Default page

Edit File: firewall.js

var firewall = {
	init: function () {
		this.event();

var name = bt.get_cookie('firewall_type');
		$('[data-name="'+ (name || 'safety') +'"]').trigger('click');
	},
	event: function () {
		// 切换主菜单
		$('#cutTab .tabs-item').click(function () {
			var index = $(this).index();
			var name = $(this).data('name');
			var $cont = $('.firewall-tab-view').children('.tab-con').eq(index);
			bt.set_cookie('firewall_type',name)

$(this).addClass('active').siblings().removeClass('active');
			$('.state-content').hide().children().hide();
			$cont.addClass('show w-full').removeClass('hide').siblings().removeClass('show w-full').addClass('hide');

switch (name) {
        case 'safety':
          safety.init();
          break;
				case 'ssh':
          ssh.init();
          break;
				case 'intrusion':
					intrusion.init();
					break;
				case 'system':
					system.init();
					break;
				case 'logAudit':
					logAudit.init();
					break;
				case 'logs':
					logs.init();
					break;
      }
		});

// 切换子菜单
		$('.tab-nav-border').on('click', 'span', function () {
			var index = $(this).index();
			var $cont = $(this).parent().nextAll('.tab-nav-con').children('.tab-block').eq(index);

$(this).addClass('on').siblings('.on').removeClass('on');
			$cont.addClass('on').siblings('.on').removeClass('on');
		});

safety.event();
		ssh.event();
		intrusion.event();
		system.event();
		logAudit.event();
		logs.event();
	},

/**
   * @description 渲染日志分页
   * @param pages
   * @param p
   * @param num
   * @returns {string}
   */
  renderLogsPages:function(pages,p,num){
    return (num >= pages?'<a class="nextPage" data-page="1">首页</a>':'') + (p !== 1?'<a class="nextPage" data-page="'+ (p-1) +'">上一页</a>':'') + (pages <= num?'<a class="nextPage" data-page="'+ (p+1) +'">下一页</a>':'')+'<span class="Pcount">Page '+ p +' </span>';
  }
}

// 系统防火墙
var safety = {
	init: function () {
		$('.state-content').show();
		$('.state-content .safety-header').show();

this.getFirewallInfo();
		
		bt.firewall.get_logs_size(function(rdata){
			$("#logSize").text(rdata);
		});

$('#safety .tab-nav-border span').eq(0).trigger('click');
	},
	event: function () {
		var that = this;

// 切换系统防火墙菜单事件
		$('#safety').unbind('click').on('click', '.tab-nav-border span', function () {
			var index = $(this).index();
			that.cutFirewallTab(index);
		});

// 防火墙开关
		$('#isFirewall').unbind('click').click(function(){
			var _that = $(this)
			var status = !_that.prop("checked")
			bt.confirm({
				title: (status ? lan.security.firewall.switchTit3 : lan.security.firewall.switchTit2) + lan.security.firewall.switchTit1,
				msg: (status ? lan.security.firewall.switchMsg1 : lan.security.firewall.switchMsg2),
				cancel: function () {
					_that.prop("checked", status);
				}
			},function () {
				bt_tools.send({
					url:'/safe/firewall/firewall_admin',
					data:{data: JSON.stringify({status:!status?'start':'stop'})},
				},function(rdata){
					bt_tools.msg(rdata);
					setTimeout(function(){
						location.reload();
					},2000)
				}, lan.security.firewall.switchMsg3)
			},function () {
				_that.prop("checked",status)
			})
		});
		// 禁用ping
		$('#ssh_ping').unbind('click').on('click',function (){
			var _that = $(this), status = _that.prop("checked")?0:1;
			bt.firewall.ping(status,function(rdata){
				if(rdata === -1){
					_that.prop('checked',!!status);
				}else{
					bt.msg(rdata);
				}
			});
		});
		// 清空日志
		$('#clearWebLogs').click(function () {
			that.clear_logs_files();
		});
	},
	/**
	 * @description 切换系统防火墙菜单
	 * @param {number} index 索引
	 */
	cutFirewallTab: function (index) {
		switch (index) {
			case 0:
				this.portRuleTable()
				break;
			case 1:
				this.ipRuleTable()
				break;
			case 2:
				this.portForwardTable()
				break;
			case 3:
				this.countryRegionTable()
				break;
		}
	},
	getFirewallInfo: function (load) {
		bt_tools.send({
			url: '/safe/firewall/get_firewall_info',
		}, function (rdata) {
			$('#isFirewall').prop("checked", rdata.status);
			$('#ssh_ping').prop('checked', !rdata.ping);
			$('#safety .tab-nav-border span:eq(0) > i').html(rdata.port);
			$('#safety .tab-nav-border span:eq(1) > i').html(rdata.ip);
			$('#safety .tab-nav-border span:eq(2) > i').html(rdata.trans);
			$('#safety .tab-nav-border span:eq(3) > i').html(rdata.country);
		}, load ? lan.security.firewall.get_firewall_info : '');
	},
	/**
	 * @description 清空日志
	 */
	clear_logs_files:function(){
		bt.show_confirm(lan.security.firewall.clearTit1, lan.security.firewall.clearMsg1, function () {
			bt.firewall.clear_logs_files(function(rdata){
				$("#logSize").text(rdata);
				bt.msg({msg:lan.firewall.empty,icon:1});
			});
		});
	},
	/**
	 * @description 渲染系统防火墙端口规则
	 */
	portRuleTable: function () {
		var that = this;
		var portsPs = {
			"80": lan.firewall.site_default_port,
			"3306": lan.firewall.mysql_default_port,
			"888": lan.firewall.phpmmyadmin_default_port,
			"22": lan.firewall.ssh_default_port,
			"20": lan.firewall.ftp1_default_port,
			"21": lan.firewall.ftp_default_port,
			"39000-40000": lan.firewall.ftp2_default_port,
			"30000-40000": lan.firewall.ftp2_default_port,
			"11211": lan.firewall.mem_default_port,
			"873": lan.firewall.rsync_default_port,
			"8888": lan.firewall.bt_default_port
		}
		var fireWallTable = bt_tools.table({
			el: '#portRules',
			url: '/safe/firewall/get_rules_list',
			load: lan.security.firewall.port.load,
			default: lan.security.firewall.port.default, // 数据为空时的默认提示
			autoHeight: true,
			beforeRequest: 'model',
			tootls: [
				{ // 按钮组
					type: 'group',
					list: [{
						title: lan.security.firewall.add_btn,
						active: true,
						event: function (ev) {
							that.editPortRule()
						}
					}, {
						title: lan.security.firewall.import_btn,
						event: function (ev) {
							that.ruleImport('port_rule')
						}
					}, {
						title: lan.security.firewall.export_btn,
						event: function (ev) {
							that.ruleExport('port_rule')
						}
					}]
				},
				{ // 搜索内容
					type: 'search',
					placeholder: lan.security.firewall.port.search,
					searchParam: 'query', //搜索请求字段，默认为 search
				},
				{ //分页显示
					type: 'page',
					numberStatus: true, //　是否支持分页数量选择,默认禁用
					jump: true, //是否支持跳转分页,默认禁用
				},
				{
					type: 'batch', // 批量操作
					disabledSelectValue: lan.firewall.batch_disabled_tips('port'),
					placeholder: 'Select batch operation',
          buttonValue: 'Execute',
					selectList: [
						{
							load: true,
							title: lan.firewall.batch_del_btn('port'),
							url: '/safe/firewall/remove_rules',
							param: function (row) {
								return { data: JSON.stringify(row) };
							},
							refresh: true,
							callback: function (that) {
								bt.confirm({ title: lan.firewall.batch_del_title('port'), msg: lan.firewall.batch_del_msg('port') }, function () {
									var param = {};
									that.start_batch(param, function (list) {
										var html = '';
										for (var i = 0; i < list.length; i++) {
											var item = list[i];
											html +=
												'<tr><td>Port: ' +
												item.ports +
												'</td><td><div style="float:right;"><span style="color:' +
												(item.request.msg.indexOf('Success') > -1 ? '#20a53a' : 'red') +
												'">' +
												item.request.msg +
												'</span></div></td></tr>';
										}
										fireWallTable.$batch_success_table({ title: lan.firewall.batch_del_title('port'), th: 'Port', html: html });
										fireWallTable.$refresh_table_list(true);
										safety.getFirewallInfo();
									});
								});
							},
						},
					],
				}
			],
			column: [
				{type: 'checkbox', class: '', width: 20},
				{ title: lan.security.firewall.protocol, fid: 'protocol', width: 100 },
				{ title: lan.security.firewall.ports, fid: 'ports', width: 200 },
				{
					field: 'status',
					title: lan.security.firewall.status + '<a href="https://www.aapanel.com/forum/d/1088-description-of-firewall-status" class="bt-ico-ask" target="_blank" title="' + lan.security.firewall.port.th3_click + '">?</a>',
					width: 150,
					type: 'text',
					template: function (item) {
						var status = '';
						switch (item.status) {
							case 0:
								status = lan.firewall.status_not;
								break;
							case 1:
								status = lan.firewall.status_net;
								break;
							default:
								status = lan.firewall.status_ok;
								break;
						}
						return '<span>' + status + ((item.status !=0 && item.status !==1)? ' (<a class="btlink">Details</a>)</span>':'</span>');
					},
					event: function (item) {
						var param = {
							port: item.ports,
						};
						if (item.status == 0) {
							return false;
						}
						bt_tools.send({
							url: '/safe/firewall/get_listening_processes',
							data: { data: JSON.stringify(param) },
						}, function (rdata) {
							layer.open({
								content:
									'\
											<div class="divtable daily-table" style="padding: 20px; min-height: 160px;">\
													<table class="table table-hover">\
															<tbody>\
															</tbody>\
													</table>\
											</div>\
									',
								title: '[' + item.ports + '] ' + lan.firewall.port_use_title,
								closeBtn: 2,
								type: 1,
								area: ['450px', 'auto'],
								shadeClose: true,
								success: function (layero, index) {
									layero.find('.layui-layer-content').css('height', 'auto')

/**
	 * @description 规则导出
	 */
	ruleExport: function (type){
		bt_tools.send({
			url: '/safe/firewall/export_rules',
			data: { data: JSON.stringify({ rule_name: type }) },
		}, function (rdata) {
			if (rdata.status) {
				window.open('/download?filename=' + rdata.msg);
			} else {
				bt_tools.msg(rdata);
			}
		}, lan.security.firewall.export_req);
	},

/**
	 * @description 删除端口规则
	 * @param {object} row 行数据
	 */
	removePortRule: function (row){
		var that = this;
		bt.confirm({
			title: lan.security.firewall.port.del_tit + '[' + row.ports + ']',
			msg: lan.security.firewall.port.del_msg
		}, function () {
			bt_tools.send({
				url: '/safe/firewall/remove_rules',
				data: { data: JSON.stringify(row) }
			}, function (rdata) {
				bt.msg(rdata);
				if (rdata.status) {
					that.portRuleTable();
					that.getFirewallInfo();
				}
			}, lan.security.firewall.port.del_req);
		});
	},
	/**
	 * @description 规则导入请求
	 * @param s_data
	 * @param start
	 * @param index
	 */
	upload: function (s_data, start, index) {
		var _this = this;
		var fd = s_data._fd;
		var end = Math.min(fd.size, start + 1024*1024*2);
		var form = new FormData();
		form.append("f_path", "/www/server/panel/data/firewall");
		form.append("f_name", fd.name);
		form.append("f_size", fd.size);
		form.append("f_start", start);
		form.append("blob", fd.slice(start, end));
		$.ajax({
			url: '/files?action=upload',
			type: "POST",
			data: form,
			async: true,
			processData: false,
			contentType: false,
			success: function (data) {
				if (typeof (data) === "number") {
					_this.upload(s_data, data, index)
				} else {
					if (data.status) {
						bt_tools.send({
							url:'/safe/firewall/import_rules',
							data:{data:JSON.stringify({rule_name:s_data.name, file_name:fd.name})}
						},function(res){
							bt_tools.msg(res);
							if(res.status){
								layer.close(index);
								if(s_data.name === 'port_rule'){ _this.portRuleTable() }
								else if(s_data.name === 'ip_rule'){ _this.ipRuleTable() }
								else if(s_data.name === 'country_rule'){ _this.countryRegionTable() }
								else{ _this.portForwardTable() }
							}
						}, lan.security.firewall.import_req)
					}
				}
			},
			error: function (e) {
				console.log("上传规则文件出问题喽!")
			}
		})
	},
	/**
	 * @description ip规则列表
	 */
	ipRuleTable: function () {
		var that = this;
		var ruleTable = bt_tools.table({
			el: '#ipRule',
			url: '/safe/firewall/get_ip_rules_list',
			load: lan.security.firewall.ip.load,
			default: lan.security.firewall.ip.default, // 数据为空时的默认提示
			autoHeight: true,
			beforeRequest: 'model',
			tootls: [
				{ // 按钮组
					type: 'group',
					list: [
						{
						title: lan.security.firewall.add_btn,
						active: true,
						event: function (ev) {
							that.editIpRule()
						}
						},
						{
							title: lan.security.firewall.import_btn,
							event: function (ev) {
								that.ruleImport('ip_rule')
							}
						},
						{
							title: lan.security.firewall.export_btn,
							event: function (ev) {
								that.ruleExport('ip_rule')
							}
						}
					]
				},
				{ // 搜索内容
					type: 'search',
					placeholder: lan.security.firewall.ip.search,
					searchParam: 'query', //搜索请求字段，默认为 search
				},
				{
					type: 'batch', // 批量操作
					disabledSelectValue: lan.firewall.batch_disabled_tips('IP'),
					placeholder: 'Select batch operation',
          buttonValue: 'Execute',
					selectList: [
						{
							title: lan.firewall.batch_del_btn('IP'),
							url: '/safe/firewall/remove_ip_rules',
							load: true,
							param: function (row) {
								return {
									data: JSON.stringify(row),
								};
							},
							refresh: true,
							callback: function (that) {
								bt.confirm({ title: lan.firewall.batch_del_title('IP'), msg: lan.firewall.batch_del_msg_ip }, function () {
									var param = {};
									that.start_batch(param, function (list) {
										var html = '';
										for (var i = 0; i < list.length; i++) {
											var item = list[i];
											html +=
												'<tr><td>' +
												item.address +
												'</td><td><div style="float:right;"><span style="color:' +
												(item.request.msg.indexOf('Success') > -1 ? '#20a53a' : 'red') +
												'">' +
												item.request.msg +
												'</span></div></td></tr>';
										}
										ruleTable.$batch_success_table({ title: lan.firewall.batch_del_title('IP'), th: lan.firewall.batch_del_ip_name, html: html });
										ruleTable.$refresh_table_list(true);
										safety.getFirewallInfo();
									});
								});
							},
						},
					],
				},
				{ //分页显示
					type: 'page',
					numberStatus: true, //　是否支持分页数量选择,默认禁用
					jump: true, //是否支持跳转分页,默认禁用
				}
			],
			column: [
				{type: 'checkbox', class: '', width: 20},
				{fid: 'address', title: lan.security.firewall.source_ip, width: 150},
				{fid: 'area', title: lan.security.firewall.ip_home + ' ' + (parseInt(bt.get_cookie('pro_end')) < 0?'<a href="javascript:;" class="btlink" onclick="bt.soft.updata_pro(116)">Pro</a>':''), template: function(row){
					var area = row.area;
					return '<span>'+ (area.continent || '') + (area.info || '--') +'</span>'
				}},
				{
					fid: 'types',
					title: lan.security.firewall.strategy,
					width: 100,
					event:function (row){
						var status = !(row.types === 'accept')
						bt.confirm({
							title: lan.security.firewall.ip.modify_strategy_tit + ' [' + row.address + ']',
							msg: (status ? lan.security.firewall.ip.modify_strategy_msg1 : lan.security.firewall.ip.modify_strategy_msg2),
						},function () {
							var param = $.extend(row, { types:row.types === 'accept' ? 'drop' : 'accept' });
							bt_tools.send({
								url: '/safe/firewall/modify_ip_rules',
								data: { data: JSON.stringify(param) }
							}, function (rdata) {
								bt_tools.msg(rdata);
								that.ipRuleTable();
							}, lan.security.firewall.ip.modify_strategy_req);
						});
					},
					template: function (row) {
						return row.types === 'accept' ? 
							'<span class="bt_success cursor-pointer">' + lan.security.firewall.release + '</span>' :
							'<span class="bt_danger cursor-pointer">' + lan.security.firewall.block + '</span>';
					}
				},
				{fid: 'brief', title: lan.security.firewall.remarks },
				{fid: 'addtime', title: lan.security.firewall.add_time, width: 150 },
				{
					title: lan.public.operate,
					type: 'group',
					width: 150,
					align: 'right',
					group: [{
						title: lan.public.edit,
						event: function (row, index) {
							that.editIpRule(row)
						}
					}, {
						title: lan.public.del,
						event: function (row, index) {
							that.removeIpRule(row)
						}
					}]
				}]
		})
		return ruleTable;
	},
	/**
	 * @description 编辑ip规则
	 * @param { object } row 行数据
	 */
	editIpRule: function (row){
		var isEdit = !!row, that = this;
		row = row || {types:'drop',address:'',brief:''}
		layer.open({
			type: 1,
			area: '430px',
			title: (!isEdit ? lan.public.add : lan.public.edit) + lan.security.firewall.ip.form_title,
			closeBtn: 2,
			shift: 5,
			shadeClose: false,
			btn: [lan.public.confirm, lan.public.cancel],
			content: '<form id="editIpRuleForm" class="bt-form bt-form pd20" onsubmit="return false"></form>',
			yes:function(index,layers){
				bt_tools.verifyForm('#editIpRuleForm',[
					{
						name: 'address',
						validator: function (value, row) {
							if (!value) return lan.security.firewall.ip.form_ip
						}
					},
				], function (verify, form) {
					if(verify){
						// 添加、修改
						bt_tools.send({
							url:'/safe/firewall/' + (isEdit?'modify_ip_rules':'create_ip_rules'),
							data:{data:JSON.stringify($.extend({id:row.id},form))}
						}, function (rdata) {
							bt.msg(rdata)
							if(rdata.status){
								layer.close(index)
								that.ipRuleTable()
								that.getFirewallInfo()
							}
						}, (isEdit ? lan.public.editing : lan.public.adding) + lan.security.firewall.ip.form_title);
					}
				})
			},
			success:function(layero,index){
				bt_tools.fromGroup('#editIpRuleForm',[
					{
						label: lan.security.firewall.source_ip,
						name: 'address',
						type: 'textarea',
						readonly: isEdit,
						style: 'width: 220px; height: 80px; line-height: 22px;' + (isEdit ? 'background-color: rgb(238, 238, 238); cursor: not-allowed' : ''),
						placeholder: 'Please enter IP e.g. 192.168.1.102',
					},
					{
						label: lan.security.firewall.strategy,
						width: '220px',
						name: 'types',
						type: 'select',
						options: [
							{ value: 'accept', label: lan.security.firewall.release },
							{ value: 'drop', label: lan.security.firewall.block },
						],
					},
					{ label: lan.security.firewall.remarks, width: '220px', name: 'brief' },
					!isEdit
						? {
								type: 'tips',
								style: 'padding-left: 40px; margin-top:5px;',
								list: [
									lan.security.firewall.ip.form_tips1, 
									lan.security.firewall.ip.form_tips2, 
									lan.security.firewall.ip.form_tips3
								],
							}
						: { type: 'tips', list: [] },
				], row)
				bt_tools.setLayerArea(layero)
			}
		})
	},
	/**
	 * @description 删除端口规则
	 */
	removeIpRule:function(row){
		var that = this;
		bt.confirm({
			title: lan.security.firewall.ip.del_tit + ' ['+ row.address + ']',
			msg: lan.security.firewall.ip.del_msg 
		}, function () {
			bt_tools.send({ url:'/safe/firewall/remove_ip_rules', data:{data:JSON.stringify(row)}},function (rdata){
				bt.msg(rdata)
				if(rdata.status) {
					that.ipRuleTable()
					that.getFirewallInfo()
				}
			}, lan.security.firewall.ip.del_req);
		});
	},
	/**
	 * @description 端口转发列表
	 */
	portForwardTable: function () {
		var that = this;
		var forwardTable = bt_tools.table({
			el: '#portForward',
			url: '/safe/firewall/get_forward_list',
			load: lan.security.firewall.forward.load,
			default: lan.security.firewall.forward.default, // 数据为空时的默认提示
			autoHeight: true,
			beforeRequest: 'model',
			tootls: [
				{ // 按钮组
					type: 'group',
					list: [{
						title: lan.security.firewall.forward.add_btn,
						active: true,
						event: function (ev) {
							that.editPortForward()
						}
					}, {
						title: lan.security.firewall.import_btn,
						event: function (ev) {
							that.ruleImport('trans_rule')
						}
					}, {
						title: lan.security.firewall.export_btn,
						event: function (ev) {
							that.ruleExport('trans_rule')
						}
					}]
				},
				{ // 搜索内容
					type: 'search',
					placeholder: lan.security.firewall.forward.search,
					searchParam: 'query', //搜索请求字段，默认为 search
				},
				{
					type: 'batch', // 批量操作
					disabledSelectValue: lan.firewall.batch_disabled_tips('port forward'),
					placeholder: 'Select batch operation',
          buttonValue: 'Execute',
					selectList: [
						{
							title: lan.firewall.batch_del_btn('port forward'),
							url: '/safe/firewall/remove_forward',
							load: true,
							param: function (row) {
								return {
									data: JSON.stringify({ id: row.id, protocol: row.protocol, s_port: row.start_port, d_ip: row.ended_ip, d_port: row.ended_port }),
								};
							},
							refresh: true,
							callback: function (that) {
								bt.confirm({ title: lan.firewall.batch_del_title('port forward'), msg: lan.firewall.batch_del_msg_port_forward }, function () {
									var param = {};
									that.start_batch(param, function (list) {
										var html = '';
										for (var i = 0; i < list.length; i++) {
											var item = list[i];
											html +=
												'<tr><td>Source port: ' +
												item.start_port +
												'</td><td><div style="float:right;"><span style="color:' +
												(item.request.msg.indexOf('Success') > -1 ? '#20a53a' : 'red') +
												'">' +
												item.request.msg +
												'</span></div></td></tr>';
										}
										forwardTable.$batch_success_table({ title: lan.firewall.batch_del_title('IP'), th: 'Source port', html: html });
										forwardTable.$refresh_table_list(true);
										safety.getFirewallInfo();
									});
								});
							},
						},
					],
				},
				{ //分页显示
					type: 'page',
					numberStatus: true, //　是否支持分页数量选择,默认禁用
					jump: true, //是否支持跳转分页,默认禁用
				}
			],
			column: [
				{type: 'checkbox',  width: 20},
				{ title: lan.security.firewall.protocol, fid: 'protocol', width: 100 },
				{ title: lan.security.firewall.source_port, fid: 'start_port' },
				{
					title: lan.security.firewall.target_ip,
					fid: 'ended_ip', 
					template: function (row) {
						return '<span>'+ (row.ended_ip ? row.ended_ip : '127.0.0.1') +'</span>'
					}
				},
				{ title: lan.security.firewall.target_port, fid: 'ended_port' },
				{ title: lan.security.firewall.add_time, fid: 'addtime', width: 150 },
				{
					title: lan.public.operate,
					type: 'group',
					width: 150,
					align: 'right',
					group: [{
						title: lan.public.edit,
						event: function (row, index) {
							that.editPortForward(row)
						}
					}, {
						title: lan.public.del,
						event: function (row, index) {
							that.removePortForward(row)
						}
					}]
				}],
		});
		return forwardTable;
	},
	/**
	 * @description 添加/修改端口转发
	 * @param row
	 */
	editPortForward: function (row) {
		var isEdit = !!row, that = this;
		row = row || { protocol:'tcp', s_ports:'',d_address:'',d_ports:'' }
		layer.open({
			type: 1,
			area: "420px",
			title: (!isEdit ? lan.public.add : lan.public.edit) + lan.security.firewall.forward.form_title,
			closeBtn: 2,
			shift: 5,
			shadeClose: false,
			btn: [lan.public.import, lan.public.cancel],
			content: '<form id="editIpRuleForm" class="bt-form bt-form pd20" onsubmit="return false"></form>',
			yes:function(index,layers){
				bt_tools.verifyForm('#editIpRuleForm',[
					{name:'s_ports',validator:function (value,row){
							if(!value) return lan.security.firewall.source_port_val1
							if(!bt.check_port(value)) return lan.security.firewall.source_port_val2
						}},
					{name:'d_ports',validator:function (value,row){
							if(!value) return lan.security.firewall.target_port_val1
							if(!bt.check_port(value)) return lan.security.firewall.target_port_val2
						}},
				],function(verify,form){
					if(verify){
						// 添加、修改
						if(form['d_address'] === '') form['d_address'] = '127.0.0.1'
						bt_tools.send({
							url:'/safe/firewall/' + (isEdit?'modify_forward':'create_forward'),
							data:{data:JSON.stringify($.extend({id:row.id},form))}
						}, function (rdata) {
							bt.msg(rdata)
							if(rdata.status){
								layer.close(index)
								that.portForwardTable()
								that.getFirewallInfo()
							}
						},(isEdit ? lan.public.editing : lan.public.adding) + lan.security.firewall.forward.form_title);
					}
				})
			},
			success:function(layero,index){
				if(typeof row.id !== 'undefined') row = {s_ports:row.start_port,d_address:row.ended_ip,d_ports:row.ended_port,protocol:row.protocol,id:row.id}
				bt_tools.fromGroup('#editIpRuleForm', [
					{
						label: lan.security.firewall.protocol,
						width: '200px',
						name: 'protocol',
						type: 'select',
						options: [
							{ value: 'tcp', label: 'TCP' },
							{ value: 'udp', label: 'UDP' },
							{ value: 'tcp/udp', label: 'TCP/UDP' },
						],
					},
					{ label: lan.security.firewall.source_port, width: '200px', name: 's_ports', type: 'text', placeholder: lan.security.firewall.source_port_input },
					{ label: lan.security.firewall.target_ip, width: '200px', name: 'd_address', placeholder: lan.security.firewall.target_ip_input },
					{ label: lan.security.firewall.target_port, width: '200px', name: 'd_ports', type: 'text', placeholder: lan.security.firewall.target_port_input },
					{ type: 'tips', style: 'padding-left: 30px; margin-top:5px;', list: [lan.security.firewall.forward.form_tips1, lan.security.firewall.forward.form_tips2] },
				], row)
				bt_tools.setLayerArea(layero)
			}
		})
	},
	/**
	 * @description 删除端口转发
	 * @param {object} row 当前行数据
	 */
	removePortForward: function (row) {
		var that = this;
		bt.confirm({ 
			msg: lan.security.firewall.forward.del_msg, 
			title: lan.security.firewall.forward.del_tit + ' [' + lan.security.firewall.source_port + ': ' + row.start_port + ' -> ' + lan.security.firewall.target_port + ': ' + row.ended_port +']',
			area: '530px'
		}, function () {
			bt_tools.send({
				url:'/safe/firewall/remove_forward',
				data:{data:JSON.stringify({id:row.id,protocol:row.protocol,s_port:row.start_port,d_ip:row.ended_ip,d_port:row.ended_port})}
			}, function (rdata) {
				bt.msg(rdata);
				if(rdata.status) {
					that.portForwardTable();
					that.getFirewallInfo();
				}
			}, lan.security.firewall.forward.del_req);
		});
	},
	/**
	 * @description 国家区域
	 */
	countryRegionTable: function () {
		var that = this;
		var cRegionTable = bt_tools.table({
			el: '#countryRegion',
			url: '/safe/firewall/get_country_list',
			load: lan.security.firewall.area.load,
			default: lan.security.firewall.area.default, // 数据为空时的默认提示
			autoHeight: true,
			beforeRequest: 'model',
			column: [
				{type: 'checkbox', class: '', width: 20},
				{fid: 'country', title: lan.security.firewall.areas, width: 180,
					template:function (row){
						return '<span>'+ row.country + '(' + row.brief + ')</span>'
					}
				},
				{
					fid: 'types',
					title: lan.security.firewall.strategy,
					width: 100,
					template: function (row) {
						return row.types === 'accept'?'<span class="bt_success">' + lan.security.firewall.release + '</span>':'<span class="bt_danger">' + lan.security.firewall.block + '</span>'
					}
				},
				{fid: 'ports', title: lan.security.firewall.ports, template:function (row){
						return '<span>' + (!row.ports ? lan.security.firewall.all : row.ports) + '</span>'
					}},
				{fid: 'addtime', title: lan.security.firewall.add_time, width:150},
				{
					title: lan.public.operate,
					type: 'group',
					width: 150,
					align: 'right',
					group: [{
						title: lan.public.edit,
						event: function (row, index) {
							that.editCountryRegion(row);
						}
					}, {
						title: lan.public.del,
						event: function (row, index) {
							that.removeCountryRegion(row);
						}
					}]
				}],
			tootls: [
				{ // 按钮组
					type: 'group',
					list: [{
						title: lan.security.firewall.area.add_btn,
						active: true,
						event: function (ev) {
							that.editCountryRegion()
						}
					}, {
						title: lan.security.firewall.import_btn,
						event: function (ev) {
							that.ruleImport('country_rule')
						}
					}, {
						title: lan.security.firewall.export_btn,
						event: function (ev) {
							that.ruleExport('country_rule')
						}
					}]
				},
				{ // 搜索内容
					type: 'search',
					placeholder: lan.security.firewall.area.search,
					searchParam: 'query', //搜索请求字段，默认为 search
				},
				{
				  type: 'batch', // 批量操作
					disabledSelectValue: lan.firewall.batch_disabled_tips('area rule'),
					placeholder: 'Select batch operation',
          buttonValue: 'Execute',
					selectList: [
						{
							title: lan.firewall.batch_del_btn('area rule'),
							url: '/safe/firewall/remove_country',
							param: function (row) {
								return {
									data: JSON.stringify(row),
								};
							},
							refresh: true,
							load: true,
							callback: function (that) {
								bt.confirm({ title: lan.firewall.batch_del_title('area rule'), msg: lan.firewall.batch_del_msg_area_rule }, function () {
									var param = {};
									that.start_batch(param, function (list) {
										var html = '';
										for (var i = 0; i < list.length; i++) {
											var item = list[i];
											html +=
												'<tr><td>' +
												item.country +
												'</td><td><div style="float:right;"><span style="color:' +
												(item.request.msg.indexOf('Success') > -1 ? '#20a53a' : 'red') +
												'">' +
												item.request.msg +
												'</span></div></td></tr>';
										}
										cRegionTable.$batch_success_table({ title: lan.firewall.batch_del_title('area rule'), th: 'Area', html: html });
										cRegionTable.$refresh_table_list(true);
										safety.getFirewallInfo();
									});
								});
							},
						},
					],
				},
				{ //分页显示
					type: 'page',
					numberStatus: true, //　是否支持分页数量选择,默认禁用
					jump: true, //是否支持跳转分页,默认禁用
				}
			]
		})
		return cRegionTable;
	},

/**
	 * @description 添加/修改端口转发
	 * @param row
	 */
	editCountryRegion:function (row) {
		var isEdit = !!row, that = this;
		row = row || { country: 'USA', types:'drop',brief:'US',ports:'' }
		bt_tools.send({
			url:'/safe/firewall/get_countrys',
		},  function (rdata) {
			layer.open({
				type: 1,
				area:"420px",
				title: (!isEdit ? lan.public.add : lan.public.edit) + lan.security.firewall.area.form_title,
				closeBtn: 2,
				shift: 5,
				shadeClose: false,
				btn: [lan.public.confirm, lan.public.cancel],
				content: '<form id="editCountryRegionForm" class="bt-form bt-form pd20" onsubmit="return false"></form>',
				yes: function (index, layers) {
					bt_tools.verifyForm('#editCountryRegionForm', [
						{
							name: 'ports',
							validator: function (value, row) {
								if (!value && row.choose !== 'all') return lan.security.firewall.specify_port_val1;
							}
						},
					], function (verify, form) {
						if (verify) {
							// 添加、修改
							form['brief'] = form.country;
							form['country'] = $('[name="country"]').find(':selected').text();
							if (form.choose === 'all') form.ports = '';
							bt_tools.send({
								url: '/safe/firewall/' + (isEdit ? 'modify_country' : 'create_country'),
								data: { data: JSON.stringify($.extend({ id: row.id }, form)) }
							}, function (rdata) {
								bt.msg(rdata)
								if(rdata.status){
									layer.close(index)
									that.countryRegionTable()
									that.getFirewallInfo()
								}
							}, (isEdit ? lan.public.editing : lan.public.adding) + lan.security.firewall.area.form_title);
						}
					})
				},
				success: function (layero, index) {
					var options = [];
					for (var i = 0; i < rdata.length; i++) {
						var item = rdata[i]
						options.push({
							label: item.CH,
							value: item.brief
						})
					}
					bt_tools.fromGroup('#editCountryRegionForm', [
						{ label: lan.security.firewall.areas, width: '200px', name: 'country', type: 'select', options: options },
						{ label: lan.security.firewall.strategy, width: '200px', name: 'types', type: 'select', options: [{ value:'drop', label: lan.security.firewall.block }] },
						{
							label: lan.security.firewall.ports,
							width: '200px',
							name: 'choose',
							type: 'select',
							options:[
								{ value: 'all', label: lan.security.firewall.all },
								// { value: 'point', label: lan.security.firewall.specify_port }
							], 
							on: {
								change: function (ev, val) {
									$(this).data('line').next().toggle()
								}
							}
						},
						{ label: '', width: '200px', name: 'ports', labelStyle: 'display:none', type: 'text', placeholder: lan.security.firewall.specify_port_input },
						{
							type:'tips',
							list:[
								lan.security.firewall.area.form_tips1,
								lan.security.firewall.area.form_tips2,
								lan.security.firewall.area.form_tips3
							],
							style: 'padding-left: 20px; margin-top:5px;'
						}
					], {
						country: row.brief,
						types: 'drop',
						choose: 'all'
					});
					if (row.ports) {
						$('select[name="choose"]').val('point');
						$('select[name="choose"]').change();
						$('input[name="ports"]').val(row.ports);
					}
					bt_tools.setLayerArea(layero);
				}
			});
		}, lan.security.firewall.area.get_area);
	},

/**
	 * @description 删除地区规则
	 * @param {object} row 当前行数据
	 */
	removeCountryRegion: function (row) {
		var that = this;
		bt.confirm({
			msg: lan.security.firewall.area.del_msg, 
			title: lan.security.firewall.area.del_tit 
		}, function(){
			bt_tools.send({
				url:'/safe/firewall/remove_country',
				data:{data:JSON.stringify(row)}
			}, function (rdata) {
				bt.msg(rdata)
				if(rdata.status) {
					that.countryRegionTable()
					that.getFirewallInfo()
				}
			}, lan.security.firewall.area.del_req)
		});
	},
}

// ssh管理
var ssh = {
	init: function () {
		$('.state-content').show();
		$('.state-content .ssh-header').show();

$('#sshView .tab-nav-border span').eq(0).trigger('click');
	},
	event: function () {
		var that = this;
		// 切换系统防火墙菜单事件
		$('#sshView').unbind('click').on('click', '.tab-nav-border span', function () {
			var index = $(this).index();
			$(this).addClass('on').siblings().removeClass('on');
			$(this).parent().next().find('.tab-block').eq(index).addClass('on').siblings().removeClass('on');
			$('.state-content').show().find('.ssh-header').show().siblings().hide();
			that.cutSshTab(index);
		});

// SSH开关
		$('#isSsh').unbind('click').on('click',function(){
			var _that = $(this), status = _that.prop("checked") ? 0 : 1;
			bt.firewall.set_mstsc_status(status, function (rdata) {
				if(rdata === -1){
					_that.prop("checked",!!status);
				}else{
					bt.msg(rdata);
					that.getSshInfo();
				}
			});
		});

// 保存SSH端口
		$('.save_ssh_port').unbind('click').on('click',function (){
			var port = $(this).prev().val();
			if(port === '') return bt.msg({ msg: lan.security.ssh.port_empty, icon: 2 });
			if(!bt.check_port(port)) return bt.msg({
				icon: 2,
				time: 0,
				closeBtn: 2,
				area: '400px',
				msg: lan.security.ssh.port_error1 + '<br />' + lan.security.ssh.port_error2 + '<br />[80, 443, 8080, 8443, 8888]',
			});
			bt.firewall.set_mstsc(port);
		});

// root登录
		$('[name="root_login"]').unbind('change').on('change',function(){
			// var _that = $(this), status = _that.prop("checked");
			var root_type = $(this).val();
			bt_tools.send({
				url:'/ssh_security?action=set_root',
				data:{p_type:root_type}
			},function (rdata){
				bt_tools.msg(rdata);
			}, lan.security.ssh.set_root_req);
		});

// SSH密码登录
		$('[name="ssh_paw"]').unbind('click').on('click',function (){
			var _that = $(this), start = _that.prop("checked");
			bt_tools.send({
				url:'/ssh_security?action=' + (start?'set_password':'stop_password')
			},function (rdata){
				bt_tools.msg(rdata);
			}, lan.security.ssh.set_paw_req);
		});

// SSH密钥登录
		$('[name="ssh_pubkey"]').unbind('click').on('click',function(){
			var _that = $(this);
			var start = _that.prop("checked");
			if(start){
				that.setTemplateSshkey();
			}else{
				bt_tools.send({
					url:'/ssh_security?action=stop_key'
				},function (rdata){
					that.getSeniorSshInfo();
					bt_tools.msg(rdata);
				}, lan.security.ssh.set_pubkey_req);
			}
		});

// 登录告警
		$('[name="ssh_login_give"]').unbind('click').on('click',function(){
			var _that = $(this), status = _that.prop("checked");
			bt_tools.send({
				url:'/ssh_security?action=' + (status?'start_jian':'stop_jian')
			},function (rdata){
				bt_tools.msg(rdata);
			}, lan.security.ssh.set_alarm_req);
		});

// 查看密钥
		$('.checkKey').unbind('click').on('click',function (){
			that.setSshKeyView()
		});

// 设置登录告警
		$('.setSshLoginAlarm').unbind('click').on('click',function (){
			that.setSshLoginAlarmView();
		});

// 下载密钥
		$('.downloadKey').unbind('click').on('click',function (){
			bt_tools.send({
				url:'/ssh_security?action=get_key'
			},function (rdata){
				if(!rdata.msg) return layer.msg(lan.security.ssh.download_key_tips);
				window.open('/ssh_security?action=download_key')
			})
		});

// 登录详情
		$('#sshDetailed').unbind('click').on('click','a',function (){
			var index = $(this).data('index');
			$('#sshView .tab-nav-border>span').eq(1).trigger('click');
			$('.cutLoginLogsType button').eq(index).trigger('click');
		});

// 切换系统防火墙菜单事件
		$('#sshView').unbind('click').on('click', '.tab-nav-border span', function () {
			var index = $(this).index();
			that.cutSshTab(index);
    });

// 切换登录日志类型
		$('#loginLogsContent').unbind('click').on('click','.cutLoginLogsType button',function(){
			var type = $(this).data('type');
			$(this).addClass('btn-success').removeClass('btn-default').siblings().addClass('btn-default').removeClass('btn-success');
			$('#loginLogsContent>div:eq('+ type +')').show().siblings().hide();
			that.loginLogsTable({p:1,type: Number(type)});
		});
	},
	cutSshTab: function (index) {
		switch (index){
			case 0:
				this.getSshInfo();
				this.getLoginAlarmInfo();
				this.getSeniorSshInfo();
				this.getSshLoginAlarmInfo();
				break;
			case 1:
				this.loginLogsTable();
				break;
		}
	},
	/**
	 * @description 获取SSH信息
	 */
	getSshInfo:function (load){
		bt_tools.send({
			url: '/safe/ssh/GetSshInfo',
			verify: false
		},function (rdata){
			var error = rdata.error;
			$('#sshDetailed .btlink').text(lan.security.ssh.success + ': '+ error.success);
			$('#sshDetailed .bterror').text(lan.security.ssh.fail + ': '+ error.error);
			$('#isSsh').prop("checked", rdata.status);
			$('[name="ssh_port"]').val(rdata.port);
		}, lan.security.ssh.get_ssh_info);
	},
	/**
	 * @description 获取登录告警信息
	 */
	getLoginAlarmInfo:function(load){
		bt_tools.send({
			url:'/ssh_security?action=get_jian'
		},function (rdata){
			$('#ssh_login_give').prop('checked', rdata.status);
		},  {load: load ? lan.security.ssh.get_jian : '',verify:false})
	},
	/**
	 * @description 获取高级SSH信息
	 */
	getSeniorSshInfo:function (load){
		bt_tools.send({
			url: '/ssh_security?action=get_config',
			verify: false
		},function (rdata){
			$('[name="ssh_paw"]').prop("checked",rdata.password === 'yes');
			$('[name="ssh_pubkey"]').prop("checked",rdata.pubkey === 'yes');

var root_option = '';
			$.each(rdata.root_login_types,function(k,v){
					root_option += '<option value="'+ k +'" '+(rdata.root_login_type == k?'selected':'')+'>'+ v +'</option>';
			})
			$('[name="root_login"]').html(root_option);
			// $('[name="root_login"]').prop("checked",rdata.root_is_login === 'yes')
		}, load ? lan.security.ssh.get_config : '');
	},

/**
	 * @description 获取SSH登录告警
	 */
	getSshLoginAlarmInfo: function (load) {
		var that = this;
		bt_tools.send({
			url: '/ssh_security?action=get_login_send',
			verify: false
		}, function (send) {
			var data = that.msgPushData;
			if (!data || $.isEmptyObject(data)) {
				bt_tools.send({
					url: '/ssh_security?action=get_msg_push_list',
					verify: false
				}, function (msgData) {
					that.msgPushData = msgData
					that.renderLoginAlarmInfo(send);
				});
			} else {
				that.renderLoginAlarmInfo(send);
			}
		}, load ? lan.security.ssh.get_login_send : '');
	},
	/**
	 * @description 渲染SSH登录告警配置
	 */
	renderLoginAlarmInfo: function (send) {
		var data = this.msgPushData || {};
		var map = {}
		$.each(data, function (key, item) {
			if (key === 'sms') return
			map[key] = item.title
		});
		var key = send.msg;
		var title = map[key];
		if (send.status && title) {
			$('a.setSshLoginAlarm').removeClass('bt_warning').addClass('btlink');
			$('a.setSshLoginAlarm').text(title + ' ' + lan.security.ssh.configured);
		} else {
			$('a.setSshLoginAlarm').addClass('bt_warning').removeClass('btlink');
			$('a.setSshLoginAlarm').text(lan.security.ssh.not_configured);
		}
	},

/**
	 * @description 登录日志
	 */
	loginLogsTable:function(param){
		if(!param) param = { p:1, type:0 };
		var logs = [
			['All', lan.security.ssh.logs, 'get_ssh_list'],
			['Success', lan.security.ssh.s_logs, 'get_ssh_success'],
			['Error', lan.security.ssh.f_logs, 'get_ssh_error']
		];
		var type = logs[param.type][0];
		var tips = logs[param.type][1];

$('#login'+ type +'Logs').empty();
		var arry = [lan.security.ssh.all, lan.security.ssh.success, lan.security.ssh.fail];
		var html = $('<div class="btn-group mr10 cutLoginLogsType"></div>');
		$.each(arry,function (i,v){
			html.append('<button type="button" class="btn btn-sm btn-'+ (i === param.type ?'success':'default') +'" data-type="'+ i +'">'+ v +'</button>')
		});
		return bt_tools.table({
			el: '#login'+ type +'Logs',
			url: '/safe/syslog/' + logs[param.type][2],
			default: lan.security.ssh.get_ssh_list1 + tips + lan.security.ssh.get_ssh_list2, // 数据为空时的默认提示
			autoHeight: true,
			dataVerify:false,
			tootls: [
				{ // 按钮组
					type: 'group',
					list: [{
						title: lan.security.ssh.refresh,
						active: true,
						event: function (ev,that) {
							that.$refresh_table_list(true)
						}
					}]
				},
				{ // 搜索内容
					type: 'search',
					placeholder: lan.security.ssh.login_search,
					searchParam: 'search', //搜索请求字段，默认为 search
				},
				{ //分页显示
					type: 'page',
					number: 20
				}
			],
			dataFilter: function (data) {
				if ((typeof data.status === "boolean" && !data.status)) {
					$('#loginLogsContent').hide().next().show();
					return { data: [] }
				}
				return {data:data}
			},
			beforeRequest: function (data) {
				if(typeof data.data === "string"){
					delete data.data
					return {data: JSON.stringify(data)}
				}
				return {data: JSON.stringify(data)}
			},
			column: [
				{title: lan.security.ssh.ip_port,fid: 'address',width:'150px', template:function (row){
						return '<span>'+ row.address +':' + row.port + '</span>';
					}},
				// {title: '登录端口',fid: 'port'},
				{title: lan.security.ssh.place,template:function (row){
						return '<span>'+ (row.area?'' + row.area.info + '':'-') +'</span>';
					}},
				{title: lan.security.ssh.user,fid: 'user'},
				{title: lan.security.ssh.status, template: function (item) {
						var status = Boolean(item.status);
						return '<span style="color:'+ (status?'#20a53a;':'red') +'">'+ (status ? lan.security.ssh.l_success : lan.security.ssh.l_fail) +'</span>';
					}},
				{title: lan.security.ssh.o_time, fid: 'time', width:150}
			],
			success:function (config){
				$(config.config.el + ' .tootls_top .pull-right').prepend(html)
				$('#login'+ type +'Page').html(firewall.renderLogsPages(20,param.p,config.data.length))
			}
		});
	},
	/**
	 * @description 设置密钥登录
	 */
	setTemplateSshkey:function(){
		var _this = this;
		layer.open({
			title: lan.security.ssh.key_title,
			area: '430px',
			type: 1,
			closeBtn: 2,
			btn: [lan.public.confirm, lan.public.cancel],
			content:'<div class="bt-form bt-form pd20">'+
					'<div class="line"><span class="tname" style="width: 160px">' + lan.security.ssh.key_login + '</span><div class="info-r" style="margin-left: 160px"><select class="bt-input-text mr5 ssh_select_login" style="width:200px"><option value="yes">' + lan.security.ssh.enable + '</option><option value="no">' + lan.security.ssh.disable + '</option></select></div></div>'+
					'<div class="line "><span class="tname" style="width: 160px">' + lan.security.ssh.key_mode + '</span><div class="info-r" style="margin-left: 160px"><select class="bt-input-text mr5 ssh_select_encryption" style="width:200px"><option value="ed25519">ED25519(' + lan.security.ssh.recommend + ')</option><option value="ecdsa">ECDSA</option><option value="rsa">RSA</option><option value="dsa">DSA</option></select></div></div>'+
					'</div>',
			yes:function(indexs){
				var ssh_select_login = $('.ssh_select_login').val();
				var ssh_select_encryption = $('.ssh_select_encryption').val();
				bt_tools.send({
					url:'/ssh_security?action=set_sshkey',
					data:{ ssh:ssh_select_login, type:ssh_select_encryption }
				},function (rdata){
					bt_tools.msg(rdata);
					layer.close(indexs);
					_this.getSeniorSshInfo();
				}, lan.security.ssh.set_sshkey);
			},
			cancel:function(index){
				$('[name="ssh_pubkey"]').prop('checked',false);
			},
			btn2:function(index){
				$('[name="ssh_pubkey"]').prop('checked',false);
			}
		});
	},
	/**
	 * @description 设置SSH密钥视图
	 */
	setSshKeyView:function(){
		var _this = this
		bt_tools.send({
			url:'/ssh_security?action=get_key'
		},function (rdata){
			if (!rdata.msg) return layer.msg(lan.security.ssh.key_view_msg);
			layer.open({
				title: lan.security.ssh.key_view_title,
				area:'400px',
				type:1,
				closeBtn: 2,
				content:'<div class="bt-form pd20">\
					<textarea id="ssh_text_key" class="bt-input-text mb10" style="height:220px;width:360px;line-height: 22px;">'+ rdata.msg +'

\ \ \ \