| 318 |
richard |
1 |
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
|
|
|
2 |
<HTML><!-- written by Rexy -->
|
|
|
3 |
<HEAD>
|
|
|
4 |
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
|
5 |
<TITLE>ALCASAR DNS filtering</TITLE>
|
|
|
6 |
<link rel="stylesheet" href="/css/style.css" type="text/css">
|
|
|
7 |
</HEAD>
|
|
|
8 |
<body>
|
|
|
9 |
<?
|
| 449 |
richard |
10 |
function form_filter ($form_content)
|
|
|
11 |
{
|
|
|
12 |
// réencodage iso + format unix + rc fin de ligne (ouf...)
|
|
|
13 |
$list = str_replace("\r\n", "\n", utf8_decode($form_content));
|
|
|
14 |
if (strlen($list) != 0){
|
|
|
15 |
if ($list[strlen($list)-1] != "\n") { $list[strlen($list)]="\n";} ;} ;
|
|
|
16 |
return $list;
|
|
|
17 |
}
|
| 1339 |
richard |
18 |
function form_filter_ip ($form_content)
|
|
|
19 |
{
|
|
|
20 |
$list = form_filter($form_content);
|
|
|
21 |
$list = preg_replace("/(.*)\n/", "add blacklist_ip_blocked $1\n", $list);
|
|
|
22 |
return $list;
|
|
|
23 |
}
|
| 318 |
richard |
24 |
# Choice of language
|
|
|
25 |
$Language = 'en';
|
|
|
26 |
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
|
|
|
27 |
$Langue = explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
|
|
|
28 |
$Language = strtolower(substr(chop($Langue[0]),0,2)); }
|
|
|
29 |
if($Language == 'fr'){
|
| 1041 |
richard |
30 |
$l_title1="Filtrage de noms de domaine et d'URL";
|
| 318 |
richard |
31 |
$l_dnsfilter_on="Le filtrage de noms de domaine et d'URL est actuellement activé";
|
|
|
32 |
$l_dnsfilter_off="Le filtrage de noms de domaine et d'URL est actuellement désactivé";
|
|
|
33 |
$l_switch_filtering_on="Activer le filtrage";
|
|
|
34 |
$l_switch_filtering_off="Désactiver le filtrage";
|
| 1041 |
richard |
35 |
$l_bl="Liste noire";
|
|
|
36 |
$l_wl="Liste blanche";
|
|
|
37 |
$l_list_version="Version de la liste : ";
|
|
|
38 |
$l_bl_categories="Sélectionnez les catégories à filtrer";
|
|
|
39 |
$l_wl_categories="Sélectionnez les catégories à autoriser";
|
| 878 |
richard |
40 |
$l_download_bl="Télécharger la dernière version";
|
|
|
41 |
$l_fingerprint="L'empreinte numérique du fichier téléchargé est : ";
|
|
|
42 |
$l_fingerprint2="Vérifiez-là en suivant ce lien (ligne 'blacklists.tar.gz') : ";
|
| 885 |
richard |
43 |
$l_activate_bl="Activer la nouvelle version";
|
|
|
44 |
$l_reject_bl="Rejeter";
|
| 878 |
richard |
45 |
$l_warning="Temps estimé : une minute.";
|
|
|
46 |
$l_specific_filtering="Filtrage special";
|
| 318 |
richard |
47 |
$l_forbidden_dns="Noms de domaine filtrés";
|
| 441 |
franck |
48 |
$l_forbidden_dns_explain="Entrez un nom de domaine par ligne (exemple : .domaine.org)";
|
| 1041 |
richard |
49 |
$l_allowed_dns="Noms de domaine autorisés";
|
| 441 |
franck |
50 |
$l_one_dns="Entrez un nom de domaine par ligne (exemple : .domaine.org)";
|
| 1339 |
richard |
51 |
$l_maj_rehabilitated="Noms de domaine ou IP réhabilités";
|
| 318 |
richard |
52 |
$l_rehabilitated_dns="Noms de domaine réhabilités";
|
| 878 |
richard |
53 |
$l_rehabilitated_dns_explain="Entrez ici des noms de domaine bloqués par la liste noire <BR> que vous souhaitez réhabiliter.";
|
| 1339 |
richard |
54 |
$l_add_to_bl="Noms de domaine ou IP ajoutés à la liste noire";
|
|
|
55 |
$l_add_to_wl="Noms de domaine ou IP ajoutés à la liste blanche";
|
|
|
56 |
$l_forbidden_ip="IP filtrés";
|
|
|
57 |
$l_forbidden_ip_explain="Entrez une IP par ligne (exemple : 123.123.123.123)<br/>ou une ADRESSE RESEAU (exemple : 123.123.0.0/16)";
|
|
|
58 |
$l_allowed_ip="IP authorisées";
|
|
|
59 |
$l_rehabilitated_ip="IP réhabilitées";
|
|
|
60 |
$l_rehabilitated_ip_explain="Entrez ici des IP bloquées par la liste noire <BR> que vous souhaitez réhabiliter.";
|
|
|
61 |
$l_one_ip="Entrez une IP par ligne (exemple : 123.123.123.123)";
|
| 318 |
richard |
62 |
$l_record="Enregistrer les modifications";
|
| 1339 |
richard |
63 |
$l_wait="Une fois validées, 10 secondes sont nécessaires pour traiter vos modifications";
|
| 934 |
franck |
64 |
$l_ip_filtering="Filtrer les URLs contenant une adresse IP au lieu d'un nom de domaine (ex: http://25.56.58.59/index.htm)";
|
|
|
65 |
$l_safe_searching="Activer le contrôle scolaire/parental des moteurs de recherche : google, yahoo, bing, metacrawler et Youtube.";
|
| 885 |
richard |
66 |
$l_safe_youtube="Pour Youtube, entrez votre identifiant ici : ";
|
|
|
67 |
$l_youtube_id="(<a href='http://www.youtube.com/education_signup' target='cat_help' onclick=window.open('http://www.youtube.com/education_signup','cat_help','width=800,height=600,toolbar=no,scrollbars=yes,resizable=yes') title='Youtube for school'>lien pour créer un identifiant Youtube (Id)</a>)";
|
| 1332 |
richard |
68 |
$l_error_open_file="Erreur d'ouverture du fichier";
|
| 1339 |
richard |
69 |
$l_ip_file_title="Fichier d'IP";
|
|
|
70 |
$l_file_list="Liste des fichiers IP";
|
|
|
71 |
$l_add_ip_file="Ajouter un fichier d'IP (une IP par ligne)";
|
|
|
72 |
$l_file_name="Nom du fichier";
|
|
|
73 |
$l_file_remove="Supprimer";
|
|
|
74 |
$l_error_upload="Erreur d'envoi du fichier d'ip";
|
|
|
75 |
$l_remove="Supprimer";
|
|
|
76 |
$l_submit="Envoyer";
|
|
|
77 |
$l_nb_ip="Nombre d'IP";
|
| 318 |
richard |
78 |
}
|
|
|
79 |
else {
|
| 1041 |
richard |
80 |
$l_title1="Domain names and URL filtering";
|
| 318 |
richard |
81 |
$l_dnsfilter_on="Actually, the Domain name and URL filter is on";
|
|
|
82 |
$l_dnsfilter_off="Actually, the Domain name and URL filter is off";
|
|
|
83 |
$l_switch_filtering_on="Switch the Filter on";
|
|
|
84 |
$l_switch_filtering_off="Switch the Filter off";
|
| 1041 |
richard |
85 |
$l_bl="BlackList";
|
|
|
86 |
$l_wl="WhiteList";
|
|
|
87 |
$l_list_version="List version : ";
|
|
|
88 |
$l_bl_categories="Select the categories to filter";
|
|
|
89 |
$l_wl_categories="Select the categories to allow";
|
| 878 |
richard |
90 |
$l_download_bl="Download the last version";
|
|
|
91 |
$l_fingerprint="The digital fingerprint of the downloaded blacklist is : ";
|
|
|
92 |
$l_fingerprint2="Verify it with this link (line 'blacklists.tar.gz') : ";
|
| 885 |
richard |
93 |
$l_activate_bl="Activate the new version";
|
|
|
94 |
$l_reject_bl="Reject";
|
| 878 |
richard |
95 |
$l_warning="Estimated time : one minute.";
|
|
|
96 |
$l_specific_filtering="Specific filtering";
|
| 318 |
richard |
97 |
$l_forbidden_dns="Filtered domain names";
|
| 441 |
franck |
98 |
$l_forbidden_dns_explain="Enter one domain name per row (exemple : .domain.org)";
|
| 1041 |
richard |
99 |
$l_allowed_dns="Allowed domain names";
|
| 441 |
franck |
100 |
$l_one_dns="Enter one domain name per row (example : .domain.org)";
|
| 1339 |
richard |
101 |
$l_maj_rehabilitated="Domain names or IP rehabilitated";
|
| 318 |
richard |
102 |
$l_rehabilitated_dns="Rehabilitated domain names";
|
| 878 |
richard |
103 |
$l_rehabilitated_dns_explain="Enter here domain names that are blocked by the blacklist <BR> and you want to rehabilitate.";
|
| 1339 |
richard |
104 |
$l_add_to_bl="Domain names or IP to add to blacklist";
|
|
|
105 |
$l_add_to_wl="Domain names or IP to add to whitelist";
|
|
|
106 |
$l_forbidden_ip="Filtered IP";
|
|
|
107 |
$l_forbidden_ip_explain="Enter one IP per row (example : 123.123.123.123)<br/>or a NETWORK ADDRESS (example : 123.123.0.0/16)";
|
|
|
108 |
$l_allowed_ip="Allowed IP";
|
|
|
109 |
$l_rehabilitated_ip="Rehabilitated IP";
|
|
|
110 |
$l_rehabilitated_ip_explain="Enter here IP that are blocked by the blacklist <BR> and you want to rehabilitate.";
|
|
|
111 |
$l_one_ip="Enter one IP per row (example : 123.123.123.123)";
|
| 318 |
richard |
112 |
$l_record="Save changes";
|
| 1339 |
richard |
113 |
$l_wait="Once validated, 10 seconds is necessary to compute your modifications";
|
| 878 |
richard |
114 |
$l_ip_filtering="Filtering URLs that contain an IP address instead of a domain name (ie: http://25.56.58.59/index.htm)";
|
| 885 |
richard |
115 |
$l_safe_searching="Enabling school/parental control for the search engines google, yahoo, bing, metacrawler and Youtube.";
|
|
|
116 |
$l_safe_youtube="For Youtube, enter your ID here : ";
|
|
|
117 |
$l_youtube_id="(<a href='http://www.youtube.com/education_signup' target='cat_help' onclick=window.open('http://www.youtube.com/education_signup','cat_help','width=800,height=600,toolbar=no,scrollbars=yes,resizable=yes') title='Youtube for school'>link to create a Youtube Id</a>)";
|
| 1339 |
richard |
118 |
$l_error_open_file="Error opening file";
|
|
|
119 |
$l_ip_file_title="IP files";
|
|
|
120 |
$l_file_list="IP files list";
|
|
|
121 |
$l_add_ip_file="Add a file of IP (one IP per line)";
|
|
|
122 |
$l_file_name="Filename";
|
|
|
123 |
$l_file_remove="Remove";
|
|
|
124 |
$l_error_upload="Error during the upload process";
|
|
|
125 |
$l_remove="Delete";
|
|
|
126 |
$l_submit="Submit";
|
|
|
127 |
$l_nb_ip="Number of IP";
|
| 318 |
richard |
128 |
}
|
| 1041 |
richard |
129 |
$dir_etc="/usr/local/etc/";
|
|
|
130 |
$dir_dg="/etc/dansguardian/lists/";
|
| 1339 |
richard |
131 |
$dir_bl_ip="/usr/local/share/iptables-bl/";
|
| 1041 |
richard |
132 |
$bl_categories=$dir_etc."alcasar-bl-categories";
|
|
|
133 |
$bl_categories_enabled=$dir_etc."alcasar-bl-categories-enabled";
|
|
|
134 |
$wl_categories=$dir_etc."alcasar-wl-categories";
|
|
|
135 |
$wl_categories_enabled=$dir_etc."alcasar-wl-categories-enabled";
|
|
|
136 |
$conf_file=$dir_etc."alcasar.conf";
|
|
|
137 |
$dir_blacklist=$dir_dg."blacklist/";
|
|
|
138 |
$urlregex_file=$dir_dg."urlregexplist";
|
|
|
139 |
$bannedsite_file=$dir_dg."bannedsitelist";
|
| 885 |
richard |
140 |
$dir_tmp="/tmp/blacklists";
|
| 1339 |
richard |
141 |
$upload_dir = "/usr/local/share/iptables-bl-enabled/";
|
| 885 |
richard |
142 |
# default values
|
|
|
143 |
if (is_file ($conf_file))
|
|
|
144 |
{
|
|
|
145 |
$tab=file($conf_file);
|
|
|
146 |
if ($tab)
|
|
|
147 |
{
|
|
|
148 |
foreach ($tab as $line)
|
|
|
149 |
{
|
|
|
150 |
$field=explode("=", $line);
|
|
|
151 |
if ($field[0] == "DNS_FILTERING") {$DNS_FILTERING=trim($field[1]);}
|
|
|
152 |
if ($field[0] == "YOUTUBE_ID") {$YOUTUBE_ID=trim($field[1]);}
|
|
|
153 |
}
|
|
|
154 |
}
|
|
|
155 |
}
|
|
|
156 |
else { echo "$l_error_open_file $conf_file";}
|
| 318 |
richard |
157 |
if (isset($_POST['choix'])){ $choix=$_POST['choix']; } else { $choix=""; }
|
|
|
158 |
switch ($choix)
|
|
|
159 |
{
|
|
|
160 |
case 'BL_On' :
|
| 389 |
franck |
161 |
exec ("sudo /usr/local/sbin/alcasar-bl.sh --on");
|
| 1031 |
richard |
162 |
$DNS_FILTERING="on";
|
| 318 |
richard |
163 |
break;
|
|
|
164 |
case 'BL_Off' :
|
| 389 |
franck |
165 |
exec ("sudo /usr/local/sbin/alcasar-bl.sh --off");
|
| 1031 |
richard |
166 |
$DNS_FILTERING="off";
|
| 318 |
richard |
167 |
break;
|
| 1041 |
richard |
168 |
case 'Download_list' :
|
| 389 |
franck |
169 |
exec ("sudo /usr/local/sbin/alcasar-bl.sh --download");
|
| 878 |
richard |
170 |
break;
|
| 1041 |
richard |
171 |
case 'Active_list' :
|
| 878 |
richard |
172 |
exec ("sudo /usr/local/sbin/alcasar-bl.sh --adapt");
|
| 389 |
franck |
173 |
exec ("sudo /usr/local/sbin/alcasar-bl.sh --reload");
|
| 318 |
richard |
174 |
break;
|
| 1041 |
richard |
175 |
case 'Reject_list' :
|
| 885 |
richard |
176 |
unlink ("$dir_tmp/blacklists.tar.gz"); unlink ("$dir_tmp/md5sum");
|
|
|
177 |
break;
|
| 1041 |
richard |
178 |
case 'MAJ_cat_bl' :
|
| 1332 |
richard |
179 |
$tab=file($bl_categories_enabled);
|
| 318 |
richard |
180 |
if ($tab)
|
|
|
181 |
{
|
|
|
182 |
$pointeur=fopen($bl_categories_enabled, "w+");
|
|
|
183 |
foreach ($_POST as $key => $value)
|
|
|
184 |
{
|
|
|
185 |
if (strstr($key,'chk-'))
|
|
|
186 |
{
|
|
|
187 |
$line=str_replace('chk-','',$key)."\n";
|
|
|
188 |
fwrite($pointeur,$line);
|
|
|
189 |
}
|
|
|
190 |
}
|
|
|
191 |
fclose($pointeur);
|
|
|
192 |
}
|
|
|
193 |
else {echo "$l_error_open_file $bl_categories_enabled";}
|
| 1041 |
richard |
194 |
$fichier=fopen($dir_dg."blacklists/ossi/domains","w+");
|
| 449 |
richard |
195 |
fputs($fichier, form_filter($_POST['OSSI_bl_domains']));
|
| 318 |
richard |
196 |
fclose($fichier);
|
|
|
197 |
unset($_POST['OSSI_bl_domains']);
|
| 1041 |
richard |
198 |
$fichier=fopen($dir_dg."exceptionsitelist","w+");
|
|
|
199 |
fputs($fichier, form_filter($_POST['BL_rehabilited_domains']));
|
| 318 |
richard |
200 |
fclose($fichier);
|
| 1041 |
richard |
201 |
unset($_POST['BL_rehabilited_domains']);
|
| 1339 |
richard |
202 |
$fichier=fopen($dir_bl_ip."ossi","w+");
|
|
|
203 |
fputs($fichier, form_filter_ip($_POST['OSSI_bl_ip']));
|
| 318 |
richard |
204 |
fclose($fichier);
|
| 1339 |
richard |
205 |
unset($_POST['OSSI_bl_ip']);
|
|
|
206 |
$fichier=fopen($dir_dg."exceptioniplist","w+");
|
|
|
207 |
fputs($fichier, form_filter($_POST['BL_rehabilited_ip']));
|
| 1041 |
richard |
208 |
fclose($fichier);
|
| 1339 |
richard |
209 |
unset($_POST['BL_rehabilited_ip']);
|
| 1041 |
richard |
210 |
exec ("sudo /usr/local/sbin/alcasar-bl.sh --reload");
|
|
|
211 |
break;
|
|
|
212 |
case 'MAJ_cat_wl' :
|
|
|
213 |
$tab=file($wl_categories_enabled);
|
|
|
214 |
if ($tab)
|
|
|
215 |
{
|
|
|
216 |
$pointeur=fopen($wl_categories_enabled, "w+");
|
|
|
217 |
foreach ($_POST as $key => $value)
|
|
|
218 |
{
|
|
|
219 |
if (strstr($key,'chk-'))
|
|
|
220 |
{
|
|
|
221 |
$line=str_replace('chk-','',$key)."\n";
|
|
|
222 |
fwrite($pointeur,$line);
|
|
|
223 |
}
|
|
|
224 |
}
|
|
|
225 |
fclose($pointeur);
|
|
|
226 |
}
|
|
|
227 |
else {echo "$l_error_open_file $wl_categories_enabled";}
|
|
|
228 |
$fichier=fopen($dir_dg."blacklists/ossi/domains_wl","w+");
|
|
|
229 |
fputs($fichier, form_filter($_POST['OSSI_wl_domains']));
|
|
|
230 |
fclose($fichier);
|
|
|
231 |
unset($_POST['OSSI_wl_domains']);
|
|
|
232 |
$fichier=fopen($dir_dg."blacklists/ossi/urls_wl","w+");
|
| 449 |
richard |
233 |
fputs($fichier, form_filter($_POST['OSSI_wl_urls']));
|
| 318 |
richard |
234 |
fclose($fichier);
|
|
|
235 |
unset($_POST['OSSI_wl_urls']);
|
| 1042 |
richard |
236 |
exec ("sudo /usr/local/sbin/alcasar-bl.sh --reload");
|
| 318 |
richard |
237 |
break;
|
| 878 |
richard |
238 |
case 'Specific_filtering' :
|
| 882 |
richard |
239 |
$pureip="-pureip_off"; $safesearch="-safesearch_off"; ;
|
|
|
240 |
foreach ($_POST as $key => $value)
|
|
|
241 |
{
|
|
|
242 |
if (strstr($key,'chk-ip')) $pureip="-pureip_on";
|
|
|
243 |
if (strstr($key,'chk-safesearch')) $safesearch="-safesearch_on";
|
|
|
244 |
}
|
| 885 |
richard |
245 |
if ($_POST['Youtube_ID'] == '') { $New_ID="ABCD1234567890abcdef";} // default ID (no action)
|
|
|
246 |
else {$New_ID=$_POST['Youtube_ID'];}
|
|
|
247 |
file_put_contents($conf_file, str_replace("YOUTUBE_ID=$YOUTUBE_ID", "YOUTUBE_ID=$New_ID", file_get_contents($conf_file)));
|
|
|
248 |
$YOUTUBE_ID=$New_ID;
|
|
|
249 |
exec ("sudo /usr/local/sbin/alcasar-url_filter.sh $safesearch $pureip");
|
| 1339 |
richard |
250 |
break;
|
|
|
251 |
case 'MAJ_ip_file_delete' :
|
|
|
252 |
foreach($_POST as $fichier => $value)
|
|
|
253 |
{
|
|
|
254 |
if($fichier != "choix")
|
|
|
255 |
{
|
|
|
256 |
exec("rm -rf $upload_dir$fichier");
|
|
|
257 |
}
|
|
|
258 |
}
|
|
|
259 |
exec ("sudo /usr/local/bin/alcasar-iptables.sh");
|
|
|
260 |
break;
|
|
|
261 |
case 'MAJ_ip_file_upload' :
|
|
|
262 |
$nom = basename($_FILES['fichier_ip']['name']);
|
|
|
263 |
# Si un fichier a été choisi
|
|
|
264 |
if(!empty($nom))
|
|
|
265 |
{
|
|
|
266 |
# On l'upload
|
|
|
267 |
if(move_uploaded_file($_FILES['fichier_ip']['tmp_name'], $upload_dir."ossi-".$nom))
|
|
|
268 |
{
|
|
|
269 |
exec("sed -i \"s/^/add blacklist_ip_blocked /g\" $upload_dir\ossi-$nom"); # On crée la sauvegarde du set
|
|
|
270 |
}
|
|
|
271 |
else
|
|
|
272 |
{
|
|
|
273 |
echo $l_error_upload;
|
|
|
274 |
}
|
|
|
275 |
}
|
|
|
276 |
exec ("sudo /usr/local/bin/alcasar-iptables.sh");
|
|
|
277 |
break;
|
| 318 |
richard |
278 |
}
|
|
|
279 |
?>
|
|
|
280 |
<TABLE width="100%" border=0 cellspacing=0 cellpadding=0>
|
|
|
281 |
<tr><th><?php echo "$l_title1"; ?></th></tr>
|
|
|
282 |
<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width=1 height=2></td></tr>
|
|
|
283 |
</TABLE>
|
|
|
284 |
<TABLE width="100%" border=1 cellspacing=0 cellpadding=0>
|
|
|
285 |
<tr><td valign="middle" align="left">
|
|
|
286 |
<?php
|
| 612 |
richard |
287 |
if ($DNS_FILTERING == "on")
|
| 318 |
richard |
288 |
{
|
|
|
289 |
echo "<CENTER><H3>$l_dnsfilter_on</H3></CENTER>";
|
|
|
290 |
echo "<FORM action='$_SERVER[PHP_SELF]' method=POST>";
|
|
|
291 |
echo "<input type=hidden name='choix' value=\"BL_Off\">";
|
|
|
292 |
echo "<input type=submit value=\"$l_switch_filtering_off\">";
|
|
|
293 |
}
|
|
|
294 |
else
|
|
|
295 |
{
|
|
|
296 |
echo "<CENTER><H3>$l_dnsfilter_off</H3></CENTER>";
|
|
|
297 |
echo "<FORM action='$_SERVER[PHP_SELF]' method=POST>";
|
|
|
298 |
echo "<input type=hidden name='choix' value=\"BL_On\">";
|
|
|
299 |
echo "<input type=submit value=\"$l_switch_filtering_on\">";
|
|
|
300 |
}
|
|
|
301 |
echo "</FORM>";
|
|
|
302 |
echo "</td></tr>";
|
|
|
303 |
echo "</TABLE>";
|
| 1015 |
richard |
304 |
if ($DNS_FILTERING == "on") require ('bl_filter2.php');
|
| 318 |
richard |
305 |
?>
|
|
|
306 |
</BODY>
|
|
|
307 |
</HTML>
|