X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=secnet.h;h=f5b96b6915a53eff81069802a28ad500ebfc9348;hb=refs%2Ftags%2Fv0.1.1;hp=db3bee22da322090ac88af4d9d7d38b9abf089f4;hpb=4efd681a66c15bc6f81eefc69396669e165e5e0f;p=secnet.git diff --git a/secnet.h b/secnet.h index db3bee2..f5b96b6 100644 --- a/secnet.h +++ b/secnet.h @@ -3,14 +3,14 @@ #ifndef secnet_h #define secnet_h +#include "config.h" #include -#include #include #include #include +#include +#include #include -#include "config.h" - typedef char *string_t; typedef enum {False,True} bool_t; @@ -24,6 +24,7 @@ typedef enum {False,True} bool_t; struct subnet { uint32_t prefix; uint32_t mask; + uint32_t len; }; struct subnet_list { @@ -33,12 +34,21 @@ struct subnet_list { /* Match an address (in HOST byte order) with a subnet list. Returns True if matched. */ -extern bool_t subnet_match(struct subnet_list *list, uint32_t address); +extern bool_t subnet_match(struct subnet *s, uint32_t address); +extern bool_t subnet_matches_list(struct subnet_list *list, uint32_t address); +extern bool_t subnets_intersect(struct subnet a, struct subnet b); +extern bool_t subnet_intersects_with_list(struct subnet a, + struct subnet_list *b); +extern bool_t subnet_lists_intersect(struct subnet_list *a, + struct subnet_list *b); /***** END of shared types *****/ /***** CONFIGURATION support *****/ +extern bool_t just_check_config; /* If True then we're going to exit after + reading the configuration file */ + typedef struct dict dict_t; /* Configuration dictionary */ typedef struct closure closure_t; typedef struct item item_t; @@ -179,10 +189,11 @@ extern void register_for_poll(void *st, beforepoll_fn *before, #define PHASE_GETOPTS 1 /* Process command-line arguments */ #define PHASE_READCONFIG 2 /* Parse and process configuration file */ #define PHASE_SETUP 3 /* Process information in configuration */ -#define PHASE_DROPPRIV 4 /* Last chance for privileged operations */ -#define PHASE_RUN 5 -#define PHASE_SHUTDOWN 6 /* About to die; delete key material, etc. */ -#define NR_PHASES 7 +#define PHASE_GETRESOURCES 4 /* Obtain all external resources */ +#define PHASE_DROPPRIV 5 /* Last chance for privileged operations */ +#define PHASE_RUN 6 +#define PHASE_SHUTDOWN 7 /* About to die; delete key material, etc. */ +#define NR_PHASES 8 typedef void hook_fn(void *self, uint32_t newphase); bool_t add_hook(uint32_t phase, hook_fn *f, void *state); @@ -344,12 +355,20 @@ struct transform_if { /* NETLINK interface */ -/* Used by netlink to deliver to site, and by site to deliver to netlink. - cid is the client identifier returned by netlink_regnets_fn */ +/* Used by netlink to deliver to site, and by site to deliver to + netlink. cid is the client identifier returned by + netlink_regnets_fn. If buf has size 0 then the function is just + being called for its site-effects (eg. making the site code attempt + to bring up a network link) */ typedef void netlink_deliver_fn(void *st, void *cid, struct buffer_if *buf); /* site code can tell netlink when outgoing packets will be dropped, - so netlink can generate appropriate ICMP */ -typedef void netlink_can_deliver_fn(void *st, void *cid, bool_t can_deliver); + so netlink can generate appropriate ICMP and make routing decisions */ +#define LINK_QUALITY_DOWN 0 /* No chance of a packet being delivered */ +#define LINK_QUALITY_DOWN_STALE_ADDRESS 1 /* Link down, old address information */ +#define LINK_QUALITY_DOWN_CURRENT_ADDRESS 2 /* Link down, current address information */ +#define LINK_QUALITY_UP 3 /* Link active */ +#define MAXIMUM_LINK_QUALITY 3 +typedef void netlink_link_quality_fn(void *st, void *cid, uint32_t quality); /* Register for packets from specified networks. Return value is client identifier. */ typedef void *netlink_regnets_fn(void *st, struct subnet_list *networks, @@ -361,7 +380,7 @@ struct netlink_if { void *st; netlink_regnets_fn *regnets; netlink_deliver_fn *deliver; - netlink_can_deliver_fn *set_delivery; + netlink_link_quality_fn *set_quality; }; /* DH interface */