Strona główna Odkrywaj Pomoc
Zaloguj się
cturan
/
3proxy
1
0
Forkuj 0
Pliki Problemy 0 Oczekujące zmiany 0 Wiki
Drzewo: cfb96b0a77
Gałęzie Tagi
3proxy
/
src
/
proxy.c

proxy.c 33 KB
Historia Czysty

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091 
  1. /*
    2. 

  2.    3APA3A simpliest proxy server
    3. 

  3.    (c) 2002-2016 by Vladimir Dubrovin <3proxy@3proxy.ru>
    4. 

  4. 

  5.    please read License Agreement
    6. 

  6. 

  7. */
    8. 

  8. 

  9. 

  10. #include "proxy.h"
    11. 

  11. 

  12. #define RETURN(xxx) { param->res = xxx; goto CLEANRET; }
    13. 

  13. 

  14. char * proxy_stringtable[] = {
    15. 

  15. /* 0 */	"HTTP/1.0 400 Bad Request\r\n"
    16. 

  16. 	"Connection: close\r\n"
    17. 

  17. 	"Content-type: text/html; charset=utf-8\r\n"
    18. 

  18. 	"\r\n"
    19. 

  19. 	"<html><head><title>400 Bad Request</title></head>\r\n"
    20. 

  20. 	"<body><h2>400 Bad Request</h2></body></html>\r\n",
    21. 

  21. 

  22. /* 1 */	"HTTP/1.0 502 Bad Gateway\r\n"
    23. 

  23. 	"Connection: close\r\n"
    24. 

  24. 	"Content-type: text/html; charset=utf-8\r\n"
    25. 

  25. 	"\r\n"
    26. 

  26. 	"<html><head><title>502 Bad Gateway</title></head>\r\n"
    27. 

  27. 	"<body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>\r\n",
    28. 

  28. 

  29. /* 2 */	"HTTP/1.0 503 Service Unavailable\r\n"
    30. 

  30. 	"Connection: close\r\n"
    31. 

  31. 	"Content-type: text/html; charset=utf-8\r\n"
    32. 

  32. 	"\r\n"
    33. 

  33. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    34. 

  34. 	"<body><h2>503 Service Unavailable</h2><h3>You have exceeded your traffic limit</h3></body></html>\r\n",
    35. 

  35. 

  36. /* 3 */	"HTTP/1.0 503 Service Unavailable\r\n"
    37. 

  37. 	"Connection: close\r\n"
    38. 

  38. 	"Content-type: text/html; charset=utf-8\r\n"
    39. 

  39. 	"\r\n"
    40. 

  40. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    41. 

  41. 	"<body><h2>503 Service Unavailable</h2><h3>Recursion detected</h3></body></html>\r\n",
    42. 

  42. 

  43. /* 4 */	"HTTP/1.0 501 Not Implemented\r\n"
    44. 

  44. 	"Connection: close\r\n"
    45. 

  45. 	"Content-type: text/html; charset=utf-8\r\n"
    46. 

  46. 	"\r\n"
    47. 

  47. 	"<html><head><title>501 Not Implemented</title></head>\r\n"
    48. 

  48. 	"<body><h2>501 Not Implemented</h2><h3>Required action is not supported by proxy server</h3></body></html>\r\n",
    49. 

  49. 

  50. /* 5 */	"HTTP/1.0 502 Bad Gateway\r\n"
    51. 

  51. 	"Connection: close\r\n"
    52. 

  52. 	"Content-type: text/html; charset=utf-8\r\n"
    53. 

  53. 	"\r\n"
    54. 

  54. 	"<html><head><title>502 Bad Gateway</title></head>\r\n"
    55. 

  55. 	"<body><h2>502 Bad Gateway</h2><h3>Failed to connect parent proxy</h3></body></html>\r\n",
    56. 

  56. 

  57. /* 6 */	"HTTP/1.0 500 Internal Error\r\n"
    58. 

  58. 	"Connection: close\r\n"
    59. 

  59. 	"Content-type: text/html; charset=utf-8\r\n"
    60. 

  60. 	"\r\n"
    61. 

  61. 	"<html><head><title>500 Internal Error</title></head>\r\n"
    62. 

  62. 	"<body><h2>500 Internal Error</h2><h3>Internal proxy error during processing your request</h3></body></html>\r\n",
    63. 

  63. 

  64. /* 7 */	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    65. 

  65. 	"Proxy-Authenticate: Basic realm=\"proxy\"\r\n"
    66. 

  66. 	"Connection: close\r\n"
    67. 

  67. 	"Content-type: text/html; charset=utf-8\r\n"
    68. 

  68. 	"\r\n"
    69. 

  69. 	"<html><head><title>407 Proxy Authentication Required</title></head>\r\n"
    70. 

  70. 	"<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
    71. 

  71. 

  72. /* 8 */	"HTTP/1.0 200 Connection established\r\n\r\n",
    73. 

  73. 

  74. /* 9 */	"HTTP/1.0 200 Connection established\r\n"
    75. 

  75. 	"Content-Type: text/html\r\n\r\n",
    76. 

  76. 

  77. /* 10*/	"HTTP/1.0 404 Not Found\r\n"
    78. 

  78. 	"Connection: close\r\n"
    79. 

  79. 	"Content-type: text/html; charset=utf-8\r\n"
    80. 

  80. 	"\r\n"
    81. 

  81. 	"<html><head><title>404 Not Found</title></head>\r\n"
    82. 

  82. 	"<body><h2>404 Not Found</h2><h3>File not found</body></html>\r\n",
    83. 

  83. 	
    84. 

  84. /* 11*/	"HTTP/1.0 403 Forbidden\r\n"
    85. 

  85. 	"Connection: close\r\n"
    86. 

  86. 	"Content-type: text/html; charset=utf-8\r\n"
    87. 

  87. 	"\r\n"
    88. 

  88. 	"<html><head><title>403 Access Denied</title></head>\r\n"
    89. 

  89. 	"<body><h2>403 Access Denied</h2><h3>Access control list denies you to access this resource</body></html>\r\n",
    90. 

  90. 

  91. /* 12*/	"HTTP/1.0 407 Proxy Authentication Required\r\n"
    92. 

  92. 	"Proxy-Authenticate: Basic realm=\"proxy\"\r\n"
    93. 

  93. 	"Connection: close\r\n"
    94. 

  94. 	"Content-type: text/html; charset=utf-8\r\n"
    95. 

  95. 	"\r\n"
    96. 

  96. 	"<html><head><title>407 Proxy Authentication Required</title></head>\r\n"
    97. 

  97. 	"<body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>\r\n",
    98. 

  98. 

  99. /* 13*/	"",
    100. 

  100. 

  101. /* 14*/	"HTTP/1.0 403 Forbidden\r\n"
    102. 

  102. 	"Connection: close\r\n"
    103. 

  103. 	"Content-type: text/html; charset=utf-8\r\n"
    104. 

  104. 	"\r\n"
    105. 

  105. 	"<pre>",
    106. 

  106. 

  107. /* 15*/	"HTTP/1.0 503 Service Unavailable\r\n"
    108. 

  108. 	"Connection: close\r\n"
    109. 

  109. 	"Content-type: text/html; charset=utf-8\r\n"
    110. 

  110. 	"\r\n"
    111. 

  111. 	"<html><head><title>503 Service Unavailable</title></head>\r\n"
    112. 

  112. 	"<body><h2>503 Service Unavailable</h2><h3>Your request violates configured policy</h3></body></html>\r\n",
    113. 

  113. 

  114. /* 16*/	"HTTP/1.0 401 Authentication Required\r\n"
    115. 

  115. 	"WWW-Authenticate: Basic realm=\"FTP Server\"\r\n"
    116. 

  116. 	"Connection: close\r\n"
    117. 

  117. 	"Content-type: text/html; charset=utf-8\r\n"
    118. 

  118. 	"\r\n"
    119. 

  119. 	"<html><head><title>401 FTP Server requires authentication</title></head>\r\n"
    120. 

  120. 	"<body><h2>401 FTP Server requires authentication</h2><h3>This FTP server rejects anonymous access</h3></body></html>\r\n",
    121. 

  121. 

  122. /* 17*/ "HTTP/1.1 100 Continue\r\n"
    123. 

  123. 	"\r\n",
    124. 

  124. 

  125. 	NULL
    126. 

  126. };
    127. 

  127. 

  128. #define LINESIZE 4096
    129. 

  129. #define BUFSIZE (LINESIZE*2)
    130. 

  130. #define FTPBUFSIZE 1536
    131. 

  131. 

  132. static void logurl(struct clientparam * param, char * buf, char * req, int ftp){
    133. 

  133.  char *sb;
    134. 

  134.  char *se;
    135. 

  135.  int len;
    136. 

  136. 

  137.  if(!buf) req = NULL;
    138. 

  138.  if(req) {
    139. 

  139. 	len = (int)strlen(req);
    140. 

  140. 	if(len > (LINESIZE - 1)) len = LINESIZE - 1;
    141. 

  141. 	memcpy(buf, req, len + 1);
    142. 

  142. 	buf[LINESIZE - 1] = 0;
    143. 

  143. 	sb = strchr(buf, '\r');
    144. 

  144. 	if(sb)*sb = 0;
    145. 

  145. 	if(ftp && (se = strchr(buf + 10, ':')) && (sb = strchr(se, '@')) ) {
    146. 

  146. 		strcpy(se, sb);
    147. 

  147. 	}
    148. 

  148.  }
    149. 

  149.  if(param->res != 555 && param->res != 508)dolog(param, (char *)(req?buf:NULL));
    150. 

  150. }
    151. 

  151. 

  152. void decodeurl(char *s, int allowcr){
    153. 

  153.  char *d = s;
    154. 

  154.  unsigned u;
    155. 

  155. 

  156.  while(*s){
    157. 

  157. 	if(*s == '%' && ishex(s[1]) && ishex(s[2])){
    158. 

  158. 		sscanf((char *)s+1, "%2x", &u);
    159. 

  159. 		if(allowcr && u != '\r')*d++ = u;
    160. 

  160. 		else if (u != '\r' && u != '\n') {
    161. 

  161. 			if (u == '\"' || u == '\\') *d++ = '\\';
    162. 

  162. 			else if (u == 255) *d++ = (char)(unsigned char)255;
    163. 

  163. 			*d++ = u;
    164. 

  164. 		}
    165. 

  165. 		s+=3;
    166. 

  166. 	}
    167. 

  167. 	else if(!allowcr && *s == '?') {
    168. 

  168. 		break;
    169. 

  169. 	}
    170. 

  170. 	else if(*s == '+') {
    171. 

  171. 		*d++ = ' ';
    172. 

  172. 		s++;
    173. 

  173. 	}
    174. 

  174. 	else {
    175. 

  175. 		*d++ = *s++;
    176. 

  176. 	}
    177. 

  177.  }
    178. 

  178.  *d = 0;
    179. 

  179. }
    180. 

  180. 

  181. void file2url(char *sb, char *buf, unsigned bufsize, int * inbuf, int skip255){
    182. 

  182.  for(; *sb; sb++){
    183. 

  183. 	if((bufsize - *inbuf)<16)break;
    184. 

  184. 	if(*sb=='\r'||*sb=='\n')continue;
    185. 

  185. 	if(isallowed(*sb))buf[(*inbuf)++]=*sb;
    186. 

  186. 	else if(*sb == '\"'){
    187. 

  187. 		memcpy(buf+*inbuf, "%5C%22", 6);
    188. 

  188. 		(*inbuf)+=6;
    189. 

  189. 	}
    190. 

  190. 	else if(skip255 && *sb == (char)(unsigned char)255 && *(sb+1) == (char)(unsigned char)255) {
    191. 

  191. 		memcpy(buf+*inbuf, "%ff", 3);
    192. 

  192. 		(*inbuf)+=3;
    193. 

  193. 		sb++;
    194. 

  194.         }
    195. 

  195. 	else {
    196. 

  196. 		sprintf((char *)buf+*inbuf, "%%%.2x", (unsigned)*sb);
    197. 

  197. 		(*inbuf)+=3;
    198. 

  198. 	}
    199. 

  199.  }
    200. 

  200. }
    201. 

  201. 

  202. 

  203. void * proxychild(struct clientparam* param) {
    204. 

  204.  int res=0, i=0;
    205. 

  205.  char* buf = NULL, *newbuf;
    206. 

  206.  int inbuf;
    207. 

  207.  int bufsize;
    208. 

  208.  unsigned reqlen = 0;
    209. 

  209.  char	*sb=NULL, *sg=NULL, *se=NULL, *sp=NULL,
    210. 

  210. 		*req=NULL, *su=NULL, *ss = NULL;
    211. 

  211.  char *ftpbase=NULL;
    212. 

  212.  char username[1024];
    213. 

  213.  int keepalive = 0;
    214. 

  214.  uint64_t contentlength64 = 0;
    215. 

  215.  int hascontent =0;
    216. 

  216.  int isconnect = 0;
    217. 

  217.  int redirect = 0;
    218. 

  218.  int prefix = 0, ckeepalive=0;
    219. 

  219.  int ftp = 0;
    220. 

  220.  int anonymous;
    221. 

  221.  int sleeptime = 0;
    222. 

  222.  int reqsize, reqbufsize;
    223. 

  223.  int authenticate;
    224. 

  224.  struct pollfd fds[2];
    225. 

  225.  SOCKET ftps;
    226. 

  226.  char ftpbuf[FTPBUFSIZE];
    227. 

  227.  int inftpbuf = 0;
    228. 

  228. #ifndef WITHMAIN
    229. 

  229.  FILTER_ACTION action;
    230. 

  230. #endif
    231. 

  231. 

  232. 

  233. 

  234.  
    235. 

  235.  if(!(buf = myalloc(BUFSIZE))) {RETURN(21);}
    236. 

  236.  bufsize = BUFSIZE;
    237. 

  237.  anonymous = param->srv->anonymous;
    238. 

  238. for(;;){
    239. 

  239.  memset(buf, 0, bufsize);
    240. 

  240.  inbuf = 0;
    241. 

  241. 

  242. 

  243.  if(keepalive && (param->cliinbuf == param->clioffset) && (param->remsock != INVALID_SOCKET)){
    244. 

  244. 	memset(fds, 0, sizeof(fds));
    245. 

  245. 	fds[0].fd = param->clisock;
    246. 

  246. 	fds[0].events = POLLIN;
    247. 

  247. 	fds[1].fd = param->remsock;
    248. 

  248. 	fds[1].events = POLLIN;
    249. 

  249. 	res = so._poll(fds, 2, conf.timeouts[STRING_S]*1000);
    250. 

  250. 	if(res<=0) {
    251. 

  251. 		RETURN(555);
    252. 

  252. 	}
    253. 

  253. 	if((fds[1].revents & (POLLIN|POLLHUP|POLLERR|POLLNVAL))) {
    254. 

  254. 		if(param->transparent || (!param->redirected && param->redirtype == R_HTTP)) RETURN(555);
    255. 

  255. 		ckeepalive = 0;
    256. 

  256. 		so._shutdown(param->remsock, SHUT_RDWR);
    257. 

  257. 		so._closesocket(param->remsock);
    258. 

  258. 		param->remsock = INVALID_SOCKET;
    259. 

  259. 		param->redirected = 0;
    260. 

  260. 		param->redirtype = 0;
    261. 

  261. 		memset(&param->sinsl, 0, sizeof(param->sinsl));
    262. 

  262. 		memset(&param->sinsr, 0, sizeof(param->sinsr));
    263. 

  263. 		memset(&param->req, 0, sizeof(param->req));
    264. 

  264. 	}
    265. 

  265.  }
    266. 

  266. 

  267.  i = sockgetlinebuf(param, CLIENT, buf, LINESIZE - 1, '\n', conf.timeouts[STRING_L]);
    268. 

  268.  if(i<=0) {
    269. 

  269. 	RETURN((keepalive)?555:(i)?507:508);
    270. 

  270.  }
    271. 

  271.  if (i==2 && buf[0]=='\r' && buf[1]=='\n') continue;
    272. 

  272.  buf[i] = 0;
    273. 

  273.  
    274. 

  274.  if(req) {
    275. 

  275. 	if(!param->transparent && !param->srv->transparent && (i<=prefix || strncasecmp((char *)buf, (char *)req, prefix))){
    276. 

  276. 		ckeepalive = 0;
    277. 

  277. 		if(param->remsock != INVALID_SOCKET){
    278. 

  278. 			so._shutdown(param->remsock, SHUT_RDWR);
    279. 

  279. 			so._closesocket(param->remsock);
    280. 

  280. 		}
    281. 

  281. 		param->remsock = INVALID_SOCKET;
    282. 

  282. 		param->redirected = 0;
    283. 

  283. 		param->redirtype = 0;
    284. 

  284. 		memset(&param->sinsl, 0, sizeof(param->sinsl));
    285. 

  285. 		memset(&param->sinsr, 0, sizeof(param->sinsr));
    286. 

  286. 		memset(&param->req, 0, sizeof(param->req));
    287. 

  287. 	}
    288. 

  288. 	myfree(req);
    289. 

  289.  }
    290. 

  290.  req = (char *)mystrdup((char *)buf);
    291. 

  291.  if(!req){RETURN(510);}
    292. 

  292.  if(i<10) {
    293. 

  293. 	RETURN(511);
    294. 

  294.  }
    295. 

  295.  if(buf[i-3] == '1') keepalive = 2; 
    296. 

  296.  param->transparent = 0;
    297. 

  297.  if((isconnect = !strncasecmp((char *)buf, "CONNECT", 7))) keepalive = 2;
    298. 

  298. 

  299.  if ((sb=(char *)(char *)strchr((char *)buf, ' ')) == NULL) {RETURN(512);}
    300. 

  300.  ss = ++sb;
    301. 

  301.  if(!isconnect) {
    302. 

  302. 	if (!strncasecmp((char *)sb, "http://", 7)) {
    303. 

  303. 		sb += 7;
    304. 

  304. 	}
    305. 

  305. 	else if (!strncasecmp((char *)sb, "ftp://", 6)) {
    306. 

  306. 		ftp = 1;
    307. 

  307. 		sb += 6;
    308. 

  308. 	}
    309. 

  309. 	else if(*sb == '/') {
    310. 

  310. 		param->transparent = 1;
    311. 

  311. 	}
    312. 

  312. 	else {
    313. 

  313. 		RETURN (513);
    314. 

  314. 	}
    315. 

  315.  }
    316. 

  316.  else {
    317. 

  317. 	 if ((se=(char *)(char *)strchr((char *)sb, ' ')) == NULL || sb==se) {RETURN (514);}
    318. 

  318. 	 *se = 0;
    319. 

  319.  }
    320. 

  320.  if(!param->transparent || isconnect) {
    321. 

  321. 	if(!isconnect) {
    322. 

  322. 		if ((se=(char *)(char *)strchr((char *)sb, '/')) == NULL 
    323. 

  323. 			|| sb==se
    324. 

  324. 			|| !(sg=(char *)strchr((char *)sb, ' '))) {RETURN (515);}
    325. 

  325. 		if(se > sg) se=sg;
    326. 

  326.  		*se = 0;
    327. 

  327. 	}
    328. 

  328. 	prefix = (int)(se - buf);
    329. 

  329. 	su = (char*)strrchr((char *)sb, '@');
    330. 

  330. 	if(su) {
    331. 

  331. 		su = (char *)mystrdup((char *)sb);
    332. 

  332. 		decodeurl(su, 0);
    333. 

  333. 		if(parseconnusername((char *)su, (struct clientparam *)param, 1, (unsigned short)((ftp)?21:80))) RETURN (100);
    334. 

  334. 		myfree(su);
    335. 

  335. 	}
    336. 

  336. 	else if(parsehostname((char *)sb, (struct clientparam *)param, (unsigned short)((ftp)? 21:80))) RETURN(100);
    337. 

  337. 	if(!isconnect){
    338. 

  338. 		if(se==sg)*se-- = ' ';
    339. 

  339. 		*se = '/';
    340. 

  340. 		memmove(ss, se, i - (se - sb) + 1);
    341. 

  341. 	}
    342. 

  342.  }
    343. 

  343.  reqlen = i = (int)strlen((char *)buf);
    344. 

  344.  if(!strncasecmp((char *)buf, "CONNECT", 7))param->operation = HTTP_CONNECT;
    345. 

  345.  else if(!strncasecmp((char *)buf, "GET", 3))param->operation = (ftp)?FTP_GET:HTTP_GET;
    346. 

  346.  else if(!strncasecmp((char *)buf, "PUT", 3))param->operation = (ftp)?FTP_PUT:HTTP_PUT;
    347. 

  347.  else if(!strncasecmp((char *)buf, "POST", 4)||!strncasecmp((char *)buf, "BITS_POST", 9))param->operation = HTTP_POST;
    348. 

  348.  else if(!strncasecmp((char *)buf, "HEAD", 4))param->operation = HTTP_HEAD;
    349. 

  349.  else param->operation = HTTP_OTHER;
    350. 

  350.  do {
    351. 

  351. 	buf[inbuf+i]=0;
    352. 

  352. /*printf("Got: %s\n", buf+inbuf);*/
    353. 

  353. #ifndef WITHMAIN
    354. 

  354. 	if(i > 25 && !param->srv->transparent && (!strncasecmp((char *)(buf+inbuf), "proxy-authorization", 19))){
    355. 

  355. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    356. 

  356. 		if(!sb)continue;
    357. 

  357. 		++sb;
    358. 

  358. 		while(isspace(*sb))sb++;
    359. 

  359. 		if(!*sb) continue;
    360. 

  360. 		if(!strncasecmp((char *)sb, "basic", 5)){
    361. 

  361. 			sb+=5;
    362. 

  362. 			while(isspace(*sb))sb++;
    363. 

  363. 			i = de64(sb, username, 255);
    364. 

  364. 			if(i<=0)continue;
    365. 

  365. 			username[i] = 0;
    366. 

  366. 			sb = (char *)strchr((char *)username, ':');
    367. 

  367. 			if(sb){
    368. 

  368. 				*sb = 0;
    369. 

  369. 				if(param->password)myfree(param->password);
    370. 

  370. 				param->password = (char *)mystrdup((char *)sb+1);
    371. 

  371. 				param->pwtype = 0;
    372. 

  372. 			}
    373. 

  373. 			if(param->username)myfree(param->username);
    374. 

  374. 			param->username = (char *)mystrdup((char *)username);
    375. 

  375. 			continue;
    376. 

  376. 		}
    377. 

  377. 	}
    378. 

  378. #endif
    379. 

  379. 	if(!isconnect && (
    380. 

  380. 			(i> 25 && !strncasecmp((char *)(buf+inbuf), "proxy-connection:", 17))
    381. 

  381. 			||
    382. 

  382. 			(i> 16 && (!strncasecmp((char *)(buf+inbuf), "connection:", 11)))
    383. 

  383. 			)){
    384. 

  384. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    385. 

  385. 		if(!sb)continue;
    386. 

  386. 		++sb;
    387. 

  387. 		while(isspace(*sb))sb++;
    388. 

  388. 		if(strncasecmp((char *)sb,"upgrade", 7)){
    389. 

  389. 			if(!strncasecmp((char *)sb,"keep-alive", 10))keepalive = 1;
    390. 

  390. 			else keepalive = 0;
    391. 

  391. 			continue; 
    392. 

  392. 		}
    393. 

  393. 	}
    394. 

  394. 	if( i > 11 && !strncasecmp((char *)(buf+inbuf),  "Expect: 100", 11)){
    395. 

  395. 		keepalive = 1;
    396. 

  396. 		socksend(param->clisock, (char *)proxy_stringtable[17], (int)strlen(proxy_stringtable[17]), conf.timeouts[STRING_S]);
    397. 

  397. 		continue;
    398. 

  398. 	}
    399. 

  399. 	if(param->transparent && i > 6 && !strncasecmp((char *)buf + inbuf, "Host:", 5)){
    400. 

  400. 		char c;
    401. 

  401. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    402. 

  402. 		if(!sb)continue;
    403. 

  403. 		++sb;
    404. 

  404. 		while(isspace(*sb))sb++;
    405. 

  405. 		(se = (char *)strchr((char *)sb, '\r')) || (se = (char *)strchr((char *)sb, '\n'));
    406. 

  406. 		if(se) {
    407. 

  407. 			c = *se;
    408. 

  408. 			*se = 0;
    409. 

  409. 		}
    410. 

  410. 		if(!param->hostname){
    411. 

  411. 			if(parsehostname((char *)sb, param, 80)) RETURN(100);
    412. 

  412. 		}
    413. 

  413. 		newbuf = myalloc(strlen((char *)req) + strlen((char *)(buf+inbuf)) + 8);
    414. 

  414. 		if(newbuf){
    415. 

  415. 			sp = (char *)strchr((char *)req+1, '/');
    416. 

  416. 			memcpy(newbuf, req, (sp - req));
    417. 

  417. 			sprintf((char*)newbuf + (sp - req), "http://%s%s",sb,sp);
    418. 

  418. 			myfree(req);
    419. 

  419. 			req = newbuf;
    420. 

  420. 		}
    421. 

  421. 		if(se)*se = c;
    422. 

  422. 	}
    423. 

  423. 	if(ftp && i > 13 && (!strncasecmp((char *)(buf+inbuf), "authorization", 13))){
    424. 

  424. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    425. 

  425. 		if(!sb)continue;
    426. 

  426. 		++sb;
    427. 

  427. 		while(isspace(*sb))sb++;
    428. 

  428. 		if(!*sb) continue;
    429. 

  429. 		if(!strncasecmp((char *)sb, "basic", 5)){
    430. 

  430. 			sb+=5;
    431. 

  431. 			while(isspace(*sb))sb++;
    432. 

  432. 			i = de64(sb, username, 255);
    433. 

  433. 			if(i<=0)continue;
    434. 

  434. 			username[i] = 0;
    435. 

  435. 			sb = (char *)strchr((char *)username, ':');
    436. 

  436. 			if(sb){
    437. 

  437. 				*sb = 0;
    438. 

  438. 				if(param->extpassword)myfree(param->extpassword);
    439. 

  439. 				param->extpassword = (char *)mystrdup((char *)sb+1);
    440. 

  440. 			}
    441. 

  441. 			if(param->extusername)myfree(param->extusername);
    442. 

  442. 			param->extusername = (char *)mystrdup((char *)username);
    443. 

  443. 			continue;
    444. 

  444. 		}
    445. 

  445. 	}
    446. 

  446. 	if(i> 15 && (!strncasecmp((char *)(buf+inbuf), "content-length", 14))){
    447. 

  447. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    448. 

  448. 		if(!sb)continue;
    449. 

  449. 		++sb;
    450. 

  450. 		while(isspace(*sb))sb++;
    451. 

  451. 		sscanf((char *)sb, "%"PRIu64,&contentlength64);
    452. 

  452. 		if(param->maxtrafout64 && (param->maxtrafout64 < param->statscli64 || contentlength64 > param->maxtrafout64 - param->statscli64)){
    453. 

  453. 			RETURN(10);
    454. 

  454. 		}
    455. 

  455. 		if(param->ndatfilterscli > 0 && contentlength64 > 0) continue;
    456. 

  456. 	}
    457. 

  457. 	inbuf += i;
    458. 

  458. 	if((bufsize - inbuf) < LINESIZE){
    459. 

  459. 		if (bufsize > (LINESIZE * 16)){
    460. 

  460. 			RETURN (516);
    461. 

  461. 		}
    462. 

  462. 		if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    463. 

  463. 		buf = newbuf;
    464. 

  464. 		bufsize += BUFSIZE;
    465. 

  465. 	}
    466. 

  466.  } while( (i = sockgetlinebuf(param, CLIENT, buf + inbuf, LINESIZE - 2, '\n', conf.timeouts[STRING_S])) > 2);
    467. 

  467. 

  468. 

  469.  buf[inbuf] = 0;
    470. 

  470. 

  471.  reqsize = (int)strlen((char *)req);
    472. 

  472.  reqbufsize = reqsize + 1;
    473. 

  473. 

  474. #ifndef WITHMAIN
    475. 

  475. 

  476.  action = handlereqfilters(param, &req, &reqbufsize, 0, &reqsize);
    477. 

  477.  if(action == HANDLED){
    478. 

  478. 	RETURN(0);
    479. 

  479.  }
    480. 

  480.  if(action != PASS) RETURN(517);
    481. 

  481.  action = handlehdrfilterscli(param, &buf, &bufsize, 0, &inbuf);
    482. 

  482.  if(action == HANDLED){
    483. 

  483. 	RETURN(0);
    484. 

  484.  }
    485. 

  485.  if(action != PASS) RETURN(517);
    486. 

  486.  if(param->ndatfilterscli > 0 && contentlength64 > 0){
    487. 

  487.   uint64_t newlen64;
    488. 

  488.   newlen64 = sockfillbuffcli(param, (unsigned long)contentlength64, CONNECTION_S);
    489. 

  489.   if(newlen64 == contentlength64) {
    490. 

  490. 	action = handledatfltcli(param,  &param->clibuf, (int *)&param->clibufsize, 0, (int *)&param->cliinbuf);
    491. 

  491. 	if(action == HANDLED){
    492. 

  492. 		RETURN(0);
    493. 

  493. 	}
    494. 

  494. 	if(action != PASS) RETURN(517);
    495. 

  495. 	contentlength64 = param->cliinbuf;
    496. 

  496. 	param->ndatfilterscli = 0;
    497. 

  497.   }
    498. 

  498.   sprintf((char*)buf+strlen((char *)buf), "Content-Length: %"PRIu64"\r\n", contentlength64);
    499. 

  499.  }
    500. 

  500. 

  501. #endif
    502. 

  502. 

  503.  if(param->srv->needuser > 1 && !param->username) {RETURN(4);}
    504. 

  504.  if((res = (*param->srv->authfunc)(param))) {RETURN(res);}
    505. 

  505. 

  506.  if(ftp && param->redirtype != R_HTTP){
    507. 

  507. 	SOCKET s;
    508. 

  508. 	int mode = 0;
    509. 

  509. 	int i=0;
    510. 

  510. 

  511. 	inftpbuf = 0;
    512. 

  512. 	if(!ckeepalive){
    513. 

  513. 		inftpbuf = FTPBUFSIZE - 20;
    514. 

  514. 		res = ftplogin(param, ftpbuf, &inftpbuf);
    515. 

  515. 		if(res){
    516. 

  516. 			RETURN(res);
    517. 

  517. 		}
    518. 

  518. 	}
    519. 

  519. 	ckeepalive = 1;
    520. 

  520. 	if(ftpbase) myfree(ftpbase);
    521. 

  521. 	ftpbase = NULL;
    522. 

  522. 	if(!(sp = (char *)strchr((char *)ss, ' '))){RETURN(799);}
    523. 

  523. 	*sp = 0;
    524. 

  524. 

  525. 	decodeurl(ss, 0);
    526. 

  526. 	i = (int)strlen((char *)ss);
    527. 

  527. 	if(!(ftpbase = myalloc(i+2))){RETURN(21);}
    528. 

  528. 	memcpy(ftpbase, ss, i);
    529. 

  529. 	if(ftpbase[i-1] != '/') ftpbase[i++] = '/';
    530. 

  530. 	ftpbase[i] = 0;
    531. 

  531. 	memcpy(buf, "<pre><hr>\n", 10);
    532. 

  532. 	inbuf = 10;
    533. 

  533. 	if(inftpbuf) {
    534. 

  534. 		memcpy(buf+inbuf, ftpbuf, inftpbuf);
    535. 

  535. 		inbuf += inftpbuf;
    536. 

  536. 		memcpy(buf+inbuf, "<hr>", 4);
    537. 

  537. 		inbuf += 4;
    538. 

  538. 	}
    539. 

  539. 	if(ftpbase[1] != 0){
    540. 

  540. 		memcpy(buf+inbuf, "[<A HREF=\"..\">..</A>]\n", 22);
    541. 

  541. 		inbuf += 22;
    542. 

  542. 	}
    543. 

  543. 	inftpbuf = FTPBUFSIZE - (20 + inftpbuf);
    544. 

  544. 	res = ftpcd(param, ftpbase, ftpbuf, &inftpbuf);
    545. 

  545. 	if(res){
    546. 

  546. 		res = ftptype(param, (char *)"I");
    547. 

  547. 		if(res)RETURN(res);
    548. 

  548. 		ftpbase[--i] = 0;
    549. 

  549. 		ftps = ftpcommand(param, param->operation == FTP_PUT? (char *)"PUT" : (char *)"RETR", ftpbase);
    550. 

  550. 	}
    551. 

  551. 	else {
    552. 

  552. 		if(inftpbuf){
    553. 

  553. 			memcpy(buf+inbuf, ftpbuf, inftpbuf);
    554. 

  554. 			inbuf += inftpbuf;
    555. 

  555. 			memcpy(buf+inbuf, "<hr>", 4);
    556. 

  556. 			inbuf += 4;
    557. 

  557. 		}
    558. 

  558. 		ftps = ftpcommand(param, (char *)"LIST", NULL);
    559. 

  559. 		mode = 1;
    560. 

  560. 	}
    561. 

  561. 	if(ftps == INVALID_SOCKET){RETURN(780);}
    562. 

  562. 	if(!mode){
    563. 

  563. 		socksend(param->clisock, (char *)proxy_stringtable[8], (int)strlen(proxy_stringtable[8]), conf.timeouts[STRING_S]);
    564. 

  564. 		s = param->remsock;
    565. 

  565. 		param->remsock = ftps;
    566. 

  566. 		if((param->operation == FTP_PUT) && (contentlength64 > 0)) param->waitclient64 = contentlength64;
    567. 

  567. 		res = mapsocket(param, conf.timeouts[CONNECTION_L]);
    568. 

  568. 		if (res == 99) res = 0;
    569. 

  569. 		so._closesocket(ftps);
    570. 

  570. 		ftps = INVALID_SOCKET;
    571. 

  571. 		param->remsock = s;
    572. 

  572. 	}
    573. 

  573. 	else {
    574. 

  574. 		int headsent = 0;
    575. 

  575. 		int gotres = -1;
    576. 

  576. 

  577. 		s = param->remsock;
    578. 

  578. 		if(param->srvoffset < param->srvinbuf){
    579. 

  579. 			gotres = ftpres(param, buf+inbuf, bufsize-(inbuf+100));
    580. 

  580. 			if(gotres) inbuf= (int)strlen((char *)buf);
    581. 

  581. 		}
    582. 

  582. 			
    583. 

  583. 		param->remsock = ftps;
    584. 

  584. 		if(gotres <= 0) for(; (res = sockgetlinebuf(param, SERVER, (char *)ftpbuf, FTPBUFSIZE - 20, '\n', conf.timeouts[STRING_S])) > 0; i++){
    585. 

  585. 			int isdir = 0;
    586. 

  586. 			int islink = 0;
    587. 

  587. 			int filetoken =-1;
    588. 

  588. 			int sizetoken =-1;
    589. 

  589. 			int modetoken =-1;
    590. 

  590. 			int datetoken =-1;
    591. 

  591. 			int spaces = 1;
    592. 

  592. 			char * tokens[10];
    593. 

  593. 			unsigned wordlen [10];
    594. 

  594. 			char j=0;
    595. 

  595. 			int space = 1;
    596. 

  596. 

  597. 			ftpbuf[res] = 0;
    598. 

  598. 			if(!i && ftpbuf[0] == 't' && ftpbuf[1] == 'o' && ftpbuf[2] == 't'){
    599. 

  599. 				mode = 2;
    600. 

  600. 				continue;
    601. 

  601. 			}
    602. 

  602. 			if(!isnumber(*ftpbuf) && mode == 1) mode = 2;
    603. 

  603. 			for(sb=(char *)ftpbuf; *sb; sb++){
    604. 

  604. 				if(!space && isspace(*sb)){
    605. 

  605. 					space = 1;
    606. 

  606. 					wordlen[j]=(unsigned)(sb-tokens[j]);
    607. 

  607. 					j++;
    608. 

  608. 				}
    609. 

  609. 				if(space && !isspace(*sb)){
    610. 

  610. 					space = 0;
    611. 

  611. 					tokens[j] = sb;
    612. 

  612. 					if(j==8)break;
    613. 

  613. 				}				
    614. 

  614. 			}
    615. 

  615. 			if(mode == 1){
    616. 

  616. 				if(j < 4) continue;
    617. 

  617. 				if(!(isdir = !memcmp(tokens[2], "<DIR>", wordlen[2])) && !isnumber(*tokens[2])){
    618. 

  618. 					continue;
    619. 

  619. 				}
    620. 

  620. 				datetoken = 0;
    621. 

  621. 				wordlen[datetoken] = ((unsigned)(tokens[1] - tokens[0])) + wordlen[1];
    622. 

  622. 				sizetoken = 2;
    623. 

  623. 				filetoken = 3;
    624. 

  624. 				spaces = 10;
    625. 

  625. 			}
    626. 

  626. 			else {
    627. 

  627. 				if(j < 8 || wordlen[0]!=10) continue;
    628. 

  628. 				if(j < 8 || !isnumber(*tokens[4])) mode = 3;
    629. 

  629. 				if(*tokens[0] == 'd') isdir = 1;
    630. 

  630. 				if(*tokens[0] == 'l') islink = 1;
    631. 

  631. 				modetoken = 0;
    632. 

  632. 				sizetoken = (mode == 2)? 4:3;
    633. 

  633. 				filetoken = (mode == 2)? 8:7;
    634. 

  634. 				datetoken = (mode == 2)? 5:4;
    635. 

  635. 				tokens[filetoken] = tokens[filetoken-1];
    636. 

  636. 				while(*tokens[filetoken] && !isspace(*tokens[filetoken]))tokens[filetoken]++;
    637. 

  637. 				if(*tokens[filetoken]){
    638. 

  638. 					tokens[filetoken]++;
    639. 

  639. 				}
    640. 

  640. 				wordlen[datetoken] = (unsigned)(tokens[filetoken] - tokens[datetoken]);
    641. 

  641. 				wordlen[filetoken] = (unsigned)strlen((char *)tokens[filetoken]);
    642. 

  642. 			}
    643. 

  643. 

  644. 			if(modetoken >= 0) memcpy(buf+inbuf, tokens[modetoken], 11);
    645. 

  645. 			else memcpy(buf+inbuf, "---------- ", 11);
    646. 

  646. 			inbuf += 11;
    647. 

  647. 			if((int) wordlen[datetoken]+256 > bufsize-inbuf) continue;
    648. 

  648. 			memcpy(buf+inbuf, tokens[datetoken], wordlen[datetoken]);
    649. 

  649. 			inbuf += wordlen[datetoken];
    650. 

  650. 			if(isdir){
    651. 

  651. 				memcpy(buf+inbuf, "       DIR", 10);
    652. 

  652. 				inbuf+=10;
    653. 

  653. 			}
    654. 

  654. 			else if(islink){
    655. 

  655. 				memcpy(buf+inbuf, "      LINK", 10);
    656. 

  656. 				inbuf+=10;
    657. 

  657. 			}
    658. 

  658. 			else{
    659. 

  659. 				unsigned k;
    660. 

  660. 				if(wordlen[sizetoken]>10) wordlen[sizetoken] = 10;
    661. 

  661. 				for(k=10; k > wordlen[sizetoken]; k--){
    662. 

  662. 					buf[inbuf++] = ' ';
    663. 

  663. 				}
    664. 

  664. 				memcpy(buf+inbuf, tokens[sizetoken], wordlen[sizetoken]);
    665. 

  665. 				inbuf+=wordlen[sizetoken];
    666. 

  666. 			}
    667. 

  667. 			memcpy(buf+inbuf, " <A HREF=\"", 10);
    668. 

  668. 			inbuf+=10;
    669. 

  669. 			sb = NULL;
    670. 

  670. 			if(islink) sb = (char *)strstr((char *)tokens[filetoken], " -> ");
    671. 

  671. 			if(sb) sb+=4;
    672. 

  672. 

  673. 			else sb=tokens[filetoken]; 
    674. 

  674. 			if(*sb != '/' && ftpbase)file2url(ftpbase, buf, bufsize, (int *)&inbuf, 1);
    675. 

  675. 			file2url(sb, buf, bufsize, (int *)&inbuf, 0);
    676. 

  676. 

  677. 			if(isdir)buf[inbuf++] = '/';
    678. 

  678. 			memcpy(buf+inbuf, "\">", 2);
    679. 

  679. 			inbuf+=2;
    680. 

  680. 			for(sb=tokens[filetoken]; *sb; sb++){
    681. 

  681. 				if((bufsize - inbuf)<16)break;
    682. 

  682. 				if(*sb == '<'){
    683. 

  683. 					memcpy(buf+inbuf, "&lt;", 4);
    684. 

  684. 					inbuf+=4;
    685. 

  685. 				}
    686. 

  686. 				else if(*sb == '>'){
    687. 

  687. 					memcpy(buf+inbuf, "&gt;", 4);
    688. 

  688. 					inbuf+=4;
    689. 

  689. 				}
    690. 

  690. 				else if(*sb == '\r' || *sb=='\n'){
    691. 

  691. 					continue;
    692. 

  692. 				}
    693. 

  693. 				else if(islink && sb[0] == ' ' && sb[1] == '-' 
    694. 

  694. 				 && sb[2] == '>'){
    695. 

  695. 					memcpy(buf+inbuf, "</A> ", 5);
    696. 

  696. 					inbuf+=5;
    697. 

  697. 				}
    698. 

  698. 				else buf[inbuf++]=*sb;
    699. 

  699. 			}
    700. 

  700. 			if(islink!=2){
    701. 

  701. 				memcpy(buf+inbuf, "</A>", 4);
    702. 

  702. 				inbuf+=4;
    703. 

  703. 			}
    704. 

  704. 			buf[inbuf++] = '\n';
    705. 

  705. 

  706. 			if((bufsize - inbuf) < LINESIZE){
    707. 

  707. 				if (bufsize > 20000){
    708. 

  708. 					if(!headsent++){
    709. 

  709. 						socksend(param->clisock, (char *)proxy_stringtable[9], (int)strlen(proxy_stringtable[9]), conf.timeouts[STRING_S]);
    710. 

  710. 					}
    711. 

  711. 					if((unsigned)socksend(param->clisock, buf, inbuf, conf.timeouts[STRING_S]) != inbuf){
    712. 

  712. 						RETURN(781);
    713. 

  713. 					}
    714. 

  714. 					inbuf = 0;
    715. 

  715. 				}
    716. 

  716. 				else {
    717. 

  717. 					if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    718. 

  718. 					buf = newbuf;
    719. 

  719. 					bufsize += BUFSIZE;
    720. 

  720. 				}
    721. 

  721. 			}
    722. 

  722. 		}
    723. 

  723. 		memcpy(buf+inbuf, "<hr>", 4);
    724. 

  724. 		inbuf += 4;
    725. 

  725. 		so._closesocket(ftps);
    726. 

  726. 		ftps = INVALID_SOCKET;
    727. 

  727. 		param->remsock = s;
    728. 

  728. 		if(inbuf){
    729. 

  729. 			buf[inbuf] = 0;
    730. 

  730. 			if(gotres < 0 ) res = ftpres(param, buf+inbuf, bufsize-inbuf);
    731. 

  731. 			else res = gotres;
    732. 

  732. 			inbuf = (int)strlen((char *)buf);
    733. 

  733. 			if(!headsent){
    734. 

  734. 				sprintf(ftpbuf, 
    735. 

  735. 					"HTTP/1.0 200 OK\r\n"
    736. 

  736. 					"Content-Type: text/html\r\n"
    737. 

  737. 					"Connection: keep-alive\r\n"
    738. 

  738. 					"Content-Length: %d\r\n\r\n",
    739. 

  739. 					inbuf);
    740. 

  740. 				socksend(param->clisock, (char *)ftpbuf, (int)strlen(ftpbuf), conf.timeouts[STRING_S]);
    741. 

  741. 			}
    742. 

  742. 			socksend(param->clisock, buf, inbuf, conf.timeouts[STRING_S]);
    743. 

  743. 			if(res){RETURN(res);}
    744. 

  744. 			if(!headsent)goto REQUESTEND;
    745. 

  745. 		}
    746. 

  746. 		RETURN(0);
    747. 

  747. 	}
    748. 

  748. 	RETURN(res);
    749. 

  749.  }
    750. 

  750. 

  751.  if(isconnect && param->redirtype != R_HTTP) {
    752. 

  752. 	socksend(param->clisock, (char *)proxy_stringtable[8], (int)strlen(proxy_stringtable[8]), conf.timeouts[STRING_S]);
    753. 

  753. 	if(param->redirectfunc) {
    754. 

  754. 		 if(req)myfree(req);
    755. 

  755. 		 if(buf)myfree(buf);
    756. 

  756. 

  757. 		return (*param->redirectfunc)(param);
    758. 

  758. 	}
    759. 

  759. 	param->res =  mapsocket(param, conf.timeouts[CONNECTION_L]);
    760. 

  760. 	RETURN(param->res);
    761. 

  761.  }
    762. 

  762. 

  763.  if(!req || param->redirtype != R_HTTP) {
    764. 

  764. 	reqlen = 0;
    765. 

  765.  }
    766. 

  766. 

  767.  else {
    768. 

  768. #ifdef TCP_CORK
    769. 

  769. 	int opt = 1;
    770. 

  770. 	so._setsockopt(param->remsock, IPPROTO_TCP, TCP_CORK, (char *)&opt, sizeof(int));
    771. 

  771. #endif
    772. 

  772. 	 redirect = 1;
    773. 

  773. 	 res = (int)strlen((char *)req);
    774. 

  774. 	 if(socksend(param->remsock, req , res, conf.timeouts[STRING_L]) != res) {
    775. 

  775. 		RETURN(518);
    776. 

  776. 	 }
    777. 

  777. 	 param->statscli64 += res;
    778. 

  778. 	 param->nwrites++;
    779. 

  779.  }
    780. 

  780.  inbuf = 0;
    781. 

  781. #ifndef ANONYMOUS
    782. 

  782.  if(!anonymous){
    783. 

  783. 		int len = (int)strlen((char *)buf);
    784. 

  784. 		len += sprintf((char*)buf + len, "Forwarded: for=");
    785. 

  785. 		if(*SAFAMILY(&param->sincr) == AF_INET6) len += sprintf((char*)buf + len, "\"[");
    786. 

  786. 		len += myinet_ntop(*SAFAMILY(&param->sincr), SAADDR(&param->sincr), (char *)buf + len, 128);
    787. 

  787. 		if(*SAFAMILY(&param->sincr) == AF_INET6) len += sprintf((char*)buf + len, "]:%d\";by=", (int)ntohs(*SAPORT(&param->sincr)));
    788. 

  788. 		else len += sprintf((char*)buf + len, ":%d;by=", (int)ntohs(*SAPORT(&param->sincr)));
    789. 

  789. 		gethostname((char *)(buf + len), 256);
    790. 

  790. 		sprintf((char*)buf+strlen((char *)buf), ":%d\r\n", (int)ntohs(*SAPORT(&param->sincl)));
    791. 

  791.  }
    792. 

  792.  else if(anonymous>1){
    793. 

  793. 		sprintf((char*)buf+strlen((char *)buf), "Via: 1.1 ");
    794. 

  794. 		gethostname((char *)(buf+strlen((char *)buf)), 256);
    795. 

  795. 		sprintf((char*)buf+strlen((char *)buf), ":%d (%s %s)\r\nX-Forwarded-For: ", (int)ntohs(*SAPORT(&param->srv->intsa)), conf.stringtable?conf.stringtable[2]:(char *)"", conf.stringtable?conf.stringtable[3]:(char *)"");
    796. 

  796. 		if(anonymous != 2)myinet_ntop(*SAFAMILY(&param->sincr), SAADDR(&param->sincr), (char *)buf + strlen((char *)buf), 128);
    797. 

  797. 		else {
    798. 

  798. 			unsigned long tmp;
    799. 

  799. 

  800. 			tmp = ((unsigned long)myrand(param, sizeof(struct clientparam))<<16)^(unsigned long)rand();
    801. 

  801. 			myinet_ntop(AF_INET, &tmp, (char *)buf + strlen((char *)buf), 64);
    802. 

  802. 		}
    803. 

  803. 		sprintf((char*)buf+strlen((char *)buf), "\r\n");
    804. 

  804.  }
    805. 

  805. #endif
    806. 

  806.  if(keepalive <= 1) {
    807. 

  807. 	sprintf((char*)buf+strlen((char *)buf), "Connection: %s\r\n", keepalive? "keep-alive":"close");
    808. 

  808.  }
    809. 

  809.  if(param->extusername){
    810. 

  810. 	sprintf((char*)buf + strlen((char *)buf), "%s: Basic ", (redirect)?"Proxy-Authorization":"Authorization");
    811. 

  811. 	sprintf((char*)username, "%.128s:%.128s", param->extusername, param->extpassword?param->extpassword:(char*)"");
    812. 

  812. 	en64(username, buf+strlen((char *)buf), (int)strlen((char *)username));
    813. 

  813. 	sprintf((char*)buf + strlen((char *)buf), "\r\n");
    814. 

  814.  }
    815. 

  815.  sprintf((char*)buf+strlen((char *)buf), "\r\n");
    816. 

  816.  if ((res = socksend(param->remsock, buf+reqlen, (int)strlen((char *)buf+reqlen), conf.timeouts[STRING_S])) != (int)strlen((char *)buf+reqlen)) {
    817. 

  817. 	RETURN(518);
    818. 

  818.  }
    819. 

  819. #ifdef TCP_CORK
    820. 

  820.  {
    821. 

  821. 	int opt = 0;
    822. 

  822. 	so._setsockopt(param->remsock, IPPROTO_TCP, TCP_CORK, (char *)&opt, sizeof(int));
    823. 

  823.  }
    824. 

  824. #endif
    825. 

  825.  param->statscli64 += res;
    826. 

  826.  param->nwrites++;
    827. 

  827.  if(param->bandlimfunc) {
    828. 

  828. 	sleeptime = param->bandlimfunc(param, 0, (int)strlen((char *)buf));
    829. 

  829.  }
    830. 

  830.  if(contentlength64 > 0){
    831. 

  831. 	 param->nolongdatfilter = 0;
    832. 

  832. 	 param->waitclient64 = contentlength64;
    833. 

  833. 	 res = mapsocket(param, conf.timeouts[CONNECTION_S]);
    834. 

  834. 	 param->waitclient64 = 0;
    835. 

  835. 	 if(res != 99) {
    836. 

  836. 		RETURN(res);
    837. 

  837. 	}
    838. 

  838.  }
    839. 

  839.  contentlength64 = 0;
    840. 

  840.  inbuf = 0;
    841. 

  841.  ckeepalive = keepalive;
    842. 

  842.  res = 0; 
    843. 

  843.  authenticate = 0;
    844. 

  844.  param->chunked = 0;
    845. 

  845.  hascontent = 0;
    846. 

  846.  
    847. 

  847.  while( (i = sockgetlinebuf(param, SERVER, buf + inbuf, LINESIZE - 1, '\n', conf.timeouts[(res)?STRING_S:STRING_L])) > 2) {
    848. 

  848. 	if(!res && i>9)param->status = res = atoi((char *)buf + inbuf + 9);
    849. 

  849. 	if(((i >= 25 && !strncasecmp((char *)(buf+inbuf), "proxy-connection:", 17))
    850. 

  850. 	   ||
    851. 

  851. 	    (i> 16 && !strncasecmp((char *)(buf+inbuf), "connection:", 11))
    852. 

  852. 			)){
    853. 

  853. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    854. 

  854. 		if(!sb)continue;
    855. 

  855. 		++sb;
    856. 

  856. 		while(isspace(*sb))sb++;
    857. 

  857. 		if(strncasecmp((char *)sb,"keep-alive", 10))ckeepalive = 0;
    858. 

  858. 		if(!param->srv->transparent && res >= 200)continue; 
    859. 

  859. 	}
    860. 

  860. 	else if(i> 6 && !param->srv->transparent && (!strncasecmp((char *)(buf+inbuf), "proxy-", 6))){
    861. 

  861. 		continue; 
    862. 

  862. 	}
    863. 

  863. 	else if(i> 6 && (!strncasecmp((char *)(buf+inbuf), "www-authenticate", 16))){
    864. 

  864. 		authenticate = 1;
    865. 

  865. 	}
    866. 

  866. 	else if(i > 15 && (!strncasecmp((char *)(buf+inbuf), "content-length", 14))){
    867. 

  867. 		buf[inbuf+i]=0;
    868. 

  868. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    869. 

  869. 		if(!sb)continue;
    870. 

  870. 		++sb;
    871. 

  871. 		while(isspace(*sb))sb++;
    872. 

  872. 		sscanf((char *)sb, "%"PRIu64, &contentlength64);
    873. 

  873. 		hascontent = 1;
    874. 

  874. 		if(param->unsafefilter && param->ndatfilterssrv > 0) {
    875. 

  875. 			hascontent = 2;
    876. 

  876. 			continue;
    877. 

  877. 		}
    878. 

  878. 		if(param->maxtrafin64 && (param->maxtrafin64 < param->statssrv64 || contentlength64 + param->statssrv64 > param->maxtrafin64)){
    879. 

  879. 			RETURN(10);
    880. 

  880. 		}
    881. 

  881. 	}
    882. 

  882. 	else if(i>25 && (!strncasecmp((char *)(buf+inbuf), "transfer-encoding", 17))){
    883. 

  883. 		buf[inbuf+i]=0;
    884. 

  884. 		sb = (char *)strchr((char *)(buf+inbuf), ':');
    885. 

  885. 		if(!sb)continue;
    886. 

  886. 		++sb;
    887. 

  887. 		while(isspace(*sb))sb++;
    888. 

  888. 		if(!strncasecmp((char *)sb, "chunked", 7)){
    889. 

  889. 			param->chunked = 1;
    890. 

  890. 		}
    891. 

  891. 	}
    892. 

  892. 	inbuf += i;
    893. 

  893. 	if((bufsize - inbuf) < LINESIZE){
    894. 

  894. 		if (bufsize > 20000){
    895. 

  895. 			RETURN (516);
    896. 

  896. 		}
    897. 

  897. 		if(!(newbuf = myrealloc(buf, bufsize + BUFSIZE))){RETURN (21);}
    898. 

  898. 		buf = newbuf;
    899. 

  899. 		bufsize += BUFSIZE;
    900. 

  900. 	}
    901. 

  901.  }
    902. 

  902.  if(res < 200 || res > 499) {
    903. 

  903. 	ckeepalive = 0;
    904. 

  904.  }
    905. 

  905.  if((res == 304 || res == 204) && !hascontent){
    906. 

  906. 	hascontent = 1;
    907. 

  907. 	contentlength64 = 0;
    908. 

  908.  }
    909. 

  909.  if(param->bandlimfunc) {
    910. 

  910. 	int st1;
    911. 

  911. 

  912. 	st1 = (*param->bandlimfunc)(param, inbuf, 0);
    913. 

  913. 	if(st1 > sleeptime) sleeptime = st1;
    914. 

  914. 	if(sleeptime > 0){
    915. 

  915. /*		if(sleeptime > 30) sleeptime = 30; */
    916. 

  916. 		usleep(sleeptime * SLEEPTIME);
    917. 

  917. 	}
    918. 

  918.  }
    919. 

  919.  buf[inbuf] = 0;
    920. 

  920.  if(inbuf < 9) {RETURN (522);}
    921. 

  921. #ifndef WITHMAIN
    922. 

  922.  action = handlehdrfilterssrv(param, &buf, &bufsize, 0, &inbuf);
    923. 

  923.  if(action == HANDLED){
    924. 

  924. 	RETURN(0);
    925. 

  925.  }
    926. 

  926.  if(action != PASS) RETURN(517);
    927. 

  927. 

  928.  param->nolongdatfilter = 0;
    929. 

  929. 

  930.  
    931. 

  931.  if (conf.filtermaxsize && contentlength64 > (uint64_t)conf.filtermaxsize) {
    932. 

  932. 	param->nolongdatfilter = 1;
    933. 

  933.  }
    934. 

  934.  else if(param->unsafefilter && param->ndatfilterssrv > 0 && contentlength64 > 0 && param->operation != HTTP_HEAD && res != 204 && res != 304){
    935. 

  935.   uint64_t newlen;
    936. 

  936.   newlen = (uint64_t)sockfillbuffsrv(param, (unsigned long) contentlength64, CONNECTION_S);
    937. 

  937.   if(newlen == contentlength64) {
    938. 

  938. 	action = handledatfltsrv(param,  &param->srvbuf, (int *)&param->srvbufsize, 0, (int *)&param->srvinbuf);
    939. 

  939. 	param->nolongdatfilter = 1;
    940. 

  940. 	if(action == HANDLED){
    941. 

  941. 		RETURN(0);
    942. 

  942. 	}
    943. 

  943. 	if(action != PASS) RETURN(517);
    944. 

  944. 	contentlength64 = param->srvinbuf;
    945. 

  945. 	sprintf((char*)buf+strlen((char *)buf), "Content-Length: %"PRIu64"\r\n", contentlength64);
    946. 

  946. 	hascontent = 1;
    947. 

  947.   }
    948. 

  948.  }
    949. 

  949.  if (contentlength64 > 0 && hascontent != 1) ckeepalive = 0;
    950. 

  950. #else
    951. 

  951. #endif
    952. 

  952.  if(!isconnect || param->operation){
    953. 

  953. 	 if(authenticate && !param->transparent) sprintf((char*)buf+strlen((char *)buf), 
    954. 

  954. 		"Proxy-support: Session-Based-Authentication\r\n"
    955. 

  955. 		"Connection: Proxy-support\r\n"
    956. 

  956. 	 );
    957. 

  957. 	 if(!param->srv->transparent && res>=200){
    958. 

  958. 		if(ckeepalive <= 1) sprintf((char*)buf+strlen((char *)buf), "Connection: %s\r\n", 
    959. 

  959. 		(hascontent && ckeepalive)?"keep-alive":"close");
    960. 

  960. 	 }
    961. 

  961. 	 sprintf((char*)buf + strlen((char *)buf), "\r\n");
    962. 

  962. 	 if((socksend(param->clisock, buf, (int)strlen((char *)buf), conf.timeouts[STRING_S])) != (int)strlen((char *)buf)) {
    963. 

  963. 		RETURN(521);
    964. 

  964. 	 }
    965. 

  965.  }
    966. 

  966.  if((param->chunked || contentlength64 > 0) && param->operation != HTTP_HEAD && res != 204 && res != 304) {
    967. 

  967.  	do {
    968. 

  968. 		if(param->chunked){
    969. 

  969. 			char smallbuf[32];
    970. 

  970. 			while ((i = sockgetlinebuf(param, SERVER, smallbuf, 30, '\n', conf.timeouts[STRING_S])) == 2) {
    971. 

  971. 				if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    972. 

  972. 					RETURN(533);
    973. 

  973. 				}
    974. 

  974. 				if(param->chunked == 2) break;
    975. 

  975. 			}
    976. 

  976. 			if(i<3) {
    977. 

  977. 				keepalive = 0;
    978. 

  978. 				break;
    979. 

  979. 			}
    980. 

  980. 			if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    981. 

  981. 					RETURN(535);
    982. 

  982. 			}
    983. 

  983. 			if(param->chunked == 2) {
    984. 

  984. 				if((i = sockgetlinebuf(param, SERVER, smallbuf, 30, '\n', conf.timeouts[STRING_S])) != 2) RETURN(534);
    985. 

  985. 				if (socksend(param->clisock, smallbuf, i, conf.timeouts[STRING_S]) != i){
    986. 

  986. 					RETURN(533);
    987. 

  987. 				}
    988. 

  988. 				break;
    989. 

  989. 			}
    990. 

  990. 			smallbuf[i] = 0;
    991. 

  991. 			contentlength64 = 0;
    992. 

  992. 			sscanf((char *)smallbuf, "%"SCNx64, &contentlength64);
    993. 

  993. 			if(contentlength64 == 0) {
    994. 

  994. 				param->chunked = 2;
    995. 

  995. 			}
    996. 

  996. 		}
    997. 

  997. 		if(param->chunked != 2){
    998. 

  998. 			param->waitserver64 = contentlength64;
    999. 

  999. 		 	if((res = mapsocket(param, conf.timeouts[CONNECTION_S])) != 98){
    1000. 

  1000. 				RETURN(res);
    1001. 

  1001. 			}
    1002. 

  1002. 	 		param->waitserver64 = 0;
    1003. 

  1003. 		}
    1004. 

  1004.         } while(param->chunked);
    1005. 

  1005.  }
    1006. 

  1006.  if(isconnect && res == 200 && param->operation){
    1007. 

  1007. 	RETURN (mapsocket(param, conf.timeouts[CONNECTION_S]));
    1008. 

  1008.  }
    1009. 

  1009.  else if(isconnect){
    1010. 

  1010. 	ckeepalive = keepalive = 1;
    1011. 

  1011.  }
    1012. 

  1012.  else if(!hascontent && !param->chunked) {
    1013. 

  1013. 	RETURN(mapsocket(param, conf.timeouts[CONNECTION_S]));
    1014. 

  1014.  }
    1015. 

  1015.  contentlength64 = 0;
    1016. 

  1016. REQUESTEND:
    1017. 

  1017. 

  1018.  if((!ckeepalive || !keepalive) && param->remsock != INVALID_SOCKET){
    1019. 

  1019. 	so._shutdown(param->remsock, SHUT_RDWR);
    1020. 

  1020. 	so._closesocket(param->remsock);
    1021. 

  1021. 	param->remsock = INVALID_SOCKET;
    1022. 

  1022. 	RETURN(0);
    1023. 

  1023.  }
    1024. 

  1024.  if(param->transparent && (!ckeepalive || !keepalive)) {RETURN (0);}
    1025. 

  1025.  logurl(param, (char *)buf, (char *)req, ftp);
    1026. 

  1026.  param->status = 0;
    1027. 

  1027. 

  1028. }
    1029. 

  1029. 

  1030. CLEANRET:
    1031. 

  1031. 

  1032.  if(param->res != 555 && param->res && param->clisock != INVALID_SOCKET && (param->res < 90 || param->res >=800 || param->res == 100 ||(param->res > 500 && param->res< 800))) {
    1033. 

  1033. 	if((param->res>=509 && param->res < 517) || param->res > 900) while( (i = sockgetlinebuf(param, CLIENT, buf, BUFSIZE - 1, '\n', conf.timeouts[STRING_S])) > 2);
    1034. 

  1034. 	if(param->res == 10) {
    1035. 

  1035. 		socksend(param->clisock, (char *)proxy_stringtable[2], (int)strlen(proxy_stringtable[2]), conf.timeouts[STRING_S]);
    1036. 

  1036. 	}
    1037. 

  1037. 	else if (res == 700 || res == 701){
    1038. 

  1038. 		socksend(param->clisock, (char *)proxy_stringtable[16], (int)strlen(proxy_stringtable[16]), conf.timeouts[STRING_S]);
    1039. 

  1039. 		socksend(param->clisock, (char *)ftpbuf, inftpbuf, conf.timeouts[STRING_S]);
    1040. 

  1040. 	}
    1041. 

  1041. 	else if(param->res == 100 || (param->res >10 && param->res < 20) || (param->res >701 && param->res <= 705)) {
    1042. 

  1042. 		socksend(param->clisock, (char *)proxy_stringtable[1], (int)strlen(proxy_stringtable[1]), conf.timeouts[STRING_S]);
    1043. 

  1043. 	}
    1044. 

  1044. 	else if(param->res >=20 && param->res < 30) {
    1045. 

  1045. 		socksend(param->clisock, (char *)proxy_stringtable[6], (int)strlen(proxy_stringtable[6]), conf.timeouts[STRING_S]);
    1046. 

  1046. 	}
    1047. 

  1047. 	else if(param->res >=30 && param->res < 80) {
    1048. 

  1048. 		socksend(param->clisock, (char *)proxy_stringtable[5], (int)strlen(proxy_stringtable[5]), conf.timeouts[STRING_S]);
    1049. 

  1049. 	}
    1050. 

  1050. 	else if(param->res == 1 || (!param->srv->needuser && param->res < 10)) {
    1051. 

  1051. 		socksend(param->clisock, (char *)proxy_stringtable[11], (int)strlen(proxy_stringtable[11]), conf.timeouts[STRING_S]);
    1052. 

  1052. 	}
    1053. 

  1053. 	else if(param->res < 10) {
    1054. 

  1054. 		socksend(param->clisock, (char *)proxy_stringtable[7], (int)strlen(proxy_stringtable[7]), conf.timeouts[STRING_S]);
    1055. 

  1055. 	}
    1056. 

  1056. 	else if(param->res == 999) {
    1057. 

  1057. 		socksend(param->clisock, (char *)proxy_stringtable[4], (int)strlen(proxy_stringtable[4]), conf.timeouts[STRING_S]);
    1058. 

  1058. 	}
    1059. 

  1059. 	else if(param->res == 519) {
    1060. 

  1060. 		socksend(param->clisock, (char *)proxy_stringtable[3], (int)strlen(proxy_stringtable[3]), conf.timeouts[STRING_S]);
    1061. 

  1061. 	}
    1062. 

  1062. 	else if(param->res == 517) {
    1063. 

  1063. 		socksend(param->clisock, (char *)proxy_stringtable[15], (int)strlen(proxy_stringtable[15]), conf.timeouts[STRING_S]);
    1064. 

  1064. 	}
    1065. 

  1065. 	else if(param->res == 780) {
    1066. 

  1066. 		socksend(param->clisock, (char *)proxy_stringtable[10], (int)strlen(proxy_stringtable[10]), conf.timeouts[STRING_S]);
    1067. 

  1067. 	}
    1068. 

  1068. 	else if(param->res >= 511 && param->res<=516){
    1069. 

  1069. 		socksend(param->clisock, (char *)proxy_stringtable[0], (int)strlen(proxy_stringtable[0]), conf.timeouts[STRING_S]);
    1070. 

  1070. 	}
    1071. 

  1071.  } 
    1072. 

  1072.  logurl(param, (char *)buf, (char *)req, ftp);
    1073. 

  1073.  if(req)myfree(req);
    1074. 

  1074.  if(buf)myfree(buf);
    1075. 

  1075.  if(ftpbase)myfree(ftpbase);
    1076. 

  1076.  freeparam(param);
    1077. 

  1077.  return (NULL);
    1078. 

  1078. }
    1079. 

  1079. 

  1080. #ifdef WITHMAIN
    1081. 

  1081. struct proxydef childdef = {
    1082. 

  1082. 	proxychild,
    1083. 

  1083. 	3128,
    1084. 

  1084. 	0,
    1085. 

  1085. 	S_PROXY,
    1086. 

  1086. 	"-a - anonymous proxy\r\n"
    1087. 

  1087. 	"-a1 - anonymous proxy with random client IP spoofing\r\n"
    1088. 

  1088. };
    1089. 

  1089. #include "proxymain.c"
    1090. 

  1090. #include "log.c"
    1091. 

  1091. #endif
    1092.