firewall_rules.php 39.9 KB
Newer Older
Ad Schellevis's avatar
Ad Schellevis committed
1
<?php
2

Ad Schellevis's avatar
Ad Schellevis committed
3
/*
4
	Copyright (C) 2014-2015 Deciso B.V.
Ad Schellevis's avatar
Ad Schellevis committed
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
	Copyright (C) 2005 Scott Ullrich (sullrich@gmail.com)
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
	All rights reserved.

	Redistribution and use in source and binary forms, with or without
	modification, are permitted provided that the following conditions are met:

	1. Redistributions of source code must retain the above copyright notice,
	   this list of conditions and the following disclaimer.

	2. Redistributions in binary form must reproduce the above copyright
	   notice, this list of conditions and the following disclaimer in the
	   documentation and/or other materials provided with the distribution.

	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
	POSSIBILITY OF SUCH DAMAGE.
*/

31
require_once("guiconfig.inc");
Ad Schellevis's avatar
Ad Schellevis committed
32
require_once("filter.inc");
33
require_once("pfsense-utils.inc");
Ad Schellevis's avatar
Ad Schellevis committed
34

35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71
function rule_popup($src,$srcport,$dst,$dstport){
	global $config,$g;
	$aliases_array = array();
	if (isset($config['aliases']['alias'])) {
		$descriptions = array ();
		foreach ($config['aliases']['alias'] as $alias_id=>$alias_name){
			if ($alias_name['name'] == $src) {
				//var_dump($config['aliases']['alias'][$alias_id]);
				$aliases_array['src']=$config['aliases']['alias'][$alias_id];
				$aliases_array['src']['aliasid']=$alias_id;
				//$descriptions['src'] = $span_begin;
				//$descriptions['src_end'] = $span_end;
			}
			if ($alias_name['name'] == $srcport) {
				$aliases_array['srcport']=$config['aliases']['alias'][$alias_id];
				$aliases_array['srcport']['aliasid']=$alias_id;
				//$descriptions['srcport'] = $span_begin;
				//$descriptions['srcport_end'] = $span_end;
			}
			if ($alias_name['name'] == $dst ) {
				$aliases_array['dst']=$config['aliases']['alias'][$alias_id];
				$aliases_array['dst']['aliasid']=$alias_id;
				//$descriptions['dst'] = $span_begin;
				//$descriptions['dst_end'] = $span_end;
			}
			if ($alias_name['name'] == $dstport) {
				$aliases_array['dstport']=$config['aliases']['alias'][$alias_id];
				$aliases_array['dstport']['aliasid']=$alias_id;
				//$descriptions['dstport'] = $span_begin;
				//$descriptions['dstport_end'] = $span_end;
			}
		}
		return $aliases_array;//$descriptions;
	}
}


Ad Schellevis's avatar
Ad Schellevis committed
72 73 74 75 76 77
$pgtitle = array(gettext("Firewall"),gettext("Rules"));
$shortcut_section = "firewall";

function delete_nat_association($id) {
	global $config;

78
	if (!$id || !isset($config['nat']['rule']))
Ad Schellevis's avatar
Ad Schellevis committed
79 80 81 82 83 84 85 86 87
		return;

	$a_nat = &$config['nat']['rule'];

	foreach ($a_nat as &$natent)
		if ($natent['associated-rule-id'] == $id)
			$natent['associated-rule-id'] = '';
}

88
if (!isset($config['filter']['rule'])) {
Ad Schellevis's avatar
Ad Schellevis committed
89 90 91 92 93 94 95 96 97 98 99
	$config['filter']['rule'] = array();
}
filter_rules_sort();
$a_filter = &$config['filter']['rule'];

$if = $_GET['if'];
if ($_POST['if'])
	$if = $_POST['if'];

$ifdescs = get_configured_interface_with_descr();

Ad Schellevis's avatar
Ad Schellevis committed
100

Ad Schellevis's avatar
Ad Schellevis committed
101 102
// Drag and drop reordering
if($_REQUEST['dragdroporder']) {
Ad Schellevis's avatar
Ad Schellevis committed
103

104 105 106



Ad Schellevis's avatar
Ad Schellevis committed
107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173
	// First create a new ruleset array and tmp arrays
	$a_filter_before = array();
	$a_filter_order = array();
	$a_filter_order_tmp = array();
	$a_filter_after = array();
	$found = false;
	$drag_order = $_REQUEST['dragtable'];
	// Next traverse through rules building a new order for interface
	for ($i = 0; isset($a_filter[$i]); $i++) {
		if(( $_REQUEST['if'] == "FloatingRules" && isset($a_filter[$i]['floating']) ) || ( $a_filter[$i]['interface'] == $_REQUEST['if'] && !isset($a_filter[$i]['floating']) )) {
			$a_filter_order_tmp[] = $a_filter[$i];
			$found = true;
		} else if (!$found)
			$a_filter_before[] = $a_filter[$i];
		else
			$a_filter_after[] = $a_filter[$i];
	}
	// Reorder rules with the posted order
	for ($i = 0; $i<count($drag_order); $i++)
		$a_filter_order[] = $a_filter_order_tmp[$drag_order[$i]];
	// In case $drag_order didn't account for some rules, make sure we don't lose them
	if(count($a_filter_order) < count($a_filter_order_tmp)) {
		for ($i = 0; $i<count($a_filter_order_tmp); $i++)
			if(!in_array($i, $drag_order))
				$a_filter_order[] = $a_filter_order_tmp[$i];
	}
	// Overwrite filter rules with newly created items
	$config['filter']['rule'] = array_merge($a_filter_before, $a_filter_order, $a_filter_after);
	// Write configuration
	$config = write_config(gettext("Drag and drop firewall rules ordering update."));
	// Redirect back to page
	mark_subsystem_dirty('filter');
	$undo = array();
	foreach($_REQUEST['dragtable'] as $dt)
		$undo[] = "";
	$counter = 0;
	foreach($_REQUEST['dragtable'] as $dt) {
		$undo[$dt] = $counter;
		$counter++;
	}
	foreach($undo as $dt)
		$undotxt .= "&dragtable[]={$dt}";
	header("Location: firewall_rules.php?if=" . $_REQUEST['if'] . "&undodrag=true" . $undotxt);
	exit;
}

$icmptypes = array(
	"" => gettext("any"),
	"echoreq" => gettext("Echo request"),
	"echorep" => gettext("Echo reply"),
	"unreach" => gettext("Destination unreachable"),
	"squench" => gettext("Source quench"),
	"redir" => gettext("Redirect"),
	"althost" => gettext("Alternate Host"),
	"routeradv" => gettext("Router advertisement"),
	"routersol" => gettext("Router solicitation"),
	"timex" => gettext("Time exceeded"),
	"paramprob" => gettext("Invalid IP header"),
	"timereq" => gettext("Timestamp"),
	"timerep" => gettext("Timestamp reply"),
	"inforeq" => gettext("Information request"),
	"inforep" => gettext("Information reply"),
	"maskreq" => gettext("Address mask request"),
	"maskrep" => gettext("Address mask reply")
);

/* add group interfaces */
174
if (isset($config['ifgroups']['ifgroupentry']))
Ad Schellevis's avatar
Ad Schellevis committed
175 176 177 178 179 180 181 182
	foreach($config['ifgroups']['ifgroupentry'] as $ifgen)
		if (have_ruleint_access($ifgen['ifname']))
			$iflist[$ifgen['ifname']] = $ifgen['ifname'];

foreach ($ifdescs as $ifent => $ifdesc)
	if(have_ruleint_access($ifent))
		$iflist[$ifent] = $ifdesc;

183
if (isset($config['l2tp']['mode']) && $config['l2tp']['mode'] == "server")
Ad Schellevis's avatar
Ad Schellevis committed
184 185 186
	if(have_ruleint_access("l2tp"))
		$iflist['l2tp'] = "L2TP VPN";

187
if (isset($config['pptpd']['mode']) && $config['pptpd']['mode'] == "server")
Ad Schellevis's avatar
Ad Schellevis committed
188 189 190
	if(have_ruleint_access("pptp"))
		$iflist['pptp'] = "PPTP VPN";

191
if (isset($config['pppoes']['pppoe'])) {
192 193
	foreach ($config['pppoes']['pppoe'] as $pppoes) {
		if (($pppoes['mode'] == 'server') && have_ruleint_access('pppoe')) {
Ad Schellevis's avatar
Ad Schellevis committed
194
			$iflist['pppoe'] = "PPPoE Server";
195 196
		}
	}
Ad Schellevis's avatar
Ad Schellevis committed
197 198 199
}

/* add ipsec interfaces */
200 201 202 203 204
if (isset($config['ipsec']['enable']) || isset($config['ipsec']['client']['enable'])) {
	if (have_ruleint_access('enc0')) {
		$iflist['enc0'] = 'IPsec';
	}
}
Ad Schellevis's avatar
Ad Schellevis committed
205 206

/* add openvpn/tun interfaces */
207 208 209
if (isset($config['openvpn']['openvpn-server']) || isset($config['openvpn']['openvpn-client'])) {
	$iflist['openvpn'] = 'OpenVPN';
}
Ad Schellevis's avatar
Ad Schellevis committed
210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254

if (!$if || !isset($iflist[$if])) {
	if ("any" == $if)
		$if = "FloatingRules";
	else if ("FloatingRules" != $if) {
		if (isset($iflist['wan']))
			$if = "wan";
		else
			$if = "FloatingRules";
	}
}

if ($_POST) {

	$pconfig = $_POST;

	if ($_POST['apply']) {
		$retval = 0;
		$retval = filter_configure();

		clear_subsystem_dirty('filter');

		$savemsg = sprintf(gettext("The settings have been applied. The firewall rules are now reloading in the background.<br />You can also %s monitor %s the reload progress"),"<a href='status_filter_reload.php'>","</a>");
	}
}

if ($_GET['act'] == "del") {
	if ($a_filter[$_GET['id']]) {
		if (!empty($a_filter[$_GET['id']]['associated-rule-id'])) {
			delete_nat_association($a_filter[$_GET['id']]['associated-rule-id']);
		}
		unset($a_filter[$_GET['id']]);
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
}

// Handle save msg if defined
if($_REQUEST['savemsg'])
	$savemsg = htmlentities($_REQUEST['savemsg']);

if (isset($_POST['del_x'])) {
	/* delete selected rules */
255
	if (isset($_POST['rule']) && count($_POST['rule'])) {
Ad Schellevis's avatar
Ad Schellevis committed
256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285
		foreach ($_POST['rule'] as $rulei) {
			delete_nat_association($a_filter[$rulei]['associated-rule-id']);
			unset($a_filter[$rulei]);
		}
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
} else if ($_GET['act'] == "toggle") {
	if ($a_filter[$_GET['id']]) {
		if(isset($a_filter[$_GET['id']]['disabled']))
			unset($a_filter[$_GET['id']]['disabled']);
		else
			$a_filter[$_GET['id']]['disabled'] = true;
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
} else {
	/* yuck - IE won't send value attributes for image buttons, while Mozilla does -
	   so we use .x/.y to fine move button clicks instead... */
	unset($movebtn);
	foreach ($_POST as $pn => $pd) {
		if (preg_match("/move_(\d+)_x/", $pn, $matches)) {
			$movebtn = $matches[1];
			break;
		}
	}
Ad Schellevis's avatar
Ad Schellevis committed
286

287 288


Ad Schellevis's avatar
Ad Schellevis committed
289
	/* move selected rules before this rule */
290
	if (isset($movebtn) && isset($_POST['rule']) && count($_POST['rule'])) {
Ad Schellevis's avatar
Ad Schellevis committed
291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323
		$a_filter_new = array();

		/* copy all rules < $movebtn and not selected */
		for ($i = 0; $i < $movebtn; $i++) {
			if (!in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		/* copy all selected rules */
		for ($i = 0; $i < count($a_filter); $i++) {
			if ($i == $movebtn)
				continue;
			if (in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		/* copy $movebtn rule */
		if ($movebtn < count($a_filter))
			$a_filter_new[] = $a_filter[$movebtn];

		/* copy all rules > $movebtn and not selected */
		for ($i = $movebtn+1; $i < count($a_filter); $i++) {
			if (!in_array($i, $_POST['rule']))
				$a_filter_new[] = $a_filter[$i];
		}

		$a_filter = $a_filter_new;
		if (write_config())
			mark_subsystem_dirty('filter');
		header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
		exit;
	}
}
Ad Schellevis's avatar
Ad Schellevis committed
324 325 326
$closehead = true;


Ad Schellevis's avatar
Ad Schellevis committed
327 328 329

include("head.inc");
?>
Ad Schellevis's avatar
Ad Schellevis committed
330 331 332 333 334
	<script type="text/javascript" src="/themes/<?=$g['theme'];?>/assets/javascripts/jquery-sortable.js"></script>
	<style type="text/css">
		body.dragging, body.dragging * {
		  cursor: move !important;
		}
335

Ad Schellevis's avatar
Ad Schellevis committed
336 337 338 339 340
		.dragged {
		  position: absolute;
		  opacity: 0.5;
		  z-index: 2000;
		}
341

Ad Schellevis's avatar
Ad Schellevis committed
342 343 344 345 346 347 348
		ol.example li.placeholder {
		  position: relative;
		  /** More li styles **/
		}
		ol.example li.placeholder:before {
		  position: absolute;
		  /** Define arrowhead **/
349
		}
Ad Schellevis's avatar
Ad Schellevis committed
350 351
	</style>
</head>
Ad Schellevis's avatar
Ad Schellevis committed
352
<body>
Ad Schellevis's avatar
Ad Schellevis committed
353 354 355 356 357

<script type='text/javascript'>//<![CDATA[
	jQuery(window).load(
		function(){
			var originalLeave=jQuery.fn.popover.Constructor.prototype.leave;
358
			jQuery.fn.popover.Constructor.prototype.leave=function(obj)
Ad Schellevis's avatar
Ad Schellevis committed
359 360 361 362 363 364
			{
				var self=obj instanceof this.constructor?obj:jQuery(obj.currentTarget)[this.type](this.getDelegateOptions()).data('bs.'+this.type)
				var container,timeout;originalLeave.call(this,obj);
				if(obj.currentTarget){container=jQuery(obj.currentTarget).siblings('.popover')
					timeout=self.timeout;
					container.one('mouseenter',function()
365
					{
Ad Schellevis's avatar
Ad Schellevis committed
366 367
						clearTimeout(timeout);
						container.one('mouseleave',function()
368
						{
Ad Schellevis's avatar
Ad Schellevis committed
369 370 371 372 373 374 375 376 377 378
							jQuery.fn.popover.Constructor.prototype.leave.call(self,self);
						});
					})
				}
			};
			jQuery('body').popover({selector:'[data-popover]',trigger:'click hover',placement:'auto',delay:{show:250,hide:50}
		});
	});
//]]>
</script>
Ad Schellevis's avatar
Ad Schellevis committed
379

Ad Schellevis's avatar
Ad Schellevis committed
380 381
<?php include("fbegin.inc"); ?>

Ad Schellevis's avatar
Ad Schellevis committed
382 383 384


	<section class="page-content-main">
385
		<div class="container-fluid">
Ad Schellevis's avatar
Ad Schellevis committed
386
			<div class="row">
387

388
				<?php if (isset($savemsg)) print_info_box($savemsg); ?>
Ad Schellevis's avatar
Ad Schellevis committed
389 390
				<?php if (is_subsystem_dirty('filter')): ?><p>
				<?php
391 392
				if ($_REQUEST['undodrag']) {
					foreach ($_REQUEST['dragtable'] as $dt) {
Ad Schellevis's avatar
Ad Schellevis committed
393
						$dragtable .= "&dragtable[]={$dt}";
394 395
					}
					print_info_box_apply_undo(gettext("The firewall rule configuration has been changed.<br />You must apply the changes in order for them to take effect."), "firewall_rules.php?if={$_REQUEST['if']}&dragdroporder=true&{$dragtable}");
Ad Schellevis's avatar
Ad Schellevis committed
396
				} else {
397
					print_info_box_apply(gettext("The firewall rule configuration has been changed.<br />You must apply the changes in order for them to take effect."));
Ad Schellevis's avatar
Ad Schellevis committed
398
				}
Ad Schellevis's avatar
Ad Schellevis committed
399 400 401 402 403
				?>

				<?php endif; ?>

			    <section class="col-xs-12">
404 405 406


					 <?php
Ad Schellevis's avatar
Ad Schellevis committed
407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422
							/* active tabs */
							$tab_array = array();
							if ("FloatingRules" == $if)
								$active = true;
							else
								$active = false;
							$tab_array[] = array(gettext("Floating"), $active, "firewall_rules.php?if=FloatingRules");
							$tabscounter = 0; $i = 0; foreach ($iflist as $ifent => $ifname) {
								if ($ifent == $if)
									$active = true;
								else
									$active = false;
								$tab_array[] = array($ifname, $active, "firewall_rules.php?if={$ifent}");
							}
							display_top_tabs($tab_array);
						?>
423 424


425
						<div class="tab-content content-box col-xs-12" style="overflow: auto;">
426 427


Ad Schellevis's avatar
Ad Schellevis committed
428
		                        <form action="firewall_rules.php<? if (!empty($if)): ?>?if=<?=$if;?><? endif; ?>" method="post" name="iform" id="iform">
429

430
		                        <div class="table-responsive" >
Ad Schellevis's avatar
Ad Schellevis committed
431 432
			                        <table class="table table-striped table-sort dragable">
				                        <thead>
Ad Schellevis's avatar
Ad Schellevis committed
433
										<tr id="frheader">
Ad Schellevis's avatar
Ad Schellevis committed
434 435 436 437 438 439 440 441 442 443 444 445
										<th class="list">&nbsp;</th>
										<th class="list">&nbsp;</th>
										<th class="listhdrr"><?=gettext("Proto");?></th>
										<th class="listhdrr"><?=gettext("Source");?></th>
										<th class="listhdrr"><?=gettext("Port");?></th>
										<th class="listhdrr"><?=gettext("Destination");?></th>
										<th class="listhdrr"><?=gettext("Port");?></th>
										<th class="listhdrr"><?=gettext("Gateway");?></th>
										<th class="listhdrr"><?=gettext("Queue");?></th>
										<th class="listhdrr"><?=gettext("Schedule");?></th>
										<th class="listhdr"><?=gettext("Description");?></th>
										<th class="list">
446

Ad Schellevis's avatar
Ad Schellevis committed
447 448 449 450 451 452 453 454 455 456 457
												<?php
													$nrules = 0;
													for ($i = 0; isset($a_filter[$i]); $i++) {
														$filterent = $a_filter[$i];
														if ($filterent['interface'] != $if && !isset($filterent['floating']))
															continue;
														if (isset($filterent['floating']) && "FloatingRules" != $if)
															continue;
														$nrules++;
													}
												?>
458

Ad Schellevis's avatar
Ad Schellevis committed
459 460 461 462
												<?php if ($nrules): ?>
													<button name="del" type="submit" title="<?=gettext("delete selected rules");?>" onclick="return confirm('<?=gettext('Do you really want to delete the selected rules?');?>')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></button>
												<?php endif; ?>
												<a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>&amp;after=-1" title="<?=gettext("add new rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
Ad Schellevis's avatar
Ad Schellevis committed
463
										</th>
Ad Schellevis's avatar
Ad Schellevis committed
464
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
465 466
				                        </thead>
				                        <tbody>
Ad Schellevis's avatar
Ad Schellevis committed
467 468 469 470
										<?php   // Show the anti-lockout rule if it's enabled, and we are on LAN with an if count > 1, or WAN with an if count of 1.
											if (!isset($config['system']['webgui']['noantilockout']) &&
												(((count($config['interfaces']) > 1) && ($if == 'lan'))
												|| ((count($config['interfaces']) == 1) && ($if == 'wan')))):
471

Ad Schellevis's avatar
Ad Schellevis committed
472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489
												$alports = implode('<br />', filter_get_antilockout_ports(true));
										?>
										<tr valign="top" id="antilockout">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-play text-success"></span></td>

										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr"><?=$iflist[$if];?> Address</td>
										<td class="listr"><?= $alports ?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">&nbsp;</td>
										<td class="listbg"><?=gettext("Anti-Lockout Rule");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
											<a href="system_advanced_admin.php" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
490

Ad Schellevis's avatar
Ad Schellevis committed
491 492 493 494
											<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
										</td>
										</tr>
							<?php endif; ?>
495

Ad Schellevis's avatar
Ad Schellevis committed
496 497 498 499
							<?php if (isset($config['interfaces'][$if]['blockpriv'])): ?>
										<tr valign="top" id="frrfc1918">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-remove text-danger"></span></td>
500

Ad Schellevis's avatar
Ad Schellevis committed
501 502 503 504 505 506 507 508 509 510 511
										<td class="listr">*</td>
										<td class="listr"><?=gettext("RFC 1918 networks");?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">&nbsp;</td>
										<td class="listbg"><?=gettext("Block private networks");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
512

Ad Schellevis's avatar
Ad Schellevis committed
513
												<a href="interfaces.php?if=<?=htmlspecialchars($if)?>#rfc1918" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
514

Ad Schellevis's avatar
Ad Schellevis committed
515 516 517 518 519 520 521 522
												<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
										</td>
										</tr>
							<?php endif; ?>
							<?php if (isset($config['interfaces'][$if]['blockbogons'])): ?>
										<tr valign="top" id="frrfc1918">
										<td class="list">&nbsp;</td>
										<td class="listt" align="center"><span class="glyphicon glyphicon-remove text-danger"></span></td>
523

Ad Schellevis's avatar
Ad Schellevis committed
524 525 526 527 528 529 530 531 532 533 534
										<td class="listr">*</td>
										<td class="listr"><?=gettext("Reserved/not assigned by IANA");?></td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listr">*</td>
										<td class="listbg"><?=gettext("Block bogon networks");?></td>
										<td valign="middle" class="list nowrap">
											<span title="<?=gettext("move selected rules before this rule");?>" alt="move" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></span>
535

Ad Schellevis's avatar
Ad Schellevis committed
536
											<a href="interfaces.php?if=<?=htmlspecialchars($if)?>#rfc1918" title="<?=gettext("edit rule");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
537

Ad Schellevis's avatar
Ad Schellevis committed
538
											<span title="<?=gettext("add a new rule based on this one");?>" width="17" height="17" border="0" alt="add" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></span>
539

Ad Schellevis's avatar
Ad Schellevis committed
540 541
										</td>
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
542
				                        </tbody>
Ad Schellevis's avatar
Ad Schellevis committed
543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558
							<?php endif; ?>
										<tbody id="dragtable">
							<?php $nrules = 0; for ($i = 0; isset($a_filter[$i]); $i++):
								$filterent = $a_filter[$i];
								if ($filterent['interface'] != $if && !isset($filterent['floating']))
									continue;
								if (isset($filterent['floating']) && "FloatingRules" != $if)
									continue;
								$isadvset = firewall_check_for_advanced_options($filterent);
								if($isadvset)
									$advanced_set = "<span class=\"glyphicon glypicon-cog\" title=\"" . gettext("advanced settings set") . ": {$isadvset}\"></span>";
								else
									$advanced_set = "";
							?>
										<tr valign="top" id="fr<?=$nrules;?>">
										<td class="listt">
Ad Schellevis's avatar
Ad Schellevis committed
559
											<input type="checkbox" id="frc<?=$nrules;?>" name="rule[]" value="<?=$i;?>"  />
Ad Schellevis's avatar
Ad Schellevis committed
560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581
											<?php echo $advanced_set; ?>
										</td>
										<td class="listt" align="center">
										<?php
											if ($filterent['type'] == "block") {
												$iconfn = "glyphicon-remove";
												$textss = "text-danger"; }
											else if ($filterent['type'] == "reject") {
												$iconfn = "glyphicon-remove";
												$textss = "text-warning"; }
											else if ($filterent['type'] == "match") {
												$iconfn = "glyphicon-ok";
												$textss = ""; }
											else {
												$iconfn = "glyphicon-play";
												$textss = "text-success"; }
											if (isset($filterent['disabled'])) {
												$textss = $textse = "text-muted";

											} else {
												//$textss = $textse = "";
												$textse = "";
Ad Schellevis's avatar
Ad Schellevis committed
582
											}
Ad Schellevis's avatar
Ad Schellevis committed
583 584 585 586 587 588 589 590 591 592 593 594 595 596
										?>
											<a href="?if=<?=htmlspecialchars($if);?>&amp;act=toggle&amp;id=<?=$i;?>" title="<?=gettext("click to toggle enabled/disabled status");?>" ><span class="glyphicon <?=$iconfn;?> <?=$textss;?>"></span></a>
										<?php
											if (isset($filterent['log'])):
												$iconfnlog = "glyphicon-info-sign";
											if (isset($filterent['disabled']))
												$iconfnlog .= " text-muted";
										?>
											<span class="glyphicon <?=$iconfnlog;?>"></span>
							<?php endif; ?>
										</td>
										<?php
											//build Alias popup box
											$alias_src_span_begin = "";
597

Ad Schellevis's avatar
Ad Schellevis committed
598
											$alias_popup = rule_popup($filterent['source']['address'],pprint_port($filterent['source']['port']),$filterent['destination']['address'],pprint_port($filterent['destination']['port']));
599

Ad Schellevis's avatar
Ad Schellevis committed
600 601 602 603 604 605 606 607 608 609 610 611 612 613
											$alias_src_span_end = ""; //$alias_popup["src_end"];
											if ( count($alias_popup) > 0 ) {
												$aliases_popup['src']['addrlist']=explode(" ",$alias_popup['src']['address']);
												$aliases_popup['src']['detlist']=explode("||",$alias_popup['src']['detail']);

												$alias_src_span_begin="<span title=\"\" type=\"button\" data-placement=\"bottom\" data-popover=\"true\" data-html=\"true\" data-content='";
												foreach ($aliases_popup['src']['addrlist'] as $addrkey => $address) {
													$alias_src_span_begin=$alias_src_span_begin."<b>".$address."</b> <small>(".$aliases_popup['src']['detlist'][$addrkey].")</small>&nbsp;<br>";
												}
												$alias_src_span_begin=$alias_src_span_begin."' data-original-title='<a href=\"/firewall_aliases_edit.php?id=".(string)$alias_popup['src']['aliasid']."\" target=\"_self\" >
													<span class=\"text-primary\"><b>".htmlspecialchars(pprint_address($filterent['source']))."(".count($aliases_popup['src']['addrlist']).")"."</span></b></a>'>";
														//<i class="glyphicon glyphicon-list">&nbsp;</i><b>Vergelijk Producten</b>&nbsp;<span class="badge">2</span>
												$alias_src_span_end="</span>";
											}
Ad Schellevis's avatar
Ad Schellevis committed
614 615 616 617 618 619 620 621 622
											//build Schedule popup box
											$a_schedules = &$config['schedules']['schedule'];
											$schedule_span_begin = "";
											$schedule_span_end = "";
											$sched_caption_escaped = "";
											$sched_content = "";
											$schedstatus = false;
											$dayArray = array (gettext('Mon'),gettext('Tues'),gettext('Wed'),gettext('Thur'),gettext('Fri'),gettext('Sat'),gettext('Sun'));
											$monthArray = array (gettext('January'),gettext('February'),gettext('March'),gettext('April'),gettext('May'),gettext('June'),gettext('July'),gettext('August'),gettext('September'),gettext('October'),gettext('November'),gettext('December'));
623
											if(isset($config['schedules']['schedule'])) {
Ad Schellevis's avatar
Ad Schellevis committed
624
												foreach ($a_schedules as $schedule)
Ad Schellevis's avatar
Ad Schellevis committed
625
												{
Ad Schellevis's avatar
Ad Schellevis committed
626 627
													if ($schedule['name'] == $filterent['sched'] ){
														$schedstatus = filter_get_time_based_rule_status($schedule);
628

Ad Schellevis's avatar
Ad Schellevis committed
629 630 631 632 633 634 635
														foreach($schedule['timerange'] as $timerange) {
															$tempFriendlyTime = "";
															$tempID = "";
															$firstprint = false;
															if ($timerange){
																$dayFriendly = "";
																$tempFriendlyTime = "";
636

Ad Schellevis's avatar
Ad Schellevis committed
637 638 639
																//get hours
																$temptimerange = $timerange['hour'];
																$temptimeseparator = strrpos($temptimerange, "-");
640

Ad Schellevis's avatar
Ad Schellevis committed
641 642
																$starttime = substr ($temptimerange, 0, $temptimeseparator);
																$stoptime = substr ($temptimerange, $temptimeseparator+1);
643

Ad Schellevis's avatar
Ad Schellevis committed
644 645 646 647 648 649 650 651 652
																if ($timerange['month']){
																	$tempmontharray = explode(",", $timerange['month']);
																	$tempdayarray = explode(",",$timerange['day']);
																	$arraycounter = 0;
																	$firstDayFound = false;
																	$firstPrint = false;
																	foreach ($tempmontharray as $monthtmp){
																		$month = $tempmontharray[$arraycounter];
																		$day = $tempdayarray[$arraycounter];
653

Ad Schellevis's avatar
Ad Schellevis committed
654 655 656 657 658 659
																		if (!$firstDayFound)
																		{
																			$firstDay = $day;
																			$firstmonth = $month;
																			$firstDayFound = true;
																		}
660

Ad Schellevis's avatar
Ad Schellevis committed
661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721
																		$currentDay = $day;
																		$nextDay = $tempdayarray[$arraycounter+1];
																		$currentDay++;
																		if (($currentDay != $nextDay) || ($tempmontharray[$arraycounter] != $tempmontharray[$arraycounter+1])){
																			if ($firstPrint)
																				$dayFriendly .= ", ";
																			$currentDay--;
																			if ($currentDay != $firstDay)
																				$dayFriendly .= $monthArray[$firstmonth-1] . " " . $firstDay . " - " . $currentDay ;
																			else
																				$dayFriendly .=  $monthArray[$month-1] . " " . $day;
																			$firstDayFound = false;
																			$firstPrint = true;
																		}
																		$arraycounter++;
																	}
																}
																else
																{
																	$tempdayFriendly = $timerange['position'];
																	$firstDayFound = false;
																	$tempFriendlyDayArray = explode(",", $tempdayFriendly);
																	$currentDay = "";
																	$firstDay = "";
																	$nextDay = "";
																	$counter = 0;
																	foreach ($tempFriendlyDayArray as $day){
																		if ($day != ""){
																			if (!$firstDayFound)
																			{
																				$firstDay = $tempFriendlyDayArray[$counter];
																				$firstDayFound = true;
																			}
																			$currentDay =$tempFriendlyDayArray[$counter];
																			//get next day
																			$nextDay = $tempFriendlyDayArray[$counter+1];
																			$currentDay++;
																			if ($currentDay != $nextDay){
																				if ($firstprint)
																					$dayFriendly .= ", ";
																				$currentDay--;
																				if ($currentDay != $firstDay)
																					$dayFriendly .= $dayArray[$firstDay-1] . " - " . $dayArray[$currentDay-1];
																				else
																					$dayFriendly .= $dayArray[$firstDay-1];
																				$firstDayFound = false;
																				$firstprint = true;
																			}
																			$counter++;
																		}
																	}
																}
																$timeFriendly = $starttime . " - " . $stoptime;
																$description = $timerange['rangedescr'];
																$sched_content .= $dayFriendly . "; " . $timeFriendly . "<br />";
															}
														}
														$sched_caption_escaped = str_replace("'", "\'", $schedule['descr']);
														$schedule_span_begin = "<span style=\"cursor: help;\" onmouseover=\"domTT_activate(this, event, 'content', '<h1>{$sched_caption_escaped}</h1><p>{$sched_content}</p>', 'trail', true, 'delay', 0, 'fade', 'both', 'fadeMax', 93, 'styleClass', 'niceTitle');\" onmouseout=\"this.style.color = ''; domTT_mouseout(this, event);\"><u>";
														$schedule_span_end = "</u></span>";
													}
Ad Schellevis's avatar
Ad Schellevis committed
722
												}
Ad Schellevis's avatar
Ad Schellevis committed
723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739
											}
											$printicon = false;
											$alttext = "";
											$image = "";
											if (!isset($filterent['disabled'])) {
												if ($schedstatus) {
													if ($iconfn == "block" || $iconfn == "reject") {
														$image = "glyphicon-remove text-danger";
														$alttext = gettext("Traffic matching this rule is currently being denied");
													} else {
														$image = "glyphicon-play text-success";
														$alttext = gettext("Traffic matching this rule is currently being allowed");
													}
													$printicon = true;
												} else if ($filterent['sched']) {
													if ($iconfn == "block" || $iconfn == "reject")
														$image = "glyphicon-remove text-muted";
Ad Schellevis's avatar
Ad Schellevis committed
740
													else
Ad Schellevis's avatar
Ad Schellevis committed
741 742 743
														$image = "glyphicon-remove text-danger";
													$alttext = gettext("This rule is not currently active because its period has expired");
													$printicon = true;
Ad Schellevis's avatar
Ad Schellevis committed
744 745
												}
											}
Ad Schellevis's avatar
Ad Schellevis committed
746
										?>
Ad Schellevis's avatar
Ad Schellevis committed
747
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775
										<span class="<?=$textse;?>">
										<?php
											if (isset($filterent['ipprotocol'])) {
												switch($filterent['ipprotocol']) {
													case "inet":
														echo "IPv4 ";
														break;
													case "inet6":
														echo "IPv6 ";
														break;
													case "inet46":
														echo "IPv4+6 ";
														break;
												}
											} else {
												echo "IPv4 ";
											}
											if (isset($filterent['protocol'])) {
												echo strtoupper($filterent['protocol']);
												if (strtoupper($filterent['protocol']) == "ICMP" && !empty($filterent['icmptype'])) {
													echo ' <span style="cursor: help;" title="ICMP type: ' . $icmptypes[$filterent['icmptype']] . '"><u>';
													echo $filterent['icmptype'];
													echo '</u></span>';
												}
											} else echo "*";
										?>
										</span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
776
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
777 778
											<span class="<?=$textse;?>"><?php echo $alias_src_span_begin;?><?php echo htmlspecialchars(pprint_address($filterent['source']));?><?php echo $alias_src_span_end;?></span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
779
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
780
											<span class="<?=$textse;?>"><?php echo htmlspecialchars(pprint_port($filterent['source']['port'])); ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
781
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
782
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
783
											<span class="<?=$textse;?>"><?php echo htmlspecialchars(pprint_address($filterent['destination'])); ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
784
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
785
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
786
											<span class="<?=$textse;?>"><?php echo htmlspecialchars(pprint_port($filterent['destination']['port'])); ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
787
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
788
										<td class="listr"  id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
789 790
											<span class="<?=$textse;?>"><?php if (isset($config['interfaces'][$filterent['gateway']]['descr'])) echo htmlspecialchars($config['interfaces'][$filterent['gateway']]['descr']); else  echo htmlspecialchars(pprint_port($filterent['gateway'])); ?></span>
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
791
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
792
										<span class="<?=$textse;?>"><?=gettext('none');?></span>
Ad Schellevis's avatar
Ad Schellevis committed
793
										</td>
Ad Schellevis's avatar
Ad Schellevis committed
794
										<td class="listr" id="frd<?=$nrules;?>" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';"><font color="black">
795
											<?php if ($printicon) { ?><span class="glyphicon <?php echo $image; ?>" title="<?php echo $alttext;?>"></span><?php } ?><span class="<?=$textse;?>"><?php echo $schedule_span_begin;?><?=htmlspecialchars($filterent['sched']);?>&nbsp;<?php echo $schedule_span_end; ?></span>
Ad Schellevis's avatar
Ad Schellevis committed
796 797
										</font></td>

Ad Schellevis's avatar
Ad Schellevis committed
798
										<td class="listbg descr" ondblclick="document.location='firewall_rules_edit.php?id=<?=$i;?>';">
Ad Schellevis's avatar
Ad Schellevis committed
799 800 801
											<span class="<?=$textse;?>"><?=htmlspecialchars($filterent['descr']);?>&nbsp;</span>
										</td>
										<td valign="middle" class="list nowrap">
802
												<button name="move_<?=$i;?>_x" type="submit" title="<?=gettext("move selected rules before this rule"); ?>" class="btn btn-default btn-xs" value="<?=$i;?>"><span class="glyphicon glyphicon-arrow-left"></span></button>
Ad Schellevis's avatar
Ad Schellevis committed
803
												<a href="firewall_rules_edit.php?id=<?=$i;?>" title="<?=gettext("edit rule"); ?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-pencil"></span></a>
804

Ad Schellevis's avatar
Ad Schellevis committed
805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839
												<a href="firewall_rules.php?act=del&amp;if=<?=htmlspecialchars($if);?>&amp;id=<?=$i;?>" title="<?=gettext("delete rule"); ?>" onclick="return confirm('Do you really want to delete this rule?')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></a>
												<a href="firewall_rules_edit.php?dup=<?=$i;?>" title="<?=gettext("add a new rule based on this one"); ?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
										</td>
										</tr>
										<?php $nrules++; endfor; ?>
										  </tbody>
							<?php if ($nrules == 0): ?>
										<tr>
										<td class="listt"></td>
										<td class="listt"></td>
										<td class="listlr" colspan="11" align="center" valign="middle">
										<span class="gray">
								<?php if ($_REQUEST['if'] == "FloatingRules"): ?>
											<?=gettext("No floating rules are currently defined."); ?><br /><br />
								<?php else: ?>
											<?=gettext("No rules are currently defined for this interface"); ?><br />
											<?=gettext("All incoming connections on this interface will be blocked until you add pass rules."); ?><br /><br />
								<?php endif; ?>
											<?=gettext("Click the"); ?> <a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>"  class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a><?=gettext(" button to add a new rule.");?></span>
										</td>
										</tr>
							<?php endif; ?>
										<tr id="fr<?=$nrules;?>">
										<td class="list"></td>
										<td class="list"></td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">&nbsp;</td>
										<td class="list">
840

841
										<?php if ($nrules): ?>
842
											<button name="move_<?=$i;?>_x" type="submit" value="<?=$i;?>"  title="<?=gettext("move selected rules to end");?>" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-arrow-left"></span></button>
843
											<button name="del_x" type="submit" title="<?=gettext("delete selected rules");?>" onclick="return confirm('<?=gettext('Do you really want to delete the selected rules?');?>')" class="btn btn-default btn-xs"><span class="glyphicon glyphicon-remove"></span></button>
844 845
											<a href="firewall_rules_edit.php?if=<?=htmlspecialchars($if);?>" title="<?=gettext("add new rule");?>"  class="btn btn-default btn-xs"><span class="glyphicon glyphicon-plus"></span></a>
										<?php endif; ?>
Franco Fichtner's avatar
Franco Fichtner committed
846

Ad Schellevis's avatar
Ad Schellevis committed
847 848
										</td>
										</tr>
Ad Schellevis's avatar
Ad Schellevis committed
849
									</tbody>
Ad Schellevis's avatar
Ad Schellevis committed
850
									</table>
851 852


Ad Schellevis's avatar
Ad Schellevis committed
853
									<div class="container-fluid">
Ad Schellevis's avatar
Ad Schellevis committed
854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912
									<table class="tabcont" width="100%" border="0" cellspacing="0" cellpadding="0" summary="icons">
										<tr>
											<td width="16"><span class="glyphicon glyphicon-play text-success"></span></td>
											<td width="100"><?=gettext("pass");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-ok"></span></td>
											<td width="100"><?=gettext("match");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-remove text-danger"></span></td>
											<td width="100"><?=gettext("block");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-remove text-warning"></span></td>
											<td width="100"><?=gettext("reject");?></td>
											<td width="14"></td>
											<td width="16"><span class="glyphicon glyphicon-info-sign"></span></td>
											<td width="100"><?=gettext("log");?></td>
										</tr>
										<tr>
											<td><span class="glyphicon glyphicon-play text-muted"></span></td>
											<td class="nowrap"><?=gettext("pass (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-ok text-muted"></span></td>
											<td class="nowrap"><?=gettext("match (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-remove text-muted"></span></td>
											<td class="nowrap"><?=gettext("block (disabled)");?></td>
											<td>&nbsp;</td>
											<td><span class="glyphicon glyphicon-remove text-muted"></span></td>
											<td class="nowrap"><?=gettext("reject (disabled)");?></td>
											<td>&nbsp;</td>
											<td width="16"><span class="glyphicon glyphicon-info-sign text-muted"></span></td>
											<td class="nowrap"><?=gettext("log (disabled)");?></td>
										</tr>
										<tr>
											<td colspan="10">
												<p>&nbsp;</p>
												<strong>
													<span class="red"><?=gettext("Hint:");?></span>
												</strong><br />
												<ul>
												<?php if ("FloatingRules" != $if): ?>
													<li><?=gettext("Rules are evaluated on a first-match basis (i.e. " .
													"the action of the first rule to match a packet will be executed). " .
													"This means that if you use block rules, you'll have to pay attention " .
													"to the rule order. Everything that isn't explicitly passed is blocked " .
													"by default. ");?>
													</li>
												<?php else: ?>
													<li><?=gettext("Floating rules are evaluated on a first-match basis (i.e. " .
													"the action of the first rule to match a packet will be executed) only " .
													"if the 'quick' option is checked on a rule. Otherwise they will only apply if no " .
													"other rules match. Pay close attention to the rule order and options " .
													"chosen. If no rule here matches, the per-interface or default rules are used. ");?>
													</li>
												<?php endif; ?>
												</ul>
											 </td>
										</tr>
									</table>
Ad Schellevis's avatar
Ad Schellevis committed
913
									</div>
Ad Schellevis's avatar
Ad Schellevis committed
914 915 916 917 918
								</div>
		                    </form>
					</div>
			    </section>
			</div>
Ad Schellevis's avatar
Ad Schellevis committed
919
		</div>
Ad Schellevis's avatar
Ad Schellevis committed
920
	</section>
921

Ad Schellevis's avatar
Ad Schellevis committed
922
<input type="hidden" name="if" value="<?=htmlspecialchars($if);?>" />
Ad Schellevis's avatar
Ad Schellevis committed
923
<!-- <script type="text/javascript">
Ad Schellevis's avatar
Ad Schellevis committed
924 925 926
//<![CDATA[
	var number_of_rules = <?=$nrules?>;
	<?php $nrules = 0; for ($i = 0; isset($a_filter[$i]); $i++): ?>
927

Ad Schellevis's avatar
Ad Schellevis committed
928 929 930 931 932 933 934 935 936 937 938 939
		Sortable.create("dragtable", {
			tag:"tr",
			format:"fr([0-9999999])",
			containment:["dragtable"],
			onChange:function(affected) {
				document.body.style.cursor = 'move';
			},
			onUpdate:function(container) {
				document.body.style.cursor = 'move';
				updateOrder(Sortable.serialize('dragtable', 'tr'));
			}
		});
940

Ad Schellevis's avatar
Ad Schellevis committed
941
	<?php endfor; ?>
942

Ad Schellevis's avatar
Ad Schellevis committed
943 944 945 946 947
	jQuery('#loading').hide();
//]]>
</script> -->

<script type="text/javascript">
948

Ad Schellevis's avatar
Ad Schellevis committed
949 950 951 952 953 954 955 956 957
	$(function  () {
	 $('table.dragable').sortable({
		  containerSelector: 'table',
		  itemPath: '> tbody#dragtable',
		  itemSelector: 'tr',
		  placeholder: '<tr class="placeholder"/>',
		  onDrop: function(item,container,_super, event) {
			   item.removeClass("dragged").removeAttr("style");
			   $("body").removeClass("dragging");
958 959


Ad Schellevis's avatar
Ad Schellevis committed
960 961 962 963
			  updateOrder(container);
		  }
		})
	});
964

Ad Schellevis's avatar
Ad Schellevis committed
965
	function updateOrder(container) {
Ad Schellevis's avatar
Ad Schellevis committed
966
		if(document.getElementById("redboxtable"))
Ad Schellevis's avatar
Ad Schellevis committed
967
			//jQuery('#redboxtable').hide();
968

Ad Schellevis's avatar
Ad Schellevis committed
969
		//jQuery('#loading').show();
970

Ad Schellevis's avatar
Ad Schellevis committed
971
		document.body.style.cursor = 'wait';
972

Ad Schellevis's avatar
Ad Schellevis committed
973 974
		var drag_url = '';
		$('tbody#dragtable tr').each(function(i, obj) {
975

Ad Schellevis's avatar
Ad Schellevis committed
976 977
			drag_url += '&dragtable[]='+$(obj).attr('id').replace('fr','');
		});
978

Ad Schellevis's avatar
Ad Schellevis committed
979
		document.location = 'firewall_rules.php?if=<?=htmlspecialchars($if);?>&dragdroporder=true' + drag_url;
Ad Schellevis's avatar
Ad Schellevis committed
980 981
		return;
	}
982

Ad Schellevis's avatar
Ad Schellevis committed
983
</script>
Ad Schellevis's avatar
Ad Schellevis committed
984

985
<?php include("foot.inc"); ?>