pfSense

<?php

/*

	interfaces.inc

	All rights reserved.

	originally part of m0n0wall (http://m0n0.ch/wall)

	All rights reserved.

	modification, are permitted provided that the following conditions are met:

	   this list of conditions and the following disclaimer.

	   notice, this list of conditions and the following disclaimer in the

	   documentation and/or other materials provided with the distribution.

	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY

	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,

	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

	POSSIBILITY OF SUCH DAMAGE.

*/

/* include all configuration functions */

require_once("functions.inc");

function interfaces_loopback_configure() {

	global $config, $g;

	mwexec("/sbin/ifconfig lo0 127.0.0.1");

}

function interfaces_vlan_configure() {

	global $config, $g;

		mwexec("/sbin/kldload if_vlan");

		$vlan_native_supp = explode(" ", "bge em gx nge ti txp");

		$vlan_long_supp = explode(" ", "dc fxp sis ste tl tx xl");

			$cmd = "/sbin/ifconfig vlan{$i} create vlan " .

				escapeshellarg($vlan['tag']) . " vlandev " .

			for ($j = 0; $j < strlen($vlan['if']); $j++) {

				if ($vlan['if'][$j] >= '0' && $vlan['if'][$j] <= '9')

					break;

			}

			$drvname = substr($vlan['if'], 0, $j);

				$cmd .= " link0";

			else if (in_array($drvname, $vlan_long_supp))

				$cmd .= " mtu 1500";

			mwexec("/sbin/ifconfig " . escapeshellarg($vlan['if']) . " up");

		}

	}

}

function interfaces_lan_configure() {

	global $config, $g;

		echo "Configuring LAN interface... ";

	if (is_array($lancfg['wireless']))

		interfaces_wireless_configure($lancfg['if'], $lancfg['wireless']);

	if ($lancfg['spoofmac'])

	if ($lancfg['media'] || $lancfg['mediaopt']) {

		$cmd = "/sbin/ifconfig " . escapeshellarg($lancfg['if']);

		if ($lancfg['media'])

			$cmd .= " media " . escapeshellarg($lancfg['media']);

		if ($lancfg['mediaopt'])

			$cmd .= " mediaopt " . escapeshellarg($lancfg['mediaopt']);

		mwexec($cmd);

	}

	mwexec("/sbin/ifconfig " . escapeshellarg($lancfg['if']) . " " .

		/* make new hosts file */

		system_hosts_generate();

		system_routing_configure();

		filter_configure();

		vpn_ipsec_configure();

		services_dhcpd_configure();

		services_dnsmasq_configure();

		system_webgui_start();

		captiveportal_configure();

	}

		echo "done\n";

}

function interfaces_optional_configure() {

	global $config, $g;

	global $bridgeconfig;

	$bridgeconfig = "";

		interfaces_optional_configure_if($i);

	}

		/* Set the system bridge configuration and enable bridging. */

		mwexec("/sbin/sysctl net.link.ether.bridge_cfg=" . $bridgeconfig);

		/* reconfigure static routes (kernel may have deleted them) */

		system_routing_configure();

		filter_configure();

		vpn_ipsec_configure();

		services_dhcpd_configure();

		services_dnsmasq_configure();

	}

}

function interfaces_optional_configure_if($opti) {

	global $config, $g;

	global $bridgeconfig;

		$optdescr = "";

		if ($optcfg['descr'])

			$optdescr = " ({$optcfg['descr']})";

		echo "Configuring OPT{$opti}{$optdescr} interface... ";

	}

		/* wireless configuration? */

		if (is_array($optcfg['wireless']))

			interfaces_wireless_configure($optcfg['if'], $optcfg['wireless']);

		if ($optcfg['spoofmac'])

		if ($optcfg['media'] || $optcfg['mediaopt']) {

			$cmd = "/sbin/ifconfig " . escapeshellarg($optcfg['if']);

			if ($optcfg['media'])

				$cmd .= " media " . escapeshellarg($optcfg['media']);

			if ($optcfg['mediaopt'])

				$cmd .= " mediaopt " . escapeshellarg($optcfg['mediaopt']);

			mwexec($cmd);

		}

 		if (isset($optcfg['ovpn'])) {

 			if (strstr($if, "tap"))

 				ovpn_link_tap();

 		}

		if ($optcfg['bridge']) {

				$bridgeconfig .= ",";

				$config['interfaces'][$optcfg['bridge']]['if'] .

				":" . $opti;

		} else {

		}

	} else {

	}

		echo "done\n";

}

function interfaces_wireless_configure($if, $wlcfg) {

	global $config, $g;

		" ssid " . escapeshellarg($wlcfg['ssid']) . " channel " .

		$ifcargs .= "stationname " . escapeshellarg($wlcfg['stationname']) . " ";

		$ifcargs .= "wepmode on ";

		foreach ($wlcfg['wep']['key'] as $wepkey) {

			$ifcargs .= "wepkey " . escapeshellarg("{$i}:{$wepkey['value']}") . " ";

			if (isset($wepkey['txkey'])) {

				$ifcargs .= "weptxkey {$i} ";

			}

			$i++;

		}

	} else {

		$ifcargs .= "wepmode off ";

	}

		case 'hostap':

			if (strstr($if, "wi"))

				$ifcargs .= "-mediaopt ibss mediaopt hostap ";

			break;

		case 'ibss':

		case 'IBSS':

			if (strstr($if, "wi"))

				$ifcargs .= "-mediaopt hostap mediaopt ibss ";

			else if (strstr($if, "an"))

				$ifcargs .= "mediaopt adhoc ";

			break;

		case 'bss':

		case 'BSS':

			if (strstr($if, "wi"))

				$ifcargs .= "-mediaopt hostap -mediaopt ibss ";

			else if (strstr($if, "an"))

				$ifcargs .= "-mediaopt adhoc ";

			break;

	}

}

function interfaces_wan_configure() {

	global $config, $g;

		echo "Configuring WAN interface... ";

	else {

		/* kill dhclient */

		killbypid("{$g['varrun_path']}/dhclient.pid");

		killbypid("{$g['varrun_path']}/mpd.pid");

		sleep(2);

		unlink_if_exists("{$g['varetc_path']}/mpd.conf");

		unlink_if_exists("{$g['varetc_path']}/mpd.links");

		unlink_if_exists("{$g['vardb_path']}/wanip");

		unlink_if_exists("{$g['varetc_path']}/nameservers.conf");

	while (mwexec("/sbin/ifconfig " . escapeshellarg($wancfg['if']) . " -alias") == 0);

	mwexec("/sbin/ifconfig " . escapeshellarg($wancfg['if']) . " down");

	if (is_array($wancfg['wireless']))

		interfaces_wireless_configure($wancfg['if'], $wancfg['wireless']);

	if ($wancfg['media'] || $wancfg['mediaopt']) {

		$cmd = "/sbin/ifconfig " . escapeshellarg($wancfg['if']);

		if ($wancfg['media'])

			$cmd .= " media " . escapeshellarg($wancfg['media']);

		if ($wancfg['mediaopt'])

			$cmd .= " mediaopt " . escapeshellarg($wancfg['mediaopt']);

		mwexec($cmd);

	}

			interfaces_wan_dhcp_configure();

			break;

			interfaces_wan_pppoe_configure();

			break;

			interfaces_wan_pptp_configure();

			break;

			/* just configure DHCP for now; fire up bpalogin when we've got the lease */

			interfaces_wan_dhcp_configure();

			break;

				mwexec("/sbin/ifconfig " . escapeshellarg($wancfg['if']) . " " .

					escapeshellarg($wancfg['ipaddr'] . "/" . $wancfg['subnet']) .

					" " . escapeshellarg($wancfg['pointtopoint']) . " up");

			} else {

				mwexec("/sbin/ifconfig " . escapeshellarg($wancfg['if']) . " " .

					escapeshellarg($wancfg['ipaddr'] . "/" . $wancfg['subnet']));

			}

			mwexec("/sbin/route delete default");

			mwexec("/sbin/route add default " . escapeshellarg($wancfg['gateway']));

			filter_resync();

	}

		/* reconfigure static routes (kernel may have deleted them) */

		system_routing_configure();

		filter_configure();

		vpn_ipsec_configure();

		services_dyndns_configure();

		services_dnsupdate_process();

		services_dnsmasq_configure();

	}

		echo "done\n";

}

function interfaces_wan_dhcp_configure() {

	global $config, $g;

	/* generate dhclient.conf */

	$fd = fopen("{$g['varetc_path']}/dhclient.conf", "w");

	if (!$fd) {

		printf("Error: cannot open dhclient.conf in interfaces_wan_dhcp_configure().\n");

		return 1;

	}

		$dhclientconf .= <<<EOD

send dhcp-client-identifier "{$wancfg['dhcphostname']}";

interface "{$wancfg['if']}" {

	send host-name "{$wancfg['dhcphostname']}";

}

EOD;

	}

	fwrite($fd, $dhclientconf);

	fclose($fd);

	mwexec("/sbin/dhclient -nw -cf {$g['varetc_path']}/dhclient.conf " .

		escapeshellarg($wancfg['if']) . " &");

}

	mwexec("/sbin/dhclient -r");

	sleep(3);

}

function interfaces_wan_dhcp_up() {

	interfaces_wan_dhcp_configure();

	sleep(3);

}

	global $config, $g;

	$pppoecfg = $config['pppoe'];

	$fd = fopen("{$g['varetc_path']}/mpd.conf", "w");

	if (!$fd) {

		printf("Error: cannot open mpd.conf in interfaces_wan_pppoe_configure().\n");

		return 1;

	}

		$ondemand = "enable";

		if ($pppoecfg['timeout'])

			$idle = $pppoecfg['timeout'];

	} else {

		$ondemand = "disable";

	}

pppoe:

	new -i ng0 pppoe pppoe

	set iface route default

	set iface {$ondemand} on-demand

	set iface idle {$idle}

	set iface up-script /usr/local/sbin/ppp-linkup

EOD;

		$mpdconf .= <<<EOD

	set iface addrs 10.0.0.1 10.0.0.2

EOD;

	}

	set bundle disable multilink

	set bundle authname "{$pppoecfg['username']}"

	set bundle password "{$pppoecfg['password']}"

	set link keep-alive 10 60

	set link max-redial 0

	set link no acfcomp protocomp

	set link disable pap chap

	set link accept chap

	set link mtu 1492

	set ipcp yes vjcomp

	set ipcp ranges 0.0.0.0/0 0.0.0.0/0

EOD;

	if (isset($config['system']['dnsallowoverride'])) {

		$mpdconf .= <<<EOD

	set ipcp enable req-sec-dns

EOD;

	}

EOD;

	fwrite($fd, $mpdconf);

	fclose($fd);

	$fd = fopen("{$g['varetc_path']}/mpd.links", "w");

	if (!$fd) {

		printf("Error: cannot open mpd.links in interfaces_wan_pppoe_configure().\n");

		return 1;

	}

pppoe:

	set link type pppoe

	set pppoe iface {$wancfg['if']}

	set pppoe service "{$pppoecfg['provider']}"

	set pppoe enable originate

	set pppoe disable incoming

EOD;

	fwrite($fd, $mpdconf);

	fclose($fd);

	mwexec("/usr/local/sbin/mpd -b -d {$g['varetc_path']} -p {$g['varrun_path']}/mpd.pid pppoe");

}

	global $g;

	sigkillbypid("{$g['varrun_path']}/mpd.pid", "SIGUSR2");

	sleep(3);

}

function interfaces_wan_pppoe_up() {

	global $g;

	sigkillbypid("{$g['varrun_path']}/mpd.pid", "SIGUSR1");

	sleep(3);

}

	global $config, $g;

	$pptpcfg = $config['pptp'];

	$fd = fopen("{$g['varetc_path']}/mpd.conf", "w");

	if (!$fd) {

		printf("Error: cannot open mpd.conf in interfaces_wan_pptp_configure().\n");

		return 1;

	}

		$ondemand = "enable";

		if ($pptpcfg['timeout'])

			$idle = $pptpcfg['timeout'];

	} else {

		$ondemand = "disable";

	}

pptp:

	new -i ng0 pptp pptp

	set iface route default

	set iface {$ondemand} on-demand

	set iface idle {$idle}

	set iface up-script /usr/local/sbin/ppp-linkup

EOD;

		$mpdconf .= <<<EOD

EOD;

	}

	set bundle disable multilink

	set bundle authname "{$pptpcfg['username']}"

	set bundle password "{$pptpcfg['password']}"

	set link keep-alive 10 60

	set link max-redial 0

	set link no acfcomp protocomp

	set link disable pap chap

	set link accept chap

	set ipcp no vjcomp

	set ipcp ranges 0.0.0.0/0 0.0.0.0/0

EOD;

		$mpdconf .= <<<EOD

	set ipcp enable req-sec-dns

EOD;

	}

EOD;

	fwrite($fd, $mpdconf);

	fclose($fd);

	$fd = fopen("{$g['varetc_path']}/mpd.links", "w");

	if (!$fd) {

		printf("Error: cannot open mpd.links in interfaces_wan_pptp_configure().\n");

		return 1;

	}

pptp:

	set link type pptp

	set pptp enable originate outcall

	set pptp disable windowing

	set pptp self {$pptpcfg['local']}

	set pptp peer {$pptpcfg['remote']}

EOD;

	fwrite($fd, $mpdconf);

	fclose($fd);

	mwexec("/usr/local/sbin/mpd -b -d {$g['varetc_path']} -p {$g['varrun_path']}/mpd.pid pptp");

}

	global $g;

	sigkillbypid("{$g['varrun_path']}/mpd.pid", "SIGUSR2");

	sleep(3);

}

function interfaces_wan_pptp_up() {

	global $g;

	sigkillbypid("{$g['varrun_path']}/mpd.pid", "SIGUSR1");

	sleep(3);

}

	global $config, $g;

		/* IP address not configured yet, exit */

		return 0;

	}

	killbyname("bpalogin");

	sleep(1);

	$nfd = @fopen("{$g['varetc_path']}/defaultdomain.conf", "r");

	if ($nfd) {

		$defaultdomain = trim(fgets($nfd));

		fclose($nfd);

	}

	$fd = fopen("{$g['varetc_path']}/bpalogin.conf", "w");

	if (!$fd) {

		printf("Error: cannot open bpalogin.conf in interfaces_wan_bigpond_configure().\n");

		return 1;

	}