domain.c revision 7c478bd95313f5f23a4c958a745db2134aa03244
/*
* Copyright 2004 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*/
#pragma ident "%Z%%M% %I% %E% SMI"
/****************************************************************************
Copyright (c) 1999,2000 WU-FTPD Development Group.
All rights reserved.
Portions Copyright (c) 1980, 1985, 1988, 1989, 1990, 1991, 1993, 1994
The Regents of the University of California.
Portions Copyright (c) 1993, 1994 Washington University in Saint Louis.
Portions Copyright (c) 1996, 1998 Berkeley Software Design, Inc.
Portions Copyright (c) 1989 Massachusetts Institute of Technology.
Portions Copyright (c) 1998 Sendmail, Inc.
Portions Copyright (c) 1983, 1995, 1996, 1997 Eric P. Allman.
Portions Copyright (c) 1997 by Stan Barber.
Portions Copyright (c) 1997 by Kent Landfield.
Portions Copyright (c) 1991, 1992, 1993, 1994, 1995, 1996, 1997
Free Software Foundation, Inc.
Use and distribution of this software and its source code are governed
by the terms and conditions of the WU-FTPD Software License ("LICENSE").
If you did not receive a copy of the license, it may be obtained online
$Id: domain.c,v 1.11 2000/07/01 18:17:38 wuftpd Exp $
****************************************************************************/
/*
* domain.c - Name and address lookup and checking functions
*
* INITIAL AUTHOR - * Nikos Mouat <nikm@cyberflunk.com>
*/
#include "config.h"
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#ifdef HAVE_SYS_SYSLOG_H
#endif
#include <syslog.h>
#endif
#include <netdb.h>
#include "extensions.h"
#include "proto.h"
/* and there does not appear to be a global include file */
#ifndef TRUE
#define TRUE 1
#endif
#ifndef FALSE
#endif
/****************************************************************************
* check_name_for_ip()
* This routine checks if the IP address in remote_socket is a valid IP
* address for name.
***************************************************************************/
{
#ifdef INET6
int family;
/* move to the IPv4 part of an IPv4-mapped IPv6 address */
raddr += 12;
}
sockaddrlen = sizeof(struct sockaddr_in6);
}
else {
sockaddrlen = sizeof(struct sockaddr_in);
}
else
return TRUE;
}
}
}
}
#else
char **addrl;
sizeof(struct in_addr)) == 0)
return TRUE;
}
}
#endif /* INET6 */
/* no matching IP's */
return FALSE;
}
/****************************************************************************
* lookup()
* This routine returns the result of the lookup specified by dnsarg,
* which is either "refuse_no_reverse" or "refuse_mismatch", using the
* remote host's IP address.
***************************************************************************/
{
static int rhost_matches = FALSE;
static int rhost_matches_set = FALSE;
extern struct SOCKSTORAGE his_addr;
extern int rhlookup, nameserved;
extern char remotehost[];
/* skip lookups when not looking up the remote host's name */
if (!rhlookup)
return FALSE;
return nameserved;
/* refuse_mismatch */
if (!rhost_matches_set) {
if (nameserved) {
/*
* We have the hostname based on the real IP address. Lookup
* the hostname to make sure the real IP address is listed as
* a valid address for the hostname.
*/
}
else
}
return rhost_matches;
}
/****************************************************************************
* dns_check()
* This routine returns FALSE if the operation specified by dnsarg is
* FALSE and "override" wasn't specified, otherwise it returns TRUE.
***************************************************************************/
{
/* check the config to see if we care */
/* dns refuse_mismatch|refuse_no_reverse <filename> [override] */
continue;
char linebuf[MAXPATHLEN];
char outbuf[MAXPATHLEN];
int code = 530;
char *crptr;
/* lookups can be slow, so only call now result is needed */
/* ok, so we need to kick out this user */
/* check to see if admin wants to override */
/* Administrative override - but display warning anyway */
code = 220;
}
*crptr = '\0';
}
#ifndef NO_SUCKING_NEWLINES
#endif
if (code == 530) {
}
else {
}
}
}
}
}
return rc;
}
/****************************************************************************
* check_rhost_reverse()
* This routine returns FALSE if the remote host's IP address has no
* associated name and access should be refused, otherwise it returns TRUE.
***************************************************************************/
int check_rhost_reverse(void)
{
return dns_check("refuse_no_reverse");
}
/****************************************************************************
* check_rhost_matches()
* This routine returns FALSE if the remote host's IP address isn't listed
* as a valid IP address for the remote hostname and access should be
* refused, otherwise it returns TRUE.
***************************************************************************/
int check_rhost_matches(void)
{
return dns_check("refuse_mismatch");
}
/****************************************************************************
* rhostlookup()
* This routine returns TRUE if the remote host's name of a connection
* from remoteaddr should be looked up, otherwise it returns FALSE.
***************************************************************************/
int rhostlookup(char *remoteaddr)
{
/* default is to lookup the remote host's name */
/* rhostlookup yes|no [<addrglob> ...] */
if (!ARG0)
continue;
else
continue;
if (!ARG1)
else {
break;
}
}
}
}
return lookup;
}
/****************************************************************************
* set_res_options()
* set resolver options by setting the RES_OPTIONS environment variable.
* Note: name and address lookups are no longer done using DNS directly,
* so setting resolver options may have no effect.
***************************************************************************/
void set_res_options(void)
{
int which;
envbuf[0] = '\0';
/* dns resolveroptions [options] */
continue;
/* there are other DNS options, we only care about 'resolveroptions' */
if (envbuf[0] == '\0')
else
}
}
}
if (envbuf[0] != '\0') {
}
}