Remove or lower the priority of some debug messages.

[oweals/tinc.git] / src / meta.c

diff --git a/src/meta.c b/src/meta.c
index 4c52464c33d2a62f663f54c2b920832b8a20e910..0b8a379b2b70bc87c8e527aa8d249dbfe8005dfe 100644 (file)
--- a/src/meta.c
+++ b/src/meta.c
@@ -1,6 +1,6 @@
 /*
     meta.c -- handle the meta communication
-    Copyright (C) 2000-2009 Guus Sliepen <guus@tinc-vpn.org>,
+    Copyright (C) 2000-2013 Guus Sliepen <guus@tinc-vpn.org>,
                   2000-2005 Ivo Timmermans
                   2006      Scott Lamb <slamb@slamb.org>
 
@@ -177,7 +177,45 @@ bool receive_meta(connection_t *c) {
 
                if(c->tcplen) {
                        if(c->tcplen <= c->buflen) {
-                               receive_tcppacket(c, c->buffer, c->tcplen);
+                               if(!c->node) {
+                                       if(c->outgoing && proxytype == PROXY_SOCKS4 && c->allow_request == ID) {
+                                               if(c->buffer[0] == 0 && c->buffer[1] == 0x5a) {
+                                                       ifdebug(CONNECTIONS) logger(LOG_DEBUG, "Proxy request granted");
+                                               } else {
+                                                       logger(LOG_ERR, "Proxy request rejected");
+                                                       return false;
+                                               }
+                                       } else if(c->outgoing && proxytype == PROXY_SOCKS5 && c->allow_request == ID) {
+                                               if(c->buffer[0] != 5) {
+                                                       logger(LOG_ERR, "Invalid response from proxy server");
+                                                       return false;
+                                               }
+                                               if(c->buffer[1] == (char)0xff) {
+                                                       logger(LOG_ERR, "Proxy request rejected: unsuitable authentication method");
+                                                       return false;
+                                               }
+                                               if(c->buffer[2] != 5) {
+                                                       logger(LOG_ERR, "Invalid response from proxy server");
+                                                       return false;
+                                               }
+                                               if(c->buffer[3] == 0) {
+                                                       ifdebug(CONNECTIONS) logger(LOG_DEBUG, "Proxy request granted");
+                                               } else {
+                                                       logger(LOG_ERR, "Proxy request rejected");
+                                                       return false;
+                                               }
+                                       } else {
+                                               logger(LOG_ERR, "c->tcplen set but c->node is NULL!");
+                                               abort();
+                                       }
+                               } else {
+                                       if(c->allow_request == ALL) {
+                                               receive_tcppacket(c, c->buffer, c->tcplen);
+                                       } else {
+                                               logger(LOG_ERR, "Got unauthorized TCP packet from %s (%s)", c->name, c->hostname);
+                                               return false;
+                                       }
+                               }
 
                                c->buflen -= c->tcplen;
                                lenin -= c->tcplen - oldlen;