ircd/hostmask.c

   1 /*
   2  *  charybdis: an advanced internet relay chat daemon (ircd).
   3  *  hostmask.c: Code to efficiently find IP & hostmask based configs.
   4  *
   5  *  Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center
   6  *  Copyright (C) 1996-2002 Hybrid Development Team
   7  *  Copyright (C) 2002-2005 ircd-ratbox development team
   8  *  Copyright (C) 2005-2008 charybdis development team
   9  *
  10  *  This program is free software; you can redistribute it and/or modify
  11  *  it under the terms of the GNU General Public License as published by
  12  *  the Free Software Foundation; either version 2 of the License, or
  13  *  (at your option) any later version.
  14  *
  15  *  This program is distributed in the hope that it will be useful,
  16  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  *  GNU General Public License for more details.
  19  *
  20  *  You should have received a copy of the GNU General Public License
  21  *  along with this program; if not, write to the Free Software
  22  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
  23  *  USA
  24  */
  25
  26 #include "stdinc.h"
  27 #include "ircd_defs.h"
  28 #include "s_conf.h"
  29 #include "hostmask.h"
  30 #include "numeric.h"
  31 #include "send.h"
  32 #include "match.h"
  33
  34 static unsigned long hash_ipv6(struct sockaddr *, int);
  35 static unsigned long hash_ipv4(struct sockaddr *, int);
  36
  37
  38 /* int parse_netmask(const char *, struct rb_sockaddr_storage *, int *);
  39  * Input: A hostmask, or an IPV4/6 address.
  40  * Output: An integer describing whether it is an IPV4, IPV6 address or a
  41  *         hostmask, an address(if it is an IP mask),
  42  *         a bitlength(if it is IP mask).
  43  * Side effects: None
  44  */
  45 int
  46 parse_netmask(const char *text, struct rb_sockaddr_storage *naddr, int *nb)
  47 {
  48         char *ip = LOCAL_COPY(text);
  49         char *ptr;
  50         struct rb_sockaddr_storage *addr, xaddr;
  51         int *b, xb;
  52         if(nb == NULL)
  53                 b = &xb;
  54         else
  55                 b = nb;
  56
  57         if(naddr == NULL)
  58                 addr = &xaddr;
  59         else
  60                 addr = naddr;
  61
  62         if(strpbrk(ip, "*?") != NULL)
  63         {
  64                 return HM_HOST;
  65         }
  66         if(strchr(ip, ':'))
  67         {
  68                 if((ptr = strchr(ip, '/')))
  69                 {
  70                         *ptr = '\0';
  71                         ptr++;
  72                         *b = atoi(ptr);
  73                         if(*b > 128)
  74                                 *b = 128;
  75                         else if(*b < 0)
  76                                 return HM_HOST;
  77                 } else
  78                         *b = 128;
  79                 if(rb_inet_pton_sock(ip, addr) > 0)
  80                         return HM_IPV6;
  81                 else
  82                         return HM_HOST;
  83         } else
  84         if(strchr(text, '.'))
  85         {
  86                 if((ptr = strchr(ip, '/')))
  87                 {
  88                         *ptr = '\0';
  89                         ptr++;
  90                         *b = atoi(ptr);
  91                         if(*b > 32)
  92                                 *b = 32;
  93                         else if(*b < 0)
  94                                 return HM_HOST;
  95                 } else
  96                         *b = 32;
  97                 if(rb_inet_pton_sock(ip, addr) > 0)
  98                         return HM_IPV4;
  99                 else
 100                         return HM_HOST;
 101         }
 102         return HM_HOST;
 103 }
 104
 105 /* Hashtable stuff...now external as its used in m_stats.c */
 106 struct AddressRec *atable[ATABLE_SIZE];
 107
 108 void
 109 init_host_hash(void)
 110 {
 111         memset(&atable, 0, sizeof(atable));
 112 }
 113
 114 /* unsigned long hash_ipv4(struct rb_sockaddr_storage*)
 115  * Input: An IP address.
 116  * Output: A hash value of the IP address.
 117  * Side effects: None
 118  */
 119 static unsigned long
 120 hash_ipv4(struct sockaddr *saddr, int bits)
 121 {
 122         struct sockaddr_in *addr = (struct sockaddr_in *)(void *)saddr;
 123
 124         if(bits != 0)
 125         {
 126                 unsigned long av = ntohl(addr->sin_addr.s_addr) & ~((1 << (32 - bits)) - 1);
 127                 return (av ^ (av >> 12) ^ (av >> 24)) & (ATABLE_SIZE - 1);
 128         }
 129
 130         return 0;
 131 }
 132
 133 /* unsigned long hash_ipv6(struct rb_sockaddr_storage*)
 134  * Input: An IP address.
 135  * Output: A hash value of the IP address.
 136  * Side effects: None
 137  */
 138 static unsigned long
 139 hash_ipv6(struct sockaddr *saddr, int bits)
 140 {
 141         struct sockaddr_in6 *addr = (struct sockaddr_in6 *)(void *)saddr;
 142         unsigned long v = 0, n;
 143         for (n = 0; n < 16; n++)
 144         {
 145                 if(bits >= 8)
 146                 {
 147                         v ^= addr->sin6_addr.s6_addr[n];
 148                         bits -= 8;
 149                 }
 150                 else if(bits)
 151                 {
 152                         v ^= addr->sin6_addr.s6_addr[n] & ~((1 << (8 - bits)) - 1);
 153                         return v & (ATABLE_SIZE - 1);
 154                 }
 155                 else
 156                         return v & (ATABLE_SIZE - 1);
 157         }
 158         return v & (ATABLE_SIZE - 1);
 159 }
 160
 161 /* int hash_text(const char *start)
 162  * Input: The start of the text to hash.
 163  * Output: The hash of the string between 1 and (TH_MAX-1)
 164  * Side-effects: None.
 165  */
 166 static int
 167 hash_text(const char *start)
 168 {
 169         const char *p = start;
 170         unsigned long h = 0;
 171
 172         while(*p)
 173         {
 174                 h = (h << 4) - (h + (unsigned char) irctolower(*p++));
 175         }
 176
 177         return (h & (ATABLE_SIZE - 1));
 178 }
 179
 180 /* unsigned long get_hash_mask(const char *)
 181  * Input: The text to hash.
 182  * Output: The hash of the string right of the first '.' past the last
 183  *         wildcard in the string.
 184  * Side-effects: None.
 185  */
 186 static unsigned long
 187 get_mask_hash(const char *text)
 188 {
 189         const char *hp = "", *p;
 190
 191         for (p = text + strlen(text) - 1; p >= text; p--)
 192                 if(*p == '*' || *p == '?')
 193                         return hash_text(hp);
 194                 else if(*p == '.')
 195                         hp = p + 1;
 196         return hash_text(text);
 197 }
 198
 199 /* struct ConfItem* find_conf_by_address(const char*, struct rb_sockaddr_storage*,
 200  *         int type, int fam, const char *username)
 201  *
 202  * This process needs to be kept in sync with check_one_kline().
 203  *
 204  * Input: The hostname, the address, the type of mask to find, the address
 205  *        family, the username.
 206  * Output: The matching value with the highest precedence.
 207  * Side-effects: None
 208  * Note: Setting bit 0 of the type means that the username is ignored.
 209  */
 210 struct ConfItem *
 211 find_conf_by_address(const char *name, const char *sockhost,
 212                         const char *orighost,
 213                         struct sockaddr *addr, int type, int fam,
 214                         const char *username, const char *auth_user)
 215 {
 216         unsigned long hprecv = 0;
 217         struct ConfItem *hprec = NULL;
 218         struct AddressRec *arec;
 219         struct sockaddr_in ip4;
 220         struct sockaddr *pip4 = NULL;
 221         int b;
 222
 223         if(username == NULL)
 224                 username = "";
 225
 226         if(addr)
 227         {
 228                 if (fam == AF_INET)
 229                         pip4 = addr;
 230
 231                 if (fam == AF_INET6)
 232                 {
 233                         if (type == CONF_KILL && rb_ipv4_from_ipv6((struct sockaddr_in6 *)addr, &ip4))
 234                                 pip4 = (struct sockaddr *)&ip4;
 235
 236                         for (b = 128; b >= 0; b -= 16)
 237                         {
 238                                 for (arec = atable[hash_ipv6(addr, b)]; arec; arec = arec->next)
 239                                         if(arec->type == (type & ~0x1) &&
 240                                            arec->masktype == HM_IPV6 &&
 241                                            comp_with_mask_sock(addr, (struct sockaddr *)&arec->Mask.ipa.addr,
 242                                                 arec->Mask.ipa.bits) &&
 243                                                 (type & 0x1 || match(arec-> username, username)) &&
 244                                                 (type != CONF_CLIENT || !arec->auth_user ||
 245                                                 (auth_user && match(arec->auth_user, auth_user))) &&
 246                                                 arec->precedence > hprecv)
 247                                         {
 248                                                 hprecv = arec->precedence;
 249                                                 hprec = arec->aconf;
 250                                         }
 251                         }
 252                 }
 253
 254                 if (pip4 != NULL)
 255                 {
 256                         for (b = 32; b >= 0; b -= 8)
 257                         {
 258                                 for (arec = atable[hash_ipv4(pip4, b)]; arec; arec = arec->next)
 259                                         if(arec->type == (type & ~0x1) &&
 260                                            arec->masktype == HM_IPV4 &&
 261                                            comp_with_mask_sock(pip4, (struct sockaddr *)&arec->Mask.ipa.addr,
 262                                                                arec->Mask.ipa.bits) &&
 263                                                 (type & 0x1 || match(arec->username, username)) &&
 264                                                 (type != CONF_CLIENT || !arec->auth_user ||
 265                                                 (auth_user && match(arec->auth_user, auth_user))) &&
 266                                                 arec->precedence > hprecv)
 267                                         {
 268                                                 hprecv = arec->precedence;
 269                                                 hprec = arec->aconf;
 270                                         }
 271                         }
 272                 }
 273         }
 274
 275         if(orighost != NULL)
 276         {
 277                 const char *p;
 278
 279                 for (p = orighost; p != NULL;)
 280                 {
 281                         for (arec = atable[hash_text(p)]; arec; arec = arec->next)
 282
 283                                 if((arec->type == (type & ~0x1)) &&
 284                                    (arec->masktype == HM_HOST) &&
 285                                    arec->precedence > hprecv &&
 286                                    match(arec->Mask.hostname, orighost) &&
 287                                    (type != CONF_CLIENT || !arec->auth_user ||
 288                                    (auth_user && match(arec->auth_user, auth_user))) &&
 289                                    (type & 0x1 || match(arec->username, username)))
 290                                 {
 291                                         hprecv = arec->precedence;
 292                                         hprec = arec->aconf;
 293                                 }
 294                         p = strchr(p, '.');
 295                         if(p != NULL)
 296                                 p++;
 297                         else
 298                                 break;
 299                 }
 300                 for (arec = atable[0]; arec; arec = arec->next)
 301                 {
 302                         if(arec->type == (type & ~0x1) &&
 303                            arec->masktype == HM_HOST &&
 304                            arec->precedence > hprecv &&
 305                            (match(arec->Mask.hostname, orighost) ||
 306                             (sockhost && match(arec->Mask.hostname, sockhost))) &&
 307                             (type != CONF_CLIENT || !arec->auth_user ||
 308                             (auth_user && match(arec->auth_user, auth_user))) &&
 309                            (type & 0x1 || match(arec->username, username)))
 310                         {
 311                                 hprecv = arec->precedence;
 312                                 hprec = arec->aconf;
 313                         }
 314                 }
 315         }
 316
 317         if(name != NULL)
 318         {
 319                 const char *p;
 320                 /* And yes - we have to check p after strchr and p after increment for
 321                  * NULL -kre */
 322                 for (p = name; p != NULL;)
 323                 {
 324                         for (arec = atable[hash_text(p)]; arec; arec = arec->next)
 325                                 if((arec->type == (type & ~0x1)) &&
 326                                    (arec->masktype == HM_HOST) &&
 327                                    arec->precedence > hprecv &&
 328                                    match(arec->Mask.hostname, name) &&
 329                                    (type != CONF_CLIENT || !arec->auth_user ||
 330                                    (auth_user && match(arec->auth_user, auth_user))) &&
 331                                    (type & 0x1 || match(arec->username, username)))
 332                                 {
 333                                         hprecv = arec->precedence;
 334                                         hprec = arec->aconf;
 335                                 }
 336                         p = strchr(p, '.');
 337                         if(p != NULL)
 338                                 p++;
 339                         else
 340                                 break;
 341                 }
 342                 for (arec = atable[0]; arec; arec = arec->next)
 343                 {
 344                         if(arec->type == (type & ~0x1) &&
 345                            arec->masktype == HM_HOST &&
 346                            arec->precedence > hprecv &&
 347                            (match(arec->Mask.hostname, name) ||
 348                             (sockhost && match(arec->Mask.hostname, sockhost))) &&
 349                             (type != CONF_CLIENT || !arec->auth_user ||
 350                             (auth_user && match(arec->auth_user, auth_user))) &&
 351                            (type & 0x1 || match(arec->username, username)))
 352                         {
 353                                 hprecv = arec->precedence;
 354                                 hprec = arec->aconf;
 355                         }
 356                 }
 357         }
 358         return hprec;
 359 }
 360
 361 /* struct ConfItem* find_address_conf(const char*, const char*,
 362  *                                     struct rb_sockaddr_storage*, int);
 363  * Input: The hostname, username, address, address family.
 364  * Output: The applicable ConfItem.
 365  * Side-effects: None
 366  */
 367 struct ConfItem *
 368 find_address_conf(const char *host, const char *sockhost, const char *user,
 369                 const char *notildeuser, struct sockaddr *ip, int aftype, char *auth_user)
 370 {
 371         struct ConfItem *iconf, *kconf;
 372         const char *vuser;
 373
 374         /* Find the best I-line... If none, return NULL -A1kmm */
 375         if(!(iconf = find_conf_by_address(host, sockhost, NULL, ip, CONF_CLIENT, aftype, user, auth_user)))
 376                 return NULL;
 377         /* Find what their visible username will be.
 378          * Note that the username without tilde may contain one char more.
 379          * -- jilles */
 380         vuser = IsNoTilde(iconf) ? notildeuser : user;
 381
 382         /* If they are exempt from K-lines, return the best I-line. -A1kmm */
 383         if(IsConfExemptKline(iconf))
 384                 return iconf;
 385
 386         /* Find the best K-line... -A1kmm */
 387         kconf = find_conf_by_address(host, sockhost, NULL, ip, CONF_KILL, aftype, user, NULL);
 388
 389         /* If they are K-lined, return the K-line */
 390         if(kconf)
 391                 return kconf;
 392
 393         /* if theres a spoof, check it against klines.. */
 394         if(IsConfDoSpoofIp(iconf))
 395         {
 396                 char *p = strchr(iconf->info.name, '@');
 397
 398                 /* note, we dont need to pass sockhost here, as its
 399                  * guaranteed to not match by whats above.. --anfl
 400                  */
 401                 if(p)
 402                 {
 403                         *p = '\0';
 404                         kconf = find_conf_by_address(p+1, NULL, NULL, ip, CONF_KILL, aftype, iconf->info.name, NULL);
 405                         *p = '@';
 406                 }
 407                 else
 408                         kconf = find_conf_by_address(iconf->info.name, NULL, NULL, ip, CONF_KILL, aftype, vuser, NULL);
 409
 410                 if(kconf)
 411                         return kconf;
 412         }
 413
 414         /* if no_tilde, check the username without tilde against klines too
 415          * -- jilles */
 416         if(user != vuser)
 417         {
 418                 kconf = find_conf_by_address(host, sockhost, NULL, ip, CONF_KILL, aftype, vuser, NULL);
 419                 if(kconf)
 420                         return kconf;
 421         }
 422
 423         return iconf;
 424 }
 425
 426 /* struct ConfItem* find_dline(struct rb_sockaddr_storage*, int)
 427  * Input: An address, an address family.
 428  * Output: The best matching D-line or exempt line.
 429  * Side effects: None.
 430  */
 431 struct ConfItem *
 432 find_dline(struct sockaddr *addr, int aftype)
 433 {
 434         struct ConfItem *aconf;
 435         struct sockaddr_in addr2;
 436
 437         aconf = find_conf_by_address(NULL, NULL, NULL, addr, CONF_EXEMPTDLINE | 1, aftype, NULL, NULL);
 438         if(aconf)
 439                 return aconf;
 440         aconf = find_conf_by_address(NULL, NULL, NULL, addr, CONF_DLINE | 1, aftype, NULL, NULL);
 441         if(aconf)
 442                 return aconf;
 443         if(addr->sa_family == AF_INET6 &&
 444                         rb_ipv4_from_ipv6((const struct sockaddr_in6 *)(const void *)addr, &addr2))
 445         {
 446                 aconf = find_conf_by_address(NULL, NULL, NULL, (struct sockaddr *)&addr2, CONF_DLINE | 1, AF_INET, NULL, NULL);
 447                 if(aconf)
 448                         return aconf;
 449         }
 450         return NULL;
 451 }
 452
 453 /* void find_exact_conf_by_address(const char*, int, const char *)
 454  * Input:
 455  * Output: ConfItem if found
 456  * Side-effects: None
 457  */
 458 struct ConfItem *
 459 find_exact_conf_by_address(const char *address, int type, const char *username)
 460 {
 461         int masktype, bits;
 462         unsigned long hv;
 463         struct AddressRec *arec;
 464         struct rb_sockaddr_storage addr;
 465
 466         if(address == NULL)
 467                 address = "/NOMATCH!/";
 468         masktype = parse_netmask(address, &addr, &bits);
 469         if(masktype == HM_IPV6)
 470         {
 471                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 472                 hv = hash_ipv6((struct sockaddr *)&addr, bits - bits % 16);
 473         }
 474         else if(masktype == HM_IPV4)
 475         {
 476                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 477                 hv = hash_ipv4((struct sockaddr *)&addr, bits - bits % 8);
 478         }
 479         else
 480         {
 481                 hv = get_mask_hash(address);
 482         }
 483         for (arec = atable[hv]; arec; arec = arec->next)
 484         {
 485                 if (arec->type == type &&
 486                                 arec->masktype == masktype &&
 487                                 (arec->username == NULL || username == NULL ? arec->username == username : !irccmp(arec->username, username)))
 488                 {
 489                         if (masktype == HM_HOST)
 490                         {
 491                                 if (!irccmp(arec->Mask.hostname, address))
 492                                         return arec->aconf;
 493                         }
 494                         else
 495                         {
 496                                 if (arec->Mask.ipa.bits == bits &&
 497                                         comp_with_mask_sock((struct sockaddr *)&arec->Mask.ipa.addr, (struct sockaddr *)&addr, bits))
 498                                         return arec->aconf;
 499                         }
 500                 }
 501         }
 502         return NULL;
 503 }
 504
 505 /* void add_conf_by_address(const char*, int, const char *,
 506  *         struct ConfItem *aconf)
 507  * Input:
 508  * Output: None
 509  * Side-effects: Adds this entry to the hash table.
 510  */
 511 void
 512 add_conf_by_address(const char *address, int type, const char *username, const char *auth_user, struct ConfItem *aconf)
 513 {
 514         static unsigned long prec_value = 0xFFFFFFFF;
 515         int bits;
 516         unsigned long hv;
 517         struct AddressRec *arec;
 518
 519         if(address == NULL)
 520                 address = "/NOMATCH!/";
 521         arec = rb_malloc(sizeof(struct AddressRec));
 522         arec->masktype = parse_netmask(address, &arec->Mask.ipa.addr, &bits);
 523         if(arec->masktype == HM_IPV6)
 524         {
 525                 arec->Mask.ipa.bits = bits;
 526                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 527                 bits -= bits % 16;
 528                 arec->next = atable[(hv = hash_ipv6((struct sockaddr *)&arec->Mask.ipa.addr, bits))];
 529                 atable[hv] = arec;
 530         }
 531         else if(arec->masktype == HM_IPV4)
 532         {
 533                 arec->Mask.ipa.bits = bits;
 534                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 535                 bits -= bits % 8;
 536                 arec->next = atable[(hv = hash_ipv4((struct sockaddr *)&arec->Mask.ipa.addr, bits))];
 537                 atable[hv] = arec;
 538         }
 539         else
 540         {
 541                 arec->Mask.hostname = address;
 542                 arec->next = atable[(hv = get_mask_hash(address))];
 543                 atable[hv] = arec;
 544         }
 545         arec->username = username;
 546         arec->auth_user = auth_user;
 547         arec->aconf = aconf;
 548         arec->precedence = prec_value--;
 549         arec->type = type;
 550 }
 551
 552 /* void delete_one_address(const char*, struct ConfItem*)
 553  * Input: An address string, the associated ConfItem.
 554  * Output: None
 555  * Side effects: Deletes an address record. Frees the ConfItem if there
 556  *               is nothing referencing it, sets it as illegal otherwise.
 557  */
 558 void
 559 delete_one_address_conf(const char *address, struct ConfItem *aconf)
 560 {
 561         int masktype, bits;
 562         unsigned long hv;
 563         struct AddressRec *arec, *arecl = NULL;
 564         struct rb_sockaddr_storage addr;
 565         masktype = parse_netmask(address, &addr, &bits);
 566         if(masktype == HM_IPV6)
 567         {
 568                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 569                 bits -= bits % 16;
 570                 hv = hash_ipv6((struct sockaddr *)&addr, bits);
 571         }
 572         else if(masktype == HM_IPV4)
 573         {
 574                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 575                 bits -= bits % 8;
 576                 hv = hash_ipv4((struct sockaddr *)&addr, bits);
 577         }
 578         else
 579                 hv = get_mask_hash(address);
 580         for (arec = atable[hv]; arec; arec = arec->next)
 581         {
 582                 if(arec->aconf == aconf)
 583                 {
 584                         if(arecl)
 585                                 arecl->next = arec->next;
 586                         else
 587                                 atable[hv] = arec->next;
 588                         aconf->status |= CONF_ILLEGAL;
 589                         if(!aconf->clients)
 590                                 free_conf(aconf);
 591                         rb_free(arec);
 592                         return;
 593                 }
 594                 arecl = arec;
 595         }
 596 }
 597
 598 /* void clear_out_address_conf(void)
 599  * Input: None
 600  * Output: None
 601  * Side effects: Clears out all address records in the hash table,
 602  *               frees them, and frees the ConfItems if nothing references
 603  *               them, otherwise sets them as illegal.
 604  */
 605 void
 606 clear_out_address_conf(void)
 607 {
 608         int i;
 609         struct AddressRec **store_next;
 610         struct AddressRec *arec, *arecn;
 611
 612         for (i = 0; i < ATABLE_SIZE; i++)
 613         {
 614                 store_next = &atable[i];
 615                 for (arec = atable[i]; arec; arec = arecn)
 616                 {
 617                         arecn = arec->next;
 618                         /* We keep the temporary K-lines and destroy the
 619                          * permanent ones, just to be confusing :) -A1kmm */
 620                         if(arec->aconf->flags & CONF_FLAGS_TEMPORARY ||
 621                            (arec->type != CONF_CLIENT && arec->type != CONF_EXEMPTDLINE))
 622                         {
 623                                 *store_next = arec;
 624                                 store_next = &arec->next;
 625                         }
 626                         else
 627                         {
 628                                 arec->aconf->status |= CONF_ILLEGAL;
 629                                 if(!arec->aconf->clients)
 630                                         free_conf(arec->aconf);
 631                                 rb_free(arec);
 632                         }
 633                 }
 634                 *store_next = NULL;
 635         }
 636 }
 637
 638 void
 639 clear_out_address_conf_bans(void)
 640 {
 641         int i;
 642         struct AddressRec **store_next;
 643         struct AddressRec *arec, *arecn;
 644
 645         for (i = 0; i < ATABLE_SIZE; i++)
 646         {
 647                 store_next = &atable[i];
 648                 for (arec = atable[i]; arec; arec = arecn)
 649                 {
 650                         arecn = arec->next;
 651                         /* We keep the temporary K-lines and destroy the
 652                          * permanent ones, just to be confusing :) -A1kmm */
 653                         if(arec->aconf->flags & CONF_FLAGS_TEMPORARY ||
 654                            (arec->type == CONF_CLIENT || arec->type == CONF_EXEMPTDLINE))
 655                         {
 656                                 *store_next = arec;
 657                                 store_next = &arec->next;
 658                         }
 659                         else
 660                         {
 661                                 arec->aconf->status |= CONF_ILLEGAL;
 662                                 if(!arec->aconf->clients)
 663                                         free_conf(arec->aconf);
 664                                 rb_free(arec);
 665                         }
 666                 }
 667                 *store_next = NULL;
 668         }
 669 }
 670
 671
 672 /*
 673  * show_iline_prefix()
 674  *
 675  * inputs       - pointer to struct Client requesting output
 676  *              - pointer to struct ConfItem
 677  *              - name to which iline prefix will be prefixed to
 678  * output       - pointer to static string with prefixes listed in ascii form
 679  * side effects - NONE
 680  */
 681 char *
 682 show_iline_prefix(struct Client *sptr, struct ConfItem *aconf, char *name)
 683 {
 684         static char prefix_of_host[USERLEN + 15];
 685         char *prefix_ptr;
 686
 687         prefix_ptr = prefix_of_host;
 688         if(IsNoTilde(aconf))
 689                 *prefix_ptr++ = '-';
 690         if(IsNeedIdentd(aconf))
 691                 *prefix_ptr++ = '+';
 692         if(IsConfDoSpoofIp(aconf))
 693                 *prefix_ptr++ = '=';
 694         if(IsOper(sptr) && IsConfExemptFlood(aconf))
 695                 *prefix_ptr++ = '|';
 696         if(IsOper(sptr) && IsConfExemptDNSBL(aconf) && !IsConfExemptKline(aconf))
 697                 *prefix_ptr++ = '$';
 698         if(IsOper(sptr) && IsConfExemptKline(aconf))
 699                 *prefix_ptr++ = '^';
 700         if(IsOper(sptr) && IsConfExemptLimits(aconf))
 701                 *prefix_ptr++ = '>';
 702         *prefix_ptr = '\0';
 703         strncpy(prefix_ptr, name, USERLEN);
 704         return (prefix_of_host);
 705 }
 706
 707 /* report_auth()
 708  *
 709  * Inputs: pointer to client to report to
 710  * Output: None
 711  * Side effects: Reports configured auth{} blocks to client_p
 712  */
 713 void
 714 report_auth(struct Client *client_p)
 715 {
 716         char *name, *host, *user, *classname;
 717         const char *pass;
 718         struct AddressRec *arec;
 719         struct ConfItem *aconf;
 720         int i, port;
 721
 722         for (i = 0; i < ATABLE_SIZE; i++)
 723                 for (arec = atable[i]; arec; arec = arec->next)
 724                         if(arec->type == CONF_CLIENT)
 725                         {
 726                                 aconf = arec->aconf;
 727
 728                                 if(!IsOper(client_p) && IsConfDoSpoofIp(aconf))
 729                                         continue;
 730
 731                                 get_printable_conf(aconf, &name, &host, &pass, &user, &port,
 732                                                    &classname);
 733
 734                                 if(!EmptyString(aconf->spasswd))
 735                                         pass = aconf->spasswd;
 736
 737                                 sendto_one_numeric(client_p, RPL_STATSILINE,
 738                                                    form_str(RPL_STATSILINE),
 739                                                    name, pass, show_iline_prefix(client_p, aconf, user),
 740                                                    show_ip_conf(aconf, client_p) ? host : "255.255.255.255",
 741                                                    port, classname);
 742                         }
 743 }
 744