6a78bca9fb
1.Add Network rule, match network type(TCP/UDP) 2.Add logic rules(NOT,OR,AND) -AND,((DOMAIN,baidu.com),(NETWORK,UDP)),REJECT (cherry picked from commit d7092e2e37f2c48282c878edea1b2ebc2912b09a)
83 lines
1.8 KiB
Go
83 lines
1.8 KiB
Go
package common
|
|
|
|
import (
|
|
"fmt"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"github.com/Dreamacro/clash/common/cache"
|
|
"github.com/Dreamacro/clash/component/process"
|
|
C "github.com/Dreamacro/clash/constant"
|
|
"github.com/Dreamacro/clash/log"
|
|
)
|
|
|
|
var processCache = cache.NewLRUCache(cache.WithAge(2), cache.WithSize(64))
|
|
|
|
type Process struct {
|
|
adapter string
|
|
process string
|
|
ruleExtra *C.RuleExtra
|
|
}
|
|
|
|
func (ps *Process) RuleType() C.RuleType {
|
|
return C.Process
|
|
}
|
|
|
|
func (ps *Process) Match(metadata *C.Metadata) bool {
|
|
if metadata.Process != "" {
|
|
return strings.EqualFold(metadata.Process, ps.process)
|
|
}
|
|
// ignore match in proxy type "tproxy"
|
|
//if metadata.Type == C.TPROXY || !C.AutoIptables {
|
|
|
|
if C.AutoIptables == "Enable" {
|
|
return false
|
|
}
|
|
|
|
key := fmt.Sprintf("%s:%s:%s", metadata.NetWork.String(), metadata.SrcIP.String(), metadata.SrcPort)
|
|
cached, hit := processCache.Get(key)
|
|
if !hit {
|
|
srcPort, err := strconv.Atoi(metadata.SrcPort)
|
|
if err != nil {
|
|
processCache.Set(key, "")
|
|
return false
|
|
}
|
|
|
|
name, err := process.FindProcessName(metadata.NetWork.String(), metadata.SrcIP, srcPort)
|
|
if err != nil {
|
|
log.Debugln("[Rule] find process name %s error: %s", C.Process.String(), err.Error())
|
|
}
|
|
|
|
processCache.Set(key, name)
|
|
|
|
cached = name
|
|
}
|
|
|
|
metadata.Process = cached.(string)
|
|
|
|
return strings.EqualFold(metadata.Process, ps.process)
|
|
}
|
|
|
|
func (ps *Process) Adapter() string {
|
|
return ps.adapter
|
|
}
|
|
|
|
func (ps *Process) Payload() string {
|
|
return ps.process
|
|
}
|
|
|
|
func (ps *Process) ShouldResolveIP() bool {
|
|
return false
|
|
}
|
|
|
|
func (ps *Process) RuleExtra() *C.RuleExtra {
|
|
return ps.ruleExtra
|
|
}
|
|
|
|
func NewProcess(process string, adapter string, ruleExtra *C.RuleExtra) (*Process, error) {
|
|
return &Process{
|
|
adapter: adapter,
|
|
process: process,
|
|
ruleExtra: ruleExtra,
|
|
}, nil
|
|
}
|