Readded the mac filter to the outgoing firewall. Added mac groups.
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / outgoingfw.cgi
1 #!/usr/bin/perl
2 ###############################################################################
3 # #
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2005-2010 IPFire Team #
6 # #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
11 # #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
16 # #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 # #
20 ###############################################################################
21
22 use strict;
23 # enable only the following on debugging purpose
24 #use warnings;
25 #use CGI::Carp 'fatalsToBrowser';
26
27 require '/var/ipfire/general-functions.pl';
28 require "${General::swroot}/lang.pl";
29 require "${General::swroot}/header.pl";
30
31 my %outfwsettings = ();
32 my %checked = ();
33 my %selected= () ;
34 my %netsettings = ();
35 my $errormessage = "";
36 my $configentry = "";
37 my @configs = ();
38 my @configline = ();
39 my $p2pentry = "";
40 my @p2ps = ();
41 my @p2pline = ();
42
43 my $configfile = "/var/ipfire/outgoing/rules";
44 my $configpath = "/var/ipfire/outgoing/groups/";
45 my $p2pfile = "/var/ipfire/outgoing/p2protocols";
46 my $servicefile = "/var/ipfire/outgoing/defaultservices";
47
48 my %color = ();
49 my %mainsettings = ();
50 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
51 &General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
52
53 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
54
55 &Header::showhttpheaders();
56
57 ### Values that have to be initialized
58 $outfwsettings{'ACTION'} = '';
59 $outfwsettings{'VALID'} = 'yes';
60 $outfwsettings{'EDIT'} = 'no';
61 $outfwsettings{'NAME'} = '';
62 $outfwsettings{'SNET'} = '';
63 $outfwsettings{'SIP'} = '';
64 $outfwsettings{'SPORT'} = '';
65 $outfwsettings{'SMAC'} = '';
66 $outfwsettings{'DIP'} = '';
67 $outfwsettings{'DPORT'} = '';
68 $outfwsettings{'PROT'} = '';
69 $outfwsettings{'STATE'} = '';
70 $outfwsettings{'DISPLAY_DIP'} = '';
71 $outfwsettings{'DISPLAY_DPORT'} = '';
72 $outfwsettings{'DISPLAY_SMAC'} = '';
73 $outfwsettings{'DISPLAY_SIP'} = '';
74 $outfwsettings{'POLICY'} = 'MODE0';
75 $outfwsettings{'MODE1LOG'} = 'off';
76
77 $outfwsettings{'TIME_FROM'} = '00:00';
78 $outfwsettings{'TIME_TO'} = '00:00';
79
80 &General::readhash("${General::swroot}/outgoing/settings", \%outfwsettings);
81 &Header::getcgihash(\%outfwsettings);
82
83 ###############
84 # DEBUG DEBUG
85 #&Header::openbox('100%', 'left', 'DEBUG');
86 #my $debugCount = 0;
87 #foreach my $line (sort keys %outfwsettings) {
88 #print "$line = $outfwsettings{$line}<br />\n";
89 # $debugCount++;
90 #}
91 #print "&nbsp;Count: $debugCount\n";
92 #&Header::closebox();
93 # DEBUG DEBUG
94 ###############
95
96 $selected{'TIME_FROM'}{$outfwsettings{'TIME_FROM'}} = "selected='selected'";
97 $selected{'TIME_TO'}{$outfwsettings{'TIME_TO'}} = "selected='selected'";
98
99 $checked{'MODE1LOG'}{'off'} = '';
100 $checked{'MODE1LOG'}{'on'} = '';
101 $checked{'MODE1LOG'}{$outfwsettings{'MODE1LOG'}} = "checked='checked'";
102 $checked{'TIME_MON'}{'off'} = '';
103 $checked{'TIME_MON'}{'on'} = '';
104 $checked{'TIME_MON'}{$outfwsettings{'TIME_MON'}} = "checked='checked'";
105 $checked{'TIME_TUE'}{'off'} = '';
106 $checked{'TIME_TUE'}{'on'} = '';
107 $checked{'TIME_TUE'}{$outfwsettings{'TIME_TUE'}} = "checked='checked'";
108 $checked{'TIME_WED'}{'off'} = '';
109 $checked{'TIME_WED'}{'on'} = '';
110 $checked{'TIME_WED'}{$outfwsettings{'TIME_WED'}} = "checked='checked'";
111 $checked{'TIME_THU'}{'off'} = '';
112 $checked{'TIME_THU'}{'on'} = '';
113 $checked{'TIME_THU'}{$outfwsettings{'TIME_THU'}} = "checked='checked'";
114 $checked{'TIME_FRI'}{'off'} = '';
115 $checked{'TIME_FRI'}{'on'} = '';
116 $checked{'TIME_FRI'}{$outfwsettings{'TIME_FRI'}} = "checked='checked'";
117 $checked{'TIME_SAT'}{'off'} = '';
118 $checked{'TIME_SAT'}{'on'} = '';
119 $checked{'TIME_SAT'}{$outfwsettings{'TIME_SAT'}} = "checked='checked'";
120 $checked{'TIME_SUN'}{'off'} = '';
121 $checked{'TIME_SUN'}{'on'} = '';
122 $checked{'TIME_SUN'}{$outfwsettings{'TIME_SUN'}} = "checked='checked'";
123
124 if ($outfwsettings{'POLICY'} eq 'MODE0'){ $selected{'POLICY'}{'MODE0'} = 'selected'; } else { $selected{'POLICY'}{'MODE0'} = ''; }
125 if ($outfwsettings{'POLICY'} eq 'MODE1'){ $selected{'POLICY'}{'MODE1'} = 'selected'; } else { $selected{'POLICY'}{'MODE1'} = ''; }
126 if ($outfwsettings{'POLICY'} eq 'MODE2'){ $selected{'POLICY'}{'MODE2'} = 'selected'; } else { $selected{'POLICY'}{'MODE2'} = ''; }
127
128 # This is a little hack if poeple donĀ“t mark any date then all will be selected, because they might have forgotten to select
129 # a valid day. A Rule without any matching day will never work, because the timeranges are new feature people might not notice
130 # that they have to select a day for the rule.
131
132 if ( $outfwsettings{'TIME_MON'} eq "" &&
133 $outfwsettings{'TIME_TUE'} eq "" &&
134 $outfwsettings{'TIME_WED'} eq "" &&
135 $outfwsettings{'TIME_THU'} eq "" &&
136 $outfwsettings{'TIME_FRI'} eq "" &&
137 $outfwsettings{'TIME_SAT'} eq "" &&
138 $outfwsettings{'TIME_SUN'} eq "" )
139 {
140 $outfwsettings{'TIME_MON'} = "on";
141 $outfwsettings{'TIME_TUE'} = "on";
142 $outfwsettings{'TIME_WED'} = "on";
143 $outfwsettings{'TIME_THU'} = "on";
144 $outfwsettings{'TIME_FRI'} = "on";
145 $outfwsettings{'TIME_SAT'} = "on";
146 $outfwsettings{'TIME_SUN'} = "on";
147 }
148
149 &Header::openpage($Lang::tr{'outgoing firewall'}, 1, '');
150 &Header::openbigbox('100%', 'left', '', $errormessage);
151
152 ############################################################################################################################
153 ############################################################################################################################
154
155 if ($outfwsettings{'ACTION'} eq $Lang::tr{'reset'})
156 {
157 $outfwsettings{'POLICY'}='MODE0';
158 unlink $configfile;
159 system("/usr/bin/touch $configfile");
160 my $MODE = $outfwsettings{'POLICY'};
161 %outfwsettings = ();
162 $outfwsettings{'POLICY'} = "$MODE";
163 &General::writehash("${General::swroot}/outgoing/settings", \%outfwsettings);
164 }
165 if ($outfwsettings{'ACTION'} eq $Lang::tr{'save'})
166 {
167 my $MODE = $outfwsettings{'POLICY'};
168 my $MODE1LOG = $outfwsettings{'MODE1LOG'};
169 %outfwsettings = ();
170 $outfwsettings{'POLICY'} = "$MODE";
171 $outfwsettings{'MODE1LOG'} = "$MODE1LOG";
172 &General::writehash("${General::swroot}/outgoing/settings", \%outfwsettings);
173 system("/usr/local/bin/outgoingfwctrl");
174 }
175 if ($outfwsettings{'ACTION'} eq 'enable')
176 {
177 open( FILE, "< $p2pfile" ) or die "Unable to read $p2pfile";
178 @p2ps = <FILE>;
179 close FILE;
180 open( FILE, "> $p2pfile" ) or die "Unable to write $p2pfile";
181 foreach $p2pentry (sort @p2ps)
182 {
183 @p2pline = split( /\;/, $p2pentry );
184 if ($p2pline[1] eq $outfwsettings{'P2PROT'}) {
185 print FILE "$p2pline[0];$p2pline[1];on;\n";
186 } else {
187 print FILE "$p2pline[0];$p2pline[1];$p2pline[2];\n";
188 }
189 }
190 close FILE;
191 system("/usr/local/bin/outgoingfwctrl");
192 }
193 if ($outfwsettings{'ACTION'} eq 'disable')
194 {
195 open( FILE, "< $p2pfile" ) or die "Unable to read $p2pfile";
196 @p2ps = <FILE>;
197 close FILE;
198 open( FILE, "> $p2pfile" ) or die "Unable to write $p2pfile";
199 foreach $p2pentry (sort @p2ps)
200 {
201 @p2pline = split( /\;/, $p2pentry );
202 if ($p2pline[1] eq $outfwsettings{'P2PROT'}) {
203 print FILE "$p2pline[0];$p2pline[1];off;\n";
204 } else {
205 print FILE "$p2pline[0];$p2pline[1];$p2pline[2];\n";
206 }
207 }
208 close FILE;
209 system("/usr/local/bin/outgoingfwctrl");
210 }
211 if ($outfwsettings{'ACTION'} eq $Lang::tr{'edit'})
212 {
213 open( FILE, "< $configfile" ) or die "Unable to read $configfile";
214 @configs = <FILE>;
215 close FILE;
216 open( FILE, "> $configfile" ) or die "Unable to write $configfile";
217 foreach $configentry (sort @configs)
218 {
219 @configline = split( /\;/, $configentry );
220
221 $configline[10] = "on" if not exists $configline[11];
222 $configline[11] = "on" if not exists $configline[11];
223 $configline[12] = "on" if not exists $configline[12];
224 $configline[13] = "on" if not exists $configline[13];
225 $configline[14] = "on" if not exists $configline[14];
226 $configline[15] = "on" if not exists $configline[15];
227 $configline[16] = "on" if not exists $configline[16];
228 $configline[17] = "00:00" if not exists $configline[17];
229 $configline[18] = "00:00" if not exists $configline[18];
230
231 unless (($configline[0] eq $outfwsettings{'STATE'}) &&
232 ($configline[1] eq $outfwsettings{'ENABLED'}) &&
233 ($configline[2] eq $outfwsettings{'SNET'}) &&
234 ($configline[3] eq $outfwsettings{'PROT'}) &&
235 ($configline[4] eq $outfwsettings{'NAME'}) &&
236 ($configline[5] eq $outfwsettings{'SIP'}) &&
237 ($configline[6] eq $outfwsettings{'SMAC'}) &&
238 ($configline[7] eq $outfwsettings{'DIP'}) &&
239 ($configline[9] eq $outfwsettings{'LOG'}) &&
240 ($configline[8] eq $outfwsettings{'DPORT'}) &&
241 ($configline[10] eq $outfwsettings{'TIME_MON'}) &&
242 ($configline[11] eq $outfwsettings{'TIME_TUE'}) &&
243 ($configline[12] eq $outfwsettings{'TIME_WED'}) &&
244 ($configline[13] eq $outfwsettings{'TIME_THU'}) &&
245 ($configline[14] eq $outfwsettings{'TIME_FRI'}) &&
246 ($configline[15] eq $outfwsettings{'TIME_SAT'}) &&
247 ($configline[16] eq $outfwsettings{'TIME_SUN'}) &&
248 ($configline[17] eq $outfwsettings{'TIME_FROM'}) &&
249 ($configline[18] eq $outfwsettings{'TIME_TO'}))
250 {
251 print FILE $configentry;
252 }
253 }
254 close FILE;
255 $selected{'SNET'}{"$outfwsettings{'SNET'}"} = 'selected';
256 $selected{'PROT'}{"$outfwsettings{'PROT'}"} = 'selected';
257 $selected{'LOG'}{"$outfwsettings{'LOG'}"} = 'selected';
258 &addrule();
259 &Header::closebigbox();
260 &Header::closepage();
261 exit
262 system("/usr/local/bin/outgoingfwctrl");
263 }
264 if ($outfwsettings{'ACTION'} eq $Lang::tr{'delete'})
265 {
266 open( FILE, "< $configfile" ) or die "Unable to read $configfile";
267 @configs = <FILE>;
268 close FILE;
269 open( FILE, "> $configfile" ) or die "Unable to write $configfile";
270 foreach $configentry (sort @configs)
271 {
272 @configline = split( /\;/, $configentry );
273
274 $configline[10] = "on" if not exists $configline[11];
275 $configline[11] = "on" if not exists $configline[11];
276 $configline[12] = "on" if not exists $configline[12];
277 $configline[13] = "on" if not exists $configline[13];
278 $configline[14] = "on" if not exists $configline[14];
279 $configline[15] = "on" if not exists $configline[15];
280 $configline[16] = "on" if not exists $configline[16];
281 $configline[17] = "00:00" if not exists $configline[17];
282 $configline[18] = "00:00" if not exists $configline[18];
283
284 unless (($configline[0] eq $outfwsettings{'STATE'}) &&
285 ($configline[1] eq $outfwsettings{'ENABLED'}) &&
286 ($configline[2] eq $outfwsettings{'SNET'}) &&
287 ($configline[3] eq $outfwsettings{'PROT'}) &&
288 ($configline[4] eq $outfwsettings{'NAME'}) &&
289 ($configline[5] eq $outfwsettings{'SIP'}) &&
290 ($configline[6] eq $outfwsettings{'SMAC'}) &&
291 ($configline[7] eq $outfwsettings{'DIP'}) &&
292 ($configline[9] eq $outfwsettings{'LOG'}) &&
293 ($configline[8] eq $outfwsettings{'DPORT'}) &&
294 ($configline[10] eq $outfwsettings{'TIME_MON'}) &&
295 ($configline[11] eq $outfwsettings{'TIME_TUE'}) &&
296 ($configline[12] eq $outfwsettings{'TIME_WED'}) &&
297 ($configline[13] eq $outfwsettings{'TIME_THU'}) &&
298 ($configline[14] eq $outfwsettings{'TIME_FRI'}) &&
299 ($configline[15] eq $outfwsettings{'TIME_SAT'}) &&
300 ($configline[16] eq $outfwsettings{'TIME_SUN'}) &&
301 ($configline[17] eq $outfwsettings{'TIME_FROM'}) &&
302 ($configline[18] eq $outfwsettings{'TIME_TO'}))
303 {
304 print FILE $configentry;
305 }
306 }
307 close FILE;
308 system("/usr/local/bin/outgoingfwctrl");
309 }
310 if ($outfwsettings{'ACTION'} eq $Lang::tr{'add'})
311 {
312 if ( $outfwsettings{'VALID'} eq 'yes' ) {
313 open( FILE, ">> $configfile" ) or die "Unable to write $configfile";
314 print FILE <<END
315 $outfwsettings{'STATE'};$outfwsettings{'ENABLED'};$outfwsettings{'SNET'};$outfwsettings{'PROT'};$outfwsettings{'NAME'};$outfwsettings{'SIP'};$outfwsettings{'SMAC'};$outfwsettings{'DIP'};$outfwsettings{'DPORT'};$outfwsettings{'LOG'};$outfwsettings{'TIME_MON'};$outfwsettings{'TIME_TUE'};$outfwsettings{'TIME_WED'};$outfwsettings{'TIME_THU'};$outfwsettings{'TIME_FRI'};$outfwsettings{'TIME_SAT'};$outfwsettings{'TIME_SUN'};$outfwsettings{'TIME_FROM'};$outfwsettings{'TIME_TO'};
316 END
317 ;
318 close FILE;
319 system("/usr/local/bin/outgoingfwctrl");
320 } else {
321 $outfwsettings{'ACTION'} = 'Add rule';
322 }
323 }
324 if ($outfwsettings{'ACTION'} eq $Lang::tr{'Add Rule'})
325 {
326 &addrule();
327 exit
328 }
329
330 &General::readhash("${General::swroot}/outgoing/settings", \%outfwsettings);
331
332 if ($errormessage) {
333 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
334 print "<class name='base'>$errormessage\n";
335 print "&nbsp;</class>\n";
336 &Header::closebox();
337 }
338
339 ############################################################################################################################
340 ############################################################################################################################
341
342 if ($outfwsettings{'POLICY'} ne 'MODE0'){
343 &Header::openbox('100%', 'center', 'Rules');
344 print <<END
345 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
346 <input type='submit' name='ACTION' value='$Lang::tr{'Add Rule'}' />
347 </form>
348 END
349 ;
350 open( FILE, "< $configfile" ) or die "Unable to read $configfile";
351 @configs = <FILE>;
352 close FILE;
353 if (@configs) {
354 print <<END
355 <hr />
356 <table border='0' width='100%' cellspacing='0'>
357 <tr bgcolor='$color{'color22'}'>
358 <td width='14%' align='center'><b>$Lang::tr{'protocol'}</b></td>
359 <td width='14%' align='center'><b>$Lang::tr{'network'}</b></td>
360 <td width='14%' align='center'><b>$Lang::tr{'destination'}</b></td>
361 <td width='14%' align='center'><b>$Lang::tr{'description'}</b></td>
362 <td width='14%' align='center'><b>$Lang::tr{'policy'}</b></td>
363 <td width='16%' align='center'><b>$Lang::tr{'logging'}</b></td>
364 <td width='14%' align='center'><b>$Lang::tr{'action'}</b></td>
365 END
366 ;
367 foreach $configentry (sort @configs)
368 {
369 @configline = split( /\;/, $configentry );
370 $outfwsettings{'STATE'} = $configline[0];
371 $outfwsettings{'ENABLED'} = $configline[1];
372 $outfwsettings{'SNET'} = $configline[2];
373 $outfwsettings{'PROT'} = $configline[3];
374 $outfwsettings{'NAME'} = $configline[4];
375 $outfwsettings{'SIP'} = $configline[5];
376 $outfwsettings{'SMAC'} = $configline[6];
377 $outfwsettings{'DIP'} = $configline[7];
378 $outfwsettings{'DPORT'} = $configline[8];
379 $outfwsettings{'LOG'} = $configline[9];
380
381 $configline[10] = "on" if not exists $configline[11];
382 $configline[11] = "on" if not exists $configline[11];
383 $configline[12] = "on" if not exists $configline[12];
384 $configline[13] = "on" if not exists $configline[13];
385 $configline[14] = "on" if not exists $configline[14];
386 $configline[15] = "on" if not exists $configline[15];
387 $configline[16] = "on" if not exists $configline[16];
388 $configline[17] = "00:00" if not exists $configline[17];
389 $configline[18] = "00:00" if not exists $configline[18];
390
391 $outfwsettings{'TIME_MON'} = $configline[10];
392 $outfwsettings{'TIME_TUE'} = $configline[11];
393 $outfwsettings{'TIME_WED'} = $configline[12];
394 $outfwsettings{'TIME_THU'} = $configline[13];
395 $outfwsettings{'TIME_FRI'} = $configline[14];
396 $outfwsettings{'TIME_SAT'} = $configline[15];
397 $outfwsettings{'TIME_SUN'} = $configline[16];
398 $outfwsettings{'TIME_FROM'} = $configline[17];
399 $outfwsettings{'TIME_TO'} = $configline[18];
400
401 if ($outfwsettings{'DIP'} eq ''){ $outfwsettings{'DISPLAY_DIP'} = 'ALL'; } else { $outfwsettings{'DISPLAY_DIP'} = $outfwsettings{'DIP'}; }
402 if ($outfwsettings{'DPORT'} eq ''){ $outfwsettings{'DISPLAY_DPORT'} = 'ALL'; } else { $outfwsettings{'DISPLAY_DPORT'} = $outfwsettings{'DPORT'}; }
403 if ($outfwsettings{'STATE'} eq 'DENY'){ $outfwsettings{'DISPLAY_STATE'} = "<img src='/images/stock_stop.png' alt='DENY' />"; }
404 if ($outfwsettings{'STATE'} eq 'ALLOW'){ $outfwsettings{'DISPLAY_STATE'} = "<img src='/images/stock_ok.png' alt='ALLOW' />"; }
405 if ((($outfwsettings{'POLICY'} eq 'MODE1') && ($outfwsettings{'STATE'} eq 'ALLOW')) || (($outfwsettings{'POLICY'} eq 'MODE2') && ($outfwsettings{'STATE'} eq 'DENY'))){
406 print <<END
407 <tr bgcolor='$color{'color20'}'>
408 <td align='center'>$outfwsettings{'PROT'}
409 <td align='center'>$outfwsettings{'SNET'}
410 <td align='center'>$outfwsettings{'DISPLAY_DIP'}:$outfwsettings{'DISPLAY_DPORT'}
411 <td align='center'>$outfwsettings{'NAME'}
412 <td align='center'>$outfwsettings{'DISPLAY_STATE'}
413 <td align='center'>$outfwsettings{'LOG'}
414 <td align='center'>
415 <table border='0' cellpadding='0' cellspacing='0'><tr>
416 <td><form method='post' action='$ENV{'SCRIPT_NAME'}'>
417 <input type='hidden' name='PROT' value='$outfwsettings{'PROT'}' />
418 <input type='hidden' name='STATE' value='$outfwsettings{'STATE'}' />
419 <input type='hidden' name='SNET' value='$outfwsettings{'SNET'}' />
420 <input type='hidden' name='DPORT' value='$outfwsettings{'DPORT'}' />
421 <input type='hidden' name='DIP' value='$outfwsettings{'DIP'}' />
422 <input type='hidden' name='SIP' value='$outfwsettings{'SIP'}' />
423 <input type='hidden' name='NAME' value='$outfwsettings{'NAME'}' />
424 <input type='hidden' name='SMAC' value='$outfwsettings{'SMAC'}' />
425 <input type='hidden' name='ENABLED' value='$outfwsettings{'ENABLED'}' />
426 <input type='hidden' name='LOG' value='$outfwsettings{'LOG'}' />
427 <input type='hidden' name='TIME_MON' value='$outfwsettings{'TIME_MON'}' />
428 <input type='hidden' name='TIME_TUE' value='$outfwsettings{'TIME_TUE'}' />
429 <input type='hidden' name='TIME_WED' value='$outfwsettings{'TIME_WED'}' />
430 <input type='hidden' name='TIME_THU' value='$outfwsettings{'TIME_THU'}' />
431 <input type='hidden' name='TIME_FRI' value='$outfwsettings{'TIME_FRI'}' />
432 <input type='hidden' name='TIME_SAT' value='$outfwsettings{'TIME_SAT'}' />
433 <input type='hidden' name='TIME_SUN' value='$outfwsettings{'TIME_SUN'}' />
434 <input type='hidden' name='TIME_FROM' value='$outfwsettings{'TIME_FROM'}' />
435 <input type='hidden' name='TIME_TO' value='$outfwsettings{'TIME_TO'}' />
436 <input type='hidden' name='ACTION' value=$Lang::tr{'edit'} />
437 <input type='image' src='/images/edit.gif' width="20" height="20" alt=$Lang::tr{'edit'} />
438 </form>
439 <td><form method='post' action='$ENV{'SCRIPT_NAME'}'>
440 <input type='hidden' name='PROT' value='$outfwsettings{'PROT'}' />
441 <input type='hidden' name='STATE' value='$outfwsettings{'STATE'}' />
442 <input type='hidden' name='SNET' value='$outfwsettings{'SNET'}' />
443 <input type='hidden' name='DPORT' value='$outfwsettings{'DPORT'}' />
444 <input type='hidden' name='DIP' value='$outfwsettings{'DIP'}' />
445 <input type='hidden' name='SIP' value='$outfwsettings{'SIP'}' />
446 <input type='hidden' name='NAME' value='$outfwsettings{'NAME'}' />
447 <input type='hidden' name='SMAC' value='$outfwsettings{'SMAC'}' />
448 <input type='hidden' name='ENABLED' value='$outfwsettings{'ENABLED'}' />
449 <input type='hidden' name='LOG' value='$outfwsettings{'LOG'}' />
450 <input type='hidden' name='TIME_MON' value='$outfwsettings{'TIME_MON'}' />
451 <input type='hidden' name='TIME_TUE' value='$outfwsettings{'TIME_TUE'}' />
452 <input type='hidden' name='TIME_WED' value='$outfwsettings{'TIME_WED'}' />
453 <input type='hidden' name='TIME_THU' value='$outfwsettings{'TIME_THU'}' />
454 <input type='hidden' name='TIME_FRI' value='$outfwsettings{'TIME_FRI'}' />
455 <input type='hidden' name='TIME_SAT' value='$outfwsettings{'TIME_SAT'}' />
456 <input type='hidden' name='TIME_SUN' value='$outfwsettings{'TIME_SUN'}' />
457 <input type='hidden' name='TIME_FROM' value='$outfwsettings{'TIME_FROM'}' />
458 <input type='hidden' name='TIME_TO' value='$outfwsettings{'TIME_TO'}' />
459 <input type='hidden' name='ACTION' value=$Lang::tr{'delete'} />
460 <input type='image' src='/images/delete.gif' width="20" height="20" alt=$Lang::tr{'delete'} />
461 </form></table>
462 END
463 ;
464 if (($outfwsettings{'SIP'}) || ($outfwsettings{'SMAC'})) {
465
466 unless ($outfwsettings{'SIP'}) {
467 $outfwsettings{'DISPLAY_SIP'} = 'ALL';
468 } else {
469 $outfwsettings{'DISPLAY_SIP'} = $outfwsettings{'SIP'};
470 }
471
472 unless ($outfwsettings{'SMAC'}) {
473 $outfwsettings{'DISPLAY_SMAC'} = 'ALL';
474 print "<tr><td /><td align='left'>$Lang::tr{'source ip or net'}: </td>";
475 print "<td align='left' colspan='2'>$outfwsettings{'DISPLAY_SIP'}</td>";
476 } else {
477 $outfwsettings{'DISPLAY_SMAC'} = $outfwsettings{'SMAC'};
478 print "<tr><td /><td align='left'>$Lang::tr{'source'} $Lang::tr{'mac address'}: </td>";
479 print "<td align='left' colspan='2'>$outfwsettings{'DISPLAY_SMAC'}</td>";
480 }
481 }
482 print <<END
483 <tr><td width='14%' align='right'>$Lang::tr{'time'} - </td>
484 <td width='14%' align='left'>
485 END
486 ;
487 if ($outfwsettings{'TIME_MON'} eq 'on') { print "<font color='$Header::colourgreen'>";}
488 else { print "<font color='$Header::colourred'>";}
489 print "$Lang::tr{'advproxy monday'}</font>,";
490 if ($outfwsettings{'TIME_TUE'} eq 'on') { print "<font color='$Header::colourgreen'>";}
491 else { print "<font color='$Header::colourred'>";}
492 print "$Lang::tr{'advproxy tuesday'}</font>,";
493 if ($outfwsettings{'TIME_WED'} eq 'on') { print "<font color='$Header::colourgreen'>";}
494 else { print "<font color='$Header::colourred'>";}
495 print "$Lang::tr{'advproxy wednesday'}</font>,";
496 if ($outfwsettings{'TIME_THU'} eq 'on') { print "<font color='$Header::colourgreen'>";}
497 else { print "<font color='$Header::colourred'>";}
498 print "$Lang::tr{'advproxy thursday'}</font>,";
499 if ($outfwsettings{'TIME_FRI'} eq 'on') { print "<font color='$Header::colourgreen'>";}
500 else { print "<font color='$Header::colourred'>";}
501 print "$Lang::tr{'advproxy friday'}</font>,";
502 if ($outfwsettings{'TIME_SAT'} eq 'on') { print "<font color='$Header::colourgreen'>";}
503 else { print "<font color='$Header::colourred'>";}
504 print "$Lang::tr{'advproxy saturday'}</font>,";
505 if ($outfwsettings{'TIME_SUN'} eq 'on') { print "<font color='$Header::colourgreen'>";}
506 else { print "<font color='$Header::colourred'>";}
507 print "$Lang::tr{'advproxy sunday'}</font>";
508 print <<END
509 </td>
510 <td width='22%' align='center'>$Lang::tr{'advproxy from'} $outfwsettings{'TIME_FROM'}</td>
511 <td width='22%' align='center'>$Lang::tr{'advproxy to'} $outfwsettings{'TIME_TO'}</td>
512 </form>
513 END
514 ;
515 }
516 }
517 if ($outfwsettings{'POLICY'} eq 'MODE1'){
518 print <<END
519 <tr bgcolor='$color{'color20'}'><form method='post' action='$ENV{'SCRIPT_NAME'}'>
520 <td align='center'>all
521 <td align='center'>all
522 <td align='center'>ALL
523 <td align='center'>drop
524 <td align='center'><img src='/images/stock_stop.png' alt='DENY' />
525 <td align='center'>on <input type='radio' name='MODE1LOG' value='on' $checked{'MODE1LOG'}{'on'} /><input type='radio' name='MODE1LOG' value='off' $checked{'MODE1LOG'}{'off'} /> off
526 <td align='center'><input type='hidden' name='ACTION' value=$Lang::tr{'save'} /><input type='image' src='/images/media-floppy.png' width="18" height="18" alt=$Lang::tr{'save'} /></form></tr>
527 <table border='0' cellpadding='0' cellspacing='0'><tr>
528 <td>
529 <td></table>
530 END
531 ;
532 }
533 print <<END
534 </table>
535 END
536 ;
537
538 }
539 &Header::closebox();
540 }
541
542 if ($outfwsettings{'POLICY'} ne 'MODE0'){
543 open( FILE, "< $p2pfile" ) or die "Unable to read $p2pfile";
544 @p2ps = <FILE>;
545 close FILE;
546 &Header::openbox('100%', 'center', 'P2P-Block');
547 print <<END
548 <table width='40%'>
549 <tr bgcolor='$color{'color22'}'><td width='66%' align=center><b>$Lang::tr{'protocol'}</b>
550 <td width='33%' align=center><b>$Lang::tr{'status'}</b>
551 END
552 ;
553 my $id = 1;
554 foreach $p2pentry (sort @p2ps)
555 {
556 @p2pline = split( /\;/, $p2pentry );
557 print <<END
558 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
559 END
560 ;
561 print "\t\t\t<tr bgcolor='$color{'color20'}'>\n";
562 print <<END
563 <td width='66%' align='center'>$p2pline[0]:
564 <td width='33%' align='center'><input type='hidden' name='P2PROT' value='$p2pline[1]' />
565 END
566 ;
567 if ($p2pline[2] eq 'on') {
568 print <<END
569 <input type='hidden' name='ACTION' value='disable' />
570 <input type='image' name='submit' src='/images/stock_ok.png' alt='$Lang::tr{'outgoingfw p2p allow'}' title='$Lang::tr{'outgoingfw p2p allow'}'/>
571 END
572 ;
573 } else {
574 print <<END
575 <input type='hidden' name='ACTION' value='enable' />
576 <input type='image' name='submit' src='/images/stock_stop.png' alt='$Lang::tr{'outgoingfw p2p deny'}' title='$Lang::tr{'outgoingfw p2p deny'}' />
577 END
578 ;
579 }
580 print <<END
581 </form>
582 END
583 ;
584 }
585 print <<END
586 </table>
587 <br />$Lang::tr{'outgoingfw p2p description 1'} <img src='/images/stock_ok.png' align='absmiddle' alt='$Lang::tr{'outgoingfw p2p deny'}'> $Lang::tr{'outgoingfw p2p description 2'} <img src='/images/stock_stop.png' align='absmiddle' alt='$Lang::tr{'outgoingfw p2p deny'}'> $Lang::tr{'outgoingfw p2p description 3'}
588 END
589 ;
590 &Header::closebox();
591 }
592
593 &Header::openbox('100%', 'center', 'Policy');
594 print <<END
595 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
596 <table width='100%'>
597 <tr><td width='10%' align='left'><b>$Lang::tr{'mode'} 0:</b><td width='90%' align='left' colspan='2'>$Lang::tr{'outgoingfw mode0'}</td></tr>
598 <tr><td width='10%' align='left'><b>$Lang::tr{'mode'} 1:</b><td width='90%' align='left' colspan='2'>$Lang::tr{'outgoingfw mode1'}</td></tr>
599 <tr><td width='10%' align='left'><b>$Lang::tr{'mode'} 2:</b><td width='90%' align='left' colspan='2'>$Lang::tr{'outgoingfw mode2'}</td></tr>
600 <tr><td colspan='3'><hr /></td></tr>
601 <tr><td width='10%' align='left'> <select name='POLICY' style="width: 85px"><option value='MODE0' $selected{'POLICY'}{'MODE0'}>$Lang::tr{'mode'} 0</option><option value='MODE1' $selected{'POLICY'}{'MODE1'}>$Lang::tr{'mode'} 1</option><option value='MODE2' $selected{'POLICY'}{'MODE2'}>$Lang::tr{'mode'} 2</option></select>
602 <td width='45%' align='left'><input type='submit' name='ACTION' value=$Lang::tr{'save'} />
603 <td width='45%' align='left'>
604 END
605 ;
606 if ($outfwsettings{'POLICY'} ne 'MODE0') {
607 print <<END
608 $Lang::tr{'outgoingfw reset'}: <input type='submit' name='ACTION' value=$Lang::tr{'reset'} />
609 END
610 ;
611 }
612 print <<END
613 </table>
614 </form>
615 END
616 ;
617 &Header::closebox();
618
619 ############################################################################################################################
620 ############################################################################################################################
621
622 sub addrule
623 {
624 &Header::openbox('100%', 'center', $Lang::tr{'Add Rule'});
625 if ($outfwsettings{'EDIT'} eq 'no') { $selected{'ENABLED'} = 'checked'; }
626 $selected{'TIME_FROM'}{$outfwsettings{'TIME_FROM'}} = "selected='selected'";
627 $selected{'TIME_TO'}{$outfwsettings{'TIME_TO'}} = "selected='selected'";
628 print <<END
629 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
630 <table width='80%'>
631 <tr>
632 <td width='20%' align='right'>$Lang::tr{'description'}: <img src='/blob.gif' /></td>
633 <td width='30%' align='left'><input type='text' name='NAME' maxlength='30' value='$outfwsettings{'NAME'}' /></td>
634 <td width='20%' align='right' colspan='2'>$Lang::tr{'active'}:</td>
635 <td width='30%' align='left' colspan='2'><input type='checkbox' name='ENABLED' $selected{'ENABLED'} /></td>
636 </tr>
637 <tr>
638 <td width='20%' align='right'>$Lang::tr{'protocol'}</td>
639 <td width='30%' align='left'>
640 <select name='PROT'>
641 <option value='all' $selected{'PROT'}{'all'}>All</option>
642 <option value='tcp' $selected{'PROT'}{'tcp'}>TCP</option>
643 <option value='udp' $selected{'PROT'}{'udp'}>UDP</option>
644 <option value='gre' $selected{'PROT'}{'gre'}>GRE</option>
645 <option value='esp' $selected{'PROT'}{'esp'}>ESP</option>
646 </select>
647 </td>
648 <td width='20%' align='right' colspan='2'>$Lang::tr{'policy'}:</td>
649 <td width='30%' align='left' colspan='2'>
650 END
651 ;
652 if ($outfwsettings{'POLICY'} eq 'MODE1'){
653 print "\t\t\t\tALLOW<input type='hidden' name='STATE' value='ALLOW' />\n";
654 } elsif ($outfwsettings{'POLICY'} eq 'MODE2'){
655 print "\t\t\t\tDENY<input type='hidden' name='STATE' value='DENY' />\n";
656 }
657 print <<END
658 </td>
659 </tr>
660 <tr>
661 <td width='20%' align='right'>$Lang::tr{'source'}:</td>
662 <td width='30%' align='left'>
663 <select name='SNET'>
664 <optgroup label='---'>
665 <option value='all' $selected{'SNET'}{'ALL'}>$Lang::tr{'all'}</option>
666 <optgroup label='$Lang::tr{'mac address'}'>
667 <option value='mac' $selected{'SNET'}{'mac'}>$Lang::tr{'source'} $Lang::tr{'mac address'}</option>
668 </optgroup>
669 <optgroup label='$Lang::tr{'ip address'}'>
670 <option value='ip' $selected{'SNET'}{'ip'}>$Lang::tr{'source ip or net'}</option>
671 <option value='red' $selected{'SNET'}{'red'}>$Lang::tr{'red'} IP</option>
672 </optgroup>
673 <optgroup label='$Lang::tr{'alt vpn'}'>
674 <option value='ovpn' $selected{'SNET'}{'ovpn'}>OpenVPN $Lang::tr{'interface'}</option>
675 </optgroup>
676 <optgroup label='$Lang::tr{'network'}'>
677 <option value='green' $selected{'SNET'}{'green'}>$Lang::tr{'green'}</option>
678 END
679 ;
680 if (&Header::blue_used()){
681 print "\t\t\t\t\t<option value='blue' $selected{'SNET'}{'blue'}>$Lang::tr{'wireless'}</option>\n";
682 }
683 if (&Header::orange_used()){
684 print "\t\t\t\t\t<option value='orange' $selected{'SNET'}{'orange'}>$Lang::tr{'dmz'}</option>\n";
685 }
686 print <<END
687 </optgroup>
688 <optgroup label='IP $Lang::tr{'advproxy NCSA group'}'>
689 END
690 ;
691 my @ipgroups = qx(ls $configpath/ipgroups/);
692 foreach (sort @ipgroups){
693 print "\t\t\t\t\t<option value='$_' $selected{'SNET'}{'$_'}>$_</option>\n";
694 }
695 print <<END
696 </optgroup>
697 <optgroup label='MAC $Lang::tr{'advproxy NCSA group'}'>
698 END
699 ;
700 my @macgroups = qx(ls $configpath/macgroups/);
701 foreach (sort @macgroups){
702 print "\t\t\t\t\t<option value='$_' $selected{'SNET'}{'$_'}>$_</option>\n";
703 }
704 print <<END
705 </optgroup>
706 </select>
707 </td>
708 <td align='right' colspan='4'><font color='red'>$Lang::tr{'outgoingfw warning'}</font></td>
709 </tr>
710 <tr>
711 <td align='right' colspan='4' >$Lang::tr{'source ip or net'}<img src='/blob.gif' /></td>
712 <td align='left' colspan='4' ><input type='text' name='SIP' value='$outfwsettings{'SIP'}' /></td>
713 </tr>
714 <tr>
715 <td align='right' colspan='4' >$Lang::tr{'source'} $Lang::tr{'mac address'}: <img src='/blob.gif' />
716 <td align='left' colspan='4' ><input type='text' name='SMAC' maxlength='23' value='$outfwsettings{'SMAC'}' />
717 </tr>
718 <tr>
719 <td width='20%' align='right'>$Lang::tr{'logging'}:</td>
720 <td width='30%' align='left'>
721 <select name='LOG'>
722 <option value='$Lang::tr{'active'}' $selected{'LOG'}{$Lang::tr{'active'}}>$Lang::tr{'active'}</option>
723 <option value='$Lang::tr{'inactive'}' $selected{'LOG'}{$Lang::tr{'inactive'}}>$Lang::tr{'inactive'}</option>
724 </select>
725 </td>
726 <td width='20%' align='right' colspan='2' />
727 <td width='30%' align='left' colspan='2' />
728 <tr>
729 <td width='20%' align='right'>$Lang::tr{'destination ip or net'}: <img src='/blob.gif' /></td>
730 <td width='30%' align='left'><input type='text' name='DIP' value='$outfwsettings{'DIP'}' /></td>
731 <td width='20%' align='right' colspan='2'>$Lang::tr{'destination port'}(s) <img src='/blob.gif' /></td>
732 <td width='30%' align='left' colspan='2'><input type='text' name='DPORT' value='$outfwsettings{'DPORT'}' /></td>
733 </tr>
734 <tr>
735 <td width='20%' align='right'>$Lang::tr{'time'}:</td>
736 <td width='30%' align='left'>$Lang::tr{'advproxy monday'} $Lang::tr{'advproxy tuesday'} $Lang::tr{'advproxy wednesday'} $Lang::tr{'advproxy thursday'} $Lang::tr{'advproxy friday'} $Lang::tr{'advproxy saturday'} $Lang::tr{'advproxy sunday'}</td>
737 <td width='20%' align='right' colspan='2' />
738 <td width='15%' align='left'>$Lang::tr{'advproxy from'}</td>
739 <td width='15%' align='left'>$Lang::tr{'advproxy to'}</td>
740 </tr>
741 <tr>
742 <td width='20%' align='right'></td>
743 <td width='30%' align='left'>
744 <input type='checkbox' name='TIME_MON' $checked{'TIME_MON'}{'on'} />
745 <input type='checkbox' name='TIME_TUE' $checked{'TIME_TUE'}{'on'} />
746 <input type='checkbox' name='TIME_WED' $checked{'TIME_WED'}{'on'} />
747 <input type='checkbox' name='TIME_THU' $checked{'TIME_THU'}{'on'} />
748 <input type='checkbox' name='TIME_FRI' $checked{'TIME_FRI'}{'on'} />
749 <input type='checkbox' name='TIME_SAT' $checked{'TIME_SAT'}{'on'} />
750 <input type='checkbox' name='TIME_SUN' $checked{'TIME_SUN'}{'on'} />
751 </td>
752 <td width='20%' align='right' colspan='2' />
753 <td width='15%' align='left'>
754 <select name='TIME_FROM'>
755 END
756 ;
757 for (my $i=0;$i<=23;$i++) {
758 $i = sprintf("%02s",$i);
759 for (my $j=0;$j<=45;$j+=15) {
760 $j = sprintf("%02s",$j);
761 my $time = $i.":".$j;
762 print "\t\t\t\t\t<option $selected{'TIME_FROM'}{$time}>$i:$j</option>\n";
763 }
764 }
765 print <<END
766 </select>
767 </td>
768 <td width='15%' align='left'><select name='TIME_TO'>
769 END
770 ;
771 for (my $i=0;$i<=23;$i++) {
772 $i = sprintf("%02s",$i);
773 for (my $j=0;$j<=45;$j+=15) {
774 $j = sprintf("%02s",$j);
775 my $time = $i.":".$j;
776 print "\t\t\t\t\t<option $selected{'TIME_TO'}{$time}>$i:$j</option>\n";
777 }
778 }
779 print <<END
780 </select>
781 </td>
782 </tr>
783 <tr>
784 <td colspan='6' />
785 <tr>
786 <tr>
787 <td width='40%' align='right' colspan='2'><img src='/blob.gif' />$Lang::tr{'this field may be blank'}</td>
788 <td width='60%' align='left' colspan='4'><input type='submit' name='ACTION' value=$Lang::tr{'add'} /></td>
789 </table></form>
790 END
791 ;
792 &Header::closebox();
793
794 if ($outfwsettings{'POLICY'} eq 'MODE1' || $outfwsettings{'POLICY'} eq 'MODE2')
795 {
796 &Header::openbox('100%', 'center', 'Quick Add');
797
798 open( FILE, "< /var/ipfire/outgoing/defaultservices" ) or die "Unable to read default services";
799 my @defservices = <FILE>;
800 close FILE;
801
802 print "<table width='100%'><tr bgcolor='$color{'color20'}'><td><b>$Lang::tr{'service'}</b></td><td><b>$Lang::tr{'description'}</b></td><td><b>$Lang::tr{'port'}</b></td><td><b>$Lang::tr{'protocol'}</b></td><td><b>$Lang::tr{'source net'}</b></td><td><b>$Lang::tr{'logging'}</b></td><td><b>$Lang::tr{'action'}</b></td></tr>";
803 foreach my $serviceline(@defservices)
804 {
805 my @service = split(/,/,$serviceline);
806 print <<END
807 <tr><form method='post' action='$ENV{'SCRIPT_NAME'}'>
808 <td>$service[0]<input type='hidden' name='NAME' value='@service[0]' /></td>
809 <td>$service[3]</td>
810 <td><a href='http://isc.sans.org/port_details.php?port=$service[1]' target='top'>$service[1]</a><input type='hidden' name='DPORT' value='@service[1]' /></td>
811 <td>$service[2]<input type='hidden' name='PROT' value='@service[2]' /></td>
812 <td><select name='SNET'><option value='all' $selected{'SNET'}{'ALL'}>$Lang::tr{'all'}</option><option value='green' $selected{'SNET'}{'green'}>$Lang::tr{'green'}</option>
813 END
814 ;
815 if (&Header::blue_used()){
816 print "<option value='blue' $selected{'SNET'}{'blue'}>$Lang::tr{'wireless'}</option>";
817 }
818 if (&Header::orange_used()){
819 print "<option value='orange' $selected{'SNET'}{'orange'}>$Lang::tr{'dmz'}</option>";
820 }
821 print <<END
822 </select></td>
823 <td><select name='LOG'><option value='$Lang::tr{'active'}'>$Lang::tr{'active'}</option><option value='$Lang::tr{'inactive'}' 'selected'>$Lang::tr{'inactive'}</option></select></td><td>
824 <input type='hidden' name='ACTION' value=$Lang::tr{'add'} />
825 <input type='image' alt='$Lang::tr{'add'}' src='/images/add.gif' />
826 <input type='hidden' name='ENABLED' value='on' />
827 END
828 ;
829 if ($outfwsettings{'POLICY'} eq 'MODE1'){ print "<input type='hidden' name='STATE' value='ALLOW' /></form></td></tr>";}
830 elsif ($outfwsettings{'POLICY'} eq 'MODE2'){print "<input type='hidden' name='STATE' value='DENY' /></form></td></tr>";}
831 }
832 print "</table>";
833 &Header::closebox();
834 }
835 }
836
837 &Header::closebigbox();
838 &Header::closepage();