firewall_rules.php 39.9 KB
Newer Older
Ad Schellevis's avatar
Ad Schellevis committed
1
<?php
2

Ad Schellevis's avatar
Ad Schellevis committed
3
/*
4
	Copyright (C) 2014-2015 Deciso B.V.
Ad Schellevis's avatar
Ad Schellevis committed
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
	Copyright (C) 2005 Scott Ullrich (sullrich@gmail.com)
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
	All rights reserved.

	Redistribution and use in source and binary forms, with or without
	modification, are permitted provided that the following conditions are met:

	1. Redistributions of source code must retain the above copyright notice,
	   this list of conditions and the following disclaimer.

	2. Redistributions in binary form must reproduce the above copyright
	   notice, this list of conditions and the following disclaimer in the
	   documentation and/or other materials provided with the distribution.

	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
	POSSIBILITY OF SUCH DAMAGE.
*/

31
require_once("guiconfig.inc");
32
require_once("functions.inc");
Ad Schellevis's avatar
Ad Schellevis committed
33 34
require_once("filter.inc");

35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71
function rule_popup($src,$srcport,$dst,$dstport){
	global $config,$g;
	$aliases_array = array();
	if (isset($config['aliases']['alias'])) {
		$descriptions = array ();
		foreach ($config['aliases']['alias'] as $alias_id=>$alias_name){
			if ($alias_name['name'] == $src) {
				//var_dump($config['aliases']['alias'][$alias_id]);
				$aliases_array['src']=$config['aliases']['alias'][$alias_id];
				$aliases_array['src']['aliasid']=$alias_id;
				//$descriptions['src'] = $span_begin;
				//$descriptions['src_end'] = $span_end;
			}
			if ($alias_name['name'] == $srcport) {
				$aliases_array['srcport']=$config['aliases']['alias'][$alias_id];
				$aliases_array['srcport']['aliasid']=$alias_id;
				//$descriptions['srcport'] = $span_begin;
				//$descriptions['srcport_end'] = $span_end;
			}
			if ($alias_name['name'] == $dst ) {
				$aliases_array['dst']=$config['aliases']['alias'][$alias_id];
				$aliases_array['dst']['aliasid']=$alias_id;
				//$descriptions['dst'] = $span_begin;
				//$descriptions['dst_end'] = $span_end;
			}
			if ($alias_name['name'] == $dstport) {
				$aliases_array['dstport']=$config['aliases']['alias'][$alias_id];
				$aliases_array['dstport']['aliasid']=$alias_id;
				//$descriptions['dstport'] = $span_begin;
				//$descriptions['dstport_end'] = $span_end;
			}
		}
		return $aliases_array;//$descriptions;
	}
}


Ad Schellevis's avatar
Ad Schellevis committed
72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99
$pgtitle = array(gettext("Firewall"),gettext("Rules"));
$shortcut_section = "firewall";

function delete_nat_association($id) {
	global $config;

	if (!$id || !is_array($config['nat']['rule']))
		return;

	$a_nat = &$config['nat']['rule'];

	foreach ($a_nat as &$natent)
		if ($natent['associated-rule-id'] == $id)
			$natent['associated-rule-id'] = '';
}

if (!is_array($config['filter']['rule'])) {
	$config['filter']['rule'] = array();
}
filter_rules_sort();
$a_filter = &$config['filter']['rule'];

$if = $_GET['if'];
if ($_POST['if'])
	$if = $_POST['if'];

$ifdescs = get_configured_interface_with_descr();

Ad Schellevis's avatar
Ad Schellevis committed
100

Ad Schellevis's avatar
Ad Schellevis committed
101 102
// Drag and drop reordering
if($_REQUEST['dragdroporder']) {
Ad Schellevis's avatar
Ad Schellevis committed
103

104 105 106



Ad Schellevis's avatar
Ad Schellevis committed
107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191
	// First create a new ruleset array and tmp arrays
	$a_filter_before = array();
	$a_filter_order = array();
	$a_filter_order_tmp = array();
	$a_filter_after = array();
	$found = false;
	$drag_order = $_REQUEST['dragtable'];
	// Next traverse through rules building a new order for interface
	for ($i = 0; isset($a_filter[$i]); $i++) {
		if(( $_REQUEST['if'] == "FloatingRules" && isset($a_filter[$i]['floating']) ) || ( $a_filter[$i]['interface'] == $_REQUEST['if'] && !isset($a_filter[$i]['floating']) )) {
			$a_filter_order_tmp[] = $a_filter[$i];
			$found = true;
		} else if (!$found)
			$a_filter_before[] = $a_filter[$i];
		else
			$a_filter_after[] = $a_filter[$i];
	}
	// Reorder rules with the posted order
	for ($i = 0; $i<count($drag_order); $i++)
		$a_filter_order[] = $a_filter_order_tmp[$drag_order[$i]];
	// In case $drag_order didn't account for some rules, make sure we don't lose them
	if(count($a_filter_order) < count($a_filter_order_tmp)) {
		for ($i = 0; $i<count($a_filter_order_tmp); $i++)
			if(!in_array($i, $drag_order))
				$a_filter_order[] = $a_filter_order_tmp[$i];
	}
	// Overwrite filter rules with newly created items
	$config['filter']['rule'] = array_merge($a_filter_before, $a_filter_order, $a_filter_after);
	// Write configuration
	$config = write_config(gettext("Drag and drop firewall rules ordering update."));
	// Redirect back to page
	mark_subsystem_dirty('filter');
	$undo = array();
	foreach($_REQUEST['dragtable'] as $dt)
		$undo[] = "";
	$counter = 0;
	foreach($_REQUEST['dragtable'] as $dt) {
		$undo[$dt] = $counter;
		$counter++;
	}
	foreach($undo as $dt)
		$undotxt .= "&dragtable[]={$dt}";
	header("Location: firewall_rules.php?if=" . $_REQUEST['if'] . "&undodrag=true" . $undotxt);
	exit;
}

$icmptypes = array(
	"" => gettext("any"),
	"echoreq" => gettext("Echo request"),
	"echorep" => gettext("Echo reply"),
	"unreach" => gettext("Destination unreachable"),
	"squench" => gettext("Source quench"),
	"redir" => gettext("Redirect"),
	"althost" => gettext("Alternate Host"),
	"routeradv" => gettext("Router advertisement"),
	"routersol" => gettext("Router solicitation"),
	"timex" => gettext("Time exceeded"),
	"paramprob" => gettext("Invalid IP header"),
	"timereq" => gettext("Timestamp"),
	"timerep" => gettext("Timestamp reply"),
	"inforeq" => gettext("Information request"),
	"inforep" => gettext("Information reply"),
	"maskreq" => gettext("Address mask request"),
	"maskrep" => gettext("Address mask reply")
);

/* add group interfaces */
if (is_array($config['ifgroups']['ifgroupentry']))
	foreach($config['ifgroups']['ifgroupentry'] as $ifgen)
		if (have_ruleint_access($ifgen['ifname']))
			$iflist[$ifgen['ifname']] = $ifgen['ifname'];

foreach ($ifdescs as $ifent => $ifdesc)
	if(have_ruleint_access($ifent))
		$iflist[$ifent] = $ifdesc;

if ($config['l2tp']['mode'] == "server")
	if(have_ruleint_access("l2tp"))
		$iflist['l2tp'] = "L2TP VPN";

if ($config['pptpd']['mode'] == "server")
	if(have_ruleint_access("pptp"))
		$iflist['pptp'] = "PPTP VPN";

if (is_array($config['pppoes']['pppoe'])) {
192 193
	foreach ($config['pppoes']['pppoe'] as $pppoes) {
		if (($pppoes['mode'] == 'server') && have_ruleint_access('pppoe')) {
Ad Schellevis's avatar
Ad Schellevis committed
194
			$iflist['pppoe'] = "PPPoE Server";
195 196
		}
	}
Ad Schellevis's avatar
Ad Schellevis committed
197 198 199
}

/* add ipsec interfaces */
200 201 202 203 204
if (isset($config['ipsec']['enable']) || isset($config['ipsec']['client']['enable'])) {
	if (have_ruleint_access('enc0')) {
		$iflist['enc0'] = 'IPsec';
	}
}
Ad Schellevis's avatar
Ad Schellevis committed
205 206

/* add openvpn/tun interfaces */
207 208 209
if (isset($config['openvpn']['openvpn-server']) || isset($config['openvpn']['openvpn-client'])) {
	$iflist['openvpn'] = 'OpenVPN';
}
Ad Schellevis's avatar
Ad Schellevis committed
210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285

if (!$if || !isset($iflist[$if])) {
	if ("any" == $if)
		$if = "FloatingRules";
	else if ("FloatingRules" != $if) {
		if (isset($iflist['wan']))
			$if = "wan";
		else
			$if = "FloatingRules";
	}
}

if ($_POST) {

	$pconfig = $_POST;

	if ($_POST['apply']) {
		$retval = 0;
		$retval = filter_configure();

		clear_subsystem_dirty('filter');

		$savemsg = sprintf(gettext("The settings have been applied. The firewall rules are now reloading in the background.<br />You can also %s monitor %s the reload progress"),"<a href='status_filter_reload.php'>","</a>");
	}
}

if ($_GET['act'] == "del") {
	if ($a_filter[$_GET['id']]) {
		if (!empty($a_filter[$_GET['id']]['associated-rule-id'])) {
			delete_nat_association($a_filter[$_GET['id']]['associated-rule-id']);
		}
		unset($a_filter[$_GET['id']]);
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
}

// Handle save msg if defined
if($_REQUEST['savemsg'])
	$savemsg = htmlentities($_REQUEST['savemsg']);

if (isset($_POST['del_x'])) {
	/* delete selected rules */
	if (is_array($_POST['rule']) && count($_POST['rule'])) {
		foreach ($_POST['rule'] as $rulei) {
			delete_nat_association($a_filter[$rulei]['associated-rule-id']);
			unset($a_filter[$rulei]);
		}
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
} else if ($_GET['act'] == "toggle") {
	if ($a_filter[$_GET['id']]) {
		if(isset($a_filter[$_GET['id']]['disabled']))
			unset($a_filter[$_GET['id']]['disabled']);
		else
			$a_filter[$_GET['id']]['disabled'] = true;
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
} else {
	/* yuck - IE won't send value attributes for image buttons, while Mozilla does -
	   so we use .x/.y to fine move button clicks instead... */
	unset($movebtn);
	foreach ($_POST as $pn => $pd) {
		if (preg_match("/move_(\d+)_x/", $pn, $matches)) {
			$movebtn = $matches[1];
			break;
		}
	}
Ad Schellevis's avatar
Ad Schellevis committed
286

287 288


Ad Schellevis's avatar
Ad Schellevis committed
289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323
	/* move selected rules before this rule */
	if (isset($movebtn) && is_array($_POST['rule']) && count($_POST['rule'])) {
		$a_filter_new = array();

		/* copy all rules < $movebtn and not selected */
		for ($i = 0; $i < $movebtn; $i++) {
			if (!in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		/* copy all selected rules */
		for ($i = 0; $i < count($a_filter); $i++) {
			if ($i == $movebtn)
				continue;
			if (in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		/* copy $movebtn rule */
		if ($movebtn < count($a_filter))
			$a_filter_new[] = $a_filter[$movebtn];

		/* copy all rules > $movebtn and not selected */
		for ($i = $movebtn+1; $i < count($a_filter); $i++) {
			if (!in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		$a_filter = $a_filter_new;
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
}
Ad Schellevis's avatar
Ad Schellevis committed
324 325 326
$closehead = true;


Ad Schellevis's avatar
Ad Schellevis committed
327 328 329

include("head.inc");
?>
Ad Schellevis's avatar
Ad Schellevis committed
330 331 332 333 334
	<script type="text/javascript" src="/themes/<?=$g['theme'];?>/assets/javascripts/jquery-sortable.js"></script>
	<style type="text/css">
		body.dragging, body.dragging * {
		  cursor: move !important;
		}
335

Ad Schellevis's avatar
Ad Schellevis committed
336 337 338 339 340
		.dragged {
		  position: absolute;
		  opacity: 0.5;
		  z-index: 2000;
		}
341

Ad Schellevis's avatar
Ad Schellevis committed
342 343 344 345 346 347 348
		ol.example li.placeholder {
		  position: relative;
		  /** More li styles **/
		}
		ol.example li.placeholder:before {
		  position: absolute;
		  /** Define arrowhead **/
349
		}
Ad Schellevis's avatar
Ad Schellevis committed
350 351
	</style>
</head>
Ad Schellevis's avatar
Ad Schellevis committed
352
<body>
Ad Schellevis's avatar
Ad Schellevis committed
353 354 355 356 357

<script type='text/javascript'>//<![CDATA[
	jQuery(window).load(
		function(){
			var originalLeave=jQuery.fn.popover.Constructor.prototype.leave;
358
			jQuery.fn.popover.Constructor.prototype.leave=function(obj)
Ad Schellevis's avatar
Ad Schellevis committed
359 360 361 362 363 364
			{
				var self=obj instanceof this.constructor?obj:jQuery(obj.currentTarget)[this.type](this.getDelegateOptions()).data('bs.'+this.type)
				var container,timeout;originalLeave.call(this,obj);
				if(obj.currentTarget){container=jQuery(obj.currentTarget).siblings('.popover')
					timeout=self.timeout;
					container.one('mouseenter',function()
365
					{
Ad Schellevis's avatar
Ad Schellevis committed
366 367
						clearTimeout(timeout);
						container.one('mouseleave',function()
368
						{
Ad Schellevis's avatar
Ad Schellevis committed
369 370 371 372 373 374 375 376 377 378
							jQuery.fn.popover.Constructor.prototype.leave.call(self,self);
						});
					})
				}
			};
			jQuery('body').popover({selector:'[data-popover]',trigger:'click hover',placement:'auto',delay:{show:250,hide:50}
		});
	});
//]]>
</script>
Ad Schellevis's avatar
Ad Schellevis committed
379

Ad Schellevis's avatar
Ad Schellevis committed
380 381
<?php include("fbegin.inc"); ?>

Ad Schellevis's avatar
Ad Schellevis committed
382 383 384


	<section class="page-content-main">
385
		<div class="container-fluid">
Ad Schellevis's avatar
Ad Schellevis committed
386
			<div class="row">
387

388
				<?php if (isset($savemsg)) print_info_box($savemsg); ?>
Ad Schellevis's avatar
Ad Schellevis committed
389 390 391 392 393 394
				<?php if (is_subsystem_dirty('filter')): ?><p>
				<?php
				if($_REQUEST['undodrag']) {
					foreach($_REQUEST['dragtable'] as $dt)
						$dragtable .= "&dragtable[]={$dt}";
					print_info_box_np_undo(gettext("The firewall rule configuration has been changed.<br />You must apply the changes in order for them to take effect."), "apply" , gettext("Apply changes") , "firewall_rules.php?if={$_REQUEST['if']}&dragdroporder=true&{$dragtable}");
Ad Schellevis's avatar
Ad Schellevis committed
395
				} else {
Ad Schellevis's avatar
Ad Schellevis committed
396
					print_info_box_np(gettext("The firewall rule configuration has been changed.<br />You must apply the changes in order for them to take effect."));
Ad Schellevis's avatar
Ad Schellevis committed
397
				}
Ad Schellevis's avatar
Ad Schellevis committed
398 399 400 401 402
				?>

				<?php endif; ?>

			    <section class="col-xs-12">
403 404 405


					 <?php
Ad Schellevis's avatar
Ad Schellevis committed
406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421
							/* active tabs */
							$tab_array = array();
							if ("FloatingRules" == $if)
								$active = true;
							else
								$active = false;
							$tab_array[] = array(gettext("Floating"), $active, "firewall_rules.php?if=FloatingRules");
							$tabscounter = 0; $i = 0; foreach ($iflist as $ifent => $ifname) {
								if ($ifent == $if)
									$active = true;
								else
									$active = false;
								$tab_array[] = array($ifname, $active, "firewall_rules.php?if={$ifent}");
							}
							display_top_tabs($tab_array);
						?>
422 423


424
						<div class="tab-content content-box col-xs-12" style="overflow: auto;">
425 426


Ad Schellevis's avatar
Ad Schellevis committed
427
		                        <form action="firewall_rules.php<? if (!empty($if)): ?>?if=<?=$if;?><? endif; ?>" method="post" name="iform" id="iform">
428

429
		                        <div class="table-responsive" >
Ad Schellevis's avatar
Ad Schellevis committed
430 431
			                        <table class="table table-striped table-sort dragable">
				                        <thead>
Ad Schellevis's avatar
Ad Schellevis committed
432
										<tr id="frheader">
Ad Schellevis's avatar
Ad Schellevis committed
433 434 435 436 437 438 439 440 441 442 443 444
										<th class="list">&nbsp;</th>
										<th class="list">&nbsp;</th>
										<th class="listhdrr"><?=gettext("Proto");?></th>
										<th class="listhdrr"><?=gettext("Source");?></th>
										<th class="listhdrr"><?=gettext("Port");?></th>
										<th class="listhdrr"><?=gettext("Destination");?></th>
										<th class="listhdrr"><?=gettext("Port");?></th>
										<th class="listhdrr"><?=gettext("Gateway");?></th>
										<th class="listhdrr"><?=gettext("Queue");?></th>
										<th class="listhdrr"><?=gettext("Schedule");?></th>
										<th class="listhdr"><?=gettext("Description");?></th>
										<th class="list">
445

Ad Schellevis's avatar
Ad Schellevis committed
446 447 448 449 450 451 452 453 454 455 456
												<?php
													$nrules = 0;
													for ($i = 0; isset($a_filter[$i]); $i++) {
														$filterent = $a_filter[$i];
														if ($filterent['interface'] != $if && !isset($filterent['floating']))
															continue;
														if (isset($filterent['floating']) && "FloatingRules" != $if)
															continue;
														$nrules++;
													}
												?>
457

Ad Schellevis's avatar
Ad Schellevis committed
458 459 460 461
												<?php if ($nrules): ?>
													<button name="del" type="submit" title="<?=gettext("delete selected rules");?>" onclick="return confirm('<?=gettext('Do you really want to delete the selected rules?');?>')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></button>
												<?php endif; ?>
												<a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>&amp;after=-1" title="<?=gettext("add new rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
Ad Schellevis's avatar
Ad Schellevis committed
462
										</th>
Ad Schellevis's avatar
Ad Schellevis committed
463
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
464 465
				                        </thead>
				                        <tbody>
Ad Schellevis's avatar
Ad Schellevis committed
466 467 468 469
										<?php   // Show the anti-lockout rule if it's enabled, and we are on LAN with an if count > 1, or WAN with an if count of 1.
											if (!isset($config['system']['webgui']['noantilockout']) &&
												(((count($config['interfaces']) > 1) && ($if == 'lan'))
												|| ((count($config['interfaces']) == 1) && ($if == 'wan')))):
470

Ad Schellevis's avatar
Ad Schellevis committed
471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488
												$alports = implode('<br />', filter_get_antilockout_ports(true));
										?>
										<tr valign="top" id="antilockout">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-play text-success"></span></td>

										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr"><?=$iflist[$if];?> Address</td>
										<td class="listr"><?= $alports ?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">&nbsp;</td>
										<td class="listbg"><?=gettext("Anti-Lockout Rule");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
											<a href="system_advanced_admin.php" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
489

Ad Schellevis's avatar
Ad Schellevis committed
490 491 492 493
											<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
										</td>
										</tr>
							<?php endif; ?>
494

Ad Schellevis's avatar
Ad Schellevis committed
495 496 497 498
							<?php if (isset($config['interfaces'][$if]['blockpriv'])): ?>
										<tr valign="top" id="frrfc1918">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-remove text-danger"></span></td>
499

Ad Schellevis's avatar
Ad Schellevis committed
500 501 502 503 504 505 506 507 508 509 510
										<td class="listr">*</td>
										<td class="listr"><?=gettext("RFC 1918 networks");?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">&nbsp;</td>
										<td class="listbg"><?=gettext("Block private networks");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
511

Ad Schellevis's avatar
Ad Schellevis committed
512
												<a href="interfaces.php?if=<?=htmlspecialchars($if)?>#rfc1918" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
513

Ad Schellevis's avatar
Ad Schellevis committed
514 515 516 517 518 519 520 521
												<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
										</td>
										</tr>
							<?php endif; ?>
							<?php if (isset($config['interfaces'][$if]['blockbogons'])): ?>
										<tr valign="top" id="frrfc1918">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-remove text-danger"></span></td>
522

Ad Schellevis's avatar
Ad Schellevis committed
523 524 525 526 527 528 529 530 531 532 533
										<td class="listr">*</td>
										<td class="listr"><?=gettext("Reserved/not assigned by IANA");?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listbg"><?=gettext("Block bogon networks");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
534

Ad Schellevis's avatar
Ad Schellevis committed
535
											<a href="interfaces.php?if=<?=htmlspecialchars($if)?>#rfc1918" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
536

Ad Schellevis's avatar
Ad Schellevis committed
537
											<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
538

Ad Schellevis's avatar
Ad Schellevis committed
539 540
										</td>
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
541
				                        </tbody>
Ad Schellevis's avatar
Ad Schellevis committed
542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557
							<?php endif; ?>
										<tbody id="dragtable">
							<?php $nrules = 0; for ($i = 0; isset($a_filter[$i]); $i++):
								$filterent = $a_filter[$i];
								if ($filterent['interface'] != $if && !isset($filterent['floating']))
									continue;
								if (isset($filterent['floating']) && "FloatingRules" != $if)
									continue;
								$isadvset = firewall_check_for_advanced_options($filterent);
								if($isadvset)
									$advanced_set = "<span class=\"glyphicon glypicon-cog\" title=\"" . gettext("advanced settings set") . ": {$isadvset}\"></span>";
								else
									$advanced_set = "";
							?>
										<tr valign="top" id="fr<?=$nrules;?>">
										<td class="listt">
Ad Schellevis's avatar
Ad Schellevis committed
558
											<input type="checkbox" id="frc<?=$nrules;?>" name="rule[]" value="<?=$i;?>"  />
Ad Schellevis's avatar
Ad Schellevis committed
559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580
											<?php echo $advanced_set; ?>
										</td>
										<td class="listt" align="center">
										<?php
											if ($filterent['type'] == "block") {
												$iconfn = "glyphicon-remove";
												$textss = "text-danger"; }
											else if ($filterent['type'] == "reject") {
												$iconfn = "glyphicon-remove";
												$textss = "text-warning"; }
											else if ($filterent['type'] == "match") {
												$iconfn = "glyphicon-ok";
												$textss = ""; }
											else {
												$iconfn = "glyphicon-play";
												$textss = "text-success"; }
											if (isset($filterent['disabled'])) {
												$textss = $textse = "text-muted";

											} else {
												//$textss = $textse = "";
												$textse = "";
Ad Schellevis's avatar
Ad Schellevis committed
581
											}
Ad Schellevis's avatar
Ad Schellevis committed
582 583 584 585 586 587 588 589 590 591 592 593 594 595
										?>
											<a href="?if=<?=htmlspecialchars($if);?>&amp;act=toggle&amp;id=<?=$i;?>" title="<?=gettext("click to toggle enabled/disabled status");?>" ><span class="glyphicon <?=$iconfn;?> <?=$textss;?>"></span></a>
										<?php
											if (isset($filterent['log'])):
												$iconfnlog = "glyphicon-info-sign";
											if (isset($filterent['disabled']))
												$iconfnlog .= " text-muted";
										?>
											<span class="glyphicon <?=$iconfnlog;?>"></span>
							<?php endif; ?>
										</td>
										<?php
											//build Alias popup box
											$alias_src_span_begin = "";
596

Ad Schellevis's avatar
Ad Schellevis committed
597
											$alias_popup = rule_popup($filterent['source']['address'],pprint_port($filterent['source']['port']),$filterent['destination']['address'],pprint_port($filterent['destination']['port']));
598

Ad Schellevis's avatar
Ad Schellevis committed
599 600 601 602 603 604 605 606 607 608 609 610 611 612
											$alias_src_span_end = ""; //$alias_popup["src_end"];
											if ( count($alias_popup) > 0 ) {
												$aliases_popup['src']['addrlist']=explode(" ",$alias_popup['src']['address']);
												$aliases_popup['src']['detlist']=explode("||",$alias_popup['src']['detail']);

												$alias_src_span_begin="<span title=\"\" type=\"button\" data-placement=\"bottom\" data-popover=\"true\" data-html=\"true\" data-content='";
												foreach ($aliases_popup['src']['addrlist'] as $addrkey => $address) {
													$alias_src_span_begin=$alias_src_span_begin."<b>".$address."</b> <small>(".$aliases_popup['src']['detlist'][$addrkey].")</small>&nbsp;<br>";
												}
												$alias_src_span_begin=$alias_src_span_begin."' data-original-title='<a href=\"/firewall_aliases_edit.php?id=".(string)$alias_popup['src']['aliasid']."\" target=\"_self\" >
													<span class=\"text-primary\"><b>".htmlspecialchars(pprint_address($filterent['source']))."(".count($aliases_popup['src']['addrlist']).")"."</span></b></a>'>";
														//<i class="glyphicon glyphicon-list">&nbsp;</i><b>Vergelijk Producten</b>&nbsp;<span class="badge">2</span>
												$alias_src_span_end="</span>";
											}
Ad Schellevis's avatar
Ad Schellevis committed
613 614 615 616 617 618 619 620 621 622 623
											//build Schedule popup box
											$a_schedules = &$config['schedules']['schedule'];
											$schedule_span_begin = "";
											$schedule_span_end = "";
											$sched_caption_escaped = "";
											$sched_content = "";
											$schedstatus = false;
											$dayArray = array (gettext('Mon'),gettext('Tues'),gettext('Wed'),gettext('Thur'),gettext('Fri'),gettext('Sat'),gettext('Sun'));
											$monthArray = array (gettext('January'),gettext('February'),gettext('March'),gettext('April'),gettext('May'),gettext('June'),gettext('July'),gettext('August'),gettext('September'),gettext('October'),gettext('November'),gettext('December'));
											if($config['schedules']['schedule'] <> "" and is_array($config['schedules']['schedule'])) {
												foreach ($a_schedules as $schedule)
Ad Schellevis's avatar
Ad Schellevis committed
624
												{
Ad Schellevis's avatar
Ad Schellevis committed
625 626
													if ($schedule['name'] == $filterent['sched'] ){
														$schedstatus = filter_get_time_based_rule_status($schedule);
627

Ad Schellevis's avatar
Ad Schellevis committed
628 629 630 631 632 633 634
														foreach($schedule['timerange'] as $timerange) {
															$tempFriendlyTime = "";
															$tempID = "";
															$firstprint = false;
															if ($timerange){
																$dayFriendly = "";
																$tempFriendlyTime = "";
635

Ad Schellevis's avatar
Ad Schellevis committed
636 637 638
																//get hours
																$temptimerange = $timerange['hour'];
																$temptimeseparator = strrpos($temptimerange, "-");
639

Ad Schellevis's avatar
Ad Schellevis committed
640 641
																$starttime = substr ($temptimerange, 0, $temptimeseparator);
																$stoptime = substr ($temptimerange, $temptimeseparator+1);
642

Ad Schellevis's avatar
Ad Schellevis committed
643 644 645 646 647 648 649 650 651
																if ($timerange['month']){
																	$tempmontharray = explode(",", $timerange['month']);
																	$tempdayarray = explode(",",$timerange['day']);
																	$arraycounter = 0;
																	$firstDayFound = false;
																	$firstPrint = false;
																	foreach ($tempmontharray as $monthtmp){
																		$month = $tempmontharray[$arraycounter];
																		$day = $tempdayarray[$arraycounter];
652

Ad Schellevis's avatar
Ad Schellevis committed
653 654 655 656 657 658
																		if (!$firstDayFound)
																		{
																			$firstDay = $day;
																			$firstmonth = $month;
																			$firstDayFound = true;
																		}
659

Ad Schellevis's avatar
Ad Schellevis committed
660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720
																		$currentDay = $day;
																		$nextDay = $tempdayarray[$arraycounter+1];
																		$currentDay++;
																		if (($currentDay != $nextDay) || ($tempmontharray[$arraycounter] != $tempmontharray[$arraycounter+1])){
																			if ($firstPrint)
																				$dayFriendly .= ", ";
																			$currentDay--;
																			if ($currentDay != $firstDay)
																				$dayFriendly .= $monthArray[$firstmonth-1] . " " . $firstDay . " - " . $currentDay ;
																			else
																				$dayFriendly .=  $monthArray[$month-1] . " " . $day;
																			$firstDayFound = false;
																			$firstPrint = true;
																		}
																		$arraycounter++;
																	}
																}
																else
																{
																	$tempdayFriendly = $timerange['position'];
																	$firstDayFound = false;
																	$tempFriendlyDayArray = explode(",", $tempdayFriendly);
																	$currentDay = "";
																	$firstDay = "";
																	$nextDay = "";
																	$counter = 0;
																	foreach ($tempFriendlyDayArray as $day){
																		if ($day != ""){
																			if (!$firstDayFound)
																			{
																				$firstDay = $tempFriendlyDayArray[$counter];
																				$firstDayFound = true;
																			}
																			$currentDay =$tempFriendlyDayArray[$counter];
																			//get next day
																			$nextDay = $tempFriendlyDayArray[$counter+1];
																			$currentDay++;
																			if ($currentDay != $nextDay){
																				if ($firstprint)
																					$dayFriendly .= ", ";
																				$currentDay--;
																				if ($currentDay != $firstDay)
																					$dayFriendly .= $dayArray[$firstDay-1] . " - " . $dayArray[$currentDay-1];
																				else
																					$dayFriendly .= $dayArray[$firstDay-1];
																				$firstDayFound = false;
																				$firstprint = true;
																			}
																			$counter++;
																		}
																	}
																}
																$timeFriendly = $starttime . " - " . $stoptime;
																$description = $timerange['rangedescr'];
																$sched_content .= $dayFriendly . "; " . $timeFriendly . "<br />";
															}
														}
														$sched_caption_escaped = str_replace("'", "\'", $schedule['descr']);
														$schedule_span_begin = "<span style=\"cursor: help;\" onmouseover=\"domTT_activate(this, event, 'content', '<h1>{$sched_caption_escaped}</h1><p>{$sched_content}</p>', 'trail', true, 'delay', 0, 'fade', 'both', 'fadeMax', 93, 'styleClass', 'niceTitle');\" onmouseout=\"this.style.color = ''; domTT_mouseout(this, event);\"><u>";
														$schedule_span_end = "</u></span>";
													}
Ad Schellevis's avatar
Ad Schellevis committed
721
												}
Ad Schellevis's avatar
Ad Schellevis committed
722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738
											}
											$printicon = false;
											$alttext = "";
											$image = "";
											if (!isset($filterent['disabled'])) {
												if ($schedstatus) {
													if ($iconfn == "block" || $iconfn == "reject") {
														$image = "glyphicon-remove text-danger";
														$alttext = gettext("Traffic matching this rule is currently being denied");
													} else {
														$image = "glyphicon-play text-success";
														$alttext = gettext("Traffic matching this rule is currently being allowed");
													}
													$printicon = true;
												} else if ($filterent['sched']) {
													if ($iconfn == "block" || $iconfn == "reject")
														$image = "glyphicon-remove text-muted";
Ad Schellevis's avatar
Ad Schellevis committed
739
													else
Ad Schellevis's avatar
Ad Schellevis committed
740 741 742
														$image = "glyphicon-remove text-danger";
													$alttext = gettext("This rule is not currently active because its period has expired");
													$printicon = true;
Ad Schellevis's avatar
Ad Schellevis committed
743 744
												}
											}
Ad Schellevis's avatar
Ad Schellevis committed
745
										?>
Ad Schellevis's avatar
Ad Schellevis committed
746
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774
										<span class="<?=$textse;?>">
										<?php
											if (isset($filterent['ipprotocol'])) {
												switch($filterent['ipprotocol']) {
													case "inet":
														echo "IPv4 ";
														break;
													case "inet6":
														echo "IPv6 ";
														break;
													case "inet46":
														echo "IPv4+6 ";
														break;
												}
											} else {
												echo "IPv4 ";
											}
											if (isset($filterent['protocol'])) {
												echo strtoupper($filterent['protocol']);
												if (strtoupper($filterent['protocol']) == "ICMP" && !empty($filterent['icmptype'])) {
													echo ' <span style="cursor: help;" title="ICMP type: ' . $icmptypes[$filterent['icmptype']] . '"><u>';
													echo $filterent['icmptype'];
													echo '</u></span>';
												}
											} else echo "*";
										?>
										</span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
775
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
776 777
											<span class="<?=$textse;?>"><?php echo $alias_src_span_begin;?><?php echo htmlspecialchars(pprint_address($filterent['source']));?><?php echo $alias_src_span_end;?></span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
778
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
779
											<span class="<?=$textse;?>"><?php echo htmlspecialchars(pprint_port($filterent['source']['port'])); ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
780
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
781
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
782
											<span class="<?=$textse;?>"><?php echo htmlspecialchars(pprint_address($filterent['destination'])); ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
783
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
784
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
785
											<span class="<?=$textse;?>"><?php echo htmlspecialchars(pprint_port($filterent['destination']['port'])); ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
786
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
787
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
788 789
											<span class="<?=$textse;?>"><?php if (isset($config['interfaces'][$filterent['gateway']]['descr'])) echo htmlspecialchars($config['interfaces'][$filterent['gateway']]['descr']); else  echo htmlspecialchars(pprint_port($filterent['gateway'])); ?></span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
790
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
791
										<span class="<?=$textse;?>"><?=gettext('none');?></span>
Ad Schellevis's avatar
Ad Schellevis committed
792
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
793
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';"><font color="black">
794
											<?php if ($printicon) { ?><span class="glyphicon <?php echo $image; ?>" title="<?php echo $alttext;?>"></span><?php } ?><span class="<?=$textse;?>"><?php echo $schedule_span_begin;?><?=htmlspecialchars($filterent['sched']);?>&nbsp;<?php echo $schedule_span_end; ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
795 796
										</font></td>

Ad Schellevis's avatar
Ad Schellevis committed
797
										<td class="listbg descr" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
798 799 800
											<span class="<?=$textse;?>"><?=htmlspecialchars($filterent['descr']);?>&nbsp;</span>
										</td>
										<td valign="middle" class="list nowrap">
801
												<button name="move_<?=$i;?>_x" type="submit" title="<?=gettext("move selected rules before this rule"); ?>" class="btn btn-default btn-xs" value="<?=$i;?>"><span class="glyphicon glyphicon-arrow-left"></span></button>
Ad Schellevis's avatar
Ad Schellevis committed
802
												<a href="firewall_rules_edit.php?id=<?=$i;?>" title="<?=gettext("edit rule"); ?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
803

Ad Schellevis's avatar
Ad Schellevis committed
804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838
												<a href="firewall_rules.php?act=del&amp;if=<?=htmlspecialchars($if);?>&amp;id=<?=$i;?>" title="<?=gettext("delete rule"); ?>" onclick="return confirm('Do you really want to delete this rule?')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></a>
												<a href="firewall_rules_edit.php?dup=<?=$i;?>" title="<?=gettext("add a new rule based on this one"); ?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
										</td>
										</tr>
										<?php $nrules++; endfor; ?>
										  </tbody>
							<?php if ($nrules == 0): ?>
										<tr>
										<td class="listt"></td>
										<td class="listt"></td>
										<td class="listlr" colspan="11" align="center" valign="middle">
										<span class="gray">
								<?php if ($_REQUEST['if'] == "FloatingRules"): ?>
											<?=gettext("No floating rules are currently defined."); ?><br /><br />
								<?php else: ?>
											<?=gettext("No rules are currently defined for this interface"); ?><br />
											<?=gettext("All incoming connections on this interface will be blocked until you add pass rules."); ?><br /><br />
								<?php endif; ?>
											<?=gettext("Click the"); ?> <a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>"  class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a><?=gettext(" button to add a new rule.");?></span>
										</td>
										</tr>
							<?php endif; ?>
										<tr id="fr<?=$nrules;?>">
										<td class="list"></td>
										<td class="list"></td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">
839

840
										<?php if ($nrules): ?>
841
											<button name="move_<?=$i;?>_x" type="submit" value="<?=$i;?>"  title="<?=gettext("move selected rules to end");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></button>
842
											<button name="del_x" type="submit" title="<?=gettext("delete selected rules");?>" onclick="return confirm('<?=gettext('Do you really want to delete the selected rules?');?>')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></button>
843 844
											<a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>" title="<?=gettext("add new rule");?>"  class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
										<?php endif; ?>
845

Ad Schellevis's avatar
Ad Schellevis committed
846 847
										</td>
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
848
									</tbody>
Ad Schellevis's avatar
Ad Schellevis committed
849
									</table>
850 851


Ad Schellevis's avatar
Ad Schellevis committed
852
									<div class="container-fluid">
Ad Schellevis's avatar
Ad Schellevis committed
853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911
									<table class="tabcont" width="100%" border="0" cellspacing="0" cellpadding="0" summary="icons">
										<tr>
											<td width="16"><span class="glyphicon glyphicon-play text-success"></span></td>
											<td width="100"><?=gettext("pass");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-ok"></span></td>
											<td width="100"><?=gettext("match");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-remove text-danger"></span></td>
											<td width="100"><?=gettext("block");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-remove text-warning"></span></td>
											<td width="100"><?=gettext("reject");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-info-sign"></span></td>
											<td width="100"><?=gettext("log");?></td>
										</tr>
										<tr>
											<td><span class="glyphicon glyphicon-play text-muted"></span></td>
											<td class="nowrap"><?=gettext("pass (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-ok text-muted"></span></td>
											<td class="nowrap"><?=gettext("match (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-remove text-muted"></span></td>
											<td class="nowrap"><?=gettext("block (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-remove text-muted"></span></td>
											<td class="nowrap"><?=gettext("reject (disabled)");?></td>
											<td>&nbsp;</td>
											<td width="16"><span class="glyphicon glyphicon-info-sign text-muted"></span></td>
											<td class="nowrap"><?=gettext("log (disabled)");?></td>
										</tr>
										<tr>
											<td colspan="10">
												<p>&nbsp;</p>
												<strong>
													<span class="red"><?=gettext("Hint:");?></span>
												</strong><br />
												<ul>
												<?php if ("FloatingRules" != $if): ?>
													<li><?=gettext("Rules are evaluated on a first-match basis (i.e. " .
													"the action of the first rule to match a packet will be executed). " .
													"This means that if you use block rules, you'll have to pay attention " .
													"to the rule order. Everything that isn't explicitly passed is blocked " .
													"by default. ");?>
													</li>
												<?php else: ?>
													<li><?=gettext("Floating rules are evaluated on a first-match basis (i.e. " .
													"the action of the first rule to match a packet will be executed) only " .
													"if the 'quick' option is checked on a rule. Otherwise they will only apply if no " .
													"other rules match. Pay close attention to the rule order and options " .
													"chosen. If no rule here matches, the per-interface or default rules are used. ");?>
													</li>
												<?php endif; ?>
												</ul>
											 </td>
										</tr>
									</table>
Ad Schellevis's avatar
Ad Schellevis committed
912
									</div>
Ad Schellevis's avatar
Ad Schellevis committed
913 914 915 916 917
								</div>
		                    </form>
					</div>
			    </section>
			</div>
Ad Schellevis's avatar
Ad Schellevis committed
918
		</div>
Ad Schellevis's avatar
Ad Schellevis committed
919
	</section>
920

Ad Schellevis's avatar
Ad Schellevis committed
921
<input type="hidden" name="if" value="<?=htmlspecialchars($if);?>" />
Ad Schellevis's avatar
Ad Schellevis committed
922
<!-- <script type="text/javascript">
Ad Schellevis's avatar
Ad Schellevis committed
923 924 925
//<![CDATA[
	var number_of_rules = <?=$nrules?>;
	<?php $nrules = 0; for ($i = 0; isset($a_filter[$i]); $i++): ?>
926

Ad Schellevis's avatar
Ad Schellevis committed
927 928 929 930 931 932 933 934 935 936 937 938
		Sortable.create("dragtable", {
			tag:"tr",
			format:"fr([0-9999999])",
			containment:["dragtable"],
			onChange:function(affected) {
				document.body.style.cursor = 'move';
			},
			onUpdate:function(container) {
				document.body.style.cursor = 'move';
				updateOrder(Sortable.serialize('dragtable', 'tr'));
			}
		});
939

Ad Schellevis's avatar
Ad Schellevis committed
940
	<?php endfor; ?>
941

Ad Schellevis's avatar
Ad Schellevis committed
942 943 944 945 946
	jQuery('#loading').hide();
//]]>
</script> -->

<script type="text/javascript">
947

Ad Schellevis's avatar
Ad Schellevis committed
948 949 950 951 952 953 954 955 956
	$(function  () {
	 $('table.dragable').sortable({
		  containerSelector: 'table',
		  itemPath: '> tbody#dragtable',
		  itemSelector: 'tr',
		  placeholder: '<tr class="placeholder"/>',
		  onDrop: function(item,container,_super, event) {
			   item.removeClass("dragged").removeAttr("style");
			   $("body").removeClass("dragging");
957 958


Ad Schellevis's avatar
Ad Schellevis committed
959 960 961 962
			  updateOrder(container);
		  }
		})
	});
963

Ad Schellevis's avatar
Ad Schellevis committed
964
	function updateOrder(container) {
Ad Schellevis's avatar
Ad Schellevis committed
965
		if(document.getElementById("redboxtable"))
Ad Schellevis's avatar
Ad Schellevis committed
966
			//jQuery('#redboxtable').hide();
967

Ad Schellevis's avatar
Ad Schellevis committed
968
		//jQuery('#loading').show();
969

Ad Schellevis's avatar
Ad Schellevis committed
970
		document.body.style.cursor = 'wait';
971

Ad Schellevis's avatar
Ad Schellevis committed
972 973
		var drag_url = '';
		$('tbody#dragtable tr').each(function(i, obj) {
974

Ad Schellevis's avatar
Ad Schellevis committed
975 976
			drag_url += '&dragtable[]='+$(obj).attr('id').replace('fr','');
		});
977

Ad Schellevis's avatar
Ad Schellevis committed
978
		document.location = 'firewall_rules.php?if=<?=htmlspecialchars($if);?>&dragdroporder=true' + drag_url;
Ad Schellevis's avatar
Ad Schellevis committed
979 980
		return;
	}
981

Ad Schellevis's avatar
Ad Schellevis committed
982
</script>
Ad Schellevis's avatar
Ad Schellevis committed
983

984
<?php include("foot.inc"); ?>