开通博客赚积分
发布资源赚积分
分类

源码开发语言/平台
当前位置：首页 > 源码/资料 > Internet/网络编程 > 防火墙与安全工具 > 查看源码
TcpIpdog.cpp
资源名称：FireWall-C++.rar　[点击查看]
上传用户：kklily621
上传日期：2013-06-25
资源大小：252k
文件大小：14k
源码类别：

防火墙与安全工具

开发平台：

Visual C++

TcpIpdog.cpp：源码内容
  1. /*=============================================================================================
  3. 文件： TcpIpDog.cpp
  5. 说明:
  6. ---------------------------------------------------
  7. Winsock 钩子，用来截获 Winsock 调用从而拦截
  8. TCP/IP封包，并做相应处理。
  9. ---------------------------------------------------
  11. 工程： Xfilter 个人防火墙
  12. 作者： 朱雁辉，朱雁冰
  13. 创建日期： 2001/08/21
  14. 网址： http://www.xfilt.com
  15. 电子邮件： xstudio@xfilt.com
  16. 版权所有 (c) 2001-2002 X 工作室
  18. 警告:
  19. ---------------------------------------------------
  20. 本电脑程序受著作权法的保护。未经授权，不能使用
  21. 和修改本软件全部或部分源代码。凡擅自复制、盗用或散
  22. 布此程序或部分程序或者有其它任何越权行为，将遭到民
  23. 事赔偿及刑事的处罚，并将依法以最高刑罚进行追诉。
  25. 凡通过合法途径购买本软件源代码的用户被默认授权
  26. 可以在自己的程序中使用本软件的部分代码，但作者不对
  27. 代码产生的任何后果负责。
  29. 使用了本软件代码的程序只能以可执行文件形式发布，
  30. 未经特别许可，不能将含有本软件源代码的源程序以任何
  31. 形式发布。
  32. ---------------------------------------------------
  33. */
  34. //=============================================================================================
  35. // include header file and global variables
  37. #include "stdafx.h"
  38. #include "TcpIpDog.h"
  39. #include "CheckAcl.h"
  41. #pragma data_seg(".inidata")
  42. int gAclChangeCount = INIT_ACL_CHANGE_COUNT;
  43. int m_iDllCount = 0;
  44. #pragma data_seg()
  46. #pragma bss_seg(".uinidata")
  47. QUERY_SESSION m_QuerySession[MAX_QUERY_SESSION];
  48. #pragma bss_seg()
  50. CCheckAcl m_CheckAcl;
  52. CRITICAL_SECTION gCriticalSection;
  53. WSPPROC_TABLE NextProcTable   ;
  54. TCHAR m_sProcessName[MAX_PATH];
  56. //=============================================================================================
  57. //DllMain Procedure
  59. BOOL WINAPI DllMain(
  60. HINSTANCE hModule, 
  61.     DWORD ul_reason_for_call, 
  62.     LPVOID lpReserved
  63. )
  64. {
  65. if(ul_reason_for_call == DLL_PROCESS_ATTACH)
  66. {
  67.   GetModuleFileName(NULL, m_sProcessName, MAX_PATH);
  68. InitializeCriticalSection(&gCriticalSection);
  70. EnterCriticalSection(&gCriticalSection);
  71. {
  72. m_iDllCount ++;
  74. if(m_iDllCount == 1)
  75. m_CheckAcl.SetWindowsVersion();
  76. }
  77. LeaveCriticalSection(&gCriticalSection);
  79. ODS2(m_sProcessName,_T(" Loading ..."));
  80. }
  81. else if(ul_reason_for_call == DLL_PROCESS_DETACH)
  82. {
  83. EnterCriticalSection(&gCriticalSection);
  84. {
  85. m_iDllCount -- ;
  86. }
  87. LeaveCriticalSection(&gCriticalSection);
  89. ODS2(m_sProcessName,_T(" Exit ..."));
  90. }
  92. return TRUE;
  93. }
  95. //=============================================================================================
  96. //Exported Functions
  98. int WSPAPI WSPStartup(
  99. WORD wVersionRequested,
  100. LPWSPDATA lpWSPData,
  101. LPWSAPROTOCOL_INFOW lpProtocolInfo,
  102. WSPUPCALLTABLE upcallTable,
  103. LPWSPPROC_TABLE lpProcTable
  104. )
  105. {
  106. ODS(_T("WSPStartup..."));
  108. ODS(m_CheckAcl.m_bIsWin9x ? _T("IsWin9x") : _T("IsWinNT or Win2000 ..."));
  109.     
  110. if(!m_CheckAcl.m_bIsWin9x && m_CheckAcl.CheckStartup() == XF_QUERY && !QueryAccess())
  111. return SOCKET_ERROR;
  113. TCHAR sLibraryPath[512];
  114.     LPWSPSTARTUP        WSPStartupFunc      = NULL;
  115. HMODULE hLibraryHandle = NULL;
  116.     INT                 ErrorCode           = 0; 
  118. if (!GetHookProvider(lpProtocolInfo, sLibraryPath)
  119. || (hLibraryHandle = LoadLibrary(sLibraryPath)) == NULL
  120. || (WSPStartupFunc = (LPWSPSTARTUP)GetProcAddress(hLibraryHandle, "WSPStartup")) == NULL
  121. )
  122. return WSAEPROVIDERFAILEDINIT;
  124. if ((ErrorCode = WSPStartupFunc(wVersionRequested, lpWSPData, lpProtocolInfo, upcallTable, lpProcTable)) != ERROR_SUCCESS)
  125. return ErrorCode;
  127.     if( !lpProcTable->lpWSPAccept              ||
  128. !lpProcTable->lpWSPAddressToString     ||        
  129. !lpProcTable->lpWSPAsyncSelect         ||   
  130. !lpProcTable->lpWSPBind                ||   
  131. !lpProcTable->lpWSPCancelBlockingCall  || 
  132.         !lpProcTable->lpWSPCleanup             ||     
  133. !lpProcTable->lpWSPCloseSocket         ||    
  134. !lpProcTable->lpWSPConnect             ||
  135. !lpProcTable->lpWSPDuplicateSocket     ||
  136. !lpProcTable->lpWSPEnumNetworkEvents   ||
  137. !lpProcTable->lpWSPEventSelect         ||
  138. !lpProcTable->lpWSPGetOverlappedResult ||
  139. !lpProcTable->lpWSPGetPeerName         ||
  140. !lpProcTable->lpWSPGetSockName         ||
  141. !lpProcTable->lpWSPGetSockOpt          ||   
  142. !lpProcTable->lpWSPGetQOSByName        ||
  143. !lpProcTable->lpWSPIoctl               ||
  144. !lpProcTable->lpWSPJoinLeaf            ||  
  145. !lpProcTable->lpWSPListen              || 
  146.         !lpProcTable->lpWSPRecv                ||     
  147. !lpProcTable->lpWSPRecvDisconnect      ||     
  148. !lpProcTable->lpWSPRecvFrom            ||     
  149. !lpProcTable->lpWSPSelect              ||   
  150. !lpProcTable->lpWSPSend                ||      
  151. !lpProcTable->lpWSPSendDisconnect      ||      
  152. !lpProcTable->lpWSPSendTo              ||      
  153. !lpProcTable->lpWSPSetSockOpt          ||       
  154. !lpProcTable->lpWSPShutdown            ||      
  155. !lpProcTable->lpWSPSocket              ||       
  156. !lpProcTable->lpWSPStringToAddress )
  157. return WSAEINVALIDPROCTABLE;
  159. EnterCriticalSection(&gCriticalSection);
  161. NextProcTable = *lpProcTable;
  163. lpProcTable->lpWSPSocket = WSPSocket;
  164. lpProcTable->lpWSPCloseSocket = WSPCloseSocket;
  165. lpProcTable->lpWSPConnect = WSPConnect;
  166. lpProcTable->lpWSPAccept = WSPAccept;
  167. lpProcTable->lpWSPSend = WSPSend;
  168. lpProcTable->lpWSPSendTo = WSPSendTo;
  169. lpProcTable->lpWSPRecv = WSPRecv;
  170. lpProcTable->lpWSPRecvFrom = WSPRecvFrom;
  172. LeaveCriticalSection(&gCriticalSection);
  174. return 0;
  175. }
  177. int WINAPI XfIoControl(
  178. int iControlType, 
  179. XFILTER_IO_CONTROL *ioControl
  180. )
  181. {
  182. if(iControlType == IO_CONTROL_SET_WORK_MODE)
  183. return CCheckAcl::SetWorkMode(ioControl->iWorkMode);
  185. else if(iControlType == IO_CONTROL_GET_WORK_MODE)
  186. return CCheckAcl::m_iWorkMode;
  188. else if(iControlType == IO_CONTROL_SET_ACL)
  189. return CCheckAcl::SetAcl(ioControl->AclFile);
  191. else if(iControlType == IO_CONTROL_GET_ACL_CHANGE_COUNT)
  192. return gAclChangeCount;
  194. else if(iControlType == IO_CONTROL_SET_GUI_INSTANCE)
  195. {
  196. EnterCriticalSection(&gCriticalSection);
  197. {
  198. CCheckAcl::m_GuiHwnd = ioControl->hwnd;
  199. _tcscpy(CCheckAcl::m_sGuiPathName, m_sProcessName);
  200. }
  201. LeaveCriticalSection(&gCriticalSection);
  202. }
  204. else if(iControlType == IO_CONTROL_GET_SESSION)
  205. {
  206. EnterCriticalSection(&gCriticalSection);
  207. {
  208. *ioControl->session = CCheckAcl::m_SessionBuf[ioControl->isession];
  209. CCheckAcl::m_SessionBuf[ioControl->isession].s = 0;
  210. }
  211. LeaveCriticalSection(&gCriticalSection);
  212. }
  214. else if(iControlType == IO_CONTROL_GET_QUERY_SESSION)
  215. _tcscpy(ioControl->sPathName, m_QuerySession[ioControl->isession].sPathName);
  217. else if(iControlType == IO_CONTROL_SET_QUERY_SESSION)
  218. {
  219. EnterCriticalSection(&gCriticalSection);
  220. {
  221. m_QuerySession[ioControl->isession].status = 0;
  222. }
  223. LeaveCriticalSection(&gCriticalSection);
  224. }
  226. return XERR_SUCCESS;
  227. }
  229. //=============================================================================================
  230. //Socket Private functions
  232. BOOL QueryAccess()
  233. {
  234. ODS(_T("Query Access ..."));
  236. int i;
  238. for(i = 0; i < MAX_QUERY_SESSION; i++)
  239. {
  240. if(m_QuerySession[i].status == 1 
  241. && _tcscpy(m_QuerySession[i].sPathName, m_sProcessName) == 0)
  242. {
  243. while(m_QuerySession[i].status == 1)
  244. {
  245. static int sec = 0;
  246. sec ++;
  247. if(sec > 6000)
  248. return FALSE;
  249. Sleep(100);
  250. }
  251. return TRUE;
  252. }
  253. }
  255. for(i = 0; i < MAX_QUERY_SESSION; i++)
  256. {
  257. if(m_QuerySession[i].status == 0)
  258. {
  259. EnterCriticalSection(&gCriticalSection);
  260. {
  261. m_QuerySession[i].status = 1;
  262. _tcscpy(m_QuerySession[i].sPathName, m_sProcessName);
  263. }
  264. LeaveCriticalSection(&gCriticalSection);
  266. if(!::PostMessage(CCheckAcl::m_GuiHwnd, WM_QUERY_ACL_NOTIFY, i, NULL))
  267. return FALSE;
  269. ODS(_T("Query Access PostMessage ..."));
  271. while(m_QuerySession[i].status == 1)
  272. {
  273. static int sec = 0;
  274. sec ++;
  275. if(sec > 600)
  276. return FALSE;
  277. Sleep(1000);
  278. }
  280. return TRUE;
  281. }
  282. }
  284. if(i >= MAX_QUERY_SESSION)
  285. return FALSE;
  287. return TRUE;
  288. }
  290. BOOL GetHookProvider(
  291. IN WSAPROTOCOL_INFOW *pProtocolInfo, 
  292. OUT TCHAR *sPathName
  293. )
  294. {
  295. TCHAR sItem[21];
  296. GetRightEntryIdItem(pProtocolInfo, sItem);
  298. HKEY hSubkey;
  299. DWORD ulDateLenth = MAX_PATH;
  300. TCHAR sTemp[MAX_PATH];
  303. if (RegOpenKeyEx(HKEY_LOCAL_MACHINE, REG_INSTALL_KEY, 0, KEY_ALL_ACCESS, &hSubkey) != ERROR_SUCCESS)
  304. return FALSE;
  306. if (RegQueryValueEx(hSubkey, sItem, 0, NULL, (BYTE*)sTemp, &ulDateLenth)
  307. || ExpandEnvironmentStrings(sTemp, sPathName, ulDateLenth) == 0)
  308. return FALSE;
  310. if(sPathName[0] == '' && sTemp[0] != '')
  311. _tcscpy(sPathName, sTemp);
  313. RegCloseKey(hSubkey);
  315. return TRUE;
  316. }
  318. void GetRightEntryIdItem(
  319. IN WSAPROTOCOL_INFOW *pProtocolInfo, 
  320. OUT TCHAR *sItem
  321. )
  322. {
  323. if(pProtocolInfo->ProtocolChain.ChainLen <= 1)
  324. _stprintf(sItem, _T("%u"), pProtocolInfo->dwCatalogEntryId);
  325. else
  326. _stprintf(sItem, _T("%u"), 
  327. pProtocolInfo->ProtocolChain.ChainEntries[pProtocolInfo->ProtocolChain.ChainLen - 1]);
  328. }
  330. void XfShutdown(SOCKET s)
  331. {
  332. int iError;
  333. if(NextProcTable.lpWSPShutdown(s, SD_BOTH, &iError) != 0)
  334. WSASetLastError(iError);
  335. }
  337. //=============================================================================================
  338. //Winsock 2 service provider hook functions
  340. SOCKET WSPAPI WSPSocket(
  341. int af,                               
  342. int type,                             
  343. int protocol,                         
  344. LPWSAPROTOCOL_INFOW lpProtocolInfo,   
  345. GROUP g,                              
  346. DWORD dwFlags,                        
  347. LPINT lpErrno
  348. )
  349. {
  350. ODS(_T("XFILTER.DLL: WSPSocket ..."));
  352. SOCKET s = NextProcTable.lpWSPSocket(af, type, protocol, lpProtocolInfo, g, dwFlags, lpErrno);
  354. if(s == INVALID_SOCKET)
  355. return s;
  357. if (af == FROM_PROTOCOL_INFO)
  358. af = lpProtocolInfo->iAddressFamily;
  360. if (type == FROM_PROTOCOL_INFO)
  361. type = lpProtocolInfo->iSocketType;
  363. if (protocol == FROM_PROTOCOL_INFO)
  364. protocol = lpProtocolInfo->iProtocol;
  366. m_CheckAcl.CheckSocket(s, af, type, protocol);
  368. return s;
  369. }
  371. int WSPAPI WSPCloseSocket(
  372. SOCKET s,
  373. LPINT lpErrno
  374. )
  375. {
  376. ODS(_T("XFILTER.DLL: WSPCloseSocket ..."));
  378. m_CheckAcl.CheckCloseSocket(s);
  380. return NextProcTable.lpWSPCloseSocket(s, lpErrno);
  381. }
  383. int WSPAPI WSPConnect(
  384. SOCKET s,
  385. const struct sockaddr FAR * name,
  386. int namelen,
  387. LPWSABUF lpCallerData,
  388. LPWSABUF lpCalleeData,
  389. LPQOS lpSQOS,
  390. LPQOS lpGQOS,
  391. LPINT lpErrno
  392. )
  393. {
  394. ODS(_T("XFILTER.DLL: WSPConnect ..."));
  396. if(m_CheckAcl.CheckConnect(s, name, namelen) != XF_PASS)
  397. {
  398. ODS2(_T("Deny the application "), m_sProcessName);
  399. *lpErrno = WSAECONNREFUSED;
  400. return SOCKET_ERROR;
  401. }
  402.  
  403. return NextProcTable.lpWSPConnect(s, name, namelen, lpCallerData, lpCalleeData, lpSQOS, lpGQOS, lpErrno);
  404. }
  406. SOCKET WSPAPI WSPAccept(
  407. SOCKET s,
  408. struct sockaddr FAR *addr,
  409. LPINT addrlen,
  410. LPCONDITIONPROC lpfnCondition,
  411. DWORD dwCallbackData,
  412. LPINT lpErrno
  413. )
  414. {
  415. ODS(_T("XFILTER.DLL: WSPAccept ..."));
  417. SOCKET news = NextProcTable.lpWSPAccept(s, addr, addrlen, lpfnCondition, dwCallbackData, lpErrno);
  419. if (news != INVALID_SOCKET && m_CheckAcl.CheckAccept(s, news) != XF_PASS)
  420. {
  421. int iError;
  422. if(NextProcTable.lpWSPCloseSocket(news, &iError) != 0)
  423. WSASetLastError(iError);
  424. }
  426. return news;
  427. }
  429. int WSPAPI WSPSend(
  430. SOCKET s,
  431. LPWSABUF lpBuffers,
  432. DWORD dwBufferCount,
  433. LPDWORD lpNumberOfBytesSent,
  434. DWORD dwFlags,
  435. LPWSAOVERLAPPED lpOverlapped,
  436. LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine,
  437. LPWSATHREADID lpThreadId,
  438. LPINT lpErrno
  439. )
  440. {
  441. ODS(_T("XFILTER.DLL: WSPSend ..."));
  443. if (m_CheckAcl.CheckSend(s, lpBuffers[0].buf, lpBuffers[0].len, lpNumberOfBytesSent) != XF_PASS)
  444. {
  445. XfShutdown(s);
  446. *lpErrno = WSAECONNABORTED;
  447. return SOCKET_ERROR;
  448. }
  450. return NextProcTable.lpWSPSend(s, lpBuffers, dwBufferCount, lpNumberOfBytesSent, dwFlags, lpOverlapped
  451. , lpCompletionRoutine, lpThreadId, lpErrno);
  453. }
  455. int WSPAPI WSPSendTo(
  456. SOCKET s,
  457. LPWSABUF lpBuffers,
  458. DWORD dwBufferCount,
  459. LPDWORD lpNumberOfBytesSent,
  460. DWORD dwFlags,
  461. const struct sockaddr FAR * lpTo,
  462. int iTolen,
  463. LPWSAOVERLAPPED lpOverlapped,
  464. LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine,
  465. LPWSATHREADID lpThreadId,
  466. LPINT lpErrno
  467. )
  468. {
  469. ODS(_T("XFILTER.DLL: WSPSendTo ..."));
  471. if (m_CheckAcl.CheckSendTo(s, lpTo, lpBuffers[0].buf, lpBuffers[0].len, lpNumberOfBytesSent) != XF_PASS)
  472. {
  473. XfShutdown(s);
  474. *lpErrno = WSAECONNABORTED;
  475. return SOCKET_ERROR;
  476. }
  478. return NextProcTable.lpWSPSendTo(s, lpBuffers, dwBufferCount, lpNumberOfBytesSent, dwFlags, lpTo
  479. , iTolen, lpOverlapped, lpCompletionRoutine, lpThreadId, lpErrno);
  481. }
  483. int WSPAPI WSPRecv(
  484. SOCKET s,
  485. LPWSABUF lpBuffers,
  486. DWORD dwBufferCount,
  487. LPDWORD lpNumberOfBytesRecvd,
  488. LPDWORD lpFlags,
  489. LPWSAOVERLAPPED lpOverlapped,
  490. LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine,
  491. LPWSATHREADID lpThreadId,
  492. LPINT lpErrno
  493. )
  494. {
  495. ODS(_T("XFILTER.DLL: WSPRecv ..."));
  497. int iRet;
  499. if(iRet = NextProcTable.lpWSPRecv(s, lpBuffers, 1, lpNumberOfBytesRecvd, lpFlags, lpOverlapped
  500. , lpCompletionRoutine, lpThreadId, lpErrno) == SOCKET_ERROR)
  501. return iRet;
  503. if (m_CheckAcl.CheckRecv(s, lpBuffers[0].buf, lpBuffers[0].len, lpNumberOfBytesRecvd) != XF_PASS)
  504. {
  505. XfShutdown(s);
  506. *lpErrno = WSAECONNABORTED;
  507. return SOCKET_ERROR;
  508. }
  510. return iRet;
  511. }
  513. int WSPAPI WSPRecvFrom (
  514. SOCKET s,
  515. LPWSABUF lpBuffers,
  516. DWORD dwBufferCount,
  517. LPDWORD lpNumberOfBytesRecvd,
  518. LPDWORD lpFlags,
  519. struct sockaddr FAR * lpFrom,
  520. LPINT lpFromlen,
  521. LPWSAOVERLAPPED lpOverlapped,
  522. LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine,
  523. LPWSATHREADID lpThreadId,
  524. LPINT lpErrno
  525. )
  526. {
  527. ODS(_T("XFILTER.DLL: WSPRecvFrom ..."));
  529. int iRet;
  531. if(iRet = NextProcTable.lpWSPRecvFrom(s, lpBuffers, 1, lpNumberOfBytesRecvd, lpFlags, lpFrom
  532. , lpFromlen, lpOverlapped, lpCompletionRoutine, lpThreadId, lpErrno) == SOCKET_ERROR)
  533. return iRet;
  535. if (m_CheckAcl.CheckRecvFrom(s, lpFrom, lpBuffers[0].buf, lpBuffers[0].len, lpNumberOfBytesRecvd) != XF_PASS)
  536. {
  537. XfShutdown(s);
  538. *lpErrno = WSAECONNABORTED;
  539. return SOCKET_ERROR;
  540. }
  542. return iRet;
  543. }