[ViewVC] Diff of: cvs/gvpe/src/connection.C

Comparing gvpe/src/connection.C (file contents):
Revision 1.52 by pcg, Wed Mar 23 21:55:39 2005 UTC vs.
Revision 1.59 by pcg, Mon Dec 5 12:58:09 2005 UTC

     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     GNU General Public License for more details.
     You should have received a copy of the GNU General Public License
     along with gvpe; if not, write to the Free Software
-    Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+    Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
 */
 #include "config.h"
-#include <cassert>
 #include <list>
 #include <openssl/rand.h>
 #include <openssl/evp.h>
 #if ENABLE_COMPRESSION
     f |= FEATURE_COMPRESSION;
 #endif
 #if ENABLE_ROHC
     f |= FEATURE_ROHC;
+#endif
+#if ENABLE_BRIDGING
+    f |= FEATURE_BRIDGING;
 #endif
     return f;
   }
 };
   // mask out protocols we cannot establish
   if (!conf->udp_port) protocol &= ~PROT_UDPv4;
   if (!conf->tcp_port) protocol &= ~PROT_TCPv4;
   if (!conf->dns_port) protocol &= ~PROT_DNSv4;
+  if (protocol
+      && (!conf->can_direct (THISNODE)
+          || !THISNODE->can_direct (conf)))
+    {
+      slog (L_DEBUG, _("%s: direct connection denied"), conf->nodename);
+      protocol = 0;
+    }
   si.set (conf, protocol);
 }
 // ensure sockinfo is valid, forward if necessary
 const sockinfo &
 }
 void
 connection::send_connect_info (int rid, const sockinfo &rsi, u8 rprotocols)
 {
-  slog (L_TRACE, ">>%d PT_CONNECT_INFO(%d,%s)\n",
+  slog (L_TRACE, ">>%d PT_CONNECT_INFO(%d,%s)",
                  conf->id, rid, (const char *)rsi);
   connect_info_packet *r = new connect_info_packet (conf->id, rid, rsi, rprotocols);
   r->hmac_set (octx);
 {
   if (ictx && octx)
     send_data_packet (pkt);
   else
     {
-      if (!broadcast)//DDDD
+      if (!broadcast)
         data_queue.put (new tap_packet (*pkt));
       establish_connection ();
     }
 }
                   {
                     vpn->tap->send (d);
                     if (si != rsi)
                       {
-                        // fast re-sync on connection changes, useful especially for tcp/ip
+                        // fast re-sync on source address changes, useful especially for tcp/ip
                         si = rsi;
                         slog (L_INFO, _("%s(%s): socket address changed to %s"),
                               conf->nodename, (const char *)si, (const char *)rsi);
                       }
       case vpn_packet::PT_CONNECT_REQ:
         if (ictx && octx && rsi == si && pkt->hmac_chk (ictx))
           {
             connect_req_packet *p = (connect_req_packet *) pkt;
-            assert (p->id > 0 && p->id <= vpn->conns.size ()); // hmac-auth does not mean we accept anything
+            if (p->id > 0 && p->id <= vpn->conns.size ())
-            connection *c = vpn->conns[p->id - 1];
-            conf->protocols = p->protocols;
-            slog (L_TRACE, "<<%d PT_CONNECT_REQ(%d) [%d]\n",
-                           conf->id, p->id, c->ictx && c->octx);
-            if (c->ictx && c->octx)
               {
+                connection *c = vpn->conns[p->id - 1];
+                conf->protocols = p->protocols;
+                slog (L_TRACE, "<<%d PT_CONNECT_REQ(%d) [%d]",
+                               conf->id, p->id, c->ictx && c->octx);
+                if (c->ictx && c->octx)
+                  {
-                // send connect_info packets to both sides, in case one is
+                    // send connect_info packets to both sides, in case one is
-                // behind a nat firewall (or both ;)
+                    // behind a nat firewall (or both ;)
-                c->send_connect_info (conf->id, si, conf->protocols);
+                    c->send_connect_info (conf->id, si, conf->protocols);
-                send_connect_info (c->conf->id, c->si, c->conf->protocols);
+                    send_connect_info (c->conf->id, c->si, c->conf->protocols);
+                  }
+                else
+                  c->establish_connection ();
               }
             else
-              c->establish_connection ();
+              slog (L_WARN,
+                    _("received authenticated connection request from unknown node #%d, config file mismatch?"),
+                    p->id);
           }
         break;
       case vpn_packet::PT_CONNECT_INFO:
         if (ictx && octx && rsi == si && pkt->hmac_chk (ictx))
           {
             connect_info_packet *p = (connect_info_packet *)pkt;
-            if (p->id > 0 && p->id <= vpn->conns.size ()) // hmac-auth does not mean we accept anything
+            if (p->id > 0 && p->id <= vpn->conns.size ())
               {
                 connection *c = vpn->conns[p->id - 1];
                 c->conf->protocols = p->protocols;
                 protocol = best_protocol (c->conf->protocols & THISNODE->protocols & p->si.supported_protocols (c->conf));
                 const sockinfo &dsi = forward_si (p->si);
                 if (dsi.valid ())
                   c->send_auth_request (dsi, true);
               }
+            else
+              slog (L_WARN,
+                    _("received authenticated connection request from unknown node #%d, config file mismatch?"),
+                    p->id);
           }
         break;
       default:
   send_vpn_packet (p, si);
   delete p;
 }
+void connection::script_init_env (const char *ext)
+{
+  char *env;
+  asprintf (&env, "IFUPDATA%s=%s", ext, conf->if_up_data); putenv (env);
+  asprintf (&env, "NODENAME%s=%s", ext, conf->nodename); putenv (env);
+  asprintf (&env, "MAC%s=%02x:%02x:%02x:%02x:%02x:%02x", ext,
+            0xfe, 0xfd, 0x80, 0x00, conf->id >> 8,
+            conf->id & 0xff); putenv (env);
+}
-void connection::script_init_env ()
+void connection::script_init_connect_env ()
 {
   vpn->script_init_env ();
   char *env;
   asprintf (&env, "DESTID=%d",   conf->id); putenv (env);
   asprintf (&env, "DESTPORT=%d", ntohs (si.port)); putenv (env);
 }
 const char *connection::script_node_up ()
 {
-  script_init_env ();
+  script_init_connect_env ();
   putenv ("STATE=up");
   char *filename;
   asprintf (&filename,
             "%s/%s",
             confbase,
             ::conf.script_node_up ? ::conf.script_node_up : "node-up");
+  return filename;
 }
 const char *connection::script_node_down ()
 {
-  script_init_env ();
+  script_init_connect_env ();
   putenv ("STATE=down");
   char *filename;
   asprintf (&filename,
             "%s/%s",
             confbase,
             ::conf.script_node_down ? ::conf.script_node_down : "node-down");
+  return filename;
 }
 connection::connection (struct vpn *vpn, conf_node *conf)
 : vpn(vpn), conf(conf)
 , rekey (this, &connection::rekey_cb)

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/connection.C (file contents): Revision 1.52 by pcg, Wed Mar 23 21:55:39 2005 UTC vs. Revision 1.59 by pcg, Mon Dec 5 12:58:09 2005 UTC

Diff Legend

Comparing gvpe/src/connection.C (file contents):
Revision 1.52 by pcg, Wed Mar 23 21:55:39 2005 UTC vs.
Revision 1.59 by pcg, Mon Dec 5 12:58:09 2005 UTC