4 * DEBUG: section 28 Access Control
5 * AUTHOR: Duane Wessels
7 * SQUID Web Proxy Cache http://www.squid-cache.org/
8 * ----------------------------------------------------------
10 * Squid is the result of efforts by numerous individuals from
11 * the Internet community; see the CONTRIBUTORS file for full
12 * details. Many organizations have provided support for Squid's
13 * development; see the SPONSORS file for full details. Squid is
14 * Copyrighted (C) 2001 by the Regents of the University of
15 * California; see the COPYRIGHT file for full details. Squid
16 * incorporates software developed and/or copyrighted by other
17 * sources; see the CREDITS file for full details.
19 * This program is free software; you can redistribute it and/or modify
20 * it under the terms of the GNU General Public License as published by
21 * the Free Software Foundation; either version 2 of the License, or
22 * (at your option) any later version.
24 * This program is distributed in the hope that it will be useful,
25 * but WITHOUT ANY WARRANTY; without even the implied warranty of
26 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
27 * GNU General Public License for more details.
29 * You should have received a copy of the GNU General Public License
30 * along with this program; if not, write to the Free Software
31 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
34 * Copyright (c) 2003, Robert Collins <robertc@squid-cache.org>
38 #include "acl/DestinationDomain.h"
39 #include "acl/Checklist.h"
40 #include "acl/RegexData.h"
41 #include "acl/DomainData.h"
42 #include "fqdncache.h"
43 #include "HttpRequest.h"
47 DestinationDomainLookup
DestinationDomainLookup::instance_
;
49 DestinationDomainLookup
*
50 DestinationDomainLookup::Instance()
56 DestinationDomainLookup::checkForAsync(ACLChecklist
*cl
) const
58 ACLFilledChecklist
*checklist
= Filled(cl
);
59 checklist
->asyncInProgress(true);
60 fqdncache_nbgethostbyaddr(checklist
->dst_addr
, LookupDone
, checklist
);
64 DestinationDomainLookup::LookupDone(const char *fqdn
, const DnsLookupDetails
&details
, void *data
)
66 ACLFilledChecklist
*checklist
= Filled((ACLChecklist
*)data
);
67 assert (checklist
->asyncState() == DestinationDomainLookup::Instance());
69 checklist
->asyncInProgress(false);
70 checklist
->changeState (ACLChecklist::NullState::Instance());
71 checklist
->markDestinationDomainChecked();
72 checklist
->request
->recordLookup(details
);
73 checklist
->matchNonBlocking();
78 ACLDestinationDomainStrategy::match (ACLData
<MatchType
> * &data
, ACLFilledChecklist
*checklist
)
80 assert(checklist
!= NULL
&& checklist
->request
!= NULL
);
82 if (data
->match(checklist
->request
->GetHost())) {
86 /* numeric IPA? no, trust the above result. */
87 if (checklist
->request
->GetHostIsNumeric() == 0) {
91 /* do we already have the rDNS? match on it if we do. */
92 if (checklist
->dst_rdns
) {
93 debugs(28, 3, "aclMatchAcl: '" << AclMatchedName
<< "' match with stored rDNS '" << checklist
->dst_rdns
<< "' for '" << checklist
->request
->GetHost() << "'");
94 return data
->match(checklist
->dst_rdns
);
97 /* raw IP without rDNS? look it up and wait for the result */
98 const ipcache_addrs
*ia
= ipcacheCheckNumeric(checklist
->request
->GetHost());
100 /* not a valid IPA */
101 checklist
->dst_rdns
= xstrdup("invalid");
105 checklist
->dst_addr
= ia
->in_addrs
[0];
106 const char *fqdn
= fqdncache_gethostbyaddr(checklist
->dst_addr
, FQDN_LOOKUP_IF_MISS
);
109 checklist
->dst_rdns
= xstrdup(fqdn
);
110 return data
->match(fqdn
);
111 } else if (!checklist
->destinationDomainChecked()) {
112 /* FIXME: Using AclMatchedName here is not OO correct. Should find a way to the current acl */
113 debugs(28, 3, "aclMatchAcl: Can't yet compare '" << AclMatchedName
<< "' ACL for '" << checklist
->request
->GetHost() << "'");
114 checklist
->changeState(DestinationDomainLookup::Instance());
118 return data
->match("none");
121 ACLDestinationDomainStrategy
*
122 ACLDestinationDomainStrategy::Instance()
127 ACLDestinationDomainStrategy
ACLDestinationDomainStrategy::Instance_
;