src/acl/DestinationDomain.cc

   1 /*
   2  * $Id$
   3  *
   4  * DEBUG: section 28    Access Control
   5  * AUTHOR: Duane Wessels
   6  *
   7  * SQUID Web Proxy Cache          http://www.squid-cache.org/
   8  * ----------------------------------------------------------
   9  *
  10  *  Squid is the result of efforts by numerous individuals from
  11  *  the Internet community; see the CONTRIBUTORS file for full
  12  *  details.   Many organizations have provided support for Squid's
  13  *  development; see the SPONSORS file for full details.  Squid is
  14  *  Copyrighted (C) 2001 by the Regents of the University of
  15  *  California; see the COPYRIGHT file for full details.  Squid
  16  *  incorporates software developed and/or copyrighted by other
  17  *  sources; see the CREDITS file for full details.
  18  *
  19  *  This program is free software; you can redistribute it and/or modify
  20  *  it under the terms of the GNU General Public License as published by
  21  *  the Free Software Foundation; either version 2 of the License, or
  22  *  (at your option) any later version.
  23  *
  24  *  This program is distributed in the hope that it will be useful,
  25  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  26  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  27  *  GNU General Public License for more details.
  28  *
  29  *  You should have received a copy of the GNU General Public License
  30  *  along with this program; if not, write to the Free Software
  31  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
  32  *
  33  *
  34  * Copyright (c) 2003, Robert Collins <robertc@squid-cache.org>
  35  */
  36
  37 #include "squid.h"
  38 #include "acl/DestinationDomain.h"
  39 #include "acl/Checklist.h"
  40 #include "acl/RegexData.h"
  41 #include "acl/DomainData.h"
  42 #include "HttpRequest.h"
  43 #include "ipcache.h"
  44
  45 DestinationDomainLookup DestinationDomainLookup::instance_;
  46
  47 DestinationDomainLookup *
  48 DestinationDomainLookup::Instance()
  49 {
  50     return &instance_;
  51 }
  52
  53 void
  54 DestinationDomainLookup::checkForAsync(ACLChecklist *cl) const
  55 {
  56     ACLFilledChecklist *checklist = Filled(cl);
  57     checklist->asyncInProgress(true);
  58     fqdncache_nbgethostbyaddr(checklist->dst_addr, LookupDone, checklist);
  59 }
  60
  61 void
  62 DestinationDomainLookup::LookupDone(const char *fqdn, const DnsLookupDetails &details, void *data)
  63 {
  64     ACLFilledChecklist *checklist = Filled((ACLChecklist*)data);
  65     assert (checklist->asyncState() == DestinationDomainLookup::Instance());
  66
  67     checklist->asyncInProgress(false);
  68     checklist->changeState (ACLChecklist::NullState::Instance());
  69     checklist->markDestinationDomainChecked();
  70     checklist->request->recordLookup(details);
  71     checklist->check();
  72 }
  73
  74
  75 int
  76 ACLDestinationDomainStrategy::match (ACLData<MatchType> * &data, ACLFilledChecklist *checklist)
  77 {
  78     assert(checklist != NULL && checklist->request != NULL);
  79
  80     if (data->match(checklist->request->GetHost())) {
  81         return 1;
  82     }
  83
  84     /* numeric IPA? no, trust the above result. */
  85     if (checklist->request->GetHostIsNumeric() == 0) {
  86         return 0;
  87     }
  88
  89     /* do we already have the rDNS? match on it if we do. */
  90     if (checklist->dst_rdns) {
  91         debugs(28, 3, "aclMatchAcl: '" << AclMatchedName << "' match with stored rDNS '" << checklist->dst_rdns << "' for '" << checklist->request->GetHost() << "'");
  92         return data->match(checklist->dst_rdns);
  93     }
  94
  95     /* raw IP without rDNS? look it up and wait for the result */
  96     const ipcache_addrs *ia = ipcacheCheckNumeric(checklist->request->GetHost());
  97     if (!ia) {
  98         /* not a valid IPA */
  99         checklist->dst_rdns = xstrdup("invalid");
 100         return 0;
 101     }
 102
 103     checklist->dst_addr = ia->in_addrs[0];
 104     const char *fqdn = fqdncache_gethostbyaddr(checklist->dst_addr, FQDN_LOOKUP_IF_MISS);
 105
 106     if (fqdn) {
 107         checklist->dst_rdns = xstrdup(fqdn);
 108         return data->match(fqdn);
 109     } else if (!checklist->destinationDomainChecked()) {
 110         /* FIXME: Using AclMatchedName here is not OO correct. Should find a way to the current acl */
 111         debugs(28, 3, "aclMatchAcl: Can't yet compare '" << AclMatchedName << "' ACL for '" << checklist->request->GetHost() << "'");
 112         checklist->changeState(DestinationDomainLookup::Instance());
 113         return 0;
 114     }
 115
 116     return data->match("none");
 117 }
 118
 119 ACLDestinationDomainStrategy *
 120 ACLDestinationDomainStrategy::Instance()
 121 {
 122     return &Instance_;
 123 }
 124
 125 ACLDestinationDomainStrategy ACLDestinationDomainStrategy::Instance_;