1 /*
2  *
3  * Copyright (c) 2009 Wouter de Jong <maddog2k@maddog2k.net>
4  * Copyright (c) 2005-2008 Frank Knobbe <frank@knobbe.us>
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26  * SUCH DAMAGE.
27  *
28  * Acknowledgements:
29  *
30  * Heavily based on ssp_cisco_nullroute of Frank Knobbe <frank@knobbe.us>
31  *
32  *
33  * ssp_cisco_nullroute2.c
34  *
35  * Purpose:
36  *
37  * This SnortSam plugin telnet's into one or more Cisco routers and issues
38  * a route command to effectively "null-route" the intruding IP address.
39  * SnortSam will remove the added routes when the blocks expire.
40  *
41  *
42  */
43 
44 
45 #ifndef		__SSP_CISCO_NULLROUTE2_H__
46 #define		__SSP_CISCO_NULLROUTE2_H__
47 
48 
49 #define CNRPWLEN		50			/* Maximum password length */
50 #define CNRNETWAIT		20			/* Network timeout in sec */
51 #define RTAGVAL_LEN		10UL			/* Maximum length for route-tag */
52 #define RTAGVAL_MIN		1UL			/* Minimum value for route-tag */
53 #define RTAGVAL_MAX		4294967295UL		/* Maximum value for route-tag */
54 
55 
56 typedef struct _cnr2data				/* List of Routers */
57 {	struct in_addr	ip;
58 	SOCKET 			routersocket;
59 	int			userlogin;
60 	int 			loggedin;
61 	int			autoenable;
62 	char			username[CNRPWLEN+1];
63 	char			telnetpw[CNRPWLEN+1];
64 	char			enablepw[CNRPWLEN+1];
65 	char			routetag[RTAGVAL_LEN+1];
66 }	CISCONULLROUTE2DATA;
67 
68 
69 void CiscoNullRoute2Parse(char *,char *,unsigned long,DATALIST *);
70 void CiscoNullRoute2Block(BLOCKINFO *,void *,unsigned long);
71 
72 #endif /* __SSP_CISCO_NULLROUTE2_H__ */
73 
74