Method FindFirstMatch

daemon/rule/loader.go:497–515

FindFirstMatch will try match the connection against the existing rule set.

(con *conman.Connection)

// FindFirstMatch will try match the connection against the existing rule set.
func (l *Loader) FindFirstMatch(con *conman.Connection) (match *Rule) {
	l.RLock()
	defer l.RUnlock()

	for _, idx := range l.activeRules {
		rule, _ := l.rules[idx]
		if rule.Match(con, l.checkSums) {
			// We have a match.
			// Save the rule in order to don't ask the user to take action,
			// and keep iterating until a Deny or a Priority rule appears.
			match = rule
			if rule.Action == Reject || rule.Action == Deny || rule.Precedence == true {
				return rule
			}
		}
	}

	return match
}