Main Page | Namespace List | Class Hierarchy | Alphabetical List | Class List | Directories | File List | Namespace Members | Class Members | File Members

CloakUser Class Reference

Handles user mode +x. More...

Inheritance diagram for CloakUser:

[legend]Collaboration diagram for CloakUser:

[legend]List of all members.

Public Member Functions
	CloakUser (InspIRCd *Instance, Module *Source, Module *Hash)
ModeAction	OnModeChange (userrec *source, userrec *dest, chanrec *channel, std::string &parameter, bool adding)
std::string	Cloak4 (const char *ip)
std::string	Cloak6 (const char *ip)
void	DoRehash ()
Private Member Functions
std::string	LastTwoDomainParts (const std::string &host)
	This function takes a domain name string and returns just the last two domain parts, or the last domain part if only two are available.
Private Attributes
std::string	prefix
	Mode prefix, or 0.
unsigned int	key1
unsigned int	key2
unsigned int	key3
unsigned int	key4
bool	ipalways
Module *	Sender
Module *	HashProvider
const char *	xtab [4]

---

Detailed Description

Handles user mode +x.

Definition at line 25 of file m_cloaking.cpp.

---

Constructor & Destructor Documentation

CloakUser::CloakUser (  InspIRCd *  Instance, Module *  Source, Module *  Hash )  [inline]

Definition at line 69 of file m_cloaking.cpp. : ModeHandler(Instance, 'x', 0, 0, false, MODETYPE_USER, false), Sender(Source), HashProvider(Hash) { }

---

Member Function Documentation

std::string CloakUser::Cloak4 (  const char *  ip  )  [inline]

Definition at line 185 of file m_cloaking.cpp. References irc::sepstream::GetToken(), HashProvider, key1, key2, key3, key4, Sender, and xtab. Referenced by Cloak6(), and OnModeChange(). { unsigned int iv[] = { key1, key2, key3, key4 }; irc::sepstream seps(ip, '.'); std::string ra[4];; std::string octet[4]; int i[4]; for (int j = 0; j < 4; j++) { seps.GetToken(octet[j]); i[j] = atoi(octet[j].c_str()); } octet[3] = octet[0] + "." + octet[1] + "." + octet[2] + "." + octet[3]; octet[2] = octet[0] + "." + octet[1] + "." + octet[2]; octet[1] = octet[0] + "." + octet[1]; /* Reset the Hash module and send it our IV */ HashResetRequest(Sender, HashProvider).Send(); HashKeyRequest(Sender, HashProvider, iv).Send(); /* Send the Hash module a different hex table for each octet group's Hash sum */ for (int k = 0; k < 4; k++) { HashHexRequest(Sender, HashProvider, xtab[(iv[k]+i[k]) % 4]).Send(); ra[k] = std::string(HashSumRequest(Sender, HashProvider, octet[k]).Send()).substr(0,6); } /* Stick them all together */ return std::string().append(ra[0]).append(".").append(ra[1]).append(".").append(ra[2]).append(".").append(ra[3]); }

std::string CloakUser::Cloak6 (  const char *  ip  )  [inline]

Definition at line 217 of file m_cloaking.cpp. References Cloak4(), HashProvider, key1, key2, key3, key4, Sender, and xtab. Referenced by OnModeChange(). { /* Theyre using 4in6 (YUCK). Translate as ipv4 cloak */ if (!strncmp(ip, "0::ffff:", 8)) return Cloak4(ip + 8); /* If we get here, yes it really is an ipv6 ip */ unsigned int iv[] = { key1, key2, key3, key4 }; std::vector<std::string> hashies; std::string item; int rounds = 0; /* Reset the Hash module and send it our IV */ HashResetRequest(Sender, HashProvider).Send(); HashKeyRequest(Sender, HashProvider, iv).Send(); for (const char* input = ip; *input; input++) { item += *input; if (item.length() > 7) { /* Send the Hash module a different hex table for each octet group's Hash sum */ HashHexRequest(Sender, HashProvider, xtab[(key1+rounds) % 4]).Send(); hashies.push_back(std::string(HashSumRequest(Sender, HashProvider, item).Send()).substr(0,8)); item.clear(); } rounds++; } if (!item.empty()) { /* Send the Hash module a different hex table for each octet group's Hash sum */ HashHexRequest(Sender, HashProvider, xtab[(key1+rounds) % 4]).Send(); hashies.push_back(std::string(HashSumRequest(Sender, HashProvider, item).Send()).substr(0,8)); item.clear(); } /* Stick them all together */ return irc::stringjoiner(":", hashies, 0, hashies.size() - 1).GetJoined(); }

void CloakUser::DoRehash (   )  [inline]

Definition at line 256 of file m_cloaking.cpp. References Conf, InspIRCd::Config, ipalways, key1, key2, key3, key4, ServerConfig::Network, prefix, ConfigReader::ReadFlag(), ConfigReader::ReadInteger(), ConfigReader::ReadValue(), ModeHandler::ServerInstance, and xtab. Referenced by ModuleCloaking::OnRehash(). { ConfigReader Conf(ServerInstance); bool lowercase; key1 = key2 = key3 = key4 = 0; key1 = Conf.ReadInteger("cloak","key1",0,true); key2 = Conf.ReadInteger("cloak","key2",0,true); key3 = Conf.ReadInteger("cloak","key3",0,true); key4 = Conf.ReadInteger("cloak","key4",0,true); prefix = Conf.ReadValue("cloak","prefix",0); ipalways = Conf.ReadFlag("cloak", "ipalways", 0); lowercase = Conf.ReadFlag("cloak", "lowercase", 0); if (!lowercase) { xtab[0] = "F92E45D871BCA630"; xtab[1] = "A1B9D80C72E653F4"; xtab[2] = "1ABC078934DEF562"; xtab[3] = "ABCDEF5678901234"; } else { xtab[0] = "f92e45d871bca630"; xtab[1] = "a1b9d80c72e653f4"; xtab[2] = "1abc078934def562"; xtab[3] = "abcdef5678901234"; } if (prefix.empty()) prefix = ServerInstance->Config->Network; if (!key1 || !key2 || !key3 || !key4) { std::string detail; if (!key1) detail = "<cloak:key1> is not valid, it may be set to a too high/low value, or it may not exist."; else if (!key2) detail = "<cloak:key2> is not valid, it may be set to a too high/low value, or it may not exist."; else if (!key3) detail = "<cloak:key3> is not valid, it may be set to a too high/low value, or it may not exist."; else if (!key4) detail = "<cloak:key4> is not valid, it may be set to a too high/low value, or it may not exist."; throw ModuleException("You have not defined cloak keys for m_cloaking!!! THIS IS INSECURE AND SHOULD BE CHECKED! - " + detail); } }

std::string CloakUser::LastTwoDomainParts (  const std::string &  host  )  [inline, private]

This function takes a domain name string and returns just the last two domain parts, or the last domain part if only two are available. Failing that it just returns what it was given. For example, if it is passed "svn.inspircd.org" it will return ".inspircd.org". If it is passed "brainbox.winbot.co.uk" it will return ".co.uk", and if it is passed "localhost.localdomain" it will return ".localdomain". This is used to ensure a significant part of the host is always cloaked (see Bug #216) Definition at line 46 of file m_cloaking.cpp. Referenced by OnModeChange(). { int dots = 0; std::string::size_type splitdot = host.length(); for (std::string::size_type x = host.length() - 1; x; --x) { if (host[x] == '.') { splitdot = x; dots++; } if (dots >= 3) break; } if (splitdot == host.length()) return host; else return host.substr(splitdot); }

ModeAction CloakUser::OnModeChange (  userrec *  source, userrec *  dest, chanrec *  channel, std::string &  parameter, bool  adding )  [inline, virtual]

Reset the Hash module, and send it our IV and hex table Reimplemented from ModeHandler. Definition at line 73 of file m_cloaking.cpp. References userrec::ChangeDisplayedHost(), Cloak4(), Cloak6(), userrec::GetIPString(), userrec::GetProtocolFamily(), HashProvider, connection::host, ipalways, IS_LOCAL, userrec::IsModeSet(), key1, key2, key3, key4, LastTwoDomainParts(), MODEACTION_ALLOW, MODEACTION_DENY, prefix, Sender, userrec::SetMode(), and xtab. { if (source != dest) return MODEACTION_DENY; /* For remote clients, we dont take any action, we just allow it. * The local server where they are will set their cloak instead. */ if (!IS_LOCAL(dest)) return MODEACTION_ALLOW; if (adding) { if(!dest->IsModeSet('x')) { /* The mode is being turned on - so attempt to * allocate the user a cloaked host using a non-reversible * algorithm (its simple, but its non-reversible so the * simplicity doesnt really matter). This algorithm * will not work if the user has only one level of domain * naming in their hostname (e.g. if they are on a lan or * are connecting via localhost) -- this doesnt matter much. */ char* n1 = strchr(dest->host,'.'); char* n2 = strchr(dest->host,':'); if (n1 || n2) { unsigned int iv[] = { key1, key2, key3, key4 }; std::string a = LastTwoDomainParts(dest->host); std::string b; /* InspIRCd users have two hostnames; A displayed * hostname which can be modified by modules (e.g. * to create vhosts, implement chghost, etc) and a * 'real' hostname which you shouldnt write to. */ /* 2008/08/18: add <cloak:ipalways> which always cloaks * the IP, for anonymity. --nenolod */ if (!ipalways) { HashResetRequest(Sender, HashProvider).Send(); HashKeyRequest(Sender, HashProvider, iv).Send(); HashHexRequest(Sender, HashProvider, xtab[(*dest->host) % 4]); /* Generate a cloak using specialized Hash */ std::string hostcloak = prefix + "-" + std::string(HashSumRequest(Sender, HashProvider, dest->host).Send()).substr(0,8) + a; /* Fix by brain - if the cloaked host is > the max length of a host (64 bytes * according to the DNS RFC) then tough titty, they get cloaked as an IP. * Their ISP shouldnt go to town on subdomains, or they shouldnt have a kiddie * vhost. */ #ifdef IPV6 in6_addr testaddr; in_addr testaddr2; if ((dest->GetProtocolFamily() == AF_INET6) && (inet_pton(AF_INET6,dest->host,&testaddr) < 1) && (hostcloak.length() <= 64)) /* Invalid ipv6 address, and ipv6 user (resolved host) */ b = hostcloak; else if ((dest->GetProtocolFamily() == AF_INET) && (inet_aton(dest->host,&testaddr2) < 1) && (hostcloak.length() <= 64)) /* Invalid ipv4 address, and ipv4 user (resolved host) */ b = hostcloak; else /* Valid ipv6 or ipv4 address (not resolved) ipv4 or ipv6 user */ b = ((!strchr(dest->host,':')) ? Cloak4(dest->host) : Cloak6(dest->host)); #else in_addr testaddr; if ((inet_aton(dest->host,&testaddr) < 1) && (hostcloak.length() <= 64)) /* Invalid ipv4 address, and ipv4 user (resolved host) */ b = hostcloak; else /* Valid ipv4 address (not resolved) ipv4 user */ b = Cloak4(dest->host); #endif } else { #ifdef IPV6 if (dest->GetProtocolFamily() == AF_INET6) b = Cloak6(dest->GetIPString()); #endif if (dest->GetProtocolFamily() == AF_INET) b = Cloak4(dest->GetIPString()); } dest->ChangeDisplayedHost(b.c_str()); } dest->SetMode('x',true); return MODEACTION_ALLOW; } } else { if (dest->IsModeSet('x')) { /* User is removing the mode, so just restore their real host * and make it match the displayed one. */ dest->ChangeDisplayedHost(dest->host); dest->SetMode('x',false); return MODEACTION_ALLOW; } } return MODEACTION_DENY; }

---

Member Data Documentation

Module* CloakUser::HashProvider [private]

Definition at line 34 of file m_cloaking.cpp. Referenced by Cloak4(), Cloak6(), and OnModeChange().

bool CloakUser::ipalways [private]

Definition at line 32 of file m_cloaking.cpp. Referenced by DoRehash(), and OnModeChange().

unsigned int CloakUser::key1 [private]

Definition at line 28 of file m_cloaking.cpp. Referenced by Cloak4(), Cloak6(), DoRehash(), and OnModeChange().

unsigned int CloakUser::key2 [private]

Definition at line 29 of file m_cloaking.cpp. Referenced by Cloak4(), Cloak6(), DoRehash(), and OnModeChange().

unsigned int CloakUser::key3 [private]

Definition at line 30 of file m_cloaking.cpp. Referenced by Cloak4(), Cloak6(), DoRehash(), and OnModeChange().

unsigned int CloakUser::key4 [private]

Definition at line 31 of file m_cloaking.cpp. Referenced by Cloak4(), Cloak6(), DoRehash(), and OnModeChange().

std::string CloakUser::prefix [private]

Mode prefix, or 0. Reimplemented from ModeHandler. Definition at line 27 of file m_cloaking.cpp. Referenced by DoRehash(), and OnModeChange().

Module* CloakUser::Sender [private]

Definition at line 33 of file m_cloaking.cpp. Referenced by Cloak4(), Cloak6(), and OnModeChange().

const char* CloakUser::xtab[4] [private]

Definition at line 35 of file m_cloaking.cpp. Referenced by Cloak4(), Cloak6(), DoRehash(), and OnModeChange().

---

The documentation for this class was generated from the following file:

• m_cloaking.cpp