Initial revision

author: Scott Ullrich <sullrich@pfsense.org> 2004-11-07 03:06:49 +0000
committer: Scott Ullrich <sullrich@pfsense.org> 2004-11-07 03:06:49 +0000
commit: 5b237745003431d487de361ca0980a467ee2f5d5 (patch)
tree: 0a29f0237f9e8e536112f9fc816e7a52bbc19691 /usr/local/www/firewall_nat.php
download: pfsense-5b237745003431d487de361ca0980a467ee2f5d5.zip
pfsense-5b237745003431d487de361ca0980a467ee2f5d5.tar.gz
1 files changed, 171 insertions, 0 deletions
diff --git a/usr/local/www/firewall_nat.php b/usr/local/www/firewall_nat.php
new file mode 100755
index 0000000..1708ef8
--- /dev/null
+++ b/usr/local/www/firewall_nat.php
@@ -0,0 +1,171 @@
+#!/usr/local/bin/php
+<?php 
+/*
+	firewall_nat.php
+	part of m0n0wall (http://m0n0.ch/wall)
+	
+	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
+	All rights reserved.
+	
+	Redistribution and use in source and binary forms, with or without
+	modification, are permitted provided that the following conditions are met:
+	
+	1. Redistributions of source code must retain the above copyright notice,
+	   this list of conditions and the following disclaimer.
+	
+	2. Redistributions in binary form must reproduce the above copyright
+	   notice, this list of conditions and the following disclaimer in the
+	   documentation and/or other materials provided with the distribution.
+	
+	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+	POSSIBILITY OF SUCH DAMAGE.
+*/
+
+require("guiconfig.inc");
+
+if (!is_array($config['nat']['rule'])) {
+	$config['nat']['rule'] = array();
+}
+nat_rules_sort();
+$a_nat = &$config['nat']['rule'];
+
+if ($_POST) {
+
+	$pconfig = $_POST;
+
+	if ($_POST['apply']) {
+		$retval = 0;
+		if (!file_exists($d_sysrebootreqd_path)) {
+			config_lock();
+			$retval |= filter_configure();
+			config_unlock();
+		}
+		$savemsg = get_std_save_message($retval);
+		
+		if ($retval == 0) {
+			if (file_exists($d_natconfdirty_path))
+				unlink($d_natconfdirty_path);
+			if (file_exists($d_filterconfdirty_path))
+				unlink($d_filterconfdirty_path);
+		}
+	}
+}
+
+if ($_GET['act'] == "del") {
+	if ($a_nat[$_GET['id']]) {
+		unset($a_nat[$_GET['id']]);
+		write_config();
+		touch($d_natconfdirty_path);
+		header("Location: firewall_nat.php");
+		exit;
+	}
+}
+?>
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html>
+<head>
+<title><?=gentitle("Firewall: NAT");?></title>
+<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
+<link href="gui.css" rel="stylesheet" type="text/css">
+</head>
+
+<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
+<?php include("fbegin.inc"); ?>
+<p class="pgtitle">Firewall: NAT</font></p>
+<form action="firewall_nat.php" method="post">
+<?php if ($savemsg) print_info_box($savemsg); ?>
+<?php if (file_exists($d_natconfdirty_path)): ?><p>
+<?php print_info_box_np("The NAT configuration has been changed.<br>You must apply the changes in order for them to take effect.");?><br>
+<input name="apply" type="submit" class="formbtn" id="apply" value="Apply changes"></p>
+<?php endif; ?>
+<table width="100%" border="0" cellpadding="0" cellspacing="0">
+  <tr><td>
+  <ul id="tabnav">
+    <li class="tabact">Inbound</li>
+    <li class="tabinact"><a href="firewall_nat_server.php">Server NAT</a></li>
+    <li class="tabinact"><a href="firewall_nat_1to1.php">1:1</a></li>
+    <li class="tabinact"><a href="firewall_nat_out.php">Outbound</a></li>
+  </ul>
+  </td></tr>
+  <tr> 
+    <td class="tabcont">
+              <table width="100%" border="0" cellpadding="0" cellspacing="0">
+                <tr> 
+                  <td width="5%" class="listhdrr">If</td>
+                  <td width="5%" class="listhdrr">Proto</td>
+                  <td width="20%" class="listhdrr">Ext. port range</td>
+                  <td width="20%" class="listhdrr">NAT IP</td>
+                  <td width="20%" class="listhdrr">Int. port range</td>
+                  <td width="20%" class="listhdr">Description</td>
+                  <td width="5%" class="list"></td>
+				</tr>
+			  <?php $i = 0; foreach ($a_nat as $natent): ?>
+                <tr valign="top"> 
+				  <td class="listlr">
+                  <?php
+						if (!$natent['interface'] || ($natent['interface'] == "wan"))
+							echo "WAN";
+						else
+							echo htmlspecialchars($config['interfaces'][$natent['interface']]['descr']);
+				  ?>
+                  </td>
+                  <td class="listr"> 
+                    <?=strtoupper($natent['protocol']);?>
+                  </td>
+                  <td class="listr">
+                    <?php 
+						list($beginport, $endport) = split("-", $natent['external-port']);
+						if ((!$endport) || ($beginport == $endport)) {
+				  			echo $beginport;
+							if ($wkports[$beginport])
+								echo " (" . $wkports[$beginport] . ")";
+						} else
+							echo $beginport . " - " . $endport;
+				  ?>
+                  </td>
+                  <td class="listr"> 
+                    <?=$natent['target'];?>
+					<?php if ($natent['external-address'])
+						echo "<br>(ext.: " . $natent['external-address'] . ")";
+					?>
+                  </td>
+                  <td class="listr"> 
+                    <?php if ((!$endport) || ($beginport == $endport)) {
+				  			echo $natent['local-port'];
+							if ($wkports[$natent['local-port']])
+								echo " (" . $wkports[$natent['local-port']] . ")";
+						} else
+							echo $natent['local-port'] . " - " . 
+								($natent['local-port']+$endport-$beginport);
+				  ?>
+                  </td>
+                  <td class="listbg"> 
+                    <?=htmlspecialchars($natent['descr']);?>&nbsp;
+                  </td>
+                  <td valign="middle" class="list" nowrap> <a href="firewall_nat_edit.php?id=<?=$i;?>"><img src="e.gif" width="17" height="17" border="0"></a>
+                     &nbsp;<a href="firewall_nat.php?act=del&id=<?=$i;?>" onclick="return confirm('Do you really want to delete this rule?')"><img src="x.gif" width="17" height="17" border="0"></a></td>
+				</tr>
+			  <?php $i++; endforeach; ?>
+                <tr> 
+                  <td class="list" colspan="6"></td>
+                  <td class="list"> <a href="firewall_nat_edit.php"><img src="plus.gif" width="17" height="17" border="0"></a></td>
+				</tr>
+              </table>
+                    <p><span class="vexpl"><span class="red"><strong>Note:<br>
+                      </strong></span>It is not possible to access NATed services 
+                      using the WAN IP address from within LAN (or an optional 
+                      network).</span></p></td>
+  </tr>
+</table>
+            </form>
+<?php include("fend.inc"); ?>
+</body>
+</html>
author	Scott Ullrich <sullrich@pfsense.org>	2004-11-07 03:06:49 +0000
committer	Scott Ullrich <sullrich@pfsense.org>	2004-11-07 03:06:49 +0000
commit	5b237745003431d487de361ca0980a467ee2f5d5 (patch)
tree	0a29f0237f9e8e536112f9fc816e7a52bbc19691 /usr/local/www/firewall_nat.php
download	pfsense-5b237745003431d487de361ca0980a467ee2f5d5.zip pfsense-5b237745003431d487de361ca0980a467ee2f5d5.tar.gz