1 |
dpavlin |
122 |
package dnsd; |
2 |
|
|
|
3 |
|
|
use warnings; |
4 |
|
|
use strict; |
5 |
|
|
|
6 |
|
|
use Net::DNS::Nameserver; |
7 |
dpavlin |
125 |
use Net::DNS::Resolver; |
8 |
dpavlin |
122 |
use Data::Dump qw/dump/; |
9 |
dpavlin |
207 |
use CouchDB; |
10 |
dpavlin |
122 |
|
11 |
dpavlin |
125 |
use server; |
12 |
|
|
our $debug = server::debug; |
13 |
|
|
|
14 |
|
|
my $res = Net::DNS::Resolver->new( |
15 |
|
|
# nameserver => [ '10.60.0.1' ], |
16 |
|
|
recurse => 1, |
17 |
|
|
debug => $debug, |
18 |
|
|
); |
19 |
|
|
|
20 |
dpavlin |
150 |
our $ptr_cache; |
21 |
|
|
sub name_ip { |
22 |
|
|
my ( $name, $ip ) = @_; |
23 |
|
|
$ptr_cache->{ join('.', reverse split(/\./, $ip)) } = $name; |
24 |
|
|
return $ip; |
25 |
|
|
} |
26 |
|
|
|
27 |
dpavlin |
122 |
sub reply_handler { |
28 |
|
|
my ($qname, $qclass, $qtype, $peerhost,$query,$conn) = @_; |
29 |
|
|
my ($rcode, @ans, @auth, @add); |
30 |
|
|
|
31 |
dpavlin |
128 |
server->refresh; |
32 |
dpavlin |
150 |
$debug = server::debug; |
33 |
dpavlin |
128 |
|
34 |
dpavlin |
207 |
CouchDB::audit( 'request', { |
35 |
|
|
qname => $qname, |
36 |
|
|
qclass => $qclass, |
37 |
|
|
qtype => $qtype, |
38 |
|
|
peerhost => $peerhost, |
39 |
|
|
sockhost => $conn->{"sockhost"} |
40 |
|
|
}); |
41 |
|
|
|
42 |
dpavlin |
150 |
$query->print if $debug; |
43 |
dpavlin |
122 |
|
44 |
dpavlin |
150 |
my $local = $1 if $qname =~ m{^(.+)\.\Q$server::domain_name\E$}; |
45 |
|
|
$local = $qname if $qname !~ m{\.}; |
46 |
|
|
|
47 |
|
|
my $ttl = 3600; |
48 |
|
|
|
49 |
dpavlin |
211 |
my $audit = { source => 'unknown' }; |
50 |
|
|
|
51 |
dpavlin |
150 |
if ( $local ) { |
52 |
|
|
warn "local[$local] $qname $qtype"; |
53 |
|
|
$rcode = "NOERROR"; |
54 |
|
|
my $rdata; |
55 |
|
|
if ( $qtype eq "A" && $local eq "server" ) { |
56 |
dpavlin |
152 |
$rdata = name_ip( $local, $server::ip ); |
57 |
dpavlin |
211 |
$audit->{source} = 'local'; |
58 |
dpavlin |
148 |
} else { |
59 |
|
|
$rcode = "NXDOMAIN"; |
60 |
|
|
} |
61 |
dpavlin |
122 |
|
62 |
dpavlin |
150 |
push @ans, Net::DNS::RR->new("$qname $ttl $qclass $qtype $rdata") if $ttl; |
63 |
|
|
|
64 |
|
|
} elsif ( $qtype eq 'PTR' && $qname =~ m{^([0-9\.]*)\.in-addr\.arpa$} ) { |
65 |
|
|
if ( my $rdata = $ptr_cache->{$1} ) { |
66 |
|
|
$rdata .= '.' . $server::domain_name; |
67 |
|
|
push @ans, Net::DNS::RR->new("$qname $ttl $qclass $qtype $rdata"); |
68 |
dpavlin |
211 |
$audit->{source} = 'PTR'; |
69 |
dpavlin |
150 |
} else { |
70 |
|
|
warn "## ",dump( $ptr_cache ); |
71 |
|
|
$rcode = "NXDOMAIN"; |
72 |
|
|
} |
73 |
dpavlin |
125 |
} elsif ( my $packet = $res->query( $qname, $qtype ) ) { |
74 |
|
|
|
75 |
dpavlin |
211 |
$audit->{source} = 'upstream'; |
76 |
dpavlin |
125 |
$packet->print; |
77 |
|
|
push @ans, $_ foreach $packet->answer; |
78 |
|
|
$rcode = "NOERROR"; |
79 |
|
|
|
80 |
|
|
} else { |
81 |
|
|
# not found |
82 |
|
|
$rcode = "NXDOMAIN"; |
83 |
dpavlin |
122 |
} |
84 |
|
|
|
85 |
dpavlin |
148 |
warn "rcode: $rcode ",dump( @ans ); |
86 |
|
|
|
87 |
dpavlin |
211 |
$audit->{rcode} = $rcode; |
88 |
dpavlin |
223 |
$audit->{ans} = [ map { |
89 |
|
|
my $data; |
90 |
|
|
foreach my $n ( keys %$_ ) { |
91 |
|
|
$data->{$n} = $_->{$n}; |
92 |
|
|
} |
93 |
|
|
$data; |
94 |
|
|
} @ans ]; |
95 |
dpavlin |
207 |
|
96 |
dpavlin |
211 |
CouchDB::audit( 'response', $audit ); |
97 |
|
|
|
98 |
dpavlin |
122 |
# mark the answer as authoritive (by setting the 'aa' flag |
99 |
|
|
return ($rcode, \@ans, \@auth, \@add, { aa => 1 }); |
100 |
|
|
} |
101 |
|
|
|
102 |
|
|
sub start { |
103 |
|
|
my $ns = Net::DNS::Nameserver->new( |
104 |
|
|
LocalPort => 53, |
105 |
|
|
ReplyHandler => \&reply_handler, |
106 |
dpavlin |
125 |
Verbose => $debug, |
107 |
dpavlin |
122 |
) || die "couldn't create nameserver object\n"; |
108 |
|
|
|
109 |
dpavlin |
232 |
CouchDB::audit('start', { port => 53, domain_name => $server::domain_name }); |
110 |
dpavlin |
148 |
warn "DNS $server::domain_name"; |
111 |
|
|
|
112 |
dpavlin |
122 |
$ns->main_loop; |
113 |
|
|
} |
114 |
|
|
|
115 |
dpavlin |
148 |
1; |