#!/usr/bin/perl
#
# Module: vyatta-op-dns-forwarding.pl
#
# **** License ****
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
#
# This code was originally developed by Vyatta, Inc.
# Portions created by Vyatta are Copyright (C) 2008 Vyatta, Inc.
# All Rights Reserved.
#
# Author: Mohit Mehta
# Date: August 2008
# Description: Script to execute op-mode commands for DNS forwarding
#
# **** End License ****
#

use lib "/opt/vyatta/share/perl5/";
use Getopt::Long;
use Vyatta::Config;
use strict;
use warnings;

my $show_stats_output="";
my $show_nameservers_output="";
my $dnsmasq_log='/var/log/dnsmasq.log';

sub get_cache_stats {
    my ($cache_size, $queries_forwarded, $queries_answered_locally, $entries_inserted, $entries_removed);

    my $grepped_line = `grep 'cache size' $dnsmasq_log`;
    my @split_line = split(/\s+/, $grepped_line);
    my @temp_split = split(/,/, $split_line[6]);
    $cache_size = $temp_split[0];
    @temp_split = split(/\//, $split_line[7]);
    $entries_removed = $temp_split[0];
    $entries_inserted = $temp_split[1];

    $grepped_line = `grep 'queries forwarded' $dnsmasq_log`;
    @split_line = split(/\s+/, $grepped_line);
    @temp_split = split(/,/, $split_line[6]);
    $queries_forwarded = $temp_split[0];
    $queries_answered_locally = $split_line[10];

    $show_stats_output .= "----------------\n";
    $show_stats_output .= "Cache statistics\n";
    $show_stats_output .= "----------------\n";
    $show_stats_output .= "Cache size: $cache_size\n";
    $show_stats_output .= "Queries forwarded: $queries_forwarded\n";
    $show_stats_output .= "Queries answered locally: $queries_answered_locally\n";
    $show_stats_output .= "Total DNS entries inserted into cache: $entries_inserted\n";
    $show_stats_output .= "DNS entries removed from cache before expiry: $entries_removed\n";

}

sub get_nameserver_stats {

    $show_stats_output .= "\n---------------------\n";
    $show_stats_output .=   "Nameserver statistics\n";
    $show_stats_output .=   "---------------------\n";

    #To show overridden domain servers seperately, we need to compare IPs
    #configured for the domain overrides in the config with the stats.  

    my $vyatta_config = new Vyatta::Config;
    $vyatta_config->setLevel("service dns forwarding");

    my @domains = $vyatta_config->listOrigNodes("domain");   
    my @domain_servers_list;

    #build a list of servers that are overriding global nameservers
    if (@domains) {
        foreach my $domain (@domains) {
            push(@domain_servers_list, $vyatta_config->returnOrigValue("domain $domain server"));             
        }  
    }
    my $found_overrides = 0;
    my $show_stats_overrides; 
    my @grepped_lines = `grep ': server' $dnsmasq_log`;
    foreach my $lines (@grepped_lines) {
            my @each_line = split(/\s+/, $lines);
            my $nameserver_word = $each_line[5];
            my @nameserver_split = split(/#/, $nameserver_word);
            my $nameserver = $nameserver_split[0];
            my $queries_sent_word = $each_line[8];
            my @queries_sent_split = split(/,/, $queries_sent_word);
            my $queries_sent = $queries_sent_split[0];
            my $queries_retried_failed = $each_line[12];

            if (grep {$_ eq $nameserver}@domain_servers_list) {
                if (!$found_overrides) {
                    $found_overrides = 1;
                    $show_stats_overrides .= "\nDomain Override Servers\n\n";
                }
                $show_stats_overrides .= "Server: $nameserver\nQueries sent: $queries_sent\nQueries retried or failed: $queries_retried_failed\n\n";
            } else {
                $show_stats_output .= "Server: $nameserver\nQueries sent: $queries_sent\nQueries retried or failed: $queries_retried_failed\n\n";
            }
    }
    if (defined($show_stats_overrides)) {
        $show_stats_output .= $show_stats_overrides;
    }
}

sub print_stats {
    print $show_stats_output;
}

sub get_dns_nameservers {
    my $vyatta_config = new Vyatta::Config;

    $vyatta_config->setLevel("service dns forwarding");
    my $use_system_nameservers = $vyatta_config->existsOrig("system");
    my @use_dhcp_nameservers = $vyatta_config->returnOrigValues("dhcp");
    my @use_nameservers = $vyatta_config->returnOrigValues("name-server");
    my @resolv_conf_nameservers = `grep "^nameserver" /etc/resolv.conf`;
    my @dnsmasq_conf_nameservers = `grep "server=" /etc/dnsmasq.conf`;
    my @dnsmasq_running = `ps ax | grep dnsmasq | grep -v grep`;

    if (!(defined $use_system_nameservers) && (@use_dhcp_nameservers == 0) && (@use_nameservers == 0)) {

       # no specific nameservers specified under DNS forwarding, so dnsmasq is getting nameservers from /etc/resolv.conf

       if (! @resolv_conf_nameservers > 0){
           $show_nameservers_output .= "No DNS servers present to forward queries to.\n";
           if (! @dnsmasq_running > 0){
               $show_nameservers_output .= "DNS forwarding has not been configured either.\n";
           }
       } else {
            if (! @dnsmasq_running > 0){
               $show_nameservers_output .= "\n**DNS forwarding has not been configured**\n\n";
            }
            $show_nameservers_output .=    "-----------------------------------------------\n";
            if ( @dnsmasq_running > 0){
               $show_nameservers_output .= "   Nameservers configured for DNS forwarding\n";
            } else {
              $show_nameservers_output .=  " Nameservers NOT configured for DNS forwarding\n";
            }
            $show_nameservers_output .=    "-----------------------------------------------\n";
            foreach my $line (@resolv_conf_nameservers) {
               my @split_line = split(/\s+/, $line);
               my $nameserver = $split_line[1];
               my $nameserver_via = "system";
               if (@split_line > 2) {
                  my @dhclient_resolv_files = `ls /etc/resolv.conf.dhclient-new-* 2>/dev/null`;
                  foreach my $each_dhcp_resolv_conf (@dhclient_resolv_files) {
                        my @ns_dhclient_resolv=`grep "$nameserver\$" $each_dhcp_resolv_conf`;
                        if ( @ns_dhclient_resolv > 0) {
                            my @dhclient_file_array = split(/-/, $each_dhcp_resolv_conf);
                            $nameserver_via = $dhclient_file_array[2];
                            chomp $nameserver_via;
                            $nameserver_via = 'dhcp ' . $nameserver_via;
                     }
                  }
                  # check here if nameserver_via is still system, if yes then search /etc/ppp/resolv-interface.conf
                  if ($nameserver_via eq "system") {
                    my @ppp_resolv_files = `ls /etc/ppp/resolv-*conf 2>/dev/null`;
                    foreach my $each_ppp_resolv_conf (@ppp_resolv_files) {
                      my @ns_ppp_resolv=`grep "$nameserver\$" $each_ppp_resolv_conf`;
                      if ( @ns_ppp_resolv > 0) {
                        my @ppp_file_array = split(/-/, $each_ppp_resolv_conf);
                        @ppp_file_array = split(/\./, $ppp_file_array[1]);
                        $nameserver_via = $ppp_file_array[0];
                        chomp $nameserver_via;
                        $nameserver_via = 'ppp ' . $nameserver_via;
                      }
                    }
                  }
               }
               $show_nameservers_output .= "$nameserver available via '$nameserver_via'\n";
            }
      }
      $show_nameservers_output .= "\n";
    } else {

        # nameservers specified under DNS forwarding, so dnsmasq getting nameservers from /etc/dnsmasq.conf

	my @active_nameservers;
        my $active_nameserver_count = 0;
        $show_nameservers_output .= "-----------------------------------------------\n";
        $show_nameservers_output .= "   Nameservers configured for DNS forwarding\n";
        $show_nameservers_output .= "-----------------------------------------------\n";
        my $show_nameservers_output_dhcp;
        my $show_nameservers_output_domain;
        my $show_nameservers_output_nameserver;

        my $line_flag;
        ## server=/test.com/1.1.1.1 
	foreach my $line (@dnsmasq_conf_nameservers) {
	        my @split_line = split(/=/, $line);
		my @nameserver_array = split(/\s+/, $split_line[1]);
                my $nameserver = $nameserver_array[0];
                my $domain;
                my @domain_tokens; 

                if ($nameserver_array[2] eq "domain-override")
                {
                    #$nameserver has /test.com/1.1.1.1, seperate it. 
                    @domain_tokens = split(/\//, $nameserver);
                    if (!defined($line_flag)) { 
                        $line_flag = 1;
                        $show_nameservers_output_domain .= "\n";
                        $show_nameservers_output_domain .= "Domain Overrides:\n";
                        $show_nameservers_output_domain .= "\n";
                    }      
                } 
		$active_nameservers[$active_nameserver_count] = $nameserver;
		$active_nameserver_count++;
                my $nameserver_via = $nameserver_array[2];
                if (@nameserver_array > 3){
		   my $dhcp_interface = $nameserver_array[3];
	           $show_nameservers_output_dhcp .= "$nameserver available via '$nameserver_via $dhcp_interface'\n";
                 } elsif (@domain_tokens) {
                     $show_nameservers_output_domain .= "$domain_tokens[1] uses $domain_tokens[2]\n";
                   } else {
 		   $show_nameservers_output_nameserver .= "$nameserver available via '$nameserver_via'\n";
 		}
        }
        if (defined ($show_nameservers_output_nameserver)) {
          $show_nameservers_output .= $show_nameservers_output_nameserver;
        }
        if (defined ($show_nameservers_output_dhcp)) {
          $show_nameservers_output .= $show_nameservers_output_dhcp;
        }
        if (defined ($show_nameservers_output_domain)) {
          $show_nameservers_output .= $show_nameservers_output_domain ;
        }

	# then you need to get nameservers from /etc/resolv.conf that are not in dnsmasq.conf to show them as inactive

        my $active_dnsmasq_nameserver;
	my $output_inactive_nameservers = 0;
	foreach my $resolv_conf_line (@resolv_conf_nameservers) {
               my @resolv_conf_split_line = split(/\s+/, $resolv_conf_line);
               my $resolv_conf_nameserver = $resolv_conf_split_line[1];
	       $active_dnsmasq_nameserver = 0;
	       my $resolv_nameserver_via = "system";
	       foreach my $dnsmasq_nameserver (@active_nameservers) {
		       if ($dnsmasq_nameserver eq $resolv_conf_nameserver) {
			   $active_dnsmasq_nameserver = 1;
		       }
	       }
	       if ($active_dnsmasq_nameserver == 0) {
                 if ($output_inactive_nameservers == 0){
                     $output_inactive_nameservers = 1;
                     $show_nameservers_output .= "\n-----------------------------------------------\n";
                     $show_nameservers_output .=   " Nameservers NOT configured for DNS forwarding\n";
                     $show_nameservers_output .=   "-----------------------------------------------\n";
                 }
                 if (@resolv_conf_split_line > 2) {
                     my @dhclient_resolv_files = `ls /etc/resolv.conf.dhclient-new-* 2>/dev/null`;
                     foreach my $each_dhcp_resolv_conf (@dhclient_resolv_files) {
                        chomp $each_dhcp_resolv_conf;
                        my @ns_dhclient_resolv=`grep "$resolv_conf_nameserver\$" $each_dhcp_resolv_conf`;
                        if ( @ns_dhclient_resolv > 0) {
                            my @dhclient_file_array = split(/-/, $each_dhcp_resolv_conf);
			    $resolv_nameserver_via = $dhclient_file_array[2];
                            chomp $resolv_nameserver_via;
                            $resolv_nameserver_via = 'dhcp ' . $resolv_nameserver_via;
                        }
                     }
                     # check here if resolv_nameserver_via is still system, if yes then search /etc/ppp/resolv-interface.conf
                     if ($resolv_nameserver_via eq "system") {
                       my @ppp_resolv_files = `ls /etc/ppp/resolv-*conf 2>/dev/null`;
                       foreach my $each_ppp_resolv_conf (@ppp_resolv_files) {
                         my @ns_ppp_resolv=`grep "$resolv_conf_nameserver\$" $each_ppp_resolv_conf`;
                         if ( @ns_ppp_resolv > 0) {
                           my @ppp_file_array = split(/-/, $each_ppp_resolv_conf);
                           @ppp_file_array = split(/\./, $ppp_file_array[1]);
                           $resolv_nameserver_via = $ppp_file_array[0];
                           chomp $resolv_nameserver_via;
                           $resolv_nameserver_via = 'ppp ' . $resolv_nameserver_via;
                         }
                       }
                     }
                  }

		  $show_nameservers_output .= "$resolv_conf_nameserver available via '$resolv_nameserver_via'\n";
	       }
	}
    $show_nameservers_output .= "\n";
    }
}

sub print_nameservers {
    print $show_nameservers_output;
}

sub wait_for_write {

    my $last_size = (stat($dnsmasq_log))[7];
    my $cnt=0;
    while(1) {
        system("usleep 10000");         # sleep for 0.01 second
        my $curr_size = (stat($dnsmasq_log))[7];
        if( $curr_size == $last_size ) {
            # Not modified
            $cnt++;
            last if($cnt > 1);
        } else {
            # Modified\n
            $cnt=0;
        }
        $last_size = $curr_size;
    }

}

#
# main
#
my ($clear_cache, $clear_all, $show_statistics, $show_nameservers);

GetOptions("clear-cache!"               => \$clear_cache,
           "clear-all!"                 => \$clear_all,
           "show-statistics!"           => \$show_statistics,
           "show-nameservers!"          => \$show_nameservers);

if (defined $clear_cache) {
    system("kill -1 `pidof dnsmasq`");
}

if (defined $clear_all) {
     system("/etc/init.d/dnsmasq restart >&/dev/null");
}

if (defined $show_statistics) {
    system("echo > $dnsmasq_log; kill -10 `pidof dnsmasq`");
    wait_for_write;
    get_cache_stats;
    get_nameserver_stats;
    print_stats;
}

if (defined $show_nameservers) {
    get_dns_nameservers;
    print_nameservers;
}

exit 0;

# end of file