2 This file is part of GNUnet.
3 Copyright (C) 2009, 2010, 2011 Christian Grothoff (and other contributing authors)
5 GNUnet is free software; you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published
7 by the Free Software Foundation; either version 3, or (at your
8 option) any later version.
10 GNUnet is distributed in the hope that it will be useful, but
11 WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 General Public License for more details.
15 You should have received a copy of the GNU General Public License
16 along with GNUnet; see the file COPYING. If not, write to the
17 Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
18 Boston, MA 02110-1301, USA.
23 * @brief Library handling UPnP and NAT-PMP port forwarding and
24 * external IP address retrieval
25 * @author Milan Bouchet-Valat
26 * @author Christian Grothoff
29 #include "gnunet_util_lib.h"
30 #include "gnunet_resolver_service.h"
31 #include "gnunet_nat_lib.h"
34 #define LOG(kind,...) GNUNET_log_from (kind, "nat", __VA_ARGS__)
37 * How often do we scan for changes in our IP address from our local
40 #define IFC_SCAN_FREQUENCY GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_MINUTES, 15)
43 * How often do we scan for changes in how our hostname resolves?
45 #define HOSTNAME_DNS_FREQUENCY GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_MINUTES, 20)
49 * How often do we scan for changes in how our external (dyndns) hostname resolves?
51 #define DYNDNS_FREQUENCY GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_MINUTES, 7)
54 * How long until we give up trying to resolve our own hostname?
56 #define HOSTNAME_RESOLVE_TIMEOUT GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_SECONDS, 1)
60 * Where did the given local address originate from?
61 * To be used for debugging as well as in the future
62 * to remove all addresses from a certain source when
63 * we reevaluate the source.
65 enum LocalAddressSource
68 * Address was obtained by DNS resolution of the external hostname
69 * given in the configuration (i.e. hole-punched DynDNS setup).
74 * Address was obtained by an external STUN server
79 * Address was obtained by DNS resolution of the external hostname
80 * given in the configuration (i.e. hole-punched DynDNS setup)
81 * during the previous iteration (see #3213).
86 * Address was obtained by looking up our own hostname in DNS.
91 * Address was obtained by scanning our hosts's network interfaces
92 * and taking their address (no DNS involved).
94 LAL_INTERFACE_ADDRESS,
97 * Addresses we were explicitly bound to.
102 * Addresses from UPnP or PMP
114 * List of local addresses that we currently deem valid. Actual
115 * struct is followed by the 'struct sockaddr'. Note that the code
116 * intentionally makes no attempt to ensure that a particular address
117 * is only listed once (especially since it may come from different
118 * sources, and the source is an "internal" construct).
120 struct LocalAddressList
123 * This is a linked list.
125 struct LocalAddressList *next;
130 struct LocalAddressList *prev;
133 * Number of bytes of address that follow.
138 * Origin of the local address.
140 enum LocalAddressSource source;
145 * Handle for miniupnp-based NAT traversal actions.
151 * Doubly-linked list.
153 struct MiniList *next;
156 * Doubly-linked list.
158 struct MiniList *prev;
161 * Handle to mini-action.
163 struct GNUNET_NAT_MiniHandle *mini;
166 * Local port number that was mapped.
174 * Handle for active NAT registrations.
176 struct GNUNET_NAT_Handle
180 * Configuration to use.
182 const struct GNUNET_CONFIGURATION_Handle *cfg;
185 * Function to call when we learn about a new address.
187 GNUNET_NAT_AddressCallback address_callback;
190 * Function to call when we notice another peer asking for
191 * connection reversal.
193 GNUNET_NAT_ReversalCallback reversal_callback;
196 * Closure for callbacks (@e address_callback and @e reversal_callback)
201 * Handle for (DYN)DNS lookup of our external IP.
203 struct GNUNET_RESOLVER_RequestHandle *ext_dns;
206 * Handle for request of hostname resolution, non-NULL if pending.
208 struct GNUNET_RESOLVER_RequestHandle *hostname_dns;
211 * stdout pipe handle for the gnunet-helper-nat-server process
213 struct GNUNET_DISK_PipeHandle *server_stdout;
216 * stdout file handle (for reading) for the gnunet-helper-nat-server process
218 const struct GNUNET_DISK_FileHandle *server_stdout_handle;
221 * Linked list of currently valid addresses (head).
223 struct LocalAddressList *lal_head;
226 * Linked list of currently valid addresses (tail).
228 struct LocalAddressList *lal_tail;
231 * How long do we wait for restarting a crashed gnunet-helper-nat-server?
233 struct GNUNET_TIME_Relative server_retry_delay;
236 * ID of select gnunet-helper-nat-server stdout read task
238 struct GNUNET_SCHEDULER_Task * server_read_task;
241 * ID of interface IP-scan task
243 struct GNUNET_SCHEDULER_Task * ifc_task;
246 * ID of hostname DNS lookup task
248 struct GNUNET_SCHEDULER_Task * hostname_task;
251 * ID of DynDNS lookup task
253 struct GNUNET_SCHEDULER_Task *dns_task;
256 * How often do we scan for changes in our IP address from our local
259 struct GNUNET_TIME_Relative ifc_scan_frequency;
262 * How often do we scan for changes in how our hostname resolves?
264 struct GNUNET_TIME_Relative hostname_dns_frequency;
267 * How often do we scan for changes in how our external (dyndns) hostname resolves?
269 struct GNUNET_TIME_Relative dyndns_frequency;
272 * The process id of the server process (if behind NAT)
274 struct GNUNET_OS_Process *server_proc;
277 * LAN address as passed by the caller (array).
279 struct sockaddr **local_addrs;
282 * Length of the @e local_addrs.
284 socklen_t *local_addrlens;
287 * List of handles for UPnP-traversal, one per local port (if
290 struct MiniList *mini_head;
293 * List of handles for UPnP-traversal, one per local port (if
296 struct MiniList *mini_tail;
299 * Number of entries in 'local_addrs' array.
301 unsigned int num_local_addrs;
304 * Our external address (according to config, UPnP may disagree...),
305 * in dotted decimal notation, IPv4-only. Or NULL if not known.
307 char *external_address;
310 * Presumably our internal address (according to config)
312 char *internal_address;
315 * Is this transport configured to be behind a NAT?
320 * Has the NAT been punched? (according to config)
325 * Is this transport configured to allow connections to NAT'd peers?
327 int enable_nat_client;
330 * Should we run the gnunet-helper-nat-server?
332 int enable_nat_server;
335 * Are we allowed to try UPnP/PMP for NAT traversal?
340 * Should we use local addresses (loopback)? (according to config)
342 int use_localaddresses;
345 * Should we return local addresses to clients
347 int return_localaddress;
350 * Should we do a DNS lookup of our hostname to find out our own IP?
355 * Is using IPv6 disabled?
360 * Is this TCP or UDP?
365 * Port we advertise to the outside.
373 * Try to start the gnunet-helper-nat-server (if it is not
376 * @param h handle to NAT
379 start_gnunet_nat_server (struct GNUNET_NAT_Handle *h);
383 * Remove all addresses from the list of 'local' addresses
384 * that originated from the given source.
386 * @param h handle to NAT
387 * @param src source that identifies addresses to remove
390 remove_from_address_list_by_source (struct GNUNET_NAT_Handle *h,
391 enum LocalAddressSource src)
393 struct LocalAddressList *pos;
394 struct LocalAddressList *next;
397 while (NULL != (pos = next))
400 if (pos->source != src)
402 GNUNET_CONTAINER_DLL_remove (h->lal_head, h->lal_tail, pos);
403 if (NULL != h->address_callback)
404 h->address_callback (h->callback_cls, GNUNET_NO,
405 (const struct sockaddr *) &pos[1], pos->addrlen);
412 * Add the given address to the list of 'local' addresses, thereby
413 * making it a 'legal' address for this peer to have.
415 * @param h handle to NAT
416 * @param src where did the local address originate from?
417 * @param arg the address, some `struct sockaddr`
418 * @param arg_size number of bytes in @a arg
421 add_to_address_list_as_is (struct GNUNET_NAT_Handle *h,
422 enum LocalAddressSource src,
423 const struct sockaddr *arg, socklen_t arg_size)
425 struct LocalAddressList *lal;
427 lal = GNUNET_malloc (sizeof (struct LocalAddressList) + arg_size);
428 memcpy (&lal[1], arg, arg_size);
429 lal->addrlen = arg_size;
431 GNUNET_CONTAINER_DLL_insert (h->lal_head, h->lal_tail, lal);
432 LOG (GNUNET_ERROR_TYPE_DEBUG,
433 "Adding address `%s' from source %d\n",
434 GNUNET_a2s (arg, arg_size),
436 if (NULL != h->address_callback)
437 h->address_callback (h->callback_cls, GNUNET_YES, arg, arg_size);
442 * Add the given address to the list of 'local' addresses, thereby
443 * making it a 'legal' address for this peer to have. Set the
444 * port number in the process to the advertised port and possibly
445 * also to zero (if we have the gnunet-helper-nat-server).
447 * @param h handle to NAT
448 * @param src where did the local address originate from?
449 * @param arg the address, some `struct sockaddr`
450 * @param arg_size number of bytes in @a arg
453 add_to_address_list (struct GNUNET_NAT_Handle *h,
454 enum LocalAddressSource src,
455 const struct sockaddr *arg,
458 struct sockaddr_in s4;
459 const struct sockaddr_in *in4;
460 struct sockaddr_in6 s6;
461 const struct sockaddr_in6 *in6;
463 if (arg_size == sizeof (struct sockaddr_in))
465 in4 = (const struct sockaddr_in *) arg;
467 s4.sin_port = htons (h->adv_port);
468 add_to_address_list_as_is (h, src, (const struct sockaddr *) &s4,
469 sizeof (struct sockaddr_in));
470 if (GNUNET_YES == h->enable_nat_server)
472 /* also add with PORT = 0 to indicate NAT server is enabled */
473 s4.sin_port = htons (0);
474 add_to_address_list_as_is (h, src, (const struct sockaddr *) &s4,
475 sizeof (struct sockaddr_in));
478 else if (arg_size == sizeof (struct sockaddr_in6))
480 if (GNUNET_YES != h->disable_ipv6)
482 in6 = (const struct sockaddr_in6 *) arg;
484 s6.sin6_port = htons (h->adv_port);
485 add_to_address_list_as_is (h, src, (const struct sockaddr *) &s6,
486 sizeof (struct sockaddr_in6));
497 * Add the given IP address to the list of 'local' addresses, thereby
498 * making it a 'legal' address for this peer to have.
500 * @param h handle to NAT
501 * @param src where did the local address originate from?
502 * @param addr the address, some `struct in_addr` or `struct in6_addr`
503 * @param addrlen number of bytes in addr
506 add_ip_to_address_list (struct GNUNET_NAT_Handle *h,
507 enum LocalAddressSource src, const void *addr,
510 struct sockaddr_in s4;
511 const struct in_addr *in4;
512 struct sockaddr_in6 s6;
513 const struct in6_addr *in6;
515 if (addrlen == sizeof (struct in_addr))
517 in4 = (const struct in_addr *) addr;
518 memset (&s4, 0, sizeof (s4));
519 s4.sin_family = AF_INET;
521 #if HAVE_SOCKADDR_IN_SIN_LEN
522 s4.sin_len = (u_char) sizeof (struct sockaddr_in);
525 add_to_address_list (h, src, (const struct sockaddr *) &s4,
526 sizeof (struct sockaddr_in));
527 if (GNUNET_YES == h->enable_nat_server)
529 /* also add with PORT = 0 to indicate NAT server is enabled */
530 s4.sin_port = htons (0);
531 add_to_address_list (h, src, (const struct sockaddr *) &s4,
532 sizeof (struct sockaddr_in));
536 else if (addrlen == sizeof (struct in6_addr))
538 if (GNUNET_YES != h->disable_ipv6)
540 in6 = (const struct in6_addr *) addr;
541 memset (&s6, 0, sizeof (s6));
542 s6.sin6_family = AF_INET6;
543 s6.sin6_port = htons (h->adv_port);
544 #if HAVE_SOCKADDR_IN_SIN_LEN
545 s6.sin6_len = (u_char) sizeof (struct sockaddr_in6);
548 add_to_address_list (h, src, (const struct sockaddr *) &s6,
549 sizeof (struct sockaddr_in6));
560 * Task to do DNS lookup on our external hostname to
561 * get DynDNS-IP addresses.
563 * @param cls the NAT handle
564 * @param tc scheduler context
567 resolve_dns (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc);
571 * Our (external) hostname was resolved and the configuration says that
572 * the NAT was hole-punched.
574 * @param cls the `struct GNUNET_NAT_Handle`
575 * @param addr NULL on error, otherwise result of DNS lookup
576 * @param addrlen number of bytes in @a addr
579 process_external_ip (void *cls,
580 const struct sockaddr *addr,
583 struct GNUNET_NAT_Handle *h = cls;
584 struct in_addr dummy;
589 /* Current iteration is over, remove 'old' IPs now */
590 LOG (GNUNET_ERROR_TYPE_DEBUG,
591 "Purging old IPs for external address\n");
592 remove_from_address_list_by_source (h, LAL_EXTERNAL_IP_OLD);
593 if (1 == inet_pton (AF_INET,
597 LOG (GNUNET_ERROR_TYPE_DEBUG,
598 "Got numeric IP for external address, not repeating lookup\n");
599 return; /* repated lookup pointless: was numeric! */
602 GNUNET_SCHEDULER_add_delayed (h->dyndns_frequency,
606 LOG (GNUNET_ERROR_TYPE_DEBUG,
607 "Got IP `%s' for external address `%s'\n",
608 GNUNET_a2s (addr, addrlen),
609 h->external_address);
610 add_to_address_list (h, LAL_EXTERNAL_IP, addr, addrlen);
615 * Task to do a lookup on our hostname for IP addresses.
617 * @param cls the NAT handle
618 * @param tc scheduler context
621 resolve_hostname (void *cls,
622 const struct GNUNET_SCHEDULER_TaskContext *tc);
626 * Function called by the resolver for each address obtained from DNS
627 * for our own hostname. Add the addresses to the list of our IP
631 * @param addr one of the addresses of the host, NULL for the last address
632 * @param addrlen length of the @a addr
635 process_hostname_ip (void *cls,
636 const struct sockaddr *addr,
639 struct GNUNET_NAT_Handle *h = cls;
643 h->hostname_dns = NULL;
645 GNUNET_SCHEDULER_add_delayed (h->hostname_dns_frequency,
646 &resolve_hostname, h);
649 add_to_address_list (h, LAL_HOSTNAME_DNS, addr, addrlen);
654 * Length of the interface names returned from os_network.c.
655 * (in that file, hardcoded at 11).
657 #define IF_NAME_LEN 11
661 * Add the IP of our network interface to the list of
664 * @param cls the `struct GNUNET_NAT_Handle`
665 * @param name name of the interface
666 * @param isDefault do we think this may be our default interface
667 * @param addr address of the interface
668 * @param broadcast_addr the broadcast address (can be NULL for unknown or unassigned)
669 * @param netmask the network mask (can be NULL for unknown or unassigned))
670 * @param addrlen number of bytes in @a addr and @a broadcast_addr
671 * @return #GNUNET_OK to continue iterating
674 process_interfaces (void *cls,
677 const struct sockaddr *addr,
678 const struct sockaddr *broadcast_addr,
679 const struct sockaddr *netmask,
682 const static struct in6_addr any6 = IN6ADDR_ANY_INIT;
683 struct GNUNET_NAT_Handle *h = cls;
684 const struct sockaddr_in *s4;
685 const struct sockaddr_in6 *s6;
687 char buf[INET6_ADDRSTRLEN];
692 /* skip virtual interfaces created by GNUnet-vpn */
694 GNUNET_CONFIGURATION_get_value_string (h->cfg,
699 if (0 == strncasecmp (name,
703 GNUNET_free (tun_if);
707 /* skip virtual interfaces created by GNUnet-dns */
709 GNUNET_CONFIGURATION_get_value_string (h->cfg,
714 if (0 == strncasecmp (name,
718 GNUNET_free (tun_if);
722 /* skip virtual interfaces created by GNUnet-exit */
724 GNUNET_CONFIGURATION_get_value_string (h->cfg,
729 if (0 == strncasecmp (name,
733 GNUNET_free (tun_if);
739 switch (addr->sa_family)
742 /* check if we're bound to the "ANY" IP address */
743 have_any = GNUNET_NO;
744 for (i=0;i<h->num_local_addrs;i++)
746 if (h->local_addrs[i]->sa_family != AF_INET)
751 if (INADDR_ANY == ((struct sockaddr_in*) h->local_addrs[i])->sin_addr.s_addr)
753 have_any = GNUNET_YES;
757 if (GNUNET_NO == have_any)
758 return GNUNET_OK; /* not bound to IP 0.0.0.0 but to specific IP addresses,
759 do not use those from interfaces */
760 s4 = (struct sockaddr_in *) addr;
763 /* Check if address is in 127.0.0.0/8 */
764 uint32_t address = ntohl ((uint32_t) (s4->sin_addr.s_addr));
765 uint32_t value = (address & 0xFF000000) ^ 0x7F000000;
767 if ((h->return_localaddress == GNUNET_NO) && (value == 0))
771 if ((GNUNET_YES == h->use_localaddresses) || (value != 0))
773 add_ip_to_address_list (h, LAL_INTERFACE_ADDRESS, &s4->sin_addr,
774 sizeof (struct in_addr));
778 /* check if we're bound to the "ANY" IP address */
779 have_any = GNUNET_NO;
780 for (i=0;i<h->num_local_addrs;i++)
782 if (h->local_addrs[i]->sa_family != AF_INET6)
784 if (0 == memcmp (&any6,
785 &((struct sockaddr_in6*) h->local_addrs[i])->sin6_addr,
786 sizeof (struct in6_addr)))
788 have_any = GNUNET_YES;
792 if (GNUNET_NO == have_any)
793 return GNUNET_OK; /* not bound to "ANY" IP (::0) but to specific IP addresses,
794 do not use those from interfaces */
796 s6 = (struct sockaddr_in6 *) addr;
797 if (IN6_IS_ADDR_LINKLOCAL (&((struct sockaddr_in6 *) addr)->sin6_addr))
799 /* skip link local addresses */
802 if ((h->return_localaddress == GNUNET_NO) &&
803 (IN6_IS_ADDR_LOOPBACK (&((struct sockaddr_in6 *) addr)->sin6_addr)))
808 if (GNUNET_YES == h->use_localaddresses)
810 add_ip_to_address_list (h, LAL_INTERFACE_ADDRESS, &s6->sin6_addr,
811 sizeof (struct in6_addr));
818 if ((h->internal_address == NULL) && (h->server_proc == NULL) &&
819 (h->server_read_task == NULL) &&
820 (GNUNET_YES == isDefault) && ((addr->sa_family == AF_INET) ||
821 (addr->sa_family == AF_INET6)))
823 /* no internal address configured, but we found a "default"
824 * interface, try using that as our 'internal' address */
825 h->internal_address =
826 GNUNET_strdup (inet_ntop (addr->sa_family, ip, buf, sizeof (buf)));
827 start_gnunet_nat_server (h);
834 * Task that restarts the gnunet-helper-nat-server process after a crash
835 * after a certain delay.
837 * @param cls the `struct GNUNET_NAT_Handle`
838 * @param tc scheduler context
841 restart_nat_server (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
843 struct GNUNET_NAT_Handle *h = cls;
845 h->server_read_task = NULL;
846 if (0 != (tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN))
848 start_gnunet_nat_server (h);
853 * We have been notified that gnunet-helper-nat-server has written
854 * something to stdout. Handle the output, then reschedule this
855 * function to be called again once more is available.
857 * @param cls the NAT handle
858 * @param tc the scheduling context
861 nat_server_read (void *cls,
862 const struct GNUNET_SCHEDULER_TaskContext *tc)
864 struct GNUNET_NAT_Handle *h = cls;
869 const char *port_start;
870 struct sockaddr_in sin_addr;
872 h->server_read_task = NULL;
873 if ((tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN) != 0)
875 memset (mybuf, 0, sizeof (mybuf));
877 GNUNET_DISK_file_read (h->server_stdout_handle, mybuf, sizeof (mybuf));
880 LOG (GNUNET_ERROR_TYPE_DEBUG,
881 "Finished reading from server stdout with code: %d\n",
883 if (0 != GNUNET_OS_process_kill (h->server_proc, GNUNET_TERM_SIG))
884 GNUNET_log_from_strerror (GNUNET_ERROR_TYPE_WARNING, "nat", "kill");
885 GNUNET_OS_process_wait (h->server_proc);
886 GNUNET_OS_process_destroy (h->server_proc);
887 h->server_proc = NULL;
888 GNUNET_DISK_pipe_close (h->server_stdout);
889 h->server_stdout = NULL;
890 h->server_stdout_handle = NULL;
891 /* now try to restart it */
892 h->server_retry_delay = GNUNET_TIME_STD_BACKOFF (h->server_retry_delay);
893 h->server_read_task =
894 GNUNET_SCHEDULER_add_delayed (h->server_retry_delay,
895 &restart_nat_server, h);
900 for (i = 0; i < sizeof (mybuf); i++)
902 if (mybuf[i] == '\n')
907 if ((mybuf[i] == ':') && (i + 1 < sizeof (mybuf)))
910 port_start = &mybuf[i + 1];
914 /* construct socket address of sender */
915 memset (&sin_addr, 0, sizeof (sin_addr));
916 sin_addr.sin_family = AF_INET;
917 #if HAVE_SOCKADDR_IN_SIN_LEN
918 sin_addr.sin_len = sizeof (sin_addr);
920 if ((NULL == port_start) || (1 != SSCANF (port_start, "%d", &port)) ||
921 (-1 == inet_pton (AF_INET, mybuf, &sin_addr.sin_addr)))
923 /* should we restart gnunet-helper-nat-server? */
924 LOG (GNUNET_ERROR_TYPE_WARNING, "nat",
925 _("gnunet-helper-nat-server generated malformed address `%s'\n"),
927 h->server_read_task =
928 GNUNET_SCHEDULER_add_read_file (GNUNET_TIME_UNIT_FOREVER_REL,
929 h->server_stdout_handle,
930 &nat_server_read, h);
933 sin_addr.sin_port = htons ((uint16_t) port);
934 LOG (GNUNET_ERROR_TYPE_DEBUG, "gnunet-helper-nat-server read: %s:%d\n", mybuf,
936 h->reversal_callback (h->callback_cls, (const struct sockaddr *) &sin_addr,
938 h->server_read_task =
939 GNUNET_SCHEDULER_add_read_file (GNUNET_TIME_UNIT_FOREVER_REL,
940 h->server_stdout_handle, &nat_server_read,
946 * Try to start the gnunet-helper-nat-server (if it is not
949 * @param h handle to NAT
952 start_gnunet_nat_server (struct GNUNET_NAT_Handle *h)
956 if ((h->behind_nat == GNUNET_YES) && (h->enable_nat_server == GNUNET_YES) &&
957 (h->internal_address != NULL) &&
960 GNUNET_DISK_pipe (GNUNET_YES, GNUNET_YES, GNUNET_NO, GNUNET_YES))))
962 LOG (GNUNET_ERROR_TYPE_DEBUG,
963 "Starting `%s' at `%s'\n",
964 "gnunet-helper-nat-server", h->internal_address);
965 /* Start the server process */
966 binary = GNUNET_OS_get_libexec_binary_path ("gnunet-helper-nat-server");
968 GNUNET_OS_start_process (GNUNET_NO, 0, NULL, h->server_stdout, NULL,
970 "gnunet-helper-nat-server",
971 h->internal_address, NULL);
972 GNUNET_free (binary);
973 if (h->server_proc == NULL)
975 LOG (GNUNET_ERROR_TYPE_WARNING, "nat", _("Failed to start %s\n"),
976 "gnunet-helper-nat-server");
977 GNUNET_DISK_pipe_close (h->server_stdout);
978 h->server_stdout = NULL;
982 /* Close the write end of the read pipe */
983 GNUNET_DISK_pipe_close_end (h->server_stdout, GNUNET_DISK_PIPE_END_WRITE);
984 h->server_stdout_handle =
985 GNUNET_DISK_pipe_handle (h->server_stdout, GNUNET_DISK_PIPE_END_READ);
986 h->server_read_task =
987 GNUNET_SCHEDULER_add_read_file (GNUNET_TIME_UNIT_FOREVER_REL,
988 h->server_stdout_handle,
989 &nat_server_read, h);
996 * Task to scan the local network interfaces for IP addresses.
998 * @param cls the NAT handle
999 * @param tc scheduler context
1002 list_interfaces (void *cls,
1003 const struct GNUNET_SCHEDULER_TaskContext *tc)
1005 struct GNUNET_NAT_Handle *h = cls;
1008 remove_from_address_list_by_source (h, LAL_INTERFACE_ADDRESS);
1009 GNUNET_OS_network_interfaces_list (&process_interfaces, h);
1011 GNUNET_SCHEDULER_add_delayed (h->ifc_scan_frequency,
1012 &list_interfaces, h);
1017 * Task to do a lookup on our hostname for IP addresses.
1019 * @param cls the NAT handle
1020 * @param tc scheduler context
1023 resolve_hostname (void *cls,
1024 const struct GNUNET_SCHEDULER_TaskContext *tc)
1026 struct GNUNET_NAT_Handle *h = cls;
1028 h->hostname_task = NULL;
1029 remove_from_address_list_by_source (h, LAL_HOSTNAME_DNS);
1031 GNUNET_RESOLVER_hostname_resolve (AF_UNSPEC, HOSTNAME_RESOLVE_TIMEOUT,
1032 &process_hostname_ip, h);
1037 * Task to do DNS lookup on our external hostname to
1038 * get DynDNS-IP addresses.
1040 * @param cls the NAT handle
1041 * @param tc scheduler context
1044 resolve_dns (void *cls,
1045 const struct GNUNET_SCHEDULER_TaskContext *tc)
1047 struct GNUNET_NAT_Handle *h = cls;
1048 struct LocalAddressList *pos;
1051 for (pos = h->lal_head; NULL != pos; pos = pos->next)
1052 if (pos->source == LAL_EXTERNAL_IP)
1053 pos->source = LAL_EXTERNAL_IP_OLD;
1054 LOG (GNUNET_ERROR_TYPE_DEBUG,
1055 "Resolving external address `%s'\n",
1056 h->external_address);
1058 GNUNET_RESOLVER_ip_get (h->external_address, AF_INET,
1059 GNUNET_TIME_UNIT_MINUTES,
1060 &process_external_ip, h);
1065 * Add or remove UPnP-mapped addresses.
1067 * @param cls the `struct GNUNET_NAT_Handle`
1068 * @param add_remove #GNUNET_YES to mean the new public IP address, #GNUNET_NO to mean
1069 * the previous (now invalid) one
1070 * @param addr either the previous or the new public IP address
1071 * @param addrlen actual lenght of @a addr
1072 * @param ret GNUNET_NAT_ERROR_SUCCESS on success, otherwise an error code
1075 upnp_add (void *cls,
1077 const struct sockaddr *addr,
1079 enum GNUNET_NAT_StatusCode ret)
1081 struct GNUNET_NAT_Handle *h = cls;
1082 struct LocalAddressList *pos;
1083 struct LocalAddressList *next;
1086 if (GNUNET_NAT_ERROR_SUCCESS != ret)
1088 /* Error while running upnp client */
1089 LOG (GNUNET_ERROR_TYPE_ERROR,
1090 _("Error while running upnp client:\n"));
1092 //FIXME: convert error code to string
1097 if (GNUNET_YES == add_remove)
1099 add_to_address_list (h, LAL_UPNP, addr, addrlen);
1102 else if (GNUNET_NO == add_remove)
1104 /* remove address */
1106 while (NULL != (pos = next))
1109 if ((pos->source != LAL_UPNP) || (pos->addrlen != addrlen) ||
1110 (0 != memcmp (&pos[1], addr, addrlen)))
1112 GNUNET_CONTAINER_DLL_remove (h->lal_head, h->lal_tail, pos);
1113 if (NULL != h->address_callback)
1114 h->address_callback (h->callback_cls, GNUNET_NO,
1115 (const struct sockaddr *) &pos[1], pos->addrlen);
1117 return; /* only remove once */
1119 /* asked to remove address that does not exist */
1120 LOG (GNUNET_ERROR_TYPE_ERROR,
1121 "Asked to remove unkown address `%s'\n",
1122 GNUNET_a2s(addr, addrlen));
1134 * Try to add a port mapping using UPnP.
1136 * @param h overall NAT handle
1137 * @param port port to map with UPnP
1140 add_minis (struct GNUNET_NAT_Handle *h,
1143 struct MiniList *ml;
1148 if (port == ml->port)
1149 return; /* already got this port */
1153 ml = GNUNET_new (struct MiniList);
1155 ml->mini = GNUNET_NAT_mini_map_start (port, h->is_tcp, &upnp_add, h);
1157 if (NULL == ml->mini)
1159 GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
1160 _("Failed to run upnp client for port %u\n"), ml->port);
1165 GNUNET_CONTAINER_DLL_insert (h->mini_head, h->mini_tail, ml);
1170 * Task to add addresses from original bind to set of valid addrs.
1172 * @param h the NAT handle
1175 add_from_bind (struct GNUNET_NAT_Handle *h)
1177 static struct in6_addr any = IN6ADDR_ANY_INIT;
1180 struct sockaddr *sa;
1181 const struct sockaddr_in *v4;
1183 for (i = 0; i < h->num_local_addrs; i++)
1185 sa = h->local_addrs[i];
1186 switch (sa->sa_family)
1189 if (sizeof (struct sockaddr_in) != h->local_addrlens[i])
1194 v4 = (const struct sockaddr_in *) sa;
1195 if (0 != v4->sin_addr.s_addr)
1196 add_to_address_list (h,
1197 LAL_BINDTO_ADDRESS, sa,
1198 sizeof (struct sockaddr_in));
1201 GNUNET_log (GNUNET_ERROR_TYPE_INFO,
1202 "Running upnp client for address `%s'\n",
1203 GNUNET_a2s (sa,sizeof (struct sockaddr_in)));
1204 add_minis (h, ntohs (v4->sin_port));
1208 if (sizeof (struct sockaddr_in6) != h->local_addrlens[i])
1214 memcmp (&((const struct sockaddr_in6 *) sa)->sin6_addr,
1216 sizeof (struct in6_addr)))
1217 add_to_address_list (h,
1220 sizeof (struct sockaddr_in6));
1230 * Attempt to enable port redirection and detect public IP address contacting
1231 * UPnP or NAT-PMP routers on the local network. Use addr to specify to which
1232 * of the local host's addresses should the external port be mapped. The port
1233 * is taken from the corresponding sockaddr_in[6] field.
1235 * @param cfg configuration to use
1236 * @param is_tcp #GNUNET_YES for TCP, #GNUNET_NO for UDP
1237 * @param adv_port advertised port (port we are either bound to or that our OS
1238 * locally performs redirection from to our bound port).
1239 * @param num_addrs number of addresses in @a addrs
1240 * @param addrs the local addresses packets should be redirected to
1241 * @param addrlens actual lengths of the addresses
1242 * @param address_callback function to call everytime the public IP address changes
1243 * @param reversal_callback function to call if someone wants connection reversal from us
1244 * @param callback_cls closure for callbacks
1245 * @return NULL on error, otherwise handle that can be used to unregister
1247 struct GNUNET_NAT_Handle *
1248 GNUNET_NAT_register (const struct GNUNET_CONFIGURATION_Handle *cfg,
1251 unsigned int num_addrs,
1252 const struct sockaddr **addrs,
1253 const socklen_t *addrlens,
1254 GNUNET_NAT_AddressCallback address_callback,
1255 GNUNET_NAT_ReversalCallback reversal_callback,
1258 struct GNUNET_NAT_Handle *h;
1259 struct in_addr in_addr;
1263 LOG (GNUNET_ERROR_TYPE_DEBUG,
1264 "Registered with NAT service at port %u with %u IP bound local addresses\n",
1265 (unsigned int) adv_port, num_addrs);
1266 h = GNUNET_new (struct GNUNET_NAT_Handle);
1267 h->server_retry_delay = GNUNET_TIME_UNIT_SECONDS;
1270 h->address_callback = address_callback;
1271 h->reversal_callback = reversal_callback;
1272 h->callback_cls = callback_cls;
1273 h->num_local_addrs = num_addrs;
1274 h->adv_port = adv_port;
1277 h->local_addrs = GNUNET_malloc (num_addrs * sizeof (struct sockaddr *));
1278 h->local_addrlens = GNUNET_malloc (num_addrs * sizeof (socklen_t));
1279 for (i = 0; i < num_addrs; i++)
1281 GNUNET_assert (addrlens[i] > 0);
1282 GNUNET_assert (addrs[i] != NULL);
1283 h->local_addrlens[i] = addrlens[i];
1284 h->local_addrs[i] = GNUNET_malloc (addrlens[i]);
1285 memcpy (h->local_addrs[i], addrs[i], addrlens[i]);
1289 GNUNET_CONFIGURATION_have_value (cfg, "nat", "INTERNAL_ADDRESS"))
1291 (void) GNUNET_CONFIGURATION_get_value_string (cfg, "nat",
1293 &h->internal_address);
1295 if ((h->internal_address != NULL) &&
1296 (inet_pton (AF_INET, h->internal_address, &in_addr) != 1))
1298 GNUNET_log_config_invalid (GNUNET_ERROR_TYPE_WARNING,
1299 "nat", "INTERNAL_ADDRESS",
1301 GNUNET_free (h->internal_address);
1302 h->internal_address = NULL;
1306 GNUNET_CONFIGURATION_have_value (cfg, "nat", "EXTERNAL_ADDRESS"))
1308 (void) GNUNET_CONFIGURATION_get_value_string (cfg, "nat",
1310 &h->external_address);
1313 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "BEHIND_NAT");
1315 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "PUNCHED_NAT");
1316 h->enable_nat_client =
1317 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "ENABLE_ICMP_CLIENT");
1318 h->enable_nat_server =
1319 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "ENABLE_ICMP_SERVER");
1321 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "ENABLE_UPNP");
1322 h->use_localaddresses =
1323 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "USE_LOCALADDR");
1324 h->return_localaddress =
1325 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat",
1326 "RETURN_LOCAL_ADDRESSES");
1329 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "USE_HOSTNAME");
1331 GNUNET_CONFIGURATION_get_value_yesno (cfg, "nat", "DISABLEV6");
1333 GNUNET_CONFIGURATION_get_value_time (cfg, "nat", "DYNDNS_FREQUENCY",
1334 &h->dyndns_frequency))
1335 h->dyndns_frequency = DYNDNS_FREQUENCY;
1337 GNUNET_CONFIGURATION_get_value_time (cfg, "nat", "IFC_SCAN_FREQUENCY",
1338 &h->ifc_scan_frequency))
1339 h->ifc_scan_frequency = IFC_SCAN_FREQUENCY;
1341 GNUNET_CONFIGURATION_get_value_time (cfg, "nat", "HOSTNAME_DNS_FREQUENCY",
1342 &h->hostname_dns_frequency))
1343 h->hostname_dns_frequency = HOSTNAME_DNS_FREQUENCY;
1345 if (NULL == reversal_callback)
1346 h->enable_nat_server = GNUNET_NO;
1348 /* Check for UPnP client, disable immediately if not available */
1349 if ( (GNUNET_YES == h->enable_upnp) &&
1351 GNUNET_OS_check_helper_binary ("upnpc", GNUNET_NO, NULL)) )
1353 LOG (GNUNET_ERROR_TYPE_ERROR,
1354 _("UPnP enabled in configuration, but UPnP client `upnpc` command not found, disabling UPnP \n"));
1355 h->enable_upnp = GNUNET_NO;
1358 /* Check if NAT was hole-punched */
1359 if ((NULL != h->address_callback) &&
1360 (NULL != h->external_address) &&
1361 (GNUNET_YES == h->nat_punched))
1363 h->dns_task = GNUNET_SCHEDULER_add_now (&resolve_dns, h);
1364 h->enable_nat_server = GNUNET_NO;
1365 h->enable_upnp = GNUNET_NO;
1369 LOG (GNUNET_ERROR_TYPE_DEBUG,
1370 "No external IP address given to add to our list of addresses\n");
1373 /* Test for SUID binaries */
1374 binary = GNUNET_OS_get_libexec_binary_path ("gnunet-helper-nat-server");
1375 if ((h->behind_nat == GNUNET_YES) && (GNUNET_YES == h->enable_nat_server) &&
1377 GNUNET_OS_check_helper_binary (binary, GNUNET_YES, "-d 127.0.0.1" ))) // use localhost as source for that one udp-port, ok for testing
1379 h->enable_nat_server = GNUNET_NO;
1380 LOG (GNUNET_ERROR_TYPE_WARNING,
1381 _("Configuration requires `%s', but binary is not installed properly (SUID bit not set). Option disabled.\n"),
1382 "gnunet-helper-nat-server");
1384 GNUNET_free (binary);
1385 binary = GNUNET_OS_get_libexec_binary_path ("gnunet-helper-nat-client");
1386 if ((GNUNET_YES == h->enable_nat_client) &&
1388 GNUNET_OS_check_helper_binary (binary, GNUNET_YES, "-d 127.0.0.1 127.0.0.2 42"))) // none of these parameters are actually used in privilege testing mode
1390 h->enable_nat_client = GNUNET_NO;
1391 LOG (GNUNET_ERROR_TYPE_WARNING,
1393 ("Configuration requires `%s', but binary is not installed properly (SUID bit not set). Option disabled.\n"),
1394 "gnunet-helper-nat-client");
1396 GNUNET_free (binary);
1397 start_gnunet_nat_server (h);
1399 /* FIXME: add support for UPnP, etc */
1401 if (NULL != h->address_callback)
1403 h->ifc_task = GNUNET_SCHEDULER_add_now (&list_interfaces,
1405 if (GNUNET_YES == h->use_hostname)
1406 h->hostname_task = GNUNET_SCHEDULER_add_now (&resolve_hostname,
1416 * Stop port redirection and public IP address detection for the given handle.
1417 * This frees the handle, after having sent the needed commands to close open ports.
1419 * @param h the handle to stop
1422 GNUNET_NAT_unregister (struct GNUNET_NAT_Handle *h)
1425 struct LocalAddressList *lal;
1426 struct MiniList *ml;
1428 LOG (GNUNET_ERROR_TYPE_DEBUG,
1429 "NAT unregister called\n");
1430 while (NULL != (ml = h->mini_head))
1432 GNUNET_CONTAINER_DLL_remove (h->mini_head,
1435 if (NULL != ml->mini)
1436 GNUNET_NAT_mini_map_stop (ml->mini);
1439 if (NULL != h->ext_dns)
1441 GNUNET_RESOLVER_request_cancel (h->ext_dns);
1444 if (NULL != h->hostname_dns)
1446 GNUNET_RESOLVER_request_cancel (h->hostname_dns);
1447 h->hostname_dns = NULL;
1449 if (NULL != h->server_read_task)
1451 GNUNET_SCHEDULER_cancel (h->server_read_task);
1452 h->server_read_task = NULL;
1454 if (NULL != h->ifc_task)
1456 GNUNET_SCHEDULER_cancel (h->ifc_task);
1459 if (NULL != h->hostname_task)
1461 GNUNET_SCHEDULER_cancel (h->hostname_task);
1462 h->hostname_task = NULL;
1464 if (NULL != h->dns_task)
1466 GNUNET_SCHEDULER_cancel (h->dns_task);
1469 if (NULL != h->server_proc)
1471 if (0 != GNUNET_OS_process_kill (h->server_proc, GNUNET_TERM_SIG))
1472 GNUNET_log_from_strerror (GNUNET_ERROR_TYPE_WARNING, "nat", "kill");
1473 GNUNET_OS_process_wait (h->server_proc);
1474 GNUNET_OS_process_destroy (h->server_proc);
1475 h->server_proc = NULL;
1476 GNUNET_DISK_pipe_close (h->server_stdout);
1477 h->server_stdout = NULL;
1478 h->server_stdout_handle = NULL;
1480 if (NULL != h->server_stdout)
1482 GNUNET_DISK_pipe_close (h->server_stdout);
1483 h->server_stdout = NULL;
1484 h->server_stdout_handle = NULL;
1486 while (NULL != (lal = h->lal_head))
1488 GNUNET_CONTAINER_DLL_remove (h->lal_head, h->lal_tail, lal);
1489 if (NULL != h->address_callback)
1490 h->address_callback (h->callback_cls, GNUNET_NO,
1491 (const struct sockaddr *) &lal[1], lal->addrlen);
1494 for (i = 0; i < h->num_local_addrs; i++)
1495 GNUNET_free (h->local_addrs[i]);
1496 GNUNET_free_non_null (h->local_addrs);
1497 GNUNET_free_non_null (h->local_addrlens);
1498 GNUNET_free_non_null (h->external_address);
1499 GNUNET_free_non_null (h->internal_address);
1505 * We learned about a peer (possibly behind NAT) so run the
1506 * gnunet-helper-nat-client to send dummy ICMP responses to cause
1507 * that peer to connect to us (connection reversal).
1509 * @param h handle (used for configuration)
1510 * @param sa the address of the peer (IPv4-only)
1511 * @return #GNUNET_SYSERR on error, #GNUNET_NO if nat client is disabled,
1512 * #GNUNET_OK otherwise
1515 GNUNET_NAT_run_client (struct GNUNET_NAT_Handle *h,
1516 const struct sockaddr_in *sa)
1520 char inet4[INET_ADDRSTRLEN];
1521 char port_as_string[6];
1522 struct GNUNET_OS_Process *proc;
1525 if (GNUNET_YES != h->enable_nat_client)
1526 return GNUNET_NO; /* not permitted / possible */
1528 if (h->internal_address == NULL)
1530 LOG (GNUNET_ERROR_TYPE_WARNING, "nat",
1531 _("Internal IP address not known, cannot use ICMP NAT traversal method\n"));
1532 return GNUNET_SYSERR;
1534 GNUNET_assert (sa->sin_family == AF_INET);
1535 if (NULL == inet_ntop (AF_INET, &sa->sin_addr, inet4, INET_ADDRSTRLEN))
1537 GNUNET_log_from_strerror (GNUNET_ERROR_TYPE_WARNING,
1540 return GNUNET_SYSERR;
1542 GNUNET_snprintf (port_as_string,
1543 sizeof (port_as_string),
1546 LOG (GNUNET_ERROR_TYPE_DEBUG,
1547 _("Running gnunet-helper-nat-client %s %s %u\n"),
1548 h->internal_address,
1550 (unsigned int) h->adv_port);
1551 binary = GNUNET_OS_get_libexec_binary_path ("gnunet-helper-nat-client");
1553 GNUNET_OS_start_process (GNUNET_NO, 0, NULL, NULL, NULL,
1555 "gnunet-helper-nat-client",
1556 h->internal_address,
1557 inet4, port_as_string, NULL);
1558 GNUNET_free (binary);
1560 return GNUNET_SYSERR;
1561 /* we know that the gnunet-helper-nat-client will terminate virtually
1563 GNUNET_OS_process_wait (proc);
1564 GNUNET_OS_process_destroy (proc);
1570 * Test if the given address is (currently) a plausible IP address for this peer.
1572 * @param h the handle returned by register
1573 * @param addr IP address to test (IPv4 or IPv6)
1574 * @param addrlen number of bytes in @a addr
1575 * @return #GNUNET_YES if the address is plausible,
1576 * #GNUNET_NO if the address is not plausible,
1577 * #GNUNET_SYSERR if the address is malformed
1580 GNUNET_NAT_test_address (struct GNUNET_NAT_Handle *h,
1584 struct LocalAddressList *pos;
1585 const struct sockaddr_in *in4;
1586 const struct sockaddr_in6 *in6;
1588 if ((addrlen != sizeof (struct in_addr)) &&
1589 (addrlen != sizeof (struct in6_addr)))
1592 return GNUNET_SYSERR;
1594 for (pos = h->lal_head; NULL != pos; pos = pos->next)
1596 if (pos->addrlen == sizeof (struct sockaddr_in))
1598 in4 = (struct sockaddr_in *) &pos[1];
1599 if ((addrlen == sizeof (struct in_addr)) &&
1600 (0 == memcmp (&in4->sin_addr, addr, sizeof (struct in_addr))))
1603 else if (pos->addrlen == sizeof (struct sockaddr_in6))
1605 in6 = (struct sockaddr_in6 *) &pos[1];
1606 if ((addrlen == sizeof (struct in6_addr)) &&
1607 (0 == memcmp (&in6->sin6_addr, addr, sizeof (struct in6_addr))))
1615 LOG (GNUNET_ERROR_TYPE_WARNING,
1616 "Asked to validate one of my addresses and validation failed!\n");
1621 * Converts enum GNUNET_NAT_StatusCode to a string
1623 * @param err error code to resolve to a string
1624 * @return pointer to a static string containing the error code
1627 GNUNET_NAT_status2string (enum GNUNET_NAT_StatusCode err)
1631 case GNUNET_NAT_ERROR_SUCCESS:
1632 return _ ("Operation Successful");
1633 case GNUNET_NAT_ERROR_IPC_FAILURE:
1634 return _ ("Internal Failure (IPC, ...)");
1635 case GNUNET_NAT_ERROR_INTERNAL_NETWORK_ERROR:
1636 return _ ("Failure in network subsystem, check permissions.");
1637 case GNUNET_NAT_ERROR_TIMEOUT:
1638 return _ ("Encountered timeout while performing operation");
1639 case GNUNET_NAT_ERROR_NOT_ONLINE:
1640 return _ ("detected that we are offline");
1641 case GNUNET_NAT_ERROR_UPNPC_NOT_FOUND:
1642 return _ ("`upnpc` command not found");
1643 case GNUNET_NAT_ERROR_UPNPC_FAILED:
1644 return _ ("Failed to run `upnpc` command");
1645 case GNUNET_NAT_ERROR_UPNPC_TIMEOUT:
1646 return _ ("`upnpc' command took too long, process killed");
1647 case GNUNET_NAT_ERROR_UPNPC_PORTMAP_FAILED:
1648 return _ ("`upnpc' command failed to establish port mapping");
1649 case GNUNET_NAT_ERROR_EXTERNAL_IP_UTILITY_NOT_FOUND:
1650 return _ ("`external-ip' command not found");
1651 case GNUNET_NAT_ERROR_EXTERNAL_IP_UTILITY_FAILED:
1652 return _ ("Failed to run `external-ip` command");
1653 case GNUNET_NAT_ERROR_EXTERNAL_IP_UTILITY_OUTPUT_INVALID:
1654 return _ ("`external-ip' command output invalid");
1655 case GNUNET_NAT_ERROR_EXTERNAL_IP_ADDRESS_INVALID:
1656 return _ ("no valid address was returned by `external-ip'");
1657 case GNUNET_NAT_ERROR_NO_VALID_IF_IP_COMBO:
1658 return _ ("Could not determine interface with internal/local network address");
1659 case GNUNET_NAT_ERROR_HELPER_NAT_SERVER_NOT_FOUND:
1660 return _ ("No functioning gnunet-helper-nat-server installation found");
1661 case GNUNET_NAT_ERROR_NAT_TEST_START_FAILED:
1662 return _ ("NAT test could not be initialized");
1663 case GNUNET_NAT_ERROR_NAT_TEST_TIMEOUT:
1664 return _ ("NAT test timeout reached");
1665 case GNUNET_NAT_ERROR_NAT_REGISTER_FAILED:
1666 return _ ("could not register NAT");
1667 case GNUNET_NAT_ERROR_HELPER_NAT_CLIENT_NOT_FOUND:
1668 return _ ("No working gnunet-helper-nat-client installation found");
1672 return "unknown status code";