rarpd.c revision 1.8.2.1 1 1.1 deraadt /*
2 1.1 deraadt * Copyright (c) 1990 The Regents of the University of California.
3 1.1 deraadt * All rights reserved.
4 1.1 deraadt *
5 1.1 deraadt * Redistribution and use in source and binary forms, with or without
6 1.1 deraadt * modification, are permitted provided that: (1) source code distributions
7 1.1 deraadt * retain the above copyright notice and this paragraph in its entirety, (2)
8 1.1 deraadt * distributions including binary code include the above copyright notice and
9 1.1 deraadt * this paragraph in its entirety in the documentation or other materials
10 1.1 deraadt * provided with the distribution, and (3) all advertising materials mentioning
11 1.1 deraadt * features or use of this software display the following acknowledgement:
12 1.1 deraadt * ``This product includes software developed by the University of California,
13 1.1 deraadt * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 1.1 deraadt * the University nor the names of its contributors may be used to endorse
15 1.1 deraadt * or promote products derived from this software without specific prior
16 1.1 deraadt * written permission.
17 1.1 deraadt * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 1.1 deraadt * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 1.1 deraadt * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 1.1 deraadt */
21 1.1 deraadt #ifndef lint
22 1.1 deraadt char copyright[] =
23 1.1 deraadt "@(#) Copyright (c) 1990 The Regents of the University of California.\n\
24 1.1 deraadt All rights reserved.\n";
25 1.1 deraadt #endif /* not lint */
26 1.1 deraadt
27 1.1 deraadt #ifndef lint
28 1.1 deraadt static char rcsid[] =
29 1.8.2.1 hpeyerl "@(#) $Id: rarpd.c,v 1.8.2.1 1996/02/23 23:41:22 hpeyerl Exp $";
30 1.1 deraadt #endif
31 1.1 deraadt
32 1.1 deraadt
33 1.1 deraadt /*
34 1.1 deraadt * rarpd - Reverse ARP Daemon
35 1.1 deraadt *
36 1.1 deraadt * Usage: rarpd -a [ -d -f ]
37 1.1 deraadt * rarpd [ -d -f ] interface
38 1.1 deraadt */
39 1.1 deraadt
40 1.1 deraadt #include <stdio.h>
41 1.1 deraadt #include <stdlib.h>
42 1.1 deraadt #include <syslog.h>
43 1.1 deraadt #include <string.h>
44 1.1 deraadt #include <strings.h>
45 1.1 deraadt #include <sys/types.h>
46 1.1 deraadt #include <unistd.h>
47 1.1 deraadt #include <sys/time.h>
48 1.1 deraadt #include <net/bpf.h>
49 1.1 deraadt #include <sys/socket.h>
50 1.1 deraadt #include <sys/ioctl.h>
51 1.1 deraadt #include <net/if.h>
52 1.7 mycroft #include <net/if_dl.h>
53 1.7 mycroft #include <net/if_types.h>
54 1.1 deraadt #include <netinet/in.h>
55 1.1 deraadt #include <netinet/if_ether.h>
56 1.1 deraadt #include <sys/errno.h>
57 1.1 deraadt #include <sys/file.h>
58 1.1 deraadt #include <netdb.h>
59 1.1 deraadt #include <arpa/inet.h>
60 1.1 deraadt #include <dirent.h>
61 1.1 deraadt
62 1.1 deraadt #define FATAL 1 /* fatal error occurred */
63 1.1 deraadt #define NONFATAL 0 /* non fatal error occurred */
64 1.1 deraadt
65 1.1 deraadt /*
66 1.1 deraadt * The structure for each interface.
67 1.1 deraadt */
68 1.1 deraadt struct if_info {
69 1.1 deraadt int ii_fd; /* BPF file descriptor */
70 1.1 deraadt u_char ii_eaddr[6]; /* Ethernet address of this interface */
71 1.1 deraadt u_long ii_ipaddr; /* IP address of this interface */
72 1.1 deraadt u_long ii_netmask; /* subnet or net mask */
73 1.1 deraadt struct if_info *ii_next;
74 1.1 deraadt };
75 1.1 deraadt /*
76 1.1 deraadt * The list of all interfaces that are being listened to. rarp_loop()
77 1.1 deraadt * "selects" on the descriptors in this list.
78 1.1 deraadt */
79 1.1 deraadt struct if_info *iflist;
80 1.1 deraadt
81 1.1 deraadt int rarp_open __P((char *));
82 1.1 deraadt void init_one __P((char *));
83 1.1 deraadt void init_all __P((void));
84 1.1 deraadt void rarp_loop __P((void));
85 1.1 deraadt void lookup_eaddr __P((char *, u_char *));
86 1.1 deraadt void lookup_ipaddr __P((char *, u_long *, u_long *));
87 1.1 deraadt void usage __P((void));
88 1.1 deraadt void rarp_process __P((struct if_info *, u_char *));
89 1.1 deraadt void rarp_reply __P((struct if_info *, struct ether_header *, u_long));
90 1.1 deraadt void update_arptab __P((u_char *, u_long));
91 1.1 deraadt void err __P((int, const char *,...));
92 1.1 deraadt void debug __P((const char *,...));
93 1.1 deraadt u_long ipaddrtonetmask __P((u_long));
94 1.1 deraadt
95 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
96 1.8 thorpej int rarp_bootable __P((u_long));
97 1.8 thorpej #endif
98 1.8 thorpej
99 1.1 deraadt int aflag = 0; /* listen on "all" interfaces */
100 1.1 deraadt int dflag = 0; /* print debugging messages */
101 1.1 deraadt int fflag = 0; /* don't fork */
102 1.1 deraadt
103 1.1 deraadt void
104 1.1 deraadt main(argc, argv)
105 1.1 deraadt int argc;
106 1.1 deraadt char **argv;
107 1.1 deraadt {
108 1.1 deraadt int op, pid, devnull, f;
109 1.1 deraadt char *ifname, *hostname, *name;
110 1.1 deraadt
111 1.1 deraadt extern char *optarg;
112 1.1 deraadt extern int optind, opterr;
113 1.1 deraadt
114 1.1 deraadt if (name = strrchr(argv[0], '/'))
115 1.1 deraadt ++name;
116 1.1 deraadt else
117 1.1 deraadt name = argv[0];
118 1.1 deraadt if (*name == '-')
119 1.1 deraadt ++name;
120 1.1 deraadt
121 1.1 deraadt /* All error reporting is done through syslogs. */
122 1.1 deraadt openlog(name, LOG_PID | LOG_CONS, LOG_DAEMON);
123 1.1 deraadt
124 1.1 deraadt opterr = 0;
125 1.1 deraadt while ((op = getopt(argc, argv, "adf")) != EOF) {
126 1.1 deraadt switch (op) {
127 1.1 deraadt case 'a':
128 1.1 deraadt ++aflag;
129 1.1 deraadt break;
130 1.1 deraadt
131 1.1 deraadt case 'd':
132 1.1 deraadt ++dflag;
133 1.1 deraadt break;
134 1.1 deraadt
135 1.1 deraadt case 'f':
136 1.1 deraadt ++fflag;
137 1.1 deraadt break;
138 1.1 deraadt
139 1.1 deraadt default:
140 1.1 deraadt usage();
141 1.1 deraadt /* NOTREACHED */
142 1.1 deraadt }
143 1.1 deraadt }
144 1.1 deraadt ifname = argv[optind++];
145 1.1 deraadt hostname = ifname ? argv[optind] : 0;
146 1.1 deraadt if ((aflag && ifname) || (!aflag && ifname == 0))
147 1.1 deraadt usage();
148 1.1 deraadt
149 1.1 deraadt if (aflag)
150 1.1 deraadt init_all();
151 1.1 deraadt else
152 1.1 deraadt init_one(ifname);
153 1.1 deraadt
154 1.1 deraadt if ((!fflag) && (!dflag)) {
155 1.1 deraadt pid = fork();
156 1.1 deraadt if (pid > 0)
157 1.1 deraadt /* Parent exits, leaving child in background. */
158 1.1 deraadt exit(0);
159 1.1 deraadt else
160 1.1 deraadt if (pid == -1) {
161 1.1 deraadt err(FATAL, "cannot fork");
162 1.1 deraadt /* NOTREACHED */
163 1.1 deraadt }
164 1.1 deraadt /* Fade into the background */
165 1.1 deraadt f = open("/dev/tty", O_RDWR);
166 1.1 deraadt if (f >= 0) {
167 1.1 deraadt if (ioctl(f, TIOCNOTTY, 0) < 0) {
168 1.1 deraadt err(FATAL, "TIOCNOTTY: %s", strerror(errno));
169 1.1 deraadt /* NOTREACHED */
170 1.1 deraadt }
171 1.1 deraadt (void) close(f);
172 1.1 deraadt }
173 1.1 deraadt (void) chdir("/");
174 1.1 deraadt (void) setpgrp(0, getpid());
175 1.1 deraadt devnull = open("/dev/null", O_RDWR);
176 1.1 deraadt if (devnull >= 0) {
177 1.1 deraadt (void) dup2(devnull, 0);
178 1.1 deraadt (void) dup2(devnull, 1);
179 1.1 deraadt (void) dup2(devnull, 2);
180 1.1 deraadt if (devnull > 2)
181 1.1 deraadt (void) close(devnull);
182 1.1 deraadt }
183 1.1 deraadt }
184 1.1 deraadt rarp_loop();
185 1.1 deraadt }
186 1.1 deraadt /*
187 1.1 deraadt * Add 'ifname' to the interface list. Lookup its IP address and network
188 1.1 deraadt * mask and Ethernet address, and open a BPF file for it.
189 1.1 deraadt */
190 1.1 deraadt void
191 1.1 deraadt init_one(ifname)
192 1.1 deraadt char *ifname;
193 1.1 deraadt {
194 1.1 deraadt struct if_info *p;
195 1.1 deraadt
196 1.7 mycroft p = (struct if_info *)malloc(sizeof(*p));
197 1.1 deraadt if (p == 0) {
198 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
199 1.1 deraadt /* NOTREACHED */
200 1.1 deraadt }
201 1.1 deraadt p->ii_next = iflist;
202 1.1 deraadt iflist = p;
203 1.1 deraadt
204 1.1 deraadt p->ii_fd = rarp_open(ifname);
205 1.1 deraadt lookup_eaddr(ifname, p->ii_eaddr);
206 1.1 deraadt lookup_ipaddr(ifname, &p->ii_ipaddr, &p->ii_netmask);
207 1.1 deraadt }
208 1.1 deraadt /*
209 1.1 deraadt * Initialize all "candidate" interfaces that are in the system
210 1.1 deraadt * configuration list. A "candidate" is up, not loopback and not
211 1.1 deraadt * point to point.
212 1.1 deraadt */
213 1.1 deraadt void
214 1.1 deraadt init_all()
215 1.1 deraadt {
216 1.7 mycroft char inbuf[8192];
217 1.1 deraadt struct ifconf ifc;
218 1.8.2.1 hpeyerl struct ifreq ifreq, *ifr;
219 1.7 mycroft int fd;
220 1.7 mycroft int i, len;
221 1.1 deraadt
222 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
223 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
224 1.1 deraadt /* NOTREACHED */
225 1.1 deraadt }
226 1.7 mycroft
227 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
228 1.7 mycroft ifc.ifc_buf = inbuf;
229 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
230 1.1 deraadt ifc.ifc_len < sizeof(struct ifreq)) {
231 1.7 mycroft err(FATAL, "init_all: SIOCGIFCONF: %s", strerror(errno));
232 1.1 deraadt /* NOTREACHED */
233 1.1 deraadt }
234 1.7 mycroft ifr = ifc.ifc_req;
235 1.8.2.1 hpeyerl ifreq.ifr_name[0] = '\0';
236 1.7 mycroft for (i = 0; i < ifc.ifc_len;
237 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
238 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
239 1.8.2.1 hpeyerl if (!strncmp(ifreq.ifr_name, ifr->ifr_name, sizeof(ifr->ifr_name)))
240 1.8.2.1 hpeyerl continue;
241 1.8.2.1 hpeyerl ifreq = *ifr;
242 1.7 mycroft if (ioctl(fd, SIOCGIFFLAGS, (caddr_t)ifr) < 0) {
243 1.7 mycroft err(FATAL, "init_all: SIOCGIFFLAGS: %s",
244 1.7 mycroft strerror(errno));
245 1.1 deraadt /* NOTREACHED */
246 1.1 deraadt }
247 1.7 mycroft if ((ifr->ifr_flags &
248 1.7 mycroft (IFF_UP | IFF_LOOPBACK | IFF_POINTOPOINT)) != IFF_UP)
249 1.1 deraadt continue;
250 1.7 mycroft init_one(ifr->ifr_name);
251 1.1 deraadt }
252 1.1 deraadt (void) close(fd);
253 1.1 deraadt }
254 1.1 deraadt
255 1.1 deraadt void
256 1.1 deraadt usage()
257 1.1 deraadt {
258 1.1 deraadt (void) fprintf(stderr, "usage: rarpd -a [ -d -f ]\n");
259 1.1 deraadt (void) fprintf(stderr, " rarpd [ -d -f ] interface\n");
260 1.1 deraadt exit(1);
261 1.1 deraadt }
262 1.1 deraadt
263 1.1 deraadt static int
264 1.1 deraadt bpf_open()
265 1.1 deraadt {
266 1.1 deraadt int fd;
267 1.1 deraadt int n = 0;
268 1.1 deraadt char device[sizeof "/dev/bpf000"];
269 1.1 deraadt
270 1.1 deraadt /* Go through all the minors and find one that isn't in use. */
271 1.1 deraadt do {
272 1.1 deraadt (void) sprintf(device, "/dev/bpf%d", n++);
273 1.1 deraadt fd = open(device, O_RDWR);
274 1.1 deraadt } while (fd < 0 && errno == EBUSY);
275 1.1 deraadt
276 1.1 deraadt if (fd < 0) {
277 1.1 deraadt err(FATAL, "%s: %s", device, strerror(errno));
278 1.1 deraadt /* NOTREACHED */
279 1.1 deraadt }
280 1.1 deraadt return fd;
281 1.1 deraadt }
282 1.1 deraadt /*
283 1.1 deraadt * Open a BPF file and attach it to the interface named 'device'.
284 1.1 deraadt * Set immediate mode, and set a filter that accepts only RARP requests.
285 1.1 deraadt */
286 1.1 deraadt int
287 1.1 deraadt rarp_open(device)
288 1.1 deraadt char *device;
289 1.1 deraadt {
290 1.1 deraadt int fd;
291 1.1 deraadt struct ifreq ifr;
292 1.1 deraadt u_int dlt;
293 1.1 deraadt int immediate;
294 1.1 deraadt
295 1.1 deraadt static struct bpf_insn insns[] = {
296 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
297 1.1 deraadt BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ETHERTYPE_REVARP, 0, 3),
298 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
299 1.6 cgd BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ARPOP_REVREQUEST, 0, 1),
300 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, sizeof(struct ether_arp) +
301 1.1 deraadt sizeof(struct ether_header)),
302 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, 0),
303 1.1 deraadt };
304 1.1 deraadt static struct bpf_program filter = {
305 1.1 deraadt sizeof insns / sizeof(insns[0]),
306 1.1 deraadt insns
307 1.1 deraadt };
308 1.1 deraadt
309 1.1 deraadt fd = bpf_open();
310 1.1 deraadt
311 1.1 deraadt /* Set immediate mode so packets are processed as they arrive. */
312 1.1 deraadt immediate = 1;
313 1.1 deraadt if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
314 1.1 deraadt err(FATAL, "BIOCIMMEDIATE: %s", strerror(errno));
315 1.1 deraadt /* NOTREACHED */
316 1.1 deraadt }
317 1.1 deraadt (void) strncpy(ifr.ifr_name, device, sizeof ifr.ifr_name);
318 1.1 deraadt if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
319 1.1 deraadt err(FATAL, "BIOCSETIF: %s", strerror(errno));
320 1.1 deraadt /* NOTREACHED */
321 1.1 deraadt }
322 1.1 deraadt /* Check that the data link layer is an Ethernet; this code won't work
323 1.1 deraadt * with anything else. */
324 1.1 deraadt if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
325 1.1 deraadt err(FATAL, "BIOCGDLT: %s", strerror(errno));
326 1.1 deraadt /* NOTREACHED */
327 1.1 deraadt }
328 1.1 deraadt if (dlt != DLT_EN10MB) {
329 1.1 deraadt err(FATAL, "%s is not an ethernet", device);
330 1.1 deraadt /* NOTREACHED */
331 1.1 deraadt }
332 1.1 deraadt /* Set filter program. */
333 1.1 deraadt if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
334 1.1 deraadt err(FATAL, "BIOCSETF: %s", strerror(errno));
335 1.1 deraadt /* NOTREACHED */
336 1.1 deraadt }
337 1.1 deraadt return fd;
338 1.1 deraadt }
339 1.1 deraadt /*
340 1.1 deraadt * Perform various sanity checks on the RARP request packet. Return
341 1.1 deraadt * false on failure and log the reason.
342 1.1 deraadt */
343 1.1 deraadt static int
344 1.1 deraadt rarp_check(p, len)
345 1.1 deraadt u_char *p;
346 1.1 deraadt int len;
347 1.1 deraadt {
348 1.1 deraadt struct ether_header *ep = (struct ether_header *) p;
349 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (p + sizeof(*ep));
350 1.1 deraadt
351 1.1 deraadt (void) debug("got a packet");
352 1.1 deraadt
353 1.1 deraadt if (len < sizeof(*ep) + sizeof(*ap)) {
354 1.1 deraadt err(NONFATAL, "truncated request");
355 1.1 deraadt return 0;
356 1.1 deraadt }
357 1.1 deraadt /* XXX This test might be better off broken out... */
358 1.1 deraadt if (ntohs (ep->ether_type) != ETHERTYPE_REVARP ||
359 1.1 deraadt ntohs (ap->arp_hrd) != ARPHRD_ETHER ||
360 1.6 cgd ntohs (ap->arp_op) != ARPOP_REVREQUEST ||
361 1.1 deraadt ntohs (ap->arp_pro) != ETHERTYPE_IP ||
362 1.1 deraadt ap->arp_hln != 6 || ap->arp_pln != 4) {
363 1.1 deraadt err(NONFATAL, "request fails sanity check");
364 1.1 deraadt return 0;
365 1.1 deraadt }
366 1.1 deraadt if (bcmp((char *) &ep->ether_shost, (char *) &ap->arp_sha, 6) != 0) {
367 1.1 deraadt err(NONFATAL, "ether/arp sender address mismatch");
368 1.1 deraadt return 0;
369 1.1 deraadt }
370 1.1 deraadt if (bcmp((char *) &ap->arp_sha, (char *) &ap->arp_tha, 6) != 0) {
371 1.1 deraadt err(NONFATAL, "ether/arp target address mismatch");
372 1.1 deraadt return 0;
373 1.1 deraadt }
374 1.1 deraadt return 1;
375 1.1 deraadt }
376 1.1 deraadt
377 1.1 deraadt /*
378 1.1 deraadt * Loop indefinitely listening for RARP requests on the
379 1.1 deraadt * interfaces in 'iflist'.
380 1.1 deraadt */
381 1.1 deraadt void
382 1.1 deraadt rarp_loop()
383 1.1 deraadt {
384 1.1 deraadt u_char *buf, *bp, *ep;
385 1.1 deraadt int cc, fd;
386 1.1 deraadt fd_set fds, listeners;
387 1.1 deraadt int bufsize, maxfd = 0;
388 1.1 deraadt struct if_info *ii;
389 1.1 deraadt
390 1.1 deraadt if (iflist == 0) {
391 1.1 deraadt err(FATAL, "no interfaces");
392 1.1 deraadt /* NOTREACHED */
393 1.1 deraadt }
394 1.1 deraadt if (ioctl(iflist->ii_fd, BIOCGBLEN, (caddr_t) & bufsize) < 0) {
395 1.1 deraadt err(FATAL, "BIOCGBLEN: %s", strerror(errno));
396 1.1 deraadt /* NOTREACHED */
397 1.1 deraadt }
398 1.1 deraadt buf = (u_char *) malloc((unsigned) bufsize);
399 1.1 deraadt if (buf == 0) {
400 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
401 1.1 deraadt /* NOTREACHED */
402 1.1 deraadt }
403 1.1 deraadt /*
404 1.1 deraadt * Find the highest numbered file descriptor for select().
405 1.1 deraadt * Initialize the set of descriptors to listen to.
406 1.1 deraadt */
407 1.1 deraadt FD_ZERO(&fds);
408 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
409 1.1 deraadt FD_SET(ii->ii_fd, &fds);
410 1.1 deraadt if (ii->ii_fd > maxfd)
411 1.1 deraadt maxfd = ii->ii_fd;
412 1.1 deraadt }
413 1.1 deraadt while (1) {
414 1.1 deraadt listeners = fds;
415 1.1 deraadt if (select(maxfd + 1, &listeners, (struct fd_set *) 0,
416 1.1 deraadt (struct fd_set *) 0, (struct timeval *) 0) < 0) {
417 1.1 deraadt err(FATAL, "select: %s", strerror(errno));
418 1.1 deraadt /* NOTREACHED */
419 1.1 deraadt }
420 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
421 1.1 deraadt fd = ii->ii_fd;
422 1.1 deraadt if (!FD_ISSET(fd, &listeners))
423 1.1 deraadt continue;
424 1.1 deraadt again:
425 1.1 deraadt cc = read(fd, (char *) buf, bufsize);
426 1.1 deraadt /* Don't choke when we get ptraced */
427 1.1 deraadt if (cc < 0 && errno == EINTR)
428 1.1 deraadt goto again;
429 1.1 deraadt /* Due to a SunOS bug, after 2^31 bytes, the file
430 1.1 deraadt * offset overflows and read fails with EINVAL. The
431 1.1 deraadt * lseek() to 0 will fix things. */
432 1.1 deraadt if (cc < 0) {
433 1.1 deraadt if (errno == EINVAL &&
434 1.5 cgd (lseek(fd, 0, SEEK_CUR) + bufsize) < 0) {
435 1.1 deraadt (void) lseek(fd, 0, 0);
436 1.1 deraadt goto again;
437 1.1 deraadt }
438 1.1 deraadt err(FATAL, "read: %s", strerror(errno));
439 1.1 deraadt /* NOTREACHED */
440 1.1 deraadt }
441 1.1 deraadt /* Loop through the packet(s) */
442 1.1 deraadt #define bhp ((struct bpf_hdr *)bp)
443 1.1 deraadt bp = buf;
444 1.1 deraadt ep = bp + cc;
445 1.1 deraadt while (bp < ep) {
446 1.1 deraadt register int caplen, hdrlen;
447 1.1 deraadt
448 1.1 deraadt caplen = bhp->bh_caplen;
449 1.1 deraadt hdrlen = bhp->bh_hdrlen;
450 1.1 deraadt if (rarp_check(bp + hdrlen, caplen))
451 1.1 deraadt rarp_process(ii, bp + hdrlen);
452 1.1 deraadt bp += BPF_WORDALIGN(hdrlen + caplen);
453 1.1 deraadt }
454 1.1 deraadt }
455 1.1 deraadt }
456 1.1 deraadt }
457 1.8 thorpej
458 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
459 1.8 thorpej
460 1.1 deraadt #ifndef TFTP_DIR
461 1.1 deraadt #define TFTP_DIR "/tftpboot"
462 1.1 deraadt #endif
463 1.1 deraadt
464 1.1 deraadt /*
465 1.1 deraadt * True if this server can boot the host whose IP address is 'addr'.
466 1.1 deraadt * This check is made by looking in the tftp directory for the
467 1.1 deraadt * configuration file.
468 1.1 deraadt */
469 1.1 deraadt int
470 1.1 deraadt rarp_bootable(addr)
471 1.1 deraadt u_long addr;
472 1.1 deraadt {
473 1.1 deraadt register struct dirent *dent;
474 1.1 deraadt register DIR *d;
475 1.1 deraadt char ipname[9];
476 1.1 deraadt static DIR *dd = 0;
477 1.1 deraadt
478 1.1 deraadt (void) sprintf(ipname, "%08X", addr);
479 1.1 deraadt /* If directory is already open, rewind it. Otherwise, open it. */
480 1.1 deraadt if (d = dd)
481 1.1 deraadt rewinddir(d);
482 1.1 deraadt else {
483 1.1 deraadt if (chdir(TFTP_DIR) == -1) {
484 1.1 deraadt err(FATAL, "chdir: %s", strerror(errno));
485 1.1 deraadt /* NOTREACHED */
486 1.1 deraadt }
487 1.1 deraadt d = opendir(".");
488 1.1 deraadt if (d == 0) {
489 1.1 deraadt err(FATAL, "opendir: %s", strerror(errno));
490 1.1 deraadt /* NOTREACHED */
491 1.1 deraadt }
492 1.1 deraadt dd = d;
493 1.1 deraadt }
494 1.1 deraadt while (dent = readdir(d))
495 1.1 deraadt if (strncmp(dent->d_name, ipname, 8) == 0)
496 1.1 deraadt return 1;
497 1.1 deraadt return 0;
498 1.1 deraadt }
499 1.8 thorpej #endif /* REQUIRE_TFTPBOOT */
500 1.8 thorpej
501 1.1 deraadt /*
502 1.1 deraadt * Given a list of IP addresses, 'alist', return the first address that
503 1.1 deraadt * is on network 'net'; 'netmask' is a mask indicating the network portion
504 1.1 deraadt * of the address.
505 1.1 deraadt */
506 1.1 deraadt u_long
507 1.1 deraadt choose_ipaddr(alist, net, netmask)
508 1.1 deraadt u_long **alist;
509 1.1 deraadt u_long net;
510 1.1 deraadt u_long netmask;
511 1.1 deraadt {
512 1.1 deraadt for (; *alist; ++alist) {
513 1.1 deraadt if ((**alist & netmask) == net)
514 1.1 deraadt return **alist;
515 1.1 deraadt }
516 1.1 deraadt return 0;
517 1.1 deraadt }
518 1.1 deraadt /*
519 1.1 deraadt * Answer the RARP request in 'pkt', on the interface 'ii'. 'pkt' has
520 1.1 deraadt * already been checked for validity. The reply is overlaid on the request.
521 1.1 deraadt */
522 1.1 deraadt void
523 1.1 deraadt rarp_process(ii, pkt)
524 1.1 deraadt struct if_info *ii;
525 1.1 deraadt u_char *pkt;
526 1.1 deraadt {
527 1.1 deraadt struct ether_header *ep;
528 1.1 deraadt struct hostent *hp;
529 1.1 deraadt u_long target_ipaddr;
530 1.1 deraadt char ename[256];
531 1.2 deraadt struct in_addr in;
532 1.1 deraadt
533 1.1 deraadt ep = (struct ether_header *) pkt;
534 1.1 deraadt
535 1.1 deraadt if (ether_ntohost(ename, &ep->ether_shost) != 0 ||
536 1.1 deraadt (hp = gethostbyname(ename)) == 0)
537 1.1 deraadt return;
538 1.1 deraadt
539 1.1 deraadt /* Choose correct address from list. */
540 1.1 deraadt if (hp->h_addrtype != AF_INET) {
541 1.1 deraadt err(FATAL, "cannot handle non IP addresses");
542 1.1 deraadt /* NOTREACHED */
543 1.1 deraadt }
544 1.1 deraadt target_ipaddr = choose_ipaddr((u_long **) hp->h_addr_list,
545 1.2 deraadt ii->ii_ipaddr & ii->ii_netmask, ii->ii_netmask);
546 1.1 deraadt
547 1.1 deraadt if (target_ipaddr == 0) {
548 1.2 deraadt in.s_addr = ii->ii_ipaddr & ii->ii_netmask;
549 1.1 deraadt err(NONFATAL, "cannot find %s on net %s\n",
550 1.2 deraadt ename, inet_ntoa(in));
551 1.1 deraadt return;
552 1.1 deraadt }
553 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
554 1.1 deraadt if (rarp_bootable(htonl(target_ipaddr)))
555 1.8 thorpej #endif
556 1.1 deraadt rarp_reply(ii, ep, target_ipaddr);
557 1.1 deraadt }
558 1.1 deraadt /*
559 1.1 deraadt * Lookup the ethernet address of the interface attached to the BPF
560 1.1 deraadt * file descriptor 'fd'; return it in 'eaddr'.
561 1.1 deraadt */
562 1.1 deraadt void
563 1.1 deraadt lookup_eaddr(ifname, eaddr)
564 1.1 deraadt char *ifname;
565 1.1 deraadt u_char *eaddr;
566 1.1 deraadt {
567 1.1 deraadt char inbuf[8192];
568 1.1 deraadt struct ifconf ifc;
569 1.1 deraadt struct ifreq *ifr;
570 1.7 mycroft struct sockaddr_dl *sdl;
571 1.1 deraadt int fd;
572 1.1 deraadt int i, len;
573 1.1 deraadt
574 1.1 deraadt /* We cannot use SIOCGIFADDR on the BPF descriptor.
575 1.1 deraadt We must instead get all the interfaces with SIOCGIFCONF
576 1.1 deraadt and find the right one. */
577 1.1 deraadt
578 1.1 deraadt /* Use datagram socket to get Ethernet address. */
579 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
580 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
581 1.1 deraadt /* NOTREACHED */
582 1.1 deraadt }
583 1.1 deraadt
584 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
585 1.1 deraadt ifc.ifc_buf = inbuf;
586 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
587 1.7 mycroft ifc.ifc_len < sizeof(struct ifreq)) {
588 1.7 mycroft err(FATAL, "lookup_eaddr: SIOGIFCONF: %s", strerror(errno));
589 1.1 deraadt /* NOTREACHED */
590 1.1 deraadt }
591 1.1 deraadt ifr = ifc.ifc_req;
592 1.7 mycroft for (i = 0; i < ifc.ifc_len;
593 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
594 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
595 1.7 mycroft sdl = (struct sockaddr_dl *)&ifr->ifr_addr;
596 1.7 mycroft if (sdl->sdl_family != AF_LINK || sdl->sdl_type != IFT_ETHER ||
597 1.7 mycroft sdl->sdl_alen != 6)
598 1.7 mycroft continue;
599 1.7 mycroft if (!strncmp(ifr->ifr_name, ifname, sizeof(ifr->ifr_name))) {
600 1.7 mycroft bcopy((caddr_t)LLADDR(sdl), (caddr_t)eaddr, 6);
601 1.7 mycroft if (dflag)
602 1.7 mycroft fprintf(stderr, "%s: %x:%x:%x:%x:%x:%x\n",
603 1.7 mycroft ifr->ifr_name, eaddr[0], eaddr[1],
604 1.7 mycroft eaddr[2], eaddr[3], eaddr[4], eaddr[5]);
605 1.1 deraadt return;
606 1.1 deraadt }
607 1.1 deraadt }
608 1.1 deraadt
609 1.1 deraadt err(FATAL, "lookup_eaddr: Never saw interface `%s'!", ifname);
610 1.1 deraadt }
611 1.1 deraadt /*
612 1.1 deraadt * Lookup the IP address and network mask of the interface named 'ifname'.
613 1.1 deraadt */
614 1.1 deraadt void
615 1.1 deraadt lookup_ipaddr(ifname, addrp, netmaskp)
616 1.1 deraadt char *ifname;
617 1.1 deraadt u_long *addrp;
618 1.1 deraadt u_long *netmaskp;
619 1.1 deraadt {
620 1.1 deraadt int fd;
621 1.1 deraadt struct ifreq ifr;
622 1.1 deraadt
623 1.1 deraadt /* Use datagram socket to get IP address. */
624 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
625 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
626 1.1 deraadt /* NOTREACHED */
627 1.1 deraadt }
628 1.1 deraadt (void) strncpy(ifr.ifr_name, ifname, sizeof ifr.ifr_name);
629 1.1 deraadt if (ioctl(fd, SIOCGIFADDR, (char *) &ifr) < 0) {
630 1.1 deraadt err(FATAL, "SIOCGIFADDR: %s", strerror(errno));
631 1.1 deraadt /* NOTREACHED */
632 1.1 deraadt }
633 1.1 deraadt *addrp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
634 1.1 deraadt if (ioctl(fd, SIOCGIFNETMASK, (char *) &ifr) < 0) {
635 1.1 deraadt perror("SIOCGIFNETMASK");
636 1.1 deraadt exit(1);
637 1.1 deraadt }
638 1.1 deraadt *netmaskp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
639 1.1 deraadt /* If SIOCGIFNETMASK didn't work, figure out a mask from the IP
640 1.1 deraadt * address class. */
641 1.1 deraadt if (*netmaskp == 0)
642 1.1 deraadt *netmaskp = ipaddrtonetmask(*addrp);
643 1.1 deraadt
644 1.1 deraadt (void) close(fd);
645 1.1 deraadt }
646 1.1 deraadt /*
647 1.1 deraadt * Poke the kernel arp tables with the ethernet/ip address combinataion
648 1.1 deraadt * given. When processing a reply, we must do this so that the booting
649 1.1 deraadt * host (i.e. the guy running rarpd), won't try to ARP for the hardware
650 1.1 deraadt * address of the guy being booted (he cannot answer the ARP).
651 1.1 deraadt */
652 1.1 deraadt void
653 1.1 deraadt update_arptab(ep, ipaddr)
654 1.1 deraadt u_char *ep;
655 1.1 deraadt u_long ipaddr;
656 1.1 deraadt {
657 1.1 deraadt int s;
658 1.1 deraadt struct arpreq request;
659 1.1 deraadt struct sockaddr_in *sin;
660 1.1 deraadt
661 1.1 deraadt request.arp_flags = 0;
662 1.1 deraadt sin = (struct sockaddr_in *) & request.arp_pa;
663 1.1 deraadt sin->sin_family = AF_INET;
664 1.1 deraadt sin->sin_addr.s_addr = ipaddr;
665 1.1 deraadt request.arp_ha.sa_family = AF_UNSPEC;
666 1.1 deraadt /* This is needed #if defined(COMPAT_43) && BYTE_ORDER != BIG_ENDIAN,
667 1.1 deraadt because AF_UNSPEC is zero and the kernel assumes that a zero
668 1.1 deraadt sa_family means that the real sa_family value is in sa_len. */
669 1.1 deraadt request.arp_ha.sa_len = 16; /* XXX */
670 1.1 deraadt bcopy((char *) ep, (char *) request.arp_ha.sa_data, 6);
671 1.1 deraadt
672 1.7 mycroft #if 0
673 1.1 deraadt s = socket(AF_INET, SOCK_DGRAM, 0);
674 1.1 deraadt if (ioctl(s, SIOCSARP, (caddr_t) & request) < 0) {
675 1.1 deraadt err(NONFATAL, "SIOCSARP: %s", strerror(errno));
676 1.1 deraadt }
677 1.1 deraadt (void) close(s);
678 1.7 mycroft #endif
679 1.1 deraadt }
680 1.1 deraadt /*
681 1.1 deraadt * Build a reverse ARP packet and sent it out on the interface.
682 1.6 cgd * 'ep' points to a valid ARPOP_REVREQUEST. The ARPOP_REVREPLY is built
683 1.1 deraadt * on top of the request, then written to the network.
684 1.1 deraadt *
685 1.1 deraadt * RFC 903 defines the ether_arp fields as follows. The following comments
686 1.1 deraadt * are taken (more or less) straight from this document.
687 1.1 deraadt *
688 1.6 cgd * ARPOP_REVREQUEST
689 1.1 deraadt *
690 1.1 deraadt * arp_sha is the hardware address of the sender of the packet.
691 1.1 deraadt * arp_spa is undefined.
692 1.1 deraadt * arp_tha is the 'target' hardware address.
693 1.1 deraadt * In the case where the sender wishes to determine his own
694 1.1 deraadt * protocol address, this, like arp_sha, will be the hardware
695 1.1 deraadt * address of the sender.
696 1.1 deraadt * arp_tpa is undefined.
697 1.1 deraadt *
698 1.6 cgd * ARPOP_REVREPLY
699 1.1 deraadt *
700 1.1 deraadt * arp_sha is the hardware address of the responder (the sender of the
701 1.1 deraadt * reply packet).
702 1.1 deraadt * arp_spa is the protocol address of the responder (see the note below).
703 1.1 deraadt * arp_tha is the hardware address of the target, and should be the same as
704 1.1 deraadt * that which was given in the request.
705 1.1 deraadt * arp_tpa is the protocol address of the target, that is, the desired address.
706 1.1 deraadt *
707 1.1 deraadt * Note that the requirement that arp_spa be filled in with the responder's
708 1.1 deraadt * protocol is purely for convenience. For instance, if a system were to use
709 1.1 deraadt * both ARP and RARP, then the inclusion of the valid protocol-hardware
710 1.1 deraadt * address pair (arp_spa, arp_sha) may eliminate the need for a subsequent
711 1.1 deraadt * ARP request.
712 1.1 deraadt */
713 1.1 deraadt void
714 1.1 deraadt rarp_reply(ii, ep, ipaddr)
715 1.1 deraadt struct if_info *ii;
716 1.1 deraadt struct ether_header *ep;
717 1.1 deraadt u_long ipaddr;
718 1.1 deraadt {
719 1.1 deraadt int n;
720 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (ep + 1);
721 1.1 deraadt int len;
722 1.1 deraadt
723 1.1 deraadt update_arptab((u_char *) & ap->arp_sha, ipaddr);
724 1.1 deraadt
725 1.1 deraadt /* Build the rarp reply by modifying the rarp request in place. */
726 1.3 deraadt ep->ether_type = htons(ETHERTYPE_REVARP);
727 1.4 cgd ap->ea_hdr.ar_hrd = htons(ARPHRD_ETHER);
728 1.4 cgd ap->ea_hdr.ar_pro = htons(ETHERTYPE_IP);
729 1.6 cgd ap->arp_op = htons(ARPOP_REVREPLY);
730 1.1 deraadt
731 1.1 deraadt bcopy((char *) &ap->arp_sha, (char *) &ep->ether_dhost, 6);
732 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ep->ether_shost, 6);
733 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ap->arp_sha, 6);
734 1.1 deraadt
735 1.1 deraadt bcopy((char *) &ipaddr, (char *) ap->arp_tpa, 4);
736 1.1 deraadt /* Target hardware is unchanged. */
737 1.1 deraadt bcopy((char *) &ii->ii_ipaddr, (char *) ap->arp_spa, 4);
738 1.1 deraadt
739 1.1 deraadt len = sizeof(*ep) + sizeof(*ap);
740 1.1 deraadt n = write(ii->ii_fd, (char *) ep, len);
741 1.1 deraadt if (n != len) {
742 1.1 deraadt err(NONFATAL, "write: only %d of %d bytes written", n, len);
743 1.1 deraadt }
744 1.1 deraadt }
745 1.1 deraadt /*
746 1.1 deraadt * Get the netmask of an IP address. This routine is used if
747 1.1 deraadt * SIOCGIFNETMASK doesn't work.
748 1.1 deraadt */
749 1.1 deraadt u_long
750 1.1 deraadt ipaddrtonetmask(addr)
751 1.1 deraadt u_long addr;
752 1.1 deraadt {
753 1.1 deraadt if (IN_CLASSA(addr))
754 1.1 deraadt return IN_CLASSA_NET;
755 1.1 deraadt if (IN_CLASSB(addr))
756 1.1 deraadt return IN_CLASSB_NET;
757 1.1 deraadt if (IN_CLASSC(addr))
758 1.1 deraadt return IN_CLASSC_NET;
759 1.1 deraadt err(FATAL, "unknown IP address class: %08X", addr);
760 1.1 deraadt /* NOTREACHED */
761 1.1 deraadt }
762 1.1 deraadt
763 1.1 deraadt #if __STDC__
764 1.1 deraadt #include <stdarg.h>
765 1.1 deraadt #else
766 1.1 deraadt #include <varargs.h>
767 1.1 deraadt #endif
768 1.1 deraadt
769 1.1 deraadt void
770 1.1 deraadt #if __STDC__
771 1.1 deraadt err(int fatal, const char *fmt,...)
772 1.1 deraadt #else
773 1.1 deraadt err(fmt, va_alist)
774 1.1 deraadt int fatal;
775 1.1 deraadt char *fmt;
776 1.1 deraadt va_dcl
777 1.1 deraadt #endif
778 1.1 deraadt {
779 1.1 deraadt va_list ap;
780 1.1 deraadt #if __STDC__
781 1.1 deraadt va_start(ap, fmt);
782 1.1 deraadt #else
783 1.1 deraadt va_start(ap);
784 1.1 deraadt #endif
785 1.1 deraadt if (dflag) {
786 1.1 deraadt if (fatal)
787 1.1 deraadt (void) fprintf(stderr, "rarpd: error: ");
788 1.1 deraadt else
789 1.1 deraadt (void) fprintf(stderr, "rarpd: warning: ");
790 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
791 1.1 deraadt (void) fprintf(stderr, "\n");
792 1.1 deraadt }
793 1.1 deraadt vsyslog(LOG_ERR, fmt, ap);
794 1.1 deraadt va_end(ap);
795 1.1 deraadt if (fatal)
796 1.1 deraadt exit(1);
797 1.1 deraadt /* NOTREACHED */
798 1.1 deraadt }
799 1.1 deraadt
800 1.1 deraadt void
801 1.1 deraadt #if __STDC__
802 1.1 deraadt debug(const char *fmt,...)
803 1.1 deraadt #else
804 1.1 deraadt debug(fmt, va_alist)
805 1.1 deraadt char *fmt;
806 1.1 deraadt va_dcl
807 1.1 deraadt #endif
808 1.1 deraadt {
809 1.1 deraadt va_list ap;
810 1.1 deraadt
811 1.1 deraadt if (dflag) {
812 1.1 deraadt #if __STDC__
813 1.1 deraadt va_start(ap, fmt);
814 1.1 deraadt #else
815 1.1 deraadt va_start(ap);
816 1.1 deraadt #endif
817 1.1 deraadt (void) fprintf(stderr, "rarpd: ");
818 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
819 1.1 deraadt va_end(ap);
820 1.1 deraadt (void) fprintf(stderr, "\n");
821 1.1 deraadt }
822 1.1 deraadt }
823