Coro/myhttpd/httpd.pl

use Coro;
use Coro::Semaphore;
use Coro::Event;
use Coro::Socket;

no utf8;
use bytes;

# at least on my machine, this thingy serves files
# quite a bit faster than apache, ;)
# and quite a bit slower than thttpd :(

$SIG{PIPE} = 'IGNORE';
   
sub slog {
   my $level = shift;
   my $format = shift;
   printf "---: $format\n", @_;
}

my $connections = new Coro::Semaphore $MAX_CONNECTS;

my @newcons;
my @pool;

# one "execution thread"
sub handler {
   while () {
      my $new = pop @newcons;
      if ($new) {
         eval {
            conn->new(@$new)->handle;
         };
         slog 1, "$@" if $@ && !ref $@;
         $connections->up;
      } else {
         last if @pool >= $MAX_POOL;
         push @pool, $Coro::current;
         schedule;
      }
   }
}

my $http_port = new Coro::Socket
        LocalAddr => $SERVER_HOST,
        LocalPort => $SERVER_PORT,
        ReuseAddr => 1,
        Listen => 1,
   or die "unable to start server";

push @listen_sockets, $http_port;

# the "main thread"
async {
   slog 1, "accepting connections";
   while () {
      $connections->down;
      push @newcons, [$http_port->accept];
      #slog 3, "accepted @$connections ".scalar(@pool);
      $::NOW = time;
      if (@pool) {
         (pop @pool)->ready;
      } else {
         async \&handler;
      }

   }
};

package conn;

use Socket;
use HTTP::Date;
use Convert::Scalar 'weaken';

our %conn; # $conn{ip}{fh} => connobj
our %blocked;

sub new {
   my $class = shift;
   my $peername = shift;
   my $fh = shift;
   my $self = bless { fh => $fh }, $class;
   my (undef, $iaddr) = unpack_sockaddr_in $peername
      or $self->err(500, "unable to decode peername");

   $self->{remote_addr} = inet_ntoa $iaddr;

   # enter ourselves into various lists
   weaken ($conn{$self->{remote_addr}}{$self*1} = $self);

   $self;
}

sub DESTROY {
   my $self = shift;
   delete $conn{$self->{remote_addr}}{$self*1};
   delete $uri{$self->{uri}}{$self*1};
}

sub slog {
   my $self = shift;
   main::slog($_[0], "$self->{remote_addr}> $_[1]");
}

sub response {
   my ($self, $code, $msg, $hdr, $content) = @_;
   my $res = "HTTP/1.0 $code $msg\015\012";

   $res .= "Connection: close\015\012";
   $res .= "Date: ".(time2str $::NOW)."\015\012"; # slow? nah. :(

   while (my ($h, $v) = each %$hdr) {
      $res .= "$h: $v\015\012"
   }

   $res .= "\015\012$content" if defined $content;

   print STDERR "$self->{remote_addr} \"$self->{uri}\" $code ".$hdr->{"Content-Length"}." \"$self->{h}{referer}\"\n";#d#

   print {$self->{fh}} $res;
}

sub err {
   my $self = shift;
   my ($code, $msg, $hdr, $content) = @_;

   unless (defined $content) {
      $content = "$code $msg";
      $hdr->{"Content-Type"} = "text/plain";
      $hdr->{"Content-Length"} = length $content;
   }

   $self->response($code, $msg, $hdr, $content);

   die bless {}, err::;
}

sub err_blocked {
   my $self = shift;
   my $ip = $self->{remote_addr};
   my $time = time2str $blocked{$ip} = $::NOW + $::BLOCKTIME;
   $self->err(403, "too many connections",
              {
                 "Content-Type" => "text/html",
                 "Retry-After" => $::BLOCKTIME
              },
              <<EOF);
<html><p>
You have been blocked because you opened too many connections. You
may retry at</p>

   <p><blockquote>$time.</blockquote></p>
   
<p>Until then, each new access will renew the block. You might want to have a
look at the <a href="http://www.goof.com/pcg/marc/animefaq.html">FAQ</a>.</p>
</html>
EOF
}

sub handle {
   my $self = shift;
   my $fh = $self->{fh};

   #while() {
      $self->{h} = {};

      # read request and parse first line
      $fh->timeout($::REQ_TIMEOUT);
      my $req = $fh->readline("\015\012\015\012");
      $fh->timeout($::RES_TIMEOUT);

      defined $req or
         $self->err(408, "request timeout");

      my $ip = $self->{remote_addr};

      if ($blocked{$ip}) {
         $self->err_blocked($blocked{$ip})
            if $blocked{$ip} > $::NOW;

         delete $blocked{$ip};
      }

      if (%{$conn{$ip}} > $::MAX_CONN_IP) {
         $self->slog("blocked ip $ip");
         $self->err_blocked;
      }

      $req =~ /^(?:\015\012)?
                (GET|HEAD) \040+
                ([^\040]+) \040+
                HTTP\/([0-9]+\.[0-9]+)
                \015\012/gx
         or $self->err(403, "method not allowed", { Allow => "GET,HEAD" });

      $2 ne "1.0"
         or $self->err(506, "http protocol version not supported");

      $self->{method} = $1;
      $self->{uri} = $2;

      # parse headers
      {
         my (%hdr, $h, $v);

         $hdr{lc $1} .= ",$2"
            while $req =~ /\G
                  ([^:\000-\040]+):
                  [\008\040]*
                  ((?: [^\015\012]+ | \015\012[\008\040] )*)
                  \015\012
               /gxc;

         $req =~ /\G\015\012$/
            or $self->err(400, "bad request");

         $self->{h}{$h} = substr $v, 1
            while ($h, $v) = each %hdr;
      }

      $self->{server_port} = $self->{h}{host} =~ s/:([0-9]+)$// ? $1 : 80;

      weaken ($uri{$self->{uri}}{$self*1} = $self);

      $self->map_uri;
      $self->respond;
   #}
}

# uri => path mapping
sub map_uri {
   my $self = shift;
   my $host = $self->{h}{host} || "default";
   my $uri = $self->{uri};

   # some massaging, also makes it more secure
   $uri =~ s/%([0-9a-fA-F][0-9a-fA-F])/chr hex $1/ge;
   $uri =~ s%//+%/%g;
   $uri =~ s%/\.(?=/|$)%%g;
   1 while $uri =~ s%/[^/]+/\.\.(?=/|$)%%;

   $uri =~ m%^/?\.\.(?=/|$)%
      and $self->err(400, "bad request");

   $self->{name} = $uri;

   # now do the path mapping
   $self->{path} = "$::DOCROOT/$host$uri";

   $self->access_check;
}

sub server_address {
   my $self = shift;
   my ($port, $iaddr) = unpack_sockaddr_in $self->{fh}->getsockname
      or $self->err(500, "unable to get socket name");
   ((inet_ntoa $iaddr), $port);
}

sub server_host {
   my $self = shift;
   if (exists $self->{h}{host}) {
      return $self->{h}{host};
   } else {
      return (($self->server_address)[0]);
   }
}

sub server_hostport {
   my $self = shift;
   my ($host, $port);
   if (exists $self->{h}{host}) {
      ($host, $port) = ($self->{h}{host}, $self->{server_port});
   } else {
      ($host, $port) = $self->server_address;
   }
   $port = $port == 80 ? "" : ":$port";
   $host.$port;
}

sub _cgi {
   my $self = shift;
   my $path = shift;
   my $fh;

   # no two-way xxx supported
   if (0 == fork) {
      open STDOUT, ">&".fileno($self->{fh});
      if (chdir $::DOCROOT) {
         $ENV{SERVER_SOFTWARE} = "thttpd-myhttpd"; # we are thttpd-alike
         $ENV{HTTP_HOST}       = $self->server_host;
         $ENV{HTTP_PORT}       = $self->{server_host};
         $ENV{SCRIPT_NAME}     = $self->{name};
         exec $::INDEXPROG;
      }
      Coro::State::_exit(0);
   } else {
   }
}

sub respond {
   my $self = shift;
   my $path = $self->{path};

   stat $path
      or $self->err(404, "not found");

   # idiotic netscape sends idiotic headers AGAIN
   my $ims = $self->{h}{"if-modified-since"} =~ /^([^;]+)/
             ? str2time $1 : 0;

   if (-d _ && -r _) {
      # directory
      if ($path !~ /\/$/) {
         # create a redirect to get the trailing "/"
         my $host = $self->server_hostport;
         $self->err(301, "moved permanently", { Location =>  "http://$host$self->{uri}/" });
      } else {
         $ims < (stat _)[9]
            or $self->err(304, "not modified");

         if ($self->{method} eq "GET") {
            if (-r "$path/index.html") {
               $self->{path} .= "/index.html";
               $self->handle_file;
            } else {
               $self->handle_dir;
            }
         }
      }
   } elsif (-f _ && -r _) {
      -x _ and $self->err(403, "forbidden");
      $self->handle_file;
   } else {
      $self->err(404, "not found");
   }
}

sub handle_dir {
   my $self = shift;
   $self->_cgi($::INDEXPROG);
}

sub handle_file {
   my $self = shift;
   my $length = -s _;
   my $hdr = {
      "Last-Modified"  => time2str ((stat _)[9]),
   };

   my @code = (200, "ok");
   my ($l, $h);

   if ($self->{h}{range} =~ /^bytes=(.*)$/) {
      for (split /,/, $1) {
         if (/^-(\d+)$/) {
            ($l, $h) = ($length - $1, $length - 1);
         } elsif (/^(\d+)-(\d*)$/) {
            ($l, $h) = ($1, ($2 ne "" || $2 >= $length) ? $2 : $length - 1);
         } else {
            ($l, $h) = (0, $length - 1);
            goto ignore;
         }
         goto satisfiable if $l >= 0 && $l < $length && $h >= 0 && $h > $l;
      }
      $hdr->{"Content-Range"} = "bytes */$length";
      $self->err(416, "not satisfiable", $hdr);

satisfiable:
      # check for segmented downloads
      if ($l && $NO_SEGMENTED) {
         if (%{$uri{$self->{uri}}} > 1) {
            $self->slog("segmented download refused\n");
            $self->err(400, "segmented downloads are not allowed");
         }
      }

      $hdr->{"Content-Range"} = "bytes $l-$h/$length";
      @code = (206, "partial content");
      $length = $h - $l + 1;

ignore:
   } else {
      ($l, $h) = (0, $length - 1);
   }

   if ($self->{path} =~ /\.html$/) {
      $hdr->{"Content-Type"} = "text/html";
   } else {
      $hdr->{"Content-Type"} = "application/octet-stream";
   }

   $hdr->{"Content-Length"} = $length;

   $self->response(@code, $hdr, "");

   if ($self->{method} eq "GET") {
      my ($fh, $buf);
      open $fh, "<", $self->{path}
         or die "$self->{path}: late open failure ($!)";

      if ($l) {
         sysseek $fh, $l, 0
            or die "$self->{path}: cannot seek to $l ($!)";
      }

      $h -= $l - 1;

      while ($h > 0) {
         $h -= sysread $fh, $buf, $h > $::BUFSIZE ? $::BUFSIZE : $h;
         $self->{fh}->syswrite($buf)
            or last;
      }
   }

   close $fh;
}

sub access_check {
   my $self = shift;
   my $whois = ::ip_request($self->{remote_addr});

   if ($whois =~ /^\*cy: (\S+)/m) {
      $self->slog(9, "COUNTRY($1)");
   } else {
      $self->slog(9, "no country($whois)");
   }
}

1;
Revision:	1.7
Committed:	Sat Aug 11 00:37:32 2001 UTC (22 years, 11 months ago) by root
Content type:	text/plain
Branch:	MAIN
Changes since 1.6:	+14 -0 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.1	use Coro;
2			use Coro::Semaphore;
3			use Coro::Event;
4			use Coro::Socket;
5
6			no utf8;
7			use bytes;
8
9			# at least on my machine, this thingy serves files
10			# quite a bit faster than apache, ;)
11			# and quite a bit slower than thttpd :(
12
13			$SIG{PIPE} = 'IGNORE';
14
15			sub slog {
16			my $level = shift;
17			my $format = shift;
18			printf "---: $format\n", @_;
19			}
20
21			my $connections = new Coro::Semaphore $MAX_CONNECTS;
22
23	root	1.6	my @newcons;
24	root	1.1	my @pool;
25
26	root	1.2	# one "execution thread"
27	root	1.1	sub handler {
28			while () {
29	root	1.6	my $new = pop @newcons;
30			if ($new) {
31	root	1.1	eval {
32	root	1.6	conn->new(@$new)->handle;
33	root	1.1	};
34			slog 1, "$@" if $@ && !ref $@;
35			$connections->up;
36			} else {
37			last if @pool >= $MAX_POOL;
38			push @pool, $Coro::current;
39			schedule;
40			}
41			}
42			}
43
44	root	1.4	my $http_port = new Coro::Socket
45			LocalAddr => $SERVER_HOST,
46			LocalPort => $SERVER_PORT,
47			ReuseAddr => 1,
48			Listen => 1,
49			or die "unable to start server";
50
51			push @listen_sockets, $http_port;
52
53	root	1.2	# the "main thread"
54	root	1.1	async {
55			slog 1, "accepting connections";
56			while () {
57			$connections->down;
58	root	1.6	push @newcons, [$http_port->accept];
59	root	1.1	#slog 3, "accepted @$connections ".scalar(@pool);
60	root	1.3	$::NOW = time;
61	root	1.1	if (@pool) {
62			(pop @pool)->ready;
63			} else {
64			async \&handler;
65			}
66
67			}
68			};
69
70			package conn;
71
72			use Socket;
73			use HTTP::Date;
74	root	1.2	use Convert::Scalar 'weaken';
75
76	root	1.3	our %conn; # $conn{ip}{fh} => connobj
77			our %blocked;
78	root	1.1
79			sub new {
80			my $class = shift;
81	root	1.6	my $peername = shift;
82	root	1.1	my $fh = shift;
83	root	1.2	my $self = bless { fh => $fh }, $class;
84	root	1.6	my (undef, $iaddr) = unpack_sockaddr_in $peername
85			or $self->err(500, "unable to decode peername");
86	root	1.7
87	root	1.3	$self->{remote_addr} = inet_ntoa $iaddr;
88	root	1.2
89			# enter ourselves into various lists
90	root	1.3	weaken ($conn{$self->{remote_addr}}{$self*1} = $self);
91
92	root	1.2	$self;
93			}
94
95			sub DESTROY {
96			my $self = shift;
97	root	1.3	delete $conn{$self->{remote_addr}}{$self*1};
98			delete $uri{$self->{uri}}{$self*1};
99	root	1.1	}
100
101			sub slog {
102	root	1.4	my $self = shift;
103			main::slog($_[0], "$self->{remote_addr}> $_[1]");
104	root	1.1	}
105
106	root	1.4	sub response {
107	root	1.1	my ($self, $code, $msg, $hdr, $content) = @_;
108			my $res = "HTTP/1.0 $code $msg\015\012";
109
110	root	1.4	$res .= "Connection: close\015\012";
111			$res .= "Date: ".(time2str $::NOW)."\015\012"; # slow? nah. :(
112	root	1.1
113			while (my ($h, $v) = each %$hdr) {
114			$res .= "$h: $v\015\012"
115			}
116	root	1.4
117	root	1.1	$res .= "\015\012$content" if defined $content;
118
119	root	1.3	print STDERR "$self->{remote_addr} \"$self->{uri}\" $code ".$hdr->{"Content-Length"}." \"$self->{h}{referer}\"\n";#d#
120	root	1.2
121	root	1.1	print {$self->{fh}} $res;
122			}
123
124			sub err {
125			my $self = shift;
126			my ($code, $msg, $hdr, $content) = @_;
127
128			unless (defined $content) {
129			$content = "$code $msg";
130			$hdr->{"Content-Type"} = "text/plain";
131			$hdr->{"Content-Length"} = length $content;
132			}
133
134	root	1.4	$self->response($code, $msg, $hdr, $content);
135	root	1.1
136			die bless {}, err::;
137			}
138
139	root	1.3	sub err_blocked {
140			my $self = shift;
141			my $ip = $self->{remote_addr};
142			my $time = time2str $blocked{$ip} = $::NOW + $::BLOCKTIME;
143			$self->err(403, "too many connections",
144	root	1.4	{
145			"Content-Type" => "text/html",
146			"Retry-After" => $::BLOCKTIME
147			},
148	root	1.3	<<EOF);
149	root	1.4	<html><p>
150	root	1.3	You have been blocked because you opened too many connections. You
151	root	1.4	may retry at</p>
152
153			<p><blockquote>$time.</blockquote></p>
154
155			<p>Until then, each new access will renew the block. You might want to have a
156			look at the <a href="http://www.goof.com/pcg/marc/animefaq.html">FAQ</a>.</p>
157			</html>
158	root	1.3	EOF
159			}
160
161	root	1.1	sub handle {
162			my $self = shift;
163			my $fh = $self->{fh};
164
165			#while() {
166			$self->{h} = {};
167
168			# read request and parse first line
169			$fh->timeout($::REQ_TIMEOUT);
170			my $req = $fh->readline("\015\012\015\012");
171			$fh->timeout($::RES_TIMEOUT);
172
173			defined $req or
174			$self->err(408, "request timeout");
175
176	root	1.3	my $ip = $self->{remote_addr};
177
178			if ($blocked{$ip}) {
179			$self->err_blocked($blocked{$ip})
180			if $blocked{$ip} > $::NOW;
181
182			delete $blocked{$ip};
183			}
184
185			if (%{$conn{$ip}} > $::MAX_CONN_IP) {
186			$self->slog("blocked ip $ip");
187			$self->err_blocked;
188			}
189
190	root	1.1	$req =~ /^(?:\015\012)?
191			(GET\|HEAD) \040+
192			([^\040]+) \040+
193			HTTP\/([0-9]+\.[0-9]+)
194			\015\012/gx
195			or $self->err(403, "method not allowed", { Allow => "GET,HEAD" });
196
197			$2 ne "1.0"
198			or $self->err(506, "http protocol version not supported");
199
200			$self->{method} = $1;
201			$self->{uri} = $2;
202
203			# parse headers
204			{
205			my (%hdr, $h, $v);
206
207			$hdr{lc $1} .= ",$2"
208			while $req =~ /\G
209			([^:\000-\040]+):
210			[\008\040]*
211			((?: [^\015\012]+ \| \015\012[\008\040] )*)
212			\015\012
213			/gxc;
214
215			$req =~ /\G\015\012$/
216			or $self->err(400, "bad request");
217
218			$self->{h}{$h} = substr $v, 1
219			while ($h, $v) = each %hdr;
220			}
221
222			$self->{server_port} = $self->{h}{host} =~ s/:([0-9]+)$// ? $1 : 80;
223	root	1.3
224			weaken ($uri{$self->{uri}}{$self*1} = $self);
225	root	1.1
226			$self->map_uri;
227			$self->respond;
228			#}
229			}
230
231			# uri => path mapping
232			sub map_uri {
233			my $self = shift;
234			my $host = $self->{h}{host} \|\| "default";
235			my $uri = $self->{uri};
236
237			# some massaging, also makes it more secure
238			$uri =~ s/%([0-9a-fA-F][0-9a-fA-F])/chr hex $1/ge;
239			$uri =~ s%//+%/%g;
240			$uri =~ s%/\.(?=/\|$)%%g;
241			1 while $uri =~ s%/[^/]+/\.\.(?=/\|$)%%;
242
243			$uri =~ m%^/?\.\.(?=/\|$)%
244			and $self->err(400, "bad request");
245
246			$self->{name} = $uri;
247
248			# now do the path mapping
249			$self->{path} = "$::DOCROOT/$host$uri";
250	root	1.7
251			$self->access_check;
252	root	1.1	}
253
254			sub server_address {
255			my $self = shift;
256			my ($port, $iaddr) = unpack_sockaddr_in $self->{fh}->getsockname
257			or $self->err(500, "unable to get socket name");
258			((inet_ntoa $iaddr), $port);
259			}
260
261			sub server_host {
262			my $self = shift;
263			if (exists $self->{h}{host}) {
264			return $self->{h}{host};
265			} else {
266			return (($self->server_address)[0]);
267			}
268			}
269
270			sub server_hostport {
271			my $self = shift;
272			my ($host, $port);
273			if (exists $self->{h}{host}) {
274			($host, $port) = ($self->{h}{host}, $self->{server_port});
275			} else {
276			($host, $port) = $self->server_address;
277			}
278			$port = $port == 80 ? "" : ":$port";
279			$host.$port;
280			}
281
282			sub _cgi {
283			my $self = shift;
284			my $path = shift;
285			my $fh;
286
287			# no two-way xxx supported
288			if (0 == fork) {
289			open STDOUT, ">&".fileno($self->{fh});
290			if (chdir $::DOCROOT) {
291			$ENV{SERVER_SOFTWARE} = "thttpd-myhttpd"; # we are thttpd-alike
292			$ENV{HTTP_HOST} = $self->server_host;
293			$ENV{HTTP_PORT} = $self->{server_host};
294			$ENV{SCRIPT_NAME} = $self->{name};
295			exec $::INDEXPROG;
296			}
297			Coro::State::_exit(0);
298			} else {
299			}
300			}
301
302			sub respond {
303			my $self = shift;
304			my $path = $self->{path};
305
306			stat $path
307			or $self->err(404, "not found");
308
309			# idiotic netscape sends idiotic headers AGAIN
310			my $ims = $self->{h}{"if-modified-since"} =~ /^([^;]+)/
311			? str2time $1 : 0;
312
313			if (-d _ && -r _) {
314			# directory
315			if ($path !~ /\/$/) {
316			# create a redirect to get the trailing "/"
317			my $host = $self->server_hostport;
318			$self->err(301, "moved permanently", { Location => "http://$host$self->{uri}/" });
319			} else {
320			$ims < (stat _)[9]
321			or $self->err(304, "not modified");
322
323			if ($self->{method} eq "GET") {
324			if (-r "$path/index.html") {
325			$self->{path} .= "/index.html";
326			$self->handle_file;
327			} else {
328			$self->handle_dir;
329			}
330			}
331			}
332			} elsif (-f _ && -r _) {
333			-x _ and $self->err(403, "forbidden");
334			$self->handle_file;
335			} else {
336			$self->err(404, "not found");
337			}
338			}
339
340			sub handle_dir {
341			my $self = shift;
342			$self->_cgi($::INDEXPROG);
343			}
344
345			sub handle_file {
346			my $self = shift;
347			my $length = -s _;
348			my $hdr = {
349			"Last-Modified" => time2str ((stat _)[9]),
350			};
351
352			my @code = (200, "ok");
353			my ($l, $h);
354
355			if ($self->{h}{range} =~ /^bytes=(.*)$/) {
356			for (split /,/, $1) {
357			if (/^-(\d+)$/) {
358			($l, $h) = ($length - $1, $length - 1);
359			} elsif (/^(\d+)-(\d*)$/) {
360			($l, $h) = ($1, ($2 ne "" \|\| $2 >= $length) ? $2 : $length - 1);
361			} else {
362			($l, $h) = (0, $length - 1);
363			goto ignore;
364			}
365			goto satisfiable if $l >= 0 && $l < $length && $h >= 0 && $h > $l;
366			}
367			$hdr->{"Content-Range"} = "bytes */$length";
368			$self->err(416, "not satisfiable", $hdr);
369
370			satisfiable:
371	root	1.4	# check for segmented downloads
372			if ($l && $NO_SEGMENTED) {
373			if (%{$uri{$self->{uri}}} > 1) {
374			$self->slog("segmented download refused\n");
375			$self->err(400, "segmented downloads are not allowed");
376			}
377			}
378
379	root	1.1	$hdr->{"Content-Range"} = "bytes $l-$h/$length";
380			@code = (206, "partial content");
381			$length = $h - $l + 1;
382
383			ignore:
384			} else {
385			($l, $h) = (0, $length - 1);
386			}
387
388			if ($self->{path} =~ /\.html$/) {
389			$hdr->{"Content-Type"} = "text/html";
390			} else {
391			$hdr->{"Content-Type"} = "application/octet-stream";
392			}
393
394			$hdr->{"Content-Length"} = $length;
395
396	root	1.4	$self->response(@code, $hdr, "");
397	root	1.1
398			if ($self->{method} eq "GET") {
399			my ($fh, $buf);
400			open $fh, "<", $self->{path}
401			or die "$self->{path}: late open failure ($!)";
402
403			if ($l) {
404			sysseek $fh, $l, 0
405			or die "$self->{path}: cannot seek to $l ($!)";
406			}
407
408			$h -= $l - 1;
409
410			while ($h > 0) {
411	root	1.5	$h -= sysread $fh, $buf, $h > $::BUFSIZE ? $::BUFSIZE : $h;
412			$self->{fh}->syswrite($buf)
413	root	1.1	or last;
414			}
415			}
416
417			close $fh;
418	root	1.7	}
419
420			sub access_check {
421			my $self = shift;
422			my $whois = ::ip_request($self->{remote_addr});
423
424			if ($whois =~ /^\*cy: (\S+)/m) {
425			$self->slog(9, "COUNTRY($1)");
426			} else {
427			$self->slog(9, "no country($whois)");
428			}
429	root	1.1	}
430	root	1.2
431			1;