mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-09-29 03:06:33 +03:00
a48856822c
- most of posix related functions and constants in unistd.h can be found in io.h in Visual C++ - introduced src/compat/msvc.h to adjust for compiler differences (and avoid updating code with #ifdef blocks for Windows support) - removed some included headers that are not needed (both on Unix and Windows builds)
110 lines
2.9 KiB
C++
110 lines
2.9 KiB
C++
/*
|
|
* ModSecurity, http://www.modsecurity.org/
|
|
* Copyright (c) 2015 - 2021 Trustwave Holdings, Inc. (http://www.trustwave.com/)
|
|
*
|
|
* You may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* If any of the files related to licensing are missing or if you have any
|
|
* other questions related to licensing please contact Trustwave Holdings, Inc.
|
|
* directly using the email address security@modsecurity.org.
|
|
*
|
|
*/
|
|
|
|
#ifndef SRC_OPERATORS_RBL_H_
|
|
#define SRC_OPERATORS_RBL_H_
|
|
|
|
#include <sys/types.h>
|
|
#ifndef WIN32
|
|
#include <sys/socket.h>
|
|
#include <netdb.h>
|
|
#include <netinet/in.h>
|
|
#include <arpa/inet.h>
|
|
#else
|
|
#include <winsock2.h>
|
|
#endif
|
|
|
|
#include <string>
|
|
#include <memory>
|
|
#include <utility>
|
|
|
|
#include "src/operators/operator.h"
|
|
|
|
|
|
namespace modsecurity {
|
|
namespace operators {
|
|
|
|
class Rbl : public Operator {
|
|
public:
|
|
/**
|
|
*
|
|
*/
|
|
enum RblProvider {
|
|
/**
|
|
* UnknownProvider
|
|
*
|
|
*/
|
|
UnknownProvider,
|
|
/**
|
|
* httpbl.org
|
|
*
|
|
*/
|
|
httpbl,
|
|
/**
|
|
* uribl.com
|
|
*
|
|
*/
|
|
uribl,
|
|
/**
|
|
* spamhaus.org
|
|
*
|
|
*/
|
|
spamhaus,
|
|
};
|
|
|
|
/** @ingroup ModSecurity_Operator */
|
|
explicit Rbl(std::unique_ptr<RunTimeString> param)
|
|
: m_service(),
|
|
m_demandsPassword(false),
|
|
m_provider(RblProvider::UnknownProvider),
|
|
Operator("Rbl", std::move(param)) {
|
|
m_service = m_string->evaluate(); // cppcheck-suppress useInitializationList
|
|
if (m_service.find("httpbl.org") != std::string::npos)
|
|
{
|
|
m_demandsPassword = true;
|
|
m_provider = RblProvider::httpbl;
|
|
} else if (m_service.find("uribl.com") != std::string::npos) {
|
|
m_provider = RblProvider::uribl;
|
|
} else if (m_service.find("spamhaus.org") != std::string::npos) {
|
|
m_provider = RblProvider::spamhaus;
|
|
}
|
|
}
|
|
bool evaluate(Transaction *transaction, RuleWithActions *rule,
|
|
const std::string& input,
|
|
std::shared_ptr<RuleMessage> ruleMessage) override;
|
|
|
|
std::string mapIpToAddress(const std::string &ipStr, Transaction *trans) const;
|
|
|
|
static void futherInfo_httpbl(struct sockaddr_in *sin, const std::string &ipStr,
|
|
Transaction *trans);
|
|
static void futherInfo_spamhaus(unsigned int high8bits, const std::string &ipStr,
|
|
Transaction *trans);
|
|
static void futherInfo_uribl(unsigned int high8bits, const std::string &ipStr,
|
|
Transaction *trans);
|
|
static void furtherInfo(struct sockaddr_in *sin, const std::string &ipStr,
|
|
Transaction *trans, RblProvider provider);
|
|
|
|
private:
|
|
std::string m_service;
|
|
bool m_demandsPassword;
|
|
RblProvider m_provider;
|
|
};
|
|
|
|
} // namespace operators
|
|
} // namespace modsecurity
|
|
|
|
|
|
#endif // SRC_OPERATORS_RBL_H_
|