Small HTTP server

Current server version supports the following tags:

include
<!--#include virtual="path/file_name" -->
<!--#include file="full_path/file_name" -->
Both variants include the content of file_name in the document. In first case it looks for the document from the web root directory, in the second case you can define a path for the document. If the requested document content cgi_ident in path, the server runs the file. If the file_name contains the "?" symbol, the string after it is transmitted as a request with parameters which should be processed by your script.

exec
<!--#exec cgi="file_name" -->
<!--#exec cmd="file_name" -->
Runs the script like with "include" tag, from /cgi_ident/ subdirectory

fsize & lastmod
<!--#fsize virtual="path/file_name" -->
<!--#fsize file="full_path/file_name" -->
<!--#fsize Kb virtual="path/file_name" -->
<!--#fsize Mb file="full_path/file_name" -->
<!--#lastmod virtual="path/file_name" -->
<!--#lastmod file="full_path/file_name" -->
<!--#lastmod format="d.m.Y H:i:s" virtual="path/file_name" -->
<!--#lastmod format="d-m-y h:i:sA" file="full_path/file_name" -->
Shows file size and last modified date. Size can be rounded up to Kilobytes or Megabytes.
Date can by formated as you like. Next format keys are defined:

echo
<!--#echo var="var" -->
Prints variable value.

printenv
<!--#printenv -->
Outputs the values of all variables.

break
<!--#break -->
Breaks procession of the document.

if -- elif -- else -- endif
<!--#if expr="expression" -->
text
<!--#elif expr="expression" -->
text
<!--#elif expr="expression" -->
text
...
<!--#else -->
text
<!--#endif -->

The text will be either shown or not depending on the outcomes of specified conditions. The conditions can consist of variables and values as well as different logical operators between them:

! -- "Not"
= or == -- "Equal to"
!= -- "Not equal to"
<,>,<=,>= -- "Less than", "Greater than", "Less than or equal to", "Greater than or equal to".
~ -- "Part of..." str1 ~ str2 -- the result is true, if the string str2 is the part of string str1
str1 =~ /pattern/ig -- pattern it is Regular expressions like Unix. The result is be true, if in the string str1 has been found substring equal by pattern.
&& --"AND"
|| --"OR"

elif and else operators can be omitted, elif can be repeated as many times as you need. It's necessary to put the endif tag at the end of your statements.

set
<!--#set var="variable" value="value" -->
Sets or changes the value of the variable. Although, try not to use this feature too often because the number of variables and memory allocated for them is somewhat restricted.

Contents

• \n -- new line
• \r -- return
• \t -- tab
• \\ -- \ - slash
• \x## -- hex code of char.
• \o### or \0### -- octal code of char.
• \### -- decimal code of char.

• [0-9] -- mean all diget.
• [a-zA-Z] -- mean all letter.
• [^@$\-\n\o008\x01] -- mean any char exept @,$,-,new line, and chars with codes 8 and 1.

• with pattern /([a-z]*)/ $1 will be "abcdefff"
• with pattern /([a-z]*)f/ $1 will be "abcdeff"
• with pattern /([a-z]*?)f/ $1 will be "abcde"

Contents

var county_code="CC",country="Country name",country_ip="127.0.0.1";

Contents

Contents

If hard disk cache enabled server will store all incomming files except authorized pages. Server can delete downloaded files from cache proxy directory after several days of last download. You may chouse save downloaded data for long time, and in this case you will have lot of files, and quantity will be grow, and grow, and grow... Some file's systems slowly working when too much of files in directory. For this case use large mode, -- the server create 64 subdirectories and will save the files there. See also command line keys descriptions

Contents

This version content DNS server. To run you must specify hosts file. File has format on the one hand compatible with system hosts file and on the other hand may be alike with master file format recomended by RFC 1035. For compatible with system hosts file, each lines may content IP address and name of the host. Comments begin with symbol '#'. Domain name in this file could begin from '*.' to descript all subdomain. Example:

# Here is an example of hosts file for local network.

192.168.1.21 www.max.local
192.168.1.21 max.local
192.168.1.20 *.max.local
192.168.1.22 www.boss.local
192.168.1.23 serg.local
192.168.1.26 www.serg.local
192.168.1.24 *.andy.local
192.168.1.25 *.mary.local
# etc ...

# To create your own dialup network add last record:
192.168.1.21 * # -- Redirect all unknown incoming request to 192.168.1.21

# end of hosts file

Server may support reqursion call. To release resolving for any domain you MUST direct NS record for root servers. If you check "Recursion call to up level servers only" you must direct DNS server of your provider, instead root servers, and program will call only to these servers. Otherwise, server will call to different zone servers. Example:

# Here is an example of hosts file for export domain to Internet,
# and resolve other names.

; First, lines holds the information on root name servers needed to
; initialize cache of Internet domain name servers

.                  IN  NS a.root-servers.net
a.root-servers.net IN  A  198.41.0.4
.                  IN  NS b.root-servers.net
b.root-servers.net IN  A  128.9.0.107
.                  IN  NS c.root-servers.net
c.root-servers.net IN  A  192.33.4.12
.                  IN  NS d.root-servers.net
d.root-servers.net IN  A  128.8.10.90
.                  IN  NS e.root-servers.net
e.root-servers.net IN  A  192.203.230.10
.                  IN  NS f.root-servers.net
f.root-servers.net IN  A  192.5.5.241
.                  IN  NS g.root-servers.net
g.root-servers.net IN  A  192.112.36.4
.                  IN  NS h.root-servers.net
h.root-servers.net IN  A  128.63.2.53

; Now declare our domain

$TTL 86400  ;TTL - 24 hours

somedomain.net IN SOA  somedomain.net [email protected] (
 2002120602 ; Serial
 36000      ; Refresh
 3000       ; Retry
 36000000   ; Expire
 36000      ; Minimum
 )
  IN NS   ns.somedomain.net
  IN NS   ns2.somedomain.net
  IN MX 1 relay1.somedomain.net
  IN MX 2 relay2.somedomain.net
  IN A 192.168.12.1

ns.somedomain.net     IN A 192.168.12.1
ns2.somedomain.net    IN A 192.168.12.2
relay1.somedomain.net IN A 192.168.12.1
relay2.somedomain.net IN A 192.168.12.2

pc2.somedomain.net    IN A 192.168.12.2
  IN NS   ns2.somedomain.net
  IN MX 1 relay1.somedomain.net

*.somedomain.net      IN A 192.168.12.1
  IN NS   ns.somedomain.net
  IN NS   ns2.somedomain.net
  IN MX 1 relay1.somedomain.net
  IN MX 2 relay2.somedomain.net


; also this file may contents lines in next format:
192.168.12.1 www.max.local
192.168.12.2 max.local
192.168.12.1 *.max.local

$SLAVE domain2.name 192.168.12.8 domain2.name.txt
$IF_DOWN 192.168.12.2:80 300 192.168.12.2=192.168.12.1


# end of hosts file

SMTP server can:

• E-mail address or any part of address.
• IP address or part of IP address.
• ? Logical expresion where you may do action with $sender, $hello, $control variables.
  • $sender -- return address
  • $hello -- self identification from remote server.
  • $control -- full identification line in flowing format:
    "From sender (remote_hello [IP]) date and time For receptors\r\n"
• ?? List of DNSBL servers

# Begin of file
@yahoo
4.79.181.
67.28.113.
[email protected]
lotto
? $sender == spamer@address
? ! $hello =~ /.+\.[a-z]{2,4}/
? $control =~ /\[64.156.215.*\]/
# End of file

• -- "users_home\mbox\name.msg" will not be added automaticaly. You may use variable $msgfile to insert name of message file.
• -- the string consider to be interpretable, the slash '\' understud as begin of escape sequence, replase it to two slash. ("\\")

# Here is the example of forward file.

#if  $text =~ /\nFrom: .*?boss@address/i
!d:\perl\bin\perl.exe check.pl
#endif

#if $in_text(100% FREE)
#mv c:\probably\spam
#elif $size_kb<=20 && ! ( $text =~ /^From: .*?([^< ]+?@[^> \r\n]+).*/i && ($1 == [email protected] || $1 == boss@address ) || $in_text(do not redirect) )
#cp c:\probably\importan
my_home@address [email protected]
#else
!d:\perl\bin\perl.exe autoreply.pl $msgfile $1
#endif

# End of forward file

# Here is the example of antivirus file.

#if  $text =~ /Content-Transfer-Encoding: ["`]?base64[\001-\xFF]*?\n\r?\nTVqQAAMA/

#if  $text =~ /name=.*\.pif/
#mv c:\probably\virus
#else
!c:\DrWeb\drwebcl.exe /GO /TM- /WA- /TB- /ML
#endif

#elif $body =~ /<script language=/ && $body =~ /<!DOCTYPE HTML/
#mv c:\probably\spam
#endif

# End of file

 (! ( $msg =~ /^From:[^\n\r]*<([^>\n\r]+)>/i ||
      $msg =~ /^From:[ \t]*([^\n\r]+)/          )
 )
 || $1 != $sender
 || $msg =~ /^Subject:[^\n\r]*New site|You are win/i
 || $msg =~ /to|for[ \r\n\t]+unsubscribe[ \r\n\t]+[ \r\n\t]+press|go|open|reply|do not/i

POP3 server provide access to incomming mail. If POP3 proxy is enabled then users may option their E-mail client's program to get mail from another remote POP3 through this POP3. For it, user option in client's program must be: local_user@remote_user@remote_host
Password must be: local_password@remote_password
Or @remote_password part may be added to user option. Anywhere instead '@' may be used '#'.

FTP server provide access to home directories of users and if option "Enable virtual directories for FTP" is selected then provide access to private virtual directories. Public virtual directories are unavilable through FTP.
If FTP proxy is enabled then users may option their FTP client's program to work with remote FTP through this FTP. For it, user option in client's program must be: local_user@remote_user@remote_host
Password must be: local_password@remote_password
Or @remote_password part may be added to user option. Anywhere instead '@' may be used '#'.
Some FTP clients (e.g. FTP plugin for Far manager) support alike type of FTP proxy. In this cliens you may option firewall setting to your_host:FTP_port, and dirrect FTP URL like this: ftp://local_user#remote_user:local_password#remote_password@ftp_host/

The server doesn't content real buildin TLS/SSL cryptographic functions, but includes interface to connect external TLS/SSL library. You may connect OpenSSL or GNU TLS to the server. Foe Windows version simple DLL based on OpenSSL 3.2.0 avilable here: libsec320.zip (OpenSSL included)
DLL based on GnuTLS avilable here: seclibgnutls.zip (GNU TLS required)
For this functions required sertificate.
Easy and free way to get it, is generate self signed sertificate e.g. with help OpenSSL:

openssl genrsa 2048 > ks.key
openssl req -x509 -new -key ks.key -days 3650 > ks.pem

openssl x509 -in ks.pem -outform der | sha256sum

openssl x509 -in ks.pem -pubkey -noout | openssl rsa -pubin -outform der | sha256sum

_443._tcp.smallsrv.com. IN TLSA ( 3 0 1 1ebec2c8434a67e0cbf35619819367067d5a852569666d4f6b222f722cc7cb65 )
_443._tcp.www.smallsrv.com. IN TLSA ( 3 0 1 1ebec2c8434a67e0cbf35619819367067d5a852569666d4f6b222f722cc7cb65 )
_25._tcp.smallsrv.com. IN TLSA ( 3 0 1 1ebec2c8434a67e0cbf35619819367067d5a852569666d4f6b222f722cc7cb65 )
_110._tcp.smallsrv.com. IN TLSA ( 3 1 1 5bdd89111e62a72c946d47a91e7a17aec3102d41a2523e04b510a83cebffdf1a )

Now this program can create a VPN channel inside an HTTPS connection.

• When the server initializes the TUN/TAP adapter. In this case, the arguments are: Interface_name IP_address Subnet_mask Gateway In this case, the gateway is the same as IP.
• When the client connects to the server and the connection is established. In this case the arguments are: Interface_name Interface_name IP_address Net_mask Gateway DNS_servers IP_address of remote_vpn_server
• When the client connection is closed. In this case the arguments are: Interface_name Interface_name IP_address Remote_disconnected_vpn_server IP_address

openssl rehash -compat -v path_to_this_directory

Contents

M. Feoktistov

Contents