pfSense

<?php

	diag_backup.php

*/

 *	Copyright (c)  2004, 2005 Scott Ullrich

 *	are permitted provided that the following conditions are met:

 *		this list of conditions and the following disclaimer.

 *		notice, this list of conditions and the following disclaimer in

 *		the documentation and/or other materials provided with the

 *		distribution.

 *		must display the following acknowledgment:

 *		"This product includes software developed by the pfSense Project

 *		 for use in the pfSense software distribution. (http://www.pfsense.org/).

 *		 endorse or promote products derived from this software without

 *		 prior written permission. For written permission, please contact

 *		 coreteam@pfsense.org.

 *		nor may "pfSense" appear in their names without prior written

 *		permission of the Electric Sheep Fencing, LLC.

 *		acknowledgment:

 *	for use in the pfSense software distribution (http://www.pfsense.org/).

 *	EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 *	IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 *	PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 *	ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 *	SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 *	NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 *	LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 *	HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 *	STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 *	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 *	OF THE POSSIBILITY OF SUCH DAMAGE.

 */

	pfSense_BUILDER_BINARIES:	/sbin/shutdown

##|*IDENT=page-diagnostics-backup/restore

##|*NAME=Diagnostics: Backup/restore page

##|*DESCR=Allow access to the 'Diagnostics: Backup/restore' page.

##|*MATCH=diag_backup.php*

##|-PRIV

ini_set('max_input_time', '0');

$omit_nocacheheaders = true;

require_once("filter.inc");

require_once("shaper.inc");

$rrdtool = "/usr/bin/nice -n20 /usr/local/bin/rrdtool";

function rrd_data_xml() {

	global $rrddbpath;

	global $rrdtool;

	$rrd_files = glob("{$rrddbpath}/*.rrd");

	$xml_files = array();

	foreach ($rrd_files as $rrd_file) {

		$basename = basename($rrd_file);

		$xml_file = preg_replace('/\.rrd$/', ".xml", $rrd_file);

		exec("$rrdtool dump '{$rrd_file}' '{$xml_file}'");

		$xml_data = file_get_contents($xml_file);

		unlink($xml_file);

		if ($xml_data !== false) {

			$result .= "\t\t<rrddatafile>\n";

			$result .= "\t\t\t<filename>{$basename}</filename>\n";

			$result .= "\t\t\t<xmldata>" . base64_encode(gzdeflate($xml_data)) . "</xmldata>\n";

			$result .= "\t\t</rrddatafile>\n";

		}

	}

	$result .= "\t</rrddata>\n";

	return $result;

}

			$rrd_file = "{$g['vardb_path']}/rrd/{$rrd['filename']}";

			$xml_file = preg_replace('/\.rrd$/', ".xml", $rrd_file);

				log_error("Cannot write $xml_file");

				continue;

			}

			$output = array();

			$status = null;

			exec("$rrdtool restore -f '{$xml_file}' '{$rrd_file}'", $output, $status);

			if ($status) {

			}

			$rrd_fd = fopen($rrd_file, "w");

				log_error("Cannot write $rrd_file");

				continue;

			}

			/* Try to decompress the data. */

			$dcomp = @gzinflate($data);

			if ($dcomp) {

				/* If the decompression worked, write the decompressed data */

					log_error("fwrite $rrd_file failed");

					continue;

				}

				/* If the decompression failed, it wasn't compressed, so write raw data */

					log_error("fwrite $rrd_file failed");

					continue;

				}

			}

			if (fclose($rrd_fd) === false) {

				log_error("fclose $rrd_file failed");

				continue;

		}

	}

}

	global $g, $config;

				if (is_array($pkg_config['menu'])) {

					foreach ($pkg_config['menu'] as $menu) {

						if (is_array($config['installedpackages']['menu'])) {

							foreach ($config['installedpackages']['menu'] as $amenu) {

								if ($amenu['name'] == $menu['name']) {

							}

						}

						$modified_config = true;

					}

				}

				$static_output .= "done.\n";

				update_output_window($static_output);

			}

		}

	}

	}

}

	global $config;

}

	flush();

	clear_subsystem_dirty("restore");

	conf_mount_ro();

	unset($input_errors);

	if ($_POST["nopackages"] <> "") {

	if ($_POST["ver"] <> "") {

		if ($mode == "download") {

				if ($_POST['encrypt_password'] != $_POST['encrypt_passconf']) {

				$name = "config-{$host}-".date("YmdHis").".xml";

				$data = "";

					if (!$_POST['backuparea']) {

						$data = file_get_contents("{$g['conf_path']}/config.xml");

					} else {

						/* backup specific area of configuration */

						$data = backup_config_section($_POST['backuparea']);

						$name = "{$_POST['backuparea']}-{$name}";

					}

					exec("sed '/<installedpackages>/,/<\/installedpackages>/d' {$sfn} > {$sfn}-new");

						$data = file_get_contents("{$g['conf_path']}/config.xml");

						$data = rrd_data_xml();

						$name = "{$_POST['backuparea']}-{$name}";

						/* backup specific area of configuration */

						$data = backup_config_section($_POST['backuparea']);

						$name = "{$_POST['backuparea']}-{$name}";

					}

					$closing_tag = "</" . $g['xml_rootobj'] . ">";

					$data = str_replace($closing_tag, $rrd_data_xml . $closing_tag, $data);

					$data = encrypt_data($data, $_POST['encrypt_password']);

					tagfile_reformat($data, $data, "config.xml");

				}

				header("Content-Type: application/octet-stream");

				header("Content-Disposition: attachment; filename={$name}");

					header('Pragma: ');

					header('Cache-Control: ');

				} else {

					header("Pragma: private");

					header("Cache-Control: private, must-revalidate");

				}

			}

		}

			if ($_POST['decrypt']) {

				if ($_POST['decrypt_password'] != $_POST['decrypt_passconf']) {

				if (is_uploaded_file($_FILES['conffile']['tmp_name'])) {

					$data = file_get_contents($_FILES['conffile']['tmp_name']);

						if (!tagfile_deformat($data, $data, "config.xml")) {

						}

						$data = decrypt_data($data, $_POST['decrypt_password']);

					}

						$data = str_replace("m0n0wall", "pfsense", $data);

						$m0n0wall_upgrade = true;

					}

								$input_errors[] = gettext("You have selected to restore an area but we could not locate the correct xml tag.");

							} else {

								if ($config['rrddata']) {

									restore_rrddata();

									unset($config['rrddata']);

									unlink_if_exists("{$g['tmp_path']}/config.cache");

									write_config();

									add_base_packages_menu_items();

									convert_config();

									conf_mount_ro();

								}

								filter_configure();

								$savemsg = gettext("The configuration area has been restored.  You may need to reboot the firewall.");

							/* restore the entire configuration */

							file_put_contents($_FILES['conffile']['tmp_name'], $data);

							if (config_install($_FILES['conffile']['tmp_name']) == 0) {

								/* this will be picked up by /index.php */

								conf_mount_rw();

									$loaderconf = file_get_contents("/boot/loader.conf");

										write_config("Restore serial console enabling in configuration.");

									}

									if ($config['system']['gateway'] <> "") {

									/* optional if list */

									$ifdescrs = get_configured_interface_list(true, true);

									/* remove special characters from interface descriptions */

										foreach ($ifdescrs as $iface) {

									}

										foreach ($ifdescrs as $iface) {

											if (is_alias($config['interfaces'][$iface]['descr'])) {

												$origname = $config['interfaces'][$iface]['descr'];

												update_alias_names_upon_change(array('filter', 'rule'), array('destination', 'address'), $newname, $origname);

												update_alias_names_upon_change(array('nat', 'rule'), array('destination', 'address'), $newname, $origname);

												update_alias_names_upon_change(array('nat', 'rule'), array('target'), $newname, $origname);

										}

									}

									$config['system']['version'] = "1.0";

									for ($i = 0; isset($config["filter"]["rule"][$i]); $i++) {

									// Move interface from ipsec to enc0

									for ($i = 0; isset($config["filter"]["rule"][$i]); $i++) {

									// Convert icmp types

									// http://www.openbsd.org/cgi-bin/man.cgi?query=icmp&sektion=4&arch=i386&apropos=0&manpath=OpenBSD+Current

									for ($i = 0; isset($config["filter"]["rule"][$i]); $i++) {

											switch ($config["filter"]["rule"][$i]['icmptype']) {

												case "echo":

													$config["filter"]["rule"][$i]['icmptype'] = "echoreq";

													break;

												case "unreach":

													$config["filter"]["rule"][$i]['icmptype'] = "unreach";

													break;

												case "echorep":

													$config["filter"]["rule"][$i]['icmptype'] = "echorep";

													break;

												case "squench":

													$config["filter"]["rule"][$i]['icmptype'] = "squench";

													break;

												case "redir":

													$config["filter"]["rule"][$i]['icmptype'] = "redir";

													break;

												case "timex":

													$config["filter"]["rule"][$i]['icmptype'] = "timex";

													break;

												case "paramprob":

													$config["filter"]["rule"][$i]['icmptype'] = "paramprob";

													break;

												case "timest":

													$config["filter"]["rule"][$i]['icmptype'] = "timereq";

													break;

												case "timestrep":

													$config["filter"]["rule"][$i]['icmptype'] = "timerep";

													break;

												case "inforeq":

													$config["filter"]["rule"][$i]['icmptype'] = "inforeq";

													break;

												case "inforep":

													$config["filter"]["rule"][$i]['icmptype'] = "inforep";

													break;

												case "maskreq":

													$config["filter"]["rule"][$i]['icmptype'] = "maskreq";

													break;

												case "maskrep":

													$config["filter"]["rule"][$i]['icmptype'] = "maskrep";

													break;

										}

									$config['diag']['ipv6nat'] = true;

									foreach ($config['captiveportal'] as $cp) {

											/* for some reason ipfw doesn't init correctly except on bootup sequence */

											mark_subsystem_dirty("restore");

											break;

										}

									}

								setup_serial_port();

									touch("/var/run/interface_mismatch_reboot_needed");

									clear_subsystem_dirty("restore");

									convert_config();

									header("Location: interfaces_assign.php");

									exit;

								}

			exit;

			clear_subsystem_dirty('packagelock');

			$savemsg = "Package Lock Cleared";

				$conf_file = "{$g['cf_conf_path']}/bak/config-" . strtotime($ver2restore) . ".xml";

				} else {

					$input_errors[] = gettext("The configuration could not be restored.");

				}

			} else {

				$input_errors[] = gettext("No version selected.");

			}

	}

}

$mth = ini_get('upload_progress_meter.store_method');

$dir = ini_get('upload_progress_meter.file.filename_template');

	global $config;

		"aliases" => gettext("Aliases"),

		"voucher" => gettext("Captive Portal Vouchers"),

		"dnsmasq" => gettext("DNS Forwarder"),

		"unbound" => gettext("DNS Resolver"),

		"dhcpd" => gettext("DHCP Server"),

		"dhcpdv6" => gettext("DHCPv6 Server"),

		"filter" => gettext("Firewall Rules"),

		"interfaces" => gettext("Interfaces"),

		"ipsec" => gettext("IPSEC"),

		"nat" => gettext("NAT"),

		"openvpn" => gettext("OpenVPN"),

		"installedpackages" => gettext("Package Manager"),

		"pptpd" => gettext("PPTP Server"),

		"rrddata" => gettext("RRD Data"),

		"cron" => gettext("Scheduled Tasks"),

		"syslog" => gettext("Syslog"),

		"system" => gettext("System"),

		"staticroutes" => gettext("Static routes"),

		"sysctl" => gettext("System tunables"),

		"snmpd" => gettext("SNMP Server"),

		"shaper" => gettext("Traffic Shaper"),

		"vlans" => gettext("VLANS"),

		"wol" => gettext("Wake on LAN")

		);

	$list = array("" => gettext("All"));

		foreach ($areas as $area => $areaname) {

			if ($area === "rrddata" || check_and_returnif_section_exists($area) == true) {

				$list[$area] = $areaname;

			}

		}

	print_input_errors($input_errors);

	print_info_box($savemsg, 'success');

		<input name="Submit" type="hidden" value="Yes" />

		<br />

$tab_array = array();

$tab_array[] = array(gettext("Config History"), false, "diag_confbak.php");

$tab_array[] = array(gettext("Backup/Restore"), true, "diag_backup.php");