开通博客赚积分
发布资源赚积分
分类

源码开发语言/平台
当前位置：首页 > 源码/资料 > Internet/网络编程 > 防火墙与安全工具 > 查看源码
Ipfilter.h
资源名称：Firewall防火墙.rar　[点击查看]
上传用户：heseme
上传日期：2009-12-23
资源大小：228k
文件大小：10k
源码类别：

防火墙与安全工具

开发平台：

Visual C++

Ipfilter.h：源码内容
  2. /*ip.h*/
  3. #if !defined(FIREWALLFILTER)
  4. #define FIREWALLFILTER
  6. #if _MSC_VER > 1000
  7. #pragma once
  8. #endif // _MSC_VER > 1000
  10. #include "StdAfx.h"
  11. #include "ip.h"
  12. #include "Struct.h"
  13.  
  14. //常量
  15. enum { NO=0, YES } ;
  16. enum { DISCARD_PKT=0, ALLOW_PKT, DISCARD_AND_ANSWER_PKT };
  17. enum { ACTIVATE_NEW=0, CLEAR_ALL, INIT_NEW, MEM_REPORT };
  18. enum { READ=0, WRITE, MANAGE };
  19. enum { LOG_INFO = 0, LOG_WARNING, LOG_NOTICE };
  20. enum { T_DST_IN=0, T_DST_OUT, T_SRC_IN, T_SRC_OUT,
  21.        U_DST_IN, U_DST_OUT, U_SRC_IN, U_SRC_OUT,
  22.        I_TYP_IN, I_TYP_OUT, T_RST_IN, T_RST_OUT,
  23.        T_ACCTBL, T_REJTBL,T_INDM,T_OUTDM};
  24. enum { DEFAULT_ACCESS=0 };
  25. enum { NORMAL=0, INVERT };
  26. enum { FLAG_MULTICAST=0, FLAG_NONIP, FLAG_OTHERIP, FLAG_SUSPECTOFFSET,
  27.        FLAG_FRAGMENTEDICMP, FLAG_ATTACKICMP, MAX_FLAG };
  28. //最前面的五个不能改变
  29. enum { DB_DROP_PKT=0, DB_INSIDE_IF=1, DB_OUTSIDE_IF=2, DB_BOTH_IF=3,
  30.        DB_PROCESS_PKT=4, DB_FORWARD_PKT, DB_DROP_AND_ANSWER_PKT };
  32. #define LIST_SIZE 32
  33. #define LIST_TABLE_SIZE (LIST_SIZE * sizeof(PortListEntry))
  35. //ip包头偏移掩码
  37. #define SW_IP_OFFMASK 0xFF1F
  39. //系统常量
  41. #define DEFAULT_SYSL_MASK 0 /* 0x1FFFF 全部记入日志*/
  42. //#define DEFAULT_SYSL_FACILITY 0 //LOG_LOCAL//0
  44. enum {IN_INF=0,OUT_INF=1,DM_INF=2};
  45. enum {
  46. SYSL_IN_CLASSD,//multcast addr,srcaddr,protoclno,srcport,dstport
  47. SYSL_OUT_CLASSD,//multcast addr,srcaddr,protoclno,srcport,dstport
  48. SYSL_IN_PORT,// protocolNo, srcAddr and dstAddr,srcport,dstport
  49. SYSL_OUT_PORT, /* protocolNo, srcAddr and dstAddr,srcport,dstport */
  50. SYSL_IN_LENGTH, /* TCP/UDP-Header too short:  protocolNo, srcAddr and dstAddr,srcport,dstport */
  51. SYSL_OUT_LENGTH, /* TCP/UDP-Header too short: protocolNo, srcAddr and dstAddr,srcport,dstport */
  53. SYSL_IN_TYPE, /*  srcAddr, dstAddr, and icmp type */
  54. SYSL_OUT_TYPE, /*  srcAddr, dstAddr, and icmp type */
  56. SYSL_IN_REJECT, /*  protocolNo, srcAddr and dstAddr */
  57. SYSL_OUT_ACCEPT, /*  protocolNo, srcAddr and dstAddr */
  58. SYSL_IN_PROT, /*  nonip: protocolNo, srcAddr and dstAddr */
  59. SYSL_OUT_PROT, /*  nonip: protocolNo, srcAddr and dstAddr */
  60. SYSL_IN_OFFSET, /* suspect fragment offset:protocolNo, srcAddr and dstAddr */
  61. SYSL_OUT_OFFSET, /* suspect fragment offset:protocolNo, srcAddr and dstAddr */
  62. SYSL_IN_FRAG, /* fragmented packet:protocolNo, srcAddr and dstAddr*/
  63. SYSL_OUT_FRAG, /* fragmented packet:protocolNo, srcAddr and dstAddr */
  65. SYSL_IN_DOS, /* denial of service attack packet in:dos类型，srcaddr,dstaddr */
  66. SYSL_OUT_DOS, /* denial of service attack packet out:dos类型，srcaddr,dstaddr */
  67.     SYSL_OUT_ROUT,
  68.     SYSL_IN_ICMP,
  69.     SYSL_OUT_ICMP,
  70.     SYSL_IN_IGMP,
  71.     SYSL_OUT_IGMP,
  72. };
  74. // DOS攻击
  75.  
  76. enum dos_type {
  77. DOS_SMURF=0, DOS_PONG};
  79. //错误信息
  80. enum error_msg{
  81. NOO_ERROR,
  82. ERROR_OUT_OF_RANGE,
  83. ERROR_UNKNOWN_GROUP,
  84. ERROR_INVALID_NETWORK,
  85. ERROR_TABLE_FULL,
  86. ERROR_NET_NOT_FOUND,
  87. ERROR_NO_MEMORY,
  88. ERROR_INVALID_OP, 
  89. ERROR_IF_DOWN,
  90. ERROR_GET_IP,
  91. ERROR_INVALID_IF,
  92. ERROR_SAME_IF,
  93. ERROR_DIFF_IF_TYPE,
  94. ERROR_BAD_IF_TYPE,
  95. ERROR_INSIDE_DOWN, 
  96. ERROR_OUTSIDE_DOWN,
  97. ERROR_TWO_IP,
  98. ERROR_NO_IP,
  99. ERROR_INVALID_MODE,
  100. ERROR_NOT_INITILIZED,
  101. ERROR_RUNNING,
  102. ERROR_NOT_RUNNING,
  103. MAX_ERROR_NUM
  104. };
  106. #define DIOCINIT 1
  107. #define DIOCSTART   2
  108. #define DIOCSTOP 3
  109. #define DIOCGFLAGS 4
  110. #define DIOCSFLAGS 5
  111. #define DIOCGSTATS 6
  112. #define DIOCCSTATS 7
  113. #define DIOCGBRIDGE 8
  114. #define DIOCCBRIDGE 9
  115. #define DIOCGCLASS 10
  116. #define DIOCSCLASS 11
  117. #define  DIOCSGROUP  12
  118. #define DIOCGNETWORK 13 /* 12 no longer used */
  119. #define DIOCSNETWORK 14
  120. #define DIOCMNETWORK 15
  121. #define DIOCGOVERRIDE 16
  122. #define DIOCGREJECT 18
  123. #define DIOCSREJECT 19
  124. #define DIOCGACCEPT 20
  125. #define DIOCSACCEPT 21
  126. #define DIOCGLOGF 22
  127. #define DIOCSLOGF 23
  128. #define DIOCGLOGM 24
  129. #define DIOCSLOGM 25
  130. #define DIOCGVER 26
  131. #define DIOCGTCPRESET 27
  132. #define DIOCSTCPRESET 28
  133. #define DIOCGMGTIF 29
  134. #define DIOCSMGTIF 30
  135. #define DIOCGMMODE 31
  136. #define DIOCSMMODE 32
  137. #define DIOCS_INDM  35
  138. #define DIOCS_OUTDM  36
  140. /*==============================================================*/
  141. /*                           数据结构                           */
  142. /*==============================================================*/
  143. /*
  144. typedef union _in_addr {
  145. // ULONG s_addr;
  146. struct {
  147. BYTE s_b[4];
  148. } s_un_b;
  149. // struct {
  150. // unsigned short s_w[2];
  151. // } s_un_w;
  152. ULONG ss_addr;
  153. #define s_b s_un_b.s_b
  154. //#define s_w s_un_w.s_w
  155. } in_addr_t;
  156. */
  158. typedef struct _FilterConfig {
  159. ULONG   logMask;
  160. //#define CFG_CLR_SIZE (sizeof(FilterConfig) - sizeof(ULONG))
  161. //#define CFG_CLR_START in_number
  162. USHORT    in_number;//adapter num     
  163. USHORT    out_number;//adapter num     
  164. USHORT    dm_number;//adapter num  
  165. USHORT    media_type;//gj
  166. ULONG     in_ip;
  167. ULONG     out_ip;
  168. ULONG     dm_ip;
  169. ULONG     in_mask;
  170. ULONG     out_mask;
  171. ULONG     dm_mask;
  172. BOOL      discardIcmp;
  173. BOOL   discardMulticast;
  174. BOOL discardNonIp;
  175. BOOL discardOtherIp;
  176. BOOL discardSuspectOffset;
  177. BOOL discardFragmentedICMP;
  178. BOOL discardAttackICMP;
  179. BOOL     discardRouteIp;
  180. } FilterConfig;
  181. //流量统计信息
  182. typedef struct _Statistics {
  183. unsigned short running;
  184. SYSTEMTIME   starttime;
  185. ULONG p_insideFiltered;//过滤掉的内网包计数
  186. ULONG  p_dmFiltered;
  187. ULONG p_outsideFiltered;//过滤掉的外网包计数
  188. ULONG p_insideRx;//内网卡接收到的包总数:成功的+过滤掉的;
  189. ULONG  p_dmRx;
  190. ULONG p_outsideRx;
  191. ULONG p_insideTx;//成功的进站包数
  192. ULONG  p_dmTx;
  193. ULONG p_outsideTx;//成功的出站包数
  194. ULONG b_insideFiltered;//过滤掉的内网包总长（bytes）
  195. ULONG   b_dmFiltered;
  196. ULONG b_outsideFiltered;
  197. ULONG b_insideRx;
  198. ULONG  b_dmRx;
  199. ULONG b_outsideRx;
  200. ULONG b_insideTx;
  201. ULONG  b_dmTx;
  202. ULONG b_outsideTx;
  203.     ULONG  f_outsideOtherIp;
  204. ULONG   f_insideOtherIp;
  205. ULONG f_insideMcast;
  206. ULONG f_outsideMcast;
  207. ULONG f_insideTcpPort;
  208. ULONG f_insideUdpPort;
  209. ULONG f_insideIcmpType;
  210. ULONG f_outsideIcmpType;
  212. ULONG f_outsideRejectTable;
  213. ULONG f_outsideSuspectOffset;
  214. ULONG f_outsideIcmpFrag;
  215. ULONG f_outsideSmurfDos;
  216. ULONG f_outsidePongDos;
  218. ULONG f_insideAcceptTable;
  219. ULONG f_insideSuspectOffset;
  220. ULONG f_insideIcmpFrag;
  221. ULONG f_insideSmurfDos;
  222. ULONG f_insidePongDos;
  224. ULONG insideTCPreset;
  225. ULONG outsideTCPreset;
  226. } Statistics;
  228. typedef struct _SyslogMessageEntry {
  229. const char *message;
  230. unsigned char priority;
  231. } SyslogMessageEntry;
  233. //表的结构
  234. typedef struct {
  235.         unsigned short c[256];
  236. } addrTreeLeaf;
  239. typedef struct _addrTreeNode {
  240.         union {
  241.                 addrTreeLeaf *pd;
  242.         } u[256];
  243.         unsigned char flg[256];
  244. } addrTreeNode;
  245. typedef struct _OutaddrTreeNode {
  246.         union {
  247.                 struct _OutaddrTreeNode *p;
  248.                 addrTreeLeaf *pd;
  249.                 unsigned short c;
  250.         } u[256];
  251.         unsigned char flg[256];
  252. } OutaddrTreeNode;
  253. typedef union {
  254.         OutaddrTreeNode *p;
  255.         addrTreeLeaf *pd;
  256.         unsigned short c;
  257. } addrTreePtr;
  259. typedef struct _PortListEntry {
  260. unsigned short begin;
  261. unsigned short end;
  262. } PortListEntry;
  264. typedef struct _RejAccTableEntry {
  265. in_addr_t network;//起始地址
  266. unsigned short bits;//主机数
  267. unsigned short flag;//类号
  268. } RejAccTableEntry;
  271. typedef struct _pointerStruct{
  272.         USHORT num_groups;
  273.         addrTreeNode *addrTree;//对应于主机类的地址
  274.         PortListEntry *t_dst_out;
  275.         PortListEntry *t_src_out;
  276.         PortListEntry *u_dst_out;
  277.         PortListEntry *u_src_out;
  278.         PortListEntry *i_typ_in;
  279.         PortListEntry *i_typ_out;
  280. PortListEntry *t_rst_in;
  281. PortListEntry *t_rst_out;
  282. addrTreeNode *acceptTree;
  283. RejAccTableEntry *acceptTable;
  284.     addrTreeNode        *In_DmTree;
  285.     OutaddrTreeNode     *Out_DmTree;
  286. ULONG accept_bytes;
  287. OutaddrTreeNode *rejectTree;
  288. RejAccTableEntry *rejectTable;
  289. ULONG reject_bytes;
  290. ULONG override_bytes;
  291. ULONG num_override;
  292. } pointerStruct;
  295. //输入输出的数据结构
  297. typedef struct _initReq {
  298. char ifnumber;   //设备编号
  299. ULONG ifIpaddr;    //接口IP地址
  300. ULONG mask;        //子网掩码
  301. char flag;   //表示是内、外、中设备。0：为内部设备；1：为外部设备；2：为DM设备
  302. } initReq;
  305. typedef struct _flagsReq {
  306. ULONG discardMulticast;
  307. ULONG discardNonIp;
  308. ULONG discardOtherIp;
  309. ULONG discardSuspectOffset;
  310. ULONG discardFragmentedICMP;
  311. ULONG discardAttackICMP;
  312. ULONG discardRouteIp;    //源路由攻击
  313. } flagsReq;
  316. typedef struct _portListReq {
  317. unsigned short id;
  318. unsigned short group;
  319. PortListEntry *ptr;
  320. unsigned short bytes;
  321. } portListReq;   
  323. typedef struct _addrTreeReq {
  324. ULONG num;
  325. ULONG newtable;
  326. in_addr_t addr[128];
  327. unsigned short bits[128];
  328. unsigned short group[128];
  329. } addrTreeReq;
  331. typedef struct _manageTablesReq {
  332. ULONG command;
  333. USHORT val;
  334. } manageTablesReq;
  336. typedef struct _TCPresetTableReq {
  337. PortListEntry in[LIST_SIZE];
  338. PortListEntry out[LIST_SIZE];
  339. } TCPresetTableReq;
  340. typedef struct _rejaccTableReq {
  341. USHORT bytes;
  342. RejAccTableEntry *ptr;
  343. ULONG addr;
  344. unsigned long flag;
  345. } rejaccTableReq;
  347. typedef struct _overrideTableReq {
  348. ULONG bytes;
  349. void *ptr;
  350. ULONG addr;
  351. unsigned short index;
  352. } overrideTableReq;
  355. typedef struct _logMaskReq {
  356. ULONG mask;
  357. } logMaskReq;
  359. /*==============================================================*/
  360. /*                         宏定义                        */
  361. /*==============================================================*/
  363. #define IS_BROADCAST(address)  (*((unsigned char *) (address)) & 0x01)
  366. #define MALLOC_LEAF (addrTreeLeaf *)malloc(sizeof(addrTreeLeaf))
  368. #define MALLOC_NODE (addrTreeNode *)malloc(sizeof(addrTreeNode))
  369. #define MALLOC_OUTNODE (OutaddrTreeNode *)malloc(sizeof(OutaddrTreeNode))
  371. #define MALLOC_GROUP(a) (PortListEntry *)malloc((a) * LIST_TABLE_SIZE)
  376. /*==============================================================*/
  377. /*                         函数                                     */
  378. /*==============================================================*/
  380. #define FROMOUT 10
  381. #define FROMIN  11
  382. //主函数
  383. ULONG  ipfilter_test_pkt(USHORT dev_instance, UCHAR direction,ULONG ethlen,BYTE *m);
  384. VOID   ipfilter_pkt(ULONG ethlen,BYTE *m);
  385. void ipfilter_response_pkt(BYTE *rout,ULONG outlen,ULONG inlen,BYTE *min);
  386. //配置命令发生器
  387. ULONG  filter_command( unsigned long cmd, char* addr);
  388. VOID mysearch();
  390. #endif