Project

General

Profile

Download (12.8 KB) Statistics
| Branch: | Tag: | Revision:
1 b0ae75c5 Bill Marquette
<?php
2
/* $Id$ */
3
/*
4
	firewall_virtual_ip.php
5 c7281770 Chris Buechler
	part of pfSense (https://www.pfsense.org/)
6 b0ae75c5 Bill Marquette
7
	Copyright (C) 2005 Bill Marquette <bill.marquette@gmail.com>.
8
	All rights reserved.
9
10
	Includes code from m0n0wall which is:
11
	Copyright (C) 2003-2005 Manuel Kasper <mk@neon1.net>.
12
	All rights reserved.
13
14
	Includes code from pfSense which is:
15
	Copyright (C) 2004-2005 Scott Ullrich <geekgod@pfsense.com>.
16
	All rights reserved.
17
18
	Redistribution and use in source and binary forms, with or without
19
	modification, are permitted provided that the following conditions are met:
20
21
	1. Redistributions of source code must retain the above copyright notice,
22
	   this list of conditions and the following disclaimer.
23
24
	2. Redistributions in binary form must reproduce the above copyright
25
	   notice, this list of conditions and the following disclaimer in the
26
	   documentation and/or other materials provided with the distribution.
27
28
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
29
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
30
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
31
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
32
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
33
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
34
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
35
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
36
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
37
	POSSIBILITY OF SUCH DAMAGE.
38
*/
39 7ac5a4cb Scott Ullrich
/*
40
	pfSense_BUILDER_BINARIES:	/sbin/ifconfig
41
	pfSense_MODULE:	interfaces
42
*/
43 b0ae75c5 Bill Marquette
44 6b07c15a Matthew Grooms
##|+PRIV
45
##|*IDENT=page-firewall-virtualipaddresses
46
##|*NAME=Firewall: Virtual IP Addresses page
47
##|*DESCR=Allow access to the 'Firewall: Virtual IP Addresses' page.
48
##|*MATCH=firewall_virtual_ip.php*
49
##|-PRIV
50
51 b0ae75c5 Bill Marquette
require("guiconfig.inc");
52 7a927e67 Scott Ullrich
require_once("functions.inc");
53
require_once("filter.inc");
54
require_once("shaper.inc");
55 b0ae75c5 Bill Marquette
56
if (!is_array($config['virtualip']['vip'])) {
57
	$config['virtualip']['vip'] = array();
58
}
59
$a_vip = &$config['virtualip']['vip'];
60
61
if ($_POST) {
62
	$pconfig = $_POST;
63
64
	if ($_POST['apply']) {
65 68071477 Ermal
		if (file_exists("{$g['tmp_path']}/.firewall_virtual_ip.apply")) {
66 e8471084 Ermal
                        $toapplylist = unserialize(file_get_contents("{$g['tmp_path']}/.firewall_virtual_ip.apply"));
67 68071477 Ermal
			foreach ($toapplylist as $vid => $ovip) {
68
				if (!empty($ovip))
69
					interface_vip_bring_down($ovip);
70
				if ($a_vip[$vid]) {
71
                			switch ($a_vip[$vid]['mode']) {
72
                			case "ipalias":
73
                        			interface_ipalias_configure($a_vip[$vid]);
74
                        			break;
75
                			case "proxyarp":
76
                        			interface_proxyarp_configure($a_vip[$vid]['interface']);
77
                        			break;
78
                			case "carp":
79
                        			interface_carp_configure($a_vip[$vid]);
80
						break;
81
                			default:
82
                        			break;
83
					}
84
                		}
85
        		}
86
			@unlink("{$g['tmp_path']}/.firewall_virtual_ip.apply");
87
		}
88 b0ae75c5 Bill Marquette
		$retval = 0;
89 920b3bb0 Scott Ullrich
		$retval |= filter_configure();
90 b0ae75c5 Bill Marquette
		$savemsg = get_std_save_message($retval);
91 abcb2bed Ermal Lu?i
92 a368a026 Ermal Lu?i
		clear_subsystem_dirty('vip');
93 b0ae75c5 Bill Marquette
	}
94
}
95
96
if ($_GET['act'] == "del") {
97
	if ($a_vip[$_GET['id']]) {
98
		/* make sure no inbound NAT mappings reference this entry */
99
		if (is_array($config['nat']['rule'])) {
100
			foreach ($config['nat']['rule'] as $rule) {
101 93e485e3 Renato Botelho
				if($rule['destination']['address'] <> "") {
102 3504e10b Renato Botelho
					if ($rule['destination']['address'] == $a_vip[$_GET['id']]['subnet']) {
103 3e2a70d9 Rafael Lucas
						$input_errors[] = gettext("This entry cannot be deleted because it is still referenced by at least one NAT mapping.");
104 7c99b15c Scott Ullrich
						break;
105
					}
106 b0ae75c5 Bill Marquette
				}
107
			}
108
		}
109
110 ff9f40d5 Renato Botelho
		if (is_ipaddrv6($a_vip[$_GET['id']]['subnet'])) {
111
			$is_ipv6 = true;
112 55705b33 Renato Botelho
			$subnet = gen_subnetv6($a_vip[$_GET['id']]['subnet'], $a_vip[$_GET['id']]['subnet_bits']);
113 ba47a890 Renato Botelho
			$if_subnet_bits = get_interface_subnetv6($a_vip[$_GET['id']]['interface']);
114
			$if_subnet = gen_subnetv6(get_interface_ipv6($a_vip[$_GET['id']]['interface']), $if_subnet_bits);
115 ff9f40d5 Renato Botelho
		} else {
116
			$is_ipv6 = false;
117 55705b33 Renato Botelho
			$subnet = gen_subnet($a_vip[$_GET['id']]['subnet'], $a_vip[$_GET['id']]['subnet_bits']);
118 ba47a890 Renato Botelho
			$if_subnet_bits = get_interface_subnet($a_vip[$_GET['id']]['interface']);
119
			$if_subnet = gen_subnet(get_interface_ip($a_vip[$_GET['id']]['interface']), $if_subnet_bits);
120 ff9f40d5 Renato Botelho
		}
121 55705b33 Renato Botelho
122
		$subnet .= "/" . $a_vip[$_GET['id']]['subnet_bits'];
123 ff9f40d5 Renato Botelho
		$if_subnet .= "/" . $if_subnet_bits;
124 55705b33 Renato Botelho
125
		if (is_array($config['gateways']['gateway_item']))
126
			foreach($config['gateways']['gateway_item'] as $gateway) {
127
				if ($a_vip[$_GET['id']]['interface'] != $gateway['interface'])
128
					continue;
129
				if ($is_ipv6 && $gateway['ipprotocol'] == 'inet')
130
					continue;
131
				if (!$is_ipv6 && $gateway['ipprotocol'] == 'inet6')
132
					continue;
133 ff9f40d5 Renato Botelho
				if (ip_in_subnet($gateway['gateway'], $if_subnet))
134
					continue;
135 55705b33 Renato Botelho
136
				if (ip_in_subnet($gateway['gateway'], $subnet)) {
137
					$input_errors[] = gettext("This entry cannot be deleted because it is still referenced by at least one Gateway.");
138
					break;
139
				}
140
			}
141
142 e8471084 Ermal
		if ($a_vip[$_GET['id']]['mode'] == "ipalias") {
143 a9fc108f PiBa-NL
			$subnet = gen_subnet($a_vip[$_GET['id']]['subnet'], $a_vip[$_GET['id']]['subnet_bits']) . "/" . $a_vip[$_GET['id']]['subnet_bits'];
144
			$found_if = false;
145 b030e035 Renato Botelho
			$found_carp = false;
146
			$found_other_alias = false;
147
148 a9fc108f PiBa-NL
			if ($subnet == $if_subnet)
149
				$found_if = true;
150
			
151 e19b7d1e Ermal
			$vipiface = $a_vip[$_GET['id']]['interface'];
152 b030e035 Renato Botelho
			foreach ($a_vip as $vip_id => $vip) {
153
				if ($vip_id == $_GET['id'])
154
					continue;
155
156 a9fc108f PiBa-NL
				if ($vip['interface'] == $vipiface && ip_in_subnet($vip['subnet'], $subnet))
157 b030e035 Renato Botelho
					if ($vip['mode'] == "carp")
158
						$found_carp = true;
159
					else if ($vip['mode'] == "ipalias")
160
						$found_other_alias = true;
161 e19b7d1e Ermal
			}
162 b030e035 Renato Botelho
163 a9fc108f PiBa-NL
			if ($found_carp === true && $found_other_alias === false && $found_if === false)
164 b030e035 Renato Botelho
				$input_errors[] = gettext("This entry cannot be deleted because it is still referenced by a CARP IP with the description") . " {$vip['descr']}.";
165 e19b7d1e Ermal
		}
166 e8471084 Ermal
		
167 b0ae75c5 Bill Marquette
		if (!$input_errors) {
168 4111fcf5 Ermal
			if (!session_id())
169
				session_start();
170 3a343d73 jim-p
			$user = getUserEntry($_SESSION['Username']);
171
			if (is_array($user) && userHasPrivilege($user, "user-config-readonly")) {
172
				header("Location: firewall_virtual_ip.php");
173
				exit;
174
			}
175 4111fcf5 Ermal
			session_commit();
176 3a343d73 jim-p
177 1ba7a81b Ermal Lu?i
			// Special case since every proxyarp vip is handled by the same daemon.
178
			if ($a_vip[$_GET['id']]['mode'] == "proxyarp") {
179 e8471084 Ermal
				$viface = $a_vip[$_GET['id']]['interface'];
180 1ba7a81b Ermal Lu?i
				unset($a_vip[$_GET['id']]);
181 e8471084 Ermal
				interface_proxyarp_configure($viface);
182 1ba7a81b Ermal Lu?i
			} else {
183
				interface_vip_bring_down($a_vip[$_GET['id']]);
184
				unset($a_vip[$_GET['id']]);
185
			}
186 ed65eb04 Ermal Lu?i
			if (count($config['virtualip']['vip']) == 0)
187
				unset($config['virtualip']['vip']);
188 b0ae75c5 Bill Marquette
			write_config();
189 406abd6e Rafael Lucas
			header("Location: firewall_virtual_ip.php");
190 b0ae75c5 Bill Marquette
			exit;
191
		}
192
	}
193 e41ec584 Renato Botelho
} else if ($_GET['changes'] == "mods" && is_numericint($_GET['id']))
194 abcb2bed Ermal Lu?i
	$id = $_GET['id'];
195 b0ae75c5 Bill Marquette
196 3e2a70d9 Rafael Lucas
$pgtitle = array(gettext("Firewall"),gettext("Virtual IP Addresses"));
197 b0ae75c5 Bill Marquette
include("head.inc");
198
199
?>
200
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
201
<?php include("fbegin.inc"); ?>
202
<form action="firewall_virtual_ip.php" method="post">
203 b760a120 Scott Ullrich
<?php 
204
	if ($input_errors) 
205
		print_input_errors($input_errors);
206
	else
207
	if ($savemsg) 
208
		print_info_box($savemsg); 
209
	else
210 a368a026 Ermal Lu?i
	if (is_subsystem_dirty('vip'))
211 8cd558b6 ayvis
		print_info_box_np(gettext("The VIP configuration has been changed.")."<br />".gettext("You must apply the changes in order for them to take effect."));
212 b760a120 Scott Ullrich
?>
213 8cd558b6 ayvis
<br />
214 3bfe618a Colin Fleming
<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="virtual ip">
215 49424ec0 Bill Marquette
  <tr><td class="tabnavtbl">
216
  <?php
217
        /* active tabs */
218
        $tab_array = array();
219 3e2a70d9 Rafael Lucas
        $tab_array[] = array(gettext("Virtual IPs"), true, "firewall_virtual_ip.php");
220 f97a5b04 Darren Embry
        $tab_array[] = array(gettext("CARP Settings"), false, "system_hasync.php");
221 49424ec0 Bill Marquette
        display_top_tabs($tab_array);
222
  ?>
223 b0ae75c5 Bill Marquette
  </td></tr>
224 abcb2bed Ermal Lu?i
  <tr>
225 e41ec584 Renato Botelho
	<td><input type="hidden" id="id" name="id" value="<?php echo htmlspecialchars($id); ?>" /></td>
226 abcb2bed Ermal Lu?i
  </tr>
227 b0ae75c5 Bill Marquette
  <tr>
228
    <td>
229
	<div id="mainarea">
230 3bfe618a Colin Fleming
              <table class="tabcont" width="100%" border="0" cellpadding="0" cellspacing="0" summary="main area">
231 b0ae75c5 Bill Marquette
                <tr>
232 3e2a70d9 Rafael Lucas
                  <td width="30%" class="listhdrr"><?=gettext("Virtual IP address");?></td>
233 e3449857 PiBa-NL
                  <td width="10%" class="listhdrr"><?=gettext("Interface");?></td>
234 3e2a70d9 Rafael Lucas
                  <td width="10%" class="listhdrr"><?=gettext("Type");?></td>
235
                  <td width="40%" class="listhdr"><?=gettext("Description");?></td>
236 d415d821 Seth Mos
                  <td width="10%" class="list">
237 3bfe618a Colin Fleming
                    <table border="0" cellspacing="0" cellpadding="1" summary="edit">
238 d415d821 Seth Mos
                      <tr>
239
			<td width="17"></td>
240 3bfe618a Colin Fleming
                        <td valign="middle"><a href="firewall_virtual_ip_edit.php"><img src="./themes/<?= $g['theme']; ?>/images/icons/icon_plus.gif" width="17" height="17" border="0" alt="edit" /></a></td>
241 d415d821 Seth Mos
                      </tr>
242
                    </table>
243
		  </td>
244
		</tr>
245 79ea2726 Renato Botelho
		<?php
246
			$interfaces = get_configured_interface_with_descr(false, true);
247 19d90bce jim-p
			$interfaces['lo0'] = "Localhost";
248 79ea2726 Renato Botelho
		?>
249 b0ae75c5 Bill Marquette
			  <?php $i = 0; foreach ($a_vip as $vipent): ?>
250 21784301 Scott Ullrich
			  <?php if($vipent['subnet'] <> "" or $vipent['range'] <> "" or
251 3e662cb0 Ermal
			        $vipent['subnet_bits'] <> "" or (isset($vipent['range']['from']) && $vipent['range']['from'] <> "")): ?>
252 b0ae75c5 Bill Marquette
                <tr>
253
                  <td class="listlr" ondblclick="document.location='firewall_virtual_ip_edit.php?id=<?=$i;?>';">
254
					<?php	if (($vipent['type'] == "single") || ($vipent['type'] == "network"))
255 2db680e1 Scott Ullrich
								if($vipent['subnet_bits'])
256
									echo "{$vipent['subnet']}/{$vipent['subnet_bits']}";
257 b0ae75c5 Bill Marquette
							if ($vipent['type'] == "range")
258
								echo "{$vipent['range']['from']}-{$vipent['range']['to']}";
259
					?>
260 3e662cb0 Ermal
					<?php if($vipent['mode'] == "carp") echo " (vhid {$vipent['vhid']})"; ?>
261 b0ae75c5 Bill Marquette
                  </td>
262 e3449857 PiBa-NL
                  <td class="listr" ondblclick="document.location='firewall_virtual_ip_edit.php?id=<?=$i;?>';">
263 79ea2726 Renato Botelho
                    <?=htmlspecialchars($interfaces[$vipent['interface']]);?>&nbsp;
264 e3449857 PiBa-NL
                  </td>
265 902b4e72 Bill Marquette
                  <td class="listr" align="center" ondblclick="document.location='firewall_virtual_ip_edit.php?id=<?=$i;?>';">
266 3bfe618a Colin Fleming
                    <?php if($vipent['mode'] == "proxyarp") echo "<img src='./themes/".$g['theme']."/images/icons/icon_parp.gif' title='Proxy ARP' alt='proxy arp' />"; elseif($vipent['mode'] == "carp") echo "<img src='./themes/".$g['theme']."/images/icons/icon_carp.gif' title='CARP' alt='carp' />"; elseif($vipent['mode'] == "other") echo "<img src='./themes/".$g['theme']."/images/icons/icon_other.gif' title='Other' alt='other' />"; elseif($vipent['mode'] == "ipalias") echo "<img src='./themes/".$g['theme']."/images/icons/icon_ifalias.gif' title='IP Alias' alt='ip alias' />";?>
267 b0ae75c5 Bill Marquette
                  </td>
268
                  <td class="listbg" ondblclick="document.location='firewall_virtual_ip_edit.php?id=<?=$i;?>';">
269 30d4c469 Scott Ullrich
                    <?=htmlspecialchars($vipent['descr']);?>&nbsp;
270 b0ae75c5 Bill Marquette
                  </td>
271 3bfe618a Colin Fleming
                  <td class="list nowrap">
272
                    <table border="0" cellspacing="0" cellpadding="1" summary="icons">
273 b0ae75c5 Bill Marquette
                      <tr>
274 3bfe618a Colin Fleming
                        <td valign="middle"><a href="firewall_virtual_ip_edit.php?id=<?=$i;?>"><img src="./themes/<?= $g['theme']; ?>/images/icons/icon_e.gif" width="17" height="17" border="0" alt="edit" /></a></td>
275
                        <td valign="middle"><a href="firewall_virtual_ip.php?act=del&amp;id=<?=$i;?>" onclick="return confirm('<?=gettext('Do you really want to delete this entry?');?>')"><img src="./themes/<?= $g['theme']; ?>/images/icons/icon_x.gif" width="17" height="17" border="0" alt="delete" /></a></td>
276 b0ae75c5 Bill Marquette
                      </tr>
277
                    </table>
278
                  </td>
279
                </tr>
280 21784301 Scott Ullrich
		<?php endif; ?>
281 b0ae75c5 Bill Marquette
                <?php $i++; endforeach; ?>
282
                <tr>
283 e3449857 PiBa-NL
                  <td class="list" colspan="4"></td>
284 b0ae75c5 Bill Marquette
                  <td class="list">
285 3bfe618a Colin Fleming
                    <table border="0" cellspacing="0" cellpadding="1" summary="edit">
286 b0ae75c5 Bill Marquette
                      <tr>
287 d415d821 Seth Mos
			<td width="17"></td>
288 3bfe618a Colin Fleming
                        <td valign="middle"><a href="firewall_virtual_ip_edit.php"><img src="./themes/<?= $g['theme']; ?>/images/icons/icon_plus.gif" width="17" height="17" border="0" alt="edit" /></a></td>
289 b0ae75c5 Bill Marquette
                      </tr>
290
                    </table>
291
                  </td>
292
                </tr>
293
		<tr>
294 e3449857 PiBa-NL
		  <td colspan="5">
295 8cd558b6 ayvis
		      <p><span class="vexpl"><span class="red"><strong><?=gettext("Note:");?><br />
296
                      </strong></span><?=gettext("The virtual IP addresses defined on this page may be used in");?><a href="firewall_nat.php"> <?=gettext("NAT"); ?> </a><?=gettext("mappings.");?><br />
297 c59639d1 Vinicius Coque
                      <?=gettext("You can check the status of your CARP Virtual IPs and interfaces ");?><a href="carp_status.php"><?=gettext("here");?></a>.</span></p>
298 b0ae75c5 Bill Marquette
		  </td>
299
		</tr>
300
              </table>
301 3bfe618a Colin Fleming
	   </div><!-- div:mainarea -->
302
	   </td></tr>
303 b0ae75c5 Bill Marquette
	</table>
304
            </form>
305
<?php include("fend.inc"); ?>
306
</body>
307
</html>