diff options
-rwxr-xr-x | usr/local/www/diag_dump_states.php | 9 | ||||
-rw-r--r-- | usr/local/www/diag_dump_states_sources.php | 210 | ||||
-rwxr-xr-x | usr/local/www/diag_resetstate.php | 28 |
3 files changed, 241 insertions, 6 deletions
diff --git a/usr/local/www/diag_dump_states.php b/usr/local/www/diag_dump_states.php index a8671c1..3ec8935 100755 --- a/usr/local/www/diag_dump_states.php +++ b/usr/local/www/diag_dump_states.php @@ -106,10 +106,11 @@ include("head.inc"); <tr> <td> <?php - $tab_array = array( - array(gettext("States"), true, "diag_dump_states.php"), - array(gettext("Reset states"), false, "diag_resetstate.php") - ); + $tab_array = array(); + $tab_array[] = array(gettext("States"), true, "diag_dump_states.php"); + if (isset($config['system']['lb_use_sticky'])) + $tab_array[] = array(gettext("Source Tracking"), false, "diag_dump_states_sources.php"); + $tab_array[] = array(gettext("Reset States"), false, "diag_resetstate.php"); display_top_tabs($tab_array); ?> </td> diff --git a/usr/local/www/diag_dump_states_sources.php b/usr/local/www/diag_dump_states_sources.php new file mode 100644 index 0000000..c4eda42 --- /dev/null +++ b/usr/local/www/diag_dump_states_sources.php @@ -0,0 +1,210 @@ +<?php +/* + diag_dump_states.php + Copyright (C) 2005-2009 Scott Ullrich + Copyright (C) 2005 Colin Smith + All rights reserved. + + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + + 1. Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + + THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, + INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY + AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE + AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, + OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. +*/ + +/* + pfSense_BUILDER_BINARIES: /sbin/pfctl + pfSense_MODULE: filter +*/ + +##|+PRIV +##|*IDENT=page-diagnostics-showstates +##|*NAME=Diagnostics: Show States page +##|*DESCR=Allow access to the 'Diagnostics: Show States' page. +##|*MATCH=diag_dump_states.php* +##|-PRIV + +require_once("guiconfig.inc"); + +/* handle AJAX operations */ +if($_GET['action']) { + if($_GET['action'] == "remove") { + if (is_ipaddr($_GET['srcip']) and is_ipaddr($_GET['dstip'])) { + $retval = mwexec("/sbin/pfctl -K " . escapeshellarg($_GET['srcip']) . " -K " . escapeshellarg($_GET['dstip'])); + echo htmlentities("|{$_GET['srcip']}|{$_GET['dstip']}|{$retval}|"); + } else { + echo gettext("invalid input"); + } + exit; + } +} + +/* get our states */ +if($_GET['filter']) { + exec("/sbin/pfctl -s Sources | grep " . escapeshellarg(htmlspecialchars($_GET['filter'])), $sources); +} +else { + exec("/sbin/pfctl -s Sources", $sources); +} + +$pgtitle = array(gettext("Diagnostics"),gettext("Show Source Tracking")); +include("head.inc"); + +?> + +<body link="#0000CC" vlink="#0000CC" alink="#0000CC" onload="<?=$jsevents["body"]["onload"];?>"> +<script src="/javascript/sorttable.js" type="text/javascript"></script> +<?php include("fbegin.inc"); ?> +<form action="diag_dump_states_sources.php" method="get" name="iform"> + +<script type="text/javascript"> + function removeSource(srcip, dstip) { + var busy = function(icon) { + icon.onclick = ""; + icon.src = icon.src.replace("\.gif", "_d.gif"); + icon.style.cursor = "wait"; + } + + $A(document.getElementsByName("i:" + srcip + ":" + dstip)).each(busy); + + new Ajax.Request( + "<?=$_SERVER['SCRIPT_NAME'];?>" + + "?action=remove&srcip=" + srcip + "&dstip=" + dstip, + { method: "get", onComplete: removeComplete } + ); + } + + function removeComplete(req) { + var values = req.responseText.split("|"); + if(values[3] != "0") { + alert('<?=gettext("An error occurred.");?>'); + return; + } + + $A(document.getElementsByName("r:" + values[1] + ":" + values[2])).each( + function(row) { Effect.Fade(row, { duration: 1.0 }); } + ); + } +</script> + +<table width="100%" border="0" cellpadding="0" cellspacing="0"> + <tr> + <td> + <?php + $tab_array = array(); + $tab_array[] = array(gettext("States"), false, "diag_dump_states.php"); + $tab_array[] = array(gettext("Source Tracking"), true, "diag_dump_states_sources.php"); + $tab_array[] = array(gettext("Reset States"), false, "diag_resetstate.php"); + display_top_tabs($tab_array); + ?> + </td> + </tr> + <tr> + <td> + <div id="mainarea"> + +<!-- Start of tab content --> + +<table class="tabcont" width="100%" border="0" cellspacing="0" cellpadding="0"> + <tr> + <td> + <form action="<?=$_SERVER['SCRIPT_NAME'];?>" method="get"> + <table class="tabcont" width="100%" border="0" cellspacing="0" cellpadding="0"> + <tr> + <td> </td> + <td style="font-weight:bold;" align="right"> + <?=gettext("Filter expression:");?> + <input type="text" name="filter" class="formfld search" value="<?=htmlspecialchars($_GET['filter']);?>" size="30" /> + <input type="submit" class="formbtn" value="<?=gettext("Filter");?>" /> + <td> + </tr> + </table> + </form> + </td> + </tr> + <tr> + <td> + <table class="tabcont sortable" width="100%" border="0" cellspacing="0" cellpadding="0"> + <thead> + <tr> + <th class="listhdrr" width="40%"><?=gettext("Source -> Destination");?></th> + <th class="listhdrr" width="15%"><?=gettext("# States");?></th> + <th class="listhdrr" width="15%"><?=gettext("# Connections");?></th> + <th class="listhdr" width="15%"><?=gettext("Rate");?></th> + <th class="list sort_ignore" width="1%"></th> + </tr> + </thead> + <tbody> +<?php +$row = 0; +if(count($sources) > 0) { + foreach($sources as $line) { + if($row >= 1000) + break; + + // 192.168.20.2 -> 216.252.56.1 ( states 10, connections 0, rate 0.0/0s ) + + $source_split = ""; + preg_match("/(.*)\s\(\sstates\s(.*),\sconnections\s(.*),\srate\s(.*)\s\)/", $line, $source_split); + list($all, $info, $numstates, $numconnections, $rate) = $source_split; + + $source_split = ""; + preg_match("/(.*)\s\<?-\>?\s(.*)/", $info, $source_split); + list($all, $srcip, $dstip) = $source_split; + + ?> + <tr valign='top' name='r:<?php echo "{$srcip}:{$dstip}" ?>'> + <td class='listlr'><?php echo $info;?></td> + <td class='listr'><?php echo $numstates;?></td> + <td class='listr'><?php echo $numconnections;?></td> + <td class='listr'><?php echo $rate;?></td> + <td class='list'> + <img src='/themes/<?php echo $g['theme']; ?>/images/icons/icon_x.gif' height='17' width='17' border='0' + onclick="removeSource(<?php echo "'{$srcip}', '{$dstip}'"; ?>);" style='cursor:pointer; + name='i:<?php echo "{$srcip}:{$dstip}"; ?> + title='<?php echo gettext("Remove all source tracking entries from") . " {$srcip} " . gettext("to") . " {$dstip}";?>' alt='' /> + </td> + </tr> + <?php + $row++; + } +} +else { + echo "<tr> + <td class='list' colspan='5' align='center' valign='top'> + " . gettext("No source tracking entries were found.") . " + </td> + </tr>"; +} +?> + </tbody> + </table> + </td> + </tr> +</table> + +<!-- End of tab content --> + + </div> + </td> + </tr> +</table> + +<?php require("fend.inc"); ?> +</body> +</html> diff --git a/usr/local/www/diag_resetstate.php b/usr/local/www/diag_resetstate.php index f56a65b..b537821 100755 --- a/usr/local/www/diag_resetstate.php +++ b/usr/local/www/diag_resetstate.php @@ -53,6 +53,12 @@ if ($_POST) { $savemsg .= " "; $savemsg .= gettext("The state table has been flushed successfully."); } + if ($_POST['sourcetracking']) { + mwexec("/sbin/pfctl -F Sources"); + if ($savemsg) + $savemsg .= " <br/>"; + $savemsg .= gettext("The source tracking table has been flushed successfully."); + } } $pgtitle = array(gettext("Diagnostics"), gettext("Reset state")); @@ -68,8 +74,10 @@ include("head.inc"); <tr><td> <?php $tab_array = array(); - $tab_array[0] = array(gettext("States"), false, "diag_dump_states.php"); - $tab_array[1] = array(gettext("Reset States"), true, "diag_resetstate.php"); + $tab_array[] = array(gettext("States"), false, "diag_dump_states.php"); + if (isset($config['system']['lb_use_sticky'])) + $tab_array[] = array(gettext("Source Tracking"), false, "diag_dump_states_sources.php"); + $tab_array[] = array(gettext("Reset States"), true, "diag_resetstate.php"); display_top_tabs($tab_array); ?> </td></tr> @@ -97,6 +105,22 @@ include("head.inc"); "Simply refresh the page to continue."); ?></span></p> </td> </tr> + <?php if (isset($config['system']['lb_use_sticky'])): ?> + <tr> + <td width="22%" valign="top" class="vtable"> </td> + <td width="78%" class="vtable"><p> + <input name="sourcetracking" type="checkbox" id="sourcetracking" value="yes" checked> + <strong><?= gettext("Firewall Source Tracking"); ?></strong><br> + <span class="vexpl"><br> + <?=gettext("Resetting the source tracking table will remove all source/destination associations. " . + "This means that the \"sticky\" source/destination association " . + "will be cleared for all clients."); ?><br> + <br> + </span><span class="vexpl"><?=gettext("This does not clear active connection states, only source tracking."); ?><br> + </p> + </td> + </tr> + <?php endif; ?> <tr> <td width="22%" valign="top"> </td> <td width="78%"> |