1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16 package org.jboss.netty.handler.ipfilter;
17
18 import java.net.InetSocketAddress;
19
20 import org.jboss.netty.channel.ChannelEvent;
21 import org.jboss.netty.channel.ChannelFuture;
22 import org.jboss.netty.channel.ChannelFutureListener;
23 import org.jboss.netty.channel.ChannelHandlerContext;
24 import org.jboss.netty.channel.ChannelStateEvent;
25 import org.jboss.netty.channel.ChannelUpstreamHandler;
26 import org.jboss.netty.channel.Channels;
27
28
29
30
31 public abstract class IpFilteringHandlerImpl implements ChannelUpstreamHandler, IpFilteringHandler {
32
33 private IpFilterListener listener;
34
35
36
37
38
39
40
41
42 protected abstract boolean accept(ChannelHandlerContext ctx, ChannelEvent e, InetSocketAddress inetSocketAddress)
43 throws Exception;
44
45
46
47
48
49
50
51
52
53
54
55 protected ChannelFuture handleRefusedChannel(ChannelHandlerContext ctx, ChannelEvent e,
56 InetSocketAddress inetSocketAddress) throws Exception {
57 if (listener == null) {
58 return null;
59 }
60 return listener.refused(ctx, e, inetSocketAddress);
61 }
62
63 protected ChannelFuture handleAllowedChannel(ChannelHandlerContext ctx, ChannelEvent e,
64 InetSocketAddress inetSocketAddress) throws Exception {
65 if (listener == null) {
66 return null;
67 }
68 return listener.allowed(ctx, e, inetSocketAddress);
69 }
70
71
72
73
74
75
76 protected boolean isBlocked(ChannelHandlerContext ctx) {
77 return ctx.getAttachment() != null;
78 }
79
80
81
82
83
84
85
86
87
88
89
90 protected boolean continues(ChannelHandlerContext ctx, ChannelEvent e) throws Exception {
91 if (listener != null) {
92 return listener.continues(ctx, e);
93 } else {
94 return false;
95 }
96 }
97
98 public void handleUpstream(ChannelHandlerContext ctx, ChannelEvent e) throws Exception {
99 if (e instanceof ChannelStateEvent) {
100 ChannelStateEvent evt = (ChannelStateEvent) e;
101 switch (evt.getState()) {
102 case OPEN:
103 case BOUND:
104
105
106 if (isBlocked(ctx) && !continues(ctx, evt)) {
107
108 return;
109 } else {
110 ctx.sendUpstream(e);
111 return;
112 }
113 case CONNECTED:
114 if (evt.getValue() != null) {
115
116 InetSocketAddress inetSocketAddress = (InetSocketAddress) e.getChannel().getRemoteAddress();
117 if (!accept(ctx, e, inetSocketAddress)) {
118 ctx.setAttachment(Boolean.TRUE);
119 ChannelFuture future = handleRefusedChannel(ctx, e, inetSocketAddress);
120 if (future != null) {
121 future.addListener(ChannelFutureListener.CLOSE);
122 } else {
123 Channels.close(e.getChannel());
124 }
125 if (isBlocked(ctx) && !continues(ctx, evt)) {
126
127 return;
128 }
129 } else {
130 handleAllowedChannel(ctx, e, inetSocketAddress);
131 }
132
133 ctx.setAttachment(null);
134 } else {
135
136 if (isBlocked(ctx) && !continues(ctx, evt)) {
137
138 return;
139 }
140 }
141 break;
142 }
143 }
144 if (isBlocked(ctx) && !continues(ctx, e)) {
145
146 return;
147 }
148
149 ctx.sendUpstream(e);
150 }
151
152 public void setIpFilterListener(IpFilterListener listener) {
153 this.listener = listener;
154 }
155
156 public void removeIpFilterListener() {
157 listener = null;
158 }
159 }