Projet

Général

Profil

« Précédent | Suivant » 

Révision 8108b423

Ajouté par jim-p il y a plus de 9 ans

Remove javascript alert DNS resolution action from the firewall log view. It was already removed from 2.2, and it's better not to allow a GET action to perform that action.

Voir les différences:

usr/local/www/diag_dns.php
140 140 
	}
141 141 
}
142 142 

  		




  143
  
  
    
if( ($_POST['host']) && ($_POST['dialog_output']) ) {


  		




  144
  
  
    
	display_host_results ($host,$resolved,$dns_speeds);


  		




  145
  
  
    
	exit;


  		




  146
  
  
    
}


  		




  147
  
  
    

  		




  148
  143
  
    
function display_host_results ($address,$hostname,$dns_speeds) {


  		




  149
  144
  
    
	$map_lengths = function($element) { return strlen($element[0]); };


  		




  150
  145
  
    

  		












  

    
      usr/local/www/diag_logs_filter.php
    
  





  361
  361
  
    
			  $dststr = $filterent['dstip'] . get_port_with_service($filterent['dstport'], $proto);


  		




  362
  362
  
    
			  ?>


  		




  363
  363
  
    
			  <td class="listMRr" nowrap="nowrap">


  		




  364
  
  
    
				<a onclick="javascript:getURL('diag_dns.php?host=<?php echo "{$filterent['srcip']}"; ?>&amp;dialog_output=true', outputrule);" title="<?=gettext("Reverse Resolve with DNS");?>">


  		




  365
  
  
    
				<img border="0" src="/themes/<?= $g['theme']; ?>/images/icons/icon_log_d.gif" alt="Icon Reverse Resolve with DNS"/></a>


  		




  366
  364
  
    
				<a href="diag_dns.php?host=<?php echo $filterent['srcip']; ?>" title="<?=gettext("Reverse Resolve with DNS");?>">


  		




  367
  365
  
    
				<img border="0" src="/themes/<?= $g['theme']; ?>/images/icons/icon_log.gif" alt="Icon Reverse Resolve with DNS"/></a>


  		




  368
  366
  
    
				<a href="easyrule.php?<?php echo "action=block&amp;int={$int}&amp;src={$filterent['srcip']}&amp;ipproto={$ipproto}"; ?>" title="<?=gettext("Easy Rule: Add to Block List");?>" onclick="return confirm('<?=gettext("Do you really want to add this BLOCK rule?")."\n\n".gettext("Easy Rule is still experimental.")."\n".gettext("Continue at risk of your own peril.")."\n".gettext("Backups are also nice.")?>')">


  		




  ......




  370
  368
  
    
				<?php echo $srcstr;?>


  		




  371
  369
  
    
			  </td>


  		




  372
  370
  
    
			  <td class="listMRr" nowrap="nowrap">


  		




  373
  
  
    
				<a onclick="javascript:getURL('diag_dns.php?host=<?php echo "{$filterent['dstip']}"; ?>&amp;dialog_output=true', outputrule);" title="<?=gettext("Reverse Resolve with DNS");?>">


  		




  374
  
  
    
				<img border="0" src="/themes/<?= $g['theme']; ?>/images/icons/icon_log_d.gif" alt="Icon Reverse Resolve with DNS" /></a>


  		




  375
  371
  
    
				<a href="diag_dns.php?host=<?php echo $filterent['dstip']; ?>" title="<?=gettext("Reverse Resolve with DNS");?>">


  		




  376
  372
  
    
				<img border="0" src="/themes/<?= $g['theme']; ?>/images/icons/icon_log.gif" alt="Icon Reverse Resolve with DNS" /></a>


  		




  377
  373
  
    
				<a href="easyrule.php?<?php echo "action=pass&amp;int={$int}&amp;proto={$proto}&amp;src={$filterent['srcip']}&amp;dst={$filterent['dstip']}&amp;dstport={$filterent['dstport']}&amp;ipproto={$ipproto}"; ?>" title="<?=gettext("Easy Rule: Pass this traffic");?>" onclick="return confirm('<?=gettext("Do you really want to add this PASS rule?")."\n\n".gettext("Easy Rule is still experimental.")."\n".gettext("Continue at risk of your own peril.")."\n".gettext("Backups are also nice.");?>')">


  		












Formats disponibles :  Unified diff