pfSense

#!/usr/local/bin/php

    firewall_nat_out.php

    All rights reserved.

    All rights reserved.

    modification, are permitted provided that the following conditions are met:

       this list of conditions and the following disclaimer.

       notice, this list of conditions and the following disclaimer in the

       documentation and/or other materials provided with the distribution.

    INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY

    AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

    AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,

    OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

    SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

    INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

    CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

    ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

    POSSIBILITY OF SUCH DAMAGE.

*/

require("guiconfig.inc");

if (!is_array($config['nat']['advancedoutbound']['rule']))

    $config['nat']['advancedoutbound']['rule'] = array();

if ($_POST) {

    $pconfig = $_POST;

        $retval = 0;

    		config_unlock();

        }

        $savemsg = get_std_save_message($retval);

            if (file_exists($d_natconfdirty_path))

                unlink($d_natconfdirty_path);

            if (file_exists($d_filterconfdirty_path))

                unlink($d_filterconfdirty_path);

        }

}

if (isset($_POST['save'])) {

    /* mutually exclusive settings - if user wants advanced NAT, we don't help with IPSec */

            $config['nat']['ipsecpassthru']['enable'] = true;

            $config['nat']['advancedoutbound']['enable'] = false;

    }

    if ($_POST['advancedoutbound'] == true) {

            $config['nat']['advancedoutbound']['enable'] = true;

            $config['nat']['ipsecpassthru']['enable'] = false;

    }

    if ($_POST['ipsecpassthru'] == false)

            $config['nat']['ipsecpassthru']['enable'] = false;

    if ($_POST['advancedoutbound'] == false)

            $config['nat']['advancedoutbound']['enable'] = false;

    write_config();

    touch($d_natconfdirty_path);

    header("Location: firewall_nat_out.php");

    exit;

}

        /* delete selected rules */

        if (is_array($_POST['rule']) && count($_POST['rule'])) {

                foreach ($_POST['rule'] as $rulei) {

                        unset($a_out[$rulei]);

                }

                write_config();

                touch($d_natconfdirty_path);

                header("Location: firewall_nat_out.php");

                exit;

        }

} else {

        foreach ($_POST as $pn => $pd) {

                if (preg_match("/move_(\d+)_x/", $pn, $matches)) {

                        $movebtn = $matches[1];

                        break;

                }

        }

        /* move selected rules before this rule */

        if (isset($movebtn) && is_array($_POST['rule']) && count($_POST['rule'])) {

                $a_out_new = array();

                /* copy all rules < $movebtn and not selected */

                for ($i = 0; $i < $movebtn; $i++) {

                        if (!in_array($i, $_POST['rule']))

                                $a_out_new[] = $a_out[$i];

                }

                /* copy all selected rules */

                for ($i = 0; $i < count($a_out); $i++) {

                        if ($i == $movebtn)

                                continue;

                        if (in_array($i, $_POST['rule']))

                                $a_out_new[] = $a_out[$i];

                }

                /* copy $movebtn rule */

                if ($movebtn < count($a_out))

                        $a_out_new[] = $a_out[$movebtn];

                /* copy all rules > $movebtn and not selected */

                for ($i = $movebtn+1; $i < count($a_out); $i++) {

                        if (!in_array($i, $_POST['rule']))

                                $a_out_new[] = $a_out[$i];

                }

                $a_out = $a_out_new;

                write_config();

                touch($d_natconfdirty_path);

                header("Location: firewall_nat_out.php");

                exit;

        }

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>

<head>

<link href="gui.css" rel="stylesheet" type="text/css">

</head>

<body link="#0000CC" vlink="#0000CC" alink="#0000CC">

<?php include("fbegin.inc"); ?>

<?php if (file_exists($d_natconfdirty_path)): ?><p>

<?php print_info_box_np("The NAT configuration has been changed.<br>You must apply the changes in order for them to take effect.");?><br>

<input name="apply" type="submit" class="formbtn" id="apply" value="Apply changes"></p>

<?php endif; ?>

<table width="100%" border="0" cellpadding="0" cellspacing="0">  <tr><td>

  <ul id="tabnav">

    <li class="tabinact"><a href="firewall_nat.php">Inbound</a></li>

    <li class="tabinact"><a href="firewall_nat_server.php">Server NAT</a></li>

    <li class="tabinact"><a href="firewall_nat_1to1.php">1:1</a></li>

    <li class="tabact">Outbound</li>

  </td></tr>

              <table width="100%" border="0" cellpadding="6" cellspacing="0">

                      <strong>Enable IPSec passthru</strong></p>

                      <input name="advancedoutbound" type="checkbox" id="advancedoutbound" value="yes" onClick="document.iform.ipsecpassthru.checked=false" <?php if (isset($config['nat']['advancedoutbound']['enable'])) echo "checked";?>>

                      <strong>Enable advanced outbound NAT</strong></p></td>

                </tr>

                <tr>

                  <td> <input name="save" type="submit" class="formbtn" value="Save">

                </tr>

                <tr>

                      rules will be automatically generated anymore. Instead, only the mappings

                      you specify below will be used. With advanced outbound NAT disabled,

                      a mapping is automatically created for each interface's subnet

                      (except WAN).</span> If you use target addresses other than the WAN interface's IP address, then depending on<span class="vexpl"> the way your WAN connection is setup, you may also need <a href="services_proxyarp.php">proxy ARP</a>.</span><br>

                      <br>

                      You may enter your own mappings below.</p>

                    </td>

                </tr>

              </table>

              &nbsp;<br>

              <table width="100%" border="0" cellpadding="0" cellspacing="0">

                  <td width="20%" class="listhdrr">Source</td>

                  <td width="25%" class="listhdr">Description</td>

                  <td width="5%" class="list"></td>

                </tr>

                    <?php

					if (!$natent['interface'] || ($natent['interface'] == "wan"))

					  	echo "WAN";

					else

                  </td>

                  </td>

                    <?php

                      if (!$natent['sourceport'])

                          echo "*";

                      else

                          echo $natent['sourceport'];

                    ?>

                  </td>

                      if (isset($natent['destination']['any']))

                          echo "*";

                      else {

                          if (isset($natent['destination']['not']))

                              echo "! ";

                          echo $natent['destination']['network'];

                      }

                    ?>

                  </td>

                    <?php

                      if (!$natent['natport'])

                          echo "*";

                      else

                          echo $natent['natport'];

                    ?>

                  </td>

                      if (!$natent['target'])

                          echo "*";

                      else

                          echo $natent['target'];

                    ?>

                  </td>

                    <font color="#FFFFFF"><?=htmlspecialchars($natent['descr']);?>&nbsp;

                    <table border="0" cellspacing="0" cellpadding="1">

                      <tr>

                        <td><a href="firewall_nat_out_edit.php?id=<?=$i;?>"><img src="e.gif" width="17" height="17" border="0"></a></td>

                        <td><input type="checkbox" name="rule[]" value="<?=$i;?>" style="margin: 0; padding: 0; width: 15px; height: 15px;"></td>

                      </tr>

                      <tr>

                        <td><input onmouseover="fr_insline(0, true)" onmouseout="fr_insline(0, false)" name="move_<?=$i;?>" src="left.gif" title="move selected rules before this rule" height="17" type="image" width="17" border="0"></td>

                        <!-- <billm><td><a href="firewall_nat_out_edit.php?dup=<?=$i;?>"><img src="plus.gif" title="add a new nat based on this one" width="17" height="17" border="0"></a></td><billm> -->

                      </tr>

                    </table>

              <?php $i++; $nnats++; endforeach; ?>

                    <table border="0" cellspacing="0" cellpadding="1">

                      <tr>

                        <td><?php if ($nnats == 0): ?><img src="left_d.gif" width="17" height="17" title="move selected mappings to end" border="0"><?php else: ?><input name="move_<?=$i;?>" type="image" src="left.gif" width="17" height="17" title="move selected mappings to end" border="0"><?php endif; ?></td>

                        <td><a href="firewall_nat_out_edit.php"><img src="plus.gif" width="17" height="17" border="0"></a></td>

                      </tr>

                      <tr>

                        <td><?php if ($nnats == 0): ?><img src="x_d.gif" width="17" height="17" title="delete selected rules" border="0"><?php else: ?><input name="del" type="image" src="x.gif" width="17" height="17" title="delete selected mappings" onclick="return confirm('Do you really want to delete the selected mappings?')"><?php endif; ?></td>

                      </tr>

                    </table></td>

              </table>

</td>

  </tr>

</table>

            </form>

<?php include("fend.inc"); ?>

</body>

</html>