// Copyright © 2015 Jean-Luc Deltombe (LX3JL). All rights reserved. // urfd -- The universal reflector // Copyright © 2021 Thomas A. Early N7TAE // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // // You should have received a copy of the GNU General Public License // along with this program. If not, see . #include "Timer.h" #include "Global.h" //////////////////////////////////////////////////////////////////////////////////////// CGateKeeper g_GateKeeper; //////////////////////////////////////////////////////////////////////////////////////// // constructor CGateKeeper::CGateKeeper() { keep_running = true; } //////////////////////////////////////////////////////////////////////////////////////// // destructor CGateKeeper::~CGateKeeper() { Close(); } //////////////////////////////////////////////////////////////////////////////////////// // init & clode bool CGateKeeper::Init(void) { // load lists from files m_NodeWhiteList.LoadFromFile(g_Conf.GetString(g_Conf.j.files.white)); m_NodeBlackList.LoadFromFile(g_Conf.GetString(g_Conf.j.files.black)); m_PeerList.LoadFromFile(g_Conf.GetString(g_Conf.j.files.interlink)); // reset run flag keep_running = true; // start thread; m_Future = std::async(std::launch::async, &CGateKeeper::Thread, this); return true; } void CGateKeeper::Close(void) { // kill threads keep_running = false; if ( m_Future.valid() ) { m_Future.get(); } } //////////////////////////////////////////////////////////////////////////////////////// // authorisations bool CGateKeeper::MayLink(const CCallsign &callsign, const CIp &ip, EProtocol protocol, char *modules) const { bool ok = true; switch (protocol) { // repeaters case EProtocol::dextra: case EProtocol::dplus: case EProtocol::dcs: case EProtocol::dmrplus: case EProtocol::dmrmmdvm: case EProtocol::ysf: case EProtocol::m17: case EProtocol::p25: case EProtocol::usrp: case EProtocol::nxdn: #ifndef NO_G3 case EProtocol::g3: #endif // first check is IP & callsigned listed OK ok &= IsNodeListedOk(callsign, ip); // todo: then apply any protocol specific authorisation for the operation break; // URF and BM interlinks case EProtocol::bm: case EProtocol::urf: ok &= IsPeerListedOk(callsign, ip, modules); break; // unsupported case EProtocol::none: default: ok = false; break; } // report if ( !ok ) { std::cout << "Gatekeeper blocking linking of " << callsign << " @ " << ip << " using protocol " << ProtocolName(protocol) << std::endl; } // done return ok; } bool CGateKeeper::MayTransmit(const CCallsign &callsign, const CIp &ip, const EProtocol protocol, char module) const { bool ok = true; switch (protocol) { // repeaters, protocol specific case EProtocol::any: case EProtocol::dextra: case EProtocol::dplus: case EProtocol::dcs: case EProtocol::dmrplus: case EProtocol::dmrmmdvm: case EProtocol::ysf: case EProtocol::m17: case EProtocol::p25: case EProtocol::nxdn: case EProtocol::usrp: #ifndef NO_G3 case EProtocol::g3: #endif // first check is IP & callsigned listed OK ok = ok && IsNodeListedOk(callsign, ip, module); // todo: then apply any protocol specific authorisation for the operation break; // URF interlinks case EProtocol::urf: case EProtocol::bm: ok = ok && IsPeerListedOk(callsign, ip, module); break; // unsupported case EProtocol::none: default: ok = false; break; } // report if ( !ok ) { std::cout << "Gatekeeper blocking transmitting of " << callsign << " @ " << ip << " using protocol " << ProtocolName(protocol) << std::endl; } // done return ok; } //////////////////////////////////////////////////////////////////////////////////////// // thread void CGateKeeper::Thread() { while (keep_running) { // Wait 30 seconds for (int i=0; i<15 && keep_running; i++) std::this_thread::sleep_for(std::chrono::milliseconds(2000)); // have lists files changed ? if ( m_NodeWhiteList.NeedReload() ) { m_NodeWhiteList.ReloadFromFile(); } if ( m_NodeBlackList.NeedReload() ) { m_NodeBlackList.ReloadFromFile(); } if ( m_PeerList.NeedReload() ) { m_PeerList.ReloadFromFile(); } } } //////////////////////////////////////////////////////////////////////////////////////// // operation helpers bool CGateKeeper::IsNodeListedOk(const CCallsign &callsign, const CIp &ip, char module) const { bool ok = true; // first check IP // next, check callsign if ( ok ) { // first check if callsign is in white list // note if white list is empty, everybody is authorized const_cast(m_NodeWhiteList).Lock(); if ( !m_NodeWhiteList.empty() ) { ok = m_NodeWhiteList.IsCallsignListedWithWildcard(callsign, module); } const_cast(m_NodeWhiteList).Unlock(); // then check if not blacklisted const_cast(m_NodeBlackList).Lock(); ok &= !m_NodeBlackList.IsCallsignListedWithWildcard(callsign); const_cast(m_NodeBlackList).Unlock(); } // done return ok; } bool CGateKeeper::IsPeerListedOk(const CCallsign &callsign, const CIp &ip, char module) const { bool ok = true; // first check IP // next, check callsign if ( ok ) { // look for an exact match in the list const_cast(m_PeerList).Lock(); if ( !m_PeerList.empty() ) { ok = m_PeerList.IsCallsignListed(callsign, module); } const_cast(m_PeerList).Unlock(); } // done return ok; } bool CGateKeeper::IsPeerListedOk(const CCallsign &callsign, const CIp &ip, char *modules) const { bool ok = true; // first check IP // next, check callsign if ( ok ) { // look for an exact match in the list const_cast(m_PeerList).Lock(); if ( !m_PeerList.empty() ) { ok = m_PeerList.IsCallsignListed(callsign, modules); } const_cast(m_PeerList).Unlock(); } // done return ok; } const std::string CGateKeeper::ProtocolName(const EProtocol p) const { switch (p) { case EProtocol::any: return "ANY"; case EProtocol::dcs: return "DCS"; case EProtocol::dextra: return "DExtra"; case EProtocol::dmrmmdvm: return "MMDVM DMR"; case EProtocol::dmrplus: return "DMR+"; case EProtocol::urf: return "URF"; case EProtocol::ysf: return "YSF"; case EProtocol::p25: return "P25"; case EProtocol::nxdn: return "NXDN"; case EProtocol::usrp: return "USRP"; case EProtocol::bm: return "Brandmeister"; #ifndef NO_G3 case EProtocol::g3: return "Icom G3"; #endif default: return "NONE"; } }