]> jfr.im git - solanum.git/blame - ircd/reject.c
remove RB_IPV6
[solanum.git] / ircd / reject.c
CommitLineData
54ac8b60
VY
1/*
2 * ircd-ratbox: A slightly useful ircd
3 * reject.c: reject users with prejudice
4 *
5 * Copyright (C) 2003 Aaron Sethman <androsyn@ratbox.org>
6 * Copyright (C) 2003-2005 ircd-ratbox development team
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
43946961 20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301
54ac8b60 21 * USA
54ac8b60
VY
22 */
23
24#include "stdinc.h"
54ac8b60
VY
25#include "client.h"
26#include "s_conf.h"
27#include "reject.h"
28#include "s_stats.h"
43946961
JT
29#include "ircd.h"
30#include "send.h"
31#include "numeric.h"
32#include "parse.h"
33#include "hostmask.h"
34#include "match.h"
54ac8b60
VY
35#include "hash.h"
36
0240b419 37static rb_patricia_tree_t *reject_tree;
43946961 38static rb_dlink_list delay_exit;
54ac8b60 39static rb_dlink_list reject_list;
43946961
JT
40static rb_dlink_list throttle_list;
41static rb_patricia_tree_t *throttle_tree;
42static void throttle_expires(void *unused);
54ac8b60 43
54ac8b60 44
43946961 45typedef struct _reject_data
54ac8b60
VY
46{
47 rb_dlink_node rnode;
48 time_t time;
49 unsigned int count;
50 uint32_t mask_hashv;
43946961
JT
51} reject_t;
52
53typedef struct _delay_data
54{
55 rb_dlink_node node;
56 rb_fde_t *F;
57} delay_t;
58
59typedef struct _throttle
60{
61 rb_dlink_node node;
62 time_t last;
63 int count;
64} throttle_t;
65
66unsigned long
67delay_exit_length(void)
68{
69 return rb_dlink_list_length(&delay_exit);
70}
54ac8b60 71
54ac8b60
VY
72static void
73reject_exit(void *unused)
74{
54ac8b60 75 rb_dlink_node *ptr, *ptr_next;
43946961
JT
76 delay_t *ddata;
77 static const char *errbuf = "ERROR :Closing Link: (*** Banned (cache))\r\n";
55abcbb2 78
54ac8b60
VY
79 RB_DLINK_FOREACH_SAFE(ptr, ptr_next, delay_exit.head)
80 {
43946961
JT
81 ddata = ptr->data;
82
55abcbb2 83 rb_write(ddata->F, errbuf, strlen(errbuf));
43946961
JT
84 rb_close(ddata->F);
85 rb_free(ddata);
54ac8b60
VY
86 }
87
43946961
JT
88 delay_exit.head = delay_exit.tail = NULL;
89 delay_exit.length = 0;
54ac8b60
VY
90}
91
92static void
93reject_expires(void *unused)
94{
95 rb_dlink_node *ptr, *next;
0240b419 96 rb_patricia_node_t *pnode;
43946961 97 reject_t *rdata;
55abcbb2 98
54ac8b60
VY
99 RB_DLINK_FOREACH_SAFE(ptr, next, reject_list.head)
100 {
101 pnode = ptr->data;
55abcbb2 102 rdata = pnode->data;
54ac8b60
VY
103
104 if(rdata->time + ConfigFileEntry.reject_duration > rb_current_time())
105 continue;
106
107 rb_dlinkDelete(ptr, &reject_list);
108 rb_free(rdata);
0240b419 109 rb_patricia_remove(reject_tree, pnode);
54ac8b60
VY
110 }
111}
112
113void
114init_reject(void)
115{
0240b419 116 reject_tree = rb_new_patricia(PATRICIA_BITS);
43946961 117 throttle_tree = rb_new_patricia(PATRICIA_BITS);
54ac8b60
VY
118 rb_event_add("reject_exit", reject_exit, NULL, DELAYED_EXIT_TIME);
119 rb_event_add("reject_expires", reject_expires, NULL, 60);
43946961 120 rb_event_add("throttle_expires", throttle_expires, NULL, 10);
54ac8b60
VY
121}
122
ae09cb7d
JT
123unsigned long
124throttle_size(void)
125{
16ef24cf
JT
126 unsigned long count;
127 rb_dlink_node *ptr;
128 rb_patricia_node_t *pnode;
129 throttle_t *t;
130
131 count = 0;
132 RB_DLINK_FOREACH(ptr, throttle_list.head)
133 {
134 pnode = ptr->data;
135 t = pnode->data;
136 if (t->count > ConfigFileEntry.throttle_count)
137 count++;
138 }
139
140 return count;
ae09cb7d 141}
54ac8b60
VY
142
143void
144add_reject(struct Client *client_p, const char *mask1, const char *mask2)
145{
0240b419 146 rb_patricia_node_t *pnode;
43946961 147 reject_t *rdata;
54ac8b60
VY
148 uint32_t hashv;
149
150 /* Reject is disabled */
43946961 151 if(ConfigFileEntry.reject_after_count == 0 || ConfigFileEntry.reject_duration == 0)
54ac8b60
VY
152 return;
153
154 hashv = 0;
155 if (mask1 != NULL)
43946961 156 hashv ^= fnv_hash_upper((const unsigned char *)mask1, 32);
54ac8b60 157 if (mask2 != NULL)
43946961 158 hashv ^= fnv_hash_upper((const unsigned char *)mask2, 32);
54ac8b60 159
0240b419 160 if((pnode = rb_match_ip(reject_tree, (struct sockaddr *)&client_p->localClient->ip)) != NULL)
54ac8b60
VY
161 {
162 rdata = pnode->data;
163 rdata->time = rb_current_time();
164 rdata->count++;
165 }
166 else
167 {
168 int bitlen = 32;
43946961 169 if(GET_SS_FAMILY(&client_p->localClient->ip) == AF_INET6)
54ac8b60 170 bitlen = 128;
54ac8b60 171 pnode = make_and_lookup_ip(reject_tree, (struct sockaddr *)&client_p->localClient->ip, bitlen);
43946961 172 pnode->data = rdata = rb_malloc(sizeof(reject_t));
54ac8b60
VY
173 rb_dlinkAddTail(pnode, &rdata->rnode, &reject_list);
174 rdata->time = rb_current_time();
175 rdata->count = 1;
176 }
177 rdata->mask_hashv = hashv;
178}
179
180int
43946961 181check_reject(rb_fde_t *F, struct sockaddr *addr)
54ac8b60 182{
0240b419 183 rb_patricia_node_t *pnode;
43946961
JT
184 reject_t *rdata;
185 delay_t *ddata;
54ac8b60 186 /* Reject is disabled */
43946961 187 if(ConfigFileEntry.reject_after_count == 0 || ConfigFileEntry.reject_duration == 0)
54ac8b60 188 return 0;
55abcbb2 189
43946961 190 pnode = rb_match_ip(reject_tree, addr);
54ac8b60
VY
191 if(pnode != NULL)
192 {
193 rdata = pnode->data;
194
195 rdata->time = rb_current_time();
43946961 196 if(rdata->count > (unsigned long)ConfigFileEntry.reject_after_count)
54ac8b60 197 {
43946961 198 ddata = rb_malloc(sizeof(delay_t));
47adde3d 199 ServerStats.is_rej++;
43946961
JT
200 rb_setselect(F, RB_SELECT_WRITE | RB_SELECT_READ, NULL, NULL);
201 ddata->F = F;
202 rb_dlinkAdd(ddata, &ddata->node, &delay_exit);
54ac8b60
VY
203 return 1;
204 }
55abcbb2
KB
205 }
206 /* Caller does what it wants */
54ac8b60
VY
207 return 0;
208}
209
83235e9e
JT
210int
211is_reject_ip(struct sockaddr *addr)
212{
213 rb_patricia_node_t *pnode;
214 reject_t *rdata;
215 int duration;
216
217 /* Reject is disabled */
218 if(ConfigFileEntry.reject_after_count == 0 || ConfigFileEntry.reject_duration == 0)
219 return 0;
55abcbb2 220
83235e9e
JT
221 pnode = rb_match_ip(reject_tree, addr);
222 if(pnode != NULL)
223 {
224 rdata = pnode->data;
225
226 if(rdata->count > (unsigned long)ConfigFileEntry.reject_after_count)
227 {
228 duration = rdata->time + ConfigFileEntry.reject_duration - rb_current_time();
229 return duration > 0 ? duration : 1;
230 }
55abcbb2 231 }
83235e9e
JT
232 return 0;
233}
234
55abcbb2 235void
54ac8b60
VY
236flush_reject(void)
237{
238 rb_dlink_node *ptr, *next;
0240b419 239 rb_patricia_node_t *pnode;
43946961 240 reject_t *rdata;
55abcbb2 241
54ac8b60
VY
242 RB_DLINK_FOREACH_SAFE(ptr, next, reject_list.head)
243 {
244 pnode = ptr->data;
245 rdata = pnode->data;
246 rb_dlinkDelete(ptr, &reject_list);
247 rb_free(rdata);
0240b419 248 rb_patricia_remove(reject_tree, pnode);
54ac8b60
VY
249 }
250}
251
55abcbb2 252int
54ac8b60
VY
253remove_reject_ip(const char *ip)
254{
0240b419 255 rb_patricia_node_t *pnode;
55abcbb2 256
54ac8b60 257 /* Reject is disabled */
43946961 258 if(ConfigFileEntry.reject_after_count == 0 || ConfigFileEntry.reject_duration == 0)
54ac8b60
VY
259 return -1;
260
0240b419 261 if((pnode = rb_match_string(reject_tree, ip)) != NULL)
54ac8b60 262 {
43946961 263 reject_t *rdata = pnode->data;
54ac8b60
VY
264 rb_dlinkDelete(&rdata->rnode, &reject_list);
265 rb_free(rdata);
0240b419 266 rb_patricia_remove(reject_tree, pnode);
54ac8b60
VY
267 return 1;
268 }
269 return 0;
270}
271
272int
273remove_reject_mask(const char *mask1, const char *mask2)
274{
275 rb_dlink_node *ptr, *next;
0240b419 276 rb_patricia_node_t *pnode;
43946961 277 reject_t *rdata;
54ac8b60
VY
278 uint32_t hashv;
279 int n = 0;
55abcbb2 280
54ac8b60
VY
281 hashv = 0;
282 if (mask1 != NULL)
43946961 283 hashv ^= fnv_hash_upper((const unsigned char *)mask1, 32);
54ac8b60 284 if (mask2 != NULL)
43946961 285 hashv ^= fnv_hash_upper((const unsigned char *)mask2, 32);
54ac8b60
VY
286 RB_DLINK_FOREACH_SAFE(ptr, next, reject_list.head)
287 {
288 pnode = ptr->data;
289 rdata = pnode->data;
290 if (rdata->mask_hashv == hashv)
291 {
292 rb_dlinkDelete(ptr, &reject_list);
293 rb_free(rdata);
0240b419 294 rb_patricia_remove(reject_tree, pnode);
54ac8b60
VY
295 n++;
296 }
297 }
298 return n;
299}
300
54ac8b60 301int
43946961 302throttle_add(struct sockaddr *addr)
54ac8b60 303{
43946961 304 throttle_t *t;
0240b419 305 rb_patricia_node_t *pnode;
54ac8b60 306
43946961 307 if((pnode = rb_match_ip(throttle_tree, addr)) != NULL)
54ac8b60 308 {
43946961
JT
309 t = pnode->data;
310
311 if(t->count > ConfigFileEntry.throttle_count)
ae09cb7d
JT
312 {
313 ServerStats.is_thr++;
314 return 1;
315 }
43946961
JT
316 /* Stop penalizing them after they've been throttled */
317 t->last = rb_current_time();
318 t->count++;
319
320 } else {
54ac8b60 321 int bitlen = 32;
43946961 322 if(GET_SS_FAMILY(addr) == AF_INET6)
54ac8b60 323 bitlen = 128;
55abcbb2 324 t = rb_malloc(sizeof(throttle_t));
43946961
JT
325 t->last = rb_current_time();
326 t->count = 1;
327 pnode = make_and_lookup_ip(throttle_tree, addr, bitlen);
328 pnode->data = t;
55abcbb2
KB
329 rb_dlinkAdd(pnode, &t->node, &throttle_list);
330 }
54ac8b60
VY
331 return 0;
332}
333
83235e9e
JT
334int
335is_throttle_ip(struct sockaddr *addr)
336{
337 throttle_t *t;
338 rb_patricia_node_t *pnode;
339 int duration;
340
341 if((pnode = rb_match_ip(throttle_tree, addr)) != NULL)
342 {
343 t = pnode->data;
344 if(t->count > ConfigFileEntry.throttle_count)
345 {
346 duration = t->last + ConfigFileEntry.throttle_duration - rb_current_time();
347 return duration > 0 ? duration : 1;
348 }
349 }
350 return 0;
351}
352
55abcbb2 353void
995f300e
JT
354flush_throttle(void)
355{
356 rb_dlink_node *ptr, *next;
357 rb_patricia_node_t *pnode;
358 throttle_t *t;
55abcbb2 359
995f300e
JT
360 RB_DLINK_FOREACH_SAFE(ptr, next, throttle_list.head)
361 {
362 pnode = ptr->data;
55abcbb2 363 t = pnode->data;
995f300e
JT
364
365 rb_dlinkDelete(ptr, &throttle_list);
366 rb_free(t);
367 rb_patricia_remove(throttle_tree, pnode);
368 }
369}
370
43946961
JT
371static void
372throttle_expires(void *unused)
54ac8b60 373{
43946961 374 rb_dlink_node *ptr, *next;
0240b419 375 rb_patricia_node_t *pnode;
43946961 376 throttle_t *t;
55abcbb2 377
43946961 378 RB_DLINK_FOREACH_SAFE(ptr, next, throttle_list.head)
54ac8b60 379 {
43946961 380 pnode = ptr->data;
55abcbb2 381 t = pnode->data;
43946961
JT
382
383 if(t->last + ConfigFileEntry.throttle_duration > rb_current_time())
384 continue;
385
386 rb_dlinkDelete(ptr, &throttle_list);
387 rb_free(t);
388 rb_patricia_remove(throttle_tree, pnode);
54ac8b60 389 }
54ac8b60 390}
43946961 391