| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | package rewrite
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | import (
 | 
					
						
							| 
									
										
										
										
											2019-06-25 08:00:33 +01:00
										 |  |  | 	"github.com/miekg/dns"
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | )
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | // RevertPolicy controls the overall reverting process
 | 
					
						
							|  |  |  | type RevertPolicy interface {
 | 
					
						
							|  |  |  | 	DoRevert() bool
 | 
					
						
							|  |  |  | 	DoQuestionRestore() bool
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | type revertPolicy struct {
 | 
					
						
							|  |  |  | 	noRevert  bool
 | 
					
						
							|  |  |  | 	noRestore bool
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | func (p revertPolicy) DoRevert() bool {
 | 
					
						
							|  |  |  | 	return !p.noRevert
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | func (p revertPolicy) DoQuestionRestore() bool {
 | 
					
						
							|  |  |  | 	return !p.noRestore
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | // NoRevertPolicy disables all response rewrite rules
 | 
					
						
							|  |  |  | func NoRevertPolicy() RevertPolicy {
 | 
					
						
							|  |  |  | 	return revertPolicy{true, false}
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | // NoRestorePolicy disables the question restoration during the response rewrite
 | 
					
						
							|  |  |  | func NoRestorePolicy() RevertPolicy {
 | 
					
						
							|  |  |  | 	return revertPolicy{false, true}
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | // NewRevertPolicy creates a new reverter policy by dynamically specifying all
 | 
					
						
							|  |  |  | // options.
 | 
					
						
							|  |  |  | func NewRevertPolicy(noRevert, noRestore bool) RevertPolicy {
 | 
					
						
							|  |  |  | 	return revertPolicy{noRestore: noRestore, noRevert: noRevert}
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | // ResponseRule contains a rule to rewrite a response with.
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | type ResponseRule interface {
 | 
					
						
							|  |  |  | 	RewriteResponse(rr dns.RR)
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | }
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | // ResponseRules describes an ordered list of response rules to apply
 | 
					
						
							|  |  |  | // after a name rewrite
 | 
					
						
							|  |  |  | type ResponseRules = []ResponseRule
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-09-23 09:14:12 +01:00
										 |  |  | // ResponseReverter reverses the operations done on the question section of a packet.
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | // This is need because the client will otherwise disregards the response, i.e.
 | 
					
						
							| 
									
										
										
										
											2018-07-13 14:32:07 +01:00
										 |  |  | // dig will complain with ';; Question section mismatch: got example.org/HINFO/IN'
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | type ResponseReverter struct {
 | 
					
						
							|  |  |  | 	dns.ResponseWriter
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | 	originalQuestion dns.Question
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | 	ResponseRules    ResponseRules
 | 
					
						
							|  |  |  | 	revertPolicy     RevertPolicy
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-09-23 09:14:12 +01:00
										 |  |  | // NewResponseReverter returns a pointer to a new ResponseReverter.
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | func NewResponseReverter(w dns.ResponseWriter, r *dns.Msg, policy RevertPolicy) *ResponseReverter {
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 	return &ResponseReverter{
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | 		ResponseWriter:   w,
 | 
					
						
							|  |  |  | 		originalQuestion: r.Question[0],
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | 		revertPolicy:     policy,
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 	}
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-07-02 15:39:50 +01:00
										 |  |  | // WriteMsg records the status code and calls the underlying ResponseWriter's WriteMsg method.
 | 
					
						
							| 
									
										
										
										
											2021-02-01 15:52:50 +01:00
										 |  |  | func (r *ResponseReverter) WriteMsg(res1 *dns.Msg) error {
 | 
					
						
							|  |  |  | 	// Deep copy 'res' as to not (e.g). rewrite a message that's also stored in the cache.
 | 
					
						
							|  |  |  | 	res := res1.Copy()
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | 	if r.revertPolicy.DoQuestionRestore() {
 | 
					
						
							|  |  |  | 		res.Question[0] = r.originalQuestion
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | 	if len(r.ResponseRules) > 0 {
 | 
					
						
							| 
									
										
										
										
											2021-02-23 09:12:40 +00:00
										 |  |  | 		for _, rr := range res.Ns {
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | 			r.rewriteResourceRecord(res, rr)
 | 
					
						
							| 
									
										
										
										
											2021-02-23 09:12:40 +00:00
										 |  |  | 		}
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | 		for _, rr := range res.Answer {
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | 			r.rewriteResourceRecord(res, rr)
 | 
					
						
							| 
									
										
										
										
											2021-02-23 09:12:40 +00:00
										 |  |  | 		}
 | 
					
						
							|  |  |  | 		for _, rr := range res.Extra {
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | 			r.rewriteResourceRecord(res, rr)
 | 
					
						
							| 
									
										
										
										
											2018-01-18 10:41:14 -05:00
										 |  |  | 		}
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							| 
									
										
										
										
											2016-03-18 20:57:35 +00:00
										 |  |  | 	return r.ResponseWriter.WriteMsg(res)
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | func (r *ResponseReverter) rewriteResourceRecord(res *dns.Msg, rr dns.RR) {
 | 
					
						
							| 
									
										
										
										
											2021-02-23 09:12:40 +00:00
										 |  |  | 	for _, rule := range r.ResponseRules {
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | 		rule.RewriteResponse(rr)
 | 
					
						
							| 
									
										
										
										
											2021-02-23 09:12:40 +00:00
										 |  |  | 	}
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | }
 | 
					
						
							| 
									
										
										
										
											2021-02-23 09:12:40 +00:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2021-05-04 10:05:45 +02:00
										 |  |  | // Write is a wrapper that records the size of the message that gets written.
 | 
					
						
							|  |  |  | func (r *ResponseReverter) Write(buf []byte) (int, error) {
 | 
					
						
							|  |  |  | 	n, err := r.ResponseWriter.Write(buf)
 | 
					
						
							|  |  |  | 	return n, err
 | 
					
						
							| 
									
										
										
										
											2021-02-23 09:12:40 +00:00
										 |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | func getRecordValueForRewrite(rr dns.RR) (name string) {
 | 
					
						
							|  |  |  | 	switch rr.Header().Rrtype {
 | 
					
						
							|  |  |  | 	case dns.TypeSRV:
 | 
					
						
							|  |  |  | 		return rr.(*dns.SRV).Target
 | 
					
						
							|  |  |  | 	case dns.TypeMX:
 | 
					
						
							|  |  |  | 		return rr.(*dns.MX).Mx
 | 
					
						
							|  |  |  | 	case dns.TypeCNAME:
 | 
					
						
							|  |  |  | 		return rr.(*dns.CNAME).Target
 | 
					
						
							|  |  |  | 	case dns.TypeNS:
 | 
					
						
							|  |  |  | 		return rr.(*dns.NS).Ns
 | 
					
						
							|  |  |  | 	case dns.TypeDNAME:
 | 
					
						
							|  |  |  | 		return rr.(*dns.DNAME).Target
 | 
					
						
							|  |  |  | 	case dns.TypeNAPTR:
 | 
					
						
							|  |  |  | 		return rr.(*dns.NAPTR).Replacement
 | 
					
						
							|  |  |  | 	case dns.TypeSOA:
 | 
					
						
							|  |  |  | 		return rr.(*dns.SOA).Ns
 | 
					
						
							|  |  |  | 	default:
 | 
					
						
							|  |  |  | 		return ""
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | }
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | func setRewrittenRecordValue(rr dns.RR, value string) {
 | 
					
						
							|  |  |  | 	switch rr.Header().Rrtype {
 | 
					
						
							|  |  |  | 	case dns.TypeSRV:
 | 
					
						
							|  |  |  | 		rr.(*dns.SRV).Target = value
 | 
					
						
							|  |  |  | 	case dns.TypeMX:
 | 
					
						
							|  |  |  | 		rr.(*dns.MX).Mx = value
 | 
					
						
							|  |  |  | 	case dns.TypeCNAME:
 | 
					
						
							|  |  |  | 		rr.(*dns.CNAME).Target = value
 | 
					
						
							|  |  |  | 	case dns.TypeNS:
 | 
					
						
							|  |  |  | 		rr.(*dns.NS).Ns = value
 | 
					
						
							|  |  |  | 	case dns.TypeDNAME:
 | 
					
						
							|  |  |  | 		rr.(*dns.DNAME).Target = value
 | 
					
						
							|  |  |  | 	case dns.TypeNAPTR:
 | 
					
						
							|  |  |  | 		rr.(*dns.NAPTR).Replacement = value
 | 
					
						
							|  |  |  | 	case dns.TypeSOA:
 | 
					
						
							|  |  |  | 		rr.(*dns.SOA).Ns = value
 | 
					
						
							|  |  |  | 	}
 | 
					
						
							|  |  |  | }
 |