noip: set ACLs from environment variables.

[preload-hacks] / noip.c

diff --git a/noip.c b/noip.c
index 735a58a7995f9033d86217b2c124508f37244036..2f7fd148800057910f2cce63154760b96887acc2 100644 (file)
--- a/noip.c
+++ b/noip.c
@@ -533,60 +533,65 @@ static void parse_acl_line(char **pp, aclnode ***tail)
   char *p = *pp;
   char *q;
 
   char *p = *pp;
   char *q;
 

-  SKIPSPC;
-  if (*p == '+') act = ALLOW;
-  else if (*p == '-') act = DENY;
-  else goto bad;
+  for (;;) {
+    SKIPSPC;
+    if (*p == '+') act = ALLOW;
+    else if (*p == '-') act = DENY;
+    else goto bad;

 
 

-  p++;
-  SKIPSPC;
-  if (KWMATCHP("any")) {
-    minaddr = 0;
-    maxaddr = 0xffffffff;
-    goto justone;
-  } else if (KWMATCHP("local")) {
-    parse_ports(&p, &minport, &maxport);
-    ACLNODE(*tail, act, 0, 0, minport, maxport);
-    ACLNODE(*tail, act, 0xffffffff, 0xffffffff, minport, maxport);
-    for (i = 0; i < n_local_ipaddrs; i++) {
-      minaddr = ntohl(local_ipaddrs[i].s_addr);
-      ACLNODE(*tail, act, minaddr, minaddr, minport, maxport);
-    }
-  } else {
-    if (*p == ':') {
+    p++;
+    SKIPSPC;
+    if (KWMATCHP("any")) {

       minaddr = 0;
       maxaddr = 0xffffffff;
       minaddr = 0;
       maxaddr = 0xffffffff;

+      goto justone;
+    } else if (KWMATCHP("local")) {
+      parse_ports(&p, &minport, &maxport);
+      ACLNODE(*tail, act, 0, 0, minport, maxport);
+      ACLNODE(*tail, act, 0xffffffff, 0xffffffff, minport, maxport);
+      for (i = 0; i < n_local_ipaddrs; i++) {
+       minaddr = ntohl(local_ipaddrs[i].s_addr);
+       ACLNODE(*tail, act, minaddr, minaddr, minport, maxport);
+      }

     } else {
     } else {

-      NEXTADDR(q, del);
-      if (inet_pton(AF_INET, q, &addr) <= 0) goto bad;
-      minaddr = ntohl(addr.s_addr);
-      RESCAN(del);
-      SKIPSPC;
-      if (*p == '-') {
-       p++;
+      if (*p == ':') {
+       minaddr = 0;
+       maxaddr = 0xffffffff;
+      } else {

        NEXTADDR(q, del);
        if (inet_pton(AF_INET, q, &addr) <= 0) goto bad;
        NEXTADDR(q, del);
        if (inet_pton(AF_INET, q, &addr) <= 0) goto bad;

+       minaddr = ntohl(addr.s_addr);

        RESCAN(del);
        RESCAN(del);

-       maxaddr = ntohl(addr.s_addr);
-      } else if (*p == '/') {
-       p++;
-       NEXTADDR(q, del);
-       if (strchr(q, '.')) {
+       SKIPSPC;
+       if (*p == '-') {
+         p++;
+         NEXTADDR(q, del);

          if (inet_pton(AF_INET, q, &addr) <= 0) goto bad;
          if (inet_pton(AF_INET, q, &addr) <= 0) goto bad;

-         mask = ntohl(addr.s_addr);
-       } else {
-         n = atoi(q);
-         mask = (~0ul << (32 - n)) & 0xffffffff;
-       }
-       RESCAN(del);
-       minaddr &= mask;
-       maxaddr = minaddr | (mask ^ 0xffffffff);
-      } else
-       maxaddr = minaddr;
+         RESCAN(del);
+         maxaddr = ntohl(addr.s_addr);
+       } else if (*p == '/') {
+         p++;
+         NEXTADDR(q, del);
+         if (strchr(q, '.')) {
+           if (inet_pton(AF_INET, q, &addr) <= 0) goto bad;
+           mask = ntohl(addr.s_addr);
+         } else {
+           n = atoi(q);
+           mask = (~0ul << (32 - n)) & 0xffffffff;
+         }
+         RESCAN(del);
+         minaddr &= mask;
+         maxaddr = minaddr | (mask ^ 0xffffffff);
+       } else
+         maxaddr = minaddr;
+      }
+    justone:
+      parse_ports(&p, &minport, &maxport);
+      ACLNODE(*tail, act, minaddr, maxaddr, minport, maxport);

     }
     }

-  justone:
-    parse_ports(&p, &minport, &maxport);
-    ACLNODE(*tail, act, minaddr, maxaddr, minport, maxport);
+    SKIPSPC;
+    if (*p != ',') break;
+    p++;

   }
   return;
 
   }
   return;
 


@@ -595,6 +600,17 @@ bad:
   return;
 }
 
   return;
 }
 

+static void parse_acl_env(const char *var, aclnode ***tail)
+{
+  char *p;
+
+  if ((p = getenv(var)) != 0) {
+    p = xstrdup(p);
+    parse_acl_line(&p, tail);
+    free(p);
+  }
+}
+

 static void readconfig(void)
 {
   FILE *fp;
 static void readconfig(void)
 {
   FILE *fp;


@@ -608,6 +624,8 @@ static void readconfig(void)
   if ((fp = fopen(p, "r")) == 0)
     goto done;
 
   if ((fp = fopen(p, "r")) == 0)
     goto done;
 

+  parse_acl_env("NOIP_REALBIND_BEFORE", &bind_tail);
+  parse_acl_env("NOIP_REALCONNECT_BEFORE", &connect_tail);

   while (fgets(buf, sizeof(buf), fp)) {
     n = strlen(buf);
     p = buf;
   while (fgets(buf, sizeof(buf), fp)) {
     n = strlen(buf);
     p = buf;


@@ -633,8 +651,13 @@ static void readconfig(void)
   fclose(fp);
 
 done:
   fclose(fp);
 
 done:

+  parse_acl_env("NOIP_REALBIND", &bind_tail);
+  parse_acl_env("NOIP_REALCONNECT", &connect_tail);
+  parse_acl_env("NOIP_REALBIND_AFTER", &bind_tail);
+  parse_acl_env("NOIP_REALCONNECT_AFTER", &connect_tail);

   *bind_tail = 0;
   *connect_tail = 0;
   *bind_tail = 0;
   *connect_tail = 0;

+  if (!sockdir) sockdir = getenv("NOIP_SOCKETDIR");

   if (!sockdir) {
     snprintf(buf, sizeof(buf), "%s/noip-%s", tmpdir(), user());
     sockdir = xstrdup(buf);
   if (!sockdir) {
     snprintf(buf, sizeof(buf), "%s/noip-%s", tmpdir(), user());
     sockdir = xstrdup(buf);