Changeset 291 for trunk/system/generators/firewall_nat.php

Timestamp:

Oct 2, 2010, 4:24:15 PM (14 years ago)

Author:

george

Message:

• Přidáno: Podpora pro blokování přístupu k internetu. Při blokovaném přístup se přesměrují HTTP požadavky na informační stránku.

File:

• trunk/system/generators/firewall_nat.php (modified) (4 diffs)

trunk/system/generators/firewall_nat.php

@@ -13 +13 @@
 
 $InetInterface = $Config['MainRouter']['InetInterface'];
+$IPCentrala = '10.145.64.8';
 
 $Items = array();
+
+/*
 // NTP redirect
 $Items[] = array('chain' => 'srcnat', 'src-address' => '10.145.66.1', 'protocol' => 'udp', 'src-port' => 123, 'action' => 'src-nat', 'to-addresses' => '10.145.64.1', 'comment' => 'NTP_redirect_4');
@@ -22 +25 @@
 $Items[] = array('chain' => 'srcnat', 'src-address' => '10.145.66.250', 'protocol' => 'udp', 'src-port' => 123, 'action' => 'src-nat', 'to-addresses' => '10.145.64.1', 'comment' => 'NTP_redirect_3');
 $Items[] = array('chain' => 'srcnat', 'src-address' => '10.145.66.253', 'protocol' => 'udp', 'src-port' => 123, 'action' => 'src-nat', 'to-addresses' => '10.145.64.1', 'comment' => 'NTP_redirect_6');
+*/
 
 // Chain for inet interface
@@ -43 +47 @@
     $Name = RouterOSIdent($Name);
     echo($Name.'('.$Interface['LocalIP'].'), ');
-    $Items[] = array('chain' => 'inet-out', 'src-address' => $Interface['LocalIP'], 'action' => 'src-nat',  'to-addresses' => $Interface['ExternalIP'], 'comment' => $Name.'-out');
-    $Items[] = array('chain' => 'inet-in', 'dst-address' => $Interface['ExternalIP'], 'action' => 'dst-nat', 'to-addresses' => $Interface['LocalIP'], 'comment' => $Name.'-in');
+    if($Member['Blocked'] == 0)
+    {
+      $Items[] = array('chain' => 'inet-out', 'src-address' => $Interface['LocalIP'], 'action' => 'src-nat',  'to-addresses' => $Interface['ExternalIP'], 'comment' => $Name.'-out');
+      $Items[] = array('chain' => 'inet-in', 'dst-address' => $Interface['ExternalIP'], 'action' => 'dst-nat', 'to-addresses' => $Interface['LocalIP'], 'comment' => $Name.'-in');
+    } else 
+    {
+      $Items[] = array('chain' => 'dstnat', 'src-address' => $Interface['LocalIP'], 'dst-port' => 80, 'action' => 'dst-nat',  'to-addresses' => $IPCentrala, 'to-ports' => 81, 'comment' => $Name.'-out');
+    }
   }
 
@@ -53 +63 @@
     $Subnet['Name'] = RouterOSIdent('subnet-'.$Subnet['Name']);
     echo($Subnet['Name'].'('.$Subnet['AddressRange'].'/'.$Subnet['Mask'].'), ');
-    $NewAddress = new NetworkAddressIPv4();
-    $NewAddress->AddressFromString($Subnet['ExtAddressRange']);
-    $NewAddress->Prefix = $Subnet['ExtMask'];
-    $Range = $NewAddress->GetRange();
-    if($Subnet['ExtMask'] != 32) $Range = $Range['From']->AddressToString().'-'.$Range['To']->AddressToString();
-      else $Range = $Range['From']->AddressToString();
-    if($Subnet['Mask'] == 32) $Src = $Subnet['AddressRange'];
-      else $Src = $Subnet['AddressRange'].'/'.$Subnet['Mask'];
-    $Items[] = array('chain' => 'inet-out', 'src-address' => $Src, 'action' => 'src-nat', 'to-addresses' => $Range, 'comment' => $Subnet['Name'].'-out');
+    if($Member['Blocked'] == 0)
+    {
+      $NewAddress = new NetworkAddressIPv4();
+      $NewAddress->AddressFromString($Subnet['ExtAddressRange']);
+      $NewAddress->Prefix = $Subnet['ExtMask'];
+      $Range = $NewAddress->GetRange();
+      if($Subnet['ExtMask'] != 32) $Range = $Range['From']->AddressToString().'-'.$Range['To']->AddressToString();
+        else $Range = $Range['From']->AddressToString();
+      if($Subnet['Mask'] == 32) $Src = $Subnet['AddressRange'];
+        else $Src = $Subnet['AddressRange'].'/'.$Subnet['Mask'];
+      $Items[] = array('chain' => 'inet-out', 'src-address' => $Src, 'action' => 'src-nat', 'to-addresses' => $Range, 'comment' => $Subnet['Name'].'-out');
     
-    $NewAddress = new NetworkAddressIPv4();
-    $NewAddress->AddressFromString($Subnet['AddressRange']);
-    $NewAddress->Prefix = $Subnet['Mask'];
-    $Range = $NewAddress->GetRange();
-    if($Subnet['Mask'] != 32) $Range = $Range['From']->AddressToString().'-'.$Range['To']->AddressToString();
-      else $Range = $Range['From']->AddressToString();
-    if($Subnet['ExtMask'] == 32) $Dest = $Subnet['ExtAddressRange'];
-      else $Dest = $Subnet['ExtAddressRange'].'/'.$Subnet['ExtMask'];
-    $Items[] = array('chain' => 'inet-in', 'dst-address' => $Dest, 'action' => 'dst-nat', 'to-addresses' => $Range, 'comment' => $Subnet['Name'].'-in');
+      $NewAddress = new NetworkAddressIPv4();
+      $NewAddress->AddressFromString($Subnet['AddressRange']);
+      $NewAddress->Prefix = $Subnet['Mask'];
+      $Range = $NewAddress->GetRange();
+      if($Subnet['Mask'] != 32) $Range = $Range['From']->AddressToString().'-'.$Range['To']->AddressToString();
+        else $Range = $Range['From']->AddressToString();
+      if($Subnet['ExtMask'] == 32) $Dest = $Subnet['ExtAddressRange'];
+        else $Dest = $Subnet['ExtAddressRange'].'/'.$Subnet['ExtMask'];
+      $Items[] = array('chain' => 'inet-in', 'dst-address' => $Dest, 'action' => 'dst-nat', 'to-addresses' => $Range, 'comment' => $Subnet['Name'].'-in');
+    } else
+    {
+      if($Subnet['Mask'] == 32) $Src = $Subnet['AddressRange'];
+        else $Src = $Subnet['AddressRange'].'/'.$Subnet['Mask'];
+      $Items[] = array('chain' => 'dstnat', 'src-address' => $Src, 'dst-port' => 80, 'action' => 'dst-nat',  'to-addresses' => $IPCentrala, 'to-ports' => 81, 'comment' => $Subnet['Name'].'-out');
+    }
   }
   echo("\n");