#include <netinet/in.h>
#include <fcntl.h>
#include "setuid.h"
+#include "netutil.h"
#include "libsmooth.h"
#define noovpndebug
int readPidFile(const char *pidfile) {
FILE *fp = fopen(pidfile, "r");
if (fp == NULL) {
- fprintf(stderr, "PID file not found: '%s'\n", pidfile);
exit(1);
}
}
void ovpnInit(void) {
-
// Read OpenVPN configuration
kv = initkeyvalues();
if (!readkeyvalues(kv, CONFIG_ROOT "/ovpn/settings")) {
}
if (!findkey(kv, "ENABLED", enablered)) {
- fprintf(stderr, "Cannot read ENABLED\n");
exit(1);
}
if (!findkey(kv, "ENABLED_BLUE", enableblue)){
- fprintf(stderr, "Cannot read ENABLED_BLUE\n");
exit(1);
}
if (!findkey(kv, "ENABLED_ORANGE", enableorange)){
- fprintf(stderr, "Cannot read ENABLED_ORANGE\n");
exit(1);
}
freekeyvalues(kv);
}
kv=initkeyvalues();
- if (!readkeyvalues(kv, CONFIG_ROOT "/ethernet/settings"))
- {
+ if (!readkeyvalues(kv, CONFIG_ROOT "/ethernet/settings")) {
fprintf(stderr, "Cannot read ethernet settings\n");
exit(1);
}
- if (strcmp(enableblue, "on")==0){
- if (!findkey(kv, "BLUE_DEV", blueif)){
- fprintf(stderr, "Cannot read BLUE_DEV\n");
+ if (strcmp(enableblue, "on") == 0) {
+ if (!findkey(kv, "BLUE_DEV", blueif)) {
exit(1);
}
}
- if (strcmp(enableorange, "on")==0){
- if (!findkey(kv, "ORANGE_DEV", orangeif)){
- fprintf(stderr, "Cannot read ORNAGE_DEV\n");
+
+ if (strcmp(enableorange, "on") == 0) {
+ if (!findkey(kv, "ORANGE_DEV", orangeif)) {
exit(1);
}
- }
+ }
freekeyvalues(kv);
}
void flushChain(char *chain) {
char str[STRING_SIZE];
- sprintf(str, "/sbin/iptables -F %sINPUT", chain);
+ sprintf(str, "/sbin/iptables -F %s", chain);
executeCommand(str);
}
executeCommand(str);
}
+void flushChainINPUT(char *chain) {
+ char str[STRING_SIZE];
+
+ snprintf(str, STRING_SIZE, "%sINPUT", chain);
+ flushChain(str);
+}
+
void deleteChainReference(char *chain) {
char str[STRING_SIZE];
deleteChainReference(OVPNRED);
deleteChainReference(OVPNBLUE);
deleteChainReference(OVPNORANGE);
- flushChain(OVPNRED);
- flushChain(OVPNBLUE);
- flushChain(OVPNORANGE);
+ flushChainINPUT(OVPNRED);
+ flushChainINPUT(OVPNBLUE);
+ flushChainINPUT(OVPNORANGE);
deleteChain(OVPNRED);
deleteChain(OVPNBLUE);
deleteChain(OVPNORANGE);
void createAllChains(void) {
// create chain and chain references
if (!strcmp(enableorange, "on")) {
- if (strlen(orangeif)) {
+ if (strlen(orangeif) > 0) {
createChain(OVPNORANGE);
createChainReference(OVPNORANGE);
} else {
}
if (!strcmp(enableblue, "on")) {
- if (strlen(blueif)) {
+ if (strlen(blueif) > 0) {
createChain(OVPNBLUE);
createChainReference(OVPNBLUE);
} else {
}
if (!strcmp(enablered, "on")) {
- if (strlen(redif)) {
+ if (strlen(redif) > 0) {
createChain(OVPNRED);
createChainReference(OVPNRED);
} else {
if (!findkey(kv, "VPN_IP", dovpnip)){
fprintf(stderr, "Cannot read VPN_IP\n");
-// exit(1); step further as we don't need an ip
}
freekeyvalues(kv);
// Flush all chains.
- flushChain(OVPNRED);
- flushChain(OVPNBLUE);
- flushChain(OVPNORANGE);
+ flushChainINPUT(OVPNRED);
+ flushChainINPUT(OVPNBLUE);
+ flushChainINPUT(OVPNORANGE);
flushChain(OVPNBLOCK);
flushChainNAT(OVPNNAT);
void startDaemon(void) {
char command[STRING_SIZE];
- if (!((strcmp(enablered, "on")==0) || (strcmp(enableblue, "on")==0) || (strcmp(enableorange, "on")==0))){
+ if (!((strcmp(enablered, "on") == 0) || (strcmp(enableblue, "on") == 0) || (strcmp(enableorange, "on") == 0))) {
fprintf(stderr, "OpenVPN is not enabled on any interface\n");
exit(1);
} else {