include/wvipfirewall.h

/* -*- Mode: C++ -*-
 * Worldvisions Weaver Software:
 *   Copyright (C) 1997-2002 Net Integration Technologies, Inc.
 *
 * WvIPFirewall is an extremely simple hackish class that handles the Linux
 * 2.4 "iptables" firewall.  It's okay to create more than one instance
 * of this class; they'll co-operate.
 * 
 * They need you to have created the appropriate firewall tables already,
 * however, and call them from the right places in the Input and/or Forward
 * firewalls.
 */
#ifndef __WVIPFIREWALL_H
#define __WVIPFIREWALL_H
 
#include "wvinterface.h"
#include "wvstringlist.h"
#include "wvaddr.h"
 
 
DeclareWvList(WvIPPortAddr);
class IWvIPFirewall
{
public:
    virtual ~IWvIPFirewall() { }
    virtual void zap() = 0;
    virtual void add_port(const WvIPPortAddr &addr) = 0;
    virtual void add_redir(const WvIPPortAddr &src, int dstport) = 0;
    virtual void add_redir_all(int dstport) = 0;
    virtual void add_redir_port_range(const WvIPPortAddr &src_min,
            const WvIPPortAddr &src_max, int dstport) = 0;
    virtual void add_proto(WvStringParm proto) = 0;
    virtual void add_forward(const WvIPPortAddr &src, const WvIPPortAddr &dst,
            bool snat) = 0;
    
    virtual void del_port(const WvIPPortAddr &addr) = 0;
    virtual void del_redir(const WvIPPortAddr &src, int dstport) = 0;
    virtual void del_redir_all(int dstport) = 0;
    virtual void del_redir_port_range(const WvIPPortAddr &src_min,
            const WvIPPortAddr &src_max, int dstport) = 0;
    virtual void del_proto(WvStringParm proto) = 0;
    virtual void del_forward(const WvIPPortAddr &src, const WvIPPortAddr &dst,
            bool snat) = 0;
};

class WvIPFirewall : public IWvIPFirewall
{
    class FFwd
    {
    public:
        WvIPPortAddr src;
        WvIPPortAddr dst;
        bool snat;
 
        FFwd(const WvIPPortAddr &_src, const WvIPPortAddr &_dst, bool _snat) : src(_src), dst(_dst) 
            { snat = _snat; } 
    };
    
    class Redir
    {
    public:
        WvIPPortAddr src;
        int dstport;
        
        Redir(const WvIPPortAddr &_src, int _dstport) : src(_src)
            { dstport = _dstport; }
    };
 
    class RedirAll
    {
    public:
        int dstport;
        
        RedirAll(int _dstport) 
            { dstport = _dstport; }
    };
 
    class RedirPortRange
    {
    public:
        WvIPPortAddr src_min;
        WvIPPortAddr src_max;
        int dstport;
        
        RedirPortRange(const WvIPPortAddr &_src_min,
                const WvIPPortAddr &_src_max, int _dstport)
            : src_min(_src_min), src_max(_src_max)
            { dstport = _dstport; }
    };
 
    DeclareWvList(FFwd);
    DeclareWvList(Redir);
    DeclareWvList(RedirAll);
    DeclareWvList(RedirPortRange);
 
    FFwdList ffwds;
    RedirList redirs;
    RedirAllList redir_alls;
    RedirPortRangeList redir_port_ranges;
 
    WvIPPortAddrList addrs;
    WvStringList protos;
    
    WvString port_command(const char *cmd, const char *proto,
                          const WvIPPortAddr &addr);
    WvString redir_command(const char *cmd,
                           const WvIPPortAddr &src, int dstport);
    WvString redir_port_range_command(const char *cmd,
        const WvIPPortAddr &src_min, const WvIPPortAddr &src_max, int dstport);
    WvString redir_all_command(const char *cmd, int dstport);
    WvString proto_command(const char *cmd, const char *proto);
    WvString forward_command(const char *cmd, const char *proto,
                             const WvIPPortAddr &src,
                             const WvIPPortAddr &dst, bool snat);
    WvLog log;
    const char *shutup() const
        { return ignore_errors ? " >/dev/null 2>/dev/null " : ""; }
    
public:
    WvIPFirewall();
    virtual ~WvIPFirewall();
    
    static bool enable, ignore_errors;
    
    virtual void zap();
    virtual void add_port(const WvIPPortAddr &addr);
    virtual void add_redir(const WvIPPortAddr &src, int dstport);
    virtual void add_redir_all(int dstport);
    virtual void add_redir_port_range(const WvIPPortAddr &src_min,
            const WvIPPortAddr &src_max, int dstport);
    virtual void add_proto(WvStringParm proto);
    virtual void add_forward(const WvIPPortAddr &src, const WvIPPortAddr &dst,
            bool snat);
    virtual void del_proto(WvStringParm proto);
    virtual void del_port(const WvIPPortAddr &addr);
    virtual void del_redir(const WvIPPortAddr &src, int dstport);
    virtual void del_forward(const WvIPPortAddr &src, const WvIPPortAddr &dst,
            bool snat);
    virtual void del_redir_all(int dstport);
    virtual void del_redir_port_range(const WvIPPortAddr &src_min,
            const WvIPPortAddr &src_max, int dstport);
};
 
#endif // __WVIPFIREWALL_H