pfSense

<?php

/*

	services.inc

	part of m0n0wall (http://m0n0.ch/wall)

	All rights reserved.

	modification, are permitted provided that the following conditions are met:

	   this list of conditions and the following disclaimer.

	   notice, this list of conditions and the following disclaimer in the

	   documentation and/or other materials provided with the distribution.

	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY

	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,

	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

	POSSIBILITY OF SUCH DAMAGE.

*/

/* include all configuration functions */

require_once("functions.inc");

function services_dhcpd_configure() {

	global $config, $g;

	killbypid("{$g['varrun_path']}/dhcpd.pid");

	$dhcpdcfg = $config['dhcpd'];

	$dhcpdenable = false;

	foreach ($dhcpdcfg as $dhcpif => $dhcpifconf) {

		if (isset($dhcpifconf['enable']) &&

			(($dhcpif == "lan") ||

			(isset($config['interfaces'][$dhcpif]['enable']) &&

			$config['interfaces'][$dhcpif]['if'] && (!$config['interfaces'][$dhcpif]['bridge']))))

			$dhcpdenable = true;

	}

		return 0;

		echo "Starting DHCP service... ";

	else

		sleep(1);

	$fd = fopen("{$g['varetc_path']}/dhcpd.conf", "w");

	if (!$fd) {

		printf("Error: cannot open dhcpd.conf in services_dhcpd_configure().\n");

		return 1;

	}

option domain-name "{$syscfg['domain']}";

default-lease-time 7200;

max-lease-time 86400;

authoritative;

log-facility local7;

ddns-update-style none;

EOD;

	foreach ($dhcpdcfg as $dhcpif => $dhcpifconf) {

			(($dhcpif != "lan") &&

			(!isset($ifcfg['enable']) || !$ifcfg['if'] || $ifcfg['bridge'])))

			continue;

		$subnetmask = gen_subnet_mask($ifcfg['subnet']);

			$dnscfg .= "	option domain-name \"{$dhcpifconf['domain']}\";\n";

		}

			$dnscfg .= "	option domain-name-servers " . join(",", $dhcpifconf['dnsserver']) . ";";

		} else if (isset($config['dnsmasq']['enable'])) {

			$dnscfg .= "	option domain-name-servers " . $ifcfg['ipaddr'] . ";";

		} else if (is_array($syscfg['dnsserver']) && ($syscfg['dnsserver'][0])) {

			$dnscfg .= "	option domain-name-servers " . join(",", $syscfg['dnsserver']) . ";";

		}

		$dhcpdconf .= "subnet $subnet netmask $subnetmask {\n";

		$dhcpdconf .= "	pool {\n";

			$routers = $dhcpifconf['gateway'];

		else

			$routers = $ifcfg['ipaddr'];

		range {$dhcpifconf['range']['from']} {$dhcpifconf['range']['to']};

	}

	option routers {$routers};

$dnscfg

EOD;

		if ($dhcpifconf['defaultleasetime'])

			$dhcpdconf .= "	default-lease-time {$dhcpifconf['defaultleasetime']};\n";

		if ($dhcpifconf['maxleasetime'])

			$dhcpdconf .= "	max-lease-time {$dhcpifconf['maxleasetime']};\n";

			$dhcpdconf .= "	option netbios-name-servers " . join(",", $dhcpifconf['winsserver']) . ";\n";

			$dhcpdconf .= "	option netbios-node-type 8;\n";

		}

			$dhcpdconf .= "	next-server {$dhcpifconf['next-server']};\n";

		if ($dhcpifconf['filename'])

			$dhcpdconf .= "	filename \"{$dhcpifconf['filename']}\";\n";

}

EOD;

		/* add static mappings */

		if (is_array($dhcpifconf['staticmap'])) {

			foreach ($dhcpifconf['staticmap'] as $sm) {

				$dhcpdconf .= <<<EOD

host s_{$dhcpif}_{$i} {

	hardware ethernet {$sm['mac']};

EOD;

				if ($sm['ipaddr'])

					$dhcpdconf .= "	fixed-address {$sm['ipaddr']};\n";

				$i++;

			}

		}

	}

	fwrite($fd, $dhcpdconf);

	fclose($fd);

	/* create an empty leases database */

	touch("{$g['vardb_path']}/dhcpd.leases");

		filter_configure();

	} else

		echo "done\n";

}

        /* Enable staticarp, if enabled */

                mwexec("/sbin/ifconfig " . escapeshellarg($ifcfg['if']) . " staticarp " );

                        }

                }

        } else {

        }

        return 0;

}

	global $config, $g;

	killbypid("{$g['varrun_path']}/dhcrelay.pid");

	$dhcrelayenable = false;

	foreach ($dhcrelaycfg as $dhcrelayif => $dhcrelayifconf) {

		if (isset($dhcrelayifconf['enable']) &&

			(($dhcrelayif == "lan") ||

			(isset($config['interfaces'][$dhcrelayif]['enable']) &&

			$config['interfaces'][$dhcrelayif]['if'] && (!$config['interfaces'][$dhcrelayif]['bridge']))))

			$dhcrelayenable = true;

	}

		return 0;

		echo "Starting DHCP relay service... ";

	else

		sleep(1);

	foreach ($dhcrelaycfg as $dhcrelayif => $dhcrelayifconf) {

			(($dhcrelayif != "lan") &&

			(!isset($ifcfg['enable']) || !$ifcfg['if'] || $ifcfg['bridge'])))

			continue;

	}

	foreach ($config['interfaces'] as $ifname) {

		$subnet = $ifname['ipaddr'] . "/" . $ifname['subnet'];

			$destif = $ifname['if'];

	if (!isset($destif))

	$dhcrelayifs = array_unique($dhcrelayifs);

	/* fire up dhcrelay */

	$cmd = "/usr/local/sbin/dhcrelay -i " .  join(" -i ", $dhcrelayifs);

	$cmd .= " {$dhcrelaycfg['server']}";

	mwexec($cmd);

		filter_configure();

	} else

		echo "done\n";

}

function services_dyndns_reset() {

	global $config, $g;

	if (file_exists("{$g['vardb_path']}/ez-ipupdate.cache")) {

		unlink("{$g['vardb_path']}/ez-ipupdate.cache");

		conf_mount_rw();

		unlink("{$g['conf_path']}/ez-ipupdate.cache");

		conf_mount_ro();

	}

}

function services_dyndns_configure() {

	global $config, $g;

	/* ez-ipupdate needs SIGQUIT instead of SIGTERM */

	sigkillbypid("{$g['varrun_path']}/ez-ipupdate.pid", "QUIT");

	$wancfg = $config['interfaces']['wan'];

			echo "Starting DynDNS client... ";

		else

			sleep(1);

		$wanif = get_real_wan_interface();

		$fd = fopen("{$g['varetc_path']}/ez-ipupdate.conf", "w");

		if (!$fd) {

			printf("Error: cannot open ez-ipupdate.conf in services_dyndns_configure().\n");

			return 1;

		}

service-type={$dyndnscfg['type']}

user={$dyndnscfg['username']}:{$dyndnscfg['password']}

host={$dyndnscfg['host']}

interface=$wanif

max-interval=2073600

pid-file={$g['varrun_path']}/ez-ipupdate.pid

cache-file={$g['vardb_path']}/ez-ipupdate.cache

execute=/etc/rc.dyndns.storecache

daemon

EOD;

		/* enable MX? */

		if ($dyndnscfg['mx']) {

			$ezipupdateconf .= "mx={$dyndnscfg['mx']}\n";

		}

		if (isset($dyndnscfg['wildcard'])) {

			$ezipupdateconf .= "wildcard\n";

		}

		fwrite($fd, $ezipupdateconf);

		fclose($fd);

		if ($g['booting']) {

			if (file_exists("{$g['conf_path']}/ez-ipupdate.cache")) {

				copy("{$g['conf_path']}/ez-ipupdate.cache", "{$g['vardb_path']}/ez-ipupdate.cache");

			}

		}

		mwexec("/usr/local/bin/ez-ipupdate -c {$g['varetc_path']}/ez-ipupdate.conf");

			echo "done\n";

	}

}

function services_dnsmasq_configure() {

	global $config, $g;

	/* kill any running dnsmasq */

	sigkillbypid("{$g['varrun_path']}/dnsmasq.pid", "TERM");

	if (isset($config['dnsmasq']['enable'])) {

			echo "Starting DNS forwarder... ";

		else

			sleep(1);

		/* generate hosts file */

		system_hosts_generate();

			$args .= " -l {$g['vardb_path']}/dhcpd.leases" .

		}

		/* run dnsmasq */

		mwexec("/usr/local/sbin/dnsmasq {$args}");

		if ($g['booting'])

			echo "done\n";

	}

		services_dhcpd_configure();

	}

	return 0;

}

function services_snmpd_configure() {

	global $config, $g;

	/* kill any running snmpd */

	sigkillbypid("{$g['varrun_path']}/snmpd.pid", "TERM");

	if (isset($config['snmpd']['enable'])) {

			echo "Starting SNMP agent... ";

		/* generate snmpd.conf */

		$fd = fopen("{$g['varetc_path']}/snmpd.conf", "w");

		if (!$fd) {

			printf("Error: cannot open snmpd.conf in services_snmpd_configure().\n");

			return 1;

		}

syslocation "{$config['snmpd']['syslocation']}"

syscontact "{$config['snmpd']['syscontact']}"

rocommunity "{$config['snmpd']['rocommunity']}"

EOD;

		fwrite($fd, $snmpdconf);

		fclose($fd);

		/* run snmpd */

		mwexec("/usr/local/sbin/snmpd -c {$g['varetc_path']}/snmpd.conf" .

			" -P {$g['varrun_path']}/snmpd.pid");

		if ($g['booting'])

			echo "done\n";

	}

	return 0;

}

function services_proxyarp_configure() {

	global $config, $g;

	/* kill any running choparp */

	killbyname("choparp");

				$if = $paent['interface'];

			else

				$if = "wan";

				$paa[$if] = array();

		}

			if ($paif == "wan" && !(is_ipaddr($config['interfaces']['wan']['ipaddr']) ||

                                       ($config['interfaces']['wan']['ipaddr'] == "bigpond")))

                               continue;

					$args .= " " . escapeshellarg($paent['network']);

				else if (isset($paent['range']))

					$args .= " " . escapeshellarg($paent['range']['from'] . "-" .

						$paent['range']['to']);

			}

		}

}

function services_dnsupdate_process() {

	global $config, $g;

	/* Dynamic DNS updating active? */

	if (isset($config['dnsupdate']['enable'])) {

		$wanip = get_current_wan_address();

		if ($wanip) {

			$keyname = $config['dnsupdate']['keyname'];

			/* trailing dot */

			if (substr($keyname, -1) != ".")

				$keyname .= ".";

			$hostname = $config['dnsupdate']['host'];

			/* trailing dot */

			if (substr($hostname, -1) != ".")

				$hostname .= ".";

			/* write private key file

			   this is dumb - public and private keys are the same for HMAC-MD5,

			   but nsupdate insists on having both */

			$fd = fopen("{$g['varetc_path']}/K{$keyname}+157+00000.private", "w");

			$privkey .= <<<EOD

Private-key-format: v1.2

Algorithm: 157 (HMAC)

Key: {$config['dnsupdate']['keydata']}

EOD;

			fwrite($fd, $privkey);

			fclose($fd);

			/* write public key file */

			if ($config['dnsupdate']['keytype'] == "zone") {

				$flags = 257;

				$proto = 3;

			} else if ($config['dnsupdate']['keytype'] == "host") {

				$flags = 513;

				$proto = 3;

			} else if ($config['dnsupdate']['keytype'] == "user") {

				$flags = 0;

				$proto = 2;

			}

			$fd = fopen("{$g['varetc_path']}/K{$keyname}+157+00000.key", "w");

			fwrite($fd, "{$keyname} IN KEY {$flags} {$proto} 157 {$config['dnsupdate']['keydata']}\n");

			fclose($fd);

			/* generate update instructions */

			$upinst =  "update delete {$config['dnsupdate']['host']} A\n";

			$upinst .= "update add {$config['dnsupdate']['host']} {$config['dnsupdate']['ttl']} A {$wanip}\n";

			$upinst .= "\n";	/* mind that trailing newline! */

			$fd = fopen("{$g['varetc_path']}/nsupdatecmds", "w");

			fwrite($fd, $upinst);

			fclose($fd);

			/* invoke nsupdate */

			$cmd = "/usr/sbin/nsupdate -k {$g['varetc_path']}:{$keyname}";

			if (isset($config['dnsupdate']['usetcp']))

				$cmd .= " -v";

			$cmd .= " {$g['varetc_path']}/nsupdatecmds";

			mwexec_bg($cmd);

		}

	}

	return 0;

?>