/* * InspIRCd -- Internet Relay Chat Daemon * * Copyright (C) 2007 Dennis Friis * Copyright (C) 2007 Robin Burchell * Copyright (C) 2006 Craig Edwards * * This file is part of InspIRCd. InspIRCd is free software: you can * redistribute it and/or modify it under the terms of the GNU General Public * License as published by the Free Software Foundation, version 2. * * This program is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more * details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ #include "inspircd.h" class ModuleConnFlood : public Module { int seconds, timeout, boot_wait; unsigned int conns; unsigned int maxconns; bool throttled; time_t first; std::string quitmsg; public: ModuleConnFlood() : conns(0), throttled(false) { } void init() CXX11_OVERRIDE { InitConf(); } Version GetVersion() CXX11_OVERRIDE { return Version("Connection throttle", VF_VENDOR); } void InitConf() { /* read configuration variables */ ConfigTag* tag = ServerInstance->Config->ConfValue("connflood"); /* throttle configuration */ seconds = tag->getInt("seconds"); maxconns = tag->getInt("maxconns"); timeout = tag->getInt("timeout"); quitmsg = tag->getString("quitmsg"); /* seconds to wait when the server just booted */ boot_wait = tag->getInt("bootwait"); first = ServerInstance->Time(); } ModResult OnUserRegister(LocalUser* user) CXX11_OVERRIDE { if (user->exempt) return MOD_RES_PASSTHRU; time_t next = ServerInstance->Time(); if ((ServerInstance->startup_time + boot_wait) > next) return MOD_RES_PASSTHRU; /* time difference between first and latest connection */ time_t tdiff = next - first; /* increase connection count */ conns++; if (throttled) { if (tdiff > seconds + timeout) { /* expire throttle */ throttled = false; ServerInstance->SNO->WriteGlobalSno('a', "Connection throttle deactivated"); return MOD_RES_PASSTHRU; } ServerInstance->Users->QuitUser(user, quitmsg); return MOD_RES_DENY; } if (tdiff <= seconds) { if (conns >= maxconns) { throttled = true; ServerInstance->SNO->WriteGlobalSno('a', "Connection throttle activated"); ServerInstance->Users->QuitUser(user, quitmsg); return MOD_RES_DENY; } } else { conns = 1; first = next; } return MOD_RES_PASSTHRU; } void OnRehash(User* user) CXX11_OVERRIDE { InitConf(); } }; MODULE_INIT(ModuleConnFlood)