From 6dcafec22d560c50625c8a391701606a1a0bb363 Mon Sep 17 00:00:00 2001
From: Adam Frisby
Date: Mon, 11 May 2009 19:23:51 +0000
Subject: * Implements IP and DNS based ban facilities to OpenSim. * User
 interface is ... primitive at best right now. * Loads bans from bans.txt and
 region ban DB on startup, bans.txt is in the format of one per line. The
 following explains how they are read;

DNS bans are in the form "somewhere.com" will block ANY matching domain (including "betasomewhere.com", "beta.somewhere.com", "somewhere.com.beta") - make sure to be reasonably specific in DNS bans.

IP address bans match on first characters, so, "127.0.0.1" will ban only that address, "127.0.1" will ban "127.0.10.0" but "127.0.1." will ban only the "127.0.1.*" network

---
 .../Region/CoreModules/Agent/IPBan/IPBanModule.cs  | 81 ++++++++++++++++++++++
 .../Region/CoreModules/Agent/IPBan/SceneBanner.cs  | 45 ++++++++++++
 2 files changed, 126 insertions(+)
 create mode 100644 OpenSim/Region/CoreModules/Agent/IPBan/IPBanModule.cs
 create mode 100644 OpenSim/Region/CoreModules/Agent/IPBan/SceneBanner.cs

(limited to 'OpenSim/Region/CoreModules/Agent')

diff --git a/OpenSim/Region/CoreModules/Agent/IPBan/IPBanModule.cs b/OpenSim/Region/CoreModules/Agent/IPBan/IPBanModule.cs
new file mode 100644
index 0000000..b904cb0
--- /dev/null
+++ b/OpenSim/Region/CoreModules/Agent/IPBan/IPBanModule.cs
@@ -0,0 +1,81 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Text;
+using Nini.Config;
+using OpenSim.Framework;
+using OpenSim.Region.Framework.Interfaces;
+using OpenSim.Region.Framework.Scenes;
+
+namespace OpenSim.Region.CoreModules.Agent.IPBan
+{
+    public class IPBanModule : IRegionModule 
+    {
+        #region Implementation of IRegionModule
+
+        private List<string> m_bans = new List<string>();
+
+        public void Initialise(Scene scene, IConfigSource source)
+        {
+            new SceneBanner(scene, m_bans);
+
+            lock(m_bans)
+            {
+                foreach (EstateBan ban in scene.RegionInfo.EstateSettings.EstateBans)
+                {
+                    if(!String.IsNullOrEmpty(ban.BannedHostIPMask)) 
+                        m_bans.Add(ban.BannedHostIPMask);
+                    if (!String.IsNullOrEmpty(ban.BannedHostNameMask))
+                        m_bans.Add(ban.BannedHostNameMask);
+                }
+            }
+        }
+
+        public void PostInitialise()
+        {
+            if(File.Exists("bans.txt"))
+            {
+                string[] bans = File.ReadAllLines("bans.txt");
+                foreach (string ban in bans)
+                {
+                    m_bans.Add(ban);
+                }
+            }
+        }
+
+        public void Close()
+        {
+            
+        }
+
+        public string Name
+        {
+            get { return "IPBanModule"; }
+        }
+
+        public bool IsSharedModule
+        {
+            get { return true; }
+        }
+
+        #endregion
+
+        /// <summary>
+        /// Bans all users from the specified network from connecting.
+        /// DNS bans are in the form "somewhere.com" will block ANY
+        /// matching domain (including "betasomewhere.com", "beta.somewhere.com",
+        /// "somewhere.com.beta") - make sure to be reasonably specific in DNS
+        /// bans.
+        /// 
+        /// IP address bans match on first characters, so,
+        /// "127.0.0.1" will ban only that address, 
+        /// "127.0.1" will ban "127.0.10.0"
+        /// but "127.0.1." will ban only the "127.0.1.*" network
+        /// </summary>
+        /// <param name="host">See summary for explanation of parameter</param>
+        public void Ban(string host)
+        {
+            m_bans.Add(host);
+        }
+    }
+}
diff --git a/OpenSim/Region/CoreModules/Agent/IPBan/SceneBanner.cs b/OpenSim/Region/CoreModules/Agent/IPBan/SceneBanner.cs
new file mode 100644
index 0000000..1d8da46
--- /dev/null
+++ b/OpenSim/Region/CoreModules/Agent/IPBan/SceneBanner.cs
@@ -0,0 +1,45 @@
+using System.Collections.Generic;
+using System.Net;
+using OpenSim.Framework.Client;
+using OpenSim.Region.Framework.Scenes;
+
+namespace OpenSim.Region.CoreModules.Agent.IPBan
+{
+    internal class SceneBanner
+    {
+                private static readonly log4net.ILog m_log
+                    = log4net.LogManager.GetLogger(System.Reflection.MethodBase.GetCurrentMethod().DeclaringType);
+
+        private List<string> bans;
+        private SceneBase m_scene;
+        public SceneBanner(SceneBase scene, List<string> banList)
+        {
+            scene.EventManager.OnClientConnect += EventManager_OnClientConnect;
+
+            bans = banList;
+            m_scene = scene;
+        }
+
+        void EventManager_OnClientConnect(IClientCore client)
+        {
+            IClientIPEndpoint ipEndpoint;
+            if(client.TryGet(out ipEndpoint))
+            {
+                IPAddress end = ipEndpoint.EndPoint;
+
+                IPHostEntry rDNS = Dns.GetHostEntry(end);
+                foreach (string ban in bans)
+                {
+                    if (rDNS.HostName.Contains(ban) ||
+                        end.ToString().StartsWith(ban))
+                    {
+                        client.Disconnect("Banned - network \"" + ban + "\" is not allowed to connect to this server.");
+                        m_log.Warn("[IPBAN] Disconnected '" + end + "' due to '" + ban + "' ban.");
+                        return;
+                    }
+                }
+                m_log.Warn("[IPBAN] User '" + end + "' not in any ban lists. Allowing connection.");
+            }
+        }
+    }
+}
-- 
cgit v1.1