mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
116 lines
3.4 KiB
C
116 lines
3.4 KiB
C
/* Copyright (c) 2008 Victor Julien <victor@inliniac.net> */
|
|
|
|
/* Author: William Metcalf
|
|
*
|
|
*/
|
|
|
|
/* RespondReject is a threaded wrapper for sending Rejects
|
|
*
|
|
* TODO
|
|
* - RespondRejectFunc returns 1 on error, 0 on ok... why? For now it should
|
|
* just return 0 always, error handling is a TODO in the threading model (VJ)
|
|
*/
|
|
|
|
#include <pthread.h>
|
|
#include <sys/signal.h>
|
|
#include <libnet.h>
|
|
|
|
#include "vips.h"
|
|
#include "decode.h"
|
|
#include "packet-queue.h"
|
|
#include "threads.h"
|
|
#include "threadvars.h"
|
|
#include "tm-queuehandlers.h"
|
|
#include "tm-modules.h"
|
|
#include "action-globals.h"
|
|
|
|
#include "respond-reject.h"
|
|
#include "respond-reject-libnet11.h"
|
|
|
|
int RejectSendIPv4TCP(ThreadVars *, Packet *, void *);
|
|
int RejectSendIPv4ICMP(ThreadVars *, Packet *, void *);
|
|
int RejectSendIPv6TCP(ThreadVars *, Packet *, void *);
|
|
int RejectSendIPv6ICMP(ThreadVars *, Packet *, void *);
|
|
|
|
void TmModuleRespondRejectRegister (void) {
|
|
|
|
tmm_modules[TMM_RESPONDREJECT].name = "RespondReject";
|
|
tmm_modules[TMM_RESPONDREJECT].Init = NULL;
|
|
tmm_modules[TMM_RESPONDREJECT].Func = RespondRejectFunc;
|
|
tmm_modules[TMM_RESPONDREJECT].Deinit = NULL;
|
|
tmm_modules[TMM_RESPONDREJECT].RegisterTests = NULL;
|
|
}
|
|
|
|
int RespondRejectFunc(ThreadVars *tv, Packet *p, void *data, PacketQueue *pq) {
|
|
|
|
/* ACTION_REJECT defaults to rejecting the SRC */
|
|
if (p->action != ACTION_REJECT && p->action != ACTION_REJECT_DST &&
|
|
p->action != ACTION_REJECT_BOTH) {
|
|
return 0;
|
|
}
|
|
|
|
if (PKT_IS_IPV4(p)) {
|
|
if (PKT_IS_TCP(p)) {
|
|
return RejectSendIPv4TCP(tv, p, data);
|
|
} else if(PKT_IS_UDP(p)) {
|
|
return RejectSendIPv4ICMP(tv, p, data);
|
|
} else {
|
|
return 0;
|
|
}
|
|
} else if (PKT_IS_IPV6(p)) {
|
|
if (PKT_IS_TCP(p)) {
|
|
return RejectSendIPv6TCP(tv, p, data);
|
|
} else if(PKT_IS_UDP(p)){
|
|
return RejectSendIPv6ICMP(tv, p, data);
|
|
} else {
|
|
return 0;
|
|
}
|
|
} else {
|
|
/* we're only supporting IPv4 and IPv6 */
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
int RejectSendIPv4TCP(ThreadVars *tv, Packet *p, void *data) {
|
|
if (p->action == ACTION_REJECT) {
|
|
return RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_SRC);
|
|
} else if (p->action == ACTION_REJECT_DST) {
|
|
return RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_DST);
|
|
} else if(p->action == ACTION_REJECT_BOTH) {
|
|
if (RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_SRC) == 0 &&
|
|
RejectSendLibnet11L3IPv4TCP(tv, p, data, REJECT_DIR_DST) == 0) {
|
|
return 0;
|
|
} else {
|
|
return 1;
|
|
}
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int RejectSendIPv4ICMP(ThreadVars *tv, Packet *p, void *data) {
|
|
if (p->action == ACTION_REJECT) {
|
|
return RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_SRC);
|
|
} else if (p->action == ACTION_REJECT_DST) {
|
|
return RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_DST);
|
|
} else if(p->action == ACTION_REJECT_BOTH) {
|
|
if (RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_SRC) == 0 &&
|
|
RejectSendLibnet11L3IPv4ICMP(tv, p, data, REJECT_DIR_DST) == 0) {
|
|
return 0;
|
|
} else {
|
|
return 1;
|
|
}
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int RejectSendIPv6TCP(ThreadVars *tv, Packet *p, void *data) {
|
|
printf ("we would send a ipv6 tcp reset here\n");
|
|
return 1;
|
|
}
|
|
|
|
int RejectSendIPv6ICMP(ThreadVars *tv, Packet *p, void *data) {
|
|
printf ("we would send a ipv6 icmp reset here\n");
|
|
return 1;
|
|
}
|
|
|