diff options
Diffstat (limited to 'utils/ipset-check-member.c')
-rw-r--r-- | utils/ipset-check-member.c | 127 |
1 files changed, 0 insertions, 127 deletions
diff --git a/utils/ipset-check-member.c b/utils/ipset-check-member.c deleted file mode 100644 index 3805f9a..0000000 --- a/utils/ipset-check-member.c +++ /dev/null @@ -1,127 +0,0 @@ -#include <stdio.h> -#include <stdlib.h> -#include <string.h> -#include <netinet/in.h> -#include <arpa/inet.h> -#include <sys/types.h> -#include <stdint.h> -#include "misc.h" -#include "type_check.h" - -int -check_port (char *port) -{ - if (re_match(port, "^[0-9]+-[0-9]+$")) { - if (!validateType("portrange", port, 1)) { - printf("Error: [%s] is not a valid port range\n",port); - return 0; - } - return 1; - } - else { - if (!validateType("port", port, 1)) { - printf("Error: [%s] is not a valid port\n",port); - return 0; - } - return 1; - } - -} - -int -check_address (char *addr) -{ - if (re_match(addr, "^[^-]+-[^-]+")) { - if (!validateType("ipv4range", addr, 1)) { - printf("Error: [%s] is not a valid IPv4 address range\n", addr); - return 0; - } - /* check that both addresses are in the same /24 subnet */ - unsigned int a1[4], a2[4]; - uint32_t addr1 = 0; - uint32_t addr2 = 0; - uint32_t mask = 0xffffff00; - if (sscanf(addr, "%u.%u.%u.%u-%u.%u.%u.%u", - &a1[0], &a1[1], &a1[2], &a1[3], - &a2[0], &a2[1], &a2[2], &a2[3]) != 8) - return 0; - int i; - for (i = 0; i<4; ++i) { - addr1 <<= 8; - addr1 |= a1[i]; - addr2 <<= 8; - addr2 |= a2[i]; - } - addr1 = addr1 & mask; - addr2 = addr2 & mask; - struct in_addr in; - if (addr1 != addr2){ - addr1 = htonl(addr1); - memcpy(&in, &addr1, sizeof(struct in_addr)); - printf("Error: address range must be within %s/24\n", inet_ntoa(in)); - return 0; - } - return 1; - } - if (strcmp(addr, "0.0.0.0") == 0) { - printf ("Error: zero IP address not valid in address-group"); - return 0; - } - if (!validateType("ipv4", addr, 1)){ - printf("Error: [%s] isn't valid IPv4 address\n", addr); - return 0; - } - return 1; -} - -int -check_network (char *network) -{ - if (!validateType("ipv4net", network, 1)) { - printf("Error: [%s] isn't a valid IPv4 network\n", network); - return 0; - } - if (re_match(network, "^0.0.0.0/0$")){ - printf("Error: 0.0.0.0/0 invalid in network-group\n"); - return 0; - } - if (re_match(network, "/0$")){ - printf("Error: zero subnet invalid in network-group\n"); - return 0; - } - return 1; -} - -int -check_member (char *type, char *member) -{ - if(strcmp(type, "port") == 0) - return (check_port(member)); - else if (strcmp(type, "address") == 0) - return (check_address(member)); - else if (strcmp(type, "network") == 0) - return (check_network(member)); - else { - printf("%s is not a valid type\n", type); - return 1; - } -} - -int -main (int argc, char *argv[]) -{ - int ret = 1; - if (argc < 3) { - printf("Usage: ipset-check-member <type> <port>\n"); - return 1; - } - char type[10]; - memset(type, 0, 10); - strcpy(type, argv[1]); - - char member[40]; - memset(member, 0, 40); - strcpy(member, argv[2]); - ret = check_member(type, member); - return (!ret); -} |