Support per-IP throttling (Hanno Hecker <hah@uu-x.de>)

git-svn-id: https://svn.perl.org/qpsmtpd/trunk@259 958fd67b-6ff1-0310-b445-bb7760255be9
This commit is contained in:
Matt Sergeant 2004-07-05 19:20:15 +00:00
parent fd8fcde7c0
commit b82536df19

View File

@ -21,6 +21,7 @@ my $MAXCONN = 15; # max simultaneous connections
my $PORT = 25; # port number my $PORT = 25; # port number
my $LOCALADDR = '0.0.0.0'; # ip address to bind to my $LOCALADDR = '0.0.0.0'; # ip address to bind to
my $USER = 'smtpd'; # user to suid to my $USER = 'smtpd'; # user to suid to
my $MAXCONNIP = 5; # max simultaneous connections from one IP
sub usage { sub usage {
print <<"EOT"; print <<"EOT";
@ -110,10 +111,30 @@ while (1) {
# possible something condition... # possible something condition...
next; next;
} }
my ($port, $iaddr) = sockaddr_in($hisaddr);
if ($MAXCONNIP) {
my $num_conn = 0;
foreach my $rip (values %childstatus) {
if ($rip eq $iaddr) {
++$num_conn;
}
}
++$num_conn; # count this connection, too :)
if ($num_conn > $MAXCONNIP) {
my $rem_ip = inet_ntoa($iaddr);
::log(LOGINFO,"Too many connections from $rem_ip: "
."$num_conn > $MAXCONNIP. Denying connection.");
$client->autoflush(1);
print $client "451 Sorry, too many connections from $rem_ip, try again later\r\n";
close $client;
next;
}
}
my $pid = fork; my $pid = fork;
if ($pid) { if ($pid) {
# parent # parent
$childstatus{$pid} = 1; # add to table $childstatus{$pid} = $iaddr; # add to table
# $childstatus{$pid} = 1; # add to table
$running++; $running++;
close($client); close($client);
next; next;
@ -128,7 +149,7 @@ while (1) {
my $localsockaddr = getsockname($client); my $localsockaddr = getsockname($client);
my ($lport, $laddr) = sockaddr_in($localsockaddr); my ($lport, $laddr) = sockaddr_in($localsockaddr);
$ENV{TCPLOCALIP} = inet_ntoa($laddr); $ENV{TCPLOCALIP} = inet_ntoa($laddr);
my ($port, $iaddr) = sockaddr_in($hisaddr); # my ($port, $iaddr) = sockaddr_in($hisaddr);
$ENV{TCPREMOTEIP} = inet_ntoa($iaddr); $ENV{TCPREMOTEIP} = inet_ntoa($iaddr);
$ENV{TCPREMOTEHOST} = gethostbyaddr($iaddr, AF_INET) || "Unknown"; $ENV{TCPREMOTEHOST} = gethostbyaddr($iaddr, AF_INET) || "Unknown";