"engine_{$eng_id}", "bind_to" => "", "policy" => "bsd",
"timeout" => 60, "min_ttl" => 1, "detect_anomalies" => "on",
"overlap_limit" => 0, "min_frag_len" => 0 );
// See if this is initial entry and set to "default" if true
if ($eng_id < 1) {
$def['name'] = "default";
$def['bind_to'] = "all";
}
$pconfig = $def;
}
else {
$pconfig = $a_nat[$eng_id];
// Check for any empty values and set sensible defaults
if (empty($pconfig['policy']))
$pconfig['policy'] = "bsd";
if (empty($pconfig['timeout']))
$pconfig['timeout'] = 60;
if (empty($pconfig['min_ttl']))
$pconfig['min_ttl'] = 1;
if (empty($pconfig['detect_anomalies']))
$pconfig['detect_anomalies'] = "on";
if (empty($pconfig['overlap_limit']))
$pconfig['overlap_limit'] = 0;
if (empty($pconfig['min_frag_len']))
$pconfig['min_frag_len'] = 0;
}
if ($_POST['Cancel']) {
header("Location: /snort/snort_preprocessors.php?id={$id}#frag3_row");
exit;
}
// Check for returned "selected alias" if action is import
if ($_GET['act'] == "import") {
if ($_GET['varname'] == "bind_to" && !empty($_GET['varvalue']))
$pconfig[$_GET['varname']] = htmlspecialchars($_GET['varvalue']);
}
if ($_POST['save']) {
/* Grab all the POST values and save in new temp array */
$engine = array();
if ($_POST['frag3_name']) { $engine['name'] = trim($_POST['frag3_name']); } else { $engine['name'] = "default"; }
if ($_POST['frag3_bind_to']) {
if (is_alias($_POST['frag3_bind_to']))
$engine['bind_to'] = $_POST['frag3_bind_to'];
elseif (strtolower(trim($_POST['frag3_bind_to'])) == "all")
$engine['bind_to'] = "all";
else
$input_errors[] = gettext("You must provide a valid Alias or the reserved keyword 'all' for the 'Bind-To IP Address' value.");
}
else {
$input_errors[] = gettext("The 'Bind-To IP Address' value cannot be blank. Provide a valid Alias or the reserved keyword 'all'.");
}
/* Validate the text input fields before saving */
if (!empty($_POST['frag3_timeout']) || $_POST['frag3_timeout'] == 0) {
$engine['timeout'] = $_POST['frag3_timeout'];
if (!is_numeric($_POST['frag3_timeout']) || $_POST['frag3_timeout'] < 1)
$input_errors[] = gettext("The value for Timeout must be numeric and greater than zero.");
}
else
$engine['timeout'] = 60;
if (!empty($_POST['frag3_min_ttl']) || $_POST['frag3_min_ttl'] == 0) {
$engine['min_ttl'] = $_POST['frag3_min_ttl'];
if ($_POST['frag3_min_ttl'] < 1 || $_POST['frag3_min_ttl'] > 255)
$input_errors[] = gettext("The value for Minimum_Time-To-Live must be between 1 and 255.");
}
else
$engine['min_ttl'] = 1;
if (!empty($_POST['frag3_overlap_limit']) || $_POST['frag3_overlap_limit'] == 0) {
$engine['overlap_limit'] = $_POST['frag3_overlap_limit'];
if (!is_numeric($_POST['frag3_overlap_limit']) || $_POST['frag3_overlap_limit'] < 0)
$input_errors[] = gettext("The value for Overlap_Limit must be a number greater than or equal to zero.");
}
else
$engine['overlap_limit'] = 0;
if (!empty($_POST['frag3_min_frag_len']) || $_POST['frag3_min_frag_len'] == 0) {
$engine['min_frag_len'] = $_POST['frag3_min_frag_len'];
if (!is_numeric($_POST['frag3_min_frag_len']) || $_POST['frag3_min_frag_len'] < 0)
$input_errors[] = gettext("The value for Min_Fragment_Length must be a number greater than or equal to zero.");
}
else
$engine['min_frag_len'] = 0;
if ($_POST['frag3_policy']) { $engine['policy'] = $_POST['frag3_policy']; } else { $engine['policy'] = "bsd"; }
$engine['detect_anomalies'] = $_POST['frag3_detect_anomalies'] ? 'on' : 'off';
/* Can only have one "all" Bind_To address */
if ($engine['bind_to'] == "all" && $engine['name'] <> "default") {
$input_errors[] = gettext("Only one default Frag3 Engine can be bound to all addresses.");
$pconfig = $engine;
}
/* if no errors, write new entry to conf */
if (!$input_errors) {
if (isset($eng_id) && $a_nat[$eng_id]) {
$a_nat[$eng_id] = $engine;
}
else
$a_nat[] = $engine;
/* Reorder the engine array to ensure the */
/* 'bind_to=all' entry is at the bottom */
/* if it contains more than one entry. */
if (count($a_nat) > 1) {
$i = -1;
foreach ($a_nat as $f => $v) {
if ($v['bind_to'] == "all") {
$i = $f;
break;
}
}
/* Only relocate the entry if we */
/* found it, and it's not already */
/* at the end. */
if ($i > -1 && ($i < (count($a_nat) - 1))) {
$tmp = $a_nat[$i];
unset($a_nat[$i]);
$a_nat[] = $tmp;
}
}
/* Now write the new engine array to conf */
write_config("Snort pkg: modified frag3 engine settings.");
// We have saved a preproc config change, so set "dirty" flag
mark_subsystem_dirty('snort_preprocessors');
header("Location: /snort/snort_preprocessors.php?id={$id}#frag3_row");
exit;
}
}
$if_friendly = convert_friendly_interface_to_friendly_descr($config['installedpackages']['snortglobal']['rule'][$id]['interface']);
$pgtitle = gettext("Snort: Interface {$if_friendly} Frag3 Preprocessor Engine");
include_once("head.inc");
?>