Wolfy la 26 ianuarie 2006 11:10

2006-01-26T11:10:20Z

Pagină nouă

''' Emularea comenzii Free/OpenSwan ipsec eroute pe kernel 2.6 '''

Odata cu trecerea la kernel 2.6, [http://www.openswan.org Openswan] nu mai implementeaza comanda ipsec eroute care afisa lista tunelelor active. Ea poate fi insa emulata folosind urmatorul script perl:

<pre> <nowiki>
#!/usr/bin/perl
#
# (c) Xelerance <ken@xelerance.com>
#
# I whipped this up in 15 minutes after switching my laptop to 2.6
# so it's ugly, and could use some major improvement. setkey output is
# ugly to parse

open(SETKEY,"setkey -PD|");

while(<SETKEY>) {

if ( m/any/) {
($dst,$src, $any) = split(" ",$_);
$src =~ s/\[any\]//g;
$dst =~ s/\[any\]//g;
}
if ( m/ipsec/ ) {
($dir,$dummy) = split(" ",$_);
}

if ( m/unique/ ) {
($proto,$type,$tunnel,$dummy) = split("/",$_);
($net1,$net2) = split("-",$tunnel);
if($dir eq "out" ) {
$remotegw=$net2;
$local=$net1;
$temp = $src;
$src=$dst;
$dst=$temp;

}
if ($dir eq "in") {
$remotegw=$net1;
$local=$net2;

}
if ($dir eq "fwd") {
$remotegw=$net1;
$local=$net2;
}
}
if ( m/spid/ ) {
($spidstr,$seqstr, $pidstr) = split(" ",$_);
($tmp,$spi) = split("\=",$spidstr);
if ($spi != "" && $tunnel != "" ) {
for ($src) {
if (! m/\// ) {
$src .= "/32";
}
}
for ($dst) {
if (! m/\// ) {
$dst .= "/32";
}
}
printf("%3s %-18s -> %-18s => tun%s@%s\n",$dir,$src,$dst,$spi,$remotegw);
# Reset
$tunnel = "";
$spi = "";
$dir = "";
}
}
}

close(SETKEY);
</nowiki> </pre>

Emularea comenzii Free/OpenSwan ipsec eroute pe kernel 2.6 - Revizia istoricului

Wolfy la 26 ianuarie 2006 11:10