From mboxrd@z Thu Jan  1 00:00:00 1970
From: Peter =?utf-8?q?M=C3=BCller?= <peter.mueller@ipfire.org>
To: development@lists.ipfire.org
Subject: [PATCH 06/11] optionsfw.cgi: Make logging of spoofed/martians packets
 and the DROP_HOSTILE filter configurable
Date: Sat, 18 Dec 2021 14:49:01 +0100
Message-ID: <78b1b9c8-cdab-7dc9-fd9f-4593d69696ea@ipfire.org>
In-Reply-To: <34588df1-b2b7-9dfc-1fa4-54a2476d1d7f@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8439236910622075328=="
List-Id: <development.lists.ipfire.org>

--===============8439236910622075328==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Signed-off-by: Peter M=C3=BCller <peter.mueller(a)ipfire.org>
---
 html/cgi-bin/optionsfw.cgi | 96 +++++++++++++++++++++++++++++++-------
 1 file changed, 80 insertions(+), 16 deletions(-)

diff --git a/html/cgi-bin/optionsfw.cgi b/html/cgi-bin/optionsfw.cgi
index 1ecf4f180..481d5bdbd 100644
--- a/html/cgi-bin/optionsfw.cgi
+++ b/html/cgi-bin/optionsfw.cgi
@@ -2,7 +2,7 @@
 ############################################################################=
###
 #                                                                           =
  #
 # IPFire.org - A linux based firewall                                       =
  #
-# Copyright (C) 2014-2020  IPFire Team  <info(a)ipfire.org>                 =
    #
+# Copyright (C) 2014-2021  IPFire Team  <info(a)ipfire.org>                 =
    #
 #                                                                           =
  #
 # This program is free software: you can redistribute it and/or modify      =
  #
 # it under the terms of the GNU General Public License as published by      =
  #
@@ -110,6 +110,12 @@ $checked{'DROPWIRELESSINPUT'}{$settings{'DROPWIRELESSINP=
UT'}} =3D "checked=3D'checke
 $checked{'DROPWIRELESSFORWARD'}{'off'} =3D '';
 $checked{'DROPWIRELESSFORWARD'}{'on'} =3D '';
 $checked{'DROPWIRELESSFORWARD'}{$settings{'DROPWIRELESSFORWARD'}} =3D "check=
ed=3D'checked'";
+$checked{'DROPSPOOFEDMARTIAN'}{'off'} =3D '';
+$checked{'DROPSPOOFEDMARTIAN'}{'on'} =3D '';
+$checked{'DROPSPOOFEDMARTIAN'}{$settings{'DROPSPOOFEDMARTIAN'}} =3D "checked=
=3D'checked'";
+$checked{'DROPHOSTILE'}{'off'} =3D '';
+$checked{'DROPHOSTILE'}{'on'} =3D '';
+$checked{'DROPHOSTILE'}{$settings{'DROPHOSTILE'}} =3D "checked=3D'checked'";
 $checked{'DROPPROXY'}{'off'} =3D '';
 $checked{'DROPPROXY'}{'on'} =3D '';
 $checked{'DROPPROXY'}{$settings{'DROPPROXY'}} =3D "checked=3D'checked'";
@@ -195,24 +201,82 @@ END
 	<br>
=20
 <table width=3D'95%' cellspacing=3D'0'>
-<tr bgcolor=3D'$color{'color20'}'><td colspan=3D'2' align=3D'left'><b>$Lang:=
:tr{'fw logging'}</b></td></tr>
-<tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop newnotsyn'}</td><td ali=
gn=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPNEWNOTSYN' valu=
e=3D'on' $checked{'DROPNEWNOTSYN'}{'on'} />/
-																						<input type=3D'radio' name=3D'DROPNEWNOTSYN' value=3D'=
off' $checked{'DROPNEWNOTSYN'}{'off'} /> $Lang::tr{'off'}</td></tr>
-<tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop input'}</td><td align=
=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPINPUT' value=3D'o=
n' $checked{'DROPINPUT'}{'on'} />/
-																						<input type=3D'radio' name=3D'DROPINPUT' value=3D'off'=
 $checked{'DROPINPUT'}{'off'} /> $Lang::tr{'off'}</td></tr>
-<tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop forward'}</td><td align=
=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPFORWARD' value=3D=
'on' $checked{'DROPFORWARD'}{'on'} />/
-																						<input type=3D'radio' name=3D'DROPFORWARD' value=3D'of=
f' $checked{'DROPFORWARD'}{'off'} /> $Lang::tr{'off'}</td></tr>
-<tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop outgoing'}</td><td alig=
n=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPOUTGOING' value=
=3D'on' $checked{'DROPOUTGOING'}{'on'} />/
-																						<input type=3D'radio' name=3D'DROPOUTGOING' value=3D'o=
ff' $checked{'DROPOUTGOING'}{'off'} /> $Lang::tr{'off'}</td></tr>
-<tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop portscan'}</td><td alig=
n=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPPORTSCAN' value=
=3D'on' $checked{'DROPPORTSCAN'}{'on'} />/
-																						<input type=3D'radio' name=3D'DROPPORTSCAN' value=3D'o=
ff' $checked{'DROPPORTSCAN'}{'off'} /> $Lang::tr{'off'}</td></tr>
-<tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop wirelessinput'}</td><td=
 align=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPWIRELESSINP=
UT' value=3D'on' $checked{'DROPWIRELESSINPUT'}{'on'} />/
-																						<input type=3D'radio' name=3D'DROPWIRELESSINPUT' value=
=3D'off' $checked{'DROPWIRELESSINPUT'}{'off'} /> $Lang::tr{'off'}</td></tr>
-<tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop wirelessforward'}</td><=
td align=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPWIRELESSF=
ORWARD' value=3D'on' $checked{'DROPWIRELESSFORWARD'}{'on'} />/
-																						<input type=3D'radio' name=3D'DROPWIRELESSFORWARD' val=
ue=3D'off' $checked{'DROPWIRELESSFORWARD'}{'off'} /> $Lang::tr{'off'}</td></t=
r>
+	<tr bgcolor=3D'$color{'color20'}'>
+		<td colspan=3D'2' align=3D'left'><b>$Lang::tr{'fw logging'}</b></td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop newnotsyn'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPNEWNOTSYN' value=3D'on'=
 $checked{'DROPNEWNOTSYN'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPNEWNOTSYN' value=3D'off' $checked{'DROP=
NEWNOTSYN'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop input'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPINPUT' value=3D'on' $ch=
ecked{'DROPINPUT'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPINPUT' value=3D'off' $checked{'DROPINPU=
T'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop forward'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPFORWARD' value=3D'on' $=
checked{'DROPFORWARD'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPFORWARD' value=3D'off' $checked{'DROPFO=
RWARD'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop outgoing'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPOUTGOING' value=3D'on' =
$checked{'DROPOUTGOING'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPOUTGOING' value=3D'off' $checked{'DROPO=
UTGOING'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop portscan'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPPORTSCAN' value=3D'on' =
$checked{'DROPPORTSCAN'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPPORTSCAN' value=3D'off' $checked{'DROPP=
ORTSCAN'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop wirelessinput'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPWIRELESSINPUT' value=3D=
'on' $checked{'DROPWIRELESSINPUT'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPWIRELESSINPUT' value=3D'off' $checked{'=
DROPWIRELESSINPUT'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop wirelessforward'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPWIRELESSFORWARD' value=
=3D'on' $checked{'DROPWIRELESSFORWARD'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPWIRELESSFORWARD' value=3D'off' $checked=
{'DROPWIRELESSFORWARD'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop spoofed martians'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPSPOOFEDMARTIAN' value=
=3D'on' $checked{'DROPSPOOFEDMARTIAN'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPSPOOFEDMARTIAN' value=3D'off' $checked{=
'DROPSPOOFEDMARTIAN'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
 </table>
 <br/>
=20
+<table width=3D'95%' cellspacing=3D'0'>
+	<tr bgcolor=3D'$color{'color20'}'>
+		<td colspan=3D'2' align=3D'left'><b>$Lang::tr{'fw red'}</b></td>
+	</tr>
+	<tr>
+		<td align=3D'left' width=3D'60%'>$Lang::tr{'drop hostile'}</td>
+		<td align=3D'left'>
+			$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPHOSTILE' value=3D'on' $=
checked{'DROPHOSTILE'}{'on'} />/
+			<input type=3D'radio' name=3D'DROPHOSTILE' value=3D'off' $checked{'DROPHO=
STILE'}{'off'} /> $Lang::tr{'off'}
+		</td>
+	</tr>
+</table>
+<br>
+
 <table width=3D'95%' cellspacing=3D'0'>
 <tr bgcolor=3D'$color{'color20'}'><td colspan=3D'2' align=3D'left'><b>$Lang:=
:tr{'fw blue'}</b></td></tr>
 <tr><td align=3D'left' width=3D'60%'>$Lang::tr{'drop proxy'}</td><td align=
=3D'left'>$Lang::tr{'on'} <input type=3D'radio' name=3D'DROPPROXY' value=3D'o=
n' $checked{'DROPPROXY'}{'on'} />/
--=20
2.26.2

--===============8439236910622075328==--