1 files changed, 104 insertions, 0 deletions
diff --git a/tcprulescheck.c b/tcprulescheck.c
new file mode 100644
index 0000000..2a0eb34
--- /dev/null
+++ b/tcprulescheck.c
@@ -0,0 +1,104 @@
+#include "substdio.h"
+#include "subfd.h"
+#include "strerr.h"
+#include "stralloc.h"
+#include "alloc.h"
+#include "cdb.h"
+
+#define FATAL "tcprulescheck: fatal: "
+
+char *fnrules;
+int fdrules;
+
+void die_usage()
+{
+  strerr_die1x(100,"tcprulescheck: usage: tcprulescheck rules.cdb tcpremoteip [ tcpremoteinfo ]");
+}
+void die_read()
+{
+  strerr_die4sys(111,FATAL,"unable to read ",fnrules,": ");
+}
+void nomem()
+{
+  strerr_die2x(111,FATAL,"out of memory");
+}
+
+static stralloc tmp = {0};
+
+void dorule()
+{
+  char *data;
+  uint32 dlen32;
+  unsigned int datalen;
+  unsigned int next0;
+
+  switch(cdb_seek(fdrules,tmp.s,tmp.len,&dlen32)) {
+    case -1: die_read();
+    case 0: return;
+  }
+
+  datalen = dlen32;
+  data = alloc(datalen);
+  if (!data) nomem();
+  if (cdb_bread(fdrules,data,datalen) != 0) die_read();
+
+  substdio_puts(subfdout,"rule ");
+  substdio_put(subfdout,tmp.s,tmp.len);
+  substdio_puts(subfdout,":\n");
+  while ((next0 = byte_chr(data,datalen,0)) < datalen) {
+    switch(data[0]) {
+      case 'D':
+	substdio_puts(subfdout,"deny connection\n");
+	substdio_flush(subfdout);
+	_exit(0); /* XXX: could still set env vars for logs */
+      case '+':
+	substdio_puts(subfdout,"set environment variable ");
+	substdio_puts(subfdout,data + 1);
+	substdio_puts(subfdout,"\n");
+	break;
+    }
+    data += next0 + 1; datalen -= next0 + 1;
+  }
+  substdio_puts(subfdout,"allow connection\n");
+  substdio_flush(subfdout);
+  _exit(0);
+}
+
+void main(argc,argv)
+int argc;
+char **argv;
+{
+  char *tcpremoteip;
+  char *tcpremoteinfo;
+
+  fnrules = argv[1];
+  if (!fnrules) die_usage();
+
+  tcpremoteip = argv[2];
+  if (!tcpremoteip) die_usage();
+
+  tcpremoteinfo = argv[3];
+
+  fdrules = open_read(fnrules);
+  if (fdrules == -1) die_read();
+
+  if (tcpremoteinfo) {
+    if (!stralloc_copys(&tmp,tcpremoteinfo)) nomem();
+    if (!stralloc_cats(&tmp,"@")) nomem();
+    if (!stralloc_cats(&tmp,tcpremoteip)) nomem();
+    dorule();
+  }
+
+  if (!stralloc_copys(&tmp,tcpremoteip)) nomem();
+  dorule();
+  while (tmp.len > 0) {
+    if (tcpremoteip[tmp.len - 1] == '.')
+      dorule();
+    --tmp.len;
+  }
+
+  dorule();
+
+  substdio_putsflush(subfdout,"default:\nallow connection\n");
+  _exit(0);
+}