#!/bin/sh


. /usr/lib/libmodcgi.sh

sec_begin 'iptables add/remove rule'
cat << EOF
<p>
<input type="hidden" name="gui" value="*gui*">
<input type="hidden" name="rule" value="" checked>
<input type="radio" name="rule" value="-A"> Add
<input type="radio" name="rule" value="-I"> Insert
<br>
<table border="0">
<tr><td>Chain</td><td colspan="2"><select name="chain">
EOF

CHAINTABLE=$(iptables --list | grep "Chain" | sed -e "s/Chain //g" | sed -e "s/ .*//g")
CHAINTABLE=$CHAINTABLE" $(iptables -t nat --list | grep "Chain" | sed -e "s/Chain //g" | sed -e "s/ .*//g" | sed -e "s/OUTPUT//g")"
echo "###"$CHAINTABLE"###"
for CHAIN in $CHAINTABLE; do
	echo '<option title="'$CHAIN'" value="'$CHAIN'">'$CHAIN'</option>'
done

cat << EOF
</select></td/</tr>
<tr><td>Position (ID)</td><td colspan="2"><input type="text" name="position" size="4" maxlength="6"> (only for Insert!)</tr>
<tr><td>Source Address</td><td><input type="text" name="source" size="20" maxlength="18" value="$(html "$IPTABLES_SOURCE")"></td><td>Port <input type="text" name="sport" size="5" maxlength="6" value="ANY"></td></tr>
<tr><td>Destination Address</td><td><input type="text" name="destination" size="20" maxlength="18" value="$(html "$IPTABLES_DESTINATION")"></td>
<td>Port <select name="dport">
<option title="dport" value="ANY">ANY</option>
EOF

while read DPORT; do
	DPORT=$(echo $DPORT | sed -e "s/:.*//g")
	echo '<option title="dport" value="'$DPORT'">'$DPORT'</option>'
done < /tmp/flash/iptables_services

cat << EOF
</select></td></tr>
<tr><td>Protocol</td><td colspan="2"><select name="protokoll">
<option title="all" value="all">all</option>
<option title="tcp" value="tcp">tcp</option>
<option title="udp" value="udp">udp</option>
<option title="icmp" value="icmp">icmp</option>
</select>
<tr><td>Input-Interface</td><td colspan="2"><select name="input_interface">
<option title="ANY" value="ANY">ANY</option>
EOF

for INPUT_INTERFACE in $(ifconfig | grep ^[a-z] | cut -f1 -d ' '); do
	echo '<option title="'$INPUT_INTERFACE'" value="'$INPUT_INTERFACE'">'$INPUT_INTERFACE'</option>'
done

cat << EOF
<tr><td>Output-Interface</td><td colspan="2"><select name="output_interface">
<option title="ANY" value="ANY">ANY</option>

EOF

for OUTPUT_INTERFACE in $(ifconfig | grep ^[a-z] | cut -f1 -d ' '); do
	echo '<option title="'$OUTPUT_INTERFACE'" value="'$OUTPUT_INTERFACE'">'$OUTPUT_INTERFACE'</option>'
done

cat << EOF

</select></td></tr>
<tr><td>NAT</td><td colspan="2"><select name="nat">
<option title="None" value="None">None</option>
<option title="NORMAL" value="MASQUERADE">Normal</option>
<option title="SNAT" value="SNAT">Source Translation</option>
<option title="DNAT" value="DNAT">Destination Translation</option>
</select>
</td></tr>
</table>
<hr>
Action <select name="action">
<option title="ACCEPT" value="ACCEPT">ACCEPT</option>
<option title="DROP" value="DROP">DROP</option>
<option title="LOG" value="LOG">LOG</option>
</select>

</p>

EOF
sec_end

sec_begin 'iptables rules'
iptables -vL --line-numbers >/var/tmp/test
iptables -t nat -vL --line-numbers >>/var/tmp/test
# Check if table can be listed
lsmod | grep "iptable_filter" > /dev/null
if [ $? -eq 1 ]; then
	echo "<br><i><b>NOTE:</b> iptables is not running!</i>"
else
	sed -e "s/\*/x/g" /var/tmp/test > /var/tmp/iptables_tmp
	rm /var/tmp/test
	i=0
	while read IPTABLES_LINE
	do
		if [[ $(echo ${IPTABLES_LINE} | grep -c "Chain") = 1 ]]; then
			# not first dataset, so close table
			CHAIN=$(echo ${IPTABLES_LINE} | grep "Chain" | sed -e "s/Chain //g" | sed -e "s/ .*//g")
			if (( i > 0 )); then
				echo "</table>"
			fi
			echo "<table width='100%' class='center' border='1' cellpadding='4' cellspacing='0'>"
			echo "<tr><td align='left' colspan='10'>${IPTABLES_LINE}</td>"
			echo "</tr><tr>"
			echo "<th bgcolor="#bae3ff">ID</th>"
			echo "<th bgcolor="#bae3ff">Source</th>"
			echo "<th bgcolor="#bae3ff">Destination</th>"
			echo "<th bgcolor="#bae3ff">Protocol</th>"
			echo "<th bgcolor="#bae3ff">Service</th>"
			echo "<th bgcolor="#bae3ff">Service</th>"
			echo "<th bgcolor="#bae3ff">Action</th>"
			echo "<th bgcolor="#bae3ff">in</th>"
			echo "<th bgcolor="#bae3ff">out</th>"
			echo "<th bgcolor="#bae3ff">Configure</th>"
			echo "</tr>"
			echo "<br>"
			i=i+1

		else
			echo ${IPTABLES_LINE} | grep "^[1-9]" > /dev/null
			if [ $? = 0 ]; then
				echo "<tr>"
				echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $1}')</td>"
				echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $9}')</td>"
				echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $10}')</td>"
				echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $5}')</td>"

				if [ ! $(echo ${IPTABLES_LINE} | awk '{print $12}') ]; then
					echo "<td align='center'>ANY</td>"
				else
					PORT=$(echo ${IPTABLES_LINE} | awk '{print $12}' | sed -e "s/.*://g")
					SERVICE=$(cat /tmp/flash/iptables_services | grep :$PORT$ | sed -e "s/:.*//g")
					[ -z "$SERVICE" ] && SERVICE="$PORT"
					echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $12}' | sed -e "s/:.*//g"):$SERVICE</td>"
				fi

				if [ ! $(echo ${IPTABLES_LINE} | awk '{print $13}') ]; then
					echo "<td align='center'>ANY</td>"
				else
					echo ${IPTABLES_LINE} | awk '{print $13}' | grep '^to:' > /dev/null
					if [ $? -eq 1 ]; then
						PORT=$(echo ${IPTABLES_LINE} | awk '{print $13}' | sed -e "s/.*://g")
						SERVICE=$(cat /tmp/flash/iptables_services | grep :$PORT$ | sed -e "s/:.*//g")
						[ -z "$SERVICE" ] && SERVICE="$PORT"
						echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $13}' | sed -e "s/:.*//g"):$SERVICE</td>"
					else
						echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $13}')</td>"
					fi
				fi

				IMAGE=$(echo ${IPTABLES_LINE} | awk '{print $4}')
				echo "<td align='center'><img src='/images/"$IMAGE".gif' title='"$IMAGE"'></td>"
				echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $7}')</td>"
				echo "<td align='center'>$(echo ${IPTABLES_LINE} | awk '{print $8}')</td>"
				echo "<td align='center'><a href='$(href extra iptables controller)?chain=${CHAIN}&amp;remove=$(echo ${IPTABLES_LINE} | awk '{print $1}')'>remove</a></td>"
				echo "</tr>"
			fi
		fi
	done < /var/tmp/iptables_tmp
	echo "</table>"
	rm /var/tmp/iptables_tmp
fi
sec_end