#!/usr/bin/perl
-#
-# IPFire CGIs
-#
-# This code is distributed under the terms of the GPL
-#
+###############################################################################
+# #
+# IPFire.org - A linux based firewall #
+# Copyright (C) 2010 IPFire Team #
+# #
+# This program is free software: you can redistribute it and/or modify #
+# it under the terms of the GNU General Public License as published by #
+# the Free Software Foundation, either version 3 of the License, or #
+# (at your option) any later version. #
+# #
+# This program is distributed in the hope that it will be useful, #
+# but WITHOUT ANY WARRANTY; without even the implied warranty of #
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
+# GNU General Public License for more details. #
+# #
+# You should have received a copy of the GNU General Public License #
+# along with this program. If not, see <http://www.gnu.org/licenses/>. #
+# #
+###############################################################################
require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
+
+my $debug = 0;
my @iplines;
+my $string = "";
my $lines = 0;
my @ipmanlines;
my $manlines = 0;
my @ipnatlines;
my $natlines = 0;
+my %chains;
+my %chainsman;
+my %chainsnat;
+my $chainname;
+my $selectedchain;
+my %netsettings = ();
+my %cgiparams=();
+
+&Header::getcgihash(\%cgiparams);
system('/usr/local/bin/getipstat');
&Header::showhttpheaders();
&Header::openpage($Lang::tr{'ipts'}, 1, '');
&Header::openbigbox('100%', 'LEFT');
+
+# This debug is used to see what inputs are done via the cgi and
+# what parameters are to be executed
+
+if ( $debug ){
+ &Header::openbox('100%', 'center', 'DEBUG');
+ my $debugCount = 0;
+ foreach my $line (sort keys %cgiparams) {
+ print "$line = '$cgiparams{$line}'<br />\n";
+ $debugCount++;
+ }
+ print " Count: $debugCount\n";
+ &Header::closebox();
+}
+
&Header::openbox('100%', 'LEFT', $Lang::tr{'ipts'}.':');
+
+# If the cgi is called the first time the default chain is
+# used, otherwise if user selected a chains in the selectboxes
+# those one are displayed, it is possible to change all 3 at
+# the same time
+
+if ( $cgiparams{'selectedchain'} ne "" ){
+ my @multi = split(/\|/,$cgiparams{'selectedchain'});
+ $selectedchain = $multi[0];
+} else {
+ $selectedchain = "INPUT";
+}
+
print <<END
- <DIV align='left'>
- <PRE>
+<DIV align='left'>
END
;
- open (FILE, '/home/httpd/html/iptables.txt');
- while (<FILE>)
- {
- $iplines[$lines] = $_;
+
+# We´ll open the txt files and extract each line, if the line
+# start with an Chain the the name, start- and endline of the
+# chain is extracted into a hash
+
+ open (FILE, '/srv/web/ipfire/html/iptables.txt');
+ while (<FILE>){
+
+ $iplines[$lines] = $_;
+
+ if ( $_ =~ /^Chain/ ){
+
+ my @chainstring = split(/ /,$_);
+
+ if ( $chainname ne "" ){
+ $chains{$chainname."end"} = $lines-2;
+ }
+
+ $chainname = $chainstring[1];
+ $chains{$chainname."start"} = $lines;
+ }
+
$lines++;
- }
+
+ }
+ $chains{$chainname."end"} = $lines-1;
close (FILE);
- foreach $_ (@iplines) {
- print "$_"; }
-print <<END
- </PRE>
- </DIV>
- <BR>
+# now the chain hash is extracted to get the correct name of the chain
+# all chains are displayed as a select box and can be choosen for display
+# after this all corresponding lines for the chain are extraced and seperated
+# into table rows, sometimes we need to handle leading blank so the offset is
+# needed, some lines need to chomp trailing seperators. The interfaces and
+# network addresses should be colorized by an extra function to make a nice
+# colored gui
-END
-;
+ print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n<select name='selectedchain' style='width: 250px'>\n";
+ foreach (sort(keys(%chains))){
+
+ if ( $_ =~ /end$/ ){
+ next;
+ } else {
+ $_ =~ s/start$//gi;
+ }
+
+ print " <option value='".$_;
+ if ( $_ eq $selectedchain ){
+ print "' selected='selected' >".$_."</option>\n";
+ } else {
+ print "'>".$_."</option>\n";
+ }
+ }
+ print "</select><input type='submit' name='ACTION' value='$Lang::tr{'update'}' /><form><br /><br />\n\n";
+
+ $string = $iplines[$chains{$selectedchain."start"}];
+ $string =~ s/\s$//gi;
+
+ print "<strong>".$string."</strong><br />\n\n";
+ print "<table width='100%' cellspacing='1'>\n<tr>\n";
+ foreach (split(/ +/,$iplines[$chains{$selectedchain."start"}+1])){
+ if ( $_ =~ /[^a-zA-Z]/ ){chomp($_);}
+ print " <th align='left'><strong>".$_."</strong></th>\n";
+ }
+
+ print "</tr>\n";
+
+ print "<tr>\n";
+ print " <td width='0'></td>\n <td width='35'></td>\n <td width='35'></td>\n";
+ print " <td width='130'></td>\n <td width='30'></td>\n";
+ print " <td width='30'></td>\n <td width='40'></td>\n";
+ print " <td width='40'></td>\n <td width='95'></td>\n";
+ print " <td width='95'></td>\n <td width='260'></td>\n";
+ print "</tr>\n";
+
+
+ for(my $i = $chains{$selectedchain."start"}+2; $i <= $chains{$selectedchain."end"}; $i++) {
+ print "<tr>\n";
+
+ my @iptablesline = split(/ +/,$iplines[$i]);
+ my $offset=0;
+
+ if ( $iptablesline[0] eq "" ){
+ $offset=1;
+ }
+
+ print " <td></td>\n <td>".$iptablesline[0+$offset]."</td>\n <td>".$iptablesline[1+$offset]."</td>\n";
+ print " <td>".$iptablesline[2+$offset]."</td>\n <td>".$iptablesline[3+$offset]."</td>\n";
+ print " <td>".$iptablesline[4+$offset]."</td>\n <td>".&Header::colorize($iptablesline[5+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[6+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[7+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[8+$offset])."</td>\n <td>";
+
+ for (my $i=9+$offset; $i <= $#iptablesline; $i++){
+ $string = $iptablesline[$i];
+ $string =~ s/\s$//gi;
+ print " ".$string;
+ }
+ print "</td>\n</tr>\n";
+ }
+print "</table></DIV><br />";
&Header::closebox();
## MANGLE
&Header::openbox('100%', 'LEFT', $Lang::tr{'iptmangles'}.':');
+
+# If the cgi is called the first time the default chain is
+# used, otherwise if user selected a chains in the selectboxes
+# those one are displayed, it is possible to change all 3 at
+# the same time
+
+if ( $cgiparams{'selectedchain'} ne "" ){
+ my @multi = split(/\|/,$cgiparams{'selectedchain'});
+ $selectedchain = $multi[1];
+} else {
+ $selectedchain = "PREROUTING";
+}
+
print <<END
- <DIV align='left'>
- <PRE>
+<DIV align='left'>
END
;
- open (FILEMAN, '/home/httpd/html/iptablesmangle.txt');
- while (<FILEMAN>)
- {
- $ipmanlines[$manlines] = $_;
+
+# We´ll open the txt files and extract each line, if the line
+# start with an Chain the the name, start- and endline of the
+# chain is extracted into a hash
+
+ open (FILE, '/srv/web/ipfire/html/iptablesmangle.txt');
+ while (<FILE>){
+
+ $ipmlines[$manlines] = $_;
+
+ if ( $_ =~ /^Chain/ ){
+
+ my @chainstring = split(/ /,$_);
+
+ if ( $chainname ne "" ){
+ $chainsman{$chainname."end"} = $manlines-2;
+ }
+
+ $chainname = $chainstring[1];
+ $chainsman{$chainname."start"} = $manlines;
+ }
+
$manlines++;
- }
- close (FILEMAN);
- foreach $_ (@ipmanlines) {
- print "$_"; }
+
+ }
+ $chainsman{$chainname."end"} = $manlines-1;
+ close (FILE);
-print <<END
- </PRE>
- </DIV>
- <BR>
+# now the chain hash is extracted to get the correct name of the chain
+# all chains are displayed as a select box and can be choosen for display
+# after this all corresponding lines for the chain are extraced and seperated
+# into table rows, sometimes we need to handle leading blank so the offset is
+# needed, some lines need to chomp trailing seperators. The interfaces and
+# network addresses should be colorized by an extra function to make a nice
+# colored gui
-END
-;
+ print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n<select name='selectedchain' style='width: 250px'>\n";
+ foreach (sort(keys(%chainsman))){
+
+ if ( $_ =~ /end$/ ){
+ next;
+ } else {
+ $_ =~ s/start$//gi;
+ }
+
+ print " <option value='".$_;
+ if ( $_ eq $selectedchain ){
+ print "' selected='selected' >".$_."</option>\n";
+ } else {
+ print "'>".$_."</option>\n";
+ }
+ }
+ print "</select><input type='submit' name='ACTION' value='$Lang::tr{'update'}' /><form><br /><br />\n\n";
+
+ $string = $ipmanlines[$chainsman{$selectedchain."start"}];
+ $string =~ s/\s$//gi;
+
+ print "<strong>".$string."</strong><br />\n\n";
+ print "<table width='100%' cellspacing='1'>\n<tr>\n";
+ foreach (split(/ +/,$ipmlines[$chainsman{$selectedchain."start"}+1])){
+ if ( $_ =~ /[^a-zA-Z]/ ){chomp($_);}
+ print " <th align='left'><strong>".$_."</strong></th>\n";
+ }
+
+ print "</tr>\n";
+
+ print "<tr>\n";
+ print " <td width='0'></td>\n <td width='35'></td>\n <td width='35'></td>\n";
+ print " <td width='130'></td>\n <td width='30'></td>\n";
+ print " <td width='30'></td>\n <td width='40'></td>\n";
+ print " <td width='40'></td>\n <td width='95'></td>\n";
+ print " <td width='95'></td>\n <td width='260'></td>\n";
+ print "</tr>\n";
+
+ for(my $i = $chainsman{$selectedchain."start"}+2; $i <= $chainsman{$selectedchain."end"}; $i++) {
+ print "<tr>\n";
+ my @iptablesline = split(/ +/,$ipmlines[$i]);
+ my $offset=0;
+
+ if ( $iptablesline[0] eq "" ){
+ $offset=1;
+ }
+
+ print " <td></td>\n <td>".$iptablesline[0+$offset]."</td>\n <td>".$iptablesline[1+$offset]."</td>\n";
+ print " <td>".$iptablesline[2+$offset]."</td>\n <td>".$iptablesline[3+$offset]."</td>\n";
+ print " <td>".$iptablesline[4+$offset]."</td>\n <td>".&Header::colorize($iptablesline[5+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[6+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[7+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[8+$offset])."</td>\n <td>";
+
+ for (my $i=9+$offset; $i <= $#iptablesline; $i++){
+ $string = $iptablesline[$i];
+ $string =~ s/\s$//gi;
+
+# mangles with marks need to be converted from hex to number to show the correct qos class
+
+ if ( $string =~ /^0x/){
+ $string = hex($string);
+ }
+
+ print " ".$string;
+ }
+ print "</td>\n</tr>\n";
+ }
+print "</table></DIV><br />";
&Header::closebox();
## NAT
&Header::openbox('100%', 'LEFT', $Lang::tr{'iptnats'}.':');
+
+# If the cgi is called the first time the default chain is
+# used, otherwise if user selected a chains in the selectboxes
+# those one are displayed, it is possible to change all 3 at
+# the same time
+
+if ( $cgiparams{'selectedchain'} ne "" ){
+ my @multi = split(/\|/,$cgiparams{'selectedchain'});
+ $selectedchain = $multi[2];
+} else {
+ $selectedchain = "PREROUTING";
+}
+
print <<END
- <DIV align='left'>
- <PRE>
+<DIV align='left'>
END
;
- open (FILENAT, '/home/httpd/html/iptablesnat.txt');
- while (<FILENAT>)
- {
- $ipnatlines[$natlines] = $_;
+
+# We´ll open the txt files and extract each line, if the line
+# start with an Chain the the name, start- and endline of the
+# chain is extracted into a hash
+
+ open (FILE, '/srv/web/ipfire/html/iptablesnat.txt');
+ while (<FILE>){
+
+ $ipnatlines[$natlines] = $_;
+
+ if ( $_ =~ /^Chain/ ){
+
+ my @chainstring = split(/ /,$_);
+
+ if ( $chainname ne "" ){
+ $chainsnat{$chainname."end"} = $natlines-2;
+ }
+
+ $chainname = $chainstring[1];
+ $chainsnat{$chainname."start"} = $natlines;
+ }
+
$natlines++;
- }
- close (FILENAT);
- foreach $_ (@ipnatlines) {
- print "$_"; }
+
+ }
+ $chainsnat{$chainname."end"} = $natlines-1;
+ close (FILE);
-print <<END
- </PRE>
- </DIV>
- <BR>
+# now the chain hash is extracted to get the correct name of the chain
+# all chains are displayed as a select box and can be choosen for display
+# after this all corresponding lines for the chain are extraced and seperated
+# into table rows, sometimes we need to handle leading blank so the offset is
+# needed, some lines need to chomp trailing seperators. The interfaces and
+# network addresses should be colorized by an extra function to make a nice
+# colored gui
-END
-;
+ print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n<select name='selectedchain' style='width: 250px'>\n";
+ foreach (sort(keys(%chainsnat))){
+
+ if ( $_ =~ /end$/ ){
+ next;
+ } else {
+ $_ =~ s/start$//gi;
+ }
+
+ print " <option value='".$_;
+ if ( $_ eq $selectedchain ){
+ print "' selected='selected' >".$_."</option>\n";
+ } else {
+ print "'>".$_."</option>\n";
+ }
+ }
+ print "</select><input type='submit' name='ACTION' value='$Lang::tr{'update'}' /><form><br /><br />\n\n";
+
+ $string = $ipnatlines[$chainsnat{$selectedchain."start"}];
+ $string =~ s/\s$//gi;
+
+ print "<strong>".$string."</strong><br />\n\n";
+ print "<table width='100%' cellspacing='1'>\n<tr>\n";
+ foreach (split(/ +/,$ipnatlines[$chainsnat{$selectedchain."start"}+1])){
+ if ( $_ =~ /[^a-zA-Z]/ ){chomp($_);}
+ print "<th align='left'><strong>".$_."</strong></th>\n";
+ }
+
+ print "</tr>\n";
+
+ print "<tr>\n";
+ print " <td width='0'></td>\n <td width='35'></td>\n <td width='35'></td>\n";
+ print " <td width='130'></td>\n <td width='30'></td>\n";
+ print " <td width='30'></td>\n <td width='40'></td>\n";
+ print " <td width='40'></td>\n <td width='95'></td>\n";
+ print " <td width='95'></td>\n <td width='260'></td>\n";
+ print "</tr>\n";
+
+ for(my $i = $chainsnat{$selectedchain."start"}+2; $i <= $chainsnat{$selectedchain."end"}; $i++) {
+ print "<tr>\n";
+ my @iptablesline = split(/ +/,$ipnatlines[$i]);
+ my $offset=0;
+
+ if ( $iptablesline[0] eq "" ){
+ $offset=1;
+ }
+
+ print " <td></td>\n<td>".$iptablesline[0+$offset]."</td>\n <td>".$iptablesline[1+$offset]."</td>\n";
+ print " <td>".$iptablesline[2+$offset]."</td>\n <td>".$iptablesline[3+$offset]."</td>\n";
+ print " <td>".$iptablesline[4+$offset]."</td>\n <td>".&Header::colorize($iptablesline[5+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[6+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[7+$offset])."</td>\n";
+ print " <td>".&Header::colorize($iptablesline[8+$offset])."</td>\n <td>";
+
+ for (my $i=9+$offset; $i <= $#iptablesline; $i++){
+ $string = $iptablesline[$i];
+ $string =~ s/\s$//gi;
+ print " ".$string;
+ }
+ print "</td>\n</tr>\n";
+ }
+print "</table></DIV><br />";
&Header::closebox();
&Header::closebigbox();
&Header::closepage();
-unlink /home/httpd/html/iptables.txt;
-unlink /home/httpd/html/iptablesmangle.txt;
-unlink /home/httpd/html/iptablesnat.txt;
+system(rm -f "/srv/web/ipfire/html/iptables.txt");
+system(rm -f "/srv/web/ipfire/html/iptablesmangle.txt");
+system(rm -f "/srv/web/ipfire/html/iptablesnat.txt");
\ No newline at end of file
projects / people / pmueller / ipfire-2.x.git / blobdiff