ircd/hostmask.c

   1 /*
   2  *  charybdis: an advanced internet relay chat daemon (ircd).
   3  *  hostmask.c: Code to efficiently find IP & hostmask based configs.
   4  *
   5  *  Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center
   6  *  Copyright (C) 1996-2002 Hybrid Development Team
   7  *  Copyright (C) 2002-2005 ircd-ratbox development team
   8  *  Copyright (C) 2005-2008 charybdis development team
   9  *
  10  *  This program is free software; you can redistribute it and/or modify
  11  *  it under the terms of the GNU General Public License as published by
  12  *  the Free Software Foundation; either version 2 of the License, or
  13  *  (at your option) any later version.
  14  *
  15  *  This program is distributed in the hope that it will be useful,
  16  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  *  GNU General Public License for more details.
  19  *
  20  *  You should have received a copy of the GNU General Public License
  21  *  along with this program; if not, write to the Free Software
  22  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
  23  *  USA
  24  */
  25
  26 #include "stdinc.h"
  27 #include "ircd_defs.h"
  28 #include "s_conf.h"
  29 #include "hostmask.h"
  30 #include "numeric.h"
  31 #include "send.h"
  32 #include "match.h"
  33
  34 static unsigned long hash_ipv6(struct sockaddr *, int);
  35 static unsigned long hash_ipv4(struct sockaddr *, int);
  36
  37
  38 /* int parse_netmask(const char *, struct rb_sockaddr_storage *, int *);
  39  * Input: A hostmask, or an IPV4/6 address.
  40  * Output: An integer describing whether it is an IPV4, IPV6 address or a
  41  *         hostmask, an address(if it is an IP mask),
  42  *         a bitlength(if it is IP mask).
  43  * Side effects: None
  44  */
  45 int
  46 parse_netmask(const char *text, struct rb_sockaddr_storage *naddr, int *nb)
  47 {
  48         char *ip = LOCAL_COPY(text);
  49         char *ptr;
  50         struct rb_sockaddr_storage *addr, xaddr;
  51         int *b, xb;
  52         if(nb == NULL)
  53                 b = &xb;
  54         else
  55                 b = nb;
  56
  57         if(naddr == NULL)
  58                 addr = &xaddr;
  59         else
  60                 addr = naddr;
  61
  62         if(strpbrk(ip, "*?") != NULL)
  63         {
  64                 return HM_HOST;
  65         }
  66         if(strchr(ip, ':'))
  67         {
  68                 if((ptr = strchr(ip, '/')))
  69                 {
  70                         *ptr = '\0';
  71                         ptr++;
  72                         *b = atoi(ptr);
  73                         if(*b > 128)
  74                                 *b = 128;
  75                         else if(*b < 0)
  76                                 return HM_HOST;
  77                 } else
  78                         *b = 128;
  79                 if(rb_inet_pton_sock(ip, (struct sockaddr *)addr) > 0)
  80                         return HM_IPV6;
  81                 else
  82                         return HM_HOST;
  83         } else
  84         if(strchr(text, '.'))
  85         {
  86                 if((ptr = strchr(ip, '/')))
  87                 {
  88                         *ptr = '\0';
  89                         ptr++;
  90                         *b = atoi(ptr);
  91                         if(*b > 32)
  92                                 *b = 32;
  93                         else if(*b < 0)
  94                                 return HM_HOST;
  95                 } else
  96                         *b = 32;
  97                 if(rb_inet_pton_sock(ip, (struct sockaddr *)addr) > 0)
  98                         return HM_IPV4;
  99                 else
 100                         return HM_HOST;
 101         }
 102         return HM_HOST;
 103 }
 104
 105 /* Hashtable stuff...now external as its used in m_stats.c */
 106 struct AddressRec *atable[ATABLE_SIZE];
 107
 108 void
 109 init_host_hash(void)
 110 {
 111         memset(&atable, 0, sizeof(atable));
 112 }
 113
 114 /* unsigned long hash_ipv4(struct rb_sockaddr_storage*)
 115  * Input: An IP address.
 116  * Output: A hash value of the IP address.
 117  * Side effects: None
 118  */
 119 static unsigned long
 120 hash_ipv4(struct sockaddr *saddr, int bits)
 121 {
 122         struct sockaddr_in *addr = (struct sockaddr_in *)(void *)saddr;
 123
 124         if(bits != 0)
 125         {
 126                 unsigned long av = ntohl(addr->sin_addr.s_addr) & ~((1 << (32 - bits)) - 1);
 127                 return (av ^ (av >> 12) ^ (av >> 24)) & (ATABLE_SIZE - 1);
 128         }
 129
 130         return 0;
 131 }
 132
 133 /* unsigned long hash_ipv6(struct rb_sockaddr_storage*)
 134  * Input: An IP address.
 135  * Output: A hash value of the IP address.
 136  * Side effects: None
 137  */
 138 static unsigned long
 139 hash_ipv6(struct sockaddr *saddr, int bits)
 140 {
 141         struct sockaddr_in6 *addr = (struct sockaddr_in6 *)(void *)saddr;
 142         unsigned long v = 0, n;
 143         for (n = 0; n < 16; n++)
 144         {
 145                 if(bits >= 8)
 146                 {
 147                         v ^= addr->sin6_addr.s6_addr[n];
 148                         bits -= 8;
 149                 }
 150                 else if(bits)
 151                 {
 152                         v ^= addr->sin6_addr.s6_addr[n] & ~((1 << (8 - bits)) - 1);
 153                         return v & (ATABLE_SIZE - 1);
 154                 }
 155                 else
 156                         return v & (ATABLE_SIZE - 1);
 157         }
 158         return v & (ATABLE_SIZE - 1);
 159 }
 160
 161 /* int hash_text(const char *start)
 162  * Input: The start of the text to hash.
 163  * Output: The hash of the string between 1 and (TH_MAX-1)
 164  * Side-effects: None.
 165  */
 166 static int
 167 hash_text(const char *start)
 168 {
 169         const char *p = start;
 170         unsigned long h = 0;
 171
 172         while(*p)
 173         {
 174                 h = (h << 4) - (h + (unsigned char) irctolower(*p++));
 175         }
 176
 177         return (h & (ATABLE_SIZE - 1));
 178 }
 179
 180 /* unsigned long get_hash_mask(const char *)
 181  * Input: The text to hash.
 182  * Output: The hash of the string right of the first '.' past the last
 183  *         wildcard in the string.
 184  * Side-effects: None.
 185  */
 186 static unsigned long
 187 get_mask_hash(const char *text)
 188 {
 189         const char *hp = "", *p;
 190
 191         for (p = text + strlen(text) - 1; p >= text; p--)
 192                 if(*p == '*' || *p == '?')
 193                         return hash_text(hp);
 194                 else if(*p == '.')
 195                         hp = p + 1;
 196         return hash_text(text);
 197 }
 198
 199 /* struct ConfItem* find_conf_by_address(const char*, struct rb_sockaddr_storage*,
 200  *         int type, int fam, const char *username)
 201  * Input: The hostname, the address, the type of mask to find, the address
 202  *        family, the username.
 203  * Output: The matching value with the highest precedence.
 204  * Side-effects: None
 205  * Note: Setting bit 0 of the type means that the username is ignored.
 206  */
 207 struct ConfItem *
 208 find_conf_by_address(const char *name, const char *sockhost,
 209                         const char *orighost,
 210                         struct sockaddr *addr, int type, int fam,
 211                         const char *username, const char *auth_user)
 212 {
 213         unsigned long hprecv = 0;
 214         struct ConfItem *hprec = NULL;
 215         struct AddressRec *arec;
 216         int b;
 217
 218         if(username == NULL)
 219                 username = "";
 220
 221         if(addr)
 222         {
 223                 /* Check for IPV6 matches... */
 224                 if(fam == AF_INET6)
 225                 {
 226
 227                         for (b = 128; b >= 0; b -= 16)
 228                         {
 229                                 for (arec = atable[hash_ipv6(addr, b)]; arec; arec = arec->next)
 230                                         if(arec->type == (type & ~0x1) &&
 231                                            arec->masktype == HM_IPV6 &&
 232                                            comp_with_mask_sock(addr, (struct sockaddr *)&arec->Mask.ipa.addr,
 233                                                 arec->Mask.ipa.bits) &&
 234                                                 (type & 0x1 || match(arec-> username, username)) &&
 235                                                 (type != CONF_CLIENT || !arec->auth_user ||
 236                                                 (auth_user && match(arec->auth_user, auth_user))) &&
 237                                                 arec->precedence > hprecv)
 238                                         {
 239                                                 hprecv = arec->precedence;
 240                                                 hprec = arec->aconf;
 241                                         }
 242                         }
 243                 }
 244                 else
 245                 if(fam == AF_INET)
 246                 {
 247                         for (b = 32; b >= 0; b -= 8)
 248                         {
 249                                 for (arec = atable[hash_ipv4(addr, b)]; arec; arec = arec->next)
 250                                         if(arec->type == (type & ~0x1) &&
 251                                            arec->masktype == HM_IPV4 &&
 252                                            comp_with_mask_sock(addr, (struct sockaddr *)&arec->Mask.ipa.addr,
 253                                                                arec->Mask.ipa.bits) &&
 254                                                 (type & 0x1 || match(arec->username, username)) &&
 255                                                 (type != CONF_CLIENT || !arec->auth_user ||
 256                                                 (auth_user && match(arec->auth_user, auth_user))) &&
 257                                                 arec->precedence > hprecv)
 258                                         {
 259                                                 hprecv = arec->precedence;
 260                                                 hprec = arec->aconf;
 261                                         }
 262                         }
 263                 }
 264         }
 265
 266         if(orighost != NULL)
 267         {
 268                 const char *p;
 269
 270                 for (p = orighost; p != NULL;)
 271                 {
 272                         for (arec = atable[hash_text(p)]; arec; arec = arec->next)
 273
 274                                 if((arec->type == (type & ~0x1)) &&
 275                                    (arec->masktype == HM_HOST) &&
 276                                    arec->precedence > hprecv &&
 277                                    match(arec->Mask.hostname, orighost) &&
 278                                    (type != CONF_CLIENT || !arec->auth_user ||
 279                                    (auth_user && match(arec->auth_user, auth_user))) &&
 280                                    (type & 0x1 || match(arec->username, username)))
 281                                 {
 282                                         hprecv = arec->precedence;
 283                                         hprec = arec->aconf;
 284                                 }
 285                         p = strchr(p, '.');
 286                         if(p != NULL)
 287                                 p++;
 288                         else
 289                                 break;
 290                 }
 291                 for (arec = atable[0]; arec; arec = arec->next)
 292                 {
 293                         if(arec->type == (type & ~0x1) &&
 294                            arec->masktype == HM_HOST &&
 295                            arec->precedence > hprecv &&
 296                            (match(arec->Mask.hostname, orighost) ||
 297                             (sockhost && match(arec->Mask.hostname, sockhost))) &&
 298                             (type != CONF_CLIENT || !arec->auth_user ||
 299                             (auth_user && match(arec->auth_user, auth_user))) &&
 300                            (type & 0x1 || match(arec->username, username)))
 301                         {
 302                                 hprecv = arec->precedence;
 303                                 hprec = arec->aconf;
 304                         }
 305                 }
 306         }
 307
 308         if(name != NULL)
 309         {
 310                 const char *p;
 311                 /* And yes - we have to check p after strchr and p after increment for
 312                  * NULL -kre */
 313                 for (p = name; p != NULL;)
 314                 {
 315                         for (arec = atable[hash_text(p)]; arec; arec = arec->next)
 316                                 if((arec->type == (type & ~0x1)) &&
 317                                    (arec->masktype == HM_HOST) &&
 318                                    arec->precedence > hprecv &&
 319                                    match(arec->Mask.hostname, name) &&
 320                                    (type != CONF_CLIENT || !arec->auth_user ||
 321                                    (auth_user && match(arec->auth_user, auth_user))) &&
 322                                    (type & 0x1 || match(arec->username, username)))
 323                                 {
 324                                         hprecv = arec->precedence;
 325                                         hprec = arec->aconf;
 326                                 }
 327                         p = strchr(p, '.');
 328                         if(p != NULL)
 329                                 p++;
 330                         else
 331                                 break;
 332                 }
 333                 for (arec = atable[0]; arec; arec = arec->next)
 334                 {
 335                         if(arec->type == (type & ~0x1) &&
 336                            arec->masktype == HM_HOST &&
 337                            arec->precedence > hprecv &&
 338                            (match(arec->Mask.hostname, name) ||
 339                             (sockhost && match(arec->Mask.hostname, sockhost))) &&
 340                             (type != CONF_CLIENT || !arec->auth_user ||
 341                             (auth_user && match(arec->auth_user, auth_user))) &&
 342                            (type & 0x1 || match(arec->username, username)))
 343                         {
 344                                 hprecv = arec->precedence;
 345                                 hprec = arec->aconf;
 346                         }
 347                 }
 348         }
 349         return hprec;
 350 }
 351
 352 /* struct ConfItem* find_address_conf(const char*, const char*,
 353  *                                     struct rb_sockaddr_storage*, int);
 354  * Input: The hostname, username, address, address family.
 355  * Output: The applicable ConfItem.
 356  * Side-effects: None
 357  */
 358 struct ConfItem *
 359 find_address_conf(const char *host, const char *sockhost, const char *user,
 360                 const char *notildeuser, struct sockaddr *ip, int aftype, char *auth_user)
 361 {
 362         struct ConfItem *iconf, *kconf;
 363         const char *vuser;
 364         struct sockaddr_in ip4;
 365
 366         /* Find the best I-line... If none, return NULL -A1kmm */
 367         if(!(iconf = find_conf_by_address(host, sockhost, NULL, ip, CONF_CLIENT, aftype, user, auth_user)))
 368                 return NULL;
 369         /* Find what their visible username will be.
 370          * Note that the username without tilde may contain one char more.
 371          * -- jilles */
 372         vuser = IsNoTilde(iconf) ? notildeuser : user;
 373
 374         /* If they are exempt from K-lines, return the best I-line. -A1kmm */
 375         if(IsConfExemptKline(iconf))
 376                 return iconf;
 377
 378         /* Find the best K-line... -A1kmm */
 379         kconf = find_conf_by_address(host, sockhost, NULL, ip, CONF_KILL, aftype, user, NULL);
 380
 381         /* If they are K-lined, return the K-line */
 382         if(kconf)
 383                 return kconf;
 384
 385         /* if theres a spoof, check it against klines.. */
 386         if(IsConfDoSpoofIp(iconf))
 387         {
 388                 char *p = strchr(iconf->info.name, '@');
 389
 390                 /* note, we dont need to pass sockhost here, as its
 391                  * guaranteed to not match by whats above.. --anfl
 392                  */
 393                 if(p)
 394                 {
 395                         *p = '\0';
 396                         kconf = find_conf_by_address(p+1, NULL, NULL, ip, CONF_KILL, aftype, iconf->info.name, NULL);
 397                         *p = '@';
 398                 }
 399                 else
 400                         kconf = find_conf_by_address(iconf->info.name, NULL, NULL, ip, CONF_KILL, aftype, vuser, NULL);
 401
 402                 if(kconf)
 403                         return kconf;
 404         }
 405
 406         /* if no_tilde, check the username without tilde against klines too
 407          * -- jilles */
 408         if(user != vuser)
 409         {
 410                 kconf = find_conf_by_address(host, sockhost, NULL, ip, CONF_KILL, aftype, vuser, NULL);
 411                 if(kconf)
 412                         return kconf;
 413         }
 414
 415         if(ip != NULL && ip->sa_family == AF_INET6 &&
 416                         rb_ipv4_from_ipv6((const struct sockaddr_in6 *)(const void *)ip, &ip4))
 417         {
 418                 kconf = find_conf_by_address(NULL, NULL, NULL, (struct sockaddr *)&ip4, CONF_KILL, AF_INET, vuser, NULL);
 419                 if(kconf)
 420                         return kconf;
 421         }
 422
 423         return iconf;
 424 }
 425
 426 /* struct ConfItem* find_dline(struct rb_sockaddr_storage*, int)
 427  * Input: An address, an address family.
 428  * Output: The best matching D-line or exempt line.
 429  * Side effects: None.
 430  */
 431 struct ConfItem *
 432 find_dline(struct sockaddr *addr, int aftype)
 433 {
 434         struct ConfItem *aconf;
 435         struct sockaddr_in addr2;
 436
 437         aconf = find_conf_by_address(NULL, NULL, NULL, addr, CONF_EXEMPTDLINE | 1, aftype, NULL, NULL);
 438         if(aconf)
 439                 return aconf;
 440         aconf = find_conf_by_address(NULL, NULL, NULL, addr, CONF_DLINE | 1, aftype, NULL, NULL);
 441         if(aconf)
 442                 return aconf;
 443         if(addr->sa_family == AF_INET6 &&
 444                         rb_ipv4_from_ipv6((const struct sockaddr_in6 *)(const void *)addr, &addr2))
 445         {
 446                 aconf = find_conf_by_address(NULL, NULL, NULL, (struct sockaddr *)&addr2, CONF_DLINE | 1, AF_INET, NULL, NULL);
 447                 if(aconf)
 448                         return aconf;
 449         }
 450         return NULL;
 451 }
 452
 453 /* void find_exact_conf_by_address(const char*, int, const char *)
 454  * Input:
 455  * Output: ConfItem if found
 456  * Side-effects: None
 457  */
 458 struct ConfItem *
 459 find_exact_conf_by_address(const char *address, int type, const char *username)
 460 {
 461         int masktype, bits;
 462         unsigned long hv;
 463         struct AddressRec *arec;
 464         struct rb_sockaddr_storage addr;
 465
 466         if(address == NULL)
 467                 address = "/NOMATCH!/";
 468         masktype = parse_netmask(address, &addr, &bits);
 469         if(masktype == HM_IPV6)
 470         {
 471                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 472                 hv = hash_ipv6((struct sockaddr *)&addr, bits - bits % 16);
 473         }
 474         else if(masktype == HM_IPV4)
 475         {
 476                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 477                 hv = hash_ipv4((struct sockaddr *)&addr, bits - bits % 8);
 478         }
 479         else
 480         {
 481                 hv = get_mask_hash(address);
 482         }
 483         for (arec = atable[hv]; arec; arec = arec->next)
 484         {
 485                 if (arec->type == type &&
 486                                 arec->masktype == masktype &&
 487                                 (arec->username == NULL || username == NULL ? arec->username == username : !irccmp(arec->username, username)))
 488                 {
 489                         if (masktype == HM_HOST)
 490                         {
 491                                 if (!irccmp(arec->Mask.hostname, address))
 492                                         return arec->aconf;
 493                         }
 494                         else
 495                         {
 496                                 if (arec->Mask.ipa.bits == bits &&
 497                                         comp_with_mask_sock((struct sockaddr *)&arec->Mask.ipa.addr, (struct sockaddr *)&addr, bits))
 498                                         return arec->aconf;
 499                         }
 500                 }
 501         }
 502         return NULL;
 503 }
 504
 505 /* void add_conf_by_address(const char*, int, const char *,
 506  *         struct ConfItem *aconf)
 507  * Input:
 508  * Output: None
 509  * Side-effects: Adds this entry to the hash table.
 510  */
 511 void
 512 add_conf_by_address(const char *address, int type, const char *username, const char *auth_user, struct ConfItem *aconf)
 513 {
 514         static unsigned long prec_value = 0xFFFFFFFF;
 515         int bits;
 516         unsigned long hv;
 517         struct AddressRec *arec;
 518
 519         if(address == NULL)
 520                 address = "/NOMATCH!/";
 521         arec = rb_malloc(sizeof(struct AddressRec));
 522         arec->masktype = parse_netmask(address, &arec->Mask.ipa.addr, &bits);
 523         if(arec->masktype == HM_IPV6)
 524         {
 525                 arec->Mask.ipa.bits = bits;
 526                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 527                 bits -= bits % 16;
 528                 arec->next = atable[(hv = hash_ipv6((struct sockaddr *)&arec->Mask.ipa.addr, bits))];
 529                 atable[hv] = arec;
 530         }
 531         else if(arec->masktype == HM_IPV4)
 532         {
 533                 arec->Mask.ipa.bits = bits;
 534                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 535                 bits -= bits % 8;
 536                 arec->next = atable[(hv = hash_ipv4((struct sockaddr *)&arec->Mask.ipa.addr, bits))];
 537                 atable[hv] = arec;
 538         }
 539         else
 540         {
 541                 arec->Mask.hostname = address;
 542                 arec->next = atable[(hv = get_mask_hash(address))];
 543                 atable[hv] = arec;
 544         }
 545         arec->username = username;
 546         arec->auth_user = auth_user;
 547         arec->aconf = aconf;
 548         arec->precedence = prec_value--;
 549         arec->type = type;
 550 }
 551
 552 /* void delete_one_address(const char*, struct ConfItem*)
 553  * Input: An address string, the associated ConfItem.
 554  * Output: None
 555  * Side effects: Deletes an address record. Frees the ConfItem if there
 556  *               is nothing referencing it, sets it as illegal otherwise.
 557  */
 558 void
 559 delete_one_address_conf(const char *address, struct ConfItem *aconf)
 560 {
 561         int masktype, bits;
 562         unsigned long hv;
 563         struct AddressRec *arec, *arecl = NULL;
 564         struct rb_sockaddr_storage addr;
 565         masktype = parse_netmask(address, &addr, &bits);
 566         if(masktype == HM_IPV6)
 567         {
 568                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 569                 bits -= bits % 16;
 570                 hv = hash_ipv6((struct sockaddr *)&addr, bits);
 571         }
 572         else if(masktype == HM_IPV4)
 573         {
 574                 /* We have to do this, since we do not re-hash for every bit -A1kmm. */
 575                 bits -= bits % 8;
 576                 hv = hash_ipv4((struct sockaddr *)&addr, bits);
 577         }
 578         else
 579                 hv = get_mask_hash(address);
 580         for (arec = atable[hv]; arec; arec = arec->next)
 581         {
 582                 if(arec->aconf == aconf)
 583                 {
 584                         if(arecl)
 585                                 arecl->next = arec->next;
 586                         else
 587                                 atable[hv] = arec->next;
 588                         aconf->status |= CONF_ILLEGAL;
 589                         if(!aconf->clients)
 590                                 free_conf(aconf);
 591                         rb_free(arec);
 592                         return;
 593                 }
 594                 arecl = arec;
 595         }
 596 }
 597
 598 /* void clear_out_address_conf(void)
 599  * Input: None
 600  * Output: None
 601  * Side effects: Clears out all address records in the hash table,
 602  *               frees them, and frees the ConfItems if nothing references
 603  *               them, otherwise sets them as illegal.
 604  */
 605 void
 606 clear_out_address_conf(void)
 607 {
 608         int i;
 609         struct AddressRec **store_next;
 610         struct AddressRec *arec, *arecn;
 611
 612         for (i = 0; i < ATABLE_SIZE; i++)
 613         {
 614                 store_next = &atable[i];
 615                 for (arec = atable[i]; arec; arec = arecn)
 616                 {
 617                         arecn = arec->next;
 618                         /* We keep the temporary K-lines and destroy the
 619                          * permanent ones, just to be confusing :) -A1kmm */
 620                         if(arec->aconf->flags & CONF_FLAGS_TEMPORARY ||
 621                            (arec->type != CONF_CLIENT && arec->type != CONF_EXEMPTDLINE))
 622                         {
 623                                 *store_next = arec;
 624                                 store_next = &arec->next;
 625                         }
 626                         else
 627                         {
 628                                 arec->aconf->status |= CONF_ILLEGAL;
 629                                 if(!arec->aconf->clients)
 630                                         free_conf(arec->aconf);
 631                                 rb_free(arec);
 632                         }
 633                 }
 634                 *store_next = NULL;
 635         }
 636 }
 637
 638 void
 639 clear_out_address_conf_bans(void)
 640 {
 641         int i;
 642         struct AddressRec **store_next;
 643         struct AddressRec *arec, *arecn;
 644
 645         for (i = 0; i < ATABLE_SIZE; i++)
 646         {
 647                 store_next = &atable[i];
 648                 for (arec = atable[i]; arec; arec = arecn)
 649                 {
 650                         arecn = arec->next;
 651                         /* We keep the temporary K-lines and destroy the
 652                          * permanent ones, just to be confusing :) -A1kmm */
 653                         if(arec->aconf->flags & CONF_FLAGS_TEMPORARY ||
 654                            (arec->type == CONF_CLIENT || arec->type == CONF_EXEMPTDLINE))
 655                         {
 656                                 *store_next = arec;
 657                                 store_next = &arec->next;
 658                         }
 659                         else
 660                         {
 661                                 arec->aconf->status |= CONF_ILLEGAL;
 662                                 if(!arec->aconf->clients)
 663                                         free_conf(arec->aconf);
 664                                 rb_free(arec);
 665                         }
 666                 }
 667                 *store_next = NULL;
 668         }
 669 }
 670
 671
 672 /*
 673  * show_iline_prefix()
 674  *
 675  * inputs       - pointer to struct Client requesting output
 676  *              - pointer to struct ConfItem
 677  *              - name to which iline prefix will be prefixed to
 678  * output       - pointer to static string with prefixes listed in ascii form
 679  * side effects - NONE
 680  */
 681 char *
 682 show_iline_prefix(struct Client *sptr, struct ConfItem *aconf, char *name)
 683 {
 684         static char prefix_of_host[USERLEN + 15];
 685         char *prefix_ptr;
 686
 687         prefix_ptr = prefix_of_host;
 688         if(IsNoTilde(aconf))
 689                 *prefix_ptr++ = '-';
 690         if(IsNeedIdentd(aconf))
 691                 *prefix_ptr++ = '+';
 692         if(IsConfDoSpoofIp(aconf))
 693                 *prefix_ptr++ = '=';
 694         if(IsOper(sptr) && IsConfExemptFlood(aconf))
 695                 *prefix_ptr++ = '|';
 696         if(IsOper(sptr) && IsConfExemptDNSBL(aconf) && !IsConfExemptKline(aconf))
 697                 *prefix_ptr++ = '$';
 698         if(IsOper(sptr) && IsConfExemptKline(aconf))
 699                 *prefix_ptr++ = '^';
 700         if(IsOper(sptr) && IsConfExemptLimits(aconf))
 701                 *prefix_ptr++ = '>';
 702         *prefix_ptr = '\0';
 703         strncpy(prefix_ptr, name, USERLEN);
 704         return (prefix_of_host);
 705 }
 706
 707 /* report_auth()
 708  *
 709  * Inputs: pointer to client to report to
 710  * Output: None
 711  * Side effects: Reports configured auth{} blocks to client_p
 712  */
 713 void
 714 report_auth(struct Client *client_p)
 715 {
 716         char *name, *host, *user, *classname;
 717         const char *pass;
 718         struct AddressRec *arec;
 719         struct ConfItem *aconf;
 720         int i, port;
 721
 722         for (i = 0; i < ATABLE_SIZE; i++)
 723                 for (arec = atable[i]; arec; arec = arec->next)
 724                         if(arec->type == CONF_CLIENT)
 725                         {
 726                                 aconf = arec->aconf;
 727
 728                                 if(!IsOper(client_p) && IsConfDoSpoofIp(aconf))
 729                                         continue;
 730
 731                                 get_printable_conf(aconf, &name, &host, &pass, &user, &port,
 732                                                    &classname);
 733
 734                                 if(!EmptyString(aconf->spasswd))
 735                                         pass = aconf->spasswd;
 736
 737                                 sendto_one_numeric(client_p, RPL_STATSILINE,
 738                                                    form_str(RPL_STATSILINE),
 739                                                    name, pass, show_iline_prefix(client_p, aconf, user),
 740                                                    show_ip_conf(aconf, client_p) ? host : "255.255.255.255",
 741                                                    port, classname);
 742                         }
 743 }
 744