2 * firewall3 - 3rd OpenWrt UCI firewall implementation
4 * Copyright (C) 2013 Jo-Philipp Wich <jow@openwrt.org>
6 * Permission to use, copy, modify, and/or distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21 static struct blob_attr *interfaces = NULL;
24 static void dump_cb(struct ubus_request *req, int type, struct blob_attr *msg)
26 static const struct blobmsg_policy policy = { "interface", BLOBMSG_TYPE_ARRAY };
27 struct blob_attr *cur;
29 blobmsg_parse(&policy, 1, &cur, blob_data(msg), blob_len(msg));
31 interfaces = blob_memdup(cur);
35 fw3_ubus_connect(void)
39 struct ubus_context *ctx = ubus_connect(NULL);
44 if (ubus_lookup_id(ctx, "network.interface", &id))
47 if (ubus_invoke(ctx, id, "dump", NULL, dump_cb, NULL, 500))
59 fw3_ubus_disconnect(void)
65 static struct fw3_address *
66 parse_subnet(enum fw3_family family, struct blob_attr *dict, int rem)
68 struct blob_attr *cur;
69 struct fw3_address *addr;
71 addr = calloc(1, sizeof(*addr));
76 addr->family = family;
78 __blob_for_each_attr(cur, dict, rem)
80 if (!strcmp(blobmsg_name(cur), "address"))
81 inet_pton(family == FW3_FAMILY_V4 ? AF_INET : AF_INET6,
82 blobmsg_data(cur), &addr->address.v6);
84 else if (!strcmp(blobmsg_name(cur), "mask"))
85 addr->mask = be32_to_cpu(*(uint32_t *)blobmsg_data(cur));
92 parse_subnets(struct list_head *head, enum fw3_family family,
93 struct blob_attr *list, int rem)
95 struct blob_attr *cur;
96 struct fw3_address *addr;
98 __blob_for_each_attr(cur, list, rem)
100 addr = parse_subnet(family, blobmsg_data(cur), blobmsg_data_len(cur));
103 list_add_tail(&addr->list, head);
108 invoke_common(const char *net, bool device)
110 struct fw3_device *dev = NULL;
111 struct list_head *addr = NULL;
112 struct blob_attr *c, *cur;
117 if (!net || !interfaces)
121 dev = calloc(1, sizeof(*dev));
123 addr = malloc(sizeof(*addr));
125 if ((device && !dev) || (!device && !addr))
129 INIT_LIST_HEAD(addr);
131 blobmsg_for_each_attr(c, interfaces, r) {
133 blobmsg_for_each_attr(cur, c, rem)
134 if (!strcmp(blobmsg_name(cur), "interface"))
135 matched = !strcmp(blobmsg_get_string(cur), net);
140 blobmsg_for_each_attr(cur, c, rem) {
141 data = blobmsg_data(cur);
143 if (dev && !strcmp(blobmsg_name(cur), "device") && !dev->name[0])
144 snprintf(dev->name, sizeof(dev->name), "%s", data);
145 else if (dev && !strcmp(blobmsg_name(cur), "l3_device"))
146 snprintf(dev->name, sizeof(dev->name), "%s", data);
147 else if (!dev && !strcmp(blobmsg_name(cur), "ipv4-address"))
148 parse_subnets(addr, FW3_FAMILY_V4,
149 blobmsg_data(cur), blobmsg_data_len(cur));
150 else if (!dev && (!strcmp(blobmsg_name(cur), "ipv6-address") ||
151 !strcmp(blobmsg_name(cur), "ipv6-prefix-assignment")))
152 parse_subnets(addr, FW3_FAMILY_V6,
153 blobmsg_data(cur), blobmsg_data_len(cur));
157 dev->set = !!dev->name[0];
162 if (device && dev->set)
164 else if (!device && !list_empty(addr))
175 fw3_ubus_device(const char *net)
177 return invoke_common(net, true);
181 fw3_ubus_address(const char *net)
183 return invoke_common(net, false);
187 fw3_ubus_zone_devices(struct fw3_zone *zone)
189 struct blob_attr *c, *cur, *dcur;
190 unsigned r, rem, drem;
194 blobmsg_for_each_attr(c, interfaces, r) {
198 blobmsg_for_each_attr(cur, c, rem) {
199 if (!strcmp(blobmsg_name(cur), "interface"))
200 name = blobmsg_get_string(cur);
201 else if (!strcmp(blobmsg_name(cur), "data"))
202 blobmsg_for_each_attr(dcur, cur, drem)
203 if (!strcmp(blobmsg_name(dcur), "zone"))
204 matches = !strcmp(blobmsg_get_string(dcur), zone->name);
208 fw3_parse_device(&zone->networks, name, true);
213 fw3_ubus_rules(struct blob_buf *b)
217 struct blob_attr *c, *cur, *dcur, *rule, *ropt;
218 unsigned r, rem, drem, rrem, orem;
220 blobmsg_for_each_attr(c, interfaces, r) {
221 const char *l3_device = NULL;
222 struct blob_attr *data = NULL;
224 blobmsg_for_each_attr(cur, c, rem) {
225 if (!strcmp(blobmsg_name(cur), "l3_device"))
226 l3_device = blobmsg_get_string(cur);
227 else if (!strcmp(blobmsg_name(cur), "data"))
231 if (!data || !l3_device)
234 blobmsg_for_each_attr(dcur, data, drem) {
235 if (strcmp(blobmsg_name(dcur), "firewall"))
238 blobmsg_for_each_attr(rule, dcur, rrem) {
239 void *k = blobmsg_open_table(b, "");
241 blobmsg_for_each_attr(ropt, rule, orem)
242 if (strcmp(blobmsg_name(ropt), "device"))
243 blobmsg_add_blob(b, ropt);
245 blobmsg_add_string(b, "device", l3_device);
246 blobmsg_close_table(b, k);