2003-04-15 19:39:03 +02:00
|
|
|
=head1 NAME
|
|
|
|
|
|
|
|
count_unrecognized_commands - Count unrecognized commands and disconnect when we have too many
|
|
|
|
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
|
|
|
Disconnect the client if it sends too many unrecognized commands.
|
|
|
|
Good for rejecting spam sent through open HTTP proxies.
|
|
|
|
|
|
|
|
=head1 CONFIGURATION
|
|
|
|
|
|
|
|
Takes one parameter, the number of allowed unrecognized commands
|
|
|
|
before we disconnect the client. Defaults to 4.
|
|
|
|
|
|
|
|
=cut
|
|
|
|
|
|
|
|
sub register {
|
|
|
|
my ($self, $qp, @args) = @_;
|
|
|
|
$self->register_hook("unrecognized_command", "check_unrec_cmd");
|
|
|
|
|
|
|
|
if (@args > 0) {
|
|
|
|
$self->{_unrec_cmd_max} = $args[0];
|
2004-03-05 13:46:24 +01:00
|
|
|
$self->log(LOGWARN, "WARNING: Ignoring additional arguments.") if (@args > 1);
|
2003-04-15 19:39:03 +02:00
|
|
|
} else {
|
|
|
|
$self->{_unrec_cmd_max} = 4;
|
|
|
|
}
|
|
|
|
|
2004-03-04 05:14:09 +01:00
|
|
|
$qp->connection->notes('unrec_cmd_count', 0);
|
|
|
|
|
2003-04-15 19:39:03 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
sub check_unrec_cmd {
|
2004-03-04 05:14:09 +01:00
|
|
|
my ($self, $cmd) = @_[0,2];
|
2003-04-15 19:39:03 +02:00
|
|
|
|
2004-03-05 13:46:24 +01:00
|
|
|
$self->log(LOGINFO, "Unrecognized command '$cmd'");
|
2003-04-15 19:39:03 +02:00
|
|
|
|
2004-03-04 05:14:09 +01:00
|
|
|
my $badcmdcount =
|
|
|
|
$self->qp->connection->notes('unrec_cmd_count',
|
2004-07-28 19:06:45 +02:00
|
|
|
($self->qp->connection->notes('unrec_cmd_count') || 0) + 1
|
2004-03-04 05:14:09 +01:00
|
|
|
);
|
2003-04-15 19:39:03 +02:00
|
|
|
|
|
|
|
if ($badcmdcount >= $self->{_unrec_cmd_max}) {
|
2004-03-05 13:46:24 +01:00
|
|
|
$self->log(LOGINFO, "Closing connection. Too many unrecognized commands.");
|
2004-11-27 08:02:23 +01:00
|
|
|
return (DENYHARD, "Closing connection. $badcmdcount unrecognized commands. Perhaps you should read RFC 2821?");
|
2003-04-15 19:39:03 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
return DECLINED;
|
|
|
|
}
|
|
|
|
|