--- gvpe/src/vpn.C	2003/04/02 03:25:17	1.1
+++ gvpe/src/vpn.C	2003/04/07 01:28:56	1.8
@@ -42,7 +42,7 @@
 
 /////////////////////////////////////////////////////////////////////////////
 
-const char *vpn::script_if_up (int)
+const char *vpn::script_if_up ()
 {
   // the tunnel device mtu should be the physical mtu - overhead
   // the tricky part is rounding to the cipher key blocksize
@@ -73,22 +73,20 @@
 int
 vpn::setup ()
 {
-  sockinfo si;
-
-  si.set (THISNODE);
-
-  udpv4_fd = -1;
+  ipv4_fd = -1;
 
-  if (THISNODE->protocols & PROT_UDPv4)
+  if (THISNODE->protocols & PROT_IPv4 && ::conf.ip_proto)
     {
-      udpv4_fd = socket (PF_INET, SOCK_DGRAM, IPPROTO_UDP);
+      ipv4_fd = socket (PF_INET, SOCK_RAW, ::conf.ip_proto);
 
-      if (udpv4_fd < 0)
+      if (ipv4_fd < 0)
         return -1;
 
-      if (bind (udpv4_fd, si.sav4 (), si.salenv4 ()))
+      sockinfo si (THISNODE, PROT_IPv4);
+
+      if (bind (ipv4_fd, si.sav4 (), si.salenv4 ()))
         {
-          slog (L_ERR, _("can't bind udpv4 to %s: %s"), (const char *)si, strerror (errno));
+          slog (L_ERR, _("can't bind ipv4 socket on %s: %s"), (const char *)si, strerror (errno));
           exit (1);
         }
 
@@ -98,30 +96,33 @@
       // fragment for me sometimes.
       {
         int oval = IP_PMTUDISC_DONT;
-        setsockopt (udpv4_fd, SOL_IP, IP_MTU_DISCOVER, &oval, sizeof oval);
+        setsockopt (ipv4_fd, SOL_IP, IP_MTU_DISCOVER, &oval, sizeof oval);
       }
 #endif
 
+      ipv4_ev_watcher.start (ipv4_fd, POLLIN);
+    }
+
+  udpv4_fd = -1;
+
+  if (THISNODE->protocols & PROT_UDPv4 && THISNODE->udp_port)
+    {
+      udpv4_fd = socket (PF_INET, SOCK_DGRAM, IPPROTO_UDP);
+
+      if (udpv4_fd < 0)
+        return -1;
+
       // standard daemon practise...
       {
         int oval = 1;
         setsockopt (udpv4_fd, SOL_SOCKET, SO_REUSEADDR, &oval, sizeof oval);
       }
 
-      udpv4_ev_watcher.start (udpv4_fd, POLLIN);
-    }
-
-  ipv4_fd = -1;
-  if (THISNODE->protocols & PROT_IPv4)
-    {
-      ipv4_fd = socket (PF_INET, SOCK_RAW, ::conf.ip_proto);
-
-      if (ipv4_fd < 0)
-        return -1;
+      sockinfo si (THISNODE, PROT_UDPv4);
 
-      if (bind (ipv4_fd, si.sav4 (), si.salenv4 ()))
+      if (bind (udpv4_fd, si.sav4 (), si.salenv4 ()))
         {
-          slog (L_ERR, _("can't bind ipv4 socket to %s: %s"), (const char *)si, strerror (errno));
+          slog (L_ERR, _("can't bind udpv4 on %s: %s"), (const char *)si, strerror (errno));
           exit (1);
         }
 
@@ -131,12 +132,46 @@
       // fragment for me sometimes.
       {
         int oval = IP_PMTUDISC_DONT;
-        setsockopt (ipv4_fd, SOL_IP, IP_MTU_DISCOVER, &oval, sizeof oval);
+        setsockopt (udpv4_fd, SOL_IP, IP_MTU_DISCOVER, &oval, sizeof oval);
       }
 #endif
 
-      ipv4_ev_watcher.start (ipv4_fd, POLLIN);
+      udpv4_ev_watcher.start (udpv4_fd, POLLIN);
+    }
+
+  tcpv4_fd = -1;
+
+#if ENABLE_TCP
+  if (THISNODE->protocols & PROT_TCPv4 && THISNODE->tcp_port)
+    {
+      tcpv4_fd = socket (PF_INET, SOCK_STREAM, IPPROTO_TCP);
+
+      if (tcpv4_fd < 0)
+        return -1;
+
+      // standard daemon practise...
+      {
+        int oval = 1;
+        setsockopt (tcpv4_fd, SOL_SOCKET, SO_REUSEADDR, &oval, sizeof oval);
+      }
+
+      sockinfo si (THISNODE, PROT_TCPv4);
+
+      if (bind (tcpv4_fd, si.sav4 (), si.salenv4 ()))
+        {
+          slog (L_ERR, _("can't bind tcpv4 on %s: %s"), (const char *)si, strerror (errno));
+          exit (1);
+        }
+
+      if (listen (tcpv4_fd, 5))
+        {
+          slog (L_ERR, _("can't listen tcpv4 on %s: %s"), (const char *)si, strerror (errno));
+          exit (1);
+        }
+
+      tcpv4_ev_watcher.start (tcpv4_fd, POLLIN);
     }
+#endif
 
   tap = new tap_device ();
   if (!tap) //D this, of course, never catches
@@ -154,18 +189,45 @@
   return 0;
 }
 
-void
+// send a vpn packet out to other hosts
+bool
+vpn::send_vpn_packet (vpn_packet *pkt, const sockinfo &si, int tos)
+{
+  switch (si.prot)
+    {
+      case PROT_IPv4:
+        return send_ipv4_packet (pkt, si, tos);
+
+      case PROT_UDPv4:
+        return send_udpv4_packet (pkt, si, tos);
+
+#if ENABLE_TCP
+      case PROT_TCPv4:
+        return send_tcpv4_packet (pkt, si, tos);
+#endif
+
+      default:
+        slog (L_CRIT, _("%s: FATAL: trying to send packet with unsupported protocol"), (const char *)si);
+        return false;
+    }
+}
+
+bool
 vpn::send_ipv4_packet (vpn_packet *pkt, const sockinfo &si, int tos)
 {
   setsockopt (ipv4_fd, SOL_IP, IP_TOS, &tos, sizeof tos);
   sendto (ipv4_fd, &((*pkt)[0]), pkt->len, 0, si.sav4 (), si.salenv4 ());
+
+  return true;
 }
 
-void
+bool
 vpn::send_udpv4_packet (vpn_packet *pkt, const sockinfo &si, int tos)
 {
   setsockopt (udpv4_fd, SOL_IP, IP_TOS, &tos, sizeof tos);
   sendto (udpv4_fd, &((*pkt)[0]), pkt->len, 0, si.sav4 (), si.salenv4 ());
+
+  return true;
 }
 
 void
@@ -182,6 +244,9 @@
       || pkt->typ () >= vpn_packet::PT_MAX)
     slog (L_WARN, _("(%s): received corrupted packet type %d (src %d, dst %d)"),
           (const char *)rsi, pkt->typ (), pkt->src (), pkt->dst ());
+  else if (dst > conns.size ())
+    slog (L_WARN, _("(%s): received corrupted packet type %d (src %d, dst %d)"),
+          (const char *)rsi, pkt->typ (), pkt->src (), pkt->dst ());
   else
     {
       connection *c = conns[src - 1];
@@ -190,19 +255,23 @@
         slog (L_WARN, _("%s(%s): received broadcast, but we are no router"),
               c->conf->nodename, (const char *)rsi);
       else if (dst != 0 && dst != THISNODE->id)
-        // FORWARDING NEEDED ;)
-        slog (L_WARN,
-              _("received frame for node %d ('%s') from %s, but this is node %d ('%s')"),
-              dst, conns[dst - 1]->conf->nodename,
-              (const char *)rsi,
-              THISNODE->id, THISNODE->nodename);
+        {
+          if (THISNODE->routerprio)
+            // the tos setting gets lost here. who cares.
+            conns[dst - 1]->inject_vpn_packet (pkt);
+          else
+            slog (L_WARN,
+                  _("%s(%s): forwarding request (=> %s), but we are no router"),
+                  c->conf->nodename, (const char *)rsi,
+                  conns[dst - 1]->conf->nodename);
+        }
       else
         c->recv_vpn_packet (pkt, rsi);
     }
 }
 
 void
-vpn::udpv4_ev (short revents)
+vpn::udpv4_ev (io_watcher &w, short revents)
 {
   if (revents & (POLLIN | POLLERR))
     {
@@ -211,9 +280,9 @@
       socklen_t sa_len = sizeof (sa);
       int len;
 
-      len = recvfrom (udpv4_fd, &((*pkt)[0]), MAXSIZE, 0, (sockaddr *)&sa, &sa_len);
+      len = recvfrom (w.fd, &((*pkt)[0]), MAXSIZE, 0, (sockaddr *)&sa, &sa_len);
 
-      sockinfo si(sa);
+      sockinfo si(sa, PROT_UDPv4);
 
       if (len > 0)
         {
@@ -224,7 +293,7 @@
       else
         {
           // probably ECONNRESET or somesuch
-          slog (L_DEBUG, _("%s: %s"), (const char *)si, strerror (errno));
+          slog (L_DEBUG, _("%s: fd %d, %s"), (const char *)si, w.fd, strerror (errno));
         }
 
       delete pkt;
@@ -245,7 +314,7 @@
 }
 
 void
-vpn::ipv4_ev (short revents)
+vpn::ipv4_ev (io_watcher &w, short revents)
 {
   if (revents & (POLLIN | POLLERR))
     {
@@ -254,7 +323,7 @@
       socklen_t sa_len = sizeof (sa);
       int len;
 
-      len = recvfrom (ipv4_fd, &((*pkt)[0]), MAXSIZE, 0, (sockaddr *)&sa, &sa_len);
+      len = recvfrom (w.fd, &((*pkt)[0]), MAXSIZE, 0, (sockaddr *)&sa, &sa_len);
 
       sockinfo si(sa, PROT_IPv4);
 
@@ -292,7 +361,7 @@
 }
 
 void
-vpn::tap_ev (short revents)
+vpn::tap_ev (io_watcher &w, short revents)
 {
   if (revents & POLLIN)
     {
@@ -352,7 +421,7 @@
 }
 
 void
-vpn::event_cb (tstamp &ts)
+vpn::event_cb (time_watcher &w)
 {
   if (events)
     {
@@ -379,7 +448,7 @@
       events = 0;
     }
 
-  ts = TSTAMP_CANCEL;
+  w.at = TSTAMP_CANCEL;
 }
 
 void
@@ -433,17 +502,17 @@
   return router;
 }
 
-void vpn::connect_request (int id)
+void vpn::send_connect_request (int id)
 {
   connection *c = find_router ();
 
   if (c)
-    c->connect_request (id);
-  //else // does not work, because all others must connect to the same router
-  //  // no router found, aggressively connect to all routers
-  //  for (conns_vector::iterator i = conns.begin (); i != conns.end (); ++i)
-  //    if ((*i)->conf->routerprio)
-  //      (*i)->establish_connection ();
+    c->send_connect_request (id);
+  else
+    // no router found, aggressively connect to all routers
+    for (conns_vector::iterator i = conns.begin (); i != conns.end (); ++i)
+      if ((*i)->conf->routerprio)
+        (*i)->establish_connection ();
 }
 
 void
@@ -470,10 +539,13 @@
 }
 
 vpn::vpn (void)
-: udpv4_ev_watcher(this, &vpn::udpv4_ev)
-, ipv4_ev_watcher(this, &vpn::ipv4_ev)
-, tap_ev_watcher(this, &vpn::tap_ev)
-, event(this, &vpn::event_cb)
+: event(this, &vpn::event_cb)
+, udpv4_ev_watcher(this, &vpn::udpv4_ev)
+, ipv4_ev_watcher (this, &vpn::ipv4_ev)
+, tap_ev_watcher  (this, &vpn::tap_ev)
+#if ENABLE_TCP
+, tcpv4_ev_watcher(this, &vpn::tcpv4_ev)
+#endif
 {
 }