rarpd.c revision 1.13 1 1.13 mikel /* $NetBSD: rarpd.c,v 1.13 1997/01/18 02:22:21 mikel Exp $ */
2 1.9 thorpej
3 1.1 deraadt /*
4 1.1 deraadt * Copyright (c) 1990 The Regents of the University of California.
5 1.1 deraadt * All rights reserved.
6 1.1 deraadt *
7 1.1 deraadt * Redistribution and use in source and binary forms, with or without
8 1.1 deraadt * modification, are permitted provided that: (1) source code distributions
9 1.1 deraadt * retain the above copyright notice and this paragraph in its entirety, (2)
10 1.1 deraadt * distributions including binary code include the above copyright notice and
11 1.1 deraadt * this paragraph in its entirety in the documentation or other materials
12 1.1 deraadt * provided with the distribution, and (3) all advertising materials mentioning
13 1.1 deraadt * features or use of this software display the following acknowledgement:
14 1.1 deraadt * ``This product includes software developed by the University of California,
15 1.1 deraadt * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
16 1.1 deraadt * the University nor the names of its contributors may be used to endorse
17 1.1 deraadt * or promote products derived from this software without specific prior
18 1.1 deraadt * written permission.
19 1.1 deraadt * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
20 1.1 deraadt * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
21 1.1 deraadt * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
22 1.1 deraadt */
23 1.1 deraadt #ifndef lint
24 1.1 deraadt char copyright[] =
25 1.1 deraadt "@(#) Copyright (c) 1990 The Regents of the University of California.\n\
26 1.1 deraadt All rights reserved.\n";
27 1.1 deraadt #endif /* not lint */
28 1.1 deraadt
29 1.1 deraadt #ifndef lint
30 1.13 mikel static char rcsid[] = "$NetBSD: rarpd.c,v 1.13 1997/01/18 02:22:21 mikel Exp $";
31 1.1 deraadt #endif
32 1.1 deraadt
33 1.1 deraadt
34 1.1 deraadt /*
35 1.1 deraadt * rarpd - Reverse ARP Daemon
36 1.1 deraadt *
37 1.1 deraadt * Usage: rarpd -a [ -d -f ]
38 1.1 deraadt * rarpd [ -d -f ] interface
39 1.1 deraadt */
40 1.1 deraadt
41 1.1 deraadt #include <stdio.h>
42 1.1 deraadt #include <stdlib.h>
43 1.1 deraadt #include <syslog.h>
44 1.1 deraadt #include <string.h>
45 1.1 deraadt #include <strings.h>
46 1.1 deraadt #include <sys/types.h>
47 1.1 deraadt #include <unistd.h>
48 1.1 deraadt #include <sys/time.h>
49 1.1 deraadt #include <net/bpf.h>
50 1.1 deraadt #include <sys/socket.h>
51 1.1 deraadt #include <sys/ioctl.h>
52 1.1 deraadt #include <net/if.h>
53 1.7 mycroft #include <net/if_dl.h>
54 1.7 mycroft #include <net/if_types.h>
55 1.1 deraadt #include <netinet/in.h>
56 1.1 deraadt #include <netinet/if_ether.h>
57 1.1 deraadt #include <sys/errno.h>
58 1.1 deraadt #include <sys/file.h>
59 1.1 deraadt #include <netdb.h>
60 1.1 deraadt #include <arpa/inet.h>
61 1.1 deraadt #include <dirent.h>
62 1.1 deraadt
63 1.1 deraadt #define FATAL 1 /* fatal error occurred */
64 1.1 deraadt #define NONFATAL 0 /* non fatal error occurred */
65 1.1 deraadt
66 1.1 deraadt /*
67 1.1 deraadt * The structure for each interface.
68 1.1 deraadt */
69 1.1 deraadt struct if_info {
70 1.1 deraadt int ii_fd; /* BPF file descriptor */
71 1.1 deraadt u_char ii_eaddr[6]; /* Ethernet address of this interface */
72 1.1 deraadt u_long ii_ipaddr; /* IP address of this interface */
73 1.1 deraadt u_long ii_netmask; /* subnet or net mask */
74 1.1 deraadt struct if_info *ii_next;
75 1.1 deraadt };
76 1.1 deraadt /*
77 1.1 deraadt * The list of all interfaces that are being listened to. rarp_loop()
78 1.1 deraadt * "selects" on the descriptors in this list.
79 1.1 deraadt */
80 1.1 deraadt struct if_info *iflist;
81 1.1 deraadt
82 1.1 deraadt int rarp_open __P((char *));
83 1.1 deraadt void init_one __P((char *));
84 1.1 deraadt void init_all __P((void));
85 1.1 deraadt void rarp_loop __P((void));
86 1.1 deraadt void lookup_eaddr __P((char *, u_char *));
87 1.1 deraadt void lookup_ipaddr __P((char *, u_long *, u_long *));
88 1.1 deraadt void usage __P((void));
89 1.1 deraadt void rarp_process __P((struct if_info *, u_char *));
90 1.1 deraadt void rarp_reply __P((struct if_info *, struct ether_header *, u_long));
91 1.1 deraadt void update_arptab __P((u_char *, u_long));
92 1.1 deraadt void err __P((int, const char *,...));
93 1.1 deraadt void debug __P((const char *,...));
94 1.1 deraadt u_long ipaddrtonetmask __P((u_long));
95 1.1 deraadt
96 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
97 1.8 thorpej int rarp_bootable __P((u_long));
98 1.8 thorpej #endif
99 1.8 thorpej
100 1.1 deraadt int aflag = 0; /* listen on "all" interfaces */
101 1.1 deraadt int dflag = 0; /* print debugging messages */
102 1.1 deraadt int fflag = 0; /* don't fork */
103 1.1 deraadt
104 1.12 jtc int
105 1.1 deraadt main(argc, argv)
106 1.1 deraadt int argc;
107 1.1 deraadt char **argv;
108 1.1 deraadt {
109 1.1 deraadt int op, pid, devnull, f;
110 1.1 deraadt char *ifname, *hostname, *name;
111 1.1 deraadt
112 1.1 deraadt extern char *optarg;
113 1.1 deraadt extern int optind, opterr;
114 1.1 deraadt
115 1.1 deraadt if (name = strrchr(argv[0], '/'))
116 1.1 deraadt ++name;
117 1.1 deraadt else
118 1.1 deraadt name = argv[0];
119 1.1 deraadt if (*name == '-')
120 1.1 deraadt ++name;
121 1.1 deraadt
122 1.1 deraadt /* All error reporting is done through syslogs. */
123 1.1 deraadt openlog(name, LOG_PID | LOG_CONS, LOG_DAEMON);
124 1.1 deraadt
125 1.1 deraadt opterr = 0;
126 1.1 deraadt while ((op = getopt(argc, argv, "adf")) != EOF) {
127 1.1 deraadt switch (op) {
128 1.1 deraadt case 'a':
129 1.1 deraadt ++aflag;
130 1.1 deraadt break;
131 1.1 deraadt
132 1.1 deraadt case 'd':
133 1.1 deraadt ++dflag;
134 1.1 deraadt break;
135 1.1 deraadt
136 1.1 deraadt case 'f':
137 1.1 deraadt ++fflag;
138 1.1 deraadt break;
139 1.1 deraadt
140 1.1 deraadt default:
141 1.1 deraadt usage();
142 1.1 deraadt /* NOTREACHED */
143 1.1 deraadt }
144 1.1 deraadt }
145 1.1 deraadt ifname = argv[optind++];
146 1.1 deraadt hostname = ifname ? argv[optind] : 0;
147 1.1 deraadt if ((aflag && ifname) || (!aflag && ifname == 0))
148 1.1 deraadt usage();
149 1.1 deraadt
150 1.1 deraadt if (aflag)
151 1.1 deraadt init_all();
152 1.1 deraadt else
153 1.1 deraadt init_one(ifname);
154 1.1 deraadt
155 1.1 deraadt if ((!fflag) && (!dflag)) {
156 1.1 deraadt pid = fork();
157 1.1 deraadt if (pid > 0)
158 1.1 deraadt /* Parent exits, leaving child in background. */
159 1.1 deraadt exit(0);
160 1.1 deraadt else
161 1.1 deraadt if (pid == -1) {
162 1.1 deraadt err(FATAL, "cannot fork");
163 1.1 deraadt /* NOTREACHED */
164 1.1 deraadt }
165 1.1 deraadt /* Fade into the background */
166 1.1 deraadt f = open("/dev/tty", O_RDWR);
167 1.1 deraadt if (f >= 0) {
168 1.1 deraadt if (ioctl(f, TIOCNOTTY, 0) < 0) {
169 1.1 deraadt err(FATAL, "TIOCNOTTY: %s", strerror(errno));
170 1.1 deraadt /* NOTREACHED */
171 1.1 deraadt }
172 1.1 deraadt (void) close(f);
173 1.1 deraadt }
174 1.1 deraadt (void) chdir("/");
175 1.1 deraadt (void) setpgrp(0, getpid());
176 1.1 deraadt devnull = open("/dev/null", O_RDWR);
177 1.1 deraadt if (devnull >= 0) {
178 1.1 deraadt (void) dup2(devnull, 0);
179 1.1 deraadt (void) dup2(devnull, 1);
180 1.1 deraadt (void) dup2(devnull, 2);
181 1.1 deraadt if (devnull > 2)
182 1.1 deraadt (void) close(devnull);
183 1.1 deraadt }
184 1.1 deraadt }
185 1.1 deraadt rarp_loop();
186 1.1 deraadt }
187 1.1 deraadt /*
188 1.1 deraadt * Add 'ifname' to the interface list. Lookup its IP address and network
189 1.1 deraadt * mask and Ethernet address, and open a BPF file for it.
190 1.1 deraadt */
191 1.1 deraadt void
192 1.1 deraadt init_one(ifname)
193 1.1 deraadt char *ifname;
194 1.1 deraadt {
195 1.1 deraadt struct if_info *p;
196 1.1 deraadt
197 1.7 mycroft p = (struct if_info *)malloc(sizeof(*p));
198 1.1 deraadt if (p == 0) {
199 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
200 1.1 deraadt /* NOTREACHED */
201 1.1 deraadt }
202 1.1 deraadt p->ii_next = iflist;
203 1.1 deraadt iflist = p;
204 1.1 deraadt
205 1.1 deraadt p->ii_fd = rarp_open(ifname);
206 1.1 deraadt lookup_eaddr(ifname, p->ii_eaddr);
207 1.1 deraadt lookup_ipaddr(ifname, &p->ii_ipaddr, &p->ii_netmask);
208 1.1 deraadt }
209 1.1 deraadt /*
210 1.1 deraadt * Initialize all "candidate" interfaces that are in the system
211 1.1 deraadt * configuration list. A "candidate" is up, not loopback and not
212 1.1 deraadt * point to point.
213 1.1 deraadt */
214 1.1 deraadt void
215 1.1 deraadt init_all()
216 1.1 deraadt {
217 1.7 mycroft char inbuf[8192];
218 1.1 deraadt struct ifconf ifc;
219 1.10 hpeyerl struct ifreq ifreq, *ifr;
220 1.7 mycroft int fd;
221 1.7 mycroft int i, len;
222 1.1 deraadt
223 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
224 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
225 1.1 deraadt /* NOTREACHED */
226 1.1 deraadt }
227 1.7 mycroft
228 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
229 1.7 mycroft ifc.ifc_buf = inbuf;
230 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
231 1.1 deraadt ifc.ifc_len < sizeof(struct ifreq)) {
232 1.7 mycroft err(FATAL, "init_all: SIOCGIFCONF: %s", strerror(errno));
233 1.1 deraadt /* NOTREACHED */
234 1.1 deraadt }
235 1.7 mycroft ifr = ifc.ifc_req;
236 1.10 hpeyerl ifreq.ifr_name[0] = '\0';
237 1.7 mycroft for (i = 0; i < ifc.ifc_len;
238 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
239 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
240 1.10 hpeyerl if (!strncmp(ifreq.ifr_name, ifr->ifr_name, sizeof(ifr->ifr_name)))
241 1.10 hpeyerl continue;
242 1.10 hpeyerl ifreq = *ifr;
243 1.7 mycroft if (ioctl(fd, SIOCGIFFLAGS, (caddr_t)ifr) < 0) {
244 1.7 mycroft err(FATAL, "init_all: SIOCGIFFLAGS: %s",
245 1.7 mycroft strerror(errno));
246 1.1 deraadt /* NOTREACHED */
247 1.1 deraadt }
248 1.7 mycroft if ((ifr->ifr_flags &
249 1.7 mycroft (IFF_UP | IFF_LOOPBACK | IFF_POINTOPOINT)) != IFF_UP)
250 1.1 deraadt continue;
251 1.7 mycroft init_one(ifr->ifr_name);
252 1.1 deraadt }
253 1.1 deraadt (void) close(fd);
254 1.1 deraadt }
255 1.1 deraadt
256 1.1 deraadt void
257 1.1 deraadt usage()
258 1.1 deraadt {
259 1.1 deraadt (void) fprintf(stderr, "usage: rarpd -a [ -d -f ]\n");
260 1.1 deraadt (void) fprintf(stderr, " rarpd [ -d -f ] interface\n");
261 1.1 deraadt exit(1);
262 1.1 deraadt }
263 1.1 deraadt
264 1.1 deraadt static int
265 1.1 deraadt bpf_open()
266 1.1 deraadt {
267 1.1 deraadt int fd;
268 1.1 deraadt int n = 0;
269 1.1 deraadt char device[sizeof "/dev/bpf000"];
270 1.1 deraadt
271 1.1 deraadt /* Go through all the minors and find one that isn't in use. */
272 1.1 deraadt do {
273 1.1 deraadt (void) sprintf(device, "/dev/bpf%d", n++);
274 1.1 deraadt fd = open(device, O_RDWR);
275 1.1 deraadt } while (fd < 0 && errno == EBUSY);
276 1.1 deraadt
277 1.1 deraadt if (fd < 0) {
278 1.1 deraadt err(FATAL, "%s: %s", device, strerror(errno));
279 1.1 deraadt /* NOTREACHED */
280 1.1 deraadt }
281 1.1 deraadt return fd;
282 1.1 deraadt }
283 1.1 deraadt /*
284 1.1 deraadt * Open a BPF file and attach it to the interface named 'device'.
285 1.1 deraadt * Set immediate mode, and set a filter that accepts only RARP requests.
286 1.1 deraadt */
287 1.1 deraadt int
288 1.1 deraadt rarp_open(device)
289 1.1 deraadt char *device;
290 1.1 deraadt {
291 1.1 deraadt int fd;
292 1.1 deraadt struct ifreq ifr;
293 1.1 deraadt u_int dlt;
294 1.1 deraadt int immediate;
295 1.1 deraadt
296 1.1 deraadt static struct bpf_insn insns[] = {
297 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
298 1.1 deraadt BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ETHERTYPE_REVARP, 0, 3),
299 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
300 1.6 cgd BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ARPOP_REVREQUEST, 0, 1),
301 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, sizeof(struct ether_arp) +
302 1.1 deraadt sizeof(struct ether_header)),
303 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, 0),
304 1.1 deraadt };
305 1.1 deraadt static struct bpf_program filter = {
306 1.1 deraadt sizeof insns / sizeof(insns[0]),
307 1.1 deraadt insns
308 1.1 deraadt };
309 1.1 deraadt
310 1.1 deraadt fd = bpf_open();
311 1.1 deraadt
312 1.1 deraadt /* Set immediate mode so packets are processed as they arrive. */
313 1.1 deraadt immediate = 1;
314 1.1 deraadt if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
315 1.1 deraadt err(FATAL, "BIOCIMMEDIATE: %s", strerror(errno));
316 1.1 deraadt /* NOTREACHED */
317 1.1 deraadt }
318 1.1 deraadt (void) strncpy(ifr.ifr_name, device, sizeof ifr.ifr_name);
319 1.1 deraadt if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
320 1.1 deraadt err(FATAL, "BIOCSETIF: %s", strerror(errno));
321 1.1 deraadt /* NOTREACHED */
322 1.1 deraadt }
323 1.1 deraadt /* Check that the data link layer is an Ethernet; this code won't work
324 1.1 deraadt * with anything else. */
325 1.1 deraadt if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
326 1.1 deraadt err(FATAL, "BIOCGDLT: %s", strerror(errno));
327 1.1 deraadt /* NOTREACHED */
328 1.1 deraadt }
329 1.1 deraadt if (dlt != DLT_EN10MB) {
330 1.1 deraadt err(FATAL, "%s is not an ethernet", device);
331 1.1 deraadt /* NOTREACHED */
332 1.1 deraadt }
333 1.1 deraadt /* Set filter program. */
334 1.1 deraadt if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
335 1.1 deraadt err(FATAL, "BIOCSETF: %s", strerror(errno));
336 1.1 deraadt /* NOTREACHED */
337 1.1 deraadt }
338 1.1 deraadt return fd;
339 1.1 deraadt }
340 1.1 deraadt /*
341 1.1 deraadt * Perform various sanity checks on the RARP request packet. Return
342 1.1 deraadt * false on failure and log the reason.
343 1.1 deraadt */
344 1.1 deraadt static int
345 1.1 deraadt rarp_check(p, len)
346 1.1 deraadt u_char *p;
347 1.1 deraadt int len;
348 1.1 deraadt {
349 1.1 deraadt struct ether_header *ep = (struct ether_header *) p;
350 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (p + sizeof(*ep));
351 1.1 deraadt
352 1.1 deraadt (void) debug("got a packet");
353 1.1 deraadt
354 1.1 deraadt if (len < sizeof(*ep) + sizeof(*ap)) {
355 1.1 deraadt err(NONFATAL, "truncated request");
356 1.1 deraadt return 0;
357 1.1 deraadt }
358 1.1 deraadt /* XXX This test might be better off broken out... */
359 1.11 mycroft #ifdef __FreeBSD__
360 1.11 mycroft /* BPF (incorrectly) returns this in host order. */
361 1.11 mycroft if (ep->ether_type != ETHERTYPE_REVARP ||
362 1.11 mycroft #else
363 1.1 deraadt if (ntohs (ep->ether_type) != ETHERTYPE_REVARP ||
364 1.11 mycroft #endif
365 1.1 deraadt ntohs (ap->arp_hrd) != ARPHRD_ETHER ||
366 1.6 cgd ntohs (ap->arp_op) != ARPOP_REVREQUEST ||
367 1.1 deraadt ntohs (ap->arp_pro) != ETHERTYPE_IP ||
368 1.1 deraadt ap->arp_hln != 6 || ap->arp_pln != 4) {
369 1.1 deraadt err(NONFATAL, "request fails sanity check");
370 1.1 deraadt return 0;
371 1.1 deraadt }
372 1.1 deraadt if (bcmp((char *) &ep->ether_shost, (char *) &ap->arp_sha, 6) != 0) {
373 1.1 deraadt err(NONFATAL, "ether/arp sender address mismatch");
374 1.1 deraadt return 0;
375 1.1 deraadt }
376 1.1 deraadt if (bcmp((char *) &ap->arp_sha, (char *) &ap->arp_tha, 6) != 0) {
377 1.1 deraadt err(NONFATAL, "ether/arp target address mismatch");
378 1.1 deraadt return 0;
379 1.1 deraadt }
380 1.1 deraadt return 1;
381 1.1 deraadt }
382 1.1 deraadt
383 1.1 deraadt /*
384 1.1 deraadt * Loop indefinitely listening for RARP requests on the
385 1.1 deraadt * interfaces in 'iflist'.
386 1.1 deraadt */
387 1.1 deraadt void
388 1.1 deraadt rarp_loop()
389 1.1 deraadt {
390 1.1 deraadt u_char *buf, *bp, *ep;
391 1.1 deraadt int cc, fd;
392 1.1 deraadt fd_set fds, listeners;
393 1.1 deraadt int bufsize, maxfd = 0;
394 1.1 deraadt struct if_info *ii;
395 1.1 deraadt
396 1.1 deraadt if (iflist == 0) {
397 1.1 deraadt err(FATAL, "no interfaces");
398 1.1 deraadt /* NOTREACHED */
399 1.1 deraadt }
400 1.1 deraadt if (ioctl(iflist->ii_fd, BIOCGBLEN, (caddr_t) & bufsize) < 0) {
401 1.1 deraadt err(FATAL, "BIOCGBLEN: %s", strerror(errno));
402 1.1 deraadt /* NOTREACHED */
403 1.1 deraadt }
404 1.1 deraadt buf = (u_char *) malloc((unsigned) bufsize);
405 1.1 deraadt if (buf == 0) {
406 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
407 1.1 deraadt /* NOTREACHED */
408 1.1 deraadt }
409 1.1 deraadt /*
410 1.1 deraadt * Find the highest numbered file descriptor for select().
411 1.1 deraadt * Initialize the set of descriptors to listen to.
412 1.1 deraadt */
413 1.1 deraadt FD_ZERO(&fds);
414 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
415 1.1 deraadt FD_SET(ii->ii_fd, &fds);
416 1.1 deraadt if (ii->ii_fd > maxfd)
417 1.1 deraadt maxfd = ii->ii_fd;
418 1.1 deraadt }
419 1.1 deraadt while (1) {
420 1.1 deraadt listeners = fds;
421 1.1 deraadt if (select(maxfd + 1, &listeners, (struct fd_set *) 0,
422 1.1 deraadt (struct fd_set *) 0, (struct timeval *) 0) < 0) {
423 1.1 deraadt err(FATAL, "select: %s", strerror(errno));
424 1.1 deraadt /* NOTREACHED */
425 1.1 deraadt }
426 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
427 1.1 deraadt fd = ii->ii_fd;
428 1.1 deraadt if (!FD_ISSET(fd, &listeners))
429 1.1 deraadt continue;
430 1.1 deraadt again:
431 1.1 deraadt cc = read(fd, (char *) buf, bufsize);
432 1.1 deraadt /* Don't choke when we get ptraced */
433 1.1 deraadt if (cc < 0 && errno == EINTR)
434 1.1 deraadt goto again;
435 1.1 deraadt /* Due to a SunOS bug, after 2^31 bytes, the file
436 1.1 deraadt * offset overflows and read fails with EINVAL. The
437 1.1 deraadt * lseek() to 0 will fix things. */
438 1.1 deraadt if (cc < 0) {
439 1.1 deraadt if (errno == EINVAL &&
440 1.5 cgd (lseek(fd, 0, SEEK_CUR) + bufsize) < 0) {
441 1.1 deraadt (void) lseek(fd, 0, 0);
442 1.1 deraadt goto again;
443 1.1 deraadt }
444 1.1 deraadt err(FATAL, "read: %s", strerror(errno));
445 1.1 deraadt /* NOTREACHED */
446 1.1 deraadt }
447 1.1 deraadt /* Loop through the packet(s) */
448 1.1 deraadt #define bhp ((struct bpf_hdr *)bp)
449 1.1 deraadt bp = buf;
450 1.1 deraadt ep = bp + cc;
451 1.1 deraadt while (bp < ep) {
452 1.1 deraadt register int caplen, hdrlen;
453 1.1 deraadt
454 1.1 deraadt caplen = bhp->bh_caplen;
455 1.1 deraadt hdrlen = bhp->bh_hdrlen;
456 1.1 deraadt if (rarp_check(bp + hdrlen, caplen))
457 1.1 deraadt rarp_process(ii, bp + hdrlen);
458 1.1 deraadt bp += BPF_WORDALIGN(hdrlen + caplen);
459 1.1 deraadt }
460 1.1 deraadt }
461 1.1 deraadt }
462 1.1 deraadt }
463 1.8 thorpej
464 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
465 1.8 thorpej
466 1.1 deraadt #ifndef TFTP_DIR
467 1.1 deraadt #define TFTP_DIR "/tftpboot"
468 1.1 deraadt #endif
469 1.1 deraadt
470 1.1 deraadt /*
471 1.1 deraadt * True if this server can boot the host whose IP address is 'addr'.
472 1.1 deraadt * This check is made by looking in the tftp directory for the
473 1.1 deraadt * configuration file.
474 1.1 deraadt */
475 1.1 deraadt int
476 1.1 deraadt rarp_bootable(addr)
477 1.1 deraadt u_long addr;
478 1.1 deraadt {
479 1.1 deraadt register struct dirent *dent;
480 1.1 deraadt register DIR *d;
481 1.1 deraadt char ipname[9];
482 1.1 deraadt static DIR *dd = 0;
483 1.1 deraadt
484 1.1 deraadt (void) sprintf(ipname, "%08X", addr);
485 1.1 deraadt /* If directory is already open, rewind it. Otherwise, open it. */
486 1.1 deraadt if (d = dd)
487 1.1 deraadt rewinddir(d);
488 1.1 deraadt else {
489 1.1 deraadt if (chdir(TFTP_DIR) == -1) {
490 1.1 deraadt err(FATAL, "chdir: %s", strerror(errno));
491 1.1 deraadt /* NOTREACHED */
492 1.1 deraadt }
493 1.1 deraadt d = opendir(".");
494 1.1 deraadt if (d == 0) {
495 1.1 deraadt err(FATAL, "opendir: %s", strerror(errno));
496 1.1 deraadt /* NOTREACHED */
497 1.1 deraadt }
498 1.1 deraadt dd = d;
499 1.1 deraadt }
500 1.1 deraadt while (dent = readdir(d))
501 1.1 deraadt if (strncmp(dent->d_name, ipname, 8) == 0)
502 1.1 deraadt return 1;
503 1.1 deraadt return 0;
504 1.1 deraadt }
505 1.8 thorpej #endif /* REQUIRE_TFTPBOOT */
506 1.8 thorpej
507 1.1 deraadt /*
508 1.1 deraadt * Given a list of IP addresses, 'alist', return the first address that
509 1.1 deraadt * is on network 'net'; 'netmask' is a mask indicating the network portion
510 1.1 deraadt * of the address.
511 1.1 deraadt */
512 1.1 deraadt u_long
513 1.1 deraadt choose_ipaddr(alist, net, netmask)
514 1.1 deraadt u_long **alist;
515 1.1 deraadt u_long net;
516 1.1 deraadt u_long netmask;
517 1.1 deraadt {
518 1.1 deraadt for (; *alist; ++alist) {
519 1.1 deraadt if ((**alist & netmask) == net)
520 1.1 deraadt return **alist;
521 1.1 deraadt }
522 1.1 deraadt return 0;
523 1.1 deraadt }
524 1.1 deraadt /*
525 1.1 deraadt * Answer the RARP request in 'pkt', on the interface 'ii'. 'pkt' has
526 1.1 deraadt * already been checked for validity. The reply is overlaid on the request.
527 1.1 deraadt */
528 1.1 deraadt void
529 1.1 deraadt rarp_process(ii, pkt)
530 1.1 deraadt struct if_info *ii;
531 1.1 deraadt u_char *pkt;
532 1.1 deraadt {
533 1.1 deraadt struct ether_header *ep;
534 1.1 deraadt struct hostent *hp;
535 1.1 deraadt u_long target_ipaddr;
536 1.1 deraadt char ename[256];
537 1.2 deraadt struct in_addr in;
538 1.1 deraadt
539 1.1 deraadt ep = (struct ether_header *) pkt;
540 1.1 deraadt
541 1.13 mikel if (ether_ntohost(ename, (struct ether_addr *)&ep->ether_shost) != 0 ||
542 1.1 deraadt (hp = gethostbyname(ename)) == 0)
543 1.1 deraadt return;
544 1.1 deraadt
545 1.1 deraadt /* Choose correct address from list. */
546 1.1 deraadt if (hp->h_addrtype != AF_INET) {
547 1.1 deraadt err(FATAL, "cannot handle non IP addresses");
548 1.1 deraadt /* NOTREACHED */
549 1.1 deraadt }
550 1.1 deraadt target_ipaddr = choose_ipaddr((u_long **) hp->h_addr_list,
551 1.2 deraadt ii->ii_ipaddr & ii->ii_netmask, ii->ii_netmask);
552 1.1 deraadt
553 1.1 deraadt if (target_ipaddr == 0) {
554 1.2 deraadt in.s_addr = ii->ii_ipaddr & ii->ii_netmask;
555 1.1 deraadt err(NONFATAL, "cannot find %s on net %s\n",
556 1.2 deraadt ename, inet_ntoa(in));
557 1.1 deraadt return;
558 1.1 deraadt }
559 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
560 1.1 deraadt if (rarp_bootable(htonl(target_ipaddr)))
561 1.8 thorpej #endif
562 1.1 deraadt rarp_reply(ii, ep, target_ipaddr);
563 1.1 deraadt }
564 1.1 deraadt /*
565 1.1 deraadt * Lookup the ethernet address of the interface attached to the BPF
566 1.1 deraadt * file descriptor 'fd'; return it in 'eaddr'.
567 1.1 deraadt */
568 1.1 deraadt void
569 1.1 deraadt lookup_eaddr(ifname, eaddr)
570 1.1 deraadt char *ifname;
571 1.1 deraadt u_char *eaddr;
572 1.1 deraadt {
573 1.1 deraadt char inbuf[8192];
574 1.1 deraadt struct ifconf ifc;
575 1.1 deraadt struct ifreq *ifr;
576 1.7 mycroft struct sockaddr_dl *sdl;
577 1.1 deraadt int fd;
578 1.1 deraadt int i, len;
579 1.1 deraadt
580 1.1 deraadt /* We cannot use SIOCGIFADDR on the BPF descriptor.
581 1.1 deraadt We must instead get all the interfaces with SIOCGIFCONF
582 1.1 deraadt and find the right one. */
583 1.1 deraadt
584 1.1 deraadt /* Use datagram socket to get Ethernet address. */
585 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
586 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
587 1.1 deraadt /* NOTREACHED */
588 1.1 deraadt }
589 1.1 deraadt
590 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
591 1.1 deraadt ifc.ifc_buf = inbuf;
592 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
593 1.7 mycroft ifc.ifc_len < sizeof(struct ifreq)) {
594 1.7 mycroft err(FATAL, "lookup_eaddr: SIOGIFCONF: %s", strerror(errno));
595 1.1 deraadt /* NOTREACHED */
596 1.1 deraadt }
597 1.1 deraadt ifr = ifc.ifc_req;
598 1.7 mycroft for (i = 0; i < ifc.ifc_len;
599 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
600 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
601 1.7 mycroft sdl = (struct sockaddr_dl *)&ifr->ifr_addr;
602 1.7 mycroft if (sdl->sdl_family != AF_LINK || sdl->sdl_type != IFT_ETHER ||
603 1.7 mycroft sdl->sdl_alen != 6)
604 1.7 mycroft continue;
605 1.7 mycroft if (!strncmp(ifr->ifr_name, ifname, sizeof(ifr->ifr_name))) {
606 1.7 mycroft bcopy((caddr_t)LLADDR(sdl), (caddr_t)eaddr, 6);
607 1.7 mycroft if (dflag)
608 1.7 mycroft fprintf(stderr, "%s: %x:%x:%x:%x:%x:%x\n",
609 1.7 mycroft ifr->ifr_name, eaddr[0], eaddr[1],
610 1.7 mycroft eaddr[2], eaddr[3], eaddr[4], eaddr[5]);
611 1.1 deraadt return;
612 1.1 deraadt }
613 1.1 deraadt }
614 1.1 deraadt
615 1.1 deraadt err(FATAL, "lookup_eaddr: Never saw interface `%s'!", ifname);
616 1.1 deraadt }
617 1.1 deraadt /*
618 1.1 deraadt * Lookup the IP address and network mask of the interface named 'ifname'.
619 1.1 deraadt */
620 1.1 deraadt void
621 1.1 deraadt lookup_ipaddr(ifname, addrp, netmaskp)
622 1.1 deraadt char *ifname;
623 1.1 deraadt u_long *addrp;
624 1.1 deraadt u_long *netmaskp;
625 1.1 deraadt {
626 1.1 deraadt int fd;
627 1.1 deraadt struct ifreq ifr;
628 1.1 deraadt
629 1.1 deraadt /* Use datagram socket to get IP address. */
630 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
631 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
632 1.1 deraadt /* NOTREACHED */
633 1.1 deraadt }
634 1.1 deraadt (void) strncpy(ifr.ifr_name, ifname, sizeof ifr.ifr_name);
635 1.1 deraadt if (ioctl(fd, SIOCGIFADDR, (char *) &ifr) < 0) {
636 1.1 deraadt err(FATAL, "SIOCGIFADDR: %s", strerror(errno));
637 1.1 deraadt /* NOTREACHED */
638 1.1 deraadt }
639 1.1 deraadt *addrp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
640 1.1 deraadt if (ioctl(fd, SIOCGIFNETMASK, (char *) &ifr) < 0) {
641 1.1 deraadt perror("SIOCGIFNETMASK");
642 1.1 deraadt exit(1);
643 1.1 deraadt }
644 1.1 deraadt *netmaskp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
645 1.1 deraadt /* If SIOCGIFNETMASK didn't work, figure out a mask from the IP
646 1.1 deraadt * address class. */
647 1.1 deraadt if (*netmaskp == 0)
648 1.1 deraadt *netmaskp = ipaddrtonetmask(*addrp);
649 1.1 deraadt
650 1.1 deraadt (void) close(fd);
651 1.1 deraadt }
652 1.1 deraadt /*
653 1.1 deraadt * Poke the kernel arp tables with the ethernet/ip address combinataion
654 1.1 deraadt * given. When processing a reply, we must do this so that the booting
655 1.1 deraadt * host (i.e. the guy running rarpd), won't try to ARP for the hardware
656 1.1 deraadt * address of the guy being booted (he cannot answer the ARP).
657 1.1 deraadt */
658 1.1 deraadt void
659 1.1 deraadt update_arptab(ep, ipaddr)
660 1.1 deraadt u_char *ep;
661 1.1 deraadt u_long ipaddr;
662 1.1 deraadt {
663 1.1 deraadt int s;
664 1.1 deraadt struct arpreq request;
665 1.1 deraadt struct sockaddr_in *sin;
666 1.1 deraadt
667 1.1 deraadt request.arp_flags = 0;
668 1.1 deraadt sin = (struct sockaddr_in *) & request.arp_pa;
669 1.1 deraadt sin->sin_family = AF_INET;
670 1.1 deraadt sin->sin_addr.s_addr = ipaddr;
671 1.1 deraadt request.arp_ha.sa_family = AF_UNSPEC;
672 1.1 deraadt /* This is needed #if defined(COMPAT_43) && BYTE_ORDER != BIG_ENDIAN,
673 1.1 deraadt because AF_UNSPEC is zero and the kernel assumes that a zero
674 1.1 deraadt sa_family means that the real sa_family value is in sa_len. */
675 1.1 deraadt request.arp_ha.sa_len = 16; /* XXX */
676 1.1 deraadt bcopy((char *) ep, (char *) request.arp_ha.sa_data, 6);
677 1.1 deraadt
678 1.7 mycroft #if 0
679 1.1 deraadt s = socket(AF_INET, SOCK_DGRAM, 0);
680 1.1 deraadt if (ioctl(s, SIOCSARP, (caddr_t) & request) < 0) {
681 1.1 deraadt err(NONFATAL, "SIOCSARP: %s", strerror(errno));
682 1.1 deraadt }
683 1.1 deraadt (void) close(s);
684 1.7 mycroft #endif
685 1.1 deraadt }
686 1.1 deraadt /*
687 1.1 deraadt * Build a reverse ARP packet and sent it out on the interface.
688 1.6 cgd * 'ep' points to a valid ARPOP_REVREQUEST. The ARPOP_REVREPLY is built
689 1.1 deraadt * on top of the request, then written to the network.
690 1.1 deraadt *
691 1.1 deraadt * RFC 903 defines the ether_arp fields as follows. The following comments
692 1.1 deraadt * are taken (more or less) straight from this document.
693 1.1 deraadt *
694 1.6 cgd * ARPOP_REVREQUEST
695 1.1 deraadt *
696 1.1 deraadt * arp_sha is the hardware address of the sender of the packet.
697 1.1 deraadt * arp_spa is undefined.
698 1.1 deraadt * arp_tha is the 'target' hardware address.
699 1.1 deraadt * In the case where the sender wishes to determine his own
700 1.1 deraadt * protocol address, this, like arp_sha, will be the hardware
701 1.1 deraadt * address of the sender.
702 1.1 deraadt * arp_tpa is undefined.
703 1.1 deraadt *
704 1.6 cgd * ARPOP_REVREPLY
705 1.1 deraadt *
706 1.1 deraadt * arp_sha is the hardware address of the responder (the sender of the
707 1.1 deraadt * reply packet).
708 1.1 deraadt * arp_spa is the protocol address of the responder (see the note below).
709 1.1 deraadt * arp_tha is the hardware address of the target, and should be the same as
710 1.1 deraadt * that which was given in the request.
711 1.1 deraadt * arp_tpa is the protocol address of the target, that is, the desired address.
712 1.1 deraadt *
713 1.1 deraadt * Note that the requirement that arp_spa be filled in with the responder's
714 1.1 deraadt * protocol is purely for convenience. For instance, if a system were to use
715 1.1 deraadt * both ARP and RARP, then the inclusion of the valid protocol-hardware
716 1.1 deraadt * address pair (arp_spa, arp_sha) may eliminate the need for a subsequent
717 1.1 deraadt * ARP request.
718 1.1 deraadt */
719 1.1 deraadt void
720 1.1 deraadt rarp_reply(ii, ep, ipaddr)
721 1.1 deraadt struct if_info *ii;
722 1.1 deraadt struct ether_header *ep;
723 1.1 deraadt u_long ipaddr;
724 1.1 deraadt {
725 1.1 deraadt int n;
726 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (ep + 1);
727 1.1 deraadt int len;
728 1.1 deraadt
729 1.1 deraadt update_arptab((u_char *) & ap->arp_sha, ipaddr);
730 1.1 deraadt
731 1.1 deraadt /* Build the rarp reply by modifying the rarp request in place. */
732 1.11 mycroft #ifdef __FreeBSD__
733 1.11 mycroft /* BPF (incorrectly) wants this in host order. */
734 1.11 mycroft ep->ether_type = ETHERTYPE_REVARP;
735 1.11 mycroft #else
736 1.3 deraadt ep->ether_type = htons(ETHERTYPE_REVARP);
737 1.11 mycroft #endif
738 1.4 cgd ap->ea_hdr.ar_hrd = htons(ARPHRD_ETHER);
739 1.4 cgd ap->ea_hdr.ar_pro = htons(ETHERTYPE_IP);
740 1.6 cgd ap->arp_op = htons(ARPOP_REVREPLY);
741 1.1 deraadt
742 1.1 deraadt bcopy((char *) &ap->arp_sha, (char *) &ep->ether_dhost, 6);
743 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ep->ether_shost, 6);
744 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ap->arp_sha, 6);
745 1.1 deraadt
746 1.1 deraadt bcopy((char *) &ipaddr, (char *) ap->arp_tpa, 4);
747 1.1 deraadt /* Target hardware is unchanged. */
748 1.1 deraadt bcopy((char *) &ii->ii_ipaddr, (char *) ap->arp_spa, 4);
749 1.1 deraadt
750 1.1 deraadt len = sizeof(*ep) + sizeof(*ap);
751 1.1 deraadt n = write(ii->ii_fd, (char *) ep, len);
752 1.1 deraadt if (n != len) {
753 1.1 deraadt err(NONFATAL, "write: only %d of %d bytes written", n, len);
754 1.1 deraadt }
755 1.1 deraadt }
756 1.1 deraadt /*
757 1.1 deraadt * Get the netmask of an IP address. This routine is used if
758 1.1 deraadt * SIOCGIFNETMASK doesn't work.
759 1.1 deraadt */
760 1.1 deraadt u_long
761 1.1 deraadt ipaddrtonetmask(addr)
762 1.1 deraadt u_long addr;
763 1.1 deraadt {
764 1.1 deraadt if (IN_CLASSA(addr))
765 1.1 deraadt return IN_CLASSA_NET;
766 1.1 deraadt if (IN_CLASSB(addr))
767 1.1 deraadt return IN_CLASSB_NET;
768 1.1 deraadt if (IN_CLASSC(addr))
769 1.1 deraadt return IN_CLASSC_NET;
770 1.1 deraadt err(FATAL, "unknown IP address class: %08X", addr);
771 1.1 deraadt /* NOTREACHED */
772 1.1 deraadt }
773 1.1 deraadt
774 1.1 deraadt #if __STDC__
775 1.1 deraadt #include <stdarg.h>
776 1.1 deraadt #else
777 1.1 deraadt #include <varargs.h>
778 1.1 deraadt #endif
779 1.1 deraadt
780 1.1 deraadt void
781 1.1 deraadt #if __STDC__
782 1.1 deraadt err(int fatal, const char *fmt,...)
783 1.1 deraadt #else
784 1.1 deraadt err(fmt, va_alist)
785 1.1 deraadt int fatal;
786 1.1 deraadt char *fmt;
787 1.1 deraadt va_dcl
788 1.1 deraadt #endif
789 1.1 deraadt {
790 1.1 deraadt va_list ap;
791 1.1 deraadt #if __STDC__
792 1.1 deraadt va_start(ap, fmt);
793 1.1 deraadt #else
794 1.1 deraadt va_start(ap);
795 1.1 deraadt #endif
796 1.1 deraadt if (dflag) {
797 1.1 deraadt if (fatal)
798 1.1 deraadt (void) fprintf(stderr, "rarpd: error: ");
799 1.1 deraadt else
800 1.1 deraadt (void) fprintf(stderr, "rarpd: warning: ");
801 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
802 1.1 deraadt (void) fprintf(stderr, "\n");
803 1.1 deraadt }
804 1.1 deraadt vsyslog(LOG_ERR, fmt, ap);
805 1.1 deraadt va_end(ap);
806 1.1 deraadt if (fatal)
807 1.1 deraadt exit(1);
808 1.1 deraadt /* NOTREACHED */
809 1.1 deraadt }
810 1.1 deraadt
811 1.1 deraadt void
812 1.1 deraadt #if __STDC__
813 1.1 deraadt debug(const char *fmt,...)
814 1.1 deraadt #else
815 1.1 deraadt debug(fmt, va_alist)
816 1.1 deraadt char *fmt;
817 1.1 deraadt va_dcl
818 1.1 deraadt #endif
819 1.1 deraadt {
820 1.1 deraadt va_list ap;
821 1.1 deraadt
822 1.1 deraadt if (dflag) {
823 1.1 deraadt #if __STDC__
824 1.1 deraadt va_start(ap, fmt);
825 1.1 deraadt #else
826 1.1 deraadt va_start(ap);
827 1.1 deraadt #endif
828 1.1 deraadt (void) fprintf(stderr, "rarpd: ");
829 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
830 1.1 deraadt va_end(ap);
831 1.1 deraadt (void) fprintf(stderr, "\n");
832 1.1 deraadt }
833 1.1 deraadt }
834