rarpd.c revision 1.9 1 1.9 thorpej /* $NetBSD: rarpd.c,v 1.9 1995/11/17 09:54:49 thorpej Exp $ */
2 1.9 thorpej
3 1.1 deraadt /*
4 1.1 deraadt * Copyright (c) 1990 The Regents of the University of California.
5 1.1 deraadt * All rights reserved.
6 1.1 deraadt *
7 1.1 deraadt * Redistribution and use in source and binary forms, with or without
8 1.1 deraadt * modification, are permitted provided that: (1) source code distributions
9 1.1 deraadt * retain the above copyright notice and this paragraph in its entirety, (2)
10 1.1 deraadt * distributions including binary code include the above copyright notice and
11 1.1 deraadt * this paragraph in its entirety in the documentation or other materials
12 1.1 deraadt * provided with the distribution, and (3) all advertising materials mentioning
13 1.1 deraadt * features or use of this software display the following acknowledgement:
14 1.1 deraadt * ``This product includes software developed by the University of California,
15 1.1 deraadt * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
16 1.1 deraadt * the University nor the names of its contributors may be used to endorse
17 1.1 deraadt * or promote products derived from this software without specific prior
18 1.1 deraadt * written permission.
19 1.1 deraadt * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
20 1.1 deraadt * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
21 1.1 deraadt * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
22 1.1 deraadt */
23 1.1 deraadt #ifndef lint
24 1.1 deraadt char copyright[] =
25 1.1 deraadt "@(#) Copyright (c) 1990 The Regents of the University of California.\n\
26 1.1 deraadt All rights reserved.\n";
27 1.1 deraadt #endif /* not lint */
28 1.1 deraadt
29 1.1 deraadt #ifndef lint
30 1.9 thorpej static char rcsid[] = "$NetBSD: rarpd.c,v 1.9 1995/11/17 09:54:49 thorpej Exp $";
31 1.1 deraadt #endif
32 1.1 deraadt
33 1.1 deraadt
34 1.1 deraadt /*
35 1.1 deraadt * rarpd - Reverse ARP Daemon
36 1.1 deraadt *
37 1.1 deraadt * Usage: rarpd -a [ -d -f ]
38 1.1 deraadt * rarpd [ -d -f ] interface
39 1.1 deraadt */
40 1.1 deraadt
41 1.1 deraadt #include <stdio.h>
42 1.1 deraadt #include <stdlib.h>
43 1.1 deraadt #include <syslog.h>
44 1.1 deraadt #include <string.h>
45 1.1 deraadt #include <strings.h>
46 1.1 deraadt #include <sys/types.h>
47 1.1 deraadt #include <unistd.h>
48 1.1 deraadt #include <sys/time.h>
49 1.1 deraadt #include <net/bpf.h>
50 1.1 deraadt #include <sys/socket.h>
51 1.1 deraadt #include <sys/ioctl.h>
52 1.1 deraadt #include <net/if.h>
53 1.7 mycroft #include <net/if_dl.h>
54 1.7 mycroft #include <net/if_types.h>
55 1.1 deraadt #include <netinet/in.h>
56 1.1 deraadt #include <netinet/if_ether.h>
57 1.1 deraadt #include <sys/errno.h>
58 1.1 deraadt #include <sys/file.h>
59 1.1 deraadt #include <netdb.h>
60 1.1 deraadt #include <arpa/inet.h>
61 1.1 deraadt #include <dirent.h>
62 1.1 deraadt
63 1.1 deraadt #define FATAL 1 /* fatal error occurred */
64 1.1 deraadt #define NONFATAL 0 /* non fatal error occurred */
65 1.1 deraadt
66 1.1 deraadt /*
67 1.1 deraadt * The structure for each interface.
68 1.1 deraadt */
69 1.1 deraadt struct if_info {
70 1.1 deraadt int ii_fd; /* BPF file descriptor */
71 1.1 deraadt u_char ii_eaddr[6]; /* Ethernet address of this interface */
72 1.1 deraadt u_long ii_ipaddr; /* IP address of this interface */
73 1.1 deraadt u_long ii_netmask; /* subnet or net mask */
74 1.1 deraadt struct if_info *ii_next;
75 1.1 deraadt };
76 1.1 deraadt /*
77 1.1 deraadt * The list of all interfaces that are being listened to. rarp_loop()
78 1.1 deraadt * "selects" on the descriptors in this list.
79 1.1 deraadt */
80 1.1 deraadt struct if_info *iflist;
81 1.1 deraadt
82 1.1 deraadt int rarp_open __P((char *));
83 1.1 deraadt void init_one __P((char *));
84 1.1 deraadt void init_all __P((void));
85 1.1 deraadt void rarp_loop __P((void));
86 1.1 deraadt void lookup_eaddr __P((char *, u_char *));
87 1.1 deraadt void lookup_ipaddr __P((char *, u_long *, u_long *));
88 1.1 deraadt void usage __P((void));
89 1.1 deraadt void rarp_process __P((struct if_info *, u_char *));
90 1.1 deraadt void rarp_reply __P((struct if_info *, struct ether_header *, u_long));
91 1.1 deraadt void update_arptab __P((u_char *, u_long));
92 1.1 deraadt void err __P((int, const char *,...));
93 1.1 deraadt void debug __P((const char *,...));
94 1.1 deraadt u_long ipaddrtonetmask __P((u_long));
95 1.1 deraadt
96 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
97 1.8 thorpej int rarp_bootable __P((u_long));
98 1.8 thorpej #endif
99 1.8 thorpej
100 1.1 deraadt int aflag = 0; /* listen on "all" interfaces */
101 1.1 deraadt int dflag = 0; /* print debugging messages */
102 1.1 deraadt int fflag = 0; /* don't fork */
103 1.1 deraadt
104 1.1 deraadt void
105 1.1 deraadt main(argc, argv)
106 1.1 deraadt int argc;
107 1.1 deraadt char **argv;
108 1.1 deraadt {
109 1.1 deraadt int op, pid, devnull, f;
110 1.1 deraadt char *ifname, *hostname, *name;
111 1.1 deraadt
112 1.1 deraadt extern char *optarg;
113 1.1 deraadt extern int optind, opterr;
114 1.1 deraadt
115 1.1 deraadt if (name = strrchr(argv[0], '/'))
116 1.1 deraadt ++name;
117 1.1 deraadt else
118 1.1 deraadt name = argv[0];
119 1.1 deraadt if (*name == '-')
120 1.1 deraadt ++name;
121 1.1 deraadt
122 1.1 deraadt /* All error reporting is done through syslogs. */
123 1.1 deraadt openlog(name, LOG_PID | LOG_CONS, LOG_DAEMON);
124 1.1 deraadt
125 1.1 deraadt opterr = 0;
126 1.1 deraadt while ((op = getopt(argc, argv, "adf")) != EOF) {
127 1.1 deraadt switch (op) {
128 1.1 deraadt case 'a':
129 1.1 deraadt ++aflag;
130 1.1 deraadt break;
131 1.1 deraadt
132 1.1 deraadt case 'd':
133 1.1 deraadt ++dflag;
134 1.1 deraadt break;
135 1.1 deraadt
136 1.1 deraadt case 'f':
137 1.1 deraadt ++fflag;
138 1.1 deraadt break;
139 1.1 deraadt
140 1.1 deraadt default:
141 1.1 deraadt usage();
142 1.1 deraadt /* NOTREACHED */
143 1.1 deraadt }
144 1.1 deraadt }
145 1.1 deraadt ifname = argv[optind++];
146 1.1 deraadt hostname = ifname ? argv[optind] : 0;
147 1.1 deraadt if ((aflag && ifname) || (!aflag && ifname == 0))
148 1.1 deraadt usage();
149 1.1 deraadt
150 1.1 deraadt if (aflag)
151 1.1 deraadt init_all();
152 1.1 deraadt else
153 1.1 deraadt init_one(ifname);
154 1.1 deraadt
155 1.1 deraadt if ((!fflag) && (!dflag)) {
156 1.1 deraadt pid = fork();
157 1.1 deraadt if (pid > 0)
158 1.1 deraadt /* Parent exits, leaving child in background. */
159 1.1 deraadt exit(0);
160 1.1 deraadt else
161 1.1 deraadt if (pid == -1) {
162 1.1 deraadt err(FATAL, "cannot fork");
163 1.1 deraadt /* NOTREACHED */
164 1.1 deraadt }
165 1.1 deraadt /* Fade into the background */
166 1.1 deraadt f = open("/dev/tty", O_RDWR);
167 1.1 deraadt if (f >= 0) {
168 1.1 deraadt if (ioctl(f, TIOCNOTTY, 0) < 0) {
169 1.1 deraadt err(FATAL, "TIOCNOTTY: %s", strerror(errno));
170 1.1 deraadt /* NOTREACHED */
171 1.1 deraadt }
172 1.1 deraadt (void) close(f);
173 1.1 deraadt }
174 1.1 deraadt (void) chdir("/");
175 1.1 deraadt (void) setpgrp(0, getpid());
176 1.1 deraadt devnull = open("/dev/null", O_RDWR);
177 1.1 deraadt if (devnull >= 0) {
178 1.1 deraadt (void) dup2(devnull, 0);
179 1.1 deraadt (void) dup2(devnull, 1);
180 1.1 deraadt (void) dup2(devnull, 2);
181 1.1 deraadt if (devnull > 2)
182 1.1 deraadt (void) close(devnull);
183 1.1 deraadt }
184 1.1 deraadt }
185 1.1 deraadt rarp_loop();
186 1.1 deraadt }
187 1.1 deraadt /*
188 1.1 deraadt * Add 'ifname' to the interface list. Lookup its IP address and network
189 1.1 deraadt * mask and Ethernet address, and open a BPF file for it.
190 1.1 deraadt */
191 1.1 deraadt void
192 1.1 deraadt init_one(ifname)
193 1.1 deraadt char *ifname;
194 1.1 deraadt {
195 1.1 deraadt struct if_info *p;
196 1.1 deraadt
197 1.7 mycroft p = (struct if_info *)malloc(sizeof(*p));
198 1.1 deraadt if (p == 0) {
199 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
200 1.1 deraadt /* NOTREACHED */
201 1.1 deraadt }
202 1.1 deraadt p->ii_next = iflist;
203 1.1 deraadt iflist = p;
204 1.1 deraadt
205 1.1 deraadt p->ii_fd = rarp_open(ifname);
206 1.1 deraadt lookup_eaddr(ifname, p->ii_eaddr);
207 1.1 deraadt lookup_ipaddr(ifname, &p->ii_ipaddr, &p->ii_netmask);
208 1.1 deraadt }
209 1.1 deraadt /*
210 1.1 deraadt * Initialize all "candidate" interfaces that are in the system
211 1.1 deraadt * configuration list. A "candidate" is up, not loopback and not
212 1.1 deraadt * point to point.
213 1.1 deraadt */
214 1.1 deraadt void
215 1.1 deraadt init_all()
216 1.1 deraadt {
217 1.7 mycroft char inbuf[8192];
218 1.1 deraadt struct ifconf ifc;
219 1.7 mycroft struct ifreq *ifr;
220 1.7 mycroft int fd;
221 1.7 mycroft int i, len;
222 1.1 deraadt
223 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
224 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
225 1.1 deraadt /* NOTREACHED */
226 1.1 deraadt }
227 1.7 mycroft
228 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
229 1.7 mycroft ifc.ifc_buf = inbuf;
230 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
231 1.1 deraadt ifc.ifc_len < sizeof(struct ifreq)) {
232 1.7 mycroft err(FATAL, "init_all: SIOCGIFCONF: %s", strerror(errno));
233 1.1 deraadt /* NOTREACHED */
234 1.1 deraadt }
235 1.7 mycroft ifr = ifc.ifc_req;
236 1.7 mycroft for (i = 0; i < ifc.ifc_len;
237 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
238 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
239 1.7 mycroft if (ioctl(fd, SIOCGIFFLAGS, (caddr_t)ifr) < 0) {
240 1.7 mycroft err(FATAL, "init_all: SIOCGIFFLAGS: %s",
241 1.7 mycroft strerror(errno));
242 1.1 deraadt /* NOTREACHED */
243 1.1 deraadt }
244 1.7 mycroft if ((ifr->ifr_flags &
245 1.7 mycroft (IFF_UP | IFF_LOOPBACK | IFF_POINTOPOINT)) != IFF_UP)
246 1.1 deraadt continue;
247 1.7 mycroft init_one(ifr->ifr_name);
248 1.1 deraadt }
249 1.1 deraadt (void) close(fd);
250 1.1 deraadt }
251 1.1 deraadt
252 1.1 deraadt void
253 1.1 deraadt usage()
254 1.1 deraadt {
255 1.1 deraadt (void) fprintf(stderr, "usage: rarpd -a [ -d -f ]\n");
256 1.1 deraadt (void) fprintf(stderr, " rarpd [ -d -f ] interface\n");
257 1.1 deraadt exit(1);
258 1.1 deraadt }
259 1.1 deraadt
260 1.1 deraadt static int
261 1.1 deraadt bpf_open()
262 1.1 deraadt {
263 1.1 deraadt int fd;
264 1.1 deraadt int n = 0;
265 1.1 deraadt char device[sizeof "/dev/bpf000"];
266 1.1 deraadt
267 1.1 deraadt /* Go through all the minors and find one that isn't in use. */
268 1.1 deraadt do {
269 1.1 deraadt (void) sprintf(device, "/dev/bpf%d", n++);
270 1.1 deraadt fd = open(device, O_RDWR);
271 1.1 deraadt } while (fd < 0 && errno == EBUSY);
272 1.1 deraadt
273 1.1 deraadt if (fd < 0) {
274 1.1 deraadt err(FATAL, "%s: %s", device, strerror(errno));
275 1.1 deraadt /* NOTREACHED */
276 1.1 deraadt }
277 1.1 deraadt return fd;
278 1.1 deraadt }
279 1.1 deraadt /*
280 1.1 deraadt * Open a BPF file and attach it to the interface named 'device'.
281 1.1 deraadt * Set immediate mode, and set a filter that accepts only RARP requests.
282 1.1 deraadt */
283 1.1 deraadt int
284 1.1 deraadt rarp_open(device)
285 1.1 deraadt char *device;
286 1.1 deraadt {
287 1.1 deraadt int fd;
288 1.1 deraadt struct ifreq ifr;
289 1.1 deraadt u_int dlt;
290 1.1 deraadt int immediate;
291 1.1 deraadt
292 1.1 deraadt static struct bpf_insn insns[] = {
293 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
294 1.1 deraadt BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ETHERTYPE_REVARP, 0, 3),
295 1.1 deraadt BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
296 1.6 cgd BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, ARPOP_REVREQUEST, 0, 1),
297 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, sizeof(struct ether_arp) +
298 1.1 deraadt sizeof(struct ether_header)),
299 1.1 deraadt BPF_STMT(BPF_RET | BPF_K, 0),
300 1.1 deraadt };
301 1.1 deraadt static struct bpf_program filter = {
302 1.1 deraadt sizeof insns / sizeof(insns[0]),
303 1.1 deraadt insns
304 1.1 deraadt };
305 1.1 deraadt
306 1.1 deraadt fd = bpf_open();
307 1.1 deraadt
308 1.1 deraadt /* Set immediate mode so packets are processed as they arrive. */
309 1.1 deraadt immediate = 1;
310 1.1 deraadt if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
311 1.1 deraadt err(FATAL, "BIOCIMMEDIATE: %s", strerror(errno));
312 1.1 deraadt /* NOTREACHED */
313 1.1 deraadt }
314 1.1 deraadt (void) strncpy(ifr.ifr_name, device, sizeof ifr.ifr_name);
315 1.1 deraadt if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
316 1.1 deraadt err(FATAL, "BIOCSETIF: %s", strerror(errno));
317 1.1 deraadt /* NOTREACHED */
318 1.1 deraadt }
319 1.1 deraadt /* Check that the data link layer is an Ethernet; this code won't work
320 1.1 deraadt * with anything else. */
321 1.1 deraadt if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
322 1.1 deraadt err(FATAL, "BIOCGDLT: %s", strerror(errno));
323 1.1 deraadt /* NOTREACHED */
324 1.1 deraadt }
325 1.1 deraadt if (dlt != DLT_EN10MB) {
326 1.1 deraadt err(FATAL, "%s is not an ethernet", device);
327 1.1 deraadt /* NOTREACHED */
328 1.1 deraadt }
329 1.1 deraadt /* Set filter program. */
330 1.1 deraadt if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
331 1.1 deraadt err(FATAL, "BIOCSETF: %s", strerror(errno));
332 1.1 deraadt /* NOTREACHED */
333 1.1 deraadt }
334 1.1 deraadt return fd;
335 1.1 deraadt }
336 1.1 deraadt /*
337 1.1 deraadt * Perform various sanity checks on the RARP request packet. Return
338 1.1 deraadt * false on failure and log the reason.
339 1.1 deraadt */
340 1.1 deraadt static int
341 1.1 deraadt rarp_check(p, len)
342 1.1 deraadt u_char *p;
343 1.1 deraadt int len;
344 1.1 deraadt {
345 1.1 deraadt struct ether_header *ep = (struct ether_header *) p;
346 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (p + sizeof(*ep));
347 1.1 deraadt
348 1.1 deraadt (void) debug("got a packet");
349 1.1 deraadt
350 1.1 deraadt if (len < sizeof(*ep) + sizeof(*ap)) {
351 1.1 deraadt err(NONFATAL, "truncated request");
352 1.1 deraadt return 0;
353 1.1 deraadt }
354 1.1 deraadt /* XXX This test might be better off broken out... */
355 1.1 deraadt if (ntohs (ep->ether_type) != ETHERTYPE_REVARP ||
356 1.1 deraadt ntohs (ap->arp_hrd) != ARPHRD_ETHER ||
357 1.6 cgd ntohs (ap->arp_op) != ARPOP_REVREQUEST ||
358 1.1 deraadt ntohs (ap->arp_pro) != ETHERTYPE_IP ||
359 1.1 deraadt ap->arp_hln != 6 || ap->arp_pln != 4) {
360 1.1 deraadt err(NONFATAL, "request fails sanity check");
361 1.1 deraadt return 0;
362 1.1 deraadt }
363 1.1 deraadt if (bcmp((char *) &ep->ether_shost, (char *) &ap->arp_sha, 6) != 0) {
364 1.1 deraadt err(NONFATAL, "ether/arp sender address mismatch");
365 1.1 deraadt return 0;
366 1.1 deraadt }
367 1.1 deraadt if (bcmp((char *) &ap->arp_sha, (char *) &ap->arp_tha, 6) != 0) {
368 1.1 deraadt err(NONFATAL, "ether/arp target address mismatch");
369 1.1 deraadt return 0;
370 1.1 deraadt }
371 1.1 deraadt return 1;
372 1.1 deraadt }
373 1.1 deraadt
374 1.1 deraadt /*
375 1.1 deraadt * Loop indefinitely listening for RARP requests on the
376 1.1 deraadt * interfaces in 'iflist'.
377 1.1 deraadt */
378 1.1 deraadt void
379 1.1 deraadt rarp_loop()
380 1.1 deraadt {
381 1.1 deraadt u_char *buf, *bp, *ep;
382 1.1 deraadt int cc, fd;
383 1.1 deraadt fd_set fds, listeners;
384 1.1 deraadt int bufsize, maxfd = 0;
385 1.1 deraadt struct if_info *ii;
386 1.1 deraadt
387 1.1 deraadt if (iflist == 0) {
388 1.1 deraadt err(FATAL, "no interfaces");
389 1.1 deraadt /* NOTREACHED */
390 1.1 deraadt }
391 1.1 deraadt if (ioctl(iflist->ii_fd, BIOCGBLEN, (caddr_t) & bufsize) < 0) {
392 1.1 deraadt err(FATAL, "BIOCGBLEN: %s", strerror(errno));
393 1.1 deraadt /* NOTREACHED */
394 1.1 deraadt }
395 1.1 deraadt buf = (u_char *) malloc((unsigned) bufsize);
396 1.1 deraadt if (buf == 0) {
397 1.1 deraadt err(FATAL, "malloc: %s", strerror(errno));
398 1.1 deraadt /* NOTREACHED */
399 1.1 deraadt }
400 1.1 deraadt /*
401 1.1 deraadt * Find the highest numbered file descriptor for select().
402 1.1 deraadt * Initialize the set of descriptors to listen to.
403 1.1 deraadt */
404 1.1 deraadt FD_ZERO(&fds);
405 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
406 1.1 deraadt FD_SET(ii->ii_fd, &fds);
407 1.1 deraadt if (ii->ii_fd > maxfd)
408 1.1 deraadt maxfd = ii->ii_fd;
409 1.1 deraadt }
410 1.1 deraadt while (1) {
411 1.1 deraadt listeners = fds;
412 1.1 deraadt if (select(maxfd + 1, &listeners, (struct fd_set *) 0,
413 1.1 deraadt (struct fd_set *) 0, (struct timeval *) 0) < 0) {
414 1.1 deraadt err(FATAL, "select: %s", strerror(errno));
415 1.1 deraadt /* NOTREACHED */
416 1.1 deraadt }
417 1.1 deraadt for (ii = iflist; ii; ii = ii->ii_next) {
418 1.1 deraadt fd = ii->ii_fd;
419 1.1 deraadt if (!FD_ISSET(fd, &listeners))
420 1.1 deraadt continue;
421 1.1 deraadt again:
422 1.1 deraadt cc = read(fd, (char *) buf, bufsize);
423 1.1 deraadt /* Don't choke when we get ptraced */
424 1.1 deraadt if (cc < 0 && errno == EINTR)
425 1.1 deraadt goto again;
426 1.1 deraadt /* Due to a SunOS bug, after 2^31 bytes, the file
427 1.1 deraadt * offset overflows and read fails with EINVAL. The
428 1.1 deraadt * lseek() to 0 will fix things. */
429 1.1 deraadt if (cc < 0) {
430 1.1 deraadt if (errno == EINVAL &&
431 1.5 cgd (lseek(fd, 0, SEEK_CUR) + bufsize) < 0) {
432 1.1 deraadt (void) lseek(fd, 0, 0);
433 1.1 deraadt goto again;
434 1.1 deraadt }
435 1.1 deraadt err(FATAL, "read: %s", strerror(errno));
436 1.1 deraadt /* NOTREACHED */
437 1.1 deraadt }
438 1.1 deraadt /* Loop through the packet(s) */
439 1.1 deraadt #define bhp ((struct bpf_hdr *)bp)
440 1.1 deraadt bp = buf;
441 1.1 deraadt ep = bp + cc;
442 1.1 deraadt while (bp < ep) {
443 1.1 deraadt register int caplen, hdrlen;
444 1.1 deraadt
445 1.1 deraadt caplen = bhp->bh_caplen;
446 1.1 deraadt hdrlen = bhp->bh_hdrlen;
447 1.1 deraadt if (rarp_check(bp + hdrlen, caplen))
448 1.1 deraadt rarp_process(ii, bp + hdrlen);
449 1.1 deraadt bp += BPF_WORDALIGN(hdrlen + caplen);
450 1.1 deraadt }
451 1.1 deraadt }
452 1.1 deraadt }
453 1.1 deraadt }
454 1.8 thorpej
455 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
456 1.8 thorpej
457 1.1 deraadt #ifndef TFTP_DIR
458 1.1 deraadt #define TFTP_DIR "/tftpboot"
459 1.1 deraadt #endif
460 1.1 deraadt
461 1.1 deraadt /*
462 1.1 deraadt * True if this server can boot the host whose IP address is 'addr'.
463 1.1 deraadt * This check is made by looking in the tftp directory for the
464 1.1 deraadt * configuration file.
465 1.1 deraadt */
466 1.1 deraadt int
467 1.1 deraadt rarp_bootable(addr)
468 1.1 deraadt u_long addr;
469 1.1 deraadt {
470 1.1 deraadt register struct dirent *dent;
471 1.1 deraadt register DIR *d;
472 1.1 deraadt char ipname[9];
473 1.1 deraadt static DIR *dd = 0;
474 1.1 deraadt
475 1.1 deraadt (void) sprintf(ipname, "%08X", addr);
476 1.1 deraadt /* If directory is already open, rewind it. Otherwise, open it. */
477 1.1 deraadt if (d = dd)
478 1.1 deraadt rewinddir(d);
479 1.1 deraadt else {
480 1.1 deraadt if (chdir(TFTP_DIR) == -1) {
481 1.1 deraadt err(FATAL, "chdir: %s", strerror(errno));
482 1.1 deraadt /* NOTREACHED */
483 1.1 deraadt }
484 1.1 deraadt d = opendir(".");
485 1.1 deraadt if (d == 0) {
486 1.1 deraadt err(FATAL, "opendir: %s", strerror(errno));
487 1.1 deraadt /* NOTREACHED */
488 1.1 deraadt }
489 1.1 deraadt dd = d;
490 1.1 deraadt }
491 1.1 deraadt while (dent = readdir(d))
492 1.1 deraadt if (strncmp(dent->d_name, ipname, 8) == 0)
493 1.1 deraadt return 1;
494 1.1 deraadt return 0;
495 1.1 deraadt }
496 1.8 thorpej #endif /* REQUIRE_TFTPBOOT */
497 1.8 thorpej
498 1.1 deraadt /*
499 1.1 deraadt * Given a list of IP addresses, 'alist', return the first address that
500 1.1 deraadt * is on network 'net'; 'netmask' is a mask indicating the network portion
501 1.1 deraadt * of the address.
502 1.1 deraadt */
503 1.1 deraadt u_long
504 1.1 deraadt choose_ipaddr(alist, net, netmask)
505 1.1 deraadt u_long **alist;
506 1.1 deraadt u_long net;
507 1.1 deraadt u_long netmask;
508 1.1 deraadt {
509 1.1 deraadt for (; *alist; ++alist) {
510 1.1 deraadt if ((**alist & netmask) == net)
511 1.1 deraadt return **alist;
512 1.1 deraadt }
513 1.1 deraadt return 0;
514 1.1 deraadt }
515 1.1 deraadt /*
516 1.1 deraadt * Answer the RARP request in 'pkt', on the interface 'ii'. 'pkt' has
517 1.1 deraadt * already been checked for validity. The reply is overlaid on the request.
518 1.1 deraadt */
519 1.1 deraadt void
520 1.1 deraadt rarp_process(ii, pkt)
521 1.1 deraadt struct if_info *ii;
522 1.1 deraadt u_char *pkt;
523 1.1 deraadt {
524 1.1 deraadt struct ether_header *ep;
525 1.1 deraadt struct hostent *hp;
526 1.1 deraadt u_long target_ipaddr;
527 1.1 deraadt char ename[256];
528 1.2 deraadt struct in_addr in;
529 1.1 deraadt
530 1.1 deraadt ep = (struct ether_header *) pkt;
531 1.1 deraadt
532 1.1 deraadt if (ether_ntohost(ename, &ep->ether_shost) != 0 ||
533 1.1 deraadt (hp = gethostbyname(ename)) == 0)
534 1.1 deraadt return;
535 1.1 deraadt
536 1.1 deraadt /* Choose correct address from list. */
537 1.1 deraadt if (hp->h_addrtype != AF_INET) {
538 1.1 deraadt err(FATAL, "cannot handle non IP addresses");
539 1.1 deraadt /* NOTREACHED */
540 1.1 deraadt }
541 1.1 deraadt target_ipaddr = choose_ipaddr((u_long **) hp->h_addr_list,
542 1.2 deraadt ii->ii_ipaddr & ii->ii_netmask, ii->ii_netmask);
543 1.1 deraadt
544 1.1 deraadt if (target_ipaddr == 0) {
545 1.2 deraadt in.s_addr = ii->ii_ipaddr & ii->ii_netmask;
546 1.1 deraadt err(NONFATAL, "cannot find %s on net %s\n",
547 1.2 deraadt ename, inet_ntoa(in));
548 1.1 deraadt return;
549 1.1 deraadt }
550 1.8 thorpej #ifdef REQUIRE_TFTPBOOT
551 1.1 deraadt if (rarp_bootable(htonl(target_ipaddr)))
552 1.8 thorpej #endif
553 1.1 deraadt rarp_reply(ii, ep, target_ipaddr);
554 1.1 deraadt }
555 1.1 deraadt /*
556 1.1 deraadt * Lookup the ethernet address of the interface attached to the BPF
557 1.1 deraadt * file descriptor 'fd'; return it in 'eaddr'.
558 1.1 deraadt */
559 1.1 deraadt void
560 1.1 deraadt lookup_eaddr(ifname, eaddr)
561 1.1 deraadt char *ifname;
562 1.1 deraadt u_char *eaddr;
563 1.1 deraadt {
564 1.1 deraadt char inbuf[8192];
565 1.1 deraadt struct ifconf ifc;
566 1.1 deraadt struct ifreq *ifr;
567 1.7 mycroft struct sockaddr_dl *sdl;
568 1.1 deraadt int fd;
569 1.1 deraadt int i, len;
570 1.1 deraadt
571 1.1 deraadt /* We cannot use SIOCGIFADDR on the BPF descriptor.
572 1.1 deraadt We must instead get all the interfaces with SIOCGIFCONF
573 1.1 deraadt and find the right one. */
574 1.1 deraadt
575 1.1 deraadt /* Use datagram socket to get Ethernet address. */
576 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
577 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
578 1.1 deraadt /* NOTREACHED */
579 1.1 deraadt }
580 1.1 deraadt
581 1.7 mycroft ifc.ifc_len = sizeof(inbuf);
582 1.1 deraadt ifc.ifc_buf = inbuf;
583 1.7 mycroft if (ioctl(fd, SIOCGIFCONF, (caddr_t)&ifc) < 0 ||
584 1.7 mycroft ifc.ifc_len < sizeof(struct ifreq)) {
585 1.7 mycroft err(FATAL, "lookup_eaddr: SIOGIFCONF: %s", strerror(errno));
586 1.1 deraadt /* NOTREACHED */
587 1.1 deraadt }
588 1.1 deraadt ifr = ifc.ifc_req;
589 1.7 mycroft for (i = 0; i < ifc.ifc_len;
590 1.7 mycroft i += len, ifr = (struct ifreq *)((caddr_t)ifr + len)) {
591 1.7 mycroft len = sizeof(ifr->ifr_name) + ifr->ifr_addr.sa_len;
592 1.7 mycroft sdl = (struct sockaddr_dl *)&ifr->ifr_addr;
593 1.7 mycroft if (sdl->sdl_family != AF_LINK || sdl->sdl_type != IFT_ETHER ||
594 1.7 mycroft sdl->sdl_alen != 6)
595 1.7 mycroft continue;
596 1.7 mycroft if (!strncmp(ifr->ifr_name, ifname, sizeof(ifr->ifr_name))) {
597 1.7 mycroft bcopy((caddr_t)LLADDR(sdl), (caddr_t)eaddr, 6);
598 1.7 mycroft if (dflag)
599 1.7 mycroft fprintf(stderr, "%s: %x:%x:%x:%x:%x:%x\n",
600 1.7 mycroft ifr->ifr_name, eaddr[0], eaddr[1],
601 1.7 mycroft eaddr[2], eaddr[3], eaddr[4], eaddr[5]);
602 1.1 deraadt return;
603 1.1 deraadt }
604 1.1 deraadt }
605 1.1 deraadt
606 1.1 deraadt err(FATAL, "lookup_eaddr: Never saw interface `%s'!", ifname);
607 1.1 deraadt }
608 1.1 deraadt /*
609 1.1 deraadt * Lookup the IP address and network mask of the interface named 'ifname'.
610 1.1 deraadt */
611 1.1 deraadt void
612 1.1 deraadt lookup_ipaddr(ifname, addrp, netmaskp)
613 1.1 deraadt char *ifname;
614 1.1 deraadt u_long *addrp;
615 1.1 deraadt u_long *netmaskp;
616 1.1 deraadt {
617 1.1 deraadt int fd;
618 1.1 deraadt struct ifreq ifr;
619 1.1 deraadt
620 1.1 deraadt /* Use datagram socket to get IP address. */
621 1.1 deraadt if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
622 1.1 deraadt err(FATAL, "socket: %s", strerror(errno));
623 1.1 deraadt /* NOTREACHED */
624 1.1 deraadt }
625 1.1 deraadt (void) strncpy(ifr.ifr_name, ifname, sizeof ifr.ifr_name);
626 1.1 deraadt if (ioctl(fd, SIOCGIFADDR, (char *) &ifr) < 0) {
627 1.1 deraadt err(FATAL, "SIOCGIFADDR: %s", strerror(errno));
628 1.1 deraadt /* NOTREACHED */
629 1.1 deraadt }
630 1.1 deraadt *addrp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
631 1.1 deraadt if (ioctl(fd, SIOCGIFNETMASK, (char *) &ifr) < 0) {
632 1.1 deraadt perror("SIOCGIFNETMASK");
633 1.1 deraadt exit(1);
634 1.1 deraadt }
635 1.1 deraadt *netmaskp = ((struct sockaddr_in *) & ifr.ifr_addr)->sin_addr.s_addr;
636 1.1 deraadt /* If SIOCGIFNETMASK didn't work, figure out a mask from the IP
637 1.1 deraadt * address class. */
638 1.1 deraadt if (*netmaskp == 0)
639 1.1 deraadt *netmaskp = ipaddrtonetmask(*addrp);
640 1.1 deraadt
641 1.1 deraadt (void) close(fd);
642 1.1 deraadt }
643 1.1 deraadt /*
644 1.1 deraadt * Poke the kernel arp tables with the ethernet/ip address combinataion
645 1.1 deraadt * given. When processing a reply, we must do this so that the booting
646 1.1 deraadt * host (i.e. the guy running rarpd), won't try to ARP for the hardware
647 1.1 deraadt * address of the guy being booted (he cannot answer the ARP).
648 1.1 deraadt */
649 1.1 deraadt void
650 1.1 deraadt update_arptab(ep, ipaddr)
651 1.1 deraadt u_char *ep;
652 1.1 deraadt u_long ipaddr;
653 1.1 deraadt {
654 1.1 deraadt int s;
655 1.1 deraadt struct arpreq request;
656 1.1 deraadt struct sockaddr_in *sin;
657 1.1 deraadt
658 1.1 deraadt request.arp_flags = 0;
659 1.1 deraadt sin = (struct sockaddr_in *) & request.arp_pa;
660 1.1 deraadt sin->sin_family = AF_INET;
661 1.1 deraadt sin->sin_addr.s_addr = ipaddr;
662 1.1 deraadt request.arp_ha.sa_family = AF_UNSPEC;
663 1.1 deraadt /* This is needed #if defined(COMPAT_43) && BYTE_ORDER != BIG_ENDIAN,
664 1.1 deraadt because AF_UNSPEC is zero and the kernel assumes that a zero
665 1.1 deraadt sa_family means that the real sa_family value is in sa_len. */
666 1.1 deraadt request.arp_ha.sa_len = 16; /* XXX */
667 1.1 deraadt bcopy((char *) ep, (char *) request.arp_ha.sa_data, 6);
668 1.1 deraadt
669 1.7 mycroft #if 0
670 1.1 deraadt s = socket(AF_INET, SOCK_DGRAM, 0);
671 1.1 deraadt if (ioctl(s, SIOCSARP, (caddr_t) & request) < 0) {
672 1.1 deraadt err(NONFATAL, "SIOCSARP: %s", strerror(errno));
673 1.1 deraadt }
674 1.1 deraadt (void) close(s);
675 1.7 mycroft #endif
676 1.1 deraadt }
677 1.1 deraadt /*
678 1.1 deraadt * Build a reverse ARP packet and sent it out on the interface.
679 1.6 cgd * 'ep' points to a valid ARPOP_REVREQUEST. The ARPOP_REVREPLY is built
680 1.1 deraadt * on top of the request, then written to the network.
681 1.1 deraadt *
682 1.1 deraadt * RFC 903 defines the ether_arp fields as follows. The following comments
683 1.1 deraadt * are taken (more or less) straight from this document.
684 1.1 deraadt *
685 1.6 cgd * ARPOP_REVREQUEST
686 1.1 deraadt *
687 1.1 deraadt * arp_sha is the hardware address of the sender of the packet.
688 1.1 deraadt * arp_spa is undefined.
689 1.1 deraadt * arp_tha is the 'target' hardware address.
690 1.1 deraadt * In the case where the sender wishes to determine his own
691 1.1 deraadt * protocol address, this, like arp_sha, will be the hardware
692 1.1 deraadt * address of the sender.
693 1.1 deraadt * arp_tpa is undefined.
694 1.1 deraadt *
695 1.6 cgd * ARPOP_REVREPLY
696 1.1 deraadt *
697 1.1 deraadt * arp_sha is the hardware address of the responder (the sender of the
698 1.1 deraadt * reply packet).
699 1.1 deraadt * arp_spa is the protocol address of the responder (see the note below).
700 1.1 deraadt * arp_tha is the hardware address of the target, and should be the same as
701 1.1 deraadt * that which was given in the request.
702 1.1 deraadt * arp_tpa is the protocol address of the target, that is, the desired address.
703 1.1 deraadt *
704 1.1 deraadt * Note that the requirement that arp_spa be filled in with the responder's
705 1.1 deraadt * protocol is purely for convenience. For instance, if a system were to use
706 1.1 deraadt * both ARP and RARP, then the inclusion of the valid protocol-hardware
707 1.1 deraadt * address pair (arp_spa, arp_sha) may eliminate the need for a subsequent
708 1.1 deraadt * ARP request.
709 1.1 deraadt */
710 1.1 deraadt void
711 1.1 deraadt rarp_reply(ii, ep, ipaddr)
712 1.1 deraadt struct if_info *ii;
713 1.1 deraadt struct ether_header *ep;
714 1.1 deraadt u_long ipaddr;
715 1.1 deraadt {
716 1.1 deraadt int n;
717 1.1 deraadt struct ether_arp *ap = (struct ether_arp *) (ep + 1);
718 1.1 deraadt int len;
719 1.1 deraadt
720 1.1 deraadt update_arptab((u_char *) & ap->arp_sha, ipaddr);
721 1.1 deraadt
722 1.1 deraadt /* Build the rarp reply by modifying the rarp request in place. */
723 1.3 deraadt ep->ether_type = htons(ETHERTYPE_REVARP);
724 1.4 cgd ap->ea_hdr.ar_hrd = htons(ARPHRD_ETHER);
725 1.4 cgd ap->ea_hdr.ar_pro = htons(ETHERTYPE_IP);
726 1.6 cgd ap->arp_op = htons(ARPOP_REVREPLY);
727 1.1 deraadt
728 1.1 deraadt bcopy((char *) &ap->arp_sha, (char *) &ep->ether_dhost, 6);
729 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ep->ether_shost, 6);
730 1.1 deraadt bcopy((char *) ii->ii_eaddr, (char *) &ap->arp_sha, 6);
731 1.1 deraadt
732 1.1 deraadt bcopy((char *) &ipaddr, (char *) ap->arp_tpa, 4);
733 1.1 deraadt /* Target hardware is unchanged. */
734 1.1 deraadt bcopy((char *) &ii->ii_ipaddr, (char *) ap->arp_spa, 4);
735 1.1 deraadt
736 1.1 deraadt len = sizeof(*ep) + sizeof(*ap);
737 1.1 deraadt n = write(ii->ii_fd, (char *) ep, len);
738 1.1 deraadt if (n != len) {
739 1.1 deraadt err(NONFATAL, "write: only %d of %d bytes written", n, len);
740 1.1 deraadt }
741 1.1 deraadt }
742 1.1 deraadt /*
743 1.1 deraadt * Get the netmask of an IP address. This routine is used if
744 1.1 deraadt * SIOCGIFNETMASK doesn't work.
745 1.1 deraadt */
746 1.1 deraadt u_long
747 1.1 deraadt ipaddrtonetmask(addr)
748 1.1 deraadt u_long addr;
749 1.1 deraadt {
750 1.1 deraadt if (IN_CLASSA(addr))
751 1.1 deraadt return IN_CLASSA_NET;
752 1.1 deraadt if (IN_CLASSB(addr))
753 1.1 deraadt return IN_CLASSB_NET;
754 1.1 deraadt if (IN_CLASSC(addr))
755 1.1 deraadt return IN_CLASSC_NET;
756 1.1 deraadt err(FATAL, "unknown IP address class: %08X", addr);
757 1.1 deraadt /* NOTREACHED */
758 1.1 deraadt }
759 1.1 deraadt
760 1.1 deraadt #if __STDC__
761 1.1 deraadt #include <stdarg.h>
762 1.1 deraadt #else
763 1.1 deraadt #include <varargs.h>
764 1.1 deraadt #endif
765 1.1 deraadt
766 1.1 deraadt void
767 1.1 deraadt #if __STDC__
768 1.1 deraadt err(int fatal, const char *fmt,...)
769 1.1 deraadt #else
770 1.1 deraadt err(fmt, va_alist)
771 1.1 deraadt int fatal;
772 1.1 deraadt char *fmt;
773 1.1 deraadt va_dcl
774 1.1 deraadt #endif
775 1.1 deraadt {
776 1.1 deraadt va_list ap;
777 1.1 deraadt #if __STDC__
778 1.1 deraadt va_start(ap, fmt);
779 1.1 deraadt #else
780 1.1 deraadt va_start(ap);
781 1.1 deraadt #endif
782 1.1 deraadt if (dflag) {
783 1.1 deraadt if (fatal)
784 1.1 deraadt (void) fprintf(stderr, "rarpd: error: ");
785 1.1 deraadt else
786 1.1 deraadt (void) fprintf(stderr, "rarpd: warning: ");
787 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
788 1.1 deraadt (void) fprintf(stderr, "\n");
789 1.1 deraadt }
790 1.1 deraadt vsyslog(LOG_ERR, fmt, ap);
791 1.1 deraadt va_end(ap);
792 1.1 deraadt if (fatal)
793 1.1 deraadt exit(1);
794 1.1 deraadt /* NOTREACHED */
795 1.1 deraadt }
796 1.1 deraadt
797 1.1 deraadt void
798 1.1 deraadt #if __STDC__
799 1.1 deraadt debug(const char *fmt,...)
800 1.1 deraadt #else
801 1.1 deraadt debug(fmt, va_alist)
802 1.1 deraadt char *fmt;
803 1.1 deraadt va_dcl
804 1.1 deraadt #endif
805 1.1 deraadt {
806 1.1 deraadt va_list ap;
807 1.1 deraadt
808 1.1 deraadt if (dflag) {
809 1.1 deraadt #if __STDC__
810 1.1 deraadt va_start(ap, fmt);
811 1.1 deraadt #else
812 1.1 deraadt va_start(ap);
813 1.1 deraadt #endif
814 1.1 deraadt (void) fprintf(stderr, "rarpd: ");
815 1.1 deraadt (void) vfprintf(stderr, fmt, ap);
816 1.1 deraadt va_end(ap);
817 1.1 deraadt (void) fprintf(stderr, "\n");
818 1.1 deraadt }
819 1.1 deraadt }
820