12 #ifndef TOR_POLICIES_H 13 #define TOR_POLICIES_H 19 #define POLICY_BUF_LEN 72 21 #define EXIT_POLICY_IPV6_ENABLED (1 << 0) 22 #define EXIT_POLICY_REJECT_PRIVATE (1 << 1) 23 #define EXIT_POLICY_ADD_DEFAULT (1 << 2) 24 #define EXIT_POLICY_REJECT_LOCAL_INTERFACES (1 << 3) 25 #define EXIT_POLICY_ADD_REDUCED (1 << 4) 26 #define EXIT_POLICY_OPTION_MAX EXIT_POLICY_ADD_REDUCED 28 #define EXIT_POLICY_OPTION_ALL ((EXIT_POLICY_OPTION_MAX << 1) - 1) 30 typedef enum firewall_connection_t {
31 FIREWALL_OR_CONNECTION = 0,
32 FIREWALL_DIR_CONNECTION = 1
33 } firewall_connection_t;
35 typedef int exit_policy_parser_cfg_t;
45 firewall_connection_t fw_connection,
46 int pref_only,
int pref_ipv6);
49 firewall_connection_t fw_connection,
52 firewall_connection_t fw_connection,
55 firewall_connection_t fw_connection,
59 firewall_connection_t fw_connection,
62 firewall_connection_t fw_connection,
65 firewall_connection_t fw_connection,
84 uint16_t port,
const node_t *node);
88 uint32_t local_address,
92 exit_policy_parser_cfg_t options,
98 int reject_interface_addresses,
99 int reject_configured_port_addresses);
108 int reject_by_default);
113 const char *question,
char **answer,
114 const char **errmsg);
116 int format_for_desc);
119 #define addr_policy_list_free(lst) \ 120 FREE_AND_NULL(smartlist_t, addr_policy_list_free_, (lst)) 122 #define addr_policy_free(p) \ 123 FREE_AND_NULL(addr_policy_t, addr_policy_free_, (p)) 131 #define short_policy_free(p) \ 132 FREE_AND_NULL(short_policy_t, short_policy_free_, (p)) 138 #ifdef POLICIES_PRIVATE 143 int pref_only,
int pref_ipv6);
148 firewall_connection_t fw_connection,
149 int pref_only,
int pref_ipv6);
int getinfo_helper_policies(control_connection_t *conn, const char *question, char **answer, const char **errmsg)
Definition: policies.c:2974
int policies_parse_exit_policy_from_options(const or_options_t *or_options, uint32_t local_address, const tor_addr_t *ipv6_local_address, smartlist_t **result)
Definition: policies.c:2115
Definition: confline.h:23
int firewall_is_fascist_dir(void)
Definition: policies.c:343
int fascist_firewall_prefer_ipv6_orport(const or_options_t *options)
Definition: policies.c:476
void addr_policy_free_(addr_policy_t *p)
Definition: policies.c:3082
int fascist_firewall_prefer_ipv6_dirport(const or_options_t *options)
Definition: policies.c:498
void fascist_firewall_choose_address_dir_server(const dir_server_t *ds, firewall_connection_t fw_connection, int pref_only, tor_addr_port_t *ap)
Definition: policies.c:1038
char * policy_summarize(smartlist_t *policy, sa_family_t family)
Definition: policies.c:2583
int authdir_policy_permits_address(uint32_t addr, uint16_t port)
Definition: policies.c:1101
int policies_parse_exit_policy(config_line_t *cfg, smartlist_t **dest, exit_policy_parser_cfg_t options, const smartlist_t *configured_addresses)
Definition: policies.c:2016
char * policy_dump_to_string(const smartlist_t *policy_list, int include_ipv4, int include_ipv6)
Definition: policies.c:2931
int authdir_policy_badexit_address(uint32_t addr, uint16_t port)
Definition: policies.c:1123
void addr_policy_list_free_(smartlist_t *p)
Definition: policies.c:3072
int fascist_firewall_allows_dir_server(const dir_server_t *ds, firewall_connection_t fw_connection, int pref_only)
Definition: policies.c:736
int fascist_firewall_use_ipv6(const or_options_t *options)
Definition: policies.c:437
int policy_write_item(char *buf, size_t buflen, const addr_policy_t *item, int format_for_desc)
Definition: policies.c:2278
int dir_policy_permits_address(const tor_addr_t *addr)
Definition: policies.c:1065
STATIC int fascist_firewall_allows_address(const tor_addr_t *addr, uint16_t port, smartlist_t *firewall_policy, int pref_only, int pref_ipv6)
Definition: policies.c:398
MOCK_DECL(int, router_have_minimum_dir_info,(void))
STATIC void append_exit_policy_string(smartlist_t **policy, const char *more)
Definition: policies.c:1579
void policy_expand_private(smartlist_t **policy)
Definition: policies.c:91
Definition: container.h:18
int policies_parse_from_options(const or_options_t *options)
Definition: policies.c:1250
int fascist_firewall_allows_rs(const routerstatus_t *rs, firewall_connection_t fw_connection, int pref_only)
Definition: policies.c:652
int policy_is_reject_star(const smartlist_t *policy, sa_family_t family, int reject_by_default)
Definition: policies.c:2254
char * write_short_policy(const short_policy_t *policy)
Definition: policies.c:2792
short_policy_t * parse_short_policy(const char *summary)
Definition: policies.c:2695
int addr_policies_eq(const smartlist_t *a, const smartlist_t *b)
Definition: policies.c:1300
int short_policy_is_reject_star(const short_policy_t *policy)
Definition: policies.c:2876
void addr_policy_append_reject_addr(smartlist_t **dest, const tor_addr_t *addr)
Definition: policies.c:1593
void fascist_firewall_choose_address_rs(const routerstatus_t *rs, firewall_connection_t fw_connection, int pref_only, tor_addr_port_t *ap)
Definition: policies.c:950
int exit_policy_is_general_exit(smartlist_t *policy)
Definition: policies.c:2240
addr_policy_result_t compare_tor_addr_to_short_policy(const tor_addr_t *addr, uint16_t port, const short_policy_t *policy)
Definition: policies.c:2828
int socks_policy_permits_address(const tor_addr_t *addr)
Definition: policies.c:1074
int validate_addr_policies(const or_options_t *options, char **msg)
Definition: policies.c:1137
void policies_free_all(void)
Definition: policies.c:3103
addr_policy_result_t
Definition: or.h:5221
void fascist_firewall_choose_address_node(const node_t *node, firewall_connection_t fw_connection, int pref_only, tor_addr_port_t *ap)
Definition: policies.c:988
void policy_expand_unspec(smartlist_t **policy)
Definition: policies.c:131
int fascist_firewall_allows_node(const node_t *node, firewall_connection_t fw_connection, int pref_only)
Definition: policies.c:698
int fascist_firewall_allows_address_addr(const tor_addr_t *addr, uint16_t port, firewall_connection_t fw_connection, int pref_only, int pref_ipv6)
Definition: policies.c:522
void addr_policy_append_reject_addr_list(smartlist_t **dest, const smartlist_t *addrs)
Definition: policies.c:1650
void policies_parse_exit_policy_reject_private(smartlist_t **dest, int ipv6_exit, const smartlist_t *configured_addresses, int reject_interface_addresses, int reject_configured_port_addresses)
Definition: policies.c:1781
int authdir_policy_valid_address(uint32_t addr, uint16_t port)
Definition: policies.c:1112
addr_policy_result_t compare_tor_addr_to_node_policy(const tor_addr_t *addr, uint16_t port, const node_t *node)
Definition: policies.c:2893
void short_policy_free_(short_policy_t *policy)
Definition: policies.c:2818
int firewall_is_fascist_or(void)
Definition: policies.c:332
void policies_exit_policy_append_reject_star(smartlist_t **dest)
Definition: policies.c:2176
void policies_set_node_exitpolicy_to_reject_all(node_t *exitrouter)
Definition: policies.c:2184
STATIC const tor_addr_port_t * fascist_firewall_choose_address(const tor_addr_port_t *a, const tor_addr_port_t *b, int want_a, firewall_connection_t fw_connection, int pref_only, int pref_ipv6)
Definition: policies.c:797