trusts: Throttle trusted clients if they disconnect too soon.

[irc/quakenet/newserv.git] / trusts / trusts.h

diff --git a/trusts/trusts.h b/trusts/trusts.h
index 9fd4cd81e8848f065e8df9a0039546271c7a7876..88190a82b4b3ac85ec9b115b294af1aec2aedd49 100644 (file)
--- a/trusts/trusts.h
+++ b/trusts/trusts.h
@@ -13,8 +13,46 @@
 #define COMMENTLEN 300
 #define TRUSTNAMELEN 100
 #define TRUSTHOSTLEN 100
+#define CREATEDBYLEN NICKLEN + 1
+#define TRUSTLOGLEN 200
+
 #define MAXTGEXTS 5
 
+#define MAXTRUSTEDFOR 5000
+#define MAXDURATION 365 * 86400 * 20
+#define MAXPERIDENT 1000
+#define MAXPERNODE 1000
+
+#define TABLES_REGULAR 0
+#define TABLES_MIGRATION 1
+#define TABLES_REPLICATION 2
+
+#define CLEANUP_TH_INACTIVE 60
+
+#define POLICY_GLINE_DURATION 1800
+
+#define POLICY_SUCCESS 0
+#define POLICY_FAILURE_NODECOUNT 1
+#define POLICY_FAILURE_GROUPCOUNT 2
+#define POLICY_FAILURE_IDENTD 3
+#define POLICY_FAILURE_IDENTCOUNT 4
+
+#define DEFAULT_TRUSTPORT 5776
+
+#define TRUST_ENFORCE_IDENT 1 /* This must be 1 for compatibility with O. */
+#define TRUST_NO_CLEANUP 2
+#define TRUST_PROTECTED 4
+#define TRUST_RELIABLE_USERNAME 8
+#define TRUST_UNTHROTTLE 16
+
+#define TRUST_MIN_UNPRIVILEGED_BITS_IPV4 (96 + 20)
+#define TRUST_MIN_UNPRIVILEGED_BITS_IPV6 32
+
+#define TRUST_MIN_UNPRIVILEGED_NODEBITS_IPV4 (96 + 24)
+#define TRUST_MIN_UNPRIVILEGED_NODEBITS_IPV6 48
+
+#define TRUST_MIN_TIME_RETHROTTLE 120
+
 struct trustmigration;
 
 struct trusthost;
@@ -22,8 +60,10 @@ struct trusthost;
 typedef struct trusthost {
   unsigned int id;
 
-  uint32_t ip, mask;
+  struct irc_in_addr ip;
+  unsigned char bits;
   unsigned int maxusage;
+  time_t created;
   time_t lastseen;
 
   nick *users;
@@ -31,6 +71,13 @@ typedef struct trusthost {
 
   unsigned int count;
 
+  int maxpernode;
+  int nodebits;
+
+  struct trusthost *parent, *children;
+  unsigned int marker;
+
+  struct trusthost *nextbychild;
   struct trusthost *next;
 } trusthost;
 
@@ -39,17 +86,19 @@ typedef struct trustgroup {
 
   sstring *name;
   unsigned int trustedfor;
-  int mode;
+  int flags;
   unsigned int maxperident;
   unsigned int maxusage;
   time_t expires;
   time_t lastseen;
-  time_t lastmaxuserreset;
+  time_t lastmaxusereset;
   sstring *createdby, *contact, *comment;
 
   trusthost *hosts;
   unsigned int count;
 
+  unsigned int marker;
+
   struct trustgroup *next;
 
   void *exts[MAXTGEXTS];
@@ -65,36 +114,62 @@ extern int trusts_thext, trusts_nextuserext;
 int findtgext(const char *);
 int registertgext(const char *);
 void releasetgext(int);
-
-/* db.c */
-extern int trustsdbloaded;
-int trusts_loaddb(void);
-void trusts_closedb(int);
-trustgroup *tg_new(char *name, unsigned int trustedfor, int mode, unsigned int maxperident, time_t expires, char *createdby, char *contact, char *comment);
-trusthost *th_new(trustgroup *tg, char *host);
+int trusts_fullyonline(void);
 
 /* formats.c */
 char *trusts_timetostr(time_t);
-int trusts_parsecidr(const char *, uint32_t *, short *);
-int trusts_str2cidr(const char *, uint32_t *, uint32_t *);
-char *trusts_cidr2str(uint32_t, uint32_t);
+char *dumpth(trusthost *, int);
+char *dumptg(trustgroup *, int);
+int parseth(char *, trusthost *, unsigned int *, int);
+int parsetg(char *, trustgroup *, int);
+char *rtrim(char *);
 
 /* data.c */
 extern trustgroup *tglist;
 trustgroup *tg_getbyid(unsigned int);
 void th_free(trusthost *);
-trusthost *th_add(trustgroup *, unsigned int, char *, unsigned int, time_t);
-void tg_free(trustgroup *);
-trustgroup *tg_add(unsigned int, char *, unsigned int, int, unsigned int, unsigned int, time_t, time_t, time_t, char *, char *, char *);
-trusthost *th_getbyhost(uint32_t);
-trusthost *th_getsupersetbyhost(uint32_t, uint32_t);
-trustgroup *tg_strtotg(char *name);
+trusthost *th_add(trusthost *);
+void tg_free(trustgroup *, int);
+trustgroup *tg_add(trustgroup *);
+trusthost *th_getbyhost(struct irc_in_addr *);
+trusthost *th_getbyhostandmask(struct irc_in_addr *, uint32_t);
+trusthost *th_getsmallestsupersetbyhost(struct irc_in_addr *, uint32_t);
+trustgroup *tg_strtotg(char *);
+void th_adjusthosts(trusthost *th, trusthost *, trusthost *);
+void th_getsuperandsubsets(struct irc_in_addr *, uint32_t, trusthost **, trusthost **);
+trusthost *th_getsubsetbyhost(struct irc_in_addr *ip, uint32_t mask);
+trusthost *th_getnextsubsetbyhost(trusthost *th, struct irc_in_addr *ip, uint32_t mask);
+void th_linktree(void);
+unsigned int nexttgmarker(void);
+unsigned int nextthmarker(void);
+trusthost *th_getbyid(unsigned int);
+int tg_modify(trustgroup *, trustgroup *);
+int th_modify(trusthost *, trusthost *);
 
 /* migration.c */
-typedef void (*TrustMigrationGroup)(void *, unsigned int, char *, unsigned int, unsigned int, unsigned int, unsigned int, time_t, time_t, time_t, char *, char *, char *);
-typedef void (*TrustMigrationHost)(void *, unsigned int, char *, unsigned int, time_t);
+typedef void (*TrustMigrationGroup)(void *, trustgroup *);
+typedef void (*TrustMigrationHost)(void *, trusthost *, unsigned int);
 typedef void (*TrustMigrationFini)(void *, int);
 
+/* trusts_db.c */
+extern int trustsdbloaded;
+int trusts_loaddb(void);
+void trusts_closedb(int);
+trustgroup *tg_new(trustgroup *);
+trusthost *th_new(trustgroup *, char *);
+void trustsdb_insertth(char *, trusthost *, unsigned int);
+void trustsdb_inserttg(char *, trustgroup *);
+trustgroup *tg_copy(trustgroup *);
+trusthost *th_copy(trusthost *);
+void tg_update(trustgroup *);
+void tg_delete(trustgroup *);
+void th_update(trusthost *);
+void th_delete(trusthost *);
+void trustlog(trustgroup *tg, const char *user, const char *format, ...);
+void trustlogspewid(nick *np, unsigned int groupid, unsigned int limit);
+void trustlogspewname(nick *np, const char *groupname, unsigned int limit);
+void trustloggrep(nick *np, const char *pattern, unsigned int limit);
+
 typedef struct trustmigration {
   int count, cur;
   void *schedule;
@@ -108,4 +183,12 @@ typedef struct trustmigration {
 /* db-migration.c */
 typedef void (*TrustDBMigrationCallback)(int, void *);
 
+/* events.c */
+void trusts_newnick(nick *, int);
+void trusts_lostnick(nick *, int);
+
+/* trusts_api.c */
+int istrusted(nick *);
+unsigned char getnodebits(struct irc_in_addr *ip);
+
 #endif