| /* dnsmasq is Copyright (c) 2000-2014 Simon Kelley |
| |
| This program is free software; you can redistribute it and/or modify |
| it under the terms of the GNU General Public License as published by |
| the Free Software Foundation; version 2 dated June, 1991, or |
| (at your option) version 3 dated 29 June, 2007. |
| |
| This program is distributed in the hope that it will be useful, |
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| GNU General Public License for more details. |
| |
| You should have received a copy of the GNU General Public License |
| along with this program. If not, see <http://www.gnu.org/licenses/>. |
| */ |
| |
| /* define this to get facilitynames */ |
| #define SYSLOG_NAMES |
| #include "dnsmasq.h" |
| #include <setjmp.h> |
| |
| static volatile int mem_recover = 0; |
| static jmp_buf mem_jmp; |
| static int one_file(char *file, int hard_opt); |
| |
| /* Solaris headers don't have facility names. */ |
| #ifdef HAVE_SOLARIS_NETWORK |
| static const struct { |
| char *c_name; |
| unsigned int c_val; |
| } facilitynames[] = { |
| { "kern", LOG_KERN }, |
| { "user", LOG_USER }, |
| { "mail", LOG_MAIL }, |
| { "daemon", LOG_DAEMON }, |
| { "auth", LOG_AUTH }, |
| { "syslog", LOG_SYSLOG }, |
| { "lpr", LOG_LPR }, |
| { "news", LOG_NEWS }, |
| { "uucp", LOG_UUCP }, |
| { "audit", LOG_AUDIT }, |
| { "cron", LOG_CRON }, |
| { "local0", LOG_LOCAL0 }, |
| { "local1", LOG_LOCAL1 }, |
| { "local2", LOG_LOCAL2 }, |
| { "local3", LOG_LOCAL3 }, |
| { "local4", LOG_LOCAL4 }, |
| { "local5", LOG_LOCAL5 }, |
| { "local6", LOG_LOCAL6 }, |
| { "local7", LOG_LOCAL7 }, |
| { NULL, 0 } |
| }; |
| #endif |
| |
| #ifndef HAVE_GETOPT_LONG |
| struct myoption { |
| const char *name; |
| int has_arg; |
| int *flag; |
| int val; |
| }; |
| #endif |
| |
| #define OPTSTRING "951yZDNLERKzowefnbvhdkqr:m:p:c:l:s:i:t:u:g:a:x:S:C:A:T:H:Q:I:B:F:G:O:M:X:V:U:j:P:J:W:Y:2:4:6:7:8:0:3:" |
| |
| /* options which don't have a one-char version */ |
| #define LOPT_RELOAD 256 |
| #define LOPT_NO_NAMES 257 |
| #define LOPT_TFTP 258 |
| #define LOPT_SECURE 259 |
| #define LOPT_PREFIX 260 |
| #define LOPT_PTR 261 |
| #define LOPT_BRIDGE 262 |
| #define LOPT_TFTP_MAX 263 |
| #define LOPT_FORCE 264 |
| #define LOPT_NOBLOCK 265 |
| #define LOPT_LOG_OPTS 266 |
| #define LOPT_MAX_LOGS 267 |
| #define LOPT_CIRCUIT 268 |
| #define LOPT_REMOTE 269 |
| #define LOPT_SUBSCR 270 |
| #define LOPT_INTNAME 271 |
| #define LOPT_BANK 272 |
| #define LOPT_DHCP_HOST 273 |
| #define LOPT_APREF 274 |
| #define LOPT_OVERRIDE 275 |
| #define LOPT_TFTPPORTS 276 |
| #define LOPT_REBIND 277 |
| #define LOPT_NOLAST 278 |
| #define LOPT_OPTS 279 |
| #define LOPT_DHCP_OPTS 280 |
| #define LOPT_MATCH 281 |
| #define LOPT_BROADCAST 282 |
| #define LOPT_NEGTTL 283 |
| #define LOPT_ALTPORT 284 |
| #define LOPT_SCRIPTUSR 285 |
| #define LOPT_LOCAL 286 |
| #define LOPT_NAPTR 287 |
| #define LOPT_MINPORT 288 |
| #define LOPT_DHCP_FQDN 289 |
| #define LOPT_CNAME 290 |
| #define LOPT_PXE_PROMT 291 |
| #define LOPT_PXE_SERV 292 |
| #define LOPT_TEST 293 |
| #define LOPT_TAG_IF 294 |
| #define LOPT_PROXY 295 |
| #define LOPT_GEN_NAMES 296 |
| #define LOPT_MAXTTL 297 |
| #define LOPT_NO_REBIND 298 |
| #define LOPT_LOC_REBND 299 |
| #define LOPT_ADD_MAC 300 |
| #define LOPT_DNSSEC 301 |
| #define LOPT_INCR_ADDR 302 |
| #define LOPT_CONNTRACK 303 |
| #define LOPT_FQDN 304 |
| #define LOPT_LUASCRIPT 305 |
| #define LOPT_RA 306 |
| #define LOPT_DUID 307 |
| #define LOPT_HOST_REC 308 |
| #define LOPT_TFTP_LC 309 |
| #define LOPT_RR 310 |
| #define LOPT_CLVERBIND 311 |
| #define LOPT_MAXCTTL 312 |
| #define LOPT_AUTHZONE 313 |
| #define LOPT_AUTHSERV 314 |
| #define LOPT_AUTHTTL 315 |
| #define LOPT_AUTHSOA 316 |
| #define LOPT_AUTHSFS 317 |
| #define LOPT_AUTHPEER 318 |
| #define LOPT_IPSET 319 |
| #define LOPT_SYNTH 320 |
| #ifdef OPTION6_PREFIX_CLASS |
| #define LOPT_PREF_CLSS 321 |
| #endif |
| #define LOPT_RELAY 323 |
| #define LOPT_RA_PARAM 324 |
| #define LOPT_ADD_SBNET 325 |
| #define LOPT_QUIET_DHCP 326 |
| #define LOPT_QUIET_DHCP6 327 |
| #define LOPT_QUIET_RA 328 |
| #define LOPT_SEC_VALID 329 |
| #define LOPT_TRUST_ANCHOR 330 |
| #define LOPT_DNSSEC_DEBUG 331 |
| #define LOPT_REV_SERV 332 |
| #define LOPT_SERVERS_FILE 333 |
| #define LOPT_DNSSEC_CHECK 334 |
| #define LOPT_LOCAL_SERVICE 335 |
| #define LOPT_DNSSEC_TIME 336 |
| #define LOPT_LOOP_DETECT 337 |
| #define LOPT_IGNORE_ADDR 338 |
| #define LOPT_MINCTTL 339 |
| #define LOPT_DHCP_INOTIFY 340 |
| |
| #ifdef HAVE_GETOPT_LONG |
| static const struct option opts[] = |
| #else |
| static const struct myoption opts[] = |
| #endif |
| { |
| { "version", 0, 0, 'v' }, |
| { "no-hosts", 0, 0, 'h' }, |
| { "no-poll", 0, 0, 'n' }, |
| { "help", 0, 0, 'w' }, |
| { "no-daemon", 0, 0, 'd' }, |
| { "log-queries", 2, 0, 'q' }, |
| { "user", 2, 0, 'u' }, |
| { "group", 2, 0, 'g' }, |
| { "resolv-file", 2, 0, 'r' }, |
| { "servers-file", 1, 0, LOPT_SERVERS_FILE }, |
| { "mx-host", 1, 0, 'm' }, |
| { "mx-target", 1, 0, 't' }, |
| { "cache-size", 2, 0, 'c' }, |
| { "port", 1, 0, 'p' }, |
| { "dhcp-leasefile", 2, 0, 'l' }, |
| { "dhcp-lease", 1, 0, 'l' }, |
| { "dhcp-host", 1, 0, 'G' }, |
| { "dhcp-range", 1, 0, 'F' }, |
| { "dhcp-option", 1, 0, 'O' }, |
| { "dhcp-boot", 1, 0, 'M' }, |
| { "domain", 1, 0, 's' }, |
| { "domain-suffix", 1, 0, 's' }, |
| { "interface", 1, 0, 'i' }, |
| { "listen-address", 1, 0, 'a' }, |
| { "local-service", 0, 0, LOPT_LOCAL_SERVICE }, |
| { "bogus-priv", 0, 0, 'b' }, |
| { "bogus-nxdomain", 1, 0, 'B' }, |
| { "ignore-address", 1, 0, LOPT_IGNORE_ADDR }, |
| { "selfmx", 0, 0, 'e' }, |
| { "filterwin2k", 0, 0, 'f' }, |
| { "pid-file", 2, 0, 'x' }, |
| { "strict-order", 0, 0, 'o' }, |
| { "server", 1, 0, 'S' }, |
| { "rev-server", 1, 0, LOPT_REV_SERV }, |
| { "local", 1, 0, LOPT_LOCAL }, |
| { "address", 1, 0, 'A' }, |
| { "conf-file", 2, 0, 'C' }, |
| { "no-resolv", 0, 0, 'R' }, |
| { "expand-hosts", 0, 0, 'E' }, |
| { "localmx", 0, 0, 'L' }, |
| { "local-ttl", 1, 0, 'T' }, |
| { "no-negcache", 0, 0, 'N' }, |
| { "addn-hosts", 1, 0, 'H' }, |
| { "query-port", 1, 0, 'Q' }, |
| { "except-interface", 1, 0, 'I' }, |
| { "no-dhcp-interface", 1, 0, '2' }, |
| { "domain-needed", 0, 0, 'D' }, |
| { "dhcp-lease-max", 1, 0, 'X' }, |
| { "bind-interfaces", 0, 0, 'z' }, |
| { "read-ethers", 0, 0, 'Z' }, |
| { "alias", 1, 0, 'V' }, |
| { "dhcp-vendorclass", 1, 0, 'U' }, |
| { "dhcp-userclass", 1, 0, 'j' }, |
| { "dhcp-ignore", 1, 0, 'J' }, |
| { "edns-packet-max", 1, 0, 'P' }, |
| { "keep-in-foreground", 0, 0, 'k' }, |
| { "dhcp-authoritative", 0, 0, 'K' }, |
| { "srv-host", 1, 0, 'W' }, |
| { "localise-queries", 0, 0, 'y' }, |
| { "txt-record", 1, 0, 'Y' }, |
| { "dns-rr", 1, 0, LOPT_RR }, |
| { "enable-dbus", 2, 0, '1' }, |
| { "bootp-dynamic", 2, 0, '3' }, |
| { "dhcp-mac", 1, 0, '4' }, |
| { "no-ping", 0, 0, '5' }, |
| { "dhcp-script", 1, 0, '6' }, |
| { "conf-dir", 1, 0, '7' }, |
| { "log-facility", 1, 0 ,'8' }, |
| { "leasefile-ro", 0, 0, '9' }, |
| { "dns-forward-max", 1, 0, '0' }, |
| { "clear-on-reload", 0, 0, LOPT_RELOAD }, |
| { "dhcp-ignore-names", 2, 0, LOPT_NO_NAMES }, |
| { "enable-tftp", 2, 0, LOPT_TFTP }, |
| { "tftp-secure", 0, 0, LOPT_SECURE }, |
| { "tftp-unique-root", 0, 0, LOPT_APREF }, |
| { "tftp-root", 1, 0, LOPT_PREFIX }, |
| { "tftp-max", 1, 0, LOPT_TFTP_MAX }, |
| { "tftp-lowercase", 0, 0, LOPT_TFTP_LC }, |
| { "ptr-record", 1, 0, LOPT_PTR }, |
| { "naptr-record", 1, 0, LOPT_NAPTR }, |
| { "bridge-interface", 1, 0 , LOPT_BRIDGE }, |
| { "dhcp-option-force", 1, 0, LOPT_FORCE }, |
| { "tftp-no-blocksize", 0, 0, LOPT_NOBLOCK }, |
| { "log-dhcp", 0, 0, LOPT_LOG_OPTS }, |
| { "log-async", 2, 0, LOPT_MAX_LOGS }, |
| { "dhcp-circuitid", 1, 0, LOPT_CIRCUIT }, |
| { "dhcp-remoteid", 1, 0, LOPT_REMOTE }, |
| { "dhcp-subscrid", 1, 0, LOPT_SUBSCR }, |
| { "interface-name", 1, 0, LOPT_INTNAME }, |
| { "dhcp-hostsfile", 1, 0, LOPT_DHCP_HOST }, |
| { "dhcp-optsfile", 1, 0, LOPT_DHCP_OPTS }, |
| { "dhcp-hostsdir", 1, 0, LOPT_DHCP_INOTIFY }, |
| { "dhcp-no-override", 0, 0, LOPT_OVERRIDE }, |
| { "tftp-port-range", 1, 0, LOPT_TFTPPORTS }, |
| { "stop-dns-rebind", 0, 0, LOPT_REBIND }, |
| { "rebind-domain-ok", 1, 0, LOPT_NO_REBIND }, |
| { "all-servers", 0, 0, LOPT_NOLAST }, |
| { "dhcp-match", 1, 0, LOPT_MATCH }, |
| { "dhcp-broadcast", 2, 0, LOPT_BROADCAST }, |
| { "neg-ttl", 1, 0, LOPT_NEGTTL }, |
| { "max-ttl", 1, 0, LOPT_MAXTTL }, |
| { "min-cache-ttl", 1, 0, LOPT_MINCTTL }, |
| { "max-cache-ttl", 1, 0, LOPT_MAXCTTL }, |
| { "dhcp-alternate-port", 2, 0, LOPT_ALTPORT }, |
| { "dhcp-scriptuser", 1, 0, LOPT_SCRIPTUSR }, |
| { "min-port", 1, 0, LOPT_MINPORT }, |
| { "dhcp-fqdn", 0, 0, LOPT_DHCP_FQDN }, |
| { "cname", 1, 0, LOPT_CNAME }, |
| { "pxe-prompt", 1, 0, LOPT_PXE_PROMT }, |
| { "pxe-service", 1, 0, LOPT_PXE_SERV }, |
| { "test", 0, 0, LOPT_TEST }, |
| { "tag-if", 1, 0, LOPT_TAG_IF }, |
| { "dhcp-proxy", 2, 0, LOPT_PROXY }, |
| { "dhcp-generate-names", 2, 0, LOPT_GEN_NAMES }, |
| { "rebind-localhost-ok", 0, 0, LOPT_LOC_REBND }, |
| { "add-mac", 0, 0, LOPT_ADD_MAC }, |
| { "add-subnet", 2, 0, LOPT_ADD_SBNET }, |
| { "proxy-dnssec", 0, 0, LOPT_DNSSEC }, |
| { "dhcp-sequential-ip", 0, 0, LOPT_INCR_ADDR }, |
| { "conntrack", 0, 0, LOPT_CONNTRACK }, |
| { "dhcp-client-update", 0, 0, LOPT_FQDN }, |
| { "dhcp-luascript", 1, 0, LOPT_LUASCRIPT }, |
| { "enable-ra", 0, 0, LOPT_RA }, |
| { "dhcp-duid", 1, 0, LOPT_DUID }, |
| { "host-record", 1, 0, LOPT_HOST_REC }, |
| { "bind-dynamic", 0, 0, LOPT_CLVERBIND }, |
| { "auth-zone", 1, 0, LOPT_AUTHZONE }, |
| { "auth-server", 1, 0, LOPT_AUTHSERV }, |
| { "auth-ttl", 1, 0, LOPT_AUTHTTL }, |
| { "auth-soa", 1, 0, LOPT_AUTHSOA }, |
| { "auth-sec-servers", 1, 0, LOPT_AUTHSFS }, |
| { "auth-peer", 1, 0, LOPT_AUTHPEER }, |
| { "ipset", 1, 0, LOPT_IPSET }, |
| { "synth-domain", 1, 0, LOPT_SYNTH }, |
| { "dnssec", 0, 0, LOPT_SEC_VALID }, |
| { "trust-anchor", 1, 0, LOPT_TRUST_ANCHOR }, |
| { "dnssec-debug", 0, 0, LOPT_DNSSEC_DEBUG }, |
| { "dnssec-check-unsigned", 0, 0, LOPT_DNSSEC_CHECK }, |
| { "dnssec-no-timecheck", 0, 0, LOPT_DNSSEC_TIME }, |
| #ifdef OPTION6_PREFIX_CLASS |
| { "dhcp-prefix-class", 1, 0, LOPT_PREF_CLSS }, |
| #endif |
| { "dhcp-relay", 1, 0, LOPT_RELAY }, |
| { "ra-param", 1, 0, LOPT_RA_PARAM }, |
| { "quiet-dhcp", 0, 0, LOPT_QUIET_DHCP }, |
| { "quiet-dhcp6", 0, 0, LOPT_QUIET_DHCP6 }, |
| { "quiet-ra", 0, 0, LOPT_QUIET_RA }, |
| { "dns-loop-detect", 0, 0, LOPT_LOOP_DETECT }, |
| { NULL, 0, 0, 0 } |
| }; |
| |
| |
| #define ARG_DUP OPT_LAST |
| #define ARG_ONE OPT_LAST + 1 |
| #define ARG_USED_CL OPT_LAST + 2 |
| #define ARG_USED_FILE OPT_LAST + 3 |
| |
| static struct { |
| int opt; |
| unsigned int rept; |
| char * const flagdesc; |
| char * const desc; |
| char * const arg; |
| } usage[] = { |
| { 'a', ARG_DUP, "<ipaddr>", gettext_noop("Specify local address(es) to listen on."), NULL }, |
| { 'A', ARG_DUP, "/<domain>/<ipaddr>", gettext_noop("Return ipaddr for all hosts in specified domains."), NULL }, |
| { 'b', OPT_BOGUSPRIV, NULL, gettext_noop("Fake reverse lookups for RFC1918 private address ranges."), NULL }, |
| { 'B', ARG_DUP, "<ipaddr>", gettext_noop("Treat ipaddr as NXDOMAIN (defeats Verisign wildcard)."), NULL }, |
| { 'c', ARG_ONE, "<integer>", gettext_noop("Specify the size of the cache in entries (defaults to %s)."), "$" }, |
| { 'C', ARG_DUP, "<path>", gettext_noop("Specify configuration file (defaults to %s)."), CONFFILE }, |
| { 'd', OPT_DEBUG, NULL, gettext_noop("Do NOT fork into the background: run in debug mode."), NULL }, |
| { 'D', OPT_NODOTS_LOCAL, NULL, gettext_noop("Do NOT forward queries with no domain part."), NULL }, |
| { 'e', OPT_SELFMX, NULL, gettext_noop("Return self-pointing MX records for local hosts."), NULL }, |
| { 'E', OPT_EXPAND, NULL, gettext_noop("Expand simple names in /etc/hosts with domain-suffix."), NULL }, |
| { 'f', OPT_FILTER, NULL, gettext_noop("Don't forward spurious DNS requests from Windows hosts."), NULL }, |
| { 'F', ARG_DUP, "<ipaddr>,...", gettext_noop("Enable DHCP in the range given with lease duration."), NULL }, |
| { 'g', ARG_ONE, "<groupname>", gettext_noop("Change to this group after startup (defaults to %s)."), CHGRP }, |
| { 'G', ARG_DUP, "<hostspec>", gettext_noop("Set address or hostname for a specified machine."), NULL }, |
| { LOPT_DHCP_HOST, ARG_DUP, "<path>", gettext_noop("Read DHCP host specs from file."), NULL }, |
| { LOPT_DHCP_OPTS, ARG_DUP, "<path>", gettext_noop("Read DHCP option specs from file."), NULL }, |
| { LOPT_DHCP_INOTIFY, ARG_DUP, "<path>", gettext_noop("Read DHCP host specs from a directory."), NULL }, |
| { LOPT_TAG_IF, ARG_DUP, "tag-expression", gettext_noop("Evaluate conditional tag expression."), NULL }, |
| { 'h', OPT_NO_HOSTS, NULL, gettext_noop("Do NOT load %s file."), HOSTSFILE }, |
| { 'H', ARG_DUP, "<path>", gettext_noop("Specify a hosts file to be read in addition to %s."), HOSTSFILE }, |
| { 'i', ARG_DUP, "<interface>", gettext_noop("Specify interface(s) to listen on."), NULL }, |
| { 'I', ARG_DUP, "<interface>", gettext_noop("Specify interface(s) NOT to listen on.") , NULL }, |
| { 'j', ARG_DUP, "set:<tag>,<class>", gettext_noop("Map DHCP user class to tag."), NULL }, |
| { LOPT_CIRCUIT, ARG_DUP, "set:<tag>,<circuit>", gettext_noop("Map RFC3046 circuit-id to tag."), NULL }, |
| { LOPT_REMOTE, ARG_DUP, "set:<tag>,<remote>", gettext_noop("Map RFC3046 remote-id to tag."), NULL }, |
| { LOPT_SUBSCR, ARG_DUP, "set:<tag>,<remote>", gettext_noop("Map RFC3993 subscriber-id to tag."), NULL }, |
| { 'J', ARG_DUP, "tag:<tag>...", gettext_noop("Don't do DHCP for hosts with tag set."), NULL }, |
| { LOPT_BROADCAST, ARG_DUP, "[=tag:<tag>...]", gettext_noop("Force broadcast replies for hosts with tag set."), NULL }, |
| { 'k', OPT_NO_FORK, NULL, gettext_noop("Do NOT fork into the background, do NOT run in debug mode."), NULL }, |
| { 'K', OPT_AUTHORITATIVE, NULL, gettext_noop("Assume we are the only DHCP server on the local network."), NULL }, |
| { 'l', ARG_ONE, "<path>", gettext_noop("Specify where to store DHCP leases (defaults to %s)."), LEASEFILE }, |
| { 'L', OPT_LOCALMX, NULL, gettext_noop("Return MX records for local hosts."), NULL }, |
| { 'm', ARG_DUP, "<host_name>,<target>,<pref>", gettext_noop("Specify an MX record."), NULL }, |
| { 'M', ARG_DUP, "<bootp opts>", gettext_noop("Specify BOOTP options to DHCP server."), NULL }, |
| { 'n', OPT_NO_POLL, NULL, gettext_noop("Do NOT poll %s file, reload only on SIGHUP."), RESOLVFILE }, |
| { 'N', OPT_NO_NEG, NULL, gettext_noop("Do NOT cache failed search results."), NULL }, |
| { 'o', OPT_ORDER, NULL, gettext_noop("Use nameservers strictly in the order given in %s."), RESOLVFILE }, |
| { 'O', ARG_DUP, "<optspec>", gettext_noop("Specify options to be sent to DHCP clients."), NULL }, |
| { LOPT_FORCE, ARG_DUP, "<optspec>", gettext_noop("DHCP option sent even if the client does not request it."), NULL}, |
| { 'p', ARG_ONE, "<integer>", gettext_noop("Specify port to listen for DNS requests on (defaults to 53)."), NULL }, |
| { 'P', ARG_ONE, "<integer>", gettext_noop("Maximum supported UDP packet size for EDNS.0 (defaults to %s)."), "*" }, |
| { 'q', ARG_DUP, NULL, gettext_noop("Log DNS queries."), NULL }, |
| { 'Q', ARG_ONE, "<integer>", gettext_noop("Force the originating port for upstream DNS queries."), NULL }, |
| { 'R', OPT_NO_RESOLV, NULL, gettext_noop("Do NOT read resolv.conf."), NULL }, |
| { 'r', ARG_DUP, "<path>", gettext_noop("Specify path to resolv.conf (defaults to %s)."), RESOLVFILE }, |
| { LOPT_SERVERS_FILE, ARG_ONE, "<path>", gettext_noop("Specify path to file with server= options"), NULL }, |
| { 'S', ARG_DUP, "/<domain>/<ipaddr>", gettext_noop("Specify address(es) of upstream servers with optional domains."), NULL }, |
| { LOPT_REV_SERV, ARG_DUP, "<addr>/<prefix>,<ipaddr>", gettext_noop("Specify address of upstream servers for reverse address queries"), NULL }, |
| { LOPT_LOCAL, ARG_DUP, "/<domain>/", gettext_noop("Never forward queries to specified domains."), NULL }, |
| { 's', ARG_DUP, "<domain>[,<range>]", gettext_noop("Specify the domain to be assigned in DHCP leases."), NULL }, |
| { 't', ARG_ONE, "<host_name>", gettext_noop("Specify default target in an MX record."), NULL }, |
| { 'T', ARG_ONE, "<integer>", gettext_noop("Specify time-to-live in seconds for replies from /etc/hosts."), NULL }, |
| { LOPT_NEGTTL, ARG_ONE, "<integer>", gettext_noop("Specify time-to-live in seconds for negative caching."), NULL }, |
| { LOPT_MAXTTL, ARG_ONE, "<integer>", gettext_noop("Specify time-to-live in seconds for maximum TTL to send to clients."), NULL }, |
| { LOPT_MAXCTTL, ARG_ONE, "<integer>", gettext_noop("Specify time-to-live ceiling for cache."), NULL }, |
| { LOPT_MINCTTL, ARG_ONE, "<integer>", gettext_noop("Specify time-to-live floor for cache."), NULL }, |
| { 'u', ARG_ONE, "<username>", gettext_noop("Change to this user after startup. (defaults to %s)."), CHUSER }, |
| { 'U', ARG_DUP, "set:<tag>,<class>", gettext_noop("Map DHCP vendor class to tag."), NULL }, |
| { 'v', 0, NULL, gettext_noop("Display dnsmasq version and copyright information."), NULL }, |
| { 'V', ARG_DUP, "<ipaddr>,<ipaddr>,<netmask>", gettext_noop("Translate IPv4 addresses from upstream servers."), NULL }, |
| { 'W', ARG_DUP, "<name>,<target>,...", gettext_noop("Specify a SRV record."), NULL }, |
| { 'w', 0, NULL, gettext_noop("Display this message. Use --help dhcp for known DHCP options."), NULL }, |
| { 'x', ARG_ONE, "<path>", gettext_noop("Specify path of PID file (defaults to %s)."), RUNFILE }, |
| { 'X', ARG_ONE, "<integer>", gettext_noop("Specify maximum number of DHCP leases (defaults to %s)."), "&" }, |
| { 'y', OPT_LOCALISE, NULL, gettext_noop("Answer DNS queries based on the interface a query was sent to."), NULL }, |
| { 'Y', ARG_DUP, "<name>,<txt>[,<txt]", gettext_noop("Specify TXT DNS record."), NULL }, |
| { LOPT_PTR, ARG_DUP, "<name>,<target>", gettext_noop("Specify PTR DNS record."), NULL }, |
| { LOPT_INTNAME, ARG_DUP, "<name>,<interface>", gettext_noop("Give DNS name to IPv4 address of interface."), NULL }, |
| { 'z', OPT_NOWILD, NULL, gettext_noop("Bind only to interfaces in use."), NULL }, |
| { 'Z', OPT_ETHERS, NULL, gettext_noop("Read DHCP static host information from %s."), ETHERSFILE }, |
| { '1', ARG_ONE, "[=<busname>]", gettext_noop("Enable the DBus interface for setting upstream servers, etc."), NULL }, |
| { '2', ARG_DUP, "<interface>", gettext_noop("Do not provide DHCP on this interface, only provide DNS."), NULL }, |
| { '3', ARG_DUP, "[=tag:<tag>]...", gettext_noop("Enable dynamic address allocation for bootp."), NULL }, |
| { '4', ARG_DUP, "set:<tag>,<mac address>", gettext_noop("Map MAC address (with wildcards) to option set."), NULL }, |
| { LOPT_BRIDGE, ARG_DUP, "<iface>,<alias>..", gettext_noop("Treat DHCP requests on aliases as arriving from interface."), NULL }, |
| { '5', OPT_NO_PING, NULL, gettext_noop("Disable ICMP echo address checking in the DHCP server."), NULL }, |
| { '6', ARG_ONE, "<path>", gettext_noop("Shell script to run on DHCP lease creation and destruction."), NULL }, |
| { LOPT_LUASCRIPT, ARG_DUP, "path", gettext_noop("Lua script to run on DHCP lease creation and destruction."), NULL }, |
| { LOPT_SCRIPTUSR, ARG_ONE, "<username>", gettext_noop("Run lease-change scripts as this user."), NULL }, |
| { '7', ARG_DUP, "<path>", gettext_noop("Read configuration from all the files in this directory."), NULL }, |
| { '8', ARG_ONE, "<facilty>|<file>", gettext_noop("Log to this syslog facility or file. (defaults to DAEMON)"), NULL }, |
| { '9', OPT_LEASE_RO, NULL, gettext_noop("Do not use leasefile."), NULL }, |
| { '0', ARG_ONE, "<integer>", gettext_noop("Maximum number of concurrent DNS queries. (defaults to %s)"), "!" }, |
| { LOPT_RELOAD, OPT_RELOAD, NULL, gettext_noop("Clear DNS cache when reloading %s."), RESOLVFILE }, |
| { LOPT_NO_NAMES, ARG_DUP, "[=tag:<tag>]...", gettext_noop("Ignore hostnames provided by DHCP clients."), NULL }, |
| { LOPT_OVERRIDE, OPT_NO_OVERRIDE, NULL, gettext_noop("Do NOT reuse filename and server fields for extra DHCP options."), NULL }, |
| { LOPT_TFTP, ARG_DUP, "[=<intr>[,<intr>]]", gettext_noop("Enable integrated read-only TFTP server."), NULL }, |
| { LOPT_PREFIX, ARG_DUP, "<dir>[,<iface>]", gettext_noop("Export files by TFTP only from the specified subtree."), NULL }, |
| { LOPT_APREF, OPT_TFTP_APREF, NULL, gettext_noop("Add client IP address to tftp-root."), NULL }, |
| { LOPT_SECURE, OPT_TFTP_SECURE, NULL, gettext_noop("Allow access only to files owned by the user running dnsmasq."), NULL }, |
| { LOPT_TFTP_MAX, ARG_ONE, "<integer>", gettext_noop("Maximum number of conncurrent TFTP transfers (defaults to %s)."), "#" }, |
| { LOPT_NOBLOCK, OPT_TFTP_NOBLOCK, NULL, gettext_noop("Disable the TFTP blocksize extension."), NULL }, |
| { LOPT_TFTP_LC, OPT_TFTP_LC, NULL, gettext_noop("Convert TFTP filenames to lowercase"), NULL }, |
| { LOPT_TFTPPORTS, ARG_ONE, "<start>,<end>", gettext_noop("Ephemeral port range for use by TFTP transfers."), NULL }, |
| { LOPT_LOG_OPTS, OPT_LOG_OPTS, NULL, gettext_noop("Extra logging for DHCP."), NULL }, |
| { LOPT_MAX_LOGS, ARG_ONE, "[=<integer>]", gettext_noop("Enable async. logging; optionally set queue length."), NULL }, |
| { LOPT_REBIND, OPT_NO_REBIND, NULL, gettext_noop("Stop DNS rebinding. Filter private IP ranges when resolving."), NULL }, |
| { LOPT_LOC_REBND, OPT_LOCAL_REBIND, NULL, gettext_noop("Allow rebinding of 127.0.0.0/8, for RBL servers."), NULL }, |
| { LOPT_NO_REBIND, ARG_DUP, "/<domain>/", gettext_noop("Inhibit DNS-rebind protection on this domain."), NULL }, |
| { LOPT_NOLAST, OPT_ALL_SERVERS, NULL, gettext_noop("Always perform DNS queries to all servers."), NULL }, |
| { LOPT_MATCH, ARG_DUP, "set:<tag>,<optspec>", gettext_noop("Set tag if client includes matching option in request."), NULL }, |
| { LOPT_ALTPORT, ARG_ONE, "[=<ports>]", gettext_noop("Use alternative ports for DHCP."), NULL }, |
| { LOPT_NAPTR, ARG_DUP, "<name>,<naptr>", gettext_noop("Specify NAPTR DNS record."), NULL }, |
| { LOPT_MINPORT, ARG_ONE, "<port>", gettext_noop("Specify lowest port available for DNS query transmission."), NULL }, |
| { LOPT_DHCP_FQDN, OPT_DHCP_FQDN, NULL, gettext_noop("Use only fully qualified domain names for DHCP clients."), NULL }, |
| { LOPT_GEN_NAMES, ARG_DUP, "[=tag:<tag>]", gettext_noop("Generate hostnames based on MAC address for nameless clients."), NULL}, |
| { LOPT_PROXY, ARG_DUP, "[=<ipaddr>]...", gettext_noop("Use these DHCP relays as full proxies."), NULL }, |
| { LOPT_RELAY, ARG_DUP, "<local-addr>,<server>[,<interface>]", gettext_noop("Relay DHCP requests to a remote server"), NULL}, |
| { LOPT_CNAME, ARG_DUP, "<alias>,<target>", gettext_noop("Specify alias name for LOCAL DNS name."), NULL }, |
| { LOPT_PXE_PROMT, ARG_DUP, "<prompt>,[<timeout>]", gettext_noop("Prompt to send to PXE clients."), NULL }, |
| { LOPT_PXE_SERV, ARG_DUP, "<service>", gettext_noop("Boot service for PXE menu."), NULL }, |
| { LOPT_TEST, 0, NULL, gettext_noop("Check configuration syntax."), NULL }, |
| { LOPT_ADD_MAC, OPT_ADD_MAC, NULL, gettext_noop("Add requestor's MAC address to forwarded DNS queries."), NULL }, |
| { LOPT_ADD_SBNET, ARG_ONE, "<v4 pref>[,<v6 pref>]", gettext_noop("Add requestor's IP subnet to forwarded DNS queries."), NULL }, |
| { LOPT_DNSSEC, OPT_DNSSEC_PROXY, NULL, gettext_noop("Proxy DNSSEC validation results from upstream nameservers."), NULL }, |
| { LOPT_INCR_ADDR, OPT_CONSEC_ADDR, NULL, gettext_noop("Attempt to allocate sequential IP addresses to DHCP clients."), NULL }, |
| { LOPT_CONNTRACK, OPT_CONNTRACK, NULL, gettext_noop("Copy connection-track mark from queries to upstream connections."), NULL }, |
| { LOPT_FQDN, OPT_FQDN_UPDATE, NULL, gettext_noop("Allow DHCP clients to do their own DDNS updates."), NULL }, |
| { LOPT_RA, OPT_RA, NULL, gettext_noop("Send router-advertisements for interfaces doing DHCPv6"), NULL }, |
| { LOPT_DUID, ARG_ONE, "<enterprise>,<duid>", gettext_noop("Specify DUID_EN-type DHCPv6 server DUID"), NULL }, |
| { LOPT_HOST_REC, ARG_DUP, "<name>,<address>", gettext_noop("Specify host (A/AAAA and PTR) records"), NULL }, |
| { LOPT_RR, ARG_DUP, "<name>,<RR-number>,[<data>]", gettext_noop("Specify arbitrary DNS resource record"), NULL }, |
| { LOPT_CLVERBIND, OPT_CLEVERBIND, NULL, gettext_noop("Bind to interfaces in use - check for new interfaces"), NULL }, |
| { LOPT_AUTHSERV, ARG_ONE, "<NS>,<interface>", gettext_noop("Export local names to global DNS"), NULL }, |
| { LOPT_AUTHZONE, ARG_DUP, "<domain>,[<subnet>...]", gettext_noop("Domain to export to global DNS"), NULL }, |
| { LOPT_AUTHTTL, ARG_ONE, "<integer>", gettext_noop("Set TTL for authoritative replies"), NULL }, |
| { LOPT_AUTHSOA, ARG_ONE, "<serial>[,...]", gettext_noop("Set authoritive zone information"), NULL }, |
| { LOPT_AUTHSFS, ARG_DUP, "<NS>[,<NS>...]", gettext_noop("Secondary authoritative nameservers for forward domains"), NULL }, |
| { LOPT_AUTHPEER, ARG_DUP, "<ipaddr>[,<ipaddr>...]", gettext_noop("Peers which are allowed to do zone transfer"), NULL }, |
| { LOPT_IPSET, ARG_DUP, "/<domain>/<ipset>[,<ipset>...]", gettext_noop("Specify ipsets to which matching domains should be added"), NULL }, |
| { LOPT_SYNTH, ARG_DUP, "<domain>,<range>,[<prefix>]", gettext_noop("Specify a domain and address range for synthesised names"), NULL }, |
| { LOPT_SEC_VALID, OPT_DNSSEC_VALID, NULL, gettext_noop("Activate DNSSEC validation"), NULL }, |
| { LOPT_TRUST_ANCHOR, ARG_DUP, "<domain>,[<class>],...", gettext_noop("Specify trust anchor key digest."), NULL }, |
| { LOPT_DNSSEC_DEBUG, OPT_DNSSEC_DEBUG, NULL, gettext_noop("Disable upstream checking for DNSSEC debugging."), NULL }, |
| { LOPT_DNSSEC_CHECK, OPT_DNSSEC_NO_SIGN, NULL, gettext_noop("Ensure answers without DNSSEC are in unsigned zones."), NULL }, |
| { LOPT_DNSSEC_TIME, OPT_DNSSEC_TIME, NULL, gettext_noop("Don't check DNSSEC signature timestamps until first cache-reload"), NULL }, |
| #ifdef OPTION6_PREFIX_CLASS |
| { LOPT_PREF_CLSS, ARG_DUP, "set:tag,<class>", gettext_noop("Specify DHCPv6 prefix class"), NULL }, |
| #endif |
| { LOPT_RA_PARAM, ARG_DUP, "<interface>,[high,|low,]<interval>[,<lifetime>]", gettext_noop("Set priority, resend-interval and router-lifetime"), NULL }, |
| { LOPT_QUIET_DHCP, OPT_QUIET_DHCP, NULL, gettext_noop("Do not log routine DHCP."), NULL }, |
| { LOPT_QUIET_DHCP6, OPT_QUIET_DHCP6, NULL, gettext_noop("Do not log routine DHCPv6."), NULL }, |
| { LOPT_QUIET_RA, OPT_QUIET_RA, NULL, gettext_noop("Do not log RA."), NULL }, |
| { LOPT_LOCAL_SERVICE, OPT_LOCAL_SERVICE, NULL, gettext_noop("Accept queries only from directly-connected networks"), NULL }, |
| { LOPT_LOOP_DETECT, OPT_LOOP_DETECT, NULL, gettext_noop("Detect and remove DNS forwarding loops"), NULL }, |
| { LOPT_IGNORE_ADDR, ARG_DUP, "<ipaddr>", gettext_noop("Ignore DNS responses containing ipaddr."), NULL }, |
| { 0, 0, NULL, NULL, NULL } |
| }; |
| |
| /* We hide metacharaters in quoted strings by mapping them into the ASCII control |
| character space. Note that the \0, \t \b \r \033 and \n characters are carefully placed in the |
| following sequence so that they map to themselves: it is therefore possible to call |
| unhide_metas repeatedly on string without breaking things. |
| The transformation gets undone by opt_canonicalise, atoi_check and opt_string_alloc, and a |
| couple of other places. |
| Note that space is included here so that |
| --dhcp-option=3, string |
| has five characters, whilst |
| --dhcp-option=3," string" |
| has six. |
| */ |
| |
| static const char meta[] = "\000123456 \b\t\n78\r90abcdefABCDE\033F:,."; |
| |
| static char hide_meta(char c) |
| { |
| unsigned int i; |
| |
| for (i = 0; i < (sizeof(meta) - 1); i++) |
| if (c == meta[i]) |
| return (char)i; |
| |
| return c; |
| } |
| |
| static char unhide_meta(char cr) |
| { |
| unsigned int c = cr; |
| |
| if (c < (sizeof(meta) - 1)) |
| cr = meta[c]; |
| |
| return cr; |
| } |
| |
| static void unhide_metas(char *cp) |
| { |
| if (cp) |
| for(; *cp; cp++) |
| *cp = unhide_meta(*cp); |
| } |
| |
| static void *opt_malloc(size_t size) |
| { |
| void *ret; |
| |
| if (mem_recover) |
| { |
| ret = whine_malloc(size); |
| if (!ret) |
| longjmp(mem_jmp, 1); |
| } |
| else |
| ret = safe_malloc(size); |
| |
| return ret; |
| } |
| |
| static char *opt_string_alloc(char *cp) |
| { |
| char *ret = NULL; |
| |
| if (cp && strlen(cp) != 0) |
| { |
| ret = opt_malloc(strlen(cp)+1); |
| strcpy(ret, cp); |
| |
| /* restore hidden metachars */ |
| unhide_metas(ret); |
| } |
| |
| return ret; |
| } |
| |
| |
| /* find next comma, split string with zero and eliminate spaces. |
| return start of string following comma */ |
| |
| static char *split_chr(char *s, char c) |
| { |
| char *comma, *p; |
| |
| if (!s || !(comma = strchr(s, c))) |
| return NULL; |
| |
| p = comma; |
| *comma = ' '; |
| |
| for (; *comma == ' '; comma++); |
| |
| for (; (p >= s) && *p == ' '; p--) |
| *p = 0; |
| |
| return comma; |
| } |
| |
| static char *split(char *s) |
| { |
| return split_chr(s, ','); |
| } |
| |
| static char *canonicalise_opt(char *s) |
| { |
| char *ret; |
| int nomem; |
| |
| if (!s) |
| return 0; |
| |
| unhide_metas(s); |
| if (!(ret = canonicalise(s, &nomem)) && nomem) |
| { |
| if (mem_recover) |
| longjmp(mem_jmp, 1); |
| else |
| die(_("could not get memory"), NULL, EC_NOMEM); |
| } |
| |
| return ret; |
| } |
| |
| static int atoi_check(char *a, int *res) |
| { |
| char *p; |
| |
| if (!a) |
| return 0; |
| |
| unhide_metas(a); |
| |
| for (p = a; *p; p++) |
| if (*p < '0' || *p > '9') |
| return 0; |
| |
| *res = atoi(a); |
| return 1; |
| } |
| |
| static int atoi_check16(char *a, int *res) |
| { |
| if (!(atoi_check(a, res)) || |
| *res < 0 || |
| *res > 0xffff) |
| return 0; |
| |
| return 1; |
| } |
| |
| #ifdef HAVE_DNSSEC |
| static int atoi_check8(char *a, int *res) |
| { |
| if (!(atoi_check(a, res)) || |
| *res < 0 || |
| *res > 0xff) |
| return 0; |
| |
| return 1; |
| } |
| #endif |
| |
| static void add_txt(char *name, char *txt, int stat) |
| { |
| struct txt_record *r = opt_malloc(sizeof(struct txt_record)); |
| |
| if (txt) |
| { |
| size_t len = strlen(txt); |
| r->txt = opt_malloc(len+1); |
| r->len = len+1; |
| *(r->txt) = len; |
| memcpy((r->txt)+1, txt, len); |
| } |
| |
| r->stat = stat; |
| r->name = opt_string_alloc(name); |
| r->next = daemon->txt; |
| daemon->txt = r; |
| r->class = C_CHAOS; |
| } |
| |
| static void do_usage(void) |
| { |
| char buff[100]; |
| int i, j; |
| |
| struct { |
| char handle; |
| int val; |
| } tab[] = { |
| { '$', CACHESIZ }, |
| { '*', EDNS_PKTSZ }, |
| { '&', MAXLEASES }, |
| { '!', FTABSIZ }, |
| { '#', TFTP_MAX_CONNECTIONS }, |
| { '\0', 0 } |
| }; |
| |
| printf(_("Usage: dnsmasq [options]\n\n")); |
| #ifndef HAVE_GETOPT_LONG |
| printf(_("Use short options only on the command line.\n")); |
| #endif |
| printf(_("Valid options are:\n")); |
| |
| for (i = 0; usage[i].opt != 0; i++) |
| { |
| char *desc = usage[i].flagdesc; |
| char *eq = "="; |
| |
| if (!desc || *desc == '[') |
| eq = ""; |
| |
| if (!desc) |
| desc = ""; |
| |
| for ( j = 0; opts[j].name; j++) |
| if (opts[j].val == usage[i].opt) |
| break; |
| if (usage[i].opt < 256) |
| sprintf(buff, "-%c, ", usage[i].opt); |
| else |
| sprintf(buff, " "); |
| |
| sprintf(buff+4, "--%s%s%s", opts[j].name, eq, desc); |
| printf("%-40.40s", buff); |
| |
| if (usage[i].arg) |
| { |
| strcpy(buff, usage[i].arg); |
| for (j = 0; tab[j].handle; j++) |
| if (tab[j].handle == *(usage[i].arg)) |
| sprintf(buff, "%d", tab[j].val); |
| } |
| printf(_(usage[i].desc), buff); |
| printf("\n"); |
| } |
| } |
| |
| #define ret_err(x) do { strcpy(errstr, (x)); return 0; } while (0) |
| |
| char *parse_server(char *arg, union mysockaddr *addr, union mysockaddr *source_addr, char *interface, int *flags) |
| { |
| int source_port = 0, serv_port = NAMESERVER_PORT; |
| char *portno, *source; |
| #ifdef HAVE_IPV6 |
| int scope_index = 0; |
| char *scope_id; |
| #endif |
| |
| if (!arg || strlen(arg) == 0) |
| { |
| *flags |= SERV_NO_ADDR; |
| *interface = 0; |
| return NULL; |
| } |
| |
| if ((source = split_chr(arg, '@')) && /* is there a source. */ |
| (portno = split_chr(source, '#')) && |
| !atoi_check16(portno, &source_port)) |
| return _("bad port"); |
| |
| if ((portno = split_chr(arg, '#')) && /* is there a port no. */ |
| !atoi_check16(portno, &serv_port)) |
| return _("bad port"); |
| |
| #ifdef HAVE_IPV6 |
| scope_id = split_chr(arg, '%'); |
| #endif |
| |
| if (inet_pton(AF_INET, arg, &addr->in.sin_addr) > 0) |
| { |
| addr->in.sin_port = htons(serv_port); |
| addr->sa.sa_family = source_addr->sa.sa_family = AF_INET; |
| #ifdef HAVE_SOCKADDR_SA_LEN |
| source_addr->in.sin_len = addr->in.sin_len = sizeof(struct sockaddr_in); |
| #endif |
| source_addr->in.sin_addr.s_addr = INADDR_ANY; |
| source_addr->in.sin_port = htons(daemon->query_port); |
| |
| if (source) |
| { |
| if (flags) |
| *flags |= SERV_HAS_SOURCE; |
| source_addr->in.sin_port = htons(source_port); |
| if (!(inet_pton(AF_INET, source, &source_addr->in.sin_addr) > 0)) |
| { |
| #if defined(SO_BINDTODEVICE) |
| source_addr->in.sin_addr.s_addr = INADDR_ANY; |
| strncpy(interface, source, IF_NAMESIZE - 1); |
| #else |
| return _("interface binding not supported"); |
| #endif |
| } |
| } |
| } |
| #ifdef HAVE_IPV6 |
| else if (inet_pton(AF_INET6, arg, &addr->in6.sin6_addr) > 0) |
| { |
| if (scope_id && (scope_index = if_nametoindex(scope_id)) == 0) |
| return _("bad interface name"); |
| |
| addr->in6.sin6_port = htons(serv_port); |
| addr->in6.sin6_scope_id = scope_index; |
| source_addr->in6.sin6_addr = in6addr_any; |
| source_addr->in6.sin6_port = htons(daemon->query_port); |
| source_addr->in6.sin6_scope_id = 0; |
| addr->sa.sa_family = source_addr->sa.sa_family = AF_INET6; |
| addr->in6.sin6_flowinfo = source_addr->in6.sin6_flowinfo = 0; |
| #ifdef HAVE_SOCKADDR_SA_LEN |
| addr->in6.sin6_len = source_addr->in6.sin6_len = sizeof(addr->in6); |
| #endif |
| if (source) |
| { |
| if (flags) |
| *flags |= SERV_HAS_SOURCE; |
| source_addr->in6.sin6_port = htons(source_port); |
| if (inet_pton(AF_INET6, source, &source_addr->in6.sin6_addr) == 0) |
| { |
| #if defined(SO_BINDTODEVICE) |
| source_addr->in6.sin6_addr = in6addr_any; |
| strncpy(interface, source, IF_NAMESIZE - 1); |
| #else |
| return _("interface binding not supported"); |
| #endif |
| } |
| } |
| } |
| #endif |
| else |
| return _("bad address"); |
| |
| return NULL; |
| } |
| |
| static struct server *add_rev4(struct in_addr addr, int msize) |
| { |
| struct server *serv = opt_malloc(sizeof(struct server)); |
| in_addr_t a = ntohl(addr.s_addr) >> 8; |
| char *p; |
| |
| memset(serv, 0, sizeof(struct server)); |
| p = serv->domain = opt_malloc(25); /* strlen("xxx.yyy.zzz.in-addr.arpa")+1 */ |
| |
| if (msize == 24) |
| p += sprintf(p, "%d.", a & 0xff); |
| a = a >> 8; |
| if (msize != 8) |
| p += sprintf(p, "%d.", a & 0xff); |
| a = a >> 8; |
| p += sprintf(p, "%d.in-addr.arpa", a & 0xff); |
| |
| serv->flags = SERV_HAS_DOMAIN; |
| serv->next = daemon->servers; |
| daemon->servers = serv; |
| |
| return serv; |
| |
| } |
| |
| static struct server *add_rev6(struct in6_addr *addr, int msize) |
| { |
| struct server *serv = opt_malloc(sizeof(struct server)); |
| char *p; |
| int i; |
| |
| memset(serv, 0, sizeof(struct server)); |
| p = serv->domain = opt_malloc(73); /* strlen("32*<n.>ip6.arpa")+1 */ |
| |
| for (i = msize-1; i >= 0; i -= 4) |
| { |
| int dig = ((unsigned char *)addr)[i>>3]; |
| p += sprintf(p, "%.1x.", (i>>2) & 1 ? dig & 15 : dig >> 4); |
| } |
| p += sprintf(p, "ip6.arpa"); |
| |
| serv->flags = SERV_HAS_DOMAIN; |
| serv->next = daemon->servers; |
| daemon->servers = serv; |
| |
| return serv; |
| } |
| |
| #ifdef HAVE_DHCP |
| |
| static int is_tag_prefix(char *arg) |
| { |
| if (arg && (strstr(arg, "net:") == arg || strstr(arg, "tag:") == arg)) |
| return 1; |
| |
| return 0; |
| } |
| |
| static char *set_prefix(char *arg) |
| { |
| if (strstr(arg, "set:") == arg) |
| return arg+4; |
| |
| return arg; |
| } |
| |
| /* This is too insanely large to keep in-line in the switch */ |
| static int parse_dhcp_opt(char *errstr, char *arg, int flags) |
| { |
| struct dhcp_opt *new = opt_malloc(sizeof(struct dhcp_opt)); |
| char lenchar = 0, *cp; |
| int addrs, digs, is_addr, is_addr6, is_hex, is_dec, is_string, dots; |
| char *comma = NULL; |
| struct dhcp_netid *np = NULL; |
| u16 opt_len = 0; |
| int is6 = 0; |
| int option_ok = 0; |
| |
| new->len = 0; |
| new->flags = flags; |
| new->netid = NULL; |
| new->val = NULL; |
| new->opt = 0; |
| |
| while (arg) |
| { |
| comma = split(arg); |
| |
| for (cp = arg; *cp; cp++) |
| if (*cp < '0' || *cp > '9') |
| break; |
| |
| if (!*cp) |
| { |
| new->opt = atoi(arg); |
| opt_len = 0; |
| option_ok = 1; |
| break; |
| } |
| |
| if (strstr(arg, "option:") == arg) |
| { |
| if ((new->opt = lookup_dhcp_opt(AF_INET, arg+7)) != -1) |
| { |
| opt_len = lookup_dhcp_len(AF_INET, new->opt); |
| /* option:<optname> must follow tag and vendor string. */ |
| if (!(opt_len & OT_INTERNAL) || flags == DHOPT_MATCH) |
| option_ok = 1; |
| } |
| break; |
| } |
| #ifdef HAVE_DHCP6 |
| else if (strstr(arg, "option6:") == arg) |
| { |
| for (cp = arg+8; *cp; cp++) |
| if (*cp < '0' || *cp > '9') |
| break; |
| |
| if (!*cp) |
| { |
| new->opt = atoi(arg+8); |
| opt_len = 0; |
| option_ok = 1; |
| } |
| else |
| { |
| if ((new->opt = lookup_dhcp_opt(AF_INET6, arg+8)) != -1) |
| { |
| opt_len = lookup_dhcp_len(AF_INET6, new->opt); |
| if (!(opt_len & OT_INTERNAL) || flags == DHOPT_MATCH) |
| option_ok = 1; |
| } |
| } |
| /* option6:<opt>|<optname> must follow tag and vendor string. */ |
| is6 = 1; |
| break; |
| } |
| #endif |
| else if (strstr(arg, "vendor:") == arg) |
| { |
| new->u.vendor_class = (unsigned char *)opt_string_alloc(arg+7); |
| new->flags |= DHOPT_VENDOR; |
| } |
| else if (strstr(arg, "encap:") == arg) |
| { |
| new->u.encap = atoi(arg+6); |
| new->flags |= DHOPT_ENCAPSULATE; |
| } |
| else if (strstr(arg, "vi-encap:") == arg) |
| { |
| new->u.encap = atoi(arg+9); |
| new->flags |= DHOPT_RFC3925; |
| if (flags == DHOPT_MATCH) |
| { |
| option_ok = 1; |
| break; |
| } |
| } |
| else |
| { |
| new->netid = opt_malloc(sizeof (struct dhcp_netid)); |
| /* allow optional "net:" or "tag:" for consistency */ |
| if (is_tag_prefix(arg)) |
| new->netid->net = opt_string_alloc(arg+4); |
| else |
| new->netid->net = opt_string_alloc(set_prefix(arg)); |
| new->netid->next = np; |
| np = new->netid; |
| } |
| |
| arg = comma; |
| } |
| |
| #ifdef HAVE_DHCP6 |
| if (is6) |
| { |
| if (new->flags & (DHOPT_VENDOR | DHOPT_ENCAPSULATE)) |
| ret_err(_("unsupported encapsulation for IPv6 option")); |
| |
| if (opt_len == 0 && |
| !(new->flags & DHOPT_RFC3925)) |
| opt_len = lookup_dhcp_len(AF_INET6, new->opt); |
| } |
| else |
| #endif |
| if (opt_len == 0 && |
| !(new->flags & (DHOPT_VENDOR | DHOPT_ENCAPSULATE | DHOPT_RFC3925))) |
| opt_len = lookup_dhcp_len(AF_INET, new->opt); |
| |
| /* option may be missing with rfc3925 match */ |
| if (!option_ok) |
| ret_err(_("bad dhcp-option")); |
| |
| if (comma) |
| { |
| /* characterise the value */ |
| char c; |
| int found_dig = 0; |
| is_addr = is_addr6 = is_hex = is_dec = is_string = 1; |
| addrs = digs = 1; |
| dots = 0; |
| for (cp = comma; (c = *cp); cp++) |
| if (c == ',') |
| { |
| addrs++; |
| is_dec = is_hex = 0; |
| } |
| else if (c == ':') |
| { |
| digs++; |
| is_dec = is_addr = 0; |
| } |
| else if (c == '/') |
| { |
| is_addr6 = is_dec = is_hex = 0; |
| if (cp == comma) /* leading / means a pathname */ |
| is_addr = 0; |
| } |
| else if (c == '.') |
| { |
| is_addr6 = is_dec = is_hex = 0; |
| dots++; |
| } |
| else if (c == '-') |
| is_hex = is_addr = is_addr6 = 0; |
| else if (c == ' ') |
| is_dec = is_hex = 0; |
| else if (!(c >='0' && c <= '9')) |
| { |
| is_addr = 0; |
| if (cp[1] == 0 && is_dec && |
| (c == 'b' || c == 's' || c == 'i')) |
| { |
| lenchar = c; |
| *cp = 0; |
| } |
| else |
| is_dec = 0; |
| if (!((c >='A' && c <= 'F') || |
| (c >='a' && c <= 'f') || |
| (c == '*' && (flags & DHOPT_MATCH)))) |
| { |
| is_hex = 0; |
| if (c != '[' && c != ']') |
| is_addr6 = 0; |
| } |
| } |
| else |
| found_dig = 1; |
| |
| if (!found_dig) |
| is_dec = is_addr = 0; |
| |
| /* We know that some options take addresses */ |
| if (opt_len & OT_ADDR_LIST) |
| { |
| is_string = is_dec = is_hex = 0; |
| |
| if (!is6 && (!is_addr || dots == 0)) |
| ret_err(_("bad IP address")); |
| |
| if (is6 && !is_addr6) |
| ret_err(_("bad IPv6 address")); |
| } |
| /* or names */ |
| else if (opt_len & (OT_NAME | OT_RFC1035_NAME | OT_CSTRING)) |
| is_addr6 = is_addr = is_dec = is_hex = 0; |
| |
| if (found_dig && (opt_len & OT_TIME) && strlen(comma) > 0) |
| { |
| int val, fac = 1; |
| |
| switch (comma[strlen(comma) - 1]) |
| { |
| case 'w': |
| case 'W': |
| fac *= 7; |
| /* fall through */ |
| case 'd': |
| case 'D': |
| fac *= 24; |
| /* fall though */ |
| case 'h': |
| case 'H': |
| fac *= 60; |
| /* fall through */ |
| case 'm': |
| case 'M': |
| fac *= 60; |
| /* fall through */ |
| case 's': |
| case 'S': |
| comma[strlen(comma) - 1] = 0; |
| } |
| |
| new->len = 4; |
| new->val = opt_malloc(4); |
| val = atoi(comma); |
| *((int *)new->val) = htonl(val * fac); |
| } |
| else if (is_hex && digs > 1) |
| { |
| new->len = digs; |
| new->val = opt_malloc(new->len); |
| parse_hex(comma, new->val, digs, (flags & DHOPT_MATCH) ? &new->u.wildcard_mask : NULL, NULL); |
| new->flags |= DHOPT_HEX; |
| } |
| else if (is_dec) |
| { |
| int i, val = atoi(comma); |
| /* assume numeric arg is 1 byte except for |
| options where it is known otherwise. |
| For vendor class option, we have to hack. */ |
| if (opt_len != 0) |
| new->len = opt_len; |
| else if (val & 0xffff0000) |
| new->len = 4; |
| else if (val & 0xff00) |
| new->len = 2; |
| else |
| new->len = 1; |
| |
| if (lenchar == 'b') |
| new->len = 1; |
| else if (lenchar == 's') |
| new->len = 2; |
| else if (lenchar == 'i') |
| new->len = 4; |
| |
| new->val = opt_malloc(new->len); |
| for (i=0; i<new->len; i++) |
| new->val[i] = val>>((new->len - i - 1)*8); |
| } |
| else if (is_addr && !is6) |
| { |
| struct in_addr in; |
| unsigned char *op; |
| char *slash; |
| /* max length of address/subnet descriptor is five bytes, |
| add one for the option 120 enc byte too */ |
| new->val = op = opt_malloc((5 * addrs) + 1); |
| new->flags |= DHOPT_ADDR; |
| |
| if (!(new->flags & (DHOPT_ENCAPSULATE | DHOPT_VENDOR | DHOPT_RFC3925)) && |
| new->opt == OPTION_SIP_SERVER) |
| { |
| *(op++) = 1; /* RFC 3361 "enc byte" */ |
| new->flags &= ~DHOPT_ADDR; |
| } |
| while (addrs--) |
| { |
| cp = comma; |
| comma = split(cp); |
| slash = split_chr(cp, '/'); |
| inet_pton(AF_INET, cp, &in); |
| if (!slash) |
| { |
| memcpy(op, &in, INADDRSZ); |
| op += INADDRSZ; |
| } |
| else |
| { |
| unsigned char *p = (unsigned char *)∈ |
| int netsize = atoi(slash); |
| *op++ = netsize; |
| if (netsize > 0) |
| *op++ = *p++; |
| if (netsize > 8) |
| *op++ = *p++; |
| if (netsize > 16) |
| *op++ = *p++; |
| if (netsize > 24) |
| *op++ = *p++; |
| new->flags &= ~DHOPT_ADDR; /* cannot re-write descriptor format */ |
| } |
| } |
| new->len = op - new->val; |
| } |
| else if (is_addr6 && is6) |
| { |
| unsigned char *op; |
| new->val = op = opt_malloc(16 * addrs); |
| new->flags |= DHOPT_ADDR6; |
| while (addrs--) |
| { |
| cp = comma; |
| comma = split(cp); |
| |
| /* check for [1234::7] */ |
| if (*cp == '[') |
| cp++; |
| if (strlen(cp) > 1 && cp[strlen(cp)-1] == ']') |
| cp[strlen(cp)-1] = 0; |
| |
| if (inet_pton(AF_INET6, cp, op)) |
| { |
| op += IN6ADDRSZ; |
| continue; |
| } |
| |
| ret_err(_("bad IPv6 address")); |
| } |
| new->len = op - new->val; |
| } |
| else if (is_string) |
| { |
| /* text arg */ |
| if ((new->opt == OPTION_DOMAIN_SEARCH || new->opt == OPTION_SIP_SERVER) && |
| !is6 && !(new->flags & (DHOPT_ENCAPSULATE | DHOPT_VENDOR | DHOPT_RFC3925))) |
| { |
| /* dns search, RFC 3397, or SIP, RFC 3361 */ |
| unsigned char *q, *r, *tail; |
| unsigned char *p, *m = NULL, *newp; |
| size_t newlen, len = 0; |
| int header_size = (new->opt == OPTION_DOMAIN_SEARCH) ? 0 : 1; |
| |
| arg = comma; |
| comma = split(arg); |
| |
| while (arg && *arg) |
| { |
| char *in, *dom = NULL; |
| size_t domlen = 1; |
| /* Allow "." as an empty domain */ |
| if (strcmp (arg, ".") != 0) |
| { |
| if (!(dom = canonicalise_opt(arg))) |
| ret_err(_("bad domain in dhcp-option")); |
| |
| domlen = strlen(dom) + 2; |
| } |
| |
| newp = opt_malloc(len + domlen + header_size); |
| if (m) |
| { |
| memcpy(newp, m, header_size + len); |
| free(m); |
| } |
| m = newp; |
| p = m + header_size; |
| q = p + len; |
| |
| /* add string on the end in RFC1035 format */ |
| for (in = dom; in && *in;) |
| { |
| unsigned char *cp = q++; |
| int j; |
| for (j = 0; *in && (*in != '.'); in++, j++) |
| *q++ = *in; |
| *cp = j; |
| if (*in) |
| in++; |
| } |
| *q++ = 0; |
| free(dom); |
| |
| /* Now tail-compress using earlier names. */ |
| newlen = q - p; |
| for (tail = p + len; *tail; tail += (*tail) + 1) |
| for (r = p; r - p < (int)len; r += (*r) + 1) |
| if (strcmp((char *)r, (char *)tail) == 0) |
| { |
| PUTSHORT((r - p) | 0xc000, tail); |
| newlen = tail - p; |
| goto end; |
| } |
| end: |
| len = newlen; |
| |
| arg = comma; |
| comma = split(arg); |
| } |
| |
| /* RFC 3361, enc byte is zero for names */ |
| if (new->opt == OPTION_SIP_SERVER) |
| m[0] = 0; |
| new->len = (int) len + header_size; |
| new->val = m; |
| } |
| #ifdef HAVE_DHCP6 |
| else if (comma && (opt_len & OT_CSTRING)) |
| { |
| /* length fields are two bytes so need 16 bits for each string */ |
| int i, commas = 1; |
| unsigned char *p, *newp; |
| |
| for (i = 0; comma[i]; i++) |
| if (comma[i] == ',') |
| commas++; |
| |
| newp = opt_malloc(strlen(comma)+(2*commas)); |
| p = newp; |
| arg = comma; |
| comma = split(arg); |
| |
| while (arg && *arg) |
| { |
| u16 len = strlen(arg); |
| unhide_metas(arg); |
| PUTSHORT(len, p); |
| memcpy(p, arg, len); |
| p += len; |
| |
| arg = comma; |
| comma = split(arg); |
| } |
| |
| new->val = newp; |
| new->len = p - newp; |
| } |
| else if (comma && (opt_len & OT_RFC1035_NAME)) |
| { |
| unsigned char *p = NULL, *newp, *end; |
| int len = 0; |
| arg = comma; |
| comma = split(arg); |
| |
| while (arg && *arg) |
| { |
| char *dom = canonicalise_opt(arg); |
| if (!dom) |
| ret_err(_("bad domain in dhcp-option")); |
| |
| newp = opt_malloc(len + strlen(dom) + 2); |
| |
| if (p) |
| { |
| memcpy(newp, p, len); |
| free(p); |
| } |
| |
| p = newp; |
| end = do_rfc1035_name(p + len, dom); |
| *end++ = 0; |
| len = end - p; |
| free(dom); |
| |
| arg = comma; |
| comma = split(arg); |
| } |
| |
| new->val = p; |
| new->len = len; |
| } |
| #endif |
| else |
| { |
| new->len = strlen(comma); |
| /* keep terminating zero on string */ |
| new->val = (unsigned char *)opt_string_alloc(comma); |
| new->flags |= DHOPT_STRING; |
| } |
| } |
| } |
| |
| if (!is6 && |
| ((new->len > 255) || |
| (new->len > 253 && (new->flags & (DHOPT_VENDOR | DHOPT_ENCAPSULATE))) || |
| (new->len > 250 && (new->flags & DHOPT_RFC3925)))) |
| ret_err(_("dhcp-option too long")); |
| |
| if (flags == DHOPT_MATCH) |
| { |
| if ((new->flags & (DHOPT_ENCAPSULATE | DHOPT_VENDOR)) || |
| !new->netid || |
| new->netid->next) |
| ret_err(_("illegal dhcp-match")); |
| |
| if (is6) |
| { |
| new->next = daemon->dhcp_match6; |
| daemon->dhcp_match6 = new; |
| } |
| else |
| { |
| new->next = daemon->dhcp_match; |
| daemon->dhcp_match = new; |
| } |
| } |
| else if (is6) |
| { |
| new->next = daemon->dhcp_opts6; |
| daemon->dhcp_opts6 = new; |
| } |
| else |
| { |
| new->next = daemon->dhcp_opts; |
| daemon->dhcp_opts = new; |
| } |
| |
| return 1; |
| } |
| |
| #endif |
| |
| void set_option_bool(unsigned int opt) |
| { |
| if (opt < 32) |
| daemon->options |= 1u << opt; |
| else |
| daemon->options2 |= 1u << (opt - 32); |
| } |
| |
| void reset_option_bool(unsigned int opt) |
| { |
| if (opt < 32) |
| daemon->options &= ~(1u << opt); |
| else |
| daemon->options2 &= ~(1u << (opt - 32)); |
| } |
| |
| static int one_opt(int option, char *arg, char *errstr, char *gen_err, int command_line, int servers_only) |
| { |
| int i; |
| char *comma; |
| |
| if (option == '?') |
| ret_err(gen_err); |
| |
| for (i=0; usage[i].opt != 0; i++) |
| if (usage[i].opt == option) |
| { |
| int rept = usage[i].rept; |
| |
| if (command_line) |
| { |
| /* command line */ |
| if (rept == ARG_USED_CL) |
| ret_err(_("illegal repeated flag")); |
| if (rept == ARG_ONE) |
| usage[i].rept = ARG_USED_CL; |
| } |
| else |
| { |
| /* allow file to override command line */ |
| if (rept == ARG_USED_FILE) |
| ret_err(_("illegal repeated keyword")); |
| if (rept == ARG_USED_CL || rept == ARG_ONE) |
| usage[i].rept = ARG_USED_FILE; |
| } |
| |
| if (rept != ARG_DUP && rept != ARG_ONE && rept != ARG_USED_CL) |
| { |
| set_option_bool(rept); |
| return 1; |
| } |
| |
| break; |
| } |
| |
| switch (option) |
| { |
| case 'C': /* --conf-file */ |
| { |
| char *file = opt_string_alloc(arg); |
| if (file) |
| { |
| one_file(file, 0); |
| free(file); |
| } |
| break; |
| } |
| |
| case '7': /* --conf-dir */ |
| { |
| DIR *dir_stream; |
| struct dirent *ent; |
| char *directory, *path; |
| struct list { |
| char *suffix; |
| struct list *next; |
| } *ignore_suffix = NULL, *match_suffix = NULL, *li; |
| |
| comma = split(arg); |
| if (!(directory = opt_string_alloc(arg))) |
| break; |
| |
| for (arg = comma; arg; arg = comma) |
| { |
| comma = split(arg); |
| if (strlen(arg) != 0) |
| { |
| li = opt_malloc(sizeof(struct list)); |
| if (*arg == '*') |
| { |
| li->next = match_suffix; |
| match_suffix = li; |
| /* Have to copy: buffer is overwritten */ |
| li->suffix = opt_string_alloc(arg+1); |
| } |
| else |
| { |
| li->next = ignore_suffix; |
| ignore_suffix = li; |
| /* Have to copy: buffer is overwritten */ |
| li->suffix = opt_string_alloc(arg); |
| } |
| } |
| } |
| |
| if (!(dir_stream = opendir(directory))) |
| die(_("cannot access directory %s: %s"), directory, EC_FILE); |
| |
| while ((ent = readdir(dir_stream))) |
| { |
| size_t len = strlen(ent->d_name); |
| struct stat buf; |
| |
| /* ignore emacs backups and dotfiles */ |
| if (len == 0 || |
| ent->d_name[len - 1] == '~' || |
| (ent->d_name[0] == '#' && ent->d_name[len - 1] == '#') || |
| ent->d_name[0] == '.') |
| continue; |
| |
| if (match_suffix) |
| { |
| for (li = match_suffix; li; li = li->next) |
| { |
| /* check for required suffices */ |
| size_t ls = strlen(li->suffix); |
| if (len > ls && |
| strcmp(li->suffix, &ent->d_name[len - ls]) == 0) |
| break; |
| } |
| if (!li) |
| continue; |
| } |
| |
| for (li = ignore_suffix; li; li = li->next) |
| { |
| /* check for proscribed suffices */ |
| size_t ls = strlen(li->suffix); |
| if (len > ls && |
| strcmp(li->suffix, &ent->d_name[len - ls]) == 0) |
| break; |
| } |
| if (li) |
| continue; |
| |
| path = opt_malloc(strlen(directory) + len + 2); |
| strcpy(path, directory); |
| strcat(path, "/"); |
| strcat(path, ent->d_name); |
| |
| /* files must be readable */ |
| if (stat(path, &buf) == -1) |
| die(_("cannot access %s: %s"), path, EC_FILE); |
| |
| /* only reg files allowed. */ |
| if (S_ISREG(buf.st_mode)) |
| one_file(path, 0); |
| |
| free(path); |
| } |
| |
| closedir(dir_stream); |
| free(directory); |
| for(; ignore_suffix; ignore_suffix = li) |
| { |
| li = ignore_suffix->next; |
| free(ignore_suffix->suffix); |
| free(ignore_suffix); |
| } |
| for(; match_suffix; match_suffix = li) |
| { |
| li = match_suffix->next; |
| free(match_suffix->suffix); |
| free(match_suffix); |
| } |
| break; |
| } |
| |
| case LOPT_ADD_SBNET: /* --add-subnet */ |
| set_option_bool(OPT_CLIENT_SUBNET); |
| if (arg) |
| { |
| comma = split(arg); |
| if (!atoi_check(arg, &daemon->addr4_netmask) || |
| (comma && !atoi_check(comma, &daemon->addr6_netmask))) |
| ret_err(gen_err); |
| } |
| break; |
| |
| case '1': /* --enable-dbus */ |
| set_option_bool(OPT_DBUS); |
| if (arg) |
| daemon->dbus_name = opt_string_alloc(arg); |
| else |
| daemon->dbus_name = DNSMASQ_SERVICE; |
| break; |
| |
| case '8': /* --log-facility */ |
| /* may be a filename */ |
| if (strchr(arg, '/') || strcmp (arg, "-") == 0) |
| daemon->log_file = opt_string_alloc(arg); |
| else |
| { |
| #ifdef __ANDROID__ |
| ret_err(_("setting log facility is not possible under Android")); |
| #else |
| for (i = 0; facilitynames[i].c_name; i++) |
| if (hostname_isequal((char *)facilitynames[i].c_name, arg)) |
| break; |
| |
| if (facilitynames[i].c_name) |
| daemon->log_fac = facilitynames[i].c_val; |
| else |
| ret_err(_("bad log facility")); |
| #endif |
| } |
| break; |
| |
| case 'x': /* --pid-file */ |
| daemon->runfile = opt_string_alloc(arg); |
| break; |
| |
| case 'r': /* --resolv-file */ |
| { |
| char *name = opt_string_alloc(arg); |
| struct resolvc *new, *list = daemon->resolv_files; |
| |
| if (list && list->is_default) |
| { |
| /* replace default resolv file - possibly with nothing */ |
| if (name) |
| { |
| list->is_default = 0; |
| list->name = name; |
| } |
| else |
| list = NULL; |
| } |
| else if (name) |
| { |
| new = opt_malloc(sizeof(struct resolvc)); |
| new->next = list; |
| new->name = name; |
| new->is_default = 0; |
| new->mtime = 0; |
| new->logged = 0; |
| list = new; |
| } |
| daemon->resolv_files = list; |
| break; |
| } |
| |
| case LOPT_SERVERS_FILE: |
| daemon->servers_file = opt_string_alloc(arg); |
| break; |
| |
| case 'm': /* --mx-host */ |
| { |
| int pref = 1; |
| struct mx_srv_record *new; |
| char *name, *target = NULL; |
| |
| if ((comma = split(arg))) |
| { |
| char *prefstr; |
| if ((prefstr = split(comma)) && !atoi_check16(prefstr, &pref)) |
| ret_err(_("bad MX preference")); |
| } |
| |
| if (!(name = canonicalise_opt(arg)) || |
| (comma && !(target = canonicalise_opt(comma)))) |
| ret_err(_("bad MX name")); |
| |
| new = opt_malloc(sizeof(struct mx_srv_record)); |
| new->next = daemon->mxnames; |
| daemon->mxnames = new; |
| new->issrv = 0; |
| new->name = name; |
| new->target = target; /* may be NULL */ |
| new->weight = pref; |
| break; |
| } |
| |
| case 't': /* --mx-target */ |
| if (!(daemon->mxtarget = canonicalise_opt(arg))) |
| ret_err(_("bad MX target")); |
| break; |
| |
| #ifdef HAVE_DHCP |
| case 'l': /* --dhcp-leasefile */ |
| daemon->lease_file = opt_string_alloc(arg); |
| break; |
| |
| /* Sorry about the gross pre-processor abuse */ |
| case '6': /* --dhcp-script */ |
| case LOPT_LUASCRIPT: /* --dhcp-luascript */ |
| # if defined(NO_FORK) |
| ret_err(_("cannot run scripts under uClinux")); |
| # elif !defined(HAVE_SCRIPT) |
| ret_err(_("recompile with HAVE_SCRIPT defined to enable lease-change scripts")); |
| # else |
| if (option == LOPT_LUASCRIPT) |
| # if !defined(HAVE_LUASCRIPT) |
| ret_err(_("recompile with HAVE_LUASCRIPT defined to enable Lua scripts")); |
| # else |
| daemon->luascript = opt_string_alloc(arg); |
| # endif |
| else |
| daemon->lease_change_command = opt_string_alloc(arg); |
| # endif |
| break; |
| #endif /* HAVE_DHCP */ |
| |
| case LOPT_DHCP_HOST: /* --dhcp-hostsfile */ |
| case LOPT_DHCP_OPTS: /* --dhcp-optsfile */ |
| case LOPT_DHCP_INOTIFY: /* dhcp-hostsdir */ |
| case 'H': /* --addn-hosts */ |
| { |
| struct hostsfile *new = opt_malloc(sizeof(struct hostsfile)); |
| static unsigned int hosts_index = SRC_AH; |
| new->fname = opt_string_alloc(arg); |
| new->index = hosts_index++; |
| new->flags = 0; |
| if (option == 'H') |
| { |
| new->next = daemon->addn_hosts; |
| daemon->addn_hosts = new; |
| } |
| else if (option == LOPT_DHCP_HOST) |
| { |
| new->next = daemon->dhcp_hosts_file; |
| daemon->dhcp_hosts_file = new; |
| } |
| else if (option == LOPT_DHCP_OPTS) |
| { |
| new->next = daemon->dhcp_opts_file; |
| daemon->dhcp_opts_file = new; |
| } |
| else if (option == LOPT_DHCP_INOTIFY) |
| { |
| new->next = daemon->inotify_hosts; |
| daemon->inotify_hosts = new; |
| } |
| |
| break; |
| } |
| |
| |
| #ifdef HAVE_AUTH |
| case LOPT_AUTHSERV: /* --auth-server */ |
| if (!(comma = split(arg))) |
| ret_err(gen_err); |
| |
| daemon->authserver = opt_string_alloc(arg); |
| arg = comma; |
| do { |
| struct iname *new = opt_malloc(sizeof(struct iname)); |
| comma = split(arg); |
| new->name = NULL; |
| unhide_metas(arg); |
| if (inet_pton(AF_INET, arg, &new->addr.in.sin_addr) > 0) |
| new->addr.sa.sa_family = AF_INET; |
| #ifdef HAVE_IPV6 |
| else if (inet_pton(AF_INET6, arg, &new->addr.in6.sin6_addr) > 0) |
| new->addr.sa.sa_family = AF_INET6; |
| #endif |
| else |
| { |
| char *fam = split_chr(arg, '/'); |
| new->name = opt_string_alloc(arg); |
| new->addr.sa.sa_family = 0; |
| if (fam) |
| { |
| if (strcmp(fam, "4") == 0) |
| new->addr.sa.sa_family = AF_INET; |
| #ifdef HAVE_IPV6 |
| else if (strcmp(fam, "6") == 0) |
| new->addr.sa.sa_family = AF_INET6; |
| #endif |
| else |
| ret_err(gen_err); |
| } |
| } |
| new->next = daemon->authinterface; |
| daemon->authinterface = new; |
| |
| arg = comma; |
| } while (arg); |
| |
| break; |
| |
| case LOPT_AUTHSFS: /* --auth-sec-servers */ |
| { |
| struct name_list *new; |
| |
| do { |
| comma = split(arg); |
| new = opt_malloc(sizeof(struct name_list)); |
| new->name = opt_string_alloc(arg); |
| new->next = daemon->secondary_forward_server; |
| daemon->secondary_forward_server = new; |
| arg = comma; |
| } while (arg); |
| break; |
| } |
| |
| case LOPT_AUTHZONE: /* --auth-zone */ |
| { |
| struct auth_zone *new; |
| |
| comma = split(arg); |
| |
| new = opt_malloc(sizeof(struct auth_zone)); |
| new->domain = opt_string_alloc(arg); |
| new->subnet = NULL; |
| new->interface_names = NULL; |
| new->next = daemon->auth_zones; |
| daemon->auth_zones = new; |
| |
| while ((arg = comma)) |
| { |
| int prefixlen = 0; |
| char *prefix; |
| struct addrlist *subnet = NULL; |
| struct all_addr addr; |
| |
| comma = split(arg); |
| prefix = split_chr(arg, '/'); |
| |
| if (prefix && !atoi_check(prefix, &prefixlen)) |
| ret_err(gen_err); |
| |
| if (inet_pton(AF_INET, arg, &addr.addr.addr4)) |
| { |
| subnet = opt_malloc(sizeof(struct addrlist)); |
| subnet->prefixlen = (prefixlen == 0) ? 24 : prefixlen; |
| subnet->flags = ADDRLIST_LITERAL; |
| } |
| #ifdef HAVE_IPV6 |
| else if (inet_pton(AF_INET6, arg, &addr.addr.addr6)) |
| { |
| subnet = opt_malloc(sizeof(struct addrlist)); |
| subnet->prefixlen = (prefixlen == 0) ? 64 : prefixlen; |
| subnet->flags = ADDRLIST_LITERAL | ADDRLIST_IPV6; |
| } |
| #endif |
| else |
| { |
| struct auth_name_list *name = opt_malloc(sizeof(struct auth_name_list)); |
| name->name = opt_string_alloc(arg); |
| name->flags = AUTH4 | AUTH6; |
| name->next = new->interface_names; |
| new->interface_names = name; |
| if (prefix) |
| { |
| if (prefixlen == 4) |
| name->flags &= ~AUTH6; |
| #ifdef HAVE_IPV6 |
| else if (prefixlen == 6) |
| name->flags &= ~AUTH4; |
| #endif |
| else |
| ret_err(gen_err); |
| } |
| } |
| |
| if (subnet) |
| { |
| subnet->addr = addr; |
| subnet->next = new->subnet; |
| new->subnet = subnet; |
| } |
| } |
| break; |
| } |
| |
| case LOPT_AUTHSOA: /* --auth-soa */ |
| comma = split(arg); |
| daemon->soa_sn = (u32)atoi(arg); |
| if (comma) |
| { |
| char *cp; |
| arg = comma; |
| comma = split(arg); |
| daemon->hostmaster = opt_string_alloc(arg); |
| for (cp = daemon->hostmaster; *cp; cp++) |
| if (*cp == '@') |
| *cp = '.'; |
| |
| if (comma) |
| { |
| arg = comma; |
| comma = split(arg); |
| daemon->soa_refresh = (u32)atoi(arg); |
| if (comma) |
| { |
| arg = comma; |
| comma = split(arg); |
| daemon->soa_retry = (u32)atoi(arg); |
| if (comma) |
| { |
| arg = comma; |
| comma = split(arg); |
| daemon->soa_expiry = (u32)atoi(arg); |
| } |
| } |
| } |
| } |
| |
| break; |
| #endif |
| |
| case 's': /* --domain */ |
| case LOPT_SYNTH: /* --synth-domain */ |
| if (strcmp (arg, "#") == 0) |
| set_option_bool(OPT_RESOLV_DOMAIN); |
| else |
| { |
| char *d; |
| comma = split(arg); |
| if (!(d = canonicalise_opt(arg))) |
| ret_err(gen_err); |
| else |
| { |
| if (comma) |
| { |
| struct cond_domain *new = opt_malloc(sizeof(struct cond_domain)); |
| char *netpart; |
| |
| new->prefix = NULL; |
| |
| unhide_metas(comma); |
| if ((netpart = split_chr(comma, '/'))) |
| { |
| int msize; |
| |
| arg = split(netpart); |
| if (!atoi_check(netpart, &msize)) |
| ret_err(gen_err); |
| else if (inet_pton(AF_INET, comma, &new->start)) |
| { |
| int mask = (1 << (32 - msize)) - 1; |
| new->is6 = 0; |
| new->start.s_addr = ntohl(htonl(new->start.s_addr) & ~mask); |
| new->end.s_addr = new->start.s_addr | htonl(mask); |
| if (arg) |
| { |
| if (option != 's') |
| { |
| if (!(new->prefix = canonicalise_opt(arg)) || |
| strlen(new->prefix) > MAXLABEL - INET_ADDRSTRLEN) |
| ret_err(_("bad prefix")); |
| } |
| else if (strcmp(arg, "local") != 0 || |
| (msize != 8 && msize != 16 && msize != 24)) |
| ret_err(gen_err); |
| else |
| { |
| /* generate the equivalent of |
| local=/xxx.yyy.zzz.in-addr.arpa/ */ |
| struct server *serv = add_rev4(new->start, msize); |
| serv->flags |= SERV_NO_ADDR; |
| |
| /* local=/<domain>/ */ |
| serv = opt_malloc(sizeof(struct server)); |
| memset(serv, 0, sizeof(struct server)); |
| serv->domain = d; |
| serv->flags = SERV_HAS_DOMAIN | SERV_NO_ADDR; |
| serv->next = daemon->servers; |
| daemon->servers = serv; |
| } |
| } |
| } |
| #ifdef HAVE_IPV6 |
| else if (inet_pton(AF_INET6, comma, &new->start6)) |
| { |
| u64 mask = (1LLU << (128 - msize)) - 1LLU; |
| u64 addrpart = addr6part(&new->start6); |
| new->is6 = 1; |
| |
| /* prefix==64 overflows the mask calculation above */ |
| if (msize == 64) |
| mask = (u64)-1LL; |
| |
| new->end6 = new->start6; |
| setaddr6part(&new->start6, addrpart & ~mask); |
| setaddr6part(&new->end6, addrpart | mask); |
| |
| if (msize < 64) |
| ret_err(gen_err); |
| else if (arg) |
| { |
| if (option != 's') |
| { |
| if (!(new->prefix = canonicalise_opt(arg)) || |
| strlen(new->prefix) > MAXLABEL - INET6_ADDRSTRLEN) |
| ret_err(_("bad prefix")); |
| } |
| else if (strcmp(arg, "local") != 0 || ((msize & 4) != 0)) |
| ret_err(gen_err); |
| else |
| { |
| /* generate the equivalent of |
| local=/xxx.yyy.zzz.ip6.arpa/ */ |
| struct server *serv = add_rev6(&new->start6, msize); |
| serv->flags |= SERV_NO_ADDR; |
| |
| /* local=/<domain>/ */ |
| serv = opt_malloc(sizeof(struct server)); |
| memset(serv, 0, sizeof(struct server)); |
| serv->domain = d; |
| serv->flags = SERV_HAS_DOMAIN | SERV_NO_ADDR; |
| serv->next = daemon->servers; |
| daemon->servers = serv; |
| } |
| } |
| } |
| #endif |
| else |
| ret_err(gen_err); |
| } |
| else |
| { |
| char *prefstr; |
| arg = split(comma); |
| prefstr = split(arg); |
| |
| if (inet_pton(AF_INET, comma, &new->start)) |
| { |
| new->is6 = 0; |
| if (!arg) |
| new->end.s_addr = new->start.s_addr; |
| else if (!inet_pton(AF_INET, arg, &new->end)) |
| ret_err(gen_err); |
| } |
| #ifdef HAVE_IPV6 |
| else if (inet_pton(AF_INET6, comma, &new->start6)) |
| { |
| new->is6 = 1; |
| if (!arg) |
| memcpy(&new->end6, &new->start6, IN6ADDRSZ); |
| else if (!inet_pton(AF_INET6, arg, &new->end6)) |
| ret_err(gen_err); |
| } |
| #endif |
| else |
| ret_err(gen_err); |
| |
| if (option != 's' && prefstr) |
| { |
| if (!(new->prefix = canonicalise_opt(prefstr)) || |
| strlen(new->prefix) > MAXLABEL - INET_ADDRSTRLEN) |
| ret_err(_("bad prefix")); |
| } |
| } |
| |
| new->domain = d; |
| if (option == 's') |
| { |
| new->next = daemon->cond_domain; |
| daemon->cond_domain = new; |
| } |
| else |
| { |
| new->next = daemon->synth_domains; |
| daemon->synth_domains = new; |
| } |
| } |
| else if (option == 's') |
| daemon->domain_suffix = d; |
| else |
| ret_err(gen_err); |
| } |
| } |
| break; |
| |
| case 'u': /* --user */ |
| daemon->username = opt_string_alloc(arg); |
| break; |
| |
| case 'g': /* --group */ |
| daemon->groupname = opt_string_alloc(arg); |
| daemon->group_set = 1; |
| break; |
| |
| #ifdef HAVE_DHCP |
| case LOPT_SCRIPTUSR: /* --scriptuser */ |
| daemon->scriptuser = opt_string_alloc(arg); |
| break; |
| #endif |
| |
| case 'i': /* --interface */ |
| do { |
| struct iname *new = opt_malloc(sizeof(struct iname)); |
| comma = split(arg); |
| new->next = daemon->if_names; |
| daemon->if_names = new; |
| /* new->name may be NULL if someone does |
| "interface=" to disable all interfaces except loop. */ |
| new->name = opt_string_alloc(arg); |
| new->used = 0; |
| arg = comma; |
| } while (arg); |
| break; |
| |
| case LOPT_TFTP: /* --enable-tftp */ |
| set_option_bool(OPT_TFTP); |
| if (!arg) |
| break; |
| /* fall through */ |
| |
| case 'I': /* --except-interface */ |
| case '2': /* --no-dhcp-interface */ |
| do { |
| struct iname *new = opt_malloc(sizeof(struct iname)); |
| comma = split(arg); |
| new->name = opt_string_alloc(arg); |
| if (option == 'I') |
| { |
| new->next = daemon->if_except; |
| daemon->if_except = new; |
| } |
| else if (option == LOPT_TFTP) |
| { |
| new->next = daemon->tftp_interfaces; |
| daemon->tftp_interfaces = new; |
| } |
| else |
| { |
| new->next = daemon->dhcp_except; |
| daemon->dhcp_except = new; |
| } |
| arg = comma; |
| } while (arg); |
| break; |
| |
| case 'B': /* --bogus-nxdomain */ |
| case LOPT_IGNORE_ADDR: /* --ignore-address */ |
| { |
| struct in_addr addr; |
| unhide_metas(arg); |
| if (arg && (inet_pton(AF_INET, arg, &addr) > 0)) |
| { |
| struct bogus_addr *baddr = opt_malloc(sizeof(struct bogus_addr)); |
| if (option == 'B') |
| { |
| baddr->next = daemon->bogus_addr; |
| daemon->bogus_addr = baddr; |
| } |
| else |
| { |
| baddr->next = daemon->ignore_addr; |
| daemon->ignore_addr = baddr; |
| } |
| baddr->addr = addr; |
| } |
| else |
| ret_err(gen_err); /* error */ |
| break; |
| } |
| |
| case 'a': /* --listen-address */ |
| case LOPT_AUTHPEER: /* --auth-peer */ |
| do { |
| struct iname *new = opt_malloc(sizeof(struct iname)); |
| comma = split(arg); |
| unhide_metas(arg); |
| if (arg && (inet_pton(AF_INET, arg, &new->addr.in.sin_addr) > 0)) |
| { |
| new->addr.sa.sa_family = AF_INET; |
| new->addr.in.sin_port = 0; |
| #ifdef HAVE_SOCKADDR_SA_LEN |
| new->addr.in.sin_len = sizeof(new->addr.in); |
| #endif |
| } |
| #ifdef HAVE_IPV6 |
| else if (arg && inet_pton(AF_INET6, arg, &new->addr.in6.sin6_addr) > 0) |
| { |
| new->addr.sa.sa_family = AF_INET6; |
| new->addr.in6.sin6_flowinfo = 0; |
| new->addr.in6.sin6_scope_id = 0; |
| new->addr.in6.sin6_port = 0; |
| #ifdef HAVE_SOCKADDR_SA_LEN |
| new->addr.in6.sin6_len = sizeof(new->addr.in6); |
| #endif |
| } |
| #endif |
| else |
| ret_err(gen_err); |
| |
| new->used = 0; |
| if (option == 'a') |
| { |
| new->next = daemon->if_addrs; |
| daemon->if_addrs = new; |
| } |
| else |
| { |
| new->next = daemon->auth_peers; |
| daemon->auth_peers = new; |
| } |
| arg = comma; |
| } while (arg); |
| break; |
| |
| case 'S': /* --server */ |
| case LOPT_LOCAL: /* --local */ |
| case 'A': /* --address */ |
| case LOPT_NO_REBIND: /* --rebind-domain-ok */ |
| { |
| struct server *serv, *newlist = NULL; |
| |
| unhide_metas(arg); |
| |
| if (arg && (*arg == '/' || option == LOPT_NO_REBIND)) |
| { |
| int rebind = !(*arg == '/'); |
| char *end = NULL; |
| if (!rebind) |
| arg++; |
| while (rebind || (end = split_chr(arg, '/'))) |
| { |
| char *domain = NULL; |
| /* elide leading dots - they are implied in the search algorithm */ |
| while (*arg == '.') arg++; |
| /* # matches everything and becomes a zero length domain string */ |
| if (strcmp(arg, "#") == 0) |
| domain = ""; |
| else if (strlen (arg) != 0 && !(domain = canonicalise_opt(arg))) |
| option = '?'; |
| serv = opt_malloc(sizeof(struct server)); |
| memset(serv, 0, sizeof(struct server)); |
| serv->next = newlist; |
| newlist = serv; |
| serv->domain = domain; |
| serv->flags = domain ? SERV_HAS_DOMAIN : SERV_FOR_NODOTS; |
| arg = end; |
| if (rebind) |
| break; |
| } |
| if (!newlist) |
| ret_err(gen_err); |
| } |
| else |
| { |
| newlist = opt_malloc(sizeof(struct server)); |
| memset(newlist, 0, sizeof(struct server)); |
| #ifdef HAVE_LOOP |
| newlist->uid = rand32(); |
| #endif |
| } |
| |
| if (servers_only && option == 'S') |
| newlist->flags |= SERV_FROM_FILE; |
| |
| if (option == 'A') |
| { |
| newlist->flags |= SERV_LITERAL_ADDRESS; |
| if (!(newlist->flags & SERV_TYPE)) |
| ret_err(gen_err); |
| } |
| else if (option == LOPT_NO_REBIND) |
| newlist->flags |= SERV_NO_REBIND; |
| |
| if (!arg || !*arg) |
| { |
| if (!(newlist->flags & SERV_NO_REBIND)) |
| newlist->flags |= SERV_NO_ADDR; /* no server */ |
| if (newlist->flags & SERV_LITERAL_ADDRESS) |
| ret_err(gen_err); |
| } |
| |
| else if (strcmp(arg, "#") == 0) |
| { |
| newlist->flags |= SERV_USE_RESOLV; /* treat in ordinary way */ |
| if (newlist->flags & SERV_LITERAL_ADDRESS) |
| ret_err(gen_err); |
| } |
| else |
| { |
| char *err = parse_server(arg, &newlist->addr, &newlist->source_addr, newlist->interface, &newlist->flags); |
| if (err) |
| ret_err(err); |
| } |
| |
| serv = newlist; |
| while (serv->next) |
| { |
| serv->next->flags = serv->flags; |
| serv->next->addr = serv->addr; |
| serv->next->source_addr = serv->source_addr; |
| strcpy(serv->next->interface, serv->interface); |
| serv = serv->next; |
| } |
| serv->next = daemon->servers; |
| daemon->servers = newlist; |
| break; |
| } |
| |
| case LOPT_REV_SERV: /* --rev-server */ |
| { |
| char *string; |
| int size; |
| struct server *serv; |
| struct in_addr addr4; |
| #ifdef HAVE_IPV6 |
| struct in6_addr addr6; |
| #endif |
| |
| unhide_metas(arg); |
| if (!arg || !(comma=split(arg)) || !(string = split_chr(arg, '/')) || !atoi_check(string, &size)) |
| ret_err(gen_err); |
| |
| if (inet_pton(AF_INET, arg, &addr4)) |
| serv = add_rev4(addr4, size); |
| #ifdef HAVE_IPV6 |
| else if (inet_pton(AF_INET6, arg, &addr6)) |
| serv = add_rev6(&addr6, size); |
| #endif |
| else |
| ret_err(gen_err); |
| |
| string = parse_server(comma, &serv->addr, &serv->source_addr, serv->interface, &serv->flags); |
| |
| if (string) |
| ret_err(string); |
| |
| if (servers_only) |
| serv->flags |= SERV_FROM_FILE; |
| |
| break; |
| } |
| |
| case LOPT_IPSET: /* --ipset */ |
| #ifndef HAVE_IPSET |
| ret_err(_("recompile with HAVE_IPSET defined to enable ipset directives")); |
| break; |
| #else |
| { |
| struct ipsets ipsets_head; |
| struct ipsets *ipsets = &ipsets_head; |
| int size; |
| char *end; |
| char **sets, **sets_pos; |
| memset(ipsets, 0, sizeof(struct ipsets)); |
| unhide_metas(arg); |
| if (arg && *arg == '/') |
| { |
| arg++; |
| while ((end = split_chr(arg, '/'))) |
| { |
| char *domain = NULL; |
| /* elide leading dots - they are implied in the search algorithm */ |
| while (*arg == '.') |
| arg++; |
| /* # matches everything and becomes a zero length domain string */ |
| if (strcmp(arg, "#") == 0 || !*arg) |
| domain = ""; |
| else if (strlen(arg) != 0 && !(domain = canonicalise_opt(arg))) |
| option = '?'; |
| ipsets->next = opt_malloc(sizeof(struct ipsets)); |
| ipsets = ipsets->next; |
| memset(ipsets, 0, sizeof(struct ipsets)); |
| ipsets->domain = domain; |
| arg = end; |
| } |
| } |
| else |
| { |
| ipsets->next = opt_malloc(sizeof(struct ipsets)); |
| ipsets = ipsets->next; |
| memset(ipsets, 0, sizeof(struct ipsets)); |
| ipsets->domain = ""; |
| } |
| if (!arg || !*arg) |
| { |
| option = '?'; |
| break; |
| } |
| size = 2; |
| for (end = arg; *end; ++end) |
| if (*end == ',') |
| ++size; |
| |
| sets = sets_pos = opt_malloc(sizeof(char *) * size); |
| |
| do { |
| end = split(arg); |
| *sets_pos++ = opt_string_alloc(arg); |
| arg = end; |
| } while (end); |
| *sets_pos = 0; |
| for (ipsets = &ipsets_head; ipsets->next; ipsets = ipsets->next) |
| ipsets->next->sets = sets; |
| ipsets->next = daemon->ipsets; |
| daemon->ipsets = ipsets_head.next; |
| |
| break; |
| } |
| #endif |
| |
| case 'c': /* --cache-size */ |
| { |
| int size; |
| |
| if (!atoi_check(arg, &size)) |
| ret_err(gen_err); |
| else |
| { |
| /* zero is OK, and means no caching. */ |
| |
| if (size < 0) |
| size = 0; |
| else if (size > 10000) |
| size = 10000; |
| |
| daemon->cachesize = size; |
| } |
| break; |
| } |
| |
| case 'p': /* --port */ |
| if (!atoi_check16(arg, &daemon->port)) |
| ret_err(gen_err); |
| break; |
| |
| case LOPT_MINPORT: /* --min-port */ |
| if (!atoi_check16(arg, &daemon->min_port)) |
| ret_err(gen_err); |
| break; |
| |
| case '0': /* --dns-forward-max */ |
| if (!atoi_check(arg, &daemon->ftabsize)) |
| ret_err(gen_err); |
| break; |
| |
| case 'q': /* --log-queries */ |
| set_option_bool(OPT_LOG); |
| if (arg && strcmp(arg, "extra") == 0) |
| set_option_bool(OPT_EXTRALOG); |
| break; |
| |
| case LOPT_MAX_LOGS: /* --log-async */ |
| daemon->max_logs = LOG_MAX; /* default */ |
| if (arg && !atoi_check(arg, &daemon->max_logs)) |
| ret_err(gen_err); |
| else if (daemon->max_logs > 100) |
| daemon->max_logs = 100; |
| break; |
| |
| case 'P': /* --edns-packet-max */ |
| { |
| int i; |
| if (!atoi_check(arg, &i)) |
| ret_err(gen_err); |
| daemon->edns_pktsz = (unsigned short)i; |
| break; |
| } |
| |
| case 'Q': /* --query-port */ |
| if (!atoi_check16(arg, &daemon->query_port)) |
| ret_err(gen_err); |
| /* if explicitly set to zero, use single OS ephemeral port |
| and disable random ports */ |
| if (daemon->query_port == 0) |
| daemon->osport = 1; |
| break; |
| |
| case 'T': /* --local-ttl */ |
| case LOPT_NEGTTL: /* --neg-ttl */ |
| case LOPT_MAXTTL: /* --max-ttl */ |
| case LOPT_MINCTTL: /* --min-cache-ttl */ |
| case LOPT_MAXCTTL: /* --max-cache-ttl */ |
| case LOPT_AUTHTTL: /* --auth-ttl */ |
| { |
| int ttl; |
| if (!atoi_check(arg, &ttl)) |
| ret_err(gen_err); |
| else if (option == LOPT_NEGTTL) |
| daemon->neg_ttl = (unsigned long)ttl; |
| else if (option == LOPT_MAXTTL) |
| daemon->max_ttl = (unsigned long)ttl; |
| else if (option == LOPT_MINCTTL) |
| { |
| if (ttl > TTL_FLOOR_LIMIT) |
| ttl = TTL_FLOOR_LIMIT; |
| daemon->min_cache_ttl = (unsigned long)ttl; |
| } |
| else if (option == LOPT_MAXCTTL) |
| daemon->max_cache_ttl = (unsigned long)ttl; |
| else if (option == LOPT_AUTHTTL) |
| daemon->auth_ttl = (unsigned long)ttl; |
| else |
| daemon->local_ttl = (unsigned long)ttl; |
| break; |
| } |
| |
| #ifdef HAVE_DHCP |
| case 'X': /* --dhcp-lease-max */ |
| if (!atoi_check(arg, &daemon->dhcp_max)) |
| ret_err(gen_err); |
| break; |
| #endif |
| |
| #ifdef HAVE_TFTP |
| case LOPT_TFTP_MAX: /* --tftp-max */ |
| if (!atoi_check(arg, &daemon->tftp_max)) |
| ret_err(gen_err); |
| break; |
| |
| case LOPT_PREFIX: /* --tftp-prefix */ |
| comma = split(arg); |
| if (comma) |
| { |
| struct tftp_prefix *new = opt_malloc(sizeof(struct tftp_prefix)); |
| new->interface = opt_string_alloc(comma); |
| new->prefix = opt_string_alloc(arg); |
| new->next = daemon->if_prefix; |
| daemon->if_prefix = new; |
| } |
| else |
| daemon->tftp_prefix = opt_string_alloc(arg); |
| break; |
| |
| case LOPT_TFTPPORTS: /* --tftp-port-range */ |
| if (!(comma = split(arg)) || |
| !atoi_check16(arg, &daemon->start_tftp_port) || |
| !atoi_check16(comma, &daemon->end_tftp_port)) |
| ret_err(_("bad port range")); |
| |
| if (daemon->start_tftp_port > daemon->end_tftp_port) |
| { |
| int tmp = daemon->start_tftp_port; |
| daemon->start_tftp_port = daemon->end_tftp_port; |
| daemon->end_tftp_port = tmp; |
| } |
| |
| break; |
| #endif |
| |
| case LOPT_BRIDGE: /* --bridge-interface */ |
| { |
| struct dhcp_bridge *new = opt_malloc(sizeof(struct dhcp_bridge)); |
| if (!(comma = split(arg)) || strlen(arg) > IF_NAMESIZE - 1 ) |
| ret_err(_("bad bridge-interface")); |
| |
| strcpy(new->iface, arg); |
| new->alias = NULL; |
| new->next = daemon->bridges; |
| daemon->bridges = new; |
| |
| do { |
| arg = comma; |
| comma = split(arg); |
| if (strlen(arg) != 0 && strlen(arg) <= IF_NAMESIZE - 1) |
| { |
| struct dhcp_bridge *b = opt_malloc(sizeof(struct dhcp_bridge)); |
| b->next = new->alias; |
| new->alias = b; |
| strcpy(b->iface, arg); |
| } |
| } while (comma); |
| |
| break; |
| } |
| |
| #ifdef HAVE_DHCP |
| case 'F': /* --dhcp-range */ |
| { |
| int k, leasepos = 2; |
| char *cp, *a[8] = { NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL }; |
| struct dhcp_context *new = opt_malloc(sizeof(struct dhcp_context)); |
| |
| memset (new, 0, sizeof(*new)); |
| new->lease_time = DEFLEASE; |
| |
| if (!arg) |
| { |
| option = '?'; |
| break; |
| } |
| |
| while(1) |
| { |
| for (cp = arg; *cp; cp++) |
| if (!(*cp == ' ' || *cp == '.' || *cp == ':' || |
| (*cp >= 'a' && *cp <= 'f') || (*cp >= 'A' && *cp <= 'F') || |
| (*cp >='0' && *cp <= '9'))) |
| break; |
| |
| if (*cp != ',' && (comma = split(arg))) |
| { |
| if (is_tag_prefix(arg)) |
| { |
| struct dhcp_netid *tt = opt_malloc(sizeof (struct dhcp_netid)); |
| tt->net = opt_string_alloc(arg+4); |
| tt->next = new->filter; |
| /* ignore empty tag */ |
| if (tt->net) |
| new->filter = tt; |
| } |
| else |
| { |
| if (new->netid.net) |
| ret_err(_("only one tag allowed")); |
| else if (strstr(arg, "set:") == arg) |
| new->netid.net = opt_string_alloc(arg+4); |
| else |
| new->netid.net = opt_string_alloc(arg); |
| } |
| arg = comma; |
| } |
| else |
| { |
| a[0] = arg; |
| break; |
| } |
| } |
| |
| for (k = 1; k < 8; k++) |
| if (!(a[k] = split(a[k-1]))) |
| break; |
| |
| if (k < 2) |
| ret_err(_("bad dhcp-range")); |
| |
| if (inet_pton(AF_INET, a[0], &new->start)) |
| { |
| new->next = daemon->dhcp; |
| daemon->dhcp = new; |
| new->end = new->start; |
| if (strcmp(a[1], "static") == 0) |
| new->flags |= CONTEXT_STATIC; |
| else if (strcmp(a[1], "proxy") == 0) |
| new->flags |= CONTEXT_PROXY; |
| else if (!inet_pton(AF_INET, a[1], &new->end)) |
| ret_err(_("bad dhcp-range")); |
| |
| if (ntohl(new->start.s_addr) > ntohl(new->end.s_addr)) |
| { |
| struct in_addr tmp = new->start; |
| new->start = new->end; |
| new->end = tmp; |
| } |
| |
| if (k >= 3 && strchr(a[2], '.') && |
| (inet_pton(AF_INET, a[2], &new->netmask) > 0)) |
| { |
| new->flags |= CONTEXT_NETMASK; |
| leasepos = 3; |
| if (!is_same_net(new->start, new->end, new->netmask)) |
| ret_err(_("inconsistent DHCP range")); |
| } |
| |
| if (k >= 4 && strchr(a[3], '.') && |
| (inet_pton(AF_INET, a[3], &new->broadcast) > 0)) |
| { |
| new->flags |= CONTEXT_BRDCAST; |
| leasepos = 4; |
| } |
| } |
| #ifdef HAVE_DHCP6 |
| else if (inet_pton(AF_INET6, a[0], &new->start6)) |
| { |
| new->flags |= CONTEXT_V6; |
| new->prefix = 64; /* default */ |
| new->end6 |