summaryrefslogtreecommitdiff
path: root/src/openvpn/mroute.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/openvpn/mroute.c')
-rw-r--r--src/openvpn/mroute.c365
1 files changed, 0 insertions, 365 deletions
diff --git a/src/openvpn/mroute.c b/src/openvpn/mroute.c
deleted file mode 100644
index 0a7bcf6..0000000
--- a/src/openvpn/mroute.c
+++ /dev/null
@@ -1,365 +0,0 @@
-/*
- * OpenVPN -- An application to securely tunnel IP networks
- * over a single TCP/UDP port, with support for SSL/TLS-based
- * session authentication and key exchange,
- * packet encryption, packet authentication, and
- * packet compression.
- *
- * Copyright (C) 2002-2005 OpenVPN Solutions LLC <info@openvpn.net>
- *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License version 2
- * as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program (see the file COPYING included with this
- * distribution); if not, write to the Free Software Foundation, Inc.,
- * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
- */
-
-#ifdef WIN32
-#include "config-win32.h"
-#else
-#include "config.h"
-#endif
-
-#include "syshead.h"
-
-#if P2MP_SERVER
-
-#include "mroute.h"
-#include "proto.h"
-#include "error.h"
-#include "socket.h"
-
-#include "memdbg.h"
-
-void
-mroute_addr_init (struct mroute_addr *addr)
-{
- CLEAR (*addr);
-}
-
-/*
- * Ethernet multicast addresses.
- */
-
-static inline bool
-is_mac_mcast_addr (const uint8_t *mac)
-{
- return (bool) mac[0] & 1;
-}
-
-static inline bool
-is_mac_mcast_maddr (const struct mroute_addr *addr)
-{
- return (addr->type & MR_ADDR_MASK) == MR_ADDR_ETHER && is_mac_mcast_addr (addr->addr);
-}
-
-/*
- * Don't learn certain addresses.
- */
-bool
-mroute_learnable_address (const struct mroute_addr *addr)
-{
- int i;
- bool not_all_zeros = false;
- bool not_all_ones = false;
-
- for (i = 0; i < addr->len; ++i)
- {
- int b = addr->addr[i];
- if (b != 0x00)
- not_all_zeros = true;
- if (b != 0xFF)
- not_all_ones = true;
- }
- return not_all_zeros && not_all_ones && !is_mac_mcast_maddr (addr);
-}
-
-/*
- * Given a raw packet in buf, return the src and dest
- * addresses of the packet.
- */
-unsigned int
-mroute_extract_addr_from_packet (struct mroute_addr *src,
- struct mroute_addr *dest,
- struct buffer *buf,
- int tunnel_type)
-{
- unsigned int ret = 0;
- verify_align_4 (buf);
- if (tunnel_type == DEV_TYPE_TUN)
- {
- if (BLEN (buf) >= 1)
- {
- switch (OPENVPN_IPH_GET_VER (*BPTR(buf)))
- {
- case 4:
- if (BLEN (buf) >= (int) sizeof (struct openvpn_iphdr))
- {
- const struct openvpn_iphdr *ip = (const struct openvpn_iphdr *) BPTR (buf);
- if (src)
- {
- src->type = MR_ADDR_IPV4;
- src->netbits = 0;
- src->len = 4;
- memcpy (src->addr, &ip->saddr, 4);
- }
- if (dest)
- {
- dest->type = MR_ADDR_IPV4;
- dest->netbits = 0;
- dest->len = 4;
- memcpy (dest->addr, &ip->daddr, 4);
-
- /* mcast address? */
- if ((ip->daddr & htonl(IP_MCAST_SUBNET_MASK)) == htonl(IP_MCAST_NETWORK))
- ret |= MROUTE_EXTRACT_MCAST;
-
- /* IGMP message? */
- if (ip->protocol == OPENVPN_IPPROTO_IGMP)
- ret |= MROUTE_EXTRACT_IGMP;
- }
- ret |= MROUTE_EXTRACT_SUCCEEDED;
- }
- break;
- case 6:
- {
- msg (M_WARN, "Need IPv6 code in mroute_extract_addr_from_packet");
- break;
- }
- }
- }
- }
- else if (tunnel_type == DEV_TYPE_TAP)
- {
- if (BLEN (buf) >= (int) sizeof (struct openvpn_ethhdr))
- {
- const struct openvpn_ethhdr *eth = (const struct openvpn_ethhdr *) BPTR (buf);
- if (src)
- {
- src->type = MR_ADDR_ETHER;
- src->netbits = 0;
- src->len = 6;
- memcpy (src->addr, eth->source, 6);
- }
- if (dest)
- {
- dest->type = MR_ADDR_ETHER;
- dest->netbits = 0;
- dest->len = 6;
- memcpy (dest->addr, eth->dest, 6);
-
- /* ethernet broadcast/multicast packet? */
- if (is_mac_mcast_addr (eth->dest))
- ret |= MROUTE_EXTRACT_BCAST;
- }
-
- ret |= MROUTE_EXTRACT_SUCCEEDED;
- }
- }
- return ret;
-}
-
-/*
- * Translate a struct sockaddr_in (saddr)
- * to a struct mroute_addr (addr).
- */
-bool
-mroute_extract_sockaddr_in (struct mroute_addr *addr, const struct sockaddr_in *saddr, bool use_port)
-{
- if (saddr->sin_family == AF_INET)
- {
- if (use_port)
- {
- addr->type = MR_ADDR_IPV4 | MR_WITH_PORT;
- addr->netbits = 0;
- addr->len = 6;
- memcpy (addr->addr, &saddr->sin_addr.s_addr, 4);
- memcpy (addr->addr + 4, &saddr->sin_port, 2);
- }
- else
- {
- addr->type = MR_ADDR_IPV4;
- addr->netbits = 0;
- addr->len = 4;
- memcpy (addr->addr, &saddr->sin_addr.s_addr, 4);
- }
- return true;
- }
- return false;
-}
-
-/*
- * Zero off the host bits in an address, leaving
- * only the network bits, using the netbits member of
- * struct mroute_addr as the controlling parameter.
- */
-void
-mroute_addr_mask_host_bits (struct mroute_addr *ma)
-{
- in_addr_t addr = ntohl(*(in_addr_t*)ma->addr);
- ASSERT ((ma->type & MR_ADDR_MASK) == MR_ADDR_IPV4);
- addr &= netbits_to_netmask (ma->netbits);
- *(in_addr_t*)ma->addr = htonl (addr);
-}
-
-/*
- * The mroute_addr hash function takes into account the
- * address type, number of bits in the network address,
- * and the actual address.
- */
-uint32_t
-mroute_addr_hash_function (const void *key, uint32_t iv)
-{
- return hash_func (mroute_addr_hash_ptr ((const struct mroute_addr *) key),
- mroute_addr_hash_len ((const struct mroute_addr *) key),
- iv);
-}
-
-bool
-mroute_addr_compare_function (const void *key1, const void *key2)
-{
- return mroute_addr_equal ((const struct mroute_addr *) key1,
- (const struct mroute_addr *) key2);
-}
-
-const char *
-mroute_addr_print (const struct mroute_addr *ma,
- struct gc_arena *gc)
-{
- struct buffer out = alloc_buf_gc (64, gc);
- if (ma)
- {
- struct mroute_addr maddr = *ma;
-
- switch (maddr.type & MR_ADDR_MASK)
- {
- case MR_ADDR_ETHER:
- buf_printf (&out, "%s", format_hex_ex (ma->addr, 6, 0, 1, ":", gc));
- break;
- case MR_ADDR_IPV4:
- {
- struct buffer buf;
- in_addr_t addr;
- int port;
- bool status;
- buf_set_read (&buf, maddr.addr, maddr.len);
- addr = buf_read_u32 (&buf, &status);
- if (status)
- {
- buf_printf (&out, "%s", print_in_addr_t (addr, IA_EMPTY_IF_UNDEF, gc));
- if (maddr.type & MR_WITH_NETBITS)
- buf_printf (&out, "/%d", maddr.netbits);
- }
- if (maddr.type & MR_WITH_PORT)
- {
- port = buf_read_u16 (&buf);
- if (port >= 0)
- buf_printf (&out, ":%d", port);
- }
- }
- break;
- case MR_ADDR_IPV6:
- buf_printf (&out, "IPV6");
- break;
- default:
- buf_printf (&out, "UNKNOWN");
- break;
- }
- return BSTR (&out);
- }
- else
- return "[NULL]";
-}
-
-/*
- * mroute_helper's main job is keeping track of
- * currently used CIDR netlengths, so we don't
- * have to cycle through all 33.
- */
-
-struct mroute_helper *
-mroute_helper_init (int ageable_ttl_secs)
-{
- struct mroute_helper *mh;
- ALLOC_OBJ_CLEAR (mh, struct mroute_helper);
- /*mutex_init (&mh->mutex);*/
- mh->ageable_ttl_secs = ageable_ttl_secs;
- return mh;
-}
-
-static void
-mroute_helper_regenerate (struct mroute_helper *mh)
-{
- int i, j = 0;
- for (i = MR_HELPER_NET_LEN - 1; i >= 0; --i)
- {
- if (mh->net_len_refcount[i] > 0)
- mh->net_len[j++] = (uint8_t) i;
- }
- mh->n_net_len = j;
-
-#ifdef ENABLE_DEBUG
- if (check_debug_level (D_MULTI_DEBUG))
- {
- struct gc_arena gc = gc_new ();
- struct buffer out = alloc_buf_gc (256, &gc);
- buf_printf (&out, "MROUTE CIDR netlen:");
- for (i = 0; i < mh->n_net_len; ++i)
- {
- buf_printf (&out, " /%d", mh->net_len[i]);
- }
- dmsg (D_MULTI_DEBUG, "%s", BSTR (&out));
- gc_free (&gc);
- }
-#endif
-}
-
-void
-mroute_helper_add_iroute (struct mroute_helper *mh, const struct iroute *ir)
-{
- if (ir->netbits >= 0)
- {
- ASSERT (ir->netbits < MR_HELPER_NET_LEN);
- mroute_helper_lock (mh);
- ++mh->cache_generation;
- ++mh->net_len_refcount[ir->netbits];
- if (mh->net_len_refcount[ir->netbits] == 1)
- mroute_helper_regenerate (mh);
- mroute_helper_unlock (mh);
- }
-}
-
-void
-mroute_helper_del_iroute (struct mroute_helper *mh, const struct iroute *ir)
-{
- if (ir->netbits >= 0)
- {
- ASSERT (ir->netbits < MR_HELPER_NET_LEN);
- mroute_helper_lock (mh);
- ++mh->cache_generation;
- --mh->net_len_refcount[ir->netbits];
- ASSERT (mh->net_len_refcount[ir->netbits] >= 0);
- if (!mh->net_len_refcount[ir->netbits])
- mroute_helper_regenerate (mh);
- mroute_helper_unlock (mh);
- }
-}
-
-void
-mroute_helper_free (struct mroute_helper *mh)
-{
- /*mutex_destroy (&mh->mutex);*/
- free (mh);
-}
-
-#else
-static void dummy(void) {}
-#endif /* P2MP_SERVER */
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-16 05:24:44 +0000