pfSense

<?php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2013-2016 Electric Sheep Fencing

 * All rights reserved.

 *

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

##|+PRIV

##|*IDENT=page-status-openvpn

##|*MATCH=status_openvpn.php*

##|-PRIV

$sk_servers = openvpn_get_active_servers("p2p");

$clients = openvpn_get_active_clients();

	if ($_POST['action'] == "kill") {

		$remipp    = $_POST['remipp'];

		$client_id = $_POST['client_id'];

		$error     = false;

		/* Validate remote IP address and port. */

		if (!is_ipaddrwithport($remipp)) {

			$error = true;

		}

		/* Validate submitted server ID */

		$found_server = false;

		foreach ($servers as $server) {

			if ($port == $server['mgmt']) {

				$found_server = true;

			} else {

				continue;

			}

		}

		if (!$error && $found_server) {

		} else {

		exit;

	}

}

	if (($_POST['action'] == "showrule") && is_numeric($_POST['vpnid']) &&

	    !preg_match("/[^a-zA-Z0-9\.\-_]/", $_POST['username']) && is_port($_POST['port'])) {

		$rulesfile = "{$g['tmp_path']}/ovpn_ovpns{$_POST['vpnid']}_{$_POST['username']}_{$_POST['port']}.rules";

		if (file_exists($rulesfile)) {

			$rule_text = base64_encode(file_get_contents($rulesfile));

			echo $rule_text;

		}

		exit;

	}

}

include("head.inc"); ?>

<form action="status_openvpn.php" method="get" name="iform">

<script type="text/javascript">

			$('a[id="i:' + mport + ":" + remipp + '"]').first().children('i').removeClass().addClass('fa-solid fa-cog fa-spin text-danger');

		} else {

			$('a[id="i:' + mport + ":" + remipp + '"]').last().children('i').removeClass().addClass('fa-solid fa-cog fa-spin text-danger');

			{

				type: "post",

				data: {

					action:           "kill",

					port:		  mport,

					remipp:		  remipp,

					client_id:	  client_id

				},

				complete: killComplete

			}

	}

	function killComplete(req) {

		var values = req.responseText.split("|");

		}

	}

	function showRuleContents(vpnid, username, port) {

			$('#rulesviewer_text').text("...Loading...");

			$('#rulesviewer').modal('show');

			$.ajax(

				"<?=$_SERVER['SCRIPT_NAME'];?>",

				{

					type: 'post',

					data: {

						vpnid:           vpnid,

						username:     username,

						port:             port,

						action:      'showrule'

					},

					complete: ruleComplete

				}

			);

	}

	function ruleComplete(req) {

			$('#rulesviewer_text').text(atob(req.responseText));

			$('#rulesviewer_text').attr('readonly', true);

	}

	$i = 0;

	foreach ($servers as $server):

?>

					<tr>

						<th><?=gettext("Common Name")?></th>

						<th><?=gettext("Real Address")?></th>

						<th><?=gettext("Bytes Received")?></th>

				</thead>

				<tbody>

							foreach ($server['conns'] as $conn):

								$rulesfile = "{$g['tmp_path']}/ovpn_ovpns{$server['vpnid']}_{$conn['user_name']}_{$remote_port}.rules";

							<?=$conn['common_name'];?>

					<?php if (!empty($conn['common_name']) && !empty($conn['user_name']) && ($conn['user_name'] != "UNDEF")): ?>

							<br />

					<?php endif; ?>

					<?php if (!empty($conn['user_name']) && ($conn['user_name'] != "UNDEF")): ?>

							<?=$conn['user_name'];?>

					<?php endif; ?>

						</td>

							<?=$conn['virtual_addr'];?>

					<?php if (!empty($conn['virtual_addr']) && !empty($conn['virtual_addr6'])): ?>

							<br />

					<?php endif; ?>

							<?=$conn['virtual_addr6'];?>

						</td>

						<td data-value="<?=trim($conn['bytes_recv'])?>"><?=format_bytes($conn['bytes_recv']);?></td>

					<?php if (file_exists($rulesfile)): ?>

							<a

							onclick="showRuleContents('<?=$server['vpnid'];?>', '<?=$conn['user_name'];?>', '<?=$remote_port;?>');" style="cursor:pointer;"

							   title="<?php echo gettext("Show RADIUS ACL generated ruleset"); ?>">

					<?php endif; ?>

							<a

							   onclick="killClient('<?=$server['mgmt'];?>', '<?=$conn['remote_host'];?>', '<?=$conn['client_id'];?>');" style="cursor:pointer;"

							   id="<?php echo "i:{$server['mgmt']}:{$conn['remote_host']}"; ?>"

							   title="<?php echo sprintf(gettext("Halt client connection from %s"), $conn['remote_host']); ?>">

					</tr>

							endforeach;

					?>

				<tfoot>

					<tr>

							<?php $ssvc = find_service_by_openvpn_vpnid($server['vpnid']); ?>

							<?= get_service_status_icon($ssvc, false, true, false, "service_state"); ?>

							<?= get_service_control_links($ssvc); ?>

				</tfoot>

			</table>

		</div>

</div>

		if (is_array($server['routes']) && count($server['routes'])):

?>

	</button>

	- <?= gettext("Display OpenVPN's internal routing table for this server.") ?>

	<br /><br />

		<div class="panel-body table-responsive">

					<tr>

						<th><?=gettext("Common Name"); ?></th>

						<th><?=gettext("Real Address"); ?></th>

						<th><?=gettext("Target Network"); ?></th>

						<th><?=gettext("Last Used"); ?></th>

					</tr>

			foreach ($server['routes'] as $conn):

?>

						<td><?=$conn['common_name'];?></td>

						<td><?=$conn['remote_host'];?></td>

						<td><?=$conn['virtual_addr'];?></td>

						<td><?=$conn['last_time'];?></td>

					</tr>

			endforeach;

?>

				<tfoot>

					<tr>

				</tfoot>

			</table>

		</div>

</div>

		endif;

?>

		$i++;

	endforeach;

?>

	if (!empty($sk_servers)) {

?>

	<div class="panel-heading"><h2 class="panel-title"><?=gettext("Peer to Peer Server Instance Statistics"); ?></h2></div>

		<div class="panel-body table-responsive">

						<th><?=gettext("Bytes Received"); ?></th>

					</tr>

				</thead>

				<tbody>

		foreach ($sk_servers as $sk_server):

?>

							ovpns<?=$sk_server['vpnid'];?><br/>

							<?=htmlspecialchars($sk_server['name']);?>

						</td>

						<td><?=$sk_server['connect_time'];?></td>

							<?=$sk_server['virtual_addr'];?>

					<?php if (!empty($sk_server['virtual_addr']) && !empty($sk_server['virtual_addr6'])): ?>

							<br />

					<?php endif; ?>

							<?=$sk_server['virtual_addr6'];?>

						</td>

						<td data-value="<?=trim($sk_server['bytes_recv'])?>"><?=format_bytes($sk_server['bytes_recv']);?></td>

							<?= get_service_status_icon($ssvc, false, true); ?>

							<?= get_service_control_links($ssvc, true); ?>

					</tr>

		endforeach;

?>

</div>

<?php

?>

	if (!empty($clients)) {

?>

	<div class="panel-heading"><h2 class="panel-title"><?=gettext("Client Instance Statistics"); ?></h2></div>

		<div class="panel-body table-responsive">

						<th><?=gettext("Status"); ?></th>

						<th><?=gettext("Bytes Received"); ?></th>

					</tr>

				</thead>

				<tbody>

		foreach ($clients as $client):

?>

							ovpnc<?= $client['vpnid'] ?><br/>

							<?=htmlspecialchars($client['name']);?>

						</td>

						<td><?=$client['connect_time'];?></td>

					<?php if (empty($client['local_host']) && empty($client['local_port'])): ?>

							(pending)

					<?php else: ?>

							<?=$client['local_host'];?>:<?=$client['local_port'];?>

					<?php endif; ?>

						</td>

							<?=$client['virtual_addr'];?>

					<?php if (!empty($client['virtual_addr']) && !empty($client['virtual_addr6'])): ?>

							<br />

					<?php endif; ?>

							<?=$client['virtual_addr6'];?>

						</td>

					<?php if (empty($client['remote_host']) && empty($client['remote_port'])): ?>

							(pending)

					<?php else: ?>

							<?=$client['remote_host'];?>:<?=$client['remote_port'];?>

					<?php endif; ?>

						</td>

						<td data-value="<?=trim($client['bytes_recv'])?>"><?=format_bytes($client['bytes_recv']);?></td>

							<?= get_service_status_icon($ssvc, false, true); ?>

							<?= get_service_control_links($ssvc, true); ?>

					</tr>

		endforeach;

?>

if ($DisplayNote) {

// Create a Modal object to display RADIUS ACL generated ruleset

$form = new Form(FALSE);

$modal = new Modal('RADIUS ACL Generated Ruleset', 'rulesviewer', 'large', 'Close');

$modal->addInput(new Form_Textarea (

	'rulesviewer_text',

	null,

	'...Loading...'

))->removeClass('form-control')->addClass('row-fluid col-sm-11')->setAttribute('rows', '10')->setAttribute('wrap', 'soft');

$form->add($modal);

print($form);

	document.getElementById(buttonid).innerHTML='';

	aodiv = document.getElementById(id);

	aodiv.style.display = "block";

}

<?php include("foot.inc"); ?>