firewall_rules.php 40.1 KB
Newer Older
Ad Schellevis's avatar
Ad Schellevis committed
1
<?php
2

Ad Schellevis's avatar
Ad Schellevis committed
3
/*
4
	Copyright (C) 2014-2015 Deciso B.V.
Ad Schellevis's avatar
Ad Schellevis committed
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
	Copyright (C) 2005 Scott Ullrich (sullrich@gmail.com)
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
	All rights reserved.

	Redistribution and use in source and binary forms, with or without
	modification, are permitted provided that the following conditions are met:

	1. Redistributions of source code must retain the above copyright notice,
	   this list of conditions and the following disclaimer.

	2. Redistributions in binary form must reproduce the above copyright
	   notice, this list of conditions and the following disclaimer in the
	   documentation and/or other materials provided with the distribution.

	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
	POSSIBILITY OF SUCH DAMAGE.
*/

31
require_once("guiconfig.inc");
32
require_once("functions.inc");
Ad Schellevis's avatar
Ad Schellevis committed
33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63
require_once("filter.inc");
require_once("shaper.inc");

$pgtitle = array(gettext("Firewall"),gettext("Rules"));
$shortcut_section = "firewall";

function delete_nat_association($id) {
	global $config;

	if (!$id || !is_array($config['nat']['rule']))
		return;

	$a_nat = &$config['nat']['rule'];

	foreach ($a_nat as &$natent)
		if ($natent['associated-rule-id'] == $id)
			$natent['associated-rule-id'] = '';
}

if (!is_array($config['filter']['rule'])) {
	$config['filter']['rule'] = array();
}
filter_rules_sort();
$a_filter = &$config['filter']['rule'];

$if = $_GET['if'];
if ($_POST['if'])
	$if = $_POST['if'];

$ifdescs = get_configured_interface_with_descr();

Ad Schellevis's avatar
Ad Schellevis committed
64

Ad Schellevis's avatar
Ad Schellevis committed
65 66
// Drag and drop reordering
if($_REQUEST['dragdroporder']) {
Ad Schellevis's avatar
Ad Schellevis committed
67

68 69 70



Ad Schellevis's avatar
Ad Schellevis committed
71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155
	// First create a new ruleset array and tmp arrays
	$a_filter_before = array();
	$a_filter_order = array();
	$a_filter_order_tmp = array();
	$a_filter_after = array();
	$found = false;
	$drag_order = $_REQUEST['dragtable'];
	// Next traverse through rules building a new order for interface
	for ($i = 0; isset($a_filter[$i]); $i++) {
		if(( $_REQUEST['if'] == "FloatingRules" && isset($a_filter[$i]['floating']) ) || ( $a_filter[$i]['interface'] == $_REQUEST['if'] && !isset($a_filter[$i]['floating']) )) {
			$a_filter_order_tmp[] = $a_filter[$i];
			$found = true;
		} else if (!$found)
			$a_filter_before[] = $a_filter[$i];
		else
			$a_filter_after[] = $a_filter[$i];
	}
	// Reorder rules with the posted order
	for ($i = 0; $i<count($drag_order); $i++)
		$a_filter_order[] = $a_filter_order_tmp[$drag_order[$i]];
	// In case $drag_order didn't account for some rules, make sure we don't lose them
	if(count($a_filter_order) < count($a_filter_order_tmp)) {
		for ($i = 0; $i<count($a_filter_order_tmp); $i++)
			if(!in_array($i, $drag_order))
				$a_filter_order[] = $a_filter_order_tmp[$i];
	}
	// Overwrite filter rules with newly created items
	$config['filter']['rule'] = array_merge($a_filter_before, $a_filter_order, $a_filter_after);
	// Write configuration
	$config = write_config(gettext("Drag and drop firewall rules ordering update."));
	// Redirect back to page
	mark_subsystem_dirty('filter');
	$undo = array();
	foreach($_REQUEST['dragtable'] as $dt)
		$undo[] = "";
	$counter = 0;
	foreach($_REQUEST['dragtable'] as $dt) {
		$undo[$dt] = $counter;
		$counter++;
	}
	foreach($undo as $dt)
		$undotxt .= "&dragtable[]={$dt}";
	header("Location: firewall_rules.php?if=" . $_REQUEST['if'] . "&undodrag=true" . $undotxt);
	exit;
}

$icmptypes = array(
	"" => gettext("any"),
	"echoreq" => gettext("Echo request"),
	"echorep" => gettext("Echo reply"),
	"unreach" => gettext("Destination unreachable"),
	"squench" => gettext("Source quench"),
	"redir" => gettext("Redirect"),
	"althost" => gettext("Alternate Host"),
	"routeradv" => gettext("Router advertisement"),
	"routersol" => gettext("Router solicitation"),
	"timex" => gettext("Time exceeded"),
	"paramprob" => gettext("Invalid IP header"),
	"timereq" => gettext("Timestamp"),
	"timerep" => gettext("Timestamp reply"),
	"inforeq" => gettext("Information request"),
	"inforep" => gettext("Information reply"),
	"maskreq" => gettext("Address mask request"),
	"maskrep" => gettext("Address mask reply")
);

/* add group interfaces */
if (is_array($config['ifgroups']['ifgroupentry']))
	foreach($config['ifgroups']['ifgroupentry'] as $ifgen)
		if (have_ruleint_access($ifgen['ifname']))
			$iflist[$ifgen['ifname']] = $ifgen['ifname'];

foreach ($ifdescs as $ifent => $ifdesc)
	if(have_ruleint_access($ifent))
		$iflist[$ifent] = $ifdesc;

if ($config['l2tp']['mode'] == "server")
	if(have_ruleint_access("l2tp"))
		$iflist['l2tp'] = "L2TP VPN";

if ($config['pptpd']['mode'] == "server")
	if(have_ruleint_access("pptp"))
		$iflist['pptp'] = "PPTP VPN";

if (is_array($config['pppoes']['pppoe'])) {
156 157
	foreach ($config['pppoes']['pppoe'] as $pppoes) {
		if (($pppoes['mode'] == 'server') && have_ruleint_access('pppoe')) {
Ad Schellevis's avatar
Ad Schellevis committed
158
			$iflist['pppoe'] = "PPPoE Server";
159 160
		}
	}
Ad Schellevis's avatar
Ad Schellevis committed
161 162 163
}

/* add ipsec interfaces */
164 165 166 167 168
if (isset($config['ipsec']['enable']) || isset($config['ipsec']['client']['enable'])) {
	if (have_ruleint_access('enc0')) {
		$iflist['enc0'] = 'IPsec';
	}
}
Ad Schellevis's avatar
Ad Schellevis committed
169 170

/* add openvpn/tun interfaces */
171 172 173
if (isset($config['openvpn']['openvpn-server']) || isset($config['openvpn']['openvpn-client'])) {
	$iflist['openvpn'] = 'OpenVPN';
}
Ad Schellevis's avatar
Ad Schellevis committed
174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249

if (!$if || !isset($iflist[$if])) {
	if ("any" == $if)
		$if = "FloatingRules";
	else if ("FloatingRules" != $if) {
		if (isset($iflist['wan']))
			$if = "wan";
		else
			$if = "FloatingRules";
	}
}

if ($_POST) {

	$pconfig = $_POST;

	if ($_POST['apply']) {
		$retval = 0;
		$retval = filter_configure();

		clear_subsystem_dirty('filter');

		$savemsg = sprintf(gettext("The settings have been applied. The firewall rules are now reloading in the background.<br />You can also %s monitor %s the reload progress"),"<a href='status_filter_reload.php'>","</a>");
	}
}

if ($_GET['act'] == "del") {
	if ($a_filter[$_GET['id']]) {
		if (!empty($a_filter[$_GET['id']]['associated-rule-id'])) {
			delete_nat_association($a_filter[$_GET['id']]['associated-rule-id']);
		}
		unset($a_filter[$_GET['id']]);
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
}

// Handle save msg if defined
if($_REQUEST['savemsg'])
	$savemsg = htmlentities($_REQUEST['savemsg']);

if (isset($_POST['del_x'])) {
	/* delete selected rules */
	if (is_array($_POST['rule']) && count($_POST['rule'])) {
		foreach ($_POST['rule'] as $rulei) {
			delete_nat_association($a_filter[$rulei]['associated-rule-id']);
			unset($a_filter[$rulei]);
		}
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
} else if ($_GET['act'] == "toggle") {
	if ($a_filter[$_GET['id']]) {
		if(isset($a_filter[$_GET['id']]['disabled']))
			unset($a_filter[$_GET['id']]['disabled']);
		else
			$a_filter[$_GET['id']]['disabled'] = true;
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
} else {
	/* yuck - IE won't send value attributes for image buttons, while Mozilla does -
	   so we use .x/.y to fine move button clicks instead... */
	unset($movebtn);
	foreach ($_POST as $pn => $pd) {
		if (preg_match("/move_(\d+)_x/", $pn, $matches)) {
			$movebtn = $matches[1];
			break;
		}
	}
Ad Schellevis's avatar
Ad Schellevis committed
250

251 252


Ad Schellevis's avatar
Ad Schellevis committed
253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287
	/* move selected rules before this rule */
	if (isset($movebtn) && is_array($_POST['rule']) && count($_POST['rule'])) {
		$a_filter_new = array();

		/* copy all rules < $movebtn and not selected */
		for ($i = 0; $i < $movebtn; $i++) {
			if (!in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		/* copy all selected rules */
		for ($i = 0; $i < count($a_filter); $i++) {
			if ($i == $movebtn)
				continue;
			if (in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		/* copy $movebtn rule */
		if ($movebtn < count($a_filter))
			$a_filter_new[] = $a_filter[$movebtn];

		/* copy all rules > $movebtn and not selected */
		for ($i = $movebtn+1; $i < count($a_filter); $i++) {
			if (!in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		$a_filter = $a_filter_new;
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
}
Ad Schellevis's avatar
Ad Schellevis committed
288 289 290
$closehead = true;


Ad Schellevis's avatar
Ad Schellevis committed
291 292 293

include("head.inc");
?>
Ad Schellevis's avatar
Ad Schellevis committed
294 295 296 297 298
	<script type="text/javascript" src="/themes/<?=$g['theme'];?>/assets/javascripts/jquery-sortable.js"></script>
	<style type="text/css">
		body.dragging, body.dragging * {
		  cursor: move !important;
		}
299

Ad Schellevis's avatar
Ad Schellevis committed
300 301 302 303 304
		.dragged {
		  position: absolute;
		  opacity: 0.5;
		  z-index: 2000;
		}
305

Ad Schellevis's avatar
Ad Schellevis committed
306 307 308 309 310 311 312
		ol.example li.placeholder {
		  position: relative;
		  /** More li styles **/
		}
		ol.example li.placeholder:before {
		  position: absolute;
		  /** Define arrowhead **/
313
		}
Ad Schellevis's avatar
Ad Schellevis committed
314 315
	</style>
</head>
Ad Schellevis's avatar
Ad Schellevis committed
316
<body>
Ad Schellevis's avatar
Ad Schellevis committed
317 318 319 320 321

<script type='text/javascript'>//<![CDATA[
	jQuery(window).load(
		function(){
			var originalLeave=jQuery.fn.popover.Constructor.prototype.leave;
322
			jQuery.fn.popover.Constructor.prototype.leave=function(obj)
Ad Schellevis's avatar
Ad Schellevis committed
323 324 325 326 327 328
			{
				var self=obj instanceof this.constructor?obj:jQuery(obj.currentTarget)[this.type](this.getDelegateOptions()).data('bs.'+this.type)
				var container,timeout;originalLeave.call(this,obj);
				if(obj.currentTarget){container=jQuery(obj.currentTarget).siblings('.popover')
					timeout=self.timeout;
					container.one('mouseenter',function()
329
					{
Ad Schellevis's avatar
Ad Schellevis committed
330 331
						clearTimeout(timeout);
						container.one('mouseleave',function()
332
						{
Ad Schellevis's avatar
Ad Schellevis committed
333 334 335 336 337 338 339 340 341 342
							jQuery.fn.popover.Constructor.prototype.leave.call(self,self);
						});
					})
				}
			};
			jQuery('body').popover({selector:'[data-popover]',trigger:'click hover',placement:'auto',delay:{show:250,hide:50}
		});
	});
//]]>
</script>
Ad Schellevis's avatar
Ad Schellevis committed
343

Ad Schellevis's avatar
Ad Schellevis committed
344 345
<?php include("fbegin.inc"); ?>

Ad Schellevis's avatar
Ad Schellevis committed
346 347 348


	<section class="page-content-main">
349
		<div class="container-fluid">
Ad Schellevis's avatar
Ad Schellevis committed
350
			<div class="row">
351

Ad Schellevis's avatar
Ad Schellevis committed
352 353 354 355 356 357 358
				<?php if ($savemsg) print_info_box($savemsg); ?>
				<?php if (is_subsystem_dirty('filter')): ?><p>
				<?php
				if($_REQUEST['undodrag']) {
					foreach($_REQUEST['dragtable'] as $dt)
						$dragtable .= "&dragtable[]={$dt}";
					print_info_box_np_undo(gettext("The firewall rule configuration has been changed.<br />You must apply the changes in order for them to take effect."), "apply" , gettext("Apply changes") , "firewall_rules.php?if={$_REQUEST['if']}&dragdroporder=true&{$dragtable}");
Ad Schellevis's avatar
Ad Schellevis committed
359
				} else {
Ad Schellevis's avatar
Ad Schellevis committed
360
					print_info_box_np(gettext("The firewall rule configuration has been changed.<br />You must apply the changes in order for them to take effect."));
Ad Schellevis's avatar
Ad Schellevis committed
361
				}
Ad Schellevis's avatar
Ad Schellevis committed
362 363 364 365 366
				?>

				<?php endif; ?>

			    <section class="col-xs-12">
367 368 369


					 <?php
Ad Schellevis's avatar
Ad Schellevis committed
370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385
							/* active tabs */
							$tab_array = array();
							if ("FloatingRules" == $if)
								$active = true;
							else
								$active = false;
							$tab_array[] = array(gettext("Floating"), $active, "firewall_rules.php?if=FloatingRules");
							$tabscounter = 0; $i = 0; foreach ($iflist as $ifent => $ifname) {
								if ($ifent == $if)
									$active = true;
								else
									$active = false;
								$tab_array[] = array($ifname, $active, "firewall_rules.php?if={$ifent}");
							}
							display_top_tabs($tab_array);
						?>
386 387


388
						<div class="tab-content content-box col-xs-12" style="overflow: auto;">
389 390


Ad Schellevis's avatar
Ad Schellevis committed
391
		                        <form action="firewall_rules.php<? if (!empty($if)): ?>?if=<?=$if;?><? endif; ?>" method="post" name="iform" id="iform">
392

393
		                        <div class="table-responsive" >
Ad Schellevis's avatar
Ad Schellevis committed
394 395
			                        <table class="table table-striped table-sort dragable">
				                        <thead>
Ad Schellevis's avatar
Ad Schellevis committed
396
										<tr id="frheader">
Ad Schellevis's avatar
Ad Schellevis committed
397 398 399 400 401 402 403 404 405 406 407 408
										<th class="list">&nbsp;</th>
										<th class="list">&nbsp;</th>
										<th class="listhdrr"><?=gettext("Proto");?></th>
										<th class="listhdrr"><?=gettext("Source");?></th>
										<th class="listhdrr"><?=gettext("Port");?></th>
										<th class="listhdrr"><?=gettext("Destination");?></th>
										<th class="listhdrr"><?=gettext("Port");?></th>
										<th class="listhdrr"><?=gettext("Gateway");?></th>
										<th class="listhdrr"><?=gettext("Queue");?></th>
										<th class="listhdrr"><?=gettext("Schedule");?></th>
										<th class="listhdr"><?=gettext("Description");?></th>
										<th class="list">
409

Ad Schellevis's avatar
Ad Schellevis committed
410 411 412 413 414 415 416 417 418 419 420
												<?php
													$nrules = 0;
													for ($i = 0; isset($a_filter[$i]); $i++) {
														$filterent = $a_filter[$i];
														if ($filterent['interface'] != $if && !isset($filterent['floating']))
															continue;
														if (isset($filterent['floating']) && "FloatingRules" != $if)
															continue;
														$nrules++;
													}
												?>
421

Ad Schellevis's avatar
Ad Schellevis committed
422 423 424 425
												<?php if ($nrules): ?>
													<button name="del" type="submit" title="<?=gettext("delete selected rules");?>" onclick="return confirm('<?=gettext('Do you really want to delete the selected rules?');?>')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></button>
												<?php endif; ?>
												<a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>&amp;after=-1" title="<?=gettext("add new rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
Ad Schellevis's avatar
Ad Schellevis committed
426
										</th>
Ad Schellevis's avatar
Ad Schellevis committed
427
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
428 429
				                        </thead>
				                        <tbody>
Ad Schellevis's avatar
Ad Schellevis committed
430 431 432 433
										<?php   // Show the anti-lockout rule if it's enabled, and we are on LAN with an if count > 1, or WAN with an if count of 1.
											if (!isset($config['system']['webgui']['noantilockout']) &&
												(((count($config['interfaces']) > 1) && ($if == 'lan'))
												|| ((count($config['interfaces']) == 1) && ($if == 'wan')))):
434

Ad Schellevis's avatar
Ad Schellevis committed
435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452
												$alports = implode('<br />', filter_get_antilockout_ports(true));
										?>
										<tr valign="top" id="antilockout">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-play text-success"></span></td>

										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr"><?=$iflist[$if];?> Address</td>
										<td class="listr"><?= $alports ?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">&nbsp;</td>
										<td class="listbg"><?=gettext("Anti-Lockout Rule");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
											<a href="system_advanced_admin.php" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
453

Ad Schellevis's avatar
Ad Schellevis committed
454 455 456 457
											<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
										</td>
										</tr>
							<?php endif; ?>
458

Ad Schellevis's avatar
Ad Schellevis committed
459 460 461 462
							<?php if (isset($config['interfaces'][$if]['blockpriv'])): ?>
										<tr valign="top" id="frrfc1918">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-remove text-danger"></span></td>
463

Ad Schellevis's avatar
Ad Schellevis committed
464 465 466 467 468 469 470 471 472 473 474
										<td class="listr">*</td>
										<td class="listr"><?=gettext("RFC 1918 networks");?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">&nbsp;</td>
										<td class="listbg"><?=gettext("Block private networks");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
475

Ad Schellevis's avatar
Ad Schellevis committed
476
												<a href="interfaces.php?if=<?=htmlspecialchars($if)?>#rfc1918" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
477

Ad Schellevis's avatar
Ad Schellevis committed
478 479 480 481 482 483 484 485
												<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
										</td>
										</tr>
							<?php endif; ?>
							<?php if (isset($config['interfaces'][$if]['blockbogons'])): ?>
										<tr valign="top" id="frrfc1918">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-remove text-danger"></span></td>
486

Ad Schellevis's avatar
Ad Schellevis committed
487 488 489 490 491 492 493 494 495 496 497
										<td class="listr">*</td>
										<td class="listr"><?=gettext("Reserved/not assigned by IANA");?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listbg"><?=gettext("Block bogon networks");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
498

Ad Schellevis's avatar
Ad Schellevis committed
499
											<a href="interfaces.php?if=<?=htmlspecialchars($if)?>#rfc1918" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
500

Ad Schellevis's avatar
Ad Schellevis committed
501
											<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
502

Ad Schellevis's avatar
Ad Schellevis committed
503 504
										</td>
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
505
				                        </tbody>
Ad Schellevis's avatar
Ad Schellevis committed
506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521
							<?php endif; ?>
										<tbody id="dragtable">
							<?php $nrules = 0; for ($i = 0; isset($a_filter[$i]); $i++):
								$filterent = $a_filter[$i];
								if ($filterent['interface'] != $if && !isset($filterent['floating']))
									continue;
								if (isset($filterent['floating']) && "FloatingRules" != $if)
									continue;
								$isadvset = firewall_check_for_advanced_options($filterent);
								if($isadvset)
									$advanced_set = "<span class=\"glyphicon glypicon-cog\" title=\"" . gettext("advanced settings set") . ": {$isadvset}\"></span>";
								else
									$advanced_set = "";
							?>
										<tr valign="top" id="fr<?=$nrules;?>">
										<td class="listt">
Ad Schellevis's avatar
Ad Schellevis committed
522
											<input type="checkbox" id="frc<?=$nrules;?>" name="rule[]" value="<?=$i;?>"  />
Ad Schellevis's avatar
Ad Schellevis committed
523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544
											<?php echo $advanced_set; ?>
										</td>
										<td class="listt" align="center">
										<?php
											if ($filterent['type'] == "block") {
												$iconfn = "glyphicon-remove";
												$textss = "text-danger"; }
											else if ($filterent['type'] == "reject") {
												$iconfn = "glyphicon-remove";
												$textss = "text-warning"; }
											else if ($filterent['type'] == "match") {
												$iconfn = "glyphicon-ok";
												$textss = ""; }
											else {
												$iconfn = "glyphicon-play";
												$textss = "text-success"; }
											if (isset($filterent['disabled'])) {
												$textss = $textse = "text-muted";

											} else {
												//$textss = $textse = "";
												$textse = "";
Ad Schellevis's avatar
Ad Schellevis committed
545
											}
Ad Schellevis's avatar
Ad Schellevis committed
546 547 548 549 550 551 552 553 554 555 556 557 558 559
										?>
											<a href="?if=<?=htmlspecialchars($if);?>&amp;act=toggle&amp;id=<?=$i;?>" title="<?=gettext("click to toggle enabled/disabled status");?>" ><span class="glyphicon <?=$iconfn;?> <?=$textss;?>"></span></a>
										<?php
											if (isset($filterent['log'])):
												$iconfnlog = "glyphicon-info-sign";
											if (isset($filterent['disabled']))
												$iconfnlog .= " text-muted";
										?>
											<span class="glyphicon <?=$iconfnlog;?>"></span>
							<?php endif; ?>
										</td>
										<?php
											//build Alias popup box
											$alias_src_span_begin = "";
Ad Schellevis's avatar
Ad Schellevis committed
560 561 562
											//$alias_src_port_span_begin = "";
											//$alias_dst_span_begin = "";
											//$alias_dst_port_span_begin = "";
563

Ad Schellevis's avatar
Ad Schellevis committed
564
											$alias_popup = rule_popup($filterent['source']['address'],pprint_port($filterent['source']['port']),$filterent['destination']['address'],pprint_port($filterent['destination']['port']));
Ad Schellevis's avatar
Ad Schellevis committed
565 566 567 568 569
											//var_dump($alias_popup);
											//$alias_src_span_begin = $alias_popup["src"];
											//$alias_src_port_span_begin = $alias_popup["srcport"];
											//$alias_dst_span_begin = $alias_popup["dst"];
											//$alias_dst_port_span_begin = $alias_popup["dstport"];
570

Ad Schellevis's avatar
Ad Schellevis committed
571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587
											$alias_src_span_end = ""; //$alias_popup["src_end"];
											//$alias_src_port_span_end = $alias_popup["srcport_end"];
											//$alias_dst_span_end = $alias_popup["dst_end"];
											//$alias_dst_port_span_end = $alias_popup["dstport_end"];
											if ( count($alias_popup) > 0 ) {
												$aliases_popup['src']['addrlist']=explode(" ",$alias_popup['src']['address']);
												$aliases_popup['src']['detlist']=explode("||",$alias_popup['src']['detail']);

												$alias_src_span_begin="<span title=\"\" type=\"button\" data-placement=\"bottom\" data-popover=\"true\" data-html=\"true\" data-content='";
												foreach ($aliases_popup['src']['addrlist'] as $addrkey => $address) {
													$alias_src_span_begin=$alias_src_span_begin."<b>".$address."</b> <small>(".$aliases_popup['src']['detlist'][$addrkey].")</small>&nbsp;<br>";
												}
												$alias_src_span_begin=$alias_src_span_begin."' data-original-title='<a href=\"/firewall_aliases_edit.php?id=".(string)$alias_popup['src']['aliasid']."\" target=\"_self\" >
													<span class=\"text-primary\"><b>".htmlspecialchars(pprint_address($filterent['source']))."(".count($aliases_popup['src']['addrlist']).")"."</span></b></a>'>";
														//<i class="glyphicon glyphicon-list">&nbsp;</i><b>Vergelijk Producten</b>&nbsp;<span class="badge">2</span>
												$alias_src_span_end="</span>";
											}
Ad Schellevis's avatar
Ad Schellevis committed
588 589 590 591 592 593 594 595 596 597 598
											//build Schedule popup box
											$a_schedules = &$config['schedules']['schedule'];
											$schedule_span_begin = "";
											$schedule_span_end = "";
											$sched_caption_escaped = "";
											$sched_content = "";
											$schedstatus = false;
											$dayArray = array (gettext('Mon'),gettext('Tues'),gettext('Wed'),gettext('Thur'),gettext('Fri'),gettext('Sat'),gettext('Sun'));
											$monthArray = array (gettext('January'),gettext('February'),gettext('March'),gettext('April'),gettext('May'),gettext('June'),gettext('July'),gettext('August'),gettext('September'),gettext('October'),gettext('November'),gettext('December'));
											if($config['schedules']['schedule'] <> "" and is_array($config['schedules']['schedule'])) {
												foreach ($a_schedules as $schedule)
Ad Schellevis's avatar
Ad Schellevis committed
599
												{
Ad Schellevis's avatar
Ad Schellevis committed
600 601
													if ($schedule['name'] == $filterent['sched'] ){
														$schedstatus = filter_get_time_based_rule_status($schedule);
602

Ad Schellevis's avatar
Ad Schellevis committed
603 604 605 606 607 608 609
														foreach($schedule['timerange'] as $timerange) {
															$tempFriendlyTime = "";
															$tempID = "";
															$firstprint = false;
															if ($timerange){
																$dayFriendly = "";
																$tempFriendlyTime = "";
610

Ad Schellevis's avatar
Ad Schellevis committed
611 612 613
																//get hours
																$temptimerange = $timerange['hour'];
																$temptimeseparator = strrpos($temptimerange, "-");
614

Ad Schellevis's avatar
Ad Schellevis committed
615 616
																$starttime = substr ($temptimerange, 0, $temptimeseparator);
																$stoptime = substr ($temptimerange, $temptimeseparator+1);
617

Ad Schellevis's avatar
Ad Schellevis committed
618 619 620 621 622 623 624 625 626
																if ($timerange['month']){
																	$tempmontharray = explode(",", $timerange['month']);
																	$tempdayarray = explode(",",$timerange['day']);
																	$arraycounter = 0;
																	$firstDayFound = false;
																	$firstPrint = false;
																	foreach ($tempmontharray as $monthtmp){
																		$month = $tempmontharray[$arraycounter];
																		$day = $tempdayarray[$arraycounter];
627

Ad Schellevis's avatar
Ad Schellevis committed
628 629 630 631 632 633
																		if (!$firstDayFound)
																		{
																			$firstDay = $day;
																			$firstmonth = $month;
																			$firstDayFound = true;
																		}
634

Ad Schellevis's avatar
Ad Schellevis committed
635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695
																		$currentDay = $day;
																		$nextDay = $tempdayarray[$arraycounter+1];
																		$currentDay++;
																		if (($currentDay != $nextDay) || ($tempmontharray[$arraycounter] != $tempmontharray[$arraycounter+1])){
																			if ($firstPrint)
																				$dayFriendly .= ", ";
																			$currentDay--;
																			if ($currentDay != $firstDay)
																				$dayFriendly .= $monthArray[$firstmonth-1] . " " . $firstDay . " - " . $currentDay ;
																			else
																				$dayFriendly .=  $monthArray[$month-1] . " " . $day;
																			$firstDayFound = false;
																			$firstPrint = true;
																		}
																		$arraycounter++;
																	}
																}
																else
																{
																	$tempdayFriendly = $timerange['position'];
																	$firstDayFound = false;
																	$tempFriendlyDayArray = explode(",", $tempdayFriendly);
																	$currentDay = "";
																	$firstDay = "";
																	$nextDay = "";
																	$counter = 0;
																	foreach ($tempFriendlyDayArray as $day){
																		if ($day != ""){
																			if (!$firstDayFound)
																			{
																				$firstDay = $tempFriendlyDayArray[$counter];
																				$firstDayFound = true;
																			}
																			$currentDay =$tempFriendlyDayArray[$counter];
																			//get next day
																			$nextDay = $tempFriendlyDayArray[$counter+1];
																			$currentDay++;
																			if ($currentDay != $nextDay){
																				if ($firstprint)
																					$dayFriendly .= ", ";
																				$currentDay--;
																				if ($currentDay != $firstDay)
																					$dayFriendly .= $dayArray[$firstDay-1] . " - " . $dayArray[$currentDay-1];
																				else
																					$dayFriendly .= $dayArray[$firstDay-1];
																				$firstDayFound = false;
																				$firstprint = true;
																			}
																			$counter++;
																		}
																	}
																}
																$timeFriendly = $starttime . " - " . $stoptime;
																$description = $timerange['rangedescr'];
																$sched_content .= $dayFriendly . "; " . $timeFriendly . "<br />";
															}
														}
														$sched_caption_escaped = str_replace("'", "\'", $schedule['descr']);
														$schedule_span_begin = "<span style=\"cursor: help;\" onmouseover=\"domTT_activate(this, event, 'content', '<h1>{$sched_caption_escaped}</h1><p>{$sched_content}</p>', 'trail', true, 'delay', 0, 'fade', 'both', 'fadeMax', 93, 'styleClass', 'niceTitle');\" onmouseout=\"this.style.color = ''; domTT_mouseout(this, event);\"><u>";
														$schedule_span_end = "</u></span>";
													}
Ad Schellevis's avatar
Ad Schellevis committed
696
												}
Ad Schellevis's avatar
Ad Schellevis committed
697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713
											}
											$printicon = false;
											$alttext = "";
											$image = "";
											if (!isset($filterent['disabled'])) {
												if ($schedstatus) {
													if ($iconfn == "block" || $iconfn == "reject") {
														$image = "glyphicon-remove text-danger";
														$alttext = gettext("Traffic matching this rule is currently being denied");
													} else {
														$image = "glyphicon-play text-success";
														$alttext = gettext("Traffic matching this rule is currently being allowed");
													}
													$printicon = true;
												} else if ($filterent['sched']) {
													if ($iconfn == "block" || $iconfn == "reject")
														$image = "glyphicon-remove text-muted";
Ad Schellevis's avatar
Ad Schellevis committed
714
													else
Ad Schellevis's avatar
Ad Schellevis committed
715 716 717
														$image = "glyphicon-remove text-danger";
													$alttext = gettext("This rule is not currently active because its period has expired");
													$printicon = true;
Ad Schellevis's avatar
Ad Schellevis committed
718 719
												}
											}
Ad Schellevis's avatar
Ad Schellevis committed
720
										?>
Ad Schellevis's avatar
Ad Schellevis committed
721
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749
										<span class="<?=$textse;?>">
										<?php
											if (isset($filterent['ipprotocol'])) {
												switch($filterent['ipprotocol']) {
													case "inet":
														echo "IPv4 ";
														break;
													case "inet6":
														echo "IPv6 ";
														break;
													case "inet46":
														echo "IPv4+6 ";
														break;
												}
											} else {
												echo "IPv4 ";
											}
											if (isset($filterent['protocol'])) {
												echo strtoupper($filterent['protocol']);
												if (strtoupper($filterent['protocol']) == "ICMP" && !empty($filterent['icmptype'])) {
													echo ' <span style="cursor: help;" title="ICMP type: ' . $icmptypes[$filterent['icmptype']] . '"><u>';
													echo $filterent['icmptype'];
													echo '</u></span>';
												}
											} else echo "*";
										?>
										</span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
750
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
751 752
											<span class="<?=$textse;?>"><?php echo $alias_src_span_begin;?><?php echo htmlspecialchars(pprint_address($filterent['source']));?><?php echo $alias_src_span_end;?></span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
753 754
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
											<span class="<?=$textse;?>"><!--?php echo $alias_src_port_span_begin;?--><?php echo htmlspecialchars(pprint_port($filterent['source']['port'])); ?><!--?php echo $alias_src_port_span_end;?--></span>
Ad Schellevis's avatar
Ad Schellevis committed
755
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
756 757
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
											<span class="<?=$textse;?>"><!--?php echo $alias_dst_span_begin;?--><?php echo htmlspecialchars(pprint_address($filterent['destination'])); ?><!--?php echo $alias_dst_span_end;?--></span>
Ad Schellevis's avatar
Ad Schellevis committed
758
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
759 760
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
											<span class="<?=$textse;?>"><!--?php echo $alias_dst_port_span_begin;?--><?php echo htmlspecialchars(pprint_port($filterent['destination']['port'])); ?><!--?php echo $alias_dst_port_span_end;?--></span>
Ad Schellevis's avatar
Ad Schellevis committed
761
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
762
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
763 764
											<span class="<?=$textse;?>"><?php if (isset($config['interfaces'][$filterent['gateway']]['descr'])) echo htmlspecialchars($config['interfaces'][$filterent['gateway']]['descr']); else  echo htmlspecialchars(pprint_port($filterent['gateway'])); ?></span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
765
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
766 767 768 769 770 771 772 773 774 775 776 777 778 779 780
										<span class="<?=$textse;?>">
										<?php
											if (isset($filterent['ackqueue']) && isset($filterent['defaultqueue'])) {
												$desc = $filterent['ackqueue'] ;
												echo "<a href=\"firewall_shaper_queues.php?queue={$filterent['ackqueue']}&amp;action=show\">{$desc}</a>";
												$desc = $filterent['defaultqueue'];
												echo "/<a href=\"firewall_shaper_queues.php?queue={$filterent['defaultqueue']}&amp;action=show\">{$desc}</a>";
											} else if (isset($filterent['defaultqueue'])) {
												$desc = $filterent['defaultqueue'];
												echo "<a href=\"firewall_shaper_queues.php?queue={$filterent['defaultqueue']}&amp;action=show\">{$desc}</a>";
											} else
												echo gettext("none");
										?>
										</span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
781
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';"><font color="black">
782
											<?php if ($printicon) { ?><span class="glyphicon <?php echo $image; ?>" title="<?php echo $alttext;?>"></span><?php } ?><span class="<?=$textse;?>"><?php echo $schedule_span_begin;?><?=htmlspecialchars($filterent['sched']);?>&nbsp;<?php echo $schedule_span_end; ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
783 784
										</font></td>

Ad Schellevis's avatar
Ad Schellevis committed
785
										<td class="listbg descr" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
786 787 788
											<span class="<?=$textse;?>"><?=htmlspecialchars($filterent['descr']);?>&nbsp;</span>
										</td>
										<td valign="middle" class="list nowrap">
789
												<button name="move_<?=$i;?>_x" type="submit" title="<?=gettext("move selected rules before this rule"); ?>" class="btn btn-default btn-xs" value="<?=$i;?>"><span class="glyphicon glyphicon-arrow-left"></span></button>
Ad Schellevis's avatar
Ad Schellevis committed
790
												<a href="firewall_rules_edit.php?id=<?=$i;?>" title="<?=gettext("edit rule"); ?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
791

Ad Schellevis's avatar
Ad Schellevis committed
792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826
												<a href="firewall_rules.php?act=del&amp;if=<?=htmlspecialchars($if);?>&amp;id=<?=$i;?>" title="<?=gettext("delete rule"); ?>" onclick="return confirm('Do you really want to delete this rule?')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></a>
												<a href="firewall_rules_edit.php?dup=<?=$i;?>" title="<?=gettext("add a new rule based on this one"); ?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
										</td>
										</tr>
										<?php $nrules++; endfor; ?>
										  </tbody>
							<?php if ($nrules == 0): ?>
										<tr>
										<td class="listt"></td>
										<td class="listt"></td>
										<td class="listlr" colspan="11" align="center" valign="middle">
										<span class="gray">
								<?php if ($_REQUEST['if'] == "FloatingRules"): ?>
											<?=gettext("No floating rules are currently defined."); ?><br /><br />
								<?php else: ?>
											<?=gettext("No rules are currently defined for this interface"); ?><br />
											<?=gettext("All incoming connections on this interface will be blocked until you add pass rules."); ?><br /><br />
								<?php endif; ?>
											<?=gettext("Click the"); ?> <a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>"  class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a><?=gettext(" button to add a new rule.");?></span>
										</td>
										</tr>
							<?php endif; ?>
										<tr id="fr<?=$nrules;?>">
										<td class="list"></td>
										<td class="list"></td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">
827

828
										<?php if ($nrules): ?>
829
											<button name="move_<?=$i;?>_x" type="submit" value="<?=$i;?>"  title="<?=gettext("move selected rules to end");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></button>
830
											<button name="del_x" type="submit" title="<?=gettext("delete selected rules");?>" onclick="return confirm('<?=gettext('Do you really want to delete the selected rules?');?>')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></button>
831 832
											<a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>" title="<?=gettext("add new rule");?>"  class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
										<?php endif; ?>
Franco Fichtner's avatar
Franco Fichtner committed
833

Ad Schellevis's avatar
Ad Schellevis committed
834 835
										</td>
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
836
									</tbody>
Ad Schellevis's avatar
Ad Schellevis committed
837
									</table>
838 839


Ad Schellevis's avatar
Ad Schellevis committed
840
									<div class="container-fluid">
Ad Schellevis's avatar
Ad Schellevis committed
841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899
									<table class="tabcont" width="100%" border="0" cellspacing="0" cellpadding="0" summary="icons">
										<tr>
											<td width="16"><span class="glyphicon glyphicon-play text-success"></span></td>
											<td width="100"><?=gettext("pass");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-ok"></span></td>
											<td width="100"><?=gettext("match");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-remove text-danger"></span></td>
											<td width="100"><?=gettext("block");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-remove text-warning"></span></td>
											<td width="100"><?=gettext("reject");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-info-sign"></span></td>
											<td width="100"><?=gettext("log");?></td>
										</tr>
										<tr>
											<td><span class="glyphicon glyphicon-play text-muted"></span></td>
											<td class="nowrap"><?=gettext("pass (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-ok text-muted"></span></td>
											<td class="nowrap"><?=gettext("match (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-remove text-muted"></span></td>
											<td class="nowrap"><?=gettext("block (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-remove text-muted"></span></td>
											<td class="nowrap"><?=gettext("reject (disabled)");?></td>
											<td>&nbsp;</td>
											<td width="16"><span class="glyphicon glyphicon-info-sign text-muted"></span></td>
											<td class="nowrap"><?=gettext("log (disabled)");?></td>
										</tr>
										<tr>
											<td colspan="10">
												<p>&nbsp;</p>
												<strong>
													<span class="red"><?=gettext("Hint:");?></span>
												</strong><br />
												<ul>
												<?php if ("FloatingRules" != $if): ?>
													<li><?=gettext("Rules are evaluated on a first-match basis (i.e. " .
													"the action of the first rule to match a packet will be executed). " .
													"This means that if you use block rules, you'll have to pay attention " .
													"to the rule order. Everything that isn't explicitly passed is blocked " .
													"by default. ");?>
													</li>
												<?php else: ?>
													<li><?=gettext("Floating rules are evaluated on a first-match basis (i.e. " .
													"the action of the first rule to match a packet will be executed) only " .
													"if the 'quick' option is checked on a rule. Otherwise they will only apply if no " .
													"other rules match. Pay close attention to the rule order and options " .
													"chosen. If no rule here matches, the per-interface or default rules are used. ");?>
													</li>
												<?php endif; ?>
												</ul>
											 </td>
										</tr>
									</table>
Ad Schellevis's avatar
Ad Schellevis committed
900
									</div>
Ad Schellevis's avatar
Ad Schellevis committed
901 902 903 904 905
								</div>
		                    </form>
					</div>
			    </section>
			</div>
Ad Schellevis's avatar
Ad Schellevis committed
906
		</div>
Ad Schellevis's avatar
Ad Schellevis committed
907
	</section>
908

Ad Schellevis's avatar
Ad Schellevis committed
909
<input type="hidden" name="if" value="<?=htmlspecialchars($if);?>" />
Ad Schellevis's avatar
Ad Schellevis committed
910
<!-- <script type="text/javascript">
Ad Schellevis's avatar
Ad Schellevis committed
911 912 913
//<![CDATA[
	var number_of_rules = <?=$nrules?>;
	<?php $nrules = 0; for ($i = 0; isset($a_filter[$i]); $i++): ?>
914

Ad Schellevis's avatar
Ad Schellevis committed
915 916 917 918 919 920 921 922 923 924 925 926
		Sortable.create("dragtable", {
			tag:"tr",
			format:"fr([0-9999999])",
			containment:["dragtable"],
			onChange:function(affected) {
				document.body.style.cursor = 'move';
			},
			onUpdate:function(container) {
				document.body.style.cursor = 'move';
				updateOrder(Sortable.serialize('dragtable', 'tr'));
			}
		});
927

Ad Schellevis's avatar
Ad Schellevis committed
928
	<?php endfor; ?>
929

Ad Schellevis's avatar
Ad Schellevis committed
930 931 932 933 934
	jQuery('#loading').hide();
//]]>
</script> -->

<script type="text/javascript">
935

Ad Schellevis's avatar
Ad Schellevis committed
936 937 938 939 940 941 942 943 944
	$(function  () {
	 $('table.dragable').sortable({
		  containerSelector: 'table',
		  itemPath: '> tbody#dragtable',
		  itemSelector: 'tr',
		  placeholder: '<tr class="placeholder"/>',
		  onDrop: function(item,container,_super, event) {
			   item.removeClass("dragged").removeAttr("style");
			   $("body").removeClass("dragging");
945 946


Ad Schellevis's avatar
Ad Schellevis committed
947 948 949 950
			  updateOrder(container);
		  }
		})
	});
951

Ad Schellevis's avatar
Ad Schellevis committed
952
	function updateOrder(container) {
Ad Schellevis's avatar
Ad Schellevis committed
953
		if(document.getElementById("redboxtable"))
Ad Schellevis's avatar
Ad Schellevis committed
954
			//jQuery('#redboxtable').hide();
955

Ad Schellevis's avatar
Ad Schellevis committed
956
		//jQuery('#loading').show();
957

Ad Schellevis's avatar
Ad Schellevis committed
958
		document.body.style.cursor = 'wait';
959

Ad Schellevis's avatar
Ad Schellevis committed
960 961
		var drag_url = '';
		$('tbody#dragtable tr').each(function(i, obj) {
962

Ad Schellevis's avatar
Ad Schellevis committed
963 964
			drag_url += '&dragtable[]='+$(obj).attr('id').replace('fr','');
		});
965

Ad Schellevis's avatar
Ad Schellevis committed
966
		document.location = 'firewall_rules.php?if=<?=htmlspecialchars($if);?>&dragdroporder=true' + drag_url;
Ad Schellevis's avatar
Ad Schellevis committed
967 968
		return;
	}
969

Ad Schellevis's avatar
Ad Schellevis committed
970
</script>
Ad Schellevis's avatar
Ad Schellevis committed
971

972
<?php include("foot.inc"); ?>