[ Avaa Bypassed ]

#!/usr/bin/perl
# save_bifc.cgi
# Create, save or delete a boot-time interface

require './net-lib.pl';
&ReadParse();
@boot = &boot_interfaces();

if ($in{'delete'} || $in{'unapply'}) {
	# Delete interface
	&error_setup($text{'bifc_err1'});
	$b = $boot[$in{'idx'}];
	&can_iface($b) || &error($text{'ifcs_ecannot_this'});

	if ($in{'unapply'}) {
		# Shut down this interface active (if active)
		&error_setup($text{'bifc_err4'});
		@active = &active_interfaces();
		($act) = grep { $_->{'fullname'} eq $b->{'fullname'} } @active;
		if ($act) {
			if (defined(&unapply_interface)) {
				$err = &unapply_interface($act);
				$err && &error("<pre>$err</pre>");
				}
			else {
				&deactivate_interface($act);
				}
			}

		}
	&delete_interface($b);
	&webmin_log("delete", "bifc", $b->{'fullname'}, $b);
	}
else {
	# Save or create interface
	&error_setup($text{'bifc_err2'});
	if (!$in{'new'}) {
		# Modifying an interface
		$oldb = $boot[$in{'idx'}];
		&can_iface($oldb) || &error($text{'ifcs_ecannot_this'});
		$b = { %$oldb };
		}
	elsif (defined($in{'virtual'})) {
		# creating a virtual interface
		$in{'virtual'} =~ /^\d+$/ ||
			&error($text{'bifc_evirt'});
		$in{'virtual'} >= $min_virtual_number ||
			&error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
		foreach $eb (@boot) {
			if ($eb->{'name'} eq $in{'name'} &&
			    $eb->{'virtual'} eq $in{'virtual'}) {
				&error(&text('bifc_evirtdup',
				       &html_escape("$in{'name'}:$in{'virtual'}")));
				}
			}
		$b->{'name'} = $in{'name'};
		$b->{'virtual'} = $in{'virtual'};
		$b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'};
		&can_create_iface() || &error($text{'ifcs_ecannot'});
		&can_iface($b) || &error($text{'ifcs_ecannot'});
		}
	elsif ($in{'name'} =~ /^([a-z]+\d*(s\d*)?(\.\d+)?):(\d+)$/ ||
	       $in{'name'} =~ /^(en[0-9a-z]+(s\d*)?(\.\d+)?):(\d+)$/) {
		# also creating a virtual interface
		foreach $eb (@boot) {
			if ($eb->{'name'} eq $2 &&
			    $eb->{'virtual'} eq $4) {
				&error(&text('bifc_evirtdup', &html_escape($in{'name'})));
				}
			}
		$4 >= $min_virtual_number ||
			&error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
		$b->{'name'} = $1;
		$b->{'virtual'} = $4;
		$b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'};
		}
	elsif ($in{'bridge'}) {
		# Creating a bridge interface
		$in{'name'} =~ /^\d+$/ || &error($text{'bifc_ebridge'});
		$b->{'name'} = $b->{'fullname'} = "br".$in{'name'};
		$b->{'bridge'} = 1;
		}
	elsif ($in{'bond'}) {
		# Creating a bond interface
		$in{'name'} =~ /^\d+$/ || &error($text{'bifc_ebond'});
		$b->{'name'} = $b->{'fullname'} = "bond".$in{'name'};
		$b->{'bond'} = 1;
		}
	elsif ($in{'name'} =~ /^[a-z]+\d*(s\d*)?(\.\d+)?$/ ||
	       $in{'name'} =~ /^en[0-9a-z]+(s\d*)?(\.\d+)?$/) {
		# creating a real interface
		$b->{'name'} = $in{'name'};
		$b->{'fullname'} = $in{'name'};
		}
	elsif ($in{'name'} eq 'auto') {
		# creating a vlan interface
		$b->{'name'} = $in{'name'};
		$b->{'fullname'} = $in{'name'};
		}
	else {
		&error($text{'bifc_ename'});
		}

	if ($in{'new'}) {
		# Check permissions
		&can_create_iface() || &error($text{'ifcs_ecannot'});
		&can_iface($b) || &error($text{'ifcs_ecannot'});

		# Check for clash
		foreach $eb (@boot) {
			if ($eb->{'fullname'} eq $b->{'fullname'}) {
				&error(&text('bifc_edup', &html_escape($in{'name'})));
				}
			}
		}

	# Check for address clash
	$allow_clash = defined(&allow_interface_clash) ?
			&allow_interface_clash($b, 1) : 1;
	if (!$allow_clash && $in{'mode'} eq 'address' &&
	    ($in{'new'} || $oldb->{'address'} ne $in{'address'})) {
		($clash) = grep { $_->{'address'} eq $in{'address'} &&
				  $_->{'up'} } @boot;
		$clash && &error(&text('aifc_eclash', &html_escape($clash->{'fullname'})));
		}

	# Validate and store inputs
	delete($b->{'dhcp'});
	delete($b->{'bootp'});
	delete($b->{'address'});
	if ($in{'mode'} eq 'dhcp' || $in{'mode'} eq 'bootp') {
		$in{'activate'} && !defined(&apply_interface) &&
			&error($text{'bifc_eapply'});
		$b->{$in{'mode'}}++;
		$auto++;
		}
	elsif ($in{'mode'} eq 'none') {
		delete($b->{'address'});
		}
	else {
		&valid_boot_address($in{'address'}) ||
			&error(&text('bifc_eip', &html_escape($in{'address'})));
		$b->{'address'} = $in{'address'};
		}

	# Set description if possible
	if (defined($in{'desc'})) {
		$b->{'desc'} = $in{'desc'};
		}
	else {
		delete($b->{'desc'});
		}

	if ($in{'mode'} eq 'none') {
		# No netmask needed
		delete($b->{'netmask'});
		}
	elsif ($virtual_netmask && $b->{'virtual'} ne "") {
		# Always use this netmask for virtuals
		$b->{'netmask'} = $virtual_netmask;
		}
	elsif (!$access{'netmask'}) {
		# Use default netmask
		if ($in{'new'}) {
			$b->{'netmask'} = $config{'def_netmask'} ||
					  "255.255.255.0";
			}
		}
	elsif (&can_edit("netmask", $b) && $access{'netmask'}) {
		$auto && !$in{'netmask'} ||
		    &check_netmask($in{'netmask'}, $in{'address'}) ||
			&error(&text('bifc_emask', &html_escape($in{'netmask'})));
		$b->{'netmask'} = $in{'netmask'};
		}

	if ($in{'mode'} eq 'none') {
		# No broadcast needed
		delete($b->{'broadcast'});
		}
	elsif (!$access{'broadcast'} && $in{'new'}) {
		# Work out broadcast if user isn't allowed to set it
		$b->{'broadcast'} = &compute_broadcast(
			$b->{'address'}, $b->{'netmask'});
		}
	elsif ($in{'broadcast_def'}) {
		# If system needs broadcast to be computed, do it here
		if (!&can_broadcast_def()) {
			$b->{'broadcast'} = &compute_broadcast(
				$b->{'address'}, $b->{'netmask'});
			}
		else {
			$b->{'broadcast'} = undef;
			}
		}
	elsif (&can_edit("broadcast", $b)) {
		# Manually entered broadcast
		($auto && !$in{'broadcast'}) ||
			&check_ipaddress($in{'broadcast'}) ||
			&error(&text('bifc_ebroad', &html_escape($in{'broadcast'})));
		$b->{'broadcast'} = $in{'broadcast'};
		}

	if (!$access{'mtu'}) {
		# Use default MTU or leave unchanged
		if ($in{'new'}) {
			$b->{'mtu'} = $config{'def_mtu'};
			}
		}
	elsif (&can_edit("mtu", $b) && $access{'mtu'}) {
		$auto && !$in{'mtu'} ||
			$in{'mtu_def'} ||
			$in{'mtu'} =~ /^\d+$/ ||
			&error(&text('bifc_emtu', &html_escape($in{'mtu'})));
		$b->{'mtu'} = $in{'mtu_def'} ? undef : $in{'mtu'};
		}

	# MAC address
	if (defined($in{'ether'}) && !$in{'ether_def'}) {
		$in{'ether'} =~ /^[A-Fa-f0-9:]+$/ ||
			&error(&text('aifc_ehard', &html_escape($in{'ether'})));
		$b->{'ether'} = $in{'ether'};
		}
	else {
		delete($b->{'ether'});
		}

	# Activate at boot flag
	if ($in{'new'} && !$access{'up'}) {
		# If cannot edit up flag, assume enabled for new interfaces
		$b->{'up'} = 1;
		}
	elsif (&can_edit("up", $b) && $access{'up'}) {
		# If can edit, respect the user
		$b->{'up'} = $in{'up'};
		}

	# Save IPv6 addresses
	if (&supports_address6($b)) {
		delete($b->{'address6'});
		delete($b->{'netmask6'});
		delete($b->{'auto6'});
		if ($in{'mode6'} eq 'auto') {
			# Dynamic configuration
			$b->{'auto6'} = 1;
			}
		elsif ($in{'mode6'} eq 'address') {
			# Static addresses
			@address6 = ( );
			@netmask6 = ( );
			%clash6 = ( );
			foreach $eb (@boot) {
				if ($eb->{'fullname'} ne $b->{'fullname'}) {
					foreach $a6 (@{$eb->{'address6'}}) {
						$clash6{$a6} = $eb;
						}
					}
				}
			for($i=0; defined($in{'address6_'.$i}); $i++) {
				next if ($in{'address6_'.$i} !~ /\S/);
				&check_ip6address($in{'address6_'.$i}) ||
					&error(&text('aifc_eaddress6', $i+1));
				$c = $clash6{$in{'address6_'.$i}};
				$c && &error(&text('aifc_eclash6', $i+1, &html_escape($c->{'name'})));
				push(@address6, $in{'address6_'.$i});
				$in{'netmask6_'.$i} =~ /^\d+$/ &&
				    $in{'netmask6_'.$i} > 0 &&
				    $in{'netmask6_'.$i} <= 128 ||
					&error(&text('aifc_enetmask6', $i+1));
				push(@netmask6, $in{'netmask6_'.$i});
				$clash6{$in{'address6_'.$i}} = $b;
				}
			@address6 || &error($text{'aifc_eaddresses6'});
			delete($b->{'auto6'});
			$b->{'address6'} = \@address6;
			$b->{'netmask6'} = \@netmask6;
			}
		}

	# Save bonding settings
	if ($in{'bond'}) {
		$b->{'bond'} = 1;
		$b->{'partner'} = $in{'partner'};
		$b->{'mode'} = $in{'bondmode'};
		$b->{'primary'} = $in{'primary'};
		$b->{'miimon'} = $in{'miimon'};
		$b->{'updelay'} = $in{'updelay'};
		$b->{'downdelay'} = $in{'downdelay'};
		}
	else {
		delete($b->{'bond'});
		}
	
	# Save VLAN settings
	if ($in{'vlan'}) {
		$b->{'vlan'} = 1;
		if ($in{'physical'}) {
			$b->{'physical'} = $in{'physical'};
			}
		if ($in{'vlanid'}) {
			$b->{'vlanid'} = $in{'vlanid'};
			}
		}
	else {
		delete($b->{'vlan'});
		}

	# Save bridge settings
	if ($b->{'bridge'}) {
		if ($in{'bridgeto'}) {
			&iface_type($in{'bridgeto'}) =~ /Ethernet|Bonded/ ||
				&error($text{'bifc_ebridgeto'});
			($bt) = grep { $_->{'fullname'} eq $in{'bridgeto'} }
				     @boot;
			$bt || &error($text{'bifc_ebridgeto'});
			}
		($bt->{'address'} || $bt->{'dhcp'} || $bt->{'bootp'}) &&
			&error($text{'bifc_ebridgeto2'});
		$b->{'bridgeto'} = $in{'bridgeto'};
		$b->{'bridgestp'} = $in{'bridgestp'};
		$b->{'bridgefd'} = $in{'bridgefd'};
		$b->{'bridgewait'} = $in{'bridgewait'};
		}
	else {
		delete($b->{'bridgeto'});
		delete($b->{'bridgestp'});
		delete($b->{'bridgefd'});
		delete($b->{'bridgewait'});
		}

	# Save the interface with its final name
	if ($b->{'vlan'}) {
		$b->{'fullname'} = $in{'physical'}.".".$in{'vlanid'};
		}
	else {
		$b->{'fullname'} = $b->{'name'}.
			( $b->{'virtual'} eq '' ? '' : ':'.$b->{'virtual'});
		}
	&save_interface($b, \@boot);

	# If switching from DHCP to static and there is no default gateway
	# set, copy the active one
	if ($oldb{'dhcp'} && !$b{'dhcp'} && $b{'virtual'} eq '' &&
	    defined(&get_default_gateway) && defined(&list_routes)) {
		my $oldgw = &get_default_gateway();
		my ($dr) = grep { $_->{'dest'} eq '0.0.0.0' } &list_routes();
		if (!$oldgw && $dr) {
			&set_default_gateway($dr->{'gateway'}, $b{'name'});
			}
		}

	if ($in{'activate'}) {
		# Make this interface active (if possible)
		&error_setup($text{'bifc_err3'});
		$b->{'up'}++;
		$b->{'address'} = &to_ipaddress($b->{'address'});
		if (defined(&apply_interface)) {
			$err = &apply_interface($b);
			$err && &error("<pre>$err</pre>");
			}
		else {
			if ($in{'bond'}) {
				if (($gconfig{'os_type'} eq 'debian-linux') &&
				    ($gconfig{'os_version'} >= 5)) {}
				else {&load_module($b);}
				}
			&activate_interface($b);
			}
		}
	&webmin_log($in{'new'} ? 'create' : 'modify',
		    "bifc", $b->{'fullname'}, $b);
	}
&redirect("list_ifcs.cgi?mode=boot");