77 lines
3.0 KiB
Python
77 lines
3.0 KiB
Python
|
import socket
|
|||
|
|
import ssl
|
|||
|
|
import dns.message
|
|||
|
|
import dns.query
|
|||
|
|
import dns.rcode
|
|||
|
|
import argparse
|
|||
|
|
from logger_DoE import *
|
|||
|
|
import pandas as pd
|
|||
|
|
|
|||
|
|
domains = set(pd.read_csv('domains.csv').domain)
|
|||
|
|
|
|||
|
|
upstream_server = '223.5.5.5'
|
|||
|
|
|
|||
|
|
# 创建监听socket
|
|||
|
|
listener = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|||
|
|
listener.bind(('127.0.0.54', 53))
|
|||
|
|
|
|||
|
|
parser = argparse.ArgumentParser()
|
|||
|
|
parser.add_argument('-pass', '--passdoe', default=0)
|
|||
|
|
parser.add_argument('-tamper', '--tamper', default='')
|
|||
|
|
parser.add_argument('-inject', '--inject', default='')
|
|||
|
|
parser.add_argument('-ns', '--ns', default='1.1.1.1')
|
|||
|
|
args = parser.parse_args()
|
|||
|
|
tamper = args.tamper +'.'
|
|||
|
|
inject = args.inject +'.'
|
|||
|
|
ns = args.ns
|
|||
|
|
|
|||
|
|
logger = InfoLogger(interval=1)
|
|||
|
|
logger.log_info(LogLevel.INFO, "程序开始运行")
|
|||
|
|
|
|||
|
|
while True:
|
|||
|
|
# 接收DNS请求
|
|||
|
|
data, addr = listener.recvfrom(1024)
|
|||
|
|
#print(dns.message.from_wire(data))
|
|||
|
|
data = dns.message.from_wire(data)
|
|||
|
|
query_r = data.question[0].name.to_text()[:-1]
|
|||
|
|
if query_r in domains and args.passdoe==0:
|
|||
|
|
# print(data.question[0].name.to_text()[:-1])
|
|||
|
|
# print(addr)
|
|||
|
|
#print(data)
|
|||
|
|
#print('对DoE域名的DNS请求：', query_r)
|
|||
|
|
logger = InfoLogger(interval=1)
|
|||
|
|
logger.log_info(LogLevel.INFO, f'对DoE域名的DNS请求：{query_r}')
|
|||
|
|
# # 创建TLS连接并发送DNS请求到上游服务器
|
|||
|
|
resp = dns.query.udp(
|
|||
|
|
q=data,
|
|||
|
|
where=upstream_server,
|
|||
|
|
timeout=10)
|
|||
|
|
#print('DNS响应：', resp.answer)
|
|||
|
|
resp.answer = [dns.rrset.from_text(query_r+'.', 3600, dns.rdataclass.IN, dns.rdatatype.A, '10.10.10.10')]
|
|||
|
|
#print(f'对DoE域名{query_r}的DNS请求已阻断，返回10.10.10.10')
|
|||
|
|
logger.log_info(LogLevel.INFO, f'对DoE域名{query_r}的DNS请求已阻断，返回10.10.10.10')
|
|||
|
|
logger.log_info(LogLevel.PAYLOAD, str(resp.answer.__str__()))
|
|||
|
|
# with socket.create_connection((upstream_server,853)) as sock:
|
|||
|
|
# with context.wrap_socket(sock, server_hostname=upstream_server[0]) as tls_sock:
|
|||
|
|
# tls_sock.sendall(data.to_wire())
|
|||
|
|
# resp = tls_sock.recv(4096)
|
|||
|
|
|
|||
|
|
# 将上游服务器的响应发送回客户端
|
|||
|
|
listener.sendto(resp.to_wire(), addr)
|
|||
|
|
else:
|
|||
|
|
resp = dns.query.udp(
|
|||
|
|
q=data,
|
|||
|
|
where=upstream_server,
|
|||
|
|
timeout=10)
|
|||
|
|
if str(resp.question[0].name) == tamper and int(resp.question[0].rdtype) == 1:
|
|||
|
|
print('---tamper---', tamper)
|
|||
|
|
resp.answer = [
|
|||
|
|
dns.rrset.from_text(tamper, 3600, dns.rdataclass.IN, dns.rdatatype.A, '8.8.8.8')]
|
|||
|
|
if str(resp.question[0].name) == inject:
|
|||
|
|
print('---inject---', inject)
|
|||
|
|
resp.additional = [
|
|||
|
|
dns.rrset.from_text(inject, 3600, dns.rdataclass.IN, dns.rdatatype.NS, 'ns.' + inject.split('.', 1)[1]),
|
|||
|
|
dns.rrset.from_text('ns.' + inject.split('.', 1)[1], 3600, dns.rdataclass.IN, dns.rdatatype.A, ns)]
|
|||
|
|
listener.sendto(resp.to_wire(), addr)
|
|||
|
|
#break
|