/*
* TeleStax, Open Source Cloud Communications
* Copyright 2011-2016, Telestax Inc and individual contributors
* by the @authors tag.
*
* This is free software; you can redistribute it and/or modify it
* under the terms of the GNU Lesser General Public License as
* published by the Free Software Foundation; either version 2.1 of
* the License, or (at your option) any later version.
*
* This software is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this software; if not, write to the Free
* Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
* 02110-1301 USA, or see the FSF site: http://www.fsf.org.
*/
package org.restcomm.media.network.deprecated.channel;
import java.net.InetSocketAddress;
import org.apache.log4j.Logger;
import org.restcomm.media.network.deprecated.IPAddressCompare;
/**
* {@link NetworkGuard} implementation that accepts traffic coming from within the local network only.
*
* @author Henrique Rosa (henrique.rosa@telestax.com)
*
*/
public class RestrictedNetworkGuard implements NetworkGuard {
private static final Logger log = Logger.getLogger(RestrictedNetworkGuard.class);
private final String network;
private final String subnet;
public RestrictedNetworkGuard(String network, String subnet) {
this.network = network;
this.subnet = subnet;
}
@Override
public boolean isSecure(NetworkChannel channel, InetSocketAddress source) {
byte[] networkBytes = IPAddressCompare.addressToByteArrayV4(this.network);
byte[] subnetBytes = IPAddressCompare.addressToByteArrayV4(this.subnet);
boolean secure = IPAddressCompare.isInRangeV4(networkBytes, subnetBytes, source.getAddress().getAddress());
if (log.isTraceEnabled()) {
log.trace("Is packet secure? " + secure + " [network=" + this.network + ", subnet=" + this.subnet + ", remote address=" + source.getAddress().getHostAddress() + "]");
}
return secure;
}
}