pfSense

/*

 * system.php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2004-2018 Rubicon Communications, LLC (Netgate)

 * All rights reserved.

 *

 * originally based on m0n0wall (http://m0n0.ch/wall)

 *

 * Redistribution and use in source and binary forms, with or without

 *

 * 1. Redistributions of source code must retain the above copyright notice,

 *

 * 2. Redistributions in binary form must reproduce the above copyright

 *

 * 3. All advertising materials mentioning features or use of this software

 *

 * 4. The names "pfSense" and "pfSense Project" must not be used to

 *

 * 5. Products derived from this software may not be called "pfSense"

 *

 * 6. Redistributions of any form whatsoever must retain the following

 *

 * "This product includes software developed by the pfSense Project

 *

 * THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

 */

##|+PRIV

##|*NAME=System: General Setup

##|*DESCR=Allow access to the 'System: General Setup' page.

require_once("guiconfig.inc");

require_once("functions.inc");

require_once("system.inc");

$pconfig['dnsserver'] = $config['system']['dnsserver'];

$arr_gateways = return_gateways_array();

// set default columns to two if unset

if (!isset($config['system']['webgui']['dashboardcolumns'])) {

	$config['system']['webgui']['dashboardcolumns'] = 2;

// set default language if unset

	$config['system']['language'] = $g['language'];

}

$dnsgw_counter = 1;

$pconfig['dnsallowoverride'] = isset($config['system']['dnsallowoverride']);

$pconfig['language'] = $config['system']['language'];

$pconfig['webguicss'] = $config['system']['webgui']['webguicss'];

$pconfig['logincss'] = $config['system']['webgui']['logincss'];

$pconfig['webguifixedmenu'] = $config['system']['webgui']['webguifixedmenu'];

$pconfig['dashboardcolumns'] = $config['system']['webgui']['dashboardcolumns'];

$pconfig['interfacessort'] = isset($config['system']['webgui']['interfacessort']);

$pconfig['webguileftcolumnhyper'] = isset($config['system']['webgui']['webguileftcolumnhyper']);

$pconfig['dashboardavailablewidgetspanel'] = isset($config['system']['webgui']['dashboardavailablewidgetspanel']);

$pconfig['statusmonitoringsettingspanel'] = isset($config['system']['webgui']['statusmonitoringsettingspanel']);

$pconfig['webguihostnamemenu'] = $config['system']['webgui']['webguihostnamemenu'];

$pconfig['dnslocalhost'] = isset($config['system']['dnslocalhost']);

//$pconfig['dashboardperiod'] = isset($config['widgets']['period']) ? $config['widgets']['period']:"10";

$pconfig['loginshowhost'] = isset($config['system']['webgui']['loginshowhost']);

$pconfig['requirestatefilter'] = isset($config['system']['webgui']['requirestatefilter']);

if (!$pconfig['timezone']) {

	if (isset($g['default_timezone']) && !empty($g['default_timezone'])) {

}

if (!$pconfig['timeservers']) {

	$pconfig['timeservers'] = "pool.ntp.org";

}

$changedesc = gettext("System") . ": ";

$changecount = 0;

function is_timezone($elt) {

if ($pconfig['timezone'] <> $_POST['timezone']) {

	filter_pflog_start(true);

}

$timezonelist = system_get_timezone_list();

$timezonedesc = $timezonelist;

		$direction_str = gettext('AHEAD of');

		break;

	$timezonedesc[$idx] = $desc . " " .

}

$multiwan = false;

$interfaces = get_configured_interface_list();

foreach ($interfaces as $interface) {

		$multiwan = true;

	}

if ($_POST) {

	$changecount++;

	unset($input_errors);

	$reqdfields = explode(" ", "hostname domain");

	$reqdfieldsn = array(gettext("Hostname"), gettext("Domain"));

	do_input_validation($_POST, $reqdfields, $reqdfieldsn, $input_errors);

	if ($_POST['hostname']) {

	}

		$input_errors[] = gettext("The domain may only contain the characters a-z, 0-9, '-' and '.'.");

	}

	validate_webguicss_field($input_errors, $_POST['webguicss']);

	$dnslist = $ignore_posted_dnsgw = array();

	$dnscounter = 0;

		$dnslist[] = $_POST[$dnsname];

		if (($_POST[$dnsname] && !is_ipaddr($_POST[$dnsname]))) {

			$input_errors[] = sprintf(gettext("A valid IP address must be specified for DNS server %s."), $dnscounter+1);

		} else {

			if (($_POST[$dnsgwname] <> "") && ($_POST[$dnsgwname] <> "none")) {

				// A real gateway has been selected.

					if ((is_ipaddrv4($_POST[$dnsname])) && (validate_address_family($_POST[$dnsname], $_POST[$dnsgwname]) === false)) {

						$input_errors[] = sprintf(gettext('The IPv6 gateway "%1$s" can not be specified for IPv4 DNS server "%2$s".'), $_POST[$dnsgwname], $_POST[$dnsname]);

					}

					if ((is_ipaddrv6($_POST[$dnsname])) && (validate_address_family($_POST[$dnsname], $_POST[$dnsgwname]) === false)) {

						$input_errors[] = sprintf(gettext('The IPv4 gateway "%1$s" can not be specified for IPv6 DNS server "%2$s".'), $_POST[$dnsgwname], $_POST[$dnsname]);

					}

					// The user selected a gateway but did not provide a DNS address. Be nice and set the gateway back to "none".

				}

			}

		}

		$dnscounter++;

	}

	if (count(array_filter($dnslist)) != count(array_unique(array_filter($dnslist)))) {

		$input_errors[] = gettext('Each configured DNS server must have a unique IP address. Remove the duplicated IP.');

	$dnscounter = 0;

	$direct_networks_list = explode(" ", filter_get_direct_networks_list());

	while (isset($_POST[$dnsname])) {

			foreach ($direct_networks_list as $direct_network) {

				if (ip_in_subnet($_POST[$dnsname], $direct_network)) {

				}

		$dnscounter++;

	}

	# it's easy to have a little too much whitespace in the field, clean it up for the user before processing.

	foreach (explode(' ', $_POST['timeservers']) as $ts) {

			$input_errors[] = gettext("A NTP Time Server name may only contain the characters a-z, 0-9, '-' and '.'.");

		}

	if ($input_errors) {

		update_if_changed("hostname", $config['system']['hostname'], $_POST['hostname']);

		update_if_changed("timezone", $config['system']['timezone'], $_POST['timezone']);

		if ($_POST['language'] && $_POST['language'] != $config['system']['language']) {

			$config['system']['language'] = $_POST['language'];

			set_language();

		}

		unset($config['system']['webgui']['interfacessort']);

		unset($config['system']['webgui']['webguileftcolumnhyper']);

		unset($config['system']['webgui']['dashboardavailablewidgetspanel']);

		unset($config['system']['webgui']['statusmonitoringsettingspanel']);

//		if ($_POST['dashboardperiod']) {

		/* XXX - billm: these still need updating after figuring out how to check if they actually changed */

		$olddnsservers = $config['system']['dnsserver'];

		unset($config['system']['dnsserver']);

		}

		// Remember the new list for display also.

		$olddnsallowoverride = $config['system']['dnsallowoverride'];

		unset($config['system']['dnsallowoverride']);

		$config['system']['dnsallowoverride'] = $_POST['dnsallowoverride'] ? true : false;

		if ($_POST['dnslocalhost'] == "yes") {

			$config['system']['dnslocalhost'] = true;

		} else {

			unset($config['system']['dnslocalhost']);

		}

		/* which interface should the dns servers resolve through? */

		$dnscounter = 0;

		$outdnscounter = 0;

		while (isset($_POST[$dnsname])) {

			if ($ignore_posted_dnsgw[$dnsgwname]) {

				$thisdnsgwname = "none";

			} else {

				$thisdnsgwname = $pconfig[$dnsgwname];

			}

			$config['system'][$dnsgwconfigname] = "none";

			$pconfig[$dnsgwname] = "none";

				$pconfig[$outdnsname] = $_POST[$dnsname];

				if ($_POST[$dnsgwname]) {

					$config['system'][$outdnsgwconfigname] = $thisdnsgwname;

					$pconfig[$outdnsgwname] = $thisdnsgwname;

					unset($config['system'][$outdnsgwconfigname]);

					$pconfig[$outdnsgwname] = "";

				$outdnscounter++;

			}

			if (($olddnsgwname != "") && ($olddnsgwname != "none") && (($olddnsgwname != $thisdnsgwname) || ($olddnsservers[$dnscounter] != $_POST[$dnsname]))) {

				// A previous DNS GW name was specified. It has now gone or changed, or the DNS server address has changed.

				if (is_ipaddrv4($olddnsservers[$dnscounter])) {

					mwexec("/sbin/route delete " . escapeshellarg($olddnsservers[$dnscounter-1]));

				} else if (is_ipaddrv6($olddnsservers[$dnscounter])) {

					mwexec("/sbin/route delete -inet6 " . escapeshellarg($olddnsservers[$dnscounter-1]));

				}

			}

		}

		if ($changecount > 0) {

			write_config($changedesc);

		}

		$retval = 0;

		$retval = system_hostname_configure();

		if (isset($config['dnsmasq']['enable'])) {

			$retval |= services_dnsmasq_configure();

		} elseif (isset($config['unbound']['enable'])) {

			$retval |= services_unbound_configure();

		}

		$retval |= system_timezone_configure();

		if ($olddnsallowoverride != $config['system']['dnsallowoverride']) {

			$retval |= send_event("service reload dns");

		}

		// Reload the filter - plugins might need to be run.

		$retval |= filter_configure();

		$savemsg = get_std_save_message($retval);

}

$pgtitle = array(gettext("System"), gettext("General Setup"));

include("head.inc");

if ($input_errors) {

	print_input_errors($input_errors);

}

if ($savemsg) {

	print_info_box($savemsg, 'success');

}

?>

<div id="container">

<?php

$form = new Form;

$section = new Form_Section('System');

	'hostname',

	'*Hostname',

	'text',

$section->addInput(new Form_Input(

	'domain',

	'*Domain',

	'text',

))->setHelp('Do not use \'.local\' as the final part of the domain (TLD), The \'.local\' domain is %1$swidely used%2$s by '.

	'mDNS (including Avahi and Apple OS X\'s Bonjour/Rendezvous/Airprint/Airplay), and some Windows systems and networked devices. ' .

	'These will not network correctly if the router uses \'.local\'. Alternatives such as \'.local.lan\' or \'.mylocal\' are safe.',

	 ['<a target="_blank" href="https://www.unbound.net/pipermail/unbound-users/2011-March/001735.html">',

$form->add($section);

$section = new Form_Section('DNS Server Settings');

if (!is_array($pconfig['dnsserver'])) {

	$is_last_dnsserver = ($dnsserver_num == $dnsserver_count - 1);

		'dns' . $dnsserver_num,

		'DNS Server',

		$dnsserver

	if ($multiwan)	{

		$options = array('none' => 'none');

		foreach ($arr_gateways as $gwname => $gwitem) {

				continue;

			if ((is_ipaddrv6(lookup_gateway_ip_by_name($pconfig[$dnsgw])) && (is_ipaddrv4($gwitem['gateway'])))) {

				continue;

			$options[$gwname] = $gwname.' - '.$gwitem['friendlyiface'].' - '.$gwitem['gateway'];

		$group->add(new Form_Select(

			'dnsgw' . $dnsserver_num,

			'Gateway',

			$pconfig['dnsgw' . $dnsserver_num],

			$options

		))->setHelp(($is_last_dnsserver) ? $dnsgw_help:null);;

	}

	$group->add(new Form_Button(

	$section->add($group);

	$dnsserver_num++;

}

$section->addInput(new Form_Button(

$section->addInput(new Form_Checkbox(

	'dnsallowoverride',

	'DNS Server Override',

	'Allow DNS server list to be overridden by DHCP/PPP on WAN',

))->setHelp(sprintf(gettext('If this option is set, %s will use DNS servers '.

	'assigned by a DHCP/PPP server on WAN for its own purposes (including '.

	'the DNS Forwarder/DNS Resolver). However, they will not be assigned to DHCP '.

$section->addInput(new Form_Checkbox(

	'dnslocalhost',

	'Disable DNS Forwarder',

	'Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall',

	$pconfig['dnslocalhost']

))->setHelp('By default localhost (127.0.0.1) will be used as the first DNS '.

	'server where the DNS Forwarder or DNS Resolver is enabled and set to '.

	'listen on localhost, so system can use the local DNS service to perform '.

$section = new Form_Section('Localization');

$section->addInput(new Form_Select(

	'timezone',

	'*Timezone',

	$pconfig['timezone'],

	array_combine($timezonelist, $timezonedesc)

))->setHelp('Select the timezone or location within the timezone to be used by this system. '.

$section->addInput(new Form_Input(

	'timeservers',

	'Timeservers',

	'Remember to set up at least one DNS server if a host name is entered here!');

$section->addInput(new Form_Select(

	'language',

	'*Language',

	$pconfig['language'],

$section = new Form_Section('webConfigurator');

gen_webguicss_field($section, $pconfig['webguicss']);

gen_interfacessort_field($section, $pconfig['interfacessort']);

gen_associatedpanels_fields(