2 LuCI - Lua Configuration Interface
4 Copyright 2008 Steven Barth <steven@midlink.org>
5 Copyright 2010 Jo-Philipp Wich <xm@subsignal.org>
7 Licensed under the Apache License, Version 2.0 (the "License");
8 you may not use this file except in compliance with the License.
9 You may obtain a copy of the License at
11 http://www.apache.org/licenses/LICENSE-2.0
16 local sys = require "luci.sys"
17 local dsp = require "luci.dispatcher"
21 m = Map("firewall", translate("Traffic Redirection"),
22 translate("Traffic redirection allows you to change the " ..
23 "destination address of forwarded packets."))
25 m.redirect = dsp.build_url("admin", "network", "firewall")
27 if not m.uci:get(arg[1]) == "redirect" then
28 luci.http.redirect(m.redirect)
32 local has_v2 = nixio.fs.access("/lib/firewall/fw.sh")
35 m.uci:foreach("firewall", "zone",
37 local n = s.network or s.name
40 for i in n:gmatch("%S+") do
49 s = m:section(NamedSection, arg[1], "redirect", "")
53 s:tab("general", translate("General Settings"))
54 s:tab("advanced", translate("Advanced Settings"))
56 name = s:taboption("general", Value, "_name", translate("Name"))
60 src = s:taboption("general", Value, "src", translate("Source zone"))
63 src.template = "cbi/firewall_zonelist"
65 proto = s:taboption("general", Value, "proto", translate("Protocol"))
67 proto:value("tcpudp", "TCP+UDP")
68 proto:value("tcp", "TCP")
69 proto:value("udp", "UDP")
71 dport = s:taboption("general", Value, "src_dport", translate("External port"),
72 translate("Match incoming traffic directed at the given " ..
73 "destination port or port range on this host"))
74 dport.datatype = "portrange"
75 dport:depends("proto", "tcp")
76 dport:depends("proto", "udp")
77 dport:depends("proto", "tcpudp")
79 to = s:taboption("general", Value, "dest_ip", translate("Internal IP address"),
80 translate("Redirect matched incoming traffic to the specified " ..
82 to.datatype = "ip4addr"
83 for i, dataset in ipairs(luci.sys.net.arptable()) do
84 to:value(dataset["IP address"])
87 toport = s:taboption("general", Value, "dest_port", translate("Internal port (optional)"),
88 translate("Redirect matched incoming traffic to the given port on " ..
90 toport.optional = true
91 toport.placeholder = "0-65535"
92 toport.datatype = "portrange"
93 toport:depends("proto", "tcp")
94 toport:depends("proto", "udp")
95 toport:depends("proto", "tcpudp")
97 target = s:taboption("advanced", ListValue, "target", translate("Redirection type"))
101 dest = s:taboption("advanced", Value, "dest", translate("Destination zone"))
104 dest.template = "cbi/firewall_zonelist"
106 src_dip = s:taboption("advanced", Value, "src_dip",
107 translate("Intended destination address"),
109 "For DNAT, match incoming traffic directed at the given destination "..
110 "ip address. For SNAT rewrite the source address to the given address."
113 src_dip.optional = true
114 src_dip.datatype = "ip4addr"
115 src_dip.placeholder = translate("any")
117 src_mac = s:taboption("advanced", Value, "src_mac", translate("Source MAC address"))
118 src_mac.optional = true
119 src_mac.datatype = "macaddr"
120 src_mac.placeholder = translate("any")
122 src_ip = s:taboption("advanced", Value, "src_ip", translate("Source IP address"))
123 src_ip.optional = true
124 src_ip.datatype = "ip4addr"
125 src_ip.placeholder = translate("any")
127 sport = s:taboption("advanced", Value, "src_port", translate("Source port"),
128 translate("Match incoming traffic originating from the given " ..
129 "source port or port range on the client host"))
130 sport.optional = true
131 sport.datatype = "portrange"
132 sport.placeholder = "0-65536"
133 sport:depends("proto", "tcp")
134 sport:depends("proto", "udp")
135 sport:depends("proto", "tcpudp")
137 reflection = s:taboption("advanced", Flag, "reflection", translate("Enable NAT Loopback"))
138 reflection.rmempty = true
139 reflection:depends({ target = "DNAT", src = wan_zone })
140 reflection.cfgvalue = function(...)
141 return Flag.cfgvalue(...) or "1"