mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
66c3619872
Bumping across one of our scripts with very long trailing whitespaces, I thought it might be a good idea to clean these up. Doing so, some missing or inconsistent licence headers were fixed. There is no need in shipping all these files en bloc, as their functionality won't change. Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
3211 lines
112 KiB
Perl
3211 lines
112 KiB
Perl
#!/usr/bin/perl
|
|
###############################################################################
|
|
# #
|
|
# IPFire.org - A linux based firewall #
|
|
# Copyright (C) 2013 Alexander Marx <amarx@ipfire.org> #
|
|
# #
|
|
# This program is free software: you can redistribute it and/or modify #
|
|
# it under the terms of the GNU General Public License as published by #
|
|
# the Free Software Foundation, either version 3 of the License, or #
|
|
# (at your option) any later version. #
|
|
# #
|
|
# This program is distributed in the hope that it will be useful, #
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
|
# GNU General Public License for more details. #
|
|
# #
|
|
# You should have received a copy of the GNU General Public License #
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
|
# #
|
|
###############################################################################
|
|
use strict;
|
|
|
|
# enable only the following on debugging purpose
|
|
#use warnings;
|
|
|
|
use Sort::Naturally;
|
|
use CGI::Carp 'fatalsToBrowser';
|
|
no warnings 'uninitialized';
|
|
require '/var/ipfire/general-functions.pl';
|
|
require '/var/ipfire/network-functions.pl';
|
|
require "/var/ipfire/location-functions.pl";
|
|
require "/usr/lib/firewall/firewall-lib.pl";
|
|
require "${General::swroot}/lang.pl";
|
|
require "${General::swroot}/header.pl";
|
|
|
|
my %fwhostsettings=();
|
|
my %customnetwork=();
|
|
my %customhost=();
|
|
my %customgrp=();
|
|
my %customservice=();
|
|
my %customservicegrp=();
|
|
my %customlocationgrp=();
|
|
my %ccdnet=();
|
|
my %ccdhost=();
|
|
my %ipsecconf=();
|
|
my %icmptypes=();
|
|
my %color=();
|
|
my %defaultNetworks=();
|
|
my %mainsettings=();
|
|
my %ownnet=();
|
|
my %ipsecsettings=();
|
|
my %fwfwd=();
|
|
my %fwinp=();
|
|
my %fwout=();
|
|
my %ovpnsettings=();
|
|
my %netsettings=();
|
|
my %optionsfw=();
|
|
|
|
my $errormessage;
|
|
my $hint;
|
|
my $update=0;
|
|
my $confignet = "${General::swroot}/fwhosts/customnetworks";
|
|
my $confighost = "${General::swroot}/fwhosts/customhosts";
|
|
my $configgrp = "${General::swroot}/fwhosts/customgroups";
|
|
my $configccdnet = "${General::swroot}/ovpn/ccd.conf";
|
|
my $configccdhost = "${General::swroot}/ovpn/ovpnconfig";
|
|
my $configipsec = "${General::swroot}/vpn/config";
|
|
my $configsrv = "${General::swroot}/fwhosts/customservices";
|
|
my $configsrvgrp = "${General::swroot}/fwhosts/customservicegrp";
|
|
my $configlocationgrp = "${General::swroot}/fwhosts/customlocationgrp";
|
|
my $fwconfigfwd = "${General::swroot}/firewall/config";
|
|
my $fwconfiginp = "${General::swroot}/firewall/input";
|
|
my $fwconfigout = "${General::swroot}/firewall/outgoing";
|
|
my $fwoptions = "${General::swroot}/optionsfw/settings";
|
|
my $configovpn = "${General::swroot}/ovpn/settings";
|
|
my $configipsecrw = "${General::swroot}/vpn/settings";
|
|
|
|
unless (-e $confignet) { &General::system("touch", "$confignet"); }
|
|
unless (-e $confighost) { &General::system("touch", "$confighost"); }
|
|
unless (-e $configgrp) { &General::system("touch", "$configgrp"); }
|
|
unless (-e $configsrv) { &General::system("touch", "$configsrv"); }
|
|
unless (-e $configsrvgrp) { &General::system("touch", "$configsrvgrp"); }
|
|
unless (-e $configlocationgrp) { &General::system("touch $configlocationgrp"); }
|
|
|
|
&General::readhash("${General::swroot}/main/settings", \%mainsettings);
|
|
&General::readhash("/srv/web/ipfire/html/themes/ipfire/include/colors.txt", \%color);
|
|
&General::readhash("${General::swroot}/ethernet/settings", \%ownnet);
|
|
&General::readhash("$configovpn", \%ovpnsettings);
|
|
&General::readhasharray("$configipsec", \%ipsecconf);
|
|
&General::readhash("$configipsecrw", \%ipsecsettings);
|
|
&General::readhash("/var/ipfire/ethernet/settings", \%netsettings);
|
|
&General::readhash($fwoptions, \%optionsfw);
|
|
|
|
&Header::getcgihash(\%fwhostsettings);
|
|
&Header::showhttpheaders();
|
|
&Header::openpage($Lang::tr{'fwhost menu'}, 1, '');
|
|
&Header::openbigbox('100%', 'center');
|
|
|
|
#### JAVA SCRIPT ####
|
|
print<<END;
|
|
<script>
|
|
var PROTOCOLS_WITH_PORTS = ["TCP", "UDP"];
|
|
var update_protocol = function() {
|
|
var protocol = \$("#protocol").val();
|
|
|
|
if (protocol === undefined)
|
|
return;
|
|
|
|
// Check if we are dealing with a protocol, that knows ports.
|
|
if (\$.inArray(protocol, PROTOCOLS_WITH_PORTS) >= 0) {
|
|
\$("#PORT").show();
|
|
\$("#PROTOKOLL").hide();
|
|
} else {
|
|
\$("#PORT").hide();
|
|
\$("#PROTOKOLL").show();
|
|
}
|
|
};
|
|
|
|
\$(document).ready(function() {
|
|
var protocol = \$("#protocol").val();
|
|
\$("#protocol").change(update_protocol);
|
|
update_protocol();
|
|
// Automatically select radio buttons when corresponding
|
|
// dropdown menu changes.
|
|
\$("select").change(function() {
|
|
var id = \$(this).attr("name");
|
|
\$('#' + id).prop("checked", true);
|
|
});
|
|
});
|
|
</script>
|
|
END
|
|
|
|
## ACTION ####
|
|
# Update
|
|
if ($fwhostsettings{'ACTION'} eq 'updatenet' )
|
|
{
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
foreach my $key (keys %customnetwork)
|
|
{
|
|
if($customnetwork{$key}[0] eq $fwhostsettings{'orgname'})
|
|
{
|
|
$fwhostsettings{'orgname'} = $customnetwork{$key}[0];
|
|
$fwhostsettings{'orgip'} = $customnetwork{$key}[1];
|
|
$fwhostsettings{'orgsub'} = $customnetwork{$key}[2];
|
|
$fwhostsettings{'netremark'} = $customnetwork{$key}[3];
|
|
$fwhostsettings{'count'} = $customnetwork{$key}[4];
|
|
delete $customnetwork{$key};
|
|
|
|
}
|
|
}
|
|
&General::writehasharray("$confignet", \%customnetwork);
|
|
$fwhostsettings{'actualize'} = 'on';
|
|
$fwhostsettings{'ACTION'} = 'savenet';
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'updatehost')
|
|
{
|
|
my ($ip,$subnet);
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
foreach my $key (keys %customhost)
|
|
{
|
|
if($customhost{$key}[0] eq $fwhostsettings{'orgname'})
|
|
{
|
|
if ($customhost{$key}[1] eq 'ip'){
|
|
($ip,$subnet) = split (/\//,$customhost{$key}[2]);
|
|
}else{
|
|
$ip = $customhost{$key}[2];
|
|
}
|
|
$fwhostsettings{'orgip'} = $ip;
|
|
$fwhostsettings{'count'} = $customhost{$key}[4];
|
|
delete $customhost{$key};
|
|
&General::writehasharray("$confighost", \%customhost);
|
|
}
|
|
}
|
|
$fwhostsettings{'actualize'} = 'on';
|
|
if($fwhostsettings{'orgip'}){
|
|
$fwhostsettings{'ACTION'} = 'savehost';
|
|
}else{
|
|
$fwhostsettings{'ACTION'} = $Lang::tr{'fwhost newhost'};
|
|
}
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'updateservice')
|
|
{
|
|
my $count=0;
|
|
my $needrules=0;
|
|
$errormessage=&checkports(\%customservice);
|
|
if ($fwhostsettings{'oldsrvname'} ne $fwhostsettings{'SRV_NAME'} && !&checkgroup($fwhostsettings{'SRV_NAME'})){
|
|
$errormessage=$Lang::tr{'fwhost err grpexist'};
|
|
}
|
|
if (!$errormessage){
|
|
&General::readhasharray("$configsrv", \%customservice);
|
|
foreach my $key (keys %customservice)
|
|
{
|
|
if ($customservice{$key}[0] eq $fwhostsettings{'oldsrvname'})
|
|
{
|
|
delete $customservice{$key};
|
|
&General::writehasharray("$configsrv", \%customservice);
|
|
last;
|
|
}
|
|
}
|
|
if ($fwhostsettings{'PROT'} ne 'ICMP'){
|
|
$fwhostsettings{'ICMP_TYPES'}='BLANK';
|
|
}
|
|
my $key1 = &General::findhasharraykey(\%customservice);
|
|
#find out short ICMP-TYPE
|
|
&General::readhasharray("${General::swroot}/fwhosts/icmp-types", \%icmptypes);
|
|
foreach my $key (keys %icmptypes){
|
|
if ("$icmptypes{$key}[0] ($icmptypes{$key}[1])" eq $fwhostsettings{'ICMP_TYPES'}){
|
|
$fwhostsettings{'ICMP_TYPES'}=$icmptypes{$key}[0];
|
|
}
|
|
}
|
|
foreach my $i (0 .. 4) { $customservice{$key1}[$i] = "";}
|
|
$customservice{$key1}[0] = $fwhostsettings{'SRV_NAME'};
|
|
$customservice{$key1}[1] = $fwhostsettings{'SRV_PORT'};
|
|
$customservice{$key1}[2] = $fwhostsettings{'PROT'};
|
|
$customservice{$key1}[3] = $fwhostsettings{'ICMP_TYPES'};
|
|
&General::writehasharray("$configsrv", \%customservice);
|
|
#check if we need to update firewallrules
|
|
if ($fwhostsettings{'SRV_NAME'} ne $fwhostsettings{'oldsrvname'}){
|
|
if ( ! -z $fwconfigfwd ){
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
foreach my $key (sort keys %fwfwd){
|
|
if ($fwfwd{$key}[15] eq $fwhostsettings{'oldsrvname'}){
|
|
$fwfwd{$key}[15] = $fwhostsettings{'SRV_NAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfigfwd", \%fwfwd);
|
|
}
|
|
if ( ! -z $fwconfiginp ){
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
foreach my $line (sort keys %fwinp){
|
|
if ($fwfwd{$line}[15] eq $fwhostsettings{'oldsrvname'}){
|
|
$fwfwd{$line}[15] = $fwhostsettings{'SRV_NAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfiginp", \%fwinp);
|
|
}
|
|
if ( ! -z $fwconfigout ){
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
foreach my $line (sort keys %fwout){
|
|
if ($fwout{$line}[15] eq $fwhostsettings{'oldsrvname'}){
|
|
$fwout{$line}[15] = $fwhostsettings{'SRV_NAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfigout", \%fwout);
|
|
}
|
|
#check if we need to update groups
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp);
|
|
foreach my $key (sort keys %customservicegrp){
|
|
if($customservicegrp{$key}[2] eq $fwhostsettings{'oldsrvname'}){
|
|
$customservicegrp{$key}[2] = $fwhostsettings{'SRV_NAME'};
|
|
&checkrulereload($customservicegrp{$key}[0]);
|
|
}
|
|
}
|
|
&General::writehasharray("$configsrvgrp", \%customservicegrp);
|
|
}
|
|
&checkrulereload($fwhostsettings{'SRV_NAME'});
|
|
$fwhostsettings{'SRV_NAME'} = '';
|
|
$fwhostsettings{'SRV_PORT'} = '';
|
|
$fwhostsettings{'PROT'} = '';
|
|
$fwhostsettings{'ICMP'} = '';
|
|
$fwhostsettings{'oldsrvicmp'} = '';
|
|
$fwhostsettings{'updatesrv'} = '';
|
|
}else{
|
|
$fwhostsettings{'SRV_NAME'} = $fwhostsettings{'oldsrvname'};
|
|
$fwhostsettings{'SRV_PORT'} = $fwhostsettings{'oldsrvport'};
|
|
$fwhostsettings{'PROT'} = $fwhostsettings{'oldsrvprot'};
|
|
$fwhostsettings{'ICMP'} = $fwhostsettings{'oldsrvicmp'};
|
|
$fwhostsettings{'updatesrv'}= 'on';
|
|
}
|
|
&addservice;
|
|
}
|
|
# save
|
|
if ($fwhostsettings{'ACTION'} eq 'savenet' )
|
|
{
|
|
my $needrules=0;
|
|
if ($fwhostsettings{'orgname'} eq ''){$fwhostsettings{'orgname'}=$fwhostsettings{'HOSTNAME'};}
|
|
#check if all fields are set
|
|
if ($fwhostsettings{'HOSTNAME'} eq '' || $fwhostsettings{'IP'} eq '' || $fwhostsettings{'SUBNET'} eq '')
|
|
{
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err empty'};
|
|
&addnet;
|
|
&viewtablenet;
|
|
}else{
|
|
#convert ip if leading '0' exists
|
|
$fwhostsettings{'IP'} = &Network::ip_remove_zero($fwhostsettings{'IP'});
|
|
|
|
#check valid ip
|
|
if (!&General::validipandmask($fwhostsettings{'IP'}."/".$fwhostsettings{'SUBNET'}))
|
|
{
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err addr'};
|
|
$fwhostsettings{'BLK_HOST'} ='readonly';
|
|
$fwhostsettings{'NOCHECK'} ='false';
|
|
$fwhostsettings{'error'} ='on';
|
|
}
|
|
#check remark
|
|
if ($fwhostsettings{'NETREMARK'} ne '' && !&validremark($fwhostsettings{'NETREMARK'})){
|
|
$errormessage=$Lang::tr{'fwhost err remark'};
|
|
$fwhostsettings{'error'} ='on';
|
|
}
|
|
#check if subnet is sigle host
|
|
if(&General::iporsubtocidr($fwhostsettings{'SUBNET'}) eq '32')
|
|
{
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err sub32'};
|
|
}
|
|
if($fwhostsettings{'error'} ne 'on'){
|
|
my $fullip="$fwhostsettings{'IP'}/".&General::iporsubtocidr($fwhostsettings{'SUBNET'});
|
|
$errormessage=$errormessage.&General::checksubnets($fwhostsettings{'HOSTNAME'},$fullip,"","exact");
|
|
}
|
|
#only check plausi when no error till now
|
|
if (!$errormessage){
|
|
&plausicheck("editnet");
|
|
}
|
|
if($fwhostsettings{'actualize'} eq 'on' && $fwhostsettings{'newnet'} ne 'on' && $errormessage)
|
|
{
|
|
$fwhostsettings{'actualize'} = '';
|
|
my $key = &General::findhasharraykey (\%customnetwork);
|
|
foreach my $i (0 .. 3) { $customnetwork{$key}[$i] = "";}
|
|
$customnetwork{$key}[0] = $fwhostsettings{'orgname'} ;
|
|
$customnetwork{$key}[1] = $fwhostsettings{'orgip'} ;
|
|
$customnetwork{$key}[2] = $fwhostsettings{'orgsub'};
|
|
$customnetwork{$key}[3] = $fwhostsettings{'orgnetremark'};
|
|
&General::writehasharray("$confignet", \%customnetwork);
|
|
undef %customnetwork;
|
|
}
|
|
if (!$errormessage){
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
if ($fwhostsettings{'ACTION'} eq 'updatenet'){
|
|
if ($fwhostsettings{'update'} == '0'){
|
|
foreach my $key (keys %customnetwork) {
|
|
if($customnetwork{$key}[0] eq $fwhostsettings{'orgname'}){
|
|
delete $customnetwork{$key};
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
#get count if actualize is 'on'
|
|
if($fwhostsettings{'actualize'} eq 'on'){
|
|
$fwhostsettings{'actualize'} = '';
|
|
#check if we need to reload rules
|
|
if($fwhostsettings{'orgip'} ne $fwhostsettings{'IP'}){
|
|
$needrules='on';
|
|
}
|
|
if ($fwhostsettings{'orgname'} ne $fwhostsettings{'HOSTNAME'}){
|
|
#check if we need to update groups
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
foreach my $key (sort keys %customgrp){
|
|
if($customgrp{$key}[2] eq $fwhostsettings{'orgname'}){
|
|
$customgrp{$key}[2]=$fwhostsettings{'HOSTNAME'};
|
|
last;
|
|
}
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp);
|
|
#check if we need to update firewallrules
|
|
if ( ! -z $fwconfigfwd ){
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
foreach my $line (sort keys %fwfwd){
|
|
if ($fwfwd{$line}[4] eq $fwhostsettings{'orgname'}){
|
|
$fwfwd{$line}[4] = $fwhostsettings{'HOSTNAME'};
|
|
}
|
|
if ($fwfwd{$line}[6] eq $fwhostsettings{'orgname'}){
|
|
$fwfwd{$line}[6] = $fwhostsettings{'HOSTNAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfigfwd", \%fwfwd);
|
|
}
|
|
if ( ! -z $fwconfiginp ){
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
foreach my $line (sort keys %fwinp){
|
|
if ($fwfwd{$line}[4] eq $fwhostsettings{'orgname'}){
|
|
$fwfwd{$line}[4] = $fwhostsettings{'HOSTNAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfiginp", \%fwinp);
|
|
}
|
|
}
|
|
}
|
|
my $key = &General::findhasharraykey (\%customnetwork);
|
|
foreach my $i (0 .. 3) { $customnetwork{$key}[$i] = "";}
|
|
$fwhostsettings{'SUBNET'} = &General::iporsubtocidr($fwhostsettings{'SUBNET'});
|
|
$customnetwork{$key}[0] = $fwhostsettings{'HOSTNAME'};
|
|
$customnetwork{$key}[1] = &General::getnetworkip($fwhostsettings{'IP'},$fwhostsettings{'SUBNET'}) ;
|
|
$customnetwork{$key}[2] = &General::iporsubtodec($fwhostsettings{'SUBNET'}) ;
|
|
$customnetwork{$key}[3] = $fwhostsettings{'NETREMARK'};
|
|
&General::writehasharray("$confignet", \%customnetwork);
|
|
$fwhostsettings{'IP'}=$fwhostsettings{'IP'}."/".&General::iporsubtodec($fwhostsettings{'SUBNET'});
|
|
undef %customnetwork;
|
|
$fwhostsettings{'HOSTNAME'}='';
|
|
$fwhostsettings{'IP'}='';
|
|
$fwhostsettings{'SUBNET'}='';
|
|
$fwhostsettings{'NETREMARK'}='';
|
|
#check if an edited net affected groups and need to reload rules
|
|
if ($needrules eq 'on'){
|
|
&General::firewall_config_changed();
|
|
}
|
|
&addnet;
|
|
&viewtablenet;
|
|
}else{
|
|
$fwhostsettings{'HOSTNAME'} = $fwhostsettings{'orgname'};
|
|
&addnet;
|
|
&viewtablenet;
|
|
}
|
|
}
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'savehost')
|
|
{
|
|
my $needrules=0;
|
|
if ($fwhostsettings{'orgname'} eq ''){$fwhostsettings{'orgname'}=$fwhostsettings{'HOSTNAME'};}
|
|
$fwhostsettings{'SUBNET'}='32';
|
|
#check if all fields are set
|
|
if ($fwhostsettings{'HOSTNAME'} eq '' || $fwhostsettings{'IP'} eq '' || $fwhostsettings{'SUBNET'} eq '')
|
|
{
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err empty'};
|
|
$fwhostsettings{'ACTION'} = 'edithost';
|
|
}else{
|
|
if($fwhostsettings{'IP'}=~/^([0-9a-fA-F]{1,2}:){5}[0-9a-fA-F]{1,2}$/){
|
|
$fwhostsettings{'type'} = 'mac';
|
|
}elsif($fwhostsettings{'IP'}=~/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/){
|
|
$fwhostsettings{'type'} = 'ip';
|
|
}else{
|
|
$fwhostsettings{'type'} = '';
|
|
$errormessage=$Lang::tr{'fwhost err ipmac'};
|
|
}
|
|
#check remark
|
|
if ($fwhostsettings{'HOSTREMARK'} ne '' && !&validremark($fwhostsettings{'HOSTREMARK'})){
|
|
$errormessage=$Lang::tr{'fwhost err remark'};
|
|
}
|
|
#CHECK IP-PART
|
|
if ($fwhostsettings{'type'} eq 'ip'){
|
|
#convert ip if leading '0' exists
|
|
$fwhostsettings{'IP'} = &Network::ip_remove_zero($fwhostsettings{'IP'});
|
|
|
|
#check for subnet
|
|
if (rindex($fwhostsettings{'IP'},'/') eq '-1' ){
|
|
if($fwhostsettings{'type'} eq 'ip' && !&General::validipandmask($fwhostsettings{'IP'}."/32"))
|
|
{
|
|
$errormessage.=$errormessage.$Lang::tr{'fwhost err ip'};
|
|
$fwhostsettings{'error'}='on';
|
|
}
|
|
}elsif(rindex($fwhostsettings{'IP'},'/') ne '-1' ){
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err ipwithsub'};
|
|
$fwhostsettings{'error'}='on';
|
|
}
|
|
#check if net or broadcast
|
|
my @tmp= split (/\./,$fwhostsettings{'IP'});
|
|
if (($tmp[3] eq "0") || ($tmp[3] eq "255")){
|
|
$errormessage=$Lang::tr{'fwhost err hostip'};
|
|
}
|
|
}
|
|
#only check plausi when no error till now
|
|
if (!$errormessage){
|
|
&plausicheck("edithost");
|
|
}
|
|
if($fwhostsettings{'actualize'} eq 'on' && $fwhostsettings{'newhost'} ne 'on' && $errormessage){
|
|
$fwhostsettings{'actualize'} = '';
|
|
my $key = &General::findhasharraykey (\%customhost);
|
|
foreach my $i (0 .. 3) { $customhost{$key}[$i] = "";}
|
|
$customhost{$key}[0] = $fwhostsettings{'orgname'} ;
|
|
$customhost{$key}[1] = $fwhostsettings{'type'} ;
|
|
if($customhost{$key}[1] eq 'ip'){
|
|
$customhost{$key}[2] = $fwhostsettings{'orgip'}."/".&General::iporsubtodec($fwhostsettings{'SUBNET'});
|
|
}else{
|
|
$customhost{$key}[2] = $fwhostsettings{'orgip'};
|
|
}
|
|
$customhost{$key}[3] = $fwhostsettings{'orgremark'};
|
|
&General::writehasharray("$confighost", \%customhost);
|
|
undef %customhost;
|
|
}
|
|
if (!$errormessage){
|
|
#get count if host was edited
|
|
if($fwhostsettings{'actualize'} eq 'on'){
|
|
if($fwhostsettings{'orgip'} ne $fwhostsettings{'IP'}){
|
|
$needrules='on';
|
|
}
|
|
if($fwhostsettings{'orgname'} ne $fwhostsettings{'HOSTNAME'}){
|
|
#check if we need to update groups
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
foreach my $key (sort keys %customgrp){
|
|
if($customgrp{$key}[2] eq $fwhostsettings{'orgname'}){
|
|
$customgrp{$key}[2]=$fwhostsettings{'HOSTNAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp);
|
|
#check if we need to update firewallrules
|
|
if ( ! -z $fwconfigfwd ){
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
foreach my $line (sort keys %fwfwd){
|
|
if ($fwfwd{$line}[4] eq $fwhostsettings{'orgname'}){
|
|
$fwfwd{$line}[4] = $fwhostsettings{'HOSTNAME'};
|
|
}
|
|
if ($fwfwd{$line}[6] eq $fwhostsettings{'orgname'}){
|
|
$fwfwd{$line}[6] = $fwhostsettings{'HOSTNAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfigfwd", \%fwfwd);
|
|
}
|
|
if ( ! -z $fwconfiginp ){
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
foreach my $line (sort keys %fwinp){
|
|
if ($fwfwd{$line}[4] eq $fwhostsettings{'orgname'}){
|
|
$fwfwd{$line}[4] = $fwhostsettings{'HOSTNAME'};
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfiginp", \%fwinp);
|
|
}
|
|
}
|
|
}
|
|
my $key = &General::findhasharraykey (\%customhost);
|
|
foreach my $i (0 .. 3) { $customhost{$key}[$i] = "";}
|
|
$customhost{$key}[0] = $fwhostsettings{'HOSTNAME'} ;
|
|
$customhost{$key}[1] = $fwhostsettings{'type'} ;
|
|
if ($fwhostsettings{'type'} eq 'ip'){
|
|
$customhost{$key}[2] = $fwhostsettings{'IP'}."/".&General::iporsubtodec($fwhostsettings{'SUBNET'});
|
|
}else{
|
|
$customhost{$key}[2] = $fwhostsettings{'IP'};
|
|
}
|
|
$customhost{$key}[3] = $fwhostsettings{'HOSTREMARK'};
|
|
&General::writehasharray("$confighost", \%customhost);
|
|
undef %customhost;
|
|
$fwhostsettings{'HOSTNAME'}='';
|
|
$fwhostsettings{'IP'}='';
|
|
$fwhostsettings{'type'}='';
|
|
$fwhostsettings{'HOSTREMARK'}='';
|
|
#check if we need to update rules while host was edited
|
|
if($needrules eq 'on'){
|
|
&General::firewall_config_changed();
|
|
}
|
|
&addhost;
|
|
&viewtablehost;
|
|
}else{
|
|
&addhost;
|
|
&viewtablehost;
|
|
}
|
|
}
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'savegrp')
|
|
{
|
|
my $grp=$fwhostsettings{'grp_name'};
|
|
my $rem=$fwhostsettings{'remark'};
|
|
my $count;
|
|
my $type;
|
|
my $updcounter='off';
|
|
my @target;
|
|
my @newgrp;
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
#check name
|
|
if (!&validhostname($grp)){$errormessage.=$Lang::tr{'fwhost err name'};}
|
|
#check existing name
|
|
if (!&checkgroup($grp) && $fwhostsettings{'update'} ne 'on'){$errormessage.=$Lang::tr{'fwhost err grpexist'};}
|
|
#check remark
|
|
if ($rem ne '' && !&validremark($rem) && $fwhostsettings{'update'} ne 'on'){
|
|
$errormessage.=$Lang::tr{'fwhost err remark'};
|
|
}
|
|
if ($fwhostsettings{'update'} eq 'on'){
|
|
#check standard networks
|
|
if ($fwhostsettings{'grp2'} eq 'std_net'){
|
|
@target=$fwhostsettings{'DEFAULT_SRC_ADR'};
|
|
$type='Standard Network';
|
|
}
|
|
#check custom networks
|
|
if ($fwhostsettings{'grp2'} eq 'cust_net' && $fwhostsettings{'CUST_SRC_NET'} ne ''){
|
|
@target=$fwhostsettings{'CUST_SRC_NET'};
|
|
$updcounter='net';
|
|
$type='Custom Network';
|
|
}elsif($fwhostsettings{'grp2'} eq 'cust_net' && $fwhostsettings{'CUST_SRC_NET'} eq ''){
|
|
$errormessage=$Lang::tr{'fwhost err groupempty'}."<br>";
|
|
$fwhostsettings{'grp_name'}='';
|
|
$fwhostsettings{'remark'}='';
|
|
}
|
|
#check custom addresses
|
|
if ($fwhostsettings{'grp2'} eq 'cust_host' && $fwhostsettings{'CUST_SRC_HOST'} ne ''){
|
|
@target=$fwhostsettings{'CUST_SRC_HOST'};
|
|
$updcounter='host';
|
|
$type='Custom Host';
|
|
}elsif($fwhostsettings{'grp2'} eq 'cust_host' && $fwhostsettings{'CUST_SRC_HOST'} eq ''){
|
|
$errormessage=$Lang::tr{'fwhost err groupempty'}."<br>";
|
|
$fwhostsettings{'grp_name'}='';
|
|
$fwhostsettings{'remark'}='';
|
|
}
|
|
#get address from ovpn ccd static net
|
|
if ($fwhostsettings{'grp2'} eq 'ovpn_net' && $fwhostsettings{'OVPN_CCD_NET'} ne ''){
|
|
@target=$fwhostsettings{'OVPN_CCD_NET'};
|
|
$type='OpenVPN static network';
|
|
}elsif($fwhostsettings{'grp2'} eq 'ovpn_net' && $fwhostsettings{'OVPN_CCD_NET'} eq ''){
|
|
$errormessage=$Lang::tr{'fwhost err groupempty'};
|
|
$fwhostsettings{'grp_name'}='';
|
|
$fwhostsettings{'remark'}='';
|
|
}
|
|
#get address from ovpn ccd static host
|
|
if ($fwhostsettings{'grp2'} eq 'ovpn_host' && $fwhostsettings{'OVPN_CCD_HOST'} ne ''){
|
|
@target=$fwhostsettings{'OVPN_CCD_HOST'};
|
|
$type='OpenVPN static host';
|
|
}elsif ($fwhostsettings{'grp2'} eq 'ovpn_host' && $fwhostsettings{'OVPN_CCD_HOST'} eq ''){
|
|
$errormessage=$Lang::tr{'fwhost err groupempty'};
|
|
}
|
|
#get address from ovpn ccd Net-2-Net
|
|
if ($fwhostsettings{'grp2'} eq 'ovpn_n2n' && $fwhostsettings{'OVPN_N2N'} ne ''){
|
|
@target=$fwhostsettings{'OVPN_N2N'};
|
|
$type='OpenVPN N-2-N';
|
|
}elsif ($fwhostsettings{'grp2'} eq 'ovpn_n2n' && $fwhostsettings{'OVPN_N2N'} eq ''){
|
|
$errormessage=$Lang::tr{'fwhost err groupempty'};
|
|
$fwhostsettings{'grp_name'}='';
|
|
$fwhostsettings{'remark'}='';
|
|
}
|
|
#get address from IPSEC HOST
|
|
if ($fwhostsettings{'grp2'} eq 'ipsec_host' && $fwhostsettings{'IPSEC_HOST'} ne ''){
|
|
@target=$fwhostsettings{'IPSEC_HOST'};
|
|
$type='IpSec Host';
|
|
}elsif ($fwhostsettings{'grp2'} eq 'ipsec_host' && $fwhostsettings{'IPSEC_HOST'} eq ''){
|
|
$errormessage=$Lang::tr{'fwhost err groupempty'};
|
|
$fwhostsettings{'grp_name'}='';
|
|
$fwhostsettings{'remark'}='';
|
|
}
|
|
#get address from IPSEC NETWORK
|
|
if ($fwhostsettings{'grp2'} eq 'ipsec_net' && $fwhostsettings{'IPSEC_NET'} ne ''){
|
|
@target=$fwhostsettings{'IPSEC_NET'};
|
|
$type='IpSec Network';
|
|
}elsif ($fwhostsettings{'grp2'} eq 'ipsec_net' && $fwhostsettings{'IPSEC_NET'} eq ''){
|
|
$errormessage=$Lang::tr{'fwhost err groupempty'};
|
|
$fwhostsettings{'grp_name'}='';
|
|
$fwhostsettings{'remark'}='';
|
|
}
|
|
#check if host/net exists in grp
|
|
|
|
my $test="$grp,$fwhostsettings{'oldremark'},@target,$type";
|
|
foreach my $key (keys %customgrp) {
|
|
my $test1="$customgrp{$key}[0],$customgrp{$key}[1],$customgrp{$key}[2],$customgrp{$key}[3]";
|
|
if ($test1 eq $test){
|
|
$errormessage=$Lang::tr{'fwhost err isingrp'};
|
|
$fwhostsettings{'update'} = 'on';
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$errormessage){
|
|
#on first save, we have an empty @target, so fill it with nothing
|
|
my $targetvalues=@target;
|
|
if ($targetvalues == '0'){
|
|
@target="none";
|
|
}
|
|
#on update, we have to delete the dummy entry
|
|
foreach my $key (keys %customgrp){
|
|
if ($customgrp{$key}[0] eq $grp && $customgrp{$key}[2] eq "none"){
|
|
delete $customgrp{$key};
|
|
last;
|
|
}
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp);
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
#create array with new lines
|
|
foreach my $line (@target){
|
|
push (@newgrp,"$grp,$rem,$line");
|
|
}
|
|
#append new entries
|
|
my $key = &General::findhasharraykey (\%customgrp);
|
|
foreach my $line (@newgrp){
|
|
foreach my $i (0 .. 3) { $customgrp{$key}[$i] = "";}
|
|
my ($a,$b,$c,$d) = split (",",$line);
|
|
$customgrp{$key}[0] = $a;
|
|
$customgrp{$key}[1] = $b;
|
|
$customgrp{$key}[2] = $c;
|
|
$customgrp{$key}[3] = $type;
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp);
|
|
#update counter in Host/Net
|
|
$fwhostsettings{'update'}='on';
|
|
}
|
|
#check if ruleupdate is needed
|
|
my $netgrpcount=0;
|
|
$netgrpcount=&getnetcount($grp);
|
|
if($netgrpcount > 0 )
|
|
{
|
|
&General::firewall_config_changed();
|
|
}
|
|
&addgrp;
|
|
&viewtablegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'savelocationgrp')
|
|
{
|
|
my $grp=$fwhostsettings{'grp_name'};
|
|
my $rem=$fwhostsettings{'remark'};
|
|
my $count;
|
|
my $type;
|
|
my @target;
|
|
my @newgrp;
|
|
&General::readhasharray("$configlocationgrp", \%customlocationgrp);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
|
|
# Check for existing group name.
|
|
if (!&checkgroup($grp) && $fwhostsettings{'update'} ne 'on'){
|
|
$errormessage = $Lang::tr{'fwhost err grpexist'};
|
|
}
|
|
|
|
# Check remark.
|
|
if ($rem ne '' && !&validremark($rem) && $fwhostsettings{'update'} ne 'on'){
|
|
$errormessage = $Lang::tr{'fwhost err remark'};
|
|
}
|
|
|
|
if ($fwhostsettings{'update'} eq 'on'){
|
|
@target=$fwhostsettings{'COUNTRY_CODE'};
|
|
$type='Location Group';
|
|
|
|
#check if host/net exists in grp
|
|
my $test="$grp,$fwhostsettings{'oldremark'},@target";
|
|
foreach my $key (keys %customlocationgrp) {
|
|
my $test1="$customlocationgrp{$key}[0],$customlocationgrp{$key}[1],$customlocationgrp{$key}[2]";
|
|
if ($test1 eq $test){
|
|
$errormessage=$Lang::tr{'fwhost err isingrp'};
|
|
$fwhostsettings{'update'} = 'on';
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$errormessage){
|
|
#on first save, we have an empty @target, so fill it with nothing
|
|
my $targetvalues=@target;
|
|
if ($targetvalues == '0'){
|
|
@target="none";
|
|
}
|
|
#on update, we have to delete the dummy entry
|
|
foreach my $key (keys %customlocationgrp){
|
|
if ($customlocationgrp{$key}[0] eq $grp && $customlocationgrp{$key}[2] eq "none"){
|
|
delete $customlocationgrp{$key};
|
|
last;
|
|
}
|
|
}
|
|
&General::writehasharray("$configlocationgrp", \%customlocationgrp);
|
|
&General::readhasharray("$configlocationgrp", \%customlocationgrp);
|
|
#create array with new lines
|
|
foreach my $line (@target){
|
|
push (@newgrp,"$grp,$rem,$line");
|
|
}
|
|
#append new entries
|
|
my $key = &General::findhasharraykey (\%customlocationgrp);
|
|
foreach my $line (@newgrp){
|
|
foreach my $i (0 .. 3) { $customlocationgrp{$key}[$i] = "";}
|
|
my ($a,$b,$c,$d) = split (",",$line);
|
|
$customlocationgrp{$key}[0] = $a;
|
|
$customlocationgrp{$key}[1] = $b;
|
|
$customlocationgrp{$key}[2] = $c;
|
|
$customlocationgrp{$key}[3] = $type;
|
|
}
|
|
&General::writehasharray("$configlocationgrp", \%customlocationgrp);
|
|
#update counter in Host/Net
|
|
$fwhostsettings{'update'}='on';
|
|
}
|
|
#check if ruleupdate is needed
|
|
my $locationgrpcount=0;
|
|
$locationgrpcount=&getlocationcount($grp);
|
|
if($locationgrpcount > 0 )
|
|
{
|
|
&General::firewall_config_changed();
|
|
}
|
|
&addlocationgrp;
|
|
&viewtablelocationgrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'saveservice')
|
|
{
|
|
my $ICMP;
|
|
&General::readhasharray("$configsrv", \%customservice );
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
$errormessage=&checkports(\%customservice);
|
|
if ($fwhostsettings{'PROT'} eq 'ICMP'){
|
|
&General::readhasharray("${General::swroot}/fwhosts/icmp-types", \%icmptypes);
|
|
foreach my $key (keys %icmptypes){
|
|
if ("$icmptypes{$key}[0] ($icmptypes{$key}[1])" eq $fwhostsettings{'ICMP_TYPES'}){
|
|
$ICMP=$icmptypes{$key}[0];
|
|
}
|
|
}
|
|
}
|
|
if($ICMP eq ''){$ICMP=$fwhostsettings{'ICMP_TYPES'};}
|
|
if ($fwhostsettings{'PROT'} ne 'ICMP'){$ICMP='BLANK';}
|
|
#Check if a group with the same name already exists
|
|
if (!&checkgroup($fwhostsettings{'SRV_NAME'})){
|
|
$errormessage = $Lang::tr{'fwhost err grpexist'};
|
|
}
|
|
if (!$errormessage){
|
|
my $key = &General::findhasharraykey (\%customservice);
|
|
foreach my $i (0 .. 4) { $customservice{$key}[$i] = "";}
|
|
$customservice{$key}[0] = $fwhostsettings{'SRV_NAME'};
|
|
$customservice{$key}[1] = $fwhostsettings{'SRV_PORT'};
|
|
$customservice{$key}[2] = $fwhostsettings{'PROT'};
|
|
$customservice{$key}[3] = $ICMP;
|
|
&General::writehasharray("$configsrv", \%customservice );
|
|
#reset fields
|
|
$fwhostsettings{'SRV_NAME'}='';
|
|
$fwhostsettings{'SRV_PORT'}='';
|
|
$fwhostsettings{'PROT'}='';
|
|
$fwhostsettings{'ICMP_TYPES'}='';
|
|
}
|
|
&addservice;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'saveservicegrp')
|
|
{
|
|
my $prot;
|
|
my $port;
|
|
my $tcpcounter=0;
|
|
my $udpcounter=0;
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp );
|
|
&General::readhasharray("$configsrv", \%customservice );
|
|
$errormessage=&checkservicegroup;
|
|
#Check if we have more than 15 services from one Protocol in the group
|
|
#iptables can only handle 15 ports/portranges via multiport
|
|
foreach my $key (keys %customservicegrp){
|
|
if($customservicegrp{$key}[0] eq $fwhostsettings{'SRVGRP_NAME'}){
|
|
foreach my $key1 (keys %customservice){
|
|
$tcpcounter++ if $customservice{$key1}[2] eq 'TCP' && $customservicegrp{$key}[2] eq $customservice{$key1}[0];
|
|
$tcpcounter++ if $customservice{$key1}[2] eq 'TCP' && $customservicegrp{$key}[2] eq $customservice{$key1}[0] && $customservice{$key1}[1] =~m/:/i;
|
|
$udpcounter++ if $customservice{$key1}[2] eq 'UDP' && $customservicegrp{$key}[2] eq $customservice{$key1}[0];
|
|
$udpcounter++ if $customservice{$key1}[2] eq 'UDP' && $customservicegrp{$key}[2] eq $customservice{$key1}[0] && $customservice{$key1}[1] =~m/:/i;
|
|
}
|
|
}
|
|
}
|
|
|
|
# Loop through the hash of configured services.
|
|
foreach my $key (keys %customservice) {
|
|
# Assign nice human-readable values.
|
|
my $service_name = $customservice{$key}[0];
|
|
my $service_port = $customservice{$key}[1];
|
|
my $service_proto = $customservice{$key}[2];
|
|
|
|
# Skip services unless the processed one has found.
|
|
next unless $service_name eq $fwhostsettings{'CUST_SRV'};
|
|
|
|
# Increase the counters.
|
|
$tcpcounter++ if $service_proto eq 'TCP';
|
|
$tcpcounter++ if $service_proto eq 'TCP' && $service_port =~ m/:/i;
|
|
$udpcounter++ if $service_proto eq 'UDP';
|
|
$udpcounter++ if $service_proto eq 'UDP' && $service_port =~ m/:/i;
|
|
}
|
|
|
|
if ($tcpcounter > 15) {
|
|
$errormessage=$Lang::tr{'fwhost err maxservicetcp'};
|
|
}
|
|
if ($udpcounter > 15) {
|
|
$errormessage=$Lang::tr{'fwhost err maxserviceudp'};
|
|
}
|
|
$tcpcounter=0;
|
|
$udpcounter=0;
|
|
#check remark
|
|
if ($fwhostsettings{'SRVGRP_REMARK'} ne '' && !&validremark($fwhostsettings{'SRVGRP_REMARK'})){
|
|
$errormessage .= $Lang::tr{'fwhost err remark'};
|
|
}
|
|
#Check if there is already a service with the same name
|
|
if(!&checkservice($fwhostsettings{'SRVGRP_NAME'})){
|
|
$errormessage .= $Lang::tr{'fwhost err srv exists'};
|
|
}
|
|
if (!$errormessage){
|
|
#on first save, we have to enter a dummy value
|
|
if ($fwhostsettings{'CUST_SRV'} eq ''){
|
|
$fwhostsettings{'CUST_SRV'}='none';
|
|
}
|
|
#on update, we have to delete the dummy entry
|
|
foreach my $key (keys %customservicegrp){
|
|
if ($customservicegrp{$key}[2] eq 'none' && $customservicegrp{$key}[0] eq $fwhostsettings{'SRVGRP_NAME'}){
|
|
delete $customservicegrp{$key};
|
|
last;
|
|
}
|
|
}
|
|
&General::writehasharray("$configsrvgrp", \%customservicegrp );
|
|
#check if remark has also changed
|
|
if ($fwhostsettings{'SRVGRP_REMARK'} ne $fwhostsettings{'oldsrvgrpremark'} && $fwhostsettings{'updatesrvgrp'} eq 'on')
|
|
{
|
|
foreach my $key (keys %customservicegrp)
|
|
{
|
|
if($customservicegrp{$key}[0] eq $fwhostsettings{'SRVGRP_NAME'} && $customservicegrp{$key}[1] eq $fwhostsettings{'oldsrvgrpremark'})
|
|
{
|
|
$customservicegrp{$key}[1]='';
|
|
$customservicegrp{$key}[1]=$fwhostsettings{'SRVGRP_REMARK'};
|
|
}
|
|
}
|
|
}
|
|
my $key = &General::findhasharraykey (\%customservicegrp);
|
|
foreach my $i (0 .. 2) { $customservice{$key}[$i] = "";}
|
|
$customservicegrp{$key}[0] = $fwhostsettings{'SRVGRP_NAME'};
|
|
$customservicegrp{$key}[1] = $fwhostsettings{'SRVGRP_REMARK'};
|
|
$customservicegrp{$key}[2] = $fwhostsettings{'CUST_SRV'};
|
|
&General::writehasharray("$configsrvgrp", \%customservicegrp );
|
|
$fwhostsettings{'updatesrvgrp'}='on';
|
|
}
|
|
&checkrulereload($fwhostsettings{'SRVGRP_NAME'});
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}
|
|
# edit
|
|
if ($fwhostsettings{'ACTION'} eq 'editnet')
|
|
{
|
|
&addnet;
|
|
&viewtablenet;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'edithost')
|
|
{
|
|
&addhost;
|
|
&viewtablehost;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'editgrp')
|
|
{
|
|
$fwhostsettings{'update'}='on';
|
|
&addgrp;
|
|
&viewtablegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'editlocationgrp')
|
|
{
|
|
$fwhostsettings{'update'}='on';
|
|
&addlocationgrp;
|
|
&viewtablelocationgrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'editservice')
|
|
{
|
|
$fwhostsettings{'updatesrv'}='on';
|
|
&addservice;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'editservicegrp')
|
|
{
|
|
$fwhostsettings{'updatesrvgrp'} = 'on';
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}
|
|
# reset
|
|
if ($fwhostsettings{'ACTION'} eq 'resetnet')
|
|
{
|
|
$fwhostsettings{'HOSTNAME'} ="";
|
|
$fwhostsettings{'IP'} ="";
|
|
$fwhostsettings{'SUBNET'} ="";
|
|
&showmenu;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'resethost')
|
|
{
|
|
$fwhostsettings{'HOSTNAME'} ="";
|
|
$fwhostsettings{'IP'} ="";
|
|
$fwhostsettings{'type'} ="";
|
|
&showmenu;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'resetgrp')
|
|
{
|
|
$fwhostsettings{'grp_name'} ="";
|
|
$fwhostsettings{'remark'} ="";
|
|
&showmenu;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'resetlocationgrp')
|
|
{
|
|
$fwhostsettings{'grp_name'} ="";
|
|
$fwhostsettings{'remark'} ="";
|
|
&showmenu;
|
|
}
|
|
# delete
|
|
if ($fwhostsettings{'ACTION'} eq 'delnet')
|
|
{
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
foreach my $key (keys %customnetwork) {
|
|
if($fwhostsettings{'key'} eq $customnetwork{$key}[0]){
|
|
delete $customnetwork{$key};
|
|
&General::writehasharray("$confignet", \%customnetwork);
|
|
last;
|
|
}
|
|
}
|
|
&addnet;
|
|
&viewtablenet;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'delhost')
|
|
{
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
foreach my $key (keys %customhost) {
|
|
if($fwhostsettings{'key'} eq $customhost{$key}[0]){
|
|
delete $customhost{$key};
|
|
&General::writehasharray("$confighost", \%customhost);
|
|
last;
|
|
}
|
|
}
|
|
&addhost;
|
|
&viewtablehost;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'deletegrphost')
|
|
{
|
|
my $grpremark;
|
|
my $grpname;
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
foreach my $key (keys %customgrp){
|
|
if($customgrp{$key}[0].",".$customgrp{$key}[1].",".$customgrp{$key}[2].",".$customgrp{$key}[3] eq $fwhostsettings{'delhost'}){
|
|
$grpname=$customgrp{$key}[0];
|
|
$grpremark=$customgrp{$key}[1];
|
|
#check if we delete the last entry, then generate dummy
|
|
if ($fwhostsettings{'last'} eq 'on'){
|
|
$customgrp{$key}[1] = '';
|
|
$customgrp{$key}[2] = 'none';
|
|
$customgrp{$key}[3] = '';
|
|
$fwhostsettings{'last'}='';
|
|
last;
|
|
}else{
|
|
delete $customgrp{$key};
|
|
}
|
|
}
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp);
|
|
&General::firewall_config_changed();
|
|
if ($fwhostsettings{'update'} eq 'on'){
|
|
$fwhostsettings{'remark'}= $grpremark;
|
|
$fwhostsettings{'grp_name'}=$grpname;
|
|
}
|
|
&addgrp;
|
|
&viewtablegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'deletelocationgrpentry')
|
|
{
|
|
my $grpremark;
|
|
my $grpname;
|
|
&General::readhasharray("$configlocationgrp", \%customlocationgrp);
|
|
foreach my $key (keys %customlocationgrp){
|
|
if($customlocationgrp{$key}[0].",".$customlocationgrp{$key}[1].",".$customlocationgrp{$key}[2].",".$customlocationgrp{$key}[3] eq $fwhostsettings{'delentry'}){
|
|
$grpname=$customlocationgrp{$key}[0];
|
|
$grpremark=$customlocationgrp{$key}[1];
|
|
#check if we delete the last entry, then generate dummy
|
|
if ($fwhostsettings{'last'} eq 'on'){
|
|
$customlocationgrp{$key}[1] = '';
|
|
$customlocationgrp{$key}[2] = 'none';
|
|
$customlocationgrp{$key}[3] = '';
|
|
$fwhostsettings{'last'}='';
|
|
last;
|
|
}else{
|
|
delete $customlocationgrp{$key};
|
|
}
|
|
}
|
|
}
|
|
&General::writehasharray("$configlocationgrp", \%customlocationgrp);
|
|
&General::firewall_config_changed();
|
|
if ($fwhostsettings{'update'} eq 'on'){
|
|
$fwhostsettings{'remark'}= $grpremark;
|
|
$fwhostsettings{'grp_name'}=$grpname;
|
|
}
|
|
&addlocationgrp;
|
|
&viewtablelocationgrp;
|
|
}
|
|
|
|
if ($fwhostsettings{'ACTION'} eq 'delgrp')
|
|
{
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
&decrease($fwhostsettings{'grp_name'});
|
|
foreach my $key (sort keys %customgrp)
|
|
{
|
|
if($customgrp{$key}[0] eq $fwhostsettings{'grp_name'})
|
|
{
|
|
delete $customgrp{$key};
|
|
}
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp);
|
|
$fwhostsettings{'grp_name'}='';
|
|
&addgrp;
|
|
&viewtablegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'dellocationgrp')
|
|
{
|
|
&General::readhasharray("$configlocationgrp", \%customlocationgrp);
|
|
&decrease($fwhostsettings{'grp_name'});
|
|
foreach my $key (sort keys %customlocationgrp)
|
|
{
|
|
if($customlocationgrp{$key}[0] eq $fwhostsettings{'grp_name'})
|
|
{
|
|
delete $customlocationgrp{$key};
|
|
}
|
|
}
|
|
&General::writehasharray("$configlocationgrp", \%customlocationgrp);
|
|
$fwhostsettings{'grp_name'}='';
|
|
&addlocationgrp;
|
|
&viewtablelocationgrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'delservice')
|
|
{
|
|
&General::readhasharray("$configsrv", \%customservice);
|
|
foreach my $key (keys %customservice) {
|
|
if($customservice{$key}[0] eq $fwhostsettings{'SRV_NAME'}){
|
|
delete $customservice{$key};
|
|
&General::writehasharray("$configsrv", \%customservice);
|
|
last;
|
|
}
|
|
}
|
|
$fwhostsettings{'SRV_NAME'}='';
|
|
$fwhostsettings{'SRV_PORT'}='';
|
|
$fwhostsettings{'PROT'}='';
|
|
&addservice;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'delservicegrp')
|
|
{
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp);
|
|
&decreaseservice($fwhostsettings{'SRVGRP_NAME'});
|
|
foreach my $key (sort keys %customservicegrp)
|
|
{
|
|
if($customservicegrp{$key}[0] eq $fwhostsettings{'SRVGRP_NAME'})
|
|
{
|
|
delete $customservicegrp{$key};
|
|
}
|
|
}
|
|
&General::writehasharray("$configsrvgrp", \%customservicegrp);
|
|
$fwhostsettings{'SRVGRP_NAME'}='';
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'delgrpservice')
|
|
{
|
|
my $grpname;
|
|
my $grpremark;
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp);
|
|
foreach my $key (keys %customservicegrp){
|
|
if($customservicegrp{$key}[0].",".$customservicegrp{$key}[1].",".$customservicegrp{$key}[2] eq $fwhostsettings{'delsrvfromgrp'})
|
|
{
|
|
$grpname=$customservicegrp{$key}[0];
|
|
$grpremark=$customservicegrp{$key}[1];
|
|
if($fwhostsettings{'last'} eq 'on'){
|
|
$customservicegrp{$key}[2] = 'none';
|
|
$fwhostsettings{'last'} = '';
|
|
last;
|
|
}else{
|
|
delete $customservicegrp{$key};
|
|
}
|
|
}
|
|
}
|
|
&General::writehasharray("$configsrvgrp", \%customservicegrp);
|
|
&General::firewall_config_changed();
|
|
if ($fwhostsettings{'updatesrvgrp'} eq 'on'){
|
|
$fwhostsettings{'SRVGRP_NAME'}=$grpname;
|
|
$fwhostsettings{'SRVGRP_REMARK'}=$grpremark;
|
|
}
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq $Lang::tr{'fwhost newnet'})
|
|
{
|
|
&addnet;
|
|
&viewtablenet;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq $Lang::tr{'fwhost newhost'})
|
|
{
|
|
&addhost;
|
|
&viewtablehost;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq $Lang::tr{'fwhost newgrp'})
|
|
{
|
|
&addgrp;
|
|
&viewtablegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq $Lang::tr{'fwhost newlocationgrp'})
|
|
{
|
|
&addlocationgrp;
|
|
&viewtablelocationgrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq $Lang::tr{'fwhost newservice'})
|
|
{
|
|
&addservice;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq $Lang::tr{'fwhost newservicegrp'})
|
|
{
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'changegrpremark')
|
|
{
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
if ($fwhostsettings{'oldrem'} ne $fwhostsettings{'newrem'} && (&validremark($fwhostsettings{'newrem'}) || $fwhostsettings{'newrem'} eq '')){
|
|
foreach my $key (sort keys %customgrp)
|
|
{
|
|
if($customgrp{$key}[0] eq $fwhostsettings{'grp'} && $customgrp{$key}[1] eq $fwhostsettings{'oldrem'})
|
|
{
|
|
$customgrp{$key}[1]='';
|
|
$customgrp{$key}[1]=$fwhostsettings{'newrem'};
|
|
}
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp);
|
|
$fwhostsettings{'update'}='on';
|
|
$fwhostsettings{'remark'}=$fwhostsettings{'newrem'};
|
|
}else{
|
|
$errormessage=$Lang::tr{'fwhost err remark'};
|
|
$fwhostsettings{'remark'}=$fwhostsettings{'oldrem'};
|
|
$fwhostsettings{'grp_name'}=$fwhostsettings{'grp'};
|
|
$fwhostsettings{'update'} = 'on';
|
|
}
|
|
$fwhostsettings{'grp_name'}=$fwhostsettings{'grp'};
|
|
&addgrp;
|
|
&viewtablegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'changelocationgrpremark')
|
|
{
|
|
&General::readhasharray("$configlocationgrp", \%customlocationgrp);
|
|
if ($fwhostsettings{'oldrem'} ne $fwhostsettings{'newrem'} && (&validremark($fwhostsettings{'newrem'}) || $fwhostsettings{'newrem'} eq '')){
|
|
foreach my $key (sort keys %customlocationgrp)
|
|
{
|
|
if($customlocationgrp{$key}[0] eq $fwhostsettings{'grp'} && $customlocationgrp{$key}[1] eq $fwhostsettings{'oldrem'})
|
|
{
|
|
$customlocationgrp{$key}[1]='';
|
|
$customlocationgrp{$key}[1]=$fwhostsettings{'newrem'};
|
|
}
|
|
}
|
|
&General::writehasharray("$configlocationgrp", \%customlocationgrp);
|
|
$fwhostsettings{'update'}='on';
|
|
$fwhostsettings{'remark'}=$fwhostsettings{'newrem'};
|
|
}else{
|
|
$errormessage=$Lang::tr{'fwhost err remark'};
|
|
$fwhostsettings{'remark'}=$fwhostsettings{'oldrem'};
|
|
$fwhostsettings{'grp_name'}=$fwhostsettings{'grp'};
|
|
$fwhostsettings{'update'} = 'on';
|
|
}
|
|
$fwhostsettings{'grp_name'}=$fwhostsettings{'grp'};
|
|
&addlocationgrp;
|
|
&viewtablelocationgrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'changesrvgrpremark')
|
|
{
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp );
|
|
if ($fwhostsettings{'oldsrvrem'} ne $fwhostsettings{'newsrvrem'} && (&validremark($fwhostsettings{'newsrvrem'}) || $fwhostsettings{'newsrvrem'} eq '')){
|
|
foreach my $key (sort keys %customservicegrp)
|
|
{
|
|
if($customservicegrp{$key}[0] eq $fwhostsettings{'srvgrp'} && $customservicegrp{$key}[1] eq $fwhostsettings{'oldsrvrem'})
|
|
{
|
|
$customservicegrp{$key}[1]='';
|
|
$customservicegrp{$key}[1]=$fwhostsettings{'newsrvrem'};
|
|
}
|
|
}
|
|
&General::writehasharray("$configsrvgrp", \%customservicegrp);
|
|
$fwhostsettings{'updatesrvgrp'}='on';
|
|
$fwhostsettings{'SRVGRP_REMARK'}=$fwhostsettings{'newsrvrem'};
|
|
}elsif($fwhostsettings{'oldsrvrem'} eq $fwhostsettings{'newsrvrem'}){
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}else{
|
|
$errormessage=$Lang::tr{'fwhost err remark'};
|
|
$fwhostsettings{'SRVGRP_REMARK'}=$fwhostsettings{'oldsrvrem'};
|
|
$fwhostsettings{'SRVGRP_NAME'}=$fwhostsettings{'srvgrp'};
|
|
$fwhostsettings{'updatesrvgrp'} = 'on';
|
|
}
|
|
$fwhostsettings{'SRVGRP_NAME'}=$fwhostsettings{'srvgrp'};
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'changesrvgrpname')
|
|
{
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp );
|
|
if ($fwhostsettings{'oldsrvgrpname'} ne $fwhostsettings{'srvgrp'}){
|
|
#Check new groupname
|
|
if (!&validhostname($fwhostsettings{'srvgrp'})){
|
|
$errormessage.=$Lang::tr{'fwhost err name'}."<br>";
|
|
}
|
|
if (!$errormessage){
|
|
#Rename group in customservicegroup
|
|
foreach my $key (keys %customservicegrp) {
|
|
if($customservicegrp{$key}[0] eq $fwhostsettings{'oldsrvgrpname'}){
|
|
$customservicegrp{$key}[0]=$fwhostsettings{'srvgrp'};
|
|
}
|
|
}
|
|
&General::writehasharray("$configsrvgrp", \%customservicegrp );
|
|
#change name in FW Rules
|
|
&changenameinfw($fwhostsettings{'oldsrvgrpname'},$fwhostsettings{'srvgrp'},15);
|
|
}
|
|
}
|
|
&addservicegrp;
|
|
&viewtableservicegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'changegrpname')
|
|
{
|
|
&General::readhasharray("$configgrp", \%customgrp );
|
|
if ($fwhostsettings{'oldgrpname'} ne $fwhostsettings{'grp'}){
|
|
#Check new groupname
|
|
if (!&validhostname($fwhostsettings{'grp'})){
|
|
$errormessage.=$Lang::tr{'fwhost err name'}."<br>";
|
|
}
|
|
if (!$errormessage){
|
|
#Rename group in customservicegroup
|
|
foreach my $key (keys %customgrp) {
|
|
if($customgrp{$key}[0] eq $fwhostsettings{'oldgrpname'}){
|
|
$customgrp{$key}[0]=$fwhostsettings{'grp'};
|
|
}
|
|
}
|
|
&General::writehasharray("$configgrp", \%customgrp );
|
|
#change name in FW Rules
|
|
&changenameinfw($fwhostsettings{'oldgrpname'},$fwhostsettings{'grp'},4);
|
|
&changenameinfw($fwhostsettings{'oldgrpname'},$fwhostsettings{'grp'},6);
|
|
}
|
|
}
|
|
&addgrp;
|
|
&viewtablegrp;
|
|
}
|
|
if ($fwhostsettings{'ACTION'} eq 'changelocationgrpname')
|
|
{
|
|
&General::readhasharray("$configlocationgrp", \%customlocationgrp );
|
|
if ($fwhostsettings{'oldgrpname'} ne $fwhostsettings{'grp'}){
|
|
#Check new groupname
|
|
if (!&validhostname($fwhostsettings{'grp'})){
|
|
$errormessage.=$Lang::tr{'fwhost err name'}."<br>";
|
|
}
|
|
if (!$errormessage){
|
|
# Rename group.
|
|
foreach my $key (keys %customlocationgrp) {
|
|
if($customlocationgrp{$key}[0] eq $fwhostsettings{'oldgrpname'}){
|
|
$customlocationgrp{$key}[0]=$fwhostsettings{'grp'};
|
|
}
|
|
}
|
|
&General::writehasharray("$configlocationgrp", \%customlocationgrp );
|
|
#change name in FW Rules
|
|
&changenameinfw($fwhostsettings{'oldgrpname'},$fwhostsettings{'grp'},4,"location");
|
|
&changenameinfw($fwhostsettings{'oldgrpname'},$fwhostsettings{'grp'},6,"location");
|
|
}
|
|
}
|
|
&addlocationgrp;
|
|
&viewtablelocationgrp;
|
|
}
|
|
### VIEW ###
|
|
if($fwhostsettings{'ACTION'} eq '')
|
|
{
|
|
&showmenu;
|
|
}
|
|
### FUNCTIONS ###
|
|
sub showmenu {
|
|
&Header::openbox('100%', 'left',);
|
|
print "$Lang::tr{'fwhost welcome'}";
|
|
print<<END;
|
|
<br><br><table border='0' width='100%'>
|
|
<tr><td><form method='post'><input type='submit' name='ACTION' value='$Lang::tr{'fwhost newnet'}' ><input type='submit' name='ACTION' value='$Lang::tr{'fwhost newhost'}' ><input type='submit' name='ACTION' value='$Lang::tr{'fwhost newgrp'}' ><input type='submit' name='ACTION' value='$Lang::tr{'fwhost newlocationgrp'}' ></form></td>
|
|
<td align='right'><form method='post'><input type='submit' name='ACTION' value='$Lang::tr{'fwhost newservice'}' ><input type='submit' name='ACTION' value='$Lang::tr{'fwhost newservicegrp'}' ></form></td></tr>
|
|
<tr><td colspan='6'></td></tr></table>
|
|
END
|
|
&Header::closebox();
|
|
|
|
}
|
|
# Add
|
|
sub addnet
|
|
{
|
|
&error;
|
|
&showmenu;
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost addnet'});
|
|
$fwhostsettings{'orgname'}=$fwhostsettings{'HOSTNAME'};
|
|
$fwhostsettings{'orgnetremark'}=$fwhostsettings{'NETREMARK'};
|
|
print<<END;
|
|
<table border='0' width='100%' >
|
|
<tr><td width='15%'>$Lang::tr{'name'}:</td><td><form method='post'><input type='TEXT' name='HOSTNAME' id='textbox1' value='$fwhostsettings{'HOSTNAME'}' $fwhostsettings{'BLK_HOST'} size='20'><script>document.getElementById('textbox1').focus()</script></td></tr>
|
|
<tr><td>$Lang::tr{'fwhost netaddress'}:</td><td><input type='TEXT' name='IP' value='$fwhostsettings{'IP'}' $fwhostsettings{'BLK_IP'} size='20' maxlength='15'></td></tr>
|
|
<tr><td>$Lang::tr{'netmask'}:</td><td><input type='TEXT' name='SUBNET' value='$fwhostsettings{'SUBNET'}' $fwhostsettings{'BLK_IP'} size='20' maxlength='15'></td></tr>
|
|
<tr><td>$Lang::tr{'remark'}:</td><td><input type='TEXT' name='NETREMARK' value='$fwhostsettings{'NETREMARK'}' style='width: 98.5%;'></td></tr>
|
|
<tr><td colspan='6'><br></td></tr><tr>
|
|
END
|
|
if ($fwhostsettings{'ACTION'} eq 'editnet' || $fwhostsettings{'error'} eq 'on')
|
|
{
|
|
print "<td colspan='6' align='right'><input type='submit' value='$Lang::tr{'update'}' style='min-width:100px;'><input type='hidden' name='ACTION' value='updatenet'><input type='hidden' name='orgnetremark' value='$fwhostsettings{'orgnetremark'}' ><input type='hidden' name='orgname' value='$fwhostsettings{'orgname'}' ><input type='hidden' name='update' value='on'><input type='hidden' name='newnet' value='$fwhostsettings{'newnet'}'>";
|
|
}else{
|
|
print "<td colspan='6' align='right'><input type='submit' value='$Lang::tr{'save'}' style='min-width:100px;'><input type='hidden' name='ACTION' value='savenet'><input type='hidden' name='newnet' value='on'>";
|
|
}
|
|
print "</form><form method='post' style='display:inline'><input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;' ><input type='hidden' name='ACTION' value='resetnet'></form></td></tr></table>";
|
|
&Header::closebox();
|
|
}
|
|
sub addhost
|
|
{
|
|
&error;
|
|
&showmenu;
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost addhost'});
|
|
$fwhostsettings{'orgname'}=$fwhostsettings{'HOSTNAME'};
|
|
$fwhostsettings{'orgremark'}=$fwhostsettings{'HOSTREMARK'};
|
|
print<<END;
|
|
<table width='100%'>
|
|
<tr><td>$Lang::tr{'name'}:</td><td><form method='post' style='display:inline;'><input type='TEXT' name='HOSTNAME' id='textbox1' value='$fwhostsettings{'HOSTNAME'}' $fwhostsettings{'BLK_HOST'} size='20'><script>document.getElementById('textbox1').focus()</script></td></tr>
|
|
<tr><td>IP/MAC:</td><td><input type='TEXT' name='IP' value='$fwhostsettings{'IP'}' $fwhostsettings{'BLK_IP'} size='20' maxlength='17'></td></tr>
|
|
<tr><td width='10%'>$Lang::tr{'remark'}:</td><td><input type='TEXT' name='HOSTREMARK' value='$fwhostsettings{'HOSTREMARK'}' style='width:98%;'></td></tr>
|
|
<tr><td colspan='5'><br></td></tr><tr>
|
|
END
|
|
|
|
if ($fwhostsettings{'ACTION'} eq 'edithost' || $fwhostsettings{'error'} eq 'on')
|
|
{
|
|
|
|
print " <td colspan='4' align='right'><input type='submit' value='$Lang::tr{'update'}' style='min-width:100px;'/><input type='hidden' name='ACTION' value='updatehost'><input type='hidden' name='orgremark' value='$fwhostsettings{'orgremark'}' ><input type='hidden' name='orgname' value='$fwhostsettings{'orgname'}' ><input type='hidden' name='update' value='on'><input type='hidden' name='newhost' value='$fwhostsettings{'newhost'}'></form>";
|
|
}else{
|
|
print " <td colspan='4' align='right'><input type='submit' name='savehost' value='$Lang::tr{'save'}' style='min-width:100px;' /><input type='hidden' name='ACTION' value='savehost' /><input type='hidden' name='newhost' value='on'>";
|
|
}
|
|
print " </form><form method='post' style='display:inline'><input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;' ><input type='hidden' name='ACTION' value='resethost'></form></td></tr></table>";
|
|
&Header::closebox();
|
|
}
|
|
sub addgrp
|
|
{
|
|
&hint;
|
|
&error;
|
|
&showmenu;
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost addgrp'});
|
|
&General::setup_default_networks(\%defaultNetworks);
|
|
&General::readhasharray("$configccdnet", \%ccdnet);
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
&General::readhasharray("$configccdhost", \%ccdhost);
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
&General::readhasharray("$configipsec", \%ipsecconf);
|
|
|
|
my %checked=();
|
|
my $show='';
|
|
$checked{'check1'}{'off'} = '';
|
|
$checked{'check1'}{'on'} = '';
|
|
$checked{'grp2'}{$fwhostsettings{'grp2'}} = 'CHECKED';
|
|
$fwhostsettings{'oldremark'}=$fwhostsettings{'remark'};
|
|
$fwhostsettings{'oldgrpname'}=$fwhostsettings{'grp_name'};
|
|
my $grp=$fwhostsettings{'grp_name'};
|
|
my $rem=$fwhostsettings{'remark'};
|
|
if ($fwhostsettings{'update'} eq ''){
|
|
print<<END;
|
|
<table width='100%' border='0'>
|
|
<tr>
|
|
<td style='width:15%;'>$Lang::tr{'fwhost addgrpname'}</td>
|
|
<td><form method='post'><input type='TEXT' name='grp_name' value='$fwhostsettings{'grp_name'}' size='30'></td>
|
|
</tr>
|
|
<tr>
|
|
<td>$Lang::tr{'remark'}:</td>
|
|
<td ><input type='TEXT' name='remark' value='$fwhostsettings{'remark'}' style='width: 99%;'></td>
|
|
</tr>
|
|
<tr>
|
|
<td colspan='2'><br></td>
|
|
</tr>
|
|
</table>
|
|
END
|
|
}else{
|
|
print<<END;
|
|
<table width='100%' border='0'><form method='post'>
|
|
<tr>
|
|
<td style='width:15%;'>$Lang::tr{'fwhost addgrpname'}</td>
|
|
<td style='width:30%;'><input type='TEXT' name='grp' value='$fwhostsettings{'grp_name'}' size='30'></td>
|
|
<td><input type='submit' value='$Lang::tr{'fwhost change'}'><input type='hidden' name='oldgrpname' value='$fwhostsettings{'oldgrpname'}'><input type='hidden' name='ACTION' value='changegrpname'></td>
|
|
<td></td></form>
|
|
</tr>
|
|
<tr><form method='post' style='display:inline'>
|
|
<td>$Lang::tr{'remark'}:</td>
|
|
<td colspan='2' style='width:98%;'><input type='TEXT' name='newrem' value='$fwhostsettings{'remark'}' style='width:98%;'></td>
|
|
<td align='right'><input type='submit' value='$Lang::tr{'fwhost change'}'><input type='hidden' name='grp' value='$fwhostsettings{'grp_name'}'><input type='hidden' name='oldrem' value='$fwhostsettings{'oldremark'}'><input type='hidden' name='ACTION' value='changegrpremark' ></td>
|
|
</tr>
|
|
</table></form>
|
|
<br><br>
|
|
END
|
|
}
|
|
if ($fwhostsettings{'update'} eq 'on'){
|
|
print<<END;
|
|
<form method='post'><input type='hidden' name='remark' value='$rem'><input type='hidden' name='grp_name' value='$grp'>
|
|
<table width='100%' border='0'>
|
|
<tr><td width=50% valign='top'>
|
|
<table width='90%' border='0'>
|
|
<tr>
|
|
<td style='width:15em;'>
|
|
<label>
|
|
<input type='radio' name='grp2' value='std_net' id='DEFAULT_SRC_ADR' checked>
|
|
$Lang::tr{'fwhost stdnet'}
|
|
</label>
|
|
</td>
|
|
<td style='text-align:right;'>
|
|
<select name='DEFAULT_SRC_ADR' style='width:16em;'>
|
|
END
|
|
foreach my $network (sort keys %defaultNetworks)
|
|
{
|
|
next if($defaultNetworks{$network}{'LOCATION'} eq "IPCOP");
|
|
next if($defaultNetworks{$network}{'NAME'} eq "IPFire");
|
|
print "<option value='$defaultNetworks{$network}{'NAME'}'";
|
|
print " selected='selected'" if ($fwhostsettings{'DEFAULT_SRC_ADR'} eq $defaultNetworks{$network}{'NAME'});
|
|
my $defnet="$defaultNetworks{$network}{'NAME'}_NETADDRESS";
|
|
my $defsub="$defaultNetworks{$network}{'NAME'}_NETMASK";
|
|
my $defsub1=&General::subtocidr($ownnet{$defsub});
|
|
$ownnet{$defnet}='' if ($defaultNetworks{$network}{'NAME'} eq 'RED');
|
|
if ($ownnet{$defnet}){
|
|
print ">$network ($ownnet{$defnet}/$defsub1)</option>";
|
|
}else{
|
|
print ">$network</option>";
|
|
}
|
|
}
|
|
print"</select></td></tr>";
|
|
if (! -z $confignet){
|
|
print<<END;
|
|
<tr>
|
|
<td>
|
|
<label>
|
|
<input type='radio' name='grp2' id='CUST_SRC_NET' value='cust_net' $checked{'grp2'}{'cust_net'}>
|
|
$Lang::tr{'fwhost cust net'}:
|
|
</label>
|
|
</td>
|
|
<td style='text-align:right;'>
|
|
<select name='CUST_SRC_NET' style='width:16em;'>";
|
|
END
|
|
foreach my $key (sort { ncmp($customnetwork{$a}[0],$customnetwork{$b}[0]) } keys %customnetwork) {
|
|
print"<option>$customnetwork{$key}[0]</option>";
|
|
}
|
|
print"</select></td></tr>";
|
|
}
|
|
if (! -z $confighost){
|
|
print<<END;
|
|
<tr>
|
|
<td valign='top'>
|
|
<label>
|
|
<input type='radio' name='grp2' id='CUST_SRC_HOST' value='cust_host' $checked{'grp2'}{'cust_host'}>
|
|
$Lang::tr{'fwhost cust addr'}:
|
|
</label>
|
|
</td>
|
|
<td style='text-align:right;'>
|
|
<select name='CUST_SRC_HOST' style='width:16em;'>";
|
|
END
|
|
foreach my $key (sort { ncmp($customhost{$a}[0],$customhost{$b}[0]) } keys %customhost) {
|
|
print"<option>$customhost{$key}[0]</option>";
|
|
}
|
|
print"</select></td></tr>";
|
|
}
|
|
print"</table>";
|
|
#Inner table right
|
|
print"</td><td align='right' style='vertical-align:top;'><table width='90%' border='0'>";
|
|
#OVPN networks
|
|
if (! -z $configccdnet){
|
|
print<<END;
|
|
<td style='width:15em;'>
|
|
<label>
|
|
<input type='radio' name='grp2' id='OVPN_CCD_NET' value='ovpn_net' $checked{'grp2'}{'ovpn_net'}>
|
|
$Lang::tr{'fwhost ccdnet'}
|
|
</label>
|
|
</td>
|
|
<td style='text-align:right;'>
|
|
<select name='OVPN_CCD_NET' style='width:16em;'>";
|
|
END
|
|
foreach my $key (sort { ncmp($ccdnet{$a}[0],$ccdnet{$b}[0]) } keys %ccdnet)
|
|
{
|
|
print"<option value='$ccdnet{$key}[0]'>$ccdnet{$key}[0]</option>";
|
|
}
|
|
print"</select></td></tr>";
|
|
}
|
|
#OVPN clients
|
|
my @ovpn_clients=();
|
|
foreach my $key (sort { ncmp($ccdhost{$a}[0],$ccdhost{$b}[0]) } keys %ccdhost)
|
|
{
|
|
if ($ccdhost{$key}[33] ne ''){
|
|
$show='1';
|
|
push (@ovpn_clients,$ccdhost{$key}[1]);
|
|
}
|
|
}
|
|
if ($show eq '1'){
|
|
$show='';
|
|
print<<END;
|
|
<td style='width:15em;'>
|
|
<label>
|
|
<input type='radio' name='grp2' value='ovpn_host' $checked{'grp2'}{'ovpn_host'}>
|
|
$Lang::tr{'fwhost ccdhost'}
|
|
</label>
|
|
</td>
|
|
<td style='text-align:right;'>
|
|
<select name='OVPN_CCD_HOST' style='width:16em;'>" if ($show eq '');
|
|
END
|
|
foreach(@ovpn_clients){
|
|
print"<option value='$_'>$_</option>";
|
|
}
|
|
print"</select></td></tr>";
|
|
}
|
|
#OVPN n2n networks
|
|
my @OVPN_N2N=();
|
|
foreach my $key (sort { ncmp($ccdhost{$a}[1],$ccdhost{$b}[1]) } keys %ccdhost) {
|
|
if($ccdhost{$key}[3] eq 'net'){
|
|
$show='1';
|
|
push (@OVPN_N2N,$ccdhost{$key}[1]);
|
|
}
|
|
}
|
|
if ($show eq '1'){
|
|
$show='';
|
|
print<<END;
|
|
<td style='width:15em;'>
|
|
<label>
|
|
<input type='radio' name='grp2' id='OVPN_N2N' value='ovpn_n2n' $checked{'grp2'}{'ovpn_n2n'}>
|
|
$Lang::tr{'fwhost ovpn_n2n'}:
|
|
</label>
|
|
</td>
|
|
<td style='text-align:right;'>
|
|
<select name='OVPN_N2N' style='width:16em;'>"
|
|
END
|
|
foreach(@OVPN_N2N){
|
|
print"<option>$_</option>";
|
|
}
|
|
print"</select></td></tr>";
|
|
}
|
|
#IPsec networks
|
|
|
|
foreach my $key (sort { ncmp($ipsecconf{$a}[0],$ipsecconf{$b}[0]) } keys %ipsecconf) {
|
|
if ($ipsecconf{$key}[3] eq 'net' || ($optionsfw{'SHOWDROPDOWN'} eq 'on' && $ipsecconf{$key}[3] ne 'host')){
|
|
print "<td style='width:15em;'><label><input type='radio' name='grp2' id='IPSEC_NET' value='ipsec_net' $checked{'grp2'}{'ipsec_net'}>$Lang::tr{'fwhost ipsec net'}</label></td><td style='text-align:right;'><select name='IPSEC_NET' style='width:16em;'>" if $show eq '';
|
|
$show=1;
|
|
#Check if we have more than one REMOTE subnet in config
|
|
my @arr1 = split /\|/, $ipsecconf{$key}[11];
|
|
my $cnt1 += @arr1;
|
|
|
|
print"<option value=$ipsecconf{$key}[1]>";
|
|
print"$ipsecconf{$key}[1]";
|
|
print" ($Lang::tr{'fwdfw all subnets'})" if $cnt1 > 1; #If this Conenction has more than one subnet, print one option for all subnets
|
|
print"</option>";
|
|
|
|
if ($cnt1 > 1){
|
|
foreach my $val (@arr1){
|
|
#normalize subnet to cidr notation
|
|
my ($val1,$val2) = split /\//, $val;
|
|
my $val3 = &General::iporsubtocidr($val2);
|
|
print "<option ";
|
|
print "value='$ipsecconf{$key}[1]|$val1/$val3'";
|
|
print ">$ipsecconf{$key}[1] ($val1/$val3)</option>";
|
|
}
|
|
}
|
|
}
|
|
}
|
|
print"</select></td></tr>";
|
|
print"</table>";
|
|
print"</td></tr></table>";
|
|
print"<br><br>";
|
|
}
|
|
print"<table width='100%'>";
|
|
print"<tr><td style='text-align:right;'><input type='submit' value='$Lang::tr{'add'}' style='min-width:100px;' /><input type='hidden' name='oldremark' value='$fwhostsettings{'oldremark'}'><input type='hidden' name='update' value=\"$fwhostsettings{'update'}\"><input type='hidden' name='ACTION' value='savegrp' ></form><form method='post' style='display:inline'><input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;'><input type='hidden' name='ACTION' value='resetgrp'></form></td></table>";
|
|
&Header::closebox();
|
|
}
|
|
sub addlocationgrp
|
|
{
|
|
&hint;
|
|
&error;
|
|
&showmenu;
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost addlocationgrp'});
|
|
|
|
my %checked=();
|
|
my $show='';
|
|
$checked{'check1'}{'off'} = '';
|
|
$checked{'check1'}{'on'} = '';
|
|
$checked{'grp2'}{$fwhostsettings{'grp2'}} = 'CHECKED';
|
|
$fwhostsettings{'oldremark'}=$fwhostsettings{'remark'};
|
|
$fwhostsettings{'oldgrpname'}=$fwhostsettings{'grp_name'};
|
|
my $grp=$fwhostsettings{'grp_name'};
|
|
my $rem=$fwhostsettings{'remark'};
|
|
if ($fwhostsettings{'update'} eq ''){
|
|
print<<END;
|
|
<table width='100%' border='0'>
|
|
<tr>
|
|
<td style='width:15%;'>$Lang::tr{'fwhost addgrpname'}</td>
|
|
<td><form method='post'><input type='TEXT' name='grp_name' value='$fwhostsettings{'grp_name'}' size='30'></td>
|
|
</tr>
|
|
<tr>
|
|
<td>$Lang::tr{'remark'}:</td>
|
|
<td ><input type='TEXT' name='remark' value='$fwhostsettings{'remark'}' style='width: 99%;'></td>
|
|
</tr>
|
|
<tr>
|
|
<td colspan='2'><br></td>
|
|
</tr>
|
|
</table>
|
|
END
|
|
} else {
|
|
print<<END;
|
|
<table width='100%' border='0'>
|
|
<form method='post'><tr>
|
|
<td style='width:15%;'>$Lang::tr{'fwhost addgrpname'}</td>
|
|
<td style='width:30%;'><input type='TEXT' name='grp' value='$fwhostsettings{'grp_name'}' size='30'></td>
|
|
<td>
|
|
<input type='submit' value='$Lang::tr{'fwhost change'}'>
|
|
<input type='hidden' name='oldgrpname' value='$fwhostsettings{'oldgrpname'}'>
|
|
<input type='hidden' name='ACTION' value='changelocationgrpname'>
|
|
</td>
|
|
<td></td>
|
|
</tr></form>
|
|
<tr><form method='post' style='display:inline'>
|
|
<td>$Lang::tr{'remark'}:</td>
|
|
<td colspan='2' style='width:98%;'>
|
|
<input type='TEXT' name='newrem' value='$fwhostsettings{'remark'}' style='width:98%;'>
|
|
</td>
|
|
<td align='right'>
|
|
<input type='submit' value='$Lang::tr{'fwhost change'}'>
|
|
<input type='hidden' name='grp' value='$fwhostsettings{'grp_name'}'>
|
|
<input type='hidden' name='oldrem' value='$fwhostsettings{'oldremark'}'>
|
|
<input type='hidden' name='ACTION' value='changelocationgrpremark'>
|
|
</td>
|
|
</tr></form>
|
|
</table>
|
|
<br><br>
|
|
END
|
|
}
|
|
if ($fwhostsettings{'update'} eq 'on') {
|
|
my @location_locations = &fwlib::get_locations();
|
|
|
|
print<<END;
|
|
<form method='post'>
|
|
<input type='hidden' name='remark' value='$rem'>
|
|
<input type='hidden' name='grp_name' value='$grp'>
|
|
|
|
<table width='100%' border='0'>
|
|
<tr>
|
|
<td style='text-align:left;'>
|
|
<select name='COUNTRY_CODE' style='width:16em;'>";
|
|
END
|
|
foreach my $location (@location_locations) {
|
|
# Get full country name.
|
|
my $fullname = &Location::Functions::get_full_country_name($location);
|
|
|
|
print"<option value='$location'>$location - $fullname</option>\n";
|
|
}
|
|
print <<END;
|
|
</select>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<br><br>
|
|
END
|
|
}
|
|
print <<END;
|
|
<table width='100%'>
|
|
<tr><td style='text-align:right;'>
|
|
<input type='submit' value='$Lang::tr{'add'}' style='min-width:100px;' />
|
|
<input type='hidden' name='oldremark' value='$fwhostsettings{'oldremark'}'>
|
|
<input type='hidden' name='update' value=\"$fwhostsettings{'update'}\">
|
|
<input type='hidden' name='ACTION' value='savelocationgrp' >
|
|
</form>
|
|
|
|
<form method='post' style='display:inline'>
|
|
|
|
<input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;'>
|
|
<input type='hidden' name='ACTION' value='resetlocationgrp'>
|
|
|
|
</form>
|
|
</td></tr></table>
|
|
END
|
|
&Header::closebox();
|
|
}
|
|
sub addservice
|
|
{
|
|
&error;
|
|
&showmenu;
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost addservice'});
|
|
if ($fwhostsettings{'updatesrv'} eq 'on')
|
|
{
|
|
$fwhostsettings{'oldsrvname'} = $fwhostsettings{'SRV_NAME'};
|
|
$fwhostsettings{'oldsrvport'} = $fwhostsettings{'SRV_PORT'};
|
|
$fwhostsettings{'oldsrvprot'} = $fwhostsettings{'PROT'};
|
|
$fwhostsettings{'oldsrvicmp'} = $fwhostsettings{'ICMP'};
|
|
}
|
|
print<<END;
|
|
<table width='100%' border='0'><form method='post'>
|
|
<tr><td width='10%' nowrap='nowrap'>$Lang::tr{'fwhost srv_name'}:</td><td><input type='text' name='SRV_NAME' id='textbox1' value='$fwhostsettings{'SRV_NAME'}' size='24'><script>document.getElementById('textbox1').focus()</script></td></tr>
|
|
<tr><td width='10%' nowrap='nowrap'>$Lang::tr{'fwhost prot'}:</td><td><select name='PROT' id='protocol' >
|
|
END
|
|
foreach ("TCP","UDP","ICMP")
|
|
{
|
|
if ($_ eq $fwhostsettings{'PROT'})
|
|
{
|
|
print"<option selected>$_</option>";
|
|
}else{
|
|
print"<option>$_</option>";
|
|
}
|
|
}
|
|
print<<END;
|
|
</select></td></tr></table>
|
|
<div id='PROTOKOLL' class='noscript'><table width=100%' border='0'><tr><td width='10%' nowrap='nowrap'>$Lang::tr{'fwhost icmptype'}</td><td><select name='ICMP_TYPES'>
|
|
END
|
|
&General::readhasharray("${General::swroot}/fwhosts/icmp-types", \%icmptypes);
|
|
print"<option value='All ICMP-Types'>$Lang::tr{'fwdfw all icmp'}</option>";
|
|
foreach my $key (sort { ncmp($icmptypes{$a}[0],$icmptypes{$b}[0]) }keys %icmptypes){
|
|
if ($icmptypes{$key}[0] eq $fwhostsettings{'oldsrvicmp'}){
|
|
print"<option selected>$icmptypes{$key}[0] ($icmptypes{$key}[1])</option>";
|
|
}else{
|
|
print"<option>$icmptypes{$key}[0] ($icmptypes{$key}[1])</option>";
|
|
}
|
|
}
|
|
print<<END;
|
|
</select></td></tr></table></div>
|
|
<div id='PORT' class='noscript'><table width='100%' border='0'><tr><td width='10%'>$Lang::tr{'fwhost port'}:</td><td><input type='text' name='SRV_PORT' value='$fwhostsettings{'SRV_PORT'}' maxlength='11' size='24'></td></tr></table></div>
|
|
<table width='100%' border='0'><tr><td colspan='6'><br></td></tr>
|
|
<tr><td colspan='6' align='right'>
|
|
END
|
|
if ($fwhostsettings{'updatesrv'} eq 'on')
|
|
{
|
|
print<<END;
|
|
<input type='submit' value='$Lang::tr{'update'}'style='min-width:100px;' >
|
|
<input type='hidden' name='ACTION' value='updateservice'>
|
|
<input type='hidden' name='oldsrvname' value='$fwhostsettings{'oldsrvname'}'>
|
|
<input type='hidden' name='oldsrvport' value='$fwhostsettings{'oldsrvport'}'>
|
|
<input type='hidden' name='oldsrvprot' value='$fwhostsettings{'oldsrvprot'}'>
|
|
<input type='hidden' name='oldsrvicmp' value='$fwhostsettings{'oldsrvicmp'}'>
|
|
</form>
|
|
END
|
|
}else{
|
|
print"<input type='submit' value='$Lang::tr{'save'}' style='min-width:100px;'><input type='hidden' name='ACTION' value='saveservice'></form>";
|
|
}
|
|
print<<END;
|
|
<form style='display:inline;' method='post'><input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;'></form></td></tr>
|
|
</table></form>
|
|
END
|
|
&Header::closebox();
|
|
&viewtableservice;
|
|
}
|
|
sub addservicegrp
|
|
{
|
|
&hint;
|
|
&error;
|
|
&showmenu;
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost addservicegrp'});
|
|
$fwhostsettings{'oldsrvgrpremark'}=$fwhostsettings{'SRVGRP_REMARK'};
|
|
$fwhostsettings{'oldsrvgrpname'}=$fwhostsettings{'SRVGRP_NAME'};
|
|
if ($fwhostsettings{'updatesrvgrp'} eq ''){
|
|
print<<END;
|
|
<table width='100%' border='0'><form method='post'>
|
|
<tr><td width='10%'>$Lang::tr{'fwhost addgrpname'}</td><td><input type='text' name='SRVGRP_NAME' value='$fwhostsettings{'SRVGRP_NAME'}' size='24'></td></tr>
|
|
<tr><td width='10%'>$Lang::tr{'remark'}:</td><td><input type='text' name='SRVGRP_REMARK' value='$fwhostsettings{'SRVGRP_REMARK'}' style='width: 98%;'></td></tr>
|
|
<tr><td colspan='2'><br></tr>
|
|
</table>
|
|
END
|
|
}else{
|
|
print<<END;
|
|
<table width='100%'><form method='post' style='display:inline'>
|
|
<tr><td width='10%'>$Lang::tr{'fwhost addgrpname'}</td><td width='20%'><input type='text' name='srvgrp' value='$fwhostsettings{'SRVGRP_NAME'}' size='14'></td><td align='left'><input type='submit' value='$Lang::tr{'fwhost change'}'><input type='hidden' name='oldsrvgrpname' value='$fwhostsettings{'oldsrvgrpname'}'><input type='hidden' name='ACTION' value='changesrvgrpname'></td><td width='3%'></td></form></tr>
|
|
<tr>
|
|
<form method='post'>
|
|
<td width='10%'>
|
|
$Lang::tr{'remark'}:
|
|
</td>
|
|
<td colspan='2'>
|
|
<input type='text' name='newsrvrem' value='$fwhostsettings{'SRVGRP_REMARK'}' style='width:98%;'>
|
|
</td>
|
|
<td align='right'>
|
|
<input type='submit' value='$Lang::tr{'fwhost change'}'>
|
|
<input type='hidden' name='oldsrvrem' value='$fwhostsettings{'oldsrvgrpremark'}'>
|
|
<input type='hidden' name='srvgrp' value='$fwhostsettings{'SRVGRP_NAME'}'>
|
|
<input type='hidden' name='ACTION' value='changesrvgrpremark' >
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td colspan='4'>
|
|
<br>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
END
|
|
}
|
|
if($fwhostsettings{'updatesrvgrp'} eq 'on'){
|
|
print<<END;
|
|
<form method='post'><input type='hidden' name='SRVGRP_REMARK' value='$fwhostsettings{'SRVGRP_REMARK'}'><input type='hidden' name='SRVGRP_NAME' value='$fwhostsettings{'SRVGRP_NAME'}'><table border='0' width='100%'>
|
|
<tr><td width='10%' nowrap='nowrap'>$Lang::tr{'add'}: </td><td><select name='CUST_SRV' style='min-width:185px;'>
|
|
END
|
|
&General::readhasharray("$configsrv", \%customservice);
|
|
#Protocols for use in servicegroups
|
|
print "<optgroup label='$Lang::tr{'fwhost cust service'}'>";
|
|
foreach my $key (sort { ncmp($customservice{$a}[0],$customservice{$b}[0]) } keys %customservice)
|
|
{
|
|
print "<option>$customservice{$key}[0]</option>";
|
|
}
|
|
print "</optgroup>";
|
|
print "<optgroup label='$Lang::tr{'protocol'}'>";
|
|
print "<option>GRE</option>";
|
|
print "<option>AH</option>";
|
|
print "<option>ESP</option>";
|
|
print "<option>IGMP</option>";
|
|
print "<option>IPIP</option>";
|
|
print "<option value='IPV6'>IPv6 encap</option>";
|
|
print "</optgroup>";
|
|
print<<END;
|
|
</select></td></tr>
|
|
<tr><td colspan='4'><br><br></td></tr>
|
|
<tr><td colspan='4'></td></tr>
|
|
</table>
|
|
END
|
|
}
|
|
print<<END;
|
|
<table width='100%'>
|
|
<tr><td align='right'><input type='submit' value='$Lang::tr{'add'}' style='min-width:100px;' /><input type='hidden' name='updatesrvgrp' value='$fwhostsettings{'updatesrvgrp'}'><input type='hidden' name='oldsrvgrpremark' value='$fwhostsettings{'oldsrvgrpremark'}'><input type='hidden' name='ACTION' value='saveservicegrp' ></form><form style='display:inline;' method='post'><input type='submit' value='$Lang::tr{'fwhost back'}' style='min-width:100px;'></td></tr>
|
|
</table></form>
|
|
END
|
|
&Header::closebox();
|
|
}
|
|
# View
|
|
sub viewtablenet
|
|
{
|
|
if(! -z $confignet){
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost cust net'});
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
|
|
if (!keys %customnetwork)
|
|
{
|
|
print "<center><b>$Lang::tr{'fwhost empty'}</b>";
|
|
}else{
|
|
print<<END;
|
|
<table width='100%' cellspacing='0' class='tbl'>
|
|
<tr><th align='center'><b>$Lang::tr{'name'}</b></th><th align='center'><b>$Lang::tr{'fwhost netaddress'}</b></th><th align='center'><b>$Lang::tr{'remark'}</b></th><th align='center'><b>$Lang::tr{'used'}</b></th><th></th><th width='3%'></th></tr>
|
|
END
|
|
}
|
|
my $count=0;
|
|
my $col='';
|
|
foreach my $key (sort {ncmp($a,$b)} keys %customnetwork) {
|
|
if ($fwhostsettings{'ACTION'} eq 'editnet' && $fwhostsettings{'HOSTNAME'} eq $customnetwork{$key}[0]) {
|
|
print" <tr>";
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
}elsif ($count % 2)
|
|
{
|
|
$col="bgcolor='$color{'color20'}'";
|
|
print" <tr>";
|
|
}else
|
|
{
|
|
$col="bgcolor='$color{'color22'}'";
|
|
print" <tr>";
|
|
}
|
|
my $colnet="$customnetwork{$key}[1]/".&General::subtocidr($customnetwork{$key}[2]);
|
|
my $netcount=&getnetcount($customnetwork{$key}[0]);
|
|
print"<td width='20%' $col><form method='post'>$customnetwork{$key}[0]</td><td width='15%' align='center' $col>".&getcolor($colnet)."</td><td width='40%' $col>$customnetwork{$key}[3]</td><td align='center' $col>$netcount x</td>";
|
|
print<<END;
|
|
<td width='1%' $col><input type='image' src='/images/edit.gif' align='middle' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' />
|
|
<input type='hidden' name='ACTION' value='editnet'>
|
|
<input type='hidden' name='HOSTNAME' value='$customnetwork{$key}[0]' />
|
|
<input type='hidden' name='IP' value='$customnetwork{$key}[1]' />
|
|
<input type='hidden' name='SUBNET' value='$customnetwork{$key}[2]' />
|
|
<input type='hidden' name='NETREMARK' value='$customnetwork{$key}[3]' />
|
|
</td></form>
|
|
END
|
|
if($netcount == '0')
|
|
{
|
|
print"<td width='1%' $col><form method='post'><input type='image' src='/images/delete.gif' align='middle' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}' /><input type='hidden' name='ACTION' value='delnet' /><input type='hidden' name='key' value='$customnetwork{$key}[0]' /></td></form></tr>";
|
|
}else{
|
|
print"<td $col></td></tr>";
|
|
}
|
|
$count++;
|
|
}
|
|
print"</table>";
|
|
&Header::closebox();
|
|
}
|
|
|
|
}
|
|
sub getcolor
|
|
{
|
|
my $c=shift;
|
|
my $sip;
|
|
my $scidr;
|
|
my $tdcolor='';
|
|
#Check if MAC
|
|
if (&General::validmac($c)){ return $c;}
|
|
|
|
#Check if we got a full IP with subnet then split it
|
|
if($c =~ /^(.*?)\/(.*?)$/){
|
|
($sip,$scidr) = split ("/",$c);
|
|
}else{
|
|
$sip=$c;
|
|
}
|
|
|
|
#Now check if IP is part of ORANGE,BLUE or GREEN
|
|
if ( &Header::orange_used() && &General::IpInSubnet($sip,$netsettings{'ORANGE_ADDRESS'},$netsettings{'ORANGE_NETMASK'})){
|
|
$tdcolor="<font style='color: $Header::colourorange;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
if ( &General::IpInSubnet($sip,$netsettings{'GREEN_ADDRESS'},$netsettings{'GREEN_NETMASK'})){
|
|
$tdcolor="<font style='color: $Header::colourgreen;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
if ( &Header::blue_used() && &General::IpInSubnet($sip,$netsettings{'BLUE_ADDRESS'},$netsettings{'BLUE_NETMASK'})){
|
|
$tdcolor="<font style='color: $Header::colourblue;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
if ("$sip/$scidr" eq "0.0.0.0/0"){
|
|
$tdcolor="<font style='color: $Header::colourred;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
#Check if IP is part of OpenVPN N2N subnet
|
|
foreach my $key (sort keys %ccdhost){
|
|
if ($ccdhost{$key}[3] eq 'net'){
|
|
my ($a,$b) = split("/",$ccdhost{$key}[11]);
|
|
if (&General::IpInSubnet($sip,$a,$b)){
|
|
$tdcolor="<font style='color:$Header::colourovpn ;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
}
|
|
}
|
|
|
|
#Check if IP is part of OpenVPN dynamic subnet
|
|
my ($a,$b) = split("/",$ovpnsettings{'DOVPN_SUBNET'});
|
|
if (&General::IpInSubnet($sip,$a,$b)){
|
|
$tdcolor="<font style='color: $Header::colourovpn;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
|
|
#Check if IP is part of OpenVPN static subnet
|
|
foreach my $key (sort keys %ccdnet){
|
|
my ($a,$b) = split("/",$ccdnet{$key}[1]);
|
|
$b =&General::iporsubtodec($b);
|
|
if (&General::IpInSubnet($sip,$a,$b)){
|
|
$tdcolor="<font style='color: $Header::colourovpn;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
}
|
|
|
|
#Check if IP is part of IPsec RW network
|
|
if ($ipsecsettings{'RW_NET'} ne ''){
|
|
my ($a,$b) = split("/",$ipsecsettings{'RW_NET'});
|
|
$b=&General::iporsubtodec($b);
|
|
if (&General::IpInSubnet($sip,$a,$b)){
|
|
$tdcolor="<font style='color: $Header::colourvpn;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
}
|
|
|
|
#Check if IP is part of a IPsec N2N network
|
|
foreach my $key (sort keys %ipsecconf){
|
|
if ($ipsecconf{$key}[11]){
|
|
foreach my $ipsecsubitem (split(/\|/, $ipsecconf{$key}[11])) {
|
|
my ($a,$b) = split("/",$ipsecsubitem);
|
|
$b=&General::iporsubtodec($b);
|
|
if (&General::IpInSubnet($sip,$a,$b)){
|
|
$tdcolor="<font style='color: $Header::colourvpn;'>$c</font>";
|
|
return $tdcolor;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return "$c";
|
|
}
|
|
sub viewtablehost
|
|
{
|
|
if (! -z $confighost){
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost cust addr'});
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
&General::readhasharray("$configccdnet", \%ccdnet);
|
|
&General::readhasharray("$configccdhost", \%ccdhost);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
if (!keys %customhost)
|
|
{
|
|
print "<center><b>$Lang::tr{'fwhost empty'}</b>";
|
|
}else{
|
|
print<<END;
|
|
<table width='100%' cellspacing='0' class='tbl'>
|
|
<tr><th align='center'><b>$Lang::tr{'name'}</b></th><th align='center'><b>$Lang::tr{'fwhost ip_mac'}</b></th><th align='center'><b>$Lang::tr{'remark'}</b></th><th align='center'><b>$Lang::tr{'used'}</b></th><th></th><th width='3%'></th></tr>
|
|
END
|
|
}
|
|
my $count=0;
|
|
my $col='';
|
|
foreach my $key (sort { ncmp ($customhost{$a}[0],$customhost{$b}[0])} keys %customhost) {
|
|
if ( ($fwhostsettings{'ACTION'} eq 'edithost' || $fwhostsettings{'error'}) && $fwhostsettings{'HOSTNAME'} eq $customhost{$key}[0]) {
|
|
print" <tr>";
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
}elsif ($count % 2){
|
|
print" <tr>";
|
|
$col="bgcolor='$color{'color20'}'";
|
|
}else{
|
|
$col="bgcolor='$color{'color22'}'";
|
|
print" <tr>";
|
|
}
|
|
my ($ip,$sub)=split(/\//,$customhost{$key}[2]);
|
|
$customhost{$key}[4]=~s/\s+//g;
|
|
my $hostcount=0;
|
|
$hostcount=&gethostcount($customhost{$key}[0]);
|
|
print"<td width='20%' $col>$customhost{$key}[0]</td><td width='20%' align='center' $col >".&getcolor($ip)."</td><td width='50%' align='left' $col>$customhost{$key}[3]</td><td align='center' $col>$hostcount x</td>";
|
|
print<<END;
|
|
<td width='1%' $col><form method='post'><input type='image' src='/images/edit.gif' align='middle' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' />
|
|
<input type='hidden' name='ACTION' value='edithost' />
|
|
<input type='hidden' name='HOSTNAME' value='$customhost{$key}[0]' />
|
|
<input type='hidden' name='IP' value='$ip' />
|
|
<input type='hidden' name='type' value='$customhost{$key}[1]' />
|
|
<input type='hidden' name='HOSTREMARK' value='$customhost{$key}[3]' />
|
|
</form></td>
|
|
END
|
|
if($hostcount == '0')
|
|
{
|
|
print"<td width='1%' $col><form method='post'><input type='image' src='/images/delete.gif' align='middle' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}' /><input type='hidden' name='ACTION' value='delhost' /><input type='hidden' name='key' value='$customhost{$key}[0]' /></td></form></tr>";
|
|
}else{
|
|
print"<td width='1%' $col></td></tr>";
|
|
}
|
|
$count++;
|
|
}
|
|
print"</table>";
|
|
&Header::closebox();
|
|
}
|
|
}
|
|
sub viewtablegrp
|
|
{
|
|
if(! -z "$configgrp"){
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost cust grp'});
|
|
&General::readhasharray("$configgrp", \%customgrp);
|
|
&General::readhasharray("$configipsec", \%ipsecconf);
|
|
&General::readhasharray("$configccdhost", \%ccdhost);
|
|
&General::readhasharray("$configccdnet", \%ccdnet);
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
my @grp=();
|
|
my $helper='';
|
|
my $count=1;
|
|
my $grpname;
|
|
my $remark;
|
|
my $number;
|
|
my $delflag;
|
|
my @counter;
|
|
my %hash;
|
|
if (!keys %customgrp)
|
|
{
|
|
print "<center><b>$Lang::tr{'fwhost err emptytable'}</b>";
|
|
}else{
|
|
#get all groups in a hash
|
|
foreach my $key (sort { ncmp($customgrp{$a}[0],$customgrp{$b}[0]) } sort { ncmp($customgrp{$a}[2],$customgrp{$b}[2]) } keys %customgrp){
|
|
push (@counter,$customgrp{$key}[0]);
|
|
}
|
|
foreach my $key1 (@counter) {
|
|
$hash{$key1}++ ;
|
|
}
|
|
foreach my $key (sort { ncmp($customgrp{$a}[0],$customgrp{$b}[0]) } sort { ncmp($customgrp{$a}[2],$customgrp{$b}[2]) } keys %customgrp){
|
|
$count++;
|
|
if ($helper ne $customgrp{$key}[0]){
|
|
$delflag='0';
|
|
foreach my $key1 (sort { ncmp($customgrp{$a}[0],$customgrp{$b}[0]) } sort { ncmp($customgrp{$a}[2],$customgrp{$b}[2]) } keys %customgrp){
|
|
if ($customgrp{$key}[0] eq $customgrp{$key1}[0])
|
|
{
|
|
$delflag++;
|
|
}
|
|
if($delflag > 1){
|
|
last;
|
|
}
|
|
}
|
|
$number=1;
|
|
if ($customgrp{$key}[2] eq "none"){$customgrp{$key}[2]=$Lang::tr{'fwhost err emptytable'};}
|
|
$grpname=$customgrp{$key}[0];
|
|
$remark="$customgrp{$key}[1]";
|
|
if($count gt 1){ print"</table>";$count=1;}
|
|
print "<br><b><u>$grpname</u></b> ";
|
|
print " <b>$Lang::tr{'remark'}:</b>  $remark   " if ($remark ne '');
|
|
my $netgrpcount=&getnetcount($grpname);
|
|
print "<b>$Lang::tr{'used'}:</b> $netgrpcount x";
|
|
if($netgrpcount == '0')
|
|
{
|
|
print"<form method='post' style='display:inline'><input type='image' src='/images/delete.gif' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}' align='right' /><input type='hidden' name='grp_name' value='$grpname' ><input type='hidden' name='ACTION' value='delgrp'></form>";
|
|
}
|
|
print"<form method='post' style='display:inline'><input type='image' src='/images/edit.gif' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' align='right' /><input type='hidden' name='grp_name' value='$grpname' ><input type='hidden' name='remark' value='$remark' ><input type='hidden' name='ACTION' value='editgrp'></form>";
|
|
print"<table width='100%' cellspacing='0' class='tbl'><tr><th align='center'><b>$Lang::tr{'name'}</b></th><th align='center'><b>$Lang::tr{'fwhost ip_mac'}</b></th><th align='center' width='25%'><b>$Lang::tr{'fwhost type'}</th><th></th></tr>";
|
|
}
|
|
my $col='';
|
|
if ( ($fwhostsettings{'ACTION'} eq 'editgrp' || $fwhostsettings{'update'} ne '') && $fwhostsettings{'grp_name'} eq $customgrp{$key}[0]) {
|
|
print" <tr>";
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
}elsif ($count %2 == 0){
|
|
print"<tr>";
|
|
$col="bgcolor='$color{'color20'}'";
|
|
}else{
|
|
print"<tr>";
|
|
$col="bgcolor='$color{'color22'}'";
|
|
}
|
|
my $ip=&getipforgroup($customgrp{$key}[2],$customgrp{$key}[3]);
|
|
if ($ip eq ''){
|
|
print"<tr>";
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
}
|
|
print "<td width='39%' align='left' $col>";
|
|
if($customgrp{$key}[3] eq 'Standard Network'){
|
|
print &get_name($customgrp{$key}[2])."</td>";
|
|
}elsif($customgrp{$key}[3] eq "IpSec Network" && $customgrp{$key}[2] =~ /\|/){
|
|
my ($a,$b) = split /\|/, $customgrp{$key}[2];
|
|
print "$a</td>";
|
|
}else{
|
|
print "$customgrp{$key}[2]</td>";
|
|
}
|
|
if ($ip eq '' && $customgrp{$key}[2] ne $Lang::tr{'fwhost err emptytable'}){
|
|
print "<td align='center' $col>$Lang::tr{'fwhost deleted'}</td><td align='center' $col>$Lang::tr{'fwhost '.$customgrp{$key}[3]}</td><td width='1%' $col><form method='post'>";
|
|
}else{
|
|
print"<td align='center' $col>".&getcolor($ip)."</td><td align='center' $col>$Lang::tr{'fwhost '.$customgrp{$key}[3]}</td><td width='1%' $col><form method='post'>";
|
|
}
|
|
if ($delflag > 0 && $ip ne ''){
|
|
print"<input type='image' src='/images/delete.gif' align='middle' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}' />";
|
|
#check if this group has only one entry
|
|
foreach my $key2 (keys %hash) {
|
|
if ($hash{$key2}<2 && $key2 eq $customgrp{$key}[0]){
|
|
print "<input type='hidden' name='last' value='on'>" ;
|
|
}
|
|
}
|
|
}
|
|
print"<input type='hidden' name='ACTION' value='deletegrphost'><input type='hidden' name='update' value='$fwhostsettings{'update'}'><input type='hidden' name='delhost' value='$grpname,$remark,$customgrp{$key}[2],$customgrp{$key}[3]'></form></td></tr>";
|
|
$helper=$customgrp{$key}[0];
|
|
$number++;
|
|
}
|
|
print"</table>";
|
|
}
|
|
&Header::closebox();
|
|
}
|
|
|
|
}
|
|
sub viewtablelocationgrp
|
|
{
|
|
# If our filesize is "zero" there is nothing to read-in.
|
|
if (-z "$configlocationgrp") {
|
|
return;
|
|
}
|
|
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost cust locationgrp'});
|
|
&General::readhasharray("$configlocationgrp", \%customlocationgrp);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
my @grp=();
|
|
my $helper='';
|
|
my $count=1;
|
|
my $country_code;
|
|
my $grpname;
|
|
my $remark;
|
|
my $number;
|
|
my $delflag;
|
|
my @counter;
|
|
my %hash;
|
|
|
|
# If there are no groups we are finished here.
|
|
if (!keys %customlocationgrp) {
|
|
print "<center><b>$Lang::tr{'fwhost err emptytable'}</b>";
|
|
return;
|
|
}
|
|
|
|
# Put all groups in a hash.
|
|
foreach my $key (sort { ncmp($customlocationgrp{$a}[0],$customlocationgrp{$b}[0]) }
|
|
sort { ncmp($customlocationgrp{$a}[2],$customlocationgrp{$b}[2]) } keys %customlocationgrp) {
|
|
push (@counter,$customlocationgrp{$key}[0]);
|
|
}
|
|
|
|
# Increase current used key.
|
|
foreach my $key1 (@counter) {
|
|
$hash{$key1}++ ;
|
|
}
|
|
|
|
# Sort hash.
|
|
foreach my $key (sort { ncmp($customlocationgrp{$a}[0],$customlocationgrp{$b}[0]) }
|
|
sort { ncmp($customlocationgrp{$a}[2],$customlocationgrp{$b}[2]) } keys %customlocationgrp) {
|
|
$count++;
|
|
if ($helper ne $customlocationgrp{$key}[0]) {
|
|
$delflag='0';
|
|
|
|
foreach my $key1 (sort { ncmp($customlocationgrp{$a}[0],$customlocationgrp{$b}[0]) }
|
|
sort { ncmp($customlocationgrp{$a}[2],$customlocationgrp{$b}[2]) } keys %customlocationgrp) {
|
|
|
|
if ($customlocationgrp{$key}[0] eq $customlocationgrp{$key1}[0])
|
|
{
|
|
$delflag++;
|
|
}
|
|
if($delflag > 1){
|
|
last;
|
|
}
|
|
}
|
|
|
|
$number=1;
|
|
|
|
# Groupname.
|
|
$grpname=$customlocationgrp{$key}[0];
|
|
|
|
# Group remark.
|
|
$remark="$customlocationgrp{$key}[1]";
|
|
|
|
# Country code.
|
|
$country_code="$customlocationgrp{$key}[2]";
|
|
|
|
if ($count gt 1){
|
|
print"</table>";
|
|
$count=1;
|
|
}
|
|
|
|
# Display groups header.
|
|
print "<br><b><u>$grpname</u></b> \n";
|
|
print "<b>$Lang::tr{'remark'}:</b>  $remark  \n" if ($remark ne '');
|
|
|
|
# Get group count.
|
|
my $locationgrpcount=&getlocationcount($grpname);
|
|
print "<b>$Lang::tr{'used'}:</b> $locationgrpcount x";
|
|
|
|
# Only display delete icon, if the group is not used by a firewall rule.
|
|
if($locationgrpcount == '0') {
|
|
print"<form method='post' style='display:inline'>\n";
|
|
print"<input type='image' src='/images/delete.gif' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}' align='right' />\n";
|
|
print"<input type='hidden' name='grp_name' value='$grpname' >\n";
|
|
print"<input type='hidden' name='ACTION' value='dellocationgrp'>\n";
|
|
print"</form>";
|
|
}
|
|
|
|
# Icon for group editing.
|
|
print <<END;
|
|
<form method='post' style='display:inline'>
|
|
<input type='image' src='/images/edit.gif' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' align='right'/>
|
|
<input type='hidden' name='grp_name' value='$grpname' >
|
|
<input type='hidden' name='remark' value='$remark' >
|
|
<input type='hidden' name='ACTION' value='editlocationgrp'>
|
|
</form>
|
|
|
|
<table width='100%' cellspacing='0' class='tbl'>
|
|
END
|
|
# Display headlines if the group contains any entries.
|
|
if ($country_code ne "none") {
|
|
print <<END;
|
|
<tr>
|
|
<td width='10%' align='center'>
|
|
<b>$Lang::tr{'flag'}</b>
|
|
</td>
|
|
|
|
<td width='10%'align='center'>
|
|
<b>$Lang::tr{'countrycode'}</b>
|
|
</td>
|
|
|
|
<td width='70%'align='left'>
|
|
<b>$Lang::tr{'country'}</b>
|
|
</td>
|
|
|
|
<td width='10%' align='right'></td>
|
|
</tr>
|
|
END
|
|
}
|
|
}
|
|
|
|
# Check if our group contains any entries.
|
|
if ($country_code eq "none") {
|
|
print "<tr><td>$Lang::tr{'fwhost err emptytable'}</td></tr>\n";
|
|
} else {
|
|
# Check if we are currently editing a group and assign column backgound colors.
|
|
my $col='';
|
|
if ( ($fwhostsettings{'ACTION'} eq 'editlocationgrp' || $fwhostsettings{'update'} ne '')
|
|
&& $fwhostsettings{'grp_name'} eq $customlocationgrp{$key}[0]) {
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
} elsif ($count %2 == 0){
|
|
$col="bgcolor='$color{'color20'}'";
|
|
} else {
|
|
$col="bgcolor='$color{'color22'}'";
|
|
}
|
|
|
|
# Get country flag.
|
|
my $icon = &Location::Functions::get_flag_icon($customlocationgrp{$key}[2]);
|
|
|
|
# Print column with flag icon.
|
|
my $col_content;
|
|
if ($icon) {
|
|
$col_content = "<img src='$icon' alt='$customlocationgrp{$key}[2]' title='$customlocationgrp{$key}[2]'>";
|
|
} else {
|
|
$col_content = "<b>N/A</b>";
|
|
}
|
|
|
|
print "<td align='center' $col>$col_content</td>\n";
|
|
|
|
# Print column with country code.
|
|
print "<td align='center' $col>$customlocationgrp{$key}[2]</td>\n";
|
|
|
|
# Print column with full country name.
|
|
my $country_name = &Location::Functions::get_full_country_name($customlocationgrp{$key}[2]);
|
|
print "<td align='left' $col>$country_name</td>\n";
|
|
|
|
# Generate from for removing entries from a group.
|
|
print "<td align='right' width='1%' $col><form method='post'>\n";
|
|
|
|
if ($delflag > 0){
|
|
print"<input type='image' src='/images/delete.gif' align='middle' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}'/>\n";
|
|
|
|
# Check if this group only has a single entry.
|
|
foreach my $key2 (keys %hash) {
|
|
if ($hash{$key2}<2 && $key2 eq $customlocationgrp{$key}[0]){
|
|
print "<input type='hidden' name='last' value='on'>" ;
|
|
}
|
|
}
|
|
}
|
|
|
|
print "<input type='hidden' name='ACTION' value='deletelocationgrpentry'>\n";
|
|
print "<input type='hidden' name='update' value='$fwhostsettings{'update'}'>\n";
|
|
print "<input type='hidden' name='delentry' value='$grpname,$remark,$customlocationgrp{$key}[2],$customlocationgrp{$key}[3]'>\n";
|
|
print "</form>\n";
|
|
print "</td>\n";
|
|
print "</tr>\n";
|
|
}
|
|
|
|
$helper=$customlocationgrp{$key}[0];
|
|
$number++;
|
|
}
|
|
|
|
print"</table>\n";
|
|
&Header::closebox();
|
|
}
|
|
sub viewtableservice
|
|
{
|
|
my $count=0;
|
|
my $srvcount;
|
|
if(! -z "$configsrv")
|
|
{
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost services'});
|
|
&General::readhasharray("$configsrv", \%customservice);
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
print<<END;
|
|
<table width='100%' cellspacing='0' class='tbl'>
|
|
<tr><th align='center'><b>$Lang::tr{'fwhost srv_name'}</b></th><th align='center'><b>$Lang::tr{'fwhost prot'}</b></th><th align='center'><b>$Lang::tr{'fwhost port'}</b></th><th align='center'><b>ICMP</b></th><th align='center'><b>$Lang::tr{'fwhost used'}</b></th><th></th><th width='3%'></th></tr>
|
|
END
|
|
my $col='';
|
|
foreach my $key (sort { ncmp($customservice{$a}[0],$customservice{$b}[0])} keys %customservice)
|
|
{
|
|
$count++;
|
|
if ( ($fwhostsettings{'updatesrv'} eq 'on' || $fwhostsettings{'error'}) && $fwhostsettings{'SRV_NAME'} eq $customservice{$key}[0]) {
|
|
print" <tr>";
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
}elsif ($count % 2){
|
|
print" <tr>";
|
|
$col="bgcolor='$color{'color22'}'";
|
|
}else{
|
|
print" <tr>";
|
|
$col="bgcolor='$color{'color20'}'";
|
|
}
|
|
print<<END;
|
|
<td $col>$customservice{$key}[0]</td><td align='center' $col>$customservice{$key}[2]</td><td align='center' $col>$customservice{$key}[1]</td><td align='center' $col>
|
|
END
|
|
#Neuer count
|
|
$srvcount=&getsrvcount($customservice{$key}[0]);
|
|
if($customservice{$key}[3] eq 'All ICMP-Types'){print $Lang::tr{'fwdfw all icmp'};}
|
|
elsif($customservice{$key}[3] ne 'BLANK'){print $customservice{$key}[3];}
|
|
print<<END;
|
|
</td><td align='center' $col>$srvcount x</td>
|
|
<td width='1%' $col><form method='post'><input type='image' src='/images/edit.gif' align='middle' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' /><input type='hidden' name='ACTION' value='editservice' />
|
|
<input type='hidden' name='SRV_NAME' value='$customservice{$key}[0]' />
|
|
<input type='hidden' name='SRV_PORT' value='$customservice{$key}[1]' />
|
|
<input type='hidden' name='PROT' value='$customservice{$key}[2]' />
|
|
<input type='hidden' name='ICMP' value='$customservice{$key}[3]' /></form></td>
|
|
END
|
|
if ($srvcount eq '0')
|
|
{
|
|
print"<td width='1%' $col><form method='post'><input type='image' src='/images/delete.gif' align='middle' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}' /><input type='hidden' name='ACTION' value='delservice' /><input type='hidden' name='SRV_NAME' value='$customservice{$key}[0]'></td></tr></form>";
|
|
}else{
|
|
print"<td $col></td></tr>";
|
|
}
|
|
}
|
|
print"</table>";
|
|
&Header::closebox();
|
|
}
|
|
}
|
|
sub viewtableservicegrp
|
|
{
|
|
my $count=0;
|
|
my $grpname;
|
|
my $remark;
|
|
my $helper;
|
|
my $helper1;
|
|
my $port;
|
|
my $protocol;
|
|
my $delflag;
|
|
my $grpcount=0;
|
|
my $col='';
|
|
my $lastentry=0;
|
|
my @counter;
|
|
my %hash;
|
|
if (! -z $configsrvgrp){
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost cust srvgrp'});
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp);
|
|
&General::readhasharray("$configsrv", \%customservice);
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
my $number= keys %customservicegrp;
|
|
foreach my $key (sort { ncmp($customservicegrp{$a}[0],$customservicegrp{$b}[0]) } sort { ncmp($customservicegrp{$a}[2],$customservicegrp{$b}[2]) }keys %customservicegrp){
|
|
push (@counter,$customservicegrp{$key}[0]);
|
|
}
|
|
foreach my $key1 (@counter) {
|
|
$hash{$key1}++ ;
|
|
}
|
|
foreach my $key (sort { ncmp($customservicegrp{$a}[0],$customservicegrp{$b}[0]) } sort { ncmp($customservicegrp{$a}[2],$customservicegrp{$b}[2]) }keys %customservicegrp){
|
|
$count++;
|
|
if ($helper ne $customservicegrp{$key}[0]){
|
|
#Get used groupcounter
|
|
$grpcount=&getsrvcount($customservicegrp{$key}[0]);
|
|
$delflag=0;
|
|
foreach my $key1 (sort { ncmp($customservicegrp{$a}[0],$customservicegrp{$b}[0]) } sort { ncmp($customservicegrp{$a}[2],$customservicegrp{$b}[2]) } keys %customservicegrp){
|
|
if ($customservicegrp{$key}[0] eq $customservicegrp{$key1}[0])
|
|
{
|
|
$delflag++;
|
|
}
|
|
if($delflag > 1){
|
|
last;
|
|
}
|
|
}
|
|
$grpname=$customservicegrp{$key}[0];
|
|
if ($customservicegrp{$key}[2] eq "none"){
|
|
$customservicegrp{$key}[2]=$Lang::tr{'fwhost err emptytable'};
|
|
$port='';
|
|
$protocol='';
|
|
}
|
|
$remark="$customservicegrp{$key}[1]";
|
|
if($count >0){print"</table>";$count=1;}
|
|
print "<br><b><u>$grpname</u></b> ";
|
|
print "<b>$Lang::tr{'remark'}:</b> $remark " if ($remark ne '');
|
|
print " <b>$Lang::tr{'used'}:</b> $grpcount x";
|
|
if($grpcount == '0')
|
|
{
|
|
print"<form method='post' style='display:inline'><input type='image' src='/images/delete.gif' alt='$Lang::tr{'delete'}' title='$Lang::tr{'delete'}' align='right' /><input type='hidden' name='SRVGRP_NAME' value='$grpname' ><input type='hidden' name='ACTION' value='delservicegrp'></form>";
|
|
}
|
|
print"<form method='post' style='display:inline'><input type='image' src='/images/edit.gif' alt='$Lang::tr{'edit'}' title='$Lang::tr{'edit'}' align='right' /><input type='hidden' name='SRVGRP_NAME' value='$grpname' ><input type='hidden' name='SRVGRP_REMARK' value='$remark' ><input type='hidden' name='ACTION' value='editservicegrp'></form>";
|
|
print"<table width='100%' cellspacing='0' class='tbl'><tr><th align='center'><b>Name</b></th><th align='center'><b>$Lang::tr{'port'}</b></th><th align='center' width='25%'><b>$Lang::tr{'fwhost prot'}</th><th></th></tr>";
|
|
}
|
|
if( $fwhostsettings{'SRVGRP_NAME'} eq $customservicegrp{$key}[0]) {
|
|
print"<tr>";
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
}elsif ($count %2 == 0){
|
|
print"<tr>";
|
|
$col="bgcolor='$color{'color20'}'";
|
|
}else{
|
|
print"<tr>";
|
|
$col="bgcolor='$color{'color22'}'";
|
|
}
|
|
#make lines yellow if it is a dummy entry
|
|
if ($customservicegrp{$key}[2] eq $Lang::tr{'fwhost err emptytable'}){
|
|
print"<tr>";
|
|
$col="bgcolor='${Header::colouryellow}'";
|
|
}
|
|
#Set fields if we use protocols in servicegroups
|
|
if ($customservicegrp{$key}[2] ne 'TCP' || $customservicegrp{$key}[2] ne 'UDP' || $customservicegrp{$key}[2] ne 'ICMP'){
|
|
$port='-';
|
|
}
|
|
if ($customservicegrp{$key}[2] eq 'GRE'){$protocol='GRE';$customservicegrp{$key}[2]="$Lang::tr{'protocol'} GRE";}
|
|
if ($customservicegrp{$key}[2] eq 'ESP'){$protocol='ESP';$customservicegrp{$key}[2]="$Lang::tr{'protocol'} ESP";}
|
|
if ($customservicegrp{$key}[2] eq 'AH'){$protocol='AH';$customservicegrp{$key}[2]="$Lang::tr{'protocol'} AH";}
|
|
if ($customservicegrp{$key}[2] eq 'IGMP'){$protocol='IGMP';$customservicegrp{$key}[2]="$Lang::tr{'protocol'} IGMP";}
|
|
if ($customservicegrp{$key}[2] eq 'IPIP'){$protocol='IPIP';$customservicegrp{$key}[2]="$Lang::tr{'protocol'} IPIP";}
|
|
if ($customservicegrp{$key}[2] eq 'IPV6'){$protocol='IPV6';$customservicegrp{$key}[2]="$Lang::tr{'protocol'} IPv6 encapsulation";}
|
|
print "<td width='39%' $col>$customservicegrp{$key}[2]</td>";
|
|
foreach my $srv (sort keys %customservice){
|
|
if ($customservicegrp{$key}[2] eq $customservice{$srv}[0]){
|
|
$protocol=$customservice{$srv}[2];
|
|
$port=$customservice{$srv}[1];
|
|
last;
|
|
}
|
|
}
|
|
print"<td align='center' $col>$port</td><td align='center' $col>$protocol</td><td width='1%' $col><form method='post'>";
|
|
if ($delflag gt '0'){
|
|
if ($customservicegrp{$key}[2] ne $Lang::tr{'fwhost err emptytable'}){
|
|
print"<input type='image' src='/images/delete.gif' align='middle' alt='$Lang::tr{'delete'}' title=$Lang::tr{'delete'} />";
|
|
}
|
|
#check if this group has only one entry
|
|
foreach my $key2 (keys %hash) {
|
|
if ($hash{$key2}<2 && $key2 eq $customservicegrp{$key}[0]){
|
|
print "<input type='hidden' name='last' value='on'>" ;
|
|
}
|
|
}
|
|
}
|
|
print"<input type='hidden' name='ACTION' value='delgrpservice'><input type='hidden' name='updatesrvgrp' value='$fwhostsettings{'updatesrvgrp'}'>";
|
|
if($protocol eq 'TCP' || $protocol eq 'UDP' || $protocol eq 'ICMP'){
|
|
print "<input type='hidden' name='delsrvfromgrp' value='$grpname,$remark,$customservicegrp{$key}[2]'></form></td></tr>";
|
|
}else{
|
|
print "<input type='hidden' name='delsrvfromgrp' value='$grpname,$remark,$protocol'></form></td></tr>";
|
|
}
|
|
$helper=$customservicegrp{$key}[0];
|
|
}
|
|
print"</table>";
|
|
&Header::closebox();
|
|
}
|
|
}
|
|
# Check
|
|
sub checkname
|
|
{
|
|
my %hash=%{(shift)};
|
|
foreach my $key (keys %hash) {
|
|
if($hash{$key}[0] eq $fwhostsettings{'HOSTNAME'}){
|
|
return 0;
|
|
}
|
|
}
|
|
return 1;
|
|
|
|
}
|
|
sub checkgroup
|
|
{
|
|
&General::readhasharray("$configgrp", \%customgrp );
|
|
my $name=shift;
|
|
foreach my $key (keys %customservicegrp) {
|
|
if($customservicegrp{$key}[0] eq $name){
|
|
return 0;
|
|
}
|
|
}
|
|
return 1;
|
|
}
|
|
sub checkservice
|
|
{
|
|
&General::readhasharray("$configsrv", \%customservice );
|
|
my $name=shift;
|
|
foreach my $key (keys %customservice) {
|
|
if($customservice{$key}[0] eq $name){
|
|
return 0;
|
|
}
|
|
}
|
|
return 1;
|
|
}
|
|
sub checkip
|
|
{
|
|
|
|
my %hash=%{(shift)};
|
|
my $a=shift;
|
|
foreach my $key (keys %hash) {
|
|
if($hash{$key}[$a] eq $fwhostsettings{'IP'}."/".&General::iporsubtodec($fwhostsettings{'SUBNET'})){
|
|
return 0;
|
|
}
|
|
}
|
|
return 1;
|
|
}
|
|
sub checkservicegroup
|
|
{
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp);
|
|
#check name
|
|
if ( ! &validhostname($fwhostsettings{'SRVGRP_NAME'}))
|
|
{
|
|
$errormessage.=$Lang::tr{'fwhost err name'}."<br>";
|
|
return $errormessage;
|
|
}
|
|
#check empty selectbox
|
|
if (keys %customservice lt 1)
|
|
{
|
|
$errormessage.=$Lang::tr{'fwhost err groupempty'}."<br>";
|
|
}
|
|
#check if name already exists
|
|
if ($fwhostsettings{'updatesrvgrp'} ne 'on'){
|
|
foreach my $key (keys %customservicegrp) {
|
|
if( $customservicegrp{$key}[0] eq $fwhostsettings{'SRVGRP_NAME'} ){
|
|
$errormessage.=$Lang::tr{'fwhost err grpexist'}."<br>";
|
|
|
|
}
|
|
}
|
|
}
|
|
#check if service already exists in group
|
|
foreach my $key (keys %customservicegrp) {
|
|
if($customservicegrp{$key}[0] eq $fwhostsettings{'SRVGRP_NAME'} && $customservicegrp{$key}[2] eq $fwhostsettings{'CUST_SRV'} ){
|
|
$errormessage.=$Lang::tr{'fwhost err srvexist'}."<br>";
|
|
}
|
|
}
|
|
return $errormessage;
|
|
}
|
|
sub checkrulereload
|
|
{
|
|
my $search=shift;
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
|
|
#check if service or servicegroup is used in rules
|
|
foreach my $key (keys %fwfwd){
|
|
if($search eq $fwfwd{$key}[15]){
|
|
&General::firewall_config_changed();
|
|
return;
|
|
}
|
|
}
|
|
foreach my $key (keys %fwinp){
|
|
if($search eq $fwinp{$key}[15]){
|
|
&General::firewall_config_changed();
|
|
return;
|
|
}
|
|
}
|
|
foreach my $key (keys %fwout){
|
|
if($search eq $fwout{$key}[15]){
|
|
&General::firewall_config_changed();
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
sub error
|
|
{
|
|
if ($errormessage) {
|
|
&Header::openbox('100%', 'left', $Lang::tr{'error messages'});
|
|
print "<class name='base'>$errormessage\n";
|
|
print " </class>\n";
|
|
&Header::closebox();
|
|
}
|
|
}
|
|
sub hint
|
|
{
|
|
if ($hint) {
|
|
&Header::openbox('100%', 'left', $Lang::tr{'fwhost hint'});
|
|
print "<class name='base'>$hint\n";
|
|
print " </class>\n";
|
|
&Header::closebox();
|
|
}
|
|
}
|
|
sub get_name
|
|
{
|
|
my $val=shift;
|
|
&General::setup_default_networks(\%defaultNetworks);
|
|
foreach my $network (sort keys %defaultNetworks)
|
|
{
|
|
return "$network" if ($val eq $defaultNetworks{$network}{'NAME'});
|
|
}
|
|
}
|
|
sub gethostcount
|
|
{
|
|
my $searchstring=shift;
|
|
my $srvcounter=0;
|
|
#Count services used in servicegroups
|
|
foreach my $key (keys %customgrp) {
|
|
if($customgrp{$key}[2] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - config
|
|
foreach my $key1 (keys %fwfwd) {
|
|
if($fwfwd{$key1}[4] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
if($fwfwd{$key1}[6] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - input
|
|
foreach my $key2 (keys %fwinp) {
|
|
if($fwinp{$key2}[4] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
if($fwinp{$key2}[6] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - outgoing
|
|
foreach my $key3 (keys %fwout) {
|
|
if($fwout{$key3}[4] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
if($fwout{$key3}[6] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
return $srvcounter;
|
|
}
|
|
sub getlocationcount
|
|
{
|
|
my $groupname=shift;
|
|
my $counter=0;
|
|
|
|
# Location groups are stored as "group:groupname" in the
|
|
# firewall settings files.
|
|
my $searchstring = join(':', "group",$groupname);
|
|
|
|
# Count services used in firewall - forward
|
|
foreach my $key1 (keys %fwfwd) {
|
|
if($fwfwd{$key1}[4] eq $searchstring){
|
|
$counter++;
|
|
}
|
|
if($fwfwd{$key1}[6] eq $searchstring){
|
|
$counter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - input
|
|
foreach my $key2 (keys %fwinp) {
|
|
if($fwinp{$key2}[4] eq $searchstring){
|
|
$counter++;
|
|
}
|
|
if($fwinp{$key2}[6] eq $searchstring){
|
|
$counter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - outgoing
|
|
foreach my $key3 (keys %fwout) {
|
|
if($fwout{$key3}[4] eq $searchstring){
|
|
$counter++;
|
|
}
|
|
if($fwout{$key3}[6] eq $searchstring){
|
|
$counter++;
|
|
}
|
|
}
|
|
return $counter;
|
|
}
|
|
sub getnetcount
|
|
{
|
|
my $searchstring=shift;
|
|
my $srvcounter=0;
|
|
#Count services used in servicegroups
|
|
foreach my $key (keys %customgrp) {
|
|
if($customgrp{$key}[2] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - config
|
|
foreach my $key1 (keys %fwfwd) {
|
|
if($fwfwd{$key1}[4] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
if($fwfwd{$key1}[6] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - input
|
|
foreach my $key2 (keys %fwinp) {
|
|
if($fwinp{$key2}[4] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
if($fwinp{$key2}[6] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - outgoing
|
|
foreach my $key3 (keys %fwout) {
|
|
if($fwout{$key3}[4] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
if($fwout{$key3}[6] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
return $srvcounter;
|
|
}
|
|
sub getsrvcount
|
|
{
|
|
my $searchstring=shift;
|
|
my $srvcounter=0;
|
|
#Count services used in servicegroups
|
|
foreach my $key (keys %customservicegrp) {
|
|
if($customservicegrp{$key}[2] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - config
|
|
foreach my $key1 (keys %fwfwd) {
|
|
if($fwfwd{$key1}[15] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - input
|
|
foreach my $key2 (keys %fwinp) {
|
|
if($fwinp{$key2}[15] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
#Count services used in firewall - outgoing
|
|
foreach my $key3 (keys %fwout) {
|
|
if($fwout{$key3}[15] eq $searchstring){
|
|
$srvcounter++;
|
|
}
|
|
}
|
|
return $srvcounter;
|
|
}
|
|
sub deletefromgrp
|
|
{
|
|
my $target=shift;
|
|
my $config=shift;
|
|
my %hash=();
|
|
&General::readhasharray("$config",\%hash);
|
|
foreach my $key (keys %hash) {
|
|
if($hash{$key}[2] eq $target){
|
|
delete $hash{$key};
|
|
}
|
|
}
|
|
&General::writehasharray("$config",\%hash);
|
|
|
|
}
|
|
sub plausicheck
|
|
{
|
|
my $edit=shift;
|
|
#check hostname
|
|
if (!&validhostname($fwhostsettings{'HOSTNAME'}))
|
|
{
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err name'};
|
|
$fwhostsettings{'BLK_IP'}='readonly';
|
|
$fwhostsettings{'HOSTNAME'} = $fwhostsettings{'orgname'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
}
|
|
#check if name collides with CCD Netname
|
|
&General::readhasharray("$configccdnet", \%ccdnet);
|
|
foreach my $key (keys %ccdnet) {
|
|
if($ccdnet{$key}[0] eq $fwhostsettings{'HOSTNAME'}){
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err isccdnet'};;
|
|
$fwhostsettings{'HOSTNAME'} = $fwhostsettings{'orgname'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
last;
|
|
}
|
|
}
|
|
#check if IP collides with CCD NetIP
|
|
if ($fwhostsettings{'type'} ne 'mac'){
|
|
&General::readhasharray("$configccdnet", \%ccdnet);
|
|
foreach my $key (keys %ccdnet) {
|
|
my $test=(&General::getnetworkip($fwhostsettings{'IP'},&General::iporsubtocidr($fwhostsettings{'SUBNET'})))."/".$fwhostsettings{'SUBNET'};
|
|
if($ccdnet{$key}[1] eq $test){
|
|
$errormessage=$errormessage.$Lang::tr{'fwhost err isccdipnet'};
|
|
$fwhostsettings{'IP'} = $fwhostsettings{'orgip'};
|
|
$fwhostsettings{'SUBNET'} = $fwhostsettings{'orgsubnet'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
#check if name collides with CCD Hostname
|
|
&General::readhasharray("$configccdhost", \%ccdhost);
|
|
foreach my $key (keys %ccdhost) {
|
|
my ($ip,$sub)=split(/\//,$ccdhost{$key}[33]);
|
|
if($ip eq $fwhostsettings{'IP'}){
|
|
$errormessage=$Lang::tr{'fwhost err isccdiphost'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
last;
|
|
}
|
|
}
|
|
#check if IP collides with CCD HostIP (only hosts)
|
|
if ($edit eq 'edithost')
|
|
{
|
|
foreach my $key (keys %ccdhost) {
|
|
if($ccdhost{$key}[1] eq $fwhostsettings{'HOSTNAME'}){
|
|
$errormessage=$Lang::tr{'fwhost err isccdhost'};
|
|
$fwhostsettings{'IP'} = $fwhostsettings{'orgname'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
#check if network with this name already exists
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
if (!&checkname(\%customnetwork))
|
|
{
|
|
$errormessage=$errormessage."<br>".$Lang::tr{'fwhost err netexist'};
|
|
$fwhostsettings{'HOSTNAME'} = $fwhostsettings{'orgname'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
}
|
|
#check if network ip already exists
|
|
if (!&checkip(\%customnetwork,1))
|
|
{
|
|
$errormessage=$errormessage."<br>".$Lang::tr{'fwhost err net'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
}
|
|
#check if host with this name already exists
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
if (!&checkname(\%customhost))
|
|
{
|
|
$errormessage.="<br>".$Lang::tr{'fwhost err hostexist'};
|
|
$fwhostsettings{'HOSTNAME'} = $fwhostsettings{'orgname'};
|
|
if ($fwhostsettings{'update'} eq 'on'){$fwhostsettings{'ACTION'}=$edit;}
|
|
}
|
|
#check if host with this ip already exists
|
|
if (!&checkip(\%customhost,2))
|
|
{
|
|
$errormessage=$errormessage."<br>".$Lang::tr{'fwhost err ipcheck'};
|
|
}
|
|
return;
|
|
}
|
|
sub getipforgroup
|
|
{
|
|
my $name=$_[0],
|
|
my $type=$_[1];
|
|
my $value;
|
|
|
|
#get address from IPSEC NETWORK
|
|
if ($type eq 'IpSec Network'){
|
|
foreach my $key (keys %ipsecconf) {
|
|
if ($ipsecconf{$key}[1] eq $name){
|
|
if ($ipsecconf{$key}[11] =~ /\|/) {
|
|
my $string;
|
|
my @parts = split /\|/ , $ipsecconf{$key}[11];
|
|
foreach my $key1 (@parts){
|
|
my ($val1,$val2) = split (/\//, $key1);
|
|
my $val3 = &Network::convert_netmask2prefix($val2) || $val2;
|
|
$string .= "$val1/$val3<br>";
|
|
}
|
|
return $string;
|
|
}else{
|
|
return $ipsecconf{$key}[11];
|
|
}
|
|
}else{
|
|
if ($name =~ /\|/) {
|
|
my ($a,$b) = split /\|/, $name;
|
|
return $b;
|
|
}
|
|
}
|
|
}
|
|
&deletefromgrp($name,$configgrp);
|
|
}
|
|
|
|
#get address from IPSEC HOST
|
|
if ($type eq 'IpSec Host'){
|
|
foreach my $key (keys %ipsecconf) {
|
|
if ($ipsecconf{$key}[1] eq $name){
|
|
return $ipsecconf{$key}[10];
|
|
}
|
|
}
|
|
&deletefromgrp($name,$configgrp);
|
|
}
|
|
|
|
#get address from ovpn ccd Net-2-Net
|
|
if ($type eq 'OpenVPN N-2-N'){
|
|
foreach my $key (keys %ccdhost) {
|
|
if($ccdhost{$key}[1] eq $name){
|
|
my ($a,$b) = split ("/",$ccdhost{$key}[11]);
|
|
$b=&Network::convert_netmask2prefix($b) || ($b);
|
|
return "$a/$b";
|
|
}
|
|
}
|
|
&deletefromgrp($name,$configgrp);
|
|
}
|
|
|
|
#get address from ovpn ccd static host
|
|
if ($type eq 'OpenVPN static host'){
|
|
foreach my $key (keys %ccdhost) {
|
|
if($ccdhost{$key}[1] eq $name){
|
|
my ($a,$b) = split (/\//,$ccdhost{$key}[33]);
|
|
$b=&Network::convert_netmask2prefix($b) || ($b) ;
|
|
return "$a/$b";
|
|
}
|
|
}
|
|
&deletefromgrp($name,$configgrp);
|
|
}
|
|
|
|
#get address from ovpn ccd static net
|
|
if ($type eq 'OpenVPN static network'){
|
|
foreach my $key (keys %ccdnet) {
|
|
if ($ccdnet{$key}[0] eq $name){
|
|
my ($a,$b) = split (/\//,$ccdnet{$key}[1]);
|
|
$b=&Network::convert_netmask2prefix($b) || ($b);
|
|
return "$a/$b";
|
|
}
|
|
}
|
|
}
|
|
|
|
#check custom addresses
|
|
if ($type eq 'Custom Host'){
|
|
foreach my $key (keys %customhost) {
|
|
if ($customhost{$key}[0] eq $name){
|
|
my ($ip,$sub) = split("/",$customhost{$key}[2]);
|
|
return $ip;
|
|
}
|
|
}
|
|
}
|
|
|
|
##check custom networks
|
|
if ($type eq 'Custom Network'){
|
|
foreach my $key (keys %customnetwork) {
|
|
if($customnetwork{$key}[0] eq $name){
|
|
return $customnetwork{$key}[1]."/".&Network::convert_netmask2prefix($customnetwork{$key}[2]) || $customnetwork{$key}[2];
|
|
}
|
|
}
|
|
}
|
|
|
|
#check standard networks
|
|
if ($type eq 'Standard Network'){
|
|
if ($name =~ /OpenVPN/i){
|
|
my %ovpn=();
|
|
&General::readhash("${General::swroot}/ovpn/settings",\%ovpn);
|
|
return $ovpn{'DOVPN_SUBNET'};
|
|
}
|
|
if ($name eq 'GREEN'){
|
|
my %hash=();
|
|
&General::readhash("${General::swroot}/ethernet/settings",\%hash);
|
|
return $hash{'GREEN_NETADDRESS'}."/".&Network::convert_netmask2prefix($hash{'GREEN_NETMASK'}) || $hash{'GREEN_NETMASK'};
|
|
}
|
|
if ($name eq 'BLUE'){
|
|
my %hash=();
|
|
&General::readhash("${General::swroot}/ethernet/settings",\%hash);
|
|
return $hash{'BLUE_NETADDRESS'}."/".&Network::convert_netmask2prefix($hash{'BLUE_NETMASK'}) || $hash{'BLUE_NETMASK'};
|
|
}
|
|
if ($name eq 'ORANGE'){
|
|
my %hash=();
|
|
&General::readhash("${General::swroot}/ethernet/settings",\%hash);
|
|
return $hash{'ORANGE_NETADDRESS'}."/".&Network::convert_netmask2prefix($hash{'ORANGE_NETMASK'}) || $hash{'ORANGE_NETMASK'};
|
|
}
|
|
if ($name eq 'ALL'){
|
|
return "0.0.0.0/0";
|
|
}
|
|
if ($name =~ /IPsec/i){
|
|
my %hash=();
|
|
&General::readhash("${General::swroot}/vpn/settings",\%hash);
|
|
return $hash{'RW_NET'};
|
|
}
|
|
if ($name eq 'RED'){
|
|
return "0.0.0.0/0";
|
|
}
|
|
}
|
|
}
|
|
sub decrease
|
|
{
|
|
my $grp=$_[0];
|
|
&General::readhasharray("$confignet", \%customnetwork);
|
|
&General::readhasharray("$confighost", \%customhost);
|
|
foreach my $key (sort keys %customgrp ){
|
|
if ( ($customgrp{$key}[0] eq $grp) && ($customgrp{$key}[3] eq 'Custom Network')){
|
|
foreach my $key1 (sort keys %customnetwork){
|
|
if ($customnetwork{$key1}[0] eq $customgrp{$key}[2]){
|
|
$customnetwork{$key1}[4]=$customnetwork{$key1}[4]-1;
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (($customgrp{$key}[0] eq $grp) && ($customgrp{$key}[3] eq 'Custom Host')){
|
|
foreach my $key2 (sort keys %customhost){
|
|
if ($customhost{$key2}[0] eq $customgrp{$key}[2]){
|
|
$customhost{$key2}[4]=$customhost{$key2}[4]-1;
|
|
last;
|
|
}
|
|
}
|
|
|
|
}
|
|
}
|
|
&General::writehasharray("$confignet", \%customnetwork);
|
|
&General::writehasharray("$confighost", \%customhost);
|
|
}
|
|
sub decreaseservice
|
|
{
|
|
my $grp=$_[0];
|
|
&General::readhasharray("$configsrv", \%customservice);
|
|
&General::readhasharray("$configsrvgrp", \%customservicegrp);
|
|
|
|
foreach my $key (sort keys %customservicegrp){
|
|
if ($customservicegrp{$key}[0] eq $grp ){
|
|
foreach my $key2 (sort keys %customservice){
|
|
if ($customservice{$key2}[0] eq $customservicegrp{$key}[2]){
|
|
$customservice{$key2}[4]--;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
&General::writehasharray("$configsrv", \%customservice);
|
|
|
|
}
|
|
sub changenameinfw
|
|
{
|
|
my $old=shift;
|
|
my $new=shift;
|
|
my $fld=shift;
|
|
my $type=shift;
|
|
|
|
if ($type eq 'location'){
|
|
$old="group:$old";
|
|
$new="group:$new";
|
|
}
|
|
&General::readhasharray("$fwconfigfwd", \%fwfwd);
|
|
&General::readhasharray("$fwconfiginp", \%fwinp);
|
|
&General::readhasharray("$fwconfigout", \%fwout);
|
|
#Rename group in Firewall-CONFIG
|
|
foreach my $key1 (keys %fwfwd) {
|
|
if($fwfwd{$key1}[$fld] eq $old){
|
|
$fwfwd{$key1}[$fld]=$new;
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfigfwd", \%fwfwd );
|
|
#Rename group in Firewall-INPUT
|
|
foreach my $key2 (keys %fwinp) {
|
|
if($fwinp{$key2}[$fld] eq $old){
|
|
$fwinp{$key2}[$fld]=$new;
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfiginp", \%fwinp );
|
|
#Rename group in Firewall-OUTGOING
|
|
foreach my $key3 (keys %fwout) {
|
|
if($fwout{$key3}[$fld] eq $old){
|
|
$fwout{$key3}[$fld]=$new;
|
|
}
|
|
}
|
|
&General::writehasharray("$fwconfigout", \%fwout );
|
|
}
|
|
sub checkports
|
|
{
|
|
|
|
my %hash=%{(shift)};
|
|
#check empty fields
|
|
if ($fwhostsettings{'SRV_NAME'} eq '' ){
|
|
$errormessage=$Lang::tr{'fwhost err name1'};
|
|
}
|
|
if ($fwhostsettings{'SRV_PORT'} eq '' && $fwhostsettings{'PROT'} ne 'ICMP'){
|
|
$errormessage=$Lang::tr{'fwhost err port'};
|
|
}
|
|
#check valid name
|
|
if (! &validhostname($fwhostsettings{'SRV_NAME'})){
|
|
$errormessage="<br>".$Lang::tr{'fwhost err name'};
|
|
}
|
|
#change dashes with :
|
|
$fwhostsettings{'SRV_PORT'}=~ tr/-/:/;
|
|
|
|
if ($fwhostsettings{'SRV_PORT'} eq "*") {
|
|
$fwhostsettings{'SRV_PORT'} = "1:65535";
|
|
}
|
|
if ($fwhostsettings{'SRV_PORT'} =~ /^(\D)\:(\d+)$/) {
|
|
$fwhostsettings{'SRV_PORT'} = "1:$2";
|
|
}
|
|
if ($fwhostsettings{'SRV_PORT'} =~ /^(\d+)\:(\D)$/) {
|
|
$fwhostsettings{'SRV_PORT'} = "$1:65535";
|
|
}
|
|
if($fwhostsettings{'PROT'} ne 'ICMP'){
|
|
$errormessage = $errormessage.&General::validportrange($fwhostsettings{'SRV_PORT'}, 'src');
|
|
}
|
|
# a new service has to have a different name
|
|
foreach my $key (keys %hash){
|
|
if ($hash{$key}[0] eq $fwhostsettings{'SRV_NAME'}){
|
|
$errormessage = "<br>".$Lang::tr{'fwhost err srv exists'};
|
|
last;
|
|
}
|
|
}
|
|
return $errormessage;
|
|
}
|
|
sub validhostname
|
|
{
|
|
# Checks a hostname against RFC1035
|
|
my $hostname = $_[0];
|
|
|
|
# Each part should be at least two characters in length
|
|
# but no more than 63 characters
|
|
if (length ($hostname) < 1 || length ($hostname) > 63) {
|
|
return 0;}
|
|
# Only valid characters are a-z, A-Z, 0-9 and -
|
|
if ($hostname !~ /^[a-zA-ZäöüÖÄÜ0-9-_.;()\/\s]*$/) {
|
|
return 0;}
|
|
# First character can only be a letter or a digit
|
|
if (substr ($hostname, 0, 1) !~ /^[a-zA-ZöäüÖÄÜ0-9]*$/) {
|
|
return 0;}
|
|
# Last character can only be a letter or a digit
|
|
if (substr ($hostname, -1, 1) !~ /^[a-zA-ZöäüÖÄÜ0-9()]*$/) {
|
|
return 0;}
|
|
return 1;
|
|
}
|
|
sub validremark
|
|
{
|
|
# Checks a hostname against RFC1035
|
|
my $remark = $_[0];
|
|
# Each part should be at least two characters in length
|
|
# but no more than 63 characters
|
|
if (length ($remark) < 1 || length ($remark) > 255) {
|
|
return 0;}
|
|
# Only valid characters are a-z, A-Z, 0-9 and -
|
|
if ($remark !~ /^[a-zäöüA-ZÖÄÜ0-9-.:;\|_()\/\s]*$/) {
|
|
return 0;}
|
|
# First character can only be a letter or a digit
|
|
if (substr ($remark, 0, 1) !~ /^[a-zäöüA-ZÖÄÜ0-9]*$/) {
|
|
return 0;}
|
|
# Last character can only be a letter or a digit
|
|
if (substr ($remark, -1, 1) !~ /^[a-zöäüA-ZÖÄÜ0-9.:;_)]*$/) {
|
|
return 0;}
|
|
return 1;
|
|
}
|
|
&Header::closebigbox();
|
|
&Header::closepage();
|