]>
git.ipfire.org Git - people/teissler/ipfire-2.x.git/blob - html/cgi-bin/index.cgi
2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2007-2014 IPFire Team <info@ipfire.org> #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
26 # enable only the following on debugging purpose
28 #use CGI::Carp 'fatalsToBrowser';
30 require '/var/ipfire/general-functions.pl';
31 require "${General::swroot}/lang.pl";
32 require "${General::swroot}/header.pl";
33 require "/opt/pakfire/lib/functions.pl";
51 if ( ! -e
"/var/ipfire/main/gpl_accepted" ) {
52 print "Status: 302 Moved Temporarily\n";
53 print "Location: gpl.cgi\n\n";
57 &Header
::showhttpheaders
();
59 $cgiparams{'ACTION'} = '';
60 &Header
::getcgihash
(\
%cgiparams);
61 $pppsettings{'VALID'} = '';
62 $pppsettings{'PROFILENAME'} = 'None';
63 &General
::readhash
("${General::swroot}/ppp/settings", \
%pppsettings);
64 &General
::readhash
("${General::swroot}/modem/settings", \
%modemsettings);
65 &General
::readhash
("${General::swroot}/ethernet/settings", \
%netsettings);
66 &General
::readhash
("${General::swroot}/ddns/settings", \
%ddnssettings);
67 &General
::readhash
("${General::swroot}/proxy/advanced/settings", \
%proxysettings);
68 &General
::readhash
("${General::swroot}/vpn/settings", \
%vpnsettings);
71 my %mainsettings = ();
72 &General
::readhash
("${General::swroot}/main/settings", \
%mainsettings);
73 &General
::readhash
("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \
%color);
75 my $connstate = &Header
::connectionstatus
();
77 if ( -e
"/var/ipfire/main/gpl-accepted" ) {
78 if ($connstate =~ /$Lang::tr{'connecting'}/ || /$Lang::tr{'connection closed'}/ ){
79 $refresh = "<meta http-equiv='refresh' content='5;'>";
80 }elsif ($connstate =~ /$Lang::tr{'dod waiting'}/ || -e
"${General::swroot}/main/refreshindex") {
81 $refresh = "<meta http-equiv='refresh' content='30;'>";
85 if ($cgiparams{'ACTION'} eq $Lang::tr
{'dial profile'})
87 my $profile = $cgiparams{'PROFILE'};
88 my %tempcgiparams = ();
89 $tempcgiparams{'PROFILE'} = '';
90 &General
::readhash
("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
93 # make a link from the selected profile to the "default" one.
94 unlink("${General::swroot}/ppp/settings");
95 link("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
96 "${General::swroot}/ppp/settings");
97 open (TMP
, ">${General::swroot}/ppp/updatesettings");
99 # read in the new params "early" so we can write secrets.
101 &General
::readhash
("${General::swroot}/ppp/settings", \
%cgiparams);
102 $cgiparams{'PROFILE'} = $profile;
103 $cgiparams{'BACKUPPROFILE'} = $profile;
104 &General
::writehash
("${General::swroot}/ppp/settings-$cgiparams{'PROFILE'}",
107 # write secrets file.
108 open(FILE
, ">/${General::swroot}/ppp/secrets") or die "Unable to write secrets file.";
110 my $username = $cgiparams{'USERNAME'};
111 my $password = $cgiparams{'PASSWORD'};
112 print FILE
"'$username' * '$password'\n";
113 chmod 0600, "${General::swroot}/ppp/secrets";
116 &General
::log("$Lang::tr{'profile made current'} $tempcgiparams{'PROFILENAME'}");
117 $cgiparams{'ACTION'} = "$Lang::tr{'dial'}";
120 if ($cgiparams{'ACTION'} eq $Lang::tr
{'dial'}) {
121 system('/usr/local/bin/redctrl start > /dev/null') == 0
122 or &General
::log("Dial failed: $?"); sleep 1;
123 }elsif ($cgiparams{'ACTION'} eq $Lang::tr
{'hangup'}) {
124 system('/usr/local/bin/redctrl stop > /dev/null') == 0
125 or &General
::log("Hangup failed: $?"); sleep 1;
130 my @profilenames = ();
132 for ($c = 1; $c <= $maxprofiles; $c++)
134 my %temppppsettings = ();
135 $temppppsettings{'PROFILENAME'} = '';
136 &General
::readhash
("${General::swroot}/ppp/settings-$c", \
%temppppsettings);
137 $profilenames[$c] = $temppppsettings{'PROFILENAME'};
140 for ($c = 1; $c <= $maxprofiles; $c++) {
141 $selected{'PROFILE'}{$c} = '';
143 $selected{'PROFILE'}{$pppsettings{'PROFILE'}} = "selected='selected'";
144 my $dialButtonDisabled = "disabled='disabled'";
146 &Header
::openpage
($Lang::tr
{'main page'}, 1, $refresh);
147 &Header
::openbigbox
('', 'center');
148 if (open(IPADDR
,"${General::swroot}/red/local-ipaddress")) {
154 &Header
::openbox
('100%', 'center', '');
155 if ( ( $pppsettings{'VALID'} eq 'yes' && $modemsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ )) {
156 if (open(IPADDR
,"${General::swroot}/ddns/ipcache")) {
161 } elsif ($modemsettings{'VALID'} eq 'no') {
162 print "$Lang::tr{'modem settings have errors'}\n </b></font>\n";
164 print "$Lang::tr{'profile has errors'}\n </b></font>\n";
168 <!-- Table of networks -->
169 <table class='tbl' style='width:80%;'>
171 <th style='background-color:$color{'color20'};'>$Lang::tr{'network'}</th>
172 <th style='background-color:$color{'color20'};'>$Lang::tr{'ip address'}</th>
173 <th style='background-color:$color{'color20'};'>$Lang::tr{'status'}</th>
176 <td style='width:25%; text-align:center; background-color:$Header::colourred;'><a href='/cgi-bin/pppsetup.cgi' style='color:white;'><b>$Lang::tr{'internet'}</b></a><br/></td>
177 <td style='width:30%; text-align:center;'>$ipaddr </td>
178 <td style='width:45%; text-align:center;'>$connstate </td>
181 my $HOSTNAME = (gethostbyaddr(pack("C4", split(/\./, $ipaddr)), 2))[0];
182 if ( "$HOSTNAME" ne "" ) {
184 <tr><td><b>$Lang::tr{'hostname'}:</b><td style='text-align:center;'>$HOSTNAME</td><td></td>
188 if ( -e
"${General::swroot}/red/remote-ipaddress" ) {
189 open (TMP
, "<${General::swroot}/red/remote-ipaddress");
194 <tr><td><b>$Lang::tr{'gateway'}:</b><td style='text-align:center;'>$GATEWAY</td><td></td></tr>
198 my @dns_servers = ();
199 foreach my $f ("${General::swroot}/red/dns1", "${General::swroot}/red/dns2") {
201 my $dns_server = <DNS
>;
206 push(@dns_servers, $dns_server);
209 my $dns_servers_str = join(", ", @dns_servers);
214 <b>$Lang::tr{'dns servers'}:</b>
216 <td style='text-align:center;'>
225 if ( $netsettings{'RED_TYPE'} ne "STATIC" && $netsettings{'RED_TYPE'} ne "DHCP" ){
226 # The dialctrl.pl script outputs html
227 print `/usr/local/bin/dialctrl.pl show`;
228 if ( ( $pppsettings{'VALID'} eq 'yes' ) || ( $netsettings{'CONFIG_TYPE'} =~ /^(1|2|3|4)$/ && $netsettings{'RED_TYPE'} =~ /^(DHCP|STATIC)$/ ) ) {
231 <table style='width:80%;'>
233 <form method='post' action='$ENV{'SCRIPT_NAME'}'>$Lang::tr{'profile'}:
234 <select name='PROFILE'>
236 for ($c = 1; $c <= $maxprofiles; $c++)
238 if ($profilenames[$c] ne '') {
239 $dialButtonDisabled = "";
240 print "<option value='$c' $selected{'PROFILE'}{$c}>$c. $profilenames[$c]</option>";
243 $dialButtonDisabled = "disabled='disabled'" if (-e
'/var/run/ppp-ipfire.pid' || -e
"${General::swroot}/red/active");
246 <input type='submit' name='ACTION' value='$Lang::tr{'dial profile'}' $dialButtonDisabled />
249 <td style='text-align:center;'>
250 <table style='width:100%;'>
252 <td style='width=50%; text-align:right;'>
253 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
254 <input type='submit' name='ACTION' value='$Lang::tr{'dial'}'>
257 <td style='width=50%; text-align:left;'>
258 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
259 <input type='submit' name='ACTION' value='$Lang::tr{'hangup'}'>
269 print "<br/><span style='color:red;'>$Lang::tr{'profile has errors'}</span><br/>";
276 <table class='tbl' style='width:80%;'>
278 <th>$Lang::tr{'network'}</th>
279 <th>$Lang::tr{'ip address'}</th>
280 <th>$Lang::tr{'status'}</th>
284 if ( $netsettings{'GREEN_DEV'} ) {
285 my $sub=&General
::iporsubtocidr
($netsettings{'GREEN_NETMASK'});
288 <td style='width:25%; text-align:center; background-color:$Header::colourgreen;'>
289 <a href='/cgi-bin/dhcp.cgi' style='color:white'><b>$Lang::tr{'lan'}</b></a>
291 <td style='width:30%; text-align:center;'>$netsettings{'GREEN_ADDRESS'}/$sub</td>
292 <td style='width:45%; text-align:center;'>
294 if ( $proxysettings{'ENABLE'} eq 'on' ) {
295 print $Lang::tr
{'advproxy on'};
296 if ( $proxysettings{'TRANSPARENT'} eq 'on' ) { print " (transparent)"; }
297 } else { print $Lang::tr
{'advproxy off'}; }
301 if ( $netsettings{'BLUE_DEV'} ) {
302 my $sub=&General
::iporsubtocidr
($netsettings{'BLUE_NETMASK'});
305 <td style='width:25%; text-align:center; background-color:$Header::colourblue;'>
306 <a href='/cgi-bin/wireless.cgi' style='color:white'><b>$Lang::tr{'wireless'}</b></a>
308 <td style='width:30%; text-align:center;'>$netsettings{'BLUE_ADDRESS'}/$sub
309 <td style='width:45%; text-align:center;'>
311 if ( $proxysettings{'ENABLE_BLUE'} eq 'on' ) {
312 print $Lang::tr
{'advproxy on'};
313 if ( $proxysettings{'TRANSPARENT_BLUE'} eq 'on' ) { print " (transparent)"; }
314 } else { print $Lang::tr
{'advproxy off'}; }
318 if ( $netsettings{'ORANGE_DEV'} ) {
319 my $sub=&General
::iporsubtocidr
($netsettings{'ORANGE_NETMASK'});
322 <td style='width:25%; text-align:center; background-color:$Header::colourorange;'>
323 <a href='/cgi-bin/firewall.cgi' style='color:white'><b>$Lang::tr{'dmz'}</b></a>
325 <td style='width:30%; text-align:center;'>$netsettings{'ORANGE_ADDRESS'}/$sub</td>
326 <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
330 #check if IPSEC is running
331 if ( $vpnsettings{'ENABLED'} eq 'on' || $vpnsettings{'ENABLED_BLUE'} eq 'on' ) {
332 my $ipsecip = $vpnsettings{'VPN_IP'};
335 <td style='width:25%; text-align:center; background-color:$Header::colourvpn;'>
336 <a href='/cgi-bin/vpnmain.cgi' style='color:white'><b>$Lang::tr{'ipsec'}</b></a>
338 <td style='width:30%; text-align:center;'>$ipsecip</td>
339 <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
344 #check if OpenVPN is running
346 &General
::readhash
("${General::swroot}/ovpn/settings", \
%confighash);
348 if (($confighash{'ENABLED'} eq "on") ||
349 ($confighash{'ENABLED_BLUE'} eq "on") ||
350 ($confighash{'ENABLED_ORANGE'} eq "on")) {
351 my ($ovpnip,$sub) = split("/",$confighash{'DOVPN_SUBNET'});
352 $sub=&General
::iporsubtocidr
($sub);
353 $ovpnip="$ovpnip/$sub";
356 <td style='width:25%; text-align:center; background-color:$Header::colourvpn;'>
357 <a href='/cgi-bin/ovpnmain.cgi' style='color:white'><b>OpenVPN</b></a>
359 <td style='width:30%; text-align:center;'>$ovpnip</td>
360 <td style='width:45%; text-align:center; color:$Header::colourgreen;'>Online</td>
367 #Check if there are any vpns configured (ipsec and openvpn)
368 &General
::readhasharray
("${General::swroot}/vpn/config", \
%vpnconfig);
369 foreach my $key (sort { ncmp
($vpnconfig{$a}[1],$vpnconfig{$b}[1]) } keys %vpnconfig) {
370 if ($vpnconfig{$key}[0] eq 'on'){
376 &General
::readhasharray
("${General::swroot}/ovpn/ovpnconfig", \
%ovpnconfig);
377 foreach my $dkey (sort { ncmp
($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
378 if (($ovpnconfig{$dkey}[3] eq 'net') && (-e
"/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
386 # Start of Box wich contains all vpn connections
387 &Header
::openbox
('100%', 'center', $Lang::tr
{'vpn'});
389 #show ipsec connectiontable
391 my $ipsecip = $vpnsettings{'VPN_IP'};
392 my @status = `/usr/local/bin/ipsecctrl I`;
399 <table class='tbl' style='width:80%;'>
401 <th style='width:40%;'>$Lang::tr{'ipsec network'}</th>
402 <th style='width:30%;'>$Lang::tr{'ip address'}</th>
403 <th style='width:30%;'>$Lang::tr{'status'}</th>
406 foreach my $key (sort { uc($vpnconfig{$a}[1]) cmp uc($vpnconfig{$b}[1]) } keys %vpnconfig) {
407 if ($vpnconfig{$key}[0] eq 'on') {
409 my ($vpnip,$vpnsub) = split("/",$vpnconfig{$key}[11]);
410 $vpnsub=&General
::iporsubtocidr
($vpnsub);
411 $vpnip="$vpnip/$vpnsub";
413 $col = $color{'color22'};
415 $col = $color{'color20'};
418 print "<td style='text-align:left; color:white; background-color:$Header::colourovpn;'>$vpnconfig{$key}[1]</td>";
419 print "<td style='text-align:left; background-color:$col'>$vpnip</td>";
421 my $activecolor = $Header::colourred
;
422 my $activestatus = $Lang::tr
{'capsclosed'};
423 if ($vpnconfig{$key}[0] eq 'off') {
424 $activecolor = $Header::colourblue
;
425 $activestatus = $Lang::tr
{'capsclosed'};
427 foreach my $line (@status) {
428 if (($line =~ /\"$vpnconfig{$key}[1]\".*IPsec SA established/) || ($line =~/$vpnconfig{$key}[1]\{.*INSTALLED/ )){
429 $activecolor = $Header::colourgreen
;
430 $activestatus = $Lang::tr
{'capsopen'};
434 print "<td style='text-align:center; color:white; background-color:$activecolor;'><b>$activestatus</b></td>";
441 # Check if there is any OpenVPN connection configured.
445 <table class='tbl' style='width:80%;'>
447 <th style='width:40%;'>$Lang::tr{'openvpn network'}</th>
448 <th style='width:30%;'>$Lang::tr{'ip address'}</th>
449 <th style='width:30%;'>$Lang::tr{'status'}</th>
452 # Check if the OpenVPN server for Road Warrior Connections is running and display status information.
455 # Print the OpenVPN N2N connection status.
456 if ( -d
"${General::swroot}/ovpn/n2nconf") {
458 foreach my $dkey (sort { ncmp
($ovpnconfig{$a}[1],$ovpnconfig{$b}[1])} keys %ovpnconfig) {
459 if (($ovpnconfig{$dkey}[3] eq 'net') && (-e
"/var/run/$ovpnconfig{$dkey}[1]n2n.pid")){
461 my $tport = $ovpnconfig{$dkey}[22];
462 next if ($tport eq '');
463 my $tnet = new Net
::Telnet
( Timeout
=>5, Errmode
=>'return', Port
=>$tport);
464 $tnet->open('127.0.0.1');
465 my @output = $tnet->cmd(String
=> 'state', Prompt
=> '/(END.*\n|ERROR:.*\n)/');
466 my @tustate = split(/\,/, $output[1]);
468 my $display_colour = $Header::colourred
;
469 if ( $tustate[1] eq 'CONNECTED' || ($tustate[1] eq 'WAIT')) {
470 $display_colour = $Header::colourgreen
;
471 $display = $Lang::tr
{'capsopen'};
473 $display = $tustate[1];
476 $col = $color{'color22'};
478 $col = $color{'color20'};
482 my ($vpnip,$vpnsub) = split("/",$ovpnconfig{$dkey}[11]);
483 my $vpnsub=&General
::iporsubtocidr
($vpnsub);
484 my $vpnip="$vpnip/$vpnsub";
487 <td style='text-align:left; color:white; background-color:$Header::colourovpn;'>$ovpnconfig{$dkey}[1]</td>
488 <td style='text-align:center; background-color:$col'>$vpnip</td>
489 <td style='text-align:center; color:white; background-color:$display_colour' ><b>$display</b></td>
495 if ($active ne 'off'){
496 print "<tr><td colspan='3' style='text-align:center;'>$Lang::tr{'ovpn no connections'}</td></tr>";
504 if ( ! -e
"/var/ipfire/main/send_profile") {
505 $warnmessage .= "<li><a style='color: white;' href='fireinfo.cgi'>$Lang::tr{'fireinfo please enable'}</a></li>";
508 # Memory usage warning
509 my @free = `/usr/bin/free`;
510 $free[1] =~ m/(\d+)/;
512 $free[2] =~ m/(\d+)/;
514 my $pct = int 100 * ($mem - $used) / $mem;
515 if ($used / $mem > 90) {
516 $warnmessage .= "<li>$Lang::tr{'high memory usage'}: $pct% !</li>";
519 # Diskspace usage warning
522 my @df = `/bin/df -B M -P -x rootfs`;
523 foreach my $line (@df) {
524 next if $line =~ m/^Filesystem/;
525 if ($line =~ m/root/ ) {
526 $line =~ m/^.* (\d+)M.*$/;
527 @temp = split(/ +/,$line);
529 # available:plain value in MB, and not %used as 10% is too much to waste on small disk
530 # and root size should not vary during time
531 $warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$1M</b> !</li>";
535 # $line =~ m/^.* (\d+)m.*$/;
536 $line =~ m/^.* (\d+)\%.*$/;
538 @temp = split(/ /,$line);
540 $warnmessage .= "<li>$Lang::tr{'filesystem full'}: $temp[0] <b>$Lang::tr{'free'}=$temp2%</b> !</li>";
545 # S.M.A.R.T. health warning
546 my @files = `/bin/ls /var/run/smartctl_out_hddtemp-* 2>/dev/null`;
547 foreach my $file (@files) {
549 my $disk=`echo $file | cut -d"-" -f2`;
551 if (`/bin/grep "SAVE ALL DATA" $file`) {
552 $warnmessage .= "<li>$Lang::tr{'smartwarn1'} /dev/$disk $Lang::tr{'smartwarn2'} !</li>";
557 my @files = `mount | grep " reiser4 (" 2>/dev/null`;
558 foreach my $disk (@files) {
560 $warnmessage .= "<li>$disk - $Lang::tr{'deprecated fs warn'}</li>";
564 &Header
::openbox
('100%','center', );
565 print "<table class='tbl' style='width:80%;'>";
566 print "<tr><th>$Lang::tr{'fwhost hint'}</th></tr>";
567 print "<tr><td style='color:white; background-color:$Header::colourred;'>$warnmessage</td></tr>";
572 &Pakfire
::dblist
("upgrade", "notice");
573 if ( -e
"/var/run/need_reboot" ) {
574 print "<div style='text-align:center; color:red;'>";
575 print "<br/><br/>$Lang::tr{'needreboot'}!";
579 &Header
::closebigbox
();
580 &Header
::closepage
();