##    name_service.pm: Fwctl service module to handle the DNS protocol.##    This file is part of Fwctl.##    Author: Francis J. Lacoste <francis@iNsu.COM>##    Copyright (c) 1999,2000 iNsu Innovations Inc.##    This program is free software; you can redistribute it and/or modify#    it under the terms of the GNU General Public License as published by#    the Free Software Foundation; either version 2 of the License, or#    (at your option) any later version.#package Fwctl::Services::name_service;use strict;use Fwctl::RuleSet qw(:tcp_rulesets :udp_rulesets :masq :ports);use IPChains;sub new {  my $proto = shift;  my $class = ref $proto || $proto;  bless {	 query_port => UNPRIVILEGED_PORTS,	}, $class;}sub prototypes {  my ($self,$target,$options) = @_;  # Build prototype rule  (   IPChains->new(		 Rule	    => $target,		 Prot	    => 'udp',		 DestPort   => 'domain',		 %{$options->{ipchains}},		),   IPChains->new(		 Rule	    => $target,		 Prot	    => 'tcp',		 SourcePort => UNPRIVILEGED_PORTS,		 DestPort   => 'domain',		 %{$options->{ipchains}},		),  );}sub block_rules {  my $self = shift;  my ( $target, $src, $src_if, $dst, $dst_if, $options ) = @_;  my ($udp,$tcp) = $self->prototypes( $target, $options );  my $query;  if ( $options->{server} ) {      $query = undef;  } else {      $query = $options->{"query-port"} || $self->{query_port};  }  $udp->attribute( SourcePort => $query );  block_udp_ruleset( $udp, $src, $src_if, $dst, $dst_if );  block_tcp_ruleset( $tcp, $src, $src_if, $dst, $dst_if );}sub accept_rules {  my $self = shift;  my ( $target, $src, $src_if, $dst, $dst_if, $options ) = @_;  my ($udp,$tcp) = $self->prototypes( $target, $options );  my $masq = defined $options->{portfw} ? PORTFW :    $options->{masq} ? MASQ : NOMASQ;  my $query;  if ( $options->{server} ) {      $query = undef;  } else {      $query = $options->{"query-port"} || $self->{query_port};  }  $udp->attribute( SourcePort => $query );  accept_udp_ruleset( $udp, $src, $src_if, $dst, $dst_if,		      $masq, $options->{portfw} );  accept_tcp_ruleset( $tcp, $src, $src_if, $dst, $dst_if,		      $masq, $options->{portfw} );}sub account_rules {  my $self = shift;  my ( $target, $src, $src_if, $dst, $dst_if, $options ) = @_;  my ($udp,$tcp) = $self->prototypes( $target, $options );  my $masq = defined $options->{portfw} ? PORTFW :    $options->{masq} ? MASQ : NOMASQ;  my $query;  if ( $options->{server} ) {      $query = undef;  } else {      $query = $options->{"query-port"} || $self->{query_port};  }  $udp->attribute( SourcePort => $query );  acct_udp_ruleset( $udp, $src, $src_if, $dst, $dst_if, $masq );  acct_tcp_ruleset( $tcp, $src, $src_if, $dst, $dst_if, $masq );}sub valid_options {  my  $self = shift;  ( "query-port=s", "server" );}1;=pod=head1 NAMEFwctl::Services::name_service - Fwctl module to handle the DNS protocol.=head1 SYNOPSIS    accept   name_service -src INTERNET -dst NAME_SERVER    accept   name_service -src NAME_SERVER -dst INTERNET -query-port 5353=head1 DESCRIPTIONThe name_service module handles the DNS protocol. It can handle bothname server and resolver configuration. When using the I<server>option, the query can be from any ports. You can use the I<query-port>option to specify the client port.Default is to use only ports > 1023 as client port. (Usual resolversituation.)=head1 AUTHORFrancis J. Lacoste <francis.lacoste@iNsu.COM>=head1 COPYRIGHTCopyright (c) 1999,2000 iNsu Innovations Inc.All rights reserved.This program is free software; you can redistribute it and/or modifyit under the terms of the GNU General Public License as published bythe Free Software Foundation; either version 2 of the License, or(at your option) any later version.=head1 SEE ALSOfwctl(8) Fwctl(3) Fwctl::RuleSet(3)=cut