tunnel.c revision 1.11 1 /* $NetBSD: tunnel.c,v 1.11 2008/05/06 17:29:04 dyoung Exp $ */
2
3 /*
4 * Copyright (c) 1983, 1993
5 * The Regents of the University of California. All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. Neither the name of the University nor the names of its contributors
16 * may be used to endorse or promote products derived from this software
17 * without specific prior written permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 * SUCH DAMAGE.
30 */
31
32 #include <sys/cdefs.h>
33 #ifndef lint
34 __RCSID("$NetBSD: tunnel.c,v 1.11 2008/05/06 17:29:04 dyoung Exp $");
35 #endif /* not lint */
36
37 #include <sys/param.h>
38 #include <sys/ioctl.h>
39 #include <sys/socket.h>
40
41 #include <net/if.h>
42
43 #ifdef INET6
44 #include <netinet/in.h>
45 #endif
46
47 #include <ctype.h>
48 #include <err.h>
49 #include <errno.h>
50 #include <netdb.h>
51 #include <string.h>
52 #include <stdlib.h>
53 #include <stdio.h>
54 #include <util.h>
55
56 #include "parse.h"
57 #include "env.h"
58 #include "util.h"
59 #include "tunnel.h"
60
61 #ifdef INET6
62 #include "af_inet6.h"
63 #endif
64
65 struct paddr tundst = PADDR_INITIALIZER(&tundst, "tundst", settunnel,
66 "tundst", NULL, NULL, NULL, &command_root.pb_parser);
67
68 struct paddr tunsrc = PADDR_INITIALIZER(&tunsrc, "tunsrc", NULL,
69 "tunsrc", NULL, NULL, NULL, &tundst.pa_parser);
70
71 int
72 settunnel(prop_dictionary_t env, prop_dictionary_t xenv)
73 {
74 const struct paddr_prefix *srcpfx, *dstpfx;
75 struct if_laddrreq req;
76 int s;
77 prop_data_t srcdata, dstdata;
78 const char *ifname;
79
80 if ((s = getsock(AF_UNSPEC)) == -1)
81 err(EXIT_FAILURE, "%s: getsock", __func__);
82
83 if ((ifname = getifname(env)) == NULL)
84 return -1;
85
86 srcdata = (prop_data_t)prop_dictionary_get(env, "tunsrc");
87 dstdata = (prop_data_t)prop_dictionary_get(env, "tundst");
88
89 if (srcdata == NULL || dstdata == NULL) {
90 warnx("%s.%d", __func__, __LINE__);
91 errno = ENOENT;
92 return -1;
93 }
94
95 srcpfx = prop_data_data_nocopy(srcdata);
96 dstpfx = prop_data_data_nocopy(dstdata);
97
98 if (srcpfx->pfx_addr.sa_family != dstpfx->pfx_addr.sa_family)
99 errx(EXIT_FAILURE,
100 "source and destination address families do not match");
101
102 memset(&req, 0, sizeof(req));
103 estrlcpy(req.iflr_name, ifname, sizeof(req.iflr_name));
104 memcpy(&req.addr, &srcpfx->pfx_addr,
105 MIN(sizeof(req.addr), srcpfx->pfx_addr.sa_len));
106 memcpy(&req.dstaddr, &dstpfx->pfx_addr,
107 MIN(sizeof(req.dstaddr), dstpfx->pfx_addr.sa_len));
108
109 #ifdef INET6
110 if (req.addr.ss_family == AF_INET6) {
111 struct sockaddr_in6 *s6, *d;
112
113 s6 = (struct sockaddr_in6 *)&req.addr;
114 d = (struct sockaddr_in6 *)&req.dstaddr;
115 if (s6->sin6_scope_id != d->sin6_scope_id) {
116 errx(EXIT_FAILURE, "scope mismatch");
117 /* NOTREACHED */
118 }
119 /* embed scopeid */
120 if (s6->sin6_scope_id &&
121 (IN6_IS_ADDR_LINKLOCAL(&s6->sin6_addr) ||
122 IN6_IS_ADDR_MC_LINKLOCAL(&s6->sin6_addr))) {
123 *(u_int16_t *)&s6->sin6_addr.s6_addr[2] =
124 htons(s6->sin6_scope_id);
125 }
126 if (d->sin6_scope_id &&
127 (IN6_IS_ADDR_LINKLOCAL(&d->sin6_addr) ||
128 IN6_IS_ADDR_MC_LINKLOCAL(&d->sin6_addr))) {
129 *(u_int16_t *)&d->sin6_addr.s6_addr[2] =
130 htons(d->sin6_scope_id);
131 }
132 }
133 #endif /* INET6 */
134
135 if (ioctl(s, SIOCSLIFPHYADDR, &req) == -1)
136 warn("SIOCSLIFPHYADDR");
137 return 0;
138 }
139
140 int
141 deletetunnel(prop_dictionary_t env, prop_dictionary_t xenv)
142 {
143 int s;
144 struct ifreq ifr;
145 const char *ifname;
146
147 if ((s = getsock(AF_UNSPEC)) == -1)
148 err(EXIT_FAILURE, "%s: getsock", __func__);
149
150 if ((ifname = getifname(env)) == NULL)
151 return -1;
152
153 memset(&ifr, 0, sizeof(ifr));
154
155 estrlcpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name));
156 if (ioctl(s, SIOCDIFPHYADDR, &ifr) == -1)
157 err(EXIT_FAILURE, "SIOCDIFPHYADDR");
158 return 0;
159 }
160
161 void
162 tunnel_status(prop_dictionary_t env, prop_dictionary_t oenv)
163 {
164 char dstserv[sizeof(",65535")];
165 char srcserv[sizeof(",65535")];
166 char psrcaddr[NI_MAXHOST];
167 char pdstaddr[NI_MAXHOST];
168 const int niflag = NI_NUMERICHOST|NI_NUMERICSERV;
169 struct if_laddrreq req;
170 const struct afswtch *lafp;
171 int s;
172 const char *ifname;
173
174 if ((s = getsock(AF_UNSPEC)) == -1)
175 err(EXIT_FAILURE, "%s: getsock", __func__);
176
177 psrcaddr[0] = pdstaddr[0] = '\0';
178
179 if ((ifname = getifname(env)) == NULL)
180 err(EXIT_FAILURE, "%s: getifname", __func__);
181
182 memset(&req, 0, sizeof(req));
183 estrlcpy(req.iflr_name, ifname, IFNAMSIZ);
184 if (ioctl(s, SIOCGLIFPHYADDR, &req) == -1)
185 return;
186 lafp = lookup_af_bynum(req.addr.ss_family);
187 #ifdef INET6
188 if (req.addr.ss_family == AF_INET6)
189 in6_fillscopeid((struct sockaddr_in6 *)&req.addr);
190 #endif /* INET6 */
191 getnameinfo((struct sockaddr *)&req.addr, req.addr.ss_len,
192 psrcaddr, sizeof(psrcaddr), &srcserv[1], sizeof(srcserv) - 1,
193 niflag);
194
195 #ifdef INET6
196 if (req.dstaddr.ss_family == AF_INET6)
197 in6_fillscopeid((struct sockaddr_in6 *)&req.dstaddr);
198 #endif
199 getnameinfo((struct sockaddr *)&req.dstaddr, req.dstaddr.ss_len,
200 pdstaddr, sizeof(pdstaddr), &dstserv[1], sizeof(dstserv) - 1,
201 niflag);
202
203 srcserv[0] = (strcmp(&srcserv[1], "0") == 0) ? '\0' : ',';
204 dstserv[0] = (strcmp(&dstserv[1], "0") == 0) ? '\0' : ',';
205
206 printf("\ttunnel %s %s%s --> %s%s\n", lafp ? lafp->af_name : "???",
207 psrcaddr, srcserv, pdstaddr, dstserv);
208 }
209