4 * DEBUG: section 28 Access Control
5 * AUTHOR: Duane Wessels
7 * SQUID Web Proxy Cache http://www.squid-cache.org/
8 * ----------------------------------------------------------
10 * Squid is the result of efforts by numerous individuals from
11 * the Internet community; see the CONTRIBUTORS file for full
12 * details. Many organizations have provided support for Squid's
13 * development; see the SPONSORS file for full details. Squid is
14 * Copyrighted (C) 2001 by the Regents of the University of
15 * California; see the COPYRIGHT file for full details. Squid
16 * incorporates software developed and/or copyrighted by other
17 * sources; see the CREDITS file for full details.
19 * This program is free software; you can redistribute it and/or modify
20 * it under the terms of the GNU General Public License as published by
21 * the Free Software Foundation; either version 2 of the License, or
22 * (at your option) any later version.
24 * This program is distributed in the hope that it will be useful,
25 * but WITHOUT ANY WARRANTY; without even the implied warranty of
26 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
27 * GNU General Public License for more details.
29 * You should have received a copy of the GNU General Public License
30 * along with this program; if not, write to the Free Software
31 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
34 * Copyright (c) 2003, Robert Collins <robertc@squid-cache.org>
38 #include "acl/DestinationDomain.h"
39 #include "acl/Checklist.h"
40 #include "acl/RegexData.h"
41 #include "acl/DomainData.h"
42 #include "HttpRequest.h"
45 DestinationDomainLookup
DestinationDomainLookup::instance_
;
47 DestinationDomainLookup
*
48 DestinationDomainLookup::Instance()
54 DestinationDomainLookup::checkForAsync(ACLChecklist
*cl
) const
56 ACLFilledChecklist
*checklist
= Filled(cl
);
57 checklist
->asyncInProgress(true);
58 fqdncache_nbgethostbyaddr(checklist
->dst_addr
, LookupDone
, checklist
);
62 DestinationDomainLookup::LookupDone(const char *fqdn
, const DnsLookupDetails
&details
, void *data
)
64 ACLFilledChecklist
*checklist
= Filled((ACLChecklist
*)data
);
65 assert (checklist
->asyncState() == DestinationDomainLookup::Instance());
67 checklist
->asyncInProgress(false);
68 checklist
->changeState (ACLChecklist::NullState::Instance());
69 checklist
->markDestinationDomainChecked();
70 checklist
->request
->recordLookup(details
);
76 ACLDestinationDomainStrategy::match (ACLData
<MatchType
> * &data
, ACLFilledChecklist
*checklist
)
78 assert(checklist
!= NULL
&& checklist
->request
!= NULL
);
80 if (data
->match(checklist
->request
->GetHost())) {
84 /* numeric IPA? no, trust the above result. */
85 if (checklist
->request
->GetHostIsNumeric() == 0) {
89 /* do we already have the rDNS? match on it if we do. */
90 if (checklist
->dst_rdns
) {
91 debugs(28, 3, "aclMatchAcl: '" << AclMatchedName
<< "' match with stored rDNS '" << checklist
->dst_rdns
<< "' for '" << checklist
->request
->GetHost() << "'");
92 return data
->match(checklist
->dst_rdns
);
95 /* raw IP without rDNS? look it up and wait for the result */
96 const ipcache_addrs
*ia
= ipcacheCheckNumeric(checklist
->request
->GetHost());
99 checklist
->dst_rdns
= xstrdup("invalid");
103 checklist
->dst_addr
= ia
->in_addrs
[0];
104 const char *fqdn
= fqdncache_gethostbyaddr(checklist
->dst_addr
, FQDN_LOOKUP_IF_MISS
);
107 checklist
->dst_rdns
= xstrdup(fqdn
);
108 return data
->match(fqdn
);
109 } else if (!checklist
->destinationDomainChecked()) {
110 /* FIXME: Using AclMatchedName here is not OO correct. Should find a way to the current acl */
111 debugs(28, 3, "aclMatchAcl: Can't yet compare '" << AclMatchedName
<< "' ACL for '" << checklist
->request
->GetHost() << "'");
112 checklist
->changeState(DestinationDomainLookup::Instance());
116 return data
->match("none");
119 ACLDestinationDomainStrategy
*
120 ACLDestinationDomainStrategy::Instance()
125 ACLDestinationDomainStrategy
ACLDestinationDomainStrategy::Instance_
;