Project

General

Profile

Download (17.4 KB) Statistics
| Branch: | Tag: | Revision:
1
<?php
2
/* $Id$ */
3
/*
4
	interfaces_opt.php
5
	part of m0n0wall (http://m0n0.ch/wall)
6

    
7
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
8
	All rights reserved.
9

    
10
	Redistribution and use in source and binary forms, with or without
11
	modification, are permitted provided that the following conditions are met:
12

    
13
	1. Redistributions of source code must retain the above copyright notice,
14
	   this list of conditions and the following disclaimer.
15

    
16
	2. Redistributions in binary form must reproduce the above copyright
17
	   notice, this list of conditions and the following disclaimer in the
18
	   documentation and/or other materials provided with the distribution.
19

    
20
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
21
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
22
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
23
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
24
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29
	POSSIBILITY OF SUCH DAMAGE.
30
*/
31

    
32
require("guiconfig.inc");
33

    
34
unset($index);
35
if ($_GET['index'])
36
	$index = $_GET['index'];
37
else if ($_POST['index'])
38
	$index = $_POST['index'];
39

    
40
if (!$index)
41
	exit;
42

    
43
function remove_bad_chars($string) {
44
	return preg_replace('/[^a-z|_|0-9]/i','',$string);
45
}
46

    
47
$optcfg = &$config['interfaces']['opt' . $index];
48
$optcfg['descr'] = remove_bad_chars($optcfg['descr']);
49

    
50
if(is_array($config['aliases']['alias']))
51
	foreach($config['aliases']['alias'] as $alias) 
52
		if($alias['name'] == $optcfg['descr']) 
53
			$input_errors[] = gettext("Sorry, an alias with the name {$optcfg['descr']} already exists.");
54

    
55
$pconfig['descr'] = $optcfg['descr'];
56
$pconfig['bridge'] = $optcfg['bridge'];
57

    
58
$pconfig['enable'] = isset($optcfg['enable']);
59

    
60
$pconfig['blockpriv'] = isset($optcfg['blockpriv']);
61
$pconfig['blockbogons'] = isset($optcfg['blockbogons']);
62
$pconfig['spoofmac'] = $optcfg['spoofmac'];
63
$pconfig['mtu'] = $optcfg['mtu'];
64

    
65
$pconfig['disableftpproxy'] = isset($optcfg['disableftpproxy']);
66

    
67
/* Wireless interface? */
68
if (isset($optcfg['wireless'])) {
69
	require("interfaces_wlan.inc");
70
	wireless_config_init();
71
}
72

    
73
if ($optcfg['ipaddr'] == "dhcp") {
74
	$pconfig['type'] = "DHCP";
75
	$pconfig['dhcphostname'] = $optcfg['dhcphostname'];
76
} else {
77
	$pconfig['type'] = "Static";
78
	$pconfig['ipaddr'] = $optcfg['ipaddr'];
79
	$pconfig['subnet'] = $optcfg['subnet'];
80
	$pconfig['gateway'] = $optcfg['gateway'];
81
	$pconfig['pointtopoint'] = $optcfg['pointtopoint'];
82
}
83

    
84
if ($_POST) {
85

    
86
	unset($input_errors);
87

    
88
	/* filter out spaces from descriptions  */
89
	$POST['descr'] = remove_bad_chars($POST['descr']);
90

    
91
	if($_POST['gateway'] and $pconfig['gateway'] <> $_POST['gateway']) {
92
		/* enumerate slbd gateways and make sure we are not creating a route loop */
93
		if(is_array($config['load_balancer']['lbpool'])) {
94
			foreach($config['load_balancer']['lbpool'] as $lbpool) {
95
				if($lbpool['type'] == "gateway") {
96
				    foreach ((array) $lbpool['servers'] as $server) {
97
			            $svr = split("\|", $server);
98
			            if($svr[1] == $pconfig['gateway'])  {
99
			            		$_POST['gateway']  = $pconfig['gateway'];
100
			            		$input_errors[] = "Cannot change {$svr[1]} gateway.  It is currently referenced by the load balancer pools.";
101
			            		break;
102
			            }
103
					}
104
				}
105
			}
106
			foreach($config['filter']['rule'] as $rule) {
107
				if($rule['gateway'] == $_POST['gateway']) {
108
	            		$input_errors[] = "Cannot change {$_POST['gateway']} gateway.  It is currently referenced by the filter rules via policy based routing.";
109
	            		break;
110
				}
111
			}
112
		}
113
	}
114

    
115
	$pconfig = $_POST;
116

    
117
	/* input validation */
118
	if ($_POST['enable']) {
119

    
120
		/* description unique? */
121
		for ($i = 1; isset($config['interfaces']['opt' . $i]); $i++) {
122
			if ($i != $index) {
123
				if ($config['interfaces']['opt' . $i]['descr'] == $_POST['descr']) {
124
					$input_errors[] = "An interface with the specified description already exists.";
125
				}
126
			}
127
		}
128

    
129
		if ($_POST['bridge']) {
130
			/* double bridging? */
131
			for ($i = 1; isset($config['interfaces']['opt' . $i]); $i++) {
132
				if ($i != $index) {
133
					if ($config['interfaces']['opt' . $i]['bridge'] == $_POST['bridge']) {
134
						//$input_errors[] = "Optional interface {$i} " .
135
						//	"({$config['interfaces']['opt' . $i]['descr']}) is already bridged to " .
136
						//	"the specified interface.";
137
					} else if ($config['interfaces']['opt' . $i]['bridge'] == "opt{$index}") {
138
						//$input_errors[] = "Optional interface {$i} " .
139
						//	"({$config['interfaces']['opt' . $i]['descr']}) is already bridged to " .
140
						//	"this interface.";
141
					}
142
				}
143
			}
144
			if ($config['interfaces'][$_POST['bridge']]['bridge']) {
145
				//$input_errors[] = "The specified interface is already bridged to " .
146
				//	"another interface.";
147
			}
148
			/* captive portal on? */
149
			if (isset($config['captiveportal']['enable'])) {
150
				//$input_errors[] = "Interfaces cannot be bridged while the captive portal is enabled.";
151
			}
152
		} else {
153
			if ($_POST['type'] <> "DHCP") {
154
				$reqdfields = explode(" ", "descr ipaddr subnet");
155
				$reqdfieldsn = explode(",", "Description,IP address,Subnet bit count");
156
				do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);
157
				if (($_POST['ipaddr'] && !is_ipaddr($_POST['ipaddr']))) {
158
					$input_errors[] = "A valid IP address must be specified.";
159
				}
160
				if (($_POST['subnet'] && !is_numeric($_POST['subnet']))) {
161
					$input_errors[] = "A valid subnet bit count must be specified.";
162
				}
163
				if($_POST['gateway'] <> "" && !is_ipaddr($_POST['gateway'])) {
164
					$input_errors[] = "A valid gateway must be specified.";
165
				}
166
			}
167
		}
168
	        if ($_POST['mtu'] && (($_POST['mtu'] < 576) || ($_POST['mtu'] > 1500))) {
169
			$input_errors[] = "The MTU must be between 576 and 1500 bytes.";
170
		}		
171
		if (($_POST['spoofmac'] && !is_macaddr($_POST['spoofmac']))) {
172
			$input_errors[] = "A valid MAC address must be specified.";
173
		}		
174
	}
175

    
176
	if($_POST['mtu']) {
177
		if($_POST['mtu'] < 24 or $_POST['mtu'] > 1501)
178
			$input_errors[] = "A valid MTU is required 24-1500.";
179
	}
180
	
181
	/* Wireless interface? */
182
	if (isset($optcfg['wireless'])) {
183
		$wi_input_errors = wireless_config_post();
184
		if ($wi_input_errors) {
185
			$input_errors = array_merge($input_errors, $wi_input_errors);
186
		}
187
	}
188

    
189
	if (!$input_errors) {
190

    
191
		$bridge = discover_bridge($optcfg['if'], filter_translate_type_to_real_interface($optcfg['bridge']));
192
		if($bridge <> "-1") {
193
			destroy_bridge($bridge);
194
                        setup_bridge();
195
		}
196

    
197
		unset($optcfg['dhcphostname']);
198
		unset($optcfg['disableftpproxy']);
199
		
200
		/* per interface pftpx helper */
201
		if($_POST['disableftpproxy'] == "yes") {
202
			$optcfg['disableftpproxy'] = true;
203
			system_start_ftp_helpers();
204
		} else {			
205
			system_start_ftp_helpers();
206
		}		
207

    
208
		$optcfg['descr'] = remove_bad_chars($_POST['descr']);
209
		$optcfg['bridge'] = $_POST['bridge'];
210
		$optcfg['enable'] = $_POST['enable'] ? true : false;
211

    
212
		if ($_POST['type'] == "Static") {
213
			$optcfg['ipaddr'] = $_POST['ipaddr'];
214
			$optcfg['subnet'] = $_POST['subnet'];
215
			$optcfg['gateway'] = $_POST['gateway'];
216
			if (isset($optcfg['ispointtopoint']))
217
				$optcfg['pointtopoint'] = $_POST['pointtopoint'];
218
		} else if ($_POST['type'] == "DHCP") {
219
			$optcfg['ipaddr'] = "dhcp";
220
			$optcfg['dhcphostname'] = $_POST['dhcphostname'];
221
		}
222

    
223
		$optcfg['blockpriv'] = $_POST['blockpriv'] ? true : false;
224
		$optcfg['blockbogons'] = $_POST['blockbogons'] ? true : false;
225
		$optcfg['spoofmac'] = $_POST['spoofmac'];
226
		$optcfg['mtu'] = $_POST['mtu'];
227

    
228
		write_config();
229
		
230
		$savemsg = get_std_save_message($retval);
231
	}
232
}
233

    
234

    
235
$pgtitle = "Interfaces: Optional {$index} (" . htmlspecialchars($optcfg['descr']) . ")";
236
include("head.inc");
237

    
238
?>
239

    
240
<script language="JavaScript">
241
<!--
242
function enable_change(enable_over) {
243
	var endis;
244
	endis = !((document.iform.bridge.selectedIndex == 0) || enable_over);
245
	document.iform.ipaddr.disabled = endis;
246
	document.iform.subnet.disabled = endis;
247
}
248
function ipaddr_change() {
249
	document.iform.subnet.selectedIndex = gen_bits_opt(document.iform.ipaddr.value);
250
}
251
function type_change(enable_change,enable_change_pptp) {
252
	switch (document.iform.type.selectedIndex) {
253
		case 0:
254
			document.iform.ipaddr.type.disabled = 0;
255
			document.iform.ipaddr.disabled = 0;
256
			document.iform.subnet.disabled = 0;
257
			document.iform.gateway.disabled = 0;
258
			break;
259
		case 1:
260
			document.iform.ipaddr.type.disabled = 1;
261
			document.iform.ipaddr.disabled = 1;
262
			document.iform.subnet.disabled = 1;
263
			document.iform.gateway.disabled = 1;
264
			break;
265
	}
266
}
267
//-->
268
</script>
269

    
270
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
271
<?php include("fbegin.inc"); ?>
272
<p class="pgtitle"><?=$pgtitle?></p>
273
<?php if ($input_errors) print_input_errors($input_errors); ?>
274
<?php if ($savemsg) print_info_box($savemsg); ?>
275
<?php if ($optcfg['if']): ?>
276
            <form action="interfaces_opt.php" method="post" name="iform" id="iform">
277
              <table width="100%" border="0" cellpadding="6" cellspacing="0">
278
                <tr>
279
                  <td colspan="2" valign="top" class="listtopic">Optional Interface Configuration</td>
280
                </tr>	      
281
                <tr>
282
                  <td width="22%" valign="top" class="vtable">&nbsp;</td>
283
                  <td width="78%" class="vtable">
284
			<input name="enable" type="checkbox" value="yes" <?php if ($pconfig['enable']) echo "checked"; ?> onClick="enable_change(false)">
285
                    <strong>Enable Optional <?=$index;?> interface</strong></td>
286
		</tr>
287
                <tr>
288
                  <td width="22%" valign="top" class="vncell">Description</td>
289
                  <td width="78%" class="vtable">
290
                    <input name="descr" type="text" class="formfld" id="descr" size="30" value="<?=htmlspecialchars($pconfig['descr']);?>">
291
					<br> <span class="vexpl">Enter a description (name) for the interface here.</span>
292
		  </td>
293
		</tr>
294

    
295
                <tr>
296
                  <td colspan="2" valign="top" height="16"></td>
297
                </tr>
298
                <tr>
299
                  <td colspan="2" valign="top" class="listtopic">General configuration</td>
300
                </tr>
301
                <tr>
302
                  <td valign="middle" class="vncell"><strong>Type</strong></td>
303
                  <td class="vtable"> <select name="type" class="formfld" id="type" onchange="type_change()">
304
                      <?php $opts = split(" ", "Static DHCP");
305
				foreach ($opts as $opt): ?>
306
                      <option <?php if ($opt == $pconfig['type']) echo "selected";?>>
307
                      <?=htmlspecialchars($opt);?>
308
                      </option>
309
                      <?php endforeach; ?>
310
                    </select></td>
311
                </tr>
312
                <tr>
313
                  <td valign="top" class="vncell">MAC address</td>
314
                  <td class="vtable"> <input name="spoofmac" type="text" class="formfld" id="spoofmac" size="30" value="<?=htmlspecialchars($pconfig['spoofmac']);?>">
315
		    <?php
316
			$ip = getenv('REMOTE_ADDR');
317
			$mac = `/usr/sbin/arp -an | grep {$ip} | cut -d" " -f4`;
318
			$mac = str_replace("\n","",$mac);
319
		    ?>
320
		    <a OnClick="document.forms[0].spoofmac.value='<?=$mac?>';" href="#">Copy my MAC address</a>   
321
		    <br>
322
                    This field can be used to modify (&quot;spoof&quot;) the MAC
323
                    address of the WAN interface<br>
324
                    (may be required with some cable connections)<br>
325
                    Enter a MAC address in the following format: xx:xx:xx:xx:xx:xx
326
                    or leave blank</td>
327
                </tr>
328
                <tr>
329
                  <td valign="top" class="vncell">MTU</td>
330
                  <td class="vtable"> <input name="mtu" type="text" class="formfld" id="mtu" size="8" value="<?=htmlspecialchars($pconfig['mtu']);?>">
331
                    <br>
332
                    If you enter a value in this field, then MSS clamping for
333
                    TCP connections to the value entered above minus 40 (TCP/IP
334
                    header size) will be in effect. If you leave this field blank,
335
                    an MTU of 1492 bytes for PPPoE and 1500 bytes for all other
336
                    connection types will be assumed.</td>
337
                </tr>
338
		
339
                <tr>
340
                  <td colspan="2" valign="top" height="16"></td>
341
		</tr>
342
		<tr>
343
                  <td colspan="2" valign="top" class="listtopic">IP configuration</td>
344
		</tr>
345
		<tr>
346
                  <td width="22%" valign="top" class="vncellreq">Bridge with</td>
347
                  <td width="78%" class="vtable">
348
			<select name="bridge" class="formfld" id="bridge" onChange="enable_change(false)">
349
				  	<option <?php if (!$pconfig['bridge']) echo "selected";?> value="">none</option>
350
                      <?php $opts = array('lan' => "LAN", 'wan' => "WAN");
351
					  	for ($i = 1; isset($config['interfaces']['opt' . $i]); $i++) {
352
							if ($i != $index)
353
								$opts['opt' . $i] = "Optional " . $i . " (" .
354
									$config['interfaces']['opt' . $i]['descr'] . ")";
355
						}
356
					foreach ($opts as $opt => $optname): ?>
357
                      <option <?php if ($opt == $pconfig['bridge']) echo "selected";?> value="<?=htmlspecialchars($opt);?>">
358
                      <?=htmlspecialchars($optname);?>
359
                      </option>
360
                      <?php endforeach; ?>
361
                    </select> </td>
362
		</tr>
363
                <tr>
364
                  <td width="22%" valign="top" class="vncellreq">IP address</td>
365
                  <td width="78%" class="vtable">
366
                    <input name="ipaddr" type="text" class="formfld" id="ipaddr" size="20" value="<?=htmlspecialchars($pconfig['ipaddr']);?>">
367
                    /
368
                	<select name="subnet" class="formfld" id="subnet">
369
					<?php
370
					for ($i = 32; $i > 0; $i--) {
371
						if($i <> 31) {
372
							echo "<option value=\"{$i}\" ";
373
							if ($i == $pconfig['subnet']) echo "selected";
374
							echo ">" . $i . "</option>";
375
						}
376
					}
377
					?>                    </select>
378
				 </td>
379
				</tr>
380
		<tr>
381
                  <td width="22%" valign="top" class="vncell">Gateway</td>
382
                  <td width="78%" class="vtable">
383
			<input name="gateway" value="<?php echo $pconfig['gateway']; ?>">
384
			<br>
385
			If this interface is an Internet connection, enter its next hop gateway (router) IP address here.  Otherwise, leave this option blank.
386
		  </td>
387
		</tr>
388
                <tr>
389
                  <td colspan="2" valign="top" height="16"></td>
390
                </tr>
391
                <tr>
392
                  <td colspan="2" valign="top" class="listtopic">FTP Helper</td>
393
                </tr>		
394
		<tr>
395
			<td width="22%" valign="top" class="vncell">FTP Helper</td>
396
			<td width="78%" class="vtable">
397
				<input name="disableftpproxy" type="checkbox" id="disableftpproxy" value="yes" <?php if ($pconfig['disableftpproxy']) echo "checked"; ?> onclick="enable_change(false)" />
398
				<strong>Disable the userland FTP-Proxy application</strong>
399
				<br />
400
			</td>
401
		</tr>			
402
				<?php /* Wireless interface? */
403
				if (isset($optcfg['wireless']))
404
					wireless_config_print();
405
				?>		
406
                <tr>
407
                  <td colspan="2" valign="top" height="16"></td>
408
                </tr>
409
                <tr>
410
                  <td colspan="2" valign="top" class="listtopic">DHCP client configuration</td>
411
                </tr>
412
                <tr>
413
                  <td valign="top" class="vncell">Hostname</td>
414
                  <td class="vtable"> <input name="dhcphostname" type="text" class="formfld" id="dhcphostname" size="40" value="<?=htmlspecialchars($pconfig['dhcphostname']);?>">
415
                    <br>
416
                    The value in this field is sent as the DHCP client identifier
417
                    and hostname when requesting a DHCP lease. Some ISPs may require
418
                    this (for client identification).</td>
419
                </tr>
420
                <tr>
421
                  <td colspan="2" valign="top" height="16"></td>
422
                </tr>		
423
		<tr>
424
                  <td width="22%" valign="top">&nbsp;</td>
425
                  <td width="78%">
426
                    <input name="index" type="hidden" value="<?=$index;?>">
427
				  <input name="Submit" type="submit" class="formbtn" value="Save" onclick="enable_change(true)">
428
                  </td>
429
                </tr>
430
                <tr>
431
                  <td width="22%" valign="top">&nbsp;</td>
432
                  <td width="78%"><span class="vexpl"><span class="red"><strong>Note:<br>
433
                    </strong></span>be sure to add <a href="firewall_rules.php">firewall rules</a> to permit traffic
434
                    through the interface. You also need firewall rules for an interface in
435
                    bridged mode as the firewall acts as a filtering bridge.</span></td>
436
                </tr>
437
              </table>
438
</form>
439
<script language="JavaScript">
440
<!--
441
enable_change(false);
442
//-->
443
</script>
444
<?php else: ?>
445
<p><strong>Optional <?=$index;?> has been disabled because there is no OPT<?=$index;?> interface.</strong></p>
446
<?php endif; ?>
447
<?php include("fend.inc"); ?>
448
</body>
449
</html>
450

    
451
<?php
452
if ($_POST) {
453

    
454
	if (!$input_errors) {
455
		
456
		ob_flush();
457
		flush();
458
		sleep(1);		
459
		
460
		interfaces_optional_configure_if($index);
461
		
462
		reset_carp();
463

    
464
		/* load graphing functions */
465
		enable_rrd_graphing();	
466
		
467
		/* sync filter configuration */
468
		filter_configure();
469

    
470
 		/* set up static routes */
471
		system_routing_configure();
472

    
473
	}
474
}
475
?>
(72-72/173)