mirror of
https://git.teknik.io/Teknikode/Teknik.git
synced 2023-08-02 14:16:22 +02:00
Added IP and Referrer blacklists.
This commit is contained in:
parent
8827992935
commit
bea394cbaf
0
Teknik/App_Data/ipBlacklist.txt
Normal file
0
Teknik/App_Data/ipBlacklist.txt
Normal file
1
Teknik/App_Data/referrerBlacklist.txt
Normal file
1
Teknik/App_Data/referrerBlacklist.txt
Normal file
@ -0,0 +1 @@
|
||||
xn--cckl0itdpc9763ahlyc.tv
|
178
Teknik/Modules/BlacklistModule.cs
Normal file
178
Teknik/Modules/BlacklistModule.cs
Normal file
@ -0,0 +1,178 @@
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Collections.Specialized;
|
||||
using System.IO;
|
||||
using System.Linq;
|
||||
using System.ServiceModel.Channels;
|
||||
using System.Web;
|
||||
using System.Web.Caching;
|
||||
using System.Web.Helpers;
|
||||
using System.Web.Mvc;
|
||||
using System.Web.Routing;
|
||||
using Teknik.Areas.Error.Controllers;
|
||||
using Teknik.Configuration;
|
||||
|
||||
namespace Teknik.Modules
|
||||
{
|
||||
public class BlacklistModule : IHttpModule
|
||||
{
|
||||
|
||||
private EventHandler onBeginRequest;
|
||||
|
||||
public BlacklistModule()
|
||||
{
|
||||
onBeginRequest = new EventHandler(this.HandleBeginRequest);
|
||||
}
|
||||
|
||||
void IHttpModule.Dispose()
|
||||
{
|
||||
}
|
||||
|
||||
void IHttpModule.Init(HttpApplication context)
|
||||
{
|
||||
context.BeginRequest += onBeginRequest;
|
||||
}
|
||||
|
||||
#region Referrer Info
|
||||
private const string BLOCKEDREFERRERKEY = "BlockedReferrer";
|
||||
private static string referrerFileName = null;
|
||||
private static object referrerFileNameObj = new object();
|
||||
|
||||
public static string GetReferrerFilePath()
|
||||
{
|
||||
if (referrerFileName != null)
|
||||
return referrerFileName;
|
||||
lock (referrerFileNameObj)
|
||||
{
|
||||
if (referrerFileName == null)
|
||||
{
|
||||
Config config = Config.Load();
|
||||
referrerFileName = config.ReferrerBlacklistFile;
|
||||
}
|
||||
}
|
||||
|
||||
return referrerFileName;
|
||||
}
|
||||
#endregion
|
||||
|
||||
#region IP Info
|
||||
private const string BLOCKEDIPKEY = "BlockedIP";
|
||||
private static string ipFileName = null;
|
||||
private static object ipFileNameObj = new object();
|
||||
|
||||
public static string GetIPFilePath()
|
||||
{
|
||||
if (ipFileName != null)
|
||||
return ipFileName;
|
||||
lock (ipFileNameObj)
|
||||
{
|
||||
if (ipFileName == null)
|
||||
{
|
||||
Config config = Config.Load();
|
||||
ipFileName = config.IPBlacklistFile;
|
||||
}
|
||||
}
|
||||
|
||||
return ipFileName;
|
||||
}
|
||||
#endregion
|
||||
|
||||
public static StringDictionary GetFileData(HttpContext context, string key, Func<string> fn)
|
||||
{
|
||||
StringDictionary data = (StringDictionary)context.Cache[key];
|
||||
if (data == null)
|
||||
{
|
||||
string filePath = fn();
|
||||
data = GetFileLines(filePath);
|
||||
context.Cache.Insert(key, data, new CacheDependency(filePath));
|
||||
}
|
||||
|
||||
return data;
|
||||
}
|
||||
|
||||
public static StringDictionary GetFileLines(string configPath)
|
||||
{
|
||||
StringDictionary retval = new StringDictionary();
|
||||
if (File.Exists(configPath))
|
||||
{
|
||||
using (StreamReader sr = new StreamReader(configPath))
|
||||
{
|
||||
String line;
|
||||
while ((line = sr.ReadLine()) != null)
|
||||
{
|
||||
line = line.Trim();
|
||||
if (line.Length != 0)
|
||||
{
|
||||
retval.Add(line, null);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return retval;
|
||||
}
|
||||
|
||||
private void HandleBeginRequest(object sender, EventArgs evargs)
|
||||
{
|
||||
HttpApplication app = sender as HttpApplication;
|
||||
|
||||
if (app != null)
|
||||
{
|
||||
bool blocked = false;
|
||||
string blockReason = string.Empty;
|
||||
|
||||
#region Detect Blacklisted IPs
|
||||
if (!blocked)
|
||||
{
|
||||
string IPAddr = app.Context.Request.ServerVariables["REMOTE_ADDR"];
|
||||
if (!string.IsNullOrEmpty(IPAddr))
|
||||
{
|
||||
StringDictionary badIPs = GetFileData(app.Context, BLOCKEDIPKEY, GetIPFilePath);
|
||||
|
||||
blocked |= (badIPs != null && badIPs.ContainsKey(IPAddr));
|
||||
blockReason = $"This IP address ({IPAddr}) has been blacklisted. If you feel this is in error, please contact support@teknik.io for assistance.";
|
||||
}
|
||||
}
|
||||
#endregion
|
||||
|
||||
#region Detect Blacklisted Referrers
|
||||
if (!blocked)
|
||||
{
|
||||
string referrer = app.Context.Request.UrlReferrer?.Host;
|
||||
if (!string.IsNullOrEmpty(referrer))
|
||||
{
|
||||
StringDictionary badReferrers = GetFileData(app.Context, BLOCKEDREFERRERKEY, GetReferrerFilePath);
|
||||
|
||||
blocked |= (badReferrers != null && badReferrers.ContainsKey(referrer));
|
||||
blockReason = $"This referrer ({referrer}) has been blacklisted. If you feel this is in error, please contact support@teknik.io for assistance.";
|
||||
}
|
||||
}
|
||||
#endregion
|
||||
|
||||
if (blocked)
|
||||
{
|
||||
// Clear the response
|
||||
app.Context.Response.Clear();
|
||||
|
||||
RouteData routeData = new RouteData();
|
||||
routeData.DataTokens.Add("namespaces", new[] { typeof(ErrorController).Namespace });
|
||||
routeData.DataTokens.Add("area", "Error");
|
||||
routeData.Values.Add("controller", "Error");
|
||||
routeData.Values.Add("scheme", "https");
|
||||
routeData.Values.Add("action", "Http403");
|
||||
|
||||
// Clear the error on server.
|
||||
app.Context.Server.ClearError();
|
||||
|
||||
// Avoid IIS7 getting in the middle
|
||||
app.Context.Response.TrySkipIisCustomErrors = true;
|
||||
|
||||
string jsonResult = Json.Encode(new { error = new { type = "Blacklist", message = blockReason } });
|
||||
app.Context.Response.Write(jsonResult);
|
||||
app.Context.Response.End();
|
||||
return;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
@ -29,8 +29,6 @@ namespace Teknik.Modules
|
||||
string username = string.Empty;
|
||||
|
||||
bool hasAuthToken = false;
|
||||
if (context.Request != null)
|
||||
{
|
||||
if (context.Request.Headers.HasKeys())
|
||||
{
|
||||
string auth = context.Request.Headers["Authorization"];
|
||||
@ -43,6 +41,7 @@ namespace Teknik.Modules
|
||||
{
|
||||
type = parts[0].ToLower();
|
||||
}
|
||||
|
||||
if (parts.Length > 1)
|
||||
{
|
||||
value = parts[1];
|
||||
@ -65,6 +64,7 @@ namespace Teknik.Modules
|
||||
// Set the username
|
||||
username = authCreds.Key;
|
||||
}
|
||||
|
||||
break;
|
||||
default:
|
||||
break;
|
||||
@ -72,7 +72,6 @@ namespace Teknik.Modules
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Check if they have a Forms Auth cookie
|
||||
if (FormsAuthentication.CookiesSupported == true && !hasAuthToken)
|
||||
|
@ -321,6 +321,7 @@
|
||||
<Compile Include="Areas\Vault\ViewModels\VaultItemViewModel.cs" />
|
||||
<Compile Include="Attributes\TeknikAuthorizeAttribute.cs" />
|
||||
<Compile Include="Hubs\IRCClientHub.cs" />
|
||||
<Compile Include="Modules\BlacklistModule.cs" />
|
||||
<Compile Include="Modules\UserAuthModule.cs" />
|
||||
<Compile Include="Security\ITeknikPrincipal.cs" />
|
||||
<Compile Include="Security\TeknikPrincipal.cs" />
|
||||
@ -395,6 +396,8 @@
|
||||
<Compile Include="BaseViewPage.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Content Include="App_Data\ipBlacklist.txt" />
|
||||
<Content Include="App_Data\referrerBlacklist.txt" />
|
||||
<Content Include="App_Data\reservedUsernames.txt">
|
||||
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
|
||||
</Content>
|
||||
|
@ -56,6 +56,7 @@
|
||||
<add name="FormsAuthentication" type="System.Web.Security.FormsAuthenticationModule" />
|
||||
<add name="PerfModule" type="Teknik.Modules.PerformanceMonitorModule, Teknik" />
|
||||
<add name="UserAuthModule" type="Teknik.Modules.UserAuthModule, Teknik" />
|
||||
<add name="BlacklistModule" type="Teknik.Modules.BlacklistModule, Teknik" />
|
||||
<remove name="UrlRoutingModule-4.0" />
|
||||
<add name="UrlRoutingModule-4.0" type="System.Web.Routing.UrlRoutingModule" preCondition="" />
|
||||
</modules>
|
||||
|
@ -1,4 +1,4 @@
|
||||
using System;
|
||||
using System;
|
||||
using System.IO;
|
||||
using System.Threading;
|
||||
using Newtonsoft.Json;
|
||||
@ -29,6 +29,8 @@ namespace Teknik.Configuration
|
||||
private string _Salt1;
|
||||
private string _Salt2;
|
||||
private string _CdnHost;
|
||||
private string _IPBlacklistFile;
|
||||
private string _ReferrerBlacklistFile;
|
||||
private UserConfig _UserConfig;
|
||||
private ContactConfig _ContactConfig;
|
||||
private EmailConfig _EmailConfig;
|
||||
@ -61,6 +63,8 @@ namespace Teknik.Configuration
|
||||
public string Salt1 { get { return _Salt1; } set { _Salt1 = value; } }
|
||||
public string Salt2 { get { return _Salt2; } set { _Salt2 = value; } }
|
||||
public string CdnHost { get { return _CdnHost; } set { _CdnHost = value; } }
|
||||
public string IPBlacklistFile { get { return _IPBlacklistFile;} set { _IPBlacklistFile = value; }}
|
||||
public string ReferrerBlacklistFile { get { return _ReferrerBlacklistFile;} set { _ReferrerBlacklistFile = value; }}
|
||||
|
||||
// User Configuration
|
||||
public UserConfig UserConfig { get { return _UserConfig; } set { _UserConfig = value; } }
|
||||
@ -135,6 +139,8 @@ namespace Teknik.Configuration
|
||||
Salt1 = string.Empty;
|
||||
Salt2 = string.Empty;
|
||||
CdnHost = string.Empty;
|
||||
IPBlacklistFile = string.Empty;
|
||||
ReferrerBlacklistFile = string.Empty;
|
||||
UserConfig = new UserConfig();
|
||||
EmailConfig = new EmailConfig();
|
||||
ContactConfig = new ContactConfig();
|
||||
|
Loading…
Reference in New Issue
Block a user