#!/usr/bin/perl
#
#
###############################################################################
# #
# IPFire.org - A linux based firewall #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation, either version 3 of the License, or #
# (at your option) any later version. #
# #
# This program is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with this program. If not, see . #
# #
###############################################################################
#
#
#
# This code is based on the dshield section of the Logsend addon for IPCop
# and modified to run on IPFire.
#
# New code has been added to allow the user to modify the time when
# reports are sent to Dshield and now uses IPFire's dragonfly mail agent
# to sent the report instead of the original sendEmail.
# Rob Brewer 29 July 2021
#
# iptables.pl written by dshield.org
#
#
require '/var/ipfire/general-functions.pl';
require '/var/ipfire/lang.pl';
require '/var/ipfire/header.pl';
use warnings;
my %dshieldsettings;
&Header::showhttpheaders();
$dshieldsettings{'DSHIELDRECIPIENT'} = '';
$dshieldsettings{'DSHIELDENABLE'} = 'off';
$dshieldsettings{'DSHIELDSENDER'} = '';
$dshieldsettings{'USERID'} = '0';
$dshieldsettings{'TIMEZONE'} = 'GMT';
$dshieldsettings{'INTERVAL'} = '0';
&Header::getcgihash(\%dshieldsettings);
if ($dshieldsettings{'ACTION'} eq $Lang::tr{'save'})
{
{
&General::writehash("${General::swroot}/dshield/settings", \%dshieldsettings);
}
{
# Check for DShield Sender name
if ($dshieldsettings{'DSHIELDSENDER'} eq '')
{
$errormessage = $Lang::tr{'dshieldsender blank'};
}
# Check for DShield Recipient name
if ($dshieldsettings{'DSHIELDRECIPIENT'} eq '')
{
$errormessage = $Lang::tr{'dshieldrecipient blank'};
}
}
if ($dshieldsettings{'DSHIELDENABLE'} eq 'on')
{
# Write Dshield.mail file
open(FILE, ">/${General::swroot}/dshield/dshield.mail") or die "Unable to write dshield.mail file";
flock(FILE, 2);
print FILE <&2; exit 1; }
function mail_input {
echo -ne "From: <$dshieldsettings{'DSHIELDSENDER'}>\\r\\n"
echo -ne "To: <\$recipient>\\r\\n"
echo -ne "Subject: FORMAT IPTABLES USERID $dshieldsettings{'USERID'} TZ $dshieldsettings{'TIMEZONE'}\\r\\n"
echo -ne "Message-Id: <\$messageid>\\r\\n"
echo -ne "Date: \$now\\r\\n"
echo -ne "\\r\\n"
echo -ne "\$email\\r\\n"
echo -ne ".\\r\\n"
}
mail_input | /usr/sbin/sendmail \$recipient
cat /var/tmp/dshield.report >> /var/log/dshield/report.log && rm /var/tmp/dshield.report
fi
else
exit 0
fi
EOF
;
close FILE;
# Write Dshield.conf Enabled file
open(FILE, ">/${General::swroot}/dshield/dshield.conf") or die "Unable to write dshield.conf file";
flock(FILE, 2);
print FILE < /var/tmp/dshield.preprocess && \\
# Runs the Dshield script and creates the report daily
#
/var/ipfire/dshield/iptables.pl -config=/var/ipfire/dshield/dshield.cnf && \\
rm /var/tmp/dshield.preprocess
END
;
close FILE;
# Generate Enabled dshield.cron file
open(FILE, ">/${General::swroot}/dshield/dshield.cron") or die "Unable to write dshield.cron file";
flock(FILE, 2);
print FILE <> \$ORIG
# added for dshield
\$CRONTAB
END
fi
/usr/bin/fcrontab -z
fi
EOF
;
close FILE;
}
if ($dshieldsettings{'DSHIELDENABLE'} eq 'off')
{
# write Disabled dshield.cron file
open(FILE, ">/${General::swroot}/dshield/dshield.cron") or die "Unable to write dshield.cron file";
flock(FILE, 2);print FILE </${General::swroot}/dshield/dshield.conf") or die "Unable to write dshield file";
flock(FILE, 2);
print FILE <$errormessage \n";
&Header::closebox();
}
print "\n";
&Header::closebigbox();
&Header::closepage();