144 lines
4.4 KiB
C
144 lines
4.4 KiB
C
|
/*
|
||
|
* ircd-ratbox: A slightly useful ircd.
|
||
|
* m_webirc.c: Makes CGI:IRC users appear as coming from their real host
|
||
|
*
|
||
|
* Copyright (C) 1990 Jarkko Oikarinen and University of Oulu, Co Center
|
||
|
* Copyright (C) 1996-2002 Hybrid Development Team
|
||
|
* Copyright (C) 2002-2006 ircd-ratbox development team
|
||
|
*
|
||
|
* This program is free software; you can redistribute it and/or modify
|
||
|
* it under the terms of the GNU General Public License as published by
|
||
|
* the Free Software Foundation; either version 2 of the License, or
|
||
|
* (at your option) any later version.
|
||
|
*
|
||
|
* This program is distributed in the hope that it will be useful,
|
||
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
* GNU General Public License for more details.
|
||
|
*
|
||
|
* You should have received a copy of the GNU General Public License
|
||
|
* along with this program; if not, write to the Free Software
|
||
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
|
||
|
* USA
|
||
|
*
|
||
|
* $Id: m_webirc.c 2757 2006-11-10 22:58:15Z jilles $
|
||
|
*/
|
||
|
/* Usage:
|
||
|
* auth {
|
||
|
* user = "webirc@<cgiirc ip>"; # if identd used, put ident username instead
|
||
|
* password = "<password>"; # encryption possible
|
||
|
* spoof = "webirc."
|
||
|
* class = "users";
|
||
|
* };
|
||
|
* Possible flags:
|
||
|
* encrypted - password is encrypted (recommended)
|
||
|
* kline_exempt - k/g lines on the cgiirc ip are ignored
|
||
|
* gline_exempt - glines on the cgiirc ip are ignored
|
||
|
* dlines are checked on the cgiirc ip (of course).
|
||
|
* k/d/g/x lines, auth blocks, user limits, etc are checked using the
|
||
|
* real host/ip.
|
||
|
* The password should be specified unencrypted in webirc_password in
|
||
|
* cgiirc.config
|
||
|
*/
|
||
|
|
||
|
#include "stdinc.h"
|
||
|
#include "client.h" /* client struct */
|
||
|
#include "irc_string.h"
|
||
|
#include "hostmask.h"
|
||
|
#include "send.h" /* sendto_one */
|
||
|
#include "numeric.h" /* ERR_xxx */
|
||
|
#include "ircd.h" /* me */
|
||
|
#include "msg.h"
|
||
|
#include "parse.h"
|
||
|
#include "modules.h"
|
||
|
#include "s_serv.h"
|
||
|
#include "hash.h"
|
||
|
#include "s_conf.h"
|
||
|
|
||
|
static int mr_webirc(struct Client *, struct Client *, int, const char **);
|
||
|
|
||
|
struct Message webirc_msgtab = {
|
||
|
"WEBIRC", 0, 0, 0, MFLG_SLOW | MFLG_UNREG,
|
||
|
{{mr_webirc, 4}, mg_reg, mg_ignore, mg_ignore, mg_ignore, mg_reg}
|
||
|
};
|
||
|
|
||
|
mapi_clist_av1 webirc_clist[] = { &webirc_msgtab, NULL };
|
||
|
DECLARE_MODULE_AV1(webirc, NULL, NULL, webirc_clist, NULL, NULL, "$Revision: 20702 $");
|
||
|
|
||
|
/*
|
||
|
* mr_webirc - webirc message handler
|
||
|
* parv[0] = sender prefix
|
||
|
* parv[1] = password
|
||
|
* parv[2] = fake username (we ignore this)
|
||
|
* parv[3] = fake hostname
|
||
|
* parv[4] = fake ip
|
||
|
*/
|
||
|
static int
|
||
|
mr_webirc(struct Client *client_p, struct Client *source_p, int parc, const char *parv[])
|
||
|
{
|
||
|
struct ConfItem *aconf;
|
||
|
const char *encr;
|
||
|
|
||
|
if (!strchr(parv[4], '.') && !strchr(parv[4], ':'))
|
||
|
{
|
||
|
sendto_one(source_p, "NOTICE * :Invalid IP");
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
aconf = find_address_conf(client_p->host, client_p->sockhost,
|
||
|
IsGotId(client_p) ? client_p->username : "webirc",
|
||
|
IsGotId(client_p) ? client_p->username : "webirc",
|
||
|
(struct sockaddr *) &client_p->localClient->ip,
|
||
|
client_p->localClient->ip.ss_family);
|
||
|
if (aconf == NULL || !(aconf->status & CONF_CLIENT))
|
||
|
return 0;
|
||
|
if (!IsConfDoSpoofIp(aconf) || irccmp(aconf->name, "webirc."))
|
||
|
{
|
||
|
/* XXX */
|
||
|
sendto_one(source_p, "NOTICE * :Not a CGI:IRC auth block");
|
||
|
return 0;
|
||
|
}
|
||
|
if (EmptyString(aconf->passwd))
|
||
|
{
|
||
|
sendto_one(source_p, "NOTICE * :CGI:IRC auth blocks must have a password");
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
if (EmptyString(parv[1]))
|
||
|
encr = "";
|
||
|
else if (IsConfEncrypted(aconf))
|
||
|
encr = crypt(parv[1], aconf->passwd);
|
||
|
else
|
||
|
encr = parv[1];
|
||
|
|
||
|
if (strcmp(encr, aconf->passwd))
|
||
|
{
|
||
|
sendto_one(source_p, "NOTICE * :CGI:IRC password incorrect");
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
|
||
|
strlcpy(source_p->sockhost, parv[4], sizeof(source_p->sockhost));
|
||
|
|
||
|
if(strlen(parv[3]) <= HOSTLEN)
|
||
|
strlcpy(source_p->host, parv[3], sizeof(source_p->host));
|
||
|
else
|
||
|
strlcpy(source_p->host, source_p->sockhost, sizeof(source_p->host));
|
||
|
|
||
|
inetpton_sock(parv[4], (struct sockaddr *)&source_p->localClient->ip);
|
||
|
|
||
|
/* Check dlines now, k/glines will be checked on registration */
|
||
|
if((aconf = find_dline((struct sockaddr *)&source_p->localClient->ip,
|
||
|
source_p->localClient->ip.ss_family)))
|
||
|
{
|
||
|
if(!(aconf->status & CONF_EXEMPTDLINE))
|
||
|
{
|
||
|
exit_client(client_p, source_p, &me, "D-lined");
|
||
|
return 0;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
sendto_one(source_p, "NOTICE * :CGI:IRC host/IP set to %s %s", parv[3], parv[4]);
|
||
|
return 0;
|
||
|
}
|