mirror of
https://github.com/webmin/webmin.git
synced 2025-08-17 19:06:28 +00:00
firewall and firewall6 use same index.cgi
This commit is contained in:
Kay Marquardt (Gnadelwartz)
@ -1,24 +1,37 @@
|
||||
# firewall-lib.pl
|
||||
# Unified functions for iptable4-lib and iptable6-lib
|
||||
# in iptabel4 and iptable6 need onyl to init and call
|
||||
# set_ip46_proto
|
||||
|
||||
BEGIN { push(@INC, ".."); };
|
||||
use WebminCore;
|
||||
&init_config();
|
||||
|
||||
# set_ipvx_version(version)
|
||||
# version can be ipv6 or ipv4,
|
||||
sub set_ipvx_version
|
||||
{
|
||||
$ipvx='';
|
||||
$ipvx_save=$iptables_save_file;
|
||||
$ipvx_lib='firewall4-lib.pl';
|
||||
$ipv4_dir='../firewall/';
|
||||
$ipv6_dir='../firewall6/';
|
||||
if ($_[0] =~ /ipv6/i) {
|
||||
$ipv4_link='../firewall/';
|
||||
$ipv6_link='../firewall6/';
|
||||
$ipv4_active='active';
|
||||
if ($_[0] =~ /6$/i) {
|
||||
$ipvx='6';
|
||||
$ipvx_save=$ip6tables_save_file;
|
||||
$ipvx_lib='firewall6-lib.pl';
|
||||
$ipv4_active='';
|
||||
$ipv6_active='active';
|
||||
}
|
||||
}
|
||||
|
||||
# get_ipvx_version
|
||||
# get iptables version used from environment
|
||||
# if script runs in firewall6 or version=inet6, 6 is returned, else 4
|
||||
sub get_ipvx_version
|
||||
{
|
||||
if ( $in{'version'} =~ /6$/ || `pwd` =~ /6$/)
|
||||
{ return 6; }
|
||||
return 4;
|
||||
}
|
||||
|
||||
|
||||
# get_iptables_save([file])
|
||||
# Parse the iptables save file into a list of tables
|
||||
|
||||
@ -57,6 +57,11 @@ sub get_ip6tables_save
|
||||
&get_iptables_save;
|
||||
}
|
||||
|
||||
sub ip6tables_save
|
||||
{
|
||||
&iptables_save;
|
||||
}
|
||||
|
||||
sub by_string_for_ip6tables
|
||||
{
|
||||
&by_string_for_iptables;
|
||||
|
||||
@ -3,8 +3,12 @@
|
||||
# Display current iptables firewall configuration from save file
|
||||
# unified for IPV4 and IPV6
|
||||
|
||||
require './firewall4-lib.pl';
|
||||
require './firewall-lib.pl';
|
||||
&ReadParse();
|
||||
# what version IP protocaol version to use?
|
||||
if (&get_ipvx_version() == 6) { require './firewall6-lib.pl';
|
||||
} else { require './firewall4-lib.pl'; }
|
||||
|
||||
if ($ipvx_save) {
|
||||
$desc = &text('index_editing', "<tt>$ipvx_save</tt>");
|
||||
}
|
||||
@ -13,16 +17,17 @@ if ($ipvx_save) {
|
||||
#print tabs for IPv4 and IPv6
|
||||
print <<EOF ;
|
||||
<ul class="nav nav-tabs">
|
||||
<li class="active">
|
||||
<a href="$ipv4_dir"><b>$text{'index_title_v4'}</b></a>
|
||||
<li class="$ipv4_active">
|
||||
<a href="$ipv4_link"><b>$text{'index_title_v4'}</b></a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="$ipv6_dir">$text{'index_title_v6'}</a>
|
||||
<li class="$ipv6_active">
|
||||
<a href="$ipv6_link">$text{'index_title_v6'}</a>
|
||||
</li>
|
||||
</ul>
|
||||
EOF
|
||||
|
||||
print "<br><b>$desc</b";
|
||||
print "<br><b>$desc</b><br> ";
|
||||
|
||||
|
||||
# Check for iptables and iptables-restore commands
|
||||
@ -442,9 +447,12 @@ else {
|
||||
foreach $s (@ipsets) {
|
||||
local @cols;
|
||||
local @h= split(/ /, $s->{'Header'});
|
||||
push(@cols, " $h[0] $h[1]", " <b>$s->{'Name'}</b>", $s->{'Type'},$s->{'Number'},
|
||||
$h[5], $s->{'Size'});
|
||||
print &ui_columns_row(\@cols, \@tds);
|
||||
# print matching pínet version
|
||||
if ($h[1] =~ /inet${ipvx}$/) {
|
||||
push(@cols, " $h[0] $h[1]", " <b>$s->{'Name'}</b>",
|
||||
$s->{'Type'}, $s->{'Number'}, $h[5], $s->{'Size'});
|
||||
print &ui_columns_row(\@cols, \@tds);
|
||||
}
|
||||
}
|
||||
print &ui_columns_end();
|
||||
}
|
||||
@ -528,7 +536,7 @@ sub external_firewall_message
|
||||
if ($filter->{'defaults'}->{'INPUT_ZONES'}) {
|
||||
$fwname.='firewalld ';
|
||||
}
|
||||
if ($filter->{'defaults'} ~~ /^f2b-|^fail2ban-/) {
|
||||
if ($filter->{'defaults'} ~~ /^f2b-|^fail2ban-/ && ! $config{'filter_chain'} ) {
|
||||
$fwname.='fail2ban ';
|
||||
}
|
||||
# warning about not using direct
|
||||
|
||||
@ -1,66 +0,0 @@
|
||||
# firewall6-lib.pl
|
||||
# Functions for parsing ip6tables-save format files
|
||||
# - help pages
|
||||
|
||||
BEGIN { push(@INC, ".."); };
|
||||
use WebminCore;
|
||||
&init_config();
|
||||
|
||||
# include common functions for ipv4 and ipv6
|
||||
require './firewall-lib.pl';
|
||||
|
||||
# ipv6 initialization
|
||||
$config{'perpage'} ||= 50; # a value of 0 can cause problems
|
||||
if ($config{'save_file'}) {
|
||||
# Force use of a different save file, and webmin's functions
|
||||
$ip6tables_save_file = $config{'save_file'};
|
||||
}
|
||||
else {
|
||||
if (-r "$module_root_directory/$gconfig{'os_type'}-lib.pl") {
|
||||
# Use the operating system's save file and functions
|
||||
do "$gconfig{'os_type'}-lib.pl";
|
||||
}
|
||||
|
||||
if (!$ip6tables_save_file) {
|
||||
# Use webmin's own save file
|
||||
$ip6tables_save_file = "$module_config_directory/ip6tables.save";
|
||||
}
|
||||
}
|
||||
|
||||
%access = &get_module_acl();
|
||||
|
||||
@known_tables = ( "filter", "mangle", "nat" );
|
||||
@known_args = ('-p', '-m', '-s', '-d', '-i', '-o', '-f',
|
||||
'--dport', '--sport', '--tcp-flags', '--tcp-option',
|
||||
'--icmpv6-type', '--mac-source', '--limit', '--limit-burst',
|
||||
'--ports', '--uid-owner', '--gid-owner',
|
||||
'--pid-owner', '--sid-owner', '--state', '--tos', '-j',
|
||||
'--to-ports', '--to-destination', '--to-source',
|
||||
'--reject-with', '--dports', '--sports',
|
||||
'--comment',
|
||||
'--physdev-is-bridged',
|
||||
'--physdev-is-in',
|
||||
'--physdev-is-out',
|
||||
'--physdev-in',
|
||||
'--physdev-out');
|
||||
|
||||
# set IP Version
|
||||
&set_ipvx_version('ipv6');
|
||||
|
||||
# IP V6 only functions
|
||||
# none :-)
|
||||
|
||||
# renamed functions
|
||||
# pass current args to original
|
||||
sub get_ip6tables_save
|
||||
{
|
||||
&get_iptables_save;
|
||||
}
|
||||
|
||||
sub by_string_for_ip6tables
|
||||
{
|
||||
&by_string_for_iptables;
|
||||
}
|
||||
|
||||
1;
|
||||
|
||||
1
firewall6/firewall6-lib.pl
Symbolic link
1
firewall6/firewall6-lib.pl
Symbolic link
@ -0,0 +1 @@
|
||||
../firewall/firewall6-lib.pl
|
||||
@ -1,499 +0,0 @@
|
||||
#!/usr/local/bin/perl
|
||||
# index.cgi
|
||||
# Display current ip6tables firewall configuration from save file
|
||||
|
||||
require './firewall6-lib.pl';
|
||||
require './firewall-lib.pl';
|
||||
&set_ipvx_version('ipv6');
|
||||
&ReadParse();
|
||||
if ($ip6tables_save_file) {
|
||||
$desc = &text('index_editing', "<tt>$ipvx_save</tt>");
|
||||
}
|
||||
&ui_print_header(undef, $text{'index_title'}, undef, "intro", 1, 1, 0,
|
||||
&help_search_link("ip6tables", "man", "doc"));
|
||||
#print tabs for IPv4 and IPv6
|
||||
print <<EOF ;
|
||||
<ul class="nav nav-tabs">
|
||||
<li>
|
||||
<a href="$ipv4_dir">$text{'index_title_v4'}</a>
|
||||
</li>
|
||||
<li class="active">
|
||||
<a href="$ipv6_dir"><b>$text{'index_title_v6'}</b></a>
|
||||
</li>
|
||||
</ul>
|
||||
EOF
|
||||
|
||||
print "<br><b>$desc</b><br> ";
|
||||
|
||||
# Check for ip6tables and ip6tables-restore commands
|
||||
if ($c = &missing_firewall_commands()) {
|
||||
print "<p>",&text('index_ecommand', "<tt>$c</tt>"),"<p>\n";
|
||||
&ui_print_footer("/", $text{'index'});
|
||||
exit;
|
||||
}
|
||||
|
||||
# Check if the kernel supports ip6tables
|
||||
$out = &backquote_command("ip6tables -n -t filter -L OUTPUT 2>&1");
|
||||
if ($?) {
|
||||
print "<p>",&text('index_ekernel', "<pre>$out</pre>"),"<p>\n";
|
||||
&ui_print_footer("/", $text{'index'});
|
||||
exit;
|
||||
}
|
||||
|
||||
# Check if the distro supports ip6tables
|
||||
if (!$config{'direct'} && defined(&check_ip6tables) &&
|
||||
($err = &check_ip6tables())) {
|
||||
print "<p>$err</p>\n";
|
||||
&ui_print_footer("/", $text{'index'});
|
||||
exit;
|
||||
}
|
||||
|
||||
# Check if firewall is being started at boot
|
||||
if (!$config{'direct'} && &foreign_check("init")) {
|
||||
$init_support++;
|
||||
if (defined(&started_at_boot)) {
|
||||
$atboot = &started_at_boot();
|
||||
}
|
||||
else {
|
||||
&foreign_require("init", "init-lib.pl");
|
||||
$atboot = &init::action_status("webmin-ip6tables") == 2;
|
||||
}
|
||||
}
|
||||
|
||||
# Check if the save file exists. If not, check for any existing firewall
|
||||
# rules, and offer to create a save file from them
|
||||
@livetables = &get_ip6tables_save("ip6tables-save 2>/dev/null |");
|
||||
|
||||
# Display warnings about active external firewalls!
|
||||
&external_firewall_message(\@livetables);
|
||||
if (!$config{'direct'} &&
|
||||
(!-s $ip6tables_save_file || $in{'reset'}) && $access{'setup'}) {
|
||||
@tables = @livetables;
|
||||
foreach $t (@tables) {
|
||||
$rules++ if (@{$t->{'rules'}});
|
||||
foreach $c (keys %{$t->{'defaults'}}) {
|
||||
$chains++ if ($t->{'defaults'}->{$c} ne 'ACCEPT');
|
||||
}
|
||||
$hastable{$t->{'name'}}++;
|
||||
}
|
||||
foreach $t (@known_tables) {
|
||||
system("ip6tables -t $t -n -L >/dev/null") if (!$hastable{$t});
|
||||
}
|
||||
if (!$in{'reset'} && ($rules || $chains)) {
|
||||
# Offer to save the current rules
|
||||
print &ui_confirmation_form("convert.cgi",
|
||||
&text('index_existing', $rules,
|
||||
"<tt>$ip6tables_save_file</tt>"),
|
||||
undef,
|
||||
[ [ undef, $text{'index_saveex'} ] ],
|
||||
$init_support && !$atboot ?
|
||||
&ui_checkbox("atboot", 1, $text{'index_atboot'}, 0) :
|
||||
"",
|
||||
);
|
||||
|
||||
print &ui_table_start($text{'index_headerex'}, "width=100%", 2);
|
||||
$out = &backquote_command("ip6tables-save 2>/dev/null");
|
||||
print &ui_table_row(undef,
|
||||
"<pre>".&html_escape($out)."</pre>", 2);
|
||||
print &ui_table_end();
|
||||
}
|
||||
else {
|
||||
# Offer to set up a firewall
|
||||
print &text($in{'reset'} ? 'index_rsetup' : 'index_setup',
|
||||
"<tt>$ip6tables_save_file</tt>"),"<p>\n";
|
||||
print &ui_form_start("setup.cgi");
|
||||
print &ui_hidden("reset", $in{'reset'});
|
||||
print "<center><table><tr><td>\n";
|
||||
print &ui_oneradio("auto", 0, $text{'index_auto0'}, 1),"<p>\n";
|
||||
foreach $a (1 .. 5) {
|
||||
print &ui_oneradio("auto", $a,
|
||||
$text{'index_auto'.$a}, 0)." ";
|
||||
print &interface_choice("iface".$a),"<p>\n";
|
||||
}
|
||||
print "</td></tr></table>\n";
|
||||
print &ui_submit($text{'index_auto'}),"<p>\n";
|
||||
if ($init_support && !$atboot) {
|
||||
print &ui_checkbox("atboot", 1,
|
||||
$text{'index_atboot'}, 0);
|
||||
}
|
||||
print "</center>\n";
|
||||
print &ui_form_end();
|
||||
}
|
||||
}
|
||||
else {
|
||||
$form = 0;
|
||||
@tables = &get_ip6tables_save();
|
||||
if (!$config{'direct'}) {
|
||||
# Verify that all known tables exist, and if not add them to the
|
||||
# save file
|
||||
foreach $t (@tables) {
|
||||
$hastable{$t->{'name'}}++;
|
||||
}
|
||||
foreach $t (@known_tables) {
|
||||
if (!$hastable{$t}) {
|
||||
local ($missing) = &get_ip6tables_save(
|
||||
"ip6tables-save --table $t 2>/dev/null |");
|
||||
if ($missing) {
|
||||
delete($missing->{'line'});
|
||||
&save_table($missing);
|
||||
}
|
||||
$need_reload++;
|
||||
}
|
||||
}
|
||||
@tables = &get_ip6tables_save() if ($need_reload);
|
||||
}
|
||||
|
||||
# Work out the default table
|
||||
if (!defined($in{'table'})) {
|
||||
foreach $t (@tables) {
|
||||
if (@{$t->{'rules'}} && &can_edit_table($t->{'name'})) {
|
||||
$in{'table'} = $t->{'index'};
|
||||
last;
|
||||
}
|
||||
}
|
||||
}
|
||||
if (!defined($in{'table'})) {
|
||||
foreach $t (@tables) {
|
||||
if (&can_edit_table($t->{'name'})) {
|
||||
$in{'table'} = $t->{'index'};
|
||||
last;
|
||||
}
|
||||
}
|
||||
}
|
||||
$table = $tables[$in{'table'}];
|
||||
|
||||
# Allow selection of a table
|
||||
print "<table width=100%><tr>\n";
|
||||
print "<form action=index.cgi>\n";
|
||||
print "<td><input type=submit value='$text{'index_change'}'>\n";
|
||||
print "<select name=table onChange='form.submit()'>\n";
|
||||
foreach $t (@tables) {
|
||||
if (&can_edit_table($t->{'name'})) {
|
||||
printf "<option value=%s %s>%s</option>\n",
|
||||
$t->{'index'}, $t eq $table ? "selected" : "",
|
||||
&text('index_table_'.$t->{'name'}) || $t->{'name'};
|
||||
}
|
||||
}
|
||||
print "</select></td></form>\n";
|
||||
$form++;
|
||||
|
||||
if ($access{'newchain'}) {
|
||||
# Show form to create a chain
|
||||
print "<form action=newchain.cgi>\n";
|
||||
print "<td align=right>",&ui_hidden("table", $in{'table'});
|
||||
print "<input type=submit value='$text{'index_cadd'}'>\n";
|
||||
print "<input name=chain size=20></td></form>\n";
|
||||
print "</tr></table>\n";
|
||||
$form++;
|
||||
}
|
||||
|
||||
# Display a table of rules for each chain
|
||||
foreach $c (sort by_string_for_ip6tables keys %{$table->{'defaults'}}) {
|
||||
print &ui_hr();
|
||||
@rules = grep { lc($_->{'chain'}) eq lc($c) }
|
||||
@{$table->{'rules'}};
|
||||
print "<b>",$text{"index_chain_".lc($c)} ||
|
||||
&text('index_chain', "<tt>$c</tt>"),"</b><br>\n";
|
||||
|
||||
# check if chain is filtered out
|
||||
if ($config{'filter_chain'}) {
|
||||
foreach $filter (split(',', $config{'filter_chain'})) {
|
||||
if($c =~ /^$filter$/) {
|
||||
# not managed by firewall, do not dispaly or modify
|
||||
print "<em>".$text{'index_filter_chain'}."</em><br>\n";
|
||||
next CHAIN;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
print "<form action=save_policy.cgi>\n";
|
||||
print &ui_hidden("table", $in{'table'});
|
||||
print &ui_hidden("chain", $c);
|
||||
|
||||
if (@rules > $config{'perpage'}) {
|
||||
# Need to show arrows
|
||||
print "<center>\n";
|
||||
$s = int($in{'start'});
|
||||
$e = $in{'start'} + $config{'perpage'} - 1;
|
||||
$e = @rules-1 if ($e >= @rules);
|
||||
if ($s) {
|
||||
print &ui_link("?start=".
|
||||
($s - $config{'perpage'}),
|
||||
"<img src=/images/left.gif border=0 align=middle>");
|
||||
}
|
||||
print "<font size=+1>",&text('index_position', $s+1, $e+1,
|
||||
scalar(@rules)),"</font>\n";
|
||||
if ($e < @rules-1) {
|
||||
print &ui_link("?start=".
|
||||
($s + $config{'perpage'}),
|
||||
"<img src=/images/right.gif border=0 align=middle>");
|
||||
}
|
||||
print "</center>\n";
|
||||
}
|
||||
else {
|
||||
# Can show them all
|
||||
$s = 0;
|
||||
$e = @rules - 1;
|
||||
}
|
||||
|
||||
@rules = @rules[$s..$e];
|
||||
|
||||
if (@rules) {
|
||||
@links = ( &select_all_link("d", $form),
|
||||
&select_invert_link("d", $form) );
|
||||
print &ui_links_row(\@links);
|
||||
|
||||
# Generate the header
|
||||
local (@hcols, @tds);
|
||||
push(@hcols, "", $text{'index_action'});
|
||||
push(@tds, "width=5", "width=20% nowrap");
|
||||
if ($config{'view_condition'}) {
|
||||
push(@hcols, $text{'index_desc'});
|
||||
push(@tds, "");
|
||||
}
|
||||
if ($config{'view_comment'}) {
|
||||
push(@hcols, $text{'index_comm'});
|
||||
push(@tds, "");
|
||||
}
|
||||
push(@hcols, $text{'index_move'}, $text{'index_add'});
|
||||
push(@tds, "width=32", "width=32");
|
||||
print &ui_columns_start(\@hcols, 100, 0, \@tds);
|
||||
|
||||
# Generate a row for each rule
|
||||
foreach $r (@rules) {
|
||||
$edit = &can_jump($r);
|
||||
local @cols;
|
||||
local $act =
|
||||
$text{"index_jump_".lc($r->{'j'}->[1])} ||
|
||||
&text('index_jump', $r->{'j'}->[1]);
|
||||
if ($edit) {
|
||||
push(@cols, &ui_link("edit_rule.cgi?table=".&urlize($in{'table'})."&idx=$r->{'index'}",$act));
|
||||
}
|
||||
else {
|
||||
push(@cols, "", $act);
|
||||
}
|
||||
if ($config{'view_condition'}) {
|
||||
push(@cols, &describe_rule($r));
|
||||
}
|
||||
if ($config{'view_comment'}) {
|
||||
$cmt = $config{'comment_mod'} ||
|
||||
$r->{'comment'} ?
|
||||
$r->{'comment'}->[1] : $r->{'cmt'};
|
||||
push(@cols, $cmt);
|
||||
}
|
||||
|
||||
# Up/down mover
|
||||
local $mover;
|
||||
if ($r eq $rules[@rules-1]) {
|
||||
$mover .= "<img src=images/gap.gif>";
|
||||
}
|
||||
else {
|
||||
$mover .= "<a href='move.cgi?table=".
|
||||
&urlize($in{'table'}).
|
||||
"&idx=$r->{'index'}&".
|
||||
"down=1'><img src=".
|
||||
"images/down.gif border=0></a>";
|
||||
}
|
||||
if ($r eq $rules[0]) {
|
||||
$mover .= "<img src=images/gap.gif>";
|
||||
}
|
||||
else {
|
||||
$mover .= "<a href='move.cgi?table=".
|
||||
&urlize($in{'table'}).
|
||||
"&idx=$r->{'index'}&".
|
||||
"up=1'><img src=images/up.gif ".
|
||||
"border=0></a>";
|
||||
}
|
||||
push(@cols, $mover);
|
||||
|
||||
# Before / after adder
|
||||
local $adder;
|
||||
$adder .= "<a href='edit_rule.cgi?table=".
|
||||
&urlize($in{'table'}).
|
||||
"&chain=".&urlize($c)."&new=1&".
|
||||
"after=$r->{'index'}'><img src=".
|
||||
"images/after.gif border=0></a>";
|
||||
$adder .= "<a href='edit_rule.cgi?table=".
|
||||
&urlize($in{'table'}).
|
||||
"&chain=".&urlize($c)."&new=1&".
|
||||
"before=$r->{'index'}'><img src=".
|
||||
"images/before.gif border=0></a>";
|
||||
push(@cols, $adder);
|
||||
|
||||
if ($edit) {
|
||||
print &ui_checked_columns_row(
|
||||
\@cols, \@tds, "d", $r->{'index'});
|
||||
}
|
||||
else {
|
||||
print &ui_columns_row(\@cols, \@tds);
|
||||
}
|
||||
}
|
||||
print &ui_columns_end();
|
||||
print &ui_links_row(\@links);
|
||||
}
|
||||
else {
|
||||
print "<b>$text{'index_none'}</b><br>\n";
|
||||
}
|
||||
|
||||
# Show policy changing button for chains that support it,
|
||||
# and rule-adding button
|
||||
print "<table width=100%><tr>\n";
|
||||
local $d = $table->{'defaults'}->{$c};
|
||||
if ($d ne '-') {
|
||||
# Built-in chain
|
||||
if ($access{'policy'}) {
|
||||
# Change default button
|
||||
print "<td width=33% nowrap>",
|
||||
&ui_submit($text{'index_policy'}),"\n";
|
||||
print "<select name=policy>\n";
|
||||
foreach $t ('ACCEPT','DROP','QUEUE','RETURN') {
|
||||
printf "<option value=%s %s>%s</option>\n",
|
||||
$t, $d eq $t ? "selected" : "",
|
||||
$text{"index_policy_".lc($t)};
|
||||
}
|
||||
print "</select></td>\n";
|
||||
}
|
||||
else {
|
||||
print "<td width=33%></td>\n";
|
||||
}
|
||||
print "<td align=center width=33%>\n";
|
||||
if (@rules) {
|
||||
# Delete selected button
|
||||
print &ui_submit($text{'index_cdeletesel'},
|
||||
"delsel"),"\n";
|
||||
|
||||
# Move selected button
|
||||
print &ui_submit($text{'index_cmovesel'},
|
||||
"movesel"),"\n";
|
||||
}
|
||||
print "</td>\n";
|
||||
}
|
||||
else {
|
||||
# Custom chain
|
||||
if ($access{'delchain'}) {
|
||||
# Delete and rename chain buttons
|
||||
print "<td width=33%>",
|
||||
&ui_submit($text{'index_cdelete'}, "delete"),
|
||||
"\n",
|
||||
&ui_submit($text{'index_crename'}, "rename"),
|
||||
"</td>\n";
|
||||
}
|
||||
print "<td align=center width=33%>\n";
|
||||
if (@rules) {
|
||||
# Clear chain button
|
||||
if ($access{'delchain'}) {
|
||||
print &ui_submit($text{'index_cclear'},
|
||||
"clear"),"\n";
|
||||
}
|
||||
|
||||
# Delete rules button
|
||||
print &ui_submit($text{'index_cdeletesel'},
|
||||
"delsel"),"\n";
|
||||
|
||||
# Move selected button
|
||||
print &ui_submit($text{'index_cmovesel'},
|
||||
"movesel"),"\n";
|
||||
}
|
||||
print "</td>\n";
|
||||
}
|
||||
print "<td align=right width=33%>",
|
||||
&ui_submit($text{'index_radd'}, "add"),"</td>\n";
|
||||
print "</tr></table></form>\n";
|
||||
$form++;
|
||||
}
|
||||
|
||||
# Display buttons for applying and un-applying the configuration,
|
||||
# and for creating an init script if possible
|
||||
print &ui_hr();
|
||||
print &ui_buttons_start();
|
||||
|
||||
if (!$config{'direct'}) {
|
||||
# Buttons to apply and reset the config
|
||||
if (&foreign_check("servers")) {
|
||||
@servers = &list_cluster_servers();
|
||||
}
|
||||
if ($access{'apply'}) {
|
||||
print &ui_buttons_row("apply.cgi",
|
||||
$text{'index_apply'},
|
||||
@servers ? $text{'index_applydesc2'}
|
||||
: $text{'index_applydesc'},
|
||||
[ [ "table", $in{'table'} ] ]);
|
||||
}
|
||||
|
||||
if ($access{'unapply'}) {
|
||||
print &ui_buttons_row("unapply.cgi",
|
||||
$text{'index_unapply'},
|
||||
$text{'index_unapplydesc'},
|
||||
[ [ "table", $in{'table'} ] ]);
|
||||
}
|
||||
|
||||
if ($init_support && $access{'bootup'}) {
|
||||
print &ui_buttons_row("bootup.cgi",
|
||||
$text{'index_bootup'},
|
||||
$text{'index_bootupdesc'},
|
||||
[ [ "table", $in{'table'} ] ],
|
||||
&ui_yesno_radio("boot", $atboot));
|
||||
}
|
||||
|
||||
if ($access{'setup'}) {
|
||||
print &ui_buttons_row("index.cgi",
|
||||
$text{'index_reset'}, $text{'index_resetdesc'},
|
||||
[ [ "reset", 1 ] ]);
|
||||
}
|
||||
}
|
||||
else {
|
||||
# Button to save the live config in a file
|
||||
if ($access{'unapply'}) {
|
||||
print &ui_buttons_row("unapply.cgi",
|
||||
$text{'index_unapply2'},
|
||||
$text{'index_unapply2desc'},
|
||||
[ [ "table", $in{'table'} ] ]);
|
||||
}
|
||||
}
|
||||
|
||||
# Show button for cluster page
|
||||
if (&foreign_check("servers")) {
|
||||
&foreign_require("servers", "servers-lib.pl");
|
||||
@allservers = grep { $_->{'user'} }
|
||||
&servers::list_servers();
|
||||
}
|
||||
if ($access{'cluster'} && @allservers) {
|
||||
print &ui_buttons_row(
|
||||
"cluster.cgi", $text{'index_cluster'},
|
||||
$text{'index_clusterdesc'});
|
||||
}
|
||||
|
||||
print &ui_buttons_end();
|
||||
}
|
||||
|
||||
&ui_print_footer("/", $text{'index'});
|
||||
|
||||
sub external_firewall_message
|
||||
{
|
||||
local $fwname="";
|
||||
local $fwconfig="$gconfig{'webprefix'}/config.cgi?firewall";
|
||||
|
||||
# detect external firewalls
|
||||
local ($filter) = grep { $_->{'name'} eq 'filter' } @{$_[0]};
|
||||
if ($filter->{'defaults'}->{'shorewall'}) {
|
||||
$fwname.='shorewall ';
|
||||
}
|
||||
if ($filter->{'defaults'}->{'INPUT_ZONES'}) {
|
||||
$fwname.='firewalld ';
|
||||
}
|
||||
if ($filter->{'defaults'} ~~ /^f2b-|^fail2ban-/) {
|
||||
$fwname.='fail2ban ';
|
||||
}
|
||||
# warning about not using direct
|
||||
if($fwname && !$config{'direct'}) {
|
||||
print "<b><center>",
|
||||
&text('index_filter_nodirect', $fwconfig),
|
||||
"</b></center><p>\n";
|
||||
}
|
||||
# naming the detected firewall modules
|
||||
foreach my $word (split ' ', $fwname) {
|
||||
print "<center>",
|
||||
&text("index_$word", "$gconfig{'webprefix'}/$word/", $fwconfig),
|
||||
"</center><p>\n";
|
||||
}
|
||||
}
|
||||
1
firewall6/index.cgi
Symbolic link
1
firewall6/index.cgi
Symbolic link
@ -0,0 +1 @@
|
||||
../firewall/index.cgi
|
||||
Reference in New Issue
Block a user