]> git.ipfire.org Git - network.git/blob - src/functions/functions.ip
ip_is_network: Fix assertion crash when address part was invalid
[network.git] / src / functions / functions.ip
1 #!/bin/bash
2 ###############################################################################
3 # #
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2010 Michael Tremer & Christian Schmidt #
6 # #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
11 # #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
16 # #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 # #
20 ###############################################################################
21
22 # A list of supported versions of the IP protocol
23 IP_SUPPORTED_PROTOCOLS=""
24
25 ip_split_prefix() {
26 local address=${1}
27 assert isset address
28
29 echo "${address%%/*}"
30 }
31
32 ip_get_prefix() {
33 local address=${1}
34 assert isset address
35
36 # Break if no prefix is provided
37 [[ ${address} =~ \/ ]] || return ${EXIT_OK}
38
39 echo "${address##*/}"
40 }
41
42 ip_detect_protocol() {
43 local address="${1}"
44 assert isset address
45
46 # Remove prefix so that we can handle subnet, too
47 address=$(ip_split_prefix ${address})
48
49 local protocol
50 for protocol in ${IP_SUPPORTED_PROTOCOLS}; do
51 if ${protocol}_is_valid "${address}"; then
52 echo "${protocol}"
53 return ${EXIT_OK}
54 fi
55 done
56
57 return ${EXIT_ERROR}
58 }
59
60 ip_protocol_is_supported() {
61 local proto=${1}
62
63 assert isset proto
64
65 listmatch ${proto} ${IP_SUPPORTED_PROTOCOLS}
66 }
67
68 ip_is_valid() {
69 local address=${1}
70 assert isset address
71
72 local protocol
73 for protocol in ${IP_SUPPORTED_PROTOCOLS}; do
74 if ${protocol}_is_valid "${address}"; then
75 return ${EXIT_TRUE}
76 fi
77 done
78
79 return ${EXIT_FALSE}
80 }
81
82 ip_is_network() {
83 local network=${1}
84 assert isset network
85
86 # Get the address part.
87 local address=$(ip_split_prefix ${network})
88 isset address || return ${EXIT_FALSE}
89
90 # Get the prefix.
91 local prefix=$(ip_get_prefix ${network})
92 isset prefix || return ${EXIT_FALSE}
93
94 # Detect the protocol (if this fails, the
95 # address part is invalid)
96 local proto=$(ip_detect_protocol ${address})
97 isset proto || return ${EXIT_FALSE}
98
99 # Check if the prefix is correct.
100 ip_prefix_is_valid ${proto} ${prefix} || return ${EXIT_FALSE}
101
102 return ${EXIT_TRUE}
103 }
104
105 ip_prefix_is_valid() {
106 local proto=${1}
107 assert isset proto
108
109 local prefix=${2}
110
111 case "${proto}" in
112 ipv4)
113 ipv4_prefix_is_valid ${prefix}
114 return $?
115 ;;
116 ipv6)
117 ipv6_prefix_is_valid ${prefix}
118 return $?
119 ;;
120 esac
121
122 assert ip_protocol_is_supported ${proto}
123 }
124
125 ip_get_network() {
126 inetcalc -n $@ && return ${EXIT_OK} || return ${EXIT_ERROR}
127 }
128
129 ip_address_add() {
130 local device=${1}
131 local address=${2}
132
133 assert isset address
134 assert device_exists ${device}
135
136 local prefix=$(ip_get_prefix ${address})
137 address=$(ip_split_prefix ${address})
138
139 assert isset prefix
140 assert isset address
141
142 echo "ADDRESS = $address"
143
144 # Detect the protocol version
145 local protocol=$(ip_detect_protocol "${address}")
146 assert ip_protocol_is_supported "${protocol}"
147
148 case "${protocol}" in
149 ipv6)
150 assert ipv6_prefix_is_valid "${prefix}"
151 ;;
152 ipv4)
153 assert ipv4_prefix_is_valid "${prefix}"
154 ;;
155 esac
156
157 case "${protocol}" in
158 ipv4)
159 if ipv4_detect_duplicate ${device} ${address}; then
160 error_log "Duplicate address detected on zone '${device}' (${address})."
161 error_log "Cannot continue."
162 return ${EXIT_ERROR}
163 fi
164 ;;
165 esac
166
167 if ! device_has_ip ${device} ${address}/${prefix}; then
168 assert ip addr add ${address}/${prefix} dev ${device}
169
170 log DEBUG "IP address '${address}' (${protocol}) was successfully configured on device '${device}'."
171
172 case "${protocol}" in
173 ipv4)
174 # Announce our new address to the neighbours
175 ipv4_update_neighbours ${device} ${address}
176 ;;
177 esac
178 else
179 log DEBUG "IP address '${address}' (${protocol}) was already configured on device '${device}'."
180 fi
181
182 return ${EXIT_OK}
183 }
184
185 ip_address_del() {
186 local device=${1}
187 local address=${2}
188
189 assert isset address
190 assert device_exists ${device}
191
192 local prefix=$(ip_get_prefix ${address})
193 address=$(ip_split_prefix ${address})
194
195 assert isset prefix
196
197 # Detect the protocol version
198 local protocol=$(ip_detect_protocol "${address}")
199 assert ip_protocol_is_supported "${protocol}"
200
201 if device_has_ip ${device} ${address}/${prefix}; then
202 assert ip addr del ${address}/${prefix} dev ${device}
203
204 log DEBUG "IP address '${address}' (${protocol}) was successfully removed from device '${device}'."
205 else
206 log DEBUG "IP address '${address}' (${protocol}) was not configured on device '${device}'."
207 fi
208
209 return ${EXIT_OK}
210 }