#!/bin/sh

export DATE="16.11.2008";SCRIPT=${0#/rom}
export TITLE="Admin:
Port Forwarding"
. ${SCRIPT%/*}/cgi-bin-pre.sh

cat<<EOF
<H1>Admin:
Port Forwarding</H1>
EOF

if [ "$REQUEST_METHOD" = "POST" ]; then
read QUERY_STRING
fi
if [ -z "$QUERY_STRING" ]; then
ffg_portfw="$(nvram get ffg_portfw)"
else
while [ "${#QUERY_STRING}" != "0" ]; do
name="${QUERY_STRING%%=*}"
QUERY_STRING="${QUERY_STRING#*=}"
value="${QUERY_STRING%%&*}"
if echo "$QUERY_STRING" | grep -q "&" -; then
QUERY_STRING="${QUERY_STRING#*&}"
else
QUERY_STRING=""
fi
case $name in
ffg_portfw_iface)
ffg_portfw_iface="$value"
;;
delIP)
if echo "${QUERY_STRING#*=}" | grep -q IP -; then
while true ; do
QUERY_STRING="${QUERY_STRING#*&}"
if [ "${QUERY_STRING%%=*}" = "IP" ]; then break; fi
done
else
QUERY_STRING=""
fi
;;
delPort)
if echo "${QUERY_STRING#*&}" | grep -q Port -; then
while true ; do
QUERY_STRING="${QUERY_STRING#*&}"
if [ "${QUERY_STRING%%=*}" = "Port" ]; then break; fi
if [ "${QUERY_STRING%%=*}" = "IP" ]; then break; fi
done
else
QUERY_STRING=""
fi
;;
IP)
if [ "${#value}" != "0" ] ; then ffg_portfw=$ffg_portfw" $value:" ; fi
;;
Port)
QUERY_STRING="${QUERY_STRING#*=}"
Range="${QUERY_STRING%%&*}"
QUERY_STRING="${QUERY_STRING#*&}"
name3="${QUERY_STRING%%=*}"
if [ "$name3" = "tcp" ] || [ "$name3" = "udp" ]; then
if [ "${#value}" = "0" ] && [ "${#Range}" = "0" ]; then
QUERY_STRING="delPort=Entferne&Port=&Range=&$QUERY_STRING"
elif [ "${#value}" != "0" ] && [ "${#Range}" != "0" ] ; then
ffg_portfw=$ffg_portfw"$value-$Range/"
elif [ "${#value}" != "0" ] && [ "${#Range}" = "0" ] ; then
ffg_portfw=$ffg_portfw"${value}/"
elif [ "${#value}" = "0" ] && [ "${#Range}" != "0" ] ; then
ffg_portfw=$ffg_portfw"${Range}/"
fi
fi
;;
tcp)
if [ "${QUERY_STRING%%=*}" = "udp" ] ; then
ffg_portfw="$ffg_portfw""tu,"
if echo "$QUERY_STRING" | grep -q "&" -; then
QUERY_STRING="${QUERY_STRING#*&}"
else
QUERY_STRING=""
fi
else
ffg_portfw="$ffg_portfw""t,"
fi
;;
udp)
ffg_portfw="$ffg_portfw""u,"
;;
post_portfw)
post_portfw="1"
;;
post_abort)
post_abort="1"
;;
esac
done
fi
if [ -z "$post_abort" ] && [ -z "$post_portfw" ]; then

cat<<EOF
<FORM ACTION="ffgraz-portfw.html" METHOD="POST">
<TABLE CLASS="shadow0" CELLPADDING="0" CELLSPACING="0"><TR><TD><TABLE CLASS="shadow1" CELLPADDING="0" CELLSPACING="0"><TR><TD><TABLE CLASS="shadow2" CELLPADDING="0" CELLSPACING="0"><TR><TD><TABLE BORDER="0" CLASS="form">
<TR><TD>
Ingress Interface:
</TD>
<TD>
<INPUT CLASS="radio" NAME="ffg_portfw_iface" TYPE="RADIO" VALUE="wifi"$(if [ "$(nvram get ffg_portfw_iface)" = "wifi" ];then echo ' checked="checked"';fi)>WIFI
&nbsp;&nbsp;
<INPUT CLASS="radio" NAME="ffg_portfw_iface" TYPE="RADIO" VALUE="wan"$(if [ "$(nvram get ffg_portfw_iface)" = "wan" ];then echo ' checked="checked"';fi)>WAN
&nbsp;&nbsp;
<INPUT CLASS="radio" NAME="ffg_portfw_iface" TYPE="RADIO" VALUE="public"$(if [ "$(nvram get ffg_portfw_iface)" = "public" ];then echo ' checked="checked"';fi)>Public
</TD>
</TR>
<TR>
<TD COLSPAN="5">
EOF

for FWTARGET in $ffg_portfw; do
DESTIP=${FWTARGET%%:*}
DPORTS=${FWTARGET#*:}

cat<<EOF
</TD>
</TR>
<TR
TITLE="IP-Address to forward Requests to the following ports to">
<TD><INPUT NAME="delIP" TITLE="Remove target address" TYPE="submit" VALUE="Remove"></TD>
<TD>Target-IP-Address:</TD>
<TD COLSPAN="3"><INPUT TYPE="text" NAME="IP" SIZE="15" MAXLENGTH="15" VALUE="$DESTIP">
EOF

while [ ${#DPORTS} != "0" ]; do
PORTPROTO=${DPORTS%%,*}
DPORT=${PORTPROTO%/*}
if echo $DPORT | grep -q - -; then
PORTRANGE=${DPORT#*-}
DPORT=${DPORT%-*}
else
PORTRANGE=""
fi
PROTO=${PORTPROTO#*/}
tcp="" udp=""
case $PROTO in
t)
tcp=' CHECKED="CHECKED"'
;;
u)
udp=' CHECKED="CHECKED"'
;;
tu)
tcp=' CHECKED="CHECKED"'
udp=' CHECKED="CHECKED"'
;;
esac
DPORTS=${DPORTS#*,}

cat<<EOF
</TD>
</TR>
<TR
TITLE="Configure redirected ports.">
<TD><INPUT NAME="delPort" TITLE="Remove Port(range)" TYPE="submit" VALUE="Remove"></TD>
<TD>Port:</TD>
<TD><INPUT TYPE="text" NAME="Port" SIZE="5" MAXLENGTH="5" VALUE="$DPORT"></TD>
<TD>-&nbsp;<INPUT TYPE="text" NAME="Range" SIZE="5" MAXLENGTH="5" VALUE="$PORTRANGE"></TD>
<TD><INPUT TYPE="checkbox" NAME="tcp" $tcp>&nbsp;tcp&nbsp;
<INPUT TYPE="checkbox" NAME="udp" $udp>&nbsp;udp
EOF

done

cat<<EOF
</TD>
</TR>
<TR>
<TD COLSPAN="2"><INPUT NAME="new" TITLE="Create Port(range)" TYPE="submit" VALUE="Create new ports"></TD>
<TD><INPUT TYPE="text" NAME="Port" SIZE="5" MAXLENGTH="5" VALUE=""></TD>
<TD>-&nbsp;<INPUT TYPE="text" NAME="Range" SIZE="5" MAXLENGTH="5" VALUE=""></TD>
<TD><INPUT TYPE="checkbox" NAME="tcp">&nbsp;tcp&nbsp;
<INPUT TYPE="checkbox" NAME="udp">&nbsp;udp
EOF

done

cat<<EOF
</TD>
</TR>
<TR>
<TD>Target-IP-address:</TD>
<TD><INPUT TYPE="text" NAME="IP" SIZE="15" MAXLENGTH="15" VALUE=""></TD>
<TD COLSPAN="3"><INPUT NAME="new" TITLE="Create new target-IP-address" TYPE="submit" VALUE="Create"></TD>
</TR>
<TR>
<TD>&nbsp;</TD>
<TD COLSPAN="4"></TD>
</TR>
<TR>
<TD COLSPAN="5"><INPUT NAME="post_portfw" TITLE="Apply these settings. The settings are applied with the next restart." TYPE="SUBMIT" VALUE="Apply">&nbsp;&nbsp;&nbsp;<INPUT NAME="post_abort" TITLE="Cancel dialog page." TYPE="SUBMIT" VALUE="Cancel"></TD>
</TR>
</TABLE></TD></TR></TABLE></TD></TR></TABLE></TD></TR></TABLE></FORM>
EOF

else
DIRTY=
if [ -n "$post_portfw" ]; then
ffg_portfw="$(echo $ffg_portfw|sed -e 's/^ //;s/ /+/g')"
for V in ffg_portfw; do
eval "C=\$$V"
C=$(unescape $C)
if [ "$C" != "$(nvram get $V)" ]; then
DIRTY=1
nvram set $V="$C"
fi
done
if [ $ffg_portfw_iface != "$(nvram get ffg_portfw_iface)" ]; then
DIRTY=1
nvram set ffg_portfw_iface="$ffg_portfw_iface"
fi
fi
if [ -n "$DIRTY" ]; then
nvram commit>/dev/null 2>&1
# import netparam
. /etc/functions.sh
export NVRAM_wan_ifname
export NVRAM_lan_ifname
export NVRAM_lan_ifnames
eval $(/usr/bin/netparam)
if iptables -t nat -nL ffg_portfw >/dev/null 2>&1; then
# kill old rules
trap - INT QUIT TSTP
set stop
. /etc/local.fw-portfw_ffg
fi
# create new rules
trap - INT QUIT TSTP
set start
. /etc/local.fw-portfw_ffg

cat<<EOF
<TABLE BORDER="0" CLASS="note">
<TR>
<TD>The
changed settings are committed. The settings are active now.</TD>
</TR>
</TABLE>
EOF

else

cat<<EOF
<TABLE BORDER="0" CLASS="note">
<TR>
<TD>No
settings are changed.</TD>
</TR>
</TABLE>
EOF

fi
fi

. ${SCRIPT%/*}/cgi-bin-post.sh