2007-03-22 01:14:56 +01:00
|
|
|
#
|
2007-03-28 18:19:35 +02:00
|
|
|
# Shorewall-perl 3.9 -- /usr/share/shorewall-perl/Shorewall/IPAddrs.pm
|
2007-03-22 01:14:56 +01:00
|
|
|
#
|
|
|
|
# This program is under GPL [http://www.gnu.org/copyleft/gpl.htm]
|
|
|
|
#
|
|
|
|
# (c) 2007 - Tom Eastep (teastep@shorewall.net)
|
|
|
|
#
|
|
|
|
# Complete documentation is available at http://shorewall.net
|
|
|
|
#
|
|
|
|
# This program is free software; you can redistribute it and/or modify
|
|
|
|
# it under the terms of Version 2 of the GNU General Public License
|
|
|
|
# as published by the Free Software Foundation.
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
|
# along with this program; if not, write to the Free Software
|
|
|
|
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA
|
|
|
|
#
|
2007-04-19 01:59:03 +02:00
|
|
|
# This module provides interfaces for dealing with IPv4 addresses.
|
|
|
|
#
|
2007-03-22 01:14:56 +01:00
|
|
|
package Shorewall::IPAddrs;
|
|
|
|
require Exporter;
|
|
|
|
use Shorewall::Common;
|
2007-03-29 19:36:04 +02:00
|
|
|
use Shorewall::Config;
|
2007-03-22 01:14:56 +01:00
|
|
|
|
|
|
|
use strict;
|
|
|
|
|
|
|
|
our @ISA = qw(Exporter);
|
2007-05-11 17:39:11 +02:00
|
|
|
our @EXPORT = qw( ALLIPv4
|
|
|
|
|
2007-05-08 21:05:25 +02:00
|
|
|
validate_address
|
2007-05-08 20:25:16 +02:00
|
|
|
validate_net
|
|
|
|
validate_range
|
2007-03-23 22:24:28 +01:00
|
|
|
ip_range_explicit
|
2007-05-11 17:39:11 +02:00
|
|
|
|
|
|
|
@allipv4
|
|
|
|
@rfc1918_networks
|
2007-03-22 01:14:56 +01:00
|
|
|
);
|
|
|
|
our @EXPORT_OK = qw( );
|
|
|
|
our @VERSION = 1.00;
|
|
|
|
|
2007-05-11 17:39:11 +02:00
|
|
|
#
|
|
|
|
# Some IPv4 useful stuff
|
|
|
|
#
|
|
|
|
our @allipv4 = ( '0.0.0.0/0' );
|
|
|
|
|
|
|
|
use constant { ALLIPv4 => '0.0.0.0/0' };
|
|
|
|
|
|
|
|
our @rfc1918_networks = ( "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16" );
|
|
|
|
|
2007-03-22 01:14:56 +01:00
|
|
|
sub valid_address( $ ) {
|
|
|
|
my $address = $_[0];
|
|
|
|
|
|
|
|
my @address = split /\./, $address;
|
|
|
|
return 0 unless @address == 4;
|
|
|
|
for my $a ( @address ) {
|
|
|
|
return 0 unless $a =~ /^\d+$/ && $a < 256;
|
|
|
|
}
|
|
|
|
|
|
|
|
1;
|
|
|
|
}
|
|
|
|
|
2007-05-08 21:05:25 +02:00
|
|
|
sub validate_address( $ ) {
|
2007-05-15 22:02:42 +02:00
|
|
|
my $addr = $_[0];
|
|
|
|
|
|
|
|
unless ( valid_address $addr ) {
|
|
|
|
fatal_error "Unknown Host ($addr)" unless defined gethostbyname $addr;
|
2007-05-08 21:05:25 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2007-05-08 20:25:16 +02:00
|
|
|
sub validate_net( $ ) {
|
2007-05-20 17:14:40 +02:00
|
|
|
my ($net, $vlsm, $rest) = split( '/', $_[0], 3 );
|
2007-05-08 20:25:16 +02:00
|
|
|
|
|
|
|
if ( defined $vlsm ) {
|
2007-05-20 17:14:40 +02:00
|
|
|
fatal_error "Invalid VLSM ($vlsm)" unless $vlsm =~ /^\d+$/ && $vlsm <= 32;
|
|
|
|
fatal_error "Invalid Network address ($_[0])" if defined $rest;
|
|
|
|
fatal_error "Invalid IP address ($net)" unless valid_address $net;
|
2007-05-08 21:05:25 +02:00
|
|
|
} else {
|
2007-05-20 17:14:40 +02:00
|
|
|
fatal_error "Invalid Network address ($_[0])" if $_[0] =~ '/' || ! defined $net;
|
2007-05-08 21:05:25 +02:00
|
|
|
validate_address $net;
|
2007-05-08 20:25:16 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2007-03-22 01:14:56 +01:00
|
|
|
sub decodeaddr( $ ) {
|
|
|
|
my $address = $_[0];
|
|
|
|
|
|
|
|
my @address = split /\./, $address;
|
|
|
|
|
|
|
|
my $result = shift @address;
|
2007-03-27 01:17:46 +02:00
|
|
|
|
2007-03-22 01:14:56 +01:00
|
|
|
for my $a ( @address ) {
|
|
|
|
$result = ( $result << 8 ) | $a;
|
|
|
|
}
|
|
|
|
|
|
|
|
$result;
|
|
|
|
}
|
|
|
|
|
|
|
|
sub encodeaddr( $ ) {
|
|
|
|
my $addr = $_[0];
|
|
|
|
my $result = $addr & 0xff;
|
|
|
|
|
|
|
|
for my $i ( 1..3 ) {
|
|
|
|
my $a = ($addr = $addr >> 8) & 0xff;
|
|
|
|
$result = "$a.$result";
|
|
|
|
}
|
|
|
|
|
|
|
|
$result;
|
|
|
|
}
|
|
|
|
|
2007-05-08 20:25:16 +02:00
|
|
|
sub validate_range( $$ ) {
|
|
|
|
my ( $low, $high ) = @_;
|
|
|
|
|
|
|
|
fatal_error "Invalid IP address ( $low )" unless valid_address $low;
|
|
|
|
fatal_error "Invalid IP address ( $high )" unless valid_address $high;
|
|
|
|
|
|
|
|
my $first = decodeaddr $low;
|
|
|
|
my $last = decodeaddr $high;
|
|
|
|
|
|
|
|
fatal_error "Invalid IP Range ( $low-$high )" unless $first <= $last;
|
|
|
|
}
|
|
|
|
|
2007-03-22 01:14:56 +01:00
|
|
|
sub ip_range_explicit( $ ) {
|
|
|
|
my $range = $_[0];
|
|
|
|
my @result;
|
|
|
|
|
|
|
|
my ( $low, $high ) = split /-/, $range;
|
|
|
|
|
|
|
|
fatal_error "Invalid IP address ( $low )" unless valid_address $low;
|
|
|
|
|
|
|
|
push @result, $low;
|
|
|
|
|
|
|
|
if ( defined $high ) {
|
|
|
|
fatal_error "Invalid IP address ( $high )" unless valid_address $high;
|
2007-03-27 01:17:46 +02:00
|
|
|
|
2007-03-22 01:14:56 +01:00
|
|
|
my $first = decodeaddr $low;
|
|
|
|
my $last = decodeaddr $high;
|
2007-03-27 01:17:46 +02:00
|
|
|
|
2007-03-22 01:14:56 +01:00
|
|
|
fatal_error "Invalid IP Range ( $range )" unless $first <= $last;
|
|
|
|
|
|
|
|
while ( ++$first <= $last ) {
|
|
|
|
push @result, encodeaddr( $first );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
@result;
|
|
|
|
}
|
|
|
|
|
|
|
|
1;
|