| ',
+ $q->start_table({class => "sme-border"}),"\n";
+ print $q->Tr(
+ esmith::cgi::genSmallCell($q, $self->localise('IP_ADDRESS'),"header"),
+ esmith::cgi::genSmallCell($q, $self->localise('JAIL'),"header"),
+ esmith::cgi::genSmallCell($q, $self->localise('ACTION'),"header"));
+ foreach my $sval (@strvals)
+ {
+ my @ssval= split(':',$sval);
+ my $curjail=$ssval[0];
+ my @ssvalip = split(' ',$ssval[1]);
+ foreach my $sssval (@ssvalip)
+ {
+ my $ip=$sssval;
+ my $action3 ="".$self->localise('REMOVE')."" .
+ " ".$self->localise('WHITELIST')."" ;
+
+ print $q->Tr(
+ esmith::cgi::genSmallCell($q, $ip, "normal"),
+ esmith::cgi::genSmallCell($q, $curjail, "normal"),
+ esmith::cgi::genSmallCell($q, $action3, "normal"));
+ }
+
+
+ }
+ print ' |
';
+ }
+ else
+ {
+ print $q->Tr($q->td($q->b($self->localise('NO_ENTRIES_YET'))));
+ }
+ return '';
+}
+
+sub add_new_valid_from
+{
+ my $self = shift;
+ my $q = $self->{cgi};
+
+ my $ip = $q->param('ip');
+ my $bits = $q->param('bits');
+ # do nothing if no ip was added
+ return 1 unless ($ip);
+
+ my $rec = $db->get('fail2ban');
+ unless ($rec)
+ {
+ return $self->error('ERR_NO_RECORD');
+ }
+
+ my $prop = $rec->prop('IgnoreIP') || '';
+
+ my @vals = split /,/, $prop;
+ return '' if (grep /^$ip\/$bits$/, @vals); # already have this entry
+
+ if ($prop ne '')
+ {
+ $prop .= ",$ip/$bits";
+ }
+ else
+ {
+ $prop = "$ip/$bits";
+ }
+ $rec->set_prop('IgnoreIP', $prop);
+ $q->delete('ip');
+ $q->delete('bits');
+ return 1;
+}
+
+sub remove_valid_from
+{
+ my $self = shift;
+ my $q = $self->{cgi};
+
+ my @remove = $q->param('validFromRemove');
+ my @vals = $self->_get_valid_from();
+
+ foreach my $entry (@remove)
+ {
+ return undef unless $entry;
+
+ unless (@vals)
+ {
+ print STDERR "ERROR: unable to load IgnoreIP property from conf db\n";
+ return undef;
+ }
+
+ @vals = (grep { $entry ne $_ } @vals);
+ }
+
+ my $prop;
+ if (@vals)
+ {
+ $prop = join ',',@vals;
+ }
+ else
+ {
+ $prop = '';
+ }
+ $db->get('fail2ban')->set_prop('IgnoreIP', $prop);
+ $q->delete('validFromRemove');
+
+ return 1;
+}
+
+sub change_settings {
+ my ($fm) = @_;
+ my $q = $fm->{'cgi'};
+
+ my %conf;
+
+ # Don't process the form unless we clicked the Save button. The event is
+ # called even if we chose the Remove link or the Add link.
+ return unless($q->param('Next') eq $fm->localise('SAVE'));
+
+ my $ip = ($q->param ('ip') || '');
+ my $status = ($q->param ('status') || 'status');
+ my $FilterLocalNetworks = ($q->param ('FilterLocalNetworks') || "enabled");
+ my $FilterValidRemoteHosts= ($q->param ('FilterValidRemoteHosts') || "enabled");
+ my $Mail= ($q->param ("Mail") || "enabled");
+ my $BanTime= ($q->param ("BanTime") || '1800');
+ my $FindTime= ($q->param ("FindTime") || '900');
+ my $MaxRetry= ($q->param ("MaxRetry") || '3');
+ # those are stored in a different key dedicated to the service
+ my %services;
+ $services{'sshd'}= ($q->param ("sshd") ||'enabled');
+ $services{'qpsmtp'}= ($q->param ("qpsmtpd") ||'enabled');
+ $services{'dovecot'}= ($q->param ("dovecot") ||'enabled');
+ $services{'httpd-e-smith'}= ($q->param ("httpd-e-smith") ||'enabled');
+ $services{'ftp'}= ($q->param ("ftp") ||'enabled');
+ $services{'lemonldap'}= ($q->param ("lemonldap") ||'enabled');
+ $services{'ejabberd'}= ($q->param ("ejabberd" ) ||'enabled');
+ $services{'sogod'}= ($q->param ("sogod" ) ||'enabled');
+ $services{'wordpress'}= ($q->param ("wordpress") ||'enabled');
+
+
+ #------------------------------------------------------------
+ # Looks good; go ahead and change the access.
+ #------------------------------------------------------------
+
+ my $rec = $db->get('fail2ban');
+ if ($rec)
+ {
+ $rec->set_prop('status', $status);
+ # unless prop empty and value eq default
+ $rec->set_prop('FilterLocalNetworks', $FilterLocalNetworks) unless ( ! $db->get_prop('fail2ban','FilterLocalNetworks') && $FilterLocalNetworks eq $defaultval{'FilterLocalNetworks'} );
+ $rec->set_prop('FilterValidRemoteHosts', $FilterValidRemoteHosts) unless ( ! $db->get_prop('fail2ban','FilterValidRemoteHosts') && $FilterValidRemoteHosts eq $defaultval{'FilterValidRemoteHosts'} );
+ $rec->set_prop('Mail', $Mail) unless ( ! $db->get_prop('fail2ban','Mail') && $Mail eq $defaultval{'Mail'} );
+ $rec->set_prop('BanTime', $BanTime) unless ( ! $db->get_prop('fail2ban','BanTime') && $BanTime eq $defaultval{'BanTime'} );
+ $rec->set_prop('FindTime', $FindTime) unless ( ! $db->get_prop('fail2ban','FindTime') && $FindTime eq $defaultval{'FindTime'} );
+ $rec->set_prop('MaxRetry', $MaxRetry) unless ( ! $db->get_prop('fail2ban','MaxRetry') && $MaxRetry eq $defaultval{'MaxRetry'} );
+ }
+ # for the 9 services update unless key does not exist and property does not exist and value eq default
+ foreach my $key (keys %services)
+ {
+ if ($key eq "wordpress")
+ {
+ $rec = $db->get('fail2ban');
+ my $getprop = $db->get_prop('fail2ban',$key) || "";
+ $rec->set_prop($key, $services{$key} ) unless ( ! $rec || (! $db->get_prop('fail2ban', $key) && $services{$key} eq $defaultval{$key} ) );
+ }
+ else
+ {
+ $rec = $db->get($key);
+ my $getprop = $db->get_prop($key,'Fail2Ban') || "";
+ $rec->set_prop('Fail2Ban', $services{$key} ) unless ( ! $rec || (! $db->get_prop($key,'Fail2Ban') && $services{$key} eq $defaultval{$key} ) );
+ }
+ }
+# this seems to prevent reload of service if we update something and remove or add an ip...
+# return '' unless $fm->add_new_valid_from;
+# return '' unless $fm->remove_valid_from;
+
+ unless ( system( "/sbin/e-smith/signal-event", "fail2ban-update" ) == 0 )
+ {
+ $fm->error('ERROR_UPDATING');
+ return undef;
+ }
+
+ if ( $rec->prop('status') eq 'disabled' )
+ {
+ unless ( `/etc/init.d/fail2ban stop` )
+ {
+ $fm->error('ERROR_STOPPING');
+ return undef;
+ }
+ }
+
+ $fm->success('SUCCESS');
+}
+
+# validate subnet
+
+
+
+# RemoveIP after validation
+sub RemoveIP {
+ my $fm = shift;
+ my $q = $fm->{'cgi'};
+ my %conf;
+ my $ip = ($q->param('IP') || '');
+ my $whitelist = ($q->param('Whitelist'))? "true" : '';
+ #check ip
+ my $validator=Data::Validate::IP->new;
+
+ unless ($validator->is_ipv4($ip))
+ {
+ $fm->error('ERROR_STOPPING');
+ return undef;
+ }
+ $ip = $validator->is_ipv4($ip);
+ # validate and untaint jail
+ my $jail = ($q->param('jail') || '');
+ # could be [a-zA-Z0-9_\-]
+ $jail = $jail =~ /([a-zA-Z0-9_\-]+)/ ? $1 : undef;
+ $fm->error('ERROR_UPDATING') unless $jail;
+ return undef unless $jail;
+ unless ( system( "/usr/bin/fail2ban-client set $jail unbanip $ip ".' >/dev/null 2>&1' ) == 0 )
+ {
+ $fm->error('ERROR_UPDATING');
+ return undef;
+ }
+ if ($whitelist ne "" ) {
+ # add $ip to whitelist for the current $jail
+ warn "/sbin/e-smith/db configuration setprop fail2ban IgnoreIP `/sbin/e-smith/db configuration getprop fail2ban IgnoreIP`,$ip/32";
+ unless ( system( "/sbin/e-smith/db configuration setprop fail2ban IgnoreIP `/sbin/e-smith/db configuration getprop fail2ban IgnoreIP`,$ip/32 ".' >/dev/null 2>&1' ) == 0
+ && system( "/usr/bin/fail2ban-client reload ".' >/dev/null 2>&1' ) == 0
+ )
+ {
+ $fm->error('ERROR_UPDATING_WHITE');
+ return undef;
+ }
+
+ $fm->success($fm->localise('SUCCESS_IP_WHITE').": $ip",'First');
+ }
+ else
+ {
+ $fm->success($fm->localise('SUCCESS_IP').": $ip",'First');
+ }
+}
+
+sub back {
+ my $fm = shift;
+ my $q = $fm->{'cgi'};
+ print "