cleanup audit start

[pxelator] / lib / PXElator / dnsd.pm

diff --git a/lib/PXElator/dnsd.pm b/lib/PXElator/dnsd.pm
index 1a1b0c1..0255fd1 100644 (file)
--- a/lib/PXElator/dnsd.pm
+++ b/lib/PXElator/dnsd.pm
@@ -6,6 +6,7 @@ use strict;
 use Net::DNS::Nameserver;
 use Net::DNS::Resolver;
 use Data::Dump qw/dump/;
+use CouchDB;
 
 use server;
 our $debug = server::debug;
@@ -16,27 +17,62 @@ my $res = Net::DNS::Resolver->new(
        debug => $debug,
 );
 
+our $ptr_cache;
+sub name_ip {
+       my ( $name, $ip ) = @_;
+       $ptr_cache->{ join('.', reverse split(/\./, $ip)) } = $name;
+       return $ip;
+}
+
 sub reply_handler {
        my ($qname, $qclass, $qtype, $peerhost,$query,$conn) = @_;
        my ($rcode, @ans, @auth, @add);
 
        server->refresh;
+       $debug = server::debug;
+
+       CouchDB::audit( 'request', {
+               qname => $qname,
+               qclass => $qclass,
+               qtype => $qtype,
+               peerhost =>  $peerhost,
+               sockhost => $conn->{"sockhost"}
+       });
+
+       $query->print if $debug;
+
+       my $local = $1     if $qname =~ m{^(.+)\.\Q$server::domain_name\E$};
+          $local = $qname if $qname !~ m{\.};
 
-       print "Received query from $peerhost to ". $conn->{"sockhost"}. "\n";
-       $query->print;
+       my $ttl = 3600;
 
-       if ( $qname =~ s{\Q$server::domain_name\E$}{} ) {
-               warn "local $qname $qtype";
-               if ( $qtype eq "A" && $qname eq "pxelator." ) {
-                       my ($ttl, $rdata) = (3600, "172.16.10.1");
-                       push @ans, Net::DNS::RR->new("$qname $ttl $qclass $qtype $rdata");
-                       $rcode = "NOERROR";
+       my $audit = { source => 'unknown' };
+
+       if ( $local ) {
+               warn "local[$local] $qname $qtype";
+               $rcode = "NOERROR";
+               my $rdata;
+               if ( $qtype eq "A" && $local eq "server" ) {
+                       $rdata = name_ip( $local, $server::ip );
+                       $audit->{source} = 'local';
                } else {
                        $rcode = "NXDOMAIN";
                }
 
+               push @ans, Net::DNS::RR->new("$qname $ttl $qclass $qtype $rdata") if $ttl;
+
+       } elsif ( $qtype eq 'PTR' && $qname =~ m{^([0-9\.]*)\.in-addr\.arpa$} ) {
+                       if ( my $rdata = $ptr_cache->{$1} ) {
+                               $rdata .= '.' . $server::domain_name;
+                               push @ans, Net::DNS::RR->new("$qname $ttl $qclass $qtype $rdata");
+                               $audit->{source} = 'PTR';
+                       } else {
+warn "## ",dump( $ptr_cache );
+                               $rcode = "NXDOMAIN";
+                       }
        } elsif ( my $packet = $res->query( $qname, $qtype ) ) {
 
+               $audit->{source} = 'upstream';
                $packet->print;
                push @ans, $_ foreach $packet->answer;
                $rcode = "NOERROR";
@@ -48,6 +84,17 @@ sub reply_handler {
 
        warn "rcode: $rcode ",dump( @ans );
 
+       $audit->{rcode} = $rcode;
+       $audit->{ans} = [ map {
+               my $data;
+               foreach my $n ( keys %$_ ) {
+                       $data->{$n} = $_->{$n};
+               }
+               $data;
+       } @ans ];
+
+       CouchDB::audit( 'response', $audit );
+
        # mark the answer as authoritive (by setting the 'aa' flag
        return ($rcode, \@ans, \@auth, \@add, { aa => 1 });
 }
@@ -59,6 +106,7 @@ sub start {
                Verbose      => $debug,
        ) || die "couldn't create nameserver object\n";
 
+       CouchDB::audit('start', { port => 53, domain_name => $server::domain_name });
        warn "DNS $server::domain_name";
 
        $ns->main_loop;