3 * An evil proxy for TrIPE
5 * (c) 2001 Straylight/Edgeware
8 /*----- Licensing notice --------------------------------------------------*
10 * This file is part of Trivial IP Encryption (TrIPE).
12 * TrIPE is free software: you can redistribute it and/or modify it under
13 * the terms of the GNU General Public License as published by the Free
14 * Software Foundation; either version 3 of the License, or (at your
15 * option) any later version.
17 * TrIPE is distributed in the hope that it will be useful, but WITHOUT
18 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
19 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
22 * You should have received a copy of the GNU General Public License
23 * along with TrIPE. If not, see <https://www.gnu.org/licenses/>.
26 /*----- Header files ------------------------------------------------------*/
37 #include <sys/types.h>
42 #include <sys/socket.h>
43 #include <netinet/in.h>
44 #include <arpa/inet.h>
47 #include <mLib/alloc.h>
48 #include <mLib/dstr.h>
49 #include <mLib/fdflags.h>
50 #include <mLib/mdwopt.h>
51 #include <mLib/quis.h>
52 #include <mLib/report.h>
57 #include <catacomb/buf.h>
59 #include <catacomb/key.h>
61 #include <catacomb/mp.h>
62 #include <catacomb/mprand.h>
63 #include <catacomb/dh.h>
65 #include <catacomb/chacha20.h>
66 #include <catacomb/noise.h>
67 #include <catacomb/rand.h>
71 /*----- Data structures ---------------------------------------------------*/
79 typedef struct filter {
82 void (*func)(struct filter */*f*/, const octet */*buf*/, size_t /*sz*/);
86 typedef struct qnode {
91 /*----- Static variables --------------------------------------------------*/
97 static unsigned npeer = 0;
100 static const char *delim = ":";
102 #define PASS(f, buf, sz) ((f) ? (f)->func((f), (buf), (sz)) : (void)0)
103 #define RND(i) (rng->ops->range(rng, (i)))
105 /*----- Peer management ---------------------------------------------------*/
107 static void dopacket(int fd, unsigned mode, void *vv)
111 int r = read(fd, buf, sizeof(buf));
113 printf("recv from `%s'\n", p->name);
118 static void addpeer_common(const char *cmd, int af, unsigned ac, char **av)
120 struct addrinfo aihint = { 0 }, *ai0, *ai1;
121 int len = PKBUFSZ, yes = 1;
126 if (ac != 4) die(1, "syntax: %s:NAME:PORT:ADDR:PORT", cmd);
127 if (!key_bytag(&keys, av[0])) die(1, "no key named `%s'", av[0]);
129 p->name = xstrdup(av[0]);
130 aihint.ai_family = af;
131 aihint.ai_socktype = SOCK_DGRAM;
132 aihint.ai_flags = AI_ADDRCONFIG;
133 if ((err = getaddrinfo(av[2], av[3], &aihint, &ai1)) != 0)
134 die(1, "getaddrinfo(`%s', `%s'): %s", av[2], av[3], gai_strerror(err));
135 aihint.ai_family = ai1->ai_family;
136 aihint.ai_flags = AI_ADDRCONFIG | AI_PASSIVE;
137 if ((err = getaddrinfo(0, av[1], &aihint, &ai0)) != 0)
138 die(1, "getaddrinfo(passive, `%s'): %s", av[1], gai_strerror(err));
139 if ((fd = socket(ai1->ai_family, SOCK_DGRAM, ai1->ai_protocol)) < 0)
140 die(1, "socket: %s", strerror(errno));
141 if (ai1->ai_family == AF_INET6) {
142 if (setsockopt(fd, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)))
143 die(1, "setsockopt: %s", strerror(errno));
145 if (bind(fd, ai0->ai_addr, ai0->ai_addrlen))
146 die(1, "bind: %s", strerror(errno));
147 if (setsockopt(fd, SOL_SOCKET, SO_RCVBUF, &len, sizeof(len)) ||
148 setsockopt(fd, SOL_SOCKET, SO_SNDBUF, &len, sizeof(len)))
149 die(1, "setsockopt: %s", strerror(errno));
150 if (connect(fd, ai1->ai_addr, ai1->ai_addrlen))
151 die(1, "connect: %s", strerror(errno));
152 sel_initfile(&sel, &p->sf, fd, SEL_READ, dopacket, p);
154 freeaddrinfo(ai0); freeaddrinfo(ai1);
157 static void addpeer(unsigned ac, char **av)
158 { addpeer_common("peer", AF_UNSPEC, ac, av); }
159 static void addpeer4(unsigned ac, char **av)
160 { addpeer_common("peer4", AF_INET, ac, av); }
161 static void addpeer6(unsigned ac, char **av)
162 { addpeer_common("peer6", AF_INET6, ac, av); }
164 /*----- Fork filter -------------------------------------------------------*/
166 typedef struct forknode {
167 struct forknode *next;
171 typedef struct forkfilt {
176 static void dofork(filter *f, const octet *buf, size_t sz)
178 forkfilt *ff = f->state;
183 for (fn = ff->fn; fn; fn = fn->next) {
184 printf("fork branch %u of fork `%s'\n", i++, ff->name);
185 PASS(fn->f, buf, sz);
187 printf("fork branch %u of fork `%s'\n", i++, ff->name);
188 PASS(f->next, buf, sz);
191 static void addfork(filter *f, unsigned ac, char **av)
194 if (ac != 1) die(1, "syntax: filt:fork:NAME");
195 ff = CREATE(forkfilt);
196 ff->name = xstrdup(av[0]);
202 static void nextfork(unsigned ac, char **av)
210 if (ac < 1) die(1, "syntax: next:NAME:...");
211 for (i = 0; i < 2; i++) {
213 for (f = p->f; f; f = f->next) {
214 if (f->func != dofork) continue;
216 for (j = 0; j < ac; j++)
217 if (strcmp(av[j], ff->name) == 0) goto match;
220 fn = CREATE(forknode);
221 for (ffn = &ff->fn; *ffn; ffn = &(*ffn)->next);
230 /*----- Corrupt filter ----------------------------------------------------*/
232 typedef struct corrupt {
236 static void docorrupt(filter *f, const octet *buf, size_t sz)
238 corrupt *c = f->state;
242 while (!RND(c->p_corrupt)) {
243 puts("corrupt packet");
244 b[RND(sz)] ^= RND(256);
246 PASS(f->next, b, sz);
249 static void addcorrupt(filter *f, unsigned ac, char **av)
252 if (ac > 1) die(1, "syntax: filt:corrupt[:P-CORRUPT]");
254 if (ac > 0) c->p_corrupt = atoi(av[0]);
255 else c->p_corrupt = 5;
260 /*----- Drop filter -------------------------------------------------------*/
262 typedef struct drop {
266 static void dodrop(filter *f, const octet *buf, size_t sz)
270 if (!RND(d->p_drop)) puts("drop packet");
271 else PASS(f->next, buf, sz);
274 static void adddrop(filter *f, unsigned ac, char **av)
277 if (ac > 1) die(1, "syntax: filt:drop[:P-DROP]");
279 if (ac > 0) d->p_drop = atoi(av[0]);
285 /*----- Delay filter ------------------------------------------------------*/
287 typedef struct delaynode {
297 typedef struct delay {
305 static void dtimer(struct timeval *tv, void *vv);
307 static void dinsert(delaynode *dn)
311 unsigned long tdelta = RND(dn->d->t);
312 gettimeofday(&tv, 0);
313 TV_ADDL(&tv, &tv, 0, tdelta);
315 sel_addtimer(&sel, &dn->tm, &tv, dtimer, dn);
317 for (ta = tb = sel.timers; ta; ta = ta->next) {
318 ta = ta->next; if (!ta) break; assert(ta != tb);
319 ta = ta->next; if (!ta) break; assert(ta != tb);
322 printf(" delay %lu usecs", tdelta);
325 static void dsend(delaynode *dn, unsigned force)
331 fputs(" send...\n", stdout);
333 PASS(d->f->next, dn->buf, dn->sz);
334 fputs("delay ...", stdout);
343 sel_rmtimer(&ddn->tm);
344 sel_addtimer(&sel, &dn->tm, &ddn->tm.tv, dtimer, dn);
351 printf(" move id %u from slot %u to slot %u", ddn->seq, ddn->i, dn->i);
353 for (i = 0; i < d->n; i++) assert(d->q[i].buf);
354 fputs(" remove", stdout);
358 static void dtimer(struct timeval *tv, void *vv)
361 printf("delay timer peer `%s' id %u slot %u",
362 dn->d->f->p_from->name, dn->seq, dn->i);
364 dsend(dn, RND(dn->d->p_replay));
368 static void dodelay(filter *f, const octet *buf, size_t sz)
372 static unsigned seq = 0;
374 fputs("delay", stdout);
375 if (d->n == d->max) {
376 dn = &d->q[RND(d->n)];
377 printf(" force uid %u", dn->seq);
378 sel_rmtimer(&dn->tm);
385 printf(" new id %u in slot %u", dn->seq, dn->i);
386 dn->buf = xmalloc(sz);
388 memcpy(dn->buf, buf, sz);
393 static void adddelay(filter *f, unsigned ac, char **av)
398 if (ac < 1 || ac > 3) die(1, "syntax: filt:delay:QLEN[:MILLIS:P-REPLAY]");
400 d->max = atoi(av[0]);
401 if (ac > 1) d->t = strtoul(av[1], 0, 10);
404 if (ac > 2) d->p_replay = atoi(av[2]);
405 else d->p_replay = 20;
407 d->q = xmalloc(d->max * sizeof(delaynode));
411 for (i = 0; i < d->max; i++) {
419 /*----- Filters -----------------------------------------------------------*/
421 static void dosend(filter *f, const octet *buf, size_t sz)
423 printf("send to `%s'\n", f->p_to->name);
424 DISCARD(write(f->p_to->sf.fd, buf, sz));
427 static void addsend(filter *f, unsigned ac, char **av)
429 if (ac) die(1, "syntax: filt:send");
433 const struct filtab {
435 void (*func)(filter */*f*/, unsigned /*ac*/, char **/*av*/);
439 { "delay", adddelay },
441 { "corrupt", addcorrupt },
445 static void dofilter(peer *from, peer *to, unsigned ac, char **av)
447 filter **ff, *f = CREATE(filter);
448 const struct filtab *ft;
449 if (ac < 1) die(1, "syntax: {l,r,}filt:NAME:...");
454 for (ff = &from->f; *ff; ff = &(*ff)->next);
456 for (ft = filtab; ft->name; ft++)
457 if (strcmp(av[0], ft->name) == 0)
458 { ft->func(f, ac - 1, av + 1); return; }
459 die(1, "unknown filter `%s'", av[0]);
462 /*----- Flooding ----------------------------------------------------------*/
464 typedef struct flood {
472 static void setflood(flood *f);
474 static void floodtimer(struct timeval *tv, void *vv)
486 rng->ops->fill(rng, buf, sz);
487 if (f->type < 0x100) buf[0] = f->type;
488 puts("flood packet");
489 PASS(f->p->f, buf, sz);
493 static void setflood(flood *f)
496 gettimeofday(&tv, 0);
497 TV_ADDL(&tv, &tv, 0, RND(f->t));
498 sel_addtimer(&sel, &f->tm, &tv, floodtimer, f);
501 static void doflood(peer *p, unsigned ac, char **av)
504 if (ac > 3) die(1, "syntax: flood[:TYPE:MILLIS:SIZE]");
507 if (ac > 0) f->type = strtoul(av[0], 0, 16);
508 else f->type = 0x100;
509 if (ac > 1) f->t = atoi(av[1]);
511 if (ac > 2) f->sz = atoi(av[2]);
517 /*----- Configuration commands --------------------------------------------*/
519 static void parse(char *p);
521 static void addflood(unsigned ac, char **av) {
522 doflood(&peers[0], ac, av);
523 doflood(&peers[1], ac, av);
525 static void addlflood(unsigned ac, char **av) {
526 doflood(&peers[0], ac, av);
528 static void addrflood(unsigned ac, char **av) {
529 doflood(&peers[1], ac, av);
532 static void addfilter(unsigned ac, char **av) {
533 dofilter(&peers[0], &peers[1], ac, av);
534 dofilter(&peers[1], &peers[0], ac, av);
536 static void addlfilter(unsigned ac, char **av) {
537 dofilter(&peers[0], &peers[1], ac, av);
539 static void addrfilter(unsigned ac, char **av) {
540 dofilter(&peers[1], &peers[0], ac, av);
543 static void include(unsigned ac, char **av)
547 if (!ac) die(1, "syntax: include:FILE:...");
549 if ((fp = fopen(*av, "r")) == 0)
550 die(1, "fopen `%s': %s", *av, strerror(errno));
551 while (dstr_putline(&d, fp) != EOF) { parse(d.buf); DRESET(&d); }
557 const struct cmdtab {
559 void (*func)(unsigned /*ac*/, char **/*av*/);
562 { "peer4", addpeer4 },
563 { "peer6", addpeer6 },
564 { "include", include },
565 { "filt", addfilter },
566 { "lfilt", addlfilter },
567 { "rfilt", addrfilter },
568 { "next", nextfork },
569 { "flood", addflood },
570 { "lflood", addlflood },
571 { "rflood", addrflood },
577 static void parse(char *p)
581 const struct cmdtab *ct;
583 p = strtok(p, delim);
584 if (!p || *p == '#') return;
587 p = strtok(0, delim);
588 } while (p && c < AVMAX - 1);
590 for (ct = cmdtab; ct->name; ct++) {
591 if (strcmp(ct->name, v[0]) == 0) {
592 ct->func(c - 1, v + 1);
596 die(1, "unknown command `%s'", v[0]);
599 /*----- Main driver -------------------------------------------------------*/
601 static void version(FILE *fp)
602 { pquis(fp, "$, TrIPE version " VERSION "\n"); }
604 static void usage(FILE *fp)
605 { pquis(fp, "Usage: $ [-d CHAR] [-k KEYRING] DIRECTIVE...\n"); }
607 static void help(FILE *fp)
615 -h, --help Show this help text.\n\
616 -v, --version Show the version number.\n\
617 -u, --usage Show terse usage summary.\n\
619 -d, --delimiter=CHAR Use CHAR rather than `:' as delimiter.\n\
620 -k, --keyring=FILE Fetch keys from FILE.\n\
623 peer{,4,6}:NAME:LOCAL-PORT:REMOTE-ADDR:REMOTE-PORT\n\
625 {,l,r}filt:FILTER:ARGS:...\n\
627 {,l,r}flood:TYPE:MILLIS:SIZE\n\
632 delay:QLEN[:MILLIS:P-REPLAY]\n\
634 corrupt[:P-CORRUPT]\n",
638 int main(int argc, char *argv[])
640 const char *kfname = "keyring.pub";
644 static octet zero[CHACHA_NONCESZ];
650 static const struct option opt[] = {
651 { "help", 0, 0, 'h' },
652 { "version", 0, 0, 'v' },
653 { "usage", 0, 0, 'u' },
654 { "delimiter", OPTF_ARGREQ, 0, 'd' },
655 { "keyring", OPTF_ARGREQ, 0, 'k' },
658 if ((i = mdwopt(argc, argv, "hvud:k:", opt, 0, 0, 0)) < 0) break;
660 case 'h': help(stdout); exit(0);
661 case 'v': version(stdout); exit(0);
662 case 'u': usage(stdout); exit(0);
664 if (!optarg[0] || optarg[1])
665 die(1, "delimiter must be a single character");
668 case 'k': kfname = optarg; break;
669 default: f |= f_bogus; break;
672 if (f & f_bogus) { usage(stderr); exit(1); }
674 rand_noisesrc(RAND_GLOBAL, &noise_source);
675 rand_seed(RAND_GLOBAL, 256);
676 rand_get(RAND_GLOBAL, buf, sizeof(buf));
677 rng = chacha20_rand(buf, sizeof(buf), zero);
679 if (key_open(&keys, kfname, KOPEN_READ, key_moan, 0))
680 die(1, "couldn't open `%s': %s", kfname, strerror(errno));
681 for (i = optind; i < argc; i++) parse(argv[i]);
682 if (npeer != 2) die(1, "need two peers");
684 if (sel_select(&sel) && errno != EINTR)
685 die(1, "select failed: %s", strerror(errno));
691 /*----- That's all, folks -------------------------------------------------*/