pfSense

/*

 * system.php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2004-2019 Rubicon Communications, LLC (Netgate)

 * All rights reserved.

 *

 * originally based on m0n0wall (http://m0n0.ch/wall)

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 */

##|+PRIV

##|*NAME=System: General Setup

##|*DESCR=Allow access to the 'System: General Setup' page.

require_once("guiconfig.inc");

require_once("functions.inc");

require_once("system.inc");

$pconfig['dnsserver'] = $config['system']['dnsserver'];

$arr_gateways = return_gateways_array();

// set default columns to two if unset

if (!isset($config['system']['webgui']['dashboardcolumns'])) {

	$config['system']['webgui']['dashboardcolumns'] = 2;

// set default language if unset

	$config['system']['language'] = $g['language'];

}

$dnsgw_counter = 1;

$pconfig['dnsallowoverride'] = isset($config['system']['dnsallowoverride']);

$pconfig['language'] = $config['system']['language'];

$pconfig['webguicss'] = $config['system']['webgui']['webguicss'];

$pconfig['logincss'] = $config['system']['webgui']['logincss'];

$pconfig['webguifixedmenu'] = $config['system']['webgui']['webguifixedmenu'];

$pconfig['dashboardcolumns'] = $config['system']['webgui']['dashboardcolumns'];

$pconfig['interfacessort'] = isset($config['system']['webgui']['interfacessort']);

$pconfig['webguileftcolumnhyper'] = isset($config['system']['webgui']['webguileftcolumnhyper']);

$pconfig['disablealiaspopupdetail'] = isset($config['system']['webgui']['disablealiaspopupdetail']);

$pconfig['dashboardavailablewidgetspanel'] = isset($config['system']['webgui']['dashboardavailablewidgetspanel']);

$pconfig['statusmonitoringsettingspanel'] = isset($config['system']['webgui']['statusmonitoringsettingspanel']);

$pconfig['webguihostnamemenu'] = $config['system']['webgui']['webguihostnamemenu'];

$pconfig['dnslocalhost'] = isset($config['system']['dnslocalhost']);

//$pconfig['dashboardperiod'] = isset($config['widgets']['period']) ? $config['widgets']['period']:"10";

$pconfig['roworderdragging'] = isset($config['system']['webgui']['roworderdragging']);

$pconfig['loginshowhost'] = isset($config['system']['webgui']['loginshowhost']);

$pconfig['requirestatefilter'] = isset($config['system']['webgui']['requirestatefilter']);

if (!$pconfig['timezone']) {

	if (isset($g['default_timezone']) && !empty($g['default_timezone'])) {

}

if (!$pconfig['timeservers']) {

	$pconfig['timeservers'] = "pool.ntp.org";

}

$changedesc = gettext("System") . ": ";

$changecount = 0;

function is_timezone($elt) {

if ($pconfig['timezone'] <> $_POST['timezone']) {

	filter_pflog_start(true);

}

$timezonelist = system_get_timezone_list();

$timezonedesc = $timezonelist;

		$direction_str = gettext('AHEAD of');

		break;

	$timezonedesc[$idx] = $desc . " " .

	    sprintf(ngettext('(%1$s hour %2$s GMT)', '(%1$s hours %2$s GMT)', intval($hr_offset)), $hr_offset, $direction_str);

}

$multiwan = false;

$interfaces = get_configured_interface_list();

foreach ($interfaces as $interface) {

		$multiwan = true;

	}

if ($_POST) {

	$changecount++;

	unset($input_errors);

	$reqdfields = explode(" ", "hostname domain");

	$reqdfieldsn = array(gettext("Hostname"), gettext("Domain"));

	do_input_validation($_POST, $reqdfields, $reqdfieldsn, $input_errors);

	if ($_POST['hostname']) {

	}

		$input_errors[] = gettext("The domain may only contain the characters a-z, 0-9, '-' and '.'.");

	}

	validate_webguicss_field($input_errors, $_POST['webguicss']);

	$dnslist = $ignore_posted_dnsgw = array();

	$dnscounter = 0;

		$dnslist[] = $_POST[$dnsname];

		if (($_POST[$dnsname] && !is_ipaddr($_POST[$dnsname]))) {

			$input_errors[] = sprintf(gettext("A valid IP address must be specified for DNS server %s."), $dnscounter+1);

		} else {

			if (($_POST[$dnsgwname] <> "") && ($_POST[$dnsgwname] <> "none")) {

				// A real gateway has been selected.

					if ((is_ipaddrv4($_POST[$dnsname])) && (validate_address_family($_POST[$dnsname], $_POST[$dnsgwname]) === false)) {

						$input_errors[] = sprintf(gettext('The IPv6 gateway "%1$s" can not be specified for IPv4 DNS server "%2$s".'), $_POST[$dnsgwname], $_POST[$dnsname]);

					}

					if ((is_ipaddrv6($_POST[$dnsname])) && (validate_address_family($_POST[$dnsname], $_POST[$dnsgwname]) === false)) {

						$input_errors[] = sprintf(gettext('The IPv4 gateway "%1$s" can not be specified for IPv6 DNS server "%2$s".'), $_POST[$dnsgwname], $_POST[$dnsname]);

					}

					// The user selected a gateway but did not provide a DNS address. Be nice and set the gateway back to "none".

				}

			}

		}

		$dnscounter++;

	}

	if (count(array_filter($dnslist)) != count(array_unique(array_filter($dnslist)))) {

		$input_errors[] = gettext('Each configured DNS server must have a unique IP address. Remove the duplicated IP.');

	$dnscounter = 0;

	$direct_networks_list = explode(" ", filter_get_direct_networks_list());

	while (isset($_POST[$dnsname])) {

			foreach ($direct_networks_list as $direct_network) {

				if (ip_in_subnet($_POST[$dnsname], $direct_network)) {

				}

		$dnscounter++;

	}

	# it's easy to have a little too much whitespace in the field, clean it up for the user before processing.

	foreach (explode(' ', $_POST['timeservers']) as $ts) {

			$input_errors[] = gettext("A NTP Time Server name may only contain the characters a-z, 0-9, '-' and '.'.");

		}

	if ($input_errors) {

		update_if_changed("hostname", $config['system']['hostname'], $_POST['hostname']);

		update_if_changed("timezone", $config['system']['timezone'], $_POST['timezone']);

		if ($_POST['language'] && $_POST['language'] != $config['system']['language']) {

			$config['system']['language'] = $_POST['language'];

			set_language();

		}

		unset($config['system']['webgui']['interfacessort']);

		unset($config['system']['webgui']['webguileftcolumnhyper']);

		unset($config['system']['webgui']['disablealiaspopupdetail']);

		unset($config['system']['webgui']['dashboardavailablewidgetspanel']);

		unset($config['system']['webgui']['statusmonitoringsettingspanel']);

//		if ($_POST['dashboardperiod']) {

		/* XXX - billm: these still need updating after figuring out how to check if they actually changed */

		$olddnsservers = $config['system']['dnsserver'];

		unset($config['system']['dnsserver']);

		}

		// Remember the new list for display also.

		$olddnsallowoverride = $config['system']['dnsallowoverride'];

		unset($config['system']['dnsallowoverride']);

		$config['system']['dnsallowoverride'] = $_POST['dnsallowoverride'] ? true : false;

		if ($_POST['dnslocalhost'] == "yes") {

			$config['system']['dnslocalhost'] = true;

		} else {

			unset($config['system']['dnslocalhost']);

		}

		/* which interface should the dns servers resolve through? */

		$dnscounter = 0;

		$outdnscounter = 0;

		while (isset($_POST[$dnsname])) {

			// The numbering of DNS GW entries in the config starts from 1

			$dnsgwconfigcounter = $dnscounter + 1;

			if ($ignore_posted_dnsgw[$dnsgwname]) {

				$thisdnsgwname = "none";

			} else {

				$thisdnsgwname = $pconfig[$dnsgwname];

			}

			$config['system'][$dnsgwconfigname] = "none";

			$pconfig[$dnsgwname] = "none";

				// The numbering of DNS GW entries in the config starts from 1

				$outdnsgwconfigcounter = $outdnscounter + 1;

				$pconfig[$outdnsname] = $_POST[$dnsname];

				if ($_POST[$dnsgwname]) {

					$config['system'][$outdnsgwconfigname] = $thisdnsgwname;

					$pconfig[$outdnsgwname] = $thisdnsgwname;

					unset($config['system'][$outdnsgwconfigname]);

					$pconfig[$outdnsgwname] = "";

				$outdnscounter++;

			}

			if (($olddnsgwname != "") && ($olddnsgwname != "none") && (($olddnsgwname != $thisdnsgwname) || ($olddnsservers[$dnscounter] != $_POST[$dnsname]))) {

				// A previous DNS GW name was specified. It has now gone or changed, or the DNS server address has changed.

				if (is_ipaddrv4($olddnsservers[$dnscounter])) {

					mwexec("/sbin/route delete " . escapeshellarg($olddnsservers[$dnscounter-1]));

				} else if (is_ipaddrv6($olddnsservers[$dnscounter])) {

					mwexec("/sbin/route delete -inet6 " . escapeshellarg($olddnsservers[$dnscounter-1]));

				}

			}

		}

		if ($changecount > 0) {

			write_config($changedesc);

		}

		$changes_applied = true;

		$retval = 0;

		$retval |= system_hostname_configure();

		$retval |= system_hosts_generate();

		if (isset($config['dnsmasq']['enable'])) {

			$retval |= services_dnsmasq_configure();

		} elseif (isset($config['unbound']['enable'])) {

			$retval |= services_unbound_configure();

		}

		$retval |= system_timezone_configure();

		if ($olddnsallowoverride != $config['system']['dnsallowoverride']) {

			$retval |= send_event("service reload dns");

		}

		// Reload the filter - plugins might need to be run.

		$retval |= filter_configure();

	}

}

$pgtitle = array(gettext("System"), gettext("General Setup"));

include("head.inc");

if ($input_errors) {

	print_input_errors($input_errors);

}

if ($changes_applied) {

}

?>

<div id="container">

<?php

$form = new Form;

$section = new Form_Section('System');

	'hostname',

	'*Hostname',

	'text',

$section->addInput(new Form_Input(

	'domain',

	'*Domain',

	'text',

))->setHelp('Do not use \'.local\' as the final part of the domain (TLD), The \'.local\' domain is %1$swidely used%2$s by '.

	'mDNS (including Avahi and Apple OS X\'s Bonjour/Rendezvous/Airprint/Airplay), and some Windows systems and networked devices. ' .

	'These will not network correctly if the router uses \'.local\'. Alternatives such as \'.local.lan\' or \'.mylocal\' are safe.',

$form->add($section);

$section = new Form_Section('DNS Server Settings');

if (!is_array($pconfig['dnsserver'])) {

	$is_last_dnsserver = ($dnsserver_num == $dnsserver_count - 1);

		'dns' . $dnsserver_num,

		'DNS Server',

		$dnsserver

	if ($multiwan)	{

		$options = array('none' => 'none');

		foreach ($arr_gateways as $gwname => $gwitem) {

				continue;

			if ((is_ipaddrv6(lookup_gateway_ip_by_name($pconfig[$dnsgw])) && (is_ipaddrv4($gwitem['gateway'])))) {

				continue;

			$options[$gwname] = $gwname.' - '.$gwitem['friendlyiface'].' - '.$gwitem['gateway'];

		$group->add(new Form_Select(

			'dnsgw' . $dnsserver_num,

			'Gateway',

			$pconfig['dnsgw' . $dnsserver_num],

			$options

		))->setHelp(($is_last_dnsserver) ? $dnsgw_help:null);;

	}

	$group->add(new Form_Button(

	$section->add($group);

	$dnsserver_num++;

}

$section->addInput(new Form_Button(

$section->addInput(new Form_Checkbox(

	'dnsallowoverride',

	'DNS Server Override',

	'Allow DNS server list to be overridden by DHCP/PPP on WAN',

))->setHelp('If this option is set, %s will use DNS servers '.

	'assigned by a DHCP/PPP server on WAN for its own purposes (including '.

	'the DNS Forwarder/DNS Resolver). However, they will not be assigned to DHCP '.

	'clients.', $g['product_name']);

$section->addInput(new Form_Checkbox(

	'dnslocalhost',

	'Disable DNS Forwarder',

	'Do not use the DNS Forwarder/DNS Resolver as a DNS server for the firewall',

	$pconfig['dnslocalhost']

))->setHelp('By default localhost (127.0.0.1) will be used as the first DNS '.

	'server where the DNS Forwarder or DNS Resolver is enabled and set to '.

	'listen on localhost, so system can use the local DNS service to perform '.

$section = new Form_Section('Localization');

$section->addInput(new Form_Select(

	'timezone',

	'*Timezone',

	$pconfig['timezone'],

	array_combine($timezonelist, $timezonedesc)

))->setHelp('Select a geographic region name (Continent/Location) to determine the timezone for the firewall. %1$s' .

$section->addInput(new Form_Input(

	'timeservers',

	'Timeservers',

	'Remember to set up at least one DNS server if a host name is entered here!');

$section->addInput(new Form_Select(

	'language',

	'*Language',

	$pconfig['language'],

$section = new Form_Section('webConfigurator');

gen_webguicss_field($section, $pconfig['webguicss']);

gen_interfacessort_field($section, $pconfig['interfacessort']);

gen_associatedpanels_fields(

gen_requirestatefilter_field($section, $pconfig['requirestatefilter']);

gen_webguileftcolumnhyper_field($section, $pconfig['webguileftcolumnhyper']);

gen_disablealiaspopupdetail_field($section, $pconfig['disablealiaspopupdetail']);

$section->addInput(new Form_Checkbox(

$section->addInput(new Form_Select(

	'Login page color',

	$pconfig['logincss'],