1 /* $KAME: prefix.c,v 1.9 2001/07/02 14:36:49 itojun Exp $ */
2 /* $FreeBSD: src/usr.sbin/faithd/prefix.c,v 1.1.2.2 2002/04/28 05:40:29 suz Exp $ */
3 /* $DragonFly: src/usr.sbin/faithd/prefix.c,v 1.2 2003/06/17 04:29:53 dillon Exp $ */
6 * Copyright (C) 2000 WIDE Project.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the project nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include <sys/types.h>
35 #include <sys/socket.h>
36 #include <netinet/in.h>
45 #define offsetof(type, member) ((size_t)(u_long)(&((type *)0)->member))
51 static int prefix_set __P((const char *, struct prefix *, int));
52 static struct config *config_load1 __P((const char *));
54 static void config_show1 __P((const struct config *));
55 static void config_show __P((void));
58 struct config *config_list = NULL;
60 const int niflags = NI_NUMERICHOST | NI_WITHSCOPEID;
62 const int niflags = NI_NUMERICHOST;
66 prefix_set(s, prefix, slash)
68 struct prefix *prefix;
72 struct addrinfo hints, *res = NULL;
84 memset(&hints, 0, sizeof(hints));
85 hints.ai_family = PF_UNSPEC;
86 hints.ai_socktype = SOCK_DGRAM; /*dummy*/
87 hints.ai_flags = AI_NUMERICHOST;
88 if (getaddrinfo(p, "0", &hints, &res))
90 if (res->ai_next || res->ai_addrlen > sizeof(prefix->a))
92 memcpy(&prefix->a, res->ai_addr, res->ai_addrlen);
94 switch (prefix->a.ss_family) {
97 a = (char *)&((struct sockaddr_in *)&prefix->a)->sin_addr;
101 a = (char *)&((struct sockaddr_in6 *)&prefix->a)->sin6_addr;
111 prefix->l = (int)strtoul(q, &r, 10);
114 if (prefix->l < 0 || prefix->l > max)
134 prefix_string(prefix)
135 const struct prefix *prefix;
137 static char buf[NI_MAXHOST + 20];
138 char hbuf[NI_MAXHOST];
140 if (getnameinfo((const struct sockaddr *)&prefix->a, prefix->a.ss_len,
141 hbuf, sizeof(hbuf), NULL, 0, niflags))
143 snprintf(buf, sizeof(buf), "%s/%d", hbuf, prefix->l);
148 prefix_match(prefix, sa)
149 const struct prefix *prefix;
150 const struct sockaddr *sa;
152 struct sockaddr_storage a, b;
156 if (prefix->a.ss_family != sa->sa_family ||
157 prefix->a.ss_len != sa->sa_len)
160 if (prefix->a.ss_len > sizeof(a) || sa->sa_len > sizeof(b))
163 switch (prefix->a.ss_family) {
165 off = offsetof(struct sockaddr_in, sin_addr);
168 off = offsetof(struct sockaddr_in6, sin6_addr);
171 if (memcmp(&prefix->a, sa, prefix->a.ss_len) != 0)
177 memcpy(&a, &prefix->a, prefix->a.ss_len);
178 memcpy(&b, sa, sa->sa_len);
179 l = prefix->l / 8 + (prefix->l % 8 ? 1 : 0);
182 if (off + l > a.ss_len)
185 pa = ((char *)&a) + off;
186 pb = ((char *)&b) + off;
188 pa[prefix->l / 8] &= 0xff00 >> (prefix->l % 8);
189 pb[prefix->l / 8] &= 0xff00 >> (prefix->l % 8);
191 if (memcmp(pa, pb, l) != 0)
198 * prefix/prefixlen permit/deny prefix/prefixlen [srcaddr]
199 * 3ffe::/16 permit 10.0.0.0/8 10.1.1.1
201 static struct config *
211 if (strlen(line) + 1 > sizeof(buf))
213 strlcpy(buf, line, sizeof(buf));
215 p = strchr(buf, '\n');
219 p = strchr(buf, '#');
222 if (strlen(buf) == 0)
226 memset(token, 0, sizeof(token));
227 for (i = 0; i < sizeof(token) / sizeof(token[0]); i++) {
228 token[i] = strtok(p, "\t ");
230 if (token[i] == NULL)
234 if (strtok(p, "\t ") != NULL)
236 /* insufficient tokens */
245 conf = (struct config *)malloc(sizeof(*conf));
248 memset(conf, 0, sizeof(*conf));
250 if (strcasecmp(token[1], "permit") == 0)
252 else if (strcasecmp(token[1], "deny") == 0)
255 /* invalid keyword is considered as "deny" */
259 if (prefix_set(token[0], &conf->match, 1) < 0)
261 if (prefix_set(token[2], &conf->dest, 1) < 0)
264 if (prefix_set(token[3], &conf->src, 0) < 0)
276 config_load(configfile)
277 const char *configfile;
281 struct config *conf, *p;
282 struct config sentinel;
287 configfile = _PATH_PREFIX_CONF;
288 fp = fopen(configfile, "r");
293 while (fgets(buf, sizeof(buf), fp) != NULL) {
294 conf = config_load1(buf);
300 config_list = sentinel.next;
309 const struct config *conf;
313 p = prefix_string(&conf->match);
314 printf("%s", p ? p : "?");
321 p = prefix_string(&conf->dest);
322 printf(" %s", p ? p : "?");
332 for (conf = config_list; conf; conf = conf->next)
337 const struct config *
338 config_match(sa1, sa2)
339 struct sockaddr *sa1, *sa2;
341 static struct config conf;
342 const struct config *p;
344 if (sa1->sa_len > sizeof(conf.match.a) ||
345 sa2->sa_len > sizeof(conf.dest.a))
348 memset(&conf, 0, sizeof(conf));
351 memcpy(&conf.match.a, sa1, sa1->sa_len);
352 memcpy(&conf.dest.a, sa2, sa2->sa_len);
356 for (p = config_list; p; p = p->next)
357 if (prefix_match(&p->match, sa1) && prefix_match(&p->dest, sa2))