1/*
2 * MiniUPnP project
3 * http://miniupnp.free.fr/ or http://miniupnp.tuxfamily.org/
4 * (c) 2009-2012 Jardel Weyrich
5 * This software is subject to the conditions detailed
6 * in the LICENCE file provided within the distribution
7 */
8
9#include "ipfwaux.h"
10#include <stdio.h>
11#include <stdlib.h>
12#include <string.h>
13#include <syslog.h>
14#include <unistd.h>
15
16int ipfw_exec(int optname, void * optval, uintptr_t optlen) {
17	static int sock = -1;
18	int result;
19
20	switch (optname) {
21		case IP_FW_INIT:
22			if (sock == -1)
23				sock = socket(AF_INET, SOCK_RAW, IPPROTO_RAW);
24			if (sock < 0) {
25				syslog(LOG_ERR, "socket(SOCK_RAW): %m");
26				return -1;
27			}
28			break;
29		case IP_FW_TERM:
30			if (sock != -1)
31				close(sock);
32			sock = -1;
33			break;
34		case IP_FW_ADD:
35		case IP_FW_DEL:
36			result = setsockopt(sock, IPPROTO_IP, optname, optval, optlen);
37			if (result == -1) {
38				syslog(LOG_ERR, "setsockopt(): %m");
39				return -1;
40			}
41			break;
42		case IP_FW_GET:
43			result = getsockopt(sock, IPPROTO_IP, optname, optval, (socklen_t *)optlen);
44			if (result == -1) {
45				syslog(LOG_ERR, "getsockopt(): %m");
46				return -1;
47			}
48			break;
49		default:
50			syslog(LOG_ERR, "unhandled option");
51			return -1;
52	}
53
54	return 0;
55}
56
57void ipfw_free_ruleset(struct ip_fw ** rules) {
58	if (rules == NULL || *rules == NULL)
59		return;
60	free(*rules);
61	*rules = NULL;
62}
63
64int ipfw_fetch_ruleset(struct ip_fw ** rules, int * total_fetched, int count) {
65	int fetched;
66	socklen_t size;
67
68	if (rules == NULL || *total_fetched < 0 || count < 1)
69		return -1;
70
71	size = sizeof(struct ip_fw) * (*total_fetched + count);
72	*rules = (struct ip_fw *)realloc(*rules, size);
73	if (*rules == NULL) {
74		syslog(LOG_ERR, "realloc(): %m");
75		return -1;
76	}
77
78	(*rules)->version = IP_FW_CURRENT_API_VERSION;
79	if (ipfw_exec(IP_FW_GET, *rules, (uintptr_t)&size) < 0)
80		return -1;
81	fetched = *total_fetched;
82	*total_fetched = size / sizeof(struct ip_fw);
83
84	return *total_fetched - fetched;
85}
86
87int ipfw_validate_protocol(int value) {
88	switch (value) {
89		case IPPROTO_TCP:
90		case IPPROTO_UDP:
91			break;
92		default:
93			syslog(LOG_ERR, "invalid protocol");
94			return -1;
95	}
96	return 0;
97}
98
99int ipfw_validate_ifname(const char * const value) {
100	int len = strlen(value);
101	if (len < 2 || len > FW_IFNLEN) {
102		syslog(LOG_ERR, "invalid interface name");
103		return -1;
104	}
105	return 0;
106}
107
108