Subversion Repositories ALCASAR

Compare Revisions

Ignore whitespace Rev 363 → Rev 362

/scripts/alcasar-watchdog.sh
25,15 → 25,15
case $EXT_DOWN in
"1")
logger "eth0 link down"
/bin/sed -i "s?diagnostic =.*?diagnostic = \"eth0 link down\";?g" $Index_Page
/bin/sed -i "s?diagnostic =.*?diagnostic = eth0 link down?g" $Index_Page
;;
"2")
logger "can't contact the default router"
/bin/sed -i "s?diagnostic =.*?diagnostic = \"can't contact the default router\";?g" $Index_Page
/bin/sed -i "s?diagnostic =.*?diagnostic = can't contact the default router?g" $Index_Page
;;
"3")
logger "can't contact the Internet DNS"
/bin/sed -i "s?diagnostic =.*?diagnostic = \"can't contact the Internet DNS\";?g" $Index_Page
/bin/sed -i "s?diagnostic =.*?diagnostic = can't contact the Internet DNS?g" $Index_Page
;;
esac
net_pb=`cat /etc/dnsmasq.d/alcasar-dnsmasq.conf|grep "address=/#/"|wc -l`
/web/css/style_intercept.css
207,9 → 207,9
}
#acces_controle {
TEXT-ALIGN: center;
FONT-SIZE: 40px;
PADDING-TOP: 25px;
PADDING-BOTTOM: 27px;
FONT-SIZE: 50px;
PADDING-TOP: 20px;
PADDING-BOTTOM: 20px;
MARGIN: 0px;
}
#logo_acces {
252,21 → 252,13
}
#cadre_titre SPAN {
POSITION: absolute;
TOP: 70px;
WIDTH: 510px;
LEFT: 110px;
TOP: 80px;
WIDTH: 540px;
LEFT: 100px;
FONT-SIZE: 14px;
COLOR: red;
TEXT-ALIGN: center;
BORDER: 2px red solid;
PADDING: 2px;
BACKGROUND-COLOR: white;
}
#contenu_acces SPAN {
POSITION: relative;
BOTTOM: -150px;
FONT-FAMILY: "courier new";
}
#box_refuse {
FONT-SIZE: 16px;
MARGIN-LEFT: 130px;
/web/index-access-deny.php
0,0 → 1,109
<html>
<?
$private_ip = "192.168.182.1";
$network_pb = "false";
# on discrimine les accès directs sur Alcasar par rapport aux redirections
if (($_SERVER['HTTP_HOST'] == $private_ip) || ($_SERVER['HTTP_HOST'] == "alcasar")){$direct_access="true";} else {$direct_access="false";}
# Choice of language
$Language = 'en';
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
$Langue = explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
$Language = strtolower(substr(chop($Langue[0]),0,2)); }
if($Language == 'fr'){
$l_access_denied = "ACC&Egrave;S REFUS&Eacute;";
$l_access_controled = "ACC&Egrave;S CONTROL&Eacute;";
$l_access_unavailable = "ACC&Egrave;S INDISPONIBLE";
$l_required_domain = "Site WEB demand&eacute;";
$l_explain_access_deny = "Vous tentez d'acc&eacute;der &agrave; une ressource dont le contenu est r&eacute;put&eacute; contenir des informations inappropri&eacute;es.";
$l_explain_net_pb = "Votre portail d&eacute;tecte que l'acc&egrave;s &agrave; Internet est indisponible.";
$l_contact_access_deny = "Contactez le responsable de la s&eacute;curit&eacute; (OSSI/RSSI) si vous pensez que ce filtrage est abusif.";
$l_contact_net_pb = "Contactez votre responsable informatique ou votre prestataire Internet pour plus d'information";
$l_welcome = "Bienvenue sur la page d'accueil du portail ALCASAR";
$l_acc_access = "<a href=\"https://$private_ip/acc\">Acc&eacute;der au centre de gestion (ALCASAR Control Center)</A>";
$l_acc_access_explain = "Acc&egrave;s aux param&egrave;tres d'administration du portail. Vous devez posséder un compte d'administration.";
$l_logout = "<a href=\"http://$private_ip:3990/logoff\">D&eacute;connexion</A>";
$l_logout_explain = "Vous permet de d&eacute;connectez une session ouverte.";
$l_password_change = "<a href=\"https://$private_ip/pass\">Changer votre mot de passe</A>";
$l_password_change_explain = "Vous redirige sur la pages de changement du mot de passe de votre compte d'acc&egrave;s &agrave; internet.";
$l_back_page = "<a href=\"javascript:history.back()\">Page pr&eacute;c&eacute;dente</a>";
}
else {
$l_access_denied = "ACCESS DENIED";
$l_access_controled = "ACESS CONTROLED";
$l_access_unavailable = "ACCESS UNAVAILABLE";
$l_required_domain = "Required WEB site";
$l_explain_access_deny = "Your portal has just detected that the Internet access is down";
$l_explain_net_pb = "Your portal has just detected that the Internet access is down";
$l_contact_access_deny = "Contact your security system manager if you think this filtering is abusive.";
$l_contact_net_pb = "Contact your network responsive or your Internet provider for more information";
$l_welcome = "Welcome on the captive portal ALCASAR";
$l_acc_access = "<a href=\"https://$private_ip/acc\">go to the ALCASAR Control Center (ACC)</A>";
$l_acc_access_explain = "Access to the ALCASAR Control Center. You must have an administrative login and password";
$l_logout = "<a href=\"http://$private_ip:3990/logoff\">Loging off</A>";
$l_logout_explain = "Logoff if your session is open.";
$l_paasword_change = "<a href=\"https://$private_ip/pass\">Change your password</A>";
$l_password_change_explain = "Redirects you to the password change's page of your internet access account.";
$l_back_page = "<a href=\"javascript:history.back()\">Previous page</a>";
}
?>
<head>
<title>
<? if ($direct_access == "true"){echo "ALCASAR - $l_access_controled";} else {echo "ALCASAR - $l_access_denied";}?>
</title>
<LINK rel=stylesheet type=text/css href="css/style_intercept.css">
</head>
 
<BODY>
<?
if ($direct_access == "true"){
echo "
<DIV id=\"cadre_titre\" class=\"titre_controle\">
<P id=\"acces_controle\" class=\"titre_controle\">$l_access_controled</P>";
}
else {
echo"
<DIV id=\"cadre_titre\" class=\"titre_refus\">
<P id=\"acces_controle\" class=\"titre_refus\">";
if ($network_pb) { echo "$l_access_unavailable </P>" } else { echo "$l_access_denied </P>" }
}
?>
<DIV id="boite_logo">
<IMG src="images/organisme.png">
</DIV>
</DIV>
<DIV id="contenu_acces">
<DIV id="box_url">
<? if ($direct_access != "true"){echo "$l_required_domain : $_SERVER[HTTP_HOST]";}?>
</DIV>
<? if ($direct_access == "true"){
echo "
<DIV id=\"box_bienvenue\">
$l_welcome
</DIV>
<DIV class=\"box_menu_courte\" id=\"box_1\">
<IMG src=\"images/cle.png\">
<SPAN>$l_password_change</SPAN>
<P>$l_password_change_explain</P>
</DIV>
<DIV class=\"box_menu_courte\" id=\"box_2\">
<SPAN>$l_logout</SPAN>
<IMG src=\"images/globe.png\">
<P>$l_logout_explain</P>
</DIV>
<DIV class=\"box_menu_large\" id=\"box_3\">
<SPAN>$l_acc_access</SPAN>
<IMG src=\"images/logo-alcasar.png\">
<P>$l_acc_access_explain</P>
</DIV>";}
else {echo "
<DIV id=\"box_refuse\">
<img src=\"images/interdit.png\">
<P>$l_explain</P>
<P>$l_contact</P>
</DIV>
<DIV id=\"liens_redir\">
<P>$l_back_page</P>
</DIV>";}?>
</DIV>
</BODY>
</html>
/web/index.php
3,11 → 3,6
$private_ip = "192.168.182.1";
$network_pb = False;
$direct_access = False;
$diagnostic = "eth0 link down";
$remote_ip = ($_SERVER['REMOTE_ADDR']);
$tab = array();$user = array();
exec ("sudo /usr/sbin/chilli_query list|grep $remote_ip" , $tab);
$user = explode (" ", $tab[0]);
# on discrimine les accès directs sur Alcasar par rapport aux redirections
if (($_SERVER['HTTP_HOST'] == $private_ip) || ($_SERVER['HTTP_HOST'] == "alcasar")){$direct_access=True;}
# Choice of language
28,7 → 23,7
$l_welcome = "Bienvenue sur la page d'accueil du portail ALCASAR";
$l_acc_access = "<a href=\"https://$private_ip/acc\">Acc&eacute;der au centre de gestion (ALCASAR Control Center)</A>";
$l_logout = "<a href=\"http://$private_ip:3990/logoff\">D&eacute;connexion</A>";
if ($user[4] == "0") {$l_logout_explain = "Aucun usager n'est connect&eacute; sur cet &eacute;quipement";} else {$l_logout_explain = "Ferme la session de l'usager : <b>$user[5]</b>";}
$l_logout_explain = "Vous permet de d&eacute;connectez une session ouverte.";
$l_password_change = "<a href=\"https://$private_ip/pass\">Changer votre mot de passe</A>";
$l_password_change_explain = "Vous redirige sur la pages de changement du mot de passe de votre compte d'acc&egrave;s &agrave; internet.";
$l_back_page = "<a href=\"javascript:history.back()\">Page pr&eacute;c&eacute;dente</a>";
66,10 → 61,7
echo "
<DIV id=\"cadre_titre\" class=\"titre_controle\">
<P id=\"acces_controle\" class=\"titre_controle\">$l_title</P>";
if ($network_pb) {
echo " <SPAN>$l_explain_net_pb</SPAN>";
}
}
else {
echo"
<DIV id=\"cadre_titre\" class=\"titre_refus\">
85,7 → 77,8
<? if (! $direct_access){echo "$l_required_domain : $_SERVER[HTTP_HOST]";}?>
</DIV>
<? if ($direct_access){
echo " <DIV id=\"box_bienvenue\">
echo "
<DIV id=\"box_bienvenue\">
$l_welcome
</DIV>
<DIV class=\"box_menu_courte\" id=\"box_1\">
97,7 → 90,7
<SPAN>$l_logout</SPAN>
<IMG src=\"images/globe.png\">
<P>$l_logout_explain</P>
</DIV>
</DIV>
<DIV class=\"box_menu_large\" id=\"box_3\">
<SPAN>$l_acc_access</SPAN>
<IMG src=\"images/logo-alcasar.png\">
110,12 → 103,7
</DIV>
<DIV id=\"liens_redir\">
<P>$l_back_page</P>
</DIV>";}
if (($network_pb)&&(! $direct_access))
{
echo " <SPAN>Diagnostic : $diagnostic</SPAN>";
}
?>
</DIV>";}?>
</DIV>
</BODY>
</html>
/alcasar.sh
1101,6 → 1101,7
chown -R root:apache /usr/local/etc/{alcasar-dnsfilter-available,alcasar-dnsfilter-enabled}
# On fait pointer le black-hole sur une page interne
$SED "s?^IP_RETOUR=.*?IP_RETOUR=\"$PRIVATE_IP\"?g" $DIR_DEST_SBIN/alcasar-bl.sh
ln -sf $DIR_WEB/index-access-deny.php $DIR_WEB/index.php
# On récupère la dernière version de la BL Toulouse
$DIR_DEST_SBIN/alcasar-bl.sh -download
}