{$_POST['code']} mis à jour";
}
// ── Whitelist : add ───────────────────────────────────
elseif ($action === 'wl_add') {
db()->prepare(
'INSERT OR IGNORE INTO esx_whitelist (ip, label, enabled)
VALUES (?, ?, 1)'
)->execute([
trim($_POST['ip']),
trim($_POST['label']) ?: 'sans label',
]);
$flash = "✓ IP {$_POST['ip']} ajoutée à la whitelist";
}
// ── Whitelist : toggle enabled ────────────────────────
elseif ($action === 'wl_toggle') {
db()->prepare(
'UPDATE esx_whitelist SET enabled = 1 - enabled WHERE id = ?'
)->execute([(int)$_POST['id']]);
$flash = "✓ IP whitelist togglée";
}
// ── Whitelist : remove ────────────────────────────────
elseif ($action === 'wl_delete') {
db()->prepare('DELETE FROM esx_whitelist WHERE id = ?')
->execute([(int)$_POST['id']]);
$flash = "✓ IP whitelist supprimée";
}
// ── Whitelist : add depuis access log ─────────────────
elseif ($action === 'wl_add_from_log') {
db()->prepare(
'INSERT OR IGNORE INTO esx_whitelist (ip, label, enabled)
VALUES (?, ?, 1)'
)->execute([
trim($_POST['ip']),
'auto-added from access log',
]);
$flash = "✓ IP {$_POST['ip']} ajoutée depuis le log";
}
} catch (Throwable $e) {
$flash = "✗ Erreur : " . h($e->getMessage());
}
header('Location: esx.php?flash=' . urlencode($flash));
exit;
}
if (!empty($_GET['flash'])) $flash = $_GET['flash'];
// ── Données ─────────────────────────────────────────────────────
$esxs = db()->query(
"SELECT e.*, s.label AS site_label
FROM esx_hosts e LEFT JOIN sites s ON s.code = e.site_code
ORDER BY e.code"
)->fetchAll();
$whitelist = db()->query(
'SELECT * FROM esx_whitelist ORDER BY enabled DESC, label ASC'
)->fetchAll();
// IPs récentes ayant été REFUSÉES (pour bouton "ajouter au whitelist")
$recent_blocked = db()->query(
"SELECT ip, COUNT(*) as hits, MAX(created_at) AS last_at,
MAX(endpoint) AS last_endpoint
FROM pi_access_log
WHERE allowed = 0 AND created_at > strftime('%s','now','-7 days')
GROUP BY ip
ORDER BY last_at DESC
LIMIT 20"
)->fetchAll();
// Stats des accès réussis (pour visibilité)
$recent_allowed = db()->query(
"SELECT ip, COUNT(*) as hits, MAX(created_at) AS last_at
FROM pi_access_log
WHERE allowed = 1 AND created_at > strftime('%s','now','-7 days')
GROUP BY ip
ORDER BY last_at DESC
LIMIT 10"
)->fetchAll();
$page = 'esx';
$page_title = 'ESX & whitelist IP';
require __DIR__ . '/_header.php';
?>
preseed.php, firstboot.sh,
nodeconf.php et callback.php sans authentification.
Toute autre IP reçoit un 403. Pour debug depuis ton domicile/bureau,
ajoute ton IP publique. Pour les VMs, ajoute l'IP de sortie WAN de l'IPFire.
/pi/ mais ne sont pas whitelistées.
Si l'une d'elles correspond à ton infra (ESX, VPN), ajoute-la.
Si c'est du bruit (bots de scan), ignore.
| IP source | Hits | Dernier endpoint | Vu il y a | |
|---|---|---|---|---|
|
| IP | Hits | Dernier accès |
|---|---|---|
|