mirror of
https://github.com/pi-hole/FTL.git
synced 2024-10-26 16:52:18 +02:00
62973a082f
Signed-off-by: DL6ER <dl6er@dl6er.de>
328 lines
9.7 KiB
C
328 lines
9.7 KiB
C
/* Pi-hole: A black hole for Internet advertisements
|
|
* (c) 2020 Pi-hole, LLC (https://pi-hole.net)
|
|
* Network-wide ad blocking via your own hardware.
|
|
*
|
|
* FTL Engine
|
|
* Message table routines
|
|
*
|
|
* This file is copyright under the latest version of the EUPL.
|
|
* Please see LICENSE file for your rights under this license. */
|
|
|
|
#include "../FTL.h"
|
|
#include "message-table.h"
|
|
#include "common.h"
|
|
// logg()
|
|
#include "../log.h"
|
|
// get_group_names()
|
|
#include "gravity-db.h"
|
|
// cli_mode
|
|
#include "../args.h"
|
|
// cleanup()
|
|
#include "../daemon.h"
|
|
// main_pid()
|
|
#include "../signals.h"
|
|
// struct config
|
|
#include "../config.h"
|
|
// get_rate_limit_turnaround()
|
|
#include "../gc.h"
|
|
|
|
static const char *message_types[MAX_MESSAGE] =
|
|
{ "REGEX", "SUBNET", "HOSTNAME", "DNSMASQ_CONFIG", "RATE_LIMIT" };
|
|
|
|
static unsigned char message_blob_types[MAX_MESSAGE][5] =
|
|
{
|
|
{ // REGEX_MESSAGE: The message column contains the regex warning text
|
|
SQLITE_TEXT, // regex type ("blacklist", "whitelist")
|
|
SQLITE_TEXT, // regex text (the erroring regex filter itself)
|
|
SQLITE_INTEGER, // database index of regex (so the dashboard can show a link)
|
|
SQLITE_NULL, // not used
|
|
SQLITE_NULL // not used
|
|
},
|
|
{ // SUBNET_MESSAGE: The message column contains the IP address of the client in question
|
|
SQLITE_INTEGER, // number of matching
|
|
SQLITE_TEXT, // comma-separated list of matching subnets (text representation)
|
|
SQLITE_TEXT, // comma-separated list of matching subnets (database IDs)
|
|
SQLITE_TEXT, // chosen subnet (text representation)
|
|
SQLITE_INTEGER // chosen subnet (database ID)
|
|
},
|
|
{ // HOSTNAME_MESSAGE: The message column contains the IP address of the device
|
|
SQLITE_TEXT, // Obtained host name
|
|
SQLITE_INTEGER, // Position of error in string
|
|
SQLITE_NULL, // not used
|
|
SQLITE_NULL, // not used
|
|
SQLITE_NULL // not used
|
|
},
|
|
{ // DNSMASQ_CONFIG_MESSAGE: The message column contains the full message itself
|
|
SQLITE_NULL, // Not used
|
|
SQLITE_NULL, // Not used
|
|
SQLITE_NULL, // Not used
|
|
SQLITE_NULL, // Not used
|
|
SQLITE_NULL // Not used
|
|
},
|
|
{ // RATE_LIMIT: The message column contains the IP address of the client in question
|
|
SQLITE_INTEGER, // Configured maximum number of queries
|
|
SQLITE_INTEGER, // Configured rate-limiting interval [seconds]
|
|
SQLITE_NULL, // Not used
|
|
SQLITE_NULL, // Not used
|
|
SQLITE_NULL // Not used
|
|
},
|
|
};
|
|
// Create message table in the database
|
|
bool create_message_table(sqlite3 *db)
|
|
{
|
|
// The blob fields can hold arbitrary data. Their type is specified through the type.
|
|
SQL_bool(db, "CREATE TABLE message ( id INTEGER PRIMARY KEY AUTOINCREMENT, "
|
|
"timestamp INTEGER NOT NULL, "
|
|
"type TEXT NOT NULL, "
|
|
"message TEXT NOT NULL, "
|
|
"blob1 BLOB, "
|
|
"blob2 BLOB, "
|
|
"blob3 BLOB, "
|
|
"blob4 BLOB, "
|
|
"blob5 BLOB );");
|
|
|
|
// Update database version to 6
|
|
if(!db_set_FTL_property(db, DB_VERSION, 6))
|
|
{
|
|
logg("create_message_table(): Failed to update database version!");
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
// Flush message table
|
|
bool flush_message_table(void)
|
|
{
|
|
sqlite3 *db;
|
|
// Open database connection
|
|
if((db = dbopen(false)) == NULL)
|
|
{
|
|
logg("flush_message_table() - Failed to open DB");
|
|
return false;
|
|
}
|
|
|
|
// Flush message table
|
|
SQL_bool(db, "DELETE FROM message;");
|
|
|
|
// Close database connection
|
|
dbclose(&db);
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool add_message(enum message_type type,
|
|
const char *message, const int count,...)
|
|
{
|
|
sqlite3 *db;
|
|
// Open database connection
|
|
if((db = dbopen(false)) == NULL)
|
|
{
|
|
logg("add_message() - Failed to open DB");
|
|
return false;
|
|
}
|
|
|
|
// Ensure there are no duplicates when adding host name or rate-limiting messages
|
|
if(type == HOSTNAME_MESSAGE || type == RATE_LIMIT_MESSAGE)
|
|
{
|
|
sqlite3_stmt* stmt = NULL;
|
|
const char *querystr = "DELETE FROM message WHERE type = ?1 AND message = ?2";
|
|
int rc = sqlite3_prepare_v2(db, querystr, -1, &stmt, NULL);
|
|
if( rc != SQLITE_OK ){
|
|
logg("add_message(type=%u, message=%s) - SQL error prepare DELETE: %s",
|
|
type, message, sqlite3_errstr(rc));
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
|
|
// Bind type to prepared statement
|
|
if((rc = sqlite3_bind_text(stmt, 1, message_types[type], -1, SQLITE_STATIC)) != SQLITE_OK)
|
|
{
|
|
logg("add_message(type=%u, message=%s) - Failed to bind type DELETE: %s",
|
|
type, message, sqlite3_errstr(rc));
|
|
sqlite3_reset(stmt);
|
|
sqlite3_finalize(stmt);
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
|
|
// Bind message to prepared statement
|
|
if((rc = sqlite3_bind_text(stmt, 2, message, -1, SQLITE_STATIC)) != SQLITE_OK)
|
|
{
|
|
logg("add_message(type=%u, message=%s) - Failed to bind message DELETE: %s",
|
|
type, message, sqlite3_errstr(rc));
|
|
sqlite3_reset(stmt);
|
|
sqlite3_finalize(stmt);
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
|
|
// Execute and finalize
|
|
if((rc = sqlite3_step(stmt)) != SQLITE_OK && rc != SQLITE_DONE)
|
|
{
|
|
logg("add_message(type=%u, message=%s) - SQL error step DELETE: %s",
|
|
type, message, sqlite3_errstr(rc));
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
sqlite3_clear_bindings(stmt);
|
|
sqlite3_reset(stmt);
|
|
sqlite3_finalize(stmt);
|
|
}
|
|
|
|
// Prepare SQLite statement
|
|
sqlite3_stmt* stmt = NULL;
|
|
const char *querystr = "INSERT INTO message (timestamp,type,message,blob1,blob2,blob3,blob4,blob5) "
|
|
"VALUES ((cast(strftime('%s', 'now') as int)),?,?,?,?,?,?,?);";
|
|
int rc = sqlite3_prepare_v2(db, querystr, -1, &stmt, NULL);
|
|
if( rc != SQLITE_OK )
|
|
{
|
|
logg("add_message(type=%u, message=%s) - SQL error prepare: %s",
|
|
type, message, sqlite3_errstr(rc));
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
|
|
// Bind type to prepared statement
|
|
if((rc = sqlite3_bind_text(stmt, 1, message_types[type], -1, SQLITE_STATIC)) != SQLITE_OK)
|
|
{
|
|
logg("add_message(type=%u, message=%s) - Failed to bind type: %s",
|
|
type, message, sqlite3_errstr(rc));
|
|
sqlite3_reset(stmt);
|
|
sqlite3_finalize(stmt);
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
|
|
// Bind message to prepared statement
|
|
if((rc = sqlite3_bind_text(stmt, 2, message, -1, SQLITE_STATIC)) != SQLITE_OK)
|
|
{
|
|
logg("add_message(type=%u, message=%s) - Failed to bind message: %s",
|
|
type, message, sqlite3_errstr(rc));
|
|
sqlite3_reset(stmt);
|
|
sqlite3_finalize(stmt);
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
|
|
va_list ap;
|
|
va_start(ap, count);
|
|
for (int j = 0; j < count; j++)
|
|
{
|
|
const unsigned char datatype = message_blob_types[type][j];
|
|
switch (datatype)
|
|
{
|
|
case SQLITE_INTEGER:
|
|
rc = sqlite3_bind_int(stmt, 3 + j, va_arg(ap, int));
|
|
break;
|
|
|
|
case SQLITE_TEXT:
|
|
rc = sqlite3_bind_text(stmt, 3 + j, va_arg(ap, char*), -1, SQLITE_STATIC);
|
|
break;
|
|
|
|
case SQLITE_NULL: /* Fall through */
|
|
default:
|
|
rc = sqlite3_bind_null(stmt, 3 + j);
|
|
break;
|
|
}
|
|
|
|
// Bind message to prepared statement
|
|
if(rc != SQLITE_OK)
|
|
{
|
|
logg("add_message(type=%u, message=%s) - Failed to bind argument %u (type %u): %s",
|
|
type, message, 3 + j, datatype, sqlite3_errstr(rc));
|
|
sqlite3_reset(stmt);
|
|
sqlite3_finalize(stmt);
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
}
|
|
va_end(ap);
|
|
|
|
// Step and check if successful
|
|
rc = sqlite3_step(stmt);
|
|
sqlite3_clear_bindings(stmt);
|
|
sqlite3_reset(stmt);
|
|
sqlite3_finalize(stmt);
|
|
|
|
if(rc != SQLITE_DONE)
|
|
{
|
|
logg("Encountered error while trying to store message in long-term database: %s", sqlite3_errstr(rc));
|
|
dbclose(&db);
|
|
return false;
|
|
}
|
|
|
|
// Close database connection
|
|
dbclose(&db);
|
|
|
|
return true;
|
|
}
|
|
|
|
void logg_regex_warning(const char *type, const char *warning, const int dbindex, const char *regex)
|
|
{
|
|
// Only log regex errors/warnings in the main process to prevent errors
|
|
// being added multiple times to the database when a TCP worker
|
|
// (re)compiles a faulty regex
|
|
if(getpid() != main_pid())
|
|
return;
|
|
|
|
// Log to pihole-FTL.log
|
|
logg("REGEX WARNING: Invalid regex %s filter \"%s\": %s",
|
|
type, regex, warning);
|
|
|
|
// Log to database only if not in CLI mode
|
|
if(!cli_mode)
|
|
add_message(REGEX_MESSAGE, warning, 3, type, regex, dbindex);
|
|
}
|
|
|
|
void logg_subnet_warning(const char *ip, const int matching_count, const char *matching_ids,
|
|
const int matching_bits, const char *chosen_match_text,
|
|
const int chosen_match_id)
|
|
{
|
|
// Log to pihole-FTL.log
|
|
logg("SUBNET WARNING: Client %s is managed by %i groups (IDs %s), all describing /%i subnets. "
|
|
"FTL chose the most recent entry %s (ID %i) for this client.",
|
|
ip, matching_count, matching_ids, matching_bits,
|
|
chosen_match_text, chosen_match_id);
|
|
|
|
// Log to database
|
|
char *names = get_client_names_from_ids(matching_ids);
|
|
add_message(SUBNET_MESSAGE, ip, 5, matching_count, names, matching_ids, chosen_match_text, chosen_match_id);
|
|
free(names);
|
|
}
|
|
|
|
void logg_hostname_warning(const char *ip, const char *name, const unsigned int pos)
|
|
{
|
|
// Log to pihole-FTL.log
|
|
logg("HOSTNAME WARNING: Host name of client \"%s\" => \"%s\" contains (at least) one invalid character at position %d",
|
|
ip, name, pos);
|
|
|
|
// Log to database
|
|
add_message(HOSTNAME_MESSAGE, ip, 2, name, (const int)pos);
|
|
}
|
|
|
|
void logg_fatal_dnsmasq_message(const char *message)
|
|
{
|
|
// Log to pihole-FTL.log
|
|
logg("FATAL ERROR in dnsmasq core: %s", message);
|
|
|
|
// Log to database
|
|
add_message(DNSMASQ_CONFIG_MESSAGE, message, 0);
|
|
|
|
// FTL will dies after this point, so we should make sure to clean up
|
|
// behind ourselves
|
|
cleanup(EXIT_FAILURE);
|
|
}
|
|
|
|
void logg_rate_limit_message(const char *clientIP)
|
|
{
|
|
const time_t turnaround = get_rate_limit_turnaround();
|
|
|
|
// Log to pihole-FTL.log
|
|
logg("Rate-limiting %s for %ld second%s",
|
|
clientIP, turnaround, turnaround == 1 ? "" : "s");
|
|
|
|
// Log to database
|
|
add_message(RATE_LIMIT_MESSAGE, clientIP, 2, config.rate_limit.count, config.rate_limit.interval);
|
|
}
|