pfSense

/* $Id$ */

/*

	Copyright (C) 2004 Scott Ullrich

	Copyright (C) 2009 Ermal Lu?i

	Copyright (C) 2010 Jim Pingle

	All rights reserved.

	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.

	Redistribution and use in source and binary forms, with or without

	1. Redistributions of source code must retain the above copyright notice,

	2. Redistributions in binary form must reproduce the above copyright

	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,

/*

##|+PRIV

// Keywords not allowed in names

$reserved_keywords = array("all", "pass", "out", "queue", "max", "min", "pptp", "pppoe", "L2TP", "OpenVPN", "IPsec");

require("guiconfig.inc");

require_once("functions.inc");

$pgtitle = array(gettext("Firewall"),gettext("Aliases"),gettext("Edit"));

$reserved_ifs = get_configured_interface_list(false, true);

if (!is_array($config['aliases']['alias']))

if($debug)

	exec("rm -f {$g['tmp_path']}/alias_rename_log.txt");

function alias_same_type($name, $type) {

			if (in_array($type, array("host", "network")) &&

				in_array($alias['type'], array("host", "network")))

$id = $_GET['id'];

	$original_alias_name = $a_aliases[$id]['name'];

	$pconfig['name'] = $a_aliases[$id]['name'];

	$pconfig['detail'] = $a_aliases[$id]['detail'];

	$pconfig['type'] = $a_aliases[$id]['type'];

	$pconfig['descr'] = html_entity_decode($a_aliases[$id]['descr']);

	/* interface list */

	foreach ($iflist as $if => $ifdesc)

			$input_errors[] = sprintf(gettext("Sorry, an interface is already named %s."), $pconfig['descr']);

	if($a_aliases[$id]['type'] == "urltable") {

	if($a_aliases[$id]['aliasurl'] <> "") {

}

	$reqdfields = explode(" ", "name");

	$reqdfieldsn = array(gettext("Name"));

	$x = is_validaliasname($_POST['name']);

		$input_errors[] = gettext("Reserved word used for alias name.");

	} else if ($_POST['type'] == "port" && (getservbyname($_POST['name'], "tcp") || getservbyname($_POST['name'], "udp"))) {

		$input_errors[] = gettext("Reserved word used for alias name.");

	} else {

			$input_errors[] = gettext("The alias name must be less than 32 characters long and may only consist of the characters") . " a-z, A-Z, 0-9, _.";

	}

	/* check for name conflicts */

	if (empty($a_aliases[$id])) {

		foreach ($a_aliases as $alias) {

				$input_errors[] = gettext("An alias with this name already exists.");

				break;

		}

	/* Check for reserved keyword names */

			$input_errors[] = sprintf(gettext("Cannot use a reserved keyword as alias name %s"), $rk);

	/* check for name interface description conflicts */

			$input_errors[] = gettext("An interface description with this name already exists.");

			break;

		}

	}

	$address = array();

	$alias['name'] = $_POST['name'];

			$_POST['address0'] = trim($_POST['address0']);

			$isfirst = 0;

				$input_errors[] = gettext("You must provide a valid URL.");

				$dont_update = true;

				$input_errors[] = gettext("Unable to fetch usable data.");

				$dont_update = true;

		$isfirst = 0;

		$address_count = 2;

		for($x=0; isset($_POST['address' . $x]); $x++) {

			if($_POST['address' . $x]) {

				$temp_filename = tempnam("{$g['tmp_path']}/", "alias_import");

				unlink($temp_filename);

				$fda = fopen("{$g['tmp_path']}/tmpfetch","w");

				fwrite($fda, "/usr/bin/fetch -q -o \"{$temp_filename}/aliases\" \"" . $_POST['address' . $x] . "\"");

				mwexec("/bin/mkdir -p {$temp_filename}");

				mwexec("/usr/bin/fetch -q -o \"{$temp_filename}/aliases\" \"" . $_POST['address' . $x] . "\"");

					$file_contents_split = explode("\n", $file_contents);

					foreach($file_contents_split as $fc) {

						// Stop at 3000 items, aliases larger than that tend to break both pf and the WebGUI.

						$tmp = trim($fc);

							$tmp_split = explode("#", $tmp);

							$tmp = trim($tmp_split[0]);

						}

						$tmp = trim($tmp);

							$address[] = $tmp;

							$isfirst = 1;

							$address_count++;

						}

					}

						$input_errors[] = gettext("You must provide a valid URL. Could not fetch usable data.");

						$dont_update = true;

					$alias['aliasurl'][] = $_POST['address' . $x];

					$input_errors[] = gettext("You must provide a valid URL.");

					$dont_update = true;

				}

		}

		$wrongaliases = "";

		for($x=0; $x<4999; $x++) {

			if($_POST["address{$x}"] <> "") {

				$_POST["address{$x}"] = trim($_POST["address{$x}"]);

				if (is_alias($_POST["address{$x}"])) {

						// But alias type network can include alias type urltable. Feature#1603.

						      alias_get_type($_POST["address{$x}"]) == 'urltable'))

							$wrongaliases .= " " . $_POST["address{$x}"];

				} else if ($_POST['type'] == "port") {

					if (!is_port($_POST["address{$x}"]))

						$input_errors[] = $_POST["address{$x}"] . " " . gettext("is not a valid port or alias.");

				} else if ($_POST['type'] == "host" || $_POST['type'] == "network") {

					if (!is_ipaddr($_POST["address{$x}"])

						$input_errors[] = sprintf(gettext('%1$s is not a valid %2$s alias.'), $_POST["address{$x}"], $_POST['type']);

				}

				if (is_iprange($_POST["address{$x}"])) {

					$address = array_merge($address, $rangesubnets);

				} else {

					if(is_ipaddr($_POST["address{$x}"]) && $_POST["address_subnet{$x}"] <> "")

						$tmpaddress .= "/" . $_POST["address_subnet{$x}"];

					$final_address_details[] = sprintf(gettext("Entry added %s"), date('r'));

			}

		}

		if ($wrongaliases <> "")

			$input_errors[] = sprintf(gettext('The alias(es): %s cannot be nested because they are not of the same type.'), $wrongaliases);

	}

	// Allow extending of the firewall edit page and include custom input validation 

	if (!$input_errors) {

		$alias['address'] = is_array($address) ? implode(" ", $address) : $address;

		$alias['descr'] = $_POST['descr'];

		$alias['type'] = $_POST['type'];

		$alias['detail'] = implode("||", $final_address_details);

		/*   Check to see if alias name needs to be

			update_alias_names_upon_change(array('filter', 'rule'), array('source', 'address'), $_POST['name'], $origname);

			// NAT Rules

			update_alias_names_upon_change(array('nat', 'rule'), array('source', 'address'), $_POST['name'], $origname);

			// NAT 1:1 Rules

			update_alias_names_upon_change(array('nat', 'advancedoutbound', 'rule'), array('sourceport'), $_POST['name'], $origname);

			update_alias_names_upon_change(array('nat', 'advancedoutbound', 'rule'), array('destination', 'address'), $_POST['name'], $origname);

			update_alias_names_upon_change(array('nat', 'advancedoutbound', 'rule'), array('dstport'), $_POST['name'], $origname);

			update_alias_names_upon_change(array('nat', 'advancedoutbound', 'rule'), array('target'), $_POST['name'], $origname);

			// Alias in an alias

			update_alias_names_upon_change(array('aliases', 'alias'), array('address'), $_POST['name'], $origname);

		}

		pfSense_handle_custom_code("/usr/local/pkg/firewall_aliases_edit/pre_write_config");

		if (isset($id) && $a_aliases[$id]) {

					if ($aliasd['address'] <> "") {

						$tmpdirty = false;

						$tmpaddr = explode(" ", $aliasd['address']);

							if ($tmpalias == $a_aliases[$id]['name']) {

								$tmpaddr[$tmpidx] = $alias['name'];

								$tmpdirty = true;

						}

						if ($tmpdirty == true)

					}

				}

			$a_aliases[$id] = $alias;

		} else

			$a_aliases[] = $alias;

		mark_subsystem_dirty('aliases');

		// Sort list

		write_config();

		header("Location: firewall_aliases.php");

		$pconfig['name'] = $_POST['name'];

		$pconfig['descr'] = $_POST['descr'];

		$pconfig['address'] = implode(" ", $address);

		$pconfig['type'] = $_POST['type'];

		$pconfig['detail'] = implode("||", $final_address_details);

	}

$jscriptstr = <<<EOD

<script type="text/javascript">

function typesel_change() {

			var cmd;

			newrows = totalrows;

				comd = 'document.iform.address_subnet' + i + '.disabled = 1;';

			}

			break;

			var cmd;

			newrows = totalrows;

				comd = 'document.iform.address_subnet' + i + '.disabled = 0;';

			}

			break;

		case 2:	/* port */

			newrows = totalrows;

				comd = 'document.iform.address_subnet' + i + '.disabled = 1;';

				comd = 'document.iform.address_subnet' + i + '.value = "128";';

				eval(comd);

/*		case 3:	 // OpenVPN Users

			var cmd;

			newrows = totalrows;

				comd = 'document.iform.address_subnet' + i + '.disabled = 1;';

				eval(comd);

			}

*/

			var cmd;

			newrows = totalrows;

				comd = 'document.iform.address_subnet' + i + '.disabled = 1;';

				eval(comd);

		case 4:	/* urltable */

			var cmd;

	}

function add_alias_control() {

EOD;

$urltable_str = gettext("URL Table");

$update_freq_str = gettext("Update Freq.");

$networks_help = gettext("Networks are specified in CIDR format.  Select the CIDR mask that pertains to each entry. /32 specifies a single IPv4 host, /128 specifies a single IPv6 host, /24 specifies 255.255.255.0, /64 specifies a normal IPv6 network, etc. Hostnames (FQDNs) may also be specified, using a /32 mask for IPv4 or /128 for IPv6. You may also enter an IP range such as 192.168.1.1-192.168.1.254 and a list of CIDR networks will be derived to fill the range.");

$hosts_help = gettext("Enter as many hosts as you would like.  Hosts must be specified by their IP address or fully qualified domain name (FQDN). FQDN hostnames are periodically re-resolved and updated. If multiple IPs are returned by a DNS query, all are used.");

$ports_help = gettext("Enter as many ports as you wish.  Port ranges can be expressed by seperating with a colon.");

$url_help = sprintf(gettext("Enter as many URLs as you wish. After saving %s will download the URL and import the items into the alias. Use only with small sets of IP addresses (less than 3000)."), $g['product_name']);

$openvpn_str = gettext("Username");

$openvpn_freq = "";

$jscriptstr .= <<<EOD

function update_box_type() {

	if(selected == '{$networks_str}') {

		document.getElementById ("addrowbutton").style.display = 'block';

	} else if(selected == '{$hosts_str}') {

		document.getElementById ("addrowbutton").style.display = 'block';

	} else if(selected == '{$ports_str}') {

		document.getElementById ("addrowbutton").style.display = 'block';

	} else if(selected == '{$url_str}') {

		document.getElementById ("twocolumn").firstChild.data = "";

		document.getElementById ("threecolumn").firstChild.data = "{$description_str}";

		document.getElementById ("addrowbutton").style.display = 'block';

	} else if(selected == '{$openvpn_user_str}') {

		document.getElementById ("onecolumn").firstChild.data = "{$openvpn_str}";

		document.getElementById ("twocolumn").firstChild.data = "{$openvpn_freq}";

		document.getElementById ("threecolumn").firstChild.data = "{$description_str}";

		document.getElementById ("itemhelp").firstChild.data = "{$openvpn_help}";

		document.getElementById ("addrowbutton").style.display = 'block';

	}

</script>

EOD;

?>

<body link="#0000CC" vlink="#0000CC" alink="#0000CC" onload="<?= $jsevents["body"]["onload"] ?>">

<script type="text/javascript" src="/javascript/jquery.ipv4v6ify.js">

<script type="text/javascript" src="/javascript/row_helper.js">

</script>

<script type="text/javascript" src="/javascript/autosuggest.js">

<input type='hidden' name='address_type' value='textbox' />

<script type="text/javascript">

	rowtype[0] = "textbox,ipv4v6";

	rowsize[0] = "30";

	rowname[1] = "address_subnet";

	rowtype[1] = "select,ipv4v6";

	rowsize[1] = "1";

	rowname[2] = "detail";

	rowsize[2] = "50";

</script>

<?php pfSense_handle_custom_code("/usr/local/pkg/firewall_aliases_edit/pre_input_errors"); ?>

<?php if ($input_errors) print_input_errors($input_errors); ?>

<div id="inputerrors"></div>

  <tr>

	<td colspan="2" valign="top" class="listtopic"><?=gettext("Alias Edit"); ?></td>

  </tr>

  <tr>

    <td valign="top" class="vncellreq"><?=gettext("Name"); ?></td>

    <td class="vtable">

      <input name="origname" type="hidden" id="origname" class="formfld unknown" size="40" value="<?=htmlspecialchars($pconfig['name']);?>" />

      <input name="name" type="text" id="name" class="formfld unknown" size="40" value="<?=htmlspecialchars($pconfig['name']);?>" />

      <?php if (isset($id) && $a_aliases[$id]): ?>

      <input name="id" type="hidden" value="<?=htmlspecialchars($id);?>" />

      <?php endif; ?>

      <br />

        <?=gettext("The name of the alias may only consist of the characters \"a-z, A-Z, 0-9 and _\"."); ?>

      </span>

  <?php pfSense_handle_custom_code("/usr/local/pkg/firewall_aliases_edit/after_first_tr"); ?>

  <tr>

    <td width="22%" valign="top" class="vncell"><?=gettext("Description"); ?></td>

    <td width="78%" class="vtable">

      <input name="descr" type="text" class="formfld unknown" id="descr" size="40" value="<?=htmlspecialchars($pconfig['descr']);?>" />

      <br />

        <?=gettext("You may enter a description here for your reference (not parsed)."); ?>

      </span>

    <td valign="top" class="vncellreq"><?=gettext("Type"); ?></td>

    <td class="vtable">

        <option value="host" <?php if ($pconfig['type'] == "host") echo "selected"; ?>><?=gettext("Host(s)"); ?></option>

        <option value="network" <?php if ($pconfig['type'] == "network") echo "selected"; ?>><?=gettext("Network(s)"); ?></option>

<!--        <option value="openvpn" <?php if ($pconfig['type'] == "openvpn") echo "selected"; ?>><?=gettext("OpenVPN Users"); ?></option> -->

		<option value="url" <?php if ($pconfig['type'] == "url") echo "selected"; ?>><?=gettext("URL");?></option>

        <option value="urltable" <?php if ($pconfig['type'] == "urltable") echo "selected"; ?>><?=gettext("URL Table"); ?></option>

      </select>

    <td width="22%" valign="top" class="vncellreq"><div id="addressnetworkport"><?=gettext("Host(s)"); ?></div></td>