File: //usr/share/webmin/nftables/index.cgi
#!/usr/bin/perl
# index.cgi
# Display current nftables configuration
require './nftables-lib.pl'; ## no critic
use strict;
use warnings;
our (%in, %text, %config);
ReadParse();
my $can_view_saved = check_acl('view');
if (!$can_view_saved &&
!check_acl('active') &&
!check_acl('create') &&
!check_acl('setup') &&
!check_manual_acl())
{
error($text{'acl_ecannot'});
}
my $partial = $in{'partial'};
if (!$partial) {
ui_print_header(nft_version_text(), $text{'index_title'}, "", "intro", 1, 1,
undef, restart_button());
}
# Check for nft command
my $cmd = get_nft_command();
if (!$cmd) {
print text('index_ecommand', "<tt>nft</tt>");
if (!$partial) {
ui_print_footer("/", $text{'index'});
}
exit;
}
if (!$partial) {
my @foreign_firewalls = list_foreign_firewall_modules();
if (@foreign_firewalls) {
my @names;
foreach my $fw (@foreign_firewalls) {
my $name = html_escape($fw->{'desc'});
push(@names, ui_tag('strong', $name));
}
print ui_alert_box(
text('index_foreign_firewalls', trim(join(", ", @names))),
'warn', undef, undef, "");
}
}
# Load tables
my @tables = $can_view_saved ? get_nftables_save() : ();
@tables = grep { check_table_acl($_) } @tables;
my $rules_html = "";
if (!@tables) {
$rules_html .= ui_buttons_start();
$rules_html .= ui_buttons_row(
"setup.cgi",
$text{'index_profile_setup'},
$text{'index_profile_setupdesc'}
) if (check_acl('setup'));
$rules_html .= ui_buttons_row(
"create_table.cgi",
$text{'index_table_create'},
$text{'index_table_createdesc'}
) if (check_acl('create'));
$rules_html .= ui_buttons_row(
"active.cgi",
$text{'index_ruleset_active'},
$text{'index_ruleset_activedesc'}
) if (check_acl('active'));
$rules_html .= ui_buttons_row(
"edit_manual.cgi",
$text{'index_edit_manual'},
$text{'index_edit_manualdesc'}
) if (check_manual_acl());
$rules_html .= ui_buttons_end();
}
else {
# Select table
my $found_table;
if (defined($in{'table_family'}) && defined($in{'table_name'})) {
for (my $i = 0 ; $i <= $#tables ; $i++) {
if ($tables[$i]->{'family'} eq $in{'table_family'} &&
$tables[$i]->{'name'} eq $in{'table_name'})
{
$in{'table'} = $i;
$found_table = 1;
last;
}
}
}
if (
!$found_table &&
(!defined($in{'table'}) ||
$in{'table'} !~ /^\d+$/ ||
$in{'table'} > $#tables)
)
{
$in{'table'} = 0;
}
my @table_opts;
for (my $i = 0 ; $i <= $#tables ; $i++) {
my $t = $tables[$i];
push(@table_opts, [$i, $t->{'family'}." ".$t->{'name'}]);
}
if (!$partial) {
print ui_form_start("index.cgi");
print "<div class='nftables_table_select'>\n";
print text('index_change'), " ";
print ui_select("table", $in{'table'}, \@table_opts, 1, 0, 1, 0,
"onchange='this.form.querySelector(\"[name=nft_submit]\").click()'"
);
print ui_submit("", "nft_submit", 0, "style='display:none'");
print " ",
ui_link_button("create_table.cgi", $text{'index_table_create'})
if (check_acl('create'));
print " ",
ui_link_button(
"delete_table.cgi?table=$in{'table'}&table_family=".
urlize(
$tables[$in{'table'}]->{'family'}
).
"&table_name=".
urlize($tables[$in{'table'}]->{'name'}),
$text{'index_table_delete'}
) if (check_acl('delete'));
print "</div>\n";
print ui_form_end();
}
# Identify current table
my $curr = $tables[$in{'table'}];
if ($curr) {
my ($sets_html, $chains_html);
# Show sets
$sets_html .= ui_form_start("delete_sets.cgi", "post");
$sets_html .= ui_hidden("table", $in{'table'});
$sets_html .= ui_hidden("table_family", $curr->{'family'});
$sets_html .= ui_hidden("table_name", $curr->{'name'});
my $set_form = $partial ? 1 : 2;
my $has_sets = $curr->{'sets'} &&
ref($curr->{'sets'}) eq 'HASH' &&
keys(%{$curr->{'sets'}});
my @set_select_links = $has_sets && check_acl('delete')
? (
select_all_link("s", $set_form),
select_invert_link("s", $set_form)
)
: ();
my @set_top_links = @set_select_links;
push(
@set_top_links,
ui_link(
"edit_set.cgi?table=$in{'table'}&new=1",
$text{'index_set_create'}
)
) if (check_acl('sets'));
$sets_html .= ui_links_row(\@set_top_links);
my @set_tds = ("width=5");
$sets_html .= ui_columns_start(
[
"",
$text{'index_set_name'},
$text{'index_set_type'},
$text{'index_set_flags'},
$text{'index_set_elements'},
$text{'index_set_actions'}
],
100, 0,
\@set_tds
);
if ($has_sets) {
foreach my $s (sort keys %{$curr->{'sets'}}) {
my $set = $curr->{'sets'}->{$s} || {};
my $actions_html = check_acl('sets')
? ui_link(
"edit_set.cgi?table=$in{'table'}&set=".
urlize(
$s),
$text{'index_set_edit'}
)
: "-";
my @cols = (
$s,
$set->{'type'} || "-",
$set->{'flags'} || "-",
set_elements_summary($set),
$actions_html
);
$sets_html .=
check_acl('delete')
? ui_checked_columns_row(\@cols, \@set_tds, "s", $s)
: ui_columns_row(["", @cols]);
}
}
$sets_html .= ui_columns_end();
$sets_html .=
@set_select_links
? ui_form_end([[undef, $text{'index_set_deletesel'}]])
: ui_form_end();
# Show chains and rules
$chains_html .= ui_form_start("delete_chains.cgi", "post", undef,
"id='nftables_chains_form'");
$chains_html .= ui_hidden("table", $in{'table'});
$chains_html .= ui_hidden("table_family", $curr->{'family'});
$chains_html .= ui_hidden("table_name", $curr->{'name'});
my $chain_form = $partial ? 0 : 1;
my @chain_select_links =
keys(%{$curr->{'chains'}}) && check_acl('delete')
? (
select_all_link("d", $chain_form),
select_invert_link("d", $chain_form)
)
: ();
my @chain_top_links = @chain_select_links;
push(
@chain_top_links,
ui_link(
"edit_chain.cgi?table=$in{'table'}&new=1",
$text{'index_chain_create'}
)
) if (check_acl('chains'));
$chains_html .= ui_links_row(\@chain_top_links);
my @chain_tds = ("width=5");
$chains_html .= ui_columns_start(
[
"", $text{'index_chain_col'},
$text{'index_type'}, $text{'index_hook'},
$text{'index_priority'}, $text{'index_policy_col'},
$text{'index_rules'}, $text{'index_actions'}
],
100, 0,
\@chain_tds
);
foreach my $c (sort keys %{$curr->{'chains'}}) {
my $chain_def = $curr->{'chains'}->{$c} || {};
my $policy = $chain_def->{'policy'};
my $policy_label =
$policy
? ($text{'index_policy_'.lc($policy)} || uc($policy))
: "-";
my @rules = grep { $_->{'chain'} eq $c } @{$curr->{'rules'}};
my $rules_html_row;
if (@rules) {
my $ri = 0;
$rules_html_row = ui_tag_start(
'table',
{
'class' => 'nftables_rules_table',
'width' => '100%',
'cellspacing' => 0,
'cellpadding' => 0
}
);
foreach my $r (@rules) {
my $desc = describe_rule($r);
my $rule_url =
"edit_rule.cgi?table=$in{'table'}&chain=".
urlize($c).
"&idx=$r->{'index'}";
my $rule_link =
check_acl('rules')
? ui_tag('a', $desc, {'href' => $rule_url})
: $desc;
my $imgdir = "@{[get_webprefix()]}/images";
my $up_url =
"move_rule.cgi?table=$in{'table'}&chain=".
urlize($c).
"&idx=$r->{'index'}&dir=up";
my $down_url =
"move_rule.cgi?table=$in{'table'}&chain=".
urlize($c).
"&idx=$r->{'index'}&dir=down";
my $down_move =
check_acl('rules') &&
$ri < $#rules
? ui_tag(
'a',
ui_tag(
'img', undef,
{
'class' =>
'ui_up_down_arrows_down',
'src' =>
"$imgdir/movedown.gif",
'border' => 0
}
),
{
'class' =>
'ui_up_down_arrows_down',
'href' => $down_url
}
)
: ui_tag(
'img', undef,
{
'class' =>
'ui_up_down_arrows_gap',
'src' => "$imgdir/movegap.gif"
}
);
my $up_move =
check_acl('rules') && $ri > 0
? ui_tag(
'a',
ui_tag(
'img', undef,
{
'class' =>
'ui_up_down_arrows_up',
'src' =>
"$imgdir/moveup.gif",
'border' => 0
}
),
{
'class' =>
'ui_up_down_arrows_up',
'href' => $up_url
}
)
: ui_tag(
'img', undef,
{
'class' =>
'ui_up_down_arrows_gap',
'src' => "$imgdir/movegap.gif"
}
);
$rules_html_row .= ui_tag_start('tr');
$rules_html_row .= ui_tag('td', $rule_link,
{'class' => 'nftables_rule_text'});
$rules_html_row .= ui_tag(
'td',
$down_move,
{
'class' =>
'nftables_rule_move_down',
'width' => 10,
'style' =>
'white-space: nowrap; text-align: center;'
}
);
$rules_html_row .= ui_tag(
'td', $up_move,
{
'class' =>
'nftables_rule_move_up',
'width' => 10,
'style' =>
'white-space: nowrap; text-align: center;'
}
);
$rules_html_row .= ui_tag_end('tr');
$ri++;
}
$rules_html_row .= ui_tag_end('table');
}
else {
$rules_html_row =
ui_tag('i', $text{'index_rules_none'});
}
my @actions;
if (check_acl('chains')) {
push(
@actions,
ui_link(
"edit_chain.cgi?table=$in{'table'}&chain="
.
urlize(
$c),
$text{'index_cedit'}
)
);
push(
@actions,
ui_link(
"rename_chain.cgi?table=$in{'table'}&chain="
.
urlize(
$c),
$text{'index_crename'}
)
);
}
push(
@actions,
ui_link(
"edit_rule.cgi?table=$in{'table'}&chain=".
urlize(
$c).
"&new=1",
$text{'index_radd'}
)
) if (check_acl('rules'));
my $actions_html = @actions ? join(" | ", @actions) : "-";
my @cols = (
$c,
$chain_def->{'type'} || "-",
$chain_def->{'hook'} || "-",
defined($chain_def->{'priority'})
? $chain_def->{'priority'}
: "-",
$policy_label,
$rules_html_row,
$actions_html
);
$chains_html .=
check_acl('delete')
? ui_checked_columns_row(\@cols, \@chain_tds, "d", $c)
: ui_columns_row(["", @cols]);
}
$chains_html .= ui_columns_end();
$chains_html .=
@chain_select_links
? ui_form_end([[undef, $text{'index_cdeletesel'}]])
: ui_form_end();
my @tabs = (['chains', $text{'index_tab_chains'}]);
push(@tabs, ['sets', $text{'index_tab_sets'}]) if (check_acl('sets'));
my $tab =
check_acl('sets') &&
$in{'view'} &&
$in{'view'} eq 'sets' ? 'sets' : 'chains';
$rules_html .= ui_hr();
$rules_html .= ui_tabs_start(\@tabs, "view", $tab, 1);
$rules_html .= ui_tabs_start_tab("view", "chains");
$rules_html .= $chains_html;
$rules_html .= ui_tabs_end_tab();
if (check_acl('sets')) {
$rules_html .= ui_tabs_start_tab("view", "sets");
$rules_html .= $sets_html;
$rules_html .= ui_tabs_end_tab();
}
$rules_html .= ui_tabs_end(1);
if (check_acl('quick') && find_input_chain($curr)) {
my $ip_placeholder =
text('quick_ip_placeholder', '1.2.3.4', '2001:db8::1/64');
foreach my $action (
['allow', $text{'index_allowip_go'}],
['block', $text{'index_blockip_go'}],
)
{
$rules_html .=
"<br>".ui_form_start("manage_ip.cgi", "post");
$rules_html .= ui_hidden("table", $in{'table'});
$rules_html .=
ui_hidden("table_family", $curr->{'family'});
$rules_html .= ui_hidden("table_name", $curr->{'name'});
$rules_html .= ui_submit($action->[1], $action->[0]).
ui_textbox(
"ip",
undef,
22,
undef,
undef,
"placeholder='".
quote_escape($ip_placeholder)."'"
);
$rules_html .= ui_form_end();
}
}
}
}
if ($partial) {
print $rules_html;
exit;
}
print $rules_html;
my $init_support = foreign_check("init") && check_acl('bootup') ? 1 : 0;
if (
@tables &&
(check_acl('active') ||
check_acl('setup') ||
check_manual_acl() ||
$init_support)
)
{
print ui_hr();
print ui_buttons_start();
print ui_buttons_row(
"active.cgi",
$text{'index_ruleset_active'},
$text{'index_ruleset_activedesc'}
) if (check_acl('active'));
print ui_buttons_row(
"setup.cgi",
$text{'index_profile_setup'},
$text{'index_profile_setupdesc'}
) if (check_acl('setup'));
print ui_buttons_row(
"edit_manual.cgi",
$text{'index_edit_manual'},
$text{'index_edit_manualdesc'}
) if (check_manual_acl());
print ui_buttons_row("bootup.cgi", $text{'index_bootup'},
$text{'index_bootupdesc'},
undef, ui_yesno_radio("boot", nftables_started_at_boot()))
if ($init_support);
print ui_buttons_end();
}
ui_print_footer("/", $text{'index'});