홈 탐색 도움말
로그인
cturan
/
3proxy
1
0
포크 0
파일 이슈 0 풀 리퀘스트 0 위키
트리: 98961ced0d
브랜치 태그
3proxy
/
src
/
proxy.c

proxy.c 35 KB
히스토리 Raw

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120 
  1. /*
    2. 

  2.    3APA3A simpliest proxy server
    3. 

  3.    (c) 2002-2008 by ZARAZA <3APA3A@security.nnov.ru>
    4. 

  4. 

  5.    please read License Agreement
    6. 

  6. 

  7.    $Id: proxy.c,v 1.107 2014-04-07 20:35:07 vlad Exp $
    8. 

  8. */
    9. 

  9. 

  10. 

  11. #include "proxy.h"
    12. 

  12. 

  13. #define RETURN(xxx) { param->res = xxx; goto CLEANRET; }
    14. 

  14. 

  15. char * proxy_stringtable[] = {
    16. 

  16. /* 0 */	"HTTP/1.0 400 Bad Request\r\n"
    17. 

  17. 	"Proxy-Connection: close\r\n"
    18. 

  18. 	"Content-type: text/html; charset=us-ascii\r\n"
    19. 

  19. 	"\r\n"
    20. 

  20. 	"<html><head><title>400 Bad Request</title></head>\r\n"
    21. 

  21. 	"<body><h2>400 Bad Request</h2></body></html>\r\n",
    22. 

  22. 

  23. /* 1 */	"HTTP/1.0 502 Bad Gateway\r\n"
    24. 

  24. 	"Proxy-Connection: close\r\n"
    25. 

  25. 	"Content-type: text/html; charset=us-ascii\r\n"
    26. 

  26. 	"\r\n"
    27. 

  27. 	"<html><head><title>502 Bad Gateway</title></head>\r\n"
    28. 

  28. 	"<body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>\r\n",
    29. 

  29. 

  30. /* 2 */	"HTTP/1.0 503 Service Unavailable\r\n"
    31. 

  31. 	"Proxy-Connection: close\r\n"
    32. 

  32. 	"Content-type: text/html; charset=us-ascii\r\n"
    33. 

  33. 	"\r\n"
    34. 

  34. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    35. 

  35. 	"<body><h2>503 Service Unavailable</h2><h3>You have exceeded your traffic limit</h3></body></html>\r\n",
    36. 

  36. 

  37. /* 3 */	"HTTP/1.0 503 Service Unavailable\r\n"
    38. 

  38. 	"Proxy-Connection: close\r\n"
    39. 

  39. 	"Content-type: text/html; charset=us-ascii\r\n"
    40. 

  40. 	"\r\n"
    41. 

  41. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    42. 

  42. 	"<body><h2>503 Service Unavailable</h2><h3>Recursion detected</h3></body></html>\r\n",
    43. 

  43. 

  44. /* 4 */	"HTTP/1.0 501 Not Implemented\r\n"
    45. 

  45. 	"Proxy-Connection: close\r\n"
    46. 

  46. 	"Content-type: text/html; charset=us-ascii\r\n"
    47. 

  47. 	"\r\n"
    48. 

  48. 	"<html><head><title>501 Not Implemented</title></head>\r\n"
    49. 

  49. 	"<body><h2>501 Not Implemented</h2><h3>Required action is not supported by proxy server</h3></body></html>\r\n",
    50. 

  50. 

  51. /* 5 */	"HTTP/1.0 502 Bad Gateway\r\n"
    52. 

  52. 	"Proxy-Connection: close\r\n"
    53. 

  53. 	"Content-type: text/html; charset=us-ascii\r\n"
    54. 

  54. 	"\r\n"
    55. 

  55. 	"<html><head><title>502 Bad Gateway</title></head>\r\n"
    56. 

  56. 	"<body><h2>502 Bad Gateway</h2><h3>Failed to connect parent proxy</h3></body></html>\r\n",
    57. 

  57. 

  58. /* 6 */	"HTTP/1.0 500 Internal Error\r\n"
    59. 

  59. 	"Proxy-Connection: close\r\n"
    60. 

  60. 	"Content-type: text/html; charset=us-ascii\r\n"
    61. 

  61. 	"\r\n"
    62. 

  62. 	"<html><head><title>500 Internal Error</title></head>\r\n"
    63. 

  63. 	"<body><h2>500 Internal Error</h2><h3>Internal proxy error during processing your request</h3></body></html>\r\n",
    64. 

  64. 

  65. /* 7 */	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    66. 

  66. 	"Proxy-Authenticate: Basic realm=\"proxy\"\r\n"
    67. 

  67. 	"Proxy-Connection: close\r\n"
    68. 

  68. 	"Content-type: text/html; charset=us-ascii\r\n"
    69. 

  69. 	"\r\n"
    70. 

  70. 	"<html><head><title>407 Proxy Authentication Required</title></head>\r\n"
    71. 

  71. 	"<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
    72. 

  72. 

  73. /* 8 */	"HTTP/1.0 200 Connection established\r\n\r\n",
    74. 

  74. 

  75. /* 9 */	"HTTP/1.0 200 Connection established\r\n"
    76. 

  76. 	"Content-Type: text/html\r\n\r\n",
    77. 

  77. 

  78. /* 10*/	"HTTP/1.0 404 Not Found\r\n"
    79. 

  79. 	"Proxy-Connection: close\r\n"
    80. 

  80. 	"Content-type: text/html; charset=us-ascii\r\n"
    81. 

  81. 	"\r\n"
    82. 

  82. 	"<html><head><title>404 Not Found</title></head>\r\n"
    83. 

  83. 	"<body><h2>404 Not Found</h2><h3>File not found</body></html>\r\n",
    84. 

  84. 	
    85. 

  85. /* 11*/	"HTTP/1.0 403 Forbidden\r\n"
    86. 

  86. 	"Proxy-Connection: close\r\n"
    87. 

  87. 	"Content-type: text/html; charset=us-ascii\r\n"
    88. 

  88. 	"\r\n"
    89. 

  89. 	"<html><head><title>403 Access Denied</title></head>\r\n"
    90. 

  90. 	"<body><h2>403 Access Denied</h2><h3>Access control list denies you to access this resource</body></html>\r\n",
    91. 

  91. 

  92. /* 12*/	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    93. 

  93. #ifndef NOCRYPT
    94. 

  94. 	"Proxy-Authenticate: NTLM\r\n"
    95. 

  95. #endif
    96. 

  96. 	"Proxy-Authenticate: basic realm=\"proxy\"\r\n"
    97. 

  97. 	"Proxy-Connection: close\r\n"
    98. 

  98. 	"Content-type: text/html; charset=us-ascii\r\n"
    99. 

  99. 	"\r\n"
    100. 

  100. 	"<html><head><title>407 Proxy Authentication Required</title></head>\r\n"
    101. 

  101. 	"<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
    102. 

  102. 

  103. /* 13*/	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    104. 

  104. 	"Proxy-Connection: keep-alive\r\n"
    105. 

  105. 	"Content-Length: 0\r\n"
    106. 

  106. 	"Proxy-Authenticate: NTLM ",
    107. 

  107. 

  108. /* 14*/	"HTTP/1.0 403 Forbidden\r\n"
    109. 

  109. 	"Proxy-Connection: close\r\n"
    110. 

  110. 	"Content-type: text/html; charset=us-ascii\r\n"
    111. 

  111. 	"\r\n"
    112. 

  112. 	"<pre>",
    113. 

  113. 

  114. /* 15*/	"HTTP/1.0 503 Service Unavailable\r\n"
    115. 

  115. 	"Proxy-Connection: close\r\n"
    116. 

  116. 	"Content-type: text/html; charset=us-ascii\r\n"
    117. 

  117. 	"\r\n"
    118. 

  118. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    119. 

  119. 	"<body><h2>503 Service Unavailable</h2><h3>Your request violates configured policy</h3></body></html>\r\n",
    120. 

  120. 

  121. /* 16*/	"HTTP/1.0 401 Authentication Required\r\n"
    122. 

  122. 	"WWW-Authenticate: basic realm=\"FTP Server\"\r\n"
    123. 

  123. 	"Proxy-Connection: close\r\n"
    124. 

  124. 	"Content-type: text/html; charset=us-ascii\r\n"
    125. 

  125. 	"\r\n"
    126. 

  126. 	"<html><head><title>401 FTP Server requires authentication</title></head>\r\n"
    127. 

  127. 	"<body><h2>401 FTP Server requires authentication</h2><h3>This FTP server rejects anonymous access</h3></body></html>\r\n",
    128. 

  128. 

  129. /* 17*/ "HTTP/1.1 100 Continue\r\n"
    130. 

  130. 	"\r\n",
    131. 

  131. 

  132. 	NULL
    133. 

  133. };
    134. 

  134. 

  135. #define LINESIZE 4096
    136. 

  136. #define BUFSIZE (LINESIZE*2)
    137. 

  137. 

  138. static void logurl(struct clientparam * param, char * buf, char * req, int ftp){
    139. 

  139.  char *sb;
    140. 

  140.  char *se;
    141. 

  141.  int len;
    142. 

  142. 

  143.  if(!buf) req = NULL;
    144. 

  144.  if(req) {
    145. 

  145. 	len = (int)strlen(req);
    146. 

  146. 	if(len > (LINESIZE - 1)) len = LINESIZE - 1;
    147. 

  147. 	memcpy(buf, req, len + 1);
    148. 

  148. 	buf[LINESIZE - 1] = 0;
    149. 

  149. 	sb = strchr(buf, '\r');
    150. 

  150. 	if(sb)*sb = 0;
    151. 

  151. 	if(ftp && (se = strchr(buf + 10, ':')) && (sb = strchr(se, '@')) ) {
    152. 

  152. 		strcpy(se, sb);
    153. 

  153. 	}
    154. 

  154.  }
    155. 

  155.  if(param->res != 555)(*param->srv->logfunc)(param, (unsigned char *)(req?buf:NULL));
    156. 

  156. }
    157. 

  157. 

  158. void decodeurl(unsigned char *s, int allowcr){
    159. 

  159.  unsigned char *d = s;
    160. 

  160.  unsigned u;
    161. 

  161. 

  162.  while(*s){
    163. 

  163. 	if(*s == '%' && ishex(s[1]) && ishex(s[2])){
    164. 

  164. 		sscanf((char *)s+1, "%2x", &u);
    165. 

  165. 		if(allowcr && u != '\r')*d++ = u;
    166. 

  166. 		else if (u != '\r' && u != '\n') {
    167. 

  167. 			if (u == '\"' || u == '\\') *d++ = '\\';
    168. 

  168. 			else if (u == 255) *d++ = 255;
    169. 

  169. 			*d++ = u;
    170. 

  170. 		}
    171. 

  171. 		s+=3;
    172. 

  172. 	}
    173. 

  173. 	else if(!allowcr && *s == '?') {
    174. 

  174. 		break;
    175. 

  175. 	}
    176. 

  176. 	else if(*s == '+') {
    177. 

  177. 		*d++ = ' ';
    178. 

  178. 		s++;
    179. 

  179. 	}
    180. 

  180. 	else {
    181. 

  181. 		*d++ = *s++;
    182. 

  182. 	}
    183. 

  183.  }
    184. 

  184.  *d = 0;
    185. 

  185. }
    186. 

  186. 

  187. void file2url(unsigned char *sb, unsigned char *buf, unsigned bufsize, int * inbuf, int skip255){
    188. 

  188.  for(; *sb; sb++){
    189. 

  189. 	if((bufsize - *inbuf)<16)break;
    190. 

  190. 	if(*sb=='\r'||*sb=='\n')continue;
    191. 

  191. 	if(isallowed(*sb))buf[(*inbuf)++]=*sb;
    192. 

  192. 	else if(*sb == '\"'){
    193. 

  193. 		memcpy(buf+*inbuf, "%5C%22", 6);
    194. 

  194. 		(*inbuf)+=6;
    195. 

  195. 	}
    196. 

  196. 	else if(skip255 && *sb == 255 && *(sb+1) == 255) {
    197. 

  197. 		memcpy(buf+*inbuf, "%ff", 3);
    198. 

  198. 		(*inbuf)+=3;
    199. 

  199. 		sb++;
    200. 

  200.         }
    201. 

  201. 	else {
    202. 

  202. 		sprintf((char *)buf+*inbuf, "%%%.2x", (unsigned)*sb);
    203. 

  203. 		(*inbuf)+=3;
    204. 

  204. 	}
    205. 

  205.  }
    206. 

  206. }
    207. 

  207. 

  208. 

  209. void * proxychild(struct clientparam* param) {
    210. 

  210.  int res=0, i=0;
    211. 

  211.  unsigned char* buf = NULL, *newbuf;
    212. 

  212.  int inbuf;
    213. 

  213.  int bufsize;
    214. 

  214.  unsigned reqlen = 0;
    215. 

  215.  unsigned char	*sb=NULL, *sg=NULL, *se=NULL, *sp=NULL,
    216. 

  216. 		*req=NULL, *su=NULL, *ss = NULL;
    217. 

  217.  unsigned char *ftpbase=NULL;
    218. 

  218.  unsigned char username[1024];
    219. 

  219.  int keepalive = 0;
    220. 

  220.  unsigned long contentlength = 0;
    221. 

  221.  int hascontent =0;
    222. 

  222.  int isconnect = 0;
    223. 

  223.  int redirect = 0;
    224. 

  224.  int prefix = 0, ckeepalive=0;
    225. 

  225.  int ftp = 0;
    226. 

  226.  int anonymous;
    227. 

  227.  int sleeptime = 0;
    228. 

  228.  int reqsize, reqbufsize;
    229. 

  229.  int authenticate;
    230. 

  230.  struct pollfd fds[2];
    231. 

  231.  SOCKET ftps;
    232. 

  232.  SASIZETYPE sasize;
    233. 

  233. #ifndef WITHMAIN
    234. 

  234.  FILTER_ACTION action;
    235. 

  235. #endif
    236. 

  236. 

  237. 

  238. 

  239.  
    240. 

  240.  if(!(buf = myalloc(BUFSIZE))) {RETURN(21);}
    241. 

  241.  bufsize = BUFSIZE;
    242. 

  242.  anonymous = param->srv->singlepacket;
    243. 

  243. for(;;){
    244. 

  244.  memset(buf, 0, BUFSIZE);
    245. 

  245.  inbuf = 0;
    246. 

  246. 

  247. 

  248.  if(keepalive && (param->cliinbuf == param->clioffset) && (param->remsock != INVALID_SOCKET)){
    249. 

  249. 	memset(fds, 0, sizeof(fds));
    250. 

  250. 	fds[0].fd = param->clisock;
    251. 

  251. 	fds[0].events = POLLIN;
    252. 

  252. 	fds[1].fd = param->remsock;
    253. 

  253. 	fds[1].events = POLLIN;
    254. 

  254. 	res = so._poll(fds, 2, conf.timeouts[STRING_S]*1000);
    255. 

  255. 	if(res<=0) {
    256. 

  256. 		RETURN(555);
    257. 

  257. 	}
    258. 

  258. 	if((fds[1].revents & (POLLIN|POLLHUP|POLLERR|POLLNVAL))) {
    259. 

  259. 		if(param->transparent || (!param->redirected && param->redirtype == R_HTTP)) RETURN(555);
    260. 

  260. 		ckeepalive = 0;
    261. 

  261. 		so._shutdown(param->remsock, SHUT_RDWR);
    262. 

  262. 		so._closesocket(param->remsock);
    263. 

  263. 		param->sins.sin_addr.s_addr = 0;
    264. 

  264. 		param->sins.sin_port = 0;
    265. 

  265. 		param->remsock = INVALID_SOCKET;
    266. 

  266. 		param->redirected = 0;
    267. 

  267. 		param->redirtype = 0;
    268. 

  268. 	}
    269. 

  269.  }
    270. 

  270. 

  271.  i = sockgetlinebuf(param, CLIENT, buf, LINESIZE - 1, '\n', conf.timeouts[STRING_L]);
    272. 

  272.  if(i<=0) {
    273. 

  273. 	RETURN((keepalive)?555:(i)?507:508);
    274. 

  274.  }
    275. 

  275.  if (i==2 && buf[0]=='\r' && buf[1]=='\n') continue;
    276. 

  276.  buf[i] = 0;
    277. 

  277.  
    278. 

  278.  if(req) {
    279. 

  279. 	if(!param->transparent && !param->srv->transparent && param->redirtype != R_HTTP && (i<=prefix || strncasecmp((char *)buf, (char *)req, prefix))){
    280. 

  280. 		ckeepalive = 0;
    281. 

  281. 		if(param->remsock != INVALID_SOCKET){
    282. 

  282. 			so._shutdown(param->remsock, SHUT_RDWR);
    283. 

  283. 			so._closesocket(param->remsock);
    284. 

  284. 		}
    285. 

  285. 		param->sins.sin_addr.s_addr = 0;
    286. 

  286. 		param->sins.sin_port = 0;
    287. 

  287. 		param->remsock = INVALID_SOCKET;
    288. 

  288. 		param->redirected = 0;
    289. 

  289. 		param->redirtype = 0;
    290. 

  290. 	}
    291. 

  291. 	myfree(req);
    292. 

  292.  }
    293. 

  293.  req = (unsigned char *)mystrdup((char *)buf);
    294. 

  294.  if(!req){RETURN(510);}
    295. 

  295.  if(i<10) {
    296. 

  296. 	RETURN(511);
    297. 

  297.  }
    298. 

  298.  if(buf[i-3] == '1') keepalive = 2; 
    299. 

  299.  if((isconnect = !strncasecmp((char *)buf, "CONNECT", 7))) keepalive = 2;
    300. 

  300. 

  301.  if ((sb=(unsigned char *)(unsigned char *)strchr((char *)buf, ' ')) == NULL) {RETURN(512);}
    302. 

  302.  ss = ++sb;
    303. 

  303.  if(!isconnect) {
    304. 

  304. 	if (!strncasecmp((char *)sb, "http://", 7)) {
    305. 

  305. 		sb += 7;
    306. 

  306. 	}
    307. 

  307. 	else if (!strncasecmp((char *)sb, "ftp://", 6)) {
    308. 

  308. 		ftp = 1;
    309. 

  309. 		sb += 6;
    310. 

  310. 	}
    311. 

  311. 	else if(*sb == '/') {
    312. 

  312. 		param->transparent = 1;
    313. 

  313. 	}
    314. 

  314. 	else {
    315. 

  315. 		RETURN (513);
    316. 

  316. 	}
    317. 

  317.  }
    318. 

  318.  else {
    319. 

  319. 	 if ((se=(unsigned char *)(unsigned char *)strchr((char *)sb, ' ')) == NULL || sb==se) {RETURN (514);}
    320. 

  320. 	 *se = 0;
    321. 

  321.  }
    322. 

  322.  if(!param->transparent || isconnect) {
    323. 

  323. 	if(!isconnect) {
    324. 

  324. 		if ((se=(unsigned char *)(unsigned char *)strchr((char *)sb, '/')) == NULL 
    325. 

  325. 			|| sb==se
    326. 

  326. 			|| !(sg=(unsigned char *)strchr((char *)sb, ' '))) {RETURN (515);}
    327. 

  327. 		if(se > sg) se=sg;
    328. 

  328.  		*se = 0;
    329. 

  329. 	}
    330. 

  330. 	prefix = (int)(se - buf);
    331. 

  331. 	su = (unsigned char*)strrchr((char *)sb, '@');
    332. 

  332. 	if(su) {
    333. 

  333. 		su = mystrdup(sb);
    334. 

  334. 		decodeurl(su, 0);
    335. 

  335. 		parseconnusername((char *)su, (struct clientparam *)param, 1, (unsigned short)((ftp)?21:80));
    336. 

  336. 		myfree(su);
    337. 

  337. 	}
    338. 

  338. 	else parsehostname((char *)sb, (struct clientparam *)param, (unsigned short)((ftp)? 21:80));
    339. 

  339. 	if(!isconnect){
    340. 

  340. 		if(se==sg)*se-- = ' ';
    341. 

  341. 		*se = '/';
    342. 

  342. 		memmove(ss, se, i - (se - sb) + 1);
    343. 

  343. 	}
    344. 

  344.  }
    345. 

  345.  reqlen = i = (int)strlen((char *)buf);
    346. 

  346.  if(!strncasecmp((char *)buf, "CONNECT", 7))param->operation = HTTP_CONNECT;
    347. 

  347.  else if(!strncasecmp((char *)buf, "GET", 3))param->operation = (ftp)?FTP_GET:HTTP_GET;
    348. 

  348.  else if(!strncasecmp((char *)buf, "PUT", 3))param->operation = (ftp)?FTP_PUT:HTTP_PUT;
    349. 

  349.  else if(!strncasecmp((char *)buf, "POST", 4)||!strncasecmp((char *)buf, "BITS_POST", 9))param->operation = HTTP_POST;
    350. 

  350.  else if(!strncasecmp((char *)buf, "HEAD", 4))param->operation = HTTP_HEAD;
    351. 

  351.  else param->operation = HTTP_OTHER;
    352. 

  352.  do {
    353. 

  353. 	buf[inbuf+i]=0;
    354. 

  354. /*printf("Got: %s\n", buf+inbuf);*/
    355. 

  355. #ifndef WITHMAIN
    356. 

  356. 	if(i > 25 && !param->srv->transparent && (!strncasecmp((char *)(buf+inbuf), "proxy-authorization", 19))){
    357. 

  357. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    358. 

  358. 		if(!sb)continue;
    359. 

  359. 		++sb;
    360. 

  360. 		while(isspace(*sb))sb++;
    361. 

  361. 		if(!*sb) continue;
    362. 

  362. 		if(!strncasecmp((char *)sb, "basic", 5)){
    363. 

  363. 			sb+=5;
    364. 

  364. 			while(isspace(*sb))sb++;
    365. 

  365. 			i = de64(sb, username, 255);
    366. 

  366. 			if(i<=0)continue;
    367. 

  367. 			username[i] = 0;
    368. 

  368. 			sb = (unsigned char *)strchr((char *)username, ':');
    369. 

  369. 			if(sb){
    370. 

  370. 				*sb = 0;
    371. 

  371. 				if(param->password)myfree(param->password);
    372. 

  372. 				param->password = (unsigned char *)mystrdup((char *)sb+1);
    373. 

  373. 				param->pwtype = 0;
    374. 

  374. 			}
    375. 

  375. 			if(param->username)myfree(param->username);
    376. 

  376. 			param->username = (unsigned char *)mystrdup((char *)username);
    377. 

  377. 			continue;
    378. 

  378. 		}
    379. 

  379. #ifndef NOCRYPT
    380. 

  380. 		if(param->srv->usentlm && !strncasecmp((char *)sb, "ntlm", 4)){
    381. 

  381. 			sb+=4;
    382. 

  382. 			while(isspace(*sb))sb++;
    383. 

  383. 			i = de64(sb, username, 1023);
    384. 

  384. 			if(i<=16)continue;
    385. 

  385. 			username[i] = 0;
    386. 

  386. 			if(strncasecmp((char *)username, "NTLMSSP", 8)) continue;
    387. 

  387. 			if(username[8] == 1) {
    388. 

  388. 				while( (i = sockgetlinebuf(param, CLIENT, buf, BUFSIZE - 1, '\n', conf.timeouts[STRING_S])) > 2){
    389. 

  389. 					if(i> 15 && (!strncasecmp((char *)(buf), "content-length", 14))){
    390. 

  390. 						buf[i]=0;
    391. 

  391. 						sscanf((char *)buf + 15, "%lu", &contentlength);
    392. 

  392. 					}
    393. 

  393. 				}
    394. 

  394. 				while( contentlength > 0 && (i = sockgetlinebuf(param, CLIENT, buf, (BUFSIZE < contentlength)? BUFSIZE - 1:contentlength, '\n', conf.timeouts[STRING_S])) > 0){
    395. 

  395. 					if ((unsigned long)i > contentlength) break;
    396. 

  396. 					contentlength-=i;
    397. 

  397. 				}
    398. 

  398. 				contentlength = 0;
    399. 

  399. 				if(param->password)myfree(param->password);
    400. 

  400. 				param->password = myalloc(32);
    401. 

  401. 				param->pwtype = 2;
    402. 

  402. 				i = (int)strlen(proxy_stringtable[13]);
    403. 

  403. 				memcpy(buf, proxy_stringtable[13], i);
    404. 

  404. 				genchallenge(param, (char *)param->password, (char *)buf + i);
    405. 

  405. 				memcpy(buf + strlen((char *)buf), "\r\n\r\n", 5);
    406. 

  406. 				socksend(param->clisock, buf, (int)strlen((char *)buf), conf.timeouts[STRING_S]);
    407. 

  407. 				ckeepalive = keepalive = 1;
    408. 

  408. 				goto REQUESTEND;
    409. 

  409. 			}
    410. 

  410. 			if(username[8] == 3 && param->pwtype == 2 && i>=80) {
    411. 

  411. 				unsigned offset, len;
    412. 

  412. 

  413. 				len = username[20] + (((unsigned)username[21]) << 8);
    414. 

  414. 				offset = username[24] + (((unsigned)username[25]) << 8);
    415. 

  415. 				if(len != 24 || len + offset > (unsigned)i) continue;
    416. 

  416. 				memcpy(param->password + 8, username + offset, 24);
    417. 

  417. 				len = username[36] + (((unsigned)username[37]) << 8);
    418. 

  418. 				offset = username[40] + (((unsigned)username[41]) << 8);
    419. 

  419. 				if(len> 255 || len + offset > (unsigned)i) continue;
    420. 

  420. 				if(param->username) myfree(param->username);
    421. 

  421. 				unicode2text((char *)username+offset, (char *)username+offset, (len>>1));
    422. 

  422. 				param->username = (unsigned char *)mystrdup((char *)username+offset);
    423. 

  423. 			}
    424. 

  424. 			continue;
    425. 

  425. 		}
    426. 

  426. #endif
    427. 

  427. 	}
    428. 

  428. #endif
    429. 

  429. 	if(!isconnect && (
    430. 

  430. 			(i> 25 && !strncasecmp((char *)(buf+inbuf), "proxy-connection:", 17))
    431. 

  431. 			||
    432. 

  432. 			(i> 16 && (!strncasecmp((char *)(buf+inbuf), "connection:", 11)))
    433. 

  433. 			)){
    434. 

  434. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    435. 

  435. 		if(!sb)continue;
    436. 

  436. 		++sb;
    437. 

  437. 		while(isspace(*sb))sb++;
    438. 

  438. 		if(!strncasecmp((char *)sb,"keep-alive", 10))keepalive = 1;
    439. 

  439. 		else keepalive = 0;
    440. 

  440. 		continue; 
    441. 

  441. 	}
    442. 

  442. 	if( i > 11 && !strncasecmp((char *)(buf+inbuf),  "Expect: 100", 11)){
    443. 

  443. 		keepalive = 1;
    444. 

  444. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[17], (int)strlen(proxy_stringtable[17]), conf.timeouts[STRING_S]);
    445. 

  445. 		continue;
    446. 

  446. 	}
    447. 

  447. 	if(param->transparent && i > 6 && !strncasecmp((char *)buf + inbuf, "Host:", 5)){
    448. 

  448. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    449. 

  449. 		if(!sb)continue;
    450. 

  450. 		++sb;
    451. 

  451. 		while(isspace(*sb))sb++;
    452. 

  452. 		se = (unsigned char *)strchr((char *)sb, '\r');
    453. 

  453. 		if(se) *se = 0;
    454. 

  454. 		if(!param->hostname){
    455. 

  455. 			parsehostname((char *)sb, param, 80);
    456. 

  456. 		}
    457. 

  457. 		newbuf = myalloc(strlen((char *)req) + strlen((char *)(buf+inbuf)) + 8);
    458. 

  458. 		if(newbuf){
    459. 

  459. 			sp = (unsigned char *)strchr((char *)req+1, '/');
    460. 

  460. 			memcpy(newbuf, req, (sp - req));
    461. 

  461. 			sprintf((char*)newbuf + (sp - req), "http://%s%s",sb,sp);
    462. 

  462. 			myfree(req);
    463. 

  463. 			req = newbuf;
    464. 

  464. 		}
    465. 

  465. 		if(se)*se = '\r';
    466. 

  466. 	}
    467. 

  467. 	if(ftp && i > 13 && (!strncasecmp((char *)(buf+inbuf), "authorization", 13))){
    468. 

  468. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    469. 

  469. 		if(!sb)continue;
    470. 

  470. 		++sb;
    471. 

  471. 		while(isspace(*sb))sb++;
    472. 

  472. 		if(!*sb) continue;
    473. 

  473. 		if(!strncasecmp((char *)sb, "basic", 5)){
    474. 

  474. 			sb+=5;
    475. 

  475. 			while(isspace(*sb))sb++;
    476. 

  476. 			i = de64(sb, username, 255);
    477. 

  477. 			if(i<=0)continue;
    478. 

  478. 			username[i] = 0;
    479. 

  479. 			sb = (unsigned char *)strchr((char *)username, ':');
    480. 

  480. 			if(sb){
    481. 

  481. 				*sb = 0;
    482. 

  482. 				if(param->extpassword)myfree(param->extpassword);
    483. 

  483. 				param->extpassword = (unsigned char *)mystrdup((char *)sb+1);
    484. 

  484. 			}
    485. 

  485. 			if(param->extusername)myfree(param->extusername);
    486. 

  486. 			param->extusername = (unsigned char *)mystrdup((char *)username);
    487. 

  487. 			continue;
    488. 

  488. 		}
    489. 

  489. 	}
    490. 

  490. 	if(i> 15 && (!strncasecmp((char *)(buf+inbuf), "content-length", 14))){
    491. 

  491. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    492. 

  492. 		if(!sb)continue;
    493. 

  493. 		++sb;
    494. 

  494. 		while(isspace(*sb))sb++;
    495. 

  495. 		sscanf(sb, "%lu",&contentlength);
    496. 

  496. 		if(param->maxtrafout && (param->maxtrafout < param->statscli || (unsigned)contentlength > param->maxtrafout - param->statscli)){
    497. 

  497. 			RETURN(10);
    498. 

  498. 		}
    499. 

  499. 		if(param->ndatfilterscli > 0 && contentlength > 0) continue;
    500. 

  500. 	}
    501. 

  501. 	inbuf += i;
    502. 

  502. 	if((bufsize - inbuf) < LINESIZE){
    503. 

  503. 		if (bufsize > 20000){
    504. 

  504. 			RETURN (516);
    505. 

  505. 		}
    506. 

  506. 		if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    507. 

  507. 		buf = newbuf;
    508. 

  508. 		bufsize += BUFSIZE;
    509. 

  509. 	}
    510. 

  510.  } while( (i = sockgetlinebuf(param, CLIENT, buf + inbuf, LINESIZE - 2, '\n', conf.timeouts[STRING_S])) > 2);
    511. 

  511. 

  512. 

  513.  buf[inbuf] = 0;
    514. 

  514. 

  515.  reqsize = (int)strlen(req);
    516. 

  516.  reqbufsize = reqsize + 1;
    517. 

  517. 

  518. #ifndef WITHMAIN
    519. 

  519. 

  520.  action = handlereqfilters(param, &req, &reqbufsize, 0, &reqsize);
    521. 

  521.  if(action == HANDLED){
    522. 

  522. 	RETURN(0);
    523. 

  523.  }
    524. 

  524.  if(action != PASS) RETURN(517);
    525. 

  525.  action = handlehdrfilterscli(param, &buf, &bufsize, 0, &inbuf);
    526. 

  526.  if(action == HANDLED){
    527. 

  527. 	RETURN(0);
    528. 

  528.  }
    529. 

  529.  if(action != PASS) RETURN(517);
    530. 

  530.  if(param->ndatfilterscli > 0 && contentlength > 0){
    531. 

  531.   unsigned long newlen;
    532. 

  532.   newlen = sockfillbuffcli(param, contentlength, CONNECTION_S);
    533. 

  533.   if(newlen == contentlength) {
    534. 

  534. 	action = handledatfltcli(param,  &param->clibuf, &param->clibufsize, 0, &param->cliinbuf);
    535. 

  535. 	if(action == HANDLED){
    536. 

  536. 		RETURN(0);
    537. 

  537. 	}
    538. 

  538. 	if(action != PASS) RETURN(517);
    539. 

  539. 	contentlength = param->cliinbuf;
    540. 

  540. 	param->ndatfilterscli = 0;
    541. 

  541.   }
    542. 

  542.   sprintf((char*)buf+strlen((char *)buf), "Content-Length: %lu\r\n", contentlength);
    543. 

  543.  }
    544. 

  544. 

  545. #endif
    546. 

  546. 

  547.  if((res = (*param->srv->authfunc)(param))) {RETURN(res);}
    548. 

  548.  if (param->sins.sin_addr.s_addr == param->srv->intip && param->sins.sin_port == param->srv->intport) {
    549. 

  549. 	RETURN(519);
    550. 

  550.  }
    551. 

  551.  sasize = sizeof(struct sockaddr_in);
    552. 

  552.  if(so._getpeername(param->remsock, (struct sockaddr *)&param->sins, &sasize)){
    553. 

  553. 	RETURN(520);
    554. 

  554.  }
    555. 

  555. #define FTPBUFSIZE 1536
    556. 

  556. 

  557.  if(ftp && param->redirtype != R_HTTP){
    558. 

  558. 	SOCKET s;
    559. 

  559. 	int mode = 0;
    560. 

  560. 	int i=0;
    561. 

  561. 	char ftpbuf[FTPBUFSIZE];
    562. 

  562. 	int inftpbuf = 0;
    563. 

  563. 

  564. 	if(!ckeepalive){
    565. 

  565. 		inftpbuf = FTPBUFSIZE - 20;
    566. 

  566. 		res = ftplogin(param, ftpbuf, &inftpbuf);
    567. 

  567. 		if(res){
    568. 

  568. 			if (res == 700 || res == 701){
    569. 

  569. 				socksend(param->clisock, (unsigned char *)proxy_stringtable[16], (int)strlen(proxy_stringtable[16]), conf.timeouts[STRING_S]);
    570. 

  570. 				socksend(param->clisock, (unsigned char *)ftpbuf, inftpbuf, conf.timeouts[STRING_S]);
    571. 

  571. 			}
    572. 

  572. 			RETURN(res);
    573. 

  573. 		}
    574. 

  574. 	}
    575. 

  575. 	ckeepalive = 1;
    576. 

  576. 	if(ftpbase) myfree(ftpbase);
    577. 

  577. 	ftpbase = NULL;
    578. 

  578. 	if(!(sp = (unsigned char *)strchr((char *)ss, ' '))){RETURN(799);}
    579. 

  579. 	*sp = 0;
    580. 

  580. 

  581. 	decodeurl(ss, 0);
    582. 

  582. 	i = (int)strlen((char *)ss);
    583. 

  583. 	if(!(ftpbase = myalloc(i+2))){RETURN(21);}
    584. 

  584. 	memcpy(ftpbase, ss, i);
    585. 

  585. 	if(ftpbase[i-1] != '/') ftpbase[i++] = '/';
    586. 

  586. 	ftpbase[i] = 0;
    587. 

  587. 	memcpy(buf, "<pre><hr>\n", 10);
    588. 

  588. 	inbuf = 10;
    589. 

  589. 	if(inftpbuf) {
    590. 

  590. 		memcpy(buf+inbuf, ftpbuf, inftpbuf);
    591. 

  591. 		inbuf += inftpbuf;
    592. 

  592. 		memcpy(buf+inbuf, "<hr>", 4);
    593. 

  593. 		inbuf += 4;
    594. 

  594. 	}
    595. 

  595. 	if(ftpbase[1] != 0){
    596. 

  596. 		memcpy(buf+inbuf, "[<A HREF=\"..\">..</A>]\n", 22);
    597. 

  597. 		inbuf += 22;
    598. 

  598. 	}
    599. 

  599. 	inftpbuf = FTPBUFSIZE - (20 + inftpbuf);
    600. 

  600. 	res = ftpcd(param, ftpbase, ftpbuf, &inftpbuf);
    601. 

  601. 	if(res){
    602. 

  602. 		res = ftptype(param, (unsigned char *)"I");
    603. 

  603. 		if(res)RETURN(res);
    604. 

  604. 		ftpbase[--i] = 0;
    605. 

  605. 		ftps = ftpcommand(param, param->operation == FTP_PUT? (unsigned char *)"PUT" : (unsigned char *)"RETR", ftpbase);
    606. 

  606. 	}
    607. 

  607. 	else {
    608. 

  608. 		if(inftpbuf){
    609. 

  609. 			memcpy(buf+inbuf, ftpbuf, inftpbuf);
    610. 

  610. 			inbuf += inftpbuf;
    611. 

  611. 			memcpy(buf+inbuf, "<hr>", 4);
    612. 

  612. 			inbuf += 4;
    613. 

  613. 		}
    614. 

  614. 		ftps = ftpcommand(param, (unsigned char *)"LIST", NULL);
    615. 

  615. 		mode = 1;
    616. 

  616. 	}
    617. 

  617. 	if(ftps == INVALID_SOCKET){RETURN(780);}
    618. 

  618. 	if(!mode){
    619. 

  619. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[8], (int)strlen(proxy_stringtable[8]), conf.timeouts[STRING_S]);
    620. 

  620. 		s = param->remsock;
    621. 

  621. 		param->remsock = ftps;
    622. 

  622. 		if((param->operation == FTP_PUT) && (contentlength > 0)) param->waitclient = contentlength;
    623. 

  623. 		res = sockmap(param, conf.timeouts[CONNECTION_L]);
    624. 

  624. 		if (res == 99) res = 0;
    625. 

  625. 		so._closesocket(ftps);
    626. 

  626. 		ftps = INVALID_SOCKET;
    627. 

  627. 		param->remsock = s;
    628. 

  628. 	}
    629. 

  629. 	else {
    630. 

  630. 		int headsent = 0;
    631. 

  631. 		int gotres = -1;
    632. 

  632. 

  633. 		s = param->remsock;
    634. 

  634. 		if(param->srvoffset < param->srvinbuf){
    635. 

  635. 			gotres = ftpres(param, buf+inbuf, bufsize-(inbuf+100));
    636. 

  636. 			if(gotres) inbuf= (int)strlen((char *)buf);
    637. 

  637. 		}
    638. 

  638. 			
    639. 

  639. 		param->remsock = ftps;
    640. 

  640. 		if(gotres <= 0) for(; (res = sockgetlinebuf(param, SERVER, (unsigned char *)ftpbuf, FTPBUFSIZE - 20, '\n', conf.timeouts[STRING_S])) > 0; i++){
    641. 

  641. 			int isdir = 0;
    642. 

  642. 			int islink = 0;
    643. 

  643. 			int filetoken =-1;
    644. 

  644. 			int sizetoken =-1;
    645. 

  645. 			int modetoken =-1;
    646. 

  646. 			int datetoken =-1;
    647. 

  647. 			int spaces = 1;
    648. 

  648. 			unsigned char * tokens[10];
    649. 

  649. 			unsigned wordlen [10];
    650. 

  650. 			unsigned char j=0;
    651. 

  651. 			int space = 1;
    652. 

  652. 

  653. 			ftpbuf[res] = 0;
    654. 

  654. 			if(!i && ftpbuf[0] == 't' && ftpbuf[1] == 'o' && ftpbuf[2] == 't'){
    655. 

  655. 				mode = 2;
    656. 

  656. 				continue;
    657. 

  657. 			}
    658. 

  658. 			if(!isnumber(*ftpbuf) && mode == 1) mode = 2;
    659. 

  659. 			for(sb=(unsigned char *)ftpbuf; *sb; sb++){
    660. 

  660. 				if(!space && isspace(*sb)){
    661. 

  661. 					space = 1;
    662. 

  662. 					wordlen[j]=(unsigned)(sb-tokens[j]);
    663. 

  663. 					j++;
    664. 

  664. 				}
    665. 

  665. 				if(space && !isspace(*sb)){
    666. 

  666. 					space = 0;
    667. 

  667. 					tokens[j] = sb;
    668. 

  668. 					if(j==8)break;
    669. 

  669. 				}				
    670. 

  670. 			}
    671. 

  671. 			if(mode == 1){
    672. 

  672. 				if(j < 4) continue;
    673. 

  673. 				if(!(isdir = !memcmp(tokens[2], "<DIR>", wordlen[2])) && !isnumber(*tokens[2])){
    674. 

  674. 					continue;
    675. 

  675. 				}
    676. 

  676. 				datetoken = 0;
    677. 

  677. 				wordlen[datetoken] = ((unsigned)(tokens[1] - tokens[0])) + wordlen[1];
    678. 

  678. 				sizetoken = 2;
    679. 

  679. 				filetoken = 3;
    680. 

  680. 				spaces = 10;
    681. 

  681. 			}
    682. 

  682. 			else {
    683. 

  683. 				if(j < 8 || wordlen[0]!=10) continue;
    684. 

  684. 				if(j < 8 || !isnumber(*tokens[4])) mode = 3;
    685. 

  685. 				if(*tokens[0] == 'd') isdir = 1;
    686. 

  686. 				if(*tokens[0] == 'l') islink = 1;
    687. 

  687. 				modetoken = 0;
    688. 

  688. 				sizetoken = (mode == 2)? 4:3;
    689. 

  689. 				filetoken = (mode == 2)? 8:7;
    690. 

  690. 				datetoken = (mode == 2)? 5:4;
    691. 

  691. 				tokens[filetoken] = tokens[filetoken-1];
    692. 

  692. 				while(*tokens[filetoken] && !isspace(*tokens[filetoken]))tokens[filetoken]++;
    693. 

  693. 				if(*tokens[filetoken]){
    694. 

  694. 					tokens[filetoken]++;
    695. 

  695. 				}
    696. 

  696. 				wordlen[datetoken] = (unsigned)(tokens[filetoken] - tokens[datetoken]);
    697. 

  697. 				wordlen[filetoken] = (unsigned)strlen((char *)tokens[filetoken]);
    698. 

  698. 			}
    699. 

  699. 

  700. 			if(modetoken >= 0) memcpy(buf+inbuf, tokens[modetoken], 11);
    701. 

  701. 			else memcpy(buf+inbuf, "---------- ", 11);
    702. 

  702. 			inbuf += 11;
    703. 

  703. 			if((int) wordlen[datetoken]+256 > bufsize-inbuf) continue;
    704. 

  704. 			memcpy(buf+inbuf, tokens[datetoken], wordlen[datetoken]);
    705. 

  705. 			inbuf += wordlen[datetoken];
    706. 

  706. 			if(isdir){
    707. 

  707. 				memcpy(buf+inbuf, "       DIR", 10);
    708. 

  708. 				inbuf+=10;
    709. 

  709. 			}
    710. 

  710. 			else if(islink){
    711. 

  711. 				memcpy(buf+inbuf, "      LINK", 10);
    712. 

  712. 				inbuf+=10;
    713. 

  713. 			}
    714. 

  714. 			else{
    715. 

  715. 				unsigned k;
    716. 

  716. 				if(wordlen[sizetoken]>10) wordlen[sizetoken] = 10;
    717. 

  717. 				for(k=10; k > wordlen[sizetoken]; k--){
    718. 

  718. 					buf[inbuf++] = ' ';
    719. 

  719. 				}
    720. 

  720. 				memcpy(buf+inbuf, tokens[sizetoken], wordlen[sizetoken]);
    721. 

  721. 				inbuf+=wordlen[sizetoken];
    722. 

  722. 			}
    723. 

  723. 			memcpy(buf+inbuf, " <A HREF=\"", 10);
    724. 

  724. 			inbuf+=10;
    725. 

  725. 			sb = NULL;
    726. 

  726. 			if(islink) sb = (unsigned char *)strstr((char *)tokens[filetoken], " -> ");
    727. 

  727. 			if(sb) sb+=4;
    728. 

  728. 

  729. 			else sb=tokens[filetoken]; 
    730. 

  730. 			if(*sb != '/' && ftpbase)file2url(ftpbase, buf, bufsize, (int *)&inbuf, 1);
    731. 

  731. 			file2url(sb, buf, bufsize, (int *)&inbuf, 0);
    732. 

  732. 

  733. 			if(isdir)buf[inbuf++] = '/';
    734. 

  734. 			memcpy(buf+inbuf, "\">", 2);
    735. 

  735. 			inbuf+=2;
    736. 

  736. 			for(sb=tokens[filetoken]; *sb; sb++){
    737. 

  737. 				if((bufsize - inbuf)<16)break;
    738. 

  738. 				if(*sb == '<'){
    739. 

  739. 					memcpy(buf+inbuf, "&lt;", 4);
    740. 

  740. 					inbuf+=4;
    741. 

  741. 				}
    742. 

  742. 				else if(*sb == '>'){
    743. 

  743. 					memcpy(buf+inbuf, "&gt;", 4);
    744. 

  744. 					inbuf+=4;
    745. 

  745. 				}
    746. 

  746. 				else if(*sb == '\r' || *sb=='\n'){
    747. 

  747. 					continue;
    748. 

  748. 				}
    749. 

  749. 				else if(islink && sb[0] == ' ' && sb[1] == '-' 
    750. 

  750. 				 && sb[2] == '>'){
    751. 

  751. 					memcpy(buf+inbuf, "</A> ", 5);
    752. 

  752. 					inbuf+=5;
    753. 

  753. 				}
    754. 

  754. 				else buf[inbuf++]=*sb;
    755. 

  755. 			}
    756. 

  756. 			if(islink!=2){
    757. 

  757. 				memcpy(buf+inbuf, "</A>", 4);
    758. 

  758. 				inbuf+=4;
    759. 

  759. 			}
    760. 

  760. 			buf[inbuf++] = '\n';
    761. 

  761. 

  762. 			if((bufsize - inbuf) < LINESIZE){
    763. 

  763. 				if (bufsize > 20000){
    764. 

  764. 					if(!headsent++){
    765. 

  765. 						socksend(param->clisock, (unsigned char *)proxy_stringtable[9], (int)strlen(proxy_stringtable[9]), conf.timeouts[STRING_S]);
    766. 

  766. 					}
    767. 

  767. 					if((unsigned)socksend(param->clisock, buf, inbuf, conf.timeouts[STRING_S]) != inbuf){
    768. 

  768. 						RETURN(781);
    769. 

  769. 					}
    770. 

  770. 					inbuf = 0;
    771. 

  771. 				}
    772. 

  772. 				else {
    773. 

  773. 					if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    774. 

  774. 					buf = newbuf;
    775. 

  775. 					bufsize += BUFSIZE;
    776. 

  776. 				}
    777. 

  777. 			}
    778. 

  778. 		}
    779. 

  779. 		memcpy(buf+inbuf, "<hr>", 4);
    780. 

  780. 		inbuf += 4;
    781. 

  781. 		so._closesocket(ftps);
    782. 

  782. 		ftps = INVALID_SOCKET;
    783. 

  783. 		param->remsock = s;
    784. 

  784. 		if(inbuf){
    785. 

  785. 			buf[inbuf] = 0;
    786. 

  786. 			if(gotres < 0 ) res = ftpres(param, buf+inbuf, bufsize-inbuf);
    787. 

  787. 			else res = gotres;
    788. 

  788. 			inbuf = (int)strlen((char *)buf);
    789. 

  789. 			if(!headsent){
    790. 

  790. 				sprintf(ftpbuf, 
    791. 

  791. 					"HTTP/1.0 200 OK\r\n"
    792. 

  792. 					"Content-Type: text/html\r\n"
    793. 

  793. 					"Proxy-Connection: keep-alive\r\n"
    794. 

  794. 					"Content-Length: %d\r\n\r\n",
    795. 

  795. 					inbuf);
    796. 

  796. 				socksend(param->clisock, (unsigned char *)ftpbuf, (int)strlen(ftpbuf), conf.timeouts[STRING_S]);
    797. 

  797. 			}
    798. 

  798. 			socksend(param->clisock, buf, inbuf, conf.timeouts[STRING_S]);
    799. 

  799. 			if(res){RETURN(res);}
    800. 

  800. 			if(!headsent)goto REQUESTEND;
    801. 

  801. 		}
    802. 

  802. 		RETURN(0);
    803. 

  803. 	}
    804. 

  804. 	RETURN(res);
    805. 

  805.  }
    806. 

  806. 

  807.  if(isconnect && param->redirtype != R_HTTP) {
    808. 

  808. 	socksend(param->clisock, (unsigned char *)proxy_stringtable[8], (int)strlen(proxy_stringtable[8]), conf.timeouts[STRING_S]);
    809. 

  809. 	if(param->redirectfunc) return (*param->redirectfunc)(param);
    810. 

  810. 	param->res =  sockmap(param, conf.timeouts[CONNECTION_L]);
    811. 

  811. 	if(param->redirectfunc) return (*param->redirectfunc)(param);
    812. 

  812. 	RETURN(param->res);
    813. 

  813.  }
    814. 

  814. 

  815.  if(!req || param->redirtype != R_HTTP) {
    816. 

  816. 	reqlen = 0;
    817. 

  817.  }
    818. 

  818. 

  819.  else {
    820. 

  820. 	 redirect = 1;
    821. 

  821. 	 if(socksend(param->remsock, req , (res = (int)strlen((char *)req)), conf.timeouts[STRING_L]) != res) {
    822. 

  822. 		RETURN(518);
    823. 

  823. 	 }
    824. 

  824. 	 param->statscli += res;
    825. 

  825. 	 param->nwrites++;
    826. 

  826.  }
    827. 

  827.  inbuf = 0;
    828. 

  828. #ifndef ANONYMOUS
    829. 

  829.  if(anonymous!=1){
    830. 

  830. 		sprintf((char*)buf+strlen((char *)buf), "Via: 1.1 ");
    831. 

  831. 		gethostname((char *)(buf+strlen((char *)buf)), 256);
    832. 

  832. 		sprintf((char*)buf+strlen((char *)buf), ":%d (%s %s)\r\nX-Forwarded-For: ", (int)ntohs(param->srv->intport), conf.stringtable?conf.stringtable[2]:(unsigned char *)"", conf.stringtable?conf.stringtable[3]:(unsigned char *)"");
    833. 

  833. 		if(!anonymous)myinet_ntoa(param->sinc.sin_addr, (char *)buf + strlen((char *)buf));
    834. 

  834. 		else {
    835. 

  835. 			unsigned long tmp;
    836. 

  836. 

  837. 			tmp = param->sinc.sin_addr.s_addr;
    838. 

  838. 			param->sinc.sin_addr.s_addr = ((unsigned long)myrand(param, sizeof(struct clientparam))<<16)^(unsigned long)rand();
    839. 

  839. 			myinet_ntoa(param->sinc.sin_addr, (char *)buf + strlen((char *)buf));
    840. 

  840. 			param->sinc.sin_addr.s_addr = tmp;
    841. 

  841. 		}
    842. 

  842. 		sprintf((char*)buf+strlen((char *)buf), "\r\n");
    843. 

  843.  }
    844. 

  844. #endif
    845. 

  845.  if(keepalive <= 1) sprintf((char*)buf+strlen((char *)buf), "%s: %s\r\n", (param->redirtype == R_HTTP)?"Proxy-Connection":"Connection", keepalive? "keep-alive":"close");
    846. 

  846.  if(param->extusername){
    847. 

  847. 	sprintf((char*)buf + strlen((char *)buf), "%s: basic ", (redirect)?"Proxy-Authorization":"Authorization");
    848. 

  848. 	sprintf((char*)username, "%.32s:%.64s", param->extusername, param->extpassword?param->extpassword:(unsigned char*)"");
    849. 

  849. 	en64(username, buf+strlen((char *)buf), (int)strlen((char *)username));
    850. 

  850. 	sprintf((char*)buf + strlen((char *)buf), "\r\n");
    851. 

  851.  }
    852. 

  852.  sprintf((char*)buf+strlen((char *)buf), "\r\n");
    853. 

  853.  if ((res = socksend(param->remsock, buf+reqlen, (int)strlen((char *)buf+reqlen), conf.timeouts[STRING_S])) != (int)strlen((char *)buf+reqlen)) {
    854. 

  854. 	RETURN(518);
    855. 

  855.  }
    856. 

  856.  param->statscli += res;
    857. 

  857.  param->nwrites++;
    858. 

  858.  if(param->bandlimfunc) {
    859. 

  859. 	sleeptime = param->bandlimfunc(param, 0, (int)strlen((char *)buf));
    860. 

  860.  }
    861. 

  861.  if(contentlength > 0){
    862. 

  862. 	 param->nolongdatfilter = 0;
    863. 

  863. 	 param->waitclient = contentlength;
    864. 

  864. 	 res = sockmap(param, conf.timeouts[CONNECTION_S]);
    865. 

  865. 	 param->waitclient = 0;
    866. 

  866. 	 if(res != 99) {
    867. 

  867. 		RETURN(res);
    868. 

  868. 	}
    869. 

  869.  }
    870. 

  870.  contentlength = 0;
    871. 

  871.  inbuf = 0;
    872. 

  872.  ckeepalive = keepalive;
    873. 

  873.  res = 0; 
    874. 

  874.  authenticate = 0;
    875. 

  875.  param->chunked = 0;
    876. 

  876.  hascontent = 0;
    877. 

  877.  
    878. 

  878.  while( (i = sockgetlinebuf(param, SERVER, buf + inbuf, LINESIZE - 1, '\n', conf.timeouts[(res)?STRING_S:STRING_L])) > 2) {
    879. 

  879. 	if(!res && i>9)param->status = res = atoi((char *)buf + inbuf + 9);
    880. 

  880. 	if(((i >= 25 && !strncasecmp((char *)(buf+inbuf), "proxy-connection:", 17))
    881. 

  881. 	   ||
    882. 

  882. 	    (i> 16 && !strncasecmp((char *)(buf+inbuf), "connection:", 11))
    883. 

  883. 			)){
    884. 

  884. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    885. 

  885. 		if(!sb)continue;
    886. 

  886. 		++sb;
    887. 

  887. 		while(isspace(*sb))sb++;
    888. 

  888. 		if(strncasecmp((char *)sb,"keep-alive", 10))ckeepalive = 0;
    889. 

  889. 		if(!param->srv->transparent)continue; 
    890. 

  890. 	}
    891. 

  891. 	else if(i> 6 && !param->srv->transparent && (!strncasecmp((char *)(buf+inbuf), "proxy-", 6))){
    892. 

  892. 		continue; 
    893. 

  893. 	}
    894. 

  894. 	else if(i> 6 && (!strncasecmp((char *)(buf+inbuf), "www-authenticate", 16))){
    895. 

  895. 		authenticate = 1;
    896. 

  896. 	}
    897. 

  897. 	else if(i > 15 && (!strncasecmp((char *)(buf+inbuf), "content-length", 14))){
    898. 

  898. 		buf[inbuf+i]=0;
    899. 

  899. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    900. 

  900. 		if(!sb)continue;
    901. 

  901. 		++sb;
    902. 

  902. 		while(isspace(*sb))sb++;
    903. 

  903. 		sscanf(sb, "%lu", &contentlength);
    904. 

  904. 		hascontent = 1;
    905. 

  905. 		if(param->unsafefilter && param->ndatfilterssrv > 0) {
    906. 

  906. 			hascontent = 2;
    907. 

  907. 			continue;
    908. 

  908. 		}
    909. 

  909. 		if(param->maxtrafin && (param->maxtrafin < param->statssrv || (unsigned)contentlength > param->maxtrafin - param->statssrv)){
    910. 

  910. 			RETURN(10);
    911. 

  911. 		}
    912. 

  912. 	}
    913. 

  913. 	else if(i>25 && (!strncasecmp((char *)(buf+inbuf), "transfer-encoding", 17))){
    914. 

  914. 		buf[inbuf+i]=0;
    915. 

  915. 		sb = (unsigned char *)strchr((char *)(buf+inbuf), ':');
    916. 

  916. 		if(!sb)continue;
    917. 

  917. 		++sb;
    918. 

  918. 		while(isspace(*sb))sb++;
    919. 

  919. 		if(!strncasecmp(sb, "chunked", 7)){
    920. 

  920. 			param->chunked = 1;
    921. 

  921. 		}
    922. 

  922. 	}
    923. 

  923. 	inbuf += i;
    924. 

  924. 	if((bufsize - inbuf) < LINESIZE){
    925. 

  925. 		if (bufsize > 20000){
    926. 

  926. 			RETURN (516);
    927. 

  927. 		}
    928. 

  928. 		if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    929. 

  929. 		buf = newbuf;
    930. 

  930. 		bufsize += BUFSIZE;
    931. 

  931. 	}
    932. 

  932.  }
    933. 

  933.  if(res < 200 || res > 499) {
    934. 

  934. 	ckeepalive = 0;
    935. 

  935.  }
    936. 

  936.  if((res == 304 || res == 204) && !hascontent){
    937. 

  937. 	hascontent = 1;
    938. 

  938. 	contentlength = 0;
    939. 

  939.  }
    940. 

  940.  if(param->bandlimfunc) {
    941. 

  941. 	int st1;
    942. 

  942. 

  943. 	st1 = (*param->bandlimfunc)(param, inbuf, 0);
    944. 

  944. 	if(st1 > sleeptime) sleeptime = st1;
    945. 

  945. 	if(sleeptime > 0){
    946. 

  946. /*		if(sleeptime > 30) sleeptime = 30; */
    947. 

  947. 		usleep(sleeptime * SLEEPTIME);
    948. 

  948. 	}
    949. 

  949.  }
    950. 

  950.  buf[inbuf] = 0;
    951. 

  951.  if(inbuf < 9) {RETURN (522);}
    952. 

  952. #ifndef WITHMAIN
    953. 

  953.  action = handlehdrfilterssrv(param, &buf, &bufsize, 0, &inbuf);
    954. 

  954.  if(action == HANDLED){
    955. 

  955. 	RETURN(0);
    956. 

  956.  }
    957. 

  957.  if(action != PASS) RETURN(517);
    958. 

  958. 

  959.  param->nolongdatfilter = 0;
    960. 

  960. 

  961.  
    962. 

  962.  if (conf.filtermaxsize && contentlength > (unsigned long)conf.filtermaxsize) {
    963. 

  963. 	param->nolongdatfilter = 1;
    964. 

  964.  }
    965. 

  965.  else if(param->unsafefilter && param->ndatfilterssrv > 0 && contentlength > 0 && param->operation != HTTP_HEAD && res != 204 && res != 304){
    966. 

  966.   unsigned long newlen;
    967. 

  967.   newlen = sockfillbuffsrv(param, (unsigned long) contentlength, CONNECTION_S);
    968. 

  968.   if(newlen == contentlength) {
    969. 

  969. 	action = handledatfltsrv(param,  &param->srvbuf, &param->srvbufsize, 0, &param->srvinbuf);
    970. 

  970. 	param->nolongdatfilter = 1;
    971. 

  971. 	if(action == HANDLED){
    972. 

  972. 		RETURN(0);
    973. 

  973. 	}
    974. 

  974. 	if(action != PASS) RETURN(517);
    975. 

  975. 	contentlength = param->srvinbuf;
    976. 

  976. 	sprintf((char*)buf+strlen((char *)buf), "Content-Length: %lu\r\n", contentlength);
    977. 

  977. 	hascontent = 1;
    978. 

  978.   }
    979. 

  979.  }
    980. 

  980.  if (contentlength > 0 && hascontent != 1) ckeepalive = 0;
    981. 

  981. #else
    982. 

  982. #endif
    983. 

  983.  if(!isconnect || param->operation){
    984. 

  984. 	 if(authenticate && !param->transparent) sprintf((char*)buf+strlen((char *)buf), 
    985. 

  985. 		"Proxy-support: Session-Based-Authentication\r\n"
    986. 

  986. 		"Connection: Proxy-support\r\n"
    987. 

  987. 	 );
    988. 

  988. 	 if(!param->srv->transparent){
    989. 

  989. 		if(ckeepalive <= 1) sprintf((char*)buf+strlen((char *)buf), "Connection: %s\r\n", 
    990. 

  990. 		(hascontent && ckeepalive)?"Keep-Alive":"Close");
    991. 

  991. 		if(!param->transparent)sprintf((char*)buf+strlen((char *)buf), "Proxy-Connection: %s\r\n", 
    992. 

  992. 		(hascontent && ckeepalive)?"Keep-Alive":"Close");
    993. 

  993. 	 }
    994. 

  994. 	 sprintf((char*)buf + strlen((char *)buf), "\r\n");
    995. 

  995. 	 if((socksend(param->clisock, buf, (int)strlen((char *)buf), conf.timeouts[STRING_S])) != (int)strlen((char *)buf)) {
    996. 

  996. 		RETURN(521);
    997. 

  997. 	 }
    998. 

  998.  }
    999. 

  999.  if((param->chunked || contentlength > 0) && param->operation != HTTP_HEAD && res != 204 && res != 304) {
    1000. 

  1000.  	do {
    1001. 

  1001. 		if(param->chunked){
    1002. 

  1002. 			char smallbuf[32];
    1003. 

  1003. 			while ((i = sockgetlinebuf(param, SERVER, smallbuf, 30, '\n', conf.timeouts[STRING_S])) == 2) {
    1004. 

  1004. 				if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    1005. 

  1005. 					RETURN(533);
    1006. 

  1006. 				}
    1007. 

  1007. 				if(param->chunked == 2) break;
    1008. 

  1008. 			}
    1009. 

  1009. 			if(i<3) {
    1010. 

  1010. 				keepalive = 0;
    1011. 

  1011. 				break;
    1012. 

  1012. 			}
    1013. 

  1013. 			if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    1014. 

  1014. 					RETURN(535);
    1015. 

  1015. 			}
    1016. 

  1016. 			if(param->chunked == 2) {
    1017. 

  1017. 				if((i = sockgetlinebuf(param, SERVER, smallbuf, 30, '\n', conf.timeouts[STRING_S])) != 2) RETURN(534);
    1018. 

  1018. 				if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    1019. 

  1019. 					RETURN(533);
    1020. 

  1020. 				}
    1021. 

  1021. 				break;
    1022. 

  1022. 			}
    1023. 

  1023. 			smallbuf[i] = 0;
    1024. 

  1024. 			contentlength = 0;
    1025. 

  1025. 			sscanf(smallbuf, "%lx", &contentlength);
    1026. 

  1026. 			if(contentlength == 0) {
    1027. 

  1027. 				param->chunked = 2;
    1028. 

  1028. 			}
    1029. 

  1029. 		}
    1030. 

  1030. 		if(param->chunked != 2){
    1031. 

  1031. 			param->waitserver = contentlength;
    1032. 

  1032. 		 	if((res = sockmap(param, conf.timeouts[CONNECTION_S])) != 98){
    1033. 

  1033. 				RETURN(res);
    1034. 

  1034. 			}
    1035. 

  1035. 	 		param->waitserver = 0;
    1036. 

  1036. 		}
    1037. 

  1037.         } while(param->chunked);
    1038. 

  1038.  }
    1039. 

  1039.  if(isconnect && res == 200 && param->operation){
    1040. 

  1040. 	RETURN (sockmap(param, conf.timeouts[CONNECTION_S]));
    1041. 

  1041.  }
    1042. 

  1042.  else if(isconnect){
    1043. 

  1043. 	ckeepalive = keepalive = 1;
    1044. 

  1044.  }
    1045. 

  1045.  else if(!hascontent && !param->chunked) {
    1046. 

  1046. 	RETURN(sockmap(param, conf.timeouts[CONNECTION_S]));
    1047. 

  1047.  }
    1048. 

  1048.  contentlength = 0;
    1049. 

  1049. 

  1050. REQUESTEND:
    1051. 

  1051. 

  1052.  if((!ckeepalive || !keepalive) && param->remsock != INVALID_SOCKET){
    1053. 

  1053. 	so._shutdown(param->remsock, SHUT_RDWR);
    1054. 

  1054. 	so._closesocket(param->remsock);
    1055. 

  1055. 	param->remsock = INVALID_SOCKET;
    1056. 

  1056. 	RETURN(0);
    1057. 

  1057.  }
    1058. 

  1058.  if(param->transparent && (!ckeepalive || !keepalive)) {RETURN (0);}
    1059. 

  1059.  logurl(param, buf, (char *)req, ftp);
    1060. 

  1060.  param->status = 0;
    1061. 

  1061. 

  1062. }
    1063. 

  1063. 

  1064. CLEANRET:
    1065. 

  1065. 

  1066.  if(param->res != 555 && param->res && param->clisock != INVALID_SOCKET && (param->res < 90 || param->res >=800 || param->res == 100 ||(param->res > 500 && param->res< 800))) {
    1067. 

  1067. 	if((param->res>=509 && param->res < 517) || param->res > 900) while( (i = sockgetlinebuf(param, CLIENT, buf, BUFSIZE - 1, '\n', conf.timeouts[STRING_S])) > 2);
    1068. 

  1068. 	if(param->res == 10) {
    1069. 

  1069. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[2], (int)strlen(proxy_stringtable[2]), conf.timeouts[STRING_S]);
    1070. 

  1070. 	}
    1071. 

  1071. 	else if(param->res == 100 || (param->res >10 && param->res < 20) || (param->res >701 && param->res <= 705)) {
    1072. 

  1072. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[1], (int)strlen(proxy_stringtable[1]), conf.timeouts[STRING_S]);
    1073. 

  1073. 	}
    1074. 

  1074. 	else if(param->res >=20 && param->res < 30) {
    1075. 

  1075. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[6], (int)strlen(proxy_stringtable[6]), conf.timeouts[STRING_S]);
    1076. 

  1076. 	}
    1077. 

  1077. 	else if(param->res >=30 && param->res < 80) {
    1078. 

  1078. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[5], (int)strlen(proxy_stringtable[5]), conf.timeouts[STRING_S]);
    1079. 

  1079. 	}
    1080. 

  1080. 	else if(param->res == 1 || (param->srv->nouser && param->res < 10)) {
    1081. 

  1081. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[11], (int)strlen(proxy_stringtable[11]), conf.timeouts[STRING_S]);
    1082. 

  1082. 	}
    1083. 

  1083. 	else if(param->res < 10) {
    1084. 

  1084. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[param->srv->usentlm?12:7], (int)strlen(proxy_stringtable[param->srv->usentlm?12:7]), conf.timeouts[STRING_S]);
    1085. 

  1085. 	}
    1086. 

  1086. 	else if(param->res == 999) {
    1087. 

  1087. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[4], (int)strlen(proxy_stringtable[4]), conf.timeouts[STRING_S]);
    1088. 

  1088. 	}
    1089. 

  1089. 	else if(param->res == 519) {
    1090. 

  1090. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[3], (int)strlen(proxy_stringtable[3]), conf.timeouts[STRING_S]);
    1091. 

  1091. 	}
    1092. 

  1092. 	else if(param->res == 517) {
    1093. 

  1093. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[15], (int)strlen(proxy_stringtable[15]), conf.timeouts[STRING_S]);
    1094. 

  1094. 	}
    1095. 

  1095. 	else if(param->res == 780) {
    1096. 

  1096. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[10], (int)strlen(proxy_stringtable[10]), conf.timeouts[STRING_S]);
    1097. 

  1097. 	}
    1098. 

  1098. 	else if(param->res >= 511 && param->res<=516){
    1099. 

  1099. 		socksend(param->clisock, (unsigned char *)proxy_stringtable[0], (int)strlen(proxy_stringtable[0]), conf.timeouts[STRING_S]);
    1100. 

  1100. 	}
    1101. 

  1101.  } 
    1102. 

  1102.  logurl(param, buf, (char *)req, ftp);
    1103. 

  1103.  if(req)myfree(req);
    1104. 

  1104.  if(buf)myfree(buf);
    1105. 

  1105.  if(ftpbase)myfree(ftpbase);
    1106. 

  1106.  freeparam(param);
    1107. 

  1107.  return (NULL);
    1108. 

  1108. }
    1109. 

  1109. 

  1110. #ifdef WITHMAIN
    1111. 

  1111. struct proxydef childdef = {
    1112. 

  1112. 	proxychild,
    1113. 

  1113. 	3128,
    1114. 

  1114. 	0,
    1115. 

  1115. 	S_PROXY,
    1116. 

  1116. 	"-a - anonymous proxy\r\n"
    1117. 

  1117. 	"-a1 - anonymous proxy with random client IP spoofing\r\n"
    1118. 

  1118. };
    1119. 

  1119. #include "proxymain.c"
    1120. 

  1120. #endif
    1121.