pfSense

<?php

 *	Copyright (c)  2004 Scott Ullrich

 *	Copyright (c)  2003-2004 Manuel Kasper <mk@neon1.net>

 *

 *	are permitted provided that the following conditions are met:

 *		this list of conditions and the following disclaimer.

 *		notice, this list of conditions and the following disclaimer in

 *		the documentation and/or other materials provided with the

 *		distribution.

 *		must display the following acknowledgment:

 *		"This product includes software developed by the pfSense Project

 *		 for use in the pfSense software distribution. (http://www.pfsense.org/).

 *		 endorse or promote products derived from this software without

 *		 prior written permission. For written permission, please contact

 *		 coreteam@pfsense.org.

 *		nor may "pfSense" appear in their names without prior written

 *		permission of the Electric Sheep Fencing, LLC.

 *		acknowledgment:

 *	for use in the pfSense software distribution (http://www.pfsense.org/).

 *	EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 *	IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 *	PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 *	ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 *	SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 *	NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 *	LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 *	HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 *	STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 *	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 *	OF THE POSSIBILITY OF SUCH DAMAGE.

 */

##|*IDENT=page-firewall-rules

##|*NAME=Firewall: Rules page

##|*DESCR=Allow access to the 'Firewall: Rules' page.

##|*MATCH=firewall_rules.php*

##|-PRIV

require_once("filter.inc");

require_once("shaper.inc");

	global $config;

		if ($natent['associated-rule-id'] == $id) {

	}

	$config['filter']['rule'] = array();

}

$a_filter = &$config['filter']['rule'];

	foreach ($config['ifgroups']['ifgroupentry'] as $ifgen) {

		if (have_ruleint_access($ifgen['ifname'])) {

	}

}

	if (have_ruleint_access($ifent)) {

}

	if (have_ruleint_access("l2tp")) {

}

		if (($pppoes['mode'] == 'server') && have_ruleint_access("pppoe")) {

	}

	if (have_ruleint_access("enc0")) {

}

		if (isset($iflist['wan'])) {

	$pconfig = $_POST;

	if ($_POST['apply']) {

}

		if (!empty($a_filter[$_GET['id']]['associated-rule-id'])) {

		unset($a_filter[$_GET['id']]);

	}

	/* delete selected rules */

	$deleted = false;

	if (is_array($_POST['rule']) && count($_POST['rule'])) {

		foreach ($_POST['rule'] as $rulei) {

			delete_nat_association($a_filter[$rulei]['associated-rule-id']);

			unset($a_filter[$rulei]);

			$deleted = true;

		}

		if($deleted) {

			if (write_config()) {

				mark_subsystem_dirty('filter');

			}

		}

		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));

		exit;

	}

} else if ($_GET['act'] == "toggle") {

		if (write_config()) {

	}

	if (is_array($_POST['rule']) && !empty($_POST['rule'])) {

		foreach ($_POST['rule'] as $id)

			$a_filter_new[] = $a_filter[$id];

	}

}

	print_info_box_np(gettext("The firewall rule configuration has been changed.") . "<br />" . gettext("You must apply the changes in order for them to take effect."), "apply", "", true);

$tab_array = array(array(gettext("Floating"), ("FloatingRules" == $if), "firewall_rules.php?if=FloatingRules"));

display_top_tabs($tab_array);

	<div class="panel panel-default">

		<div class="panel-heading"><?=gettext("Rules (Drag to change order)")?></div>

		<div id="mainarea" class="table-responsive panel-body">

			<table class="table table-striped table-hover table-condensed">

				<thead>

					<tr>

						<th><?=gettext("Proto");?></th>

						<th><?=gettext("Source");?></th>

						<th><?=gettext("Port");?></th>

						<th><?=gettext("Destination");?></th>

						<th><?=gettext("Port");?></th>

						<th><?=gettext("Gateway");?></th>

						<th><?=gettext("Queue");?></th>

						<th><?=gettext("Schedule");?></th>

						<th><?=gettext("Description");?></th>

						<th><!-- buttons --></th>

					</tr>

				</thead>

				<tbody>

	if (!isset($config['system']['webgui']['noantilockout']) &&

		 ((count($config['interfaces']) == 1) && ($if == 'wan')))):

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td><?=$iflist[$if];?> Address</td>

						<td><?=$alports?></td>

						<td>*</td>

						<td>*</td>

						<td></td>

						<td><?=gettext("Anti-Lockout Rule");?></td>

						<td>

							<a href="system_advanced_admin.php" class="btn btn-xs btn-primary">edit</a>

						</td>

					</tr>

						<td>*</td>

						<td><?=gettext("RFC 1918 networks");?></td>

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td></td>

						<td><?=gettext("Block private networks");?></td>

						<td>

					</tr>

						<td>*</td>

						<td><?=gettext("Reserved/not assigned by IANA");?></td>

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td>*</td>

						<td><?=gettext("Block bogon networks");?></td>

						<td>

					</tr>

$nrules = 0;

for ($i = 0; isset($a_filter[$i]); $i++):

		continue;

		continue;

?>

						<td >

							<input type="checkbox" id="frc<?=$nrules;?>" onClick="fr_toggle(<?=$nrules;?>)" name="rule[]" value="<?=$i;?>"/>

						</td>

		if ($filterent['type'] == "block")

			$iconfn = "remove";

		else if ($filterent['type'] == "reject")

			$iconfn = "fire";

		else if ($filterent['type'] == "match")

			$iconfn = "filter";

		else

			$iconfn = "ok";

	?>

		$isadvset = firewall_check_for_advanced_options($filterent);

			print '<i class="icon icon-cog" title="'. gettext("advanced setting") .': '. $isadvset .'"></i>';

	?>

		$alias = rule_columns_with_alias(

			$filterent['source']['address'],

			pprint_port($filterent['source']['port']),

			$filterent['destination']['address'],

			pprint_port($filterent['destination']['port'])

		);

		//build Schedule popup box

		$a_schedules = &$config['schedules']['schedule'];

		$schedule_span_begin = "";

		$schedule_span_end = "";

		$sched_caption_escaped = "";

		$sched_content = "";

		$schedstatus = false;

		$monthArray = array (gettext('January'), gettext('February'), gettext('March'), gettext('April'), gettext('May'), gettext('June'), gettext('July'), gettext('August'), gettext('September'), gettext('October'), gettext('November'), gettext('December'));

			{

						$tempID = "";

						$firstprint = false;

							$tempFriendlyTime = "";

							//get hours

							$temptimerange = $timerange['hour'];

							$temptimeseparator = strrpos($temptimerange, "-");

							$starttime = substr ($temptimerange, 0, $temptimeseparator);

							$stoptime = substr ($temptimerange, $temptimeseparator+1);

								$firstDayFound = false;

								$firstPrint = false;

									$day = $tempdayarray[$arraycounter];

									if (!$firstDayFound)

										$firstmonth = $month;

										$firstDayFound = true;

									}

									$currentDay = $day;

									$nextDay = $tempdayarray[$arraycounter+1];

									$currentDay++;

											$dayFriendly .= ", ";

										$currentDay--;

										if ($currentDay != $firstDay)

											$dayFriendly .= $monthArray[$firstmonth-1] . " " . $firstDay . " - " . $currentDay ;

										else

									}

									$arraycounter++;

								}

							}

							else

							{

								$tempdayFriendly = $timerange['position'];

								$firstDayFound = false;

								$tempFriendlyDayArray = explode(",", $tempdayFriendly);

								$currentDay = "";

								$firstDay = "";

								$nextDay = "";

								$counter = 0;

									if ($day != "") {

										{

											$firstDay = $tempFriendlyDayArray[$counter];

											$firstDayFound = true;

										//get next day

										$nextDay = $tempFriendlyDayArray[$counter+1];

										$currentDay++;

												$dayFriendly .= ", ";

											$currentDay--;

											if ($currentDay != $firstDay)

												$dayFriendly .= $dayArray[$firstDay-1] . " - " . $dayArray[$currentDay-1];

											else

												$dayFriendly .= $dayArray[$firstDay-1];

											$firstDayFound = false;

											$firstprint = true;

										}

										$counter++;

							$description = $timerange['rangedescr'];

							$sched_content .= $dayFriendly . "; " . $timeFriendly . "<br />";

					}

					$schedule_span_begin = "<span style=\"cursor: help;\" onmouseover=\"domTT_activate(this, event, 'content', '<h1>{$sched_caption_escaped}</h1><p>{$sched_content}</p>', 'trail', true, 'delay', 0, 'fade', 'both', 'fadeMax', 93, 'styleClass', 'niceTitle');\" onmouseout=\"this.style.color = ''; domTT_mouseout(this, event);\"><u>";

					$schedule_span_end = "</u></span>";

		}

		$printicon = false;

		$alttext = "";

		$image = "";

		if (!isset($filterent['disabled'])) {

			if ($schedstatus) {

				if ($iconfn == "block" || $iconfn == "reject") {

					$image = "icon_block";

					$alttext = gettext("Traffic matching this rule is currently being denied");

					$alttext = gettext("Traffic matching this rule is currently being allowed");

			} else if ($filterent['sched']) {

				if ($iconfn == "block" || $iconfn == "reject")

					$image = "icon_block_d";

				else

					$image = "icon_block";

				$alttext = gettext("This rule is not currently active because its period has expired");

				$printicon = true;

			}

		}

	?>

		if (isset($filterent['ipprotocol'])) {

					echo "IPv4 ";

					break;

				case "inet6":

					echo "IPv6 ";

					break;

				case "inet46":

					echo "IPv4+6 ";

					break;

			}

		} else {

			echo "IPv4 ";

		}

		if (isset($filterent['protocol'])) {

			echo strtoupper($filterent['protocol']);

			if (strtoupper($filterent['protocol']) == "ICMP" && !empty($filterent['icmptype'])) {

				echo ' <span style="cursor: help;" title="ICMP type: ' .

				echo $filterent['icmptype'];

				echo '</u></span>';

			}

		} else echo "*";

						<td>

							<?php if (isset($alias['src'])): ?>

								<a href="/firewall_aliases_edit.php?id=<?=$alias['src']?>" data-toggle="popover" data-trigger="hover focus" title="Alias details" data-content="<?=alias_info_popup($alias['src'])?>" data-html="true">

							<?php endif; ?>

							<?=htmlspecialchars(pprint_address($filterent['source']))?>

						</td>

						<td>

							<?php if (isset($alias['srcport'])): ?>

								<a href="/firewall_aliases_edit.php?id=<?=$alias['srcport']?>" data-toggle="popover" data-trigger="hover focus" title="Alias details" data-content="<?=alias_info_popup($alias['srcport'])?>" data-html="true">

							<?php endif; ?>

							<?=htmlspecialchars(pprint_port($filterent['source']['port']))?>

						</td>

						<td>

							<?php if (isset($alias['dst'])): ?>

						<td>

							<?php if (isset($alias['dstport'])): ?>

								<a href="/firewall_aliases_edit.php?id=<?=$alias['dstport']?>" data-toggle="popover" data-trigger="hover focus" title="Alias details" data-content="<?=alias_info_popup($alias['dstport'])?>" data-html="true">

							<?php endif; ?>

							<?=htmlspecialchars(pprint_port($filterent['destination']['port']))?>

						</td>

						<td>

							<?php if (isset($config['interfaces'][$filterent['gateway']]['descr'])):?>

								<?=htmlspecialchars($config['interfaces'][$filterent['gateway']]['descr'])?>

							<?php else: ?>

								<?=htmlspecialchars(pprint_port($filterent['gateway']))?>

							<?php endif; ?>

						</td>

						<td>

							<?php

								if (isset($filterent['ackqueue']) && isset($filterent['defaultqueue'])) {

									$desc = $filterent['ackqueue'] ;

									echo "<a href=\"firewall_shaper_queues.php?queue={$filterent['ackqueue']}&amp;action=show\">{$desc}</a>";

									$desc = $filterent['defaultqueue'];

									echo "/<a href=\"firewall_shaper_queues.php?queue={$filterent['defaultqueue']}&amp;action=show\">{$desc}</a>";

								} else if (isset($filterent['defaultqueue'])) {

									$desc = $filterent['defaultqueue'];

									echo "<a href=\"firewall_shaper_queues.php?queue={$filterent['defaultqueue']}&amp;action=show\">{$desc}</a>";

								} else

									echo gettext("none");

							?>

						</td>

						<td>

							<?php if ($printicon) { ?><img src="./themes/<?= $g['theme'];?>/images/icons/<?=$image;?>.gif" title="<?=$alttext;?>" border="0" alt="icon" /><?php } ?>

							<?=$schedule_span_begin;?><?=htmlspecialchars($filterent['sched']);?>&nbsp;<?=$schedule_span_end;?>

						</td>

						<td>

							<?=htmlspecialchars($filterent['descr']);?>

						</td>

						<td>

							<a href="firewall_rules_edit.php?id=<?=$i;?>" class="btn btn-xs btn-primary">edit</a>

							<a href="firewall_rules_edit.php?dup=<?=$i;?>" class="btn btn-xs btn-default">copy</a>

							<a href="?act=toggle&amp;if=<?=htmlspecialchars($if);?>&amp;id=<?=$i;?>" class="btn btn-xs btn-warning"><?=(isset($filterent['disabled']) ? 'enable' : 'disable')?></a>

							<a href="?act=del&amp;if=<?=htmlspecialchars($if);?>&amp;id=<?=$i;?>" class="btn btn-xs btn-danger">delete</a>

						</td>

					</tr>

<?php

?>

				</tbody>

			</table>

		</div>

	</div>

<?php if ($nrules == 0): ?>

	<div class="alert alert-warning" role="alert">

			<?=gettext("No floating rules are currently defined.");?>