Added interface for tcpd wrapper for access control.

[yaz-moved-to-github.git] / server / tcpdchk.c

diff --git a/server/tcpdchk.c b/server/tcpdchk.c
new file mode 100644 (file)
index 0000000..a5d3d64
--- /dev/null
+++ b/server/tcpdchk.c
@@ -0,0 +1,87 @@
+/*
+ * Copyright (c) 1995-1999, Index Data
+ * See the file LICENSE for details.
+ * Sebastian Hammer, Adam Dickmeiss
+ *
+ * $Log: tcpdchk.c,v $
+ * Revision 1.1  1999-04-16 14:45:55  adam
+ * Added interface for tcpd wrapper for access control.
+ *
+ */
+
+#include <stdio.h>
+#include <string.h>
+
+#if HAVE_TCPD_H
+#include <syslog.h>
+#include <tcpd.h>
+
+int allow_severity = LOG_INFO;
+int deny_severity = LOG_WARNING;
+
+#ifdef LOG_DEBUG
+#undef LOG_DEBUG
+#endif
+#ifdef LOG_WARN
+#undef LOG_WARN
+#endif
+
+#endif
+
+#ifdef WIN32
+#include <winsock.h>
+#else
+#include <unistd.h>
+#endif
+
+#include <comstack.h>
+#include <statserv.h>
+#include <log.h>
+
+int check_ip_tcpd(void *cd, const char *addr, int len, int type)
+{
+    const char *daemon_name = cd;
+
+    if (type == AF_INET)
+    {
+       if (daemon_name && *daemon_name)
+       {
+#if HAVE_TCPD_H
+           struct request_info request_info;
+#endif
+           int i;
+           char *host_name = 0, *host_addr = 0;
+           struct hostent *host;
+
+           struct sockaddr_in *addr_in = (struct sockaddr_in *) addr;
+           
+           if ((host = gethostbyaddr((char*)&addr_in->sin_addr,
+                                     sizeof(addr_in->sin_addr),
+                                     AF_INET)))
+               host_name = (char*) host->h_name;
+           host_addr = inet_ntoa(addr_in->sin_addr);
+#if HAVE_TCPD_H
+           if (host_addr)
+               request_init(&request_info, RQ_DAEMON, daemon_name,
+                            RQ_CLIENT_NAME, host_name,
+                            RQ_CLIENT_SIN, addr_in,
+                            RQ_CLIENT_ADDR, host_addr, 0);
+           else
+               request_init(&request_info, RQ_DAEMON, daemon_name,
+                            RQ_CLIENT_SIN, addr_in,
+                            RQ_CLIENT_ADDR, host_addr, 0);
+           i = hosts_access(&request_info);
+           if (!i)
+           {
+               logf (LOG_DEBUG, "access denied from %s",
+                     host_name ? host_name : host_addr);
+               return 1;
+           }
+           logf (LOG_DEBUG, "access granted from %s",
+                 host_name ? host_name : host_addr);
+#endif
+       }
+    }
+    return 0;
+}
+