rarpd.c revision 1.8 1 1.1 deraadt /*
2 1.1 deraadt * Copyright (c) 1990 The Regents of the University of California.
3 1.1 deraadt * All rights reserved.
4 1.1 deraadt *
5 1.1 deraadt * Redistribution and use in source and binary forms, with or without
6 1.1 deraadt * modification, are permitted provided that: (1) source code distributions
7 1.1 deraadt * retain the above copyright notice and this paragraph in its entirety, (2)
8 1.1 deraadt * distributions including binary code include the above copyright notice and
9 1.1 deraadt * this paragraph in its entirety in the documentation or other materials
10 1.1 deraadt * provided with the distribution, and (3) all advertising materials mentioning
11 1.1 deraadt * features or use of this software display the following acknowledgement:
12 1.1 deraadt * ``This product includes software developed by the University of California,
13 1.1 deraadt * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 1.1 deraadt * the University nor the names of its contributors may be used to endorse
15 1.1 deraadt * or promote products derived from this software without specific prior
16 1.1 deraadt * written permission.
17 1.1 deraadt * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 1.1 deraadt * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 1.1 deraadt * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 1.1 deraadt */
21 1.1 deraadt #ifndef lint
22 1.1 deraadt char copyright[] =
23 1.1 deraadt "@(#) Copyright (c) 1990 The Regents of the University of California.\n\
24 1.1 deraadt All rights reserved.\n";
25 1.1 deraadt #endif /* not lint */
26 1.1 deraadt
27 1.1 deraadt #ifndef lint
28 1.1 deraadt static char rcsid[] =
29 1.8 thorpej "@(#) $Id: rarpd.c,v 1.8 1995/09/01 21:55:47 thorpej Exp $";
30 1.1 deraadt #endif
31 1.1 deraadt
32 1.1 deraadt
33 1.1 deraadt /*
34 1.1 deraadt * rarpd - Reverse ARP Daemon
35 1.1 deraadt *
36 1.1 deraadt * Usage: rarpd -a [ -d -f ]
37 1.1 deraadt * rarpd [ -d -f ] interface
38 1.1 deraadt */
39 1.1 deraadt
40 1.1 deraadt #include <stdio.h>
41 1.1 deraadt #include <stdlib.h>
42 1.1 deraadt #include <syslog.h>
43 1.1 deraadt #include <string.h>
44 1.1 deraadt #include <strings.h>
45 1.1 deraadt #include <sys/types.h>
46 1.1 deraadt #include <unistd.h>
47 1.1 deraadt #include <sys/time.h>
48 1.1 deraadt #include <net/bpf.h>
49 1.1 deraadt #include <sys/socket.h>
50 1.1 deraadt #include <sys/ioctl.h>
51 1.1 deraadt #include <net/if.h>
52 1.7 mycroft #include <net/if_dl.h>
53 1.7 mycroft #include <net/if_types.h>
54 1.1 deraadt #include <netinet/in.h>
55 1.1 deraadt #include <netinet/if_ether.h>
56 1.1 deraadt #include <sys/errno.h>
57 1.1 deraadt #include <sys/file.h>
58 1.1 deraadt #include <netdb.h>
59 1.1 deraadt #include <arpa/inet.h>
60 1.1 deraadt #include <dirent.h>
61 1.1 deraadt
62 1.1 deraadt #define FATAL 1 /* fatal error occurred */
63 1.1 deraadt #define NONFATAL 0 /* non fatal error occurred */
64 1.1 deraadt
65 1.1 deraadt /*
66 1.1 deraadt * The structure for each interface.
67 1.1 deraadt */
68 1.1 deraadt struct if_info {
69 1.1 deraadt int ii_fd; /* BPF file descriptor */
70 1.1 deraadt u_char ii_eaddr[6]; /* Ethernet address of this interface */
71 1.1 deraadt u_long ii_ipaddr; /* IP address of this interface */
72 1.1 deraadt u_long ii_netmask; /* subnet or net mask */
73 1.1 deraadt struct if_info *ii_next;
74 1.1 deraadt };
75 1.1 deraadt /*
76 1.1 deraadt * The list of all interfaces that are being listened to. rarp_loop()
77 1.1 deraadt * "selects" on the descriptors in this list.
78 1.1 deraadt */
79 1.1 deraadt struct if_info *iflist;
80 1.1 deraadt
81 1.1 deraadt int rarp_open __P((char *));
82 1.1 deraadt void init_one __P((char *));
83 1.1 deraadt void init_all __P((void));
84 1.1 deraadt void rarp_loop __P((void));
85 1.1 deraadt void lookup_eaddr __P((char *, u_char *));
86 1.1 deraadt void lookup_ipaddr __P((char *, u_long *, u_long *));
87 1.1 deraadt void usage __P((void));
88 1.1 deraadt void rarp_process __P((struct if_info *, u_char *));
89 1.1 deraadt void rarp_reply __P((struct if_info *, struct ether_header *, u_long));
90 1.1 deraadt void update_arptab __P((u_char *, u_long));
91 1.1 deraadt void err __P((int, const char *,...));
92 1.1 deraadt void debug __P((const char *,...));
93 1.1 deraadt u_long ipaddrtonetmask __P((u_long));
94 1.1 deraadt
95 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
96 1.8 thorpej int rarp_bootable __P((u_long));
97 1.8 thorpej #endif
98 1.8 thorpej
99 1.1 deraadt int aflag = 0; /* listen on "all" interfaces */
100 1.1 deraadt int dflag = 0; /* print debugging messages */
101 1.1 deraadt int fflag = 0; /* don't fork */
102 1.1 deraadt
103 1.1 deraadt void
104 1.1 deraadt main(argc, argv)
105 1.1 deraadt int argc;
106 1.1 deraadt char **argv;
107 1.1 deraadt {
108 1.1 deraadt int op, pid, devnull, f;
109 1.1 deraadt char *ifname, *hostname, *name;
110 1.1 deraadt
111 1.1 deraadt extern char *optarg;
112 1.1 deraadt extern int optind, opterr;
113 1.1 deraadt
114 1.1 deraadt if (name = strrchr(argv[0], '/'))
115 1.1 deraadt ++name;
116 1.1 deraadt else
117 1.1 deraadt name = argv[0];
118 1.1 deraadt if (*name == '-')
119 1.1 deraadt ++name;
120 1.1 deraadt
121 1.1 deraadt /* All error reporting is done through syslogs. */
122 1.1 deraadt openlog(name, LOG_PID | LOG_CONS, LOG_DAEMON);
123 1.1 deraadt
124 1.1 deraadt opterr = 0;
125 1.1 deraadt while ((op = getopt(argc, argv, "adf")) != EOF) {
126 1.1 deraadt switch (op) {
127 1.1 deraadt case 'a':
128 1.1 deraadt ++aflag;
129 1.1 deraadt break;
130 1.1 deraadt
131 1.1 deraadt case 'd':
132 1.1 deraadt ++dflag;
133 1.1 deraadt break;
134 1.1 deraadt
135 1.1 deraadt case 'f':
136 1.1 deraadt ++fflag;
137 1.1 deraadt break;
138 1.1 deraadt
139 1.1 deraadt default:
140 1.1 deraadt usage();
141 1.1 deraadt /* NOTREACHED */
142 1.1 deraadt }
143 1.1 deraadt }
144 1.1 deraadt ifname = argv[optind++];
145 1.1 deraadt hostname = ifname ? argv[optind] : 0;
146 1.1 deraadt if ((aflag && ifname) || (!aflag && ifname == 0))
147 1.1 deraadt usage();
148 1.1 deraadt
149 1.1 deraadt if (aflag)
150 1.1 deraadt init_all();
151 1.1 deraadt else
152 1.1 deraadt init_one(ifname);
153 1.1 deraadt
154 1.1 deraadt if ((!fflag) && (!dflag)) {
155 1.1 deraadt pid = fork();
156 1.1 deraadt if (pid > 0)
157 1.1 deraadt /* Parent exits, leaving child in background. */
158 1.1 deraadt exit(0);
159 1.1 deraadt else
160 1.1 deraadt if (pid == -1) {
161 1.1 deraadt err(FATAL, "cannot fork");
162 1.1 deraadt /* NOTREACHED */
163 1.1 deraadt }
164 1.1 deraadt /* Fade into the background */
165 1.1 deraadt f = open("/dev/tty", O_RDWR);
166 1.1 deraadt if (f >= 0) {
167 1.1 deraadt if (ioctl(f, TIOCNOTTY, 0) < 0) {
168 1.1 deraadt err(FATAL, "TIOCNOTTY: %s", strerror(errno));
169 1.1 deraadt /* NOTREACHED */
170 1.1 deraadt }
171 1.1 deraadt (void) close(f);
172 1.1 deraadt }
173 1.1 deraadt (void) chdir("/");
174 1.1 deraadt (void) setpgrp(0, getpid());
175 1.1 deraadt devnull = open("/dev/null", O_RDWR);
176 1.1 deraadt if (devnull >= 0) {
177 1.1 deraadt (void) dup2(devnull, 0);
178 1.1 deraadt (void) dup2(devnull, 1);
179 1.1 deraadt (void) dup2(devnull, 2);
180 1.1 deraadt if (devnull > 2)
181 1.1 deraadt (void) close(devnull);
182 1.1 deraadt }
183 1.1 deraadt }
184 1.1 deraadt rarp_loop();
185 1.1 deraadt }
186 1.1 deraadt /*
187 1.1 deraadt * Add 'ifname' to the interface list. Lookup its IP address and network
188 1.1 deraadt * mask and Ethernet address, and open a BPF file for it.
189 1.1 deraadt */
190 1.1 deraadt void
191 1.1 deraadt init_one(ifname)
192 1.1 deraadt char *ifname;
193 1.1 deraadt {
194 1.1 deraadt struct if_info *p;
195 1.1 deraadt
196 1.7 mycroft p = (struct if_info *)malloc(sizeof(*p));
197 1.1 deraadt if (p == 0) {
198 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
199 1.1 deraadt /* NOTREACHED */
200 1.1 deraadt }
201 1.1 deraadt p->ii_next = iflist;
202 1.1 deraadt iflist = p;
203 1.1 deraadt
204 1.1 deraadt p->ii_fd = rarp_open(ifname);
205 1.1 deraadt lookup_eaddr(ifname, p->ii_eaddr);
206 1.1 deraadt lookup_ipaddr(ifname, &p->ii_ipaddr, &p->ii_netmask);
207 1.1 deraadt }
208 1.1 deraadt /*
209 1.1 deraadt * Initialize all "candidate" interfaces that are in the system
210 1.1 deraadt * configuration list. A "candidate" is up, not loopback and not
211 1.1 deraadt * point to point.
212 1.1 deraadt */
213 1.1 deraadt void
214 1.1 deraadt init_all()
215 1.1 deraadt {
216 1.7 mycroft char inbuf[8192];
217 1.1 deraadt struct ifconf ifc;
218 1.7 mycroft struct ifreq *ifr;
219 1.7 mycroft int fd;
220 1.7 mycroft int i, len;
221 1.1 deraadt
222 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
223 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
224 1.1 deraadt /* NOTREACHED */
225 1.1 deraadt }
226 1.7 mycroft
227 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
228 1.7 mycroft ifc.ifc_buf = inbuf;
229 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
230 1.1 deraadt ifc.ifc_len < sizeof(struct ifreq)) {
231 1.7 mycroft err(FATAL, "init_all: SIOCGIFCONF: %s", strerror(errno));
232 1.1 deraadt /* NOTREACHED */
233 1.1 deraadt }
234 1.7 mycroft ifr = ifc.ifc_req;
235 1.7 mycroft for (i = 0; i < ifc.ifc_len;
236 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
237 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
238 1.7 mycroft if (ioctl(fd, SIOCGIFFLAGS, (caddr_t)ifr) < 0) {
239 1.7 mycroft err(FATAL, "init_all: SIOCGIFFLAGS: %s",
240 1.7 mycroft strerror(errno));
241 1.1 deraadt /* NOTREACHED */
242 1.1 deraadt }
243 1.7 mycroft if ((ifr->ifr_flags &
244 1.7 mycroft (IFF_UP | IFF_LOOPBACK | IFF_POINTOPOINT)) != IFF_UP)
245 1.1 deraadt continue;
246 1.7 mycroft init_one(ifr->ifr_name);
247 1.1 deraadt }
248 1.1 deraadt (void) close(fd);
249 1.1 deraadt }
250 1.1 deraadt
251 1.1 deraadt void
252 1.1 deraadt usage()
253 1.1 deraadt {
254 1.1 deraadt (void) fprintf(stderr, "usage: rarpd -a [ -d -f ]\n");
255 1.1 deraadt (void) fprintf(stderr, " rarpd [ -d -f ] interface\n");
256 1.1 deraadt exit(1);
257 1.1 deraadt }
258 1.1 deraadt
259 1.1 deraadt static int
260 1.1 deraadt bpf_open()
261 1.1 deraadt {
262 1.1 deraadt int fd;
263 1.1 deraadt int n = 0;
264 1.1 deraadt char device[sizeof "/dev/bpf000"];
265 1.1 deraadt
266 1.1 deraadt /* Go through all the minors and find one that isn't in use. */
267 1.1 deraadt do {
268 1.1 deraadt (void) sprintf(device, "/dev/bpf%d", n++);
269 1.1 deraadt fd = open(device, O_RDWR);
270 1.1 deraadt } while (fd < 0 && errno == EBUSY);
271 1.1 deraadt
272 1.1 deraadt if (fd < 0) {
273 1.1 deraadt err(FATAL, "%s: %s", device, strerror(errno));
274 1.1 deraadt /* NOTREACHED */
275 1.1 deraadt }
276 1.1 deraadt return fd;
277 1.1 deraadt }
278 1.1 deraadt /*
279 1.1 deraadt * Open a BPF file and attach it to the interface named 'device'.
280 1.1 deraadt * Set immediate mode, and set a filter that accepts only RARP requests.
281 1.1 deraadt */
282 1.1 deraadt int
283 1.1 deraadt rarp_open(device)
284 1.1 deraadt char *device;
285 1.1 deraadt {
286 1.1 deraadt int fd;
287 1.1 deraadt struct ifreq ifr;
288 1.1 deraadt u_int dlt;
289 1.1 deraadt int immediate;
290 1.1 deraadt
291 1.1 deraadt static struct bpf_insn insns[] = {
292 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
293 1.1 deraadt BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ETHERTYPE_REVARP, 0, 3),
294 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
295 1.6 cgd BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ARPOP_REVREQUEST, 0, 1),
296 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, sizeof(struct ether_arp) +
297 1.1 deraadt sizeof(struct ether_header)),
298 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, 0),
299 1.1 deraadt };
300 1.1 deraadt static struct bpf_program filter = {
301 1.1 deraadt sizeof insns / sizeof(insns[0]),
302 1.1 deraadt insns
303 1.1 deraadt };
304 1.1 deraadt
305 1.1 deraadt fd = bpf_open();
306 1.1 deraadt
307 1.1 deraadt /* Set immediate mode so packets are processed as they arrive. */
308 1.1 deraadt immediate = 1;
309 1.1 deraadt if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
310 1.1 deraadt err(FATAL, "BIOCIMMEDIATE: %s", strerror(errno));
311 1.1 deraadt /* NOTREACHED */
312 1.1 deraadt }
313 1.1 deraadt (void) strncpy(ifr.ifr_name, device, sizeof ifr.ifr_name);
314 1.1 deraadt if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
315 1.1 deraadt err(FATAL, "BIOCSETIF: %s", strerror(errno));
316 1.1 deraadt /* NOTREACHED */
317 1.1 deraadt }
318 1.1 deraadt /* Check that the data link layer is an Ethernet; this code won't work
319 1.1 deraadt * with anything else. */
320 1.1 deraadt if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
321 1.1 deraadt err(FATAL, "BIOCGDLT: %s", strerror(errno));
322 1.1 deraadt /* NOTREACHED */
323 1.1 deraadt }
324 1.1 deraadt if (dlt != DLT_EN10MB) {
325 1.1 deraadt err(FATAL, "%s is not an ethernet", device);
326 1.1 deraadt /* NOTREACHED */
327 1.1 deraadt }
328 1.1 deraadt /* Set filter program. */
329 1.1 deraadt if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
330 1.1 deraadt err(FATAL, "BIOCSETF: %s", strerror(errno));
331 1.1 deraadt /* NOTREACHED */
332 1.1 deraadt }
333 1.1 deraadt return fd;
334 1.1 deraadt }
335 1.1 deraadt /*
336 1.1 deraadt * Perform various sanity checks on the RARP request packet. Return
337 1.1 deraadt * false on failure and log the reason.
338 1.1 deraadt */
339 1.1 deraadt static int
340 1.1 deraadt rarp_check(p, len)
341 1.1 deraadt u_char *p;
342 1.1 deraadt int len;
343 1.1 deraadt {
344 1.1 deraadt struct ether_header *ep = (struct ether_header *) p;
345 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (p + sizeof(*ep));
346 1.1 deraadt
347 1.1 deraadt (void) debug("got a packet");
348 1.1 deraadt
349 1.1 deraadt if (len < sizeof(*ep) + sizeof(*ap)) {
350 1.1 deraadt err(NONFATAL, "truncated request");
351 1.1 deraadt return 0;
352 1.1 deraadt }
353 1.1 deraadt /* XXX This test might be better off broken out... */
354 1.1 deraadt if (ntohs (ep->ether_type) != ETHERTYPE_REVARP ||
355 1.1 deraadt ntohs (ap->arp_hrd) != ARPHRD_ETHER ||
356 1.6 cgd ntohs (ap->arp_op) != ARPOP_REVREQUEST ||
357 1.1 deraadt ntohs (ap->arp_pro) != ETHERTYPE_IP ||
358 1.1 deraadt ap->arp_hln != 6 || ap->arp_pln != 4) {
359 1.1 deraadt err(NONFATAL, "request fails sanity check");
360 1.1 deraadt return 0;
361 1.1 deraadt }
362 1.1 deraadt if (bcmp((char *) &ep->ether_shost, (char *) &ap->arp_sha, 6) != 0) {
363 1.1 deraadt err(NONFATAL, "ether/arp sender address mismatch");
364 1.1 deraadt return 0;
365 1.1 deraadt }
366 1.1 deraadt if (bcmp((char *) &ap->arp_sha, (char *) &ap->arp_tha, 6) != 0) {
367 1.1 deraadt err(NONFATAL, "ether/arp target address mismatch");
368 1.1 deraadt return 0;
369 1.1 deraadt }
370 1.1 deraadt return 1;
371 1.1 deraadt }
372 1.1 deraadt
373 1.1 deraadt /*
374 1.1 deraadt * Loop indefinitely listening for RARP requests on the
375 1.1 deraadt * interfaces in 'iflist'.
376 1.1 deraadt */
377 1.1 deraadt void
378 1.1 deraadt rarp_loop()
379 1.1 deraadt {
380 1.1 deraadt u_char *buf, *bp, *ep;
381 1.1 deraadt int cc, fd;
382 1.1 deraadt fd_set fds, listeners;
383 1.1 deraadt int bufsize, maxfd = 0;
384 1.1 deraadt struct if_info *ii;
385 1.1 deraadt
386 1.1 deraadt if (iflist == 0) {
387 1.1 deraadt err(FATAL, "no interfaces");
388 1.1 deraadt /* NOTREACHED */
389 1.1 deraadt }
390 1.1 deraadt if (ioctl(iflist->ii_fd, BIOCGBLEN, (caddr_t) & bufsize) < 0) {
391 1.1 deraadt err(FATAL, "BIOCGBLEN: %s", strerror(errno));
392 1.1 deraadt /* NOTREACHED */
393 1.1 deraadt }
394 1.1 deraadt buf = (u_char *) malloc((unsigned) bufsize);
395 1.1 deraadt if (buf == 0) {
396 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
397 1.1 deraadt /* NOTREACHED */
398 1.1 deraadt }
399 1.1 deraadt /*
400 1.1 deraadt * Find the highest numbered file descriptor for select().
401 1.1 deraadt * Initialize the set of descriptors to listen to.
402 1.1 deraadt */
403 1.1 deraadt FD_ZERO(&fds);
404 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
405 1.1 deraadt FD_SET(ii->ii_fd, &fds);
406 1.1 deraadt if (ii->ii_fd > maxfd)
407 1.1 deraadt maxfd = ii->ii_fd;
408 1.1 deraadt }
409 1.1 deraadt while (1) {
410 1.1 deraadt listeners = fds;
411 1.1 deraadt if (select(maxfd + 1, &listeners, (struct fd_set *) 0,
412 1.1 deraadt (struct fd_set *) 0, (struct timeval *) 0) < 0) {
413 1.1 deraadt err(FATAL, "select: %s", strerror(errno));
414 1.1 deraadt /* NOTREACHED */
415 1.1 deraadt }
416 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
417 1.1 deraadt fd = ii->ii_fd;
418 1.1 deraadt if (!FD_ISSET(fd, &listeners))
419 1.1 deraadt continue;
420 1.1 deraadt again:
421 1.1 deraadt cc = read(fd, (char *) buf, bufsize);
422 1.1 deraadt /* Don't choke when we get ptraced */
423 1.1 deraadt if (cc < 0 && errno == EINTR)
424 1.1 deraadt goto again;
425 1.1 deraadt /* Due to a SunOS bug, after 2^31 bytes, the file
426 1.1 deraadt * offset overflows and read fails with EINVAL. The
427 1.1 deraadt * lseek() to 0 will fix things. */
428 1.1 deraadt if (cc < 0) {
429 1.1 deraadt if (errno == EINVAL &&
430 1.5 cgd (lseek(fd, 0, SEEK_CUR) + bufsize) < 0) {
431 1.1 deraadt (void) lseek(fd, 0, 0);
432 1.1 deraadt goto again;
433 1.1 deraadt }
434 1.1 deraadt err(FATAL, "read: %s", strerror(errno));
435 1.1 deraadt /* NOTREACHED */
436 1.1 deraadt }
437 1.1 deraadt /* Loop through the packet(s) */
438 1.1 deraadt #define bhp ((struct bpf_hdr *)bp)
439 1.1 deraadt bp = buf;
440 1.1 deraadt ep = bp + cc;
441 1.1 deraadt while (bp < ep) {
442 1.1 deraadt register int caplen, hdrlen;
443 1.1 deraadt
444 1.1 deraadt caplen = bhp->bh_caplen;
445 1.1 deraadt hdrlen = bhp->bh_hdrlen;
446 1.1 deraadt if (rarp_check(bp + hdrlen, caplen))
447 1.1 deraadt rarp_process(ii, bp + hdrlen);
448 1.1 deraadt bp += BPF_WORDALIGN(hdrlen + caplen);
449 1.1 deraadt }
450 1.1 deraadt }
451 1.1 deraadt }
452 1.1 deraadt }
453 1.8 thorpej
454 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
455 1.8 thorpej
456 1.1 deraadt #ifndef TFTP_DIR
457 1.1 deraadt #define TFTP_DIR "/tftpboot"
458 1.1 deraadt #endif
459 1.1 deraadt
460 1.1 deraadt /*
461 1.1 deraadt * True if this server can boot the host whose IP address is 'addr'.
462 1.1 deraadt * This check is made by looking in the tftp directory for the
463 1.1 deraadt * configuration file.
464 1.1 deraadt */
465 1.1 deraadt int
466 1.1 deraadt rarp_bootable(addr)
467 1.1 deraadt u_long addr;
468 1.1 deraadt {
469 1.1 deraadt register struct dirent *dent;
470 1.1 deraadt register DIR *d;
471 1.1 deraadt char ipname[9];
472 1.1 deraadt static DIR *dd = 0;
473 1.1 deraadt
474 1.1 deraadt (void) sprintf(ipname, "%08X", addr);
475 1.1 deraadt /* If directory is already open, rewind it. Otherwise, open it. */
476 1.1 deraadt if (d = dd)
477 1.1 deraadt rewinddir(d);
478 1.1 deraadt else {
479 1.1 deraadt if (chdir(TFTP_DIR) == -1) {
480 1.1 deraadt err(FATAL, "chdir: %s", strerror(errno));
481 1.1 deraadt /* NOTREACHED */
482 1.1 deraadt }
483 1.1 deraadt d = opendir(".");
484 1.1 deraadt if (d == 0) {
485 1.1 deraadt err(FATAL, "opendir: %s", strerror(errno));
486 1.1 deraadt /* NOTREACHED */
487 1.1 deraadt }
488 1.1 deraadt dd = d;
489 1.1 deraadt }
490 1.1 deraadt while (dent = readdir(d))
491 1.1 deraadt if (strncmp(dent->d_name, ipname, 8) == 0)
492 1.1 deraadt return 1;
493 1.1 deraadt return 0;
494 1.1 deraadt }
495 1.8 thorpej #endif /* REQUIRE_TFTPBOOT */
496 1.8 thorpej
497 1.1 deraadt /*
498 1.1 deraadt * Given a list of IP addresses, 'alist', return the first address that
499 1.1 deraadt * is on network 'net'; 'netmask' is a mask indicating the network portion
500 1.1 deraadt * of the address.
501 1.1 deraadt */
502 1.1 deraadt u_long
503 1.1 deraadt choose_ipaddr(alist, net, netmask)
504 1.1 deraadt u_long **alist;
505 1.1 deraadt u_long net;
506 1.1 deraadt u_long netmask;
507 1.1 deraadt {
508 1.1 deraadt for (; *alist; ++alist) {
509 1.1 deraadt if ((**alist & netmask) == net)
510 1.1 deraadt return **alist;
511 1.1 deraadt }
512 1.1 deraadt return 0;
513 1.1 deraadt }
514 1.1 deraadt /*
515 1.1 deraadt * Answer the RARP request in 'pkt', on the interface 'ii'. 'pkt' has
516 1.1 deraadt * already been checked for validity. The reply is overlaid on the request.
517 1.1 deraadt */
518 1.1 deraadt void
519 1.1 deraadt rarp_process(ii, pkt)
520 1.1 deraadt struct if_info *ii;
521 1.1 deraadt u_char *pkt;
522 1.1 deraadt {
523 1.1 deraadt struct ether_header *ep;
524 1.1 deraadt struct hostent *hp;
525 1.1 deraadt u_long target_ipaddr;
526 1.1 deraadt char ename[256];
527 1.2 deraadt struct in_addr in;
528 1.1 deraadt
529 1.1 deraadt ep = (struct ether_header *) pkt;
530 1.1 deraadt
531 1.1 deraadt if (ether_ntohost(ename, &ep->ether_shost) != 0 ||
532 1.1 deraadt (hp = gethostbyname(ename)) == 0)
533 1.1 deraadt return;
534 1.1 deraadt
535 1.1 deraadt /* Choose correct address from list. */
536 1.1 deraadt if (hp->h_addrtype != AF_INET) {
537 1.1 deraadt err(FATAL, "cannot handle non IP addresses");
538 1.1 deraadt /* NOTREACHED */
539 1.1 deraadt }
540 1.1 deraadt target_ipaddr = choose_ipaddr((u_long **) hp->h_addr_list,
541 1.2 deraadt ii->ii_ipaddr & ii->ii_netmask, ii->ii_netmask);
542 1.1 deraadt
543 1.1 deraadt if (target_ipaddr == 0) {
544 1.2 deraadt in.s_addr = ii->ii_ipaddr & ii->ii_netmask;
545 1.1 deraadt err(NONFATAL, "cannot find %s on net %s\n",
546 1.2 deraadt ename, inet_ntoa(in));
547 1.1 deraadt return;
548 1.1 deraadt }
549 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
550 1.1 deraadt if (rarp_bootable(htonl(target_ipaddr)))
551 1.8 thorpej #endif
552 1.1 deraadt rarp_reply(ii, ep, target_ipaddr);
553 1.1 deraadt }
554 1.1 deraadt /*
555 1.1 deraadt * Lookup the ethernet address of the interface attached to the BPF
556 1.1 deraadt * file descriptor 'fd'; return it in 'eaddr'.
557 1.1 deraadt */
558 1.1 deraadt void
559 1.1 deraadt lookup_eaddr(ifname, eaddr)
560 1.1 deraadt char *ifname;
561 1.1 deraadt u_char *eaddr;
562 1.1 deraadt {
563 1.1 deraadt char inbuf[8192];
564 1.1 deraadt struct ifconf ifc;
565 1.1 deraadt struct ifreq *ifr;
566 1.7 mycroft struct sockaddr_dl *sdl;
567 1.1 deraadt int fd;
568 1.1 deraadt int i, len;
569 1.1 deraadt
570 1.1 deraadt /* We cannot use SIOCGIFADDR on the BPF descriptor.
571 1.1 deraadt We must instead get all the interfaces with SIOCGIFCONF
572 1.1 deraadt and find the right one. */
573 1.1 deraadt
574 1.1 deraadt /* Use datagram socket to get Ethernet address. */
575 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
576 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
577 1.1 deraadt /* NOTREACHED */
578 1.1 deraadt }
579 1.1 deraadt
580 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
581 1.1 deraadt ifc.ifc_buf = inbuf;
582 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
583 1.7 mycroft ifc.ifc_len < sizeof(struct ifreq)) {
584 1.7 mycroft err(FATAL, "lookup_eaddr: SIOGIFCONF: %s", strerror(errno));
585 1.1 deraadt /* NOTREACHED */
586 1.1 deraadt }
587 1.1 deraadt ifr = ifc.ifc_req;
588 1.7 mycroft for (i = 0; i < ifc.ifc_len;
589 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
590 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
591 1.7 mycroft sdl = (struct sockaddr_dl *)&ifr->ifr_addr;
592 1.7 mycroft if (sdl->sdl_family != AF_LINK || sdl->sdl_type != IFT_ETHER ||
593 1.7 mycroft sdl->sdl_alen != 6)
594 1.7 mycroft continue;
595 1.7 mycroft if (!strncmp(ifr->ifr_name, ifname, sizeof(ifr->ifr_name))) {
596 1.7 mycroft bcopy((caddr_t)LLADDR(sdl), (caddr_t)eaddr, 6);
597 1.7 mycroft if (dflag)
598 1.7 mycroft fprintf(stderr, "%s: %x:%x:%x:%x:%x:%x\n",
599 1.7 mycroft ifr->ifr_name, eaddr[0], eaddr[1],
600 1.7 mycroft eaddr[2], eaddr[3], eaddr[4], eaddr[5]);
601 1.1 deraadt return;
602 1.1 deraadt }
603 1.1 deraadt }
604 1.1 deraadt
605 1.1 deraadt err(FATAL, "lookup_eaddr: Never saw interface `%s'!", ifname);
606 1.1 deraadt }
607 1.1 deraadt /*
608 1.1 deraadt * Lookup the IP address and network mask of the interface named 'ifname'.
609 1.1 deraadt */
610 1.1 deraadt void
611 1.1 deraadt lookup_ipaddr(ifname, addrp, netmaskp)
612 1.1 deraadt char *ifname;
613 1.1 deraadt u_long *addrp;
614 1.1 deraadt u_long *netmaskp;
615 1.1 deraadt {
616 1.1 deraadt int fd;
617 1.1 deraadt struct ifreq ifr;
618 1.1 deraadt
619 1.1 deraadt /* Use datagram socket to get IP address. */
620 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
621 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
622 1.1 deraadt /* NOTREACHED */
623 1.1 deraadt }
624 1.1 deraadt (void) strncpy(ifr.ifr_name, ifname, sizeof ifr.ifr_name);
625 1.1 deraadt if (ioctl(fd, SIOCGIFADDR, (char *) &ifr) < 0) {
626 1.1 deraadt err(FATAL, "SIOCGIFADDR: %s", strerror(errno));
627 1.1 deraadt /* NOTREACHED */
628 1.1 deraadt }
629 1.1 deraadt *addrp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
630 1.1 deraadt if (ioctl(fd, SIOCGIFNETMASK, (char *) &ifr) < 0) {
631 1.1 deraadt perror("SIOCGIFNETMASK");
632 1.1 deraadt exit(1);
633 1.1 deraadt }
634 1.1 deraadt *netmaskp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
635 1.1 deraadt /* If SIOCGIFNETMASK didn't work, figure out a mask from the IP
636 1.1 deraadt * address class. */
637 1.1 deraadt if (*netmaskp == 0)
638 1.1 deraadt *netmaskp = ipaddrtonetmask(*addrp);
639 1.1 deraadt
640 1.1 deraadt (void) close(fd);
641 1.1 deraadt }
642 1.1 deraadt /*
643 1.1 deraadt * Poke the kernel arp tables with the ethernet/ip address combinataion
644 1.1 deraadt * given. When processing a reply, we must do this so that the booting
645 1.1 deraadt * host (i.e. the guy running rarpd), won't try to ARP for the hardware
646 1.1 deraadt * address of the guy being booted (he cannot answer the ARP).
647 1.1 deraadt */
648 1.1 deraadt void
649 1.1 deraadt update_arptab(ep, ipaddr)
650 1.1 deraadt u_char *ep;
651 1.1 deraadt u_long ipaddr;
652 1.1 deraadt {
653 1.1 deraadt int s;
654 1.1 deraadt struct arpreq request;
655 1.1 deraadt struct sockaddr_in *sin;
656 1.1 deraadt
657 1.1 deraadt request.arp_flags = 0;
658 1.1 deraadt sin = (struct sockaddr_in *) & request.arp_pa;
659 1.1 deraadt sin->sin_family = AF_INET;
660 1.1 deraadt sin->sin_addr.s_addr = ipaddr;
661 1.1 deraadt request.arp_ha.sa_family = AF_UNSPEC;
662 1.1 deraadt /* This is needed #if defined(COMPAT_43) && BYTE_ORDER != BIG_ENDIAN,
663 1.1 deraadt because AF_UNSPEC is zero and the kernel assumes that a zero
664 1.1 deraadt sa_family means that the real sa_family value is in sa_len. */
665 1.1 deraadt request.arp_ha.sa_len = 16; /* XXX */
666 1.1 deraadt bcopy((char *) ep, (char *) request.arp_ha.sa_data, 6);
667 1.1 deraadt
668 1.7 mycroft #if 0
669 1.1 deraadt s = socket(AF_INET, SOCK_DGRAM, 0);
670 1.1 deraadt if (ioctl(s, SIOCSARP, (caddr_t) & request) < 0) {
671 1.1 deraadt err(NONFATAL, "SIOCSARP: %s", strerror(errno));
672 1.1 deraadt }
673 1.1 deraadt (void) close(s);
674 1.7 mycroft #endif
675 1.1 deraadt }
676 1.1 deraadt /*
677 1.1 deraadt * Build a reverse ARP packet and sent it out on the interface.
678 1.6 cgd * 'ep' points to a valid ARPOP_REVREQUEST. The ARPOP_REVREPLY is built
679 1.1 deraadt * on top of the request, then written to the network.
680 1.1 deraadt *
681 1.1 deraadt * RFC 903 defines the ether_arp fields as follows. The following comments
682 1.1 deraadt * are taken (more or less) straight from this document.
683 1.1 deraadt *
684 1.6 cgd * ARPOP_REVREQUEST
685 1.1 deraadt *
686 1.1 deraadt * arp_sha is the hardware address of the sender of the packet.
687 1.1 deraadt * arp_spa is undefined.
688 1.1 deraadt * arp_tha is the 'target' hardware address.
689 1.1 deraadt * In the case where the sender wishes to determine his own
690 1.1 deraadt * protocol address, this, like arp_sha, will be the hardware
691 1.1 deraadt * address of the sender.
692 1.1 deraadt * arp_tpa is undefined.
693 1.1 deraadt *
694 1.6 cgd * ARPOP_REVREPLY
695 1.1 deraadt *
696 1.1 deraadt * arp_sha is the hardware address of the responder (the sender of the
697 1.1 deraadt * reply packet).
698 1.1 deraadt * arp_spa is the protocol address of the responder (see the note below).
699 1.1 deraadt * arp_tha is the hardware address of the target, and should be the same as
700 1.1 deraadt * that which was given in the request.
701 1.1 deraadt * arp_tpa is the protocol address of the target, that is, the desired address.
702 1.1 deraadt *
703 1.1 deraadt * Note that the requirement that arp_spa be filled in with the responder's
704 1.1 deraadt * protocol is purely for convenience. For instance, if a system were to use
705 1.1 deraadt * both ARP and RARP, then the inclusion of the valid protocol-hardware
706 1.1 deraadt * address pair (arp_spa, arp_sha) may eliminate the need for a subsequent
707 1.1 deraadt * ARP request.
708 1.1 deraadt */
709 1.1 deraadt void
710 1.1 deraadt rarp_reply(ii, ep, ipaddr)
711 1.1 deraadt struct if_info *ii;
712 1.1 deraadt struct ether_header *ep;
713 1.1 deraadt u_long ipaddr;
714 1.1 deraadt {
715 1.1 deraadt int n;
716 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (ep + 1);
717 1.1 deraadt int len;
718 1.1 deraadt
719 1.1 deraadt update_arptab((u_char *) & ap->arp_sha, ipaddr);
720 1.1 deraadt
721 1.1 deraadt /* Build the rarp reply by modifying the rarp request in place. */
722 1.3 deraadt ep->ether_type = htons(ETHERTYPE_REVARP);
723 1.4 cgd ap->ea_hdr.ar_hrd = htons(ARPHRD_ETHER);
724 1.4 cgd ap->ea_hdr.ar_pro = htons(ETHERTYPE_IP);
725 1.6 cgd ap->arp_op = htons(ARPOP_REVREPLY);
726 1.1 deraadt
727 1.1 deraadt bcopy((char *) &ap->arp_sha, (char *) &ep->ether_dhost, 6);
728 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ep->ether_shost, 6);
729 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ap->arp_sha, 6);
730 1.1 deraadt
731 1.1 deraadt bcopy((char *) &ipaddr, (char *) ap->arp_tpa, 4);
732 1.1 deraadt /* Target hardware is unchanged. */
733 1.1 deraadt bcopy((char *) &ii->ii_ipaddr, (char *) ap->arp_spa, 4);
734 1.1 deraadt
735 1.1 deraadt len = sizeof(*ep) + sizeof(*ap);
736 1.1 deraadt n = write(ii->ii_fd, (char *) ep, len);
737 1.1 deraadt if (n != len) {
738 1.1 deraadt err(NONFATAL, "write: only %d of %d bytes written", n, len);
739 1.1 deraadt }
740 1.1 deraadt }
741 1.1 deraadt /*
742 1.1 deraadt * Get the netmask of an IP address. This routine is used if
743 1.1 deraadt * SIOCGIFNETMASK doesn't work.
744 1.1 deraadt */
745 1.1 deraadt u_long
746 1.1 deraadt ipaddrtonetmask(addr)
747 1.1 deraadt u_long addr;
748 1.1 deraadt {
749 1.1 deraadt if (IN_CLASSA(addr))
750 1.1 deraadt return IN_CLASSA_NET;
751 1.1 deraadt if (IN_CLASSB(addr))
752 1.1 deraadt return IN_CLASSB_NET;
753 1.1 deraadt if (IN_CLASSC(addr))
754 1.1 deraadt return IN_CLASSC_NET;
755 1.1 deraadt err(FATAL, "unknown IP address class: %08X", addr);
756 1.1 deraadt /* NOTREACHED */
757 1.1 deraadt }
758 1.1 deraadt
759 1.1 deraadt #if __STDC__
760 1.1 deraadt #include <stdarg.h>
761 1.1 deraadt #else
762 1.1 deraadt #include <varargs.h>
763 1.1 deraadt #endif
764 1.1 deraadt
765 1.1 deraadt void
766 1.1 deraadt #if __STDC__
767 1.1 deraadt err(int fatal, const char *fmt,...)
768 1.1 deraadt #else
769 1.1 deraadt err(fmt, va_alist)
770 1.1 deraadt int fatal;
771 1.1 deraadt char *fmt;
772 1.1 deraadt va_dcl
773 1.1 deraadt #endif
774 1.1 deraadt {
775 1.1 deraadt va_list ap;
776 1.1 deraadt #if __STDC__
777 1.1 deraadt va_start(ap, fmt);
778 1.1 deraadt #else
779 1.1 deraadt va_start(ap);
780 1.1 deraadt #endif
781 1.1 deraadt if (dflag) {
782 1.1 deraadt if (fatal)
783 1.1 deraadt (void) fprintf(stderr, "rarpd: error: ");
784 1.1 deraadt else
785 1.1 deraadt (void) fprintf(stderr, "rarpd: warning: ");
786 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
787 1.1 deraadt (void) fprintf(stderr, "\n");
788 1.1 deraadt }
789 1.1 deraadt vsyslog(LOG_ERR, fmt, ap);
790 1.1 deraadt va_end(ap);
791 1.1 deraadt if (fatal)
792 1.1 deraadt exit(1);
793 1.1 deraadt /* NOTREACHED */
794 1.1 deraadt }
795 1.1 deraadt
796 1.1 deraadt void
797 1.1 deraadt #if __STDC__
798 1.1 deraadt debug(const char *fmt,...)
799 1.1 deraadt #else
800 1.1 deraadt debug(fmt, va_alist)
801 1.1 deraadt char *fmt;
802 1.1 deraadt va_dcl
803 1.1 deraadt #endif
804 1.1 deraadt {
805 1.1 deraadt va_list ap;
806 1.1 deraadt
807 1.1 deraadt if (dflag) {
808 1.1 deraadt #if __STDC__
809 1.1 deraadt va_start(ap, fmt);
810 1.1 deraadt #else
811 1.1 deraadt va_start(ap);
812 1.1 deraadt #endif
813 1.1 deraadt (void) fprintf(stderr, "rarpd: ");
814 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
815 1.1 deraadt va_end(ap);
816 1.1 deraadt (void) fprintf(stderr, "\n");
817 1.1 deraadt }
818 1.1 deraadt }
819