balsoft/ligo
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

p2p: temp ban point on invalid auth

Browse Source
This commit is contained in:
Pietro 2018-03-13 17:02:59 +01:00 committed by Grégoire Henry
parent ce92f70883
commit c5d41465a2
1 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
src/lib_p2p/p2p_pool.ml
View File

@ -689,19 +689,30 @@ and authenticate pool ?point_info canceler fd point =
?listening_port:pool.config.listening_port ?listening_port:pool.config.listening_port
pool.config.identity pool.message_config.versions pool.config.identity pool.message_config.versions
end ~on_error: begin fun err -> end ~on_error: begin fun err ->
(* TODO do something when the error is Not_enough_proof_of_work ?? *)
begin match err with begin match err with
| [ Canceled ] -> | [ Canceled ] ->
(* Currently only on time out *) (* Currently only on time out *)
lwt_debug "authenticate: %a%s -> canceled" lwt_debug "authenticate: %a%s -> canceled"
P2p_point.Id.pp point P2p_point.Id.pp point
(if incoming then " incoming" else "") (if incoming then " incoming" else "")
| err -> | err -> begin
(* Authentication incorrect! *) (* Authentication incorrect! Temp ban the offending points/peers *)
List.iter (function
| P2p_errors.Not_enough_proof_of_work _
| P2p_errors.Invalid_auth
| P2p_errors.Decipher_error
| P2p_errors.Invalid_message_size
| P2p_errors.Encoding_error
| P2p_errors.Decoding_error
| P2p_errors.Invalid_chunks_size _ ->
greylist_addr pool (fst point)
| _ -> ()
) err ;
lwt_debug "@[authenticate: %a%s -> failed@ %a@]" lwt_debug "@[authenticate: %a%s -> failed@ %a@]"
P2p_point.Id.pp point P2p_point.Id.pp point
(if incoming then " incoming" else "") (if incoming then " incoming" else "")
pp_print_error err pp_print_error err
end
end >>= fun () -> end >>= fun () ->
may_register_my_id_point pool err ; may_register_my_id_point pool err ;
log pool (Authentication_failed point) ; log pool (Authentication_failed point) ;