0) $rulesid .= ","; $rulesid .= "{$rules[$j]['id']}"; } printf("packets: %s
bytes: %s
states: %s
state creations: %s\" data-html=\"true\">", format_number($evaluations), format_number($packets), format_bytes($bytes), format_number($states), format_number($stcreations)); printf("%d/%s
", format_number($states), format_bytes($bytes)); } function delete_nat_association($id) { global $config; if (!$id || !is_array($config['nat']['rule'])) { return; } $a_nat = &$config['nat']['rule']; foreach ($a_nat as &$natent) { if ($natent['associated-rule-id'] == $id) { $natent['associated-rule-id'] = ''; } } } if (!is_array($config['filter']['rule'])) { $config['filter']['rule'] = array(); } filter_rules_sort(); $a_filter = &$config['filter']['rule']; $if = $_GET['if']; if ($_POST['if']) { $if = $_POST['if']; } $ifdescs = get_configured_interface_with_descr(); /* add group interfaces */ if (is_array($config['ifgroups']['ifgroupentry'])) { foreach ($config['ifgroups']['ifgroupentry'] as $ifgen) { if (have_ruleint_access($ifgen['ifname'])) { $iflist[$ifgen['ifname']] = $ifgen['ifname']; } } } foreach ($ifdescs as $ifent => $ifdesc) { if (have_ruleint_access($ifent)) { $iflist[$ifent] = $ifdesc; } } if ($config['l2tp']['mode'] == "server") { if (have_ruleint_access("l2tp")) { $iflist['l2tp'] = gettext("L2TP VPN"); } } if (is_array($config['pppoes']['pppoe'])) { foreach ($config['pppoes']['pppoe'] as $pppoes) { if (($pppoes['mode'] == 'server') && have_ruleint_access("pppoe")) { $iflist['pppoe'] = gettext("PPPoE Server"); } } } /* add ipsec interfaces */ if (ipsec_enabled() && have_ruleint_access("enc0")) { $iflist["enc0"] = gettext("IPsec"); } /* add openvpn/tun interfaces */ if ($config['openvpn']["openvpn-server"] || $config['openvpn']["openvpn-client"]) { $iflist["openvpn"] = gettext("OpenVPN"); } if (!$if || !isset($iflist[$if])) { if ("any" == $if) { $if = "FloatingRules"; } else if ("FloatingRules" != $if) { if (isset($iflist['wan'])) { $if = "wan"; } else { $if = "FloatingRules"; } } } if ($_POST) { $pconfig = $_POST; if ($_POST['apply']) { $retval = 0; $retval = filter_configure(); clear_subsystem_dirty('filter'); $savemsg = sprintf(gettext("The settings have been applied. The firewall rules are now reloading in the background.
You can also %s monitor %s the reload progress"), "", ""); } } if ($_GET['act'] == "del") { if ($a_filter[$_GET['id']]) { if (!empty($a_filter[$_GET['id']]['associated-rule-id'])) { delete_nat_association($a_filter[$_GET['id']]['associated-rule-id']); } unset($a_filter[$_GET['id']]); // get rule index within interface $ifridx = ifridx($if, $_GET['id']); // Update the separators $a_separators = &$config['filter']['separator'][strtolower($if)]; for ($idx=0; isset($a_separators['sep' . $idx]); $idx++ ) { $seprow = substr($a_separators['sep' . $idx]['row']['0'], 2); if ($seprow > $ifridx) { $a_separators['sep' . $idx]['row']['0'] = 'fr' . ($seprow - 1); } } if (write_config()) { mark_subsystem_dirty('filter'); } header("Location: firewall_rules.php?if=" . htmlspecialchars($if)); exit; } } // Handle save msg if defined if ($_REQUEST['savemsg']) { $savemsg = htmlentities($_REQUEST['savemsg']); } if (isset($_POST['del_x'])) { /* delete selected rules */ $deleted = false; if (is_array($_POST['rule']) && count($_POST['rule'])) { $a_separators = &$config['filter']['separator'][strtolower($if)]; foreach ($_POST['rule'] as $rulei) { delete_nat_association($a_filter[$rulei]['associated-rule-id']); unset($a_filter[$rulei]); $deleted = true; // get rule index within interface $ifridx = ifridx($if, $rulei); // Update the separators for ($idx=0; isset($a_separators['sep' . $idx]); $idx++ ) { $seprow = substr($a_separators['sep' . $idx]['row']['0'], 2); if ($seprow > $ifridx) { $a_separators['sep' . $idx]['row']['0'] = 'fr' . ($seprow - 1); } } } if ($deleted) { if (write_config()) { mark_subsystem_dirty('filter'); } } header("Location: firewall_rules.php?if=" . htmlspecialchars($if)); exit; } } else if ($_GET['act'] == "toggle") { if ($a_filter[$_GET['id']]) { if (isset($a_filter[$_GET['id']]['disabled'])) { unset($a_filter[$_GET['id']]['disabled']); } else { $a_filter[$_GET['id']]['disabled'] = true; } if (write_config()) { mark_subsystem_dirty('filter'); } header("Location: firewall_rules.php?if=" . htmlspecialchars($if)); exit; } } else if ($_POST['order-store']) { /* update rule order, POST[rule] is an array of ordered IDs */ if (is_array($_POST['rule']) && !empty($_POST['rule'])) { $a_filter_new = array(); // get the rules of other interfaces listed in config before this interface. for ($i = 0; (isset($a_filter[$i]) && (($a_filter[$i]['interface'] != $if && !isset($a_filter[$i]['floating'])) || (isset($a_filter[$i]['floating']) && "FloatingRules" != $if)) ); $i++) { $a_filter_new[] = $a_filter[$i]; } // include the rules of this interface. // if a rule is not in POST[rule], it has been deleted by the user foreach ($_POST['rule'] as $id) { $a_filter_new[] = $a_filter[$id]; } // get the rules of other interfaces listed in config after this interface. for ( ; (isset($a_filter[$i])); $i++) { if (($a_filter[$i]['interface'] != $if && !isset($a_filter[$i]['floating'])) || (isset($a_filter[$i]['floating']) && "FloatingRules" != $if)) { $a_filter_new[] = $a_filter[$i]; } } $a_filter = $a_filter_new; $config['filter']['separator'][strtolower($if)] = ""; if ($_POST['separator']) { $idx = 0; foreach ($_POST['separator'] as $separator) { $config['filter']['separator'][strtolower($separator['if'])]['sep' . $idx++] = $separator; } } if (write_config()) { mark_subsystem_dirty('filter'); } header("Location: firewall_rules.php?if=" . htmlspecialchars($if)); exit; } } $tab_array = array(array(gettext("Floating"), ("FloatingRules" == $if), "firewall_rules.php?if=FloatingRules")); foreach ($iflist as $ifent => $ifname) { $tab_array[] = array($ifname, ($ifent == $if), "firewall_rules.php?if={$ifent}"); } foreach ($tab_array as $dtab) { if ($dtab[1]) { $bctab = $dtab[0]; break; } } $pgtitle = array(gettext("Firewall"), gettext("Rules"), $bctab); $shortcut_section = "firewall"; include("head.inc"); $nrules = 0; if ($savemsg) { print_info_box($savemsg, 'success'); } if (is_subsystem_dirty('filter')) { print_apply_box(gettext("The firewall rule configuration has been changed.") . "
" . gettext("You must apply the changes in order for them to take effect.")); } display_top_tabs($tab_array); $showantilockout = false; $showprivate = false; $showblockbogons = false; if (!isset($config['system']['webgui']['noantilockout']) && (((count($config['interfaces']) > 1) && ($if == 'lan')) || ((count($config['interfaces']) == 1) && ($if == 'wan')))) { $showantilockout = true; } if (isset($config['interfaces'][$if]['blockpriv'])) { $showprivate = true; } if (isset($config['interfaces'][$if]['blockbogons'])) { $showblockbogons = true; } /* Load the counter data of each pf rule. */ $rulescnt = pfSense_get_pf_rules(); // Update this if you add or remove columns! $columns_in_table = 13; ?>

1, or WAN with an if count of 1. if ($showantilockout): $alports = implode('
', filter_get_antilockout_ports(true)); ?> > "; } } #FIXME $sched_caption_escaped = str_replace("'", "\'", $schedule['descr']); $schedule_span_begin = ''; $schedule_span_end = ""; } } $idx++; } $printicon = false; $alttext = ""; $image = ""; if (!isset($filterent['disabled'])) { if ($schedstatus) { if ($filterent['type'] == "block" || $filterent['type'] == "reject") { $image = "times-circle"; $dispcolor = "text-danger"; $alttext = gettext("Traffic matching this rule is currently being denied"); } else { $image = "play-circle"; $dispcolor = "text-success"; $alttext = gettext("Traffic matching this rule is currently being allowed"); } $printicon = true; } else if ($filterent['sched']) { if ($filterent['type'] == "block" || $filterent['type'] == "reject") { $image = "times-circle"; } else { $image = "play-circle"; } $alttext = gettext("This rule is not currently active because its period has expired"); $dispcolor = "text-warning"; $printicon = true; } } ?>
"> * * * Address * * ">
"> * * * * * * ">
"> * ");?> * * * * * ">
"> '; } $isadvset = firewall_check_for_advanced_options($filterent); if ($isadvset) { print ''; } if (isset($filterent['log'])) { print ''; } ?> '; echo $filterent['icmptype']; echo ''; } } else echo "*"; ?> {$desc}"; $desc = $filterent['defaultqueue']; echo "/{$desc}"; } else if (isset($filterent['defaultqueue'])) { $desc = $filterent['defaultqueue']; echo "{$desc}"; } else { echo gettext("none"); } ?>