414 lines
8.9 KiB
C
414 lines
8.9 KiB
C
|
|
||
|
|
|
||
|
|
#include "precomp.h"
|
||
|
|
|
||
|
|
|
||
|
|
LPWSTR gpszIpsecTnFiltersKey =
|
||
|
|
L"SOFTWARE\\Microsoft\\IPSec\\Tunnel Filters";
|
||
|
|
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
PersistTnFilter(
|
||
|
|
GUID gFilterID,
|
||
|
|
PTUNNEL_FILTER pTnFilter
|
||
|
|
)
|
||
|
|
{
|
||
|
|
DWORD dwError = 0;
|
||
|
|
HKEY hRegistryKey = NULL;
|
||
|
|
DWORD dwDisposition = 0;
|
||
|
|
|
||
|
|
|
||
|
|
dwError = RegCreateKeyExW(
|
||
|
|
HKEY_LOCAL_MACHINE,
|
||
|
|
gpszIpsecTnFiltersKey,
|
||
|
|
0,
|
||
|
|
NULL,
|
||
|
|
0,
|
||
|
|
KEY_ALL_ACCESS,
|
||
|
|
NULL,
|
||
|
|
&hRegistryKey,
|
||
|
|
&dwDisposition
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwError = SPDWriteTnFilter(
|
||
|
|
hRegistryKey,
|
||
|
|
gFilterID,
|
||
|
|
pTnFilter
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
cleanup:
|
||
|
|
|
||
|
|
if (hRegistryKey) {
|
||
|
|
RegCloseKey(hRegistryKey);
|
||
|
|
}
|
||
|
|
|
||
|
|
return (dwError);
|
||
|
|
|
||
|
|
error:
|
||
|
|
|
||
|
|
if (hRegistryKey) {
|
||
|
|
(VOID) SPDPurgeTnFilter(
|
||
|
|
gFilterID
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
goto cleanup;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
SPDWriteTnFilter(
|
||
|
|
HKEY hParentRegKey,
|
||
|
|
GUID gFilterID,
|
||
|
|
PTUNNEL_FILTER pTnFilter
|
||
|
|
)
|
||
|
|
{
|
||
|
|
DWORD dwError = 0;
|
||
|
|
WCHAR szFilterID[MAX_PATH];
|
||
|
|
WCHAR szPolicyID[MAX_PATH];
|
||
|
|
LPWSTR pszStringUuid = NULL;
|
||
|
|
LPWSTR pszPolicyUuid = NULL;
|
||
|
|
HKEY hRegKey = NULL;
|
||
|
|
DWORD dwDisposition = 0;
|
||
|
|
LPBYTE pBuffer = NULL;
|
||
|
|
DWORD dwBufferSize = 0;
|
||
|
|
DWORD dwInterfaceType = 0;
|
||
|
|
DWORD dwMirrored = 0;
|
||
|
|
DWORD dwInboundFilterFlag = 0;
|
||
|
|
DWORD dwOutboundFilterFlag = 0;
|
||
|
|
|
||
|
|
|
||
|
|
szFilterID[0] = L'\0';
|
||
|
|
szPolicyID[0] = L'\0';
|
||
|
|
|
||
|
|
dwError = UuidToString(
|
||
|
|
&gFilterID,
|
||
|
|
&pszStringUuid
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
wcscpy(szFilterID, L"{");
|
||
|
|
wcscat(szFilterID, pszStringUuid);
|
||
|
|
wcscat(szFilterID, L"}");
|
||
|
|
|
||
|
|
dwError = UuidToString(
|
||
|
|
&pTnFilter->gPolicyID,
|
||
|
|
&pszPolicyUuid
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
wcscpy(szPolicyID, L"{");
|
||
|
|
wcscat(szPolicyID, pszPolicyUuid);
|
||
|
|
wcscat(szPolicyID, L"}");
|
||
|
|
|
||
|
|
dwError = RegCreateKeyExW(
|
||
|
|
hParentRegKey,
|
||
|
|
szFilterID,
|
||
|
|
0,
|
||
|
|
NULL,
|
||
|
|
0,
|
||
|
|
KEY_ALL_ACCESS,
|
||
|
|
NULL,
|
||
|
|
&hRegKey,
|
||
|
|
&dwDisposition
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"FilterID",
|
||
|
|
0,
|
||
|
|
REG_SZ,
|
||
|
|
(LPBYTE) szFilterID,
|
||
|
|
(wcslen(szFilterID) + 1)*sizeof(WCHAR)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"FilterName",
|
||
|
|
0,
|
||
|
|
REG_SZ,
|
||
|
|
(LPBYTE) pTnFilter->pszFilterName,
|
||
|
|
(wcslen(pTnFilter->pszFilterName) + 1)*sizeof(WCHAR)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwInterfaceType = (DWORD) pTnFilter->InterfaceType;
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"InterfaceType",
|
||
|
|
0,
|
||
|
|
REG_DWORD,
|
||
|
|
(LPBYTE)&dwInterfaceType,
|
||
|
|
sizeof(DWORD)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwMirrored = (DWORD) pTnFilter->bCreateMirror;
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"Mirrored",
|
||
|
|
0,
|
||
|
|
REG_DWORD,
|
||
|
|
(LPBYTE)&dwMirrored,
|
||
|
|
sizeof(DWORD)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"Flags",
|
||
|
|
0,
|
||
|
|
REG_DWORD,
|
||
|
|
(LPBYTE)&pTnFilter->dwFlags,
|
||
|
|
sizeof(DWORD)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwError = MarshallTnFilterBuffer(
|
||
|
|
pTnFilter,
|
||
|
|
&pBuffer,
|
||
|
|
&dwBufferSize
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"Tunnel Filter Buffer",
|
||
|
|
0,
|
||
|
|
REG_BINARY,
|
||
|
|
(LPBYTE) pBuffer,
|
||
|
|
dwBufferSize
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwInboundFilterFlag = (DWORD) pTnFilter->InboundFilterFlag;
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"InboundFilterFlag",
|
||
|
|
0,
|
||
|
|
REG_DWORD,
|
||
|
|
(LPBYTE)&dwInboundFilterFlag,
|
||
|
|
sizeof(DWORD)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwOutboundFilterFlag = (DWORD) pTnFilter->OutboundFilterFlag;
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"OutboundFilterFlag",
|
||
|
|
0,
|
||
|
|
REG_DWORD,
|
||
|
|
(LPBYTE)&dwOutboundFilterFlag,
|
||
|
|
sizeof(DWORD)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
dwError = RegSetValueExW(
|
||
|
|
hRegKey,
|
||
|
|
L"PolicyID",
|
||
|
|
0,
|
||
|
|
REG_SZ,
|
||
|
|
(LPBYTE) szPolicyID,
|
||
|
|
(wcslen(szPolicyID) + 1)*sizeof(WCHAR)
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
cleanup:
|
||
|
|
|
||
|
|
if (pszStringUuid) {
|
||
|
|
RpcStringFree(&pszStringUuid);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pszPolicyUuid) {
|
||
|
|
RpcStringFree(&pszPolicyUuid);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (hRegKey) {
|
||
|
|
RegCloseKey(hRegKey);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pBuffer) {
|
||
|
|
FreeSPDMem(pBuffer);
|
||
|
|
}
|
||
|
|
|
||
|
|
return (dwError);
|
||
|
|
|
||
|
|
error:
|
||
|
|
|
||
|
|
goto cleanup;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
MarshallTnFilterBuffer(
|
||
|
|
PTUNNEL_FILTER pTnFilter,
|
||
|
|
LPBYTE * ppBuffer,
|
||
|
|
PDWORD pdwBufferSize
|
||
|
|
)
|
||
|
|
{
|
||
|
|
DWORD dwError = 0;
|
||
|
|
LPBYTE pBuffer = NULL;
|
||
|
|
DWORD dwBufferSize = 0;
|
||
|
|
LPBYTE pMem = NULL;
|
||
|
|
static const GUID GUID_IPSEC_TN_FILTER_VER1 =
|
||
|
|
{ 0xabcd0006, 0x0001, 0x0001, { 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01 } };
|
||
|
|
|
||
|
|
|
||
|
|
dwBufferSize = sizeof(GUID) +
|
||
|
|
sizeof(DWORD) +
|
||
|
|
sizeof(ADDR) +
|
||
|
|
sizeof(ADDR) +
|
||
|
|
sizeof(PROTOCOL) +
|
||
|
|
sizeof(PORT) +
|
||
|
|
sizeof(PORT) +
|
||
|
|
sizeof(ADDR) +
|
||
|
|
sizeof(ADDR);
|
||
|
|
|
||
|
|
pBuffer = (LPBYTE) AllocSPDMem(
|
||
|
|
dwBufferSize
|
||
|
|
);
|
||
|
|
if (!pBuffer) {
|
||
|
|
dwError = ERROR_OUTOFMEMORY;
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
}
|
||
|
|
|
||
|
|
pMem = pBuffer;
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &GUID_IPSEC_TN_FILTER_VER1,
|
||
|
|
sizeof(GUID)
|
||
|
|
);
|
||
|
|
pMem += sizeof(GUID);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &dwBufferSize,
|
||
|
|
sizeof(DWORD)
|
||
|
|
);
|
||
|
|
pMem += sizeof(DWORD);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &pTnFilter->SrcAddr,
|
||
|
|
sizeof(ADDR)
|
||
|
|
);
|
||
|
|
pMem += sizeof(ADDR);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &pTnFilter->DesAddr,
|
||
|
|
sizeof(ADDR)
|
||
|
|
);
|
||
|
|
pMem += sizeof(ADDR);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &pTnFilter->Protocol,
|
||
|
|
sizeof(PROTOCOL)
|
||
|
|
);
|
||
|
|
pMem += sizeof(PROTOCOL);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &pTnFilter->SrcPort,
|
||
|
|
sizeof(PORT)
|
||
|
|
);
|
||
|
|
pMem += sizeof(PORT);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &pTnFilter->DesPort,
|
||
|
|
sizeof(PORT)
|
||
|
|
);
|
||
|
|
pMem += sizeof(PORT);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &pTnFilter->SrcTunnelAddr,
|
||
|
|
sizeof(ADDR)
|
||
|
|
);
|
||
|
|
pMem += sizeof(ADDR);
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pMem,
|
||
|
|
(LPBYTE) &pTnFilter->DesTunnelAddr,
|
||
|
|
sizeof(ADDR)
|
||
|
|
);
|
||
|
|
pMem += sizeof(ADDR);
|
||
|
|
|
||
|
|
*ppBuffer = pBuffer;
|
||
|
|
*pdwBufferSize = dwBufferSize;
|
||
|
|
|
||
|
|
return (dwError);
|
||
|
|
|
||
|
|
error:
|
||
|
|
|
||
|
|
*ppBuffer = NULL;
|
||
|
|
*pdwBufferSize = 0;
|
||
|
|
|
||
|
|
return (dwError);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
SPDPurgeTnFilter(
|
||
|
|
GUID gTnFilterID
|
||
|
|
)
|
||
|
|
{
|
||
|
|
DWORD dwError = 0;
|
||
|
|
HKEY hParentRegKey = NULL;
|
||
|
|
DWORD dwDisposition = 0;
|
||
|
|
WCHAR szFilterID[MAX_PATH];
|
||
|
|
LPWSTR pszStringUuid = NULL;
|
||
|
|
|
||
|
|
|
||
|
|
dwError = RegCreateKeyExW(
|
||
|
|
HKEY_LOCAL_MACHINE,
|
||
|
|
gpszIpsecTnFiltersKey,
|
||
|
|
0,
|
||
|
|
NULL,
|
||
|
|
0,
|
||
|
|
KEY_ALL_ACCESS,
|
||
|
|
NULL,
|
||
|
|
&hParentRegKey,
|
||
|
|
&dwDisposition
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
szFilterID[0] = L'\0';
|
||
|
|
|
||
|
|
dwError = UuidToString(
|
||
|
|
&gTnFilterID,
|
||
|
|
&pszStringUuid
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
wcscpy(szFilterID, L"{");
|
||
|
|
wcscat(szFilterID, pszStringUuid);
|
||
|
|
wcscat(szFilterID, L"}");
|
||
|
|
|
||
|
|
dwError = RegDeleteKeyW(
|
||
|
|
hParentRegKey,
|
||
|
|
szFilterID
|
||
|
|
);
|
||
|
|
BAIL_ON_WIN32_ERROR(dwError);
|
||
|
|
|
||
|
|
error:
|
||
|
|
|
||
|
|
if (hParentRegKey) {
|
||
|
|
RegCloseKey(hParentRegKey);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pszStringUuid) {
|
||
|
|
RpcStringFree(&pszStringUuid);
|
||
|
|
}
|
||
|
|
|
||
|
|
return(dwError);
|
||
|
|
}
|
||
|
|
|