Line data Source code
1 : /*
2 : Unix SMB/CIFS implementation.
3 :
4 : multiple interface handling
5 :
6 : Copyright (C) Andrew Tridgell 1992-2005
7 :
8 : This program is free software; you can redistribute it and/or modify
9 : it under the terms of the GNU General Public License as published by
10 : the Free Software Foundation; either version 3 of the License, or
11 : (at your option) any later version.
12 :
13 : This program is distributed in the hope that it will be useful,
14 : but WITHOUT ANY WARRANTY; without even the implied warranty of
15 : MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 : GNU General Public License for more details.
17 :
18 : You should have received a copy of the GNU General Public License
19 : along with this program. If not, see <http://www.gnu.org/licenses/>.
20 : */
21 :
22 : #include "includes.h"
23 : #include "system/network.h"
24 : #include "param/param.h"
25 : #include "lib/socket/netif.h"
26 : #include "../lib/util/util_net.h"
27 : #include "../lib/util/dlinklist.h"
28 : #include "lib/util/smb_strtox.h"
29 :
30 : /* used for network interfaces */
31 : struct interface {
32 : struct interface *next, *prev;
33 : char *name;
34 : int flags;
35 : struct sockaddr_storage ip;
36 : struct sockaddr_storage netmask;
37 : struct sockaddr_storage bcast;
38 : const char *ip_s;
39 : const char *bcast_s;
40 : const char *nmask_s;
41 : };
42 :
43 : #define ALLONES ((uint32_t)0xFFFFFFFF)
44 : /*
45 : address construction based on a patch from fred@datalync.com
46 : */
47 : #define MKBCADDR(_IP, _NM) ((_IP & _NM) | (_NM ^ ALLONES))
48 : #define MKNETADDR(_IP, _NM) (_IP & _NM)
49 :
50 : /****************************************************************************
51 : Try and find an interface that matches an ip. If we cannot, return NULL
52 : **************************************************************************/
53 749872 : static struct interface *iface_list_find(struct interface *interfaces,
54 : const struct sockaddr *ip,
55 : bool check_mask)
56 : {
57 18981 : struct interface *i;
58 :
59 749872 : if (is_address_any(ip)) {
60 0 : return interfaces;
61 : }
62 :
63 2730498 : for (i=interfaces;i;i=i->next) {
64 1984276 : if (check_mask) {
65 4142 : if (same_net(ip, (struct sockaddr *)&i->ip, (struct sockaddr *)&i->netmask)) {
66 3650 : return i;
67 : }
68 1980134 : } else if (sockaddr_equal((struct sockaddr *)&i->ip, ip)) {
69 0 : return i;
70 : }
71 : }
72 :
73 727301 : return NULL;
74 : }
75 :
76 : /****************************************************************************
77 : add an interface to the linked list of interfaces
78 : ****************************************************************************/
79 746218 : static void add_interface(TALLOC_CTX *mem_ctx, const struct iface_struct *ifs, struct interface **interfaces)
80 : {
81 18917 : char addr[INET6_ADDRSTRLEN];
82 18917 : struct interface *iface;
83 :
84 746218 : if (iface_list_find(*interfaces, (const struct sockaddr *)&ifs->ip, false)) {
85 0 : DEBUG(3,("add_interface: not adding duplicate interface %s\n",
86 : print_sockaddr(addr, sizeof(addr), &ifs->ip) ));
87 0 : return;
88 : }
89 :
90 746218 : if (ifs->ip.ss_family == AF_INET &&
91 602684 : !(ifs->flags & (IFF_BROADCAST|IFF_LOOPBACK))) {
92 0 : DEBUG(3,("not adding non-broadcast interface %s\n",
93 : ifs->name ));
94 0 : return;
95 : }
96 :
97 746218 : if (*interfaces != NULL) {
98 602684 : mem_ctx = *interfaces;
99 : }
100 :
101 746218 : iface = talloc_zero(mem_ctx, struct interface);
102 746218 : if (iface == NULL) {
103 0 : return;
104 : }
105 :
106 746218 : iface->name = talloc_strdup(iface, ifs->name);
107 746218 : if (!iface->name) {
108 0 : SAFE_FREE(iface);
109 0 : return;
110 : }
111 746218 : iface->flags = ifs->flags;
112 746218 : iface->ip = ifs->ip;
113 746218 : iface->netmask = ifs->netmask;
114 746218 : iface->bcast = ifs->bcast;
115 :
116 : /* keep string versions too, to avoid people tripping over the implied
117 : static in inet_ntoa() */
118 746218 : print_sockaddr(addr, sizeof(addr), &iface->ip);
119 746218 : DEBUG(4,("added interface %s ip=%s ",
120 : iface->name, addr));
121 746218 : iface->ip_s = talloc_strdup(iface, addr);
122 :
123 746218 : print_sockaddr(addr, sizeof(addr),
124 746218 : &iface->bcast);
125 746218 : DEBUG(4,("bcast=%s ", addr));
126 746218 : iface->bcast_s = talloc_strdup(iface, addr);
127 :
128 746218 : print_sockaddr(addr, sizeof(addr),
129 746218 : &iface->netmask);
130 746218 : DEBUG(4,("netmask=%s\n", addr));
131 746218 : iface->nmask_s = talloc_strdup(iface, addr);
132 :
133 : /*
134 : this needs to be a ADD_END, as some tests (such as the
135 : spoolss notify test) depend on the interfaces ordering
136 : */
137 746218 : DLIST_ADD_END(*interfaces, iface);
138 : }
139 :
140 : /**
141 : interpret a single element from a interfaces= config line
142 :
143 : This handles the following different forms:
144 :
145 : 1) wildcard interface name
146 : 2) DNS name
147 : 3) IP/masklen
148 : 4) ip/mask
149 : 5) bcast/mask
150 : **/
151 746180 : static void interpret_interface(TALLOC_CTX *mem_ctx,
152 : const char *token,
153 : struct iface_struct *probed_ifaces,
154 : int total_probed,
155 : struct interface **local_interfaces)
156 : {
157 18911 : struct sockaddr_storage ss;
158 18911 : struct sockaddr_storage ss_mask;
159 18911 : struct sockaddr_storage ss_net;
160 18911 : struct sockaddr_storage ss_bcast;
161 18911 : struct iface_struct ifs;
162 18911 : char *p;
163 18911 : int i;
164 746180 : bool added=false;
165 746180 : bool goodaddr = false;
166 :
167 : /* first check if it is an interface name */
168 3730900 : for (i=0;i<total_probed;i++) {
169 2984720 : if (gen_fnmatch(token, probed_ifaces[i].name) == 0) {
170 0 : add_interface(mem_ctx, &probed_ifaces[i],
171 : local_interfaces);
172 0 : added = true;
173 : }
174 : }
175 746180 : if (added) {
176 0 : return;
177 : }
178 :
179 746180 : p = strchr_m(token, ';');
180 746180 : if (p != NULL) {
181 : /*
182 : * skip smbd-specific extra data:
183 : * link speed, capabilities, and interface index
184 : */
185 0 : *p = 0;
186 : }
187 :
188 : /* maybe it is a DNS name */
189 746180 : p = strchr_m(token,'/');
190 746180 : if (p == NULL) {
191 0 : if (!interpret_string_addr(&ss, token, 0)) {
192 0 : DEBUG(2, ("interpret_interface: Can't find address "
193 : "for %s\n", token));
194 0 : return;
195 : }
196 :
197 0 : for (i=0;i<total_probed;i++) {
198 0 : if (sockaddr_equal((struct sockaddr *)&ss, (struct sockaddr *)&probed_ifaces[i].ip)) {
199 0 : add_interface(mem_ctx, &probed_ifaces[i],
200 : local_interfaces);
201 0 : return;
202 : }
203 : }
204 0 : DEBUG(2,("interpret_interface: "
205 : "can't determine interface for %s\n",
206 : token));
207 0 : return;
208 : }
209 :
210 : /* parse it into an IP address/netmasklength pair */
211 746180 : *p = 0;
212 746180 : goodaddr = interpret_string_addr(&ss, token, 0);
213 746180 : *p++ = '/';
214 :
215 746180 : if (!goodaddr) {
216 0 : DEBUG(2,("interpret_interface: "
217 : "can't determine interface for %s\n",
218 : token));
219 0 : return;
220 : }
221 :
222 746180 : if (strlen(p) > 2) {
223 0 : goodaddr = interpret_string_addr(&ss_mask, p, 0);
224 0 : if (!goodaddr) {
225 0 : DEBUG(2,("interpret_interface: "
226 : "can't determine netmask from %s\n",
227 : p));
228 0 : return;
229 : }
230 : } else {
231 746180 : int error = 0;
232 :
233 746180 : unsigned long val = smb_strtoul(p,
234 : NULL,
235 : 0,
236 : &error,
237 : SMB_STR_FULL_STR_CONV);
238 746180 : if (error != 0) {
239 0 : DEBUG(2,("interpret_interface: "
240 : "can't determine netmask value from %s\n",
241 : p));
242 0 : return;
243 : }
244 746180 : if (!make_netmask(&ss_mask, &ss, val)) {
245 0 : DEBUG(2,("interpret_interface: "
246 : "can't apply netmask value %lu from %s\n",
247 : val,
248 : p));
249 0 : return;
250 : }
251 : }
252 :
253 746180 : make_bcast(&ss_bcast, &ss, &ss_mask);
254 746180 : make_net(&ss_net, &ss, &ss_mask);
255 :
256 : /* Maybe the first component was a broadcast address. */
257 1492360 : if (sockaddr_equal((struct sockaddr *)&ss_bcast, (struct sockaddr *)&ss) ||
258 746180 : sockaddr_equal((struct sockaddr *)&ss_net, (struct sockaddr *)&ss)) {
259 0 : for (i=0;i<total_probed;i++) {
260 0 : if (same_net((struct sockaddr *)&ss,
261 0 : (struct sockaddr *)&probed_ifaces[i].ip,
262 : (struct sockaddr *)&ss_mask)) {
263 : /* Temporarily replace netmask on
264 : * the detected interface - user knows
265 : * best.... */
266 0 : struct sockaddr_storage saved_mask =
267 0 : probed_ifaces[i].netmask;
268 0 : probed_ifaces[i].netmask = ss_mask;
269 0 : DEBUG(2,("interpret_interface: "
270 : "using netmask value %s from "
271 : "config file on interface %s\n",
272 : p,
273 : probed_ifaces[i].name));
274 0 : add_interface(mem_ctx, &probed_ifaces[i],
275 : local_interfaces);
276 0 : probed_ifaces[i].netmask = saved_mask;
277 0 : return;
278 : }
279 : }
280 0 : DEBUG(2,("interpret_interface: Can't determine ip for "
281 : "broadcast address %s\n",
282 : token));
283 0 : return;
284 : }
285 :
286 : /* Just fake up the interface definition. User knows best. */
287 :
288 746180 : DEBUG(2,("interpret_interface: Adding interface %s\n",
289 : token));
290 :
291 746180 : ZERO_STRUCT(ifs);
292 746180 : (void)strlcpy(ifs.name, token, sizeof(ifs.name));
293 746180 : ifs.flags = IFF_BROADCAST;
294 746180 : ifs.ip = ss;
295 746180 : ifs.netmask = ss_mask;
296 746180 : ifs.bcast = ss_bcast;
297 746180 : add_interface(mem_ctx, &ifs, local_interfaces);
298 : }
299 :
300 :
301 : /**
302 : load the list of network interfaces
303 : **/
304 143534 : void load_interface_list(TALLOC_CTX *mem_ctx, struct loadparm_context *lp_ctx, struct interface **local_interfaces)
305 : {
306 143534 : const char **ptr = lpcfg_interfaces(lp_ctx);
307 2796 : int i;
308 143534 : struct iface_struct *ifaces = NULL;
309 2796 : int total_probed;
310 :
311 143534 : *local_interfaces = NULL;
312 :
313 : /* probe the kernel for interfaces */
314 143534 : total_probed = get_interfaces(mem_ctx, &ifaces);
315 :
316 : /* if we don't have a interfaces line then use all interfaces
317 : except loopback */
318 143534 : if (!ptr || !*ptr || !**ptr) {
319 19 : if (total_probed <= 0) {
320 0 : DEBUG(0,("ERROR: Could not determine network interfaces, you must use a interfaces config line\n"));
321 : }
322 95 : for (i=0;i<total_probed;i++) {
323 76 : if (!is_loopback_addr((struct sockaddr *)&ifaces[i].ip)) {
324 38 : add_interface(mem_ctx, &ifaces[i], local_interfaces);
325 : }
326 : }
327 : }
328 :
329 889714 : while (ptr && *ptr) {
330 746180 : interpret_interface(mem_ctx, *ptr, ifaces, total_probed, local_interfaces);
331 746180 : ptr++;
332 : }
333 :
334 143534 : if (!*local_interfaces) {
335 0 : DEBUG(0,("WARNING: no network interfaces found\n"));
336 : }
337 143534 : talloc_free(ifaces);
338 143534 : }
339 :
340 : /**
341 : how many interfaces do we have
342 : **/
343 9248 : int iface_list_count(struct interface *ifaces)
344 : {
345 9248 : int ret = 0;
346 76 : struct interface *i;
347 :
348 28994 : for (i=ifaces;i;i=i->next)
349 19746 : ret++;
350 9248 : return ret;
351 : }
352 :
353 : /**
354 : return IP of the Nth interface
355 : **/
356 7846 : const char *iface_list_n_ip(struct interface *ifaces, int n)
357 : {
358 588 : struct interface *i;
359 :
360 19593 : for (i=ifaces;i && n;i=i->next)
361 11747 : n--;
362 :
363 7846 : if (i) {
364 7846 : return i->ip_s;
365 : }
366 0 : return NULL;
367 : }
368 :
369 :
370 : /**
371 : return the first IPv4 interface address we have registered
372 : **/
373 436 : const char *iface_list_first_v4(struct interface *ifaces)
374 : {
375 16 : struct interface *i;
376 :
377 436 : for (i=ifaces; i; i=i->next) {
378 436 : if (i->ip.ss_family == AF_INET) {
379 436 : return i->ip_s;
380 : }
381 : }
382 0 : return NULL;
383 : }
384 :
385 : /**
386 : return the first IPv6 interface address we have registered
387 : **/
388 0 : static const char *iface_list_first_v6(struct interface *ifaces)
389 : {
390 : struct interface *i;
391 :
392 : #ifdef HAVE_IPV6
393 0 : for (i=ifaces; i; i=i->next) {
394 0 : if (i->ip.ss_family == AF_INET6) {
395 0 : return i->ip_s;
396 : }
397 : }
398 : #endif
399 0 : return NULL;
400 : }
401 :
402 : /**
403 : check if an interface is IPv4
404 : **/
405 12685 : bool iface_list_n_is_v4(struct interface *ifaces, int n)
406 : {
407 4 : struct interface *i;
408 :
409 19360 : for (i=ifaces;i && n;i=i->next)
410 6675 : n--;
411 :
412 12685 : if (i) {
413 12685 : return i->ip.ss_family == AF_INET;
414 : }
415 0 : return false;
416 : }
417 :
418 : /**
419 : return bcast of the Nth interface
420 : **/
421 6899 : const char *iface_list_n_bcast(struct interface *ifaces, int n)
422 : {
423 18 : struct interface *i;
424 :
425 7219 : for (i=ifaces;i && n;i=i->next)
426 320 : n--;
427 :
428 6899 : if (i) {
429 6899 : return i->bcast_s;
430 : }
431 0 : return NULL;
432 : }
433 :
434 : /**
435 : return netmask of the Nth interface
436 : **/
437 65 : const char *iface_list_n_netmask(struct interface *ifaces, int n)
438 : {
439 2 : struct interface *i;
440 :
441 65 : for (i=ifaces;i && n;i=i->next)
442 0 : n--;
443 :
444 65 : if (i) {
445 65 : return i->nmask_s;
446 : }
447 0 : return NULL;
448 : }
449 :
450 : /**
451 : return the local IP address that best matches a destination IP, or
452 : our first interface if none match
453 : */
454 3654 : const char *iface_list_best_ip(struct interface *ifaces, const char *dest)
455 : {
456 64 : struct interface *iface;
457 64 : struct sockaddr_storage ss;
458 :
459 3654 : if (!interpret_string_addr(&ss, dest, AI_NUMERICHOST)) {
460 0 : return iface_list_n_ip(ifaces, 0);
461 : }
462 3654 : iface = iface_list_find(ifaces, (const struct sockaddr *)&ss, true);
463 3654 : if (iface) {
464 3650 : return iface->ip_s;
465 : }
466 : #ifdef HAVE_IPV6
467 4 : if (ss.ss_family == AF_INET6) {
468 0 : return iface_list_first_v6(ifaces);
469 : }
470 : #endif
471 4 : return iface_list_first_v4(ifaces);
472 : }
473 :
474 : /**
475 : return true if an IP is one one of our local networks
476 : */
477 0 : bool iface_list_is_local(struct interface *ifaces, const char *dest)
478 : {
479 0 : struct sockaddr_storage ss;
480 :
481 0 : if (!interpret_string_addr(&ss, dest, AI_NUMERICHOST)) {
482 0 : return false;
483 : }
484 0 : if (iface_list_find(ifaces, (const struct sockaddr *)&ss, true)) {
485 0 : return true;
486 : }
487 0 : return false;
488 : }
489 :
490 : /**
491 : return true if a IP matches a IP/netmask pair
492 : */
493 16760 : bool iface_list_same_net(const char *ip1, const char *ip2, const char *netmask)
494 : {
495 2284 : struct sockaddr_storage ip1_ss, ip2_ss, nm_ss;
496 :
497 16760 : if (!interpret_string_addr(&ip1_ss, ip1, AI_NUMERICHOST)) {
498 0 : return false;
499 : }
500 16760 : if (!interpret_string_addr(&ip2_ss, ip2, AI_NUMERICHOST)) {
501 0 : return false;
502 : }
503 16760 : if (!interpret_string_addr(&nm_ss, netmask, AI_NUMERICHOST)) {
504 0 : return false;
505 : }
506 :
507 16760 : return same_net((struct sockaddr *)&ip1_ss,
508 : (struct sockaddr *)&ip2_ss,
509 : (struct sockaddr *)&nm_ss);
510 : }
511 :
512 : /**
513 : return the list of wildcard interfaces
514 : this will include the IPv4 0.0.0.0, and may include IPv6 ::
515 : */
516 452 : char **iface_list_wildcard(TALLOC_CTX *mem_ctx)
517 : {
518 14 : char **ret;
519 : #ifdef HAVE_IPV6
520 452 : ret = str_list_make(mem_ctx, "::,0.0.0.0", NULL);
521 : #else
522 : ret = str_list_make(mem_ctx, "0.0.0.0", NULL);
523 : #endif
524 452 : return ret;
525 : }
|
