<?php
/*
 snort_interfaces_edit.php
 part of m0n0wall (http://m0n0.ch/wall)

 Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
 Copyright (C) 2008-2009 Robert Zelaya.
 Copyright (C) 2011 Ermal Luci
 All rights reserved.

 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:

 1. Redistributions of source code must retain the above copyright notice,
 this list of conditions and the following disclaimer.

 2. Redistributions in binary form must reproduce the above copyright
 notice, this list of conditions and the following disclaimer in the
 documentation and/or other materials provided with the distribution.

 THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
 INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
 AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
 AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
 OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.
 */

require_once("guiconfig.inc");
require_once("/usr/local/pkg/snort/snort.inc");

global $g;

if (!is_array($config['installedpackages']['snortglobal']['rule']))
	$config['installedpackages']['snortglobal']['rule'] = array();
$a_nat = &$config['installedpackages']['snortglobal']['rule'];

$id = $_GET['id'];
if (isset($_POST['id']))
	$id = $_POST['id'];
if (is_null($id)) {
        header("Location: /snort/snort_interfaces.php");
        exit;
}

if (isset($_GET['dup'])) {
	$id = $_GET['dup'];
	$after = $_GET['dup'];
}


/* always have a limit of (65535) numbers only or snort will not start do to id limits */
/* TODO: When inline gets added make the uuid the port number lisstening */
$pconfig = array();

/* gen uuid for each iface !inportant */
if (empty($config['installedpackages']['snortglobal']['rule'][$id]['uuid'])) {
	//$snort_uuid = gen_snort_uuid(strrev(uniqid(true)));
	$snort_uuid = 0;
	while ($snort_uuid > 65535 || $snort_uuid == 0) {
		$snort_uuid = mt_rand(1, 65535);
		$pconfig['uuid'] = $snort_uuid;
	}
} else {
	$snort_uuid = $a_nat[$id]['uuid'];
	$pconfig['uuid'] = $snort_uuid;
}

if (isset($id) && $a_nat[$id]) {

		/* old options */
		$pconfig['def_ssl_ports_ignore'] = $a_nat[$id]['def_ssl_ports_ignore'];
		$pconfig['flow_depth'] = $a_nat[$id]['flow_depth'];
		$pconfig['max_queued_bytes'] = $a_nat[$id]['max_queued_bytes'];
		$pconfig['max_queued_segs'] = $a_nat[$id]['max_queued_segs'];
		$pconfig['perform_stat'] = $a_nat[$id]['perform_stat'];
		$pconfig['http_inspect'] = $a_nat[$id]['http_inspect'];
		$pconfig['other_preprocs'] = $a_nat[$id]['other_preprocs'];
		$pconfig['ftp_preprocessor'] = $a_nat[$id]['ftp_preprocessor'];
		$pconfig['smtp_preprocessor'] = $a_nat[$id]['smtp_preprocessor'];
		$pconfig['sf_portscan'] = $a_nat[$id]['sf_portscan'];
		$pconfig['dce_rpc_2'] = $a_nat[$id]['dce_rpc_2'];
		$pconfig['dns_preprocessor'] = $a_nat[$id]['dns_preprocessor'];
		$pconfig['def_dns_servers'] = $a_nat[$id]['def_dns_servers'];
		$pconfig['def_dns_ports'] = $a_nat[$id]['def_dns_ports'];
		$pconfig['def_smtp_servers'] = $a_nat[$id]['def_smtp_servers'];
		$pconfig['def_smtp_ports'] = $a_nat[$id]['def_smtp_ports'];
		$pconfig['def_mail_ports'] = $a_nat[$id]['def_mail_ports'];
		$pconfig['def_http_servers'] = $a_nat[$id]['def_http_servers'];
		$pconfig['def_www_servers'] = $a_nat[$id]['def_www_servers'];
		$pconfig['def_http_ports'] = $a_nat[$id]['def_http_ports'];
		$pconfig['def_sql_servers'] = $a_nat[$id]['def_sql_servers'];
		$pconfig['def_oracle_ports'] = $a_nat[$id]['def_oracle_ports'];
		$pconfig['def_mssql_ports'] = $a_nat[$id]['def_mssql_ports'];
		$pconfig['def_telnet_servers'] = $a_nat[$id]['def_telnet_servers'];
		$pconfig['def_telnet_ports'] = $a_nat[$id]['def_telnet_ports'];
		$pconfig['def_snmp_servers'] = $a_nat[$id]['def_snmp_servers'];
		$pconfig['def_snmp_ports'] = $a_nat[$id]['def_snmp_ports'];
		$pconfig['def_ftp_servers'] = $a_nat[$id]['def_ftp_servers'];
		$pconfig['def_ftp_ports'] = $a_nat[$id]['def_ftp_ports'];
		$pconfig['def_ssh_servers'] = $a_nat[$id]['def_ssh_servers'];
		$pconfig['def_ssh_ports'] = $a_nat[$id]['def_ssh_ports'];
		$pconfig['def_pop_servers'] = $a_nat[$id]['def_pop_servers'];
		$pconfig['def_pop2_ports'] = $a_nat[$id]['def_pop2_ports'];
		$pconfig['def_pop3_ports'] = $a_nat[$id]['def_pop3_ports'];
		$pconfig['def_imap_servers'] = $a_nat[$id]['def_imap_servers'];
		$pconfig['def_imap_ports'] = $a_nat[$id]['def_imap_ports'];
		$pconfig['def_sip_proxy_ip'] = $a_nat[$id]['def_sip_proxy_ip'];
		$pconfig['def_sip_servers'] = $a_nat[$id]['def_sip_servers'];
		$pconfig['def_sip_ports'] = $a_nat[$id]['def_sip_ports'];		
		$pconfig['def_sip_proxy_ports'] = $a_nat[$id]['def_sip_proxy_ports'];
		$pconfig['def_auth_ports'] = $a_nat[$id]['def_auth_ports'];
		$pconfig['def_finger_ports'] = $a_nat[$id]['def_finger_ports'];
		$pconfig['def_irc_ports'] = $a_nat[$id]['def_irc_ports'];
		$pconfig['def_nntp_ports'] = $a_nat[$id]['def_nntp_ports'];
		$pconfig['def_rlogin_ports'] = $a_nat[$id]['def_rlogin_ports'];
		$pconfig['def_rsh_ports'] = $a_nat[$id]['def_rsh_ports'];
		$pconfig['def_ssl_ports'] = $a_nat[$id]['def_ssl_ports'];
		$pconfig['barnyard_enable'] = $a_nat[$id]['barnyard_enable'];
		$pconfig['barnyard_mysql'] = $a_nat[$id]['barnyard_mysql'];
		$pconfig['enable'] = $a_nat[$id]['enable'];
		$pconfig['interface'] = $a_nat[$id]['interface'];
		$pconfig['descr'] = $a_nat[$id]['descr'];
		$pconfig['performance'] = $a_nat[$id]['performance'];
		$pconfig['blockoffenders7'] = $a_nat[$id]['blockoffenders7'];
		$pconfig['blockoffenderskill'] = $a_nat[$id]['blockoffenderskill'];
		$pconfig['blockoffendersip'] = $a_nat[$id]['blockoffendersip'];
		$pconfig['whitelistname'] = $a_nat[$id]['whitelistname'];
		$pconfig['homelistname'] = $a_nat[$id]['homelistname'];
		$pconfig['externallistname'] = $a_nat[$id]['externallistname'];
		$pconfig['suppresslistname'] = $a_nat[$id]['suppresslistname'];
		$pconfig['snortalertlogtype'] = $a_nat[$id]['snortalertlogtype'];
		$pconfig['alertsystemlog'] = $a_nat[$id]['alertsystemlog'];
		$pconfig['tcpdumplog'] = $a_nat[$id]['tcpdumplog'];
		$pconfig['snortunifiedlog'] = $a_nat[$id]['snortunifiedlog'];
		$pconfig['configpassthru'] = base64_decode($a_nat[$id]['configpassthru']);
		$pconfig['barnconfigpassthru'] = $a_nat[$id]['barnconfigpassthru'];
		$pconfig['rulesets'] = $a_nat[$id]['rulesets'];
		$pconfig['rule_sid_off'] = $a_nat[$id]['rule_sid_off'];
		$pconfig['rule_sid_on'] = $a_nat[$id]['rule_sid_on'];


		if (!$pconfig['interface'])
			$pconfig['interface'] = "wan";
	} else
		$pconfig['interface'] = "wan";

/* convert fake interfaces to real */
$if_real = snort_get_real_interface($pconfig['interface']);

if (isset($_GET['dup']))
	unset($id);

	/* alert file */
	$d_snortconfdirty_path = "/var/run/snort_conf_{$snort_uuid}_{$if_real}.dirty";

	if ($_POST["Submit"]) {

		if ($_POST['descr'] == '' && $pconfig['descr'] == '') {
			$input_errors[] = "Please  enter a description for your reference.";
		}
			
		if ($id == "" && $config['installedpackages']['snortglobal']['rule'][0]['interface'] != "") {

			$rule_array = $config['installedpackages']['snortglobal']['rule'];
			foreach ($config['installedpackages']['snortglobal']['rule'] as $value) {

				$result_lan = $value['interface'];
				$if_real = snort_get_real_interface($result_lan);

				if ($_POST['interface'] == $result_lan)
					$input_errors[] = "Interface $result_lan is in use. Please select another interface.";
			}
		}

		/* XXX: Void code 
		 * check for overlaps 
		foreach ($a_nat as $natent) {
			if (isset($id) && ($a_nat[$id]) && ($a_nat[$id] === $natent))
				continue;
			if ($natent['interface'] != $_POST['interface'])
				continue;
		}
		*/

		/* if no errors write to conf */
		if (!$input_errors) {
			$natent = array();

			/* write to conf for 1st time or rewrite the answer */
			if ($_POST['interface'])
				$natent['interface'] = $_POST['interface'];

			/* if post write to conf or rewite the answer */
			$natent['enable'] = $_POST['enable'] ? 'on' : 'off';
			$natent['uuid'] = $pconfig['uuid'];
			$natent['descr'] = $_POST['descr'] ? $_POST['descr'] : $pconfig['descr'];
			$natent['performance'] = $_POST['performance'] ? $_POST['performance'] : $pconfig['performance'];
			/* if post = on use on off or rewrite the conf */
			if ($_POST['blockoffenders7'] == "on")
				$natent['blockoffenders7'] = 'on';
			else
				$natent['blockoffenders7'] = 'off';
			if ($_POST['blockoffenderskill'] == "on")
				$natent['blockoffenderskill'] = 'on';
			if ($_POST['blockoffendersip'])
				$natent['blockoffendersip'] = $_POST['blockoffendersip'];

			$natent['whitelistname'] = $_POST['whitelistname'] ? $_POST['whitelistname'] : $pconfig['whitelistname'];
			$natent['homelistname'] = $_POST['homelistname'] ? $_POST['homelistname'] : $pconfig['homelistname'];
			$natent['externallistname'] = $_POST['externallistname'] ? $_POST['externallistname'] : $pconfig['externallistname'];
			$natent['suppresslistname'] = $_POST['suppresslistname'] ? $_POST['suppresslistname'] : $pconfig['suppresslistname'];
			$natent['snortalertlogtype'] = $_POST['snortalertlogtype'] ? $_POST['snortalertlogtype'] : $pconfig['snortalertlogtype'];
			if ($_POST['alertsystemlog'] == "on") { $natent['alertsystemlog'] = 'on'; }else{ $natent['alertsystemlog'] = 'off'; }
			if ($_POST['enable']) { $natent['enable'] = 'on'; } else unset($natent['enable']);
			if ($_POST['tcpdumplog'] == "on") { $natent['tcpdumplog'] = 'on'; }else{ $natent['tcpdumplog'] = 'off'; }
			if ($_POST['snortunifiedlog'] == "on") { $natent['snortunifiedlog'] = 'on'; }else{ $natent['snortunifiedlog'] = 'off'; }
			$natent['configpassthru'] = $_POST['configpassthru'] ? base64_encode($_POST['configpassthru']) : $pconfig['configpassthru'];
			/* if optiion = 0 then the old descr way will not work */

			/* rewrite the options that are not in post */
			/* make shure values are set befor repost or conf.xml will be broken */
			if ($pconfig['def_ssl_ports_ignore'] != "") { $natent['def_ssl_ports_ignore'] = $pconfig['def_ssl_ports_ignore']; }
			if ($pconfig['flow_depth'] != "") { $natent['flow_depth'] = $pconfig['flow_depth']; }
			if ($pconfig['max_queued_bytes'] != "") { $natent['max_queued_bytes'] = $pconfig['max_queued_bytes']; }
			if ($pconfig['max_queued_segs'] != "") { $natent['max_queued_segs'] = $pconfig['max_queued_segs']; }
			if ($pconfig['perform_stat'] != "") { $natent['perform_stat'] = $pconfig['perform_stat']; }
			if ($pconfig['http_inspect'] != "") { $natent['http_inspect'] = $pconfig['http_inspect']; }
			if ($pconfig['other_preprocs'] != "") { $natent['other_preprocs'] = $pconfig['other_preprocs']; }
			if ($pconfig['ftp_preprocessor'] != "") { $natent['ftp_preprocessor'] = $pconfig['ftp_preprocessor']; }
			if ($pconfig['smtp_preprocessor'] != "") { $natent['smtp_preprocessor'] = $pconfig['smtp_preprocessor']; }
			if ($pconfig['sf_portscan'] != "") { $natent['sf_portscan'] = $pconfig['sf_portscan']; }
			if ($pconfig['dce_rpc_2'] != "") { $natent['dce_rpc_2'] = $pconfig['dce_rpc_2']; }
			if ($pconfig['dns_preprocessor'] != "") { $natent['dns_preprocessor'] = $pconfig['dns_preprocessor']; }
			if ($pconfig['def_dns_servers'] != "") { $natent['def_dns_servers'] = $pconfig['def_dns_servers']; }
			if ($pconfig['def_dns_ports'] != "") { $natent['def_dns_ports'] = $pconfig['def_dns_ports']; }
			if ($pconfig['def_smtp_servers'] != "") { $natent['def_smtp_servers'] = $pconfig['def_smtp_servers']; }
			if ($pconfig['def_smtp_ports'] != "") { $natent['def_smtp_ports'] = $pconfig['def_smtp_ports']; }
			if ($pconfig['def_mail_ports'] != "") { $natent['def_mail_ports'] = $pconfig['def_mail_ports']; }
			if ($pconfig['def_http_servers'] != "") { $natent['def_http_servers'] = $pconfig['def_http_servers']; }
			if ($pconfig['def_www_servers'] != "") { $natent['def_www_servers'] = $pconfig['def_www_servers']; }
			if ($pconfig['def_http_ports'] != "") { $natent['def_http_ports'] = $pconfig['def_http_ports'];	}
			if ($pconfig['def_sql_servers'] != "") { $natent['def_sql_servers'] = $pconfig['def_sql_servers']; }
			if ($pconfig['def_oracle_ports'] != "") { $natent['def_oracle_ports'] = $pconfig['def_oracle_ports']; }
			if ($pconfig['def_mssql_ports'] != "") { $natent['def_mssql_ports'] = $pconfig['def_mssql_ports']; }
			if ($pconfig['def_telnet_servers'] != "") { $natent['def_telnet_servers'] = $pconfig['def_telnet_servers']; }
			if ($pconfig['def_telnet_ports'] != "") { $natent['def_telnet_ports'] = $pconfig['def_telnet_ports']; }
			if ($pconfig['def_snmp_servers'] != "") { $natent['def_snmp_servers'] = $pconfig['def_snmp_servers']; }
			if ($pconfig['def_snmp_ports'] != "") { $natent['def_snmp_ports'] = $pconfig['def_snmp_ports']; }
			if ($pconfig['def_ftp_servers'] != "") { $natent['def_ftp_servers'] = $pconfig['def_ftp_servers']; }
			if ($pconfig['def_ftp_ports'] != "") { $natent['def_ftp_ports'] = $pconfig['def_ftp_ports']; }
			if ($pconfig['def_ssh_servers'] != "") { $natent['def_ssh_servers'] = $pconfig['def_ssh_servers']; }
			if ($pconfig['def_ssh_ports'] != "") { $natent['def_ssh_ports'] = $pconfig['def_ssh_ports']; }
			if ($pconfig['def_pop_servers'] != "") { $natent['def_pop_servers'] = $pconfig['def_pop_servers']; }
			if ($pconfig['def_pop2_ports'] != "") { $natent['def_pop2_ports'] = $pconfig['def_pop2_ports']; }
			if ($pconfig['def_pop3_ports'] != "") { $natent['def_pop3_ports'] = $pconfig['def_pop3_ports']; }
			if ($pconfig['def_imap_servers'] != "") { $natent['def_imap_servers'] = $pconfig['def_imap_servers']; }
			if ($pconfig['def_imap_ports'] != "") { $natent['def_imap_ports'] = $pconfig['def_imap_ports']; }
			if ($pconfig['def_sip_proxy_ip'] != "") { $natent['def_sip_proxy_ip'] = $pconfig['def_sip_proxy_ip']; }
			if ($pconfig['def_sip_servers'] != "") { $natent['def_sip_servers'] = $pconfig['def_sip_servers']; }else{ $natent['def_sip_servers'] = ""; }
			if ($pconfig['def_sip_ports'] != "") { $natent['def_sip_ports'] = $pconfig['def_sip_ports']; }else{ $natent['def_sip_ports'] = ""; }			
			if ($pconfig['def_sip_proxy_ports'] != "") { $natent['def_sip_proxy_ports'] = $pconfig['def_sip_proxy_ports']; }
			if ($pconfig['def_auth_ports'] != "") { $natent['def_auth_ports'] = $pconfig['def_auth_ports']; }
			if ($pconfig['def_finger_ports'] != "") { $natent['def_finger_ports'] = $pconfig['def_finger_ports']; }
			if ($pconfig['def_irc_ports'] != "") { $natent['def_irc_ports'] = $pconfig['def_irc_ports']; }
			if ($pconfig['def_nntp_ports'] != "") { $natent['def_nntp_ports'] = $pconfig['def_nntp_ports']; }
			if ($pconfig['def_rlogin_ports'] != "") { $natent['def_rlogin_ports'] = $pconfig['def_rlogin_ports']; }
			if ($pconfig['def_rsh_ports'] != "") { $natent['def_rsh_ports'] = $pconfig['def_rsh_ports']; }
			if ($pconfig['def_ssl_ports'] != "") { $natent['def_ssl_ports'] = $pconfig['def_ssl_ports']; }
			if ($pconfig['barnyard_enable'] != "") { $natent['barnyard_enable'] = $pconfig['barnyard_enable']; }
			if ($pconfig['barnyard_mysql'] != "") { $natent['barnyard_mysql'] = $pconfig['barnyard_mysql'];	}
			if ($pconfig['barnconfigpassthru'] != "") { $natent['barnconfigpassthru'] = $pconfig['barnconfigpassthru'];	}
			if ($pconfig['rulesets'] != "") { $natent['rulesets'] = $pconfig['rulesets']; }
			if ($pconfig['rule_sid_off'] != "") { $natent['rule_sid_off'] = $pconfig['rule_sid_off']; }
			if ($pconfig['rule_sid_on'] != "") { $natent['rule_sid_on'] = $pconfig['rule_sid_on'];	}


			$if_real = snort_get_real_interface($natent['interface']);

			if (isset($id) && $a_nat[$id]) {
				if ($natent['interface'] != $a_nat[$id]['interface'])
					Running_Stop($snort_uuid, $if_real, $id);
				$a_nat[$id] = $natent;
			} else {
				if (is_numeric($after))
				array_splice($a_nat, $after+1, 0, array($natent));
				else
				$a_nat[] = $natent;
			}

			write_config();

			sync_snort_package_config();
			sleep(1);

			header( 'Expires: Sat, 26 Jul 1997 05:00:00 GMT' );
			header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s' ) . ' GMT' );
			header( 'Cache-Control: no-store, no-cache, must-revalidate' );
			header( 'Cache-Control: post-check=0, pre-check=0', false );
			header( 'Pragma: no-cache' );
			header("Location: /snort/snort_interfaces.php");

			exit;
		}
	}

	if ($_POST["Submit2"]) {

		sync_snort_package_config();
		sleep(1);

		Running_Start($snort_uuid, $if_real, $id);

		header( 'Expires: Sat, 26 Jul 1997 05:00:00 GMT' );
		header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s' ) . ' GMT' );
		header( 'Cache-Control: no-store, no-cache, must-revalidate' );
		header( 'Cache-Control: post-check=0, pre-check=0', false );
		header( 'Pragma: no-cache' );
		header("Location: /snort/snort_interfaces_edit.php?id=$id");
		exit;
	}

$pgtitle = "Snort: Interface Edit: $id $snort_uuid $if_real";
include_once("head.inc");
?>

<body link="#0000CC" vlink="#0000CC" alink="#0000CC">

<?php include("fbegin.inc"); ?>

<script language="JavaScript">
<!--

function enable_blockoffenders() {
	var endis = !(document.iform.blockoffenders7.checked);
	document.iform.blockoffenderskill.disabled=endis;
	document.iform.blockoffendersip.disabled=endis;
}

function enable_change(enable_change) {
	endis = !(document.iform.enable.checked || enable_change);
	// make shure a default answer is called if this is envoked.
	endis2 = (document.iform.enable);
	document.iform.performance.disabled = endis;
	document.iform.blockoffenders7.disabled = endis;
	document.iform.alertsystemlog.disabled = endis;
	document.iform.externallistname.disabled = endis;
	document.iform.homelistname.disabled = endis;
	document.iform.suppresslistname.disabled = endis;
	document.iform.tcpdumplog.disabled = endis;
	document.iform.snortunifiedlog.disabled = endis;
	document.iform.configpassthru.disabled = endis;
}
//-->
</script>
<?if($pfsense_stable == 'yes'){echo '<p class="pgtitle">' . $pgtitle . '</p>';}?>

<?php
	/* Display Alert message */
	if ($input_errors) {
		print_input_errors($input_errors); // TODO: add checks
	}

	if ($savemsg) {
		print_info_box($savemsg);
	}
?>

<form action="snort_interfaces_edit.php<?php echo "?id=$id";?>" method="post" name="iform" id="iform">
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr><td class="tabnavtbl">
<?php
        $tab_array = array();
	$tab_array[] = array(gettext("Snort Interfaces"), false, "/snort/snort_interfaces.php");
        $tab_array[] = array(gettext("If Settings"), true, "/snort/snort_interfaces_edit.php?id={$id}");
	$tab_array[] = array(gettext("Categories"), false, "/snort/snort_rulesets.php?id={$id}");
	$tab_array[] = array(gettext("Rules"), false, "/snort/snort_rules.php?id={$id}");
	$tab_array[] = array(gettext("Servers"), false, "/snort/snort_define_servers.php?id={$id}");
	$tab_array[] = array(gettext("Preprocessors"), false, "/snort/snort_preprocessors.php?id={$id}");
	$tab_array[] = array(gettext("Barnyard2"), false, "/snort/snort_barnyard.php?id={$id}");
        display_top_tabs($tab_array);
?>
</td></tr>
</table>
<table width="100%" border="0" cellpadding="6" cellspacing="0">
	<tr>
		<td colspan="2" valign="top" class="listtopic">General Settings</td>
	</tr>
	<tr>
		<td width="22%" valign="top" class="vncellreq">Enable</td>
		<td width="78%" valign="top" class="vtable">&nbsp;
	<?php
		if ($pconfig['enable'] == "on")
			$checked = "checked";
		echo "
			<input name=\"enable\" type=\"checkbox\" value=\"on\" $checked onClick=\"enable_change(false)\">
			&nbsp;&nbsp;Enable or Disable\n";
	?>
		<br/>
		</td>
	</tr>
	<tr>
		<td width="22%" valign="top" class="vncellreq">Interface</td>
		<td width="78%" class="vtable">
			<select name="interface" class="formselect">
		<?php
			if (function_exists('get_configured_interface_with_descr'))
				$interfaces = get_configured_interface_with_descr();
			else {
				$interfaces = array('wan' => 'WAN', 'lan' => 'LAN');
				for ($i = 1; isset($config['interfaces']['opt' . $i]); $i++) {
					$interfaces['opt' . $i] = $config['interfaces']['opt' . $i]['descr'];
				}
			}
			foreach ($interfaces as $iface => $ifacename): ?>
				<option value="<?=$iface;?>"
			<?php if ($iface == $pconfig['interface']) echo "selected"; ?>><?=htmlspecialchars($ifacename);?>
				</option>
			<?php 	endforeach; ?>
			</select><br>
			<span class="vexpl">Choose which interface this rule applies to.<br/>
				<b>Hint: </b>in most cases, you'll want to use WAN here.</span><br/><br/></td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncellreq">Description</td>
				<td width="78%" class="vtable"><input name="descr" type="text"
					class="formfld" id="descr" size="40"
					value="<?=htmlspecialchars($pconfig['descr']);?>"> <br/>
				<span class="vexpl">You may enter a description here for your
				reference (not parsed).</span><br/><br/></td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncell">Memory Performance</td>
				<td width="78%" class="vtable">
					<select name="performance" class="formselect" id="performance">
					<?php
					$interfaces2 = array('ac-bnfa' => 'AC-BNFA', 'lowmem' => 'LOWMEM', 'ac-std' => 'AC-STD', 'ac' => 'AC', 'ac-banded' => 'AC-BANDED', 'ac-sparsebands' => 'AC-SPARSEBANDS', 'acs' => 'ACS');
					foreach ($interfaces2 as $iface2 => $ifacename2): ?>
					<option value="<?=$iface2;?>"
					<?php if ($iface2 == $pconfig['performance']) echo "selected"; ?>>
						<?=htmlspecialchars($ifacename2);?></option>
						<?php endforeach; ?>
				</select><br>
				<span class="vexpl">Lowmem and ac-bnfa are recommended for low end
				systems, Ac: high memory, best performance, ac-std: moderate
				memory,high performance, acs: small memory, moderateperformance,
				ac-banded: small memory,moderate performance, ac-sparsebands: small
				memory, high performance.
				</span><br/></td>
	</tr>
	<tr>
				<td colspan="2" valign="top" class="listtopic">Choose the networks
				snort should inspect and whitelist.</td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncell">Home net</td>
				<td width="78%" class="vtable">
					<select name="homelistname" class="formselect" id="homelistname">
				<?php
					echo "<option value='default' >default</option>";
					/* find whitelist names and filter by type */
					if (is_array($config['installedpackages']['snortglobal']['whitelist']['item'])) {
						foreach ($config['installedpackages']['snortglobal']['whitelist']['item'] as $value) {
							if ($value['snortlisttype'] == 'netlist') {
								$ilistname = $value['name'];
								if ($ilistname == $pconfig['homelistname'])
									echo "<option value='$ilistname' selected>";
								else
									echo "<option value='$ilistname'>";
								echo htmlspecialchars($ilistname) . '</option>';
							}
						}
					}
				?>
				</select><br/>
				<span class="vexpl">Choose the home net you will like this rule to
				use. </span><br/>&nbsp;<br/><span class="red">Note:</span>&nbsp;Default home
				net adds only local networks.<br>
				<span class="red">Hint:</span>&nbsp;Most users add a list of
				friendly ips that the firewall cant see.<br/></td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncell">External net</td>
				<td width="78%" class="vtable">
					<select name="externallistname" class="formselect" id="externallistname">
				<?php
					echo "<option value='default' >default</option>";
					/* find whitelist names and filter by type */
					if (is_array($config['installedpackages']['snortglobal']['whitelist']['item'])) {
						foreach ($config['installedpackages']['snortglobal']['whitelist']['item'] as $value) {
							if ($value['snortlisttype'] == 'netlist') {
								$ilistname = $value['name'];
								if ($ilistname == $pconfig['externallistname'])
									echo "<option value='$ilistname' selected>";
								else
									echo "<option value='$ilistname'>";
								echo htmlspecialchars($ilistname) . '</option>';
							}
						}
					}
				?>
				</select><br/>
				<span class="vexpl">Choose the external net you will like this rule
				to use. </span>&nbsp;<br/><span class="red">Note:</span>&nbsp;Default
				external net, networks that are not home net.<br/>
				<span class="red">Hint:</span>&nbsp;Most users should leave this
				setting at default.<br/></td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncell">Block offenders</td>
				<td width="78%" class="vtable">
					<input name="blockoffenders7" id="blockoffenders7" type="checkbox" value="on"
					<?php if ($pconfig['blockoffenders7'] == "on") echo "checked"; ?>
					onClick="enable_blockoffenders()"><br>
				Checking this option will automatically block hosts that generate a
				Snort alert.</td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncell">Kill states</td>
				<td width="78%" class="vtable">
					<input name="blockoffenderskill" id="blockoffenderskill" type="checkbox" value="on" <?php if ($pconfig['blockoffenderskill'] == "on") echo "checked"; ?>>
					<br/>Should firewall states be killed for the blocked ip
				</td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncell">Which ip to block</td>
				<td width="78%" class="vtable">
					<select name="blockoffendersip" class="formselect" id="blockoffendersip">
				<?php
					foreach (array("src", "dst", "both") as $btype) {
						if ($btype == $pconfig['blockoffendersip'])
							echo "<option value='{$btype}' selected>";
						else
							echo "<option value='{$btype}'>";
						echo htmlspecialchars($btype) . '</option>';
					}
				?>
					</select>
				<br/> Which ip extracted from the packet you want to block
				</td>
	</tr>
	<tr>
				<td width="22%" valign="top" class="vncell">Whitelist</td>
				<td width="78%" class="vtable">
					<select name="whitelistname" class="formselect" id="whitelistname">
				<?php
					/* find whitelist names and filter by type, make sure to track by uuid */
					echo "<option value='default' >default</option>\n";
					if (is_array($config['installedpackages']['snortglobal']['whitelist']['item'])) {
						foreach ($config['installedpackages']['snortglobal']['whitelist']['item'] as $value) {
							if ($value['snortlisttype'] == 'whitelist') {
								if ($value['name'] == $pconfig['whitelistname'])
									echo "<option value='{$value['name']}' selected>";
								else
									echo "<option value='{$value['name']}'>";
								echo htmlspecialchars($value['name']) . '</option>';
							}
						}
					}
				?>
				</select><br>
				<span class="vexpl">Choose the whitelist you will like this rule to
				use. </span><br/>&nbsp;<br/><span class="red">Note:</span><br/>&nbsp;Default
				whitelist adds only local networks.<br/>
				<span class="red">Note:</span><br/>&nbsp;This option will only be used when block offenders is on.
				</td>
			</tr>
			<tr>
				<td width="22%" valign="top" class="vncell">Suppression and
				filtering</td>
				<td width="78%" class="vtable">
					<select name="suppresslistname" class="formselect" id="suppresslistname">
				<?php
					echo "<option value='default' >default</option>\n";
					if (is_array($config['installedpackages']['snortglobal']['suppress']['item'])) {
						$slist_select = $config['installedpackages']['snortglobal']['suppress']['item'];
						foreach ($slist_select as $value) {
							$ilistname = $value['name'];
							if ($ilistname == $pconfig['suppresslistname'])
								echo "<option value='$ilistname' selected>";
							else
								echo "<option value='$ilistname'>";
							echo htmlspecialchars($ilistname) . '</option>';
						}
					}
				?>
				</select><br>
				<span class="vexpl">Choose the suppression or filtering file you
				will like this rule to use. </span><br/>&nbsp;<br/><span class="red">Note:</span><br/>&nbsp;Default
				option disables suppression and filtering.</td>
			</tr>

			<tr>
				<td colspan="2" valign="top" class="listtopic">Choose the types of
				logs snort should create.</td>
			</tr>
			<tr>
				<td width="22%" valign="top" class="vncell">Send alerts to main
				System logs</td>
				<td width="78%" class="vtable"><input name="alertsystemlog"
					type="checkbox" value="on"
					<?php if ($pconfig['alertsystemlog'] == "on") echo "checked"; ?>
					onClick="enable_change(false)"><br>
				Snort will send Alerts to the firewall's system logs.</td>
			</tr>
			<tr>
				<td width="22%" valign="top" class="vncell">Log to a Tcpdump file</td>
				<td width="78%" class="vtable"><input name="tcpdumplog"
					type="checkbox" value="on"
					<?php if ($pconfig['tcpdumplog'] == "on") echo "checked"; ?>
					onClick="enable_change(false)"><br>
				Snort will log packets to a tcpdump-formatted file. The file then
				can be analyzed by an application such as Wireshark which
				understands pcap file formats. <span class="red"><strong>WARNING:</strong></span><br/>
				File may become large.</td>
			</tr>
			<tr>
				<td width="22%" valign="top" class="vncell">Log Alerts to a snort
				unified2 file</td>
				<td width="78%" class="vtable"><input name="snortunifiedlog"
					type="checkbox" value="on"
					<?php if ($pconfig['snortunifiedlog'] == "on") echo "checked"; ?>
					onClick="enable_change(false)"><br>
			Snort will log Alerts to a file in the UNIFIED2 format. This is a
			requirement for barnyard2.</td>
		</tr>
		<tr>
			<td colspan="2" valign="top" class="listtopic">Arguments here will
			be automatically inserted into the snort configuration.</td>
		</tr>
		<tr>
			<td width="22%" valign="top" class="vncell">Advanced configuration pass through</td>
			<td width="78%" class="vtable">
				<textarea wrap="off" name="configpassthru" cols="65" rows="12" id="configpassthru"
				class="formpre"><?=htmlspecialchars($pconfig['configpassthru']);?></textarea>
			</td>
		</tr>
		<tr>
			<td width="22%" valign="top"></td>
			<td width="78%"><input name="Submit" type="submit" class="formbtn" value="Save">
			<?php if (isset($id) && $a_nat[$id]): ?>
				<input name="id" type="hidden" value="<?=$id;?>">
			<?php endif; ?></td>
		</tr>
		<tr>
			<td width="22%" valign="top">&nbsp;</td>
			<td width="78%"><span class="vexpl"><span class="red"><strong>Note:</strong></span><br/>
			<br>
			Please save your settings before you click start. </td>
		</tr>
</table>
</form>
<script language="JavaScript">
<!--
enable_change(false);
enable_blockoffenders();
//-->
</script>
<?php include("fend.inc"); ?>
</body>
</html>