#!/usr/bin/perl # Import a BIND zone file ## # Copyright 2020 Kris Deugau # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . ## use strict; use warnings; use Data::Dumper; use lib '.'; use DNSDB; my $dnsdb = new DNSDB; my $doimport = 0; #print Dumper(\%reverse_typemap); my $zname = shift @ARGV; my $rev = 'n'; my $zid; my %amap; my %namemap; my %cmap; if ($zname =~ /\.arpa\.?$/ || $zname =~ m,^[\d./]+$,) { $rev = 'y'; $zname = _zone2cidr($zname) if $zname =~ /\.arpa\.?$/; $zid = $dnsdb->revID($zname,':ANY:'); if ($zid) { $zname = new NetAddr::IP $zname; $zname = DNSDB::_ZONE($zname, 'ZONE', 'r', '.').($zname->{isv6} ? '.ip6.arpa' : '.in-addr.arpa'); } } else { $zid = $dnsdb->domainID($zname,':ANY:'); } die "zone $zname not on file\n" if !$zid; # still no sane way to expose a human-friendly view tag on the command line. my $view = shift @ARGV; $view = '' if !$view; ##fixme: retrieve defttl from SOA record my $zonettl = 900; my $defttl = $zonettl; my $recbase = $zname; # to append to unqualified names # need to spin up a full state machine-ish thing, because BIND zone files are all about context # see ch4, p56-72 in the grasshopper book my $prevlabel = ''; my $curlabel = ''; while (<>) { chomp; next if /^\s*$/; next if /^\s*;/; if (my ($macro,$mdetail) = (/^\s*\$(TTL|ORIGIN|INCLUDE|GENERATE)\s+(.+)/) ) { # macro sort of thing; $TTL and $ORIGIN most common. $INCLUDE is a thing, expect it to be rare in live use tho if ($macro eq 'TTL') { if ($mdetail =~ /^\d+$/) { $defttl = $mdetail; } else { warn "invalid \$TTL: $_\n"; } } elsif ($macro eq 'ORIGIN') { ##fixme: going to skip the stupid case of "$ORIGIN com." and the like that lie # between . and the root domain we were told we're importing; anyone using such # a mess outside the root servers is clearly insane # handled cases: # $ORIGIN . # $ORIGIN [zonedomain]. # $ORIGIN [subdomain.zonedomain]. if ($mdetail eq '.' || $mdetail =~ /$zname\.$/ || $zname =~ /$mdetail\.$/) { $recbase = $mdetail; } else { # if we continue, we either use an $ORIGIN that's out of zone, or ignore it and potentially publish incorrect records. die "bad \$ORIGIN: $_\n"; } } # not handling $INCLUDE or $GENERATE (altho the latter seems to be mostly a less-flexible version of the template types) next; } # skip stale records that have no value next if /^ip-192-168-1(12|20)-\d+/; next if /ip.add.re.\d+\s*$/; # records must begin in the first column, no leading whitespace my ($name) = /^([\w\@_.-]+)\s/; # append zone name to record name if missing AND not dot-terminated; # this happens automagically for forward zones, but not reverse because Reasons. (fixme?) # suck up and deal with the error if the dot-termiated name is out of zone; should be # impossible with valid BIND zone file but... $name .= ".$zname" if $name !~ /$zname$/ && $zname !~ /\.$/; $name = $zname if /^\s*IN/; $name = $zname if /^\@/; s/^([\w\@_.-]+)\s+//; # by convention the optional TTL leads the optional class, but they're apparently swappable. my ($ttl) = /^(\d+)?\s/; if (defined $ttl) { # TTL may be zero s/(\d+)?\s+//; } else { # Fall back to zone default TTL $ttl = $zonettl; } my ($class) = /^(IN|CS|CH|HS|\d+)\s/; if (defined $class) { if ($class =~ /\d+/) { } if ($class ne 'IN') { print "Non-Internet class records not supported, you weirdo\n"; next; } s/(IN|CS|CH|HS)\s+//; } else { $class = 'IN'; } my ($type) = /([A-Z-]+)\s/; if (!$reverse_typemap{$type}) { print "Unknown type $type, skipping\n ($_)\n"; next; } my $itype = $reverse_typemap{$type}; s/([A-Z-]+)\s+//; chomp; my $rdata = $_; # SOA is the only type that may span multiple lines. Probably. Note even AXFRed zones write multiline SOA records: #@ IN SOA test.example.invalid. test.example.invalid. (2020082500 7200 900 604800 3600) # IN NS olddns.example.com. # IN MX 1 fred.foo.bar.invalid. #foo IN A 192.168.16.45 # AXFR'ed zone file gets written as #$ORIGIN . #$TTL 3600 ; 1 hour #example.invalid IN SOA test.example.invalid. test.example.invalid. ( # 2020082500 ; serial # 7200 ; refresh (2 hours) # 900 ; retry (15 minutes) # 604800 ; expire (1 week) # 3600 ; minimum (1 hour) # ) # NS olddns.example.com. # MX 1 fred.foo.bar.invalid. #$ORIGIN example.invalid. #foo A 192.168.16.45 if ($type eq 'SOA') { } # Quotes may arguably be syntactically required, but they're not actually part of the record data if ($itype == 16) { $rdata =~ s/^"//; $rdata =~ s/"$//; } # temp hack for hosts file if ($type eq 'A') { # if ($amap{$name}) { # print "urp: dupe name $name $rdata\n"; # } else { push @{$amap{$name}}, $rdata; # } push @{$namemap{$rdata}}, $name; } if ($type eq 'CNAME') { push @{$cmap{$rdata}}, $name; } no warnings qw(uninitialized); #print "parsed: '$name' '$class' '$ttl' '$type'->'$itype' '$rdata'\n"; #print; #;imap IN 900 CNAME deepnet.cx. ##fixme: not sure how to handle the case where someone leaves off the class. if ($doimport) { my ($code, $msg); if ($rev eq 'n') { ($code,$msg) = $dnsdb->addRec('n', $rev, $zid, \$name, \$itype, \$rdata, $ttl); } else { ($code,$msg) = $dnsdb->addRec('n', $rev, $zid, \$rdata, \$itype, \$name, $ttl); } print "$code: $msg\n"; } } #print Dumper \%amap; #print Dumper \%namemap; #print Dumper \%cmap; foreach my $n (keys %amap) { foreach my $ip (@{$amap{$n}}) { #print "$ip $n\n"; push @{$namemap{$ip}}, $n unless grep $n, @{$namemap{$ip}}; } } foreach my $c (keys %cmap) { if ($amap{$c}) { print Dumper(\@{$amap{$c}}); } # print $amap{$c}; } # cname targ -> IP #foreach my $ip (sort keys %namemap) { # print "$ip ".join(' ', @{$namemap{$ip}})."\n"; #}