mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
xdp-sni UI: XDP TLS/SSL SNI UI management
XDP TLS/SSL SNI UI to manage the web blocklist Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
This commit is contained in:
Vincent Li
@@ -8,6 +8,11 @@
|
||||
'title' => "$Lang::tr{'xdpdns domain'}",
|
||||
'enabled' => 1,
|
||||
};
|
||||
$subipfire->{'16.xdpsni'} = {'caption' => $Lang::tr{'xdpsni domain'},
|
||||
'uri' => '/cgi-bin/xdpsni.cgi',
|
||||
'title' => "$Lang::tr{'xdpsni domain'}",
|
||||
'enabled' => 1,
|
||||
};
|
||||
$subipfire->{'20.loxilb'} = {
|
||||
'caption' => $Lang::tr{'loxilb enable'},
|
||||
'uri' => '/cgi-bin/loxilb.cgi',
|
||||
|
||||
@@ -96,6 +96,7 @@ srv/web/ipfire/cgi-bin/loxilbconfig.cgi
|
||||
srv/web/ipfire/cgi-bin/loxilbfw.cgi
|
||||
srv/web/ipfire/cgi-bin/keepalived.cgi
|
||||
srv/web/ipfire/cgi-bin/xdpdns.cgi
|
||||
srv/web/ipfire/cgi-bin/xdpsni.cgi
|
||||
#srv/web/ipfire/html
|
||||
srv/web/ipfire/html/blob.gif
|
||||
#srv/web/ipfire/html/captive
|
||||
|
||||
432
html/cgi-bin/xdpsni.cgi
Normal file
432
html/cgi-bin/xdpsni.cgi
Normal file
@@ -0,0 +1,432 @@
|
||||
#!/usr/bin/perl
|
||||
###############################################################################
|
||||
# #
|
||||
# IPFire.org - A linux based firewall #
|
||||
# Copyright (C) 2007-2020 IPFire Team <info@ipfire.org> #
|
||||
# Copyright (C) 2024 BPFire <vincent.mc.li@gmail.com> #
|
||||
# #
|
||||
# This program is free software: you can redistribute it and/or modify #
|
||||
# it under the terms of the GNU General Public License as published by #
|
||||
# the Free Software Foundation, either version 3 of the License, or #
|
||||
# (at your option) any later version. #
|
||||
# #
|
||||
# This program is distributed in the hope that it will be useful, #
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
||||
# GNU General Public License for more details. #
|
||||
# #
|
||||
# You should have received a copy of the GNU General Public License #
|
||||
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
||||
# #
|
||||
###############################################################################
|
||||
|
||||
use strict;
|
||||
|
||||
# enable only the following on debugging purpose
|
||||
use warnings;
|
||||
use CGI::Carp 'fatalsToBrowser';
|
||||
|
||||
use IO::Socket;
|
||||
|
||||
require '/var/ipfire/general-functions.pl';
|
||||
require "${General::swroot}/location-functions.pl";
|
||||
require "${General::swroot}/lang.pl";
|
||||
require "${General::swroot}/header.pl";
|
||||
|
||||
#workaround to suppress a warning when a variable is used only once
|
||||
my @dummy = ( ${Header::colouryellow} );
|
||||
undef (@dummy);
|
||||
|
||||
my %color = ();
|
||||
my %mainsettings = ();
|
||||
my %settings=();
|
||||
my %checked=();
|
||||
my $errormessage='';
|
||||
my $setting = "${General::swroot}/main/settings";
|
||||
my $xdpsnisettingfile = "${General::swroot}/xdpsni/settings";
|
||||
my $xdpsnidomainfile = "${General::swroot}/xdpsni/domainfile";
|
||||
|
||||
# Read configuration file.
|
||||
|
||||
&General::readhash("${General::swroot}/main/settings", \%mainsettings);
|
||||
&General::readhash("/srv/web/ipfire/html/themes/ipfire/include/colors.txt", \%color);
|
||||
|
||||
&Header::showhttpheaders();
|
||||
|
||||
$settings{'ENABLE_SNIBLOCK'} = 'on';
|
||||
$settings{'ACTION'} = '';
|
||||
|
||||
$settings{'KEY1'} = ''; # point record for ACTION
|
||||
$settings{'domainName'} = '';
|
||||
my @nosaved=('domainName', 'KEY1', 'SORT_domainNameLIST');
|
||||
|
||||
#Define each field that can be used to sort columns
|
||||
my $sortstring='^domainName';
|
||||
$settings{'SORT_domainNameLIST'} = 'domainName';
|
||||
|
||||
# Load multiline data
|
||||
our @current = ();
|
||||
if (open(FILE, "$xdpsnidomainfile")) {
|
||||
@current = <FILE>;
|
||||
close (FILE);
|
||||
}
|
||||
|
||||
&Header::getcgihash(\%settings);
|
||||
|
||||
if ($settings{'ACTION'} eq $Lang::tr{'save'})
|
||||
{
|
||||
|
||||
map (delete ($settings{$_}) ,(@nosaved));
|
||||
&General::writehash("$xdpsnisettingfile", \%settings);
|
||||
|
||||
if ($settings{'ENABLE_SNIBLOCK'} eq 'on') {
|
||||
&General::system('/usr/bin/touch', "${General::swroot}/xdpsni/enablexdpsni");
|
||||
&General::system('/usr/local/bin/xdpsnictrl', 'start');
|
||||
} else {
|
||||
&General::system('/usr/local/bin/xdpsnictrl', 'stop');
|
||||
unlink "${General::swroot}/xdpsni/enablexdpsni";
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if ($settings{'ACTION'} eq $Lang::tr{'add'}) {
|
||||
|
||||
#Check for already existing routing entry
|
||||
foreach my $line (@current) {
|
||||
chomp($line); # remove newline
|
||||
#Same domain already used?
|
||||
if($line eq $settings{'domainName'} && $settings{'KEY1'} eq ''){
|
||||
$errormessage = $Lang::tr{'ccd err loxilbconfigeexist'};
|
||||
last;
|
||||
}
|
||||
}
|
||||
|
||||
unless ($errormessage) {
|
||||
if ($settings{'KEY1'} eq '') { #add or edit ?
|
||||
unshift (@current, "$settings{'domainName'}\n");
|
||||
&General::log($Lang::tr{'xdpsni domain added'});
|
||||
} else {
|
||||
@current[$settings{'KEY1'}] = "$settings{'domainName'}\n";
|
||||
$settings{'KEY1'} = ''; # End edit mode
|
||||
&General::log($Lang::tr{'xdpsni domain changed'});
|
||||
}
|
||||
|
||||
&CreateDomain(%settings);
|
||||
|
||||
# Write changes to config file.
|
||||
&SortDataFile; # sort newly added/modified entry
|
||||
|
||||
#map ($settings{$_}='' ,@nosaved); # Clear fields
|
||||
}
|
||||
}
|
||||
|
||||
if ($settings{'ACTION'} eq $Lang::tr{'remove'}) {
|
||||
|
||||
my $line = @current[$settings{'KEY1'}]; # KEY1 is the index in current
|
||||
chomp($line);
|
||||
$settings{'domainName'}=$line;
|
||||
|
||||
&DeleteDomain(%settings);
|
||||
|
||||
splice (@current,$settings{'KEY1'},1); # Delete line
|
||||
open(FILE, ">$xdpsnidomainfile") or die "$xdpsnidomainfile open error";
|
||||
print FILE @current;
|
||||
close(FILE);
|
||||
$settings{'KEY1'} = ''; # End remove mode
|
||||
}
|
||||
|
||||
## Check if sorting is asked
|
||||
# If same column clicked, reverse the sort.
|
||||
if ($ENV{'QUERY_STRING'} =~ /$sortstring/ ) {
|
||||
my $newsort=$ENV{'QUERY_STRING'};
|
||||
my $actual=$settings{'SORT_domainNameLIST'};
|
||||
#Reverse actual sort ?
|
||||
if ($actual =~ $newsort) {
|
||||
my $Rev='';
|
||||
if ($actual !~ 'Rev') {
|
||||
$Rev='Rev';
|
||||
}
|
||||
$newsort.=$Rev;
|
||||
}
|
||||
$settings{'SORT_domainNameLIST'}=$newsort;
|
||||
map (delete ($settings{$_}) ,(@nosaved,'ACTION','KEY1'));# Must never be saved
|
||||
&General::writehash($setting, \%settings);
|
||||
&SortDataFile;
|
||||
$settings{'ACTION'} = 'SORT'; # Create an 'ACTION'
|
||||
map ($settings{$_} = '' ,@nosaved,'KEY1'); # and reinit vars to empty
|
||||
}
|
||||
|
||||
if ($settings{'ACTION'} eq '' ) { # First launch from GUI
|
||||
# Place here default value when nothing is initialized
|
||||
$settings{'domainName'} = '';
|
||||
}
|
||||
|
||||
&Header::openpage($Lang::tr{'xdpsni'}, 1, '');
|
||||
|
||||
&Header::openbigbox('100%', 'left', '', $errormessage);
|
||||
|
||||
if ($errormessage) {
|
||||
&Header::openbox('100%', 'left', $Lang::tr{'error messages'});
|
||||
print "<font class='base' color=red>$errormessage </font>\n";
|
||||
&Header::closebox();
|
||||
}
|
||||
|
||||
# Read configuration file.
|
||||
&General::readhash("$xdpsnisettingfile", \%settings);
|
||||
|
||||
# Checkbox pre-selection.
|
||||
my $checked;
|
||||
if ($settings{'ENABLE_SNIBLOCK'} eq "on") {
|
||||
$checked = "checked='checked'";
|
||||
}
|
||||
|
||||
my $sactive = "<table cellpadding='2' cellspacing='0' bgcolor='${Header::colourred}' width='50%'><tr><td align='center'><b><font color='#FFFFFF'>$Lang::tr{'stopped'}</font></b></td></tr></table>";
|
||||
|
||||
my @status = &General::system_output('/usr/local/bin/xdpsnictrl', 'status');
|
||||
|
||||
if (grep(/is attached/, @status)){
|
||||
$sactive = "<table cellpadding='2' cellspacing='0' bgcolor='${Header::colourgreen}' width='50%'><tr><td align='center'><b><font color='#FFFFFF'>$Lang::tr{'running'}</font></b></td></tr></table>";
|
||||
}
|
||||
|
||||
&Header::openbox('100%', 'center', $Lang::tr{'xdpsni status'});
|
||||
|
||||
print <<END;
|
||||
<table width='100%'>
|
||||
<form method='POST' action='$ENV{'SCRIPT_NAME'}'>
|
||||
<td width='25%'> </td>
|
||||
<td width='25%'> </td>
|
||||
<td width='25%'> </td>
|
||||
<tr><td class='boldbase'>$Lang::tr{'xdpsni status'}</td>
|
||||
<td align='left'>$sactive</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td width='50%' class='boldbase'>$Lang::tr{'xdpsni enable'}
|
||||
<td><input type='checkbox' name='ENABLE_SNIBLOCK' $checked></td>
|
||||
<td align='center'><input type='submit' name='ACTION' value='$Lang::tr{'save'}'></td>
|
||||
</tr>
|
||||
END
|
||||
|
||||
print "</form> </table>\n";
|
||||
|
||||
&Header::closebox();
|
||||
#
|
||||
|
||||
my $buttontext = $Lang::tr{'add'};
|
||||
if ($settings{'KEY1'} ne '') {
|
||||
$buttontext = $Lang::tr{'update'};
|
||||
&Header::openbox('100%', 'left', $Lang::tr{'xdpsni domain edit'});
|
||||
} else {
|
||||
&Header::openbox('100%', 'left', $Lang::tr{'xdpsni domain add'});
|
||||
}
|
||||
|
||||
my @INTERFACES = ("red0", "green0");
|
||||
|
||||
#Edited line number (KEY1) passed until cleared by 'save' or 'remove' or 'new sort order'
|
||||
print <<END;
|
||||
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
|
||||
<input type='hidden' name='KEY1' value='$settings{'KEY1'}' />
|
||||
<table width='100%'>
|
||||
<tr>
|
||||
<td class='base'>$Lang::tr{'xdpsni domain name'}: </td>
|
||||
<td><input type='text' name='domainName' value='$settings{'domainName'}' size='25'/></td>
|
||||
</tr>
|
||||
|
||||
</table>
|
||||
<br>
|
||||
<table width='100%'>
|
||||
<tr>
|
||||
<td width='50%' align='right'><input type='hidden' name='ACTION' value='$Lang::tr{'add'}' /><input type='submit' name='SUBMIT' value='$buttontext' /></td>
|
||||
</tr>
|
||||
</table>
|
||||
</form>
|
||||
END
|
||||
|
||||
&Header::closebox();
|
||||
|
||||
&Header::openbox('100%', 'left', $Lang::tr{'xdpsni domain entries'});
|
||||
|
||||
print <<END;
|
||||
|
||||
<table width='100%' class='tbl'>
|
||||
<tr>
|
||||
<th width='10%' align='center'><a href='$ENV{'SCRIPT_NAME'}?domainName'><b>$Lang::tr{'xdpsni domain name'}</b></a></th>
|
||||
<th width='10%' colspan='3' class='boldbase' align='center'><b>$Lang::tr{'action'}</b></th>
|
||||
</tr>
|
||||
END
|
||||
|
||||
#
|
||||
# Print each line of @current list
|
||||
#
|
||||
|
||||
my $key = 0;
|
||||
my $col="";
|
||||
foreach my $line (@current) {
|
||||
chomp($line); # remove newline
|
||||
|
||||
#Choose icon for checkbox
|
||||
my $gif = '';
|
||||
my $gdesc = '';
|
||||
if ($line ne '' ) {
|
||||
$gif = 'on.gif';
|
||||
$gdesc = $Lang::tr{'click to disable'};
|
||||
} else {
|
||||
$gif = 'off.gif';
|
||||
$gdesc = $Lang::tr{'click to enable'};
|
||||
}
|
||||
|
||||
#Colorize each line
|
||||
if ($settings{'KEY1'} eq $key) {
|
||||
print "<tr bgcolor='${Header::colouryellow}'>";
|
||||
} elsif ($key % 2) {
|
||||
print "<tr>";
|
||||
$col="bgcolor='$color{'color20'}'";
|
||||
} else {
|
||||
print "<tr>";
|
||||
$col="bgcolor='$color{'color22'}'";
|
||||
}
|
||||
print <<END;
|
||||
<td align='center' $col>$line</td>
|
||||
<td align='center' $col>
|
||||
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
|
||||
<input type='hidden' name='ACTION' value='$Lang::tr{'toggle enable disable'}' />
|
||||
<input type='image' name='$Lang::tr{'toggle enable disable'}' src='/images/$gif' alt='$gdesc' title='$gdesc' />
|
||||
<input type='hidden' name='KEY1' value='$key' />
|
||||
</form>
|
||||
</td>
|
||||
|
||||
<td align='center' $col>
|
||||
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
|
||||
<input type='hidden' name='ACTION' value='$Lang::tr{'remove'}' />
|
||||
<input type='image' name='$Lang::tr{'remove'}' src='/images/delete.gif' alt='$Lang::tr{'remove'}' title='$Lang::tr{'remove'}' />
|
||||
<input type='hidden' name='KEY1' value='$key' />
|
||||
</form>
|
||||
</td>
|
||||
</tr>
|
||||
END
|
||||
|
||||
$key++;
|
||||
}
|
||||
print "</table>";
|
||||
|
||||
# If table contains entries, print 'Key to action icons'
|
||||
if ($key) {
|
||||
print <<END;
|
||||
<table>
|
||||
<tr>
|
||||
<td class='boldbase'> <b>$Lang::tr{'legend'}: </b></td>
|
||||
<td><img src='/images/on.gif' alt='$Lang::tr{'click to disable'}' /></td>
|
||||
<td class='base'>$Lang::tr{'click to disable'}</td>
|
||||
<td> </td>
|
||||
<td><img src='/images/off.gif' alt='$Lang::tr{'click to enable'}' /></td>
|
||||
<td class='base'>$Lang::tr{'click to enable'}</td>
|
||||
<td> </td>
|
||||
<td><img src='/images/delete.gif' alt='$Lang::tr{'remove'}' /></td>
|
||||
<td class='base'>$Lang::tr{'remove'}</td>
|
||||
</tr>
|
||||
</table>
|
||||
END
|
||||
}
|
||||
|
||||
&Header::closebox();
|
||||
|
||||
&Header::closebigbox();
|
||||
|
||||
&Header::closepage();
|
||||
|
||||
|
||||
## Ouf it's the end !
|
||||
|
||||
# Sort the "current" array according to choices
|
||||
sub SortDataFile
|
||||
{
|
||||
our %entries = ();
|
||||
|
||||
# Sort pair of record received in $a $b special vars.
|
||||
# When IP is specified use numeric sort else alpha.
|
||||
# If sortname ends with 'Rev', do reverse sort.
|
||||
#
|
||||
sub fixedleasesort {
|
||||
my $qs=''; # The sort field specified minus 'Rev'
|
||||
if (rindex ($settings{'SORT_domainNameLIST'},'Rev') != -1) {
|
||||
$qs=substr ($settings{'SORT_domainNameLIST'},0,length($settings{'SORT_domainNameLIST'})-3);
|
||||
if ($qs eq 'domainName') {
|
||||
my @a = split(/\./,$entries{$a}->{$qs});
|
||||
my @b = split(/\./,$entries{$b}->{$qs});
|
||||
($b[0]<=>$a[0]) ||
|
||||
($b[1]<=>$a[1]) ||
|
||||
($b[2]<=>$a[2]) ||
|
||||
($b[3]<=>$a[3]);
|
||||
} else {
|
||||
$entries{$b}->{$qs} cmp $entries{$a}->{$qs};
|
||||
}
|
||||
} else { #not reverse
|
||||
$qs=$settings{'SORT_domainNameLIST'};
|
||||
if ($qs eq 'domainName') {
|
||||
my @a = split(/\./,$entries{$a}->{$qs});
|
||||
my @b = split(/\./,$entries{$b}->{$qs});
|
||||
($a[0]<=>$b[0]) ||
|
||||
($a[1]<=>$b[1]) ||
|
||||
($a[2]<=>$b[2]) ||
|
||||
($a[3]<=>$b[3]);
|
||||
} else {
|
||||
$entries{$a}->{$qs} cmp $entries{$b}->{$qs};
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
#Use an associative array (%entries)
|
||||
my $key = 0;
|
||||
foreach my $line (@current) {
|
||||
chomp( $line); #remove newline because can be on field 5 or 6 (addition of REMARK)
|
||||
|
||||
# Build a pair 'Field Name',value for each of the data dataline.
|
||||
# Each SORTABLE field must have is pair.
|
||||
# Other data fields (non sortable) can be grouped in one
|
||||
|
||||
my @record = ('KEY',$key++,'domainName',$line);
|
||||
my $record = {}; # create a reference to empty hash
|
||||
%{$record} = @record; # populate that hash with @record
|
||||
$entries{$record->{KEY}} = $record; # add this to a hash of hashes
|
||||
}
|
||||
|
||||
open(FILE, ">$xdpsnidomainfile") or die "$xdpsnidomainfile open error";
|
||||
|
||||
# Each field value is printed , with the newline ! Don't forget separator and order of them.
|
||||
foreach my $entry (sort fixedleasesort keys %entries) {
|
||||
print FILE "$entries{$entry}->{domainName}\n";
|
||||
}
|
||||
|
||||
close(FILE);
|
||||
# Reload sorted @current
|
||||
open (FILE, "$xdpsnidomainfile");
|
||||
@current = <FILE>;
|
||||
close (FILE);
|
||||
}
|
||||
|
||||
sub manageDomain {
|
||||
my ($action, %settings) = @_;
|
||||
|
||||
# Initialize variables
|
||||
my @xdpsni_options;
|
||||
my $command = 'xdp_sni';
|
||||
|
||||
my $domain = $settings{'domainName'};
|
||||
|
||||
push(@xdpsni_options, $action, $domain);
|
||||
|
||||
#debug and display output in UI
|
||||
#my @output = &General::system_output($command, @xdpsni_options);
|
||||
#$errormessage = join('', @output);
|
||||
&General::system($command, @xdpsni_options);
|
||||
|
||||
}
|
||||
|
||||
sub CreateDomain {
|
||||
my (%settings) = @_;
|
||||
manageDomain("add", %settings);
|
||||
}
|
||||
|
||||
sub DeleteDomain {
|
||||
my (%settings) = @_;
|
||||
manageDomain("delete", %settings);
|
||||
}
|
||||
@@ -2518,6 +2518,13 @@
|
||||
'xdpdns domain entries' => 'Domain Blocklist Entries',
|
||||
'xdpdns log' => 'DNS Query Log from XDP',
|
||||
'xdpdns hits' => 'Total number of DNS query log from XDP',
|
||||
'xdpsni status' => 'Status',
|
||||
'xdpsni enable' => 'Enable XDP TLS/SSL Web Blocklist',
|
||||
'xdpsni domain' => 'XDP TLS/SSL Web Blocklist',
|
||||
'xdpsni domain edit' => 'Edit Web',
|
||||
'xdpsni domain add' => 'Add Web',
|
||||
'xdpsni domain name' => 'Web Name',
|
||||
'xdpsni domain entries' => 'Web Blocklist Entries',
|
||||
'xdpsni log' => 'TLS/SSL Web Access Log from XDP',
|
||||
'xdpsni hits' => 'Total number of TLS/SSL Web Access Log from XDP',
|
||||
'status' => 'Status',
|
||||
|
||||
@@ -2483,6 +2483,13 @@
|
||||
'xdpdns domain entries' => '域名过滤列表',
|
||||
'xdpdns log' => 'XDP记录的域名解析日志',
|
||||
'xdpdns hits' => '域名解析日志总数',
|
||||
'xdpsni status' => '运行状态',
|
||||
'xdpsni enable' => '启动',
|
||||
'xdpsni domain' => 'XDP 加密网站过滤服务',
|
||||
'xdpsni domain edit' => '编辑加密网站域名',
|
||||
'xdpsni domain add' => '添加加密网站域名',
|
||||
'xdpsni domain name' => '加密网站域名',
|
||||
'xdpsni domain entries' => '加密网站域名过滤列表',
|
||||
'xdpsni log' => 'XDP记录的加密网站访问日志',
|
||||
'xdpsni hits' => '加密网站访问日志总数',
|
||||
'status' => '状态',
|
||||
|
||||
Reference in New Issue
Block a user