mirror of
https://github.com/ergochat/ergo.git
synced 2024-11-14 16:09:32 +01:00
175 lines
4.7 KiB
Go
175 lines
4.7 KiB
Go
// Copyright (c) 2012-2014 Jeremy Latt
|
|
// Copyright (c) 2016 Daniel Oaks <daniel@danieloaks.net>
|
|
// released under the MIT license
|
|
|
|
package utils
|
|
|
|
import (
|
|
"net"
|
|
"strings"
|
|
)
|
|
|
|
var (
|
|
// subnet mask for an ipv6 /128:
|
|
mask128 = net.CIDRMask(128, 128)
|
|
IPv4LoopbackAddress = net.ParseIP("127.0.0.1").To16()
|
|
)
|
|
|
|
// AddrIsLocal returns whether the address is from a trusted local connection (loopback or unix).
|
|
func AddrIsLocal(addr net.Addr) bool {
|
|
if tcpaddr, ok := addr.(*net.TCPAddr); ok {
|
|
return tcpaddr.IP.IsLoopback()
|
|
}
|
|
return AddrIsUnix(addr)
|
|
}
|
|
|
|
// AddrToIP returns the IP address for a net.Addr; unix domain sockets are treated as IPv4 loopback
|
|
func AddrToIP(addr net.Addr) net.IP {
|
|
if tcpaddr, ok := addr.(*net.TCPAddr); ok {
|
|
return tcpaddr.IP.To16()
|
|
} else if AddrIsUnix(addr) {
|
|
return IPv4LoopbackAddress
|
|
} else {
|
|
return nil
|
|
}
|
|
}
|
|
|
|
// AddrIsUnix returns whether the address is a unix domain socket.
|
|
func AddrIsUnix(addr net.Addr) bool {
|
|
_, ok := addr.(*net.UnixAddr)
|
|
return ok
|
|
}
|
|
|
|
// LookupHostname returns the hostname for `addr` if it has one. Otherwise, just returns `addr`.
|
|
func LookupHostname(addr string) string {
|
|
names, err := net.LookupAddr(addr)
|
|
if err == nil && len(names) > 0 {
|
|
candidate := strings.TrimSuffix(names[0], ".")
|
|
if IsHostname(candidate) {
|
|
return candidate
|
|
}
|
|
}
|
|
|
|
// return original address if no hostname found
|
|
if len(addr) > 0 && addr[0] == ':' {
|
|
// fix for IPv6 hostnames (so they don't start with a colon), same as all other IRCds
|
|
addr = "0" + addr
|
|
}
|
|
return addr
|
|
}
|
|
|
|
var allowedHostnameChars = "abcdefghijklmnopqrstuvwxyz1234567890-."
|
|
|
|
// IsHostname returns whether we consider `name` a valid hostname.
|
|
func IsHostname(name string) bool {
|
|
// IRC hostnames specifically require a period
|
|
if !strings.Contains(name, ".") || len(name) < 1 || len(name) > 253 {
|
|
return false
|
|
}
|
|
|
|
// ensure each part of hostname is valid
|
|
for _, part := range strings.Split(name, ".") {
|
|
if len(part) < 1 || len(part) > 63 || strings.HasPrefix(part, "-") || strings.HasSuffix(part, "-") {
|
|
return false
|
|
}
|
|
}
|
|
|
|
// ensure all chars of hostname are valid
|
|
for _, char := range strings.Split(strings.ToLower(name), "") {
|
|
if !strings.Contains(allowedHostnameChars, char) {
|
|
return false
|
|
}
|
|
}
|
|
|
|
return true
|
|
}
|
|
|
|
// Convenience to test whether `ip` is contained in any of `nets`.
|
|
func IPInNets(ip net.IP, nets []net.IPNet) bool {
|
|
for _, network := range nets {
|
|
if network.Contains(ip) {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
// NormalizeIPToNet represents an address (v4 or v6) as the v6 /128 CIDR
|
|
// containing only it.
|
|
func NormalizeIPToNet(addr net.IP) (network net.IPNet) {
|
|
// represent ipv4 addresses as ipv6 addresses, using the 4-in-6 prefix
|
|
// (actually this should be a no-op for any address returned by ParseIP)
|
|
addr = addr.To16()
|
|
// the network corresponding to this address is now an ipv6 /128:
|
|
return net.IPNet{
|
|
IP: addr,
|
|
Mask: mask128,
|
|
}
|
|
}
|
|
|
|
// NormalizeNet normalizes an IPNet to a v6 CIDR, using the 4-in-6 prefix.
|
|
// (this is like IP.To16(), but for IPNet instead of IP)
|
|
func NormalizeNet(network net.IPNet) (result net.IPNet) {
|
|
if len(network.IP) == 16 {
|
|
return network
|
|
}
|
|
ones, _ := network.Mask.Size()
|
|
return net.IPNet{
|
|
IP: network.IP.To16(),
|
|
// include the 96 bits of the 4-in-6 prefix
|
|
Mask: net.CIDRMask(96+ones, 128),
|
|
}
|
|
}
|
|
|
|
// Given a network, produce a human-readable string
|
|
// (i.e., CIDR if it's actually a network, IPv6 address if it's a v6 /128,
|
|
// dotted quad if it's a v4 /32).
|
|
func NetToNormalizedString(network net.IPNet) string {
|
|
ones, bits := network.Mask.Size()
|
|
if ones == bits && ones == len(network.IP)*8 {
|
|
// either a /32 or a /128, output the address:
|
|
return network.IP.String()
|
|
}
|
|
return network.String()
|
|
}
|
|
|
|
// Parse a human-readable description (an address or CIDR, either v4 or v6)
|
|
// into a normalized v6 net.IPNet.
|
|
func NormalizedNetFromString(str string) (result net.IPNet, err error) {
|
|
_, network, err := net.ParseCIDR(str)
|
|
if err == nil {
|
|
return NormalizeNet(*network), nil
|
|
}
|
|
ip := net.ParseIP(str)
|
|
if ip == nil {
|
|
err = &net.AddrError{
|
|
Err: "Couldn't interpret as either CIDR or address",
|
|
Addr: str,
|
|
}
|
|
return
|
|
}
|
|
return NormalizeIPToNet(ip), nil
|
|
}
|
|
|
|
// Parse a list of IPs and nets as they would appear in one of our config
|
|
// files, e.g., proxy-allowed-from or a throttling exemption list.
|
|
func ParseNetList(netList []string) (nets []net.IPNet, err error) {
|
|
var network net.IPNet
|
|
for _, netStr := range netList {
|
|
if netStr == "localhost" {
|
|
ipv4Loopback, _ := NormalizedNetFromString("127.0.0.0/8")
|
|
ipv6Loopback, _ := NormalizedNetFromString("::1/128")
|
|
nets = append(nets, ipv4Loopback)
|
|
nets = append(nets, ipv6Loopback)
|
|
continue
|
|
}
|
|
network, err = NormalizedNetFromString(netStr)
|
|
if err != nil {
|
|
return
|
|
} else {
|
|
nets = append(nets, network)
|
|
}
|
|
}
|
|
return
|
|
}
|