2 b542d800 2021-11-20 op * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
4 b542d800 2021-11-20 op * Permission to use, copy, modify, and distribute this software for any
5 b542d800 2021-11-20 op * purpose with or without fee is hereby granted, provided that the above
6 b542d800 2021-11-20 op * copyright notice and this permission notice appear in all copies.
8 b542d800 2021-11-20 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 b542d800 2021-11-20 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 b542d800 2021-11-20 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 b542d800 2021-11-20 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 b542d800 2021-11-20 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 b542d800 2021-11-20 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 b542d800 2021-11-20 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 b542d800 2021-11-20 op #include <sys/types.h>
18 b542d800 2021-11-20 op #include <sys/socket.h>
19 b542d800 2021-11-20 op #include <sys/wait.h>
21 b542d800 2021-11-20 op #include <err.h>
22 b542d800 2021-11-20 op #include <errno.h>
23 b542d800 2021-11-20 op #include <event.h>
24 b542d800 2021-11-20 op #include <limits.h>
25 b542d800 2021-11-20 op #include <netdb.h>
26 b542d800 2021-11-20 op #include <signal.h>
27 b542d800 2021-11-20 op #include <stdio.h>
28 b542d800 2021-11-20 op #include <stdlib.h>
29 b542d800 2021-11-20 op #include <string.h>
30 b542d800 2021-11-20 op #include <unistd.h>
32 b542d800 2021-11-20 op #include <stdint.h>
34 b542d800 2021-11-20 op #ifndef SSH_PATH
35 b542d800 2021-11-20 op #define SSH_PATH "/usr/bin/ssh"
38 b542d800 2021-11-20 op #define MAXSOCK 4
39 b542d800 2021-11-20 op #define MAXCONN 16
41 72c20227 2021-11-21 op #ifndef __OpenBSD__
42 72c20227 2021-11-21 op #define pledge(p, e) 0
45 b542d800 2021-11-20 op int rport; /* ssh port */
46 b542d800 2021-11-20 op const char *addr; /* our addr */
47 b542d800 2021-11-20 op const char *ssh_tunnel_flag;
48 b542d800 2021-11-20 op const char *ssh_dest;
50 b542d800 2021-11-20 op struct event sockev[MAXSOCK];
51 b542d800 2021-11-20 op int socks[MAXSOCK];
54 b542d800 2021-11-20 op struct event sighupev;
55 b542d800 2021-11-20 op struct event sigintev;
56 b542d800 2021-11-20 op struct event sigtermev;
57 b542d800 2021-11-20 op struct event sigchldev;
58 b542d800 2021-11-20 op struct event siginfoev;
60 b542d800 2021-11-20 op struct timeval timeout;
61 b542d800 2021-11-20 op struct event timeoutev;
63 b542d800 2021-11-20 op pid_t ssh_pid = -1;
69 f0531366 2021-11-21 op struct bufferevent *sourcebev;
71 f0531366 2021-11-21 op struct bufferevent *tobev;
72 b542d800 2021-11-20 op } conns[MAXCONN];
75 b542d800 2021-11-20 op terminate(int fd, short event, void *data)
77 b542d800 2021-11-20 op event_loopbreak();
81 b542d800 2021-11-20 op chld(int fd, short event, void *data)
86 b542d800 2021-11-20 op if ((pid = waitpid(ssh_pid, &status, WNOHANG)) == -1)
87 b542d800 2021-11-20 op err(1, "waitpid");
93 b542d800 2021-11-20 op info(int fd, short event, void *data)
95 b542d800 2021-11-20 op warnx("connections: %d", conn);
99 b542d800 2021-11-20 op spawn_ssh(void)
101 b542d800 2021-11-20 op warnx("spawning ssh...");
103 b542d800 2021-11-20 op switch (ssh_pid = fork()) {
105 b542d800 2021-11-20 op err(1, "fork");
107 b542d800 2021-11-20 op execl(SSH_PATH, "ssh", "-L", ssh_tunnel_flag,
108 b542d800 2021-11-20 op "-NTq", ssh_dest, NULL);
109 b542d800 2021-11-20 op err(1, "exec");
111 8cb448d7 2021-11-21 op /* TODO: wait just a bit to let ssh to do its things */
117 b542d800 2021-11-20 op killing_time(int fd, short event, void *data)
119 b542d800 2021-11-20 op if (ssh_pid == -1)
122 b542d800 2021-11-20 op warnx("killing time!");
123 b542d800 2021-11-20 op kill(ssh_pid, SIGTERM);
124 b542d800 2021-11-20 op ssh_pid = -1;
128 b542d800 2021-11-20 op nopcb(struct bufferevent *bev, void *d)
134 b542d800 2021-11-20 op sreadcb(struct bufferevent *bev, void *d)
136 b542d800 2021-11-20 op struct conn *c = d;
138 b542d800 2021-11-20 op bufferevent_write_buffer(c->tobev, EVBUFFER_INPUT(bev));
142 b542d800 2021-11-20 op treadcb(struct bufferevent *bev, void *d)
144 b542d800 2021-11-20 op struct conn *c = d;
146 b542d800 2021-11-20 op bufferevent_write_buffer(c->sourcebev, EVBUFFER_INPUT(bev));
150 b542d800 2021-11-20 op errcb(struct bufferevent *bev, short event, void *d)
152 b542d800 2021-11-20 op struct conn *c = d;
154 b542d800 2021-11-20 op warnx("in errcb, closing connection");
156 b542d800 2021-11-20 op bufferevent_free(c->sourcebev);
157 b542d800 2021-11-20 op bufferevent_free(c->tobev);
159 b542d800 2021-11-20 op close(c->source);
160 b542d800 2021-11-20 op close(c->to);
162 b542d800 2021-11-20 op c->source = -1;
165 b542d800 2021-11-20 op if (--conn == 0) {
166 ca125bba 2021-11-21 op warnx("scheduling ssh termination (%llds)",
167 ca125bba 2021-11-21 op (long long)timeout.tv_sec);
168 b542d800 2021-11-20 op evtimer_set(&timeoutev, killing_time, NULL);
169 b542d800 2021-11-20 op evtimer_add(&timeoutev, &timeout);
174 b542d800 2021-11-20 op connect_to_ssh(void)
176 b542d800 2021-11-20 op struct addrinfo hints, *res, *res0;
177 b542d800 2021-11-20 op int r, saved_errno, sock;
178 b542d800 2021-11-20 op char port[16];
179 b542d800 2021-11-20 op const char *c, *cause;
181 b542d800 2021-11-20 op if ((c = strchr(ssh_tunnel_flag, ':')) == NULL)
182 b542d800 2021-11-20 op errx(1, "wrong flag format: %s", ssh_tunnel_flag);
184 b542d800 2021-11-20 op if ((size_t)(c - ssh_tunnel_flag) >= sizeof(port)-1)
185 b542d800 2021-11-20 op errx(1, "EPORTTOOLONG");
187 b542d800 2021-11-20 op memset(port, 0, sizeof(port));
188 b542d800 2021-11-20 op memcpy(port, ssh_tunnel_flag, c - ssh_tunnel_flag);
190 b542d800 2021-11-20 op memset(&hints, 0, sizeof(hints));
191 b542d800 2021-11-20 op hints.ai_family = AF_UNSPEC;
192 b542d800 2021-11-20 op hints.ai_socktype = SOCK_STREAM;
194 b542d800 2021-11-20 op /* XXX: hardcoded */
195 b542d800 2021-11-20 op r = getaddrinfo("localhost", port, &hints, &res0);
197 b542d800 2021-11-20 op errx(1, "getaddrinfo(\"localhost\", \"%s\"): %s",
198 b542d800 2021-11-20 op port, gai_strerror(r));
200 b542d800 2021-11-20 op for (res = res0; res; res = res->ai_next) {
201 b542d800 2021-11-20 op sock = socket(res->ai_family, res->ai_socktype,
202 b542d800 2021-11-20 op res->ai_protocol);
203 b542d800 2021-11-20 op if (sock == -1) {
204 b542d800 2021-11-20 op cause = "socket";
208 b542d800 2021-11-20 op if (connect(sock, res->ai_addr, res->ai_addrlen) == -1) {
209 b542d800 2021-11-20 op cause = "connect";
210 b542d800 2021-11-20 op saved_errno = errno;
212 b542d800 2021-11-20 op errno = saved_errno;
220 b542d800 2021-11-20 op if (sock == -1)
221 b542d800 2021-11-20 op err(1, "%s", cause);
223 b542d800 2021-11-20 op freeaddrinfo(res0);
228 b542d800 2021-11-20 op do_accept(int fd, short event, void *data)
230 b542d800 2021-11-20 op int s, sock, i;
232 b542d800 2021-11-20 op warnx("handling connection");
234 b542d800 2021-11-20 op if (evtimer_pending(&timeoutev, NULL))
235 b542d800 2021-11-20 op evtimer_del(&timeoutev);
237 b542d800 2021-11-20 op if ((s = accept(fd, NULL, 0)) == -1)
238 b542d800 2021-11-20 op err(1, "accept");
240 b542d800 2021-11-20 op if (conn == MAXCONN) {
248 b542d800 2021-11-20 op if (ssh_pid == -1)
251 b542d800 2021-11-20 op warnx("binding the socket to ssh");
252 b542d800 2021-11-20 op sock = connect_to_ssh();
254 b542d800 2021-11-20 op for (i = 0; i < MAXCONN; ++i) {
255 b542d800 2021-11-20 op if (conns[i].source == -1) {
256 b542d800 2021-11-20 op conns[i].source = s;
257 b542d800 2021-11-20 op conns[i].to = sock;
258 b542d800 2021-11-20 op conns[i].sourcebev = bufferevent_new(s,
259 b542d800 2021-11-20 op sreadcb, nopcb, errcb, &conns[i]);
260 b542d800 2021-11-20 op conns[i].tobev = bufferevent_new(sock,
261 b542d800 2021-11-20 op treadcb, nopcb, errcb, &conns[i]);
262 b542d800 2021-11-20 op if (conns[i].sourcebev == NULL ||
263 b542d800 2021-11-20 op conns[i].tobev == NULL)
264 b542d800 2021-11-20 op err(1, "bufferevent_new");
265 b5e7ff9b 2021-11-21 op bufferevent_enable(conns[i].sourcebev,
266 b542d800 2021-11-20 op EV_READ|EV_WRITE);
267 b5e7ff9b 2021-11-21 op bufferevent_enable(conns[i].tobev,
268 b542d800 2021-11-20 op EV_READ|EV_WRITE);
274 b542d800 2021-11-20 op static void __dead
277 b542d800 2021-11-20 op fprintf(stderr, "usage: %s -B port:host:hostport -b addr [-t timeout]"
278 b542d800 2021-11-20 op " destination\n", getprogname());
283 b542d800 2021-11-20 op bind_socket(void)
285 b542d800 2021-11-20 op struct addrinfo hints, *res, *res0;
286 b542d800 2021-11-20 op int r, saved_errno;
287 b542d800 2021-11-20 op char host[64];
288 b542d800 2021-11-20 op const char *c, *h, *port, *cause;
290 b542d800 2021-11-20 op if ((c = strchr(addr, ':')) == NULL) {
294 b542d800 2021-11-20 op if ((size_t)(c - addr) >= sizeof(host) -1)
295 b542d800 2021-11-20 op errx(1, "ENAMETOOLONG");
296 b542d800 2021-11-20 op memset(host, 0, sizeof(host));
297 b542d800 2021-11-20 op memcpy(host, c, c - addr);
303 b542d800 2021-11-20 op memset(&hints, 0, sizeof(hints));
304 b542d800 2021-11-20 op hints.ai_family = AF_UNSPEC;
305 b542d800 2021-11-20 op hints.ai_socktype = SOCK_STREAM;
306 b542d800 2021-11-20 op hints.ai_flags = AI_PASSIVE;
308 b542d800 2021-11-20 op r = getaddrinfo(h, port, &hints, &res0);
310 b542d800 2021-11-20 op errx(1, "getaddrinfo(%s): %s",
311 b542d800 2021-11-20 op addr, gai_strerror(r));
313 b542d800 2021-11-20 op for (res = res0; res && nsock < MAXSOCK; res = res->ai_next) {
314 b542d800 2021-11-20 op socks[nsock] = socket(res->ai_family, res->ai_socktype,
315 b542d800 2021-11-20 op res->ai_protocol);
316 b542d800 2021-11-20 op if (socks[nsock] == -1) {
317 b542d800 2021-11-20 op cause = "socket";
321 b542d800 2021-11-20 op if (bind(socks[nsock], res->ai_addr, res->ai_addrlen) == -1) {
322 b542d800 2021-11-20 op cause = "bind";
323 b542d800 2021-11-20 op saved_errno = errno;
324 b542d800 2021-11-20 op close(socks[nsock]);
325 b542d800 2021-11-20 op errno = saved_errno;
329 b542d800 2021-11-20 op listen(socks[nsock], 5);
333 b542d800 2021-11-20 op if (nsock == 0)
334 b542d800 2021-11-20 op err(1, "%s", cause);
336 b542d800 2021-11-20 op freeaddrinfo(res0);
340 b542d800 2021-11-20 op main(int argc, char **argv)
342 00b436f9 2021-11-21 op int ch, tout, i;
343 b542d800 2021-11-20 op const char *errstr;
345 b542d800 2021-11-20 op while ((ch = getopt(argc, argv, "B:b:t:")) != -1) {
346 b542d800 2021-11-20 op switch (ch) {
348 b542d800 2021-11-20 op ssh_tunnel_flag = optarg;
351 b542d800 2021-11-20 op addr = optarg;
354 b542d800 2021-11-20 op tout = strtonum(optarg, 1, INT_MAX, &errstr);
355 b542d800 2021-11-20 op if (errstr != NULL)
356 b542d800 2021-11-20 op errx(1, "timeout is %s: %s", errstr, optarg);
362 b542d800 2021-11-20 op argc -= optind;
363 b542d800 2021-11-20 op argv += optind;
365 b542d800 2021-11-20 op if (argc != 1 || addr == NULL || ssh_tunnel_flag == NULL)
368 b542d800 2021-11-20 op if (tout == 0)
371 b542d800 2021-11-20 op timeout.tv_sec = tout;
372 b542d800 2021-11-20 op timeout.tv_usec = 0;
374 b542d800 2021-11-20 op ssh_dest = argv[0];
376 b542d800 2021-11-20 op for (i = 0; i < MAXCONN; ++i) {
377 b542d800 2021-11-20 op conns[i].source = -1;
378 b542d800 2021-11-20 op conns[i].to = -1;
381 b542d800 2021-11-20 op bind_socket();
383 b542d800 2021-11-20 op signal(SIGPIPE, SIG_IGN);
385 b542d800 2021-11-20 op event_init();
387 b542d800 2021-11-20 op /* initialize the timer */
388 b542d800 2021-11-20 op evtimer_set(&timeoutev, killing_time, NULL);
390 b542d800 2021-11-20 op signal_set(&sighupev, SIGHUP, terminate, NULL);
391 b542d800 2021-11-20 op signal_set(&sigintev, SIGINT, terminate, NULL);
392 b542d800 2021-11-20 op signal_set(&sigtermev, SIGTERM, terminate, NULL);
393 b542d800 2021-11-20 op signal_set(&sigchldev, SIGCHLD, chld, NULL);
394 b542d800 2021-11-20 op signal_set(&siginfoev, SIGINFO, info, NULL);
396 b542d800 2021-11-20 op signal_add(&sighupev, NULL);
397 b542d800 2021-11-20 op signal_add(&sigintev, NULL);
398 b542d800 2021-11-20 op signal_add(&sigtermev, NULL);
399 b542d800 2021-11-20 op signal_add(&sigchldev, NULL);
400 b542d800 2021-11-20 op signal_add(&siginfoev, NULL);
402 b542d800 2021-11-20 op for (i = 0; i < nsock; ++i) {
403 b542d800 2021-11-20 op event_set(&sockev[i], socks[i], EV_READ|EV_PERSIST,
404 b542d800 2021-11-20 op do_accept, NULL);
405 b542d800 2021-11-20 op event_add(&sockev[i], NULL);
409 b542d800 2021-11-20 op * dns, inet: bind the socket and connect to the childs.
410 b542d800 2021-11-20 op * proc, exec: execute ssh on demand.
412 b542d800 2021-11-20 op if (pledge("stdio dns inet proc exec", NULL) == -1)
413 b542d800 2021-11-20 op err(1, "pledge");
415 b542d800 2021-11-20 op warnx("lift off!");
416 b542d800 2021-11-20 op event_dispatch();
418 b542d800 2021-11-20 op if (ssh_pid != -1)
419 b542d800 2021-11-20 op kill(ssh_pid, SIGINT);