pfSense

#!/usr/local/bin/php-cgi -q

/*

 *

 * part of pfSense (https://www.pfsense.org)

 *

 * originally part of m0n0wall (http://m0n0.ch/wall)

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions are met:

 *

 * 1. Redistributions of source code must retain the above copyright notice,

 *    this list of conditions and the following disclaimer.

 *

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in

 *    the documentation and/or other materials provided with the

 *    distribution.

 *

 * 3. All advertising materials mentioning features or use of this software

 *    must display the following acknowledgment:

 *    "This product includes software developed by the pfSense Project

 *    for use in the pfSense® software distribution. (http://www.pfsense.org/).

 *

 * 4. The names "pfSense" and "pfSense Project" must not be used to

 *    endorse or promote products derived from this software without

 *    prior written permission. For written permission, please contact

 *    coreteam@pfsense.org.

 *

 * 5. Products derived from this software may not be called "pfSense"

 *    nor may "pfSense" appear in their names without prior written

 *    permission of the Electric Sheep Fencing, LLC.

 *

 * 6. Redistributions of any form whatsoever must retain the following

 *    acknowledgment:

 *

 * "This product includes software developed by the pfSense Project

 * for use in the pfSense software distribution (http://www.pfsense.org/).

 *

 * THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 * OF THE POSSIBILITY OF SUCH DAMAGE.

 */

if (isset($options["h"]) || isset($options["help"])) {

	echo "usage: /etc/rc.initial.setlanip [option ...]\n";

	echo "  -h, --help       show this message\n";

	echo "  -n, --dry-run    do not make any configuration changes\n";

$dry_run = isset($options["n"]) || isset($options["dry-run"]);

if ($dry_run) {

	echo "DRY RUN MODE IS ON\n";

}

require_once("config.inc");

require_once("functions.inc");

require_once("filter.inc");

require_once("shaper.inc");

require_once("rrd.inc");

	global $fp;

	$good_answer = false;

	do {

		echo "\n" . $prompt_text . " (y/n) ";

		$yn = strtolower(chop(fgets($fp)));

		if (($yn == "y") || ($yn == "yes")) {

			$boolean_answer = true;

			$good_answer = true;

		}

		if (($yn == "n") || ($yn == "no")) {

			$boolean_answer = false;

			$good_answer = true;

		}

	} while (!$good_answer);

	return $boolean_answer;

}

	global $config;

		foreach ($config['ppps']['ppp'] as $pppid => $ppp) {

			if ($realif == $ppp['if']) {

				$ifaces = explode(",", $ppp['ports']);

				return $ifaces[0];

		}

	}

}

		if ($config['interfaces']['lan']) {

	/* only allow DHCP server to be enabled when static IP is

	   configured on this interface */

		$is_ipaddr = is_ipaddrv6($config['interfaces'][$interface]['ipaddrv6']);

	} else {

		$is_ipaddr = is_ipaddrv4($config['interfaces'][$interface]['ipaddr']);

	}

		return false;

	$label_DHCP = ($version === 6) ? "DHCP6" : "DHCP";

	$upperifname = strtoupper($interface);

	return console_prompt_for_yn (sprintf(gettext("Do you want to enable the %s server on %s?"), $label_DHCP, $upperifname));

	global $config;

	$c = $config['interfaces'][$iface];

		return null;

	$result = $if;

	$result2 = array();

	$ipaddr = $c['ipaddr'];

	$ipaddrv6 = $c['ipaddrv6'];

	if (is_ipaddr($ipaddr)) {

		$result2[] = "static";

	} else if ($ipaddr == "dhcp") {

		$result2[] = "dhcp";

	}

	if (is_ipaddr($ipaddrv6)) {

		$result2[] = "staticv6";

	} else if ($ipaddrv6 == "dhcp6") {

		$result2[] = "dhcp6";

	}

	if (count($result2)) {

		$result .= " - " . implode(", ", $result2);

	}

	return $result;

}

$ifdescrs = get_configured_interface_with_descr(false, true);

/* grab interface that we will operate on, unless there is only one interface */

	$x=1;

		echo "{$x} - {$ifdescr} ({$config_descr})\n";

if ($intnum > $count) {

foreach ($ifdescrs as $ifname => $ifdesc) {

		break;

	} else {

		$index++;

if (!$interface) {

	global $g, $config;

	$new_name = "GW_" . strtoupper($interface);

		return $new_name;

	}

	do {

		$existing = false;

		foreach ($config['gateways']['gateway_item'] as $item) {

			if ($item['name'] === $new_name) {

				$existing = true;

				break;

			}

		}

		if ($existing) {

			$count += 1;

			$new_name = "GW_" . strtoupper($interface) . "_" . $count;

		}

	} while ($existing);

	return $new_name;

}

function add_gateway_to_config($interface, $gatewayip, $inet_type) {

	global $g, $config, $dry_run;

	if (!is_array($config['gateways']['gateway_item'])) {

		$config['gateways']['gateway_item'] = array();

	}

	$a_gateways = &$config['gateways']['gateway_item'];

	if ($dry_run) {

		print_r($a_gateways);

	}

	foreach ($a_gateways as $item) {

		if ($item['ipprotocol'] === $inet_type) {

			if (($item['interface'] === $interface) && ($item['gateway'] === $gatewayip)) {

	}

		$new_name = next_unused_gateway_name($interface);

		$item = array(

			"interface" => $interface,

			"gateway" => $gatewayip,

			"name" => $new_name,

			"weight" => 1,

			"ipprotocol" => $inet_type,

			"interval" => true,

			"descr" => "Interface $interface Gateway",

			"defaultgw" => $is_default

		);

		if ($dry_run) {

			print_r($item);

		}

		$a_gateways[] = $item;

	return $new_name;

	global $g, $config, $interface, $restart_dhcpd, $ifaceassigned, $fp;

	$label_IPvX = ($version === 6) ? "IPv6"   : "IPv4";

	$maxbits    = ($version === 6) ? 127      : 31;

	$label_DHCP = ($version === 6) ? "DHCP6"  : "DHCP";

	$upperifname = strtoupper($interface);

			$isintdhcp = true;

			$restart_dhcpd = true;

	if ($isintdhcp == false or $interface <> "wan") {

		while (true) {

				$is_ipaddr = ($version === 6) ? is_ipaddrv6($intip) : is_ipaddrv4($intip);

				if ($is_ipaddr && is_ipaddr_configured($intip, $interface, true)) {

					$ip_conflict = true;

					echo gettext("This IP address conflicts with another interface or a VIP") . "\n";

			if ($intip != '') {

				echo "\n" . sprintf(gettext("Subnet masks are entered as bit counts (as in CIDR notation) in %s."),

					echo "e.g. ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00 = 120\n";

					echo "     ffff:ffff:ffff:ffff:ffff:ffff:ffff:0    = 112\n";

					echo "     ffff:ffff:ffff:ffff:ffff:ffff:0:0       =  96\n";

					echo "     ffff:ffff:ffff:ffff:ffff:0:0:0          =  80\n";

					echo "     ffff:ffff:ffff:ffff:0:0:0:0             =  64\n";

				} else {

					echo "e.g. 255.255.255.0 = 24\n";

					echo "     255.255.0.0   = 16\n";

					echo "     255.0.0.0     = 8\n";

				}

				do {

					$upperifname = strtoupper($interface);

					if ($version === 4 && $intbits < $maxbits) {

						if ($intip == gen_subnet($intip, $intbits)) {

							echo gettext("You cannot set network address to an interface");

							continue 2;

							$intbits_ok = false;

						} else if ($intip == gen_subnet_max($intip, $intbits)) {

							echo gettext("You cannot set broadcast address to an interface");

							continue 2;

							$intbits_ok = false;

						}

				if ($version === 6) {

					$subnet = gen_subnetv6($intip, $intbits);

				} else {

					$subnet = gen_subnet($intip, $intbits);

								gettext("For a LAN, press <ENTER> for none:") . "\n> ";

					$is_ipaddr = ($version === 6) ? is_ipaddrv6($gwip) : is_ipaddrv4($gwip);

					$is_in_subnet = $is_ipaddr && ip_in_subnet($gwip, $subnet . "/" . $intbits);

					if ($gwip != '') {

						if (!$is_ipaddr) {

							echo sprintf(gettext("not an %s IP address!"), $label_IPvX) . "\n";

						} else if (!$is_in_subnet) {

							echo gettext("not in subnet!") . "\n";

						}

					}

				} while (!($gwip == '' || ($is_ipaddr && $is_in_subnet)));

					$gwname = add_gateway_to_config($interface, $gwip, $inet_type);

list($intip6, $intbits6, $gwname6) = console_configure_ip_address(6);

$config['interfaces'][$interface]['subnet']    = $intbits;

$config['interfaces'][$interface]['gateway']   = $gwname;

$config['interfaces'][$interface]['ipaddrv6']  = $intip6;

$config['interfaces'][$interface]['subnetv6']  = $intbits6;

$config['interfaces'][$interface]['gatewayv6'] = $gwname6;

$config['interfaces'][$interface]['enable']    = true;

	$dhcpd      = ($version === 6) ? "dhcpdv6" : "dhcpd";

		$subnet_end = ($version === 6) ? gen_subnetv6_max($intip6, $intbits6) : gen_subnet_max($intip, $intbits);

				echo sprintf(gettext("Enter the start address of the %s client address range:"), $label_IPvX) . " ";

				$dhcpstartip = chop(fgets($fp));

				if ($dhcpstartip === "") {

					fclose($fp);

				$is_ipaddr = ($version === 6) ? is_ipaddrv6($dhcpstartip) : is_ipaddrv4($dhcpstartip);

				$is_inrange = is_inrange($dhcpstartip, $subnet_start, $subnet_end);

				echo sprintf(gettext("Enter the end address of the %s client address range:"), $label_IPvX) . " ";

				$dhcpendip = chop(fgets($fp));

				if ($dhcpendip === "") {

					fclose($fp);

				$is_ipaddr = ($version === 6) ? is_ipaddrv6($dhcpendip) : is_ipaddrv4($dhcpendip);

				$is_inrange = is_inrange($dhcpendip, $subnet_start, $subnet_end);

				if ($not_inorder) {

					echo gettext("The end address of the DHCP range must be >= the start address") . "\n";

				}

			} while (!$is_ipaddr || !$is_inrange);

		} while ($not_inorder);

		$config[$dhcpd][$interface]['enable'] = true;

		$config[$dhcpd][$interface]['range']['from'] = $dhcpstartip;

		$config[$dhcpd][$interface]['range']['to'] = $dhcpendip;

	} else {

			$restart_dhcpd = true;

if (console_configure_dhcpd(6) == 0) {

		$restart_webgui = true;

}

	if ($config['dhcpd']) {

		if ($config['dhcpd']['wan']) {

			unset($config['dhcpd']['wan']);

		}

	}

	if ($config['dhcpdv6']) {

		if ($config['dhcpdv6']['wan']) {

	}

	if ($config['dhcpdv6']['lan']) {

	unset($config['ezshaper']);

	unset($config['nat']);

		system("rm /var/dhcpd/var/db/* >/dev/null 2>/dev/null");

	echo "\nPlease wait while the changes are saved to {$upperifname}...";

	system_routing_configure();

		echo "\n DHCPD...";

	}

	}

	if (is_ipaddr($intip)) {

if ($intip6 != '') {

	if (is_ipaddr($intip6)) {

}

if ($intip != '' || $intip6 != '') {

			echo "ifdescrs count is " . count($ifdescrs) . "\n";

			echo "interface is {$interface} \n";

			if ($intip6 != '') {

				if (is_ipaddr($intip6)) {

			}

				echo "		{$config['system']['webgui']['protocol']}://{$intip}/\n";

			}

			if ($intip6 != '') {

				if (is_ipaddr($intip6)) {

					echo "		{$config['system']['webgui']['protocol']}://[{$intip6}]/\n";

				} else {

					echo "		{$config['system']['webgui']['protocol']}://{$intip6}/\n";

				}

			}

fclose($fp);