src/coremods/core_dns.cpp

   1 /*
   2  * InspIRCd -- Internet Relay Chat Daemon
   3  *
   4  *   Copyright (C) 2013 Adam <Adam@anope.org>
   5  *   Copyright (C) 2003-2013 Anope Team <team@anope.org>
   6  *
   7  * This file is part of InspIRCd.  InspIRCd is free software: you can
   8  * redistribute it and/or modify it under the terms of the GNU General Public
   9  * License as published by the Free Software Foundation, version 2.
  10  *
  11  * This program is distributed in the hope that it will be useful, but WITHOUT
  12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  13  * FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
  14  * details.
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #include "inspircd.h"
  21 #include "modules/dns.h"
  22 #include <iostream>
  23 #include <fstream>
  24
  25 #ifdef _WIN32
  26 #include <Iphlpapi.h>
  27 #pragma comment(lib, "Iphlpapi.lib")
  28 #endif
  29
  30 namespace DNS
  31 {
  32         /** Maximum value of a dns request id, 16 bits wide, 0xFFFF.
  33          */
  34         const unsigned int MAX_REQUEST_ID = 0xFFFF;
  35 }
  36
  37 using namespace DNS;
  38
  39 /** A full packet sent or recieved to/from the nameserver
  40  */
  41 class Packet : public Query
  42 {
  43         static bool IsValidName(const std::string& name)
  44         {
  45                 return (name.find_first_not_of("0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ.-") == std::string::npos);
  46         }
  47
  48         void PackName(unsigned char* output, unsigned short output_size, unsigned short& pos, const std::string& name)
  49         {
  50                 if (pos + name.length() + 2 > output_size)
  51                         throw Exception("Unable to pack name");
  52
  53                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Packing name " + name);
  54
  55                 irc::sepstream sep(name, '.');
  56                 std::string token;
  57
  58                 while (sep.GetToken(token))
  59                 {
  60                         output[pos++] = token.length();
  61                         memcpy(&output[pos], token.data(), token.length());
  62                         pos += token.length();
  63                 }
  64
  65                 output[pos++] = 0;
  66         }
  67
  68         std::string UnpackName(const unsigned char* input, unsigned short input_size, unsigned short& pos)
  69         {
  70                 std::string name;
  71                 unsigned short pos_ptr = pos, lowest_ptr = input_size;
  72                 bool compressed = false;
  73
  74                 if (pos_ptr >= input_size)
  75                         throw Exception("Unable to unpack name - no input");
  76
  77                 while (input[pos_ptr] > 0)
  78                 {
  79                         unsigned short offset = input[pos_ptr];
  80
  81                         if (offset & POINTER)
  82                         {
  83                                 if ((offset & POINTER) != POINTER)
  84                                         throw Exception("Unable to unpack name - bogus compression header");
  85                                 if (pos_ptr + 1 >= input_size)
  86                                         throw Exception("Unable to unpack name - bogus compression header");
  87
  88                                 /* Place pos at the second byte of the first (farthest) compression pointer */
  89                                 if (compressed == false)
  90                                 {
  91                                         ++pos;
  92                                         compressed = true;
  93                                 }
  94
  95                                 pos_ptr = (offset & LABEL) << 8 | input[pos_ptr + 1];
  96
  97                                 /* Pointers can only go back */
  98                                 if (pos_ptr >= lowest_ptr)
  99                                         throw Exception("Unable to unpack name - bogus compression pointer");
 100                                 lowest_ptr = pos_ptr;
 101                         }
 102                         else
 103                         {
 104                                 if (pos_ptr + offset + 1 >= input_size)
 105                                         throw Exception("Unable to unpack name - offset too large");
 106                                 if (!name.empty())
 107                                         name += ".";
 108                                 for (unsigned i = 1; i <= offset; ++i)
 109                                         name += input[pos_ptr + i];
 110
 111                                 pos_ptr += offset + 1;
 112                                 if (compressed == false)
 113                                         /* Move up pos */
 114                                         pos = pos_ptr;
 115                         }
 116                 }
 117
 118                 /* +1 pos either to one byte after the compression pointer or one byte after the ending \0 */
 119                 ++pos;
 120
 121                 if (name.empty())
 122                         throw Exception("Unable to unpack name - no name");
 123
 124                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Unpack name " + name);
 125
 126                 return name;
 127         }
 128
 129         Question UnpackQuestion(const unsigned char* input, unsigned short input_size, unsigned short& pos)
 130         {
 131                 Question q;
 132
 133                 q.name = this->UnpackName(input, input_size, pos);
 134
 135                 if (pos + 4 > input_size)
 136                         throw Exception("Unable to unpack question");
 137
 138                 q.type = static_cast<QueryType>(input[pos] << 8 | input[pos + 1]);
 139                 pos += 2;
 140
 141                 // Skip over query class code
 142                 pos += 2;
 143
 144                 return q;
 145         }
 146
 147         ResourceRecord UnpackResourceRecord(const unsigned char* input, unsigned short input_size, unsigned short& pos)
 148         {
 149                 ResourceRecord record = static_cast<ResourceRecord>(this->UnpackQuestion(input, input_size, pos));
 150
 151                 if (pos + 6 > input_size)
 152                         throw Exception("Unable to unpack resource record");
 153
 154                 record.ttl = (input[pos] << 24) | (input[pos + 1] << 16) | (input[pos + 2] << 8) | input[pos + 3];
 155                 pos += 4;
 156
 157                 //record.rdlength = input[pos] << 8 | input[pos + 1];
 158                 pos += 2;
 159
 160                 switch (record.type)
 161                 {
 162                         case QUERY_A:
 163                         {
 164                                 if (pos + 4 > input_size)
 165                                         throw Exception("Unable to unpack resource record");
 166
 167                                 irc::sockets::sockaddrs addrs;
 168                                 memset(&addrs, 0, sizeof(addrs));
 169
 170                                 addrs.in4.sin_family = AF_INET;
 171                                 addrs.in4.sin_addr.s_addr = input[pos] | (input[pos + 1] << 8) | (input[pos + 2] << 16)  | (input[pos + 3] << 24);
 172                                 pos += 4;
 173
 174                                 record.rdata = addrs.addr();
 175                                 break;
 176                         }
 177                         case QUERY_AAAA:
 178                         {
 179                                 if (pos + 16 > input_size)
 180                                         throw Exception("Unable to unpack resource record");
 181
 182                                 irc::sockets::sockaddrs addrs;
 183                                 memset(&addrs, 0, sizeof(addrs));
 184
 185                                 addrs.in6.sin6_family = AF_INET6;
 186                                 for (int j = 0; j < 16; ++j)
 187                                         addrs.in6.sin6_addr.s6_addr[j] = input[pos + j];
 188                                 pos += 16;
 189
 190                                 record.rdata = addrs.addr();
 191
 192                                 break;
 193                         }
 194                         case QUERY_CNAME:
 195                         case QUERY_PTR:
 196                         {
 197                                 record.rdata = this->UnpackName(input, input_size, pos);
 198                                 if (!IsValidName(record.rdata))
 199                                         throw Exception("Invalid name"); // XXX: Causes the request to time out
 200
 201                                 break;
 202                         }
 203                         default:
 204                                 break;
 205                 }
 206
 207                 if (!record.name.empty() && !record.rdata.empty())
 208                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, record.name + " -> " + record.rdata);
 209
 210                 return record;
 211         }
 212
 213  public:
 214         static const int POINTER = 0xC0;
 215         static const int LABEL = 0x3F;
 216         static const int HEADER_LENGTH = 12;
 217
 218         /* ID for this packet */
 219         RequestId id;
 220         /* Flags on the packet */
 221         unsigned short flags;
 222
 223         Packet() : id(0), flags(0)
 224         {
 225         }
 226
 227         void Fill(const unsigned char* input, const unsigned short len)
 228         {
 229                 if (len < HEADER_LENGTH)
 230                         throw Exception("Unable to fill packet");
 231
 232                 unsigned short packet_pos = 0;
 233
 234                 this->id = (input[packet_pos] << 8) | input[packet_pos + 1];
 235                 packet_pos += 2;
 236
 237                 this->flags = (input[packet_pos] << 8) | input[packet_pos + 1];
 238                 packet_pos += 2;
 239
 240                 unsigned short qdcount = (input[packet_pos] << 8) | input[packet_pos + 1];
 241                 packet_pos += 2;
 242
 243                 unsigned short ancount = (input[packet_pos] << 8) | input[packet_pos + 1];
 244                 packet_pos += 2;
 245
 246                 unsigned short nscount = (input[packet_pos] << 8) | input[packet_pos + 1];
 247                 packet_pos += 2;
 248
 249                 unsigned short arcount = (input[packet_pos] << 8) | input[packet_pos + 1];
 250                 packet_pos += 2;
 251
 252                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "qdcount: " + ConvToStr(qdcount) + " ancount: " + ConvToStr(ancount) + " nscount: " + ConvToStr(nscount) + " arcount: " + ConvToStr(arcount));
 253
 254                 if (qdcount != 1)
 255                         throw Exception("Question count != 1 in incoming packet");
 256
 257                 this->question = this->UnpackQuestion(input, len, packet_pos);
 258
 259                 for (unsigned i = 0; i < ancount; ++i)
 260                         this->answers.push_back(this->UnpackResourceRecord(input, len, packet_pos));
 261         }
 262
 263         unsigned short Pack(unsigned char* output, unsigned short output_size)
 264         {
 265                 if (output_size < HEADER_LENGTH)
 266                         throw Exception("Unable to pack packet");
 267
 268                 unsigned short pos = 0;
 269
 270                 output[pos++] = this->id >> 8;
 271                 output[pos++] = this->id & 0xFF;
 272                 output[pos++] = this->flags >> 8;
 273                 output[pos++] = this->flags & 0xFF;
 274                 output[pos++] = 0; // Question count, high byte
 275                 output[pos++] = 1; // Question count, low byte
 276                 output[pos++] = 0; // Answer count, high byte
 277                 output[pos++] = 0; // Answer count, low byte
 278                 output[pos++] = 0;
 279                 output[pos++] = 0;
 280                 output[pos++] = 0;
 281                 output[pos++] = 0;
 282
 283                 {
 284                         Question& q = this->question;
 285
 286                         if (q.type == QUERY_PTR)
 287                         {
 288                                 irc::sockets::sockaddrs ip;
 289                                 irc::sockets::aptosa(q.name, 0, ip);
 290
 291                                 if (q.name.find(':') != std::string::npos)
 292                                 {
 293                                         static const char* const hex = "0123456789abcdef";
 294                                         char reverse_ip[128];
 295                                         unsigned reverse_ip_count = 0;
 296                                         for (int j = 15; j >= 0; --j)
 297                                         {
 298                                                 reverse_ip[reverse_ip_count++] = hex[ip.in6.sin6_addr.s6_addr[j] & 0xF];
 299                                                 reverse_ip[reverse_ip_count++] = '.';
 300                                                 reverse_ip[reverse_ip_count++] = hex[ip.in6.sin6_addr.s6_addr[j] >> 4];
 301                                                 reverse_ip[reverse_ip_count++] = '.';
 302                                         }
 303                                         reverse_ip[reverse_ip_count++] = 0;
 304
 305                                         q.name = reverse_ip;
 306                                         q.name += "ip6.arpa";
 307                                 }
 308                                 else
 309                                 {
 310                                         unsigned long forward = ip.in4.sin_addr.s_addr;
 311                                         ip.in4.sin_addr.s_addr = forward << 24 | (forward & 0xFF00) << 8 | (forward & 0xFF0000) >> 8 | forward >> 24;
 312
 313                                         q.name = ip.addr() + ".in-addr.arpa";
 314                                 }
 315                         }
 316
 317                         this->PackName(output, output_size, pos, q.name);
 318
 319                         if (pos + 4 >= output_size)
 320                                 throw Exception("Unable to pack packet");
 321
 322                         short s = htons(q.type);
 323                         memcpy(&output[pos], &s, 2);
 324                         pos += 2;
 325
 326                         // Query class, always IN
 327                         output[pos++] = 0;
 328                         output[pos++] = 1;
 329                 }
 330
 331                 return pos;
 332         }
 333 };
 334
 335 class MyManager : public Manager, public Timer, public EventHandler
 336 {
 337         typedef TR1NS::unordered_map<Question, Query, Question::hash> cache_map;
 338         cache_map cache;
 339
 340         irc::sockets::sockaddrs myserver;
 341
 342         /** Maximum number of entries in cache
 343          */
 344         static const unsigned int MAX_CACHE_SIZE = 1000;
 345
 346         static bool IsExpired(const Query& record, time_t now = ServerInstance->Time())
 347         {
 348                 const ResourceRecord& req = record.answers[0];
 349                 return (req.created + static_cast<time_t>(req.ttl) < now);
 350         }
 351
 352         /** Check the DNS cache to see if request can be handled by a cached result
 353          * @return true if a cached result was found.
 354          */
 355         bool CheckCache(DNS::Request* req, const DNS::Question& question)
 356         {
 357                 ServerInstance->Logs->Log(MODNAME, LOG_SPARSE, "cache: Checking cache for " + question.name);
 358
 359                 cache_map::iterator it = this->cache.find(question);
 360                 if (it == this->cache.end())
 361                         return false;
 362
 363                 Query& record = it->second;
 364                 if (IsExpired(record))
 365                 {
 366                         this->cache.erase(it);
 367                         return false;
 368                 }
 369
 370                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "cache: Using cached result for " + question.name);
 371                 record.cached = true;
 372                 req->OnLookupComplete(&record);
 373                 return true;
 374         }
 375
 376         /** Add a record to the dns cache
 377          * @param r The record
 378          */
 379         void AddCache(Query& r)
 380         {
 381                 if (cache.size() >= MAX_CACHE_SIZE)
 382                         cache.clear();
 383
 384                 // Determine the lowest TTL value and use that as the TTL of the cache entry
 385                 unsigned int cachettl = UINT_MAX;
 386                 for (std::vector<ResourceRecord>::const_iterator i = r.answers.begin(); i != r.answers.end(); ++i)
 387                 {
 388                         const ResourceRecord& rr = *i;
 389                         if (rr.ttl < cachettl)
 390                                 cachettl = rr.ttl;
 391                 }
 392
 393                 cachettl = std::min(cachettl, (unsigned int)5*60);
 394                 ResourceRecord& rr = r.answers.front();
 395                 // Set TTL to what we've determined to be the lowest
 396                 rr.ttl = cachettl;
 397                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "cache: added cache for " + rr.name + " -> " + rr.rdata + " ttl: " + ConvToStr(rr.ttl));
 398                 this->cache[r.question] = r;
 399         }
 400
 401  public:
 402         DNS::Request* requests[MAX_REQUEST_ID+1];
 403
 404         MyManager(Module* c) : Manager(c), Timer(5*60, true)
 405         {
 406                 for (unsigned int i = 0; i <= MAX_REQUEST_ID; ++i)
 407                         requests[i] = NULL;
 408                 ServerInstance->Timers.AddTimer(this);
 409         }
 410
 411         ~MyManager()
 412         {
 413                 for (unsigned int i = 0; i <= MAX_REQUEST_ID; ++i)
 414                 {
 415                         DNS::Request* request = requests[i];
 416                         if (!request)
 417                                 continue;
 418
 419                         Query rr(*request);
 420                         rr.error = ERROR_UNKNOWN;
 421                         request->OnError(&rr);
 422
 423                         delete request;
 424                 }
 425         }
 426
 427         void Process(DNS::Request* req)
 428         {
 429                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Processing request to lookup " + req->name + " of type " + ConvToStr(req->type) + " to " + this->myserver.addr());
 430
 431                 /* Create an id */
 432                 unsigned int tries = 0;
 433                 int id;
 434                 do
 435                 {
 436                         id = ServerInstance->GenRandomInt(DNS::MAX_REQUEST_ID+1);
 437
 438                         if (++tries == DNS::MAX_REQUEST_ID*5)
 439                         {
 440                                 // If we couldn't find an empty slot this many times, do a sequential scan as a last
 441                                 // resort. If an empty slot is found that way, go on, otherwise throw an exception
 442                                 id = -1;
 443                                 for (unsigned int i = 0; i <= DNS::MAX_REQUEST_ID; i++)
 444                                 {
 445                                         if (!this->requests[i])
 446                                         {
 447                                                 id = i;
 448                                                 break;
 449                                         }
 450                                 }
 451
 452                                 if (id == -1)
 453                                         throw Exception("DNS: All ids are in use");
 454
 455                                 break;
 456                         }
 457                 }
 458                 while (this->requests[id]);
 459
 460                 req->id = id;
 461                 this->requests[req->id] = req;
 462
 463                 Packet p;
 464                 p.flags = QUERYFLAGS_RD;
 465                 p.id = req->id;
 466                 p.question = *req;
 467
 468                 unsigned char buffer[524];
 469                 unsigned short len = p.Pack(buffer, sizeof(buffer));
 470
 471                 /* Note that calling Pack() above can actually change the contents of p.question.name, if the query is a PTR,
 472                  * to contain the value that would be in the DNS cache, which is why this is here.
 473                  */
 474                 if (req->use_cache && this->CheckCache(req, p.question))
 475                 {
 476                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Using cached result");
 477                         delete req;
 478                         return;
 479                 }
 480
 481                 // Update name in the original request so question checking works for PTR queries
 482                 req->name = p.question.name;
 483
 484                 if (SocketEngine::SendTo(this, buffer, len, 0, &this->myserver.sa, this->myserver.sa_size()) != len)
 485                         throw Exception("DNS: Unable to send query");
 486
 487                 // Add timer for timeout
 488                 ServerInstance->Timers.AddTimer(req);
 489         }
 490
 491         void RemoveRequest(DNS::Request* req)
 492         {
 493                 if (requests[req->id] == req)
 494                         requests[req->id] = NULL;
 495         }
 496
 497         std::string GetErrorStr(Error e)
 498         {
 499                 switch (e)
 500                 {
 501                         case ERROR_UNLOADED:
 502                                 return "Module is unloading";
 503                         case ERROR_TIMEDOUT:
 504                                 return "Request timed out";
 505                         case ERROR_NOT_AN_ANSWER:
 506                         case ERROR_NONSTANDARD_QUERY:
 507                         case ERROR_FORMAT_ERROR:
 508                         case ERROR_MALFORMED:
 509                                 return "Malformed answer";
 510                         case ERROR_SERVER_FAILURE:
 511                         case ERROR_NOT_IMPLEMENTED:
 512                         case ERROR_REFUSED:
 513                         case ERROR_INVALIDTYPE:
 514                                 return "Nameserver failure";
 515                         case ERROR_DOMAIN_NOT_FOUND:
 516                         case ERROR_NO_RECORDS:
 517                                 return "Domain not found";
 518                         case ERROR_NONE:
 519                         case ERROR_UNKNOWN:
 520                         default:
 521                                 return "Unknown error";
 522                 }
 523         }
 524
 525         void OnEventHandlerError(int errcode) CXX11_OVERRIDE
 526         {
 527                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "UDP socket got an error event");
 528         }
 529
 530         void OnEventHandlerRead() CXX11_OVERRIDE
 531         {
 532                 unsigned char buffer[524];
 533                 irc::sockets::sockaddrs from;
 534                 socklen_t x = sizeof(from);
 535
 536                 int length = SocketEngine::RecvFrom(this, buffer, sizeof(buffer), 0, &from.sa, &x);
 537
 538                 if (length < Packet::HEADER_LENGTH)
 539                         return;
 540
 541                 if (myserver != from)
 542                 {
 543                         std::string server1 = from.str();
 544                         std::string server2 = myserver.str();
 545                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Got a result from the wrong server! Bad NAT or DNS forging attempt? '%s' != '%s'",
 546                                 server1.c_str(), server2.c_str());
 547                         return;
 548                 }
 549
 550                 Packet recv_packet;
 551                 bool valid = false;
 552
 553                 try
 554                 {
 555                         recv_packet.Fill(buffer, length);
 556                         valid = true;
 557                 }
 558                 catch (Exception& ex)
 559                 {
 560                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, ex.GetReason());
 561                 }
 562
 563                 // recv_packet.id must be filled in here
 564                 DNS::Request* request = this->requests[recv_packet.id];
 565                 if (request == NULL)
 566                 {
 567                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Received an answer for something we didn't request");
 568                         return;
 569                 }
 570
 571                 if (static_cast<Question&>(*request) != recv_packet.question)
 572                 {
 573                         // This can happen under high latency, drop it silently, do not fail the request
 574                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Received an answer that isn't for a question we asked");
 575                         return;
 576                 }
 577
 578                 if (!valid)
 579                 {
 580                         ServerInstance->stats.DnsBad++;
 581                         recv_packet.error = ERROR_MALFORMED;
 582                         request->OnError(&recv_packet);
 583                 }
 584                 else if (recv_packet.flags & QUERYFLAGS_OPCODE)
 585                 {
 586                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Received a nonstandard query");
 587                         ServerInstance->stats.DnsBad++;
 588                         recv_packet.error = ERROR_NONSTANDARD_QUERY;
 589                         request->OnError(&recv_packet);
 590                 }
 591                 else if (!(recv_packet.flags & QUERYFLAGS_QR) || (recv_packet.flags & QUERYFLAGS_RCODE))
 592                 {
 593                         Error error = ERROR_UNKNOWN;
 594
 595                         switch (recv_packet.flags & QUERYFLAGS_RCODE)
 596                         {
 597                                 case 1:
 598                                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "format error");
 599                                         error = ERROR_FORMAT_ERROR;
 600                                         break;
 601                                 case 2:
 602                                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "server error");
 603                                         error = ERROR_SERVER_FAILURE;
 604                                         break;
 605                                 case 3:
 606                                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "domain not found");
 607                                         error = ERROR_DOMAIN_NOT_FOUND;
 608                                         break;
 609                                 case 4:
 610                                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "not implemented");
 611                                         error = ERROR_NOT_IMPLEMENTED;
 612                                         break;
 613                                 case 5:
 614                                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "refused");
 615                                         error = ERROR_REFUSED;
 616                                         break;
 617                                 default:
 618                                         break;
 619                         }
 620
 621                         ServerInstance->stats.DnsBad++;
 622                         recv_packet.error = error;
 623                         request->OnError(&recv_packet);
 624                 }
 625                 else if (recv_packet.answers.empty())
 626                 {
 627                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "No resource records returned");
 628                         ServerInstance->stats.DnsBad++;
 629                         recv_packet.error = ERROR_NO_RECORDS;
 630                         request->OnError(&recv_packet);
 631                 }
 632                 else
 633                 {
 634                         ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Lookup complete for " + request->name);
 635                         ServerInstance->stats.DnsGood++;
 636                         request->OnLookupComplete(&recv_packet);
 637                         this->AddCache(recv_packet);
 638                 }
 639
 640                 ServerInstance->stats.Dns++;
 641
 642                 /* Request's destructor removes it from the request map */
 643                 delete request;
 644         }
 645
 646         bool Tick(time_t now)
 647         {
 648                 ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "cache: purging DNS cache");
 649
 650                 for (cache_map::iterator it = this->cache.begin(); it != this->cache.end(); )
 651                 {
 652                         const Query& query = it->second;
 653                         if (IsExpired(query, now))
 654                                 this->cache.erase(it++);
 655                         else
 656                                 ++it;
 657                 }
 658                 return true;
 659         }
 660
 661         void Rehash(const std::string& dnsserver, std::string sourceaddr, unsigned int sourceport)
 662         {
 663                 if (this->GetFd() > -1)
 664                 {
 665                         SocketEngine::Shutdown(this, 2);
 666                         SocketEngine::Close(this);
 667
 668                         /* Remove expired entries from the cache */
 669                         this->Tick(ServerInstance->Time());
 670                 }
 671
 672                 irc::sockets::aptosa(dnsserver, DNS::PORT, myserver);
 673
 674                 /* Initialize mastersocket */
 675                 int s = socket(myserver.sa.sa_family, SOCK_DGRAM, 0);
 676                 this->SetFd(s);
 677
 678                 /* Have we got a socket? */
 679                 if (this->GetFd() != -1)
 680                 {
 681                         SocketEngine::SetReuse(s);
 682                         SocketEngine::NonBlocking(s);
 683
 684                         irc::sockets::sockaddrs bindto;
 685                         if (sourceaddr.empty())
 686                         {
 687                                 // set a sourceaddr for irc::sockets::aptosa() based on the servers af type
 688                                 if (myserver.sa.sa_family == AF_INET)
 689                                         sourceaddr = "0.0.0.0";
 690                                 else if (myserver.sa.sa_family == AF_INET6)
 691                                         sourceaddr = "::";
 692                         }
 693                         irc::sockets::aptosa(sourceaddr, sourceport, bindto);
 694
 695                         if (SocketEngine::Bind(this->GetFd(), bindto) < 0)
 696                         {
 697                                 /* Failed to bind */
 698                                 ServerInstance->Logs->Log(MODNAME, LOG_SPARSE, "Error binding dns socket - hostnames will NOT resolve");
 699                                 SocketEngine::Close(this->GetFd());
 700                                 this->SetFd(-1);
 701                         }
 702                         else if (!SocketEngine::AddFd(this, FD_WANT_POLL_READ | FD_WANT_NO_WRITE))
 703                         {
 704                                 ServerInstance->Logs->Log(MODNAME, LOG_SPARSE, "Internal error starting DNS - hostnames will NOT resolve.");
 705                                 SocketEngine::Close(this->GetFd());
 706                                 this->SetFd(-1);
 707                         }
 708
 709                         if (bindto.sa.sa_family != myserver.sa.sa_family)
 710                                 ServerInstance->Logs->Log(MODNAME, LOG_SPARSE, "Nameserver address family differs from source address family - hostnames might not resolve");
 711                 }
 712                 else
 713                 {
 714                         ServerInstance->Logs->Log(MODNAME, LOG_SPARSE, "Error creating DNS socket - hostnames will NOT resolve");
 715                 }
 716         }
 717 };
 718
 719 class ModuleDNS : public Module
 720 {
 721         MyManager manager;
 722         std::string DNSServer;
 723         std::string SourceIP;
 724         unsigned int SourcePort;
 725
 726         void FindDNSServer()
 727         {
 728 #ifdef _WIN32
 729                 // attempt to look up their nameserver from the system
 730                 ServerInstance->Logs->Log("CONFIG", LOG_DEFAULT, "WARNING: <dns:server> not defined, attempting to find a working server in the system settings...");
 731
 732                 PFIXED_INFO pFixedInfo;
 733                 DWORD dwBufferSize = sizeof(FIXED_INFO);
 734                 pFixedInfo = (PFIXED_INFO) HeapAlloc(GetProcessHeap(), 0, sizeof(FIXED_INFO));
 735
 736                 if (pFixedInfo)
 737                 {
 738                         if (GetNetworkParams(pFixedInfo, &dwBufferSize) == ERROR_BUFFER_OVERFLOW)
 739                         {
 740                                 HeapFree(GetProcessHeap(), 0, pFixedInfo);
 741                                 pFixedInfo = (PFIXED_INFO) HeapAlloc(GetProcessHeap(), 0, dwBufferSize);
 742                         }
 743
 744                         if (pFixedInfo)
 745                         {
 746                                 if (GetNetworkParams(pFixedInfo, &dwBufferSize) == NO_ERROR)
 747                                         DNSServer = pFixedInfo->DnsServerList.IpAddress.String;
 748
 749                                 HeapFree(GetProcessHeap(), 0, pFixedInfo);
 750                         }
 751
 752                         if (!DNSServer.empty())
 753                         {
 754                                 ServerInstance->Logs->Log("CONFIG", LOG_DEFAULT, "<dns:server> set to '%s' as first active resolver in the system settings.", DNSServer.c_str());
 755                                 return;
 756                         }
 757                 }
 758
 759                 ServerInstance->Logs->Log("CONFIG", LOG_DEFAULT, "No viable nameserver found! Defaulting to nameserver '127.0.0.1'!");
 760 #else
 761                 // attempt to look up their nameserver from /etc/resolv.conf
 762                 ServerInstance->Logs->Log("CONFIG", LOG_DEFAULT, "WARNING: <dns:server> not defined, attempting to find working server in /etc/resolv.conf...");
 763
 764                 std::ifstream resolv("/etc/resolv.conf");
 765
 766                 while (resolv >> DNSServer)
 767                 {
 768                         if (DNSServer == "nameserver")
 769                         {
 770                                 resolv >> DNSServer;
 771                                 if (DNSServer.find_first_not_of("0123456789.") == std::string::npos || DNSServer.find_first_not_of("0123456789ABCDEFabcdef:") == std::string::npos)
 772                                 {
 773                                         ServerInstance->Logs->Log("CONFIG", LOG_DEFAULT, "<dns:server> set to '%s' as first resolver in /etc/resolv.conf.",DNSServer.c_str());
 774                                         return;
 775                                 }
 776                         }
 777                 }
 778
 779                 ServerInstance->Logs->Log("CONFIG", LOG_DEFAULT, "/etc/resolv.conf contains no viable nameserver entries! Defaulting to nameserver '127.0.0.1'!");
 780 #endif
 781                 DNSServer = "127.0.0.1";
 782         }
 783
 784  public:
 785         ModuleDNS() : manager(this)
 786                 , SourcePort(0)
 787         {
 788         }
 789
 790         void ReadConfig(ConfigStatus& status) CXX11_OVERRIDE
 791         {
 792                 std::string oldserver = DNSServer;
 793                 const std::string oldip = SourceIP;
 794                 const unsigned int oldport = SourcePort;
 795
 796                 ConfigTag* tag = ServerInstance->Config->ConfValue("dns");
 797                 DNSServer = tag->getString("server");
 798                 SourceIP = tag->getString("sourceip");
 799                 SourcePort = tag->getInt("sourceport", 0, 0, 65535);
 800
 801                 if (DNSServer.empty())
 802                         FindDNSServer();
 803
 804                 if (oldserver != DNSServer || oldip != SourceIP || oldport != SourcePort)
 805                         this->manager.Rehash(DNSServer, SourceIP, SourcePort);
 806         }
 807
 808         void OnUnloadModule(Module* mod)
 809         {
 810                 for (unsigned int i = 0; i <= MAX_REQUEST_ID; ++i)
 811                 {
 812                         DNS::Request* req = this->manager.requests[i];
 813                         if (!req)
 814                                 continue;
 815
 816                         if (req->creator == mod)
 817                         {
 818                                 Query rr(*req);
 819                                 rr.error = ERROR_UNLOADED;
 820                                 req->OnError(&rr);
 821
 822                                 delete req;
 823                         }
 824                 }
 825         }
 826
 827         Version GetVersion()
 828         {
 829                 return Version("DNS support", VF_CORE|VF_VENDOR);
 830         }
 831 };
 832
 833 MODULE_INIT(ModuleDNS)
 834