6156d3d729
* Refactor anubis to split business logic into a lib, and cmd to just be direct usage. * Post-rebase fixes. * Update changelog, remove unnecessary one. * lib: refactor this This is mostly based on my personal preferences for how Go code should be laid out. I'm not sold on the package name "lib" (I'd call it anubis but that would stutter), but people are probably gonna import it as libanubis so it's likely fine. Packages have been "flattened" to centralize implementation with area of concern. This goes against the Java-esque style that many people like, but I think this helps make things simple. Most notably: the dnsbl client (which is a hack) is an internal package until it's made more generic. Then it can be made external. I also fixed the logic such that `go generate` works and rebased on main. * internal/test: run tests iff npx exists and DONT_USE_NETWORK is not set Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: install deps Signed-off-by: Xe Iaso <me@xeiaso.net> * .github/workflows: verbose go tests? Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: sleep 2 Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: nix this test so CI works Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: warmup per browser? Signed-off-by: Xe Iaso <me@xeiaso.net> * internal/test: disable for now :( Signed-off-by: Xe Iaso <me@xeiaso.net> * lib/anubis: do not apply bot rules if address check fails Closes #83 --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Co-authored-by: Xe Iaso <me@xeiaso.net>
95 lines
2.2 KiB
Go
95 lines
2.2 KiB
Go
package dnsbl
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"strings"
|
|
)
|
|
|
|
//go:generate go tool golang.org/x/tools/cmd/stringer -type=DroneBLResponse
|
|
|
|
type DroneBLResponse byte
|
|
|
|
const (
|
|
AllGood DroneBLResponse = 0
|
|
IRCDrone DroneBLResponse = 3
|
|
Bottler DroneBLResponse = 5
|
|
UnknownSpambotOrDrone DroneBLResponse = 6
|
|
DDOSDrone DroneBLResponse = 7
|
|
SOCKSProxy DroneBLResponse = 8
|
|
HTTPProxy DroneBLResponse = 9
|
|
ProxyChain DroneBLResponse = 10
|
|
OpenProxy DroneBLResponse = 11
|
|
OpenDNSResolver DroneBLResponse = 12
|
|
BruteForceAttackers DroneBLResponse = 13
|
|
OpenWingateProxy DroneBLResponse = 14
|
|
CompromisedRouter DroneBLResponse = 15
|
|
AutoRootingWorms DroneBLResponse = 16
|
|
AutoDetectedBotIP DroneBLResponse = 17
|
|
Unknown DroneBLResponse = 255
|
|
)
|
|
|
|
func Reverse(ip net.IP) string {
|
|
if ip.To4() != nil {
|
|
return reverse4(ip)
|
|
}
|
|
|
|
return reverse6(ip)
|
|
}
|
|
|
|
func reverse4(ip net.IP) string {
|
|
splitAddress := strings.Split(ip.String(), ".")
|
|
|
|
// swap first and last octet
|
|
splitAddress[0], splitAddress[3] = splitAddress[3], splitAddress[0]
|
|
// swap middle octets
|
|
splitAddress[1], splitAddress[2] = splitAddress[2], splitAddress[1]
|
|
|
|
return strings.Join(splitAddress, ".")
|
|
}
|
|
|
|
func reverse6(ip net.IP) string {
|
|
ipBytes := []byte(ip)
|
|
var sb strings.Builder
|
|
|
|
for i := len(ipBytes) - 1; i >= 0; i-- {
|
|
// Split the byte into two nibbles
|
|
highNibble := ipBytes[i] >> 4
|
|
lowNibble := ipBytes[i] & 0x0F
|
|
|
|
// Append the nibbles in reversed order
|
|
sb.WriteString(fmt.Sprintf("%x.%x.", lowNibble, highNibble))
|
|
}
|
|
|
|
return sb.String()[:len(sb.String())-1]
|
|
}
|
|
|
|
func Lookup(ipStr string) (DroneBLResponse, error) {
|
|
ip := net.ParseIP(ipStr)
|
|
if ip == nil {
|
|
return Unknown, errors.New("dnsbl: input is not an IP address")
|
|
}
|
|
|
|
revIP := Reverse(ip) + ".dnsbl.dronebl.org"
|
|
|
|
ips, err := net.LookupIP(revIP)
|
|
if err != nil {
|
|
var dnserr *net.DNSError
|
|
if errors.As(err, &dnserr) {
|
|
if dnserr.IsNotFound {
|
|
return AllGood, nil
|
|
}
|
|
}
|
|
|
|
return Unknown, err
|
|
}
|
|
|
|
if len(ips) != 0 {
|
|
for _, ip := range ips {
|
|
return DroneBLResponse(ip.To4()[3]), nil
|
|
}
|
|
}
|
|
|
|
return UnknownSpambotOrDrone, nil
|
|
}
|