Project

General

Profile

Download (17.3 KB) Statistics
| Branch: | Tag: | Revision:
1
<?php
2
/* $Id$ */
3
/*
4
	interfaces_opt.php
5
	part of m0n0wall (http://m0n0.ch/wall)
6

    
7
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
8
	All rights reserved.
9

    
10
	Redistribution and use in source and binary forms, with or without
11
	modification, are permitted provided that the following conditions are met:
12

    
13
	1. Redistributions of source code must retain the above copyright notice,
14
	   this list of conditions and the following disclaimer.
15

    
16
	2. Redistributions in binary form must reproduce the above copyright
17
	   notice, this list of conditions and the following disclaimer in the
18
	   documentation and/or other materials provided with the distribution.
19

    
20
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
21
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
22
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
23
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
24
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29
	POSSIBILITY OF SUCH DAMAGE.
30
*/
31

    
32
require("guiconfig.inc");
33

    
34
unset($index);
35
if ($_GET['index'])
36
	$index = $_GET['index'];
37
else if ($_POST['index'])
38
	$index = $_POST['index'];
39

    
40
if (!$index)
41
	exit;
42

    
43
function remove_bad_chars($string) {
44
	return preg_replace('/[^a-z|_|0-9]/i','',$string);
45
}
46

    
47
$optcfg = &$config['interfaces']['opt' . $index];
48
$optcfg['descr'] = remove_bad_chars($optcfg['descr']);
49

    
50
if(is_array($config['aliases']['alias']))
51
	foreach($config['aliases']['alias'] as $alias) 
52
		if($alias['name'] == $optcfg['descr']) 
53
			$input_errors[] = gettext("Sorry, an alias with the name {$optcfg['descr']} already exists.");
54

    
55
$pconfig['descr'] = $optcfg['descr'];
56
$pconfig['bridge'] = $optcfg['bridge'];
57

    
58
$pconfig['enable'] = isset($optcfg['enable']);
59

    
60
$pconfig['blockpriv'] = isset($optcfg['blockpriv']);
61
$pconfig['blockbogons'] = isset($optcfg['blockbogons']);
62
$pconfig['spoofmac'] = $optcfg['spoofmac'];
63
$pconfig['mtu'] = $optcfg['mtu'];
64

    
65
$pconfig['disableftpproxy'] = isset($optcfg['disableftpproxy']);
66

    
67
/* Wireless interface? */
68
if (isset($optcfg['wireless'])) {
69
	require("interfaces_wlan.inc");
70
	wireless_config_init();
71
}
72

    
73
if ($optcfg['ipaddr'] == "dhcp") {
74
	$pconfig['type'] = "DHCP";
75
	$pconfig['dhcphostname'] = $optcfg['dhcphostname'];
76
} else {
77
	$pconfig['type'] = "Static";
78
	$pconfig['ipaddr'] = $optcfg['ipaddr'];
79
	$pconfig['subnet'] = $optcfg['subnet'];
80
	$pconfig['gateway'] = $optcfg['gateway'];
81
	$pconfig['pointtopoint'] = $optcfg['pointtopoint'];
82
}
83

    
84
if ($_POST) {
85

    
86
	unset($input_errors);
87

    
88
	/* filter out spaces from descriptions  */
89
	$POST['descr'] = remove_bad_chars($POST['descr']);
90

    
91
	if($_POST['gateway'] and $pconfig['gateway'] <> $_POST['gateway']) {
92
		/* enumerate slbd gateways and make sure we are not creating a route loop */
93
		if(is_array($config['load_balancer']['lbpool'])) {
94
			foreach($config['load_balancer']['lbpool'] as $lbpool) {
95
				if($lbpool['type'] == "gateway") {
96
				    foreach ((array) $lbpool['servers'] as $server) {
97
			            $svr = split("\|", $server);
98
			            if($svr[1] == $pconfig['gateway'])  {
99
			            		$_POST['gateway']  = $pconfig['gateway'];
100
			            		$input_errors[] = "Cannot change {$svr[1]} gateway.  It is currently referenced by the load balancer pools.";
101
			            		break;
102
			            }
103
					}
104
				}
105
			}
106
			foreach($config['filter']['rule'] as $rule) {
107
				if($rule['gateway'] == $_POST['gateway']) {
108
	            		$input_errors[] = "Cannot change {$_POST['gateway']} gateway.  It is currently referenced by the filter rules via policy based routing.";
109
	            		break;
110
				}
111
			}
112
		}
113
	}
114

    
115
	$pconfig = $_POST;
116

    
117
	/* input validation */
118
	if ($_POST['enable']) {
119

    
120
		/* description unique? */
121
		for ($i = 1; isset($config['interfaces']['opt' . $i]); $i++) {
122
			if ($i != $index) {
123
				if ($config['interfaces']['opt' . $i]['descr'] == $_POST['descr']) {
124
					$input_errors[] = "An interface with the specified description already exists.";
125
				}
126
			}
127
		}
128

    
129
		if ($_POST['bridge']) {
130
			/* double bridging? */
131
			for ($i = 1; isset($config['interfaces']['opt' . $i]); $i++) {
132
				if ($i != $index) {
133
					if ($config['interfaces']['opt' . $i]['bridge'] == $_POST['bridge']) {
134
						//$input_errors[] = "Optional interface {$i} " .
135
						//	"({$config['interfaces']['opt' . $i]['descr']}) is already bridged to " .
136
						//	"the specified interface.";
137
					} else if ($config['interfaces']['opt' . $i]['bridge'] == "opt{$index}") {
138
						//$input_errors[] = "Optional interface {$i} " .
139
						//	"({$config['interfaces']['opt' . $i]['descr']}) is already bridged to " .
140
						//	"this interface.";
141
					}
142
				}
143
			}
144
			if ($config['interfaces'][$_POST['bridge']]['bridge']) {
145
				//$input_errors[] = "The specified interface is already bridged to " .
146
				//	"another interface.";
147
			}
148
			/* captive portal on? */
149
			if (isset($config['captiveportal']['enable'])) {
150
				//$input_errors[] = "Interfaces cannot be bridged while the captive portal is enabled.";
151
			}
152
		} else {
153
			if ($_POST['type'] <> "DHCP") {
154
				$reqdfields = explode(" ", "descr ipaddr subnet");
155
				$reqdfieldsn = explode(",", "Description,IP address,Subnet bit count");
156
				do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);
157
				if (($_POST['ipaddr'] && !is_ipaddr($_POST['ipaddr']))) {
158
					$input_errors[] = "A valid IP address must be specified.";
159
				}
160
				if (($_POST['subnet'] && !is_numeric($_POST['subnet']))) {
161
					$input_errors[] = "A valid subnet bit count must be specified.";
162
				}
163
				if($_POST['gateway'] <> "" && !is_ipaddr($_POST['gateway'])) {
164
					$input_errors[] = "A valid gateway must be specified.";
165
				}
166
			}
167
		}
168
	        if ($_POST['mtu'] && (($_POST['mtu'] < 576) || ($_POST['mtu'] > 1500))) {
169
			$input_errors[] = "The MTU must be between 576 and 1500 bytes.";
170
		}		
171
		if (($_POST['spoofmac'] && !is_macaddr($_POST['spoofmac']))) {
172
			$input_errors[] = "A valid MAC address must be specified.";
173
		}		
174
	}
175

    
176
	if($_POST['mtu']) {
177
		if($_POST['mtu'] < 24 or $_POST['mtu'] > 1501)
178
			$input_errors[] = "A valid MTU is required 24-1500.";
179
	}
180
	
181
	/* Wireless interface? */
182
	if (isset($optcfg['wireless'])) {
183
		$wi_input_errors = wireless_config_post();
184
		if ($wi_input_errors) {
185
			$input_errors = array_merge($input_errors, $wi_input_errors);
186
		}
187
	}
188

    
189
	if (!$input_errors) {
190

    
191
		$bridge = discover_bridge($optcfg['if'], filter_translate_type_to_real_interface($optcfg['bridge']));
192
		if($bridge <> "-1") {
193
			destroy_bridge($bridge);
194
		}
195

    
196
		unset($optcfg['dhcphostname']);
197
		unset($optcfg['disableftpproxy']);
198
		
199
		/* per interface pftpx helper */
200
		if($_POST['disableftpproxy'] == "yes") {
201
			$optcfg['disableftpproxy'] = true;
202
			system_start_ftp_helpers();
203
		} else {			
204
			system_start_ftp_helpers();
205
		}		
206

    
207
		$optcfg['descr'] = remove_bad_chars($_POST['descr']);
208
		$optcfg['bridge'] = $_POST['bridge'];
209
		$optcfg['enable'] = $_POST['enable'] ? true : false;
210

    
211
		if ($_POST['type'] == "Static") {
212
			$optcfg['ipaddr'] = $_POST['ipaddr'];
213
			$optcfg['subnet'] = $_POST['subnet'];
214
			$optcfg['gateway'] = $_POST['gateway'];
215
			if (isset($optcfg['ispointtopoint']))
216
				$optcfg['pointtopoint'] = $_POST['pointtopoint'];
217
		} else if ($_POST['type'] == "DHCP") {
218
			$optcfg['ipaddr'] = "dhcp";
219
			$optcfg['dhcphostname'] = $_POST['dhcphostname'];
220
		}
221

    
222
		$optcfg['blockpriv'] = $_POST['blockpriv'] ? true : false;
223
		$optcfg['blockbogons'] = $_POST['blockbogons'] ? true : false;
224
		$optcfg['spoofmac'] = $_POST['spoofmac'];
225
		$optcfg['mtu'] = $_POST['mtu'];
226

    
227
		write_config();
228
		
229
		$savemsg = get_std_save_message($retval);
230
	}
231
}
232

    
233

    
234
$pgtitle = "Interfaces: Optional {$index} (" . htmlspecialchars($optcfg['descr']) . ")";
235
include("head.inc");
236

    
237
?>
238

    
239
<script language="JavaScript">
240
<!--
241
function enable_change(enable_over) {
242
	var endis;
243
	endis = !((document.iform.bridge.selectedIndex == 0) || enable_over);
244
	document.iform.ipaddr.disabled = endis;
245
	document.iform.subnet.disabled = endis;
246
}
247
function ipaddr_change() {
248
	document.iform.subnet.selectedIndex = gen_bits_opt(document.iform.ipaddr.value);
249
}
250
function type_change(enable_change,enable_change_pptp) {
251
	switch (document.iform.type.selectedIndex) {
252
		case 0:
253
			document.iform.ipaddr.type.disabled = 0;
254
			document.iform.ipaddr.disabled = 0;
255
			document.iform.subnet.disabled = 0;
256
			document.iform.gateway.disabled = 0;
257
			break;
258
		case 1:
259
			document.iform.ipaddr.type.disabled = 1;
260
			document.iform.ipaddr.disabled = 1;
261
			document.iform.subnet.disabled = 1;
262
			document.iform.gateway.disabled = 1;
263
			break;
264
	}
265
}
266
//-->
267
</script>
268

    
269
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
270
<?php include("fbegin.inc"); ?>
271
<p class="pgtitle"><?=$pgtitle?></p>
272
<?php if ($input_errors) print_input_errors($input_errors); ?>
273
<?php if ($savemsg) print_info_box($savemsg); ?>
274
<?php if ($optcfg['if']): ?>
275
            <form action="interfaces_opt.php" method="post" name="iform" id="iform">
276
              <table width="100%" border="0" cellpadding="6" cellspacing="0">
277
                <tr>
278
                  <td colspan="2" valign="top" class="listtopic">Optional Interface Configuration</td>
279
                </tr>	      
280
                <tr>
281
                  <td width="22%" valign="top" class="vtable">&nbsp;</td>
282
                  <td width="78%" class="vtable">
283
			<input name="enable" type="checkbox" value="yes" <?php if ($pconfig['enable']) echo "checked"; ?> onClick="enable_change(false)">
284
                    <strong>Enable Optional <?=$index;?> interface</strong></td>
285
		</tr>
286
                <tr>
287
                  <td width="22%" valign="top" class="vncell">Description</td>
288
                  <td width="78%" class="vtable">
289
                    <input name="descr" type="text" class="formfld" id="descr" size="30" value="<?=htmlspecialchars($pconfig['descr']);?>">
290
					<br> <span class="vexpl">Enter a description (name) for the interface here.</span>
291
		  </td>
292
		</tr>
293

    
294
                <tr>
295
                  <td colspan="2" valign="top" height="16"></td>
296
                </tr>
297
                <tr>
298
                  <td colspan="2" valign="top" class="listtopic">General configuration</td>
299
                </tr>
300
                <tr>
301
                  <td valign="middle" class="vncell"><strong>Type</strong></td>
302
                  <td class="vtable"> <select name="type" class="formfld" id="type" onchange="type_change()">
303
                      <?php $opts = split(" ", "Static DHCP");
304
				foreach ($opts as $opt): ?>
305
                      <option <?php if ($opt == $pconfig['type']) echo "selected";?>>
306
                      <?=htmlspecialchars($opt);?>
307
                      </option>
308
                      <?php endforeach; ?>
309
                    </select></td>
310
                </tr>
311
                <tr>
312
                  <td valign="top" class="vncell">MAC address</td>
313
                  <td class="vtable"> <input name="spoofmac" type="text" class="formfld" id="spoofmac" size="30" value="<?=htmlspecialchars($pconfig['spoofmac']);?>">
314
		    <?php
315
			$ip = getenv('REMOTE_ADDR');
316
			$mac = `/usr/sbin/arp -an | grep {$ip} | cut -d" " -f4`;
317
			$mac = str_replace("\n","",$mac);
318
		    ?>
319
		    <a OnClick="document.forms[0].spoofmac.value='<?=$mac?>';" href="#">Copy my MAC address</a>   
320
		    <br>
321
                    This field can be used to modify (&quot;spoof&quot;) the MAC
322
                    address of the WAN interface<br>
323
                    (may be required with some cable connections)<br>
324
                    Enter a MAC address in the following format: xx:xx:xx:xx:xx:xx
325
                    or leave blank</td>
326
                </tr>
327
                <tr>
328
                  <td valign="top" class="vncell">MTU</td>
329
                  <td class="vtable"> <input name="mtu" type="text" class="formfld" id="mtu" size="8" value="<?=htmlspecialchars($pconfig['mtu']);?>">
330
                    <br>
331
                    If you enter a value in this field, then MSS clamping for
332
                    TCP connections to the value entered above minus 40 (TCP/IP
333
                    header size) will be in effect. If you leave this field blank,
334
                    an MTU of 1492 bytes for PPPoE and 1500 bytes for all other
335
                    connection types will be assumed.</td>
336
                </tr>
337
		
338
                <tr>
339
                  <td colspan="2" valign="top" height="16"></td>
340
		</tr>
341
		<tr>
342
                  <td colspan="2" valign="top" class="listtopic">IP configuration</td>
343
		</tr>
344
		<tr>
345
                  <td width="22%" valign="top" class="vncellreq">Bridge with</td>
346
                  <td width="78%" class="vtable">
347
			<select name="bridge" class="formfld" id="bridge" onChange="enable_change(false)">
348
				  	<option <?php if (!$pconfig['bridge']) echo "selected";?> value="">none</option>
349
                      <?php $opts = array('lan' => "LAN", 'wan' => "WAN");
350
					  	for ($i = 1; isset($config['interfaces']['opt' . $i]); $i++) {
351
							if ($i != $index)
352
								$opts['opt' . $i] = "Optional " . $i . " (" .
353
									$config['interfaces']['opt' . $i]['descr'] . ")";
354
						}
355
					foreach ($opts as $opt => $optname): ?>
356
                      <option <?php if ($opt == $pconfig['bridge']) echo "selected";?> value="<?=htmlspecialchars($opt);?>">
357
                      <?=htmlspecialchars($optname);?>
358
                      </option>
359
                      <?php endforeach; ?>
360
                    </select> </td>
361
		</tr>
362
                <tr>
363
                  <td width="22%" valign="top" class="vncellreq">IP address</td>
364
                  <td width="78%" class="vtable">
365
                    <input name="ipaddr" type="text" class="formfld" id="ipaddr" size="20" value="<?=htmlspecialchars($pconfig['ipaddr']);?>">
366
                    /
367
                	<select name="subnet" class="formfld" id="subnet">
368
					<?php
369
					for ($i = 32; $i > 0; $i--) {
370
						if($i <> 31) {
371
							echo "<option value=\"{$i}\" ";
372
							if ($i == $pconfig['subnet']) echo "selected";
373
							echo ">" . $i . "</option>";
374
						}
375
					}
376
					?>                    </select>
377
				 </td>
378
				</tr>
379
		<tr>
380
                  <td width="22%" valign="top" class="vncell">Gateway</td>
381
                  <td width="78%" class="vtable">
382
			<input name="gateway" value="<?php echo $pconfig['gateway']; ?>">
383
			<br>
384
			If this interface is an Internet connection, enter its next hop gateway (router) IP address here.  Otherwise, leave this option blank.
385
		  </td>
386
		</tr>
387
                <tr>
388
                  <td colspan="2" valign="top" height="16"></td>
389
                </tr>
390
                <tr>
391
                  <td colspan="2" valign="top" class="listtopic">FTP Helper</td>
392
                </tr>		
393
		<tr>
394
			<td width="22%" valign="top" class="vncell">FTP Helper</td>
395
			<td width="78%" class="vtable">
396
				<input name="disableftpproxy" type="checkbox" id="disableftpproxy" value="yes" <?php if ($pconfig['disableftpproxy']) echo "checked"; ?> onclick="enable_change(false)" />
397
				<strong>Disable the userland FTP-Proxy application</strong>
398
				<br />
399
			</td>
400
		</tr>			
401
				<?php /* Wireless interface? */
402
				if (isset($optcfg['wireless']))
403
					wireless_config_print();
404
				?>		
405
                <tr>
406
                  <td colspan="2" valign="top" height="16"></td>
407
                </tr>
408
                <tr>
409
                  <td colspan="2" valign="top" class="listtopic">DHCP client configuration</td>
410
                </tr>
411
                <tr>
412
                  <td valign="top" class="vncell">Hostname</td>
413
                  <td class="vtable"> <input name="dhcphostname" type="text" class="formfld" id="dhcphostname" size="40" value="<?=htmlspecialchars($pconfig['dhcphostname']);?>">
414
                    <br>
415
                    The value in this field is sent as the DHCP client identifier
416
                    and hostname when requesting a DHCP lease. Some ISPs may require
417
                    this (for client identification).</td>
418
                </tr>
419
                <tr>
420
                  <td colspan="2" valign="top" height="16"></td>
421
                </tr>		
422
		<tr>
423
                  <td width="22%" valign="top">&nbsp;</td>
424
                  <td width="78%">
425
                    <input name="index" type="hidden" value="<?=$index;?>">
426
				  <input name="Submit" type="submit" class="formbtn" value="Save" onclick="enable_change(true)">
427
                  </td>
428
                </tr>
429
                <tr>
430
                  <td width="22%" valign="top">&nbsp;</td>
431
                  <td width="78%"><span class="vexpl"><span class="red"><strong>Note:<br>
432
                    </strong></span>be sure to add <a href="firewall_rules.php">firewall rules</a> to permit traffic
433
                    through the interface. You also need firewall rules for an interface in
434
                    bridged mode as the firewall acts as a filtering bridge.</span></td>
435
                </tr>
436
              </table>
437
</form>
438
<script language="JavaScript">
439
<!--
440
enable_change(false);
441
//-->
442
</script>
443
<?php else: ?>
444
<p><strong>Optional <?=$index;?> has been disabled because there is no OPT<?=$index;?> interface.</strong></p>
445
<?php endif; ?>
446
<?php include("fend.inc"); ?>
447
</body>
448
</html>
449

    
450
<?php
451
if ($_POST) {
452

    
453
	if (!$input_errors) {
454
		
455
		ob_flush();
456
		flush();
457
		sleep(1);		
458
		
459
		interfaces_optional_configure_if($index);
460
		
461
		reset_carp();
462

    
463
		/* load graphing functions */
464
		enable_rrd_graphing();	
465
		
466
		/* sync filter configuration */
467
		filter_configure();
468

    
469
 		/* set up static routes */
470
		system_routing_configure();
471

    
472
	}
473
}
474
?>
(72-72/173)