1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
|
# DHCPy6d DHCPv6 Daemon
#
# Copyright (C) 2009-2022 Henri Wahl <henri@dhcpy6d.de>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
import queue
import platform
import time
import dns.resolver
import dns.tsigkeyring
from .config import cfg
from .constants import CONST
# dummy value is None for DNS related
resolver_query = None
resolver_update = None
keyring = None
# if nameserver is given create resolver
if len(cfg.NAMESERVER) > 0:
# default nameservers for DNS queries
resolver_query = dns.resolver.Resolver()
resolver_query.nameservers = cfg.NAMESERVER
# RNDC Key for DNS updates from ISC Bind /etc/rndc.key
if cfg.DNS_UPDATE:
if cfg.DNS_USE_RNDC:
keyring = dns.tsigkeyring.from_text({cfg.DNS_RNDC_KEY: cfg.DNS_RNDC_SECRET})
# resolver for DNS updates
resolver_update = dns.resolver.Resolver()
resolver_update.nameservers = [cfg.DNS_UPDATE_NAMESERVER]
class Timer:
"""
global object containing time set by TimerThread
"""
__time = 0
def __init__(self):
self.time = time.time()
@property
def time(self):
return self.__time
@time.setter
def time(self, new_time):
self.__time = int(new_time)
# global time variable, synchronized by TimerThread
timer = Timer()
# dictionary to store transactions - key is transaction ID, value a transaction object
transactions = {}
# collected MAC addresses from clients, mapping to link local IPs
collected_macs = {}
# queues for queries
config_query_queue = queue.Queue()
config_answer_queue = queue.Queue()
volatile_query_queue = queue.Queue()
volatile_answer_queue = queue.Queue()
# queue for dns actualization
dns_query_queue = queue.Queue()
# queue for executing some script to modify routes after delegating prefixes
route_queue = queue.Queue()
# attempt to log connections and count them to find out which clients do silly crazy brute force
requests = {}
requests_blacklist = {}
# save OS
OS = platform.system()
if 'BSD' in OS:
OS = 'BSD'
# platform-dependant neighbor cache call
# every platform has its different output
# dev, llip and mac are positions of output of call
# len is minimal length a line has to have to be evaluable
#
# update: has been different to Linux which now access neighbor cache natively
NC = {'BSD': {'call': '/usr/sbin/ndp -a -n',
'dev': 2,
'llip': 0,
'mac': 1,
'len': 3},
'Darwin': {'call': '/usr/sbin/ndp -a -n',
'dev': 2,
'llip': 0,
'mac': 1,
'len': 3}
}
# libc access via ctypes, needed for interface handling, get it by helpers.get_libc()
# obsolete in Python 3
# LIBC = get_libc()
# index IF name > number, gets filled in UDPMulticastIPv6
IF_NAME = {}
# index IF number > name
IF_NUMBER = {}
# IA_NA, IA_TA and IA_PD Options referred here in handler
IA_OPTIONS = (CONST.OPTION.IA_NA,
CONST.OPTION.IA_TA,
CONST.OPTION.IA_PD)
# options to be ignored when logging
IGNORED_LOG_OPTIONS = ['options_raw', 'client', 'client_config_dicts', 'timestamp', 'iat1', 'iat2', 'id']
# empty options string test
EMPTY_OPTIONS = [None, False, '', []]
# dummy IAID for transactions
DUMMY_IAID = '00000000'
# dummy MAC for transactions
DUMMY_MAC = '00:00:00:00:00:00'
# store
# because of thread trouble there should not be too much db connections at once
# so we need to use the queryqueue way - subject to change
# source of configuration of hosts
# use client configuration only if needed
config_store = volatile_store = None
|
