Current File : //usr/share/webmin/ipfilter/edit_rule.cgi |
#!/usr/bin/perl
# Display a form for editing or creating a firewall rule
require './ipfilter-lib.pl';
&ReadParse();
$rules = &get_config();
if ($in{'delsel'}) {
# Special case - deleting selected rules
@nums = sort { $b cmp $a } split(/\0/, $in{'d'});
if (@nums) {
&lock_file($rules->[$nums[0]]->{'file'});
foreach $n (@nums) {
&delete_rule($rules->[$n]);
}
&flush_file_lines();
&unlock_file($rules->[$nums[0]]->{'file'});
&webmin_log("delsel", "rule", undef,
{ 'count' => scalar(@nums) });
}
&redirect("");
exit;
}
if ($in{'new'}) {
&ui_print_header(undef, $text{'edit_title1'}, "");
$rule = { 'action' => 'pass',
'all' => 1,
'active' => 1,
'dir' => 'in',
'quick' => 1 };
}
else {
$rule = $rules->[$in{'idx'}];
&ui_print_header(undef, $text{'edit_title2'}, "");
}
# Javascript for disabling fields
print <<EOF;
<script>
function all_change(dis)
{
var f = document.forms[0];
for(i=0; i<f.elements.length; i++) {
e = f.elements[i];
if (e.name.substring(0, 3) != "tos" &&
(e.name.substring(0, 4) == "from" ||
e.name.substring(0, 2) == "to")) {
e.disabled = dis;
}
}
}
</script>
EOF
print &ui_form_start("save_rule.cgi", "post");
print &ui_hidden("new", $in{'new'}),"\n";
print &ui_hidden("idx", $in{'idx'}),"\n";
print &ui_hidden("before", $in{'before'}),"\n";
print &ui_hidden("after", $in{'after'}),"\n";
@tds = ( "width=20%", undef );
print &ui_table_start($text{'edit_header1'}, "width=100%", 2);
# Comment
print &ui_table_row($text{'edit_cmt'},
$rule->{'cmt'} =~ /\n/ ?
&ui_textarea("cmt", $rule->{'cmt'}, 3, 50) :
&ui_textbox("cmt", $rule->{'cmt'}, 50),
undef, \@tds);
# Enabled
print &ui_table_row($text{'edit_active'},
&ui_radio("active", $rule->{'active'} ? 1 : 0,
[ [ 1, $text{'edit_active1'} ],
[ 0, $text{'edit_active0'} ] ]));
# Rule action and argument
$ra = $rule->{'action'};
push(@action, $ra) if ($ra && &indexof($ra, @actions) < 0);
$acts = "<table cellpadding=1 cellspacing=1>\n";
$i = 0;
%action_fields = ( 'block' => [ 'block_return', 'block_return_dest' ],
'log' => [ 'log_pri', 'log_fac', 'log_body', 'log_first',
'log_orblock' ],
'skip' => [ 'skip' ],
'call' => [ 'call', 'call_now' ] );
foreach $a (@actions) {
$acts .= "<tr> <td>";
local $ma = $rule->{'action'} eq $a;
@myfields = @{$action_fields{$a}};
@notfields = map { @{$action_fields{$_}} }
grep { $_ ne $a } (keys %action_fields);
$acts .= &ui_oneradio("action", $a,
$text{"laction_".$a} || $text{"action_".$a} || uc($a),
$ma,
&js_disable_inputs(\@notfields, \@myfields, "onClick"));
if ($a eq "block") {
# Show ICMP block options
local @codes = ( [ "", $text{'edit_none'} ],
[ "rst", $text{'edit_rst'} ] );
push(@codes, map { [ $_ ] } @icmp_codes);
push(@codes, [ $rule->{'block-return'} ])
if ($rule->{'block-return'} &&
$rule->{'block-return'} ne "rst" &&
&indexof($rule->{'block-return'}, @icmp_codes) < 0);
$acts .= &ui_select("block_return", $rule->{'block-return'},
\@codes, 0, 0, 1, !$ma)."\n";
$acts .= &ui_checkbox("block_return_dest", 1,
$text{'edit_return_dest'},
$rule->{'block-return-dest'},
undef, !$ma);
}
elsif ($a eq "log") {
# Show logging options
$acts .= &logging_options("log", 1, !$ma);
}
elsif ($a eq "skip") {
# Show rule to skip to
$acts .= &ui_textbox("skip", $rule->{'skip'}, 10, !$ma);
}
elsif ($a eq "call") {
# Show function name
$acts .= &ui_textbox("call", $rule->{'call'}, 20, !$ma)."\n".
&ui_checkbox("call_now", 1, $text{'edit_callnow'},
$rule->{'call-now'}, undef, !$ma);
}
$acts .= "</td> </tr>";
}
$acts .= "</table>\n";
print &ui_table_row($text{'edit_action'}, $acts,
undef, \@tds);
print &ui_table_end(),"<br>\n";
# Show section for source and destination
print &ui_table_start($text{'edit_header2'}, "width=100%", 2);
print &ui_table_row($text{'edit_all'},
&ui_radio("all", $rule->{'all'} || 0,
[ [ 1, $text{'edit_all1'}, "onClick='all_change(true)'" ],
[ 0, $text{'edit_all0'}, "onClick='all_change(false)'" ] ]));
foreach $f ("from", "to") {
print &ui_table_hr();
($ft, $pt) = &object_input($rule, $f);
print &ui_table_row($text{'edit_'.$f}, $ft);
print &ui_table_row($text{'edit_port'.$f}, $pt);
}
print &ui_table_end(),"<br>\n";
# Show section for protocol, ttl, tos
print &ui_table_start($text{'edit_header3'}, "width=100%", 4);
print &ui_table_row($text{'edit_dir'},
&ui_radio("dir", $rule->{'dir'}, [ [ "in", $text{'dir_in'} ],
[ "out", $text{'dir_out'} ] ]));
print &ui_table_row($text{'edit_proto'},
&protocol_input("proto", $rule->{'proto'}, 1, 0));
print &ui_table_row($text{'edit_tos'},
&ui_opt_textbox("tos", $rule->{'tos'}, 8, $text{'edit_tosany'}));
print &ui_table_row($text{'edit_ttl'},
&ui_opt_textbox("ttl", $rule->{'ttl'}, 8, $text{'edit_tosany'}));
print &ui_table_row($text{'edit_on'},
&interface_choice("on", $rule->{'on'}));
print &ui_table_row($text{'edit_flags'},
&ui_opt_textbox("flags1", $rule->{'flags1'}, 8, $text{'edit_flagsany'},
undef, 0, [ "flags2" ]).
" $text{'edit_flags2'} ".
&ui_textbox("flags2", $rule->{'flags2'}, 8,
!$rule->{'flags1'}));
print &ui_table_row($text{'edit_icmp'},
&ui_select("icmptype", $rule->{'icmp-type'},
[ [ "", $text{'edit_icmpany'} ],
map { [ $_ ] } @icmp_types ],
0, 0, $rule->{'icmp-type'} ? 1 : 0).
" $text{'edit_icmpcode'} ".
&ui_select("icmpcode", $rule->{'icmp-type-code'},
[ [ "", $text{'edit_codeany'} ],
map { [ $_ ] } @icmp_codes ],
0, 0, $rule->{'icmp-code'} ? 1 : 0), 3);
print &ui_table_end(),"<br>\n";
# Show section for other options
print &ui_table_start($text{'edit_header4'}, "width=100%", 2);
print "<table>\n";
print "<tr> <td colspan=2>",&ui_checkbox("quick", 1, $text{'edit_quick'},
$rule->{'quick'}),"</td> </tr>\n";
# Show logging options as action
print "<tr> <td>",&ui_checkbox("olog", 1, $text{'edit_olog'},
$rule->{'olog'},
&js_checkbox_disable("olog", [ ], [ "olog_pri", "olog_fac", "olog_body", "olog_first", "olog_block" ], "onClick")),"</td>\n";
print "<td>",&logging_options("olog", 1, !$rule->{'olog'}),"</td> </tr>\n";
# Show tagging ID
print "<tr> <td>",&ui_checkbox("tag", 1, $text{'edit_tag'},
$rule->{'tag'},
&js_checkbox_disable("tag", [ ], [ "tagid" ], "onClick")),"</td>\n";
print "<td>",&ui_textbox("tagid", $rule->{'tag'}, 10, !$rule->{'tag'}),
"</td> </tr>\n";
# Show duplicate destination
print "<tr> <td>",&ui_checkbox("dup_to", 1, $text{'edit_dupto'},
$rule->{'dup-to'},
&js_checkbox_disable("dup_to", [ ],
[ "dup_toiface", "dup_toiface_other",
"dup_toip" ], "onClick")),"</td>\n";
($iface, $ip) = split(/:/, $rule->{'dup-to'});
print "<td>",&interface_choice("dup_toiface", $iface, 1,
!$rule->{'dup-to'}),"\n";
print "$text{'edit_duptoip'}\n";
print &ui_textbox("dup_toip", $ip, 13,
!$rule->{'dup-to'})," $text{'edit_opt'}</td> </tr>\n";
# Show fast routing destination
print "<tr> <td>",&ui_checkbox("fastroute", 1, $text{'edit_fastroute'},
$rule->{'fastroute'},
&js_checkbox_disable("fastroute", [ ],
[ "fastrouteiface", "fastrouteiface_other",
"fastrouteip" ], "onClick")),"</td>\n";
print "<td>",&interface_choice("fastrouteiface", $rule->{'fastroute'}, 1,
!$rule->{'fastroute'}),"\n";
print "$text{'edit_fastrouteip'}\n";
print &ui_textbox("fastrouteip", $rule->{'fastroute-ip'}, 13,
!$rule->{'fastroute'})," $text{'edit_opt'}</td> </tr>\n";
# Show reply destination
print "<tr> <td>",&ui_checkbox("reply_to", 1, $text{'edit_replyto'},
$rule->{'reply-to'},
&js_checkbox_disable("reply_to", [ ],
[ "reply_toiface", "reply_toiface_other",
"reply_toip" ], "onClick")),"</td>\n";
print "<td>",&interface_choice("reply_toiface", $rule->{'reply-to'}, 1,
!$rule->{'reply-to'}),"\n";
print "$text{'edit_fastrouteip'}\n";
print &ui_textbox("reply_toip", $rule->{'reply-to-ip'}, 13,
!$rule->{'reply-to'})," $text{'edit_opt'}</td> </tr>\n";
# Show state keeping options
print "<tr> <td>",&ui_checkbox("keep", 1, $text{'edit_keep'},
$rule->{'keep'},
&js_checkbox_disable("keep", [ ] , [ "keepmode" ], "onClick")),"</td>\n";
print "<td>",&ui_select("keepmode", $rule->{'keep'} || "state",
[ [ "state", $text{'edit_keepstate'} ],
[ "frags", $text{'edit_keepfrags'} ] ],
1, 0, 0, !$rule->{'keep'}),"<td> </tr>\n";
print &ui_table_end();
if ($in{'new'}) {
print &ui_form_end([ [ 'create', $text{'create'} ] ], "100%");
}
else {
print &ui_form_end([ [ 'save', $text{'save'} ],
[ 'delete', $text{'delete'} ] ], "100%");
}
$dis = $rule->{'all'} ? "true" : "false";
print "<script>all_change($dis);</script>\n";
&ui_print_footer("", $text{'index_return'});
# yes_no_ignored_input(name)
sub yes_no_ignored_input
{
local $mode = $rule->{$_[0]} && $rule->{$_[0]."_not"} ? 2 :
$rule->{$_[0]} ? 1 : 0;
return &ui_radio($_[0], $mode,
[ [ 1, $text{'yes'} ],
[ 0, $text{'no'} ] ]);
}
# logging_options(prefix, split, disable?)
sub logging_options
{
local ($pfx, $split, $dis) = @_;
local $rv;
local $ll = $rule->{$pfx."-level"};
local ($f, $p);
if ($ll =~ /^(\S+)\.(\S+)$/) {
$p = $2; $f = $1;
}
elsif ($ll =~ /\S/) {
$p = $ll;
}
$rv .= &ui_select($pfx."_pri", $p,
[ [ "", $text{'default'} ], map { [ $_ ] } @log_priorities ],
0, 0, 1, $dis);
$rv .= " $text{'edit_fac'} ";
$rv .= &ui_select($pfx."_fac", $f,
[ [ "", $text{'default'} ], map { [ $_ ] } @log_facilities ],
0, 0, 1, $dis)."\n";
$rv .= "<br> \n" if ($_[1]);
$rv .= &ui_checkbox($pfx."_body", 1, $text{'edit_log_body'},
$rule->{$pfx.'-body'}, undef, $dis)."\n";
$rv .= &ui_checkbox($pfx."_first", 1, $text{'edit_log_first'},
$rule->{$pfx.'-first'}, undef, $dis)."\n";
$rv .= &ui_checkbox($pfx."_orblock", 1, $text{'edit_log_orblock'},
$rule->{$pfx.'-or-block'}, undef, $dis)."\n";
return $rv;
}