Project

General

Profile

Download (15.9 KB) Statistics
| Branch: | Tag: | Revision:
1
<?php
2
/* $Id$ */
3
/*
4
	system.php
5
	part of m0n0wall (http://m0n0.ch/wall)
6
*/
7
/* ====================================================================
8
 *	Copyright (c)  2004-2015  Electric Sheep Fencing, LLC. All rights reserved.
9
 *	Copyright (c)  2004, 2005 Scott Ullrich
10
 *	Copyright (c)  2003-2004 Manuel Kasper <mk@neon1.net>
11
 *
12
 *	Redistribution and use in source and binary forms, with or without modification,
13
 *	are permitted provided that the following conditions are met:
14
 *
15
 *	1. Redistributions of source code must retain the above copyright notice,
16
 *		this list of conditions and the following disclaimer.
17
 *
18
 *	2. Redistributions in binary form must reproduce the above copyright
19
 *		notice, this list of conditions and the following disclaimer in
20
 *		the documentation and/or other materials provided with the
21
 *		distribution.
22
 *
23
 *	3. All advertising materials mentioning features or use of this software
24
 *		must display the following acknowledgment:
25
 *		"This product includes software developed by the pfSense Project
26
 *		 for use in the pfSense software distribution. (http://www.pfsense.org/).
27
 *
28
 *	4. The names "pfSense" and "pfSense Project" must not be used to
29
 *		 endorse or promote products derived from this software without
30
 *		 prior written permission. For written permission, please contact
31
 *		 coreteam@pfsense.org.
32
 *
33
 *	5. Products derived from this software may not be called "pfSense"
34
 *		nor may "pfSense" appear in their names without prior written
35
 *		permission of the Electric Sheep Fencing, LLC.
36
 *
37
 *	6. Redistributions of any form whatsoever must retain the following
38
 *		acknowledgment:
39
 *
40
 *	"This product includes software developed by the pfSense Project
41
 *	for use in the pfSense software distribution (http://www.pfsense.org/).
42
 *
43
 *	THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY
44
 *	EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
45
 *	IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
46
 *	PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR
47
 *	ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
48
 *	SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
49
 *	NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
50
 *	LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
51
 *	HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
52
 *	STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
53
 *	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
54
 *	OF THE POSSIBILITY OF SUCH DAMAGE.
55
 *
56
 *	====================================================================
57
 *
58
 */
59
/*
60
	pfSense_BUILDER_BINARIES:	/bin/kill	/usr/bin/tar
61
	pfSense_MODULE: system
62
*/
63

    
64
##|+PRIV
65
##|*IDENT=page-system-generalsetup
66
##|*NAME=System: General Setup page
67
##|*DESCR=Allow access to the 'System: General Setup' page.
68
##|*MATCH=system.php*
69
##|-PRIV
70

    
71
require("guiconfig.inc");
72
require_once("functions.inc");
73
require_once("filter.inc");
74
require_once("shaper.inc");
75
require_once("system.inc");
76

    
77
$pconfig['hostname'] = $config['system']['hostname'];
78
$pconfig['domain'] = $config['system']['domain'];
79
list($pconfig['dns1'], $pconfig['dns2'], $pconfig['dns3'], $pconfig['dns4']) = $config['system']['dnsserver'];
80

    
81
$arr_gateways = return_gateways_array();
82

    
83
$pconfig['dns1gw'] = $config['system']['dns1gw'];
84
$pconfig['dns2gw'] = $config['system']['dns2gw'];
85
$pconfig['dns3gw'] = $config['system']['dns3gw'];
86
$pconfig['dns4gw'] = $config['system']['dns4gw'];
87

    
88
$pconfig['dnsallowoverride'] = isset($config['system']['dnsallowoverride']);
89
$pconfig['timezone'] = $config['system']['timezone'];
90
$pconfig['timeupdateinterval'] = $config['system']['time-update-interval'];
91
$pconfig['timeservers'] = $config['system']['timeservers'];
92
$pconfig['theme'] = $config['system']['theme'];
93
$pconfig['language'] = $config['system']['language'];
94

    
95
$pconfig['dnslocalhost'] = isset($config['system']['dnslocalhost']);
96

    
97
if (!isset($pconfig['timeupdateinterval'])) {
98
	$pconfig['timeupdateinterval'] = 300;
99
}
100
if (!$pconfig['timezone']) {
101
	$pconfig['timezone'] = "Etc/UTC";
102
}
103
if (!$pconfig['timeservers']) {
104
	$pconfig['timeservers'] = "pool.ntp.org";
105
}
106

    
107
$changedesc = gettext("System") . ": ";
108
$changecount = 0;
109

    
110
function is_timezone($elt) {
111
	return !preg_match("/\/$/", $elt);
112
}
113

    
114
if ($pconfig['timezone'] <> $_POST['timezone']) {
115
	filter_pflog_start(true);
116
}
117

    
118
$timezonelist = system_get_timezone_list();
119

    
120
$multiwan = false;
121
$interfaces = get_configured_interface_list();
122
foreach ($interfaces as $interface) {
123
	if (interface_has_gateway($interface)) {
124
		$multiwan = true;
125
	}
126
}
127

    
128
if ($_POST) {
129

    
130
	$changecount++;
131

    
132
	unset($input_errors);
133
	$pconfig = $_POST;
134

    
135
	/* input validation */
136
	$reqdfields = explode(" ", "hostname domain");
137
	$reqdfieldsn = array(gettext("Hostname"), gettext("Domain"));
138

    
139
	do_input_validation($_POST, $reqdfields, $reqdfieldsn, $input_errors);
140

    
141
	if ($_POST['hostname']) {
142
		if (!is_hostname($_POST['hostname'])) {
143
			$input_errors[] = gettext("The hostname can only contain the characters A-Z, 0-9 and '-'. It may not start or end with '-'.");
144
		} else {
145
			if (!is_unqualified_hostname($_POST['hostname'])) {
146
				$input_errors[] = gettext("A valid hostname is specified, but the domain name part should be omitted");
147
			}
148
		}
149
	}
150
	if ($_POST['domain'] && !is_domain($_POST['domain'])) {
151
		$input_errors[] = gettext("The domain may only contain the characters a-z, 0-9, '-' and '.'.");
152
	}
153

    
154
	$ignore_posted_dnsgw = array();
155

    
156
	for ($dnscounter=1; $dnscounter<5; $dnscounter++) {
157
		$dnsname="dns{$dnscounter}";
158
		$dnsgwname="dns{$dnscounter}gw";
159
		if (($_POST[$dnsname] && !is_ipaddr($_POST[$dnsname]))) {
160
			$input_errors[] = gettext("A valid IP address must be specified for DNS server $dnscounter.");
161
		} else {
162
			if (($_POST[$dnsgwname] <> "") && ($_POST[$dnsgwname] <> "none")) {
163
				// A real gateway has been selected.
164
				if (is_ipaddr($_POST[$dnsname])) {
165
					if ((is_ipaddrv4($_POST[$dnsname])) && (validate_address_family($_POST[$dnsname], $_POST[$dnsgwname]) === false)) {
166
						$input_errors[] = gettext("You can not specify IPv6 gateway '{$_POST[$dnsgwname]}' for IPv4 DNS server '{$_POST[$dnsname]}'");
167
					}
168
					if ((is_ipaddrv6($_POST[$dnsname])) && (validate_address_family($_POST[$dnsname], $_POST[$dnsgwname]) === false)) {
169
						$input_errors[] = gettext("You can not specify IPv4 gateway '{$_POST[$dnsgwname]}' for IPv6 DNS server '{$_POST[$dnsname]}'");
170
					}
171
				} else {
172
					// The user selected a gateway but did not provide a DNS address. Be nice and set the gateway back to "none".
173
					$ignore_posted_dnsgw[$dnsgwname] = true;
174
				}
175
			}
176
		}
177
	}
178

    
179
	$direct_networks_list = explode(" ", filter_get_direct_networks_list());
180
	for ($dnscounter=1; $dnscounter<5; $dnscounter++) {
181
		$dnsitem = "dns{$dnscounter}";
182
		$dnsgwitem = "dns{$dnscounter}gw";
183
		if ($_POST[$dnsgwitem]) {
184
			if (interface_has_gateway($_POST[$dnsgwitem])) {
185
				foreach ($direct_networks_list as $direct_network) {
186
					if (ip_in_subnet($_POST[$dnsitem], $direct_network)) {
187
						$input_errors[] = sprintf(gettext("You can not assign a gateway to DNS '%s' server which is on a directly connected network."), $_POST[$dnsitem]);
188
					}
189
				}
190
			}
191
		}
192
	}
193

    
194
	$t = (int)$_POST['timeupdateinterval'];
195
	if (($t < 0) || (($t > 0) && ($t < 6)) || ($t > 1440)) {
196
		$input_errors[] = gettext("The time update interval must be either 0 (disabled) or between 6 and 1440.");
197
	}
198
	# it's easy to have a little too much whitespace in the field, clean it up for the user before processing.
199
	$_POST['timeservers'] = preg_replace('/[[:blank:]]+/', ' ', $_POST['timeservers']);
200
	$_POST['timeservers'] = trim($_POST['timeservers']);
201
	foreach (explode(' ', $_POST['timeservers']) as $ts) {
202
		if (!is_domain($ts)) {
203
			$input_errors[] = gettext("A NTP Time Server name may only contain the characters a-z, 0-9, '-' and '.'.");
204
		}
205
	}
206

    
207
	if (!$input_errors) {
208
		update_if_changed("hostname", $config['system']['hostname'], $_POST['hostname']);
209
		update_if_changed("domain", $config['system']['domain'], $_POST['domain']);
210
		update_if_changed("timezone", $config['system']['timezone'], $_POST['timezone']);
211
		update_if_changed("NTP servers", $config['system']['timeservers'], strtolower($_POST['timeservers']));
212
		update_if_changed("NTP update interval", $config['system']['time-update-interval'], $_POST['timeupdateinterval']);
213

    
214
		if ($_POST['language'] && $_POST['language'] != $config['system']['language']) {
215
			$config['system']['language'] = $_POST['language'];
216
			set_language($config['system']['language']);
217
		}
218

    
219
		/* pfSense themes */
220
		if (!$g['disablethemeselection']) {
221
			update_if_changed("System Theme", $config['theme'], $_POST['theme']);
222
		}
223

    
224
		/* XXX - billm: these still need updating after figuring out how to check if they actually changed */
225
		$olddnsservers = $config['system']['dnsserver'];
226
		unset($config['system']['dnsserver']);
227
		if ($_POST['dns1']) {
228
			$config['system']['dnsserver'][] = $_POST['dns1'];
229
		}
230
		if ($_POST['dns2']) {
231
			$config['system']['dnsserver'][] = $_POST['dns2'];
232
		}
233
		if ($_POST['dns3']) {
234
			$config['system']['dnsserver'][] = $_POST['dns3'];
235
		}
236
		if ($_POST['dns4']) {
237
			$config['system']['dnsserver'][] = $_POST['dns4'];
238
		}
239

    
240
		$olddnsallowoverride = $config['system']['dnsallowoverride'];
241

    
242
		unset($config['system']['dnsallowoverride']);
243
		$config['system']['dnsallowoverride'] = $_POST['dnsallowoverride'] ? true : false;
244

    
245
		if ($_POST['dnslocalhost'] == "yes") {
246
			$config['system']['dnslocalhost'] = true;
247
		} else {
248
			unset($config['system']['dnslocalhost']);
249
		}
250

    
251
		/* which interface should the dns servers resolve through? */
252
		$outdnscounter = 0;
253
		for ($dnscounter=1; $dnscounter<5; $dnscounter++) {
254
			$dnsname="dns{$dnscounter}";
255
			$dnsgwname="dns{$dnscounter}gw";
256
			$olddnsgwname = $config['system'][$dnsgwname];
257

    
258
			if ($ignore_posted_dnsgw[$dnsgwname]) {
259
				$thisdnsgwname = "none";
260
			} else {
261
				$thisdnsgwname = $pconfig[$dnsgwname];
262
			}
263

    
264
			// "Blank" out the settings for this index, then we set them below using the "outdnscounter" index.
265
			$config['system'][$dnsgwname] = "none";
266
			$pconfig[$dnsgwname] = "none";
267
			$pconfig[$dnsname] = "";
268

    
269
			if ($_POST[$dnsname]) {
270
				// Only the non-blank DNS servers were put into the config above.
271
				// So we similarly only add the corresponding gateways sequentially to the config (and to pconfig), as we find non-blank DNS servers.
272
				// This keeps the DNS server IP and corresponding gateway "lined up" when the user blanks out a DNS server IP in the middle of the list.
273
				$outdnscounter++;
274
				$outdnsname="dns{$outdnscounter}";
275
				$outdnsgwname="dns{$outdnscounter}gw";
276
				$pconfig[$outdnsname] = $_POST[$dnsname];
277
				if ($_POST[$dnsgwname]) {
278
					$config['system'][$outdnsgwname] = $thisdnsgwname;
279
					$pconfig[$outdnsgwname] = $thisdnsgwname;
280
				} else {
281
					// Note: when no DNS GW name is chosen, the entry is set to "none", so actually this case never happens.
282
					unset($config['system'][$outdnsgwname]);
283
					$pconfig[$outdnsgwname] = "";
284
				}
285
			}
286
			if (($olddnsgwname != "") && ($olddnsgwname != "none") && (($olddnsgwname != $thisdnsgwname) || ($olddnsservers[$dnscounter-1] != $_POST[$dnsname]))) {
287
				// A previous DNS GW name was specified. It has now gone or changed, or the DNS server address has changed.
288
				// Remove the route. Later calls will add the correct new route if needed.
289
				if (is_ipaddrv4($olddnsservers[$dnscounter-1])) {
290
					mwexec("/sbin/route delete " . escapeshellarg($olddnsservers[$dnscounter-1]));
291
				} else {
292
					if (is_ipaddrv6($olddnsservers[$dnscounter-1])) {
293
						mwexec("/sbin/route delete -inet6 " . escapeshellarg($olddnsservers[$dnscounter-1]));
294
					}
295
				}
296
			}
297
		}
298

    
299
		if ($changecount > 0) {
300
			write_config($changedesc);
301
		}
302

    
303
		$retval = 0;
304
		$retval = system_hostname_configure();
305
		$retval |= system_hosts_generate();
306
		$retval |= system_resolvconf_generate();
307
		if (isset($config['dnsmasq']['enable'])) {
308
			$retval |= services_dnsmasq_configure();
309
		} elseif (isset($config['unbound']['enable'])) {
310
			$retval |= services_unbound_configure();
311
		}
312
		$retval |= system_timezone_configure();
313
		$retval |= system_ntp_configure();
314

    
315
		if ($olddnsallowoverride != $config['system']['dnsallowoverride']) {
316
			$retval |= send_event("service reload dns");
317
		}
318

    
319
		// Reload the filter - plugins might need to be run.
320
		$retval |= filter_configure();
321

    
322
		$savemsg = get_std_save_message($retval);
323
	}
324

    
325
	unset($ignore_posted_dnsgw);
326
}
327

    
328
$pgtitle = array(gettext("System"), gettext("General Setup"));
329
include("head.inc");
330

    
331
if ($input_errors)
332
	print_input_errors($input_errors);
333
if ($savemsg)
334
	print_info_box($savemsg);
335
?>
336
<div id="container">
337
<?php
338

    
339
require_once('classes/Form.class.php');
340
$form = new Form;
341
$section = new Form_Section('System');
342
$section->addInput(new Form_Input(
343
	'hostname',
344
	'Hostname',
345
	'text',
346
	$pconfig['hostname'],
347
	['placeholder' => 'pfSense']
348
))->setHelp('Name of the firewall host, without domain part');
349
$section->addInput(new Form_Input(
350
	'domain',
351
	'Domain',
352
	'text',
353
	$pconfig['domain'],
354
	['placeholder' => 'mycorp.com, home, office, private, etc.']
355
))->setHelp('Do not use \'local\' as a domain name. It will cause local '.
356
	'hosts running mDNS (avahi, bonjour, etc.) to be unable to resolve '.
357
	'local hosts not running mDNS.');
358
$form->add($section);
359

    
360
$section = new Form_Section('DNS server settings');
361

    
362
for ($i=1; $i<5; $i++)
363
{
364
//	if (!isset($pconfig['dns'.$i]))
365
//		continue;
366

    
367
	$group = new Form_Group('DNS Server ' . $i);
368

    
369
	$group->add(new Form_Input(
370
		'dns' . $i,
371
		'DNS Server',
372
		'text',
373
		$pconfig['dns'. $i]
374
	))->setHelp(($i == 4) ? 'Address':null);
375

    
376
	$help = "Enter IP addresses to be used by the system for DNS resolution. " .
377
		"These are also used for the DHCP service, DNS forwarder and for PPTP VPN clients.";
378

    
379
	if ($multiwan)	{
380
		$options = array('none' => 'none');
381

    
382
		foreach($arr_gateways as $gwname => $gwitem) {
383
			if((is_ipaddrv4(lookup_gateway_ip_by_name($pconfig[$dnsgw])) && (is_ipaddrv6($gwitem['gateway'])))) {
384
				continue;
385
			}
386

    
387
			if((is_ipaddrv6(lookup_gateway_ip_by_name($pconfig[$dnsgw])) && (is_ipaddrv4($gwitem['gateway'])))) {
388
				continue;
389
			}
390

    
391
			$options[$gwname] = $gwname.' - '.$gwitem['friendlyiface'].' - '.$gwitem['gateway'];
392
		}
393

    
394
		$group->add(new Form_Select(
395
			'dns' . $i . 'gw',
396
			'Gateway',
397
			$pconfig['dns' . $i . 'gw'],
398
			$options
399
		))->setHelp(($i == 4) ? 'Gateway':null);;
400

    
401
		$help .= '<br/>'. "In addition, optionally select the gateway for each DNS server. " .
402
			"When using multiple WAN connections there should be at least one unique DNS server per gateway.";
403
	}
404

    
405
	if($i == 4)
406
		$group->setHelp($help);
407

    
408
	$section->add($group);
409
}
410

    
411
$section->addInput(new Form_Checkbox(
412
	'dnsallowoverride',
413
	'DNS server override',
414
	'Allow DNS server list to be overridden by DHCP/PPP on WAN',
415
	$pconfig['dnsallowoverride']
416
))->setHelp(sprintf(gettext('If this option is set, %s will use DNS servers'.
417
	'assigned by a DHCP/PPP server on WAN for its own purposes (including '.
418
	'the DNS forwarder). However, they will not be assigned to DHCP and PPTP '.
419
	'VPN clients.'), $g['product_name']));
420

    
421
$section->addInput(new Form_Checkbox(
422
	'dnslocalhost',
423
	'Disable DNS forwarder',
424
	'Do not use the DNS Forwarder as a DNS server for the firewall',
425
	$pconfig['dnslocalhost']
426
))->setHelp('By default localhost (127.0.0.1) will be used as the first DNS'.
427
	'server where the DNS Forwarder or DNS Resolver is enabled and set to '.
428
	'listen on Localhost, so system can use the local DNS service to perform'.
429
	'lookups. Checking this box omits localhost from the list of DNS servers.');
430

    
431
$form->add($section);
432

    
433
$section = new Form_Section('Localization');
434
$section->addInput(new Form_Select(
435
	'timezone',
436
	'Timezone',
437
	$pconfig['timezone'],
438
	array_combine($timezonelist, $timezonelist)
439
))->setHelp('Select the location closest to you');
440
$section->addInput(new Form_Input(
441
	'timeservers',
442
	'Timeservers',
443
	'text',
444
	$pconfig['timeservers']
445
))->setHelp('Use a space to separate multiple hosts (only one required). '.
446
	'Remember to set up at least one DNS server if you enter a host name here!');
447
$section->addInput(new Form_Select(
448
	'language',
449
	'Language',
450
	$pconfig['language'],
451
	get_locale_list()
452
))->setHelp('Choose a language for the webConfigurator');
453

    
454
$form->add($section);
455

    
456
print $form;
457

    
458
include("foot.inc");
(187-187/235)