package org.freertr.sec;

import java.util.ArrayList;
import java.util.List;
import org.freertr.addr.addrIP;
import org.freertr.addr.addrPrefix;
import org.freertr.cfg.cfgAceslst;
import org.freertr.cfg.cfgAll;
import org.freertr.cfg.cfgPrfxlst;
import org.freertr.cfg.cfgRoump;
import org.freertr.cfg.cfgRouplc;
import org.freertr.cfg.cfgRtr;
import org.freertr.cfg.cfgTime;
import org.freertr.cfg.cfgTrack;
import org.freertr.cfg.cfgVrf;
import org.freertr.clnt.clntPmtud;
import org.freertr.enc.enc7bit;
import org.freertr.ip.ipFwd;
import org.freertr.ip.ipRtr;
import org.freertr.pipe.pipeLine;
import org.freertr.pipe.pipeSide;
import org.freertr.rtr.rtrRpki;
import org.freertr.tab.tabGen;
import org.freertr.tab.tabRateLimit;
import org.freertr.tab.tabRpkiRoa;
import org.freertr.tab.tabRpkiUtil;
import org.freertr.tab.tabRoute;
import org.freertr.tab.tabRouteAttr;
import org.freertr.tab.tabRouteEntry;
import org.freertr.tab.tabRpkiAspa;
import org.freertr.user.userFormat;
import org.freertr.user.userHelp;
import org.freertr.util.bits;
import org.freertr.util.cmds;
import org.freertr.util.debugger;
import org.freertr.util.logger;

/**
 * generic information utils
 *
 * @author matecsaba
 */
public class secInfoUtl {

    private secInfoUtl() {
    }

    /**
     * find one route
     *
     * @param adr address to look up
     * @param rtr router to use
     * @param fwd forwarder to use
     * @return route entry, null if nothing
     */
    public final static tabRouteEntry<addrIP> findOneRoute(addrIP adr, ipRtr rtr, ipFwd fwd) {
        if (adr == null) {
            return null;
        }
        if (fwd == null) {
            return null;
        }
        if (rtr == null) {
            return null;
        }
        tabRouteEntry<addrIP> ntry;
        ntry = rtr.routerComputedU.route(adr);
        if (ntry == null) {
            return null;
        }
        ntry = ntry.copyBytes(tabRoute.addType.alters);
        return ntry;
    }

    /**
     * find one route
     *
     * @param pfx prefix to look up
     * @param rtr router to use
     * @param fwd forwarder to use
     * @return route entry, null if nothing
     */
    public final static tabGen<tabRpkiRoa> findOneValidRoa(tabRouteEntry<addrIP> pfx, ipRtr rtr, ipFwd fwd) {
        if (pfx == null) {
            return null;
        }
        if (fwd == null) {
            return null;
        }
        if (rtr == null) {
            return null;
        }
        rtrRpki rpki = (rtrRpki) rtr;
        return rpki.getFinalTabRoa(fwd.ipVersion);
    }

    /**
     * find one route
     *
     * @param rtr router to use
     * @param fwd forwarder to use
     * @return route entry, null if nothing
     */
    public final static tabGen<tabRpkiAspa> findOneValidAspa(ipRtr rtr, ipFwd fwd) {
        if (fwd == null) {
            return null;
        }
        if (rtr == null) {
            return null;
        }
        rtrRpki rpki = (rtrRpki) rtr;
        return rpki.getFinalTabAspa();
    }

    /**
     * do config knob
     *
     * @param cfg config to use
     * @param cmd command to interpret
     * @param negated command was negated
     * @return null if cleared, config on success
     */
    public final static secInfoCfg doCfgStr(secInfoCfg cfg, cmds cmd, boolean negated) {
        if (cfg == null) {
            cfg = new secInfoCfg();
        }
        String s = cmd.word();
        if (s.equals("script")) {
            if (negated) {
                cfg.script = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.script = cfgAll.scrptFind(cmd.word(), false);
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("time")) {
            if (negated) {
                cfg.timeMap = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfgTime ntry = cfgAll.timeFind(cmd.word(), false);
            if (ntry == null) {
                cmd.error("no such time map");
                return cfg;
            }
            cfg.timeMap = ntry;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("tracker")) {
            if (negated) {
                cfg.tracker = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfgTrack ntry = cfgAll.trackFind(cmd.word(), false);
            if (ntry == null) {
                cmd.error("no such tracker");
                return cfg;
            }
            cfg.tracker = ntry.worker;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("startup")) {
            if (negated) {
                cfg.startupDelay = 0;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.startupDelay = bits.str2num(cmd.word());
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("rate")) {
            if (negated) {
                cfg.accessRate = null;
                doSanityChecks(cfg);
                return cfg;
            }
            int i = bits.str2num(cmd.word());
            cfg.accessRate = new tabRateLimit(i, bits.str2num(cmd.word()));
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("class")) {
            if (negated) {
                cfg.accessList = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfgAceslst ntry = cfgAll.aclsFind(cmd.word(), false);
            if (ntry == null) {
                cmd.error("no such access list");
                return cfg;
            }
            cfg.accessList = ntry.aceslst;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("prefix")) {
            if (negated) {
                cfg.prefixList = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfgPrfxlst ntry = cfgAll.prfxFind(cmd.word(), false);
            if (ntry == null) {
                cmd.error("no such prefix list");
                return cfg;
            }
            cfg.prefixList = ntry.prflst;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("map")) {
            if (negated) {
                cfg.routeMap = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfgRoump ntry = cfgAll.rtmpFind(cmd.word(), false);
            if (ntry == null) {
                cmd.error("no such route map");
                return cfg;
            }
            cfg.routeMap = ntry.roumap;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("policy")) {
            if (negated) {
                cfg.routePolicy = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfgRouplc ntry = cfgAll.rtplFind(cmd.word(), false);
            if (ntry == null) {
                cmd.error("no such route policy");
                return cfg;
            }
            cfg.routePolicy = ntry.rouplc;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("pmtud")) {
            if (negated) {
                cfg.pmtudMin = 0;
                cfg.pmtudMax = 0;
                cfg.pmtudTim = 0;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.pmtudMin = bits.str2num(cmd.word());
            cfg.pmtudMax = bits.str2num(cmd.word());
            cfg.pmtudTim = bits.str2num(cmd.word());
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("resolve")) {
            cfg.resolve = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("others")) {
            cfg.others = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("details")) {
            cfg.details = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("single")) {
            cfg.single = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("client")) {
            cfg.client = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("separate")) {
            cfg.separate = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("hacked")) {
            cfg.hacked = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("plain")) {
            cfg.plain = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("justip")) {
            cfg.justip = !negated;
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("style")) {
            if (negated) {
                cfg.style = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.style = cmd.getRemaining();
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("format")) {
            if (negated) {
                cfg.format = userFormat.tableMode.normal;
                doSanityChecks(cfg);
                return cfg;
            }
            s = cmd.word();
            cfg.format = userFormat.str2tabmod(s);
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("boxer")) {
            if (negated) {
                cfg.boxed = userFormat.boxerMode.normal;
                return cfg;
            }
            s = cmd.word();
            cfg.boxed = userFormat.str2boxmod(s);
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("router4")) {
            if (negated) {
                cfg.router4typ = null;
                cfg.router4num = 0;
                cfg.fwder4 = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.router4typ = cfgRtr.name2num(cmd.word());
            cfg.router4num = bits.str2num(cmd.word());
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("router6")) {
            if (negated) {
                cfg.router6typ = null;
                cfg.router6num = 0;
                cfg.fwder6 = null;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.router6typ = cfgRtr.name2num(cmd.word());
            cfg.router6num = bits.str2num(cmd.word());
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("valid4")) {
            if (negated) {
                cfg.valid4typ = null;
                cfg.valid4num = 0;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.valid4typ = cfgRtr.name2num(cmd.word());
            cfg.valid4num = bits.str2num(cmd.word());
            if (ipRtr.isRPKI(cfg.valid4typ) < 0) {
                cfg.valid4typ = null;
                cfg.valid4num = 0;
            }
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("valid6")) {
            if (negated) {
                cfg.valid6typ = null;
                cfg.valid6num = 0;
                doSanityChecks(cfg);
                return cfg;
            }
            cfg.valid6typ = cfgRtr.name2num(cmd.word());
            cfg.valid6num = bits.str2num(cmd.word());
            if (ipRtr.isRPKI(cfg.valid6typ) < 0) {
                cfg.valid6typ = null;
                cfg.valid6num = 0;
            }
            doSanityChecks(cfg);
            return cfg;
        }
        if (s.equals("vrf")) {
            if (negated) {
                doSanityChecks(cfg);
                return cfg;
            }
            s = cmd.word();
            cfgVrf ntry = cfgAll.vrfFind(s, false);
            if (ntry == null) {
                cmd.error("no such vrf");
                return cfg;
            }
            cfg.fwder4 = ntry.fwd4;
            cfg.fwder6 = ntry.fwd6;
            doSanityChecks(cfg);
            return cfg;
        }
        cmd.badCmd();
        return cfg;
    }

    /**
     * find one router
     *
     * @param adr address to check
     * @param rtr4t ipv4t candidate
     * @param rtr6t ipv6t candidate
     * @param rtr4n ipv4n candidate
     * @param rtr6n ipv6n candidate
     * @return proper one, null if nothing
     */
    public final static cfgRtr findOneRtr(addrIP adr, tabRouteAttr.routeType rtr4t, tabRouteAttr.routeType rtr6t, int rtr4n, int rtr6n) {
        if (adr == null) {
            return null;
        }
        tabRouteAttr.routeType rt;
        int rn;
        if (adr.isIPv4()) {
            rt = rtr4t;
            rn = rtr4n;
        } else {
            rt = rtr6t;
            rn = rtr6n;
        }
        cfgRtr rtr = cfgAll.rtrFind(rt, rn, false);
        if (rtr == null) {
            return null;
        }
        return rtr;
    }

    /**
     * perform the work
     *
     * @param cfg configuration to use
     * @param vrf vrf to use
     * @param trg target address
     * @param src source address
     * @return work done, null if error happened
     */
    public final static clntPmtud doPmtud(secInfoCfg cfg, ipFwd vrf, addrIP trg, addrIP src) {
        if (cfg == null) {
            return null;
        }
        if (vrf == null) {
            return null;
        }
        if (cfg.pmtudTim < 1) {
            return null;
        }
        if (cfg.pmtudMin >= cfg.pmtudMax) {
            return null;
        }
        logger.info("pmtuding " + vrf + " " + trg + " " + src);
        pipeLine pl = new pipeLine(65536, true);
        pipeSide ps = pl.getSide();
        clntPmtud pm = new clntPmtud(ps, trg, vrf, src);
        pm.min = cfg.pmtudMin;
        pm.max = cfg.pmtudMax;
        pm.delay = 100;
        pm.timeout = cfg.pmtudTim;
        pm.doer();
        if (pm.doer() == null) {
            logger.error("failed pmtud " + vrf + " " + trg + " " + src);
            return null;
        }
        logger.info("pmtuded " + vrf + " " + trg + " " + src + " " + pm);
        return pm;
    }

    /**
     * one liner of the route
     *
     * @param wrk worker to use
     * @return one liner of the route
     */
    public final static List<String> getRoute1liner(secInfoWrk wrk) {
        String s = "";
        if (wrk.client) {
            s += wrk.addr;
        }
        if (wrk.pmtuD != null) {
            s += " pmtu=" + wrk.pmtuD;
        }
        if (wrk.resolved != null) {
            s += " dns=" + wrk.resolved;
        }
        if (wrk.fwd != null) {
            s += " vrf=" + wrk.fwd.vrfName;
        }
        if (wrk.ntry == null) {
            return bits.str2lst(s + " " + noRoute + " of " + wrk.sizeF);
        }
        List<String> res = new ArrayList<String>();
        s += " bgp=" + addrPrefix.ip2str(wrk.ntry.prefix) + " of " + wrk.sizeF;
        res.add(s.trim());
        if (wrk.vldIp != null) {
            s = " roa=" + tabRpkiUtil.validity2string(wrk.rpkiR) + " of " + wrk.sizeR;
            s += " aspa=" + tabRpkiUtil.validity2string(wrk.rpkiA) + " of " + wrk.sizeA;
            res.add(s.trim());
        }
        res.add("pth=" + wrk.ntry.best.asPathStr());
        res.add("nam=" + wrk.ntry.best.asNameStr());
        res.add("inf=" + wrk.ntry.best.asInfoStr());
        if (wrk.separate) {
            return res;
        }
        String a = "";
        for (int i = 0; i < res.size(); i++) {
            a += " " + res.get(i);
        }
        a = a.trim();
        return bits.str2lst(a);
    }

    private final static String noRoute = "route not found";

    /**
     * get route in details
     *
     * @param fwd forwarder to use
     * @param ntry route entry
     * @param tm table mode
     * @param bm box mode
     * @param hck hacker voiced
     * @return text representing the route
     */
    public final static List<String> getRouteDetails(ipFwd fwd, tabRouteEntry<addrIP> ntry, userFormat.tableMode tm, userFormat.boxerMode bm, boolean hck) {
        if (ntry == null) {
            return bits.str2lst(noRoute);
        }
        userFormat res = ntry.fullDump("", fwd);
        List<String> lst = res.formatAll(tm);
        if (!hck) {
            userFormat.applyBoxing(lst, bm, true);
            return lst;
        }
        lst = enc7bit.toHackedLst(lst);
        userFormat.applyBoxing(lst, bm, true);
        return lst;
    }

    /**
     * get route as bytes
     *
     * @param lst list to convert
     * @return converted list
     */
    public final static byte[] getRouteAscii(List<String> lst) {
        if (lst == null) {
            return new byte[0];
        }
        int lss = lst.size();
        List<Integer> res = new ArrayList<Integer>();
        byte[] buf = null;
        for (int o = 0; o < lss; o++) {
            String a = lst.get(o);
            if (a == null) {
                a = "";
            }
            a = enc7bit.decodeExtStr(a);
            buf = a.getBytes();
            for (int i = 0; i < buf.length; i++) {
                int p = (int) buf[i];
                res.add(p);
            }
            res.add(13);
            res.add(10);
        }
        buf = new byte[res.size()];
        for (int i = 0; i < buf.length; i++) {
            int o = res.get(i);
            buf[i] = (byte) o;
        }
        return buf;
    }

    /**
     * get configuration
     *
     * @param lst list to append
     * @param cfg config to use
     * @param beg beginning
     */
    public final static void getConfig(List<String> lst, secInfoCfg cfg, String beg) {
        if (cfg == null) {
            return;
        }
        if (cfg.pmtudTim > 1) {
            lst.add(beg + "pmtud " + cfg.pmtudMin + " " + cfg.pmtudMax + " " + cfg.pmtudTim);
        }
        if (cfg.router4typ != null) {
            lst.add(beg + "router4 " + cfgRtr.num2name(cfg.router4typ) + " " + cfg.router4num);
        }
        if (cfg.router6typ != null) {
            lst.add(beg + "router6 " + cfgRtr.num2name(cfg.router6typ) + " " + cfg.router6num);
        }
        if (cfg.valid4typ != null) {
            lst.add(beg + "valid4 " + cfgRtr.num2name(cfg.valid4typ) + " " + cfg.valid4num);
        }
        if (cfg.valid6typ != null) {
            lst.add(beg + "valid6 " + cfgRtr.num2name(cfg.valid6typ) + " " + cfg.valid6num);
        }
        if (cfg.details) {
            lst.add(beg + "details");
        }
        if (cfg.single) {
            lst.add(beg + "single");
        }
        if (cfg.client) {
            lst.add(beg + "client");
        }
        if (cfg.separate) {
            lst.add(beg + "separate");
        }
        if (cfg.hacked) {
            lst.add(beg + "hacked");
        }
        if (cfg.plain) {
            lst.add(beg + "plain");
        }
        if (cfg.justip) {
            lst.add(beg + "justip");
        }
        if (cfg.tracker != null) {
            lst.add(beg + "tracker " + cfg.tracker.name);
        }
        if (cfg.timeMap != null) {
            lst.add(beg + "time " + cfg.timeMap.name);
        }
        if (cfg.accessRate != null) {
            lst.add(beg + "rate " + cfg.accessRate);
        }
        if (cfg.startupDelay > 0) {
            lst.add(beg + "startup " + cfg.startupDelay);
        }
        if (cfg.accessList != null) {
            lst.add(beg + "class " + cfg.accessList.listName);
        }
        if (cfg.prefixList != null) {
            lst.add(beg + "prefix " + cfg.prefixList.listName);
        }
        if (cfg.routeMap != null) {
            lst.add(beg + "map " + cfg.routeMap.listName);
        }
        if (cfg.routePolicy != null) {
            lst.add(beg + "policy " + cfg.routePolicy.listName);
        }
        if (cfg.style != null) {
            lst.add(beg + "style " + cfg.style);
        }
        if (cfg.format != userFormat.tableMode.normal) {
            lst.add(beg + "format " + userFormat.tabmod2str(cfg.format));
        }
        if (cfg.boxed != userFormat.boxerMode.normal) {
            lst.add(beg + "boxer " + userFormat.boxmod2str(cfg.boxed));
        }
        if (cfg.script != null) {
            lst.add(beg + "script " + cfg.script.name);
        }
        if (cfg.resolve) {
            lst.add(beg + "resolve");
        }
        if (cfg.others) {
            lst.add(beg + "others");
        }
    }

    /**
     * get help messages
     *
     * @param lst help text to update
     * @param tab base level
     * @param beg beginning
     * @param end ending
     */
    public final static void getHelp(userHelp lst, int tab, String beg, String end) {
        if (end != null) {
            lst.add(null, false, tab, new int[]{tab + 1}, beg, end);
            beg = "";
        }
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "router4", "lookup addresses");
        cfgRtr.getRouterList(lst, tab, "");
        lst.add(null, false, tab + 3, new int[]{-1}, "<num:rtr>", "process id");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "router6", "lookup addresses");
        cfgRtr.getRouterList(lst, tab, "");
        lst.add(null, false, tab + 3, new int[]{-1}, "<num:rtr>", "process id");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "valid4", "validate prefixes");
        cfgRtr.getRouterList(lst, tab, "");
        lst.add(null, false, tab + 3, new int[]{-1}, "<num:rtr>", "process id");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "valid6", "validate prefixes");
        cfgRtr.getRouterList(lst, tab, "");
        lst.add(null, false, tab + 3, new int[]{-1}, "<num:rtr>", "process id");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "vrf", "vrf to use");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:vrf>", "name of table");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "script", "script to execute");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:scr>", "script name");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "style", "colorize prefix details");
        lst.add(null, false, tab + 2, new int[]{-1}, "<str>", "string to send");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "boxer", "box prefix details");
        userFormat.listBoxerModes(lst, tab + 2);
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "format", "format prefix details");
        userFormat.listTableModes(lst, tab + 2);
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "time", "check time map");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:tm>", "time map name");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "tracker", "check tracker");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:trk>", "tracker name");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "rate", "access rate");
        lst.add(null, false, tab + 2, new int[]{tab + 3}, "<num>", "new sessions per interval");
        lst.add(null, false, tab + 3, new int[]{-1}, "<num>", "interval");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "startup", "initial downtime");
        lst.add(null, false, tab + 2, new int[]{-1}, "<num>", "time");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "class", "check access list");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:acl>", "access list name");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "prefix", "check prefix list");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:pl>", "prefix list name");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "map", "check route map");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:rm>", "route map name");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "policy", "check route policy");
        lst.add(null, false, tab + 2, new int[]{-1}, "<name:rpl>", "route policy name");
        lst.add(null, false, tab + 1, new int[]{tab + 2}, beg + "pmtud", "test pmtud before accepting");
        lst.add(null, false, tab + 2, new int[]{tab + 3}, "<num>", "min mtu");
        lst.add(null, false, tab + 3, new int[]{tab + 4}, beg + "<num>", "max mtu");
        lst.add(null, false, tab + 4, new int[]{-1}, "<num>", "timeout per round");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "details", "print prefix details");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "single", "print prefix summary");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "client", "print client summary");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "separate", "separate summary sections");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "hacked", "hackerize prefix details");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "plain", "plain prefix details");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "justip", "just address headline");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "resolve", "resolve addresses");
        lst.add(null, false, tab + 1, new int[]{-1}, beg + "others", "allow any addresses");
    }

    /**
     * preform style checks
     *
     * @param a string
     * @return null on error, style if ok
     */
    public final static String doSanityStyle(String a) {
        if (a == null) {
            return null;
        }
        if (a.indexOf("\"") >= 0) {
            return null;
        }
        if (a.indexOf("\\") >= 0) {
            return null;
        }
        if (a.indexOf(">") >= 0) {
            return null;
        }
        return a;
    }

    /**
     * perform sanity checks
     *
     * @param cfg config to repair
     * @return changes made
     */
    public final static int doSanityChecks(secInfoCfg cfg) {
        int chg = 0;
        if (cfg.pmtudMin >= cfg.pmtudMax) {
            cfg.pmtudMin = 0;
            cfg.pmtudMax = 0;
            cfg.pmtudTim = 0;
            chg++;
        }
        if (cfg.router4typ == null) {
            cfg.router4num = 0;
            cfg.fwder4 = null;
            chg++;
        }
        if (cfg.router6typ == null) {
            cfg.router6num = 0;
            cfg.fwder6 = null;
            chg++;
        }
        if (cfg.valid4typ == null) {
            cfg.valid4num = 0;
            chg++;
        }
        if (cfg.valid6typ == null) {
            cfg.valid6num = 0;
            chg++;
        }
        if (cfg.style != null) {
            String a = doSanityStyle(cfg.style);
            if (a.length() < 1) {
                cfg.style = null;
                chg++;
                a = null;
            }
            cfg.style = a;
        }
        return chg;
    }

    /**
     * find one forwarder
     *
     * @param adr address to check
     * @param fwd4 ipv4 candidate
     * @param fwd6 ipv6 candidate
     * @return proper one, null if nothing
     */
    public final static ipFwd findOneFwd(addrIP adr, ipFwd fwd4, ipFwd fwd6) {
        if (adr == null) {
            return null;
        }
        if (adr.isIPv4()) {
            return fwd4;
        } else {
            return fwd6;
        }
    }

    /**
     * do one config command
     *
     * @param cmd command
     * @param wrk worker to use
     * @return true to terminate reading
     */
    protected static boolean doOneHttp(secInfoWrk wrk, cmds cmd) {
        String a = cmd.word();
        if (a.length() < 1) {
            return true;
        }
        if (a.equals("addr")) {
            wrk.setAddr(cmd.word());
            return false;
        }
        if (a.equals("hacked")) {
            wrk.hack = true;
            return false;
        }
        if (a.equals("unhack")) {
            wrk.hack = false;
            return false;
        }
        if (a.equals("plain")) {
            wrk.plain = true;
            return false;
        }
        if (a.equals("unplain")) {
            wrk.plain = false;
            return false;
        }
        if (a.equals("justip")) {
            wrk.justip = true;
            return false;
        }
        if (a.equals("unjustip")) {
            wrk.justip = false;
            return false;
        }
        if (a.equals("detail")) {
            wrk.detail = true;
            return false;
        }
        if (a.equals("undetail")) {
            wrk.detail = false;
            return false;
        }
        if (a.equals("single")) {
            wrk.single = true;
            return false;
        }
        if (a.equals("unsingle")) {
            wrk.single = false;
            return false;
        }
        if (a.equals("client")) {
            wrk.client = true;
            return false;
        }
        if (a.equals("unclient")) {
            wrk.client = false;
            return false;
        }
        if (a.equals("separate")) {
            wrk.separate = true;
            return false;
        }
        if (a.equals("unseparate")) {
            wrk.separate = false;
            return false;
        }
        if (a.equals("style")) {
            wrk.style = secInfoUtl.doSanityStyle(cmd.word());
            return false;
        }
        if (a.equals("unstyle")) {
            wrk.style = null;
            return false;
        }
        if (a.equals("format")) {
            wrk.format = userFormat.str2tabmod(cmd.word());
            return false;
        }
        if (a.equals("boxer")) {
            wrk.boxed = userFormat.str2boxmod(cmd.word());
            return false;
        }
        if (debugger.clntIpInfo) {
            logger.debug("bad api " + a + " queried " + wrk);
        }
        return false;
    }

}
