# Copyright (c) 2009, 2011 Samuel G. D. Williams. # # Permission is hereby granted, free of charge, to any person obtaining a copy # of this software and associated documentation files (the "Software"), to deal # in the Software without restriction, including without limitation the rights # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell # copies of the Software, and to permit persons to whom the Software is # furnished to do so, subject to the following conditions: # # The above copyright notice and this permission notice shall be included in # all copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN # THE SOFTWARE. require 'rubydns/transaction' module RubyDNS # This class provides the core of the DSL. It contains a list of rules which # are used to match against incoming DNS questions. These rules are used to # generate responses which are either DNS resource records or failures. class Server class Rule def initialize(pattern, callback) @pattern = pattern @callback = callback end def match(name, resource_class) # If the pattern doesn't specify any resource classes, we implicitly pass this test: return true if @pattern.size < 2 # Otherwise, we try to match against some specific resource classes: if Class === @pattern[1] @pattern[1] == resource_class else @pattern[1].include?(resource_class) rescue false end end def call(server, name, resource_class, *args) unless match(name, resource_class) server.logger.debug "Resource class #{resource_class} failed to match #{@pattern[1].inspect}!" return false end # Match succeeded against name? case @pattern[0] when Regexp match_data = @pattern[0].match(name) if match_data server.logger.debug "Regexp pattern matched with #{match_data.inspect}." return @callback[match_data, *args] end when String if @pattern[0] == name server.logger.debug "String pattern matched." return @callback[*args] end else if (@pattern[0].call(name, resource_class) rescue false) server.logger.debug "Callable pattern matched." return @callback[*args] end end server.logger.debug "No pattern matched." # We failed to match the pattern. return false end def to_s @pattern.inspect end end # Instantiate a server with a block # # server = Server.new do # match(/server.mydomain.com/, IN::A) do |transaction| # transaction.respond!("1.2.3.4") # end # end # def initialize(&block) @events = {} @rules = [] @otherwise = nil @logger = Logger.new($stderr) if block_given? instance_eval &block end end attr :logger, true # This function connects a pattern with a block. A pattern is either # a String or a Regex instance. Optionally, a second argument can be # provided which is either a String, Symbol or Array of resource record # types which the rule matches against. # # match("www.google.com") # match("gmail.com", IN::MX) # match(/g?mail.(com|org|net)/, [IN::MX, IN::A]) # def match(*pattern, &block) @rules << Rule.new(pattern, block) end # Register a named event which may be invoked later using #fire # on(:start) do |server| # RExec.change_user(RUN_AS) # end def on(event_name, &block) @events[event_name] = block end # Fire the named event, which must have been registered using on. def fire(event_name) callback = @events[event_name] if callback callback.call(self) end end # Specify a default block to execute if all other rules fail to match. # This block is typially used to pass the request on to another server # (i.e. recursive request). # # otherwise do |transaction| # transaction.passthrough!($R) # end # def otherwise(&block) @otherwise = block end def next! throw :next end # Give a name and a record type, try to match a rule and use it for # processing the given arguments. # # If a rule returns false, it is considered that the rule failed and # futher matching is carried out. def process(name, resource_class, *args) @logger.debug "Searching for #{name} #{resource_class.name}" @rules.each do |rule| @logger.debug "Checking rule #{rule}..." catch (:next) do # If the rule returns true, we assume that it was successful and no further rules need to be evaluated. return true if rule.call(self, name, resource_class, *args) end end if @otherwise @otherwise.call(*args) else @logger.warn "Failed to handle #{name} #{resource_class.name}!" end end # Process an incoming DNS message. Returns a serialized message to be # sent back to the client. def process_query(query, options = {}, &block) # Setup answer answer = Resolv::DNS::Message::new(query.id) answer.qr = 1 # 0 = Query, 1 = Response answer.opcode = query.opcode # Type of Query; copy from query answer.aa = 1 # Is this an authoritative response: 0 = No, 1 = Yes answer.rd = query.rd # Is Recursion Desired, copied from query answer.ra = 0 # Does name server support recursion: 0 = No, 1 = Yes answer.rcode = 0 # Response code: 0 = No errors # 1/ This chain contains a reverse list of question lambdas. chain = [] # 4/ Finally, the answer is given back to the calling block: chain << lambda do @logger.debug "Passing answer back to caller..." yield answer end # There may be multiple questions per query query.question.reverse.each do |question, resource_class| next_link = chain.last chain << lambda do @logger.debug "Processing question #{question} #{resource_class}..." transaction = Transaction.new(self, query, question, resource_class, answer, options) # Call the next link in the chain: transaction.callback do # 3/ ... which calls the previous item in the chain, i.e. the next question to be answered: next_link.call end # If there was an error, log it and fail: transaction.errback do |response| if Exception === response @logger.error "Exception thrown while processing #{transaction}!" @logger.error "#{response.class}: #{response.message}" if response.backtrace Array(response.backtrace).each { |at| @logger.error at } end else @logger.error "Failure while processing #{transaction}!" @logger.error "#{response.inspect}" end answer.rcode = Resolv::DNS::RCode::ServFail chain.first.call end begin # Transaction.process will call succeed if it wasn't deferred: transaction.process rescue transaction.fail($!) end end end # 2/ We call the last lambda... chain.last.call end end end