/* * ModSecurity, http://www.modsecurity.org/ * Copyright (c) 2015 - 2020 Trustwave Holdings, Inc. (http://www.trustwave.com/) * * You may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * If any of the files related to licensing are missing or if you have any * other questions related to licensing please contact Trustwave Holdings, Inc. * directly using the email address security@modsecurity.org. * */ #ifndef SRC_OPERATORS_RBL_H_ #define SRC_OPERATORS_RBL_H_ #include #include #include #include #include #include #include #include #include "src/operators/operator.h" namespace modsecurity { namespace operators { class Rbl : public Operator { public: /** * */ enum RblProvider { /** * UnknownProvider * */ UnknownProvider, /** * httpbl.org * */ httpbl, /** * uribl.com * */ uribl, /** * spamhaus.org * */ spamhaus, }; /** @ingroup ModSecurity_Operator */ explicit Rbl(std::unique_ptr param) : m_service(), m_demandsPassword(false), m_provider(RblProvider::UnknownProvider), Operator("Rbl", std::move(param)) { m_service = m_string->evaluate(); if (m_service.find("httpbl.org") != std::string::npos) { m_demandsPassword = true; m_provider = RblProvider::httpbl; } else if (m_service.find("uribl.com") != std::string::npos) { m_provider = RblProvider::httpbl; } else if (m_service.find("spamhaus.org") != std::string::npos) { m_provider = RblProvider::httpbl; } } bool evaluate(Transaction *transaction, const RuleWithActions *rule, const bpstd::string_view &input, RuleMessage *ruleMessage) override; std::string mapIpToAddress(const std::string &ipStr, Transaction *trans) const; static void futherInfo_httpbl(struct sockaddr_in *sin, const std::string &ipStr, Transaction *trans); static void futherInfo_spamhaus(unsigned int high8bits, const std::string &ipStr, Transaction *trans); static void futherInfo_uribl(unsigned int high8bits, const std::string &ipStr, Transaction *trans); static void furtherInfo(struct sockaddr_in *sin, const std::string &ipStr, Transaction *trans, RblProvider provider); private: std::string m_service; bool m_demandsPassword; RblProvider m_provider; }; } // namespace operators } // namespace modsecurity #endif // SRC_OPERATORS_RBL_H_