├── db ├── CVS │ ├── Repository │ └── Entries └── CVSROOT │ └── CVS │ ├── Entries │ ├── Repository │ └── Root ├── .gitignore ├── inc ├── helpers.inc ├── status.inc ├── ipv6.inc ├── utils.inc ├── exclusions.inc ├── cvs.inc ├── aggregate.inc ├── irrquery.inc └── pfxlist.inc ├── conf ├── nag.msg ├── irrdb.conf.dist ├── nag.conf.dist ├── exclusions.conf.dist └── irrpt.conf.dist ├── LICENSE ├── TODO ├── bin ├── irrpt_nag ├── irrpt_list_ases ├── irrpt_list_prefixes ├── irrpt_pfxgen └── irrpt_fetch ├── configure.php ├── examples └── junoscript.pl └── README.md /db/CVS/Repository: -------------------------------------------------------------------------------- 1 | . 2 | -------------------------------------------------------------------------------- /db/CVSROOT/CVS/Entries: -------------------------------------------------------------------------------- 1 | D 2 | -------------------------------------------------------------------------------- /db/CVS/Entries: -------------------------------------------------------------------------------- 1 | D/CVSROOT//// 2 | -------------------------------------------------------------------------------- /db/CVSROOT/CVS/Repository: -------------------------------------------------------------------------------- 1 | CVSROOT 2 | -------------------------------------------------------------------------------- /db/CVSROOT/CVS/Root: -------------------------------------------------------------------------------- 1 | /usr/local/irrpt/CVS 2 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # GIT ignore certain files 2 | # 3 | /conf/exclusions.conf 4 | /conf/irr??.conf 5 | /conf/nag.conf 6 | 7 | /db/* 8 | 9 | .DS_Store 10 | -------------------------------------------------------------------------------- /inc/helpers.inc: -------------------------------------------------------------------------------- 1 | aggregate($input); 12 | } 13 | } 14 | -------------------------------------------------------------------------------- /conf/nag.msg: -------------------------------------------------------------------------------- 1 | Hello, 2 | 3 | This is an automated e-mail message requesting a prefix list modification 4 | from providers who still build their prefix filters manually, rather than 5 | from the Internet Routing Registry (IRR) databases. 6 | 7 | A list of requested changes is contained below, followed by a complete 8 | list of prefixes for your reference. Please update the prefix-lists for 9 | all BGP sessions with our ASN. Also please note that the prefixes are 10 | pre-aggregated, and should always be applied with at least "upto /24" 11 | (Juniper) or "le 24" (Cisco). 12 | 13 | Thank you for your time. 14 | -------------------------------------------------------------------------------- /conf/irrdb.conf.dist: -------------------------------------------------------------------------------- 1 | # 2 | # CONF: irrdb.conf.dist 3 | # 4 | # NOTE: Formatting of this file can use spaces or tabs. 5 | # If update eamil is set to "none" or is blank, no email will be sent. 6 | # cvs must be tracking for email to work and send diffs 7 | # 8 | # ex: irrpt_fetch - will pull the IRR object associated in this file 9 | # 10 | # 11 | # 12 | # Example: 13 | # ASN IRR Object (AS-SET/AUT-NUM) Update Email 14 | 15 | 42 AS-PCH noc@example-customer-a.com 16 | 6939 AS-HURRICANE none 17 | 11670 AS-TORIX peering@peering-ixp.com 18 | 393424 AS393424 upstream-notify@example-customer-b.com 19 | -------------------------------------------------------------------------------- /conf/nag.conf.dist: -------------------------------------------------------------------------------- 1 | 22 | -------------------------------------------------------------------------------- /conf/exclusions.conf.dist: -------------------------------------------------------------------------------- 1 | # This file contains a list of prefixes which should not be registered, 2 | # in whole or in part. 3 | # 4 | # Remember, if you put unallocated space (bogons) in this list, it is your 5 | # responsibility to keep the list up to date as new blocks are released by 6 | # IANA. A good source for the current list is: 7 | # 8 | # https://team-cymru.com/community-services/bogon-reference/bogon-reference-http/ 9 | # 10 | # Examples: 11 | # 12 | # 0.0.0.0/8 13 | # 2.56.0.0/14 14 | # 5.45.32.0/20 15 | # .. 16 | # ::/8 17 | # 100::/8 18 | # 200::/7 19 | # .. 20 | 0.0.0.0/8 21 | 10.0.0.0/8 22 | 100.64.0.0/10 23 | 127.0.0.0/8 24 | 169.254.0.0/16 25 | 172.16.0.0/12 26 | 192.0.0.0/24 27 | 192.0.2.0/24 28 | 192.168.0.0/16 29 | 198.18.0.0/15 30 | 198.51.100.0/24 31 | 203.0.113.0/24 32 | 224.0.0.0/3 33 | 34 | # IPv6 35 | ::/128 36 | ::1/128 37 | ::ffff:0:0/96 38 | ::/96 39 | 100::/64 40 | 2001::/40 41 | 2001:10::/28 42 | 2001:db8::/32 43 | 2002::/16 44 | fc00::/7 45 | fe80::/10 46 | fec0::/10 47 | ff00::/8 48 | -------------------------------------------------------------------------------- /inc/status.inc: -------------------------------------------------------------------------------- 1 | 40 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | Copyright (c) 2004-2006, Richard A. Steenbergen 2 | All rights reserved. 3 | 4 | Redistribution and use in source and binary forms, with or without 5 | modification, are permitted provided that the following conditions are 6 | met: 7 | 8 | * Redistributions of source code must retain the above copyright notice, 9 | this list of conditions and the following disclaimer. 10 | 11 | * Redistributions in binary form must reproduce the above copyright 12 | notice, this list of conditions and the following disclaimer in the 13 | documentation and/or other materials provided with the distribution. 14 | 15 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS 16 | IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 17 | THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 18 | PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR 19 | CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, 20 | EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, 21 | PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 22 | PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 23 | LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 24 | NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 25 | SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 26 | -------------------------------------------------------------------------------- /inc/ipv6.inc: -------------------------------------------------------------------------------- 1 | 2602:fde5:0000:0000:0000:0000:0000:0000 */ 29 | function _v6_expand($ip) 30 | { 31 | $hex = unpack("H*hex", inet_pton($ip)); 32 | $ip = substr(preg_replace("/([A-f0-9]{4})/", "$1:", $hex['hex']), 0, -1); 33 | return $ip; 34 | } 35 | 36 | /* compress v6 notation and all its zeros - 2602:fde5:0000:0000:0000:0000:0000:0000 => 2602:fde5:: */ 37 | function _v6_compress($ip) 38 | { 39 | $ip = inet_ntop(inet_pton($ip)); 40 | return $ip; 41 | } 42 | 43 | /* return network portion of the prefix - 2602:fde5:1::90A/36 => 2602:fde5:0000:0000:0000:0000:0000:0000 */ 44 | function _v6_to_network($pfx, $mask) 45 | { 46 | /* convert v6 address into bin form */ 47 | $pfx_bin = inet_pton( $pfx ); 48 | 49 | /* do the same with the provided mask */ 50 | $mask_bin = inet_pton( _v6_mask_int2hex($mask)); 51 | 52 | /* apply mask to prefix and reverse the binary conversion to a printable string to get the network portion*/ 53 | $network = inet_ntop( pack( "A16", $pfx_bin & $mask_bin ) ); 54 | 55 | return _v6_expand($network); 56 | } 57 | 58 | ?> 59 | -------------------------------------------------------------------------------- /TODO: -------------------------------------------------------------------------------- 1 | Project Goals: IRR PowerTools 3.0 2 | --------------------------------- 3 | 4 | * Develop a web-based frontend for IRRPT user operation. Features include 5 | configuration management, a work queue for changes which need to be 6 | processed, an integrated route history viewer, and integrated AS-SET 7 | explorer and manual IRR query tools. 8 | 9 | * Move to an all SQL backend for route storage and configuration, in 10 | order to scale and reduce dependancy on external packages. 11 | 12 | * Add tracking of the version of the prefix-list which has been deployed 13 | to routers, sent to upstream providers via Nags, etc. 14 | 15 | * More tightly integrate prefix list deployment code into the package. 16 | This is tricky, since you need to query a db to know which devices a 17 | particular customer has sessions on. We don't want to get into the 18 | business of being a complete customer database, and we expect that 19 | most serious users will already have (or should have) an existing BGP 20 | customer and BGP session database which will probably not easily speak 21 | to our code. This needs more work. 22 | 23 | * Optimize code to reasonably support the automated and frequent 24 | (e.g. hourly) polling and deployment of hundreds or thousands of prefix 25 | lists. Optimize configuration deployment to pack multiple customers and 26 | BGP session updates onto a single router update. 27 | 28 | * Add support for automatic updating of bogon list from Cymru. 29 | 30 | * Add per-customer AS-SET member exclusion capability, for handling folks 31 | who have customers with broken records and who don't know how to fix it. 32 | 33 | * Add object-specific configuration options which can be applied in place 34 | of or in addition to the global configurations. Per-object options 35 | include the whois server to query, bogon filters, e-mail settings, 36 | etc. 37 | 38 | * Add support for parallel WHOIS queries to improve transaction speed. 39 | 40 | * Add checks to spot common PHP configuration issues which are not 41 | appropriate for this tool (e.g. safe_mode, limited memory use, limited 42 | execution time, etc). 43 | -------------------------------------------------------------------------------- /conf/irrpt.conf.dist: -------------------------------------------------------------------------------- 1 | 61 | -------------------------------------------------------------------------------- /inc/utils.inc: -------------------------------------------------------------------------------- 1 | 91 | -------------------------------------------------------------------------------- /inc/exclusions.inc: -------------------------------------------------------------------------------- 1 | 88 | -------------------------------------------------------------------------------- /inc/cvs.inc: -------------------------------------------------------------------------------- 1 | cvsroot = $cvsroot; 10 | putenv("CVSROOT={$cvsroot}"); 11 | } 12 | 13 | function get_diff($file, $rev) 14 | { 15 | global $cfg; 16 | 17 | $results = ""; 18 | 19 | if (!file_exists($cfg['tools']['cvs']) || !is_executable($cfg['tools']['cvs'])) 20 | return FALSE; 21 | 22 | if (!file_exists($file) || !is_readable($file)) 23 | return FALSE; 24 | 25 | $cmd = "{$cfg['tools']['cvs']} diff {$cfg['diff']['params']} "; 26 | $cmd .= "-r {$rev['old']} -r {$rev['new']} {$file}"; 27 | 28 | if (!($cvscmd = popen($cmd, "r"))) 29 | return FALSE; 30 | 31 | $format = strtolower($cfg['diff']['output_format']); 32 | 33 | while (!feof($cvscmd)) { 34 | $line = fgets($cvscmd, 256); 35 | $line = str_replace($cfg['paths']['base'], "", $line); 36 | 37 | if ($format != "fulldiff") { 38 | $pfx = substr($line, 0, 1); 39 | 40 | if (($pfx != "+") && ($pfx != "-")) 41 | continue; 42 | } 43 | 44 | if ($format == "english") { 45 | if (substr($line, 0, 3) == "+++") { 46 | $line = str_replace("+++", "New Revision", $line); 47 | } else if (substr($line, 0, 3) == "---") { 48 | $line = str_replace("---", "Old Revision", $line); 49 | } else { 50 | $line = str_replace("+", "Add ", $line); 51 | $line = str_replace("-", "Remove ", $line); 52 | } 53 | } 54 | 55 | $results .= $line; 56 | } 57 | 58 | fclose($cvscmd); 59 | 60 | return $results; 61 | } 62 | 63 | function get_complete($file) 64 | { 65 | $results = ""; 66 | 67 | if (!($routes = @fopen($file, "r"))) 68 | return FALSE; 69 | 70 | while (!feof($routes)) { 71 | $results .= fgets($routes, 256); 72 | } 73 | 74 | fclose($routes); 75 | 76 | return $results; 77 | } 78 | 79 | function update($file) 80 | { 81 | global $cfg; 82 | 83 | if (!file_exists($cfg['tools']['cvs']) || !is_executable($cfg['tools']['cvs'])) 84 | return FALSE; 85 | 86 | chdir($cfg['paths']['db']); 87 | 88 | /* CVS add */ 89 | if (!($results = popen("{$cfg['tools']['cvs']} add ${file} 2>&1", "r"))) 90 | return FALSE; 91 | 92 | while (!feof($results)) { 93 | $line = rtrim(fgets($results, 256)); 94 | 95 | if (strstr($line, "already exists")) { 96 | $tmp = explode(" ", $line); 97 | $rev['old'] = $tmp[8]; 98 | $rev['new'] = $tmp[8]; 99 | } 100 | } 101 | 102 | pclose($results); 103 | 104 | 105 | 106 | /* CVS commit */ 107 | if (!($results = popen("{$cfg['tools']['cvs']} commit -m update {$file}", "r"))) 108 | return FALSE; 109 | 110 | while (!feof($results)) { 111 | $line = rtrim(fgets($results, 256)); 112 | 113 | if (strstr($line, "initial revision")) { 114 | $tmp = explode(":", $line); 115 | $rev['old'] = "0.00"; 116 | $rev['new'] = trim($tmp[1]); 117 | 118 | return $rev; 119 | } 120 | 121 | if (strstr($line, "new revision")) { 122 | $tmp = explode(":", $line); 123 | $rev['old'] = trim($tmp[2]); 124 | $tmp = explode(";", $tmp[1]); 125 | $rev['new'] = trim($tmp[0]); 126 | 127 | return $rev; 128 | } 129 | } 130 | 131 | pclose($results); 132 | 133 | return $rev; 134 | } 135 | } 136 | 137 | ?> 138 | -------------------------------------------------------------------------------- /bin/irrpt_nag: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env php 2 | init($cfg['paths']['cvsroot']); 16 | 17 | function usage($progname) 18 | { 19 | printf("Usage: %s [-hp] [-c config] [-m message] \n\n", $progname); 20 | printf("Options:\n"); 21 | printf(" -p Preview mode (for diagnostic use). Print results to screen instead of\n"); 22 | printf(" e-mail.\n"); 23 | exit(1); 24 | } 25 | 26 | /* Parse through the cmdline options. */ 27 | for ($offset = 1; $offset < $_SERVER['argc']; $offset++) { 28 | if (substr($_SERVER['argv'][$offset], 0, 1) != "-") 29 | break; 30 | 31 | switch($_SERVER['argv'][$offset]) { 32 | case "-h": 33 | case "--help": 34 | usage($_SERVER['argv'][0]); 35 | 36 | case "-p": 37 | case "--preview": 38 | $o_preview = 1; 39 | break; 40 | 41 | case "-c": 42 | case "--config": 43 | $o_cfgfile = $_SERVER['argv'][++$offset]; 44 | break; 45 | 46 | case "-m": 47 | case "--msgfile": 48 | $o_msgfile = $_SERVER['argv'][++$offset]; 49 | break; 50 | } 51 | } 52 | 53 | /* Check for minimum number of args after cmdline */ 54 | if (($_SERVER['argc'] - $offset) < 2) 55 | usage($_SERVER['argv'][0]); 56 | 57 | 58 | $rev['old'] = $_SERVER['argv'][$offset+0]; 59 | $rev['new'] = $_SERVER['argv'][$offset+1]; 60 | 61 | 62 | /* Import the selected configuration file */ 63 | if (file_exists($o_cfgfile) === FALSE || is_readable($o_cfgfile) === FALSE) { 64 | status(STATUS_ERROR, "Can not open selected configuration file, aborting."); 65 | exit(1); 66 | } 67 | 68 | require($o_cfgfile); 69 | 70 | /* Open message file, read in data */ 71 | if (($msgfile = @fopen($o_msgfile, "r")) === FALSE) { 72 | status(STATUS_ERROR, "Unable to open nag message file {$o_msgfile}, aborting.\n"); 73 | exit(1); 74 | } 75 | 76 | while (!feof($msgfile)) { 77 | $msg .= fgets($msgfile, 256); 78 | } 79 | 80 | fclose($msgfile); 81 | 82 | $asnfile = $cfg['paths']['db'] . $local['asnrecord']; 83 | 84 | $headers = "From: {$local['from']}\n"; 85 | $headers .= "Reply-To: {$local['reply-to']}\n"; 86 | $headers .= "Date: " . date("r") . "\n"; 87 | 88 | for($i=0;$i < sizeof($provider); $i++) 89 | { 90 | $content = $msg; 91 | 92 | $content .= "\n"; 93 | $content .= "Requesting Company.......................... {$local['company']}\n"; 94 | $content .= "Requesting Autonomous System Number (ASN)... {$local['asn']}\n"; 95 | $content .= "Customer Identifying Information............ {$provider[$i]['custid']}\n"; 96 | $content .= "Routine / Successful Completion Notices..... {$local['email_routine']}\n"; 97 | $content .= "Failures, Problems, Questions, Etc.......... {$local['email_failure']}\n"; 98 | 99 | if (isset($provider[$i]['notes'])) 100 | $content .= "Other Notes: {$provider[$i]['notes']}\n"; 101 | 102 | $content .= "\n"; 103 | $content .= "Changes to the prefix list:\n\n"; 104 | $content .= $cvs->get_diff($asnfile, $rev); 105 | $content .= "\n\n"; 106 | $content .= "Complete prefix list:\n"; 107 | $content .= $cvs->get_complete($asnfile); 108 | 109 | if ($o_preview) { 110 | printf("IRRPT Preview Mode:\n"); 111 | printf(" E-mail Recepient: %s\n", $provider[$i]['email']); 112 | printf(" E-mail Headers:\n%s\n", $headers); 113 | printf(" E-mail Body:\n%s\n", $content); 114 | printf(" E-mail not sent.\n"); 115 | } else { 116 | mail($provider[$i]['email'], $local['subject'], $content, $headers); 117 | 118 | if (isset($local['localcopy'])) 119 | mail($local['localcopy'], $local['subject'], $content, $headers); 120 | } 121 | } 122 | 123 | ?> 124 | -------------------------------------------------------------------------------- /bin/irrpt_list_ases: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env php 2 | 0) 25 | { 26 | 27 | // the v4 switch is enabled, only pring ASes in the set with registered v4 prefixes 28 | if( $o_4 == 1 && $o_6 == 0 ) 29 | { 30 | $resolve_v4_result = resolve_v4($irr, $object); 31 | list($routes4, $asnlist4) = $resolve_v4_result; 32 | 33 | if (empty($routes4) == FALSE && sizeof($routes4) >= 1 ) 34 | { 35 | printf("%s%s\n", str_repeat(" ", $depth), strtoupper($object)); 36 | } 37 | } 38 | 39 | // the v6 switch is enabled, only pring ASes in the set with registered v6 prefixes 40 | elseif( $o_6 == 1 && $o_4 == 0 ) 41 | { 42 | $resolve_v6_result = resolve_v6($irr, $object); 43 | list($routes6, $asnlist6) = $resolve_v6_result; 44 | 45 | if (empty($routes6) == FALSE && sizeof($routes6) >= 1 ) 46 | { 47 | printf("%s%s\n", str_repeat(" ", $depth), strtoupper($object)); 48 | } 49 | } 50 | 51 | // if no switch is enabled, print the entire set 52 | // unless it's the initial set, or we would print it double 53 | else { 54 | printf("%s%s\n", str_repeat(" ", $depth), strtoupper($object)); 55 | } 56 | } 57 | 58 | // expand object 59 | //print "OBJECT: $object\n"; 60 | if (preg_match("/AS-./", $object)) { 61 | printf("%s%s", str_repeat(" ", $depth), strtoupper($object)); 62 | 63 | if (!isset($done[strval($object)])) { 64 | $done[strval($object)] = true; 65 | 66 | if (!($members = $irr->get_members_by_set($object, FALSE))) { 67 | printf(" (error)\n"); 68 | return FALSE; 69 | } 70 | 71 | printf("\n%s%s\n", str_repeat(" ", $depth), "{"); 72 | 73 | for($i=0;$i\n", $_SERVER['argv'][0]); 99 | exit(1); 100 | 101 | case "-4": 102 | case "--4": 103 | $o_4 = 1; 104 | break; 105 | 106 | case "-6": 107 | case "--6": 108 | $o_6 = 1; 109 | break; 110 | } 111 | } 112 | 113 | if (($_SERVER['argc'] - $offset) < 1) { 114 | printf("Usage: %s [-h46]