Project

General

Profile

Download (15.9 KB) Statistics
| Branch: | Tag: | Revision:
1 df81417f Matthew Grooms
<?php
2
/* $Id$ */
3
/*
4
	system_advanced_misc.php
5
	part of pfSense
6
	Copyright (C) 2005-2007 Scott Ullrich
7
8
	Copyright (C) 2008 Shrew Soft Inc
9
10
	originally part of m0n0wall (http://m0n0.ch/wall)
11
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
12
	All rights reserved.
13
14
	Redistribution and use in source and binary forms, with or without
15
	modification, are permitted provided that the following conditions are met:
16
17
	1. Redistributions of source code must retain the above copyright notice,
18
	   this list of conditions and the following disclaimer.
19
20
	2. Redistributions in binary form must reproduce the above copyright
21
	   notice, this list of conditions and the following disclaimer in the
22
	   documentation and/or other materials provided with the distribution.
23
24
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
25
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
26
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
27
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
28
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
30
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
31
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
32
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
33
	POSSIBILITY OF SUCH DAMAGE.
34
*/
35 1d333258 Scott Ullrich
/*
36
	pfSense_MODULE:	system
37
*/
38 df81417f Matthew Grooms
39
##|+PRIV
40
##|*IDENT=page-system-advanced-misc
41
##|*NAME=System: Advanced: Miscellaneous page
42
##|*DESCR=Allow access to the 'System: Advanced: Miscellaneous' page.
43
##|*MATCH=system_advanced.php*
44
##|-PRIV
45
46
require("guiconfig.inc");
47 7a927e67 Scott Ullrich
require_once("functions.inc");
48
require_once("filter.inc");
49
require_once("shaper.inc");
50 7b2fdac4 jim-p
require_once("vpn.inc");
51 df81417f Matthew Grooms
52
$pconfig['harddiskstandby'] = $config['system']['harddiskstandby'];
53
$pconfig['lb_use_sticky'] = isset($config['system']['lb_use_sticky']);
54
$pconfig['preferoldsa_enable'] = isset($config['ipsec']['preferoldsa']);
55 6441fa9a Ermal
$pconfig['maxmss_enable'] = isset($config['system']['maxmss_enable']);
56
$pconfig['maxmss'] = $config['system']['maxmss'];
57 8e9fa41d Scott Ullrich
$pconfig['powerd_enable'] = isset($config['system']['powerd_enable']);
58 09f18f59 jim-p
$pconfig['glxsb_enable'] = isset($config['system']['glxsb_enable']);
59 f204df7d Ermal Lu?i
$pconfig['schedule_states'] = isset($config['system']['schedule_states']);
60 b0cf10bf Ermal
$pconfig['kill_states'] = isset($config['system']['kill_states']);
61 df81417f Matthew Grooms
62
if ($_POST) {
63
64
    unset($input_errors);
65
    $pconfig = $_POST;
66
67
	ob_flush();
68
	flush();
69
70
	if (!$input_errors) {
71
72
		if($_POST['harddiskstandby'] <> "") {
73
			$config['system']['harddiskstandby'] = $_POST['harddiskstandby'];
74
			system_set_harddisk_standby();
75
		} else
76
			unset($config['system']['harddiskstandby']);
77
78
		if($_POST['lb_use_sticky'] == "yes")
79
			$config['system']['lb_use_sticky'] = true;
80
		else
81
			unset($config['system']['lb_use_sticky']);
82
83 f204df7d Ermal Lu?i
		if($_POST['preferoldsa_enable'] == "yes")
84 7b2fdac4 jim-p
			$config['ipsec']['preferoldsa'] = true;
85
		else
86
			unset($config['ipsec']['preferoldsa']);
87 f204df7d Ermal Lu?i
88 6441fa9a Ermal
		if($_POST['maxmss_enable'] == "yes") {
89
                        $config['system']['maxmss_enable'] = true;
90
			$config['system']['maxmss'] = $_POST['maxmss'];
91
                } else {
92
                        unset($config['system']['maxmss_enable']);
93
                        unset($config['system']['maxmss']);
94
		}
95
96 f204df7d Ermal Lu?i
		if($_POST['powerd_enable'] == "yes")
97
                        $config['system']['powerd_enable'] = true;
98
                else
99
                        unset($config['system']['powerd_enable']);
100
101
		if($_POST['glxsb_enable'] == "yes")
102
                        $config['system']['glxsb_enable'] = true;
103
                else
104
                        unset($config['system']['glxsb_enable']);
105
106
		if($_POST['schedule_states'] == "yes")
107
                        $config['system']['schedule_states'] = true;
108
                else
109
                        unset($config['system']['schedule_states']);
110 df81417f Matthew Grooms
111 b0cf10bf Ermal
		if($_POST['kill_states'] == "yes")
112
                        $config['system']['kill_states'] = true;
113
                else
114
                        unset($config['system']['kill_states']);
115
116 df81417f Matthew Grooms
		write_config();
117
118
		$retval = 0;
119
		$retval = filter_configure();
120
		if(stristr($retval, "error") <> true)
121 1eacdc8a Carlos Eduardo Ramos
		    $savemsg = get_std_save_message(gettext($retval));
122 df81417f Matthew Grooms
		else
123 1eacdc8a Carlos Eduardo Ramos
		    $savemsg = gettext($retval);
124 8e9fa41d Scott Ullrich
		
125
		activate_powerd();
126 09f18f59 jim-p
		load_glxsb();
127 7b2fdac4 jim-p
		vpn_ipsec_configure_preferoldsa();
128 df81417f Matthew Grooms
	}
129
}
130
131 e51ed1e9 Vinicius Coque
$pgtitle = array(gettext("System"),gettext("Advanced: Miscellaneous"));
132 df81417f Matthew Grooms
include("head.inc");
133
134
?>
135
136
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
137
<?php
138
	include("fbegin.inc");
139
	if ($input_errors)
140
		print_input_errors($input_errors);
141
	if ($savemsg)
142
		print_info_box($savemsg);
143
?>
144 6441fa9a Ermal
<script type="text/javascript" >
145
function maxmss_checked(obj) {
146
	if (obj.checked)
147
		$('maxmss').enable();
148
	else
149
		$('maxmss').disable();
150
}
151
</script>
152 ab3c8553 Matthew Grooms
	<form action="system_advanced_misc.php" method="post" name="iform" id="iform">
153
		<table width="100%" border="0" cellpadding="0" cellspacing="0">
154
			<tr>
155
				<td>
156
					<?php
157
						$tab_array = array();
158 e51ed1e9 Vinicius Coque
						$tab_array[] = array(gettext("Admin Access"), false, "system_advanced_admin.php");
159
						$tab_array[] = array(gettext("Firewall / NAT"), false, "system_advanced_firewall.php");
160
						$tab_array[] = array(gettext("Networking"), false, "system_advanced_network.php");
161
						$tab_array[] = array(gettext("Miscellaneous"), true, "system_advanced_misc.php");
162
						$tab_array[] = array(gettext("System Tunables"), false, "system_advanced_sysctl.php");
163
						$tab_array[] = array(gettext("Notifications"), false, "system_advanced_notifications.php");
164 ab3c8553 Matthew Grooms
						display_top_tabs($tab_array);
165
					?>
166
				</td>
167
			</tr>
168
			<tr>
169 2ff19bfd Matthew Grooms
				<td id="mainarea">
170
					<div class="tabcont">
171
						<span class="vexpl">
172
							<span class="red">
173 ea53e38f Renato Botelho
								<strong><?=gettext("NOTE:"); ?>&nbsp</strong>
174 2ff19bfd Matthew Grooms
							</span>
175 1eacdc8a Carlos Eduardo Ramos
							<?=gettext("The options on this page are intended for use by advanced users only."); ?>
176 2ff19bfd Matthew Grooms
							<br/>
177
						</span>
178
						<br/>
179
						<table width="100%" border="0" cellpadding="6" cellspacing="0">
180 ab3c8553 Matthew Grooms
							<tr>
181 1eacdc8a Carlos Eduardo Ramos
								<td colspan="2" valign="top" class="listtopic"><?=gettext("Load Balancing"); ?></td>
182 ab3c8553 Matthew Grooms
							</tr>
183
							<tr>
184 1eacdc8a Carlos Eduardo Ramos
								<td width="22%" valign="top" class="vncell"><?=gettext("Load Balancing"); ?></td>
185 ab3c8553 Matthew Grooms
								<td width="78%" class="vtable">
186
									<input name="lb_use_sticky" type="checkbox" id="lb_use_sticky" value="yes" <?php if ($pconfig['lb_use_sticky']) echo "checked=\"checked\""; ?> />
187 1eacdc8a Carlos Eduardo Ramos
									<strong><?=gettext("Use sticky connections"); ?></strong><br/>
188 f0d1af93 Carlos Eduardo Ramos
									<?=gettext("Successive connections will be redirected to the servers " .
189
									"in a round-robin manner with connections from the same " .
190
									"source being sent to the same web server. This 'sticky " .
191
									"connection' will exist as long as there are states that " .
192
									"refer to this connection. Once the states expire, so will " .
193
									"the sticky connection. Further connections from that host " .
194
									"will be redirected to the next web server in the round " .
195
									"robin."); ?>
196 ab3c8553 Matthew Grooms
								</td>
197
							</tr>
198 c912fe28 Scott Ullrich
							<tr>
199
								<td colspan="2" class="list" height="12">&nbsp;</td>
200
							</tr>
201 ab3c8553 Matthew Grooms
							<tr>
202 1eacdc8a Carlos Eduardo Ramos
								<td colspan="2" valign="top" class="listtopic"><?=gettext("Power savings"); ?></td>
203 ab3c8553 Matthew Grooms
							</tr>
204 8e9fa41d Scott Ullrich
							<tr>
205 1eacdc8a Carlos Eduardo Ramos
								<td width="22%" valign="top" class="vncell"><?=gettext("PowerD"); ?></td>
206 8e9fa41d Scott Ullrich
								<td width="78%" class="vtable">
207
									<input name="powerd_enable" type="checkbox" id="powerd_enable" value="yes" <?php if ($pconfig['powerd_enable']) echo "checked"; ?> />
208 1eacdc8a Carlos Eduardo Ramos
									<strong><?=gettext("Use PowerD"); ?></strong><br/>
209 8e9fa41d Scott Ullrich
									<br />
210 f0d1af93 Carlos Eduardo Ramos
								     <?=gettext("The powerd utility monitors the system state and sets various power control " .
211 d0a00ec9 Vinicius Coque
								     "options accordingly. It offers three modes (maximum, minimum, and " .
212 f0d1af93 Carlos Eduardo Ramos
								     "adaptive) that can be individually selected while on AC power or batteries. " . 
213
								     "The modes maximum, minimum, and adaptive may be abbreviated max, " .
214
								     "min, adp.   Maximum mode chooses the highest performance values.  Minimum " .
215
								     "mode selects the lowest performance values to get the most power savings. " .
216
								     "Adaptive mode attempts to strike a balance by degrading performance when " .
217
								     "the system appears idle and increasing it when the system is busy.  It " .
218
								     "offers a good balance between a small performance loss for greatly " .
219 7e1cf139 jim-p
								     "increased power savings.  The default mode for {$g['product_name']} is adaptive."); ?>
220 8e9fa41d Scott Ullrich
								</td>
221
							</tr>
222
							<tr>
223
								<td colspan="2" class="list" height="12">&nbsp;</td>
224
							</tr>
225 09f18f59 jim-p
							<tr>
226 1eacdc8a Carlos Eduardo Ramos
								<td colspan="2" valign="top" class="listtopic"><?=gettext("glxsb Crypto Acceleration"); ?></td>
227 09f18f59 jim-p
							</tr>
228
							<tr>
229 1eacdc8a Carlos Eduardo Ramos
								<td width="22%" valign="top" class="vncell"><?=gettext("glxsb"); ?></td>
230 09f18f59 jim-p
								<td width="78%" class="vtable">
231
									<input name="glxsb_enable" type="checkbox" id="glxsb_enable" value="yes" <?php if ($pconfig['glxsb_enable']) echo "checked"; ?> />
232 1eacdc8a Carlos Eduardo Ramos
									<strong><?=gettext("Use glxsb"); ?></strong><br/>
233 09f18f59 jim-p
									<br />
234 f0d1af93 Carlos Eduardo Ramos
								     <?=gettext("The AMD Geode LX Security Block will accelerate some cryptographic functions " .
235
								     "on systems which have the chip. Do not enable this option if you have a " .
236
								     "Hifn cryptographic acceleration card, as this will take precedence and the " .
237
								     "Hifn card will not be used. Acceleration should be automatic for IPsec " .
238
								     "when using Rijndael (AES). OpenVPN should be set for AES-128-CBC."); ?>
239 09f18f59 jim-p
								     <br/><br/>
240 f0d1af93 Carlos Eduardo Ramos
								     <?=gettext("If you do not have a glxsb chip in your system, this option will have no " .
241
								     "effect. To unload the module, uncheck this option and then reboot."); ?>
242 09f18f59 jim-p
								</td>
243
							</tr>
244
							<tr>
245
								<td colspan="2" class="list" height="12">&nbsp;</td>
246
							</tr>
247 ab3c8553 Matthew Grooms
							<tr>
248 1eacdc8a Carlos Eduardo Ramos
								<td colspan="2" valign="top" class="listtopic"><?=gettext("IP Security"); ?></td>
249 ab3c8553 Matthew Grooms
							</tr>
250
							<tr>
251 1eacdc8a Carlos Eduardo Ramos
								<td width="22%" valign="top" class="vncell"><?=gettext("Security Assocications"); ?></td>
252 ab3c8553 Matthew Grooms
								<td width="78%" class="vtable">
253 7b2fdac4 jim-p
									<input name="preferoldsa_enable" type="checkbox" id="preferoldsa_enable" value="yes" <?php if ($pconfig['preferoldsa_enable']) echo "checked"; ?> />
254 1eacdc8a Carlos Eduardo Ramos
									<strong><?=gettext("Prefer older IPsec SAs"); ?></strong>
255 ab3c8553 Matthew Grooms
									<br />
256 f0d1af93 Carlos Eduardo Ramos
									<?=gettext("By default, if several SAs match, the newest one is " .
257
									"preferred if it's at least 30 seconds old. Select this " .
258
									"option to always prefer old SAs over new ones."); ?>
259 ab3c8553 Matthew Grooms
								</td>
260
							</tr>
261 6441fa9a Ermal
							<tr>
262
								<td width="22%" valign="top" class="vncell"><?=gettext("Maximum MSS"); ?></td>
263
								<td width="78%" class="vtable">
264
									<input name="maxmss_enable" type="checkbox" id="maxmss_enable" value="yes" <?php if ($pconfig['maxmss_enable'] == true) echo "checked"; ?> onClick="maxmss_checked(this)" />
265 f7ec62f8 Chris Buechler
									<strong><?=gettext("Enable MSS clamping on VPN traffic"); ?></strong>
266 6441fa9a Ermal
									<br />
267 f7ec62f8 Chris Buechler
									<input name="maxmss" id="maxmss" value="<?php if ($pconfig['maxmss'] <> "") echo $pconfig['maxmss']; else "1400"; ?>" class="formfld unknown" <?php if ($pconfig['maxmss_enable'] == false) echo "disabled"; ?>>
268 6441fa9a Ermal
									<br />
269 f7ec62f8 Chris Buechler
									<?=gettext("Enable MSS clamping on TCP flows over VPN. " .
270
									"This helps overcome problems with PMTUD on IPsec VPN links. If left blank, the default value is 1400 bytes. "); ?>
271 6441fa9a Ermal
								</td>
272
							</tr>
273 f204df7d Ermal Lu?i
                                                        <tr>
274
                                                                <td colspan="2" class="list" height="12">&nbsp;</td>
275
                                                        </tr>
276
                                                        <tr>
277 1eacdc8a Carlos Eduardo Ramos
                                                                <td colspan="2" valign="top" class="listtopic"><?=gettext("Schedules"); ?></td>
278 f204df7d Ermal Lu?i
                                                        </tr>
279
                                                        <tr>
280 1eacdc8a Carlos Eduardo Ramos
                                                                <td width="22%" valign="top" class="vncell"><?=gettext("Schedule States"); ?></td>
281 f204df7d Ermal Lu?i
                                                                <td width="78%" class="vtable">
282
                                                                        <input name="schedule_states" type="checkbox" id="schedule_states" value="yes" <?php if ($pconfig['schedule_states']) echo "checked"; ?> />
283
                                                                        <br />
284 4d473c89 Vinicius Coque
									<?=gettext("By default schedules clear the states of existing connections when expiry time has come. ".
285
									"This option allows to override this setting by not clearing states for existing connections."); ?>
286 b0cf10bf Ermal
                                                                </td>
287
                                                        </tr>
288
                                                        <tr>
289
                                                                <td colspan="2" class="list" height="12">&nbsp;</td>
290
                                                        </tr>
291
                                                        <tr>
292
                                                                <td colspan="2" valign="top" class="listtopic"><?=gettext("Gateway Monitoring"); ?></td>
293
                                                        </tr>
294
                                                        <tr>
295
                                                                <td width="22%" valign="top" class="vncell"><?=gettext("States"); ?></td>
296
                                                                <td width="78%" class="vtable">
297
                                                                        <input name="kill_states" type="checkbox" id="kill_states" value="yes" <?php if ($pconfig['kill_states']) echo "checked"; ?> />
298
                                                                        <br />
299
									<?=gettext("By default the monitoring process will flush states for a gateway that goes down. ".
300
									"This option allows to override this setting by not clearing states for existing connections."); ?>
301 f204df7d Ermal Lu?i
                                                                </td>
302
                                                        </tr>
303 ab3c8553 Matthew Grooms
							<tr>
304
								<td colspan="2" class="list" height="12">&nbsp;</td>
305
							</tr>
306
							<?php if($g['platform'] == "pfSenseDISABLED"): ?>
307
							<tr>
308 1eacdc8a Carlos Eduardo Ramos
								<td colspan="2" valign="top" class="listtopic"><?=gettext("Hardware Settings"); ?></td>
309 ab3c8553 Matthew Grooms
							</tr>
310
							<tr>
311 1eacdc8a Carlos Eduardo Ramos
								<td width="22%" valign="top" class="vncell"><?=gettext("Hard disk standby time "); ?></td>
312 ab3c8553 Matthew Grooms
								<td width="78%" class="vtable">
313
									<select name="harddiskstandby" class="formselect">
314
										<?php
315
										 	## Values from ATA-2 http://www.t13.org/project/d0948r3-ATA-2.pdf (Page 66)
316
											$sbvals = explode(" ", "0.5,6 1,12 2,24 3,36 4,48 5,60 7.5,90 10,120 15,180 20,240 30,241 60,242");
317
										?>
318 1eacdc8a Carlos Eduardo Ramos
										<option value="" <?php if(!$pconfig['harddiskstandby']) echo('selected');?>><?=gettext("Always on"); ?></option>
319 ab3c8553 Matthew Grooms
										<?php
320
											foreach ($sbvals as $sbval):
321
												list($min,$val) = explode(",", $sbval);
322
										?>
323 1eacdc8a Carlos Eduardo Ramos
										<option value="<?=$val;?>" <?php if($pconfig['harddiskstandby'] == $val) echo('selected');?>><?=$min;?> <?=gettext("minutes"); ?></option>
324 ab3c8553 Matthew Grooms
										<?php endforeach; ?>
325
									</select>
326
									<br/>
327 4d473c89 Vinicius Coque
									<?=gettext("Puts the hard disk into standby mode when the selected amount of time after the last ".
328
									"access has elapsed."); ?> <em><?=gettext("Do not set this for CF cards."); ?></em>
329 ab3c8553 Matthew Grooms
								</td>
330
							</tr>
331
							<tr>
332
								<td colspan="2" class="list" height="12">&nbsp;</td>
333
							</tr>
334
							<?php endif; ?>
335
336
							<tr>
337
								<td width="22%" valign="top">&nbsp;</td>
338
								<td width="78%">
339 267c28ab Vinicius Coque
									<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Save");?>" />
340 ab3c8553 Matthew Grooms
								</td>
341
							</tr>
342
						</table>
343
					</div>
344
				</td>
345
			</tr>
346
		</table>
347
	</form>
348 df81417f Matthew Grooms
349
<?php include("fend.inc"); ?>
350
</body>
351
</html>