mirror of
https://github.com/matrix-construct/construct
synced 2024-09-06 16:55:22 +02:00
A KLINE command without the ON clause now sets a propagated ("global") ban. KLINE commands with the ON clause work as before. Propagated klines can only be removed with an UNKLINE command without the ON clause, and this removes them everywhere. In fact, they remain in a deactivated state until the latest expiry ever used for the mask has passed. Propagated klines are part of the netburst using a new BAN message and capab. If such a burst has an effect, both the server name and the original oper are shown in the server notice. No checks whatsoever are done on bursted klines at this time. The system should be extended to XLINE and RESV later. There is currently no way to list propagated klines, but TESTLINE works normally.
381 lines
10 KiB
C
381 lines
10 KiB
C
/*
|
|
* charybdis: Advanced, scalable Internet Relay Chat.
|
|
* s_conf.h: A header for the configuration functions.
|
|
*
|
|
* Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center
|
|
* Copyright (C) 1996-2002 Hybrid Development Team
|
|
* Copyright (C) 2002-2004 ircd-ratbox development team
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
|
|
* USA
|
|
*
|
|
* $Id: s_conf.h 3550 2007-08-09 06:47:26Z nenolod $
|
|
*/
|
|
|
|
#ifndef INCLUDED_s_conf_h
|
|
#define INCLUDED_s_conf_h
|
|
#include "setup.h"
|
|
|
|
#ifdef HAVE_LIBCRYPTO
|
|
#include <openssl/rsa.h>
|
|
#endif
|
|
|
|
#include "ircd_defs.h"
|
|
#include "class.h"
|
|
#include "client.h"
|
|
#include "common.h"
|
|
|
|
struct Client;
|
|
struct DNSReply;
|
|
struct hostent;
|
|
|
|
/* used by new parser */
|
|
/* yacc/lex love globals!!! */
|
|
|
|
struct ip_value
|
|
{
|
|
struct rb_sockaddr_storage ip;
|
|
int ip_mask;
|
|
int type;
|
|
};
|
|
|
|
extern FILE *conf_fbfile_in;
|
|
extern char conf_line_in[256];
|
|
|
|
struct ConfItem
|
|
{
|
|
unsigned int status; /* If CONF_ILLEGAL, delete when no clients */
|
|
unsigned int flags;
|
|
int clients; /* Number of *LOCAL* clients using this */
|
|
union
|
|
{
|
|
char *name; /* IRC name, nick, server name, or original u@h */
|
|
const char *oper;
|
|
} info;
|
|
char *host; /* host part of user@host */
|
|
char *passwd; /* doubles as kline reason *ugh* */
|
|
char *spasswd; /* Password to send. */
|
|
char *user; /* user part of user@host */
|
|
int port;
|
|
time_t hold; /* Hold action until this time (calendar time) */
|
|
time_t created; /* Creation time (for klines etc) */
|
|
time_t lifetime; /* Propagated lines: remember until this time */
|
|
char *className; /* Name of class */
|
|
struct Class *c_class; /* Class of connection */
|
|
rb_patricia_node_t *pnode; /* Our patricia node */
|
|
};
|
|
|
|
#define CONF_ILLEGAL 0x80000000
|
|
#define CONF_CLIENT 0x0002
|
|
#define CONF_KILL 0x0040
|
|
#define CONF_XLINE 0x0080
|
|
#define CONF_RESV_CHANNEL 0x0100
|
|
#define CONF_RESV_NICK 0x0200
|
|
#define CONF_RESV (CONF_RESV_CHANNEL | CONF_RESV_NICK)
|
|
|
|
#define CONF_DLINE 0x20000
|
|
#define CONF_EXEMPTDLINE 0x100000
|
|
|
|
#define IsIllegal(x) ((x)->status & CONF_ILLEGAL)
|
|
|
|
/* aConfItem->flags */
|
|
|
|
/* Generic flags... */
|
|
#define CONF_FLAGS_TEMPORARY 0x00800000
|
|
#define CONF_FLAGS_NEED_SSL 0x00000002
|
|
#define CONF_FLAGS_MYOPER 0x00080000 /* need to rewrite info.oper on burst */
|
|
/* auth{} flags... */
|
|
#define CONF_FLAGS_NO_TILDE 0x00000004
|
|
#define CONF_FLAGS_NEED_IDENTD 0x00000008
|
|
#define CONF_FLAGS_EXEMPTKLINE 0x00000040
|
|
#define CONF_FLAGS_NOLIMIT 0x00000080
|
|
#define CONF_FLAGS_SPOOF_IP 0x00000200
|
|
#define CONF_FLAGS_SPOOF_NOTICE 0x00000400
|
|
#define CONF_FLAGS_REDIR 0x00000800
|
|
#define CONF_FLAGS_EXEMPTRESV 0x00002000 /* exempt from resvs */
|
|
#define CONF_FLAGS_EXEMPTFLOOD 0x00004000
|
|
#define CONF_FLAGS_EXEMPTSPAMBOT 0x00008000
|
|
#define CONF_FLAGS_EXEMPTSHIDE 0x00010000
|
|
#define CONF_FLAGS_EXEMPTJUPE 0x00020000 /* exempt from resv generating warnings */
|
|
#define CONF_FLAGS_NEED_SASL 0x00040000
|
|
#define CONF_FLAGS_ENCRYPTED 0x00200000
|
|
#define CONF_FLAGS_EXEMPTDNSBL 0x04000000
|
|
|
|
|
|
/* Macros for struct ConfItem */
|
|
#define IsConfBan(x) ((x)->status & (CONF_KILL|CONF_XLINE|CONF_DLINE|\
|
|
CONF_RESV_CHANNEL|CONF_RESV_NICK))
|
|
|
|
#define IsNoTilde(x) ((x)->flags & CONF_FLAGS_NO_TILDE)
|
|
#define IsNeedIdentd(x) ((x)->flags & CONF_FLAGS_NEED_IDENTD)
|
|
#define IsConfExemptKline(x) ((x)->flags & CONF_FLAGS_EXEMPTKLINE)
|
|
#define IsConfExemptLimits(x) ((x)->flags & CONF_FLAGS_NOLIMIT)
|
|
#define IsConfExemptFlood(x) ((x)->flags & CONF_FLAGS_EXEMPTFLOOD)
|
|
#define IsConfExemptSpambot(x) ((x)->flags & CONF_FLAGS_EXEMPTSPAMBOT)
|
|
#define IsConfExemptShide(x) ((x)->flags & CONF_FLAGS_EXEMPTSHIDE)
|
|
#define IsConfExemptJupe(x) ((x)->flags & CONF_FLAGS_EXEMPTJUPE)
|
|
#define IsConfExemptResv(x) ((x)->flags & CONF_FLAGS_EXEMPTRESV)
|
|
#define IsConfDoSpoofIp(x) ((x)->flags & CONF_FLAGS_SPOOF_IP)
|
|
#define IsConfSpoofNotice(x) ((x)->flags & CONF_FLAGS_SPOOF_NOTICE)
|
|
#define IsConfEncrypted(x) ((x)->flags & CONF_FLAGS_ENCRYPTED)
|
|
#define IsNeedSasl(x) ((x)->flags & CONF_FLAGS_NEED_SASL)
|
|
#define IsConfExemptDNSBL(x) ((x)->flags & CONF_FLAGS_EXEMPTDNSBL)
|
|
#define IsConfSSLNeeded(x) ((x)->flags & CONF_FLAGS_NEED_SSL)
|
|
|
|
/* flag definitions for opers now in client.h */
|
|
|
|
struct config_file_entry
|
|
{
|
|
const char *dpath; /* DPATH if set from command line */
|
|
const char *configfile;
|
|
|
|
char *egdpool_path;
|
|
|
|
char *default_operstring;
|
|
char *default_adminstring;
|
|
char *servicestring;
|
|
char *kline_reason;
|
|
|
|
char *identifyservice;
|
|
char *identifycommand;
|
|
|
|
char *fname_userlog;
|
|
char *fname_fuserlog;
|
|
char *fname_operlog;
|
|
char *fname_foperlog;
|
|
char *fname_serverlog;
|
|
char *fname_killlog;
|
|
char *fname_klinelog;
|
|
char *fname_operspylog;
|
|
char *fname_ioerrorlog;
|
|
|
|
unsigned char compression_level;
|
|
int disable_fake_channels;
|
|
int dots_in_ident;
|
|
int failed_oper_notice;
|
|
int anti_nick_flood;
|
|
int anti_spam_exit_message_time;
|
|
int max_accept;
|
|
int max_monitor;
|
|
int max_nick_time;
|
|
int max_nick_changes;
|
|
int ts_max_delta;
|
|
int ts_warn_delta;
|
|
int dline_with_reason;
|
|
int kline_with_reason;
|
|
int kline_delay;
|
|
int warn_no_nline;
|
|
int nick_delay;
|
|
int non_redundant_klines;
|
|
int stats_e_disabled;
|
|
int stats_c_oper_only;
|
|
int stats_y_oper_only;
|
|
int stats_h_oper_only;
|
|
int stats_o_oper_only;
|
|
int stats_k_oper_only;
|
|
int stats_i_oper_only;
|
|
int stats_P_oper_only;
|
|
int map_oper_only;
|
|
int operspy_admin_only;
|
|
int pace_wait;
|
|
int pace_wait_simple;
|
|
int short_motd;
|
|
int no_oper_flood;
|
|
int hide_server;
|
|
int hide_spoof_ips;
|
|
int hide_error_messages;
|
|
int client_exit;
|
|
int oper_only_umodes;
|
|
int oper_umodes;
|
|
int oper_snomask;
|
|
int max_targets;
|
|
int caller_id_wait;
|
|
int min_nonwildcard;
|
|
int min_nonwildcard_simple;
|
|
int default_floodcount;
|
|
int client_flood;
|
|
int use_egd;
|
|
int ping_cookie;
|
|
int tkline_expire_notices;
|
|
int use_whois_actually;
|
|
int disable_auth;
|
|
int connect_timeout;
|
|
int burst_away;
|
|
int reject_ban_time;
|
|
int reject_after_count;
|
|
int reject_duration;
|
|
int throttle_count;
|
|
int throttle_duration;
|
|
int target_change;
|
|
int collision_fnc;
|
|
int default_umodes;
|
|
int global_snotices;
|
|
int operspy_dont_care_user_info;
|
|
};
|
|
|
|
struct config_channel_entry
|
|
{
|
|
int use_except;
|
|
int use_invex;
|
|
int use_knock;
|
|
int use_forward;
|
|
int knock_delay;
|
|
int knock_delay_channel;
|
|
int max_bans;
|
|
int max_bans_large;
|
|
int max_chans_per_user;
|
|
int no_create_on_split;
|
|
int no_join_on_split;
|
|
int default_split_server_count;
|
|
int default_split_user_count;
|
|
int burst_topicwho;
|
|
int kick_on_split_riding;
|
|
int only_ascii_channels;
|
|
int resv_forcepart;
|
|
};
|
|
|
|
struct config_server_hide
|
|
{
|
|
int flatten_links;
|
|
int links_delay;
|
|
int hidden;
|
|
int disable_hidden;
|
|
};
|
|
|
|
struct server_info
|
|
{
|
|
char *name;
|
|
char sid[4];
|
|
char *description;
|
|
char *network_name;
|
|
char *network_desc;
|
|
int hub;
|
|
struct sockaddr_in ip;
|
|
int default_max_clients;
|
|
#ifdef RB_IPV6
|
|
struct sockaddr_in6 ip6;
|
|
#endif
|
|
int specific_ipv4_vhost;
|
|
#ifdef RB_IPV6
|
|
int specific_ipv6_vhost;
|
|
#endif
|
|
char *ssl_private_key;
|
|
char *ssl_ca_cert;
|
|
char *ssl_cert;
|
|
char *ssl_dh_params;
|
|
int ssld_count;
|
|
};
|
|
|
|
struct admin_info
|
|
{
|
|
char *name;
|
|
char *description;
|
|
char *email;
|
|
};
|
|
|
|
struct alias_entry
|
|
{
|
|
char *name;
|
|
char *target;
|
|
int flags; /* reserved for later use */
|
|
int hits;
|
|
};
|
|
|
|
/* All variables are GLOBAL */
|
|
extern int specific_ipv4_vhost; /* used in s_bsd.c */
|
|
extern int specific_ipv6_vhost;
|
|
extern struct config_file_entry ConfigFileEntry; /* defined in ircd.c */
|
|
extern struct config_channel_entry ConfigChannel; /* defined in channel.c */
|
|
extern struct config_server_hide ConfigServerHide; /* defined in s_conf.c */
|
|
extern struct server_info ServerInfo; /* defined in ircd.c */
|
|
extern struct admin_info AdminInfo; /* defined in ircd.c */
|
|
/* End GLOBAL section */
|
|
|
|
extern rb_dlink_list service_list;
|
|
|
|
extern rb_dlink_list prop_bans;
|
|
|
|
typedef enum temp_list
|
|
{
|
|
TEMP_MIN,
|
|
TEMP_HOUR,
|
|
TEMP_DAY,
|
|
TEMP_WEEK,
|
|
LAST_TEMP_TYPE
|
|
} temp_list;
|
|
|
|
extern rb_dlink_list temp_klines[LAST_TEMP_TYPE];
|
|
extern rb_dlink_list temp_dlines[LAST_TEMP_TYPE];
|
|
|
|
extern void init_s_conf(void);
|
|
|
|
extern struct ConfItem *make_conf(void);
|
|
extern void free_conf(struct ConfItem *);
|
|
|
|
extern rb_dlink_node *find_prop_ban(unsigned int status, const char *user, const char *host);
|
|
extern void deactivate_conf(struct ConfItem *, rb_dlink_node *);
|
|
|
|
extern void read_conf_files(int cold);
|
|
|
|
extern int attach_conf(struct Client *, struct ConfItem *);
|
|
extern int check_client(struct Client *client_p, struct Client *source_p, const char *);
|
|
|
|
extern int detach_conf(struct Client *);
|
|
|
|
extern struct ConfItem *find_tkline(const char *, const char *, struct sockaddr *);
|
|
extern char *show_iline_prefix(struct Client *, struct ConfItem *, char *);
|
|
extern void get_printable_conf(struct ConfItem *,
|
|
char **, char **, char **, char **, int *, char **);
|
|
extern char *get_user_ban_reason(struct ConfItem *aconf);
|
|
extern void get_printable_kline(struct Client *, struct ConfItem *,
|
|
char **, char **, char **, char **);
|
|
|
|
extern void yyerror(const char *);
|
|
extern int conf_yy_fatal_error(const char *);
|
|
extern int conf_fgets(char *, int, FILE *);
|
|
|
|
extern void add_temp_kline(struct ConfItem *);
|
|
extern void add_temp_dline(struct ConfItem *);
|
|
extern void report_temp_klines(struct Client *);
|
|
extern void show_temp_klines(struct Client *, rb_dlink_list *);
|
|
|
|
extern int rehash(int);
|
|
extern void rehash_bans(int);
|
|
|
|
extern int conf_add_server(struct ConfItem *, int);
|
|
extern void conf_add_class_to_conf(struct ConfItem *);
|
|
extern void conf_add_me(struct ConfItem *);
|
|
extern void conf_add_class(struct ConfItem *, int);
|
|
extern void conf_add_d_conf(struct ConfItem *);
|
|
extern void flush_expired_ips(void *);
|
|
|
|
extern char *get_oper_name(struct Client *client_p);
|
|
|
|
extern int yylex(void);
|
|
|
|
extern unsigned long cidr_to_bitmask[];
|
|
|
|
extern char conffilebuf[IRCD_BUFSIZE + 1];
|
|
extern int lineno;
|
|
|
|
#define NOT_AUTHORISED (-1)
|
|
#define SOCKET_ERROR (-2)
|
|
#define I_LINE_FULL (-3)
|
|
#define BANNED_CLIENT (-4)
|
|
#define TOO_MANY_LOCAL (-6)
|
|
#define TOO_MANY_GLOBAL (-7)
|
|
#define TOO_MANY_IDENT (-8)
|
|
|
|
#endif /* INCLUDED_s_conf_h */
|