File Manager

X7ROOT File Manager

Current Path: /usr/libexec/ipsec

📁 ..
📄 _import_crl(154.26 KB)
📄 _keycensor(1.38 KB)
📄 _plutorun(2.98 KB)
📄 _secretcensor(1.86 KB)
📄 _stackmanager(14 KB)
📄 _unbound-hook(1.97 KB)
📄 _updown(4.23 KB)
📄 _updown.klips(18.3 KB)
📄 _updown.netkey(23.31 KB)
📄 addconn(210.56 KB)
📄 algparse(345.43 KB)
📄 auto(5.74 KB)
📄 barf(11.82 KB)
📄 cavp(346.02 KB)
📄 enumcheck(85.1 KB)
📄 eroute(93.81 KB)
📄 klipsdebug(69.61 KB)
📄 look(4.2 KB)
📄 newhostkey(3.23 KB)
📄 pf_key(69.18 KB)
📄 pluto(1.37 MB)
📄 readwriteconf(182.2 KB)
📄 rsasigkey(159.04 KB)
📄 setup(5.58 KB)
📄 show(3.46 KB)
📄 showhostkey(159.3 KB)
📄 spi(346.27 KB)
📄 spigrp(85.76 KB)
📄 tncfg(130.14 KB)
📄 verify(12.04 KB)
📄 whack(137.93 KB)

Editing: show

#!/usr/bin/python

import sys
import os
import commands
import argparse
try:
    import ipaddress
except:
    sys.exit("This requires the pytho ipaddress module from https://pypi.python.org/pypi/ipaddress")

def main():

parser = argparse.ArgumentParser(description='check if destination traffic would get encrypted by IPsec')
    parser.add_argument('-v', '--version', action='store_true', help='show version and exit')
    parser.add_argument('-d', '--debug', action='store_true', help='show debugging')
    parser.add_argument('-s', '--source', action='store', help='source address of the packet')
    parser.add_argument('dest',  nargs='?')
    args = parser.parse_args()

if args.version:
        print("version: 0.1")
        sys.exit(0)

# check if dest is IP address, or resolve?
    dest = args.dest

if args.debug:
        print("checking destination %s"% dest)

if args.source and not dest:
        sys.exit("if specifying a source, specifying a destination is required")

source = None
    if dest:
        try:
            ipdst = ipaddress.ip_address(unicode(dest))
        except:
            sys.exit("%s is not a valid destination IP address"%dest)

if args.source:
            source = args.source
        else:
            getsrccmd = "ip -o ro get %s"%dest
            status, output = commands.getstatusoutput(getsrccmd)
            try:
                source = output.split("src")[1].strip().split(" ")[0]
            except:
                sys.exit("failed to find source ip for destination %s"%dest)

if args.debug:
        print "Need to find matching IPsec policy for %s/32 <=> %s/32"%(source,dest)

if dest:
        if "/" in source:
            source = source.split("/")[0]
        if "/" in dest:
            dest = dest.split("/")[0]
        try:
            ipsrc = ipaddress.ip_address(unicode(source))
        except:
            sys.exit("%s is not a valid sourc IP address"%source)
        if ipsrc.version != ipdst.version:
            print("woah IP familty mismatch between %s and %s"%(source,dest))
            sys.exit(1)

ipxfrmcmd = 'ip -o xfrm pol | grep -v socket | grep "dir out"'
    status, output = commands.getstatusoutput(ipxfrmcmd)
    polsrc = ""
    poldst = ""
    for line in output.split("\n"):
        src = ""
        dst = ""
        reqid = "0"
        line = line.replace("\\"," ")
        data = line.split()
        for i, word in enumerate(data):
            if src == "" and word == "src":
                src = data[i+1]
                if dest:
                    polsrc = ipaddress.ip_network(unicode(data[i+1]))
            if dst == "" and word == "dst":
                dst = data[i+1]
                if dest:
                    poldst = ipaddress.ip_network(unicode(data[i+1]))
            if word == "reqid":
                reqid = data[i+1]
        if reqid != "0":
            if dest:
                if polsrc != "":
                    if poldst != "":
                        if ipsrc in polsrc:
                            if ipdst in poldst:
                                print("%s <=> %s using reqid %s"%(src,dst,reqid))
                                sys.exit(0)
            else:
                # not dest, so we are listing all policies
                if src:
                    print("%s <=> %s using reqid %s"%(src,dst,reqid))

if dest:
        print("Packet with source address %s to destination %s would not be encrypted"%(source,dest))
        sys.exit(1)

if __name__ == "__main__":
    main()

X7ROOT File Manager

Editing: show

Upload File

Create Folder