1 /*************************************************
2 * fakens - A Fake Nameserver Program *
3 *************************************************/
5 /* This program exists to support the testing of DNS handling code in Exim. It
6 avoids the need to install special zones in a real nameserver. When Exim is
7 running in its (new) test harness, DNS lookups are first passed to this program
8 instead of to the real resolver. (With a few exceptions - see the discussion in
9 the test suite's README file.) The program is also passed the name of the Exim
10 spool directory; it expects to find its "zone files" in ../dnszones relative to
11 that directory. Note that there is little checking in this program. The fake
12 zone files are assumed to be syntactically valid.
14 The zones that are handled are found by scanning the dnszones directory. A file
15 whose name is of the form db.ip4.x is a zone file for .x.in-addr.arpa; a file
16 whose name is of the form db.ip6.x is a zone file for .x.ip6.arpa; a file of
17 the form db.anything.else is a zone file for .anything.else. A file of the form
18 qualify.x.y specifies the domain that is used to qualify single-component
19 names, except for the name "dontqualify".
21 The arguments to the program are:
23 the name of the Exim spool directory
24 the domain name that is being sought
25 the DNS record type that is being sought
27 The output from the program is written to stdout. It is supposed to be in
28 exactly the same format as a traditional namserver response (see RFC 1035) so
29 that Exim can process it as normal. At present, no compression is used.
30 Error messages are written to stderr.
32 The return codes from the program are zero for success, and otherwise the
33 values that are set in h_errno after a failing call to the normal resolver:
35 1 HOST_NOT_FOUND host not found (authoritative)
36 2 TRY_AGAIN server failure
37 3 NO_RECOVERY non-recoverable error
38 4 NO_DATA valid name, no data of requested type
40 In a real nameserver, TRY_AGAIN is also used for a non-authoritative not found,
41 but it is not used for that here. There is also one extra return code:
43 5 PASS_ON requests Exim to call res_search()
45 This is used for zones that fakens does not recognize. It is also used if a
46 line in the zone file contains exactly this:
50 and the domain is not found. It converts the the result to PASS_ON instead of
53 Any DNS record line in a zone file can be prefixed with "DNSSEC" and
54 at least one space; if all the records found by a lookup are marked
55 as such then the response will have the "AD" bit set. */
64 #include <arpa/nameser.h>
65 #include <sys/types.h>
73 typedef unsigned char uschar;
76 #define CCS (const char *)
77 #define US (unsigned char *)
79 #define Ustrcat(s,t) strcat(CS(s),CCS(t))
80 #define Ustrchr(s,n) US strchr(CCS(s),n)
81 #define Ustrcmp(s,t) strcmp(CCS(s),CCS(t))
82 #define Ustrcpy(s,t) strcpy(CS(s),CCS(t))
83 #define Ustrlen(s) (int)strlen(CCS(s))
84 #define Ustrncmp(s,t,n) strncmp(CCS(s),CCS(t),n)
85 #define Ustrncpy(s,t,n) strncpy(CS(s),CCS(t),n)
87 typedef struct zoneitem {
92 typedef struct tlist {
97 /* On some (older?) operating systems, the standard ns_t_xxx definitions are
98 not available, and only the older T_xxx ones exist in nameser.h. If ns_t_a is
99 not defined, assume we are in this state. A really old system might not even
100 know about AAAA and SRV at all. */
104 # define ns_t_ns T_NS
105 # define ns_t_cname T_CNAME
106 # define ns_t_soa T_SOA
107 # define ns_t_ptr T_PTR
108 # define ns_t_mx T_MX
109 # define ns_t_txt T_TXT
110 # define ns_t_aaaa T_AAAA
111 # define ns_t_srv T_SRV
112 # define ns_t_tlsa T_TLSA
124 static tlist type_list[] = {
127 { US"CNAME", ns_t_cname },
128 /* { US"SOA", ns_t_soa }, Not currently in use */
129 { US"PTR", ns_t_ptr },
131 { US"TXT", ns_t_txt },
132 { US"AAAA", ns_t_aaaa },
133 { US"SRV", ns_t_srv },
134 { US"TLSA", ns_t_tlsa },
140 /*************************************************
141 * Get memory and sprintf into it *
142 *************************************************/
144 /* This is used when building a table of zones and their files.
147 format a format string
150 Returns: pointer to formatted string
154 fcopystring(uschar *format, ...)
159 va_start(ap, format);
160 vsprintf(buffer, CS format, ap);
162 yield = (uschar *)malloc(Ustrlen(buffer) + 1);
163 Ustrcpy(yield, buffer);
168 /*************************************************
169 * Pack name into memory *
170 *************************************************/
172 /* This function packs a domain name into memory according to DNS rules. At
173 present, it doesn't do any compression.
179 Returns: the updated value of pk
183 packname(uschar *name, uschar *pk)
188 while (*p != 0 && *p != '.') p++;
190 memmove(pk, name, p - name);
192 name = (*p == 0)? p : p + 1;
199 bytefield(uschar ** pp, uschar * pk)
204 while (isdigit(*p)) value = value*10 + *p++ - '0';
205 while (isspace(*p)) p++;
212 shortfield(uschar ** pp, uschar * pk)
217 while (isdigit(*p)) value = value*10 + *p++ - '0';
218 while (isspace(*p)) p++;
220 *pk++ = (value >> 8) & 255;
227 /*************************************************
228 * Scan file for RRs *
229 *************************************************/
231 /* This function scans an open "zone file" for appropriate records, and adds
232 any that are found to the output buffer.
236 zone the current zone name
237 domain the domain we are looking for
238 qtype the type of RR we want
239 qtypelen the length of qtype
240 pkptr points to the output buffer pointer; this is updated
241 countptr points to the record count; this is updated
243 Returns: 0 on success, else HOST_NOT_FOUND or NO_DATA or NO_RECOVERY or
244 PASS_ON - the latter if a "PASS ON NOT FOUND" line is seen
248 find_records(FILE *f, uschar *zone, uschar *domain, uschar *qtype,
249 int qtypelen, uschar **pkptr, int *countptr, BOOL * dnssec)
251 int yield = HOST_NOT_FOUND;
252 int domainlen = Ustrlen(domain);
253 BOOL pass_on_not_found = FALSE;
257 uschar rrdomain[256];
258 uschar RRdomain[256];
260 /* Decode the required type */
262 for (typeptr = type_list; typeptr->name != NULL; typeptr++)
263 { if (Ustrcmp(typeptr->name, qtype) == 0) break; }
264 if (typeptr->name == NULL)
266 fprintf(stderr, "fakens: unknown record type %s\n", qtype);
270 rrdomain[0] = 0; /* No previous domain */
271 (void)fseek(f, 0, SEEK_SET); /* Start again at the beginning */
273 *dnssec = TRUE; /* cancelled by first nonsecure rec found */
277 while (fgets(CS buffer, sizeof(buffer), f) != NULL)
281 BOOL found_cname = FALSE;
283 int tvalue = typeptr->value;
284 int qtlen = qtypelen;
288 while (isspace(*p)) p++;
289 if (*p == 0 || *p == ';') continue;
291 if (Ustrncmp(p, US"PASS ON NOT FOUND", 17) == 0)
293 pass_on_not_found = TRUE;
297 ep = buffer + Ustrlen(buffer);
298 while (isspace(ep[-1])) ep--;
302 if (Ustrncmp(p, US"DNSSEC ", 7) == 0) /* tagged as secure */
310 uschar *pp = rrdomain;
311 uschar *PP = RRdomain;
329 /* Compare domain names; first check for a wildcard */
331 if (rrdomain[0] == '*')
333 int restlen = Ustrlen(rrdomain) - 1;
334 if (domainlen > restlen &&
335 Ustrcmp(domain + domainlen - restlen, rrdomain + 1) != 0) continue;
338 /* Not a wildcard RR */
340 else if (Ustrcmp(domain, rrdomain) != 0) continue;
342 /* The domain matches */
344 if (yield == HOST_NOT_FOUND) yield = NO_DATA;
346 /* Compare RR types; a CNAME record is always returned */
348 while (isspace(*p)) p++;
350 if (Ustrncmp(p, "CNAME", 5) == 0)
356 else if (Ustrncmp(p, qtype, qtypelen) != 0 || !isspace(p[qtypelen])) continue;
358 /* Found a relevant record */
361 *dnssec = FALSE; /* cancel AD return */
364 *countptr = *countptr + 1;
367 while (isspace(*p)) p++;
369 /* For a wildcard record, use the search name; otherwise use the record's
370 name in its original case because it might contain upper case letters. */
372 pk = packname((rrdomain[0] == '*')? domain : RRdomain, pk);
373 *pk++ = (tvalue >> 8) & 255;
374 *pk++ = (tvalue) & 255;
376 *pk++ = 1; /* class = IN */
378 pk += 4; /* TTL field; don't care */
380 rdlptr = pk; /* remember rdlength field */
383 /* The rest of the data depends on the type */
387 case ns_t_soa: /* Not currently used */
391 for (i = 0; i < 4; i++)
394 while (isdigit(*p)) value = value*10 + *p++ - '0';
400 /* The only occurrence of a double colon is for ::1 */
402 if (Ustrcmp(p, "::1") == 0)
408 else for (i = 0; i < 8; i++)
413 value = value * 16 + toupper(*p) - (isdigit(*p)? '0' : '7');
416 *pk++ = (value >> 8) & 255;
423 pk = shortfield(&p, pk);
424 if (ep[-1] != '.') sprintf(CS ep, "%s.", zone);
425 pk = packname(p, pk);
431 if (*p == '"') p++; /* Should always be the case */
432 while (*p != 0 && *p != '"') *pk++ = *p++;
437 pk = bytefield(&p, pk); /* usage */
438 pk = bytefield(&p, pk); /* selector */
439 pk = bytefield(&p, pk); /* match type */
442 value = toupper(*p) - (isdigit(*p) ? '0' : '7') << 4;
445 value |= toupper(*p) - (isdigit(*p) ? '0' : '7');
454 for (i = 0; i < 3; i++)
457 while (isdigit(*p)) value = value*10 + *p++ - '0';
458 while (isspace(*p)) p++;
459 *pk++ = (value >> 8) & 255;
468 if (ep[-1] != '.') sprintf(CS ep, "%s.", zone);
469 pk = packname(p, pk);
474 /* Fill in the length, and we are done with this RR */
476 rdlptr[0] = ((pk - rdlptr - 2) >> 8) & 255;
477 rdlptr[1] = (pk -rdlptr - 2) & 255;
481 return (yield == HOST_NOT_FOUND && pass_on_not_found)? PASS_ON : yield;
486 /*************************************************
487 * Entry point and main program *
488 *************************************************/
491 main(int argc, char **argv)
495 int domlen, qtypelen;
501 uschar *qualify = NULL;
503 uschar *zonefile = NULL;
513 fprintf(stderr, "fakens: expected 3 arguments, received %d\n", argc-1);
519 (void)sprintf(CS buffer, "%s/../dnszones", argv[1]);
521 d = opendir(CCS buffer);
524 fprintf(stderr, "fakens: failed to opendir %s: %s\n", buffer,
529 while ((de = readdir(d)) != NULL)
531 uschar *name = US de->d_name;
532 if (Ustrncmp(name, "qualify.", 8) == 0)
534 qualify = fcopystring(US "%s", name + 7);
537 if (Ustrncmp(name, "db.", 3) != 0) continue;
538 if (Ustrncmp(name + 3, "ip4.", 4) == 0)
539 zones[zonecount].zone = fcopystring(US "%s.in-addr.arpa", name + 6);
540 else if (Ustrncmp(name + 3, "ip6.", 4) == 0)
541 zones[zonecount].zone = fcopystring(US "%s.ip6.arpa", name + 6);
543 zones[zonecount].zone = fcopystring(US "%s", name + 2);
544 zones[zonecount++].zonefile = fcopystring(US "%s", name);
548 /* Get the RR type and upper case it, and check that we recognize it. */
550 Ustrncpy(qtype, argv[3], sizeof(qtype));
551 qtypelen = Ustrlen(qtype);
552 for (p = qtype; *p != 0; p++) *p = toupper(*p);
554 /* Find the domain, lower case it, check that it is in a zone that we handle,
555 and set up the zone file name. The zone names in the table all start with a
558 domlen = Ustrlen(argv[2]);
559 if (argv[2][domlen-1] == '.') domlen--;
560 Ustrncpy(domain, argv[2], domlen);
562 for (i = 0; i < domlen; i++) domain[i] = tolower(domain[i]);
564 if (Ustrchr(domain, '.') == NULL && qualify != NULL &&
565 Ustrcmp(domain, "dontqualify") != 0)
567 Ustrcat(domain, qualify);
568 domlen += Ustrlen(qualify);
571 for (i = 0; i < zonecount; i++)
574 zone = zones[i].zone;
575 zlen = Ustrlen(zone);
576 if (Ustrcmp(domain, zone+1) == 0 || (domlen >= zlen &&
577 Ustrcmp(domain + domlen - zlen, zone) == 0))
579 zonefile = zones[i].zonefile;
584 if (zonefile == NULL)
586 fprintf(stderr, "fakens: query not in faked zone: domain is: %s\n", domain);
590 (void)sprintf(CS buffer, "%s/../dnszones/%s", argv[1], zonefile);
592 /* Initialize the start of the response packet. We don't have to fake up
593 everything, because we know that Exim will look only at the answer and
594 additional section parts. */
596 memset(packet, 0, 12);
599 /* Open the zone file. */
601 f = fopen(CS buffer, "r");
604 fprintf(stderr, "fakens: failed to open %s: %s\n", buffer, strerror(errno));
608 /* Find the records we want, and add them to the result. */
611 yield = find_records(f, zone, domain, qtype, qtypelen, &pk, &count, &dnssec);
612 if (yield == NO_RECOVERY) goto END_OFF;
614 packet[6] = (count >> 8) & 255;
615 packet[7] = count & 255;
617 /* There is no need to return any additional records because Exim no longer
618 (from release 4.61) makes any use of them. */
624 ((HEADER *)packet)->ad = 1;
626 /* Close the zone file, write the result, and return. */
630 (void)fwrite(packet, 1, pk - packet, stdout);
636 /* End of fakens.c */