From: Art Cancro <ajc@citadel.org>
Date: Tue, 25 Sep 2001 03:34:09 +0000 (+0000)
Subject: * Fix for WebCit servers running on port 80: detect Windoze worm-of-the-week
X-Git-Tag: v7.86~6773
X-Git-Url: https://code.citadel.org/?a=commitdiff_plain;h=843c36acbf39d16b0d74d5480aec7e8ef49f4085;p=citadel.git

* Fix for WebCit servers running on port 80: detect Windoze worm-of-the-week
  and bail out without bothering the Citadel server.
---

diff --git a/webcit/ChangeLog b/webcit/ChangeLog
index cc171b84f..004369c9e 100644
--- a/webcit/ChangeLog
+++ b/webcit/ChangeLog
@@ -1,4 +1,8 @@
 $Log$
+Revision 301.7  2001/09/25 03:34:09  ajc
+* Fix for WebCit servers running on port 80: detect Windoze worm-of-the-week
+  and bail out without bothering the Citadel server.
+
 Revision 301.6  2001/08/22 16:38:06  ajc
 * Added the "-c" command line option to generate optional cookies indicating
   the host name of the server.  This makes it easy to put a cluster of WebCit
@@ -624,4 +628,3 @@ Sun Dec  6 19:50:55 EST 1998 Art Cancro <ajc@uncnsrd.mt-kisco.ny.us>
 
 1998-12-03 Nathan Bryant <bryant@cs.usm.maine.edu>
 	* webserver.c: warning fix
-
diff --git a/webcit/context_loop.c b/webcit/context_loop.c
index c8408876d..83448ffbe 100644
--- a/webcit/context_loop.c
+++ b/webcit/context_loop.c
@@ -189,6 +189,22 @@ int lingering_close(int fd)
 
 
 
+/*
+ * Check for bogus requests coming from (for example) brain-dead
+ * Windoze boxes that are infected with the latest worm-of-the-week.
+ * If we detect one of these, bail out without bothering our Citadel
+ * server.
+ */
+int is_bogus(char *http_cmd) {
+
+	if (!strncasecmp(http_cmd, "GET /scripts/root.exe", 21)) return(1);
+	if (!strncasecmp(http_cmd, "GET /c/winnt", 12)) return(2);
+	if (!strncasecmp(http_cmd, "GET /MSADC/", 11)) return(3);
+
+	return(0);	/* probably ok */
+}
+
+
 
 /*
  * This loop gets called once for every HTTP connection made to WebCit.  At
@@ -236,14 +252,17 @@ void context_loop(int sock)
 
 	} while (strlen(buf) > 0);
 
+	strcpy(buf, req->line);
+	fprintf(stderr, "%s\n", buf);
+
+	/* Check for bogus requests */
+	if (is_bogus(buf)) goto bail;
 
 	/*
 	 * If requesting a non-root page, there should already be a cookie
 	 * set.  If there isn't, the client browser has cookies turned off
 	 * (or doesn't support them) and we have to barf & bail.
 	 */
-	strcpy(buf, req->line);
-	fprintf(stderr, "%s\n", buf);
 	if (!strncasecmp(buf, "GET ", 4)) strcpy(buf, &buf[4]);
 	else if (!strncasecmp(buf, "HEAD ", 5)) strcpy(buf, &buf[5]);
 	if (buf[1]==' ') buf[1]=0;
@@ -315,7 +334,7 @@ void context_loop(int sock)
 	pthread_mutex_unlock(&TheSession->SessionMutex);	/* unbind */
 
 	/* Free the request buffer */
-	while (req != NULL) {
+bail:	while (req != NULL) {
 		hptr = req->next;
 		free(req);
 		req = hptr;