pfSense

<?php

/* $Id$ */

/*

	interfaces.php

	Copyright (C) 2004-2008 Scott Ullrich

	Copyright (C) 2006 Daniel S. Haischt.

	Copyright (C) 2008-2010 Ermal Lu?i

	All rights reserved.

	originally part of m0n0wall (http://m0n0.ch/wall)

	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.

	All rights reserved.

	Redistribution and use in source and binary forms, with or without

	modification, are permitted provided that the following conditions are met:

	1. Redistributions of source code must retain the above copyright notice,

	   this list of conditions and the following disclaimer.

	2. Redistributions in binary form must reproduce the above copyright

	   notice, this list of conditions and the following disclaimer in the

	   documentation and/or other materials provided with the distribution.

	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,

	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY

	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,

	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

	POSSIBILITY OF SUCH DAMAGE.

*/

/*

	pfSense_BUILDER_BINARIES:	/usr/sbin/arp

	pfSense_MODULE:	interfaces

*/

##|+PRIV

##|*IDENT=page-interfaces

##|*NAME=Interfaces: WAN page

##|*DESCR=Allow access to the 'Interfaces' page.

##|*MATCH=interfaces.php*

##|-PRIV

require_once("guiconfig.inc");

require_once("ipsec.inc");

require_once("functions.inc");

require_once("captiveportal.inc");

require_once("filter.inc");

require_once("shaper.inc");

require_once("rrd.inc");

require_once("vpn.inc");

require_once("xmlparse_attr.inc");

// Get configured interface list

$ifdescrs = get_configured_interface_with_descr(false, true);

$if = "wan";

if ($_REQUEST['if'])

	$if = $_REQUEST['if'];

if (empty($ifdescrs[$if])) {

	Header("Location: interfaces.php");

	exit;

}

define("CRON_MONTHLY_PATTERN", "0 0 1 * *");

define("CRON_WEEKLY_PATTERN", "0 0 * * 0");

define("CRON_DAILY_PATTERN", "0 0 * * *");

define("CRON_HOURLY_PATTERN", "0 * * * *");

if (!is_array($config['ppps']['ppp']))

	$config['ppps']['ppp'] = array();

$a_ppps = &$config['ppps']['ppp'];

function remove_bad_chars($string) {

	return preg_replace('/[^a-z_0-9]/i','',$string);

}

if (!is_array($config['gateways']['gateway_item']))

	$config['gateways']['gateway_item'] = array();

$a_gateways = &$config['gateways']['gateway_item'];

$wancfg = &$config['interfaces'][$if];

$old_wancfg = $wancfg;

// Populate page descr if it does not exist.

if ($if == "wan" && !$wancfg['descr'])

	$wancfg['descr'] = "WAN";

else if ($if == "lan" && !$wancfg['descr'])

	$wancfg['descr'] = "LAN";

foreach ($a_ppps as $pppid => $ppp) {

	if ($wancfg['if'] == $ppp['if'])

		break;

}

if ($wancfg['if'] == $a_ppps[$pppid]['if']) {

	$pconfig['pppid'] = $pppid;

	$pconfig['ptpid'] = $a_ppps[$pppid]['ptpid'];

	$pconfig['port'] = $a_ppps[$pppid]['ports'];

	if ($a_ppps[$pppid]['type'] == "ppp"){

		$pconfig['username'] = $a_ppps[$pppid]['username'];

		$pconfig['password'] = base64_decode($a_ppps[$pppid]['password']);

		$pconfig['phone'] = $a_ppps[$pppid]['phone'];

		$pconfig['apn'] = $a_ppps[$pppid]['apn'];

	}

	if ($a_ppps[$pppid]['type'] == "pppoe"){

		$pconfig['pppoe_username'] = $a_ppps[$pppid]['username'];

		$pconfig['pppoe_password'] = base64_decode($a_ppps[$pppid]['password']);

		$pconfig['provider'] = $a_ppps[$pppid]['provider'];

		$pconfig['pppoe_dialondemand'] = isset($a_ppps[$pppid]['ondemand']);

		$pconfig['pppoe_idletimeout'] = $a_ppps[$pppid]['idletimeout'];

		/* ================================================ */

		/* = force a connection reset at a specific time? = */

		/* ================================================ */

		if (isset($a_ppps[$pppid]['pppoe-reset-type'])) {

			$pconfig['pppoe-reset-type'] = $a_ppps[$pppid]['pppoe-reset-type'];

			$itemhash = getMPDCRONSettings($a_ppps[$pppid]['if']);

			$cronitem = $itemhash['ITEM'];

			if (isset($cronitem)) {

				$resetTime = "{$cronitem['minute']} {$cronitem['hour']} {$cronitem['mday']} {$cronitem['month']} {$cronitem['wday']}";

			} else {

				$resetTime = NULL;

			}

			log_error("ResetTime:".$resetTime);

			if ($a_ppps[$pppid]['pppoe-reset-type'] == "custom") {

				$resetTime_a = split(" ", $resetTime);

				$pconfig['pppoe_pr_custom'] = true;

				$pconfig['pppoe_resetminute'] = $resetTime_a[0];

				$pconfig['pppoe_resethour'] = $resetTime_a[1];

				/*  just initialize $pconfig['pppoe_resetdate'] if the

				 *  coresponding item contains appropriate numeric values.

				 */

				if ($resetTime_a[2] <> "*" && $resetTime_a[3] <> "*")

					$pconfig['pppoe_resetdate'] = "{$resetTime_a[3]}/{$resetTime_a[2]}/" . date("Y");

			} else if ($a_ppps[$pppid]['pppoe-reset-type'] == "preset") {

				$pconfig['pppoe_pr_preset'] = true;

				switch ($resetTime) {

					case CRON_MONTHLY_PATTERN:

						$pconfig['pppoe_monthly'] = true;

						break;

					case CRON_WEEKLY_PATTERN:

						$pconfig['pppoe_weekly'] = true;

						break;

					case CRON_DAILY_PATTERN:

						$pconfig['pppoe_daily'] = true;

						break;

					case CRON_HOURLY_PATTERN:

						$pconfig['pppoe_hourly'] = true;

						break;

				}

			}

		}// End force pppoe reset at specific time

	}// End if type == pppoe

	else if ($a_ppps[$pppid]['type'] == "pptp" || $a_ppps[$pppid]['type'] == "l2tp"){

		$pconfig['pptp_username'] = $a_ppps[$pppid]['username'];

		$pconfig['pptp_password'] = base64_decode($a_ppps[$pppid]['password']);

		$pconfig['pptp_local'] = explode(",",$a_ppps[$pppid]['localip']);

		$pconfig['pptp_subnet'] = explode(",",$a_ppps[$pppid]['subnet']);

		$pconfig['pptp_remote'] = explode(",",$a_ppps[$pppid]['gateway']);

		$pconfig['pptp_dialondemand'] = isset($a_ppps[$pppid]['ondemand']);

		$pconfig['pptp_idletimeout'] = $a_ppps[$pppid]['timeout'];

	}

} else {

	$pconfig['ptpid'] = interfaces_ptpid_next();

	$pppid = count($a_ppps);

}

$pconfig['dhcphostname'] = $wancfg['dhcphostname'];

$pconfig['alias-address'] = $wancfg['alias-address'];

$pconfig['alias-subnet'] = $wancfg['alias-subnet'];

$pconfig['dhcp_plus'] = isset($wancfg['dhcp_plus']);

$pconfig['descr'] = remove_bad_chars($wancfg['descr']);

$pconfig['enable'] = isset($wancfg['enable']);

if (is_array($config['aliases']['alias'])) {

	foreach($config['aliases']['alias'] as $alias) {

		if($alias['name'] == $wancfg['descr']) {

			$input_errors[] = sprintf(gettext("Sorry, an alias with the name %s already exists."),$wancfg['descr']);

		}

	}

}

switch($wancfg['ipaddr']) {

	case "dhcp":

		$pconfig['type'] = "dhcp";

		break;

	case "carpdev-dhcp":

		$pconfig['type'] = "carpdev-dhcp";

		$pconfig['ipaddr'] = "";

		break;

	case "pppoe":

	case "pptp":

	case "l2tp":

	case "ppp":

		$pconfig['type'] = $wancfg['ipaddr'];

		break;

	default:

		if(is_ipaddr($wancfg['ipaddr'])) {

			$pconfig['type'] = "staticv4";

			$pconfig['ipaddr'] = $wancfg['ipaddr'];

			$pconfig['subnet'] = $wancfg['subnet'];

			$pconfig['gateway'] = $wancfg['gateway'];

			if((is_ipaddr($wancfg['ipaddrv6'])) && (is_ipaddr($wancfg['ipaddr']))) {

				$pconfig['type'] = "staticv4v6";

			}

		} else

			$pconfig['type'] = "none";

		break;

}

switch($wancfg['ipaddrv6']) {

	case "dhcpv6":

		$pconfig['type'] = "dhcpv6";

		break;

	default:

		/* if we have dual stack we need a combined type */

		if(is_ipaddrv6($wancfg['ipaddrv6'])) {

			$pconfig['type'] = "staticv6";

			$pconfig['ipaddrv6'] = $wancfg['ipaddrv6'];

			$pconfig['subnetv6'] = $wancfg['subnetv6'];

			$pconfig['gatewayv6'] = $wancfg['gatewayv6'];

			if((is_ipaddrv6($wancfg['ipaddrv6'])) && (is_ipaddr($wancfg['ipaddr']))) {

				$pconfig['type'] = "staticv4v6";

			}

		}

		break;

}

// print_r($pconfig);

$pconfig['blockpriv'] = isset($wancfg['blockpriv']);

$pconfig['blockbogons'] = isset($wancfg['blockbogons']);

$pconfig['spoofmac'] = $wancfg['spoofmac'];

$pconfig['mtu'] = $wancfg['mtu'];

$pconfig['mss'] = $wancfg['mss'];

/* Wireless interface? */

if (isset($wancfg['wireless'])) {

	/* Sync first to be sure it displays the actual settings that will be used */

	interface_sync_wireless_clones($wancfg, false);

	/* Get wireless modes */

	$wlanif = get_real_interface($if);

	if (!does_interface_exist($wlanif))

		interface_wireless_clone($wlanif, $wancfg);

	$wlanbaseif = interface_get_wireless_base($wancfg['if']);

	preg_match("/^(.*?)([0-9]*)$/", $wlanbaseif, $wlanbaseif_split);

	$wl_modes = get_wireless_modes($if);

	$wl_chaninfo = get_wireless_channel_info($if);

	$wl_sysctl_prefix = 'dev.' . $wlanbaseif_split[1] . '.' . $wlanbaseif_split[2];

	$wl_sysctl = get_sysctl(array("{$wl_sysctl_prefix}.diversity", "{$wl_sysctl_prefix}.txantenna", "{$wl_sysctl_prefix}.rxantenna",

	                              "{$wl_sysctl_prefix}.slottime", "{$wl_sysctl_prefix}.acktimeout", "{$wl_sysctl_prefix}.ctstimeout"));

	$wl_regdomain_xml_attr = array();

	$wl_regdomain_xml = parse_xml_regdomain($wl_regdomain_xml_attr);

	$wl_regdomains = &$wl_regdomain_xml['regulatory-domains']['rd'];

	$wl_regdomains_attr = &$wl_regdomain_xml_attr['regulatory-domains']['rd'];

	$wl_countries = &$wl_regdomain_xml['country-codes']['country'];

	$wl_countries_attr = &$wl_regdomain_xml_attr['country-codes']['country'];

	$pconfig['persistcommonwireless'] = isset($config['wireless']['interfaces'][$wlanbaseif]);

	$pconfig['standard'] = $wancfg['wireless']['standard'];

	$pconfig['mode'] = $wancfg['wireless']['mode'];

	$pconfig['protmode'] = $wancfg['wireless']['protmode'];

	$pconfig['ssid'] = $wancfg['wireless']['ssid'];

	$pconfig['channel'] = $wancfg['wireless']['channel'];

	$pconfig['txpower'] = $wancfg['wireless']['txpower'];

	$pconfig['diversity'] = $wancfg['wireless']['diversity'];

	$pconfig['txantenna'] = $wancfg['wireless']['txantenna'];

	$pconfig['rxantenna'] = $wancfg['wireless']['rxantenna'];

	$pconfig['distance'] = $wancfg['wireless']['distance'];

	$pconfig['regdomain'] = $wancfg['wireless']['regdomain'];

	$pconfig['regcountry'] = $wancfg['wireless']['regcountry'];

	$pconfig['reglocation'] = $wancfg['wireless']['reglocation'];

	$pconfig['wme_enable'] = isset($wancfg['wireless']['wme']['enable']);

	if (isset($wancfg['wireless']['puren']['enable']))

		$pconfig['puremode'] = '11n';

	else if (isset($wancfg['wireless']['pureg']['enable']))

		$pconfig['puremode'] = '11g';

	else

		$pconfig['puremode'] = 'any';

	$pconfig['apbridge_enable'] = isset($wancfg['wireless']['apbridge']['enable']);

	$pconfig['authmode'] = $wancfg['wireless']['authmode'];

	$pconfig['hidessid_enable'] = isset($wancfg['wireless']['hidessid']['enable']);

	$pconfig['auth_server_addr'] = $wancfg['wireless']['auth_server_addr'];

	$pconfig['auth_server_port'] = $wancfg['wireless']['auth_server_port'];

	$pconfig['auth_server_shared_secret'] = $wancfg['wireless']['auth_server_shared_secret'];

	if (is_array($wancfg['wireless']['wpa'])) {

		$pconfig['debug_mode'] = $wancfg['wireless']['wpa']['debug_mode'];

		$pconfig['macaddr_acl'] = $wancfg['wireless']['wpa']['macaddr_acl'];

		$pconfig['mac_acl_enable'] = isset($wancfg['wireless']['wpa']['mac_acl_enable']);

		$pconfig['auth_algs'] = $wancfg['wireless']['wpa']['auth_algs'];

		$pconfig['wpa_mode'] = $wancfg['wireless']['wpa']['wpa_mode'];

		$pconfig['wpa_key_mgmt'] = $wancfg['wireless']['wpa']['wpa_key_mgmt'];

		$pconfig['wpa_pairwise'] = $wancfg['wireless']['wpa']['wpa_pairwise'];

		$pconfig['wpa_group_rekey'] = $wancfg['wireless']['wpa']['wpa_group_rekey'];

		$pconfig['wpa_gmk_rekey'] = $wancfg['wireless']['wpa']['wpa_gmk_rekey'];

		$pconfig['wpa_strict_rekey'] = isset($wancfg['wireless']['wpa']['wpa_strict_rekey']);

		$pconfig['passphrase'] = $wancfg['wireless']['wpa']['passphrase'];

		$pconfig['ieee8021x'] = isset($wancfg['wireless']['wpa']['ieee8021x']['enable']);

		$pconfig['rsn_preauth'] = isset($wancfg['wireless']['wpa']['rsn_preauth']);

		$pconfig['ext_wpa_sw'] = $wancfg['wireless']['wpa']['ext_wpa_sw'];

		$pconfig['wpa_enable'] = isset($wancfg['wireless']['wpa']['enable']);

	}

	$pconfig['wep_enable'] = isset($wancfg['wireless']['wep']['enable']);

	$pconfig['mac_acl'] = $wancfg['wireless']['mac_acl'];

	if (is_array($wancfg['wireless']['wep']) && is_array($wancfg['wireless']['wep']['key'])) {

		$i = 1;

		foreach ($wancfg['wireless']['wep']['key'] as $wepkey) {

			$pconfig['key' . $i] = $wepkey['value'];

			if (isset($wepkey['txkey']))

				$pconfig['txkey'] = $i;

			$i++;

		}

		if (!isset($wepkey['txkey']))

			$pconfig['txkey'] = 1;

	}

}

if ($_POST['apply']) {

	unset($input_errors);

	if (!is_subsystem_dirty('interfaces'))

		$intput_errors[] = gettext("You have already applied your settings!");

	else {

		unlink_if_exists("{$g['tmp_path']}/config.cache");

		clear_subsystem_dirty('interfaces');

		if (file_exists("{$g['tmp_path']}/.interfaces.apply")) {

			$toapplylist = unserialize(file_get_contents("{$g['tmp_path']}/.interfaces.apply"));

			foreach ($toapplylist as $ifapply => $values) {

				if (isset($config['interfaces'][$ifapply]['enable'])) {

					/* check if any old addresses need purging */

					if(is_ipaddrv6($values['ipaddrv6'])) {

						$realif = get_real_interface("$ifapply");

						log_error("removing old v6 address {$values['ipaddrv6']} on {$realif}");

						mwexec("/sbin/ifconfig {$realif} inet6 {$values['ipaddrv6']} -alias");

					}

					interface_configure($ifapply, true);

				} else {

					interface_bring_down($ifapply);

				}

			}

		}

		/* restart snmp so that it binds to correct address */

		services_snmpd_configure();

		/* sync filter configuration */

		setup_gateways_monitor();

		clear_subsystem_dirty('staticroutes');

		filter_configure();

		enable_rrd_graphing();

	}

	@unlink("{$g['tmp_path']}/.interfaces.apply");

	header("Location: interfaces.php?if={$if}");

	exit;

} else if ($_POST && $_POST['enable'] != "yes") {

	unset($wancfg['enable']);

	if (isset($wancfg['wireless']))

		interface_sync_wireless_clones($wancfg, false);

	write_config("Interface {$_POST['descr']}({$if}) is now disabled.");

	mark_subsystem_dirty('interfaces');

	if (file_exists("{$g['tmp_path']}/.interfaces.apply")) {

		$toapplylist = unserialize(file_get_contents("{$g['tmp_path']}/.interfaces.apply"));

	} else {

		$toapplylist = array();

	}

	$toapplylist[$if] = array();

	/* we need to be able remove IP aliases for IPv6 */

	if(($old_wancfg['ipaddrv6'] != $wancfg['ipaddrv6']) && (is_ipaddrv6($old_wancfg['ipaddrv6']))) {

		$toapplylist[$if]['ipaddrv6'] = "{$old_wancfg['ipaddrv6']}";

	}

	file_put_contents("{$g['tmp_path']}/.interfaces.apply", serialize($toapplylist));

	header("Location: interfaces.php?if={$if}");

	exit;

} else if ($_POST) {

	unset($input_errors);

	$pconfig = $_POST;

	conf_mount_rw();

	/* filter out spaces from descriptions  */

	$_POST['descr'] = remove_bad_chars($_POST['descr']);

	/* okay first of all, cause we are just hiding the PPPoE HTML

	 * fields releated to PPPoE resets, we are going to unset $_POST

	 * vars, if the reset feature should not be used. Otherwise the

	 * data validation procedure below, may trigger a false error

	 * message.

	 */

	if (empty($_POST['pppoe-reset-type'])) {

		unset($_POST['pppoe_pr_type']);

		unset($_POST['pppoe_resethour']);

		unset($_POST['pppoe_resetminute']);

		unset($_POST['pppoe_resetdate']);

		unset($_POST['pppoe_pr_preset_val']);

	}

	/* description unique? */

	foreach ($ifdescrs as $ifent => $ifdescr) {

		if ($if != $ifent && $ifdescr == $_POST['descr']) {

			$input_errors[] = gettext("An interface with the specified description already exists.");

			break;

		}

	}

	/* input validation */

	if (isset($config['dhcpd']) && isset($config['dhcpd'][$if]['enable']) && (! preg_match("/^static/", $_POST['type'])))

		$input_errors[] = gettext("The DHCP Server is active on this interface and it can be used only with a static IP configuration. Please disable the DHCP Server service on this interface first, then change the interface configuration.");

	switch(strtolower($_POST['type'])) {

		case "staticv4":

			$reqdfields = explode(" ", "ipaddr subnet gateway");

			$reqdfieldsn = array(gettext("IPv4 address"),gettext("Subnet bit count"),gettext("Gateway"));

			do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

			break;

		case "staticv6":

			$reqdfields = explode(" ", "ipaddrv6 subnetv6 gatewayv6");

			$reqdfieldsn = array(gettext("IPv6 address"),gettext("Subnet bit count"),gettext("Gateway"));

			do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

			break;

		case "staticv4v6":

			$reqdfields = explode(" ", "ipaddr subnet gateway ipaddrv6 subnetv6 gatewayv6");

			$reqdfieldsn = array(gettext("IPv4 address"),gettext("Subnet bit count"),gettext("Gateway"),gettext("IPv6 address"),gettext("Subnet bit count"),gettext("Gateway"));

			do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

			break;

		case "none":

			if(is_array($config['virtualip']['vip'])) {

				foreach ($config['virtualip']['vip'] as $vip) {

					if ($vip['interface'] == $if)

						$input_errors[] = gettext("This interface is referenced by VIPs please delete those before setting the interface to 'none' configuration.");

				}

			}

		case "dhcp":

			break;

		case "dhcpv6":

			if (in_array($wancfg['ipaddrv6'], array("ppp", "pppoe", "pptp", "l2tp")))

				$input_errors[] = gettext("You have to reassign the interface to be able to configure as {$_POST['type']}.");

			break;

		case "ppp":

			$reqdfields = explode(" ", "port phone");

			$reqdfieldsn = array(gettext("Modem Port"),gettext("Phone Number"));

			do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

			break;

		case "pppoe":

			if ($_POST['pppoe_dialondemand']) {

				$reqdfields = explode(" ", "pppoe_username pppoe_password pppoe_dialondemand pppoe_idletimeout");

				$reqdfieldsn = array(gettext("PPPoE username"),gettext("PPPoE password"),gettext("Dial on demand"),gettext("Idle timeout value"));

			} else {

				$reqdfields = explode(" ", "pppoe_username pppoe_password");

				$reqdfieldsn = array(gettext("PPPoE username"),gettext("PPPoE password"));

			}

			do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

			break;

		case "pptp":

			if ($_POST['pptp_dialondemand']) {

				$reqdfields = explode(" ", "pptp_username pptp_password pptp_local pptp_subnet pptp_remote pptp_dialondemand pptp_idletimeout");

				$reqdfieldsn = array(gettext("PPTP username"),gettext("PPTP password"),gettext("PPTP local IP address"),gettext("PPTP subnet"),gettext("PPTP remote IP address"),gettext("Dial on demand"),gettext("Idle timeout value"));

			} else {

				$reqdfields = explode(" ", "pptp_username pptp_password pptp_local pptp_subnet pptp_remote");

				$reqdfieldsn = array(gettext("PPTP username"),gettext("PPTP password"),gettext("PPTP local IP address"),gettext("PPTP subnet"),gettext("PPTP remote IP address"));

			}

			do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

			break;

		case "l2tp":

			if ($_POST['pptp_dialondemand']) {

				$reqdfields = explode(" ", "pptp_username pptp_password pptp_remote pptp_dialondemand pptp_idletimeout");

				$reqdfieldsn = array(gettext("L2TP username"),gettext("L2TP password"),gettext("L2TP remote IP address"),gettext("Dial on demand"),gettext("Idle timeout value"));

			} else {

				$reqdfields = explode(" ", "pptp_username pptp_password pptp_remote");

				$reqdfieldsn = array(gettext("L2TP username"),gettext("L2TP password"),gettext("L2TP remote IP address"));

			}

			do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

			break;

	}

	/* normalize MAC addresses - lowercase and convert Windows-ized hyphenated MACs to colon delimited */

	$_POST['spoofmac'] = strtolower(str_replace("-", ":", $_POST['spoofmac']));

	if (($_POST['ipaddr'] && !is_ipaddr($_POST['ipaddr'])))

		$input_errors[] = gettext("A valid IPv4 address must be specified.");

	if (($_POST['ipaddrv6'] && !is_ipaddr($_POST['ipaddrv6'])))

		$input_errors[] = gettext("A valid IPv6 address must be specified.");

	if (($_POST['subnet'] && !is_numeric($_POST['subnet'])))

		$input_errors[] = gettext("A valid subnet bit count must be specified.");

	if (($_POST['subnetv6'] && !is_numeric($_POST['subnetv6'])))

		$input_errors[] = gettext("A valid subnet bit count must be specified.");

	if (($_POST['alias-address'] && !is_ipaddr($_POST['alias-address'])))

		$input_errors[] = gettext("A valid alias IP address must be specified.");

	if (($_POST['alias-subnet'] && !is_numeric($_POST['alias-subnet'])))

		$input_errors[] = gettext("A valid alias subnet bit count must be specified.");

	if (($_POST['gateway'] != "none") || ($_POST['gatewayv6'] != "none")) {

		$match = false;

		foreach($a_gateways as $gateway) {

			if(in_array($_POST['gateway'], $gateway)) {

				$match = true;

			}

		}

		foreach($a_gateways as $gateway) {

			if(in_array($_POST['gatewayv6'], $gateway)) {

				$match = true;

			}

		}

		if(!$match) {

			$input_errors[] = gettext("A valid gateway must be specified.");

		}

	}

	if (($_POST['provider'] && !is_domain($_POST['provider'])))

		$input_errors[] = gettext("The service name contains invalid characters.");

	if (($_POST['pppoe_idletimeout'] != "") && !is_numericint($_POST['pppoe_idletimeout']))

		$input_errors[] = gettext("The idle timeout value must be an integer.");

	if ($_POST['pppoe_resethour'] <> "" && !is_numericint($_POST['pppoe_resethour']) &&

		$_POST['pppoe_resethour'] >= 0 && $_POST['pppoe_resethour'] <=23)

			$input_errors[] = gettext("A valid PPPoE reset hour must be specified (0-23).");

	if ($_POST['pppoe_resetminute'] <> "" && !is_numericint($_POST['pppoe_resetminute']) &&

		$_POST['pppoe_resetminute'] >= 0 && $_POST['pppoe_resetminute'] <=59)

			$input_errors[] = gettext("A valid PPPoE reset minute must be specified (0-59).");

	if ($_POST['pppoe_resetdate'] <> "" && !is_numeric(str_replace("/", "", $_POST['pppoe_resetdate'])))

		$input_errors[] = gettext("A valid PPPoE reset date must be specified (mm/dd/yyyy).");

	if (($_POST['pptp_local'] && !is_ipaddr($_POST['pptp_local'])))

		$input_errors[] = gettext("A valid PPTP local IP address must be specified.");

	if (($_POST['pptp_subnet'] && !is_numeric($_POST['pptp_subnet'])))

		$input_errors[] = gettext("A valid PPTP subnet bit count must be specified.");

	if (($_POST['pptp_remote'] && !is_ipaddr($_POST['pptp_remote']) && !is_hostname($_POST['gateway'][$iface])))

		$input_errors[] = gettext("A valid PPTP remote IP address must be specified.");

	if (($_POST['pptp_idletimeout'] != "") && !is_numericint($_POST['pptp_idletimeout']))

		$input_errors[] = gettext("The idle timeout value must be an integer.");

	if (($_POST['spoofmac'] && !is_macaddr($_POST['spoofmac'])))

		$input_errors[] = gettext("A valid MAC address must be specified.");

	if ($_POST['mtu'] && ($_POST['mtu'] < 576))

		$input_errors[] = gettext("The MTU must be greater than 576 bytes.");

	if ($_POST['mss'] && ($_POST['mss'] < 576))

		$input_errors[] = gettext("The MSS must be greater than 576 bytes.");

	/* Wireless interface? */

	if (isset($wancfg['wireless'])) {

		$reqdfields = explode(" ", "mode ssid");

		$reqdfieldsn = array(gettext("Mode"),gettext("SSID"));

		do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);

		check_wireless_mode();

		/* loop through keys and enforce size */

		for ($i = 1; $i <= 4; $i++) {

			if ($_POST['key' . $i]) {

				/* 64 bit */

				if (strlen($_POST['key' . $i]) == 5)

					continue;

				if (strlen($_POST['key' . $i]) == 10) {

					/* hex key */

					if (stristr($_POST['key' . $i], "0x") == false) {

						$_POST['key' . $i] = "0x" . $_POST['key' . $i];

					}

					continue;

				}

				if (strlen($_POST['key' . $i]) == 12) {

					/* hex key */

					if(stristr($_POST['key' . $i], "0x") == false) {

					$_POST['key' . $i] = "0x" . $_POST['key' . $i];

					}

					continue;

				}

				/* 128 bit */

				if (strlen($_POST['key' . $i]) == 13)

					continue;

				if (strlen($_POST['key' . $i]) == 26) {

					/* hex key */

					if (stristr($_POST['key' . $i], "0x") == false)

						$_POST['key' . $i] = "0x" . $_POST['key' . $i];

					continue;

				}

				if(strlen($_POST['key' . $i]) == 28)

					continue;

				$input_errors[] =  gettext("Invalid WEP key size.   Sizes should be 40 (64) bit keys or 104 (128) bit.");

				break;

			}

		}

		if ($_POST['passphrase']) {

                	$passlen = strlen($_POST['passphrase']);

                	if ($passlen < 8 || $passlen > 64)

                        	$input_errors[] = gettext("The length of the passphrase should be between 8 and 63 characters.");

		}

	}

	if (!$input_errors) {

		if ($wancfg['type'] != $_POST['type']) {

			if (in_array($wancfg['ipaddr'], array("ppp", "pppoe", "pptp", "l2tp"))) {

				$wancfg['if'] = $a_ppps[$pppid]['ports'];

				unset($a_ppps[$pppid]);

			} else if ($wancfg['type'] == "dhcp") {

				$pid = find_dhclient_process($realif);

				if($pid)

					posix_kill($pid, SIGTERM);

			}

		}

		$ppp = array();

		if ($wancfg['ipaddr'] != "ppp")

			unset($wancfg['ipaddr']);

		if ($wancfg['ipaddrv6'] != "ppp")

			unset($wancfg['ipaddrv6']);

		unset($wancfg['subnet']);

		unset($wancfg['gateway']);

		unset($wancfg['subnetv6']);

		unset($wancfg['gatewayv6']);

		unset($wancfg['dhcphostname']);

		unset($wancfg['pppoe_username']);

		unset($wancfg['pppoe_password']);

		unset($wancfg['pptp_username']);

		unset($wancfg['pptp_password']);

		unset($wancfg['provider']);

		unset($wancfg['ondemand']);

		unset($wancfg['timeout']);

		if (isset($wancfg['pppoe']['pppoe-reset-type']))

			unset($wancfg['pppoe']['pppoe-reset-type']);

		unset($wancfg['local']);

		unset($wancfg['remote']);

		unset($a_ppps[$pppid]['apn']);

		unset($a_ppps[$pppid]['phone']);

		unset($a_ppps[$pppid]['localip']);

		unset($a_ppps[$pppid]['subnet']);

		unset($a_ppps[$pppid]['gateway']);

		unset($a_ppps[$pppid]['pppoe-reset-type']);

		unset($a_ppps[$pppid]['provider']);

		$wancfg['descr'] = remove_bad_chars($_POST['descr']);

		$wancfg['enable'] =  $_POST['enable']  == "yes" ? true : false;

		/* for dynamic interfaces we tack a gateway item onto the array to prevent system

		 * log messages from appearing. They can also manually add these items */

		/* 1st added gateway gets a default bit */

		if(!empty($a_gateways)) {

			$gateway_item = array();

			/* check for duplicates */

			$skip = false;

			foreach($a_gateways as $item) {

				if(($item['interface'] == "$if") && ($item['gateway'] == "dynamic")) {

					$skip = true;

				}

			}

			if($skip == false) {

				$gateway_item['gateway'] = "dynamic";

				$gateway_item['descr'] = gettext("Interface") . $if . gettext("dynamic gateway");

				$gateway_item['name'] = "GW_" . strtoupper($if);

				$gateway_item['interface'] = "{$if}";

			} else {

				unset($gateway_item);

			}

		}

		switch($_POST['type']) {

			case "staticv4":

				$wancfg['ipaddr'] = $_POST['ipaddr'];

				$wancfg['subnet'] = $_POST['subnet'];

				if ($_POST['gateway'] != "none") {

					$wancfg['gateway'] = $_POST['gateway'];

				}

				break;

			case "staticv6":

				$wancfg['ipaddrv6'] = $_POST['ipaddrv6'];

				$wancfg['subnetv6'] = $_POST['subnetv6'];

				if ($_POST['gatewayv6'] != "none") {

					$wancfg['gatewayv6'] = $_POST['gatewayv6'];

				}

				break;

			case "staticv4v6":

				$wancfg['ipaddr'] = $_POST['ipaddr'];

				$wancfg['subnet'] = $_POST['subnet'];

				if ($_POST['gateway'] != "none") {