pfSense

#!/usr/local/bin/php

    firewall_nat_out.php

    All rights reserved.

    All rights reserved.

    modification, are permitted provided that the following conditions are met:

       this list of conditions and the following disclaimer.

       notice, this list of conditions and the following disclaimer in the

       documentation and/or other materials provided with the distribution.

    INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY

    AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

    AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,

    OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

    SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

    INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

    CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

    ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

    POSSIBILITY OF SUCH DAMAGE.

*/

require("guiconfig.inc");

if (!is_array($config['nat']['advancedoutbound']['rule']))

    $config['nat']['advancedoutbound']['rule'] = array();

if ($_POST) {

    $pconfig = $_POST;

        $retval = 0;

		config_unlock();

	        $savemsg = get_std_save_message($retval);

	else

		$savemsg = $retval;

            if (file_exists($d_natconfdirty_path))

                unlink($d_natconfdirty_path);

            if (file_exists($d_filterconfdirty_path))

                unlink($d_filterconfdirty_path);

        }

}

if (isset($_POST['save'])) {

        /* mutually exclusive settings - if user wants advanced NAT, we don't help with IPSec */

        if ($_POST['ipsecpassthru'] == true) {

                $config['nat']['ipsecpassthru']['enable'] = true;

                $config['nat']['advancedoutbound']['enable'] = false;

        }

        if ($_POST['advancedoutbound'] == true) {

                $config['nat']['advancedoutbound']['enable'] = true;

                $config['nat']['ipsecpassthru']['enable'] = false;

        }

        if ($_POST['ipsecpassthru'] == false)

                $config['nat']['ipsecpassthru']['enable'] = false;

        if ($_POST['advancedoutbound'] == false)

                $config['nat']['advancedoutbound']['enable'] = false;

        if($config['nat']['advancedoutbound']['enable'] and $_POST['advancedoutbound'] <> "") {

                /*

                 *    user has enabled advanced outbound nat -- lets automatically create entries

                 *    for all of the interfaces to make life easier on the pip-o-chap

                 */

                $a_out = &$config['nat']['advancedoutbound']['rule'];

                $ifdescrs = array('lan');

                for ($j = 1; isset($config['interfaces']['opt' . $j]); $j++) 

                        $ifdescrs[] = "opt" . $j;

                foreach($ifdescrs as $if) {

				/* interface is an optional.  is it enabled? */

				if(!isset($config['interfaces'][$if]['enabled'])) {

					continue;

				}

			}

                                $config['interfaces'][$if]['subnet']);

                        $natent['sourceport'] = "";

                        if($if == "lan")

                                $int_description = "LAN";

                        $natent['descr'] = "Auto created rule for {$int_description}";

                        $natent['interface'] = "wan";

                        $natent['destination']['any'] = true;

                        $natent['natport'] = "";

                        $a_out[] = $natent;

                }

        write_config();

        touch($d_natconfdirty_path);

        header("Location: firewall_nat_out.php");

        exit;

        /* delete selected rules */

        if (is_array($_POST['rule']) && count($_POST['rule'])) {

                foreach ($_POST['rule'] as $rulei) {

                        unset($a_out[$rulei]);

                }

                write_config();

                touch($d_natconfdirty_path);

                header("Location: firewall_nat_out.php");

                exit;

        }

} else {

        foreach ($_POST as $pn => $pd) {

                if (preg_match("/move_(\d+)_x/", $pn, $matches)) {

                        $movebtn = $matches[1];

                        break;

                }

        }

        /* move selected rules before this rule */

        if (isset($movebtn) && is_array($_POST['rule']) && count($_POST['rule'])) {

                $a_out_new = array();

                /* copy all rules < $movebtn and not selected */

                for ($i = 0; $i < $movebtn; $i++) {

                        if (!in_array($i, $_POST['rule']))

                                $a_out_new[] = $a_out[$i];

                }

                /* copy all selected rules */

                for ($i = 0; $i < count($a_out); $i++) {

                        if ($i == $movebtn)

                                continue;

                        if (in_array($i, $_POST['rule']))

                                $a_out_new[] = $a_out[$i];

                }

                /* copy $movebtn rule */

                if ($movebtn < count($a_out))

                        $a_out_new[] = $a_out[$movebtn];

                /* copy all rules > $movebtn and not selected */

                for ($i = $movebtn+1; $i < count($a_out); $i++) {

                        if (!in_array($i, $_POST['rule']))

                                $a_out_new[] = $a_out[$i];

                }

                $a_out = $a_out_new;

                write_config();

                touch($d_natconfdirty_path);

                header("Location: firewall_nat_out.php");

                exit;

        }

<?php include("fbegin.inc"); ?>

</script>

<?php if (file_exists($d_natconfdirty_path)): ?><p>

<?php print_info_box_np("The NAT configuration has been changed.<br>You must apply the changes in order for them to take effect.");?><br>

<?php endif; ?>

<table width="100%" border="0" cellpadding="0" cellspacing="0">  <tr><td>

	$tab_array = array();

	$tab_array[] = array("1:1", false, "firewall_nat_1to1.php");

	$tab_array[] = array("Outbound", true, "firewall_nat_out.php");

?>

	<div id="mainarea">

              <table class="tabcont" width="100%" border="0" cellpadding="6" cellspacing="0">

                      <strong>Enable IPSec passthru</strong></p>

                      <input name="advancedoutbound" type="checkbox" id="advancedoutbound" value="yes" onClick="document.iform.ipsecpassthru.checked=false" <?php if (isset($config['nat']['advancedoutbound']['enable'])) echo "checked";?>>

                      <strong>Enable advanced outbound NAT</strong></p></td>

                </tr>

                <tr>

                  <td> <input name="save" type="submit" class="formbtn" value="Save">

                </tr>

                <tr>

                      rules will be automatically generated anymore. Instead, only the mappings

                      you specify below will be used. With advanced outbound NAT disabled,

                      a mapping is automatically created for each interface's subnet

		      IP address, then depending on the way your WAN connection is setup, you

	              may also need a <a href="firewall_virtual_ip.php">Virtual IP</a>.</span><br>

                      You may enter your own mappings below.</p>

                    </td>

                </tr>

              </table>

                  <td width="3%" class="list">&nbsp;</td>

                  <td width="3%" class="list">&nbsp;</td>

                  <td width="20%" class="listhdrr">Source</td>

                  <td width="25%" class="listhdr">Description</td>

                  <td width="5%" class="list"></td>

                </tr>

                  <td class="listt"><input type="checkbox" id="frc<?=$nnats;?>" name="rule[]" value="<?=$i;?>" onClick="fr_bgcolor('<?=$nnats;?>')" style="margin: 0; padding: 0; width: 15px; height: 15px;"></td>

					if (!$natent['interface'] || ($natent['interface'] == "wan"))

					  	echo "WAN";

					else

                  </td>

                      if (!$natent['sourceport'])

                          echo "*";

                      else

                          echo $natent['sourceport'];

                    ?>

                  </td>

                      if (isset($natent['destination']['any']))

                          echo "*";

                      else {

                          if (isset($natent['destination']['not']))

                              echo "! ";

                    ?>

                  </td>

                      if (!$natent['natport'])

                          echo "*";

                      else

                          echo $natent['natport'];

                    ?>

                  </td>

                      if (!$natent['target'])

                          echo "*";

                      else

                          echo $natent['target'];

                    ?>

                  </td>

                    <table border="0" cellspacing="0" cellpadding="1">

                      <tr>

                      <tr>

                        <td><a href="firewall_nat_out_edit.php?dup=<?=$i;?>"><img src="/themes/<?= $g['theme']; ?>/images/icons/icon_plus.gif" title="add a new nat based on this one" width="17" height="17" border="0"></a></td>

                    </table>

              <?php $i++; $nnats++; endforeach; ?>

                    <table border="0" cellspacing="0" cellpadding="1">

                      <tr>

                      <tr>

                    </table></td>

              </table>

  </tr>

</table>

            </form>

<?php include("fend.inc"); ?>

</body>

</html>