Alawn/shadowsocks-libev
1
0
Fork 0
mirror of https://github.com/shadowsocks/shadowsocks-libev.git synced 2026-11-03 08:23:47 +00:00
Code Releases Activity

Refine auto block mechanism

Browse Source
This commit is contained in:
Max Lv
2016-09-19 13:10:06 +08:00
parent f7f90b1eb2
commit a5c9bcfb58
4 changed files with 42 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/server.c
+8 -11
View File
@@ -306,6 +306,10 @@ report_addr(int fd)
if (peer_name != NULL) {
LOGE("failed to handshake with %s", peer_name);
}
// Block all requests from this IP, if the err# exceeds 128.
if (check_block_list(peer_name, 128)) {
LOGE("block all requests from %s", peer_name);
}
}
int
@@ -735,17 +739,7 @@ server_recv_cb(EV_P_ ev_io *w, int revents)
server->buf->len = offset + header_len + ONETIMEAUTH_BYTES;
if (ss_onetimeauth_verify(server->buf, server->d_ctx->evp.iv)) {
char *peer_name = get_peer_name(server->fd);
if (peer_name) {
LOGE("authentication error from %s", peer_name);
if (acl) {
if (get_acl_mode() == BLACK_LIST) {
// Auto ban enabled only in black list mode
acl_add_ip(peer_name);
LOGE("add %s to the black list", peer_name);
}
}
}
report_addr(server->fd);
close_and_free_server(EV_A_ server);
return;
}
@@ -1715,6 +1709,9 @@ main(int argc, char **argv)
LOGI("initializing ciphers... %s", method);
int m = enc_init(password, method);
// init block list
init_block_list();
// initialize ev loop
struct ev_loop *loop = EV_DEFAULT;