mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2025-02-27 07:59:35 +01:00
286 lines
8.6 KiB
C
286 lines
8.6 KiB
C
|
/* Copyright (c) 2010, Jacob Appelbaum, Steven J. Murdoch.
|
||
|
|
* Copyright (c) 2010, The Tor Project, Inc. */
|
||
|
|
/* See LICENSE for licensing information */
|
||
|
|
|
||
|
|
/*
|
||
|
|
* tor-fw-helper is a tool for opening firewalls with NAT-PMP and UPnP; this
|
||
|
|
* tool is designed to be called by hand or by Tor by way of a exec() at a
|
||
|
|
* later date.
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include <stdio.h>
|
||
|
|
#include <stdint.h>
|
||
|
|
#include <stdlib.h>
|
||
|
|
#include <getopt.h>
|
||
|
|
#include <time.h>
|
||
|
|
|
||
|
|
#include "orconfig.h"
|
||
|
|
#include "tor-fw-helper.h"
|
||
|
|
#include "tor-fw-helper-natpmp.h"
|
||
|
|
#include "tor-fw-helper-upnp.h"
|
||
|
|
|
||
|
|
static void
|
||
|
|
usage(void)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "tor-fw-helper usage:\n"
|
||
|
|
" [-h|--help]\n"
|
||
|
|
" [-T|--Test]\n"
|
||
|
|
" [-v|--verbose]\n"
|
||
|
|
" [-g|--fetch-public-ip]\n"
|
||
|
|
" -i|--internal-or-port [TCP port]\n"
|
||
|
|
" [-e|--external-or-port [TCP port]]\n"
|
||
|
|
" [-d|--internal-dir-port [TCP port]\n"
|
||
|
|
" [-p|--external-dir-port [TCP port]]]\n");
|
||
|
|
}
|
||
|
|
|
||
|
|
/* Log commandline options */
|
||
|
|
static int
|
||
|
|
test_commandline_options(int argc, char **argv)
|
||
|
|
{
|
||
|
|
int i, retval;
|
||
|
|
FILE *logfile;
|
||
|
|
time_t now;
|
||
|
|
|
||
|
|
/* Open the log file */
|
||
|
|
logfile = fopen("tor-fw-helper.log", "a");
|
||
|
|
if (NULL == logfile)
|
||
|
|
return -1;
|
||
|
|
|
||
|
|
/* Send all commandline arguments to the file */
|
||
|
|
now = time(NULL);
|
||
|
|
retval = fprintf(logfile, "START: %s\n", ctime(&now));
|
||
|
|
for (i = 0; i < argc; i++) {
|
||
|
|
retval = fprintf(logfile, "ARG: %d: %s\n", i, argv[i]);
|
||
|
|
if (retval < 0)
|
||
|
|
goto error;
|
||
|
|
|
||
|
|
retval = fprintf(stdout, "ARG: %d: %s\n", i, argv[i]);
|
||
|
|
if (retval < 0)
|
||
|
|
goto error;
|
||
|
|
}
|
||
|
|
now = time(NULL);
|
||
|
|
retval = fprintf(logfile, "END: %s\n", ctime(&now));
|
||
|
|
|
||
|
|
/* Close and clean up */
|
||
|
|
retval = fclose(logfile);
|
||
|
|
return retval;
|
||
|
|
|
||
|
|
/* If there was an error during writing */
|
||
|
|
error:
|
||
|
|
fclose(logfile);
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
|
||
|
|
static void
|
||
|
|
tor_fw_fetch_public_ip(tor_fw_options_t *tor_fw_options,
|
||
|
|
miniupnpc_state_t *miniupnpc_state)
|
||
|
|
{
|
||
|
|
int r = 0;
|
||
|
|
r = tor_natpmp_fetch_public_ip(tor_fw_options);
|
||
|
|
if (tor_fw_options->verbose)
|
||
|
|
fprintf(stdout, "V: Attempts to fetch public ip (natpmp) resulted in: "
|
||
|
|
"%d\n", r);
|
||
|
|
|
||
|
|
if (r == 0)
|
||
|
|
tor_fw_options->public_ip_status = 1;
|
||
|
|
|
||
|
|
r = tor_upnp_fetch_public_ip(miniupnpc_state);
|
||
|
|
if (tor_fw_options->verbose)
|
||
|
|
fprintf(stdout, "V: Attempts to fetch public ip (upnp) resulted in: "
|
||
|
|
"%d\n", r);
|
||
|
|
|
||
|
|
if (r == 0)
|
||
|
|
tor_fw_options->public_ip_status = 1;
|
||
|
|
}
|
||
|
|
|
||
|
|
static void
|
||
|
|
tor_fw_add_or_port(tor_fw_options_t *tor_fw_options, miniupnpc_state_t
|
||
|
|
*miniupnpc_state)
|
||
|
|
{
|
||
|
|
int r = 0;
|
||
|
|
tor_fw_options->internal_port = tor_fw_options->private_or_port;
|
||
|
|
tor_fw_options->external_port = tor_fw_options->public_or_port;
|
||
|
|
|
||
|
|
r = tor_natpmp_add_tcp_mapping(tor_fw_options);
|
||
|
|
fprintf(stdout, "tor-fw-helper: Attempts to add ORPort mapping (natpmp)"
|
||
|
|
"resulted in: %d\n", r);
|
||
|
|
|
||
|
|
if (r == 0)
|
||
|
|
tor_fw_options->nat_pmp_status = 1;
|
||
|
|
|
||
|
|
r = tor_upnp_add_tcp_mapping(miniupnpc_state,
|
||
|
|
tor_fw_options->private_or_port,
|
||
|
|
tor_fw_options->public_or_port);
|
||
|
|
fprintf(stdout, "tor-fw-helper: Attempts to add ORPort mapping (upnp)"
|
||
|
|
"resulted in: %d\n", r);
|
||
|
|
|
||
|
|
if (r == 0)
|
||
|
|
tor_fw_options->upnp_status = 1;
|
||
|
|
}
|
||
|
|
|
||
|
|
static void
|
||
|
|
tor_fw_add_dir_port(tor_fw_options_t *tor_fw_options, miniupnpc_state_t
|
||
|
|
*miniupnpc_state)
|
||
|
|
{
|
||
|
|
int r = 0;
|
||
|
|
tor_fw_options->internal_port = tor_fw_options->private_dir_port;
|
||
|
|
tor_fw_options->external_port = tor_fw_options->public_dir_port;
|
||
|
|
|
||
|
|
r = tor_natpmp_add_tcp_mapping(tor_fw_options);
|
||
|
|
fprintf(stdout, "V: Attempts to add DirPort mapping (natpmp) resulted in: "
|
||
|
|
"%d\n", r);
|
||
|
|
|
||
|
|
r = tor_upnp_add_tcp_mapping(miniupnpc_state,
|
||
|
|
tor_fw_options->private_or_port,
|
||
|
|
tor_fw_options->public_or_port);
|
||
|
|
fprintf(stdout, "V: Attempts to add DirPort mapping (upnp) resulted in: "
|
||
|
|
"%d\n",
|
||
|
|
r);
|
||
|
|
}
|
||
|
|
|
||
|
|
int
|
||
|
|
main(int argc, char **argv)
|
||
|
|
{
|
||
|
|
int r = 0;
|
||
|
|
int c = 0;
|
||
|
|
|
||
|
|
tor_fw_options_t tor_fw_options = {0,0,0,0,0,0,0,0,0,0,0,0,0};
|
||
|
|
miniupnpc_state_t miniupnpc_state;
|
||
|
|
|
||
|
|
miniupnpc_state.init = 0;
|
||
|
|
|
||
|
|
while (1)
|
||
|
|
{
|
||
|
|
int option_index = 0;
|
||
|
|
static struct option long_options[] =
|
||
|
|
{
|
||
|
|
{"verbose", 0, 0, 'v'},
|
||
|
|
{"help", 0, 0, 'h'},
|
||
|
|
{"internal-or-port", 1, 0, 'i'},
|
||
|
|
{"external-or-port", 1, 0, 'e'},
|
||
|
|
{"internal-dir-port", 1, 0, 'd'},
|
||
|
|
{"external-dir-port", 1, 0, 'p'},
|
||
|
|
{"fetch-public-ip", 0, 0, 'g'},
|
||
|
|
{"test-commandline", 0, 0, 'T'},
|
||
|
|
{0, 0, 0, 0}
|
||
|
|
};
|
||
|
|
|
||
|
|
c = getopt_long(argc, argv, "vhi:e:d:p:gT",
|
||
|
|
long_options, &option_index);
|
||
|
|
if (c == -1)
|
||
|
|
break;
|
||
|
|
|
||
|
|
switch (c)
|
||
|
|
{
|
||
|
|
case 'v': tor_fw_options.verbose = 1; break;
|
||
|
|
case 'h': tor_fw_options.help = 1; usage(); exit(1); break;
|
||
|
|
case 'i': sscanf(optarg, "%hu", &tor_fw_options.private_or_port);
|
||
|
|
break;
|
||
|
|
case 'e': sscanf(optarg, "%hu", &tor_fw_options.public_or_port);
|
||
|
|
break;
|
||
|
|
case 'd': sscanf(optarg, "%hu", &tor_fw_options.private_dir_port);
|
||
|
|
break;
|
||
|
|
case 'p': sscanf(optarg, "%hu", &tor_fw_options.public_dir_port);
|
||
|
|
break;
|
||
|
|
case 'g': tor_fw_options.fetch_public_ip = 1; break;
|
||
|
|
case 'T': tor_fw_options.test_commandline = 1; break;
|
||
|
|
case '?': break;
|
||
|
|
default : fprintf(stderr, "Unknown option!\n"); usage(); exit(1);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if (tor_fw_options.verbose)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "V: tor-fw-helper version %s\n"
|
||
|
|
"V: We were called with the following arguments:\n"
|
||
|
|
"V: verbose = %d, help = %d, pub or port = %u, "
|
||
|
|
"priv or port = %u\n"
|
||
|
|
"V: pub dir port = %u, priv dir port = %u\n"
|
||
|
|
"V: fetch_public_ip = %u\n",
|
||
|
|
tor_fw_version, tor_fw_options.verbose, tor_fw_options.help,
|
||
|
|
tor_fw_options.private_or_port, tor_fw_options.public_or_port,
|
||
|
|
tor_fw_options.private_dir_port, tor_fw_options.public_dir_port,
|
||
|
|
tor_fw_options.fetch_public_ip);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (tor_fw_options.test_commandline) {
|
||
|
|
return test_commandline_options(argc, argv);
|
||
|
|
}
|
||
|
|
|
||
|
|
/* At the very least, we require an ORPort;
|
||
|
|
Given a private ORPort, we can ask for a mapping that matches the port
|
||
|
|
externally.
|
||
|
|
*/
|
||
|
|
if (!tor_fw_options.private_or_port && !tor_fw_options.fetch_public_ip)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "E: We require an ORPort or fetch_public_ip"
|
||
|
|
" request!\n");
|
||
|
|
usage();
|
||
|
|
exit(1);
|
||
|
|
} else {
|
||
|
|
/* When we only have one ORPort, internal/external are
|
||
|
|
set to be the same.*/
|
||
|
|
if (!tor_fw_options.public_or_port && tor_fw_options.private_or_port)
|
||
|
|
{
|
||
|
|
if (tor_fw_options.verbose)
|
||
|
|
fprintf(stdout, "V: We're setting public_or_port = "
|
||
|
|
"private_or_port.\n");
|
||
|
|
tor_fw_options.public_or_port = tor_fw_options.private_or_port;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (!tor_fw_options.private_dir_port)
|
||
|
|
{
|
||
|
|
if (tor_fw_options.verbose)
|
||
|
|
fprintf(stdout, "V: We have no DirPort; no hole punching for "
|
||
|
|
"DirPorts\n");
|
||
|
|
|
||
|
|
} else {
|
||
|
|
/* When we only have one DirPort, internal/external are
|
||
|
|
set to be the same.*/
|
||
|
|
if (!tor_fw_options.public_dir_port && tor_fw_options.private_dir_port)
|
||
|
|
{
|
||
|
|
if (tor_fw_options.verbose)
|
||
|
|
fprintf(stdout, "V: We're setting public_or_port = "
|
||
|
|
"private_or_port.\n");
|
||
|
|
|
||
|
|
tor_fw_options.public_dir_port = tor_fw_options.private_dir_port;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if (tor_fw_options.verbose)
|
||
|
|
{
|
||
|
|
fprintf(stdout, "V: pub or port = %u, priv or port = %u\n"
|
||
|
|
"V: pub dir port = %u, priv dir port = %u\n",
|
||
|
|
tor_fw_options.private_or_port, tor_fw_options.public_or_port,
|
||
|
|
tor_fw_options.private_dir_port,
|
||
|
|
tor_fw_options.public_dir_port);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (tor_fw_options.fetch_public_ip)
|
||
|
|
{
|
||
|
|
tor_fw_fetch_public_ip(&tor_fw_options, &miniupnpc_state);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (tor_fw_options.private_or_port)
|
||
|
|
{
|
||
|
|
tor_fw_add_or_port(&tor_fw_options, &miniupnpc_state);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (tor_fw_options.private_dir_port)
|
||
|
|
{
|
||
|
|
tor_fw_add_dir_port(&tor_fw_options, &miniupnpc_state);
|
||
|
|
}
|
||
|
|
|
||
|
|
r = (((tor_fw_options.nat_pmp_status | tor_fw_options.upnp_status)
|
||
|
|
|tor_fw_options.public_ip_status));
|
||
|
|
if (r > 0)
|
||
|
|
{
|
||
|
|
fprintf(stdout, "tor-fw-helper: SUCCESS\n");
|
||
|
|
} else {
|
||
|
|
fprintf(stderr, "tor-fw-helper: FAILURE\n");
|
||
|
|
}
|
||
|
|
|
||
|
|
exit(r);
|
||
|
|
}
|
||
|
|
|