/* Copyright (c) 2008 Victor Julien */ /* Author: William Metcalf * */ /* RespondReject is a threaded wrapper for sending Rejects * * TODO * - RespondRejectFunc returns 1 on error, 0 on ok... why? For now it should * just return 0 always, error handling is a TODO in the threading model (VJ) */ #include #include #include #include "vips.h" #include "decode.h" #include "packet-queue.h" #include "threads.h" #include "threadvars.h" #include "tm-queuehandlers.h" #include "tm-modules.h" #include "action-globals.h" #include "respond-reject.h" #include "respond-reject-libnet11.h" int RejectSendIPv4TCP(ThreadVars *, Packet *, void *); int RejectSendIPv4ICMP(ThreadVars *, Packet *, void *); int RejectSendIPv6TCP(ThreadVars *, Packet *, void *); int RejectSendIPv6ICMP(ThreadVars *, Packet *, void *); void TmModuleRespondRejectRegister (void) { tmm_modules[TMM_RESPONDREJECT].name = "RespondReject"; tmm_modules[TMM_RESPONDREJECT].Init = NULL; tmm_modules[TMM_RESPONDREJECT].Func = RespondRejectFunc; tmm_modules[TMM_RESPONDREJECT].Deinit = NULL; tmm_modules[TMM_RESPONDREJECT].RegisterTests = NULL; } int RespondRejectFunc(ThreadVars *tv, Packet *p, void *data, PacketQueue *pq) { /* ACTION_REJECT defaults to rejecting the SRC */ if (p->action != ACTION_REJECT && p->action != ACTION_REJECT_DST && p->action != ACTION_REJECT_BOTH) { return 0; } if (PKT_IS_IPV4(p)) { if (PKT_IS_TCP(p)) { return RejectSendIPv4TCP(tv, p, data); } else if(PKT_IS_UDP(p)) { return RejectSendIPv4ICMP(tv, p, data); } else { return 0; } } else if (PKT_IS_IPV6(p)) { if (PKT_IS_TCP(p)) { return RejectSendIPv6TCP(tv, p, data); } else if(PKT_IS_UDP(p)){ return RejectSendIPv6ICMP(tv, p, data); } else { return 0; } } else { /* we're only supporting IPv4 and IPv6 */ return 0; } } int RejectSendIPv4TCP(ThreadVars *tv, Packet *p, void *data) { if (p->action == ACTION_REJECT) { return RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_SRC); } else if (p->action == ACTION_REJECT_DST) { return RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_DST); } else if(p->action == ACTION_REJECT_BOTH) { if (RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_SRC) == 0 && RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_DST) == 0) { return 0; } else { return 1; } } return 0; } int RejectSendIPv4ICMP(ThreadVars *tv, Packet *p, void *data) { if (p->action == ACTION_REJECT) { return RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_SRC); } else if (p->action == ACTION_REJECT_DST) { return RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_DST); } else if(p->action == ACTION_REJECT_BOTH) { if (RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_SRC) == 0 && RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_DST) == 0) { return 0; } else { return 1; } } return 0; } int RejectSendIPv6TCP(ThreadVars *tv, Packet *p, void *data) { printf ("we would send a ipv6 tcp reset here\n"); return 1; } int RejectSendIPv6ICMP(ThreadVars *tv, Packet *p, void *data) { printf ("we would send a ipv6 icmp reset here\n"); return 1; }