Project

General

Profile

Download (11.5 KB) Statistics
| Branch: | Tag: | Revision:
1 5b237745 Scott Ullrich
<?php
2
/*
3
	firewall_aliases.php
4
*/
5 fd9ebcd5 Stephen Beaver
/* ====================================================================
6 919d91f9 Phil Davis
 *  Copyright (c)  2004-2015  Electric Sheep Fencing, LLC. All rights reserved.
7 9da2cf1c Stephen Beaver
 *
8 c9df279d Stephen Beaver
 *  Some or all of this file is based on the m0n0wall project which is
9 9da2cf1c Stephen Beaver
 *  Copyright (c)  2004 Manuel Kasper (BSD 2 clause)
10 fd9ebcd5 Stephen Beaver
 *
11 919d91f9 Phil Davis
 *  Redistribution and use in source and binary forms, with or without modification,
12
 *  are permitted provided that the following conditions are met:
13 fd9ebcd5 Stephen Beaver
 *
14
 *  1. Redistributions of source code must retain the above copyright notice,
15
 *      this list of conditions and the following disclaimer.
16
 *
17
 *  2. Redistributions in binary form must reproduce the above copyright
18
 *      notice, this list of conditions and the following disclaimer in
19
 *      the documentation and/or other materials provided with the
20 919d91f9 Phil Davis
 *      distribution.
21 fd9ebcd5 Stephen Beaver
 *
22 919d91f9 Phil Davis
 *  3. All advertising materials mentioning features or use of this software
23 fd9ebcd5 Stephen Beaver
 *      must display the following acknowledgment:
24
 *      "This product includes software developed by the pfSense Project
25 919d91f9 Phil Davis
 *       for use in the pfSense software distribution. (http://www.pfsense.org/).
26 fd9ebcd5 Stephen Beaver
 *
27
 *  4. The names "pfSense" and "pfSense Project" must not be used to
28
 *       endorse or promote products derived from this software without
29
 *       prior written permission. For written permission, please contact
30
 *       coreteam@pfsense.org.
31
 *
32
 *  5. Products derived from this software may not be called "pfSense"
33
 *      nor may "pfSense" appear in their names without prior written
34
 *      permission of the Electric Sheep Fencing, LLC.
35
 *
36
 *  6. Redistributions of any form whatsoever must retain the following
37
 *      acknowledgment:
38
 *
39
 *  "This product includes software developed by the pfSense Project
40
 *  for use in the pfSense software distribution (http://www.pfsense.org/).
41 919d91f9 Phil Davis
 *
42 fd9ebcd5 Stephen Beaver
 *  THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY
43
 *  EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
44
 *  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
45
 *  PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR
46
 *  ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
47
 *  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
48
 *  NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
49
 *  LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
50
 *  HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
51
 *  STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
52
 *  ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
53
 *  OF THE POSSIBILITY OF SUCH DAMAGE.
54
 *
55
 *  ====================================================================
56
 *
57
 */
58 7ac5a4cb Scott Ullrich
/*
59
	pfSense_MODULE:	aliases
60
*/
61 5b237745 Scott Ullrich
62 6b07c15a Matthew Grooms
##|+PRIV
63
##|*IDENT=page-firewall-aliases
64
##|*NAME=Firewall: Aliases page
65
##|*DESCR=Allow access to the 'Firewall: Aliases' page.
66
##|*MATCH=firewall_aliases.php*
67
##|-PRIV
68
69 5b237745 Scott Ullrich
require("guiconfig.inc");
70 7a927e67 Scott Ullrich
require_once("functions.inc");
71
require_once("filter.inc");
72
require_once("shaper.inc");
73 5b237745 Scott Ullrich
74 95a40ac0 Phil Davis
if (!is_array($config['aliases']['alias'])) {
75 5b237745 Scott Ullrich
	$config['aliases']['alias'] = array();
76 95a40ac0 Phil Davis
}
77 5b237745 Scott Ullrich
$a_aliases = &$config['aliases']['alias'];
78
79 6c07db48 Phil Davis
$tab = ($_REQUEST['tab'] == "" ? "ip" : preg_replace("/\W/", "", $_REQUEST['tab']));
80 5b237745 Scott Ullrich
81 ac7f1763 Renato Botelho
if ($_POST) {
82 5b237745 Scott Ullrich
83
	if ($_POST['apply']) {
84
		$retval = 0;
85 920b3bb0 Scott Ullrich
86
		/* reload all components that use aliases */
87
		$retval = filter_configure();
88
89 95a40ac0 Phil Davis
		if (stristr($retval, "error") <> true) {
90 14726356 Sjon Hortensius
			$savemsg = get_std_save_message($retval);
91 95a40ac0 Phil Davis
		} else {
92 14726356 Sjon Hortensius
			$savemsg = $retval;
93 95a40ac0 Phil Davis
		}
94
		if ($retval == 0) {
95 a368a026 Ermal Lu?i
			clear_subsystem_dirty('aliases');
96 95a40ac0 Phil Davis
		}
97 5b237745 Scott Ullrich
	}
98
}
99
100
if ($_GET['act'] == "del") {
101
	if ($a_aliases[$_GET['id']]) {
102 58c32a28 Scott Ullrich
		/* make sure rule is not being referenced by any nat or filter rules */
103
		$is_alias_referenced = false;
104
		$referenced_by = false;
105
		$alias_name = $a_aliases[$_GET['id']]['name'];
106 c769f983 Erik Fonnesbeck
		// Firewall rules
107
		find_alias_reference(array('filter', 'rule'), array('source', 'address'), $alias_name, $is_alias_referenced, $referenced_by);
108
		find_alias_reference(array('filter', 'rule'), array('destination', 'address'), $alias_name, $is_alias_referenced, $referenced_by);
109
		find_alias_reference(array('filter', 'rule'), array('source', 'port'), $alias_name, $is_alias_referenced, $referenced_by);
110
		find_alias_reference(array('filter', 'rule'), array('destination', 'port'), $alias_name, $is_alias_referenced, $referenced_by);
111
		// NAT Rules
112
		find_alias_reference(array('nat', 'rule'), array('source', 'address'), $alias_name, $is_alias_referenced, $referenced_by);
113
		find_alias_reference(array('nat', 'rule'), array('source', 'port'), $alias_name, $is_alias_referenced, $referenced_by);
114
		find_alias_reference(array('nat', 'rule'), array('destination', 'address'), $alias_name, $is_alias_referenced, $referenced_by);
115
		find_alias_reference(array('nat', 'rule'), array('destination', 'port'), $alias_name, $is_alias_referenced, $referenced_by);
116
		find_alias_reference(array('nat', 'rule'), array('target'), $alias_name, $is_alias_referenced, $referenced_by);
117
		find_alias_reference(array('nat', 'rule'), array('local-port'), $alias_name, $is_alias_referenced, $referenced_by);
118 b43b7613 Erik Fonnesbeck
		// NAT 1:1 Rules
119
		//find_alias_reference(array('nat', 'onetoone'), array('external'), $alias_name, $is_alias_referenced, $referenced_by);
120
		//find_alias_reference(array('nat', 'onetoone'), array('source', 'address'), $alias_name, $is_alias_referenced, $referenced_by);
121
		find_alias_reference(array('nat', 'onetoone'), array('destination', 'address'), $alias_name, $is_alias_referenced, $referenced_by);
122
		// NAT Outbound Rules
123 682b8f12 Phil Davis
		find_alias_reference(array('nat', 'outbound', 'rule'), array('source', 'network'), $alias_name, $is_alias_referenced, $referenced_by);
124
		find_alias_reference(array('nat', 'outbound', 'rule'), array('sourceport'), $alias_name, $is_alias_referenced, $referenced_by);
125
		find_alias_reference(array('nat', 'outbound', 'rule'), array('destination', 'address'), $alias_name, $is_alias_referenced, $referenced_by);
126
		find_alias_reference(array('nat', 'outbound', 'rule'), array('dstport'), $alias_name, $is_alias_referenced, $referenced_by);
127
		find_alias_reference(array('nat', 'outbound', 'rule'), array('target'), $alias_name, $is_alias_referenced, $referenced_by);
128 c769f983 Erik Fonnesbeck
		// Alias in an alias
129
		find_alias_reference(array('aliases', 'alias'), array('address'), $alias_name, $is_alias_referenced, $referenced_by);
130 3df59bab Darren Embry
		// Load Balancer
131 e6f34d22 Phil Davis
		find_alias_reference(array('load_balancer', 'lbpool'), array('port'), $alias_name, $is_alias_referenced, $referenced_by);
132 3df59bab Darren Embry
		find_alias_reference(array('load_balancer', 'virtual_server'), array('port'), $alias_name, $is_alias_referenced, $referenced_by);
133 a161bfb8 Renato Botelho
		// Static routes
134
		find_alias_reference(array('staticroutes', 'route'), array('network'), $alias_name, $is_alias_referenced, $referenced_by);
135 95a40ac0 Phil Davis
		if ($is_alias_referenced == true) {
136 72f1f3ee jim-p
			$savemsg = sprintf(gettext("Cannot delete alias. Currently in use by %s"), htmlspecialchars($referenced_by));
137 58c32a28 Scott Ullrich
		} else {
138
			unset($a_aliases[$_GET['id']]);
139 3a343d73 jim-p
			if (write_config()) {
140
				filter_configure();
141
				mark_subsystem_dirty('aliases');
142
			}
143 ac7f1763 Renato Botelho
			header("Location: firewall_aliases.php?tab=" . $tab);
144 58c32a28 Scott Ullrich
			exit;
145
		}
146 5b237745 Scott Ullrich
	}
147
}
148 b63695db Scott Ullrich
149 c769f983 Erik Fonnesbeck
function find_alias_reference($section, $field, $origname, &$is_alias_referenced, &$referenced_by) {
150
	global $config;
151 95a40ac0 Phil Davis
	if (!$origname || $is_alias_referenced) {
152 c769f983 Erik Fonnesbeck
		return;
153 95a40ac0 Phil Davis
	}
154 c769f983 Erik Fonnesbeck
155
	$sectionref = &$config;
156 95a40ac0 Phil Davis
	foreach ($section as $sectionname) {
157
		if (is_array($sectionref) && isset($sectionref[$sectionname])) {
158 c769f983 Erik Fonnesbeck
			$sectionref = &$sectionref[$sectionname];
159 95a40ac0 Phil Davis
		} else {
160 c769f983 Erik Fonnesbeck
			return;
161 95a40ac0 Phil Davis
		}
162 c769f983 Erik Fonnesbeck
	}
163
164 95a40ac0 Phil Davis
	if (is_array($sectionref)) {
165
		foreach ($sectionref as $itemkey => $item) {
166 c769f983 Erik Fonnesbeck
			$fieldfound = true;
167
			$fieldref = &$sectionref[$itemkey];
168 95a40ac0 Phil Davis
			foreach ($field as $fieldname) {
169
				if (is_array($fieldref) && isset($fieldref[$fieldname])) {
170 c769f983 Erik Fonnesbeck
					$fieldref = &$fieldref[$fieldname];
171 95a40ac0 Phil Davis
				} else {
172 c769f983 Erik Fonnesbeck
					$fieldfound = false;
173
					break;
174
				}
175
			}
176 95a40ac0 Phil Davis
			if ($fieldfound && $fieldref == $origname) {
177 c769f983 Erik Fonnesbeck
				$is_alias_referenced = true;
178 95a40ac0 Phil Davis
				if (is_array($item)) {
179 c769f983 Erik Fonnesbeck
					$referenced_by = $item['descr'];
180 95a40ac0 Phil Davis
				}
181 c769f983 Erik Fonnesbeck
				break;
182
			}
183
		}
184
	}
185
}
186
187 6c07db48 Phil Davis
$pgtitle = array(gettext("Firewall"), gettext("Aliases"));
188 d71fc5d3 jim-p
$shortcut_section = "aliases";
189
190 b63695db Scott Ullrich
include("head.inc");
191
192 14726356 Sjon Hortensius
if ($savemsg)
193 6cb366de Stephen Beaver
	print_info_box($savemsg, 'success');
194
195 14726356 Sjon Hortensius
if (is_subsystem_dirty('aliases'))
196
	print_info_box_np(gettext("The alias list has been changed.") . "<br />" . gettext("You must apply the changes in order for them to take effect."));
197
198
$tab_array = array();
199 e6f34d22 Phil Davis
$tab_array[] = array(gettext("IP"), ($tab == "ip" ? true : ($tab == "host" ? true : ($tab == "network" ? true : false))), "/firewall_aliases.php?tab=ip");
200
$tab_array[] = array(gettext("Ports"), ($tab == "port"? true : false), "/firewall_aliases.php?tab=port");
201
$tab_array[] = array(gettext("URLs"), ($tab == "url"? true : false), "/firewall_aliases.php?tab=url");
202
$tab_array[] = array(gettext("All"), ($tab == "all"? true : false), "/firewall_aliases.php?tab=all");
203 14726356 Sjon Hortensius
display_top_tabs($tab_array);
204
205 5b237745 Scott Ullrich
?>
206 0ce45fdf Sander van Leeuwen
<div class="table-responsive">
207
<table class="table table-striped table-hover">
208 14726356 Sjon Hortensius
	<thead>
209
		<tr>
210 0ce45fdf Sander van Leeuwen
			<th><?=gettext("Name")?></th>
211
			<th><?=gettext("Values")?></th>
212
			<th><?=gettext("Description")?></th>
213 af5e730b Stephen Beaver
			<th><?=gettext("Actions")?></th>
214 14726356 Sjon Hortensius
		</tr>
215
	</thead>
216
	<tbody>
217
<?php
218
	asort($a_aliases);
219 e6f34d22 Phil Davis
	foreach ($a_aliases as $i => $alias):
220 14726356 Sjon Hortensius
		unset ($show_alias);
221 e6f34d22 Phil Davis
		switch ($tab) {
222 14726356 Sjon Hortensius
		case "all":
223
			$show_alias= true;
224
			break;
225
		case "ip":
226
		case "host":
227
		case "network":
228 e6f34d22 Phil Davis
			if (preg_match("/(host|network)/", $alias["type"]))
229 14726356 Sjon Hortensius
				$show_alias= true;
230
			break;
231
		case "url":
232 e6f34d22 Phil Davis
			if (preg_match("/(url)/i", $alias["type"]))
233 14726356 Sjon Hortensius
				$show_alias= true;
234
			break;
235
		case "port":
236 e6f34d22 Phil Davis
			if ($alias["type"] == "port")
237 14726356 Sjon Hortensius
				$show_alias= true;
238
			break;
239
		}
240
		if ($show_alias):
241
?>
242
		<tr>
243
			<td>
244
				<?=htmlspecialchars($alias['name'])?>
245
			</td>
246
			<td>
247
<?php
248
	if ($alias["url"]) {
249
		echo $alias["url"] . "<br />";
250
	} else {
251 e6f34d22 Phil Davis
		if (is_array($alias["aliasurl"])) {
252 14726356 Sjon Hortensius
			$aliasurls = implode(", ", array_slice($alias["aliasurl"], 0, 10));
253
			echo $aliasurls;
254 e6f34d22 Phil Davis
			if (count($aliasurls) > 10) {
255 14726356 Sjon Hortensius
				echo "&hellip;<br />";
256
			}
257
			echo "<br />\n";
258
		}
259
		$tmpaddr = explode(" ", $alias['address']);
260
		$addresses = implode(", ", array_slice($tmpaddr, 0, 10));
261
		echo $addresses;
262 e6f34d22 Phil Davis
		if (count($tmpaddr) > 10) {
263 14726356 Sjon Hortensius
			echo '&hellip;';
264
		}
265
	}
266
?>
267
			</td>
268
			<td>
269
				<?=htmlspecialchars($alias['descr'])?>&nbsp;
270
			</td>
271
			<td>
272 5932fc6a heper
				<a class="fa fa-pencil" title="<?=gettext("Edit alias"); ?>" href="firewall_aliases_edit.php?id=<?=$i?>"></a>
273 0619c9db Stephen Beaver
				<a class="fa fa-trash"	title="<?=gettext("Delete alias")?>" href="?act=del&amp;tab=<?=$tab?>&amp;id=<?=$i?>"></a>
274 df4957e4 Stephen Beaver
			</td>
275
		</tr>
276 14726356 Sjon Hortensius
<?php endif?>
277
<?php endforeach?>
278
	</tbody>
279
</table>
280 0ce45fdf Sander van Leeuwen
</div>
281 5b237745 Scott Ullrich
282 c10cb196 Stephen Beaver
<nav class="action-buttons">
283 df4957e4 Stephen Beaver
	<a href="firewall_aliases_edit.php?tab=<?=$tab?>" role="button" class="btn btn-success btn-sm">
284 9d5a20cf heper
		<i class="fa fa-plus icon-embed-btn"></i>
285 df4957e4 Stephen Beaver
		<?=gettext("Add");?>
286 11486640 Sjon Hortensius
	</a>
287 df4957e4 Stephen Beaver
	<a href="firewall_aliases_import.php" role="button" class="btn btn-default btn-sm">
288 9d5a20cf heper
		<i class="fa fa-download icon-embed-btn"></i>
289 df4957e4 Stephen Beaver
		<?=gettext("Import");?>
290 11486640 Sjon Hortensius
	</a>
291
</nav>
292 0f89c125 marcelloc
293 df4957e4 Stephen Beaver
<!-- Information section. Icon ID must be "showinfo" and the information <div> ID must be "infoblock".
294
	 That way jQuery (in pfenseHelpers.js) will automatically take care of the display. -->
295
<div>
296
	<div id="infoblock">
297
		<?=print_info_box(gettext( 'Aliases act as placeholders for real hosts, networks or ports. They can be used to minimize the number ' .
298
			'of changes that have to be made if a host, network or port changes. <br />' .
299
			'You can enter the name of an alias instead of the host, network or port where indicated. The alias will be resolved according to the list above.' . '<br />' .
300
			'If an alias cannot be resolved (e.g. because you deleted it), the corresponding element (e.g. filter/NAT/shaper rule) will be considered invalid and skipped.'), info)?>
301
	</div>
302
</div>
303 0f89c125 marcelloc
304 df4957e4 Stephen Beaver
<?php
305 5932fc6a heper
include("foot.inc");