b746a8e36b2cbc1890bd82ad2de54133e5615f6c
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / outgoingfw.cgi
1 #!/usr/bin/perl
2 ###############################################################################
3 # #
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2005-2010 IPFire Team #
6 # #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
11 # #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
16 # #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 # #
20 ###############################################################################
21
22 use strict;
23 # enable only the following on debugging purpose
24 #use warnings;
25 #use CGI::Carp 'fatalsToBrowser';
26
27 require '/var/ipfire/general-functions.pl';
28 require "${General::swroot}/lang.pl";
29 require "${General::swroot}/header.pl";
30
31 my %outfwsettings = ();
32 my %checked = ();
33 my %selected= () ;
34 my %netsettings = ();
35 my $errormessage = "";
36 my $configentry = "";
37 my @configs = ();
38 my @configline = ();
39 my $p2pentry = "";
40 my @p2ps = ();
41 my @p2pline = ();
42
43 my $configfile = "/var/ipfire/outgoing/rules";
44 my $configpath = "/var/ipfire/outgoing/groups/";
45 my $p2pfile = "/var/ipfire/outgoing/p2protocols";
46 my $servicefile = "/var/ipfire/outgoing/defaultservices";
47
48 my %color = ();
49 my %mainsettings = ();
50 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
51 &General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
52
53 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
54
55 &Header::showhttpheaders();
56
57 ### Values that have to be initialized
58 $outfwsettings{'ACTION'} = '';
59 $outfwsettings{'VALID'} = 'yes';
60 $outfwsettings{'EDIT'} = 'no';
61 $outfwsettings{'NAME'} = '';
62 $outfwsettings{'SNET'} = '';
63 $outfwsettings{'SIP'} = '';
64 $outfwsettings{'SPORT'} = '';
65 $outfwsettings{'SMAC'} = '';
66 $outfwsettings{'DIP'} = '';
67 $outfwsettings{'DPORT'} = '';
68 $outfwsettings{'PROT'} = '';
69 $outfwsettings{'STATE'} = '';
70 $outfwsettings{'DISPLAY_DIP'} = '';
71 $outfwsettings{'DISPLAY_DPORT'} = '';
72 $outfwsettings{'DISPLAY_SMAC'} = '';
73 $outfwsettings{'DISPLAY_SIP'} = '';
74 $outfwsettings{'POLICY'} = 'MODE0';
75 $outfwsettings{'MODE1LOG'} = 'off';
76
77 $outfwsettings{'TIME_FROM'} = '00:00';
78 $outfwsettings{'TIME_TO'} = '00:00';
79
80 &General::readhash("${General::swroot}/outgoing/settings", \%outfwsettings);
81 &Header::getcgihash(\%outfwsettings);
82
83 ###############
84 # DEBUG DEBUG
85 #&Header::openbox('100%', 'left', 'DEBUG');
86 #my $debugCount = 0;
87 #foreach my $line (sort keys %outfwsettings) {
88 #print "$line = $outfwsettings{$line}<br />\n";
89 # $debugCount++;
90 #}
91 #print "&nbsp;Count: $debugCount\n";
92 #&Header::closebox();
93 # DEBUG DEBUG
94 ###############
95
96 $selected{'TIME_FROM'}{$outfwsettings{'TIME_FROM'}} = "selected='selected'";
97 $selected{'TIME_TO'}{$outfwsettings{'TIME_TO'}} = "selected='selected'";
98
99 $checked{'MODE1LOG'}{'off'} = '';
100 $checked{'MODE1LOG'}{'on'} = '';
101 $checked{'MODE1LOG'}{$outfwsettings{'MODE1LOG'}} = "checked='checked'";
102 $checked{'TIME_MON'}{'off'} = '';
103 $checked{'TIME_MON'}{'on'} = '';
104 $checked{'TIME_MON'}{$outfwsettings{'TIME_MON'}} = "checked='checked'";
105 $checked{'TIME_TUE'}{'off'} = '';
106 $checked{'TIME_TUE'}{'on'} = '';
107 $checked{'TIME_TUE'}{$outfwsettings{'TIME_TUE'}} = "checked='checked'";
108 $checked{'TIME_WED'}{'off'} = '';
109 $checked{'TIME_WED'}{'on'} = '';
110 $checked{'TIME_WED'}{$outfwsettings{'TIME_WED'}} = "checked='checked'";
111 $checked{'TIME_THU'}{'off'} = '';
112 $checked{'TIME_THU'}{'on'} = '';
113 $checked{'TIME_THU'}{$outfwsettings{'TIME_THU'}} = "checked='checked'";
114 $checked{'TIME_FRI'}{'off'} = '';
115 $checked{'TIME_FRI'}{'on'} = '';
116 $checked{'TIME_FRI'}{$outfwsettings{'TIME_FRI'}} = "checked='checked'";
117 $checked{'TIME_SAT'}{'off'} = '';
118 $checked{'TIME_SAT'}{'on'} = '';
119 $checked{'TIME_SAT'}{$outfwsettings{'TIME_SAT'}} = "checked='checked'";
120 $checked{'TIME_SUN'}{'off'} = '';
121 $checked{'TIME_SUN'}{'on'} = '';
122 $checked{'TIME_SUN'}{$outfwsettings{'TIME_SUN'}} = "checked='checked'";
123
124 if ($outfwsettings{'POLICY'} eq 'MODE0'){ $selected{'POLICY'}{'MODE0'} = 'selected'; } else { $selected{'POLICY'}{'MODE0'} = ''; }
125 if ($outfwsettings{'POLICY'} eq 'MODE1'){ $selected{'POLICY'}{'MODE1'} = 'selected'; } else { $selected{'POLICY'}{'MODE1'} = ''; }
126 if ($outfwsettings{'POLICY'} eq 'MODE2'){ $selected{'POLICY'}{'MODE2'} = 'selected'; } else { $selected{'POLICY'}{'MODE2'} = ''; }
127
128 # This is a little hack if poeple donĀ“t mark any date then all will be selected, because they might have forgotten to select
129 # a valid day. A Rule without any matching day will never work, because the timeranges are new feature people might not notice
130 # that they have to select a day for the rule.
131
132 if ( $outfwsettings{'TIME_MON'} eq "" &&
133 $outfwsettings{'TIME_TUE'} eq "" &&
134 $outfwsettings{'TIME_WED'} eq "" &&
135 $outfwsettings{'TIME_THU'} eq "" &&
136 $outfwsettings{'TIME_FRI'} eq "" &&
137 $outfwsettings{'TIME_SAT'} eq "" &&
138 $outfwsettings{'TIME_SUN'} eq "" )
139 {
140 $outfwsettings{'TIME_MON'} = "on";
141 $outfwsettings{'TIME_TUE'} = "on";
142 $outfwsettings{'TIME_WED'} = "on";
143 $outfwsettings{'TIME_THU'} = "on";
144 $outfwsettings{'TIME_FRI'} = "on";
145 $outfwsettings{'TIME_SAT'} = "on";
146 $outfwsettings{'TIME_SUN'} = "on";
147 }
148
149 &Header::openpage($Lang::tr{'outgoing firewall'}, 1, '');
150 &Header::openbigbox('100%', 'left', '', $errormessage);
151
152 ############################################################################################################################
153 ############################################################################################################################
154
155 if ($outfwsettings{'ACTION'} eq $Lang::tr{'reset'})
156 {
157 $outfwsettings{'POLICY'}='MODE0';
158 unlink $configfile;
159 system("/usr/bin/touch $configfile");
160 my $MODE = $outfwsettings{'POLICY'};
161 %outfwsettings = ();
162 $outfwsettings{'POLICY'} = "$MODE";
163 &General::writehash("${General::swroot}/outgoing/settings", \%outfwsettings);
164 }
165 if ($outfwsettings{'ACTION'} eq $Lang::tr{'save'})
166 {
167 my $MODE = $outfwsettings{'POLICY'};
168 my $MODE1LOG = $outfwsettings{'MODE1LOG'};
169 %outfwsettings = ();
170 $outfwsettings{'POLICY'} = "$MODE";
171 $outfwsettings{'MODE1LOG'} = "$MODE1LOG";
172 &General::writehash("${General::swroot}/outgoing/settings", \%outfwsettings);
173 system("/usr/local/bin/outgoingfwctrl");
174 }
175 if ($outfwsettings{'ACTION'} eq 'enable')
176 {
177 open( FILE, "< $p2pfile" ) or die "Unable to read $p2pfile";
178 @p2ps = <FILE>;
179 close FILE;
180 open( FILE, "> $p2pfile" ) or die "Unable to write $p2pfile";
181 foreach $p2pentry (sort @p2ps)
182 {
183 @p2pline = split( /\;/, $p2pentry );
184 if ($p2pline[1] eq $outfwsettings{'P2PROT'}) {
185 print FILE "$p2pline[0];$p2pline[1];on;\n";
186 } else {
187 print FILE "$p2pline[0];$p2pline[1];$p2pline[2];\n";
188 }
189 }
190 close FILE;
191 system("/usr/local/bin/outgoingfwctrl");
192 }
193 if ($outfwsettings{'ACTION'} eq 'disable')
194 {
195 open( FILE, "< $p2pfile" ) or die "Unable to read $p2pfile";
196 @p2ps = <FILE>;
197 close FILE;
198 open( FILE, "> $p2pfile" ) or die "Unable to write $p2pfile";
199 foreach $p2pentry (sort @p2ps)
200 {
201 @p2pline = split( /\;/, $p2pentry );
202 if ($p2pline[1] eq $outfwsettings{'P2PROT'}) {
203 print FILE "$p2pline[0];$p2pline[1];off;\n";
204 } else {
205 print FILE "$p2pline[0];$p2pline[1];$p2pline[2];\n";
206 }
207 }
208 close FILE;
209 system("/usr/local/bin/outgoingfwctrl");
210 }
211 if ($outfwsettings{'ACTION'} eq $Lang::tr{'edit'})
212 {
213 open( FILE, "< $configfile" ) or die "Unable to read $configfile";
214 @configs = <FILE>;
215 close FILE;
216 open( FILE, "> $configfile" ) or die "Unable to write $configfile";
217 foreach $configentry (sort @configs)
218 {
219 @configline = split( /\;/, $configentry );
220
221 $configline[10] = "on" if not exists $configline[11];
222 $configline[11] = "on" if not exists $configline[11];
223 $configline[12] = "on" if not exists $configline[12];
224 $configline[13] = "on" if not exists $configline[13];
225 $configline[14] = "on" if not exists $configline[14];
226 $configline[15] = "on" if not exists $configline[15];
227 $configline[16] = "on" if not exists $configline[16];
228 $configline[17] = "00:00" if not exists $configline[17];
229 $configline[18] = "00:00" if not exists $configline[18];
230
231 unless (($configline[0] eq $outfwsettings{'STATE'}) &&
232 ($configline[1] eq $outfwsettings{'ENABLED'}) &&
233 ($configline[2] eq $outfwsettings{'SNET'}) &&
234 ($configline[3] eq $outfwsettings{'PROT'}) &&
235 ($configline[4] eq $outfwsettings{'NAME'}) &&
236 ($configline[5] eq $outfwsettings{'SIP'}) &&
237 ($configline[6] eq $outfwsettings{'SMAC'}) &&
238 ($configline[7] eq $outfwsettings{'DIP'}) &&
239 ($configline[9] eq $outfwsettings{'LOG'}) &&
240 ($configline[8] eq $outfwsettings{'DPORT'}) &&
241 ($configline[10] eq $outfwsettings{'TIME_MON'}) &&
242 ($configline[11] eq $outfwsettings{'TIME_TUE'}) &&
243 ($configline[12] eq $outfwsettings{'TIME_WED'}) &&
244 ($configline[13] eq $outfwsettings{'TIME_THU'}) &&
245 ($configline[14] eq $outfwsettings{'TIME_FRI'}) &&
246 ($configline[15] eq $outfwsettings{'TIME_SAT'}) &&
247 ($configline[16] eq $outfwsettings{'TIME_SUN'}) &&
248 ($configline[17] eq $outfwsettings{'TIME_FROM'}) &&
249 ($configline[18] eq $outfwsettings{'TIME_TO'}))
250 {
251 print FILE $configentry;
252 }
253 }
254 close FILE;
255 $selected{'SNET'}{"$outfwsettings{'SNET'}"} = 'selected';
256 $selected{'PROT'}{"$outfwsettings{'PROT'}"} = 'selected';
257 $selected{'LOG'}{"$outfwsettings{'LOG'}"} = 'selected';
258 &addrule();
259 &Header::closebigbox();
260 &Header::closepage();
261 exit
262 system("/usr/local/bin/outgoingfwctrl");
263 }
264 if ($outfwsettings{'ACTION'} eq $Lang::tr{'delete'})
265 {
266 open( FILE, "< $configfile" ) or die "Unable to read $configfile";
267 @configs = <FILE>;
268 close FILE;
269 open( FILE, "> $configfile" ) or die "Unable to write $configfile";
270 foreach $configentry (sort @configs)
271 {
272 @configline = split( /\;/, $configentry );
273
274 $configline[10] = "on" if not exists $configline[11];
275 $configline[11] = "on" if not exists $configline[11];
276 $configline[12] = "on" if not exists $configline[12];
277 $configline[13] = "on" if not exists $configline[13];
278 $configline[14] = "on" if not exists $configline[14];
279 $configline[15] = "on" if not exists $configline[15];
280 $configline[16] = "on" if not exists $configline[16];
281 $configline[17] = "00:00" if not exists $configline[17];
282 $configline[18] = "00:00" if not exists $configline[18];
283
284 unless (($configline[0] eq $outfwsettings{'STATE'}) &&
285 ($configline[1] eq $outfwsettings{'ENABLED'}) &&
286 ($configline[2] eq $outfwsettings{'SNET'}) &&
287 ($configline[3] eq $outfwsettings{'PROT'}) &&
288 ($configline[4] eq $outfwsettings{'NAME'}) &&
289 ($configline[5] eq $outfwsettings{'SIP'}) &&
290 ($configline[6] eq $outfwsettings{'SMAC'}) &&
291 ($configline[7] eq $outfwsettings{'DIP'}) &&
292 ($configline[9] eq $outfwsettings{'LOG'}) &&
293 ($configline[8] eq $outfwsettings{'DPORT'}) &&
294 ($configline[10] eq $outfwsettings{'TIME_MON'}) &&
295 ($configline[11] eq $outfwsettings{'TIME_TUE'}) &&
296 ($configline[12] eq $outfwsettings{'TIME_WED'}) &&
297 ($configline[13] eq $outfwsettings{'TIME_THU'}) &&
298 ($configline[14] eq $outfwsettings{'TIME_FRI'}) &&
299 ($configline[15] eq $outfwsettings{'TIME_SAT'}) &&
300 ($configline[16] eq $outfwsettings{'TIME_SUN'}) &&
301 ($configline[17] eq $outfwsettings{'TIME_FROM'}) &&
302 ($configline[18] eq $outfwsettings{'TIME_TO'}))
303 {
304 print FILE $configentry;
305 }
306 }
307 close FILE;
308 system("/usr/local/bin/outgoingfwctrl");
309 }
310 if ($outfwsettings{'ACTION'} eq $Lang::tr{'add'})
311 {
312 if ( $outfwsettings{'VALID'} eq 'yes' ) {
313 open( FILE, ">> $configfile" ) or die "Unable to write $configfile";
314 print FILE <<END
315 $outfwsettings{'STATE'};$outfwsettings{'ENABLED'};$outfwsettings{'SNET'};$outfwsettings{'PROT'};$outfwsettings{'NAME'};$outfwsettings{'SIP'};$outfwsettings{'SMAC'};$outfwsettings{'DIP'};$outfwsettings{'DPORT'};$outfwsettings{'LOG'};$outfwsettings{'TIME_MON'};$outfwsettings{'TIME_TUE'};$outfwsettings{'TIME_WED'};$outfwsettings{'TIME_THU'};$outfwsettings{'TIME_FRI'};$outfwsettings{'TIME_SAT'};$outfwsettings{'TIME_SUN'};$outfwsettings{'TIME_FROM'};$outfwsettings{'TIME_TO'};
316 END
317 ;
318 close FILE;
319 system("/usr/local/bin/outgoingfwctrl");
320 } else {
321 $outfwsettings{'ACTION'} = 'Add rule';
322 }
323 }
324 if ($outfwsettings{'ACTION'} eq 'Add rule')
325 {
326 &addrule();
327 exit
328 }
329
330 &General::readhash("${General::swroot}/outgoing/settings", \%outfwsettings);
331
332 if ($errormessage) {
333 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
334 print "<class name='base'>$errormessage\n";
335 print "&nbsp;</class>\n";
336 &Header::closebox();
337 }
338
339 ############################################################################################################################
340 ############################################################################################################################
341
342 if ($outfwsettings{'POLICY'} ne 'MODE0'){
343 &Header::openbox('100%', 'center', 'Rules');
344 print <<END
345 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
346 <input type='submit' name='ACTION' value='Add rule' />
347 </form>
348 END
349 ;
350 open( FILE, "< $configfile" ) or die "Unable to read $configfile";
351 @configs = <FILE>;
352 close FILE;
353 if (@configs) {
354 print <<END
355 <hr />
356 <table border='0' width='100%' cellspacing='0'>
357 <tr bgcolor='$color{'color22'}'>
358 <td width='14%' align='center'><b>$Lang::tr{'protocol'}</b></td>
359 <td width='14%' align='center'><b>$Lang::tr{'network'}</b></td>
360 <td width='14%' align='center'><b>$Lang::tr{'destination'}</b></td>
361 <td width='14%' align='center'><b>$Lang::tr{'description'}</b></td>
362 <td width='14%' align='center'><b>$Lang::tr{'policy'}</b></td>
363 <td width='16%' align='center'><b>$Lang::tr{'logging'}</b></td>
364 <td width='14%' align='center'><b>$Lang::tr{'action'}</b></td>
365 END
366 ;
367 foreach $configentry (sort @configs)
368 {
369 @configline = split( /\;/, $configentry );
370 $outfwsettings{'STATE'} = $configline[0];
371 $outfwsettings{'ENABLED'} = $configline[1];
372 $outfwsettings{'SNET'} = $configline[2];
373 $outfwsettings{'PROT'} = $configline[3];
374 $outfwsettings{'NAME'} = $configline[4];
375 $outfwsettings{'SIP'} = $configline[5];
376 $outfwsettings{'SMAC'} = $configline[6];
377 $outfwsettings{'DIP'} = $configline[7];
378 $outfwsettings{'DPORT'} = $configline[8];
379 $outfwsettings{'LOG'} = $configline[9];
380
381 $configline[10] = "on" if not exists $configline[11];
382 $configline[11] = "on" if not exists $configline[11];
383 $configline[12] = "on" if not exists $configline[12];
384 $configline[13] = "on" if not exists $configline[13];
385 $configline[14] = "on" if not exists $configline[14];
386 $configline[15] = "on" if not exists $configline[15];
387 $configline[16] = "on" if not exists $configline[16];
388 $configline[17] = "00:00" if not exists $configline[17];
389 $configline[18] = "00:00" if not exists $configline[18];
390
391 $outfwsettings{'TIME_MON'} = $configline[10];
392 $outfwsettings{'TIME_TUE'} = $configline[11];
393 $outfwsettings{'TIME_WED'} = $configline[12];
394 $outfwsettings{'TIME_THU'} = $configline[13];
395 $outfwsettings{'TIME_FRI'} = $configline[14];
396 $outfwsettings{'TIME_SAT'} = $configline[15];
397 $outfwsettings{'TIME_SUN'} = $configline[16];
398 $outfwsettings{'TIME_FROM'} = $configline[17];
399 $outfwsettings{'TIME_TO'} = $configline[18];
400
401 if ($outfwsettings{'DIP'} eq ''){ $outfwsettings{'DISPLAY_DIP'} = 'ALL'; } else { $outfwsettings{'DISPLAY_DIP'} = $outfwsettings{'DIP'}; }
402 if ($outfwsettings{'DPORT'} eq ''){ $outfwsettings{'DISPLAY_DPORT'} = 'ALL'; } else { $outfwsettings{'DISPLAY_DPORT'} = $outfwsettings{'DPORT'}; }
403 if ($outfwsettings{'STATE'} eq 'DENY'){ $outfwsettings{'DISPLAY_STATE'} = "<img src='/images/stock_stop.png' alt='DENY' />"; }
404 if ($outfwsettings{'STATE'} eq 'ALLOW'){ $outfwsettings{'DISPLAY_STATE'} = "<img src='/images/stock_ok.png' alt='ALLOW' />"; }
405 if ((($outfwsettings{'POLICY'} eq 'MODE1') && ($outfwsettings{'STATE'} eq 'ALLOW')) || (($outfwsettings{'POLICY'} eq 'MODE2') && ($outfwsettings{'STATE'} eq 'DENY'))){
406 print <<END
407 <tr bgcolor='$color{'color20'}'>
408 <td align='center'>$outfwsettings{'PROT'}
409 <td align='center'>$outfwsettings{'SNET'}
410 <td align='center'>$outfwsettings{'DISPLAY_DIP'}:$outfwsettings{'DISPLAY_DPORT'}
411 <td align='center'>$outfwsettings{'NAME'}
412 <td align='center'>$outfwsettings{'DISPLAY_STATE'}
413 <td align='center'>$outfwsettings{'LOG'}
414 <td align='center'>
415 <table border='0' cellpadding='0' cellspacing='0'><tr>
416 <td><form method='post' action='$ENV{'SCRIPT_NAME'}'>
417 <input type='hidden' name='PROT' value='$outfwsettings{'PROT'}' />
418 <input type='hidden' name='STATE' value='$outfwsettings{'STATE'}' />
419 <input type='hidden' name='SNET' value='$outfwsettings{'SNET'}' />
420 <input type='hidden' name='DPORT' value='$outfwsettings{'DPORT'}' />
421 <input type='hidden' name='DIP' value='$outfwsettings{'DIP'}' />
422 <input type='hidden' name='SIP' value='$outfwsettings{'SIP'}' />
423 <input type='hidden' name='NAME' value='$outfwsettings{'NAME'}' />
424 <input type='hidden' name='SMAC' value='$outfwsettings{'SMAC'}' />
425 <input type='hidden' name='ENABLED' value='$outfwsettings{'ENABLED'}' />
426 <input type='hidden' name='LOG' value='$outfwsettings{'LOG'}' />
427 <input type='hidden' name='TIME_MON' value='$outfwsettings{'TIME_MON'}' />
428 <input type='hidden' name='TIME_TUE' value='$outfwsettings{'TIME_TUE'}' />
429 <input type='hidden' name='TIME_WED' value='$outfwsettings{'TIME_WED'}' />
430 <input type='hidden' name='TIME_THU' value='$outfwsettings{'TIME_THU'}' />
431 <input type='hidden' name='TIME_FRI' value='$outfwsettings{'TIME_FRI'}' />
432 <input type='hidden' name='TIME_SAT' value='$outfwsettings{'TIME_SAT'}' />
433 <input type='hidden' name='TIME_SUN' value='$outfwsettings{'TIME_SUN'}' />
434 <input type='hidden' name='TIME_FROM' value='$outfwsettings{'TIME_FROM'}' />
435 <input type='hidden' name='TIME_TO' value='$outfwsettings{'TIME_TO'}' />
436 <input type='hidden' name='ACTION' value=$Lang::tr{'edit'} />
437 <input type='image' src='/images/edit.gif' width="20" height="20" alt=$Lang::tr{'edit'} />
438 </form>
439 <td><form method='post' action='$ENV{'SCRIPT_NAME'}'>
440 <input type='hidden' name='PROT' value='$outfwsettings{'PROT'}' />
441 <input type='hidden' name='STATE' value='$outfwsettings{'STATE'}' />
442 <input type='hidden' name='SNET' value='$outfwsettings{'SNET'}' />
443 <input type='hidden' name='DPORT' value='$outfwsettings{'DPORT'}' />
444 <input type='hidden' name='DIP' value='$outfwsettings{'DIP'}' />
445 <input type='hidden' name='SIP' value='$outfwsettings{'SIP'}' />
446 <input type='hidden' name='NAME' value='$outfwsettings{'NAME'}' />
447 <input type='hidden' name='SMAC' value='$outfwsettings{'SMAC'}' />
448 <input type='hidden' name='ENABLED' value='$outfwsettings{'ENABLED'}' />
449 <input type='hidden' name='LOG' value='$outfwsettings{'LOG'}' />
450 <input type='hidden' name='TIME_MON' value='$outfwsettings{'TIME_MON'}' />
451 <input type='hidden' name='TIME_TUE' value='$outfwsettings{'TIME_TUE'}' />
452 <input type='hidden' name='TIME_WED' value='$outfwsettings{'TIME_WED'}' />
453 <input type='hidden' name='TIME_THU' value='$outfwsettings{'TIME_THU'}' />
454 <input type='hidden' name='TIME_FRI' value='$outfwsettings{'TIME_FRI'}' />
455 <input type='hidden' name='TIME_SAT' value='$outfwsettings{'TIME_SAT'}' />
456 <input type='hidden' name='TIME_SUN' value='$outfwsettings{'TIME_SUN'}' />
457 <input type='hidden' name='TIME_FROM' value='$outfwsettings{'TIME_FROM'}' />
458 <input type='hidden' name='TIME_TO' value='$outfwsettings{'TIME_TO'}' />
459 <input type='hidden' name='ACTION' value=$Lang::tr{'delete'} />
460 <input type='image' src='/images/delete.gif' width="20" height="20" alt=$Lang::tr{'delete'} />
461 </form></table>
462 END
463 ;
464 if (($outfwsettings{'SIP'}) || ($outfwsettings{'SMAC'})) {
465 unless ($outfwsettings{'SIP'}) { $outfwsettings{'DISPLAY_SIP'} = 'ALL'; } else { $outfwsettings{'DISPLAY_SIP'} = $outfwsettings{'SIP'}; }
466 unless ($outfwsettings{'SMAC'}) { $outfwsettings{'DISPLAY_SMAC'} = 'ALL'; } else { $outfwsettings{'DISPLAY_SMAC'} = $outfwsettings{'SMAC'}; }
467 print <<END
468 <tr><td width='14%' align='right'>$Lang::tr{'source ip or net'}:
469 <td width='14%' align='left'>$outfwsettings{'DISPLAY_SIP'}
470 <td width='44%' colspan='2' align='center'>
471 END
472 ;
473 }
474 print <<END
475 <tr><td width='14%' align='right'>$Lang::tr{'time'} - </td>
476 <td width='14%' align='left'>
477 END
478 ;
479 if ($outfwsettings{'TIME_MON'} eq 'on') { print "<font color='$Header::colourgreen'>";}
480 else { print "<font color='$Header::colourred'>";}
481 print "$Lang::tr{'advproxy monday'}</font>,";
482 if ($outfwsettings{'TIME_TUE'} eq 'on') { print "<font color='$Header::colourgreen'>";}
483 else { print "<font color='$Header::colourred'>";}
484 print "$Lang::tr{'advproxy tuesday'}</font>,";
485 if ($outfwsettings{'TIME_WED'} eq 'on') { print "<font color='$Header::colourgreen'>";}
486 else { print "<font color='$Header::colourred'>";}
487 print "$Lang::tr{'advproxy wednesday'}</font>,";
488 if ($outfwsettings{'TIME_THU'} eq 'on') { print "<font color='$Header::colourgreen'>";}
489 else { print "<font color='$Header::colourred'>";}
490 print "$Lang::tr{'advproxy thursday'}</font>,";
491 if ($outfwsettings{'TIME_FRI'} eq 'on') { print "<font color='$Header::colourgreen'>";}
492 else { print "<font color='$Header::colourred'>";}
493 print "$Lang::tr{'advproxy friday'}</font>,";
494 if ($outfwsettings{'TIME_SAT'} eq 'on') { print "<font color='$Header::colourgreen'>";}
495 else { print "<font color='$Header::colourred'>";}
496 print "$Lang::tr{'advproxy saturday'}</font>,";
497 if ($outfwsettings{'TIME_SUN'} eq 'on') { print "<font color='$Header::colourgreen'>";}
498 else { print "<font color='$Header::colourred'>";}
499 print "$Lang::tr{'advproxy sunday'}</font>";
500 print <<END
501 </td>
502 <td width='22%' align='center'>$Lang::tr{'advproxy from'} $outfwsettings{'TIME_FROM'}</td>
503 <td width='22%' align='center'>$Lang::tr{'advproxy to'} $outfwsettings{'TIME_TO'}</td>
504 </form>
505 END
506 ;
507 }
508 }
509 if ($outfwsettings{'POLICY'} eq 'MODE1'){
510 print <<END
511 <tr bgcolor='$color{'color20'}'><form method='post' action='$ENV{'SCRIPT_NAME'}'>
512 <td align='center'>all
513 <td align='center'>all
514 <td align='center'>ALL
515 <td align='center'>drop
516 <td align='center'><img src='/images/stock_stop.png' alt='DENY' />
517 <td align='center'>on <input type='radio' name='MODE1LOG' value='on' $checked{'MODE1LOG'}{'on'} /><input type='radio' name='MODE1LOG' value='off' $checked{'MODE1LOG'}{'off'} /> off
518 <td align='center'><input type='hidden' name='ACTION' value=$Lang::tr{'save'} /><input type='image' src='/images/media-floppy.png' width="18" height="18" alt=$Lang::tr{'save'} /></form></tr>
519 <table border='0' cellpadding='0' cellspacing='0'><tr>
520 <td>
521 <td></table>
522 END
523 ;
524 }
525 print <<END
526 </table>
527 END
528 ;
529
530 }
531 &Header::closebox();
532 }
533
534 if ($outfwsettings{'POLICY'} ne 'MODE0'){
535 open( FILE, "< $p2pfile" ) or die "Unable to read $p2pfile";
536 @p2ps = <FILE>;
537 close FILE;
538 &Header::openbox('100%', 'center', 'P2P-Block');
539 print <<END
540 <table width='40%'>
541 <tr bgcolor='$color{'color22'}'><td width='66%' align=center><b>$Lang::tr{'protocol'}</b>
542 <td width='33%' align=center><b>$Lang::tr{'status'}</b>
543 END
544 ;
545 my $id = 1;
546 foreach $p2pentry (sort @p2ps)
547 {
548 @p2pline = split( /\;/, $p2pentry );
549 print <<END
550 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
551 END
552 ;
553 print "\t\t\t<tr bgcolor='$color{'color20'}'>\n";
554 print <<END
555 <td width='66%' align='center'>$p2pline[0]:
556 <td width='33%' align='center'><input type='hidden' name='P2PROT' value='$p2pline[1]' />
557 END
558 ;
559 if ($p2pline[2] eq 'on') {
560 print <<END
561 <input type='hidden' name='ACTION' value='disable' />
562 <input type='image' name='submit' src='/images/stock_ok.png' alt='$Lang::tr{'outgoingfw p2p allow'}' title='$Lang::tr{'outgoingfw p2p allow'}'/>
563 END
564 ;
565 } else {
566 print <<END
567 <input type='hidden' name='ACTION' value='enable' />
568 <input type='image' name='submit' src='/images/stock_stop.png' alt='$Lang::tr{'outgoingfw p2p deny'}' title='$Lang::tr{'outgoingfw p2p deny'}' />
569 END
570 ;
571 }
572 print <<END
573 </form>
574 END
575 ;
576 }
577 print <<END
578 </table>
579 <br />$Lang::tr{'outgoingfw p2p description 1'} <img src='/images/stock_ok.png' align='absmiddle' alt='$Lang::tr{'outgoingfw p2p deny'}'> $Lang::tr{'outgoingfw p2p description 2'} <img src='/images/stock_stop.png' align='absmiddle' alt='$Lang::tr{'outgoingfw p2p deny'}'> $Lang::tr{'outgoingfw p2p description 3'}
580 END
581 ;
582 &Header::closebox();
583 }
584
585 &Header::openbox('100%', 'center', 'Policy');
586 print <<END
587 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
588 <table width='100%'>
589 <tr><td width='10%' align='left'><b>$Lang::tr{'mode'} 0:</b><td width='90%' align='left' colspan='2'>$Lang::tr{'outgoingfw mode0'}</td></tr>
590 <tr><td width='10%' align='left'><b>$Lang::tr{'mode'} 1:</b><td width='90%' align='left' colspan='2'>$Lang::tr{'outgoingfw mode1'}</td></tr>
591 <tr><td width='10%' align='left'><b>$Lang::tr{'mode'} 2:</b><td width='90%' align='left' colspan='2'>$Lang::tr{'outgoingfw mode2'}</td></tr>
592 <tr><td colspan='3'><hr /></td></tr>
593 <tr><td width='10%' align='left'> <select name='POLICY' style="width: 85px"><option value='MODE0' $selected{'POLICY'}{'MODE0'}>$Lang::tr{'mode'} 0</option><option value='MODE1' $selected{'POLICY'}{'MODE1'}>$Lang::tr{'mode'} 1</option><option value='MODE2' $selected{'POLICY'}{'MODE2'}>$Lang::tr{'mode'} 2</option></select>
594 <td width='45%' align='left'><input type='submit' name='ACTION' value=$Lang::tr{'save'} />
595 <td width='45%' align='left'>
596 END
597 ;
598 if ($outfwsettings{'POLICY'} ne 'MODE0') {
599 print <<END
600 $Lang::tr{'outgoingfw reset'}: <input type='submit' name='ACTION' value=$Lang::tr{'reset'} />
601 END
602 ;
603 }
604 print <<END
605 </table>
606 </form>
607 END
608 ;
609 &Header::closebox();
610
611 ############################################################################################################################
612 ############################################################################################################################
613
614 sub addrule
615 {
616 &Header::openbox('100%', 'center', $Lang::tr{'Add Rule'});
617 if ($outfwsettings{'EDIT'} eq 'no') { $selected{'ENABLED'} = 'checked'; }
618 $selected{'TIME_FROM'}{$outfwsettings{'TIME_FROM'}} = "selected='selected'";
619 $selected{'TIME_TO'}{$outfwsettings{'TIME_TO'}} = "selected='selected'";
620 print <<END
621 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
622 <table width='80%'>
623 <tr>
624 <td width='20%' align='right'>$Lang::tr{'description'}: <img src='/blob.gif' /></td>
625 <td width='30%' align='left'><input type='text' name='NAME' maxlength='30' value='$outfwsettings{'NAME'}' /></td>
626 <td width='20%' align='right' colspan='2'>$Lang::tr{'active'}:</td>
627 <td width='30%' align='left' colspan='2'><input type='checkbox' name='ENABLED' $selected{'ENABLED'} /></td>
628 </tr>
629 <tr>
630 <td width='20%' align='right'>$Lang::tr{'protocol'}:</td>
631 <td width='30%' align='left'>
632 <select name='PROT'>
633 <option value='all' $selected{'PROT'}{'all'}>All</option>
634 <option value='tcp' $selected{'PROT'}{'tcp'}>TCP</option>
635 <option value='udp' $selected{'PROT'}{'udp'}>UDP</option>
636 <option value='gre' $selected{'PROT'}{'gre'}>GRE</option>
637 <option value='esp' $selected{'PROT'}{'esp'}>ESP</option>
638 </select>
639 </td>
640 <td width='20%' align='right' colspan='2'>$Lang::tr{'policy'}:</td>
641 <td width='30%' align='left' colspan='2'>
642 END
643 ;
644 if ($outfwsettings{'POLICY'} eq 'MODE1'){
645 print "\t\t\t\tALLOW<input type='hidden' name='STATE' value='ALLOW' />\n";
646 } elsif ($outfwsettings{'POLICY'} eq 'MODE2'){
647 print "\t\t\t\tDENY<input type='hidden' name='STATE' value='DENY' />\n";
648 }
649 print <<END
650 </td>
651 </tr>
652 <tr>
653 <td width='20%' align='right'>$Lang::tr{'source'}:</td>
654 <td width='30%' align='left'>
655 <select name='SNET'>
656 <optgroup label='---'>
657 <option value='all' $selected{'SNET'}{'ALL'}>$Lang::tr{'all'}</option>
658 <optgroup label='$Lang::tr{'ip address'}'>
659 <option value='ip' $selected{'SNET'}{'ip'}>$Lang::tr{'source ip or net'}</option>
660 <option value='red' $selected{'SNET'}{'red'}>$Lang::tr{'red'} IP</option>
661 </optgroup>
662 <optgroup label='$Lang::tr{'alt vpn'}'>
663 <option value='ovpn' $selected{'SNET'}{'ovpn'}>OpenVPN $Lang::tr{'interface'}</option>
664 </optgroup>
665 <optgroup label='$Lang::tr{'network'}'>
666 <option value='green' $selected{'SNET'}{'green'}>$Lang::tr{'green'}</option>
667 END
668 ;
669 if (&Header::blue_used()){
670 print "\t\t\t\t\t<option value='blue' $selected{'SNET'}{'blue'}>$Lang::tr{'wireless'}</option>\n";
671 }
672 if (&Header::orange_used()){
673 print "\t\t\t\t\t<option value='orange' $selected{'SNET'}{'orange'}>$Lang::tr{'dmz'}</option>\n";
674 }
675 print <<END
676 </optgroup>
677 <optgroup label='$Lang::tr{'advproxy NCSA group'}'>
678 END
679 ;
680 my @ipgroups = qx(ls $configpath/ipgroups/);
681 foreach (sort @ipgroups){
682 print "\t\t\t\t\t<option value='$_' $selected{'SNET'}{'$_'}>$_</option>\n";
683 }
684 print <<END
685 </optgroup>
686 </select>
687 </td>
688 <td width='20%' align='right' colspan='2'>$Lang::tr{'source ip or net'}<img src='/blob.gif' /></td>
689 <td width='30%' align='left' colspan='2'><input type='text' name='SIP' value='$outfwsettings{'SIP'}' /></td>
690 </tr>
691 <tr>
692 <td width='20%' align='right'>$Lang::tr{'logging'}:</td>
693 <td width='30%' align='left'>
694 <select name='LOG'>
695 <option value='$Lang::tr{'active'}' $selected{'LOG'}{$Lang::tr{'active'}}>$Lang::tr{'active'}</option>
696 <option value='$Lang::tr{'inactive'}' $selected{'LOG'}{$Lang::tr{'inactive'}}>$Lang::tr{'inactive'}</option>
697 </select>
698 </td>
699 <td width='20%' align='right' colspan='2' />
700 <td width='30%' align='left' colspan='2' />
701 <tr>
702 <td width='20%' align='right'>$Lang::tr{'destination ip or net'}: <img src='/blob.gif' /></td>
703 <td width='30%' align='left'><input type='text' name='DIP' value='$outfwsettings{'DIP'}' /></td>
704 <td width='20%' align='right' colspan='2'>$Lang::tr{'destination port'}(s) <img src='/blob.gif' /></td>
705 <td width='30%' align='left' colspan='2'><input type='text' name='DPORT' value='$outfwsettings{'DPORT'}' /></td>
706 </tr>
707 <tr>
708 <td width='20%' align='right'>$Lang::tr{'time'}:</td>
709 <td width='30%' align='left'>$Lang::tr{'advproxy monday'} $Lang::tr{'advproxy tuesday'} $Lang::tr{'advproxy wednesday'} $Lang::tr{'advproxy thursday'} $Lang::tr{'advproxy friday'} $Lang::tr{'advproxy saturday'} $Lang::tr{'advproxy sunday'}</td>
710 <td width='20%' align='right' colspan='2' />
711 <td width='15%' align='left'>$Lang::tr{'advproxy from'}</td>
712 <td width='15%' align='left'>$Lang::tr{'advproxy to'}</td>
713 </tr>
714 <tr>
715 <td width='20%' align='right'></td>
716 <td width='30%' align='left'>
717 <input type='checkbox' name='TIME_MON' $checked{'TIME_MON'}{'on'} />
718 <input type='checkbox' name='TIME_TUE' $checked{'TIME_TUE'}{'on'} />
719 <input type='checkbox' name='TIME_WED' $checked{'TIME_WED'}{'on'} />
720 <input type='checkbox' name='TIME_THU' $checked{'TIME_THU'}{'on'} />
721 <input type='checkbox' name='TIME_FRI' $checked{'TIME_FRI'}{'on'} />
722 <input type='checkbox' name='TIME_SAT' $checked{'TIME_SAT'}{'on'} />
723 <input type='checkbox' name='TIME_SUN' $checked{'TIME_SUN'}{'on'} />
724 </td>
725 <td width='20%' align='right' colspan='2' />
726 <td width='15%' align='left'>
727 <select name='TIME_FROM'>
728 END
729 ;
730 for (my $i=0;$i<=23;$i++) {
731 $i = sprintf("%02s",$i);
732 for (my $j=0;$j<=45;$j+=15) {
733 $j = sprintf("%02s",$j);
734 my $time = $i.":".$j;
735 print "\t\t\t\t\t<option $selected{'TIME_FROM'}{$time}>$i:$j</option>\n";
736 }
737 }
738 print <<END
739 </select>
740 </td>
741 <td width='15%' align='left'><select name='TIME_TO'>
742 END
743 ;
744 for (my $i=0;$i<=23;$i++) {
745 $i = sprintf("%02s",$i);
746 for (my $j=0;$j<=45;$j+=15) {
747 $j = sprintf("%02s",$j);
748 my $time = $i.":".$j;
749 print "\t\t\t\t\t<option $selected{'TIME_TO'}{$time}>$i:$j</option>\n";
750 }
751 }
752 print <<END
753 </select>
754 </td>
755 </tr>
756 <tr>
757 <td colspan='6' />
758 <tr>
759 <tr>
760 <td width='40%' align='right' colspan='2'><img src='/blob.gif' />$Lang::tr{'this field may be blank'}</td>
761 <td width='60%' align='left' colspan='4'><input type='submit' name='ACTION' value=$Lang::tr{'add'} /></td>
762 </table></form>
763 END
764 ;
765 &Header::closebox();
766
767 if ($outfwsettings{'POLICY'} eq 'MODE1' || $outfwsettings{'POLICY'} eq 'MODE2')
768 {
769 &Header::openbox('100%', 'center', 'Quick Add');
770
771 open( FILE, "< /var/ipfire/outgoing/defaultservices" ) or die "Unable to read default services";
772 my @defservices = <FILE>;
773 close FILE;
774
775 print "<table width='100%'><tr bgcolor='$color{'color20'}'><td><b>$Lang::tr{'service'}</b></td><td><b>$Lang::tr{'description'}</b></td><td><b>$Lang::tr{'port'}</b></td><td><b>$Lang::tr{'protocol'}</b></td><td><b>$Lang::tr{'source net'}</b></td><td><b>$Lang::tr{'logging'}</b></td><td><b>$Lang::tr{'action'}</b></td></tr>";
776 foreach my $serviceline(@defservices)
777 {
778 my @service = split(/,/,$serviceline);
779 print <<END
780 <tr><form method='post' action='$ENV{'SCRIPT_NAME'}'>
781 <td>$service[0]<input type='hidden' name='NAME' value='@service[0]' /></td>
782 <td>$service[3]</td>
783 <td><a href='http://isc.sans.org/port_details.php?port=$service[1]' target='top'>$service[1]</a><input type='hidden' name='DPORT' value='@service[1]' /></td>
784 <td>$service[2]<input type='hidden' name='PROT' value='@service[2]' /></td>
785 <td><select name='SNET'><option value='all' $selected{'SNET'}{'ALL'}>$Lang::tr{'all'}</option><option value='green' $selected{'SNET'}{'green'}>$Lang::tr{'green'}</option>
786 END
787 ;
788 if (&Header::blue_used()){
789 print "<option value='blue' $selected{'SNET'}{'blue'}>$Lang::tr{'wireless'}</option>";
790 }
791 if (&Header::orange_used()){
792 print "<option value='orange' $selected{'SNET'}{'orange'}>$Lang::tr{'dmz'}</option>";
793 }
794 print <<END
795 </select></td>
796 <td><select name='LOG'><option value='$Lang::tr{'active'}'>$Lang::tr{'active'}</option><option value='$Lang::tr{'inactive'}' 'selected'>$Lang::tr{'inactive'}</option></select></td><td>
797 <input type='hidden' name='ACTION' value=$Lang::tr{'add'} />
798 <input type='image' alt='$Lang::tr{'add'}' src='/images/add.gif' />
799 <input type='hidden' name='ENABLED' value='on' />
800 END
801 ;
802 if ($outfwsettings{'POLICY'} eq 'MODE1'){ print "<input type='hidden' name='STATE' value='ALLOW' /></form></td></tr>";}
803 elsif ($outfwsettings{'POLICY'} eq 'MODE2'){print "<input type='hidden' name='STATE' value='DENY' /></form></td></tr>";}
804 }
805 print "</table>";
806 &Header::closebox();
807 }
808 }
809
810 &Header::closebigbox();
811 &Header::closepage();