html/cgi-bin/forwardfw.cgi

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2012                                                                                                  #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21 #                                                                                                                                                         #
  22 # Hi folks! I hope this code is useful for all. I needed something to handle  #
  23 # my VPN Connections in a comfortable way. As a prerequisite i needed             #
  24 # something that makes sure the vpn roadwarrior are able to have a fixed          #
  25 # ip-address. So i developed the ccd extension for the vpn server.                        #
  26 #                                                                                                                                                         #
  27 # Now that the ccd extension is ready i am able to develop the main request.  #
  28 # Any feedback is appreciated.                                                                                            #
  29 #                                                                                                                                                         #
  30 #Copymaster                                                                                                                                       #
  31 ###############################################################################
  32
  33 use strict;
  34 no warnings 'uninitialized';
  35 # enable only the following on debugging purpose
  36 #use warnings;
  37 #use CGI::Carp 'fatalsToBrowser';
  38
  39 require '/var/ipfire/general-functions.pl';
  40 require "${General::swroot}/lang.pl";
  41 require "${General::swroot}/header.pl";
  42 require "${General::swroot}/forward/bin/firewall-lib.pl";
  43
  44 unless (-d "${General::swroot}/forward")                        { system("mkdir ${General::swroot}/forward"); }
  45 unless (-e "${General::swroot}/forward/settings")   { system("touch ${General::swroot}/forward/settings"); }
  46 unless (-e "${General::swroot}/forward/config")         { system("touch ${General::swroot}/forward/config"); }
  47 unless (-e "${General::swroot}/forward/input")          { system("touch ${General::swroot}/forward/input"); }
  48 unless (-e "${General::swroot}/forward/outgoing")       { system("touch ${General::swroot}/forward/outgoing"); }
  49 unless (-e "${General::swroot}/forward/dmz")    { system("touch ${General::swroot}/forward/dmz"); }
  50 unless (-e "${General::swroot}/forward/nat")    { system("touch ${General::swroot}/forward/nat"); }
  51
  52 my %fwdfwsettings=();
  53 my %selected=() ;
  54 my %defaultNetworks=();
  55 my %netsettings=();
  56 my %customhost=();
  57 my %customgrp=();
  58 my %customnetworks=();
  59 my %customservice=();
  60 my %customservicegrp=();
  61 my %ccdnet=();
  62 my %customnetwork=();
  63 my %ccdhost=();
  64 my %configfwdfw=();
  65 my %configinputfw=();
  66 my %configoutgoingfw=();
  67 my %configdmzfw=();
  68 my %confignatfw=();
  69 my %ipsecconf=();
  70 my %color=();
  71 my %mainsettings=();
  72 my %checked=();
  73 my %icmptypes=();
  74 my %ovpnsettings=();
  75 my %ipsecsettings=();
  76 my %aliases=();
  77 my %optionsfw=();
  78 my %ifaces=();
  79
  80 my $VERSION='0.9.8.7';
  81 my $color;
  82 my $confignet           = "${General::swroot}/fwhosts/customnetworks";
  83 my $confighost          = "${General::swroot}/fwhosts/customhosts";
  84 my $configgrp           = "${General::swroot}/fwhosts/customgroups";
  85 my $configsrv           = "${General::swroot}/fwhosts/customservices";
  86 my $configsrvgrp        = "${General::swroot}/fwhosts/customservicegrp";
  87 my $configccdnet        = "${General::swroot}/ovpn/ccd.conf";
  88 my $configccdhost       = "${General::swroot}/ovpn/ovpnconfig";
  89 my $configipsec         = "${General::swroot}/vpn/config";
  90 my $configipsecrw       = "${General::swroot}/vpn/settings";
  91 my $configfwdfw         = "${General::swroot}/forward/config";
  92 my $configinput         = "${General::swroot}/forward/input";
  93 my $configoutgoing      = "${General::swroot}/forward/outgoing";
  94 my $configdmz           = "${General::swroot}/forward/dmz";
  95 my $confignat           = "${General::swroot}/forward/nat";
  96 my $configovpn          = "${General::swroot}/ovpn/settings";
  97 my $fwoptions           = "${General::swroot}/optionsfw/settings";
  98 my $ifacesettings       = "${General::swroot}/ethernet/settings";
  99 my $errormessage='';
 100 my $hint='';
 101 my $ipgrp="${General::swroot}/outgoing/groups";
 102 my $tdcolor='';
 103 my $checkorange='';
 104 my @protocols;
 105 &General::readhash("${General::swroot}/forward/settings", \%fwdfwsettings);
 106 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
 107 &General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
 108 &General::readhash($fwoptions, \%optionsfw);
 109 &General::readhash($ifacesettings, \%ifaces);
 110
 111 &Header::showhttpheaders();
 112 &Header::getcgihash(\%fwdfwsettings);
 113 &Header::openpage($Lang::tr{'fwdfw menu'}, 1, '');
 114 &Header::openbigbox('100%', 'center',$errormessage);
 115 ####  ACTION  #####
 116
 117 if ($fwdfwsettings{'ACTION'} eq $Lang::tr{'save'})
 118 {
 119         my $MODE = $fwdfwsettings{'POLICY'};
 120         my $MODE1 = $fwdfwsettings{'POLICY1'};
 121         %fwdfwsettings = ();
 122         $fwdfwsettings{'POLICY'} = "$MODE";
 123         $fwdfwsettings{'POLICY1'} = "$MODE1";
 124         &General::writehash("${General::swroot}/forward/settings", \%fwdfwsettings);
 125         &reread_rules;
 126 }
 127 if ($fwdfwsettings{'ACTION'} eq 'saverule')
 128 {
 129         &General::readhasharray("$configfwdfw", \%configfwdfw);
 130         &General::readhasharray("$configinput", \%configinputfw);
 131         &General::readhasharray("$configoutgoing", \%configoutgoingfw);
 132         &General::readhasharray("$confignat", \%confignatfw);
 133         $errormessage=&checksource;
 134         if(!$errormessage){&checktarget;}
 135         if(!$errormessage){&checkrule;}
 136         #check if manual ip (source) is orange network
 137         if ($fwdfwsettings{'grp1'} eq 'src_addr'){
 138                 my ($sip,$scidr) = split("/",$fwdfwsettings{$fwdfwsettings{'grp1'}});
 139                 if ( &General::IpInSubnet($sip,$netsettings{'ORANGE_ADDRESS'},$netsettings{'ORANGE_NETMASK'})){
 140                         $checkorange='on';
 141                 }
 142         }
 143         #check useless rules
 144         if(     ($fwdfwsettings{$fwdfwsettings{'grp1'}} eq 'ORANGE' || $checkorange eq 'on') && $fwdfwsettings{'grp2'} eq 'ipfire'){
 145                 $errormessage.=$Lang::tr{'fwdfw useless rule'}."<br>";
 146         }
 147         #check if we try to break rules
 148         if(     $fwdfwsettings{$fwdfwsettings{'grp1'}} eq 'IPFire' && $fwdfwsettings{'grp2'} eq 'ipfire'){
 149                 $errormessage.=$Lang::tr{'fwdfw err same'};
 150         }
 151         #NAT-Part
 152         if ($fwdfwsettings{'USE_NAT'} eq 'ON'){
 153                 $fwdfwsettings{'config'}=$confignat;
 154                 if ($fwdfwsettings{'nat'} eq 'dnat'){
 155                         $fwdfwsettings{'chain'} = 'NAT_DESTINATION';
 156                 }else{
 157                         $fwdfwsettings{'chain'} = 'NAT_SOURCE';
 158                 }
 159                 my $maxkey=&General::findhasharraykey(\%confignatfw);
 160                 #check if we have an identical rule already
 161                 if($fwdfwsettings{'oldrulenumber'} eq $fwdfwsettings{'rulepos'}){
 162                         foreach my $key (sort keys %confignatfw){
 163                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'},$fwdfwsettings{'USE_NAT'},$fwdfwsettings{$fwdfwsettings{'nat'}},$fwdfwsettings{'snatport'},$fwdfwsettings{'dnatport'},$fwdfwsettings{'nat'}"
 164                                         eq "$confignatfw{$key}[0],$confignatfw{$key}[2],$confignatfw{$key}[3],$confignatfw{$key}[4],$confignatfw{$key}[5],$confignatfw{$key}[6],$confignatfw{$key}[7],$confignatfw{$key}[8],$confignatfw{$key}[9],$confignatfw{$key}[10],$confignatfw{$key}[11],$confignatfw{$key}[12],$confignatfw{$key}[13],$confignatfw{$key}[14],$confignatfw{$key}[15],$confignatfw{$key}[17],$confignatfw{$key}[19],$confignatfw{$key}[20],$confignatfw{$key}[21],$confignatfw{$key}[22],$confignatfw{$key}[23],$confignatfw{$key}[24],$confignatfw{$key}[25],$confignatfw{$key}[26],$confignatfw{$key}[27],$confignatfw{$key}[28],$confignatfw{$key}[29],$confignatfw{$key}[30],$confignatfw{$key}[31],$confignatfw{$key}[32]"){
 165                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 166                                                 if ($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' ){
 167                                                         $errormessage='';
 168                                                 }elsif($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' && $fwdfwsettings{'ruleremark'} ne '' && !&validremark($fwdfwsettings{'ruleremark'})){
 169                                                         $errormessage=$Lang::tr{'fwdfw err remark'}."<br>";
 170                                                 }
 171                                                 if ($fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'}){
 172                                                         $fwdfwsettings{'nosave'} = 'on';
 173                                                 }
 174                                 }
 175                         }
 176                 }
 177                 #check Rulepos on new Rule
 178                 if($fwdfwsettings{'rulepos'} > 0 && !$fwdfwsettings{'oldrulenumber'}){
 179                         $fwdfwsettings{'oldrulenumber'}=$maxkey;
 180                         foreach my $key (sort keys %confignatfw){
 181                                 print"$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'},$fwdfwsettings{'USE_NAT'},$fwdfwsettings{$fwdfwsettings{'nat'}},$fwdfwsettings{'snatport'},$fwdfwsettings{'dnatport'},$fwdfwsettings{'nat'}<br>";
 182                                 print"$confignatfw{$key}[0],$confignatfw{$key}[2],$confignatfw{$key}[3],$confignatfw{$key}[4],$confignatfw{$key}[5],$confignatfw{$key}[6],$confignatfw{$key}[7],$confignatfw{$key}[8],$confignatfw{$key}[9],$confignatfw{$key}[10],$confignatfw{$key}[11],$confignatfw{$key}[12],$confignatfw{$key}[13],$confignatfw{$key}[14],$confignatfw{$key}[15],$confignatfw{$key}[17],$confignatfw{$key}[19],$confignatfw{$key}[20],$confignatfw{$key}[21],$confignatfw{$key}[22],$confignatfw{$key}[23],$confignatfw{$key}[24],$confignatfw{$key}[25],$confignatfw{$key}[26],$confignatfw{$key}[27],$confignatfw{$key}[28],$confignatfw{$key}[29],$confignatfw{$key}[30],$confignatfw{$key}[31],$confignatfw{$key}[32]<br>";
 183                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'},$fwdfwsettings{'USE_NAT'},$fwdfwsettings{$fwdfwsettings{'nat'}},$fwdfwsettings{'snatport'},$fwdfwsettings{'dnatport'},$fwdfwsettings{'nat'}"
 184                                         eq "$confignatfw{$key}[0],$confignatfw{$key}[2],$confignatfw{$key}[3],$confignatfw{$key}[4],$confignatfw{$key}[5],$confignatfw{$key}[6],$confignatfw{$key}[7],$confignatfw{$key}[8],$confignatfw{$key}[9],$confignatfw{$key}[10],$confignatfw{$key}[11],$confignatfw{$key}[12],$confignatfw{$key}[13],$confignatfw{$key}[14],$confignatfw{$key}[15],$confignatfw{$key}[17],$confignatfw{$key}[19],$confignatfw{$key}[20],$confignatfw{$key}[21],$confignatfw{$key}[22],$confignatfw{$key}[23],$confignatfw{$key}[24],$confignatfw{$key}[25],$confignatfw{$key}[26],$confignatfw{$key}[27],$confignatfw{$key}[28],$confignatfw{$key}[29],$confignatfw{$key}[30],$confignatfw{$key}[31],$confignatfw{$key}[32]"){
 185                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 186                                 }
 187                         }
 188                 }
 189                 #check if we just close a rule
 190                 if( $fwdfwsettings{'oldgrp1a'} eq  $fwdfwsettings{'grp1'} && $fwdfwsettings{'oldgrp1b'} eq $fwdfwsettings{$fwdfwsettings{'grp1'}} && $fwdfwsettings{'oldgrp2a'} eq  $fwdfwsettings{'grp2'} && $fwdfwsettings{'oldgrp2b'} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} &&  $fwdfwsettings{'oldgrp3a'} eq $fwdfwsettings{'grp3'} && $fwdfwsettings{'oldgrp3b'} eq  $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'oldruletype'} eq $fwdfwsettings{'chain'}) {
 191                         if($fwdfwsettings{'nosave'} eq 'on' && $fwdfwsettings{'updatefwrule'} eq 'on'){
 192                                 $errormessage='';
 193                                 $fwdfwsettings{'nosave2'} = 'on';
 194                         }
 195                 }
 196                 &checkcounter($fwdfwsettings{'oldgrp1a'},$fwdfwsettings{'oldgrp1b'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}});
 197                 if ($fwdfwsettings{'nobase'} ne 'on'){
 198                         &checkcounter($fwdfwsettings{'oldgrp2a'},$fwdfwsettings{'oldgrp2b'},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}});
 199                 }
 200                 if($fwdfwsettings{'oldusesrv'} eq '' &&  $fwdfwsettings{'USESRV'} eq 'ON'){
 201                         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 202                 }elsif ($fwdfwsettings{'USESRV'} eq '' && $fwdfwsettings{'oldusesrv'} eq 'ON') {
 203                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},0,0);
 204                 }elsif ($fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldgrp3b'} ne $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'updatefwrule'} eq 'on'){
 205                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 206                 }
 207                 if($fwdfwsettings{'nosave2'} ne 'on'){
 208                         &saverule(\%confignatfw,$confignat);
 209                 }
 210         #DMZ-Part
 211         }elsif ($fwdfwsettings{$fwdfwsettings{'grp1'}} eq 'ORANGE' || $checkorange eq 'on'){
 212                 $fwdfwsettings{'config'}=$configdmz;
 213                 $fwdfwsettings{'chain'} = 'FORWARDFW';
 214                 my $maxkey=&General::findhasharraykey(\%configdmzfw);
 215                 #check if we have an identical rule already
 216                 if($fwdfwsettings{'oldrulenumber'} eq $fwdfwsettings{'rulepos'}){
 217                         foreach my $key (sort keys %configdmzfw){
 218                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'LOG'},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 219                                         eq "$configdmzfw{$key}[0],$configdmzfw{$key}[2],$configdmzfw{$key}[3],$configdmzfw{$key}[4],$configdmzfw{$key}[5],$configdmzfw{$key}[6],$configdmzfw{$key}[7],$configdmzfw{$key}[8],$configdmzfw{$key}[9],$configdmzfw{$key}[10],$configdmzfw{$key}[11],$configdmzfw{$key}[12],$configdmzfw{$key}[13],$configdmzfw{$key}[14],$configdmzfw{$key}[15],$configdmzfw{$key}[17],$configdmzfw{$key}[18],$configdmzfw{$key}[19],$configdmzfw{$key}[20],$configdmzfw{$key}[21],$configdmzfw{$key}[22],$configdmzfw{$key}[23],$configdmzfw{$key}[24],$configdmzfw{$key}[25],$configdmzfw{$key}[26],$configdmzfw{$key}[27]"){
 220                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 221                                                 if ($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' ){
 222                                                         $errormessage='';
 223                                                 }elsif($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' && $fwdfwsettings{'ruleremark'} ne '' && !&validremark($fwdfwsettings{'ruleremark'})){
 224                                                         $errormessage=$Lang::tr{'fwdfw err remark'}."<br>";
 225                                                 }
 226                                                 if ($fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'}){
 227                                                         $fwdfwsettings{'nosave'} = 'on';
 228                                                 }
 229                                 }
 230                         }
 231                 }
 232                 #check Rulepos on new Rule
 233                 if($fwdfwsettings{'rulepos'} > 0 && !$fwdfwsettings{'oldrulenumber'}){
 234                         $fwdfwsettings{'oldrulenumber'}=$maxkey;
 235                         foreach my $key (sort keys %configdmzfw){
 236                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'LOG'},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 237                                         eq "$configdmzfw{$key}[0],$configdmzfw{$key}[2],$configdmzfw{$key}[3],$configdmzfw{$key}[4],$configdmzfw{$key}[5],$configdmzfw{$key}[6],$configdmzfw{$key}[7],$configdmzfw{$key}[8],$configdmzfw{$key}[9],$configdmzfw{$key}[10],$configdmzfw{$key}[11],$configdmzfw{$key}[12],$configdmzfw{$key}[13],$configdmzfw{$key}[14],$configdmzfw{$key}[15],$configdmzfw{$key}[17],$configdmzfw{$key}[18],$configdmzfw{$key}[19],$configdmzfw{$key}[20],$configdmzfw{$key}[21],$configdmzfw{$key}[22],$configdmzfw{$key}[23],$configdmzfw{$key}[24],$configdmzfw{$key}[25],$configdmzfw{$key}[26],$configdmzfw{$key}[27]"){
 238                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 239                                 }
 240                         }
 241                 }
 242                 #check if we just close a rule
 243                 if( $fwdfwsettings{'oldgrp1a'} eq  $fwdfwsettings{'grp1'} && $fwdfwsettings{'oldgrp1b'} eq $fwdfwsettings{$fwdfwsettings{'grp1'}} && $fwdfwsettings{'oldgrp2a'} eq  $fwdfwsettings{'grp2'} && $fwdfwsettings{'oldgrp2b'} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} &&  $fwdfwsettings{'oldgrp3a'} eq $fwdfwsettings{'grp3'} && $fwdfwsettings{'oldgrp3b'} eq  $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'oldruletype'} eq $fwdfwsettings{'chain'}) {
 244                         if($fwdfwsettings{'nosave'} eq 'on' && $fwdfwsettings{'updatefwrule'} eq 'on'){
 245                                 $errormessage='';
 246                                 $fwdfwsettings{'nosave2'} = 'on';
 247                         }
 248                 }
 249                 &checkcounter($fwdfwsettings{'oldgrp1a'},$fwdfwsettings{'oldgrp1b'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}});
 250                 if ($fwdfwsettings{'nobase'} ne 'on'){
 251                         &checkcounter($fwdfwsettings{'oldgrp2a'},$fwdfwsettings{'oldgrp2b'},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}});
 252                 }
 253                 if($fwdfwsettings{'oldusesrv'} eq '' &&  $fwdfwsettings{'USESRV'} eq 'ON'){
 254                         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 255                 }elsif ($fwdfwsettings{'USESRV'} eq '' && $fwdfwsettings{'oldusesrv'} eq 'ON') {
 256                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},0,0);
 257                 }elsif ($fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldgrp3b'} ne $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'updatefwrule'} eq 'on'){
 258                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 259                 }
 260                 if($fwdfwsettings{'nosave2'} ne 'on'){
 261                         &saverule(\%configdmzfw,$configdmz);
 262                 }
 263         #INPUT part
 264         }elsif($fwdfwsettings{'grp2'} eq 'ipfire' && $fwdfwsettings{$fwdfwsettings{'grp1'}} ne 'ORANGE'){
 265                 $fwdfwsettings{'config'}=$configinput;
 266                 $fwdfwsettings{'chain'} = 'INPUTFW';
 267                 my $maxkey=&General::findhasharraykey(\%configinputfw);
 268                 #check if we have an identical rule already
 269                 if($fwdfwsettings{'oldrulenumber'} eq $fwdfwsettings{'rulepos'}){
 270                         foreach my $key (sort keys %configinputfw){
 271                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'LOG'},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 272                                         eq "$configinputfw{$key}[0],$configinputfw{$key}[2],$configinputfw{$key}[3],$configinputfw{$key}[4],$configinputfw{$key}[5],$configinputfw{$key}[6],$configinputfw{$key}[7],$configinputfw{$key}[8],$configinputfw{$key}[9],$configinputfw{$key}[10],$configinputfw{$key}[11],$configinputfw{$key}[12],$configinputfw{$key}[13],$configinputfw{$key}[14],$configinputfw{$key}[15],$configinputfw{$key}[17],$configinputfw{$key}[18],$configinputfw{$key}[19],$configinputfw{$key}[20],$configinputfw{$key}[21],$configinputfw{$key}[22],$configinputfw{$key}[23],$configinputfw{$key}[24],$configinputfw{$key}[25],$configinputfw{$key}[26],$configinputfw{$key}[27]"){
 273                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 274                                                 if ($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on'){
 275                                                         $errormessage='';
 276                                                 }elsif($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' && $fwdfwsettings{'ruleremark'} ne '' && !&validremark($fwdfwsettings{'ruleremark'})){
 277                                                         $errormessage=$Lang::tr{'fwdfw err remark'}."<br>";
 278                                                 }
 279                                                 if ($fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'}){
 280                                                         $fwdfwsettings{'nosave'} = 'on';
 281                                                 }
 282                                 }
 283                         }
 284                 }
 285                 #check Rulepos on new Rule
 286                 if($fwdfwsettings{'rulepos'} > 0 && !$fwdfwsettings{'oldrulenumber'}){
 287                         $fwdfwsettings{'oldrulenumber'}=$maxkey;
 288                         foreach my $key (sort keys %configinputfw){
 289                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'LOG'},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 290                                         eq "$configinputfw{$key}[0],$configinputfw{$key}[2],$configinputfw{$key}[3],$configinputfw{$key}[4],$configinputfw{$key}[5],$configinputfw{$key}[6],$configinputfw{$key}[7],$configinputfw{$key}[8],$configinputfw{$key}[9],$configinputfw{$key}[10],$configinputfw{$key}[11],$configinputfw{$key}[12],$configinputfw{$key}[13],$configinputfw{$key}[14],$configinputfw{$key}[15],$configinputfw{$key}[17],$configinputfw{$key}[18],$configinputfw{$key}[19],$configinputfw{$key}[20],$configinputfw{$key}[21],$configinputfw{$key}[22],$configinputfw{$key}[23],$configinputfw{$key}[24],$configinputfw{$key}[25],$configinputfw{$key}[26],$configinputfw{$key}[27]"){
 291                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 292                                 }
 293                         }
 294                 }
 295                 #check if we just close a rule
 296                 if( $fwdfwsettings{'oldgrp1a'} eq  $fwdfwsettings{'grp1'} && $fwdfwsettings{'oldgrp1b'} eq $fwdfwsettings{$fwdfwsettings{'grp1'}} && $fwdfwsettings{'oldgrp2a'} eq  $fwdfwsettings{'grp2'} && $fwdfwsettings{'oldgrp2b'} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} &&  $fwdfwsettings{'oldgrp3a'} eq $fwdfwsettings{'grp3'} && $fwdfwsettings{'oldgrp3b'} eq  $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'oldruletype'} eq $fwdfwsettings{'chain'}) {
 297                         if($fwdfwsettings{'nosave'} eq 'on' && $fwdfwsettings{'updatefwrule'} eq 'on'){
 298                                 $errormessage='';
 299                                 $fwdfwsettings{'nosave2'} = 'on';
 300                         }
 301                 }
 302                 &checkcounter($fwdfwsettings{'oldgrp1a'},$fwdfwsettings{'oldgrp1b'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}});
 303                 if ($fwdfwsettings{'nobase'} ne 'on'){
 304                         &checkcounter($fwdfwsettings{'oldgrp2a'},$fwdfwsettings{'oldgrp2b'},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}});
 305                 }
 306                 if($fwdfwsettings{'oldusesrv'} eq '' &&  $fwdfwsettings{'USESRV'} eq 'ON'){
 307                         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 308                 }elsif ($fwdfwsettings{'USESRV'} eq '' && $fwdfwsettings{'oldusesrv'} eq 'ON') {
 309                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},0,0);
 310                 }elsif ($fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldgrp3b'} ne $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'updatefwrule'} eq 'on'){
 311                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 312                 }
 313                 if($fwdfwsettings{'nosave2'} ne 'on'){
 314                         &saverule(\%configinputfw,$configinput);
 315                 }
 316                 #print "Source: $fwdfwsettings{'grp1'} -> $fwdfwsettings{$fwdfwsettings{'grp1'}}<br>";
 317                 #print "Sourceport: $fwdfwsettings{'USE_SRC_PORT'}, $fwdfwsettings{'PROT'}, $fwdfwsettings{'ICMP_TYPES'}, $fwdfwsettings{'SRC_PORT'}<br>";
 318                 #print "Target: $fwdfwsettings{'grp2'} -> $fwdfwsettings{$fwdfwsettings{'grp2'}}<br>";
 319                 #print "Dienst:  $fwdfwsettings{'USESRV'}, $fwdfwsettings{'grp3'} -> $fwdfwsettings{$fwdfwsettings{'grp3'}}<br>";
 320                 #print "BEMERKUNG: $fwdfwsettings{'ruleremark'}<br>";
 321                 #print " Regel AKTIV: $fwdfwsettings{'ACTIVE'}<br>";
 322                 #print " Regel LOG: $fwdfwsettings{'LOG'}<br>";
 323                 #print " ZEITRAHMEN: $fwdfwsettings{'TIME'}<br>";
 324                 #print " MO: $fwdfwsettings{'TIME_MON'}<br>";
 325                 #print " DI: $fwdfwsettings{'TIME_TUE'}<br>";
 326                 #print " MI: $fwdfwsettings{'TIME_WED'}<br>";
 327                 #print " DO: $fwdfwsettings{'TIME_THU'}<br>";
 328                 #print " FR: $fwdfwsettings{'TIME_FRI'}<br>";
 329                 #print " SA: $fwdfwsettings{'TIME_SAT'}<br>";
 330                 #print " SO: $fwdfwsettings{'TIME_SUN'}<br>";
 331                 #print " VON: $fwdfwsettings{'TIME_FROM'} bis $fwdfwsettings{'TIME_TO'}<br>";
 332                 #print "<br>";
 333                 #print"ALT: $fwdfwsettings{'oldgrp1a'} $fwdfwsettings{'oldgrp1b'}       NEU:    $fwdfwsettings{'grp1'} $fwdfwsettings{$fwdfwsettings{'grp1'}}<br>";
 334                 #print"ALT: $fwdfwsettings{'oldgrp2a'} $fwdfwsettings{'oldgrp2b'}       NEU:    $fwdfwsettings{'grp2'} $fwdfwsettings{$fwdfwsettings{'grp2'}}<br>";
 335                 #print"ALT: $fwdfwsettings{'oldgrp3a'} $fwdfwsettings{'oldgrp3b'}       NEU:    $fwdfwsettings{'grp3'} $fwdfwsettings{$fwdfwsettings{'grp3'}}<br>";
 336                 #print"DIENSTE Checkalt:$fwdfwsettings{'oldusesrv'}  DIENSTE Checkneu:$fwdfwsettings{'USESRV'}    DIENST ALT:$fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'}   DIENST NEU:$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}}<br>";
 337         }elsif($fwdfwsettings{$fwdfwsettings{'grp1'}} eq 'IPFire' ){
 338                 # OUTGOING PART
 339                 $fwdfwsettings{'config'}=$configoutgoing;
 340                 $fwdfwsettings{'chain'} = 'OUTGOINGFW';
 341                 my $maxkey=&General::findhasharraykey(\%configoutgoingfw);
 342                 if($fwdfwsettings{'oldrulenumber'} eq $fwdfwsettings{'rulepos'}){
 343                         foreach my $key (sort keys %configoutgoingfw){
 344                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'LOG'},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 345                                         eq "$configoutgoingfw{$key}[0],$configoutgoingfw{$key}[2],$configoutgoingfw{$key}[3],$configoutgoingfw{$key}[4],$configoutgoingfw{$key}[5],$configoutgoingfw{$key}[6],$configoutgoingfw{$key}[7],$configoutgoingfw{$key}[8],$configoutgoingfw{$key}[9],$configoutgoingfw{$key}[10],$configoutgoingfw{$key}[11],$configoutgoingfw{$key}[12],$configoutgoingfw{$key}[13],$configoutgoingfw{$key}[14],$configoutgoingfw{$key}[15],$configoutgoingfw{$key}[17],$configoutgoingfw{$key}[18],$configoutgoingfw{$key}[19],$configoutgoingfw{$key}[20],$configoutgoingfw{$key}[21],$configoutgoingfw{$key}[22],$configoutgoingfw{$key}[23],$configoutgoingfw{$key}[24],$configoutgoingfw{$key}[25],$configoutgoingfw{$key}[26],$configoutgoingfw{$key}[27]"){
 346                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 347                                                 if ($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on'){
 348                                                         $errormessage='';
 349                                                 }elsif($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' && $fwdfwsettings{'ruleremark'} ne '' && !&validremark($fwdfwsettings{'ruleremark'})){
 350                                                         $errormessage=$Lang::tr{'fwdfw err remark'}."<br>";
 351                                                 }
 352                                                 if ($fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'}){
 353                                                         $fwdfwsettings{'nosave'} = 'on';
 354                                                 }
 355                                 }
 356                         }
 357                 }
 358                 #check Rulepos on new Rule
 359                 if($fwdfwsettings{'rulepos'} > 0 && !$fwdfwsettings{'oldrulenumber'}){
 360                         print"CHECK OUTGOING DOPPELTE REGEL<br>";
 361                         $fwdfwsettings{'oldrulenumber'}=$maxkey;
 362                         foreach my $key (sort keys %configoutgoingfw){
 363                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'LOG'},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 364                                         eq "$configoutgoingfw{$key}[0],$configoutgoingfw{$key}[2],$configoutgoingfw{$key}[3],$configoutgoingfw{$key}[4],$configoutgoingfw{$key}[5],$configoutgoingfw{$key}[6],$configoutgoingfw{$key}[7],$configoutgoingfw{$key}[8],$configoutgoingfw{$key}[9],$configoutgoingfw{$key}[10],$configoutgoingfw{$key}[11],$configoutgoingfw{$key}[12],$configoutgoingfw{$key}[13],$configoutgoingfw{$key}[14],$configoutgoingfw{$key}[15],$configoutgoingfw{$key}[17],$configoutgoingfw{$key}[18],$configoutgoingfw{$key}[19],$configoutgoingfw{$key}[20],$configoutgoingfw{$key}[21],$configoutgoingfw{$key}[22],$configoutgoingfw{$key}[23],$configoutgoingfw{$key}[24],$configoutgoingfw{$key}[25],$configoutgoingfw{$key}[26],$configoutgoingfw{$key}[27]"){
 365                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 366                                 }
 367                         }
 368                 }
 369                 #check if we just close a rule
 370                 if( $fwdfwsettings{'oldgrp1a'} eq  $fwdfwsettings{'grp1'} && $fwdfwsettings{'oldgrp1b'} eq $fwdfwsettings{$fwdfwsettings{'grp1'}} && $fwdfwsettings{'oldgrp2a'} eq  $fwdfwsettings{'grp2'} && $fwdfwsettings{'oldgrp2b'} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} &&  $fwdfwsettings{'oldgrp3a'} eq $fwdfwsettings{'grp3'} && $fwdfwsettings{'oldgrp3b'} eq  $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'oldruletype'} eq $fwdfwsettings{'chain'}) {
 371                         if($fwdfwsettings{'nosave'} eq 'on' && $fwdfwsettings{'updatefwrule'} eq 'on'){
 372                                 $fwdfwsettings{'nosave2'} = 'on';
 373                                 $errormessage='';
 374                         }
 375                 }
 376                 #increase counters
 377                 &checkcounter($fwdfwsettings{'oldgrp1a'},$fwdfwsettings{'oldgrp1b'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}});
 378                 &checkcounter($fwdfwsettings{'oldgrp2a'},$fwdfwsettings{'oldgrp2b'},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}});
 379                 if($fwdfwsettings{'oldusesrv'} eq '' &&  $fwdfwsettings{'USESRV'} eq 'ON'){
 380                         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 381                 }elsif ($fwdfwsettings{'USESRV'} eq '' && $fwdfwsettings{'oldusesrv'} eq 'ON') {
 382                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},0,0);
 383                 }elsif ($fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldgrp3b'} ne $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'updatefwrule'} eq 'on'){
 384                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 385                 }
 386                 if ($fwdfwsettings{'nobase'} eq 'on'){
 387                         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 388                 }
 389                 if ($fwdfwsettings{'nosave2'} ne 'on'){
 390                         &saverule(\%configoutgoingfw,$configoutgoing);
 391                 }
 392         }else{
 393                 #FORWARD PART
 394                 $fwdfwsettings{'config'}=$configfwdfw;
 395                 $fwdfwsettings{'chain'} = 'FORWARDFW';
 396                 my $maxkey=&General::findhasharraykey(\%configfwdfw);
 397                 if($fwdfwsettings{'oldrulenumber'} eq $fwdfwsettings{'rulepos'}){
 398                         #check if we have an identical rule already
 399                         foreach my $key (sort keys %configfwdfw){
 400                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 401                                         eq "$configfwdfw{$key}[0],$configfwdfw{$key}[2],$configfwdfw{$key}[3],$configfwdfw{$key}[4],$configfwdfw{$key}[5],$configfwdfw{$key}[6],$configfwdfw{$key}[7],$configfwdfw{$key}[8],$configfwdfw{$key}[9],$configfwdfw{$key}[10],$configfwdfw{$key}[11],$configfwdfw{$key}[12],$configfwdfw{$key}[13],$configfwdfw{$key}[14],$configfwdfw{$key}[15],$configfwdfw{$key}[17],$configfwdfw{$key}[19],$configfwdfw{$key}[20],$configfwdfw{$key}[21],$configfwdfw{$key}[22],$configfwdfw{$key}[23],$configfwdfw{$key}[24],$configfwdfw{$key}[25],$configfwdfw{$key}[26],$configfwdfw{$key}[27]"){
 402                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 403                                                 if ($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' ){
 404                                                         $errormessage='';
 405                                                 }elsif($fwdfwsettings{'oldruleremark'} ne $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'updatefwrule'} eq 'on' && $fwdfwsettings{'ruleremark'} ne '' && !&validremark($fwdfwsettings{'ruleremark'})){
 406                                                         $errormessage=$Lang::tr{'fwdfw err remark'}."<br>";
 407                                                 }
 408                                                 if ($fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'}){
 409                                                         $fwdfwsettings{'nosave'} = 'on';
 410                                                 }
 411                                 }
 412                         }
 413                 }
 414                 #check Rulepos on new Rule
 415                 if($fwdfwsettings{'rulepos'} > 0 && !$fwdfwsettings{'oldrulenumber'}){
 416                         $fwdfwsettings{'oldrulenumber'}=$maxkey;
 417                         foreach my $key (sort keys %configfwdfw){
 418                                 if ("$fwdfwsettings{'RULE_ACTION'},$fwdfwsettings{'ACTIVE'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}},$fwdfwsettings{'USE_SRC_PORT'},$fwdfwsettings{'PROT'},$fwdfwsettings{'ICMP_TYPES'},$fwdfwsettings{'SRC_PORT'},$fwdfwsettings{'USESRV'},$fwdfwsettings{'TGT_PROT'},$fwdfwsettings{'ICMP_TGT'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}},$fwdfwsettings{'TIME'},$fwdfwsettings{'TIME_MON'},$fwdfwsettings{'TIME_TUE'},$fwdfwsettings{'TIME_WED'},$fwdfwsettings{'TIME_THU'},$fwdfwsettings{'TIME_FRI'},$fwdfwsettings{'TIME_SAT'},$fwdfwsettings{'TIME_SUN'},$fwdfwsettings{'TIME_FROM'},$fwdfwsettings{'TIME_TO'}"
 419                                         eq "$configfwdfw{$key}[0],$configfwdfw{$key}[2],$configfwdfw{$key}[3],$configfwdfw{$key}[4],$configfwdfw{$key}[5],$configfwdfw{$key}[6],$configfwdfw{$key}[7],$configfwdfw{$key}[8],$configfwdfw{$key}[9],$configfwdfw{$key}[10],$configfwdfw{$key}[11],$configfwdfw{$key}[12],$configfwdfw{$key}[13],$configfwdfw{$key}[14],$configfwdfw{$key}[15],$configfwdfw{$key}[17],$configfwdfw{$key}[19],$configfwdfw{$key}[20],$configfwdfw{$key}[21],$configfwdfw{$key}[22],$configfwdfw{$key}[23],$configfwdfw{$key}[24],$configfwdfw{$key}[25],$configfwdfw{$key}[26],$configfwdfw{$key}[27]"){
 420                                                 $errormessage.=$Lang::tr{'fwdfw err ruleexists'};
 421                                 }
 422                         }
 423                 }
 424                 #check if we just close a rule
 425                 if( $fwdfwsettings{'oldgrp1a'} eq  $fwdfwsettings{'grp1'} && $fwdfwsettings{'oldgrp1b'} eq $fwdfwsettings{$fwdfwsettings{'grp1'}} && $fwdfwsettings{'oldgrp2a'} eq  $fwdfwsettings{'grp2'} && $fwdfwsettings{'oldgrp2b'} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} &&  $fwdfwsettings{'oldgrp3a'} eq $fwdfwsettings{'grp3'} && $fwdfwsettings{'oldgrp3b'} eq  $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldruleremark'} eq $fwdfwsettings{'ruleremark'} && $fwdfwsettings{'oldruletype'} eq $fwdfwsettings{'chain'} ) {
 426                         if($fwdfwsettings{'nosave'} eq 'on' && $fwdfwsettings{'updatefwrule'} eq 'on'){
 427                                 $fwdfwsettings{'nosave2'} = 'on';
 428                                 $errormessage='';
 429                         }
 430                 }
 431                 #increase counters
 432                 &checkcounter($fwdfwsettings{'oldgrp1a'},$fwdfwsettings{'oldgrp1b'},$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}});
 433                 &checkcounter($fwdfwsettings{'oldgrp2a'},$fwdfwsettings{'oldgrp2b'},$fwdfwsettings{'grp2'},$fwdfwsettings{$fwdfwsettings{'grp2'}});
 434                 if($fwdfwsettings{'oldusesrv'} eq '' &&  $fwdfwsettings{'USESRV'} eq 'ON'){
 435                         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 436                 }elsif ($fwdfwsettings{'USESRV'} eq '' && $fwdfwsettings{'oldusesrv'} eq 'ON') {
 437                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},0,0);
 438                 }elsif ($fwdfwsettings{'oldusesrv'} eq $fwdfwsettings{'USESRV'} && $fwdfwsettings{'oldgrp3b'} ne $fwdfwsettings{$fwdfwsettings{'grp3'}} && $fwdfwsettings{'updatefwrule'} eq 'on'){
 439                         &checkcounter($fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'},$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 440                 }
 441                 if ($fwdfwsettings{'nobase'} eq 'on'){
 442                         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 443                 }
 444                 if ($fwdfwsettings{'nosave2'} ne 'on'){
 445                         &saverule(\%configfwdfw,$configfwdfw);
 446                 }
 447                 #print "Source: $fwdfwsettings{'grp1'} -> $fwdfwsettings{$fwdfwsettings{'grp1'}}<br>";
 448                 #print "Sourceport: $fwdfwsettings{'USE_SRC_PORT'}, $fwdfwsettings{'PROT'}, $fwdfwsettings{'ICMP_TYPES'}, $fwdfwsettings{'SRC_PORT'}<br>";
 449                 #print "Target: $fwdfwsettings{'grp2'} -> $fwdfwsettings{$fwdfwsettings{'grp2'}}<br>";
 450                 #print "Dienst:  $fwdfwsettings{'USESRV'}, $fwdfwsettings{'grp3'} -> $fwdfwsettings{$fwdfwsettings{'grp3'}}<br>";
 451                 #print "BEMERKUNG: $fwdfwsettings{'ruleremark'}<br>";
 452                 #print " Regel AKTIV: $fwdfwsettings{'ACTIVE'}<br>";
 453                 #print " Regel LOG: $fwdfwsettings{'LOG'}<br>";
 454                 #print " ZEITRAHMEN: $fwdfwsettings{'TIME'}<br>";
 455                 #print " MO: $fwdfwsettings{'TIME_MON'}<br>";
 456                 #print " DI: $fwdfwsettings{'TIME_TUE'}<br>";
 457                 #print " MI: $fwdfwsettings{'TIME_WED'}<br>";
 458                 #print " DO: $fwdfwsettings{'TIME_THU'}<br>";
 459                 #print " FR: $fwdfwsettings{'TIME_FRI'}<br>";
 460                 #print " SA: $fwdfwsettings{'TIME_SAT'}<br>";
 461                 #print " SO: $fwdfwsettings{'TIME_SUN'}<br>";
 462                 #print " VON: $fwdfwsettings{'TIME_FROM'} bis $fwdfwsettings{'TIME_TO'}<br>";
 463                 #print "<br>";
 464                 #print"ALT: $fwdfwsettings{'oldgrp1a'} $fwdfwsettings{'oldgrp1b'}       NEU:    $fwdfwsettings{'grp1'} $fwdfwsettings{$fwdfwsettings{'grp1'}}<br>";
 465                 #print"ALT: $fwdfwsettings{'oldgrp2a'} $fwdfwsettings{'oldgrp2b'}       NEU:    $fwdfwsettings{'grp2'} $fwdfwsettings{$fwdfwsettings{'grp2'}}<br>";
 466                 #print"ALT: $fwdfwsettings{'oldgrp3a'} $fwdfwsettings{'oldgrp3b'}       NEU:    $fwdfwsettings{'grp3'} $fwdfwsettings{$fwdfwsettings{'grp3'}}<br>";
 467                 #print"DIENSTE Checkalt:$fwdfwsettings{'oldusesrv'}  DIENSTE Checkneu:$fwdfwsettings{'USESRV'}    DIENST ALT:$fwdfwsettings{'oldgrp3a'},$fwdfwsettings{'oldgrp3b'}   DIENST NEU:$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}}<br>";
 468         }
 469         if ($errormessage){
 470                 &newrule;
 471         }else{
 472                 if($fwdfwsettings{'nosave2'} ne 'on'){
 473                         &rules;
 474                 }
 475                 &base;
 476         }
 477 }
 478 if ($fwdfwsettings{'ACTION'} eq $Lang::tr{'reset'})
 479 {
 480         if($fwdfwsettings{'poltype'} eq 'forward'){
 481                 &General::readhasharray("$configfwdfw", \%configfwdfw);
 482                 foreach my $key (sort keys %configfwdfw){
 483                         &checkcounter($configfwdfw{$key}[3],$configfwdfw{$key}[4],,);
 484                         &checkcounter($configfwdfw{$key}[5],$configfwdfw{$key}[6],,);
 485                         &checkcounter($configfwdfw{$key}[14],$configfwdfw{$key}[15],,);
 486                 }
 487                 #&General::readhasharray("$configinput", \%configinputfw);
 488                 #foreach my $key (sort keys %configinputfw){
 489                 #       &checkcounter($configinputfw{$key}[3],$configinputfw{$key}[4],,);
 490                 #       &checkcounter($configinputfw{$key}[5],$configinputfw{$key}[6],,);
 491                 #       &checkcounter($configinputfw{$key}[14],$configinputfw{$key}[15],,);
 492                 #}
 493
 494                 system("rm ${General::swroot}/forward/config");
 495                 #system("rm ${General::swroot}/forward/input");
 496                 &General::writehash("${General::swroot}/forward/settings", \%fwdfwsettings);
 497                 unless (-e "${General::swroot}/forward/config")         { system("touch ${General::swroot}/forward/config"); }
 498                 #unless (-e "${General::swroot}/forward/input")         { system("touch ${General::swroot}/forward/input"); }
 499                 my $MODE1=$fwdfwsettings{'POLICY1'};
 500                 %fwdfwsettings = ();
 501                 $fwdfwsettings{'POLICY'}='MODE2';
 502                 $fwdfwsettings{'POLICY1'}=$MODE1;
 503                 &General::writehash("${General::swroot}/forward/settings", \%fwdfwsettings);
 504                 &reread_rules;
 505         }else{
 506                 &General::readhasharray("$configoutgoing", \%configoutgoingfw);
 507         foreach my $key (sort keys %configoutgoingfw){
 508                 &checkcounter($configoutgoingfw{$key}[3],$configoutgoingfw{$key}[4],,);
 509                 &checkcounter($configoutgoingfw{$key}[5],$configoutgoingfw{$key}[6],,);
 510                 &checkcounter($configoutgoingfw{$key}[14],$configoutgoingfw{$key}[15],,);
 511         }
 512         system("rm ${General::swroot}/forward/outgoing");
 513         &General::writehash("${General::swroot}/forward/settings", \%fwdfwsettings);
 514         unless (-e "${General::swroot}/forward/outgoing")       { system("touch ${General::swroot}/forward/outgoing"); }
 515         my $MODE=$fwdfwsettings{'POLICY'};
 516         %fwdfwsettings = ();
 517         $fwdfwsettings{'POLICY'}=$MODE;
 518         $fwdfwsettings{'POLICY1'}='MODE2';
 519         &General::writehash("${General::swroot}/forward/settings", \%fwdfwsettings);
 520         &reread_rules;
 521         }
 522 }
 523 if ($fwdfwsettings{'ACTION'} eq $Lang::tr{'fwdfw newrule'})
 524 {
 525         &newrule;
 526 }
 527 if ($fwdfwsettings{'ACTION'} eq $Lang::tr{'fwdfw toggle'})
 528 {
 529         my %togglehash=();
 530         &General::readhasharray($fwdfwsettings{'config'}, \%togglehash);
 531         foreach my $key (sort keys %togglehash){
 532                 if ($key eq $fwdfwsettings{'key'}){
 533                         if ($togglehash{$key}[2] eq 'ON'){$togglehash{$key}[2]='';}else{$togglehash{$key}[2]='ON';}
 534                 }
 535         }
 536         &General::writehasharray($fwdfwsettings{'config'}, \%togglehash);
 537         &rules;
 538         &base;
 539 }
 540 if ($fwdfwsettings{'ACTION'} eq $Lang::tr{'fwdfw togglelog'})
 541 {
 542         my %togglehash=();
 543         &General::readhasharray($fwdfwsettings{'config'}, \%togglehash);
 544         foreach my $key (sort keys %togglehash){
 545                 if ($key eq $fwdfwsettings{'key'}){
 546                         if ($togglehash{$key}[17] eq 'ON'){$togglehash{$key}[17]='';}else{$togglehash{$key}[17]='ON';}
 547                 }
 548         }
 549         &General::writehasharray($fwdfwsettings{'config'}, \%togglehash);
 550         &rules;
 551         &base;
 552 }
 553 if ($fwdfwsettings{'ACTION'} eq $Lang::tr{'fwdfw reread'})
 554 {
 555         &reread_rules;
 556         &base;
 557 }
 558 if ($fwdfwsettings{'ACTION'} eq 'editrule')
 559 {
 560         $fwdfwsettings{'updatefwrule'}='on';
 561         &newrule;
 562 }
 563 if ($fwdfwsettings{'ACTION'} eq 'deleterule')
 564 {
 565         &deleterule;
 566 }
 567 if ($fwdfwsettings{'ACTION'} eq 'moveup')
 568 {
 569         &pos_up;
 570         &base;
 571 }
 572 if ($fwdfwsettings{'ACTION'} eq 'movedown')
 573 {
 574         &pos_down;
 575         &base;
 576 }
 577 if ($fwdfwsettings{'ACTION'} eq 'copyrule')
 578 {
 579         $fwdfwsettings{'copyfwrule'}='on';
 580         #$fwdfwsettings{'updatefwrule'}='on';
 581         &newrule;
 582 }
 583 if ($fwdfwsettings{'ACTION'} eq '')
 584 {
 585         &base;
 586 }
 587 ###  Functions  ####
 588 sub addrule
 589 {
 590         &error;
 591         if (-f "${General::swroot}/forward/reread"){
 592                 print "<table border='0'><form method='post'><td><input type='submit' name='ACTION' value='$Lang::tr{'fwdfw reread'}' style='font-face: Comic Sans MS; color: red; font-weight: bold;'>$Lang::tr{'fwhost reread'}</td></tr></table></form><hr><br>";
 593         }
 594         &Header::openbox('100%', 'left', $Lang::tr{'fwdfw addrule'});
 595         print "<form method='post'>";
 596         print "<table border='0'>";
 597         print "<tr><td><input type='submit' name='ACTION' value='$Lang::tr{'fwdfw newrule'}'></td>";
 598         print"</tr></table></form><hr>";
 599         &Header::closebox();
 600         &viewtablerule;
 601 }
 602 sub base
 603 {
 604         if ($fwdfwsettings{'POLICY'} eq 'MODE1'){ $selected{'POLICY'}{'MODE1'} = 'selected'; } else { $selected{'POLICY'}{'MODE1'} = ''; }
 605         if ($fwdfwsettings{'POLICY'} eq 'MODE2'){ $selected{'POLICY'}{'MODE2'} = 'selected'; } else { $selected{'POLICY'}{'MODE2'} = ''; }
 606         if ($fwdfwsettings{'POLICY1'} eq 'MODE1'){ $selected{'POLICY1'}{'MODE1'} = 'selected'; } else { $selected{'POLICY1'}{'MODE1'} = ''; }
 607         if ($fwdfwsettings{'POLICY1'} eq 'MODE2'){ $selected{'POLICY1'}{'MODE2'} = 'selected'; } else { $selected{'POLICY1'}{'MODE2'} = ''; }
 608         &hint;
 609         &addrule;
 610         print "<br><br>";
 611         &Header::openbox('100%', 'center', $Lang::tr{'fwdfw pol title'});
 612 print <<END;
 613         <form method='post' action='$ENV{'SCRIPT_NAME'}'>
 614         <table width='100%' border='0'>
 615                 <tr><td colspan='3' style='font-weight:bold;color:red;' align='left'>FORWARD </td></tr>
 616                 <tr><td colspan='3' align='left'>$Lang::tr{'fwdfw pol text'}</td></tr>
 617                 <tr><td colspan='3'><hr /></td></tr>
 618                 <tr><td width='15%' align='left'>       <select name='POLICY' style="width: 100px">
 619                 <option value='MODE1' $selected{'POLICY'}{'MODE1'}>$Lang::tr{'fwdfw pol block'}</option>
 620                 <option value='MODE2' $selected{'POLICY'}{'MODE2'}>$Lang::tr{'fwdfw pol allow'}</option></select>
 621             <input type='submit' name='ACTION' value=$Lang::tr{'save'} /></td><td width='45%' align='right'>
 622
 623 END
 624         print "$Lang::tr{'outgoing firewall reset'}: <input type='submit' name='ACTION' value='$Lang::tr{'reset'}' /><input type='hidden' name='poltype' value='forward' /></td></tr>";
 625         print "</table></form>";
 626         print"<br><br>";
 627         print <<END;
 628         <form method='post' action='$ENV{'SCRIPT_NAME'}'>
 629         <table width='100%' border='0'>
 630                 <tr><td colspan='3' style='font-weight:bold;color:red;' align='left'>OUTGOING </td></tr>
 631                 <tr><td colspan='3' align='left'>$Lang::tr{'fwdfw pol text1'}</td></tr>
 632                 <tr><td colspan='3'><hr /></td></tr>
 633                 <tr><td width='15%' align='left'>       <select name='POLICY1' style="width: 100px">
 634                 <option value='MODE1' $selected{'POLICY1'}{'MODE1'}>$Lang::tr{'fwdfw pol block'}</option>
 635                 <option value='MODE2' $selected{'POLICY1'}{'MODE2'}>$Lang::tr{'fwdfw pol allow'}</option></select>
 636             <input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td><td width='45%' align='right'>
 637
 638 END
 639         print "$Lang::tr{'outgoing firewall reset'}: <input type='submit' name='ACTION' value='$Lang::tr{'reset'}' /><input type='hidden' name='poltype' value='outgoing' /></tr>";
 640         print "</table></form>";
 641         &Header::closebox();
 642         print "<br><br><div align='right'><font size='1' color='grey'>Version: $VERSION</font></div>";
 643 }
 644 sub changerule
 645 {
 646         my $oldchain=shift;
 647         $fwdfwsettings{'updatefwrule'}='';
 648         $fwdfwsettings{'config'}=$oldchain;
 649         $fwdfwsettings{'nobase'}='on';
 650         &deleterule;
 651         &checkcounter(0,0,$fwdfwsettings{'grp1'},$fwdfwsettings{$fwdfwsettings{'grp1'}});
 652         &checkcounter(0,0,$fwdfwsettings{'grp3'},$fwdfwsettings{$fwdfwsettings{'grp3'}});
 653 }
 654 sub checksource
 655 {
 656         my ($ip,$subnet);
 657
 658         #check ip-address if manual
 659         if ($fwdfwsettings{'src_addr'} eq $fwdfwsettings{$fwdfwsettings{'grp1'}} && $fwdfwsettings{'src_addr'} ne ''){
 660                 #check if ip with subnet
 661                 if ($fwdfwsettings{'src_addr'} =~ /^(.*?)\/(.*?)$/) {
 662                         ($ip,$subnet)=split (/\//,$fwdfwsettings{'src_addr'});
 663                         $subnet = &General::iporsubtocidr($subnet);
 664                         $fwdfwsettings{'isip'}='on';
 665                 }
 666                 #check if only ip
 667                 if($fwdfwsettings{'src_addr'}=~/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/){
 668                         $ip=$fwdfwsettings{'src_addr'};
 669                         $subnet = '32';
 670                         $fwdfwsettings{'isip'}='on';
 671                 }
 672
 673                 if ($fwdfwsettings{'isip'} ne 'on'){
 674                         if (&General::validmac($fwdfwsettings{'src_addr'})){$fwdfwsettings{'ismac'}='on';}
 675                 }
 676                 if ($fwdfwsettings{'isip'} eq 'on'){
 677                         #check and form valid IP
 678                         $ip=&General::ip2dec($ip);
 679                         $ip=&General::dec2ip($ip);
 680                         #check if net or broadcast
 681                         my @tmp= split (/\./,$ip);
 682                         if (($tmp[3] eq "0") || ($tmp[3] eq "255"))
 683                         {
 684                                 $errormessage=$Lang::tr{'fwhost err hostip'}."<br>";
 685                         }
 686                         $fwdfwsettings{'src_addr'}="$ip/$subnet";
 687
 688                         if(!&General::validipandmask($fwdfwsettings{'src_addr'})){
 689                                 $errormessage.=$Lang::tr{'fwdfw err src_addr'}."<br>";
 690                         }
 691                 }
 692                 if ($fwdfwsettings{'isip'} ne 'on' && $fwdfwsettings{'ismac'} ne 'on'){
 693                         $errormessage.=$Lang::tr{'fwdfw err src_addr'}."<br>";
 694                 }
 695         }elsif($fwdfwsettings{'src_addr'} eq $fwdfwsettings{$fwdfwsettings{'grp1'}} && $fwdfwsettings{'src_addr'} eq ''){
 696                 $errormessage.=$Lang::tr{'fwdfw err nosrcip'};
 697                 return $errormessage;
 698         }
 699
 700         #check empty fields
 701         if ($fwdfwsettings{$fwdfwsettings{'grp1'}} eq ''){ $errormessage.=$Lang::tr{'fwdfw err nosrc'}."<br>";}
 702         #check icmp source
 703                 if ($fwdfwsettings{'USE_SRC_PORT'} eq 'ON' && $fwdfwsettings{'PROT'} eq 'ICMP'){
 704                         $fwdfwsettings{'SRC_PORT'}='';
 705                         &General::readhasharray("${General::swroot}/fwhosts/icmp-types", \%icmptypes);
 706                         foreach my $key (keys %icmptypes){
 707                                 if($fwdfwsettings{'ICMP_TYPES'} eq "$icmptypes{$key}[0] ($icmptypes{$key}[1])"){
 708                                         $fwdfwsettings{'ICMP_TYPES'}="$icmptypes{$key}[0]";
 709                                 }
 710                         }
 711                 }elsif($fwdfwsettings{'USE_SRC_PORT'} eq 'ON' && $fwdfwsettings{'PROT'} eq 'GRE'){
 712                         $fwdfwsettings{'SRC_PORT'}='';
 713                         $fwdfwsettings{'ICMP_TYPES'}='';
 714                 }elsif($fwdfwsettings{'USE_SRC_PORT'} eq 'ON' && $fwdfwsettings{'PROT'} eq 'ESP'){
 715                         $fwdfwsettings{'SRC_PORT'}='';
 716                         $fwdfwsettings{'ICMP_TYPES'}='';
 717                 }elsif($fwdfwsettings{'USE_SRC_PORT'} eq 'ON' && $fwdfwsettings{'PROT'} eq 'AH'){
 718                         $fwdfwsettings{'SRC_PORT'}='';
 719                         $fwdfwsettings{'ICMP_TYPES'}='';
 720                 }elsif($fwdfwsettings{'USE_SRC_PORT'} eq 'ON' && $fwdfwsettings{'PROT'} ne 'ICMP'){
 721                         $fwdfwsettings{'ICMP_TYPES'}='';
 722                 }else{
 723                         $fwdfwsettings{'ICMP_TYPES'}='';
 724                         $fwdfwsettings{'SRC_PORT'}='';
 725                         $fwdfwsettings{'PROT'}='';
 726                 }
 727
 728         if($fwdfwsettings{'USE_SRC_PORT'} eq 'ON' && ($fwdfwsettings{'PROT'} eq 'TCP' || $fwdfwsettings{'PROT'} eq 'UDP') && $fwdfwsettings{'SRC_PORT'} ne ''){
 729                 my @parts=split(",",$fwdfwsettings{'SRC_PORT'});
 730                 my @values=();
 731                 foreach (@parts){
 732                         chomp($_);
 733                         if ($_ =~ /^(\d+)\:(\d+)$/) {
 734                                 my $check;
 735                                 #change dashes with :
 736                                 $_=~ tr/-/:/;
 737                                 if ($_ eq "*") {
 738                                         push(@values,"1:65535");
 739                                         $check='on';
 740                                 }
 741                                 if ($_ =~ /^(\D)\:(\d+)$/) {
 742                                         push(@values,"1:$2");
 743                                         $check='on';
 744                                 }
 745                                 if ($_ =~ /^(\d+)\:(\D)$/) {
 746                                         push(@values,"$1:65535");
 747                                         $check='on'
 748                                 }
 749                                 $errormessage .= &General::validportrange($_, 'destination');
 750                                 if(!$check){
 751                                         push (@values,$_);
 752                                 }
 753                         }else{
 754                                 if (&General::validport($_)){
 755                                         push (@values,$_);
 756                                 }else{
 757
 758                                 }
 759                         }
 760                 }
 761                 $fwdfwsettings{'SRC_PORT'}=join("|",@values);
 762                 return $errormessage;
 763         }
 764 }
 765 sub checktarget
 766 {
 767         my ($ip,$subnet);
 768         &General::readhasharray("$configsrv", \%customservice);
 769         #check DNAT settings (has to be single Host and single Port)
 770         if ($fwdfwsettings{'USE_NAT'} eq 'ON' && $fwdfwsettings{'nat'} eq 'dnat'){
 771                 if($fwdfwsettings{'grp2'} eq 'tgt_addr' || $fwdfwsettings{'grp2'} eq 'cust_host_tgt' || $fwdfwsettings{'grp2'} eq 'ovpn_host_tgt'){
 772                         if ($fwdfwsettings{'USESRV'} eq ''){
 773                                 $errormessage=$Lang::tr{'fwdfw target'}.": ".$Lang::tr{'fwdfw dnat porterr'}."<br>";
 774                         }
 775                         #check if manual ip is a single Host (if set)
 776                         if ($fwdfwsettings{'grp2'} eq 'tgt_addr'){
 777                                 my @tmp= split (/\./,$fwdfwsettings{$fwdfwsettings{'grp2'}});
 778                                 my @tmp1= split ("/",$tmp[3]);
 779                                 if (($tmp1[0] eq "0") || ($tmp1[0] eq "255"))
 780                                 {
 781                                         $errormessage=$Lang::tr{'fwdfw dnat error'}."<br>";
 782                                 }
 783                         }
 784                         #check if Port is a single Port
 785                         if ($fwdfwsettings{'nat'} eq 'dnat' &&  $fwdfwsettings{'grp3'} eq 'TGT_PORT'){
 786                                 if(($fwdfwsettings{'TGT_PROT'} ne 'TCP'|| $fwdfwsettings{'TGT_PROT'} ne 'UDP') && $fwdfwsettings{'TGT_PORT'} eq ''){
 787                                         $errormessage=$Lang::tr{'fwdfw target'}.": ".$Lang::tr{'fwdfw dnat porterr'}."<br>";
 788                                 }
 789                                 if (($fwdfwsettings{'TGT_PROT'} eq 'TCP'|| $fwdfwsettings{'TGT_PROT'} eq 'UDP') && $fwdfwsettings{'TGT_PORT'} ne '' && !&check_natport($fwdfwsettings{'TGT_PORT'})){
 790                                         $errormessage=$Lang::tr{'fwdfw target'}.": ".$Lang::tr{'fwdfw dnat porterr'}."<br>";
 791                                 }
 792                         }
 793                 }else{
 794                         $errormessage=$Lang::tr{'fwdfw dnat error'}."<br>";
 795                 }
 796         }
 797         if ($fwdfwsettings{'tgt_addr'} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} && $fwdfwsettings{'tgt_addr'} ne ''){
 798                 #check if ip with subnet
 799                 if ($fwdfwsettings{'tgt_addr'} =~ /^(.*?)\/(.*?)$/) {
 800                         ($ip,$subnet)=split (/\//,$fwdfwsettings{'tgt_addr'});
 801                         $subnet = &General::iporsubtocidr($subnet);
 802                 }
 803                 #check if only ip
 804                 if($fwdfwsettings{'tgt_addr'}=~/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/){
 805                         $ip=$fwdfwsettings{'tgt_addr'};
 806                         $subnet='32';
 807                 }
 808                 #check and form valid IP
 809                 $ip=&General::ip2dec($ip);
 810                 $ip=&General::dec2ip($ip);
 811
 812                 $fwdfwsettings{'tgt_addr'}="$ip/$subnet";
 813                 if(!&General::validipandmask($fwdfwsettings{'tgt_addr'})){
 814                         $errormessage.=$Lang::tr{'fwdfw err tgt_addr'}."<br>";
 815                 }
 816         }elsif($fwdfwsettings{'tgt_addr'} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} && $fwdfwsettings{'tgt_addr'} eq ''){
 817                 $errormessage.=$Lang::tr{'fwdfw err notgtip'};
 818                 return $errormessage;
 819         }
 820         #check empty fields
 821         if ($fwdfwsettings{$fwdfwsettings{'grp2'}} eq ''){ $errormessage.=$Lang::tr{'fwdfw err notgt'}."<br>";}
 822         #check tgt services
 823         if ($fwdfwsettings{'USESRV'} eq 'ON'){
 824                 if ($fwdfwsettings{'grp3'} eq 'cust_srv'){
 825                         $fwdfwsettings{'TGT_PROT'}='';
 826                         $fwdfwsettings{'ICMP_TGT'}='';
 827                 }
 828                 if ($fwdfwsettings{'grp3'} eq 'cust_srvgrp'){
 829                         $fwdfwsettings{'TGT_PROT'}='';
 830                         $fwdfwsettings{'ICMP_TGT'}='';
 831                         #check target service
 832                         if($fwdfwsettings{$fwdfwsettings{'grp3'}} eq ''){
 833                                 $errormessage.=$Lang::tr{'fwdfw err tgt_grp'};
 834                         }
 835                 }
 836                 if ($fwdfwsettings{'grp3'} eq 'TGT_PORT'){
 837                         if ($fwdfwsettings{'TGT_PROT'} eq 'TCP' || $fwdfwsettings{'TGT_PROT'} eq 'UDP'){
 838                                 if ($fwdfwsettings{'TGT_PORT'} ne ''){
 839                                         my @parts=split(",",$fwdfwsettings{'TGT_PORT'});
 840                                         my @values=();
 841                                         foreach (@parts){
 842                                                 chomp($_);
 843                                                 if ($_ =~ /^(\d+)\:(\d+)$/) {
 844                                                         my $check;
 845                                                         #change dashes with :
 846                                                         $_=~ tr/-/:/;
 847                                                         if ($_ eq "*") {
 848                                                                 push(@values,"1:65535");
 849                                                                 $check='on';
 850                                                         }
 851                                                         if ($_ =~ /^(\D)\:(\d+)$/) {
 852                                                                 push(@values,"1:$2");
 853                                                                 $check='on';
 854                                                         }
 855                                                         if ($_ =~ /^(\d+)\:(\D)$/) {
 856                                                                 push(@values,"$1:65535");
 857                                                                 $check='on'
 858                                                         }
 859                                                         $errormessage .= &General::validportrange($_, 'destination');
 860                                                         if(!$check){
 861                                                                 push (@values,$_);
 862                                                         }
 863                                                 }else{
 864                                                         if (&General::validport($_)){
 865                                                                 push (@values,$_);
 866                                                         }else{
 867
 868                                                         }
 869                                                 }
 870                                         }
 871                                         $fwdfwsettings{'TGT_PORT'}=join("|",@values);
 872                                 }
 873                         }elsif ($fwdfwsettings{'TGT_PROT'} eq 'GRE'){
 874                                         $fwdfwsettings{$fwdfwsettings{'grp3'}} = '';
 875                                         $fwdfwsettings{'TGT_PORT'} = '';
 876                                         $fwdfwsettings{'ICMP_TGT'} = '';
 877                         }elsif($fwdfwsettings{'TGT_PROT'} eq 'ESP'){
 878                                         $fwdfwsettings{$fwdfwsettings{'grp3'}} = '';
 879                                         $fwdfwsettings{'TGT_PORT'} = '';
 880                                         $fwdfwsettings{'ICMP_TGT'}='';
 881                         }elsif($fwdfwsettings{'TGT_PROT'} eq 'AH'){
 882                                         $fwdfwsettings{$fwdfwsettings{'grp3'}} = '';
 883                                         $fwdfwsettings{'TGT_PORT'} = '';
 884                                         $fwdfwsettings{'ICMP_TGT'}='';
 885                         }elsif ($fwdfwsettings{'TGT_PROT'} eq 'ICMP'){
 886                                 $fwdfwsettings{$fwdfwsettings{'grp3'}} = '';
 887                                 $fwdfwsettings{'TGT_PORT'} = '';
 888                                 &General::readhasharray("${General::swroot}/fwhosts/icmp-types", \%icmptypes);
 889                                 foreach my $key (keys %icmptypes){
 890
 891                                         if ("$icmptypes{$key}[0] ($icmptypes{$key}[1])" eq $fwdfwsettings{'ICMP_TGT'}){
 892                                                 $fwdfwsettings{'ICMP_TGT'}=$icmptypes{$key}[0];
 893                                         }
 894                                 }
 895                         }
 896                 }
 897         }
 898
 899         #check targetport
 900         if ($fwdfwsettings{'USESRV'} ne 'ON'){
 901                 $fwdfwsettings{'grp3'}='';
 902                 $fwdfwsettings{$fwdfwsettings{'grp3'}}='';
 903                 $fwdfwsettings{'TGT_PROT'}='';
 904                 $fwdfwsettings{'ICMP_TGT'}='';
 905         }
 906         #check timeframe
 907         if($fwdfwsettings{'TIME'} eq 'ON'){
 908                 if($fwdfwsettings{'TIME_MON'} eq '' && $fwdfwsettings{'TIME_TUE'} eq '' && $fwdfwsettings{'TIME_WED'} eq '' && $fwdfwsettings{'TIME_THU'} eq '' && $fwdfwsettings{'TIME_FRI'} eq '' && $fwdfwsettings{'TIME_SAT'} eq '' && $fwdfwsettings{'TIME_SUN'} eq ''){
 909                         $errormessage=$Lang::tr{'fwdfw err time'};
 910                 }
 911         }
 912         return $errormessage;
 913 }
 914 sub check_natport
 915 {
 916         my $val=shift;
 917         if ($val =~ "," || $val =~ ":" || $val>65536 || $val<0){
 918                 return 0;
 919         }
 920         return 1;
 921 }
 922 sub checkrule
 923 {
 924         #check valid port for NAT
 925         if($fwdfwsettings{'USE_NAT'} eq 'ON'){
 926                 if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'grp3'} eq 'TGT_PORT' && $fwdfwsettings{'dnatport'} eq ''){$fwdfwsettings{'dnatport'}=$fwdfwsettings{'TGT_PORT'};}
 927                 if($fwdfwsettings{'nat'} eq 'dnat' && !&check_natport($fwdfwsettings{'dnatport'})){
 928                         $errormessage=$Lang::tr{'fwdfw target'}.": ".$Lang::tr{'fwdfw dnat porterr'}."<br>";
 929                 }
 930                 elsif($fwdfwsettings{'USESRV'} eq 'ON' && $fwdfwsettings{'grp3'} eq 'cust_srv'){
 931                         my $custsrvport;
 932                         #get servcie Protocol and Port
 933                         foreach my $key (sort keys %customservice){
 934                                 if($fwdfwsettings{$fwdfwsettings{'grp3'}} eq $customservice{$key}[0]){
 935                                         if ($customservice{$key}[2] ne 'TCP' && $customservice{$key}[2] ne 'UDP'){
 936                                                 $errormessage=$Lang::tr{'fwdfw target'}.": ".$Lang::tr{'fwdfw dnat porterr'}."<br>";
 937                                         }
 938                                         $custsrvport= $customservice{$key}[1];
 939                                 }
 940                         }
 941                         if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} eq ''){$fwdfwsettings{'dnatport'}=$custsrvport;}
 942                 }
 943         }
 944         #check valid remark
 945         if ($fwdfwsettings{'ruleremark'} ne '' && !&validremark($fwdfwsettings{'ruleremark'})){
 946                 $errormessage.=$Lang::tr{'fwdfw err remark'}."<br>";
 947         }
 948         #check if source and target identical
 949         if ($fwdfwsettings{$fwdfwsettings{'grp1'}} eq $fwdfwsettings{$fwdfwsettings{'grp2'}} && $fwdfwsettings{$fwdfwsettings{'grp1'}} ne 'ALL'){
 950                 $errormessage.=$Lang::tr{'fwdfw err same'};
 951                 return $errormessage;
 952         }
 953         #get source and targetip address if possible
 954         my ($sip,$scidr,$tip,$tcidr);
 955         ($sip,$scidr)=&get_ip("src","grp1");
 956         ($tip,$tcidr)=&get_ip("tgt","grp2");
 957         #check same iprange in source and target
 958         if ($sip ne '' && $scidr ne '' && $tip ne '' && $tcidr ne ''){
 959                 my $networkip1=&General::getnetworkip($sip,$scidr);
 960                 my $networkip2=&General::getnetworkip($tip,$tcidr);
 961                 if ($scidr gt $tcidr){
 962                         if ( &General::IpInSubnet($networkip1,$tip,&General::iporsubtodec($tcidr))){
 963                                 $errormessage.=$Lang::tr{'fwdfw err samesub'};
 964                         }
 965                 }elsif($scidr eq $tcidr && $scidr eq '32'){
 966                         my ($sbyte1,$sbyte2,$sbyte3,$sbyte4)=split(/\./,$networkip1);
 967                         my ($tbyte1,$tbyte2,$tbyte3,$tbyte4)=split(/\./,$networkip2);
 968                                 if ($sbyte1 eq $tbyte1 && $sbyte2 eq $tbyte2 && $sbyte3 eq $tbyte3){
 969                                         $hint=$Lang::tr{'fwdfw hint ip1'}."<br>";
 970                                         $hint.=$Lang::tr{'fwdfw hint ip2'}." Source: $networkip1/$scidr Target: $networkip2/$tcidr<br>";
 971                                 }
 972                 }else{
 973                         if ( &General::IpInSubnet($networkip2,$sip,&General::iporsubtodec($scidr)) ){
 974                         $errormessage.=$Lang::tr{'fwdfw err samesub'};
 975                         }
 976                 }
 977         }
 978         #check source and destination protocol if manual
 979         if( $fwdfwsettings{'USE_SRC_PORT'} eq 'ON' && $fwdfwsettings{'USESRV'} eq 'ON'){
 980                         if($fwdfwsettings{'PROT'} ne $fwdfwsettings{'TGT_PROT'} && $fwdfwsettings{'grp3'} eq 'TGT_PORT'){
 981                         $errormessage.=$Lang::tr{'fwdfw err prot'};
 982                 }
 983                 #check source and destination protocol if source manual and dest servicegrp
 984                 if ($fwdfwsettings{'grp3'} eq 'cust_srv'){
 985                         foreach my $key (sort keys %customservice){
 986                                 if($customservice{$key}[0] eq $fwdfwsettings{$fwdfwsettings{'grp3'}}){
 987                                         if ($customservice{$key}[2] ne $fwdfwsettings{'PROT'}){
 988                                                 $errormessage.=$Lang::tr{'fwdfw err prot'};
 989                                                 last;
 990                                         }
 991                                 }
 992                         }
 993                 }
 994         }
 995 }
 996 sub checkcounter
 997 {
 998         my ($base1,$val1,$base2,$val2) = @_;
 999
1000         if($base1 eq 'cust_net_src' || $base1 eq 'cust_net_tgt'){
1001                 &dec_counter($confignet,\%customnetwork,$val1);
1002         }elsif($base1 eq 'cust_host_src' || $base1 eq 'cust_host_tgt'){
1003                 &dec_counter($confighost,\%customhost,$val1);
1004         }elsif($base1 eq 'cust_grp_src' || $base1 eq 'cust_grp_tgt'){
1005                 &dec_counter($configgrp,\%customgrp,$val1);
1006         }elsif($base1 eq 'cust_srv'){
1007                 &dec_counter($configsrv,\%customservice,$val1);
1008         }elsif($base1 eq 'cust_srvgrp'){
1009                 &dec_counter($configsrvgrp,\%customservicegrp,$val1);
1010         }
1011
1012         if($base2 eq 'cust_net_src' || $base2 eq 'cust_net_tgt'){
1013                 &inc_counter($confignet,\%customnetwork,$val2);
1014         }elsif($base2 eq 'cust_host_src' || $base2 eq 'cust_host_tgt'){
1015                 &inc_counter($confighost,\%customhost,$val2);
1016         }elsif($base2 eq 'cust_grp_src' || $base2 eq 'cust_grp_tgt'){
1017                 &inc_counter($configgrp,\%customgrp,$val2);
1018         }elsif($base2 eq 'cust_srv'){
1019                 &inc_counter($configsrv,\%customservice,$val2);
1020         }elsif($base2 eq 'cust_srvgrp'){
1021                 &inc_counter($configsrvgrp,\%customservicegrp,$val2);
1022         }
1023 }
1024 sub deleterule
1025 {
1026         my %delhash=();
1027         &General::readhasharray($fwdfwsettings{'config'}, \%delhash);
1028         foreach my $key (sort {$a <=> $b} keys %delhash){
1029                 if ($key == $fwdfwsettings{'key'}){
1030                         #check hosts/net and groups
1031                         &checkcounter($delhash{$key}[3],$delhash{$key}[4],,);
1032                         &checkcounter($delhash{$key}[5],$delhash{$key}[6],,);
1033                         #check services and groups
1034                         if ($delhash{$key}[11] eq 'ON'){
1035                                 &checkcounter($delhash{$key}[14],$delhash{$key}[15],,);
1036                         }
1037                 }
1038                 if ($key >= $fwdfwsettings{'key'}) {
1039                         my $next = $key + 1;
1040                         if (exists $delhash{$next}) {
1041                                 foreach my $i (0 .. $#{$delhash{$next}}) {
1042                                         $delhash{$key}[$i] = $delhash{$next}[$i];
1043                                 }
1044                         }
1045                 }
1046         }
1047         # Remove the very last entry.
1048         my $last_key = (sort {$a <=> $b} keys %delhash)[-1];
1049         delete $delhash{$last_key};
1050
1051         &General::writehasharray($fwdfwsettings{'config'}, \%delhash);
1052         &rules;
1053
1054         if($fwdfwsettings{'nobase'} ne 'on'){
1055                 &base;
1056         }
1057 }
1058 sub disable_rule
1059 {
1060         my $key1=shift;
1061         &General::readhasharray("$configfwdfw", \%configfwdfw);
1062         foreach my $key (sort keys %configfwdfw){
1063                         if ($key eq $key1 ){
1064                         if ($configfwdfw{$key}[2] eq 'ON'){$configfwdfw{$key}[2]='';}
1065                 }
1066         }
1067         &General::writehasharray("$configfwdfw", \%configfwdfw);
1068         &rules;
1069 }
1070 sub dec_counter
1071 {
1072         my $config=shift;
1073         my %hash=%{(shift)};
1074         my $val=shift;
1075         my $pos;
1076         #$errormessage.="ALT:config: $config , verringert wird $val <br>";
1077         &General::readhasharray($config, \%hash);
1078         foreach my $key (sort { uc($hash{$a}[0]) cmp uc($hash{$b}[0]) }  keys %hash){
1079                 if($hash{$key}[0] eq $val){
1080                         $pos=$#{$hash{$key}};
1081                         $hash{$key}[$pos] = $hash{$key}[$pos]-1;
1082                 }
1083         }
1084         &General::writehasharray($config, \%hash);
1085 }
1086 sub error
1087 {
1088         if ($errormessage) {
1089                 &Header::openbox('100%', 'left', $Lang::tr{'error messages'});
1090                 print "<class name='base'>$errormessage\n";
1091                 print "&nbsp;</class>\n";
1092                 &Header::closebox();
1093                 print"<hr>";
1094         }
1095 }
1096 sub fillselect
1097 {
1098         my %hash=%{(shift)};
1099         my $val=shift;
1100         my $key;
1101         foreach my $key (sort { uc($hash{$a}[0]) cmp uc($hash{$b}[0]) }  keys %hash){
1102                 if($hash{$key}[0] eq $val){
1103                         print"<option value='$hash{$key}[0]' selected>$hash{$key}[0]</option>";
1104                 }else{
1105                         print"<option value='$hash{$key}[0]'>$hash{$key}[0]</option>";
1106                 }
1107         }
1108 }
1109 sub gen_dd_block
1110 {
1111         my $srctgt = shift;
1112         my $grp=shift;
1113         my $helper='';
1114         my $show='';
1115         $checked{'grp1'}{$fwdfwsettings{'grp1'}}                                = 'CHECKED';
1116         $checked{'grp2'}{$fwdfwsettings{'grp2'}}                                = 'CHECKED';
1117         $checked{'grp3'}{$fwdfwsettings{'grp3'}}                                = 'CHECKED';
1118         $checked{'USE_SRC_PORT'}{$fwdfwsettings{'USE_SRC_PORT'}} = 'CHECKED';
1119         $checked{'USESRV'}{$fwdfwsettings{'USESRV'}}                    = 'CHECKED';
1120         $checked{'ACTIVE'}{$fwdfwsettings{'ACTIVE'}}                    = 'CHECKED';
1121         $checked{'LOG'}{$fwdfwsettings{'LOG'}}                                  = 'CHECKED';
1122         $checked{'TIME'}{$fwdfwsettings{'TIME'}}                                = 'CHECKED';
1123         $checked{'TIME_MON'}{$fwdfwsettings{'TIME_MON'}}                = 'CHECKED';
1124         $checked{'TIME_TUE'}{$fwdfwsettings{'TIME_TUE'}}                = 'CHECKED';
1125         $checked{'TIME_WED'}{$fwdfwsettings{'TIME_WED'}}                = 'CHECKED';
1126         $checked{'TIME_THU'}{$fwdfwsettings{'TIME_THU'}}                = 'CHECKED';
1127         $checked{'TIME_FRI'}{$fwdfwsettings{'TIME_FRI'}}                = 'CHECKED';
1128         $checked{'TIME_SAT'}{$fwdfwsettings{'TIME_SAT'}}                = 'CHECKED';
1129         $checked{'TIME_SUN'}{$fwdfwsettings{'TIME_SUN'}}                = 'CHECKED';
1130         $selected{'TIME_FROM'}{$fwdfwsettings{'TIME_FROM'}}             = 'selected';
1131         $selected{'TIME_TO'}{$fwdfwsettings{'TIME_TO'}}                 = 'selected';
1132         $selected{'ipfire'}{$fwdfwsettings{$fwdfwsettings{'grp2'}}} ='selected';
1133 print<<END;
1134                 <table width='100%' border='0'>
1135                 <tr><td width='50%' valign='top'>
1136                 <table width='100%' border='0'>
1137                 <tr><td width='1%'><input type='radio' name='$grp' value='std_net_$srctgt' $checked{$grp}{'std_net_'.$srctgt}></td><td>$Lang::tr{'fwhost stdnet'}</td><td align='right'><select name='std_net_$srctgt' style='width:200px;'>
1138 END
1139         foreach my $network (sort keys %defaultNetworks)
1140                 {
1141                         next if($defaultNetworks{$network}{'NAME'} eq "RED" && $srctgt eq 'src');
1142                         next if($defaultNetworks{$network}{'NAME'} eq "IPFire" && $srctgt eq 'tgt');
1143                         print "<option value='$defaultNetworks{$network}{'NAME'}'";
1144                         print " selected='selected'" if ($fwdfwsettings{$fwdfwsettings{$grp}} eq $defaultNetworks{$network}{'NAME'});
1145                         print ">$network</option>";
1146                 }
1147         print"</select></td></tr>";
1148         #custom networks
1149         if (! -z $confignet || $optionsfw{'SHOWDROPDOWN'} eq 'on'){
1150                 print"<tr><td><input type='radio' name='$grp' value='cust_net_$srctgt' $checked{$grp}{'cust_net_'.$srctgt}></td><td>$Lang::tr{'fwhost cust net'}</td><td align='right'><select name='cust_net_$srctgt' style='width:200px;'>";
1151                 &fillselect(\%customnetwork,$fwdfwsettings{$fwdfwsettings{$grp}});
1152                 print"</select></td>";
1153         }
1154         #custom hosts
1155         if (! -z $confighost || $optionsfw{'SHOWDROPDOWN'} eq 'on'){
1156                 print"<tr><td><input type='radio' name='$grp' value='cust_host_$srctgt' $checked{$grp}{'cust_host_'.$srctgt}></td><td>$Lang::tr{'fwhost cust addr'}</td><td align='right'><select name='cust_host_$srctgt' style='width:200px;'>";
1157                 &fillselect(\%customhost,$fwdfwsettings{$fwdfwsettings{$grp}});
1158                 print"</select></td>";
1159         }
1160         #custom groups
1161         if (! -z $configgrp || $optionsfw{'SHOWDROPDOWN'} eq 'on'){
1162                 print"<tr><td valign='top'><input type='radio' name='$grp' value='cust_grp_$srctgt' $checked{$grp}{'cust_grp_'.$srctgt}></td><td >$Lang::tr{'fwhost cust grp'}</td><td align='right'><select name='cust_grp_$srctgt' style='width:200px;'>";
1163                 foreach my $key (sort { uc($customgrp{$a}[0]) cmp uc($customgrp{$b}[0]) } keys %customgrp) {
1164                         if($helper ne $customgrp{$key}[0]){
1165                                 print"<option ";
1166                                 print "selected='selected' " if ($fwdfwsettings{$fwdfwsettings{$grp}} eq $customgrp{$key}[0]);
1167                                 print ">$customgrp{$key}[0]</option>";
1168                         }
1169                         $helper=$customgrp{$key}[0];
1170                 }
1171                 print"</select></td>";
1172         }
1173         #End left table. start right table (vpn)
1174         print"</tr></table></td><td valign='top'><table width='100%' border='0'><tr>";
1175         # CCD networks
1176         if( ! -z $configccdnet || $optionsfw{'SHOWDROPDOWN'} eq 'on'){
1177                 print"<td width='1%'><input type='radio' name='$grp' value='ovpn_net_$srctgt'  $checked{$grp}{'ovpn_net_'.$srctgt}></td><td nowrap='nowrap' width='16%'>$Lang::tr{'fwhost ccdnet'}</td><td nowrap='nowrap' width='1%' align='right'><select name='ovpn_net_$srctgt' style='width:200px;'>";
1178                 &fillselect(\%ccdnet,$fwdfwsettings{$fwdfwsettings{$grp}});
1179                 print"</select></td></tr>";
1180         }
1181         #OVPN CCD Hosts
1182         foreach my $key (sort { uc($ccdhost{$a}[0]) cmp uc($ccdhost{$b}[0]) } keys %ccdhost){
1183                 if ($ccdhost{$key}[33] ne '' ){
1184                         print"<tr><td width='1%'><input type='radio' name='$grp' value='ovpn_host_$srctgt' $checked{$grp}{'ovpn_host_'.$srctgt}></td><td nowrap='nowrap' width='16%'>$Lang::tr{'fwhost ccdhost'}</td><td nowrap='nowrap' width='1%' align='right'><select name='ovpn_host_$srctgt' style='width:200px;'>" if ($show eq '');
1185                         $show='1';
1186                         print "<option value='$ccdhost{$key}[1]'";
1187                         print "selected='selected'" if ($fwdfwsettings{$fwdfwsettings{$grp}} eq $ccdhost{$key}[1]);
1188                         print ">$ccdhost{$key}[1]</option>";
1189                 }
1190         }
1191         if($optionsfw{'SHOWDROPDOWN'} eq 'on' && $show eq ''){
1192                 print"<tr><td width='1%'><input type='radio' name='$grp' value='ovpn_host_$srctgt' $checked{$grp}{'ovpn_host_'.$srctgt}></td><td nowrap='nowrap' width='16%'>$Lang::tr{'fwhost ccdhost'}</td><td nowrap='nowrap' width='1%' align='right'><select name='ovpn_host_$srctgt' style='width:200px;'></select></td></tr>" ;
1193         }
1194         if ($show eq '1'){$show='';print"</select></td></tr>";}
1195         #OVPN N2N
1196         foreach my $key (sort { uc($ccdhost{$a}[0]) cmp uc($ccdhost{$b}[0]) } keys %ccdhost){
1197                 if ($ccdhost{$key}[3] eq 'net'){
1198                         print"<tr><td width='1%'><input type='radio' name='$grp' value='ovpn_n2n_$srctgt' $checked{$grp}{'ovpn_n2n_'.$srctgt}></td><td nowrap='nowrap' width='16%'>$Lang::tr{'fwhost ovpn_n2n'}:</td><td nowrap='nowrap' width='1%' align='right'><select name='ovpn_n2n_$srctgt' style='width:200px;'>" if ($show eq '');
1199                         $show='1';
1200                         print "<option value='$ccdhost{$key}[1]'";
1201                         print "selected='selected'" if ($fwdfwsettings{$fwdfwsettings{$grp}} eq $ccdhost{$key}[1]);
1202                         print ">$ccdhost{$key}[1]</option>";
1203                 }
1204         }
1205         if($optionsfw{'SHOWDROPDOWN'} eq 'on' && $show eq ''){
1206                 print"<tr><td width='1%'><input type='radio' name='$grp' value='ovpn_n2n_$srctgt' $checked{$grp}{'ovpn_n2n_'.$srctgt}></td><td nowrap='nowrap' width='16%'>$Lang::tr{'fwhost ovpn_n2n'}</td><td nowrap='nowrap' width='1%' align='right'><select name='ovpn_n2n_$srctgt' style='width:200px;'></select></td></tr>" ;
1207         }
1208         if ($show eq '1'){$show='';print"</select></td></tr>";}
1209         #IPsec netze
1210         foreach my $key (sort { uc($ipsecconf{$a}[1]) cmp uc($ipsecconf{$b}[1]) } keys %ipsecconf) {
1211                 if ($ipsecconf{$key}[3] eq 'net' || $optionsfw{'SHOWDROPDOWN'} eq 'on'){
1212                         print"<tr><td valign='top'><input type='radio' name='$grp' value='ipsec_net_$srctgt' $checked{$grp}{'ipsec_net_'.$srctgt}></td><td >$Lang::tr{'fwhost ipsec net'}</td><td align='right'><select name='ipsec_net_$srctgt' style='width:200px;'>" if ($show eq '');
1213                         $show='1';
1214                         print "<option ";
1215                         print "selected='selected'" if ($fwdfwsettings{$fwdfwsettings{$grp}} eq $ipsecconf{$key}[1]);
1216                         print ">$ipsecconf{$key}[1]</option>";
1217                 }
1218         }
1219         if($optionsfw{'SHOWDROPDOWN'} eq 'on' && $show eq ''){
1220                 print"<tr><td valign='top'><input type='radio' name='$grp' value='ipsec_net_$srctgt' $checked{$grp}{'ipsec_net_'.$srctgt}></td><td >$Lang::tr{'fwhost ipsec net'}</td><td align='right'><select name='ipsec_net_$srctgt' style='width:200px;'><select></td></tr>";
1221         }
1222         if ($show eq '1'){$show='';print"</select></td></tr>";}
1223
1224         print"</tr></table>";
1225         print"</td></tr></table><br>";
1226 }
1227 sub get_ip
1228 {
1229         my $val=shift;
1230         my $grp =shift;
1231         my $a;
1232         my $b;
1233         &General::readhash("/var/ipfire/ethernet/settings", \%netsettings);
1234         if ($fwdfwsettings{$grp} ne $Lang::tr{'fwhost any'}){
1235                 if ($fwdfwsettings{$grp} eq $val.'_addr'){
1236                         ($a,$b)   = split (/\//, $fwdfwsettings{$fwdfwsettings{$grp}});
1237                 }elsif($fwdfwsettings{$grp} eq 'std_net_'.$val){
1238                         if ($fwdfwsettings{$fwdfwsettings{$grp}} =~ /Gr/i){
1239                                 $a=$netsettings{'GREEN_NETADDRESS'};
1240                                 $b=&General::iporsubtocidr($netsettings{'GREEN_NETMASK'});
1241                         }elsif($fwdfwsettings{$fwdfwsettings{$grp}} =~ /Ora/i){
1242                                 $a=$netsettings{'ORANGE_NETADDRESS'};
1243                                 $b=&General::iporsubtocidr($netsettings{'ORANGE_NETMASK'});
1244                         }elsif($fwdfwsettings{$fwdfwsettings{$grp}} =~ /Bl/i){
1245                                 $a=$netsettings{'BLUE_NETADDRESS'};
1246                                 $b=&General::iporsubtocidr($netsettings{'BLUE_NETMASK'});
1247                         }elsif($fwdfwsettings{$fwdfwsettings{$grp}} =~ /OpenVPN/i){
1248                                 &General::readhash("$configovpn",\%ovpnsettings);
1249                                 ($a,$b)   = split (/\//, $ovpnsettings{'DOVPN_SUBNET'});
1250                                 $b=&General::iporsubtocidr($b);
1251                         }
1252                 }elsif($fwdfwsettings{$grp} eq 'cust_net_'.$val){
1253                         &General::readhasharray("$confignet", \%customnetwork);
1254                         foreach my $key (keys %customnetwork){
1255                                 if($customnetwork{$key}[0] eq $fwdfwsettings{$fwdfwsettings{$grp}}){
1256                                         $a=$customnetwork{$key}[1];
1257                                         $b=&General::iporsubtocidr($customnetwork{$key}[2]);
1258                                 }
1259                         }
1260                 }elsif($fwdfwsettings{$grp} eq 'cust_host_'.$val){
1261                         &General::readhasharray("$confighost", \%customhost);
1262                         foreach my $key (keys %customhost){
1263                                 if($customhost{$key}[0] eq $fwdfwsettings{$fwdfwsettings{$grp}}){
1264                                         if ($customhost{$key}[1] eq 'ip'){
1265                                                 ($a,$b)=split (/\//,$customhost{$key}[2]);
1266                                                 $b=&General::iporsubtocidr($b);
1267                                         }else{
1268                                                 if ($grp eq 'grp2'){
1269                                                         $errormessage=$Lang::tr{'fwdfw err tgt_mac'};
1270                                                 }
1271                                         }
1272                                 }
1273                         }
1274                 }
1275         }
1276         return $a,$b;
1277 }
1278 sub get_name
1279 {
1280         my $val=shift;
1281         &General::setup_default_networks(\%defaultNetworks);
1282         foreach my $network (sort keys %defaultNetworks)
1283         {
1284                 return "$network" if ($val eq $defaultNetworks{$network}{'NAME'});
1285         }
1286 }
1287 sub getsrcport
1288 {
1289         my %hash=%{(shift)};
1290         my $key=shift;
1291         if($hash{$key}[7] eq 'ON' && $hash{$key}[8] ne '' && $hash{$key}[10]){
1292                 $hash{$key}[10]=~ s/\|/,/g;
1293                 print": $hash{$key}[10]";
1294         }elsif($hash{$key}[7] eq 'ON' && $hash{$key}[8] eq 'ICMP'){
1295                 print": <br>$hash{$key}[9] ";
1296         }
1297 }
1298 sub gettgtport
1299 {
1300         my %hash=%{(shift)};
1301         my $key=shift;
1302         my $service;
1303         my $prot;
1304         if($hash{$key}[11] eq 'ON' && $hash{$key}[12] ne 'ICMP'){
1305                 if($hash{$key}[14] eq 'cust_srv'){
1306                         &General::readhasharray("$configsrv", \%customservice);
1307                         foreach my $i (sort keys %customservice){
1308                                 if($customservice{$i}[0] eq $hash{$key}[15]){
1309                                         $service = $customservice{$i}[0];
1310                                 }
1311                         }
1312                 }elsif($hash{$key}[14] eq 'cust_srvgrp'){
1313                         $service=$hash{$key}[15];
1314                 }elsif($hash{$key}[14] eq 'TGT_PORT'){
1315                         $hash{$key}[15]=~ s/\|/,/g;
1316                         $service=$hash{$key}[15];
1317                 }
1318                 if($service){
1319                         print": $service";
1320                 }
1321         }elsif($hash{$key}[11] eq 'ON' && $hash{$key}[12] eq 'ICMP'){
1322                 print":<br>$hash{$key}[13]";
1323         }
1324 }
1325 sub get_serviceports
1326 {
1327         my $type=shift;
1328         my $name=shift;
1329         &General::readhasharray("$configsrv", \%customservice);
1330         &General::readhasharray("$configsrvgrp", \%customservicegrp);
1331         my $tcp;
1332         my $udp;
1333         my $icmp;
1334         @protocols=();
1335         if($type eq 'service'){
1336                 foreach my $key (sort { uc($customservice{$a}[0]) cmp uc($customservice{$b}[0]) } keys %customservice){
1337                         if ($customservice{$key}[0] eq $name){
1338                                 push (@protocols,$customservice{$key}[2]);
1339                         }
1340                 }
1341         }elsif($type eq 'group'){
1342                 foreach my $key (sort { uc($customservicegrp{$a}[0]) cmp uc($customservicegrp{$b}[0]) } keys %customservicegrp){
1343                         if ($customservicegrp{$key}[0] eq $name){
1344                                 foreach my $key1 (sort { uc($customservice{$a}[0]) cmp uc($customservice{$b}[0]) } keys %customservice){
1345                                         if ($customservice{$key1}[0] eq $customservicegrp{$key}[2]){
1346                                                 if($customservice{$key1}[2] eq 'TCP'){
1347                                                         $tcp='TCP';
1348                                                 }elsif($customservice{$key1}[2] eq 'ICMP'){
1349                                                         $icmp='ICMP';
1350                                                 }elsif($customservice{$key1}[2] eq 'UDP'){
1351                                                         $udp='UDP';
1352                                                 }
1353                                         }
1354                                 }
1355                         }
1356                 }
1357         }
1358         if($tcp && $udp && $icmp){
1359                 push (@protocols,"All");
1360                 return @protocols;
1361         }
1362         if($tcp){
1363                 push (@protocols,"TCP");
1364         }
1365         if($udp){
1366                 push (@protocols,"UDP");
1367         }
1368         if($icmp){
1369                 push (@protocols,"ICMP");
1370         }
1371         return @protocols;
1372 }
1373 sub getcolor
1374 {
1375         my $nettype=shift;
1376         my $val=shift;
1377         my $hash=shift;
1378         if($optionsfw{'SHOWCOLORS'} eq 'on'){
1379                 #VPN networks
1380                 if ($nettype eq 'ovpn_n2n_src' || $nettype eq 'ovpn_n2n_tgt' || $nettype eq 'ovpn_net_src' || $nettype eq 'ovpn_net_tgt'|| $nettype eq 'ovpn_host_src' || $nettype eq 'ovpn_host_tgt'){
1381                         $tdcolor="style='border: 1px solid $Header::colourovpn;'";
1382                         return;
1383                 }
1384                 if ($nettype eq 'ipsec_net_src' || $nettype eq 'ipsec_net_tgt'){
1385                         $tdcolor="style='border: 1px solid $Header::colourvpn;'";
1386                         return;
1387                 }
1388                 #custom Hosts
1389                 if ($nettype eq 'cust_host_src' || $nettype eq 'cust_host_tgt'){
1390                         foreach my $key (sort keys %$hash){
1391                                 if ($$hash{$key}[0] eq $val){
1392                                         $val=$$hash{$key}[2];
1393                                 }
1394                         }
1395                 }
1396                 #ALIASE
1397                 foreach my $alias (sort keys %aliases)
1398                 {
1399                         if ($val eq $alias){
1400                                 $tdcolor="style='border: 1px solid $Header::colourred;'";
1401                                 return;
1402                         }
1403                 }
1404                 #standard networks
1405                 if ($val eq 'GREEN'){
1406                         $tdcolor="style='border: 1px solid $Header::colourgreen;'";
1407                 }elsif ($val eq 'ORANGE'){
1408                         $tdcolor="style='border: 1px solid $Header::colourorange;'";
1409                 }elsif ($val eq 'BLUE'){
1410                         $tdcolor="style='border: 1px solid $Header::colourblue;'";
1411                 }elsif ($val eq 'RED'){
1412                         $tdcolor="style='border: 1px solid $Header::colourred;'";
1413                 }elsif ($val eq 'IPFire' ){
1414                         $tdcolor="style='border: 1px solid $Header::colourred;'";
1415                 }elsif($val =~ /^(.*?)\/(.*?)$/){
1416                         my ($sip,$scidr) = split ("/",$val);
1417                         if ( &General::IpInSubnet($sip,$netsettings{'ORANGE_ADDRESS'},$netsettings{'ORANGE_NETMASK'})){
1418                                 $tdcolor="style='border: 1px solid $Header::colourorange;'";
1419                         }
1420                         if ( &General::IpInSubnet($sip,$netsettings{'GREEN_ADDRESS'},$netsettings{'GREEN_NETMASK'})){
1421                                 $tdcolor="style='border: 1px solid $Header::colourgreen;'";
1422                         }
1423                         if ( &General::IpInSubnet($sip,$netsettings{'BLUE_ADDRESS'},$netsettings{'BLUE_NETMASK'})){
1424                                 $tdcolor="style='border: 1px solid $Header::colourblue;'";
1425                         }
1426                 }elsif ($val eq 'Default IP'){
1427                         $tdcolor="style='border: 1px solid $Header::colourred;'";
1428                 }else{
1429                         $tdcolor='';
1430                 }
1431         }
1432 }
1433 sub hint
1434 {
1435         if ($hint) {
1436                 &Header::openbox('100%', 'left', $Lang::tr{'fwhost hint'});
1437                 print "<class name='base'>$hint\n";
1438                 print "&nbsp;</class>\n";
1439                 &Header::closebox();
1440                 print"<hr>";
1441         }
1442 }
1443 sub inc_counter
1444 {
1445         my $config=shift;
1446         my %hash=%{(shift)};
1447         my $val=shift;
1448         my $pos;
1449
1450         &General::readhasharray($config, \%hash);
1451         foreach my $key (sort { uc($hash{$a}[0]) cmp uc($hash{$b}[0]) }  keys %hash){
1452                 if($hash{$key}[0] eq $val){
1453                         $pos=$#{$hash{$key}};
1454                         $hash{$key}[$pos] = $hash{$key}[$pos]+1;
1455                 }
1456         }
1457         &General::writehasharray($config, \%hash);
1458 }
1459 sub newrule
1460 {
1461         &error;
1462         &General::setup_default_networks(\%defaultNetworks);
1463         &General::readhash("/var/ipfire/ethernet/settings", \%netsettings);
1464         #read all configfiles
1465         &General::readhasharray("$configccdnet", \%ccdnet);
1466         &General::readhasharray("$confignet", \%customnetwork);
1467         &General::readhasharray("$configccdhost", \%ccdhost);
1468         &General::readhasharray("$confighost", \%customhost);
1469         &General::readhasharray("$configccdhost", \%ccdhost);
1470         &General::readhasharray("$configgrp", \%customgrp);
1471         &General::readhasharray("$configipsec", \%ipsecconf);
1472         &General::get_aliases(\%aliases);
1473         my %checked=();
1474         my $helper;
1475         my $sum=0;
1476         if($fwdfwsettings{'config'} eq ''){$fwdfwsettings{'config'}=$configfwdfw;}
1477         my $config=$fwdfwsettings{'config'};
1478         my %hash=();
1479         $checked{'grp1'}{$fwdfwsettings{'grp1'}}                                = 'CHECKED';
1480         $checked{'grp2'}{$fwdfwsettings{'grp2'}}                                = 'CHECKED';
1481         $checked{'grp3'}{$fwdfwsettings{'grp3'}}                                = 'CHECKED';
1482         $checked{'USE_SRC_PORT'}{$fwdfwsettings{'USE_SRC_PORT'}} = 'CHECKED';
1483         $checked{'USESRV'}{$fwdfwsettings{'USESRV'}}                    = 'CHECKED';
1484         $checked{'ACTIVE'}{$fwdfwsettings{'ACTIVE'}}                    = 'CHECKED';
1485         $checked{'LOG'}{$fwdfwsettings{'LOG'}}                                  = 'CHECKED';
1486         $checked{'TIME'}{$fwdfwsettings{'TIME'}}                                = 'CHECKED';
1487         $checked{'TIME_MON'}{$fwdfwsettings{'TIME_MON'}}                = 'CHECKED';
1488         $checked{'TIME_TUE'}{$fwdfwsettings{'TIME_TUE'}}                = 'CHECKED';
1489         $checked{'TIME_WED'}{$fwdfwsettings{'TIME_WED'}}                = 'CHECKED';
1490         $checked{'TIME_THU'}{$fwdfwsettings{'TIME_THU'}}                = 'CHECKED';
1491         $checked{'TIME_FRI'}{$fwdfwsettings{'TIME_FRI'}}                = 'CHECKED';
1492         $checked{'TIME_SAT'}{$fwdfwsettings{'TIME_SAT'}}                = 'CHECKED';
1493         $checked{'TIME_SUN'}{$fwdfwsettings{'TIME_SUN'}}                = 'CHECKED';
1494         $checked{'USE_NAT'}{$fwdfwsettings{'USE_NAT'}}                  = 'CHECKED';
1495         $selected{'TIME_FROM'}{$fwdfwsettings{'TIME_FROM'}}             = 'selected';
1496         $selected{'TIME_TO'}{$fwdfwsettings{'TIME_TO'}}                 = 'selected';
1497         $selected{'ipfire'}{$fwdfwsettings{$fwdfwsettings{'grp2'}}} ='selected';
1498         #check if update and get values
1499         if($fwdfwsettings{'updatefwrule'} eq 'on' || $fwdfwsettings{'copyfwrule'} eq 'on' && !$errormessage){
1500                 &General::readhasharray("$config", \%hash);
1501                 foreach my $key (sort keys %hash){
1502                         $sum++;
1503                         if ($key eq $fwdfwsettings{'key'}){
1504                                 $fwdfwsettings{'oldrulenumber'}                 = $fwdfwsettings{'key'};
1505                                 $fwdfwsettings{'RULE_ACTION'}                   = $hash{$key}[0];
1506                                 $fwdfwsettings{'chain'}                                 = $hash{$key}[1];
1507                                 $fwdfwsettings{'ACTIVE'}                                = $hash{$key}[2];
1508                                 $fwdfwsettings{'grp1'}                                  = $hash{$key}[3];
1509                                 $fwdfwsettings{$fwdfwsettings{'grp1'}}  = $hash{$key}[4];
1510                                 $fwdfwsettings{'grp2'}                                  = $hash{$key}[5];
1511                                 $fwdfwsettings{$fwdfwsettings{'grp2'}}  = $hash{$key}[6];
1512                                 $fwdfwsettings{'USE_SRC_PORT'}                  = $hash{$key}[7];
1513                                 $fwdfwsettings{'PROT'}                                  = $hash{$key}[8];
1514                             $fwdfwsettings{'ICMP_TYPES'}                        = $hash{$key}[9];
1515                             $fwdfwsettings{'SRC_PORT'}                          = $hash{$key}[10];
1516                             $fwdfwsettings{'USESRV'}                            = $hash{$key}[11];
1517                             $fwdfwsettings{'TGT_PROT'}                          = $hash{$key}[12];
1518                             $fwdfwsettings{'ICMP_TGT'}                          = $hash{$key}[13];
1519                             $fwdfwsettings{'grp3'}                                      = $hash{$key}[14];
1520                             $fwdfwsettings{$fwdfwsettings{'grp3'}}      = $hash{$key}[15];
1521                             $fwdfwsettings{'ruleremark'}                        = $hash{$key}[16];
1522                             $fwdfwsettings{'LOG'}                                       = $hash{$key}[17];
1523                             $fwdfwsettings{'TIME'}                                      = $hash{$key}[18];
1524                                 $fwdfwsettings{'TIME_MON'}                              = $hash{$key}[19];
1525                                 $fwdfwsettings{'TIME_TUE'}                              = $hash{$key}[20];
1526                                 $fwdfwsettings{'TIME_WED'}                              = $hash{$key}[21];
1527                                 $fwdfwsettings{'TIME_THU'}                              = $hash{$key}[22];
1528                                 $fwdfwsettings{'TIME_FRI'}                              = $hash{$key}[23];
1529                                 $fwdfwsettings{'TIME_SAT'}                              = $hash{$key}[24];
1530                                 $fwdfwsettings{'TIME_SUN'}                              = $hash{$key}[25];
1531                                 $fwdfwsettings{'TIME_FROM'}                             = $hash{$key}[26];
1532                                 $fwdfwsettings{'TIME_TO'}                               = $hash{$key}[27];
1533                                 $fwdfwsettings{'USE_NAT'}                               = $hash{$key}[28];
1534                                 $fwdfwsettings{'nat'}                                   = $hash{$key}[31]; #changed order
1535                                 $fwdfwsettings{$fwdfwsettings{'nat'}}   = $hash{$key}[29];
1536                                 $fwdfwsettings{'dnatport'}                              = $hash{$key}[30];
1537                                 $checked{'grp1'}{$fwdfwsettings{'grp1'}}                                = 'CHECKED';
1538                                 $checked{'grp2'}{$fwdfwsettings{'grp2'}}                                = 'CHECKED';
1539                                 $checked{'grp3'}{$fwdfwsettings{'grp3'}}                                = 'CHECKED';
1540                                 $checked{'USE_SRC_PORT'}{$fwdfwsettings{'USE_SRC_PORT'}} = 'CHECKED';
1541                                 $checked{'USESRV'}{$fwdfwsettings{'USESRV'}}                    = 'CHECKED';
1542                                 $checked{'ACTIVE'}{$fwdfwsettings{'ACTIVE'}}                    = 'CHECKED';
1543                                 $checked{'LOG'}{$fwdfwsettings{'LOG'}}                                  = 'CHECKED';
1544                                 $checked{'TIME'}{$fwdfwsettings{'TIME'}}                                = 'CHECKED';
1545                                 $checked{'TIME_MON'}{$fwdfwsettings{'TIME_MON'}}                = 'CHECKED';
1546                                 $checked{'TIME_TUE'}{$fwdfwsettings{'TIME_TUE'}}                = 'CHECKED';
1547                                 $checked{'TIME_WED'}{$fwdfwsettings{'TIME_WED'}}                = 'CHECKED';
1548                                 $checked{'TIME_THU'}{$fwdfwsettings{'TIME_THU'}}                = 'CHECKED';
1549                                 $checked{'TIME_FRI'}{$fwdfwsettings{'TIME_FRI'}}                = 'CHECKED';
1550                                 $checked{'TIME_SAT'}{$fwdfwsettings{'TIME_SAT'}}                = 'CHECKED';
1551                                 $checked{'TIME_SUN'}{$fwdfwsettings{'TIME_SUN'}}                = 'CHECKED';
1552                                 $checked{'USE_NAT'}{$fwdfwsettings{'USE_NAT'}}                  = 'CHECKED';
1553                                 $checked{'nat'}{$fwdfwsettings{'nat'}}                                  = 'CHECKED';
1554                                 $selected{'TIME_FROM'}{$fwdfwsettings{'TIME_FROM'}}             = 'selected';
1555                                 $selected{'TIME_TO'}{$fwdfwsettings{'TIME_TO'}}                 = 'selected';
1556                                 $selected{'ipfire'}{$fwdfwsettings{$fwdfwsettings{'grp2'}}} ='selected';
1557                                 $selected{'dnat'}{$fwdfwsettings{$fwdfwsettings{'nat'}}} ='selected';
1558                                 $selected{'snat'}{$fwdfwsettings{$fwdfwsettings{'nat'}}} ='selected';
1559                         }
1560                 }
1561                 $fwdfwsettings{'oldgrp1a'}=$fwdfwsettings{'grp1'};
1562                 $fwdfwsettings{'oldgrp1b'}=$fwdfwsettings{$fwdfwsettings{'grp1'}};
1563                 $fwdfwsettings{'oldgrp2a'}=$fwdfwsettings{'grp2'};
1564                 $fwdfwsettings{'oldgrp2b'}=$fwdfwsettings{$fwdfwsettings{'grp2'}};
1565                 $fwdfwsettings{'oldgrp3a'}=$fwdfwsettings{'grp3'};
1566                 $fwdfwsettings{'oldgrp3b'}=$fwdfwsettings{$fwdfwsettings{'grp3'}};
1567                 $fwdfwsettings{'oldusesrv'}=$fwdfwsettings{'USESRV'};
1568                 $fwdfwsettings{'oldruleremark'}=$fwdfwsettings{'ruleremark'};
1569                 $fwdfwsettings{'oldnat'}=$fwdfwsettings{'USE_NAT'};
1570                 if ($fwdfwsettings{'config'} eq "${General::swroot}/forward/dmz"){
1571                         $fwdfwsettings{'oldruletype'}='DMZ';
1572                 }else{
1573                         $fwdfwsettings{'oldruletype'}=$fwdfwsettings{'chain'};
1574                 }
1575                 #check if manual ip (source) is orange network
1576                 if ($fwdfwsettings{'grp1'} eq 'src_addr'){
1577                         my ($sip,$scidr) = split("/",$fwdfwsettings{$fwdfwsettings{'grp1'}});
1578                         if ( &General::IpInSubnet($sip,$netsettings{'ORANGE_ADDRESS'},$netsettings{'ORANGE_NETMASK'})){
1579                                 $fwdfwsettings{'oldorange'} ='on';
1580                         }
1581                 }
1582         }else{
1583                 $fwdfwsettings{'ACTIVE'}='ON';
1584                 $checked{'ACTIVE'}{$fwdfwsettings{'ACTIVE'}} = 'CHECKED';
1585                 $fwdfwsettings{'oldgrp1a'}=$fwdfwsettings{'grp1'};
1586                 $fwdfwsettings{'oldgrp1b'}=$fwdfwsettings{$fwdfwsettings{'grp1'}};
1587                 $fwdfwsettings{'oldgrp2a'}=$fwdfwsettings{'grp2'};
1588                 $fwdfwsettings{'oldgrp2b'}=$fwdfwsettings{$fwdfwsettings{'grp2'}};
1589                 $fwdfwsettings{'oldgrp3a'}=$fwdfwsettings{'grp3'};
1590                 $fwdfwsettings{'oldgrp3b'}=$fwdfwsettings{$fwdfwsettings{'grp3'}};
1591                 $fwdfwsettings{'oldusesrv'}=$fwdfwsettings{'USESRV'};
1592                 $fwdfwsettings{'oldruleremark'}=$fwdfwsettings{'ruleremark'};
1593                 $fwdfwsettings{'oldnat'}=$fwdfwsettings{'USE_NAT'};
1594                 #check if manual ip (source) is orange network
1595                 if ($fwdfwsettings{'grp1'} eq 'src_addr'){
1596                         my ($sip,$scidr) = split("/",$fwdfwsettings{$fwdfwsettings{'grp1'}});
1597                         if ( &General::IpInSubnet($sip,$netsettings{'ORANGE_ADDRESS'},$netsettings{'ORANGE_NETMASK'})){
1598                                 $fwdfwsettings{'oldorange'} ='on';
1599                         }
1600                 }
1601         }
1602         &Header::openbox('100%', 'left', $Lang::tr{'fwdfw addrule'});
1603         if ($fwdfwsettings{'TIME'} eq 'ON'){
1604                 $fwdfwsettings{'TIME_FROM'} = &timeconvert($fwdfwsettings{'TIME_FROM'},'');
1605                 $fwdfwsettings{'TIME_TO'} = &timeconvert($fwdfwsettings{'TIME_TO'},'');
1606         }
1607 print "<form method='post'>";
1608         &Header::closebox();
1609         &Header::openbox('100%', 'left', $Lang::tr{'fwdfw source'});
1610         #------SOURCE-------------------------------------------------------
1611         print<<END;
1612                 <table width='100%' border='0'>
1613                 <tr><td width='1%'><input type='radio' name='grp1' value='src_addr'  checked></td><td colspan='5'>$Lang::tr{'fwdfw sourceip'}<input type='TEXT' name='src_addr' value='$fwdfwsettings{'src_addr'}' size='16' maxlength='17'></td></tr>
1614                 <tr><td colspan='7'><hr style='border:dotted #BFBFBF; border-width:1px 0 0 0 ; ' /></td></tr>
1615                 </table>
1616 END
1617         &gen_dd_block('src','grp1');
1618                 print<<END;
1619                 <tr><td colspan='8'><hr style='border:dotted #BFBFBF; border-width:1px 0 0 0 ; ' /></td></tr></table>
1620                 <table width='100%' border='0'>
1621                 <tr><td width='1%'><input type='checkbox' name='USE_SRC_PORT' value='ON' $checked{'USE_SRC_PORT'}{'ON'}></td><td width='51%' colspan='3'>$Lang::tr{'fwdfw use srcport'}</td>
1622                 <td width='15%' nowrap='nowrap'>$Lang::tr{'fwdfw man port'}</td><td><select name='PROT'>
1623 END
1624                 foreach ("TCP","UDP","GRE","ESP","AH","ICMP")
1625                 {
1626                         if ($_ eq $fwdfwsettings{'PROT'})
1627                         {
1628                                 print"<option selected>$_</option>";
1629                         }else{
1630                                 print"<option>$_</option>";
1631                         }
1632                 }
1633                 $fwdfwsettings{'SRC_PORT'}=~ s/\|/,/g;
1634                 print<<END;
1635                 </select></td><td align='right'><input type='text' name='SRC_PORT' value='$fwdfwsettings{'SRC_PORT'}' maxlength='20' size='18' ></td></tr>
1636                 <tr><td></td><td></td><td></td><td></td><td nowrap='nowrap'>$Lang::tr{'fwhost icmptype'}</td><td colspan='2'><select name='ICMP_TYPES' style='width:230px;'>
1637 END
1638                 &General::readhasharray("${General::swroot}/fwhosts/icmp-types", \%icmptypes);
1639                 print"<option>All ICMP-Types</option>";
1640                 foreach my $key (sort { uc($icmptypes{$a}[0]) cmp uc($icmptypes{$b}[0]) } keys %icmptypes){
1641                         if($fwdfwsettings{'ICMP_TYPES'} eq "$icmptypes{$key}[0]"){
1642                                 print"<option selected>$icmptypes{$key}[0] ($icmptypes{$key}[1])</option>";
1643                         }else{
1644                                 print"<option>$icmptypes{$key}[0] ($icmptypes{$key}[1])</option>";
1645                         }
1646                 }
1647                 print<<END;
1648                 </select></td></tr></table><br><hr>
1649 END
1650                 &Header::closebox();
1651
1652                 #---TARGET------------------------------------------------------
1653                 &Header::openbox('100%', 'left', $Lang::tr{'fwdfw target'});
1654                 print<<END;
1655                 <table width='100%' border='0'>
1656                 <tr><td width='1%'><input type='radio' name='grp2' value='tgt_addr'  checked></td><td width='57%' nowrap='nowrap'>$Lang::tr{'fwdfw targetip'}<input type='TEXT' name='tgt_addr' value='$fwdfwsettings{'tgt_addr'}' size='16' maxlength='17'><td width='1%'><input type='radio' name='grp2' value='ipfire'  $checked{'grp2'}{'ipfire'}></td><td><b>IPFire</b></td>
1657 END
1658                 if (! -z "${General::swroot}/ethernet/aliases"){
1659                         print"<td align='right'><select name='ipfire' style='width:200px;'>";
1660                         print "<option value='Default IP' $selected{'ipfire'}{'Default IP'}>Default IP</option>";
1661
1662                         foreach my $alias (sort keys %aliases)
1663                         {
1664                                 print "<option value='$alias' $selected{'ipfire'}{$alias}>$alias</option>";
1665                         }
1666
1667                 }else{
1668                         print"<td style='width:200px;'><input type='hidden' name ='ipfire' value='Default IP'>";
1669                 }
1670                 print<<END;
1671                 </td></tr>
1672                 <tr><td colspan='7'><hr style='border:dotted #BFBFBF; border-width:1px 0 0 0 ; ' /></td></tr></table>
1673 END
1674                 &gen_dd_block('tgt','grp2');
1675                 print<<END;
1676                 <b>$Lang::tr{'fwhost attention'}:</b><br>
1677                 $Lang::tr{'fwhost macwarn'}<br><hr style='border:dotted #BFBFBF; border-width:1px 0 0 0 ; '></hr><br>
1678                 <table width='100%' border='0'>
1679                 <tr><td width='1%'><input type='checkbox' name='USESRV' value='ON' $checked{'USESRV'}{'ON'} ></td><td width='48%'>$Lang::tr{'fwdfw use srv'}</td><td width='1%'><input type='radio' name='grp3' value='cust_srv' checked></td><td nowrap='nowrap'>$Lang::tr{'fwhost cust service'}</td><td width='1%' colspan='2'><select name='cust_srv'style='min-width:230px;' >
1680 END
1681                 &General::readhasharray("$configsrv", \%customservice);
1682                 foreach my $key (sort { uc($customservice{$a}[0]) cmp uc($customservice{$b}[0]) } keys %customservice){
1683                         print"<option ";
1684                         print"selected='selected'" if ($fwdfwsettings{$fwdfwsettings{'grp3'}} eq $customservice{$key}[0]);
1685                         print"value='$customservice{$key}[0]'>$customservice{$key}[0]</option>";
1686                 }
1687                 print<<END;
1688                 </select></td></tr>
1689                 <tr><td colspan='2'></td><td><input type='radio' name='grp3' value='cust_srvgrp' $checked{'grp3'}{'cust_srvgrp'}></td><td nowrap='nowrap'>$Lang::tr{'fwhost cust srvgrp'}:</td><td colspan='2'><select name='cust_srvgrp' style='min-width:230px;' >
1690 END
1691                 &General::readhasharray("$configsrvgrp", \%customservicegrp);
1692                 my $helper;
1693                 foreach my $key (sort { uc($customservicegrp{$a}[0]) cmp uc($customservicegrp{$b}[0]) } keys %customservicegrp){
1694                         if ($helper ne $customservicegrp{$key}[0]){
1695                                 print"<option ";
1696                                 print"selected='selected'" if ($fwdfwsettings{$fwdfwsettings{'grp3'}} eq $customservicegrp{$key}[0]);
1697                                 print">$customservicegrp{$key}[0]</option>";
1698                         }
1699                         $helper=$customservicegrp{$key}[0];
1700                 }
1701                 print<<END;
1702                 </select></td></tr>
1703                 <tr><td colspan='2'></td><td><input type='radio' name='grp3' value='TGT_PORT' $checked{'grp3'}{'TGT_PORT'}></td><td>$Lang::tr{'fwdfw man port'}</td><td><select name='TGT_PROT'>
1704 END
1705                 foreach ("TCP","UDP","GRE","ESP","AH","ICMP")
1706                 {
1707                         if ($_ eq $fwdfwsettings{'TGT_PROT'})
1708                         {
1709                                 print"<option selected>$_</option>";
1710                         }else{
1711                                 print"<option>$_</option>";
1712                         }
1713                 }
1714                 $fwdfwsettings{'TGT_PORT'} =~ s/\|/,/g;
1715                 print<<END;
1716                 </select></td><td align='right'><input type='text' name='TGT_PORT' value='$fwdfwsettings{'TGT_PORT'}' maxlength='20' size='18' ></td></tr>
1717                 <tr><td colspan='2'></td><td></td><td>$Lang::tr{'fwhost icmptype'}</td><td colspan='2'><select name='ICMP_TGT' style='min-width:230px;'>
1718 END
1719                 &General::readhasharray("${General::swroot}/fwhosts/icmp-types", \%icmptypes);
1720                 print"<option>All ICMP-Types</option>";
1721                 foreach my $key (sort { uc($icmptypes{$a}[0]) cmp uc($icmptypes{$b}[0]) }keys %icmptypes){
1722                         if($fwdfwsettings{'ICMP_TGT'} eq "$icmptypes{$key}[0]"){
1723                                 print"<option selected>$icmptypes{$key}[0] ($icmptypes{$key}[1])</option>";
1724                         }else{
1725                                 print"<option>$icmptypes{$key}[0] ($icmptypes{$key}[1])</option>";
1726                         }
1727                 }
1728                 print<<END;
1729                 </select></td></tr>
1730                 </table><br><hr>
1731
1732 END
1733                 &Header::closebox;
1734                 #---SNAT / DNAT ------------------------------------------------
1735                 &Header::openbox('100%', 'left', 'NAT');
1736                 print<<END;
1737                 <table width='100%' border='0'>
1738                 <tr><td width='1%'><input type='checkbox' name='USE_NAT' value='ON' $checked{'USE_NAT'}{'ON'}></td><td width='15%'>$Lang::tr{'fwdfw use nat'}</td><td colspan='5'></td></tr>
1739                 <tr><td colspan='2'></td><td width='1%'><input type='radio' name='nat' value='dnat' checked ></td><td width='50%'>$Lang::tr{'fwdfw dnat'}</td>
1740 END
1741                 print"<td width='8%'>IPFire: </td><td width='20%' align='right'><select name='dnat' style='width:140px;'>";
1742                 print "<option value='ALL' $selected{'dnat'}{$Lang::tr{'all'}}>$Lang::tr{'all'}</option>";
1743                 print "<option value='Default IP' $selected{'dnat'}{'Default IP'}>Default IP</option>";
1744                 foreach my $alias (sort keys %aliases)
1745                 {
1746                         print "<option value='$alias' $selected{'dnat'}{$alias}>$alias</option>";
1747                 }
1748                 print"</td></tr>";
1749                 print"<tr><td colspan='4'></td><td>Port: </td><td align='right'><input type='text' name='dnatport' style='width:130px;' value=$fwdfwsettings{'dnatport'}> </td></tr>";
1750                 print"<tr><td colspan='8'><br></td></tr>";
1751                 #SNAT
1752                 print"<tr><td colspan='2'></td><td width='1%'><input type='radio' name='nat' value='snat'  $checked{'nat'}{'snat'}></td><td width='20%'>$Lang::tr{'fwdfw snat'}</td>";
1753                 print"<td width='8%'>IPFire: </td><td width='20%' align='right'><select name='snat' style='width:140px;'>";
1754                 print "<option value='Default IP' $selected{'snat'}{'Default IP'}>Default IP</option>";
1755                 foreach my $alias (sort keys %aliases)
1756                         {
1757                                 print "<option value='$alias' $selected{'snat'}{$alias}>$alias</option>";
1758                         }
1759                 foreach my $network (sort keys %defaultNetworks)
1760                 {
1761                         next if($defaultNetworks{$network}{'NAME'} eq "RED");
1762                         next if($defaultNetworks{$network}{'NAME'} eq "IPFire");
1763                         next if($defaultNetworks{$network}{'NAME'} eq "ALL");
1764                         next if($defaultNetworks{$network}{'NAME'} =~ /OpenVPN/i);
1765                         print "<option value='$defaultNetworks{$network}{'NAME'}'";
1766                         print " selected='selected'" if ($fwdfwsettings{$fwdfwsettings{'nat'}} eq $defaultNetworks{$network}{'NAME'});
1767                         print ">$network</option>";
1768                 }
1769                 print"</table>";
1770                 print"<hr>";
1771                 &Header::closebox();
1772                 #---Activate/logging/remark-------------------------------------
1773                 &Header::openbox('100%', 'left', $Lang::tr{'fwdfw additional'});
1774                 print<<END;
1775                 <table width='100%' border='0'>
1776                 <tr><td nowrap>$Lang::tr{'fwdfw rule action'}</td><td><select name='RULE_ACTION'>
1777 END
1778                 foreach ("ACCEPT","DROP","REJECT")
1779                 {
1780                         if($fwdfwsettings{'updatefwrule'} eq 'on'){
1781                                 print"<option value='$_'";
1782                                 print "selected='selected'" if ($fwdfwsettings{'RULE_ACTION'} eq $_);
1783                                 print">$Lang::tr{'fwdfw '.$_}</option>";
1784                         }else{
1785                                 if($fwdfwsettings{'POLICY'} eq 'MODE2'){
1786                                         $fwdfwsettings{'RULE_ACTION'} = 'DROP';
1787                                 }
1788                                 if ($_ eq $fwdfwsettings{'RULE_ACTION'})
1789                                 {
1790                                         print"<option value='$_' selected>$Lang::tr{'fwdfw '.$_}</option>";
1791                                 }else{
1792                                         print"<option value='$_'>$Lang::tr{'fwdfw '.$_}</option>";
1793                                 }
1794                         }
1795                 }
1796                 print"</select></td></tr>";
1797                 print"<tr><td width='12%'>$Lang::tr{'remark'}:</td><td align='left'><input type='text' name='ruleremark' size='40' maxlength='255' value='$fwdfwsettings{'ruleremark'}'></td></tr>";
1798                 if($fwdfwsettings{'updatefwrule'} eq 'on' || $fwdfwsettings{'copyfwrule'} eq 'on'){
1799                         print "<tr><td width='12%'>$Lang::tr{'fwdfw rulepos'}:</td><td><select name='rulepos' >";
1800                         for (my $count =1; $count <= $sum; $count++){
1801                                 print"<option value='$count' ";
1802                                 print"selected='selected'" if($fwdfwsettings{'oldrulenumber'} eq $count);
1803                                 print">$count</option>";
1804                         }
1805                         print"</select></td></tr>";
1806                 }else{
1807                         print "<tr><td width='12%'>$Lang::tr{'fwdfw rulepos'}:</td><td><input type='text' name='rulepos' size='2'></td></tr>";
1808                 }
1809
1810                 print<<END;
1811                 </table><table width='100%'>
1812                 <tr><td width='1%'><input type='checkbox' name='ACTIVE' value='ON' $checked{'ACTIVE'}{'ON'}></td><td>$Lang::tr{'fwdfw rule activate'}</td></tr>
1813                 <tr><td width='1%'><input type='checkbox' name='LOG' value='ON'  $checked{'LOG'}{'ON'}  ></td><td>$Lang::tr{'fwdfw log rule'}</td></tr>
1814                 </table><br><hr>
1815 END
1816                 &Header::closebox();
1817                 #---ADD TIMEFRAME-----------------------------------------------
1818                 &Header::openbox('100%', 'left', $Lang::tr{'fwdfw timeframe'});
1819                 print<<END;
1820                 <table width='70%' border='0'>
1821                 <tr><td width='1%'><input type='checkbox' name='TIME' value='ON' $checked{'TIME'}{'ON'}></td><td colspan='4'>$Lang::tr{'fwdfw timeframe'}</td></tr>
1822                 <tr><td colspan='7'>&nbsp</td></tr>
1823                 <tr>
1824                         <td  align='left'>$Lang::tr{'time'}:</td>
1825                         <td width='30%' align='left'>$Lang::tr{'advproxy monday'} $Lang::tr{'advproxy tuesday'} $Lang::tr{'advproxy wednesday'} $Lang::tr{'advproxy thursday'} $Lang::tr{'advproxy friday'} $Lang::tr{'advproxy saturday'} $Lang::tr{'advproxy sunday'}</td>
1826                         <td width='15%' align='left'>$Lang::tr{'advproxy from'}</td>
1827                         <td width='15%' align='left'>$Lang::tr{'advproxy to'}</td>
1828                 </tr>
1829                 <tr>
1830                         <td  align='right'></td>
1831                         <td width='30%' align='left'>
1832                                 <input type='checkbox' name='TIME_MON' value='on' $checked{'TIME_MON'}{'on'} />
1833                                 <input type='checkbox' name='TIME_TUE' value='on' $checked{'TIME_TUE'}{'on'} />
1834                                 <input type='checkbox' name='TIME_WED' value='on' $checked{'TIME_WED'}{'on'} />
1835                                 <input type='checkbox' name='TIME_THU' value='on' $checked{'TIME_THU'}{'on'} />
1836                                 <input type='checkbox' name='TIME_FRI' value='on' $checked{'TIME_FRI'}{'on'} />
1837                                 <input type='checkbox' name='TIME_SAT' value='on' $checked{'TIME_SAT'}{'on'} />
1838                                 <input type='checkbox' name='TIME_SUN' value='on' $checked{'TIME_SUN'}{'on'} />
1839                         </td>
1840                         <td><select name='TIME_FROM'>
1841 END
1842                 for (my $i=0;$i<=23;$i++) {
1843                         $i = sprintf("%02s",$i);
1844                         for (my $j=0;$j<=45;$j+=15) {
1845                                 $j = sprintf("%02s",$j);
1846                                 my $time = $i.":".$j;
1847                                 print "\t\t\t\t\t<option $selected{'TIME_FROM'}{$time}>$i:$j</option>\n";
1848                         }
1849                 }
1850                 print<<END;
1851                         </select></td>
1852                         <td><select name='TIME_TO'>
1853 END
1854                 for (my $i=0;$i<=23;$i++) {
1855                         $i = sprintf("%02s",$i);
1856                         for (my $j=0;$j<=45;$j+=15) {
1857                                 $j = sprintf("%02s",$j);
1858                                 my $time = $i.":".$j;
1859                                 print "\t\t\t\t\t<option $selected{'TIME_TO'}{$time}>$i:$j</option>\n";
1860                         }
1861                 }
1862                 print<<END;
1863                 </select></td></tr>
1864                 </table><br><hr>
1865 END
1866                 #---ACTION------------------------------------------------------
1867                 if($fwdfwsettings{'updatefwrule'} ne 'on'){
1868                         print<<END;
1869                         <table border='0' width='100%'>
1870                         <tr><td align='right'><input type='submit' value='$Lang::tr{'add'}' style='min-width:100px;' />
1871                         <input type='hidden' name='config' value='$config' >
1872                         <input type='hidden' name='ACTION' value='saverule' >
1873                         </form><form method='post' style='display:inline'><input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;'><input type='hidden' name='ACTION' value'reset'></td></td>
1874                         </table></form>
1875 END
1876                 }else{
1877                         print<<END;
1878                         <table border='0' width='100%'>
1879                         <tr><td align='right'><input type='submit' value='$Lang::tr{'fwdfw change'}' style='min-width:100px;' /><input type='hidden' name='updatefwrule' value='$fwdfwsettings{'updatefwrule'}'><input type='hidden' name='key' value='$fwdfwsettings{'key'}'>
1880                         <input type='hidden' name='oldgrp1a' value='$fwdfwsettings{'oldgrp1a'}' />
1881                         <input type='hidden' name='oldgrp1b' value='$fwdfwsettings{'oldgrp1b'}' />
1882                         <input type='hidden' name='oldgrp2a' value='$fwdfwsettings{'oldgrp2a'}' />
1883                         <input type='hidden' name='oldgrp2b' value='$fwdfwsettings{'oldgrp2b'}' />
1884                         <input type='hidden' name='oldgrp3a' value='$fwdfwsettings{'oldgrp3a'}' />
1885                         <input type='hidden' name='oldgrp3b' value='$fwdfwsettings{'oldgrp3b'}' />
1886                         <input type='hidden' name='oldusesrv' value='$fwdfwsettings{'oldusesrv'}' />
1887                         <input type='hidden' name='oldrulenumber' value='$fwdfwsettings{'oldrulenumber'}' />
1888                         <input type='hidden' name='rulenumber' value='$fwdfwsettings{'rulepos'}' />
1889                         <input type='hidden' name='oldruleremark' value='$fwdfwsettings{'oldruleremark'}' />
1890                         <input type='hidden' name='oldorange' value='$fwdfwsettings{'oldorange'}' />
1891                         <input type='hidden' name='oldnat' value='$fwdfwsettings{'oldnat'}' />
1892                         <input type='hidden' name='oldruletype' value='$fwdfwsettings{'oldruletype'}' />
1893                         <input type='hidden' name='ACTION' value='saverule' ></form><form method='post' style='display:inline'><input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;'><input type='hidden' name='ACTION' value'reset'></td></td>
1894                         </table></form>
1895 END
1896                 }
1897                 &Header::closebox();
1898 }
1899 sub pos_up
1900 {
1901         my %uphash=();
1902         my %tmp=();
1903         &General::readhasharray($fwdfwsettings{'config'}, \%uphash);
1904         foreach my $key (sort keys %uphash){
1905                 if ($key eq $fwdfwsettings{'key'}) {
1906                         my $last = $key -1;
1907                         if (exists $uphash{$last}){
1908                                 #save rule last
1909                                 foreach my $y (0 .. $#{$uphash{$last}}) {
1910                                                 $tmp{0}[$y] = $uphash{$last}[$y];
1911                                 }
1912                                 #copy active rule to last
1913                                 foreach my $i (0 .. $#{$uphash{$last}}) {
1914                                         $uphash{$last}[$i] = $uphash{$key}[$i];
1915                                 }
1916                                 #copy saved rule to actual position
1917                                 foreach my $x (0 .. $#{$tmp{0}}) {
1918                                                 $uphash{$key}[$x] = $tmp{0}[$x];
1919                                 }
1920                         }
1921                 }
1922         }
1923         &General::writehasharray($fwdfwsettings{'config'}, \%uphash);
1924         &rules;
1925 }
1926 sub pos_down
1927 {
1928         my %downhash=();
1929         my %tmp=();
1930         &General::readhasharray($fwdfwsettings{'config'}, \%downhash);
1931         foreach my $key (sort keys %downhash){
1932                 if ($key eq $fwdfwsettings{'key'}) {
1933                         my $next = $key + 1;
1934                         if (exists $downhash{$next}){
1935                                 #save rule next
1936                                 foreach my $y (0 .. $#{$downhash{$next}}) {
1937                                                 $tmp{0}[$y] = $downhash{$next}[$y];
1938                                 }
1939                                 #copy active rule to next
1940                                 foreach my $i (0 .. $#{$downhash{$next}}) {
1941                                         $downhash{$next}[$i] = $downhash{$key}[$i];
1942                                 }
1943                                 #copy saved rule to actual position
1944                                 foreach my $x (0 .. $#{$tmp{0}}) {
1945                                                 $downhash{$key}[$x] = $tmp{0}[$x];
1946                                 }
1947                         }
1948                 }
1949         }
1950         &General::writehasharray($fwdfwsettings{'config'}, \%downhash);
1951         &rules;
1952 }
1953 sub rules
1954 {
1955         if (!-f "${General::swroot}/forward/reread"){
1956                 system("touch ${General::swroot}/forward/reread");
1957                 system("touch ${General::swroot}/fwhosts/reread");
1958         }
1959 }
1960 sub reread_rules
1961 {
1962         system("/usr/local/bin/forwardfwctrl");
1963         if ( -f "${General::swroot}/forward/reread"){
1964                 system("rm ${General::swroot}/forward/reread");
1965                 system("rm ${General::swroot}/fwhosts/reread");
1966         }
1967 }
1968 sub saverule
1969 {
1970         my $hash=shift;
1971         my $config=shift;
1972         &General::readhasharray("$config", $hash);
1973         if (!$errormessage){
1974                 #check if we change a NAT to a FORWARD/DMZ
1975                 if(($fwdfwsettings{'oldruletype'} eq 'NAT_SOURCE' || $fwdfwsettings{'oldruletype'} eq 'NAT_DESTINATION') && $fwdfwsettings{'chain'} eq 'FORWARDFW'){
1976                         &changerule($confignat);
1977                         #print"1";
1978                 }
1979                 #check if we change a NAT to a INPUT (external access)
1980                 elsif(($fwdfwsettings{'oldruletype'} eq 'NAT_SOURCE' || $fwdfwsettings{'oldruletype'} eq 'NAT_DESTINATION') && $fwdfwsettings{'chain'} eq 'INPUTFW'){
1981                         &changerule($confignat);
1982                         #print"2";
1983                 }
1984                 #check if we change a NAT to a OUTGOING
1985                 elsif(($fwdfwsettings{'oldruletype'} eq 'NAT_SOURCE' || $fwdfwsettings{'oldruletype'} eq 'NAT_DESTINATION') && $fwdfwsettings{'chain'} eq 'OUTGOINGFW'){
1986                         &changerule($confignat);
1987                         #print"3";
1988                 }
1989                 ################################################################
1990                 #check if we change a DMZ to a NAT
1991                 elsif($fwdfwsettings{'oldruletype'} eq 'DMZ'  && ($fwdfwsettings{'chain'} eq 'NAT_SOURCE' || $fwdfwsettings{'chain'} eq 'NAT_DESTINATION')){
1992                         &changerule($configdmz);
1993                         #print"4";
1994                 }
1995                 #check if we change a DMZ to an OUTGOING
1996                 elsif($fwdfwsettings{'oldruletype'} eq 'DMZ'  && $fwdfwsettings{'chain'} eq 'OUTGOINGFW' ){
1997                         &changerule($configdmz);
1998                         #print"5";
1999                 }
2000                 #check if we change a DMZ to an INPUT
2001                 elsif($fwdfwsettings{'oldruletype'} eq 'DMZ'  && $fwdfwsettings{'chain'} eq 'INPUTFW' ){
2002                         &changerule($configdmz);
2003                         #print"6";
2004                 }
2005                 #check if we change a DMZ to a FORWARD/DMZ
2006                 elsif($fwdfwsettings{'oldruletype'} eq 'DMZ'  && $fwdfwsettings{'chain'} eq 'FORWARDFW' ){
2007                         &changerule($configdmz);
2008                         #print"7";
2009                 }
2010                 ################################################################
2011                 #check if we change an INPUT rule to a NAT
2012                 elsif($fwdfwsettings{'oldruletype'} eq 'INPUTFW'  && ($fwdfwsettings{'chain'} eq 'NAT_SOURCE' ||  $fwdfwsettings{'chain'} eq 'NAT_DESTINATION')){
2013                         &changerule($configinput);
2014                         #print"8";
2015                 }
2016                 #check if we change an INPUT rule to a OUTGOING
2017                 elsif($fwdfwsettings{'oldruletype'} eq 'INPUTFW'  && $fwdfwsettings{'chain'} eq 'OUTGOINGFW'  ){
2018                         &changerule($configinput);
2019                         #print"9";
2020                 }
2021                 #check if we change an INPUT rule to a FORWARD/DMZ
2022                 elsif($fwdfwsettings{'oldruletype'} eq 'INPUTFW'  && $fwdfwsettings{'chain'} eq 'FORWARDFW'  ){
2023                         &changerule($configinput);
2024                         #print"10";
2025                 }
2026                 ################################################################
2027                 #check if we change an OUTGOING rule to an INPUT
2028                 elsif($fwdfwsettings{'oldruletype'} eq 'OUTGOINGFW'  && $fwdfwsettings{'chain'} eq 'INPUTFW'  ){
2029                         &changerule($configoutgoing);
2030                         #print"11";
2031                 }
2032                 #check if we change an OUTGOING rule to a FORWARD/DMZ
2033                 elsif($fwdfwsettings{'oldruletype'} eq 'OUTGOINGFW'  && $fwdfwsettings{'chain'} eq 'FORWARDFW'  ){
2034                         &changerule($configoutgoing);
2035                         #print"12";
2036                 }
2037                 #check if we change an OUTGOING rule to a NAT
2038                 elsif($fwdfwsettings{'oldruletype'} eq 'OUTGOINGFW'  && ($fwdfwsettings{'chain'} eq 'NAT_SOURCE' ||  $fwdfwsettings{'chain'} eq 'NAT_DESTINATION')){
2039                         &changerule($configoutgoing);
2040                         #print"13";
2041                 }
2042                 ################################################################
2043                 #check if we change a FORWARD rule to an INPUT
2044                 elsif($fwdfwsettings{'oldruletype'} eq 'FORWARDFW'  && $fwdfwsettings{'chain'} eq 'INPUTFW'){
2045                         &changerule($configfwdfw);
2046                         #print"14";
2047                 }
2048                 #check if we change a FORWARD rule to an DMZ
2049                 elsif($fwdfwsettings{'oldruletype'} eq 'FORWARDFW'  && $fwdfwsettings{$fwdfwsettings{'grp1'}} eq 'ORANGE' || $checkorange eq 'on'){
2050                         &changerule($configfwdfw);
2051                         #print"15";
2052                 }
2053                 #check if we change a FORWARD rule to an OUTGOING
2054                 elsif($fwdfwsettings{'oldruletype'} eq 'FORWARDFW'  && $fwdfwsettings{'chain'} eq 'OUTGOINGFW'){
2055                         &changerule($configfwdfw);
2056                         #print"16";
2057                 }
2058                 #check if we change a FORWARD rule to an NAT
2059                 elsif($fwdfwsettings{'oldruletype'} eq 'FORWARDFW'  && ($fwdfwsettings{'chain'} eq 'NAT_SOURCE' ||  $fwdfwsettings{'chain'} eq 'NAT_DESTINATION')){
2060                         &changerule($configfwdfw);
2061                         #print"17";
2062                 }
2063                 #Cleanup some values for NAT if they are not used
2064                 if($fwdfwsettings{'nat'} eq 'dnat'){
2065                         $fwdfwsettings{'snatport'}='';
2066                 }else{
2067                         $fwdfwsettings{'dnatport'}='';
2068                 }
2069                 if ($fwdfwsettings{'updatefwrule'} ne 'on'){
2070                         my $key = &General::findhasharraykey ($hash);
2071                         $$hash{$key}[0]  = $fwdfwsettings{'RULE_ACTION'};
2072                         $$hash{$key}[1]  = $fwdfwsettings{'chain'};
2073                         $$hash{$key}[2]  = $fwdfwsettings{'ACTIVE'};
2074                         $$hash{$key}[3]  = $fwdfwsettings{'grp1'};
2075                         $$hash{$key}[4]  = $fwdfwsettings{$fwdfwsettings{'grp1'}};
2076                         $$hash{$key}[5]  = $fwdfwsettings{'grp2'};
2077                         $$hash{$key}[6]  = $fwdfwsettings{$fwdfwsettings{'grp2'}};
2078                         $$hash{$key}[7]  = $fwdfwsettings{'USE_SRC_PORT'};
2079                         $$hash{$key}[8]  = $fwdfwsettings{'PROT'};
2080                         $$hash{$key}[9]  = $fwdfwsettings{'ICMP_TYPES'};
2081                         $$hash{$key}[10] = $fwdfwsettings{'SRC_PORT'};
2082                         $$hash{$key}[11] = $fwdfwsettings{'USESRV'};
2083                         $$hash{$key}[12] = $fwdfwsettings{'TGT_PROT'};
2084                         $$hash{$key}[13] = $fwdfwsettings{'ICMP_TGT'};
2085                         $$hash{$key}[14] = $fwdfwsettings{'grp3'};
2086                         $$hash{$key}[15] = $fwdfwsettings{$fwdfwsettings{'grp3'}};
2087                         $$hash{$key}[16] = $fwdfwsettings{'ruleremark'};
2088                         $$hash{$key}[17] = $fwdfwsettings{'LOG'};
2089                         $$hash{$key}[18] = $fwdfwsettings{'TIME'};
2090                         $$hash{$key}[19] = $fwdfwsettings{'TIME_MON'};
2091                         $$hash{$key}[20] = $fwdfwsettings{'TIME_TUE'};
2092                         $$hash{$key}[21] = $fwdfwsettings{'TIME_WED'};
2093                         $$hash{$key}[22] = $fwdfwsettings{'TIME_THU'};
2094                         $$hash{$key}[23] = $fwdfwsettings{'TIME_FRI'};
2095                         $$hash{$key}[24] = $fwdfwsettings{'TIME_SAT'};
2096                         $$hash{$key}[25] = $fwdfwsettings{'TIME_SUN'};
2097                         $$hash{$key}[26] = $fwdfwsettings{'TIME_FROM'};
2098                         $$hash{$key}[27] = $fwdfwsettings{'TIME_TO'};
2099                         if($fwdfwsettings{'USE_NAT'} eq 'ON'){
2100                                 $$hash{$key}[28] = $fwdfwsettings{'USE_NAT'};
2101                                 $$hash{$key}[29] = $fwdfwsettings{$fwdfwsettings{'nat'}};
2102                                 $$hash{$key}[30] = $fwdfwsettings{'dnatport'};
2103                                 $$hash{$key}[31] = $fwdfwsettings{'nat'};
2104                         }
2105                         &General::writehasharray("$config", $hash);
2106                 }else{
2107                         foreach my $key (sort {$a <=> $b} keys %$hash){
2108                                 if($key eq $fwdfwsettings{'key'}){
2109                                         $$hash{$key}[0]  = $fwdfwsettings{'RULE_ACTION'};
2110                                         $$hash{$key}[1]  = $fwdfwsettings{'chain'};
2111                                         $$hash{$key}[2]  = $fwdfwsettings{'ACTIVE'};
2112                                         $$hash{$key}[3]  = $fwdfwsettings{'grp1'};
2113                                         $$hash{$key}[4]  = $fwdfwsettings{$fwdfwsettings{'grp1'}};
2114                                         $$hash{$key}[5]  = $fwdfwsettings{'grp2'};
2115                                         $$hash{$key}[6]  = $fwdfwsettings{$fwdfwsettings{'grp2'}};
2116                                         $$hash{$key}[7]  = $fwdfwsettings{'USE_SRC_PORT'};
2117                                         $$hash{$key}[8]  = $fwdfwsettings{'PROT'};
2118                                         $$hash{$key}[9]  = $fwdfwsettings{'ICMP_TYPES'};
2119                                         $$hash{$key}[10] = $fwdfwsettings{'SRC_PORT'};
2120                                         $$hash{$key}[11] = $fwdfwsettings{'USESRV'};
2121                                         $$hash{$key}[12] = $fwdfwsettings{'TGT_PROT'};
2122                                         $$hash{$key}[13] = $fwdfwsettings{'ICMP_TGT'};
2123                                         $$hash{$key}[14] = $fwdfwsettings{'grp3'};
2124                                         $$hash{$key}[15] = $fwdfwsettings{$fwdfwsettings{'grp3'}};
2125                                         $$hash{$key}[16] = $fwdfwsettings{'ruleremark'};
2126                                         $$hash{$key}[17] = $fwdfwsettings{'LOG'};
2127                                         $$hash{$key}[18] = $fwdfwsettings{'TIME'};
2128                                         $$hash{$key}[19] = $fwdfwsettings{'TIME_MON'};
2129                                         $$hash{$key}[20] = $fwdfwsettings{'TIME_TUE'};
2130                                         $$hash{$key}[21] = $fwdfwsettings{'TIME_WED'};
2131                                         $$hash{$key}[22] = $fwdfwsettings{'TIME_THU'};
2132                                         $$hash{$key}[23] = $fwdfwsettings{'TIME_FRI'};
2133                                         $$hash{$key}[24] = $fwdfwsettings{'TIME_SAT'};
2134                                         $$hash{$key}[25] = $fwdfwsettings{'TIME_SUN'};
2135                                         $$hash{$key}[26] = $fwdfwsettings{'TIME_FROM'};
2136                                         $$hash{$key}[27] = $fwdfwsettings{'TIME_TO'};
2137                                         if($fwdfwsettings{'USE_NAT'} eq 'ON'){
2138                                                 $$hash{$key}[28] = $fwdfwsettings{'USE_NAT'};
2139                                                 $$hash{$key}[29] = $fwdfwsettings{$fwdfwsettings{'nat'}};
2140                                                 $$hash{$key}[30] = $fwdfwsettings{'dnatport'};
2141                                                 $$hash{$key}[31] = $fwdfwsettings{'nat'};
2142                                         }
2143                                         last;
2144                                 }
2145                         }
2146                 }
2147                 &General::writehasharray("$config", $hash);
2148                 if($fwdfwsettings{'oldrulenumber'} > $fwdfwsettings{'rulepos'}){
2149                         my %tmp=();
2150                         my $val=$fwdfwsettings{'oldrulenumber'}-$fwdfwsettings{'rulepos'};
2151                         for (my $z=0;$z<$val;$z++){
2152                                 foreach my $key (sort {$a <=> $b} keys %$hash){
2153                                         if ($key eq $fwdfwsettings{'oldrulenumber'}) {
2154                                                 my $last = $key -1;
2155                                                 if (exists $$hash{$last}){
2156                                                         #save rule last
2157                                                         foreach my $y (0 .. $#{$$hash{$last}}) {
2158                                                                 $tmp{0}[$y] = $$hash{$last}[$y];
2159                                                         }
2160                                                         #copy active rule to last
2161                                                         foreach my $i (0 .. $#{$$hash{$last}}) {
2162                                                                 $$hash{$last}[$i] = $$hash{$key}[$i];
2163                                                         }
2164                                                         #copy saved rule to actual position
2165                                                         foreach my $x (0 .. $#{$tmp{0}}) {
2166                                                                 $$hash{$key}[$x] = $tmp{0}[$x];
2167                                                         }
2168                                                 }
2169                                         }
2170                                 }
2171                                 $fwdfwsettings{'oldrulenumber'}--;
2172                         }
2173                         &General::writehasharray("$config", $hash);
2174                         &rules;
2175                 }elsif($fwdfwsettings{'rulepos'} > $fwdfwsettings{'oldrulenumber'}){
2176                         my %tmp=();
2177                         my $val=$fwdfwsettings{'rulepos'}-$fwdfwsettings{'oldrulenumber'};
2178                                 for (my $z=0;$z<$val;$z++){
2179                                         foreach my $key (sort {$a <=> $b} keys %$hash){
2180                                         if ($key eq $fwdfwsettings{'oldrulenumber'}) {
2181                                                 my $next = $key + 1;
2182                                                 if (exists $$hash{$next}){
2183                                                         #save rule next
2184                                                         foreach my $y (0 .. $#{$$hash{$next}}) {
2185                                                                 $tmp{0}[$y] = $$hash{$next}[$y];
2186                                                         }
2187                                                         #copy active rule to next
2188                                                         foreach my $i (0 .. $#{$$hash{$next}}) {
2189                                                                 $$hash{$next}[$i] = $$hash{$key}[$i];
2190                                                         }
2191                                                         #copy saved rule to actual position
2192                                                         foreach my $x (0 .. $#{$tmp{0}}) {
2193                                                                 $$hash{$key}[$x] = $tmp{0}[$x];
2194                                                         }
2195                                                 }
2196                                         }
2197                                 }
2198                                 $fwdfwsettings{'oldrulenumber'}++;
2199                         }
2200                         &General::writehasharray("$config", $hash);
2201                         &rules;
2202                 }
2203         }
2204 }
2205 sub validremark
2206 {
2207         # Checks a hostname against RFC1035
2208         my $remark = $_[0];
2209
2210         # Each part should be at least two characters in length
2211         # but no more than 63 characters
2212         if (length ($remark) < 1 || length ($remark) > 255) {
2213                 return 0;}
2214         # Only valid characters are a-z, A-Z, 0-9 and -
2215         if ($remark !~ /^[a-zäöüA-ZÖÄÜ0-9-.:;\|_()\/\s]*$/) {
2216                 return 0;}
2217         # First character can only be a letter or a digit
2218         if (substr ($remark, 0, 1) !~ /^[a-zäöüA-ZÖÄÜ0-9]*$/) {
2219                 return 0;}
2220         # Last character can only be a letter or a digit
2221         if (substr ($remark, -1, 1) !~ /^[a-zöäüA-ZÖÄÜ0-9.:;_)]*$/) {
2222                 return 0;}
2223         return 1;
2224 }
2225 sub viewtablerule
2226 {
2227         &General::readhash("/var/ipfire/ethernet/settings", \%netsettings);
2228         &viewtablenew(\%configdmzfw,$configdmz,$Lang::tr{'fwdfw rules'},"DMZ" );
2229         &viewtablenew(\%configfwdfw,$configfwdfw,"","Forward" );
2230         &viewtablenew(\%configinputfw,$configinput,"",$Lang::tr{'external access'} );
2231         &viewtablenew(\%configoutgoingfw,$configoutgoing,"","Outgoing" );
2232         &viewtablenew(\%confignatfw,$confignat,"","NAT" );
2233 }
2234 sub viewtablenew
2235 {
2236         my $hash=shift;
2237         my $config=shift;
2238         my $title=shift;
2239         my $title1=shift;
2240         my $go='';
2241         &General::get_aliases(\%aliases);
2242         &General::readhasharray("$confighost", \%customhost);
2243         &General::readhasharray("$config", $hash);
2244         if( ! -z $config){
2245                 &Header::openbox('100%', 'left',$title);
2246                 my $count=0;
2247                 my ($gif,$log);
2248                 my $ruletype;
2249                 my $rulecolor;
2250                 my $tooltip;
2251                 my @tmpsrc=();
2252                 my $coloryellow='';
2253                 print"<b>$title1</b><br>";
2254                 print"<table width='100%' cellspacing='0' cellpadding='0'>";
2255                 print"<tr><td align='center'><b>#</td><td ></td><td align='center'><b>$Lang::tr{'fwdfw source'}</td><td><b>Log</td><td align='center'><b>$Lang::tr{'fwdfw target'}</td><td align='center'><b>$Lang::tr{'protocol'}</b></td><td align='center'><b>$Lang::tr{'fwdfw time'}</td><td align='center' colspan='6'><b>$Lang::tr{'fwdfw action'}</td></tr>";
2256                 foreach my $key (sort  {$a <=> $b} keys %$hash){
2257                         $tdcolor='';
2258                         @tmpsrc=();
2259                         #check if vpn hosts/nets have been deleted
2260                         if($$hash{$key}[3] =~ /ipsec/i || $$hash{$key}[3] =~ /ovpn/i){
2261                                 push (@tmpsrc,$$hash{$key}[4]);
2262                         }
2263                         if($$hash{$key}[5] =~ /ipsec/i || $$hash{$key}[5] =~ /ovpn/i){
2264                                 push (@tmpsrc,$$hash{$key}[6]);
2265                         }
2266                         foreach my $host (@tmpsrc){
2267                                 if($$hash{$key}[3] eq  'ipsec_net_src' || $$hash{$key}[5] eq 'ipsec_net_tgt'){
2268                                         if(&fwlib::get_ipsec_net_ip($host,11) eq ''){
2269                                                 $coloryellow='on';
2270                                                 &disable_rule($key);
2271                                                 $$hash{$key}[2]='';
2272                                         }
2273                                 }elsif($$hash{$key}[3] eq  'ovpn_net_src' || $$hash{$key}[5] eq 'ovpn_net_tgt'){
2274                                         if(&fwlib::get_ovpn_net_ip($host,1) eq ''){
2275                                                 $coloryellow='on';
2276                                                 &disable_rule($key);
2277                                                 $$hash{$key}[2]='';
2278                                         }
2279                                 }elsif($$hash{$key}[3] eq  'ovpn_n2n_src' || $$hash{$key}[5] eq 'ovpn_n2n_tgt'){
2280                                         if(&fwlib::get_ovpn_n2n_ip($host,27) eq ''){
2281                                                 $coloryellow='on';
2282                                                 &disable_rule($key);
2283                                                 $$hash{$key}[2]='';
2284                                         }
2285                                 }elsif($$hash{$key}[3] eq  'ovpn_host_src' || $$hash{$key}[5] eq 'ovpn_host_tgt'){
2286                                         if(&fwlib::get_ovpn_host_ip($host,33) eq ''){
2287                                                 $coloryellow='on';
2288                                                 &disable_rule($key);
2289                                                 $$hash{$key}[2]='';
2290                                         }
2291                                 }
2292                         }
2293                         $$hash{'ACTIVE'}=$$hash{$key}[2];
2294                         $count++;
2295                         if($coloryellow eq 'on'){
2296                                 print"<tr bgcolor='$color{'color14'}' >";
2297                                 $coloryellow='';
2298                         }elsif($coloryellow eq ''){
2299                                 if ($count % 2){
2300                                         $color="$color{'color22'}";
2301                                 }
2302                                 else{
2303                                         $color="$color{'color20'}";
2304                                 }
2305                         }
2306                         print"<tr bgcolor='$color' >";
2307                         print<<END;
2308                         <td align='right' width='15'><b>$key</b></td>
2309 END
2310                         if ($$hash{$key}[0] eq 'ACCEPT'){
2311                                 $ruletype='A';
2312                                 $tooltip='ACCEPT';
2313                                 $rulecolor=$color{'color17'};
2314                         }elsif($$hash{$key}[0] eq 'DROP'){
2315                                 $ruletype='D';
2316                                 $tooltip='DROP';
2317                                 $rulecolor=$color{'color25'};
2318                         }elsif($$hash{$key}[0] eq 'REJECT'){
2319                                 $ruletype='R';
2320                                 $tooltip='REJECT';
2321                                 $rulecolor=$color{'color16'};
2322                         }
2323                         if($$hash{$key}[28] eq 'ON'){
2324                                 print"<td bgcolor='$color' align='center' width='20'></td>";
2325                                 $rulecolor=$color;
2326                         }else{
2327                                 print"<td bgcolor='$rulecolor' align='center' width='20'><span title='$tooltip'><b>$ruletype</b></span></td>";
2328                         }
2329                         &getcolor($$hash{$key}[3],$$hash{$key}[4],\%customhost);
2330                         print"<td align='center' width='160' $tdcolor>";
2331                         if ($$hash{$key}[3] eq 'std_net_src'){
2332                                 print &get_name($$hash{$key}[4]);
2333                         }else{
2334                                 print $$hash{$key}[4];
2335                         }
2336                         $tdcolor='';
2337                         &getsrcport(\%$hash,$key);
2338                         #Is this a SNAT rule?
2339                         if ($$hash{$key}[31] eq 'snat'){
2340                                 print"<br>SNAT -> $$hash{$key}[29]";
2341                                 if ($$hash{$key}[30] ne ''){
2342                                         print": $$hash{$key}[30]";
2343                                 }
2344                         }
2345                         if ($$hash{$key}[17] eq 'ON'){
2346                                 $log="/images/on.gif";
2347                         }else{
2348                                 $log="/images/off.gif";
2349                         }
2350                         print<<END;
2351                         </td>
2352                         <form method='post'>
2353                         <td align='left' width='25'><input type='image' img src='$log' alt='$Lang::tr{'click to disable'}' title='$Lang::tr{'fwdfw togglelog'}' style='padding-top: 0px; padding-left: 0px; padding-bottom: 0px ;padding-right: 0px ;'/>
2354                         <input type='hidden' name='key' value='$key' />
2355                         <input type='hidden' name='config' value='$config' />
2356                         <input type='hidden' name='ACTION' value='$Lang::tr{'fwdfw togglelog'}' />
2357                         </td></form>
2358 END
2359                         &getcolor($$hash{$key}[5],$$hash{$key}[6],\%customhost);
2360                         print<<END;
2361                         <td align='center' width='160' $tdcolor>
2362 END
2363                         #Is this a DNAT rule?
2364                         if ($$hash{$key}[31] eq 'dnat'){
2365                                 print "IPFire ($$hash{$key}[29])";
2366                                 if($$hash{$key}[30] ne ''){
2367                                         print": $$hash{$key}[30]";
2368                                 }
2369                                 print"<br> DNAT->";
2370                         }
2371                         if ($$hash{$key}[5] eq 'std_net_tgt'){
2372                                 print &get_name($$hash{$key}[6]);
2373                         }else{
2374                                 print $$hash{$key}[6];
2375                         }
2376                         $tdcolor='';
2377                         &gettgtport(\%$hash,$key);
2378                         print"</td>";
2379                         #Get Protocol
2380                         my $prot;
2381                         if ($$hash{$key}[12]){                  #target prot if manual
2382                                 push (@protocols,$$hash{$key}[12]);
2383                         }elsif($$hash{$key}[8]){                #source prot if manual
2384                                 push (@protocols,$$hash{$key}[8]);
2385                         }elsif($$hash{$key}[14] eq 'cust_srv'){
2386                                 &get_serviceports("service",$$hash{$key}[15]);
2387                         }elsif($$hash{$key}[14] eq 'cust_srvgrp'){
2388                                 &get_serviceports("group",$$hash{$key}[15]);
2389                         }else{
2390                                 push (@protocols,$Lang::tr{'all'});
2391                         }
2392                         my $protz=join(",",@protocols);
2393                         print"<td align='center'>$protz</td>";
2394                         @protocols=();
2395                         if ($$hash{$key}[18] eq 'ON'){
2396                                 my @days=();
2397                                 if($$hash{$key}[19] ne ''){push (@days,$Lang::tr{'fwdfw wd_mon'});}
2398                                 if($$hash{$key}[20] ne ''){push (@days,$Lang::tr{'fwdfw wd_tue'});}
2399                                 if($$hash{$key}[21] ne ''){push (@days,$Lang::tr{'fwdfw wd_wed'});}
2400                                 if($$hash{$key}[22] ne ''){push (@days,$Lang::tr{'fwdfw wd_thu'});}
2401                                 if($$hash{$key}[23] ne ''){push (@days,$Lang::tr{'fwdfw wd_fri'});}
2402                                 if($$hash{$key}[24] ne ''){push (@days,$Lang::tr{'fwdfw wd_sat'});}
2403                                 if($$hash{$key}[25] ne ''){push (@days,$Lang::tr{'fwdfw wd_sun'});}
2404                                 my $weekdays=join(",",@days);
2405                                 if (@days){
2406                                         print"<td align='center' width='100'>$weekdays &nbsp $$hash{$key}[26] - $$hash{$key}[27] </td>";
2407                                 }
2408                         }else{
2409                                         print"<td align='center'>24/7</td>";
2410                                 }
2411                         if($$hash{$key}[2] eq 'ON'){
2412                                 $gif="/images/on.gif"
2413
2414                         }else{
2415                                 $gif="/images/off.gif"
2416                         }
2417                         print<<END;
2418                         <form method='post'>
2419                         <td width='25'><input type='image' img src='$gif' alt='$Lang::tr{'click to disable'}' title='$Lang::tr{'fwdfw toggle'}' style='padding-top: 0px; padding-left: 0px; padding-bottom: 0px ;padding-right: 0px ;display: block;' />
2420                         <input type='hidden' name='key' value='$key' />
2421                         <input type='hidden' name='config' value='$config' />
2422                         <input type='hidden' name='ACTION' value='$Lang::tr{'fwdfw toggle'}' />
2423                         </td></form>
2424                         <form method='post'>
2425                         <td  width='25' ><input type='image' img src='/images/edit.gif' alt='$Lang::tr{'edit'}' title='$Lang::tr{'fwdfw edit'}' style='padding-top: 0px; padding-left: 0px; padding-bottom: 0px ;padding-right: 0px ;display: block;'  />
2426                         <input type='hidden' name='key' value='$key' />
2427                         <input type='hidden' name='config' value='$config' />
2428                         <input type='hidden' name='ACTION' value='editrule' />
2429                         </td></form></td>
2430                         <form method='post'>
2431                         <td  width='25'><input type='image' img src='/images/addblue.gif' alt='$Lang::tr{'fwdfw copy'}' title='$Lang::tr{'fwdfw copy'}' style='padding-top: 0px; padding-left: 0px; padding-bottom: 0px ;padding-right: 0px ;display: block;' />
2432                         <input type='hidden' name='key' value='$key' />
2433                         <input type='hidden' name='config' value='$config' />
2434                         <input type='hidden' name='ACTION' value='copyrule' />
2435                         </td></form></td>
2436                         <form method='post'>
2437                         <td width='25' ><input type='image' img src='/images/delete.gif' alt='$Lang::tr{'delete'}' title='$Lang::tr{'fwdfw delete'}' style='padding-top: 0px; padding-left: 0px; padding-bottom: 0px ;padding-right: 0px ;display: block;'   />
2438                         <input type='hidden' name='key' value='$key' />
2439                         <input type='hidden' name='config' value='$config' />
2440                         <input type='hidden' name='ACTION' value='deleterule' />
2441                         </td></form></td>
2442 END
2443                         if (exists $$hash{$key-1}){
2444                                 print<<END;
2445                                 <form method='post'>
2446                                 <td width='25'><input type='image' img src='/images/up.gif' alt='$Lang::tr{'fwdfw moveup'}' title='$Lang::tr{'fwdfw moveup'}'  style='padding-top: 0px; padding-left: 0px; padding-bottom: 0px ;padding-right: 0px ;display: block;'  />
2447                                 <input type='hidden' name='key' value='$key' />
2448                                 <input type='hidden' name='config' value='$config' />
2449                                 <input type='hidden' name='ACTION' value='moveup' />
2450                                 </td></form></td>
2451 END
2452                         }else{
2453                                 print"<td width='25'><input type='image' img src='/images/up.gif' style='visibility:hidden;'></td>";
2454                         }
2455                         if (exists $$hash{$key+1}){
2456                                 print<<END;
2457                                 <form method='post'>
2458                                 <td width='25' ><input type='image' img src='/images/down.gif' alt='$Lang::tr{'fwdfw movedown'}' title='$Lang::tr{'fwdfw movedown'}' style='padding-top: 0px; padding-left: 0px; padding-bottom: 0px ;padding-right: 0px ;display: block;'  />
2459                                 <input type='hidden' name='key' value='$key' />
2460                                 <input type='hidden' name='config' value='$config' />
2461                                 <input type='hidden' name='ACTION' value='movedown' />
2462                                 </td></form></td></tr>
2463 END
2464                         }else{
2465                                 print"<td width='25'><input type='image' img src='/images/down.gif' style='visibility:hidden;'></td></tr>";
2466                         }
2467                         #REMARK
2468                         if ($optionsfw{'SHOWREMARK'} eq 'on'){
2469                                 print"<tr bgcolor='$color'>";
2470                                 print"<td>&nbsp</td><td bgcolor='$rulecolor'></td><td colspan='11'>&nbsp $$hash{$key}[16]</td></tr>";
2471                         }
2472                         print"<tr bgcolor='$color'><td height='1'></td><td bgcolor='$rulecolor'></td><td colspan='11'></td></tr>";
2473                 }
2474                 print"</table>";
2475                 &Header::closebox();
2476                 print "<hr>";
2477                 print "<br><br>";
2478         }else{
2479                 if ($optionsfw{'SHOWTABLES'} eq 'on'){
2480                         print "<b>$title1</b><br>";
2481                         print"<table width='100%' border='0' rules='none'><tr><td height='30' bgcolor=$color{'color22'} align='center'>$Lang::tr{'fwhost empty'}</td></tr></table><br><br>";
2482                 }
2483         }
2484 }
2485
2486
2487 &Header::closebigbox();
2488 &Header::closepage();