summaryrefslogtreecommitdiff
path: root/utils/ipset-check-member.c
diff options
context:
space:
mode:
Diffstat (limited to 'utils/ipset-check-member.c')
-rw-r--r--utils/ipset-check-member.c127
1 files changed, 0 insertions, 127 deletions
diff --git a/utils/ipset-check-member.c b/utils/ipset-check-member.c
deleted file mode 100644
index 3805f9a..0000000
--- a/utils/ipset-check-member.c
+++ /dev/null
@@ -1,127 +0,0 @@
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-#include <sys/types.h>
-#include <stdint.h>
-#include "misc.h"
-#include "type_check.h"
-
-int
-check_port (char *port)
-{
- if (re_match(port, "^[0-9]+-[0-9]+$")) {
- if (!validateType("portrange", port, 1)) {
- printf("Error: [%s] is not a valid port range\n",port);
- return 0;
- }
- return 1;
- }
- else {
- if (!validateType("port", port, 1)) {
- printf("Error: [%s] is not a valid port\n",port);
- return 0;
- }
- return 1;
- }
-
-}
-
-int
-check_address (char *addr)
-{
- if (re_match(addr, "^[^-]+-[^-]+")) {
- if (!validateType("ipv4range", addr, 1)) {
- printf("Error: [%s] is not a valid IPv4 address range\n", addr);
- return 0;
- }
- /* check that both addresses are in the same /24 subnet */
- unsigned int a1[4], a2[4];
- uint32_t addr1 = 0;
- uint32_t addr2 = 0;
- uint32_t mask = 0xffffff00;
- if (sscanf(addr, "%u.%u.%u.%u-%u.%u.%u.%u",
- &a1[0], &a1[1], &a1[2], &a1[3],
- &a2[0], &a2[1], &a2[2], &a2[3]) != 8)
- return 0;
- int i;
- for (i = 0; i<4; ++i) {
- addr1 <<= 8;
- addr1 |= a1[i];
- addr2 <<= 8;
- addr2 |= a2[i];
- }
- addr1 = addr1 & mask;
- addr2 = addr2 & mask;
- struct in_addr in;
- if (addr1 != addr2){
- addr1 = htonl(addr1);
- memcpy(&in, &addr1, sizeof(struct in_addr));
- printf("Error: address range must be within %s/24\n", inet_ntoa(in));
- return 0;
- }
- return 1;
- }
- if (strcmp(addr, "0.0.0.0") == 0) {
- printf ("Error: zero IP address not valid in address-group");
- return 0;
- }
- if (!validateType("ipv4", addr, 1)){
- printf("Error: [%s] isn't valid IPv4 address\n", addr);
- return 0;
- }
- return 1;
-}
-
-int
-check_network (char *network)
-{
- if (!validateType("ipv4net", network, 1)) {
- printf("Error: [%s] isn't a valid IPv4 network\n", network);
- return 0;
- }
- if (re_match(network, "^0.0.0.0/0$")){
- printf("Error: 0.0.0.0/0 invalid in network-group\n");
- return 0;
- }
- if (re_match(network, "/0$")){
- printf("Error: zero subnet invalid in network-group\n");
- return 0;
- }
- return 1;
-}
-
-int
-check_member (char *type, char *member)
-{
- if(strcmp(type, "port") == 0)
- return (check_port(member));
- else if (strcmp(type, "address") == 0)
- return (check_address(member));
- else if (strcmp(type, "network") == 0)
- return (check_network(member));
- else {
- printf("%s is not a valid type\n", type);
- return 1;
- }
-}
-
-int
-main (int argc, char *argv[])
-{
- int ret = 1;
- if (argc < 3) {
- printf("Usage: ipset-check-member <type> <port>\n");
- return 1;
- }
- char type[10];
- memset(type, 0, 10);
- strcpy(type, argv[1]);
-
- char member[40];
- memset(member, 0, 40);
- strcpy(member, argv[2]);
- ret = check_member(type, member);
- return (!ret);
-}