[solanum.git] / src / blacklist.c

/*
 * charybdis: A slightly useful ircd.
 * blacklist.c: Manages DNS blacklist entries and lookups
 *
 * Copyright (C) 2006-2011 charybdis development team
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are
 * met:
 *
 * 1. Redistributions of source code must retain the above copyright notice,
 *    this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * 3. The name of the author may not be used to endorse or promote products
 *    derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
 * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 *
 */

#include "stdinc.h"
#include "client.h"
#include "res.h"
#include "numeric.h"
#include "reject.h"
#include "s_conf.h"
#include "s_user.h"
#include "blacklist.h"
#include "send.h"

rb_dlink_list blacklist_list = { NULL, NULL, 0 };

/* private interfaces */
static struct Blacklist *find_blacklist(char *name)
{
	rb_dlink_node *nptr;

	RB_DLINK_FOREACH(nptr, blacklist_list.head)
	{
		struct Blacklist *blptr = (struct Blacklist *) nptr->data;

		if (!irccmp(blptr->host, name))
			return blptr;
	}

	return NULL;
}

static inline int blacklist_check_reply(struct BlacklistClient *blcptr, struct rb_sockaddr_storage *addr)
{
	struct Blacklist *blptr = blcptr->blacklist;
	char ipaddr[HOSTIPLEN];
	char *lastoctet;
	rb_dlink_node *ptr;

	/* XXX the below two checks might want to change at some point
	 * e.g. if IPv6 blacklists don't use 127.x.y.z or A records anymore
	 * --Elizabeth
	 */
	if (addr->ss_family != AF_INET ||
			memcmp(&((struct sockaddr_in *)addr)->sin_addr, "\177", 1))
		goto blwarn;

	/* No filters and entry found - thus positive match */
	if (!rb_dlink_list_length(&blptr->filters))
		return 1;

	rb_inet_ntop_sock((struct sockaddr *)addr, ipaddr, sizeof(ipaddr));

	/* Below will prolly have to change too if the above changes */
	if ((lastoctet = strrchr(ipaddr, '.')) == NULL || *(++lastoctet) == '\0')
		goto blwarn;

	RB_DLINK_FOREACH(ptr, blcptr->blacklist->filters.head)
	{
		struct BlacklistFilter *filter = ptr->data;
		char *cmpstr;

		if (filter->type == BLACKLIST_FILTER_ALL)
			cmpstr = ipaddr;
		else if (filter->type == BLACKLIST_FILTER_LAST)
			cmpstr = lastoctet;
		else
		{
			sendto_realops_snomask(SNO_GENERAL, L_ALL,
					"blacklist_check_reply(): Unknown filtertype (BUG!)");
			continue;
		}

		if (strcmp(cmpstr, filter->filterstr) == 0)
			/* Match! */
			return 1;
	}

	return 0;
blwarn:
	if (blcptr->blacklist->lastwarning + 3600 < rb_current_time())
	{
		sendto_realops_snomask(SNO_GENERAL, L_ALL,
				"Garbage reply from blacklist %s",
				blcptr->blacklist->host);
		blcptr->blacklist->lastwarning = rb_current_time();
	}
	return 0;
}

static void blacklist_dns_callback(void *vptr, struct DNSReply *reply)
{
	struct BlacklistClient *blcptr = (struct BlacklistClient *) vptr;
	int listed = 0;

	if (blcptr == NULL || blcptr->client_p == NULL)
		return;

	if (blcptr->client_p->preClient == NULL)
	{
		sendto_realops_snomask(SNO_GENERAL, L_ALL,
				"blacklist_dns_callback(): blcptr->client_p->preClient (%s) is NULL", get_client_name(blcptr->client_p, HIDE_IP));
		rb_free(blcptr);
		return;
	}

	if (reply != NULL)
	{
		if (blacklist_check_reply(blcptr, &reply->addr))
			listed = TRUE;
	}

	/* they have a blacklist entry for this client */
	if (listed && blcptr->client_p->preClient->dnsbl_listed == NULL)
	{
		blcptr->client_p->preClient->dnsbl_listed = blcptr->blacklist;
		/* reference to blacklist moves from blcptr to client_p->preClient... */
	}
	else
		unref_blacklist(blcptr->blacklist);

	rb_dlinkDelete(&blcptr->node, &blcptr->client_p->preClient->dnsbl_queries);

	/* yes, it can probably happen... */
	if (rb_dlink_list_length(&blcptr->client_p->preClient->dnsbl_queries) == 0 && blcptr->client_p->flags & FLAGS_SENTUSER && !EmptyString(blcptr->client_p->name))
	{
		char buf[USERLEN + 1];
		rb_strlcpy(buf, blcptr->client_p->username, sizeof buf);
		register_local_user(blcptr->client_p, blcptr->client_p, buf);
	}

	rb_free(blcptr);
}

static void initiate_blacklist_dnsquery(struct Blacklist *blptr, struct Client *client_p)
{
	struct BlacklistClient *blcptr = rb_malloc(sizeof(struct BlacklistClient));
	char buf[IRCD_RES_HOSTLEN + 1];
	uint8_t *ip;

	blcptr->blacklist = blptr;
	blcptr->client_p = client_p;

	blcptr->dns_query.ptr = blcptr;
	blcptr->dns_query.callback = blacklist_dns_callback;

	if ((client_p->localClient->ip.ss_family == AF_INET) && blptr->ipv4)
	{
		ip = (uint8_t *)&((struct sockaddr_in *)&client_p->localClient->ip)->sin_addr.s_addr;

		/* becomes 2.0.0.127.torbl.ahbl.org or whatever */
		rb_snprintf(buf, sizeof buf, "%d.%d.%d.%d.%s",
			    (unsigned int) ip[3],
			    (unsigned int) ip[2],
			    (unsigned int) ip[1],
			    (unsigned int) ip[0],
			    blptr->host);
	}
	/* IPv6 is supported now. --Elizabeth */
	else if ((client_p->localClient->ip.ss_family == AF_INET6) && blptr->ipv6)
	{
		/* Breaks it into ip[0] = 0x00, ip[1] = 0x00... ip[16] = 0x01 for localhost
		 * I wish there was a uint4_t for C, this would make the below cleaner, but... */
		ip = (uint8_t *)&((struct sockaddr_in6 *)&client_p->localClient->ip)->sin6_addr.s6_addr;
		char *bufptr = buf;
		int i;

		/* The below will give us something like
		 * 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.foobl.invalid
		 */

		/* Going backwards */
		for (i = 15; i >= 0; i--)
		{
			/* Get upper and lower nibbles (yes this works fine on
			 * both big and little endian) */
			uint8_t hi = (ip[i] >> 4) & 0x0F;
			uint8_t lo = ip[i] & 0x0F;

			/* One part... (why 5? rb_snprintf adds \0) */
			rb_snprintf(bufptr, 5, "%1x.%1x.",
				    (unsigned int) lo, /* Remember, backwards */
				    (unsigned int) hi);

			/* Lurch forward to next position */
			bufptr += 4;
		}

		/* Tack host on */
		strcpy(bufptr, blptr->host);
	}
	/* This shouldn't happen... */
	else
		return;

	gethost_byname_type(buf, &blcptr->dns_query, T_A);

	rb_dlinkAdd(blcptr, &blcptr->node, &client_p->preClient->dnsbl_queries);
	blptr->refcount++;
}

/* public interfaces */
struct Blacklist *new_blacklist(char *name, char *reject_reason, int ipv4, int ipv6, rb_dlink_list *filters)
{
	struct Blacklist *blptr;

	if (name == NULL || reject_reason == NULL)
		return NULL;

	blptr = find_blacklist(name);
	if (blptr == NULL)
	{
		blptr = rb_malloc(sizeof(struct Blacklist));
		rb_dlinkAddAlloc(blptr, &blacklist_list);
	}
	else
		blptr->status &= ~CONF_ILLEGAL;

	rb_strlcpy(blptr->host, name, IRCD_RES_HOSTLEN + 1);
	rb_strlcpy(blptr->reject_reason, reject_reason, IRCD_BUFSIZE);
	blptr->ipv4 = ipv4;
	blptr->ipv6 = ipv6;

	rb_dlinkMoveList(filters, &blptr->filters);

	blptr->lastwarning = 0;

	return blptr;
}

void unref_blacklist(struct Blacklist *blptr)
{
	rb_dlink_node *ptr, *next_ptr;

	blptr->refcount--;
	if (blptr->status & CONF_ILLEGAL && blptr->refcount <= 0)
	{
		RB_DLINK_FOREACH_SAFE(ptr, next_ptr, blptr->filters.head)
		{
			rb_free(ptr);
			rb_dlinkDelete(ptr, &blptr->filters);
		}

		rb_dlinkFindDestroy(blptr, &blacklist_list);
		rb_free(blptr);
	}
}

void lookup_blacklists(struct Client *client_p)
{
	rb_dlink_node *nptr;

	RB_DLINK_FOREACH(nptr, blacklist_list.head)
	{
		struct Blacklist *blptr = (struct Blacklist *) nptr->data;

		if (!(blptr->status & CONF_ILLEGAL))
			initiate_blacklist_dnsquery(blptr, client_p);
	}
}

void abort_blacklist_queries(struct Client *client_p)
{
	rb_dlink_node *ptr, *next_ptr;
	struct BlacklistClient *blcptr;

	if (client_p->preClient == NULL)
		return;
	RB_DLINK_FOREACH_SAFE(ptr, next_ptr, client_p->preClient->dnsbl_queries.head)
	{
		blcptr = ptr->data;
		rb_dlinkDelete(&blcptr->node, &client_p->preClient->dnsbl_queries);
		unref_blacklist(blcptr->blacklist);
		delete_resolver_queries(&blcptr->dns_query);
		rb_free(blcptr);
	}
}

void destroy_blacklists(void)
{
	rb_dlink_node *ptr, *next_ptr;
	struct Blacklist *blptr;

	RB_DLINK_FOREACH_SAFE(ptr, next_ptr, blacklist_list.head)
	{
		blptr = ptr->data;
		blptr->hits = 0; /* keep it simple and consistent */
		if (blptr->refcount > 0)
			blptr->status |= CONF_ILLEGAL;
		else
		{
			rb_free(ptr->data);
			rb_dlinkDestroy(ptr, &blacklist_list);
		}
	}
}
Commit	Line	Data
212380e3 AC	1	/*
	2	* charybdis: A slightly useful ircd.
	3	* blacklist.c: Manages DNS blacklist entries and lookups
	4	*
0a1e77c2	5	* Copyright (C) 2006-2011 charybdis development team
212380e3 AC	6	*
	7	* Redistribution and use in source and binary forms, with or without
	8	* modification, are permitted provided that the following conditions are
	9	* met:
	10	*
	11	* 1. Redistributions of source code must retain the above copyright notice,
	12	* this list of conditions and the following disclaimer.
	13	*
	14	* 2. Redistributions in binary form must reproduce the above copyright
	15	* notice, this list of conditions and the following disclaimer in the
	16	* documentation and/or other materials provided with the distribution.
	17	*
	18	* 3. The name of the author may not be used to endorse or promote products
	19	* derived from this software without specific prior written permission.
	20	*
	21	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
	22	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
	23	* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
	24	* DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
	25	* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
	26	* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
	27	* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	28	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	29	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
	30	* IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
	31	* POSSIBILITY OF SUCH DAMAGE.
	32	*
212380e3 AC	33	*/
	34
	35	#include "stdinc.h"
	36	#include "client.h"
	37	#include "res.h"
212380e3 AC	38	#include "numeric.h"
	39	#include "reject.h"
	40	#include "s_conf.h"
	41	#include "s_user.h"
	42	#include "blacklist.h"
77d3d2db	43	#include "send.h"
212380e3	44
b2f0da88	45	rb_dlink_list blacklist_list = { NULL, NULL, 0 };
212380e3 AC	46
	47	/* private interfaces */
	48	static struct Blacklist find_blacklist(char name)
	49	{
b2f0da88	50	rb_dlink_node *nptr;
212380e3	51
b2f0da88	52	RB_DLINK_FOREACH(nptr, blacklist_list.head)
212380e3 AC	53	{
	54	struct Blacklist blptr = (struct Blacklist ) nptr->data;
	55
	56	if (!irccmp(blptr->host, name))
	57	return blptr;
	58	}
	59
	60	return NULL;
	61	}
	62
3c93d380 EM	63	static inline int blacklist_check_reply(struct BlacklistClient blcptr, struct rb_sockaddr_storage addr)
	64	{
	65	struct Blacklist *blptr = blcptr->blacklist;
	66	char ipaddr[HOSTIPLEN];
	67	char *lastoctet;
	68	rb_dlink_node *ptr;
	69
	70	/* XXX the below two checks might want to change at some point
	71	* e.g. if IPv6 blacklists don't use 127.x.y.z or A records anymore
	72	* --Elizabeth
	73	*/
	74	if (addr->ss_family != AF_INET \|\|
	75	memcmp(&((struct sockaddr_in *)addr)->sin_addr, "\177", 1))
	76	goto blwarn;
	77
	78	/* No filters and entry found - thus positive match */
	79	if (!rb_dlink_list_length(&blptr->filters))
	80	return 1;
	81
	82	rb_inet_ntop_sock((struct sockaddr *)addr, ipaddr, sizeof(ipaddr));
	83
	84	/* Below will prolly have to change too if the above changes */
	85	if ((lastoctet = strrchr(ipaddr, '.')) == NULL \|\| *(++lastoctet) == '\0')
	86	goto blwarn;
	87
	88	RB_DLINK_FOREACH(ptr, blcptr->blacklist->filters.head)
	89	{
	90	struct BlacklistFilter *filter = ptr->data;
	91	char *cmpstr;
	92
	93	if (filter->type == BLACKLIST_FILTER_ALL)
	94	cmpstr = ipaddr;
	95	else if (filter->type == BLACKLIST_FILTER_LAST)
	96	cmpstr = lastoctet;
	97	else
	98	{
	99	sendto_realops_snomask(SNO_GENERAL, L_ALL,
	100	"blacklist_check_reply(): Unknown filtertype (BUG!)");
	101	continue;
	102	}
	103
	104	if (strcmp(cmpstr, filter->filterstr) == 0)
	105	/* Match! */
	106	return 1;
	107	}
	108
	109	return 0;
	110	blwarn:
	111	if (blcptr->blacklist->lastwarning + 3600 < rb_current_time())
	112	{
	113	sendto_realops_snomask(SNO_GENERAL, L_ALL,
	114	"Garbage reply from blacklist %s",
	115	blcptr->blacklist->host);
	116	blcptr->blacklist->lastwarning = rb_current_time();
	117	}
	118	return 0;
	119	}
	120
212380e3 AC	121	static void blacklist_dns_callback(void vptr, struct DNSReply reply)
	122	{
	123	struct BlacklistClient blcptr = (struct BlacklistClient ) vptr;
137d856d	124	int listed = 0;
212380e3 AC	125
	126	if (blcptr == NULL \|\| blcptr->client_p == NULL)
	127	return;
	128
	129	if (blcptr->client_p->preClient == NULL)
	130	{
	131	sendto_realops_snomask(SNO_GENERAL, L_ALL,
	132	"blacklist_dns_callback(): blcptr->client_p->preClient (%s) is NULL", get_client_name(blcptr->client_p, HIDE_IP));
637c4932	133	rb_free(blcptr);
212380e3 AC	134	return;
	135	}
	136
137d856d JT	137	if (reply != NULL)
137d856d JT	138	{
3c93d380	139	if (blacklist_check_reply(blcptr, &reply->addr))
96274734	140	listed = TRUE;
137d856d JT	141	}
137d856d JT	142
212380e3	143	/* they have a blacklist entry for this client */
137d856d	144	if (listed && blcptr->client_p->preClient->dnsbl_listed == NULL)
212380e3 AC	145	{
	146	blcptr->client_p->preClient->dnsbl_listed = blcptr->blacklist;
	147	/* reference to blacklist moves from blcptr to client_p->preClient... */
	148	}
	149	else
	150	unref_blacklist(blcptr->blacklist);
	151
b2f0da88	152	rb_dlinkDelete(&blcptr->node, &blcptr->client_p->preClient->dnsbl_queries);
212380e3 AC	153
212380e3 AC	154	/* yes, it can probably happen... */
b2f0da88	155	if (rb_dlink_list_length(&blcptr->client_p->preClient->dnsbl_queries) == 0 && blcptr->client_p->flags & FLAGS_SENTUSER && !EmptyString(blcptr->client_p->name))
212380e3 AC	156	{
212380e3 AC	157	char buf[USERLEN + 1];
f427c8b0	158	rb_strlcpy(buf, blcptr->client_p->username, sizeof buf);
212380e3 AC	159	register_local_user(blcptr->client_p, blcptr->client_p, buf);
	160	}
	161
637c4932	162	rb_free(blcptr);
212380e3 AC	163	}
212380e3 AC	164
212380e3 AC	165	static void initiate_blacklist_dnsquery(struct Blacklist blptr, struct Client client_p)
212380e3 AC	166	{
eddc2ab6	167	struct BlacklistClient *blcptr = rb_malloc(sizeof(struct BlacklistClient));
db3efb7a	168	char buf[IRCD_RES_HOSTLEN + 1];
5d21ef50	169	uint8_t *ip;
212380e3 AC	170
	171	blcptr->blacklist = blptr;
	172	blcptr->client_p = client_p;
	173
	174	blcptr->dns_query.ptr = blcptr;
	175	blcptr->dns_query.callback = blacklist_dns_callback;
	176
0a1e77c2 EM	177	if ((client_p->localClient->ip.ss_family == AF_INET) && blptr->ipv4)
	178	{
	179	ip = (uint8_t )&((struct sockaddr_in )&client_p->localClient->ip)->sin_addr.s_addr;
	180
	181	/* becomes 2.0.0.127.torbl.ahbl.org or whatever */
	182	rb_snprintf(buf, sizeof buf, "%d.%d.%d.%d.%s",
	183	(unsigned int) ip[3],
	184	(unsigned int) ip[2],
	185	(unsigned int) ip[1],
	186	(unsigned int) ip[0],
	187	blptr->host);
	188	}
	189	/* IPv6 is supported now. --Elizabeth */
	190	else if ((client_p->localClient->ip.ss_family == AF_INET6) && blptr->ipv6)
	191	{
	192	/* Breaks it into ip[0] = 0x00, ip[1] = 0x00... ip[16] = 0x01 for localhost
	193	* I wish there was a uint4_t for C, this would make the below cleaner, but... */
	194	ip = (uint8_t )&((struct sockaddr_in6 )&client_p->localClient->ip)->sin6_addr.s6_addr;
	195	char *bufptr = buf;
	196	int i;
	197
	198	/* The below will give us something like
	199	* 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.foobl.invalid
	200	*/
	201
	202	/* Going backwards */
	203	for (i = 15; i >= 0; i--)
	204	{
	205	/* Get upper and lower nibbles (yes this works fine on
	206	* both big and little endian) */
	207	uint8_t hi = (ip[i] >> 4) & 0x0F;
	208	uint8_t lo = ip[i] & 0x0F;
	209
	210	/* One part... (why 5? rb_snprintf adds \0) */
	211	rb_snprintf(bufptr, 5, "%1x.%1x.",
	212	(unsigned int) lo, /* Remember, backwards */
	213	(unsigned int) hi);
	214
	215	/* Lurch forward to next position */
	216	bufptr += 4;
	217	}
212380e3	218
0a1e77c2 EM	219	/* Tack host on */
	220	strcpy(bufptr, blptr->host);
	221	}
	222	/* This shouldn't happen... */
	223	else
	224	return;
212380e3 AC	225
	226	gethost_byname_type(buf, &blcptr->dns_query, T_A);
	227
b2f0da88	228	rb_dlinkAdd(blcptr, &blcptr->node, &client_p->preClient->dnsbl_queries);
212380e3 AC	229	blptr->refcount++;
	230	}
	231
	232	/* public interfaces */
3c93d380	233	struct Blacklist new_blacklist(char name, char reject_reason, int ipv4, int ipv6, rb_dlink_list filters)
212380e3 AC	234	{
	235	struct Blacklist *blptr;
	236
	237	if (name == NULL \|\| reject_reason == NULL)
	238	return NULL;
	239
	240	blptr = find_blacklist(name);
	241	if (blptr == NULL)
	242	{
eddc2ab6	243	blptr = rb_malloc(sizeof(struct Blacklist));
b2f0da88	244	rb_dlinkAddAlloc(blptr, &blacklist_list);
212380e3 AC	245	}
	246	else
	247	blptr->status &= ~CONF_ILLEGAL;
3c93d380	248
db3efb7a	249	rb_strlcpy(blptr->host, name, IRCD_RES_HOSTLEN + 1);
f427c8b0	250	rb_strlcpy(blptr->reject_reason, reject_reason, IRCD_BUFSIZE);
0a1e77c2 EM	251	blptr->ipv4 = ipv4;
0a1e77c2 EM	252	blptr->ipv6 = ipv6;
3c93d380 EM	253
	254	rb_dlinkMoveList(filters, &blptr->filters);
	255
96274734	256	blptr->lastwarning = 0;
212380e3 AC	257
	258	return blptr;
	259	}
	260
	261	void unref_blacklist(struct Blacklist *blptr)
	262	{
3c93d380 EM	263	rb_dlink_node ptr, next_ptr;
3c93d380 EM	264
212380e3 AC	265	blptr->refcount--;
	266	if (blptr->status & CONF_ILLEGAL && blptr->refcount <= 0)
	267	{
3c93d380 EM	268	RB_DLINK_FOREACH_SAFE(ptr, next_ptr, blptr->filters.head)
	269	{
	270	rb_free(ptr);
	271	rb_dlinkDelete(ptr, &blptr->filters);
	272	}
	273
b2f0da88	274	rb_dlinkFindDestroy(blptr, &blacklist_list);
637c4932	275	rb_free(blptr);
212380e3 AC	276	}
	277	}
	278
	279	void lookup_blacklists(struct Client *client_p)
	280	{
b2f0da88	281	rb_dlink_node *nptr;
212380e3	282
b2f0da88	283	RB_DLINK_FOREACH(nptr, blacklist_list.head)
212380e3 AC	284	{
	285	struct Blacklist blptr = (struct Blacklist ) nptr->data;
	286
	287	if (!(blptr->status & CONF_ILLEGAL))
	288	initiate_blacklist_dnsquery(blptr, client_p);
	289	}
	290	}
	291
	292	void abort_blacklist_queries(struct Client *client_p)
	293	{
637c4932	294	rb_dlink_node ptr, next_ptr;
212380e3 AC	295	struct BlacklistClient *blcptr;
	296
	297	if (client_p->preClient == NULL)
	298	return;
637c4932	299	RB_DLINK_FOREACH_SAFE(ptr, next_ptr, client_p->preClient->dnsbl_queries.head)
212380e3 AC	300	{
212380e3 AC	301	blcptr = ptr->data;
b2f0da88	302	rb_dlinkDelete(&blcptr->node, &client_p->preClient->dnsbl_queries);
212380e3 AC	303	unref_blacklist(blcptr->blacklist);
212380e3 AC	304	delete_resolver_queries(&blcptr->dns_query);
637c4932	305	rb_free(blcptr);
212380e3 AC	306	}
	307	}
	308
	309	void destroy_blacklists(void)
	310	{
637c4932	311	rb_dlink_node ptr, next_ptr;
212380e3 AC	312	struct Blacklist *blptr;
212380e3 AC	313
637c4932	314	RB_DLINK_FOREACH_SAFE(ptr, next_ptr, blacklist_list.head)
212380e3 AC	315	{
	316	blptr = ptr->data;
	317	blptr->hits = 0; /* keep it simple and consistent */
	318	if (blptr->refcount > 0)
	319	blptr->status \|= CONF_ILLEGAL;
	320	else
	321	{
637c4932	322	rb_free(ptr->data);
b2f0da88	323	rb_dlinkDestroy(ptr, &blacklist_list);
212380e3 AC	324	}
	325	}
	326	}