src/modules/m_spanningtree/treesocket2.cpp

   1 /*       +------------------------------------+
   2  *       | Inspire Internet Relay Chat Daemon |
   3  *       +------------------------------------+
   4  *
   5  *  InspIRCd: (C) 2002-2008 InspIRCd Development Team
   6  * See: http://www.inspircd.org/wiki/index.php/Credits
   7  *
   8  * This program is free but copyrighted software; see
   9  *            the file COPYING for details.
  10  *
  11  * ---------------------------------------------------
  12  */
  13
  14 #include "inspircd.h"
  15 #include "commands/cmd_whois.h"
  16 #include "commands/cmd_stats.h"
  17 #include "socket.h"
  18 #include "wildcard.h"
  19 #include "xline.h"
  20 #include "transport.h"
  21 #include "socketengine.h"
  22
  23 #include "m_spanningtree/main.h"
  24 #include "m_spanningtree/utils.h"
  25 #include "m_spanningtree/treeserver.h"
  26 #include "m_spanningtree/link.h"
  27 #include "m_spanningtree/treesocket.h"
  28 #include "m_spanningtree/resolvers.h"
  29 #include "m_spanningtree/handshaketimer.h"
  30
  31 /* $ModDep: m_spanningtree/timesynctimer.h m_spanningtree/resolvers.h m_spanningtree/main.h m_spanningtree/utils.h m_spanningtree/treeserver.h m_spanningtree/link.h m_spanningtree/treesocket.h */
  32
  33 void TreeSocket::WriteLine(std::string line)
  34 {
  35         Instance->Logs->Log("m_spanningtree",DEBUG, "S[%d] O %s", this->GetFd(), line.c_str());
  36         line.append("\r\n");
  37         this->Write(line);
  38 }
  39
  40
  41 /* Handle ERROR command */
  42 bool TreeSocket::Error(std::deque<std::string> &params)
  43 {
  44         if (params.size() < 1)
  45                 return false;
  46         this->Instance->SNO->WriteToSnoMask('l',"ERROR from %s: %s",(!InboundServerName.empty() ? InboundServerName.c_str() : myhost.c_str()),params[0].c_str());
  47         /* we will return false to cause the socket to close. */
  48         return false;
  49 }
  50
  51 void TreeSocket::Split(const std::string &line, std::deque<std::string> &n)
  52 {
  53         n.clear();
  54         irc::tokenstream tokens(line);
  55         std::string param;
  56         while (tokens.GetToken(param))
  57         {
  58                 n.push_back(param);
  59         }
  60         return;
  61 }
  62
  63 bool TreeSocket::ProcessLine(std::string &line)
  64 {
  65         std::deque<std::string> params;
  66         irc::string command;
  67         std::string prefix;
  68
  69         line = line.substr(0, line.find_first_of("\r\n"));
  70
  71         if (line.empty())
  72                 return true;
  73
  74         Instance->Logs->Log("m_spanningtree",DEBUG, "S[%d] I %s", this->GetFd(), line.c_str());
  75
  76         this->Split(line.c_str(),params);
  77
  78         if (params.empty())
  79                 return true;
  80
  81         if ((params[0][0] == ':') && (params.size() > 1))
  82         {
  83                 prefix = params[0].substr(1);
  84                 params.pop_front();
  85
  86                 if (prefix.empty())
  87                 {
  88                         this->SendError("BUG (?) Empty prefix recieved.");
  89                         return false;
  90                 }
  91         }
  92
  93         command = params[0].c_str();
  94         params.pop_front();
  95
  96         switch (this->LinkState)
  97         {
  98                 TreeServer* Node;
  99
 100                 case WAIT_AUTH_1:
 101                         /*
 102                          * State WAIT_AUTH_1:
 103                          *  Waiting for SERVER command from remote server. Server initiating
 104                          *  the connection sends the first SERVER command, listening server
 105                          *  replies with theirs if its happy, then if the initiator is happy,
 106                          *  it starts to send its net sync, which starts the merge, otherwise
 107                          *  it sends an ERROR.
 108                          */
 109                         if (command == "PASS")
 110                         {
 111                                 /*
 112                                  * Ignore this silently. Some services packages insist on sending PASS, even
 113                                  * when it is not required (i.e. by us). We have to ignore this here, otherwise
 114                                  * as it's an unknown command (effectively), it will cause the connection to be
 115                                  * closed, which probably isn't what people want. -- w00t
 116                                  */
 117                         }
 118                         else if (command == "SERVER")
 119                         {
 120                                 return this->Inbound_Server(params);
 121                         }
 122                         else if (command == "ERROR")
 123                         {
 124                                 return this->Error(params);
 125                         }
 126                         else if (command == "USER")
 127                         {
 128                                 this->SendError("Client connections to this port are prohibited.");
 129                                 return false;
 130                         }
 131                         else if (command == "CAPAB")
 132                         {
 133                                 return this->Capab(params);
 134                         }
 135                         else
 136                         {
 137                                 // XXX ...wtf.
 138                                 irc::string error = "Invalid command in negotiation phase: " + command;
 139                                 this->SendError(assign(error));
 140                                 return false;
 141                         }
 142                 break;
 143                 case WAIT_AUTH_2:
 144                         /*
 145                          * State WAIT_AUTH_2:
 146                          *  We have sent SERVER to the other side of the connection. Now we're waiting for them to start BURST.
 147                          *  The other option at this stage of things, of course, is for them to close our connection thanks
 148                          *  to invalid credentials.. -- w
 149                          */
 150                         if (command == "SERVER")
 151                         {
 152                                 /*
 153                                  * Connection is either attempting to re-auth itself (stupid) or sending netburst without sending BURST.
 154                                  * Both of these aren't allowable, so block them here. -- w
 155                                  */
 156                                 this->SendError("You may not re-authenticate or commence netburst without sending BURST.");
 157                                 return true;
 158                         }
 159                         else if (command == "BURST")
 160                         {
 161                                 if (params.size())
 162                                 {
 163                                         time_t them = atoi(params[0].c_str());
 164                                         time_t delta = them - Instance->Time();
 165                                         if ((delta < -600) || (delta > 600))
 166                                         {
 167                                                 Instance->SNO->WriteToSnoMask('l',"\2ERROR\2: Your clocks are out by %d seconds (this is more than five minutes). Link aborted, \2PLEASE SYNC YOUR CLOCKS!\2",abs(delta));
 168                                                 SendError("Your clocks are out by "+ConvToStr(abs(delta))+" seconds (this is more than five minutes). Link aborted, PLEASE SYNC YOUR CLOCKS!");
 169                                                 return false;
 170                                         }
 171                                         else if ((delta < -30) || (delta > 30))
 172                                         {
 173                                                 Instance->SNO->WriteToSnoMask('l',"\2WARNING\2: Your clocks are out by %d seconds. Please consider synching your clocks.", abs(delta));
 174                                         }
 175                                 }
 176                                 this->LinkState = CONNECTED;
 177                                 Link* lnk = Utils->FindLink(InboundServerName);
 178
 179                                 Node = new TreeServer(this->Utils, this->Instance, InboundServerName, InboundDescription, InboundSID, Utils->TreeRoot, this, lnk ? lnk->Hidden : false);
 180
 181                                 if (Node->DuplicateID())
 182                                 {
 183                                         this->SendError("Server ID "+InboundSID+" already exists on the network!");
 184                                         this->Instance->SNO->WriteToSnoMask('l',"Server \2"+InboundServerName+"\2 being introduced from \2" + prefix + "\2 denied, server ID already exists on the network. Closing link.");
 185                                         return false;
 186                                 }
 187
 188                                 Utils->TreeRoot->AddChild(Node);
 189                                 params.clear();
 190                                 params.push_back(InboundServerName);
 191                                 params.push_back("*");
 192                                 params.push_back("1");
 193                                 params.push_back(InboundSID);
 194                                 params.push_back(":"+InboundDescription);
 195                                 Utils->DoOneToAllButSender(Instance->Config->GetSID(),"SERVER",params,InboundServerName);
 196                                 Node->bursting = true;
 197                                 this->DoBurst(Node);
 198                         }
 199                         else if (command == "ERROR")
 200                         {
 201                                 return this->Error(params);
 202                         }
 203                         else if (command == "CAPAB")
 204                         {
 205                                 return this->Capab(params);
 206                         }
 207
 208                 break;
 209                 case LISTENER:
 210                         /*
 211                          * This really shouldn't happen.
 212                          */
 213                         this->SendError("Internal error -- listening socket accepted its own descriptor!!!");
 214                         return false;
 215                 break;
 216                 case CONNECTING:
 217                         /*
 218                          * State CONNECTING:
 219                          *  We're connecting (OUTGOING) to another server. They are in state WAIT_AUTH_1 until they verify
 220                          *  our credentials, when they proceed into WAIT_AUTH_2 and send SERVER to us. We then send BURST
 221                          *  + our netburst, which will put them into CONNECTED state. -- w
 222                          */
 223                         if (command == "SERVER")
 224                         {
 225                                 // Our credentials have been accepted, send netburst. (this puts US into the CONNECTED state)
 226                                 return this->Outbound_Reply_Server(params);
 227                         }
 228                         else if (command == "ERROR")
 229                         {
 230                                 return this->Error(params);
 231                         }
 232                         else if (command == "CAPAB")
 233                         {
 234                                 return this->Capab(params);
 235                         }
 236                 break;
 237                 case CONNECTED:
 238                         /*
 239                         * State CONNECTED:
 240                          *  Credentials have been exchanged, we've gotten their 'BURST' (or sent ours).
 241                          *  Anything from here on should be accepted a little more reasonably.
 242                          */
 243                         if (!prefix.empty())
 244                         {
 245                                 /*
 246                                  * Check for fake direction here, and drop any instances that are found.
 247                                  * What is fake direction? Imagine the following server setup:
 248                                  *    0AA <-> 0AB <-> 0AC
 249                                  * Fake direction would be 0AC sending a message to 0AB claiming to be from
 250                                  * 0AA, or something similar. Basically, a message taking a path that *cannot*
 251                                  * be correct.
 252                                  *
 253                                  * When would this be seen?
 254                                  * Well, hopefully never. It could be caused by race conditions, bugs, or
 255                                  * "miscreant" servers, though, so let's check anyway. -- w
 256                                  */
 257                                 std::string direction = prefix;
 258
 259                                 User *t = this->Instance->FindUUID(prefix);
 260                                 if (t)
 261                                 {
 262                                         direction = t->server;
 263                                 }
 264
 265                                 TreeServer* route_back_again = Utils->BestRouteTo(direction);
 266                                 if ((!route_back_again) || (route_back_again->GetSocket() != this))
 267                                 {
 268                                         if (route_back_again)
 269                                                 Instance->Logs->Log("m_spanningtree",DEBUG,"Protocol violation: Fake direction in command '%s' from connection '%s'",line.c_str(),this->GetName().c_str());
 270                                         return true;
 271                                 }
 272                                 /* Fix by brain:
 273                                  * When there is activity on the socket, reset the ping counter so
 274                                  * that we're not wasting bandwidth pinging an active server.
 275                                  */
 276                                 route_back_again->SetNextPingTime(Instance->Time() + Utils->PingFreq);
 277                                 route_back_again->SetPingFlag();
 278                         }
 279                         else
 280                         {
 281                                 /*
 282                                  * Empty prefix from a server to server link:
 283                                  *  This is somewhat bad/naughty, so let's set the prefix
 284                                  *  to be the link that we got it from, so we don't break anything. -- w
 285                                  */
 286                                 TreeServer* n = Utils->FindServer(GetName());
 287                                 if (n)
 288                                         prefix = n->GetID();
 289                                 else
 290                                         prefix = GetName();
 291                         }
 292
 293                         /*
 294                          * First up, check for any malformed commands (e.g. MODE without a timestamp)
 295                          * and rewrite commands where necessary (SVSMODE -> MODE for services). -- w
 296                          */
 297                         if (command == "SVSMODE") // This isn't in an "else if" so we still force FMODE for changes on channels.
 298                                 command = "MODE";
 299
 300                         if (command == "MODE")
 301                         {
 302                                 if (params.size() >= 2)
 303                                 {
 304                                         Channel* channel = Instance->FindChan(params[0]);
 305                                         if (channel)
 306                                         {
 307                                                 this->SendError("MODE may no longer be used on channels. Please use FMODE, with correct timestamp rules.");
 308                                                 return false;
 309                                         }
 310                                 }
 311                         }
 312
 313
 314                         /*
 315                          * Now, check for (and parse) commands as appropriate. -- w
 316                          */
 317
 318                         /* Find the server that this command originated from, used in the handlers below */
 319                         TreeServer *ServerSource = Utils->FindServer(prefix);
 320
 321                         /* Find the link we just got this from so we don't bounce it back incorrectly */
 322                         std::string sourceserv = this->myhost;
 323                         if (!this->InboundServerName.empty())
 324                         {
 325                                 sourceserv = this->InboundServerName;
 326                         }
 327
 328                         /*
 329                          * XXX one of these days, this needs to be moved into class Commands.
 330                          */
 331                         if (command == "UID")
 332                         {
 333                                 return this->ParseUID(prefix, params);
 334                         }
 335                         else if (command == "FJOIN")
 336                         {
 337                                 return this->ForceJoin(prefix,params);
 338                         }
 339                         else if ((command == "NOTICE" || command == "PRIVMSG") && (Utils->IsServer(prefix)))
 340                         {
 341                                 return this->ServerMessage(assign(command), prefix, params, sourceserv);
 342                         }
 343                         else if (command == "STATS")
 344                         {
 345                                 return this->Stats(prefix, params);
 346                         }
 347                         else if (command == "MOTD")
 348                         {
 349                                 return this->Motd(prefix, params);
 350                         }
 351                         else if (command == "KILL" && ServerSource)
 352                         {
 353                                 // Kill from a server
 354                                 return this->RemoteKill(prefix,params);
 355                         }
 356                         else if (command == "MODULES")
 357                         {
 358                                 return this->Modules(prefix, params);
 359                         }
 360                         else if (command == "ADMIN")
 361                         {
 362                                 return this->Admin(prefix, params);
 363                         }
 364                         else if (command == "SERVER")
 365                         {
 366                                 return this->RemoteServer(prefix,params);
 367                         }
 368                         else if (command == "ERROR")
 369                         {
 370                                 return this->Error(params);
 371                         }
 372                         else if (command == "OPERTYPE")
 373                         {
 374                                 return this->OperType(prefix,params);
 375                         }
 376                         else if (command == "FMODE")
 377                         {
 378                                 return this->ForceMode(prefix,params);
 379                         }
 380                         else if (command == "FTOPIC")
 381                         {
 382                                 return this->ForceTopic(prefix,params);
 383                         }
 384                         else if (command == "REHASH")
 385                         {
 386                                 return this->RemoteRehash(prefix,params);
 387                         }
 388                         else if (command == "METADATA")
 389                         {
 390                                 return this->MetaData(prefix,params);
 391                         }
 392                         else if (command == "PING")
 393                         {
 394                                 return this->LocalPing(prefix,params);
 395                         }
 396                         else if (command == "PONG")
 397                         {
 398                                 return this->LocalPong(prefix,params);
 399                         }
 400                         else if (command == "VERSION")
 401                         {
 402                                 return this->ServerVersion(prefix,params);
 403                         }
 404                         else if (command == "FHOST")
 405                         {
 406                                 return this->ChangeHost(prefix,params);
 407                         }
 408                         else if (command == "FNAME")
 409                         {
 410                                 return this->ChangeName(prefix,params);
 411                         }
 412                         else if (command == "ADDLINE")
 413                         {
 414                                 return this->AddLine(prefix,params);
 415                         }
 416                         else if (command == "DELLINE")
 417                         {
 418                                 return this->DelLine(prefix,params);
 419                         }
 420                         else if (command == "SVSNICK")
 421                         {
 422                                 return this->ForceNick(prefix,params);
 423                         }
 424                         else if (command == "OPERQUIT")
 425                         {
 426                                 return this->OperQuit(prefix,params);
 427                         }
 428                         else if (command == "IDLE")
 429                         {
 430                                 return this->Whois(prefix,params);
 431                         }
 432                         else if (command == "PUSH")
 433                         {
 434                                 return this->Push(prefix,params);
 435                         }
 436                         else if (command == "TIME")
 437                         {
 438                                 return this->Time(prefix,params);
 439                         }
 440                         else if ((command == "KICK") && (Utils->IsServer(prefix)))
 441                         {
 442                                 if (params.size() == 3)
 443                                 {
 444                                         User* user = this->Instance->FindNick(params[1]);
 445                                         Channel* chan = this->Instance->FindChan(params[0]);
 446                                         if (user && chan)
 447                                         {
 448                                                 if (!chan->ServerKickUser(user, params[2].c_str(), false))
 449                                                         /* Yikes, the channels gone! */
 450                                                         delete chan;
 451                                         }
 452                                 }
 453
 454                                 return Utils->DoOneToAllButSenderRaw(line,sourceserv,prefix,command,params);
 455                         }
 456                         else if (command == "SVSJOIN")
 457                         {
 458                                 return this->ServiceJoin(prefix,params);
 459                         }
 460                         else if (command == "SVSPART")
 461                         {
 462                                 return this->ServicePart(prefix,params);
 463                         }
 464                         else if (command == "SQUIT")
 465                         {
 466                                 if (params.size() == 2)
 467                                 {
 468                                         this->Squit(Utils->FindServer(params[0]),params[1]);
 469                                 }
 470                                 return true;
 471                         }
 472                         else if (command == "OPERNOTICE")
 473                         {
 474                                 if (params.size() >= 1)
 475                                         Instance->SNO->WriteToSnoMask('A', "From " + (ServerSource ? ServerSource->GetName().c_str() : prefix) + ": " + params[0]);
 476                                 return Utils->DoOneToAllButSenderRaw(line, sourceserv, prefix, command, params);
 477                         }
 478                         else if (command == "MODENOTICE")
 479                         {
 480                                 if (params.size() >= 2)
 481                                 {
 482                                         if (ServerSource)
 483                                                 Instance->Users->WriteMode(params[0].c_str(), WM_AND, "*** From %s: %s", (ServerSource ? ServerSource->GetName().c_str() : prefix.c_str()), params[1].c_str());
 484                                 }
 485                                 return Utils->DoOneToAllButSenderRaw(line, sourceserv, prefix, command, params);
 486                         }
 487                         else if (command == "SNONOTICE")
 488                         {
 489                                 if (params.size() >= 2)
 490                                 {
 491                                         Instance->SNO->WriteToSnoMask(*(params[0].c_str()), "From " + (ServerSource ? ServerSource->GetName().c_str() : prefix) + ": "+ params[1]);
 492                                 }
 493                                 return Utils->DoOneToAllButSenderRaw(line, sourceserv, prefix, command, params);
 494                         }
 495                         else if (command == "BURST")
 496                         {
 497                                 // Set prefix server as bursting
 498                                 if (!ServerSource)
 499                                 {
 500                                         this->Instance->SNO->WriteToSnoMask('l', "WTF: Got BURST from a nonexistant server(?): %s", (ServerSource ? ServerSource->GetName().c_str() : prefix.c_str()));
 501                                         return false;
 502                                 }
 503
 504                                 ServerSource->bursting = true;
 505                                 return Utils->DoOneToAllButSenderRaw(line, sourceserv, prefix, command, params);
 506                         }
 507                         else if (command == "ENDBURST")
 508                         {
 509                                 if (!ServerSource)
 510                                 {
 511                                         this->Instance->SNO->WriteToSnoMask('l', "WTF: Got ENDBURST from a nonexistant server(?): %s", (ServerSource ? ServerSource->GetName().c_str() : prefix.c_str()));
 512                                         return false;
 513                                 }
 514
 515                                 ServerSource->FinishBurst();
 516                                 return Utils->DoOneToAllButSenderRaw(line, sourceserv, prefix, command, params);
 517                         }
 518                         else if (command == "ENCAP")
 519                         {
 520                                 ServerSource->FinishBurst();
 521                                 return this->Encap(prefix, params);
 522                         }
 523                         else if (command == "MODE")
 524                         {
 525                                 // Server-prefix MODE.
 526                                 const char* modelist[MAXPARAMETERS];
 527                                 for (size_t i = 0; i < params.size(); i++)
 528                                         modelist[i] = params[i].c_str();
 529
 530                                 /* We don't support this for channel mode changes any more! */
 531                                 if (params.size() >= 1)
 532                                 {
 533                                         if (Instance->FindChan(params[0]))
 534                                         {
 535                                                 this->SendError("Protocol violation by '"+(ServerSource ? ServerSource->GetName().c_str() : prefix)+"'! MODE for channel mode changes is not supported by the InspIRCd 1.2 protocol. You must use FMODE to preserve channel timestamps.");
 536                                                 return false;
 537                                         }
 538                                 }
 539
 540                                 // Insert into the parser
 541                                 this->Instance->SendMode(modelist, params.size(), this->Instance->FakeClient);
 542
 543                                 // Pass out to the network
 544                                 return Utils->DoOneToAllButSenderRaw(line,sourceserv,prefix,command,params);
 545                         }
 546                         else
 547                         {
 548                                 /*
 549                                  * Not a special s2s command. Emulate the user doing it.
 550                                  * This saves us having a huge ugly command parser again.
 551                                  */
 552                                 User *who = this->Instance->FindUUID(prefix);
 553
 554                                 if (!who)
 555                                 {
 556                                         // this looks ugly because command is an irc::string
 557                                         this->SendError("Command (" + std::string(command.c_str()) + ") from unknown prefix (" + prefix + ")! Dropping link.");
 558                                         return false;
 559                                 }
 560
 561                                 if (command == "NICK")
 562                                 {
 563                                         if (params.size() != 2)
 564                                         {
 565                                                 SendError("Protocol violation: NICK message without TS - :"+std::string(who->uuid)+" NICK "+params[0]);
 566                                                 return false;
 567                                         }
 568                                         /* Update timestamp on user when they change nicks */
 569                                         who->age = atoi(params[1].c_str());
 570
 571                                         /*
 572                                          * On nick messages, check that the nick doesnt already exist here.
 573                                          * If it does, perform collision logic.
 574                                          */
 575                                         User* x = this->Instance->FindNickOnly(params[0]);
 576                                         if ((x) && (x != who))
 577                                         {
 578                                                 int collideret = 0;
 579                                                 /* x is local, who is remote */
 580                                                 collideret = this->DoCollision(x, who->age, who->ident, who->GetIPString(), who->uuid);
 581                                                 if (collideret != 1)
 582                                                 {
 583                                                         /*
 584                                                          * Remote client lost, or both lost, parsing this nickchange would be
 585                                                          * pointless, as the incoming client's server will soon recieve SVSNICK to
 586                                                          * change its nick to its UID. :) -- w00t
 587                                                          */
 588                                                         return true;
 589                                                 }
 590                                         }
 591                                 }
 592
 593                                 // its a user
 594                                 const char* strparams[127];
 595                                 for (unsigned int q = 0; q < params.size(); q++)
 596                                 {
 597                                         strparams[q] = params[q].c_str();
 598                                 }
 599
 600                                 switch (this->Instance->CallCommandHandler(command.c_str(), strparams, params.size(), who))
 601                                 {
 602                                         case CMD_INVALID:
 603                                                 // command is irc::string, hence ugliness
 604                                                 this->SendError("Unrecognised or malformed command '" + std::string(command.c_str()) + "' -- possibly loaded mismatched modules");
 605                                                 return false;
 606                                                 break;
 607                                         /*
 608                                          * CMD_LOCALONLY is aliased to CMD_FAILURE, so this won't go out onto the network.
 609                                          */
 610                                         case CMD_FAILURE:
 611                                                 return true;
 612                                                 break;
 613                                         default:
 614                                                 /* CMD_SUCCESS and CMD_USER_DELETED fall through here */
 615                                                 break;
 616                                 }
 617
 618                                 return Utils->DoOneToAllButSenderRaw(line,sourceserv,prefix,command,params);
 619
 620                         }
 621                         return true;
 622                         break; // end of state CONNECTED (phew).
 623         }
 624         return true;
 625 }
 626
 627 std::string TreeSocket::GetName()
 628 {
 629         std::string sourceserv = this->myhost;
 630         if (!this->InboundServerName.empty())
 631         {
 632                 sourceserv = this->InboundServerName;
 633         }
 634         return sourceserv;
 635 }
 636
 637 void TreeSocket::OnTimeout()
 638 {
 639         if (this->LinkState == CONNECTING)
 640         {
 641                 Utils->Creator->RemoteMessage(NULL, "CONNECT: Connection to \002%s\002 timed out.", myhost.c_str());
 642                 Link* MyLink = Utils->FindLink(myhost);
 643                 if (MyLink)
 644                         Utils->DoFailOver(MyLink);
 645         }
 646 }
 647
 648 void TreeSocket::OnClose()
 649 {
 650         // Test fix for big fuckup
 651         if (this->LinkState != CONNECTED)
 652                 return;
 653
 654         // Connection closed.
 655         // If the connection is fully up (state CONNECTED)
 656         // then propogate a netsplit to all peers.
 657         std::string quitserver = this->myhost;
 658         if (!this->InboundServerName.empty())
 659         {
 660                 quitserver = this->InboundServerName;
 661         }
 662         TreeServer* s = Utils->FindServer(quitserver);
 663         if (s)
 664         {
 665                 Squit(s,"Remote host closed the connection");
 666         }
 667
 668         if (!quitserver.empty())
 669         {
 670                 Utils->Creator->RemoteMessage(NULL,"Connection to '\2%s\2' failed.",quitserver.c_str());
 671                 time_t server_uptime = Instance->Time() - this->age;
 672                 if (server_uptime)
 673                         Utils->Creator->RemoteMessage(NULL,"Connection to '\2%s\2' was established for %s", quitserver.c_str(), Utils->Creator->TimeToStr(server_uptime).c_str());
 674         }
 675 }
 676
 677 int TreeSocket::OnIncomingConnection(int newsock, char* ip)
 678 {
 679         /* To prevent anyone from attempting to flood opers/DDoS by connecting to the server port,
 680          * or discovering if this port is the server port, we don't allow connections from any
 681          * IPs for which we don't have a link block.
 682          */
 683         bool found = false;
 684
 685         found = (std::find(Utils->ValidIPs.begin(), Utils->ValidIPs.end(), ip) != Utils->ValidIPs.end());
 686         if (!found)
 687         {
 688                 for (std::vector<std::string>::iterator i = Utils->ValidIPs.begin(); i != Utils->ValidIPs.end(); i++)
 689                         if (irc::sockets::MatchCIDR(ip, (*i).c_str()))
 690                                 found = true;
 691
 692                 if (!found)
 693                 {
 694                         Utils->Creator->RemoteMessage(NULL,"Server connection from %s denied (no link blocks with that IP address)", ip);
 695                         Instance->SE->Close(newsock);
 696                         return false;
 697                 }
 698         }
 699
 700         TreeSocket* s = new TreeSocket(this->Utils, this->Instance, newsock, ip, this->Hook);
 701         s = s; /* Whinge whinge whinge, thats all GCC ever does. */
 702         return true;
 703 }