mirror of
https://github.com/3proxy/3proxy.git
synced 2026-04-28 23:20:12 +08:00
split auth.c
This commit is contained in:
Vladimir Dubrovin
parent
d52701518d
commit
a7cdfa578d
@ -285,6 +285,9 @@ endif()
|
|||||||
set(3PROXY_CORE_SOURCES
|
set(3PROXY_CORE_SOURCES
|
||||||
src/3proxy.c
|
src/3proxy.c
|
||||||
src/auth.c
|
src/auth.c
|
||||||
|
src/acl.c
|
||||||
|
src/limiter.c
|
||||||
|
src/redirect.c
|
||||||
src/authradius.c
|
src/authradius.c
|
||||||
src/hash.c
|
src/hash.c
|
||||||
src/resolve.c
|
src/resolve.c
|
||||||
|
|||||||
@ -111,6 +111,15 @@ srvdnspr$(OBJSUFFICS): dnspr.c proxy.h structures.h
|
|||||||
auth$(OBJSUFFICS): auth.c proxy.h structures.h
|
auth$(OBJSUFFICS): auth.c proxy.h structures.h
|
||||||
$(CC) $(COUT)auth$(OBJSUFFICS) $(CFLAGS) auth.c
|
$(CC) $(COUT)auth$(OBJSUFFICS) $(CFLAGS) auth.c
|
||||||
|
|
||||||
|
acl$(OBJSUFFICS): acl.c proxy.h structures.h
|
||||||
|
$(CC) $(COUT)acl$(OBJSUFFICS) $(CFLAGS) acl.c
|
||||||
|
|
||||||
|
limiter$(OBJSUFFICS): limiter.c proxy.h structures.h
|
||||||
|
$(CC) $(COUT)limiter$(OBJSUFFICS) $(CFLAGS) limiter.c
|
||||||
|
|
||||||
|
redirect$(OBJSUFFICS): redirect.c proxy.h structures.h
|
||||||
|
$(CC) $(COUT)redirect$(OBJSUFFICS) $(CFLAGS) redirect.c
|
||||||
|
|
||||||
hash$(OBJSUFFICS): hash.c proxy.h structures.h
|
hash$(OBJSUFFICS): hash.c proxy.h structures.h
|
||||||
$(CC) $(COUT)hash$(OBJSUFFICS) $(CFLAGS) hash.c
|
$(CC) $(COUT)hash$(OBJSUFFICS) $(CFLAGS) hash.c
|
||||||
|
|
||||||
@ -150,6 +159,6 @@ $(BUILDDIR)3proxy_crypt$(EXESUFFICS): md4$(OBJSUFFICS) blake2$(OBJSUFFICS) 3prox
|
|||||||
stringtable$(OBJSUFFICS): stringtable.c
|
stringtable$(OBJSUFFICS): stringtable.c
|
||||||
$(CC) $(COUT)stringtable$(OBJSUFFICS) $(CFLAGS) stringtable.c
|
$(CC) $(COUT)stringtable$(OBJSUFFICS) $(CFLAGS) stringtable.c
|
||||||
|
|
||||||
$(BUILDDIR)3proxy$(EXESUFFICS): 3proxy$(OBJSUFFICS) mainfunc$(OBJSUFFICS) srvproxy$(OBJSUFFICS) srvpop3p$(OBJSUFFICS) srvsmtpp$(OBJSUFFICS) srvftppr$(OBJSUFFICS) srvsocks$(OBJSUFFICS) srvtcppm$(OBJSUFFICS) srvtlspr$(OBJSUFFICS) srvauto$(OBJSUFFICS) srvudppm$(OBJSUFFICS) sockmap$(OBJSUFFICS) sockgetchar$(OBJSUFFICS) common$(OBJSUFFICS) auth$(OBJSUFFICS) authradius$(OBJSUFFICS) hash$(OBJSUFFICS) resolve$(OBJSUFFICS) sql$(OBJSUFFICS) conf$(OBJSUFFICS) log$(OBJSUFFICS) datatypes$(OBJSUFFICS) md4$(OBJSUFFICS) md5$(OBJSUFFICS) blake2$(OBJSUFFICS) 3proxy_crypt$(OBJSUFFICS) base64$(OBJSUFFICS) ftp$(OBJSUFFICS) stringtable$(OBJSUFFICS) srvwebadmin$(OBJSUFFICS) srvdnspr$(OBJSUFFICS) plugins$(OBJSUFFICS) $(COMPATLIBS) $(VERSIONDEP)
|
$(BUILDDIR)3proxy$(EXESUFFICS): 3proxy$(OBJSUFFICS) mainfunc$(OBJSUFFICS) srvproxy$(OBJSUFFICS) srvpop3p$(OBJSUFFICS) srvsmtpp$(OBJSUFFICS) srvftppr$(OBJSUFFICS) srvsocks$(OBJSUFFICS) srvtcppm$(OBJSUFFICS) srvtlspr$(OBJSUFFICS) srvauto$(OBJSUFFICS) srvudppm$(OBJSUFFICS) sockmap$(OBJSUFFICS) sockgetchar$(OBJSUFFICS) common$(OBJSUFFICS) auth$(OBJSUFFICS) acl$(OBJSUFFICS) limiter$(OBJSUFFICS) redirect$(OBJSUFFICS) authradius$(OBJSUFFICS) hash$(OBJSUFFICS) resolve$(OBJSUFFICS) sql$(OBJSUFFICS) conf$(OBJSUFFICS) log$(OBJSUFFICS) datatypes$(OBJSUFFICS) md4$(OBJSUFFICS) md5$(OBJSUFFICS) blake2$(OBJSUFFICS) 3proxy_crypt$(OBJSUFFICS) base64$(OBJSUFFICS) ftp$(OBJSUFFICS) stringtable$(OBJSUFFICS) srvwebadmin$(OBJSUFFICS) srvdnspr$(OBJSUFFICS) plugins$(OBJSUFFICS) $(COMPATLIBS) $(VERSIONDEP)
|
||||||
$(LN) $(LNOUT)$(BUILDDIR)3proxy$(EXESUFFICS) $(LDFLAGS) $(VERFILE) 3proxy$(OBJSUFFICS) mainfunc$(OBJSUFFICS) auth$(OBJSUFFICS) authradius$(OBJSUFFICS) hash$(OBJSUFFICS) resolve$(OBJSUFFICS) sql$(OBJSUFFICS) conf$(OBJSUFFICS) datatypes$(OBJSUFFICS) srvauto$(OBJSUFFICS) srvproxy$(OBJSUFFICS) srvpop3p$(OBJSUFFICS) srvsmtpp$(OBJSUFFICS) srvftppr$(OBJSUFFICS) srvsocks$(OBJSUFFICS) srvtcppm$(OBJSUFFICS) srvtlspr$(OBJSUFFICS) srvudppm$(OBJSUFFICS) sockmap$(OBJSUFFICS) sockgetchar$(OBJSUFFICS) common$(OBJSUFFICS) log$(OBJSUFFICS) 3proxy_crypt$(OBJSUFFICS) md5$(OBJSUFFICS) blake2$(OBJSUFFICS) md4$(OBJSUFFICS) base64$(OBJSUFFICS) ftp$(OBJSUFFICS) stringtable$(OBJSUFFICS) srvwebadmin$(OBJSUFFICS) srvdnspr$(OBJSUFFICS) plugins$(OBJSUFFICS) $(COMPATLIBS) $(LIBS)
|
$(LN) $(LNOUT)$(BUILDDIR)3proxy$(EXESUFFICS) $(LDFLAGS) $(VERFILE) 3proxy$(OBJSUFFICS) mainfunc$(OBJSUFFICS) auth$(OBJSUFFICS) acl$(OBJSUFFICS) limiter$(OBJSUFFICS) redirect$(OBJSUFFICS) authradius$(OBJSUFFICS) hash$(OBJSUFFICS) resolve$(OBJSUFFICS) sql$(OBJSUFFICS) conf$(OBJSUFFICS) datatypes$(OBJSUFFICS) srvauto$(OBJSUFFICS) srvproxy$(OBJSUFFICS) srvpop3p$(OBJSUFFICS) srvsmtpp$(OBJSUFFICS) srvftppr$(OBJSUFFICS) srvsocks$(OBJSUFFICS) srvtcppm$(OBJSUFFICS) srvtlspr$(OBJSUFFICS) srvudppm$(OBJSUFFICS) sockmap$(OBJSUFFICS) sockgetchar$(OBJSUFFICS) common$(OBJSUFFICS) log$(OBJSUFFICS) 3proxy_crypt$(OBJSUFFICS) md5$(OBJSUFFICS) blake2$(OBJSUFFICS) md4$(OBJSUFFICS) base64$(OBJSUFFICS) ftp$(OBJSUFFICS) stringtable$(OBJSUFFICS) srvwebadmin$(OBJSUFFICS) srvdnspr$(OBJSUFFICS) plugins$(OBJSUFFICS) $(COMPATLIBS) $(LIBS)
|
||||||
|
|
||||||
|
|||||||
168
src/acl.c
Normal file
168
src/acl.c
Normal file
@ -0,0 +1,168 @@
|
|||||||
|
/*
|
||||||
|
3APA3A simplest proxy server
|
||||||
|
(c) 2002-2021 by Vladimir Dubrovin <3proxy@3proxy.org>
|
||||||
|
|
||||||
|
please read License Agreement
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include "proxy.h"
|
||||||
|
|
||||||
|
int IPInentry(struct sockaddr *sa, struct iplist *ipentry){
|
||||||
|
int addrlen;
|
||||||
|
unsigned char *ip, *ipf, *ipt;
|
||||||
|
|
||||||
|
|
||||||
|
if(!sa || ! ipentry || *SAFAMILY(sa) != ipentry->family) return 0;
|
||||||
|
|
||||||
|
ip = (unsigned char *)SAADDR(sa);
|
||||||
|
ipf = (unsigned char *)&ipentry->ip_from;
|
||||||
|
ipt = (unsigned char *)&ipentry->ip_to;
|
||||||
|
|
||||||
|
|
||||||
|
addrlen = SAADDRLEN(sa);
|
||||||
|
|
||||||
|
if(memcmp(ip,ipf,addrlen) < 0 || memcmp(ip,ipt,addrlen) > 0) return 0;
|
||||||
|
return 1;
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
int ACLmatches(struct ace* acentry, struct clientparam * param){
|
||||||
|
struct userlist * userentry;
|
||||||
|
struct iplist *ipentry;
|
||||||
|
struct portlist *portentry;
|
||||||
|
struct period *periodentry;
|
||||||
|
unsigned char * username;
|
||||||
|
struct hostname * hstentry=NULL;
|
||||||
|
int i;
|
||||||
|
int match = 0;
|
||||||
|
|
||||||
|
username = param->username?param->username:(unsigned char *)"-";
|
||||||
|
if(acentry->src) {
|
||||||
|
for(ipentry = acentry->src; ipentry; ipentry = ipentry->next)
|
||||||
|
if(IPInentry((struct sockaddr *)¶m->sincr, ipentry)) {
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if(!ipentry) return 0;
|
||||||
|
}
|
||||||
|
if((acentry->dst && (!SAISNULL(¶m->req) || param->operation == UDPASSOC || param->operation==BIND)) || (acentry->dstnames && param->hostname)) {
|
||||||
|
for(ipentry = acentry->dst; ipentry; ipentry = ipentry->next)
|
||||||
|
if(IPInentry((struct sockaddr *)¶m->req, ipentry)) {
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if(!ipentry) {
|
||||||
|
if(acentry->dstnames && param->hostname){
|
||||||
|
for(i=0; param->hostname[i]; i++){
|
||||||
|
param->hostname[i] = tolower(param->hostname[i]);
|
||||||
|
}
|
||||||
|
while(i > 5 && param->hostname[i-1] == '.') param->hostname[i-1] = 0;
|
||||||
|
for(hstentry = acentry->dstnames; hstentry; hstentry = hstentry->next){
|
||||||
|
int lname, lhost;
|
||||||
|
switch(hstentry->matchtype){
|
||||||
|
case 0:
|
||||||
|
#ifndef _WIN32
|
||||||
|
if(strcasestr((char *)param->hostname, (char *)hstentry->name)) match = 1;
|
||||||
|
#else
|
||||||
|
if(strstr((char *)param->hostname, (char *)hstentry->name)) match = 1;
|
||||||
|
#endif
|
||||||
|
break;
|
||||||
|
|
||||||
|
case 1:
|
||||||
|
if(!strncasecmp((char *)param->hostname, (char *)hstentry->name, strlen((char *)hstentry->name)))
|
||||||
|
match = 1;
|
||||||
|
break;
|
||||||
|
|
||||||
|
case 2:
|
||||||
|
lname = strlen((char *)hstentry->name);
|
||||||
|
lhost = strlen((char *)param->hostname);
|
||||||
|
if(lhost > lname){
|
||||||
|
if(!strncasecmp((char *)param->hostname + (lhost - lname),
|
||||||
|
(char *)hstentry->name,
|
||||||
|
lname))
|
||||||
|
match = 1;
|
||||||
|
}
|
||||||
|
break;
|
||||||
|
|
||||||
|
default:
|
||||||
|
if(!strcasecmp((char *)param->hostname, (char *)hstentry->name)) match = 1;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if(match) break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(!ipentry && !hstentry) return 0;
|
||||||
|
}
|
||||||
|
if(acentry->ports && (*SAPORT(¶m->req) || param->operation == UDPASSOC || param->operation == BIND)) {
|
||||||
|
for (portentry = acentry->ports; portentry; portentry = portentry->next)
|
||||||
|
if(ntohs(*SAPORT(¶m->req)) >= portentry->startport &&
|
||||||
|
ntohs(*SAPORT(¶m->req)) <= portentry->endport) {
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if(!portentry) return 0;
|
||||||
|
}
|
||||||
|
if(acentry->wdays){
|
||||||
|
if(!(acentry -> wdays & wday)) return 0;
|
||||||
|
}
|
||||||
|
if(acentry->periods){
|
||||||
|
int start_time = (int)(param->time_start - basetime);
|
||||||
|
for(periodentry = acentry->periods; periodentry; periodentry = periodentry -> next)
|
||||||
|
if(start_time >= periodentry->fromtime && start_time < periodentry->totime){
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if(!periodentry) return 0;
|
||||||
|
}
|
||||||
|
if(acentry->users){
|
||||||
|
for(userentry = acentry->users; userentry; userentry = userentry->next)
|
||||||
|
if(!strcmp((char *)username, (char *)userentry->user)){
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if(!userentry) return 0;
|
||||||
|
}
|
||||||
|
if(acentry->operation) {
|
||||||
|
if((acentry->operation & param->operation) != param->operation){
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(acentry->weight && (acentry->weight < param->weight)) return 0;
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
int checkACL(struct clientparam * param){
|
||||||
|
struct ace* acentry;
|
||||||
|
|
||||||
|
if(!param->srv->acl) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
for(acentry = param->srv->acl; acentry; acentry = acentry->next) {
|
||||||
|
if(ACLmatches(acentry, param)) {
|
||||||
|
param->nolog = acentry->nolog;
|
||||||
|
param->weight = acentry->weight;
|
||||||
|
if(acentry->action == 2) {
|
||||||
|
struct ace dup;
|
||||||
|
int res=60,i=0;
|
||||||
|
|
||||||
|
if(param->operation < 256 && !(param->operation & CONNECT)){
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
if(param->redirected && acentry->chains && SAISNULL(&acentry->chains->addr) && !*SAPORT(&acentry->chains->addr)) {
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
if(param->remsock != INVALID_SOCKET) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
for(; i < conf.parentretries; i++){
|
||||||
|
dup = *acentry;
|
||||||
|
res = handleredirect(param, &dup);
|
||||||
|
if(!res) break;
|
||||||
|
if(param->remsock != INVALID_SOCKET) param->srv->so._closesocket(param->sostate, param->remsock);
|
||||||
|
param->remsock = INVALID_SOCKET;
|
||||||
|
}
|
||||||
|
return res;
|
||||||
|
}
|
||||||
|
return acentry->action;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return 3;
|
||||||
|
}
|
||||||
710
src/auth.c
710
src/auth.c
@ -8,676 +8,7 @@
|
|||||||
|
|
||||||
#include "proxy.h"
|
#include "proxy.h"
|
||||||
|
|
||||||
static FILTER_ACTION (*ext_ssl_parent)(struct clientparam * param) = NULL;
|
void initbandlims(struct clientparam *param);
|
||||||
|
|
||||||
static FILTER_ACTION ssl_parent(struct clientparam * param){
|
|
||||||
if(ext_ssl_parent) return ext_ssl_parent(param);
|
|
||||||
ext_ssl_parent = pluginlink.findbyname("ssl_parent");
|
|
||||||
if(ext_ssl_parent) return ext_ssl_parent(param);
|
|
||||||
return REJECT;
|
|
||||||
}
|
|
||||||
|
|
||||||
int clientnegotiate(struct chain * redir, struct clientparam * param, struct sockaddr * addr, unsigned char * hostname){
|
|
||||||
unsigned char *buf;
|
|
||||||
unsigned char *username;
|
|
||||||
int res;
|
|
||||||
int len=0;
|
|
||||||
unsigned char * user, *pass;
|
|
||||||
|
|
||||||
|
|
||||||
user = redir->extuser;
|
|
||||||
pass = redir->extpass;
|
|
||||||
if (!param->srvbufsize){
|
|
||||||
param->srvbufsize = SRVBUFSIZE;
|
|
||||||
param->srvbuf = myalloc(param->srvbufsize);
|
|
||||||
if(!param->srvbuf) return 21;
|
|
||||||
}
|
|
||||||
buf = param->srvbuf;
|
|
||||||
username = buf + 2048;
|
|
||||||
if(user) {
|
|
||||||
if (*user == '*') {
|
|
||||||
if(!param->username) return 4;
|
|
||||||
user = param->username;
|
|
||||||
pass = param->password;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(redir->secure){
|
|
||||||
res = ssl_parent(param);
|
|
||||||
if(res != PASS) return res;
|
|
||||||
}
|
|
||||||
switch(redir->type){
|
|
||||||
case R_TCP:
|
|
||||||
case R_HTTP:
|
|
||||||
return 0;
|
|
||||||
case R_CONNECT:
|
|
||||||
case R_CONNECTP:
|
|
||||||
{
|
|
||||||
len = sprintf((char *)buf, "CONNECT ");
|
|
||||||
if(redir->type == R_CONNECTP && hostname) {
|
|
||||||
char * needreplace;
|
|
||||||
needreplace = strchr((char *)hostname, ':');
|
|
||||||
if(needreplace) buf[len++] = '[';
|
|
||||||
len += sprintf((char *)buf + len, "%.256s", (char *)hostname);
|
|
||||||
if(needreplace) buf[len++] = ']';
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
if(*SAFAMILY(addr) == AF_INET6) buf[len++] = '[';
|
|
||||||
len += myinet_ntop(*SAFAMILY(addr), SAADDR(addr), (char *)buf+len, 256);
|
|
||||||
if(*SAFAMILY(addr) == AF_INET6) buf[len++] = ']';
|
|
||||||
}
|
|
||||||
len += sprintf((char *)buf + len,
|
|
||||||
":%hu HTTP/1.0\r\nConnection: keep-alive\r\n", ntohs(*SAPORT(addr)));
|
|
||||||
if(user){
|
|
||||||
len += sprintf((char *)buf + len, "Proxy-Authorization: Basic ");
|
|
||||||
sprintf((char *)username, "%.128s:%.128s", user, pass?pass:(unsigned char *)"");
|
|
||||||
en64(username, buf+len, (int)strlen((char *)username));
|
|
||||||
len = (int)strlen((char *)buf);
|
|
||||||
len += sprintf((char *)buf + len, "\r\n");
|
|
||||||
}
|
|
||||||
len += sprintf((char *)buf + len, "\r\n");
|
|
||||||
if(socksend(param, param->remsock, buf, len, conf.timeouts[CHAIN_TO]) != (int)strlen((char *)buf))
|
|
||||||
return 31;
|
|
||||||
param->statssrv64+=len;
|
|
||||||
param->nwrites++;
|
|
||||||
if((res = sockgetlinebuf(param, SERVER,buf,13,'\n',conf.timeouts[CHAIN_TO])) < 13)
|
|
||||||
return 32;
|
|
||||||
if(buf[9] != '2') return 33;
|
|
||||||
while((res = sockgetlinebuf(param, SERVER,buf,1023,'\n', conf.timeouts[CHAIN_TO])) > 2);
|
|
||||||
if(res <= 0) return 34;
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
case R_SOCKS4:
|
|
||||||
case R_SOCKS4P:
|
|
||||||
case R_SOCKS4B:
|
|
||||||
{
|
|
||||||
|
|
||||||
if(*SAFAMILY(addr) != AF_INET) return 44;
|
|
||||||
buf[0] = 4;
|
|
||||||
buf[1] = 1;
|
|
||||||
memcpy(buf+2, SAPORT(addr), 2);
|
|
||||||
if(redir->type == R_SOCKS4P && hostname) {
|
|
||||||
buf[4] = buf[5] = buf[6] = 0;
|
|
||||||
buf[7] = 3;
|
|
||||||
}
|
|
||||||
else memcpy(buf+4, SAADDR(addr), 4);
|
|
||||||
if(!user)user = (unsigned char *)"anonymous";
|
|
||||||
len = (int)strlen((char *)user) + 1;
|
|
||||||
memcpy(buf+8, user, len);
|
|
||||||
len += 8;
|
|
||||||
if(redir->type == R_SOCKS4P && hostname) {
|
|
||||||
int hostnamelen;
|
|
||||||
|
|
||||||
hostnamelen = (int)strlen((char *)hostname) + 1;
|
|
||||||
if(hostnamelen > 255) hostnamelen = 255;
|
|
||||||
memcpy(buf+len, hostname, hostnamelen);
|
|
||||||
len += hostnamelen;
|
|
||||||
}
|
|
||||||
if(socksend(param, param->remsock, buf, len, conf.timeouts[CHAIN_TO]) < len){
|
|
||||||
return 41;
|
|
||||||
}
|
|
||||||
param->statssrv64+=len;
|
|
||||||
param->nwrites++;
|
|
||||||
if((len = sockgetlinebuf(param, SERVER, buf, (redir->type == R_SOCKS4B)? 3:8, EOF, conf.timeouts[CHAIN_TO])) != ((redir->type == R_SOCKS4B)? 3:8)){
|
|
||||||
return 42;
|
|
||||||
}
|
|
||||||
if(buf[1] != 90) {
|
|
||||||
return 43;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
return 0;
|
|
||||||
|
|
||||||
case R_SOCKS5:
|
|
||||||
case R_SOCKS5P:
|
|
||||||
case R_SOCKS5B:
|
|
||||||
{
|
|
||||||
int inbuf = 0;
|
|
||||||
buf[0] = 5;
|
|
||||||
buf[1] = 1;
|
|
||||||
buf[2] = user? 2 : 0;
|
|
||||||
if(socksend(param, param->remsock, buf, 3, conf.timeouts[CHAIN_TO]) != 3){
|
|
||||||
return 51;
|
|
||||||
}
|
|
||||||
param->statssrv64+=len;
|
|
||||||
param->nwrites++;
|
|
||||||
if(sockgetlinebuf(param, SERVER, buf, 2, EOF, conf.timeouts[CHAIN_TO]) != 2){
|
|
||||||
return 52;
|
|
||||||
}
|
|
||||||
if(buf[0] != 5) {
|
|
||||||
return 53;
|
|
||||||
}
|
|
||||||
if(buf[1] != 0 && !(buf[1] == 2 && user)){
|
|
||||||
return 54;
|
|
||||||
}
|
|
||||||
if(buf[1] == 2){
|
|
||||||
buf[inbuf++] = 1;
|
|
||||||
buf[inbuf] = (unsigned char)strlen((char *)user);
|
|
||||||
memcpy(buf+inbuf+1, user, buf[inbuf]);
|
|
||||||
inbuf += buf[inbuf] + 1;
|
|
||||||
buf[inbuf] = pass?(unsigned char)strlen((char *)pass):0;
|
|
||||||
if(pass)memcpy(buf+inbuf+1, pass, buf[inbuf]);
|
|
||||||
inbuf += buf[inbuf] + 1;
|
|
||||||
if(socksend(param, param->remsock, buf, inbuf, conf.timeouts[CHAIN_TO]) != inbuf){
|
|
||||||
return 51;
|
|
||||||
}
|
|
||||||
param->statssrv64+=inbuf;
|
|
||||||
param->nwrites++;
|
|
||||||
if(sockgetlinebuf(param, SERVER, buf, 2, EOF, 60) != 2){
|
|
||||||
return 55;
|
|
||||||
}
|
|
||||||
if(buf[0] != 1 || buf[1] != 0) {
|
|
||||||
return 56;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
buf[0] = 5;
|
|
||||||
buf[1] = 1;
|
|
||||||
buf[2] = 0;
|
|
||||||
if(redir->type == R_SOCKS5P && hostname) {
|
|
||||||
buf[3] = 3;
|
|
||||||
len = (int)strlen((char *)hostname);
|
|
||||||
if(len > 255) len = 255;
|
|
||||||
buf[4] = len;
|
|
||||||
memcpy(buf + 5, hostname, len);
|
|
||||||
len += 5;
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
len = 3;
|
|
||||||
buf[len++] = (*SAFAMILY(addr) == AF_INET)? 1 : 4;
|
|
||||||
memcpy(buf+len, SAADDR(addr), SAADDRLEN(addr));
|
|
||||||
len += SAADDRLEN(addr);
|
|
||||||
}
|
|
||||||
memcpy(buf+len, SAPORT(addr), 2);
|
|
||||||
len += 2;
|
|
||||||
if(socksend(param, param->remsock, buf, len, conf.timeouts[CHAIN_TO]) != len){
|
|
||||||
return 51;
|
|
||||||
}
|
|
||||||
param->statssrv64+=len;
|
|
||||||
param->nwrites++;
|
|
||||||
if(sockgetlinebuf(param, SERVER, buf, 4, EOF, conf.timeouts[CHAIN_TO]) != 4){
|
|
||||||
return 57;
|
|
||||||
}
|
|
||||||
if(buf[0] != 5) {
|
|
||||||
return 53;
|
|
||||||
}
|
|
||||||
if(buf[1] != 0) {
|
|
||||||
return 60 + (buf[1] % 10);
|
|
||||||
}
|
|
||||||
switch (buf[3]) {
|
|
||||||
case 1:
|
|
||||||
if (redir->type == R_SOCKS5B || sockgetlinebuf(param, SERVER, buf, 6, EOF, conf.timeouts[CHAIN_TO]) == 6)
|
|
||||||
break;
|
|
||||||
return 59;
|
|
||||||
case 3:
|
|
||||||
if (sockgetlinebuf(param, SERVER, buf, 1, EOF, conf.timeouts[CHAIN_TO]) != 1) return 59;
|
|
||||||
len = (unsigned char)buf[0];
|
|
||||||
if (sockgetlinebuf(param, SERVER, buf, len + 2, EOF, conf.timeouts[CHAIN_TO]) != len + 2) return 59;
|
|
||||||
break;
|
|
||||||
case 4:
|
|
||||||
if (sockgetlinebuf(param, SERVER, buf, 18, EOF, conf.timeouts[CHAIN_TO]) == 18)
|
|
||||||
break;
|
|
||||||
return 59;
|
|
||||||
default:
|
|
||||||
return 58;
|
|
||||||
}
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
default:
|
|
||||||
|
|
||||||
return 30;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
int handleredirect(struct clientparam * param, struct ace * acentry){
|
|
||||||
int connected = 0;
|
|
||||||
int weight = 1000;
|
|
||||||
int res;
|
|
||||||
int done = 0;
|
|
||||||
int ha = 0;
|
|
||||||
struct chain * cur;
|
|
||||||
struct chain * redir = NULL;
|
|
||||||
int r2;
|
|
||||||
|
|
||||||
if(param->remsock != INVALID_SOCKET) {
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
if(SAISNULL(¶m->req) || !*SAPORT(¶m->req)) {
|
|
||||||
return 100;
|
|
||||||
}
|
|
||||||
|
|
||||||
r2 = (myrand(param, sizeof(struct clientparam))%1000);
|
|
||||||
|
|
||||||
for(cur = acentry->chains; cur; cur=cur->next){
|
|
||||||
if(((weight = weight - cur->weight) > r2)|| done) {
|
|
||||||
if(weight <= 0) {
|
|
||||||
weight += 1000;
|
|
||||||
done = 0;
|
|
||||||
r2 = (myrand(param, sizeof(struct clientparam))%1000);
|
|
||||||
}
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
param->redirected++;
|
|
||||||
done = 1;
|
|
||||||
if(weight <= 0) {
|
|
||||||
weight += 1000;
|
|
||||||
done = 0;
|
|
||||||
r2 = (myrand(param, sizeof(struct clientparam))%1000);
|
|
||||||
}
|
|
||||||
if(!connected){
|
|
||||||
if(cur->type == R_EXTIP){
|
|
||||||
param->sinsl = cur->addr;
|
|
||||||
if(SAISNULL(¶m->sinsl) && (*SAFAMILY(¶m->sincr) == AF_INET || *SAFAMILY(¶m->sincr) == AF_INET6))param->sinsl = param->sincr;
|
|
||||||
#ifndef NOIPV6
|
|
||||||
else if(cur->cidr && *SAFAMILY(¶m->sinsl) == AF_INET6){
|
|
||||||
uint16_t c;
|
|
||||||
int i;
|
|
||||||
|
|
||||||
for(i = 0; i < 8; i++){
|
|
||||||
if(i==4)myrand(¶m->sincr, sizeof(param->sincr));
|
|
||||||
else if(i==6) myrand(¶m->req, sizeof(param->req));
|
|
||||||
|
|
||||||
if(i*16 >= cur->cidr) ((uint16_t *)SAADDR(¶m->sinsl))[i] |= rand();
|
|
||||||
else if ((i+1)*16 > cur->cidr){
|
|
||||||
c = rand();
|
|
||||||
c >>= (cur->cidr - (i*16));
|
|
||||||
c |= ntohs(((uint16_t *)SAADDR(¶m->sinsl))[i]);
|
|
||||||
((uint16_t *)SAADDR(¶m->sinsl))[i] = htons(c);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
#endif
|
|
||||||
if(cur->next)continue;
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
else if(SAISNULL(&cur->addr) && !*SAPORT(&cur->addr)){
|
|
||||||
int i;
|
|
||||||
if(cur->extuser){
|
|
||||||
if(param->extusername)
|
|
||||||
myfree(param->extusername);
|
|
||||||
param->extusername = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->username)? param->username : cur->extuser));
|
|
||||||
if(cur->extpass){
|
|
||||||
if(param->extpassword)
|
|
||||||
myfree(param->extpassword);
|
|
||||||
param->extpassword = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->password)?param->password : cur->extpass));
|
|
||||||
}
|
|
||||||
if(*cur->extuser == '*' && !param->username) return 4;
|
|
||||||
}
|
|
||||||
|
|
||||||
for(i=0; redirs[i].name; i++){
|
|
||||||
if(cur->type == redirs[i].redir) {
|
|
||||||
param->redirectfunc = redirs[i].func;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(cur->type == R_HA){
|
|
||||||
ha = 1;
|
|
||||||
}
|
|
||||||
if(cur->next)continue;
|
|
||||||
if(!ha) return 0;
|
|
||||||
}
|
|
||||||
else if(!*SAPORT(&cur->addr) && !SAISNULL(&cur->addr)) {
|
|
||||||
uint16_t port = *SAPORT(¶m->sinsr);
|
|
||||||
param->sinsr = cur->addr;
|
|
||||||
*SAPORT(¶m->sinsr) = port;
|
|
||||||
}
|
|
||||||
else if(SAISNULL(&cur->addr) && *SAPORT(&cur->addr)) *SAPORT(¶m->sinsr) = *SAPORT(&cur->addr);
|
|
||||||
else {
|
|
||||||
param->sinsr = cur->addr;
|
|
||||||
}
|
|
||||||
|
|
||||||
if((res = alwaysauth(param))){
|
|
||||||
return (res >= 10)? res : 60+res;
|
|
||||||
}
|
|
||||||
if(ha) {
|
|
||||||
char buf[128];
|
|
||||||
int len;
|
|
||||||
len = sprintf(buf, "PROXY %s ",
|
|
||||||
*SAFAMILY(¶m->sincr) == AF_INET6 ? "TCP6" : "TCP4");
|
|
||||||
len += myinet_ntop(*SAFAMILY(¶m->sincr), SAADDR(¶m->sincr), buf+len, sizeof(param->sincr));
|
|
||||||
buf[len++] = ' ';
|
|
||||||
len += myinet_ntop(*SAFAMILY(¶m->sincl), SAADDR(¶m->sincl), buf+len, sizeof(param->sincl));
|
|
||||||
len += sprintf(buf + len, " %hu %hu\r\n",
|
|
||||||
ntohs(*SAPORT(¶m->sincr)),
|
|
||||||
ntohs(*SAPORT(¶m->sincl))
|
|
||||||
);
|
|
||||||
if(socksend(param, param->remsock, (unsigned char *)buf, len, conf.timeouts[CHAIN_TO])!=len) return 39;
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
res = (redir)?clientnegotiate(redir, param, (struct sockaddr *)&cur->addr, cur->exthost):0;
|
|
||||||
if(res) return res;
|
|
||||||
}
|
|
||||||
redir = cur;
|
|
||||||
param->redirtype = redir->type;
|
|
||||||
if(redir->type == R_TCP || redir->type ==R_HTTP) {
|
|
||||||
if(cur->extuser){
|
|
||||||
if(*cur -> extuser == '*' && !param->username) return 4;
|
|
||||||
if(param->extusername)
|
|
||||||
myfree(param->extusername);
|
|
||||||
param->extusername = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->username)? param->username : cur->extuser));
|
|
||||||
if(cur->extpass){
|
|
||||||
if(param->extpassword)
|
|
||||||
myfree(param->extpassword);
|
|
||||||
param->extpassword = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->password)?param->password : cur->extpass));
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(redir->secure) return ssl_parent(param);
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
connected = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
if(!connected || !redir) return 0;
|
|
||||||
return clientnegotiate(redir, param, (struct sockaddr *)¶m->req, param->hostname);
|
|
||||||
}
|
|
||||||
|
|
||||||
int IPInentry(struct sockaddr *sa, struct iplist *ipentry){
|
|
||||||
int addrlen;
|
|
||||||
unsigned char *ip, *ipf, *ipt;
|
|
||||||
|
|
||||||
|
|
||||||
if(!sa || ! ipentry || *SAFAMILY(sa) != ipentry->family) return 0;
|
|
||||||
|
|
||||||
ip = (unsigned char *)SAADDR(sa);
|
|
||||||
ipf = (unsigned char *)&ipentry->ip_from;
|
|
||||||
ipt = (unsigned char *)&ipentry->ip_to;
|
|
||||||
|
|
||||||
|
|
||||||
addrlen = SAADDRLEN(sa);
|
|
||||||
|
|
||||||
if(memcmp(ip,ipf,addrlen) < 0 || memcmp(ip,ipt,addrlen) > 0) return 0;
|
|
||||||
return 1;
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
int ACLmatches(struct ace* acentry, struct clientparam * param){
|
|
||||||
struct userlist * userentry;
|
|
||||||
struct iplist *ipentry;
|
|
||||||
struct portlist *portentry;
|
|
||||||
struct period *periodentry;
|
|
||||||
unsigned char * username;
|
|
||||||
struct hostname * hstentry=NULL;
|
|
||||||
int i;
|
|
||||||
int match = 0;
|
|
||||||
|
|
||||||
username = param->username?param->username:(unsigned char *)"-";
|
|
||||||
if(acentry->src) {
|
|
||||||
for(ipentry = acentry->src; ipentry; ipentry = ipentry->next)
|
|
||||||
if(IPInentry((struct sockaddr *)¶m->sincr, ipentry)) {
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
if(!ipentry) return 0;
|
|
||||||
}
|
|
||||||
if((acentry->dst && (!SAISNULL(¶m->req) || param->operation == UDPASSOC || param->operation==BIND)) || (acentry->dstnames && param->hostname)) {
|
|
||||||
for(ipentry = acentry->dst; ipentry; ipentry = ipentry->next)
|
|
||||||
if(IPInentry((struct sockaddr *)¶m->req, ipentry)) {
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
if(!ipentry) {
|
|
||||||
if(acentry->dstnames && param->hostname){
|
|
||||||
for(i=0; param->hostname[i]; i++){
|
|
||||||
param->hostname[i] = tolower(param->hostname[i]);
|
|
||||||
}
|
|
||||||
while(i > 5 && param->hostname[i-1] == '.') param->hostname[i-1] = 0;
|
|
||||||
for(hstentry = acentry->dstnames; hstentry; hstentry = hstentry->next){
|
|
||||||
int lname, lhost;
|
|
||||||
switch(hstentry->matchtype){
|
|
||||||
case 0:
|
|
||||||
#ifndef _WIN32
|
|
||||||
if(strcasestr((char *)param->hostname, (char *)hstentry->name)) match = 1;
|
|
||||||
#else
|
|
||||||
if(strstr((char *)param->hostname, (char *)hstentry->name)) match = 1;
|
|
||||||
#endif
|
|
||||||
break;
|
|
||||||
|
|
||||||
case 1:
|
|
||||||
if(!strncasecmp((char *)param->hostname, (char *)hstentry->name, strlen((char *)hstentry->name)))
|
|
||||||
match = 1;
|
|
||||||
break;
|
|
||||||
|
|
||||||
case 2:
|
|
||||||
lname = strlen((char *)hstentry->name);
|
|
||||||
lhost = strlen((char *)param->hostname);
|
|
||||||
if(lhost > lname){
|
|
||||||
if(!strncasecmp((char *)param->hostname + (lhost - lname),
|
|
||||||
(char *)hstentry->name,
|
|
||||||
lname))
|
|
||||||
match = 1;
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
|
|
||||||
default:
|
|
||||||
if(!strcasecmp((char *)param->hostname, (char *)hstentry->name)) match = 1;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
if(match) break;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(!ipentry && !hstentry) return 0;
|
|
||||||
}
|
|
||||||
if(acentry->ports && (*SAPORT(¶m->req) || param->operation == UDPASSOC || param->operation == BIND)) {
|
|
||||||
for (portentry = acentry->ports; portentry; portentry = portentry->next)
|
|
||||||
if(ntohs(*SAPORT(¶m->req)) >= portentry->startport &&
|
|
||||||
ntohs(*SAPORT(¶m->req)) <= portentry->endport) {
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
if(!portentry) return 0;
|
|
||||||
}
|
|
||||||
if(acentry->wdays){
|
|
||||||
if(!(acentry -> wdays & wday)) return 0;
|
|
||||||
}
|
|
||||||
if(acentry->periods){
|
|
||||||
int start_time = (int)(param->time_start - basetime);
|
|
||||||
for(periodentry = acentry->periods; periodentry; periodentry = periodentry -> next)
|
|
||||||
if(start_time >= periodentry->fromtime && start_time < periodentry->totime){
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
if(!periodentry) return 0;
|
|
||||||
}
|
|
||||||
if(acentry->users){
|
|
||||||
for(userentry = acentry->users; userentry; userentry = userentry->next)
|
|
||||||
if(!strcmp((char *)username, (char *)userentry->user)){
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
if(!userentry) return 0;
|
|
||||||
}
|
|
||||||
if(acentry->operation) {
|
|
||||||
if((acentry->operation & param->operation) != param->operation){
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(acentry->weight && (acentry->weight < param->weight)) return 0;
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
int startconnlims (struct clientparam *param){
|
|
||||||
struct connlim * ce;
|
|
||||||
time_t delta;
|
|
||||||
uint64_t rating;
|
|
||||||
int ret = 0;
|
|
||||||
|
|
||||||
param->connlim = 1;
|
|
||||||
pthread_mutex_lock(&connlim_mutex);
|
|
||||||
for(ce = conf.connlimiter; ce; ce = ce->next) {
|
|
||||||
if(ACLmatches(ce->ace, param)){
|
|
||||||
if(ce->ace->action == NOCONNLIM)break;
|
|
||||||
if(!ce->period){
|
|
||||||
if(ce->rate <= ce->rating) {
|
|
||||||
ret = 1;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
ce->rating++;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
delta = conf.time - ce->basetime;
|
|
||||||
if(ce->period <= delta || ce->basetime > conf.time){
|
|
||||||
ce->basetime = conf.time;
|
|
||||||
ce->rating = 0x100000;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
rating = delta? ((ce->rating * (ce->period - delta)) / ce->period) + 0x100000 : ce->rating + 0x100000;
|
|
||||||
if (rating > (ce->rate<<20)) {
|
|
||||||
ret = 2;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
ce->rating = rating;
|
|
||||||
ce->basetime = conf.time;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
pthread_mutex_unlock(&connlim_mutex);
|
|
||||||
return ret;
|
|
||||||
}
|
|
||||||
|
|
||||||
void stopconnlims (struct clientparam *param){
|
|
||||||
struct connlim * ce;
|
|
||||||
|
|
||||||
pthread_mutex_lock(&connlim_mutex);
|
|
||||||
for(ce = conf.connlimiter; ce; ce = ce->next) {
|
|
||||||
if(ACLmatches(ce->ace, param)){
|
|
||||||
if(ce->ace->action == NOCONNLIM)break;
|
|
||||||
if(!ce->period && ce->rating){
|
|
||||||
ce->rating--;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
pthread_mutex_unlock(&connlim_mutex);
|
|
||||||
}
|
|
||||||
|
|
||||||
static void initbandlims (struct clientparam *param){
|
|
||||||
struct bandlim * be;
|
|
||||||
int i;
|
|
||||||
|
|
||||||
param->bandlimfunc = NULL;
|
|
||||||
param->bandlims[0] = NULL;
|
|
||||||
param->bandlimsout[0] = NULL;
|
|
||||||
if(!conf.bandlimfunc || (!conf.bandlimiter && !conf.bandlimiterout)) return;
|
|
||||||
for(i=0, be = conf.bandlimiter; be && i<MAXBANDLIMS; be = be->next) {
|
|
||||||
if(ACLmatches(be->ace, param)){
|
|
||||||
if(be->ace->action == NOBANDLIM) {
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
param->bandlims[i++] = be;
|
|
||||||
param->bandlimfunc = conf.bandlimfunc;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(i<MAXBANDLIMS)param->bandlims[i] = NULL;
|
|
||||||
for(i=0, be = conf.bandlimiterout; be && i<MAXBANDLIMS; be = be->next) {
|
|
||||||
if(ACLmatches(be->ace, param)){
|
|
||||||
if(be->ace->action == NOBANDLIM) {
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
param->bandlimsout[i++] = be;
|
|
||||||
param->bandlimfunc = conf.bandlimfunc;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(i<MAXBANDLIMS)param->bandlimsout[i] = NULL;
|
|
||||||
param->bandlimver = conf.bandlimver;
|
|
||||||
}
|
|
||||||
|
|
||||||
unsigned bandlimitfunc(struct clientparam *param, unsigned nbytesin, unsigned nbytesout){
|
|
||||||
unsigned sleeptime = 0, nsleeptime;
|
|
||||||
time_t sec;
|
|
||||||
unsigned msec;
|
|
||||||
unsigned now;
|
|
||||||
int i;
|
|
||||||
|
|
||||||
#ifdef _WIN32
|
|
||||||
struct timeb tb;
|
|
||||||
|
|
||||||
ftime(&tb);
|
|
||||||
sec = (unsigned)tb.time;
|
|
||||||
msec = (unsigned)tb.millitm*1000;
|
|
||||||
#else
|
|
||||||
struct timeval tv;
|
|
||||||
gettimeofday(&tv, NULL);
|
|
||||||
|
|
||||||
sec = tv.tv_sec;
|
|
||||||
msec = tv.tv_usec;
|
|
||||||
#endif
|
|
||||||
|
|
||||||
if(!nbytesin && !nbytesout) return 0;
|
|
||||||
pthread_mutex_lock(&bandlim_mutex);
|
|
||||||
if(param->bandlimver != conf.bandlimver){
|
|
||||||
initbandlims(param);
|
|
||||||
param->bandlimver = conf.bandlimver;
|
|
||||||
}
|
|
||||||
for(i=0; nbytesin&& i<MAXBANDLIMS && param->bandlims[i]; i++){
|
|
||||||
if( !param->bandlims[i]->basetime ||
|
|
||||||
param->bandlims[i]->basetime > sec ||
|
|
||||||
param->bandlims[i]->basetime < (sec - 120)
|
|
||||||
)
|
|
||||||
{
|
|
||||||
param->bandlims[i]->basetime = sec;
|
|
||||||
param->bandlims[i]->nexttime = 0;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
now = (unsigned)((sec - param->bandlims[i]->basetime) * 1000000) + msec;
|
|
||||||
nsleeptime = (param->bandlims[i]->nexttime > now)?
|
|
||||||
param->bandlims[i]->nexttime - now : 0;
|
|
||||||
sleeptime = (nsleeptime > sleeptime)? nsleeptime : sleeptime;
|
|
||||||
param->bandlims[i]->basetime = sec;
|
|
||||||
param->bandlims[i]->nexttime = msec + nsleeptime + (((uint64_t)nbytesin * 8 * 1000000) / param->bandlims[i]->rate);
|
|
||||||
}
|
|
||||||
for(i=0; nbytesout && i<MAXBANDLIMS && param->bandlimsout[i]; i++){
|
|
||||||
if( !param->bandlimsout[i]->basetime ||
|
|
||||||
param->bandlimsout[i]->basetime > sec ||
|
|
||||||
param->bandlimsout[i]->basetime < (sec - 120)
|
|
||||||
)
|
|
||||||
{
|
|
||||||
param->bandlimsout[i]->basetime = sec;
|
|
||||||
param->bandlimsout[i]->nexttime = 0;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
now = (unsigned)((sec - param->bandlimsout[i]->basetime) * 1000000) + msec;
|
|
||||||
nsleeptime = (param->bandlimsout[i]->nexttime > now)?
|
|
||||||
param->bandlimsout[i]->nexttime - now : 0;
|
|
||||||
sleeptime = (nsleeptime > sleeptime)? nsleeptime : sleeptime;
|
|
||||||
param->bandlimsout[i]->basetime = sec;
|
|
||||||
param->bandlimsout[i]->nexttime = msec + nsleeptime + ((nbytesout > 512)? ((nbytesout+32)/64)*((64*8*1000000)/param->bandlimsout[i]->rate) : ((nbytesout+1)* (8*1000000))/param->bandlimsout[i]->rate);
|
|
||||||
}
|
|
||||||
pthread_mutex_unlock(&bandlim_mutex);
|
|
||||||
return sleeptime/1000;
|
|
||||||
}
|
|
||||||
|
|
||||||
void trafcountfunc(struct clientparam *param){
|
|
||||||
struct trafcount * tc;
|
|
||||||
int countout = 0;
|
|
||||||
|
|
||||||
pthread_mutex_lock(&tc_mutex);
|
|
||||||
for(tc = conf.trafcounter; tc; tc = tc->next) {
|
|
||||||
if(ACLmatches(tc->ace, param)){
|
|
||||||
|
|
||||||
if(tc->ace->action == NOCOUNTIN) {
|
|
||||||
countout = 1;
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
if(tc->ace->action == NOCOUNTALL) break;
|
|
||||||
if(tc->ace->action != COUNTIN && tc->ace->action != COUNTALL) {
|
|
||||||
countout = 1;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
tc->traf64 += param->statssrv64;
|
|
||||||
tc->updated = conf.time;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if(countout) for(tc = conf.trafcounter; tc; tc = tc->next) {
|
|
||||||
if(ACLmatches(tc->ace, param)){
|
|
||||||
if(tc->ace->action == NOCOUNTOUT || tc->ace->action == NOCOUNTALL) break;
|
|
||||||
if(tc->ace->action != COUNTOUT && tc->ace->action != COUNTALL ) {
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
tc->traf64 += param->statscli64;
|
|
||||||
tc->updated = conf.time;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
pthread_mutex_unlock(&tc_mutex);
|
|
||||||
}
|
|
||||||
|
|
||||||
int alwaysauth(struct clientparam * param){
|
int alwaysauth(struct clientparam * param){
|
||||||
int res;
|
int res;
|
||||||
@ -737,44 +68,6 @@ int alwaysauth(struct clientparam * param){
|
|||||||
return res;
|
return res;
|
||||||
}
|
}
|
||||||
|
|
||||||
int checkACL(struct clientparam * param){
|
|
||||||
struct ace* acentry;
|
|
||||||
|
|
||||||
if(!param->srv->acl) {
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
for(acentry = param->srv->acl; acentry; acentry = acentry->next) {
|
|
||||||
if(ACLmatches(acentry, param)) {
|
|
||||||
param->nolog = acentry->nolog;
|
|
||||||
param->weight = acentry->weight;
|
|
||||||
if(acentry->action == 2) {
|
|
||||||
struct ace dup;
|
|
||||||
int res=60,i=0;
|
|
||||||
|
|
||||||
if(param->operation < 256 && !(param->operation & CONNECT)){
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
if(param->redirected && acentry->chains && SAISNULL(&acentry->chains->addr) && !*SAPORT(&acentry->chains->addr)) {
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
if(param->remsock != INVALID_SOCKET) {
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
for(; i < conf.parentretries; i++){
|
|
||||||
dup = *acentry;
|
|
||||||
res = handleredirect(param, &dup);
|
|
||||||
if(!res) break;
|
|
||||||
if(param->remsock != INVALID_SOCKET) param->srv->so._closesocket(param->sostate, param->remsock);
|
|
||||||
param->remsock = INVALID_SOCKET;
|
|
||||||
}
|
|
||||||
return res;
|
|
||||||
}
|
|
||||||
return acentry->action;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return 3;
|
|
||||||
}
|
|
||||||
|
|
||||||
int cacheauth(struct clientparam * param){
|
int cacheauth(struct clientparam * param){
|
||||||
struct authcache ac;
|
struct authcache ac;
|
||||||
uint32_t ttl;
|
uint32_t ttl;
|
||||||
@ -959,4 +252,3 @@ struct auth authfuncs[] = {
|
|||||||
{authfuncs+8+AUTHOFFSET, NULL, NULL, "none"},
|
{authfuncs+8+AUTHOFFSET, NULL, NULL, "none"},
|
||||||
{NULL, NULL, NULL, ""}
|
{NULL, NULL, NULL, ""}
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
195
src/limiter.c
Normal file
195
src/limiter.c
Normal file
@ -0,0 +1,195 @@
|
|||||||
|
/*
|
||||||
|
3APA3A simplest proxy server
|
||||||
|
(c) 2002-2021 by Vladimir Dubrovin <3proxy@3proxy.org>
|
||||||
|
|
||||||
|
please read License Agreement
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include "proxy.h"
|
||||||
|
|
||||||
|
int startconnlims (struct clientparam *param){
|
||||||
|
struct connlim * ce;
|
||||||
|
time_t delta;
|
||||||
|
uint64_t rating;
|
||||||
|
int ret = 0;
|
||||||
|
|
||||||
|
param->connlim = 1;
|
||||||
|
pthread_mutex_lock(&connlim_mutex);
|
||||||
|
for(ce = conf.connlimiter; ce; ce = ce->next) {
|
||||||
|
if(ACLmatches(ce->ace, param)){
|
||||||
|
if(ce->ace->action == NOCONNLIM)break;
|
||||||
|
if(!ce->period){
|
||||||
|
if(ce->rate <= ce->rating) {
|
||||||
|
ret = 1;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
ce->rating++;
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
delta = conf.time - ce->basetime;
|
||||||
|
if(ce->period <= delta || ce->basetime > conf.time){
|
||||||
|
ce->basetime = conf.time;
|
||||||
|
ce->rating = 0x100000;
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
rating = delta? ((ce->rating * (ce->period - delta)) / ce->period) + 0x100000 : ce->rating + 0x100000;
|
||||||
|
if (rating > (ce->rate<<20)) {
|
||||||
|
ret = 2;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
ce->rating = rating;
|
||||||
|
ce->basetime = conf.time;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
pthread_mutex_unlock(&connlim_mutex);
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
void stopconnlims (struct clientparam *param){
|
||||||
|
struct connlim * ce;
|
||||||
|
|
||||||
|
pthread_mutex_lock(&connlim_mutex);
|
||||||
|
for(ce = conf.connlimiter; ce; ce = ce->next) {
|
||||||
|
if(ACLmatches(ce->ace, param)){
|
||||||
|
if(ce->ace->action == NOCONNLIM)break;
|
||||||
|
if(!ce->period && ce->rating){
|
||||||
|
ce->rating--;
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
pthread_mutex_unlock(&connlim_mutex);
|
||||||
|
}
|
||||||
|
|
||||||
|
void initbandlims (struct clientparam *param){
|
||||||
|
struct bandlim * be;
|
||||||
|
int i;
|
||||||
|
|
||||||
|
param->bandlimfunc = NULL;
|
||||||
|
param->bandlims[0] = NULL;
|
||||||
|
param->bandlimsout[0] = NULL;
|
||||||
|
if(!conf.bandlimfunc || (!conf.bandlimiter && !conf.bandlimiterout)) return;
|
||||||
|
for(i=0, be = conf.bandlimiter; be && i<MAXBANDLIMS; be = be->next) {
|
||||||
|
if(ACLmatches(be->ace, param)){
|
||||||
|
if(be->ace->action == NOBANDLIM) {
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
param->bandlims[i++] = be;
|
||||||
|
param->bandlimfunc = conf.bandlimfunc;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(i<MAXBANDLIMS)param->bandlims[i] = NULL;
|
||||||
|
for(i=0, be = conf.bandlimiterout; be && i<MAXBANDLIMS; be = be->next) {
|
||||||
|
if(ACLmatches(be->ace, param)){
|
||||||
|
if(be->ace->action == NOBANDLIM) {
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
param->bandlimsout[i++] = be;
|
||||||
|
param->bandlimfunc = conf.bandlimfunc;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(i<MAXBANDLIMS)param->bandlimsout[i] = NULL;
|
||||||
|
param->bandlimver = conf.bandlimver;
|
||||||
|
}
|
||||||
|
|
||||||
|
unsigned bandlimitfunc(struct clientparam *param, unsigned nbytesin, unsigned nbytesout){
|
||||||
|
unsigned sleeptime = 0, nsleeptime;
|
||||||
|
time_t sec;
|
||||||
|
unsigned msec;
|
||||||
|
unsigned now;
|
||||||
|
int i;
|
||||||
|
|
||||||
|
#ifdef _WIN32
|
||||||
|
struct timeb tb;
|
||||||
|
|
||||||
|
ftime(&tb);
|
||||||
|
sec = (unsigned)tb.time;
|
||||||
|
msec = (unsigned)tb.millitm*1000;
|
||||||
|
#else
|
||||||
|
struct timeval tv;
|
||||||
|
gettimeofday(&tv, NULL);
|
||||||
|
|
||||||
|
sec = tv.tv_sec;
|
||||||
|
msec = tv.tv_usec;
|
||||||
|
#endif
|
||||||
|
|
||||||
|
if(!nbytesin && !nbytesout) return 0;
|
||||||
|
pthread_mutex_lock(&bandlim_mutex);
|
||||||
|
if(param->bandlimver != conf.bandlimver){
|
||||||
|
initbandlims(param);
|
||||||
|
param->bandlimver = conf.bandlimver;
|
||||||
|
}
|
||||||
|
for(i=0; nbytesin&& i<MAXBANDLIMS && param->bandlims[i]; i++){
|
||||||
|
if( !param->bandlims[i]->basetime ||
|
||||||
|
param->bandlims[i]->basetime > sec ||
|
||||||
|
param->bandlims[i]->basetime < (sec - 120)
|
||||||
|
)
|
||||||
|
{
|
||||||
|
param->bandlims[i]->basetime = sec;
|
||||||
|
param->bandlims[i]->nexttime = 0;
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
now = (unsigned)((sec - param->bandlims[i]->basetime) * 1000000) + msec;
|
||||||
|
nsleeptime = (param->bandlims[i]->nexttime > now)?
|
||||||
|
param->bandlims[i]->nexttime - now : 0;
|
||||||
|
sleeptime = (nsleeptime > sleeptime)? nsleeptime : sleeptime;
|
||||||
|
param->bandlims[i]->basetime = sec;
|
||||||
|
param->bandlims[i]->nexttime = msec + nsleeptime + (((uint64_t)nbytesin * 8 * 1000000) / param->bandlims[i]->rate);
|
||||||
|
}
|
||||||
|
for(i=0; nbytesout && i<MAXBANDLIMS && param->bandlimsout[i]; i++){
|
||||||
|
if( !param->bandlimsout[i]->basetime ||
|
||||||
|
param->bandlimsout[i]->basetime > sec ||
|
||||||
|
param->bandlimsout[i]->basetime < (sec - 120)
|
||||||
|
)
|
||||||
|
{
|
||||||
|
param->bandlimsout[i]->basetime = sec;
|
||||||
|
param->bandlimsout[i]->nexttime = 0;
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
now = (unsigned)((sec - param->bandlimsout[i]->basetime) * 1000000) + msec;
|
||||||
|
nsleeptime = (param->bandlimsout[i]->nexttime > now)?
|
||||||
|
param->bandlimsout[i]->nexttime - now : 0;
|
||||||
|
sleeptime = (nsleeptime > sleeptime)? nsleeptime : sleeptime;
|
||||||
|
param->bandlimsout[i]->basetime = sec;
|
||||||
|
param->bandlimsout[i]->nexttime = msec + nsleeptime + ((nbytesout > 512)? ((nbytesout+32)/64)*((64*8*1000000)/param->bandlimsout[i]->rate) : ((nbytesout+1)* (8*1000000))/param->bandlimsout[i]->rate);
|
||||||
|
}
|
||||||
|
pthread_mutex_unlock(&bandlim_mutex);
|
||||||
|
return sleeptime/1000;
|
||||||
|
}
|
||||||
|
|
||||||
|
void trafcountfunc(struct clientparam *param){
|
||||||
|
struct trafcount * tc;
|
||||||
|
int countout = 0;
|
||||||
|
|
||||||
|
pthread_mutex_lock(&tc_mutex);
|
||||||
|
for(tc = conf.trafcounter; tc; tc = tc->next) {
|
||||||
|
if(ACLmatches(tc->ace, param)){
|
||||||
|
|
||||||
|
if(tc->ace->action == NOCOUNTIN) {
|
||||||
|
countout = 1;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if(tc->ace->action == NOCOUNTALL) break;
|
||||||
|
if(tc->ace->action != COUNTIN && tc->ace->action != COUNTALL) {
|
||||||
|
countout = 1;
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
tc->traf64 += param->statssrv64;
|
||||||
|
tc->updated = conf.time;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(countout) for(tc = conf.trafcounter; tc; tc = tc->next) {
|
||||||
|
if(ACLmatches(tc->ace, param)){
|
||||||
|
if(tc->ace->action == NOCOUNTOUT || tc->ace->action == NOCOUNTALL) break;
|
||||||
|
if(tc->ace->action != COUNTOUT && tc->ace->action != COUNTALL ) {
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
tc->traf64 += param->statscli64;
|
||||||
|
tc->updated = conf.time;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
pthread_mutex_unlock(&tc_mutex);
|
||||||
|
}
|
||||||
|
|
||||||
374
src/redirect.c
Normal file
374
src/redirect.c
Normal file
@ -0,0 +1,374 @@
|
|||||||
|
/*
|
||||||
|
3APA3A simplest proxy server
|
||||||
|
(c) 2002-2021 by Vladimir Dubrovin <3proxy@3proxy.org>
|
||||||
|
|
||||||
|
please read License Agreement
|
||||||
|
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include "proxy.h"
|
||||||
|
|
||||||
|
static FILTER_ACTION (*ext_ssl_parent)(struct clientparam * param) = NULL;
|
||||||
|
|
||||||
|
static FILTER_ACTION ssl_parent(struct clientparam * param){
|
||||||
|
if(ext_ssl_parent) return ext_ssl_parent(param);
|
||||||
|
ext_ssl_parent = pluginlink.findbyname("ssl_parent");
|
||||||
|
if(ext_ssl_parent) return ext_ssl_parent(param);
|
||||||
|
return REJECT;
|
||||||
|
}
|
||||||
|
|
||||||
|
int clientnegotiate(struct chain * redir, struct clientparam * param, struct sockaddr * addr, unsigned char * hostname){
|
||||||
|
unsigned char *buf;
|
||||||
|
unsigned char *username;
|
||||||
|
int res;
|
||||||
|
int len=0;
|
||||||
|
unsigned char * user, *pass;
|
||||||
|
|
||||||
|
|
||||||
|
user = redir->extuser;
|
||||||
|
pass = redir->extpass;
|
||||||
|
if (!param->srvbufsize){
|
||||||
|
param->srvbufsize = SRVBUFSIZE;
|
||||||
|
param->srvbuf = myalloc(param->srvbufsize);
|
||||||
|
if(!param->srvbuf) return 21;
|
||||||
|
}
|
||||||
|
buf = param->srvbuf;
|
||||||
|
username = buf + 2048;
|
||||||
|
if(user) {
|
||||||
|
if (*user == '*') {
|
||||||
|
if(!param->username) return 4;
|
||||||
|
user = param->username;
|
||||||
|
pass = param->password;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(redir->secure){
|
||||||
|
res = ssl_parent(param);
|
||||||
|
if(res != PASS) return res;
|
||||||
|
}
|
||||||
|
switch(redir->type){
|
||||||
|
case R_TCP:
|
||||||
|
case R_HTTP:
|
||||||
|
return 0;
|
||||||
|
case R_CONNECT:
|
||||||
|
case R_CONNECTP:
|
||||||
|
{
|
||||||
|
len = sprintf((char *)buf, "CONNECT ");
|
||||||
|
if(redir->type == R_CONNECTP && hostname) {
|
||||||
|
char * needreplace;
|
||||||
|
needreplace = strchr((char *)hostname, ':');
|
||||||
|
if(needreplace) buf[len++] = '[';
|
||||||
|
len += sprintf((char *)buf + len, "%.256s", (char *)hostname);
|
||||||
|
if(needreplace) buf[len++] = ']';
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
if(*SAFAMILY(addr) == AF_INET6) buf[len++] = '[';
|
||||||
|
len += myinet_ntop(*SAFAMILY(addr), SAADDR(addr), (char *)buf+len, 256);
|
||||||
|
if(*SAFAMILY(addr) == AF_INET6) buf[len++] = ']';
|
||||||
|
}
|
||||||
|
len += sprintf((char *)buf + len,
|
||||||
|
":%hu HTTP/1.0\r\nConnection: keep-alive\r\n", ntohs(*SAPORT(addr)));
|
||||||
|
if(user){
|
||||||
|
len += sprintf((char *)buf + len, "Proxy-Authorization: Basic ");
|
||||||
|
sprintf((char *)username, "%.128s:%.128s", user, pass?pass:(unsigned char *)"");
|
||||||
|
en64(username, buf+len, (int)strlen((char *)username));
|
||||||
|
len = (int)strlen((char *)buf);
|
||||||
|
len += sprintf((char *)buf + len, "\r\n");
|
||||||
|
}
|
||||||
|
len += sprintf((char *)buf + len, "\r\n");
|
||||||
|
if(socksend(param, param->remsock, buf, len, conf.timeouts[CHAIN_TO]) != (int)strlen((char *)buf))
|
||||||
|
return 31;
|
||||||
|
param->statssrv64+=len;
|
||||||
|
param->nwrites++;
|
||||||
|
if((res = sockgetlinebuf(param, SERVER,buf,13,'\n',conf.timeouts[CHAIN_TO])) < 13)
|
||||||
|
return 32;
|
||||||
|
if(buf[9] != '2') return 33;
|
||||||
|
while((res = sockgetlinebuf(param, SERVER,buf,1023,'\n', conf.timeouts[CHAIN_TO])) > 2);
|
||||||
|
if(res <= 0) return 34;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
case R_SOCKS4:
|
||||||
|
case R_SOCKS4P:
|
||||||
|
case R_SOCKS4B:
|
||||||
|
{
|
||||||
|
|
||||||
|
if(*SAFAMILY(addr) != AF_INET) return 44;
|
||||||
|
buf[0] = 4;
|
||||||
|
buf[1] = 1;
|
||||||
|
memcpy(buf+2, SAPORT(addr), 2);
|
||||||
|
if(redir->type == R_SOCKS4P && hostname) {
|
||||||
|
buf[4] = buf[5] = buf[6] = 0;
|
||||||
|
buf[7] = 3;
|
||||||
|
}
|
||||||
|
else memcpy(buf+4, SAADDR(addr), 4);
|
||||||
|
if(!user)user = (unsigned char *)"anonymous";
|
||||||
|
len = (int)strlen((char *)user) + 1;
|
||||||
|
memcpy(buf+8, user, len);
|
||||||
|
len += 8;
|
||||||
|
if(redir->type == R_SOCKS4P && hostname) {
|
||||||
|
int hostnamelen;
|
||||||
|
|
||||||
|
hostnamelen = (int)strlen((char *)hostname) + 1;
|
||||||
|
if(hostnamelen > 255) hostnamelen = 255;
|
||||||
|
memcpy(buf+len, hostname, hostnamelen);
|
||||||
|
len += hostnamelen;
|
||||||
|
}
|
||||||
|
if(socksend(param, param->remsock, buf, len, conf.timeouts[CHAIN_TO]) < len){
|
||||||
|
return 41;
|
||||||
|
}
|
||||||
|
param->statssrv64+=len;
|
||||||
|
param->nwrites++;
|
||||||
|
if((len = sockgetlinebuf(param, SERVER, buf, (redir->type == R_SOCKS4B)? 3:8, EOF, conf.timeouts[CHAIN_TO])) != ((redir->type == R_SOCKS4B)? 3:8)){
|
||||||
|
return 42;
|
||||||
|
}
|
||||||
|
if(buf[1] != 90) {
|
||||||
|
return 43;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
return 0;
|
||||||
|
|
||||||
|
case R_SOCKS5:
|
||||||
|
case R_SOCKS5P:
|
||||||
|
case R_SOCKS5B:
|
||||||
|
{
|
||||||
|
int inbuf = 0;
|
||||||
|
buf[0] = 5;
|
||||||
|
buf[1] = 1;
|
||||||
|
buf[2] = user? 2 : 0;
|
||||||
|
if(socksend(param, param->remsock, buf, 3, conf.timeouts[CHAIN_TO]) != 3){
|
||||||
|
return 51;
|
||||||
|
}
|
||||||
|
param->statssrv64+=len;
|
||||||
|
param->nwrites++;
|
||||||
|
if(sockgetlinebuf(param, SERVER, buf, 2, EOF, conf.timeouts[CHAIN_TO]) != 2){
|
||||||
|
return 52;
|
||||||
|
}
|
||||||
|
if(buf[0] != 5) {
|
||||||
|
return 53;
|
||||||
|
}
|
||||||
|
if(buf[1] != 0 && !(buf[1] == 2 && user)){
|
||||||
|
return 54;
|
||||||
|
}
|
||||||
|
if(buf[1] == 2){
|
||||||
|
buf[inbuf++] = 1;
|
||||||
|
buf[inbuf] = (unsigned char)strlen((char *)user);
|
||||||
|
memcpy(buf+inbuf+1, user, buf[inbuf]);
|
||||||
|
inbuf += buf[inbuf] + 1;
|
||||||
|
buf[inbuf] = pass?(unsigned char)strlen((char *)pass):0;
|
||||||
|
if(pass)memcpy(buf+inbuf+1, pass, buf[inbuf]);
|
||||||
|
inbuf += buf[inbuf] + 1;
|
||||||
|
if(socksend(param, param->remsock, buf, inbuf, conf.timeouts[CHAIN_TO]) != inbuf){
|
||||||
|
return 51;
|
||||||
|
}
|
||||||
|
param->statssrv64+=inbuf;
|
||||||
|
param->nwrites++;
|
||||||
|
if(sockgetlinebuf(param, SERVER, buf, 2, EOF, 60) != 2){
|
||||||
|
return 55;
|
||||||
|
}
|
||||||
|
if(buf[0] != 1 || buf[1] != 0) {
|
||||||
|
return 56;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
buf[0] = 5;
|
||||||
|
buf[1] = 1;
|
||||||
|
buf[2] = 0;
|
||||||
|
if(redir->type == R_SOCKS5P && hostname) {
|
||||||
|
buf[3] = 3;
|
||||||
|
len = (int)strlen((char *)hostname);
|
||||||
|
if(len > 255) len = 255;
|
||||||
|
buf[4] = len;
|
||||||
|
memcpy(buf + 5, hostname, len);
|
||||||
|
len += 5;
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
len = 3;
|
||||||
|
buf[len++] = (*SAFAMILY(addr) == AF_INET)? 1 : 4;
|
||||||
|
memcpy(buf+len, SAADDR(addr), SAADDRLEN(addr));
|
||||||
|
len += SAADDRLEN(addr);
|
||||||
|
}
|
||||||
|
memcpy(buf+len, SAPORT(addr), 2);
|
||||||
|
len += 2;
|
||||||
|
if(socksend(param, param->remsock, buf, len, conf.timeouts[CHAIN_TO]) != len){
|
||||||
|
return 51;
|
||||||
|
}
|
||||||
|
param->statssrv64+=len;
|
||||||
|
param->nwrites++;
|
||||||
|
if(sockgetlinebuf(param, SERVER, buf, 4, EOF, conf.timeouts[CHAIN_TO]) != 4){
|
||||||
|
return 57;
|
||||||
|
}
|
||||||
|
if(buf[0] != 5) {
|
||||||
|
return 53;
|
||||||
|
}
|
||||||
|
if(buf[1] != 0) {
|
||||||
|
return 60 + (buf[1] % 10);
|
||||||
|
}
|
||||||
|
switch (buf[3]) {
|
||||||
|
case 1:
|
||||||
|
if (redir->type == R_SOCKS5B || sockgetlinebuf(param, SERVER, buf, 6, EOF, conf.timeouts[CHAIN_TO]) == 6)
|
||||||
|
break;
|
||||||
|
return 59;
|
||||||
|
case 3:
|
||||||
|
if (sockgetlinebuf(param, SERVER, buf, 1, EOF, conf.timeouts[CHAIN_TO]) != 1) return 59;
|
||||||
|
len = (unsigned char)buf[0];
|
||||||
|
if (sockgetlinebuf(param, SERVER, buf, len + 2, EOF, conf.timeouts[CHAIN_TO]) != len + 2) return 59;
|
||||||
|
break;
|
||||||
|
case 4:
|
||||||
|
if (sockgetlinebuf(param, SERVER, buf, 18, EOF, conf.timeouts[CHAIN_TO]) == 18)
|
||||||
|
break;
|
||||||
|
return 59;
|
||||||
|
default:
|
||||||
|
return 58;
|
||||||
|
}
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
default:
|
||||||
|
|
||||||
|
return 30;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
int handleredirect(struct clientparam * param, struct ace * acentry){
|
||||||
|
int connected = 0;
|
||||||
|
int weight = 1000;
|
||||||
|
int res;
|
||||||
|
int done = 0;
|
||||||
|
int ha = 0;
|
||||||
|
struct chain * cur;
|
||||||
|
struct chain * redir = NULL;
|
||||||
|
int r2;
|
||||||
|
|
||||||
|
if(param->remsock != INVALID_SOCKET) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
if(SAISNULL(¶m->req) || !*SAPORT(¶m->req)) {
|
||||||
|
return 100;
|
||||||
|
}
|
||||||
|
|
||||||
|
r2 = (myrand(param, sizeof(struct clientparam))%1000);
|
||||||
|
|
||||||
|
for(cur = acentry->chains; cur; cur=cur->next){
|
||||||
|
if(((weight = weight - cur->weight) > r2)|| done) {
|
||||||
|
if(weight <= 0) {
|
||||||
|
weight += 1000;
|
||||||
|
done = 0;
|
||||||
|
r2 = (myrand(param, sizeof(struct clientparam))%1000);
|
||||||
|
}
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
param->redirected++;
|
||||||
|
done = 1;
|
||||||
|
if(weight <= 0) {
|
||||||
|
weight += 1000;
|
||||||
|
done = 0;
|
||||||
|
r2 = (myrand(param, sizeof(struct clientparam))%1000);
|
||||||
|
}
|
||||||
|
if(!connected){
|
||||||
|
if(cur->type == R_EXTIP){
|
||||||
|
param->sinsl = cur->addr;
|
||||||
|
if(SAISNULL(¶m->sinsl) && (*SAFAMILY(¶m->sincr) == AF_INET || *SAFAMILY(¶m->sincr) == AF_INET6))param->sinsl = param->sincr;
|
||||||
|
#ifndef NOIPV6
|
||||||
|
else if(cur->cidr && *SAFAMILY(¶m->sinsl) == AF_INET6){
|
||||||
|
uint16_t c;
|
||||||
|
int i;
|
||||||
|
|
||||||
|
for(i = 0; i < 8; i++){
|
||||||
|
if(i==4)myrand(¶m->sincr, sizeof(param->sincr));
|
||||||
|
else if(i==6) myrand(¶m->req, sizeof(param->req));
|
||||||
|
|
||||||
|
if(i*16 >= cur->cidr) ((uint16_t *)SAADDR(¶m->sinsl))[i] |= rand();
|
||||||
|
else if ((i+1)*16 > cur->cidr){
|
||||||
|
c = rand();
|
||||||
|
c >>= (cur->cidr - (i*16));
|
||||||
|
c |= ntohs(((uint16_t *)SAADDR(¶m->sinsl))[i]);
|
||||||
|
((uint16_t *)SAADDR(¶m->sinsl))[i] = htons(c);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
#endif
|
||||||
|
if(cur->next)continue;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
else if(SAISNULL(&cur->addr) && !*SAPORT(&cur->addr)){
|
||||||
|
int i;
|
||||||
|
if(cur->extuser){
|
||||||
|
if(param->extusername)
|
||||||
|
myfree(param->extusername);
|
||||||
|
param->extusername = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->username)? param->username : cur->extuser));
|
||||||
|
if(cur->extpass){
|
||||||
|
if(param->extpassword)
|
||||||
|
myfree(param->extpassword);
|
||||||
|
param->extpassword = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->password)?param->password : cur->extpass));
|
||||||
|
}
|
||||||
|
if(*cur->extuser == '*' && !param->username) return 4;
|
||||||
|
}
|
||||||
|
|
||||||
|
for(i=0; redirs[i].name; i++){
|
||||||
|
if(cur->type == redirs[i].redir) {
|
||||||
|
param->redirectfunc = redirs[i].func;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(cur->type == R_HA){
|
||||||
|
ha = 1;
|
||||||
|
}
|
||||||
|
if(cur->next)continue;
|
||||||
|
if(!ha) return 0;
|
||||||
|
}
|
||||||
|
else if(!*SAPORT(&cur->addr) && !SAISNULL(&cur->addr)) {
|
||||||
|
uint16_t port = *SAPORT(¶m->sinsr);
|
||||||
|
param->sinsr = cur->addr;
|
||||||
|
*SAPORT(¶m->sinsr) = port;
|
||||||
|
}
|
||||||
|
else if(SAISNULL(&cur->addr) && *SAPORT(&cur->addr)) *SAPORT(¶m->sinsr) = *SAPORT(&cur->addr);
|
||||||
|
else {
|
||||||
|
param->sinsr = cur->addr;
|
||||||
|
}
|
||||||
|
|
||||||
|
if((res = alwaysauth(param))){
|
||||||
|
return (res >= 10)? res : 60+res;
|
||||||
|
}
|
||||||
|
if(ha) {
|
||||||
|
char buf[128];
|
||||||
|
int len;
|
||||||
|
len = sprintf(buf, "PROXY %s ",
|
||||||
|
*SAFAMILY(¶m->sincr) == AF_INET6 ? "TCP6" : "TCP4");
|
||||||
|
len += myinet_ntop(*SAFAMILY(¶m->sincr), SAADDR(¶m->sincr), buf+len, sizeof(param->sincr));
|
||||||
|
buf[len++] = ' ';
|
||||||
|
len += myinet_ntop(*SAFAMILY(¶m->sincl), SAADDR(¶m->sincl), buf+len, sizeof(param->sincl));
|
||||||
|
len += sprintf(buf + len, " %hu %hu\r\n",
|
||||||
|
ntohs(*SAPORT(¶m->sincr)),
|
||||||
|
ntohs(*SAPORT(¶m->sincl))
|
||||||
|
);
|
||||||
|
if(socksend(param, param->remsock, (unsigned char *)buf, len, conf.timeouts[CHAIN_TO])!=len) return 39;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
res = (redir)?clientnegotiate(redir, param, (struct sockaddr *)&cur->addr, cur->exthost):0;
|
||||||
|
if(res) return res;
|
||||||
|
}
|
||||||
|
redir = cur;
|
||||||
|
param->redirtype = redir->type;
|
||||||
|
if(redir->type == R_TCP || redir->type ==R_HTTP) {
|
||||||
|
if(cur->extuser){
|
||||||
|
if(*cur -> extuser == '*' && !param->username) return 4;
|
||||||
|
if(param->extusername)
|
||||||
|
myfree(param->extusername);
|
||||||
|
param->extusername = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->username)? param->username : cur->extuser));
|
||||||
|
if(cur->extpass){
|
||||||
|
if(param->extpassword)
|
||||||
|
myfree(param->extpassword);
|
||||||
|
param->extpassword = (unsigned char *)mystrdup((char *)((*cur->extuser == '*' && param->password)?param->password : cur->extpass));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if(redir->secure) return ssl_parent(param);
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
connected = 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
if(!connected || !redir) return 0;
|
||||||
|
return clientnegotiate(redir, param, (struct sockaddr *)¶m->req, param->hostname);
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user