lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-17 01:54:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

wizard.inc: make working rules (#5112)

Browse Source
This commit is contained in:
kulikov-a 2021-07-21 20:13:28 +03:00 committed by GitHub
parent 5028c93393
commit 74ccf1683b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
src/etc/inc/plugins.inc.d/openvpn/wizard.inc
View File

@ -751,22 +751,38 @@ function step12_submitphpaction()
if (isset($pconfig['step11']['ovpnrule'])) {
$rule = array();
$rule['descr'] = sprintf(gettext("OpenVPN %s wizard"), $server['description']);
$rule['descr'] = sprintf(gettext("OpenVPN %s wizard allow client access"), $server['description']);
/* Ensure the rule descr is not too long for pf to handle */
if (strlen($rule['descr']) > 52) {
$rule['descr'] = substr($rule['descr'], 0, 52);
}
$rule['direction'] = "in";
$rule['source']['any'] = true;
$rule['destination']['network'] = $server['interface'] . "ip";
if ($server['interface'] != "any") {
$rule['destination']['network'] = $server['interface'] . "ip";
$rule['interface'] = $server['interface'];
} else {
$rule['destination']['network'] = "(self)";
$rule['floating'] = "yes";
}
$rule['destination']['port'] = $server['local_port'];
$rule['interface'] = $server['interface'];
$rule['protocol'] = strtolower($server['protocol']);
$proto = strtolower($server['protocol']);
if (strpos($proto, '4') !== false) {
$rule['protocol'] = substr($proto, 0, -1);
$rule['ipprotocol'] = "inet";
} elseif (strpos($proto, '6') !== false) {
$rule['protocol'] = substr($proto, 0, -1);
$rule['ipprotocol'] = "inet6";
} else {
$rule['protocol'] = $proto;
$rule['ipprotocol'] = "inet46";
}
$rule['type'] = "pass";
$rule['enabled'] = "on";
$rule['created'] = make_config_revision_entry();
$config['filter']['rule'][] = $rule;
}
if (isset($pconfig['step11']['ovpnallow'])) {
$rule = array();
$rule['descr'] = sprintf(gettext("OpenVPN %s wizard"), $server['description']);