aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
Diffstat
-rw-r--r--config/sshdcond/sshdcond.inc259
-rw-r--r--config/sshdcond/sshdcond.xml197
-rwxr-xr-xconfig/sshdcond/sshdcond_sync.xml97
-rw-r--r--pkg_config.8.xml12
-rw-r--r--pkg_config.8.xml.amd6412
5 files changed, 577 insertions, 0 deletions
diff --git a/config/sshdcond/sshdcond.inc b/config/sshdcond/sshdcond.inc
new file mode 100644
index 00000000..e29109cc
--- /dev/null
+++ b/config/sshdcond/sshdcond.inc
@@ -0,0 +1,259 @@
+<?php
+
+/* ========================================================================== */
+/*
+ sshdcond.inc
+ part of pfSense (http://www.pfSense.com)
+ Copyright (C) 2012 Marcello Coutinho
+ Copyright (C) 2012 Han Van (namezero@afim.info)
+ All rights reserved.
+
+ Based on m0n0wall (http://m0n0.ch/wall)
+ Copyright (C) 2003-2006 Manuel Kasper <mk@neon1.net>.
+ All rights reserved.
+ */
+/* ========================================================================== */
+/*
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+
+ 1. Redistributions of source code must retain the above copyright notice,
+ this list of conditions and the following disclaimer.
+
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+
+ THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+ */
+/* ========================================================================== */
+ require_once("config.inc");
+ require_once("util.inc");
+
+function restart_sshd(){
+ #backup /etc/sshd before any change
+ $etc_sshd="/etc/sshd";
+ $pfsense_version=preg_replace("/\s/","",file_get_contents("/etc/version"));
+ if (!file_exists('/root/'.$pfsense_version.'.sshd.backup')){
+ copy ($etc_sshd,'/root/'.$pfsense_version.'.sshd.backup');
+ }
+
+ #patch /etc/sshd if need
+ $sshd_file=file($etc_sshd);
+ $sshd_new_file="";
+ foreach ($sshd_file as $line){
+ if (preg_match('/sshconf .= "Port/',$line)){
+ $sshd_new_file.= $line;
+ $sshd_new_file.= "\t".'if(file_exists("/etc/ssh/sshd_extra")){$sshconf.=file_get_contents("/etc/ssh/sshd_extra");}'."\n";
+ }
+ elseif(!preg_match('/sshd_extra/',$line)){
+ $sshd_new_file.= $line;
+ }
+ }
+ file_put_contents($etc_sshd,$sshd_new_file,LOCK_EX);
+ mwexec_bg($etc_sshd);
+ }
+
+function sshdcond_custom_php_install_command(){
+ global $g, $config;
+
+ conf_mount_rw();
+
+ // We need to generate an outfile for our extra commands
+ // The patched g_szSSHDFileGenerate php file then reads and appends that config
+ $fd = fopen("/etc/ssh/sshd_extra", 'w');
+ fclose($fd);
+
+ conf_mount_ro();
+ }
+
+function sshdcond_custom_php_deinstall_command(){
+ global $g, $config;
+
+ conf_mount_rw();
+
+ // 1. Delete our config file
+ unlink_if_exists("/etc/ssh/sshd_extra");
+
+ // 2. Re-run sshd config generation script
+ restart_sshd();
+
+ conf_mount_ro();
+ }
+
+function sshdcond_custom_php_write_config(){
+ global $g, $config;
+
+ # detect boot process
+ if (is_array($_POST)){
+ if (!preg_match("/\w+/",$_POST['__csrf_magic']))
+ return;
+ }
+
+ $sshd_extra="";
+ if (is_array($config['installedpackages']['sshdcond']['config'])){
+ // Mount Read-only
+ conf_mount_rw();
+
+ // Read config
+ foreach ($config['installedpackages']['sshdcond']['config'] as $sshdcond){
+ if ($sshdcond['enable'] && is_array($sshdcond['row'])){
+ $sshd_extra.= "Match {$sshdcond['matchtype']} {$sshdcond['matchvalue']}\n";
+ foreach ($sshdcond['row'] as $sshd){
+ //check if there is spaces on sshd value
+ if(preg_match ("/\s+/",$sshd['sshdvalue']))
+ $sshd['sshdvalue']='"'.$sshd['sshdvalue'].'"';
+
+ //check if value is not empty
+ if($sshd['sshdvalue']!="")
+ $sshd_extra.="\t {$sshd['sshdoption']} {$sshd['sshdvalue']}\n";
+
+ //apply file permission if option is ChrootDirectory
+ if ($sshd['sshdoption']=="ChrootDirectory" && file_exists($sshd['sshdvalue'])){
+ chown('root',$sshd['sshdvalue']);
+ chgrp('operator',$sshd['sshdvalue']);
+ }
+ }
+ }
+ }
+ }
+
+ //Save /etc/ssh/sshd_extra
+ file_put_contents("/etc/ssh/sshd_extra",$sshd_extra,LOCK_EX);
+
+
+
+ // Restart sshd
+ restart_sshd();
+
+ // Mount Read-only
+ conf_mount_ro();
+
+ //sync config with other pfsense servers
+ sshdcond_sync_on_changes();
+ }
+
+/* Uses XMLRPC to synchronize the changes to a remote node */
+function sshdcond_sync_on_changes() {
+ global $config, $g;
+
+ log_error("[sshdcond] xmlrpc sync is starting.");
+ $synconchanges = $config['installedpackages']['sshdcondsync']['config'][0]['synconchanges'];
+ if(!$synconchanges)
+ return;
+ foreach ($config['installedpackages']['sshdcondsync']['config'] as $rs ){
+ foreach($rs['row'] as $sh){
+ $sync_to_ip = $sh['ipaddress'];
+ $password = $sh['password'];
+ if($sh['username'])
+ $username = $sh['username'];
+ else
+ $username = 'admin';
+ if($password && $sync_to_ip)
+ sshdcond_do_xmlrpc_sync($sync_to_ip, $username, $password);
+ }
+ }
+ log_error("[sshdcond] xmlrpc sync is ending.");
+}
+
+/* Do the actual XMLRPC sync */
+function sshdcond_do_xmlrpc_sync($sync_to_ip, $username, $password) {
+ global $config, $g;
+
+ if(!$username)
+ return;
+
+ if(!$password)
+ return;
+
+ if(!$sync_to_ip)
+ return;
+
+ $xmlrpc_sync_neighbor = $sync_to_ip;
+ if($config['system']['webgui']['protocol'] != "") {
+ $synchronizetoip = $config['system']['webgui']['protocol'];
+ $synchronizetoip .= "://";
+ }
+ $port = $config['system']['webgui']['port'];
+ /* if port is empty lets rely on the protocol selection */
+ if($port == "") {
+ if($config['system']['webgui']['protocol'] == "http")
+ $port = "80";
+ else
+ $port = "443";
+ }
+ $synchronizetoip .= $sync_to_ip;
+
+ /* xml will hold the sections to sync */
+ $xml = array();
+ $xml['sshdcond'] = $config['installedpackages']['sshdcond'];
+ /* assemble xmlrpc payload */
+ $params = array(
+ XML_RPC_encode($password),
+ XML_RPC_encode($xml)
+ );
+
+ /* set a few variables needed for sync code borrowed from filter.inc */
+ $url = $synchronizetoip;
+ log_error("Beginning sshdcond XMLRPC sync to {$url}:{$port}.");
+ $method = 'pfsense.merge_installedpackages_section_xmlrpc';
+ $msg = new XML_RPC_Message($method, $params);
+ $cli = new XML_RPC_Client('/xmlrpc.php', $url, $port);
+ $cli->setCredentials($username, $password);
+ if($g['debug'])
+ $cli->setDebug(1);
+ /* send our XMLRPC message and timeout after 250 seconds */
+ $resp = $cli->send($msg, "250");
+ if(!$resp) {
+ $error = "A communications error occurred while attempting sshdcond XMLRPC sync with {$url}:{$port}.";
+ log_error($error);
+ file_notice("sync_settings", $error, "sshdcond Settings Sync", "");
+ } elseif($resp->faultCode()) {
+ $cli->setDebug(1);
+ $resp = $cli->send($msg, "250");
+ $error = "An error code was received while attempting sshdcond XMLRPC sync with {$url}:{$port} - Code " . $resp->faultCode() . ": " . $resp->faultString();
+ log_error($error);
+ file_notice("sync_settings", $error, "sshdcond Settings Sync", "");
+ } else {
+ log_error("sshdcond XMLRPC sync successfully completed with {$url}:{$port}.");
+ }
+
+ /* tell sshdcond to reload our settings on the destionation sync host. */
+ $method = 'pfsense.exec_php';
+ $execcmd = "require_once('/usr/local/pkg/sshdcond.inc');\n";
+ $execcmd .= "sync_package_sshdcond();";
+ /* assemble xmlrpc payload */
+ $params = array(
+ XML_RPC_encode($password),
+ XML_RPC_encode($execcmd)
+ );
+
+ log_error("sshdcond XMLRPC reload data {$url}:{$port}.");
+ $msg = new XML_RPC_Message($method, $params);
+ $cli = new XML_RPC_Client('/xmlrpc.php', $url, $port);
+ $cli->setCredentials($username, $password);
+ $resp = $cli->send($msg, "250");
+ if(!$resp) {
+ $error = "A communications error occurred while attempting sshdcond XMLRPC sync with {$url}:{$port} (pfsense.exec_php).";
+ log_error($error);
+ file_notice("sync_settings", $error, "sshdcond Settings Sync", "");
+ } elseif($resp->faultCode()) {
+ $cli->setDebug(1);
+ $resp = $cli->send($msg, "250");
+ $error = "An error code was received while attempting sshdcond XMLRPC sync with {$url}:{$port} - Code " . $resp->faultCode() . ": " . $resp->faultString();
+ log_error($error);
+ file_notice("sync_settings", $error, "sshdcond Settings Sync", "");
+ } else {
+ log_error("sshdcond XMLRPC reload data success with {$url}:{$port} (pfsense.exec_php).");
+ }
+}
+ ?> \ No newline at end of file
diff --git a/config/sshdcond/sshdcond.xml b/config/sshdcond/sshdcond.xml
new file mode 100644
index 00000000..0776873d
--- /dev/null
+++ b/config/sshdcond/sshdcond.xml
@@ -0,0 +1,197 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<packagegui>
+<copyright>
+ <![CDATA[
+/* $Id$ */
+/* ========================================================================== */
+/*
+ sshdcond.xml
+ part of pfSense (http://www.pfSense.com)
+ Copyright (C) 2012 Marcello Coutinho
+ Copyright (C) 2012 Han Van (namezero@afim.info)
+ All rights reserved.
+
+ Based on m0n0wall (http://m0n0.ch/wall)
+ Copyright (C) 2003-2006 Manuel Kasper <mk@neon1.net>.
+ All rights reserved.
+ */
+/* ========================================================================== */
+/*
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+
+ 1. Redistributions of source code must retain the above copyright notice,
+ this list of conditions and the following disclaimer.
+
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+
+ THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+ */
+/* ========================================================================== */
+ ]]>
+ </copyright>
+
+ <name>sshdcond</name>
+ <version>1.0</version>
+ <title>SSH Conditional</title>
+ <description>SSH Conditional blocks</description>
+ <savetext>Save</savetext>
+ <include_file>/usr/local/pkg/sshdcond.inc</include_file>
+
+ <menu>
+ <name>SSH Conditions</name>
+ <tooltiptext>Configure SSH conditional exceptions</tooltiptext>
+ <section>Services</section>
+ <url>/pkg.php?xml=sshdcond.xml</url>
+ </menu>
+ <configpath>installedpackages->package->sshdcond</configpath>
+
+ <additional_files_needed>
+ <prefix>/usr/local/pkg/</prefix>
+ <chmod>755</chmod>
+ <item>http://www.pfsense.com/packages/config/sshdcond/sshdcond.inc</item>
+ </additional_files_needed>
+ <additional_files_needed>
+ <prefix>/usr/local/pkg/</prefix>
+ <chmod>755</chmod>
+ <item>http://www.pfsense.com/packages/config/sshdcond/sshdcond_sync.xml</item>
+ </additional_files_needed>
+ <tabs>
+ <tab>
+ <text>General</text>
+ <url>/pkg.php?xml=sshdcond.xml</url>
+ <active/>
+ </tab>
+ <tab>
+ <text>Sync</text>
+ <url>/pkg_edit.php?xml=sshdcond_sync.xml</url>
+ </tab>
+ </tabs>
+ <adddeleteeditpagefields>
+ <columnitem>
+ <fielddescr>Status</fielddescr>
+ <fieldname>enable</fieldname>
+ </columnitem>
+ <columnitem>
+ <fielddescr>Match Type</fielddescr>
+ <fieldname>matchtype</fieldname>
+ </columnitem>
+ <columnitem>
+ <fielddescr>Match Value</fielddescr>
+ <fieldname>matchvalue</fieldname>
+ </columnitem>
+ </adddeleteeditpagefields>
+ <fields>
+ <field>
+ <type>listtopic</type>
+ <name>Conditional SSH Options</name>
+ <fieldname>temp</fieldname>
+ </field>
+ <field>
+ <fielddescr>Enable</fielddescr>
+ <fieldname>enable</fieldname>
+ <type>checkbox</type>
+ <description>Enable this ssh conditional option for specified options.</description>
+ </field>
+ <field>
+ <fielddescr>Match Type</fielddescr>
+ <fieldname>matchtype</fieldname>
+ <description>See Match keyword at http://www.manpagez.com/man/5/sshd_config/ for options</description>
+ <type>select</type>
+ <options>
+ <option><name>User</name><value>User</value></option>
+ <option><name>Group</name><value>Group</value></option>
+ <option><name>Host</name><value>Host</value></option>
+ <option><name>Address</name><value>Address</value></option>
+ </options>
+ <required/>
+ </field>
+ <field>
+ <fielddescr>Match Value</fielddescr>
+ <fieldname>matchvalue</fieldname>
+ <description>Insert Match Value. Do not use spaces or special characters.</description>
+ <type>input</type>
+ <size>40</size>
+ <required/>
+ </field>
+ <field>
+ <fielddescr>Match Config</fielddescr>
+ <fieldname>none</fieldname>
+ <type>rowhelper</type>
+ <rowhelper>
+ <rowhelperfield>
+ <fielddescr>sshd option</fielddescr>
+ <fieldname>sshdoption</fieldname>
+ <type>select</type>
+ <options>
+ <option><name>AllowAgentForwarding</name><value>AllowAgentForwarding</value></option>
+ <option><name>AllowTcpForwarding</name><value>AllowTcpForwarding</value></option>
+ <option><name>AuthorizedKeysFile</name><value>AuthorizedKeysFile</value></option>
+ <option><name>AuthorizedPrincipalsFile</name><value>AuthorizedPrincipalsFile</value></option>
+ <option><name>Banner</name><value>Banner</value></option>
+ <option><name>ChrootDirectory</name><value>ChrootDirectory</value></option>
+ <option><name>ForceCommand</name><value>ForceCommand</value></option>
+ <option><name>GatewayPorts</name><value>GatewayPorts</value></option>
+ <option><name>GSSAPIAuthentication</name><value>GSSAPIAuthentication</value></option>
+ <option><name>HostbasedAuthentication</name><value>HostbasedAuthentication</value></option>
+ <option><name>HostbasedUsesNameFromPacketOnly</name><value>HostbasedUsesNameFromPacketOnly</value></option>
+ <option><name>KbdInteractiveAuthentication</name><value>KbdInteractiveAuthentication</value></option>
+ <option><name>KerberosAuthentication</name><value>KerberosAuthentication</value></option>
+ <option><name>MaxAuthTries</name><value>MaxAuthTries</value></option>
+ <option><name>MaxSessions</name><value>MaxSessions</value></option>
+ <option><name>PasswordAuthentication</name><value>PasswordAuthentication</value></option>
+ <option><name>PermitEmptyPasswords</name><value>PermitEmptyPasswords</value></option>
+ <option><name>PermitOpen</name><value>PermitOpen</value></option>
+ <option><name>PermitRootLogin</name><value>PermitRootLogin</value></option>
+ <option><name>PermitTunnel</name><value>PermitTunnel</value></option>
+ <option><name>PubkeyAuthentication</name><value>PubkeyAuthentication</value></option>
+ <option><name>RhostsRSAAuthentication</name><value>RhostsRSAAuthentication</value></option>
+ <option><name>RSAAuthentication</name><value>RSAAuthentication</value></option>
+ <option><name>X11DisplayOffset</name><value>X11DisplayOffset</value></option>
+ <option><name>X11Forwarding</name><value>X11Forwarding</value></option>
+ <option><name>X11UseLocalHost</name><value>X11UseLocalHost</value></option>
+ </options>
+ <required/>
+ </rowhelperfield>
+ <rowhelperfield>
+ <fielddescr>sshd value</fielddescr>
+ <fieldname>sshdvalue</fieldname>
+ <type>input</type>
+ <size>60</size>
+ <required/>
+ </rowhelperfield>
+ </rowhelper>
+ </field>
+ </fields>
+
+ <custom_delete_php_command>
+ sshdcond_custom_php_write_config();
+ </custom_delete_php_command>
+ <custom_add_php_command>
+ sshdcond_custom_php_write_config();
+ </custom_add_php_command>
+ <custom_php_install_command>
+ sshdcond_custom_php_install_command();
+ </custom_php_install_command>
+ <custom_php_deinstall_command>
+ sshdcond_custom_php_deinstall_command();
+ </custom_php_deinstall_command>
+ <custom_php_resync_config_command>
+ sshdcond_custom_php_write_config();
+ </custom_php_resync_config_command>
+ <custom_php_command_before_form>
+ unset($_POST['temp']);
+ </custom_php_command_before_form>
+
+</packagegui> \ No newline at end of file
diff --git a/config/sshdcond/sshdcond_sync.xml b/config/sshdcond/sshdcond_sync.xml
new file mode 100755
index 00000000..2bd4a26b
--- /dev/null
+++ b/config/sshdcond/sshdcond_sync.xml
@@ -0,0 +1,97 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!DOCTYPE packagegui SYSTEM "./schema/packages.dtd">
+<?xml-stylesheet type="text/xsl" href="./xsl/package.xsl"?>
+<packagegui>
+ <copyright>
+ <![CDATA[
+/* $Id$ */
+/* ========================================================================== */
+/*
+ sshdcond_sync.xml
+ part of the sarg package for pfSense
+ Copyright (C) 2012 Marcello Coutinho
+ All rights reserved.
+ */
+/* ========================================================================== */
+/*
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+
+ 1. Redistributions of source code must retain the above copyright notice,
+ this list of conditions and the following disclaimer.
+
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+
+ THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+ */
+/* ========================================================================== */
+ ]]>
+ </copyright>
+ <description>Describe your package here</description>
+ <requirements>Describe your package requirements here</requirements>
+ <faq>Currently there are no FAQ items provided.</faq>
+ <name>sshdcondsync</name>
+ <version>1.0</version>
+ <title>SSH Conditional - Sync</title>
+ <include_file>/usr/local/pkg/sshdcond.inc</include_file>
+ <tabs>
+ <tab>
+ <text>General</text>
+ <url>/pkg.php?xml=sshdcond.xml</url>
+ </tab>
+ <tab>
+ <text>Sync</text>
+ <url>/pkg_edit.php?xml=sshdcond_sync.xml</url>
+ <active/>
+ </tab>
+ </tabs>
+ <fields>
+ <field>
+ <name>XMLRPC Sync</name>
+ <type>listtopic</type>
+ </field>
+ <field>
+ <fielddescr>Automatically sync configuration changes</fielddescr>
+ <fieldname>synconchanges</fieldname>
+ <description>Automatically sync changes to the hosts defined below.</description>
+ <type>checkbox</type>
+ </field>
+ <field>
+ <fielddescr>Remote Server</fielddescr>
+ <fieldname>none</fieldname>
+ <type>rowhelper</type>
+ <rowhelper>
+ <rowhelperfield>
+ <fielddescr>IP Address</fielddescr>
+ <fieldname>ipaddress</fieldname>
+ <description>IP Address of remote server</description>
+ <type>input</type>
+ <size>20</size>
+ </rowhelperfield>
+ <rowhelperfield>
+ <fielddescr>Password</fielddescr>
+ <fieldname>password</fieldname>
+ <description>Password for remote server.</description>
+ <type>password</type>
+ <size>20</size>
+ </rowhelperfield>
+ </rowhelper>
+ </field>
+ </fields>
+ <custom_php_validation_command>
+ </custom_php_validation_command>
+ <custom_php_resync_config_command>
+ sshdcond_custom_php_write_config();
+ </custom_php_resync_config_command>
+</packagegui>
diff --git a/pkg_config.8.xml b/pkg_config.8.xml
index b4d258ed..b9bdf3e7 100644
--- a/pkg_config.8.xml
+++ b/pkg_config.8.xml
@@ -1350,6 +1350,18 @@
<configurationfile>nrpe2.xml</configurationfile>
</package>
<package>
+ <name>SSHDCond</name>
+ <descr><![CDATA[Allows to define SSH overrides for users,groups,hosts and addresses using Match in a convenient way.<br>
+ This package acts as an access list frontend for ssh connections]]></descr>
+ <category>Enhancements</category>
+ <version>1.0</version>
+ <status>Beta</status>
+ <required_version>2.0</required_version>
+ <config_file>http://www.pfsense.com/packages/config/sshdcond/sshdcond.xml</config_file>
+ <maintainer>namezero@afim.info</maintainer>
+ <configurationfile>sshdcond.xml</configurationfile>
+ </package>
+ <package>
<name>mailreport</name>
<descr>Allows you to setup periodic e-mail reports containing RRD graphs.</descr>
<category>Network Management</category>
diff --git a/pkg_config.8.xml.amd64 b/pkg_config.8.xml.amd64
index ede384cb..a389bca4 100644
--- a/pkg_config.8.xml.amd64
+++ b/pkg_config.8.xml.amd64
@@ -1304,6 +1304,18 @@
<configurationfile>nrpe2.xml</configurationfile>
</package>
<package>
+ <name>SSHDCond</name>
+ <descr><![CDATA[Allows to define SSH overrides for users,groups,hosts and addresses using Match in a convenient way.<br>
+ This package acts as an access list frontend for ssh connections]]></descr>
+ <category>Enhancements</category>
+ <version>1.0</version>
+ <status>Beta</status>
+ <required_version>2.0</required_version>
+ <config_file>http://www.pfsense.com/packages/config/sshdcond/sshdcond.xml</config_file>
+ <maintainer>namezero@afim.info</maintainer>
+ <configurationfile>sshdcond.xml</configurationfile>
+ </package>
+ <package>
<name>mailreport</name>
<descr>Allows you to setup periodic e-mail reports containing RRD graphs.</descr>
<category>Network Management</category>
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-09 10:25:15 +0000
299' href='#n1299'>1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044