f5fd8c4b7a217767be7499565c60e4194c08a561
2 * firewall3 - 3rd OpenWrt UCI firewall implementation
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21 static struct blob_attr
*interfaces
= NULL
;
24 static void dump_cb(struct ubus_request
*req
, int type
, struct blob_attr
*msg
)
26 static const struct blobmsg_policy policy
= { "interface", BLOBMSG_TYPE_ARRAY
};
27 struct blob_attr
*cur
;
29 blobmsg_parse(&policy
, 1, &cur
, blob_data(msg
), blob_len(msg
));
31 interfaces
= blob_memdup(cur
);
35 fw3_ubus_connect(void)
39 struct ubus_context
*ctx
= ubus_connect(NULL
);
44 if (ubus_lookup_id(ctx
, "network.interface", &id
))
47 if (ubus_invoke(ctx
, id
, "dump", NULL
, dump_cb
, NULL
, 500))
59 fw3_ubus_disconnect(void)
65 static struct fw3_address
*
66 parse_subnet(enum fw3_family family
, struct blob_attr
*dict
, int rem
)
68 struct blob_attr
*cur
;
69 struct fw3_address
*addr
;
71 addr
= malloc(sizeof(*addr
));
76 memset(addr
, 0, sizeof(*addr
));
79 addr
->family
= family
;
81 __blob_for_each_attr(cur
, dict
, rem
)
83 if (!strcmp(blobmsg_name(cur
), "address"))
84 inet_pton(family
== FW3_FAMILY_V4
? AF_INET
: AF_INET6
,
85 blobmsg_data(cur
), &addr
->address
.v6
);
87 else if (!strcmp(blobmsg_name(cur
), "mask"))
88 addr
->mask
= be32_to_cpu(*(uint32_t *)blobmsg_data(cur
));
95 parse_subnets(struct list_head
*head
, enum fw3_family family
,
96 struct blob_attr
*list
, int rem
)
98 struct blob_attr
*cur
;
99 struct fw3_address
*addr
;
101 __blob_for_each_attr(cur
, list
, rem
)
103 addr
= parse_subnet(family
, blobmsg_data(cur
), blobmsg_data_len(cur
));
106 list_add_tail(&addr
->list
, head
);
111 invoke_common(const char *net
, bool device
)
113 struct fw3_device
*dev
= NULL
;
114 struct list_head
*addr
= NULL
;
115 struct blob_attr
*c
, *cur
;
120 if (!net
|| !interfaces
)
124 dev
= malloc(sizeof(*dev
));
126 addr
= malloc(sizeof(*addr
));
128 if ((device
&& !dev
) || (!device
&& !addr
))
132 memset(dev
, 0, sizeof(*dev
));
134 INIT_LIST_HEAD(addr
);
136 blobmsg_for_each_attr(c
, interfaces
, r
) {
138 blobmsg_for_each_attr(cur
, c
, rem
)
139 if (!strcmp(blobmsg_name(cur
), "interface"))
140 matched
= !strcmp(blobmsg_get_string(cur
), net
);
145 blobmsg_for_each_attr(cur
, c
, rem
) {
146 data
= blobmsg_data(cur
);
148 if (dev
&& !strcmp(blobmsg_name(cur
), "device") && !dev
->name
[0])
149 snprintf(dev
->name
, sizeof(dev
->name
), "%s", data
);
150 else if (dev
&& !strcmp(blobmsg_name(cur
), "l3_device"))
151 snprintf(dev
->name
, sizeof(dev
->name
), "%s", data
);
152 else if (!dev
&& !strcmp(blobmsg_name(cur
), "ipv4-address"))
153 parse_subnets(addr
, FW3_FAMILY_V4
,
154 blobmsg_data(cur
), blobmsg_data_len(cur
));
155 else if (!dev
&& (!strcmp(blobmsg_name(cur
), "ipv6-address") ||
156 !strcmp(blobmsg_name(cur
), "ipv6-prefix-assignment")))
157 parse_subnets(addr
, FW3_FAMILY_V6
,
158 blobmsg_data(cur
), blobmsg_data_len(cur
));
162 dev
->set
= !!dev
->name
[0];
167 if (device
&& dev
->set
)
169 else if (!device
&& !list_empty(addr
))
180 fw3_ubus_device(const char *net
)
182 return invoke_common(net
, true);
186 fw3_ubus_address(const char *net
)
188 return invoke_common(net
, false);
192 fw3_ubus_zone_devices(struct fw3_zone
*zone
)
194 struct blob_attr
*c
, *cur
, *dcur
;
195 unsigned r
, rem
, drem
;
199 blobmsg_for_each_attr(c
, interfaces
, r
) {
203 blobmsg_for_each_attr(cur
, c
, rem
) {
204 if (!strcmp(blobmsg_name(cur
), "interface"))
205 name
= blobmsg_get_string(cur
);
206 else if (!strcmp(blobmsg_name(cur
), "data"))
207 blobmsg_for_each_attr(dcur
, cur
, drem
)
208 if (!strcmp(blobmsg_name(dcur
), "zone"))
209 matches
= !strcmp(blobmsg_get_string(dcur
), zone
->name
);
213 fw3_parse_device(&zone
->networks
, name
, true);
218 fw3_ubus_rules(struct blob_buf
*b
)
222 struct blob_attr
*c
, *cur
, *dcur
, *rule
, *ropt
;
223 unsigned r
, rem
, drem
, rrem
, orem
;
225 blobmsg_for_each_attr(c
, interfaces
, r
) {
226 const char *l3_device
= NULL
;
227 struct blob_attr
*data
= NULL
;
229 blobmsg_for_each_attr(cur
, c
, rem
) {
230 if (!strcmp(blobmsg_name(cur
), "l3_device"))
231 l3_device
= blobmsg_get_string(cur
);
232 else if (!strcmp(blobmsg_name(cur
), "data"))
236 if (!data
|| !l3_device
)
239 blobmsg_for_each_attr(dcur
, data
, drem
) {
240 if (strcmp(blobmsg_name(dcur
), "firewall"))
243 blobmsg_for_each_attr(rule
, dcur
, rrem
) {
244 void *k
= blobmsg_open_table(b
, "");
246 blobmsg_for_each_attr(ropt
, rule
, orem
)
247 if (strcmp(blobmsg_name(ropt
), "device"))
248 blobmsg_add_blob(b
, ropt
);
250 blobmsg_add_string(b
, "device", l3_device
);
251 blobmsg_close_table(b
, k
);