
	201	}
	202
	203	my $dns_servers;
	204	if ( -e "${General::swroot}/red/dns" ) {
	205	open (TMP, "<${General::swroot}/red/dns");
	206	$dns_servers = <TMP>;
	207	chomp($dns_servers);
	208	close TMP;
	209	}
	210	print <<END;
	211	<tr>
	212	<td>
	213	<b>$Lang::tr{'dns servers'}:</b>
	214	</td>
	215	<td style='text-align:center;'>
	216	$dns_servers
	217	</td>
	218	<td></td>
	219	</tr>
	220	</table>
	221	END
	222
	223	#Dial profiles
	224	if ( $netsettings{'RED_TYPE'} ne "STATIC" && $netsettings{'RED_TYPE'} ne "DHCP" ){
	225	if ( ( $pppsettings{'VALID'} eq 'yes' ) \|\| ( $netsettings{'CONFIG_TYPE'} =~ /^(1\|2\|3\|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP\|STATIC)$/ ) ) {
	226	print <<END;
	227	<br/>
	228	<table style='width:80%;'>
	229	<tr><td>
	230	<form method='post' action='$ENV{'SCRIPT_NAME'}'>$Lang::tr{'profile'}:
	231	<select name='PROFILE'>
	232	END
	233	for ($c = 1; $c <= $maxprofiles; $c++)
	234	{
	235	if ($profilenames[$c] ne '') {
	236	$dialButtonDisabled = "";
	237	print "<option value='$c' $selected{'PROFILE'}{$c}>$c. $profilenames[$c]</option>";
	238	}
	239	}
	240	$dialButtonDisabled = "disabled='disabled'" if (-e '/var/run/ppp-ipfire.pid' \|\| -e "${General::swroot}/red/active");
	241	print <<END;
	242	</select>
	243	<input type='submit' name='ACTION' value='$Lang::tr{'dial profile'}' $dialButtonDisabled />
	244	</form>
	245	</td>
	246	<td style='text-align:center;'>
	247	<table style='width:100%;'>
	248	<tr>
	249	<td style='width=50%; text-align:right;'>
	250	<form method='post' action='$ENV{'SCRIPT_NAME'}'>
	251	<input type='submit' name='ACTION' value='$Lang::tr{'dial'}'>
	252	</form>
	253	</td>
	254	<td style='width=50%; text-align:left;'>
	255	<form method='post' action='$ENV{'SCRIPT_NAME'}'>
	256	<input type='submit' name='ACTION' value='$Lang::tr{'hangup'}'>
	257	</form>
	258	</td>
	259	</tr>
	260	</table>
	261	</td>
	262	</tr>
	263	</table>
	264	END
	265	} else {
	266	print "<br/><span style='color:red;'>$Lang::tr{'profile has errors'}</span><br/>";
	267	}
	268	}
	269
	270
	271	print <<END;
	272	<br/>
	273	<table class='tbl' style='width:80%;'>
	274	<tr>
	275	<th>$Lang::tr{'network'}</th>
	276	<th>$Lang::tr{'ip address'}</th>
	277	<th>$Lang::tr{'status'}</th>
	278	</tr>
	279	END
	280
	281	if ( $netsettings{'GREEN_DEV'} ) {
	282	my $sub=&General::iporsubtocidr($netsettings{'GREEN_NETMASK'});
	283	print <<END;
	284	<tr>
	285	<td style='width:25%; text-align:center; background-color:$Header::colourgreen;'>
	286	<a href='/cgi-bin/dhcp.cgi' style='color:white'><b>$Lang::tr{'lan'}</b></a>
	287	</td>
	288	<td style='width:30%; text-align:center;'>$netsettings{'GREEN_ADDRESS'}/$sub</td>
	289	<td style='width:45%; text-align:center;'>
	290	END
	291	if ( $proxysettings{'ENABLE'} eq 'on' ) {
	292	print $Lang::tr{'advproxy on'};
	293	if ( $proxysettings{'TRANSPARENT'} eq 'on' ) { print " (transparent)"; }
	294	} else { print $Lang::tr{'advproxy off'}; }
	295	print '</td>';
	296	print '</tr>';
	297	}
	298	if (&Header::blue_used()) {
	299	my $sub=&General::iporsubtocidr($netsettings{'BLUE_NETMASK'});
	300	print <<END;
	301	<tr>
	302	<td style='width:25%; text-align:center; background-color:$Header::colourblue;'>
	303	<a href='/cgi-bin/wireless.cgi' style='color:white'><b>$Lang::tr{'wireless'}</b></a>
	304	</td>
	305	<td style='width:30%; text-align:center;'>$netsettings{'BLUE_ADDRESS'}/$sub
	306	<td style='width:45%; text-align:center;'>
	307	END
	308	if ( $proxysettings{'ENABLE_BLUE'} eq 'on' ) {
	309	print $Lang::tr{'advproxy on'};
	310	if ( $proxysettings{'TRANSPARENT_BLUE'} eq 'on' ) { print " (transparent)"; }
	311	} else { print $Lang::tr{'advproxy off'}; }
	312	print '</td>';
	313	print '</tr>';
	314	}
	315	if (&Header::orange_used()) {
	316	my $sub=&General::iporsubtocidr($netsettings{'ORANGE_NETMASK'});
	317	print <<END;
	318	<tr>
	319	<td style='width:25%; text-align:center; background-color:$Header::colourorange;'>
	320	<a href='/cgi-bin/firewall.cgi' style='color:white'><b>$Lang::tr{'dmz'}</b></a>
	321	</td>
	322	<td style='width:30%; text-align:center;'>$netsettings{'ORANGE_ADDRESS'}/$sub</td>
	323	<td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
	324	</tr>
	325	END
	326	}
	327	#check if IPSEC is running
	328	if ( $vpnsettings{'ENABLED'} eq 'on' \|\| $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {
	329	my $ipsecip = $vpnsettings{'VPN_IP'};
	330	print<<END;
	331	<tr>
	332	<td style='width:25%; text-align:center; background-color:$Header::colourvpn;'>
	333	<a href='/cgi-bin/vpnmain.cgi' style='color:white'><b>$Lang::tr{'ipsec'}</b></a>
	334	</td>
	335	<td style='width:30%; text-align:center;'>$ipsecip</td>
	336	<td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
	337	</tr>
	338	END
	339	}
	340
	341	#check if OpenVPN is running
	342	my %confighash=();
	343	&General::readhash("${General::swroot}/ovpn/settings", \%confighash);
	344
	345	if (($confighash{'ENABLED'} eq "on") \|\|
	346	($confighash{'ENABLED_BLUE'} eq "on") \|\|
	347	($confighash{'ENABLED_ORANGE'} eq "on")) {
	348	my ($ovpnip,$sub) = split("/",$confighash{'DOVPN_SUBNET'});
	349	$sub=&General::iporsubtocidr($sub);
	350	$ovpnip="$ovpnip/$sub";
	351	print <<END;
	352	<tr>
	353	<td style='width:25%; text-align:center; background-color:$Header::colourovpn;'>
	354	<a href='/cgi-bin/ovpnmain.cgi' style='color:white'><b>OpenVPN</b></a>
	355	</td>
	356	<td style='width:30%; text-align:center;'>$ovpnip</td>
	357	<td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
	358	</tr>
	359	END
	360	}
	361	print"</table>";
	362	&Header::closebox();
	363
	364	#Check if there are any vpns configured (ipsec and openvpn)
	365	&General::readhasharray("${General::swroot}/vpn/config", \%vpnconfig);
	366	foreach my $key (sort { ncmp($vpnconfig{$a}[1],$vpnconfig{$b}[1]) } keys %vpnconfig) {
	367	if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host'){
	368	$showipsec=1;
	369	$showbox=1;
	370	last;
	371	}
	372	}
	373	&General::readhasharray("${General::swroot}/ovpn/ovpnconfig", \%ovpnconfig);
	374	foreach my $dkey (sort { ncmp($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
	375	if (($ovpnconfig{$dkey}[3] eq 'net') && (-e "/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
	376	$showbox=1;
	377	$showovpn=1;
	378	last;
	379	}
	380	}
	381
	382	if ($showbox){
	383	# Start of Box wich contains all vpn connections
	384	&Header::openbox('100%', 'center', $Lang::tr{'vpn'});
	385
	386	#show ipsec connectiontable
	387	if ( $showipsec ) {
	388	my $ipsecip = $vpnsettings{'VPN_IP'};
	389	my @status = `/usr/local/bin/ipsecctrl I`;
	390	my %confighash = ();
	391	my $id = 0;
	392	my $gif;
	393	my $col="";
	394	my $count=0;
	395	print <<END;
	396	<table class='tbl' style='width:80%;'>
	397	<tr>
	398	<th style='width:40%;'>$Lang::tr{'ipsec network'}</th>
	399	<th style='width:30%;'>$Lang::tr{'ip address'}</th>
	400	<th style='width:30%;'>$Lang::tr{'status'}</th>
	401	</tr>
	402	END
	403	foreach my $key (sort { uc($vpnconfig{$a}[1]) cmp uc($vpnconfig{$b}[1]) } keys %vpnconfig) {
	404	if ($vpnconfig{$key}[0] eq 'on' && $vpnconfig{$key}[3] ne 'host') {
	405	$count++;
	406	my ($vpnip,$vpnsub) = split("/",$vpnconfig{$key}[11]);
	407	$vpnsub=&General::iporsubtocidr($vpnsub);
	408	$vpnip="$vpnip/$vpnsub";
	409	if ($count % 2){
	410	$col = $color{'color22'};
	411	}else{
	412	$col = $color{'color20'};
	413	}
	414	print "<tr>";
	415	print "<td style='text-align:left; color:white; background-color:$Header::colourvpn;'>$vpnconfig{$key}[1]</td>";
	416	print "<td style='text-align:center; background-color:$col'>$vpnip</td>";
	417
	418	my $activecolor = $Header::colourred;
	419	my $activestatus = $Lang::tr{'capsclosed'};
	420	if ($vpnconfig{$key}[0] eq 'off') {
	421	$activecolor = $Header::colourblue;
	422	$activestatus = $Lang::tr{'capsclosed'};
	423	} else {
	424	foreach my $line (@status) {
	425	if (($line =~ /\"$vpnconfig{$key}[1]\".IPsec SA established/) \|\| ($line =~/$vpnconfig{$key}[1]\{.INSTALLED/ )){
	426	$activecolor = $Header::colourgreen;
	427	$activestatus = $Lang::tr{'capsopen'};
	428	} elsif ($line =~ /$vpnconfig{$key}[1]\{.*ROUTED/) {
	429	$activecolor = $Header::colourorange;
	430	$activestatus = $Lang::tr{'vpn on-demand'};
	431	}
	432	}
	433	}
	434	print "<td style='text-align:center; color:white; background-color:$activecolor;'><b>$activestatus</b></td>";
	435	print "</tr>";
	436	}
	437	}
	438	print "</table>";
	439	}
	440
	441	# Check if there is any OpenVPN connection configured.
	442	if ( $showovpn ){
	443	print <<END;
	444	<br/>
	445	<table class='tbl' style='width:80%;'>
	446	<tr>
	447	<th style='width:40%;'>$Lang::tr{'openvpn network'}</th>
	448	<th style='width:30%;'>$Lang::tr{'ip address'}</th>
	449	<th style='width:30%;'>$Lang::tr{'status'}</th>
	450	END
	451
	452	# Check if the OpenVPN server for Road Warrior Connections is running and display status information.
	453	my $active;
	454	my $count=0;
	455	# Print the OpenVPN N2N connection status.
	456	if ( -d "${General::swroot}/ovpn/n2nconf") {
	457	my $col="";
	458	foreach my $dkey (sort { ncmp ($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
	459	if (($ovpnconfig{$dkey}[3] eq 'net') && (-e "/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
	460	$count++;
	461	my $tport = $ovpnconfig{$dkey}[22];
	462	next if ($tport eq '');
	463	my $tnet = new Net::Telnet ( Timeout=>5, Errmode=>'return', Port=>$tport);
	464	$tnet->open('127.0.0.1');
	465	my @output = $tnet->cmd(String => 'state', Prompt => '/(END.\n\|ERROR:.\n)/');
	466	my @tustate = split(/\,/, $output[1]);
	467	my $display;
	468	my $display_colour = $Header::colourred;
	469	if ( $tustate[1] eq 'CONNECTED' \|\| ($tustate[1] eq 'WAIT')) {
	470	$display_colour = $Header::colourgreen;
	471	$display = $Lang::tr{'capsopen'};
	472	} else {
	473	$display = $tustate[1];
	474	}
	475	if ($count %2){
	476	$col = $color{'color22'};
	477	}else{
	478	$col = $color{'color20'};
	479	}
	480	$active='off';
	481	#make cidr from ip
	482	my ($vpnip,$vpnsub) = split("/",$ovpnconfig{$dkey}[11]);
	483	my $vpnsub=&General::iporsubtocidr($vpnsub);
	484	my $vpnip="$vpnip/$vpnsub";
	485	print <<END;
	486	<tr>
	487	<td style='text-align:left; color:white; background-color:$Header::colourovpn;'>$ovpnconfig{$dkey}[1]</td>
	488	<td style='text-align:center; background-color:$col'>$vpnip</td>
	489	<td style='text-align:center; color:white; background-color:$display_colour' ><b>$display</b></td>
	490	</tr>
	491	END
	492	}
	493	}
	494	}
	495	if ($active ne 'off'){
	496	print "<tr><td colspan='3' style='text-align:center;'>$Lang::tr{'ovpn no connections'}</td></tr>";
	497	}
	498	print"</table>";
	499	}
	500	&Header::closebox();
	501	}
	502
	503	my $dnssec_status = &General::dnssec_status();
	504	if ($dnssec_status eq "off") {
	505	$warnmessage .= "<li>$Lang::tr{'dnssec disabled warning'}</li>";
	506	}
	507
	508	# Fireinfo
	509	if ( ! -e "/var/ipfire/main/send_profile") {
	510	$warnmessage .= "<li><a style='color: white;' href='fireinfo.cgi'>$Lang::tr{'fireinfo please enable'}</a></li>";
	511	}
	512
	513	# Memory usage warning
	514	my @free = `/usr/bin/free`;
	515	$free[1] =~ m/(\d+)/;
	516	my $mem = $1;
	517	$free[2] =~ m/(\d+)/;
	518	my $used = $1;
	519	my $pct = int 100 * ($mem - $used) / $mem;
	520	if ($used / $mem > 90) {
	521	$warnmessage .= "<li>$Lang::tr{'high memory usage'}: $pct% !</li>";
	522	}
	523
	524	# Diskspace usage warning
	525	my @temp=();
	526	my $temp2=();
	527	my @df = `/bin/df -B M -P -x rootfs`;
	528	foreach my $line (@df) {
	529	next if $line =~ m/^Filesystem/;
	530	if ($line =~ m/root/ ) {
	531	$line =~ m/^.* (\d+)M.*$/;
	532	@temp = split(/ +/,$line);
	533	if ($1<5) {
	534	# available:plain value in MB, and not %used as 10% is too much to waste on small disk
	535	# and root size should not vary during time
	536	$warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$1M</b> !</li>";
	537	}
	538
	539	} else {
	540	# $line =~ m/^.* (\d+)m.*$/;
	541	$line =~ m/^.* (\d+)\%.*$/;
	542	if ($1>90) {
	543	@temp = split(/ /,$line);
	544	$temp2=int(100-$1);
	545	$warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$temp2%</b> !</li>";
	546	}
	547	}
	548	}
	549
	550	# S.M.A.R.T. health warning
	551	my @files = `/bin/ls /var/run/smartctl_out_hddtemp-* 2>/dev/null`;
	552	foreach my $file (@files) {
	553	chomp ($file);
	554	my $disk=`echo $file \| cut -d"-" -f2`;
	555	chomp ($disk);
	556	if (`/bin/grep "SAVE ALL DATA" $file`) {
	557	$warnmessage .= "<li>$Lang::tr{'smartwarn1'} /dev/$disk $Lang::tr{'smartwarn2'} !</li>";
	558	}
	559	}
	560
	561	# Reiser4 warning
	562	my @files = `mount \| grep " reiser4 (" 2>/dev/null`;
	563	foreach my $disk (@files) {
	564	chomp ($disk);
	565	$warnmessage .= "<li>$disk - $Lang::tr{'deprecated fs warn'}</li>";
	566	}
	567
	568	if ($warnmessage) {
	569	&Header::openbox('100%','center', );
	570	print "<table class='tbl' style='width:80%;'>";
	571	print "<tr><th>$Lang::tr{'fwhost hint'}</th></tr>";
	572	print "<tr><td style='color:white; background-color:$Header::colourred;'>$warnmessage</td></tr>";
	573	print "</table>";
	574	&Header::closebox();
	575	}
	576
	577	&Pakfire::dblist("upgrade", "notice");
	578	if ( -e "/var/run/need_reboot" ) {
	579	print "<div style='text-align:center; color:red;'>";
	580	print "<br/><br/>$Lang::tr{'needreboot'}!";
	581	print "</div>";
	582	}
	583
	584	&Header::closebigbox();
	585	&Header::closepage();
	586