| ";
+ print $q->start_table({-class => 'sme-border'}), "\n ";
+ print $q->Tr(
+ esmith::cgi::genSmallCell(
+ $q,
+ $self->localise('LABEL_PROTOCOL'),
+ "header"
+ ), " ",
+ esmith::cgi::genSmallCell(
+ $q,
+ $self->localise('LABEL_SOURCE_PORT'),
+ "header"
+ ), " ",
+ esmith::cgi::genSmallCell(
+ $q,
+ $self->localise('LABEL_DESTINATION_HOST'),
+ "header"
+ ), " ",
+ esmith::cgi::genSmallCell(
+ $q,
+ $self->localise('LABEL_DESTINATION_PORT'),
+ "header",
+ ), " ",
+ esmith::cgi::genSmallCell(
+ $q,
+ $self->localise('ALLOW_HOSTS'),
+ "header",
+ ), " ",
+ esmith::cgi::genSmallCell(
+ $q,
+ $self->localise('RULE_COMMENT'),
+ "header",
+ ), " ",
+ $q->th({-class => "sme-border", -colspan => 2},
+ $self->localise('ACTION')
+ ), "\n ",
+ );
+ foreach my $proto (sort keys %forwards) {
+ if (@{ $forwards{$proto} }) {
+ foreach my $entry (@{ $forwards{$proto} }) {
+ my $sport = $entry->key;
+ my $dhost = $entry->prop('DestHost');
+ my $dport = $entry->prop('DestPort') || '';
+ my $cmmnt = $entry->prop('Comment') || '';
+ my $allow = $entry->prop('AllowHosts') || '';
+ print $q->Tr(
+ esmith::cgi::genSmallCell($q, $proto),
+ " ",
+ esmith::cgi::genSmallCell($q, $sport),
+ " ",
+ esmith::cgi::genSmallCell($q, $dhost),
+ " ",
+ esmith::cgi::genSmallCell($q, $dport || ' '),
+ " ",
+ esmith::cgi::genSmallCell($q, $allow || ' '),
+ " ",
+ esmith::cgi::genSmallCell($q, $cmmnt || ' '),
+ " ",
+ esmith::cgi::genSmallCell(
+ $q,
+ $q->a({href => $q->url(-absolute => 1)
+ . "?page=3&Next=Next&protocol=$proto&"
+ . "source_port=$sport&"
+ . "destination_host=$dhost&"
+ . "destination_port=$dport&"
+ . "rule_comment=".CGI::escape($cmmnt)."&"
+ . "allow_hosts=$allow"},
+ $self->localise("REMOVE"))
+ ),
+ "\n ",
+ );
+ }
+ }
+ }
+ print $q->end_table,"\n";
+ print ' |
';
+
+ }
+ else {
+ print $q->Tr(
+ $q->td({-colspan => 2}, '| ";
+
+ my $description = "";
+ if ($mode eq 'create') {
+ $description = $self->localise('SUMMARY_ADD_DESC');
+ }
+ elsif ($mode eq 'remove') {
+ $description = $self->localise('SUMMARY_REMOVE_DESC');
+ }
+ else {
+ return $self->error('ERR_UNSUPPORTED_MODE');
+ }
+
+ print $q->p($description);
+
+ my $dhost = $self->get_destination_host();
+ foreach my $tablearrayref (
+ [$self->localise('LABEL_PROTOCOL')
+ => $q->param('protocol')],
+ [$self->localise('LABEL_SOURCE_PORT')
+ => $q->param('source_port')],
+ [$self->localise('LABEL_DESTINATION_PORT')
+ => $q->param('destination_port') || ' '],
+ [$self->localise('LABEL_DESTINATION_HOST')
+ => $dhost],
+ [$self->localise('RULE_COMMENT')
+ => $q->param('rule_comment')],
+ [$self->localise('ALLOW_HOSTS')
+ => $q->param('allow_hosts')],
+ )
+ {
+ print $q->Tr(
+ $q->td({-class => 'sme-noborders-label'},
+ $tablearrayref->[0],
+ $q->td({-class => 'sme-noborders-content'},
+ $tablearrayref->[1]))), "\n";
+ }
+
+ if ($mode eq 'create') {
+ print $q->table({-width => '100%'}, $q->Tr($q->th({-class => 'sme-layout'},
+ $q->submit(-name => 'apply',
+ -value => $self->localise("ADD")),
+ ' ',
+ $q->submit(-name => 'cancel',
+ -value => $self->localise("CANCEL")))));
+ }
+ elsif ($mode eq 'remove') {
+ print $q->table({-width => '100%'}, $q->Tr($q->th({-class => 'sme-layout'},
+ $q->submit( -name => 'remove',
+ -value => $self->localise("REMOVE")),
+ ' ',
+ $q->submit( -name => 'cancel',
+ -value => $self->localise("CANCEL")))));
+ }
+ else {
+ return $self->error('ERR_UNSUPPORTED_MODE');
+ }
+ $self->debug_msg("returning");
+
+ print " |
";
+ return undef;
+}
+
+=head2 remove_rule
+
+This method is a remove wrapper for the modify method.
+
+=cut
+
+sub remove_rule {
+ my $self = shift;
+ $self->modify('remove');
+}
+
+=head2 create_new
+
+This method is a create wrapper for the modify method.
+
+=cut
+
+sub create_new {
+ my $self = shift;
+ $self->modify('create');
+}
+
+=head2 modify
+
+This method's purpose is to add or remove rules from the database, and then
+cause the firewall rules to update.
+
+=cut
+
+sub modify {
+ no strict 'refs';
+ my $self = shift;
+ my $mode = shift;
+ my $q = $self->{cgi};
+ $self->debug_msg("at start of modify method");
+
+ # If the cancel button was pressed, just go back to the start page.
+ if ($q->param("cancel")) {
+ $self->debug_msg("the cancel button was pressed");
+ $self->wherenext("First");
+ }
+ else {
+ # Save the changes.
+ my $proto = $q->param("protocol");
+ my $sport = $q->param("source_port");
+ my $dport = $q->param("destination_port");
+ my $dhost = $self->get_destination_host();
+ my $cmmnt = $q->param("rule_comment") || "";
+ my $allow = $q->param("allow_hosts") || "";
+ my $deny = (($q->param("allow_hosts")) ? "0.0.0.0/0" : "");
+ $proto =~ s/^\s+|\s+$//g;
+ $sport =~ s/^\s+|\s+$//g;
+ $dport =~ s/^\s+|\s+$//g;
+ $dhost =~ s/^\s+|\s+$//g;
+
+ $self->debug_msg("protocol is $proto");
+ $self->debug_msg("source_port is $sport");
+ $self->debug_msg("destination_port is $dport");
+ $self->debug_msg("destination_host is $dhost");
+
+ my $whichforwards = "";
+ my $fdb;
+ if ($proto eq 'TCP') {
+ $fdb = $tcp_db;
+ }
+ else {
+ $fdb = $udp_db;
+ }
+
+ if ($mode eq 'create') {
+ $self->debug_msg("we are in create mode");
+ my $entry = $fdb->get($sport) || $fdb->new_record($sport, { type => 'forward' });
+ $entry->set_prop('DestHost', $dhost);
+ $entry->set_prop('DestPort', $dport) if $dport;
+ $entry->set_prop('Comment', $cmmnt);
+ $entry->set_prop('AllowHosts', $allow);
+ $entry->set_prop('DenyHosts', $deny);
+ }
+ elsif ($mode eq 'remove') {
+ $self->debug_msg("we are in remove mode");
+ my $entry = $fdb->get($sport);
+ return $self->error('ERR_CANNOT_REMOVE_NORULE') unless $entry;
+ $entry->delete;
+ }
+
+ system("/sbin/e-smith/signal-event",
+ "portforwarding-update") == 0
+ || return $self->error('ERR_NONZERO_RETURN_EVENT');
+
+ return $self->success();
+ }
+}
+
+=head2 get_destination_host
+
+Get the 'destination_host' parameter, and fold it to 'localhost' if it
+matches any local interface IP address.
+
+=cut
+
+sub get_destination_host
+{
+ my $self = shift;
+ my $q = $self->{cgi};
+ my $dhost = $q->param("destination_host");
+ my $localip = $db->get_prop('InternalInterface', 'IPAddress');
+ my $external_ip = $db->get_prop('ExternalInterface', 'IPAddress') || $localip;
+
+ if ($dhost =~ /^(127.0.0.1|$localip|$external_ip)$/i)
+ {
+ # localhost token gets expanded at runtime to current external IP
+ $dhost = 'localhost';
+ }
+ return $dhost;
+}
+
+1;
e-smith-portforwarding
-SMEServer Koozali developed git repo for e-smith-portforwarding smeserver
\ No newline at end of file
+SMEServer Koozali developed git repo for e-smith-portforwarding smeserver
+
+## Wiki
+