Imported Upstream version 1.10pre7c
This commit is contained in:
parent
4b91774f1a
commit
8b6b3ca881
12 changed files with 6854 additions and 0 deletions
13
tools/README.txt
Normal file
13
tools/README.txt
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
Directory contents:
|
||||
|
||||
- lograte.sh [OPTIONS] <logfile>
|
||||
generates per minute stats for generic syslog files
|
||||
|
||||
- postfwd-rblcheck.pl <hostname or ip> [<hostname or ip> ...]
|
||||
queries a bunch of dnsbls for the given host(s)
|
||||
|
||||
- request.sample
|
||||
a sample policy delegation request. you may test your postfwd config with
|
||||
postfwd -f <configfile> request.sample
|
||||
|
||||
by JPK
|
||||
90
tools/lograte.sh
Executable file
90
tools/lograte.sh
Executable file
|
|
@ -0,0 +1,90 @@
|
|||
#!/bin/sh
|
||||
#
|
||||
# generates per minute stats for generic syslog files
|
||||
# call it:
|
||||
#
|
||||
# lograte.sh [OPTIONS] <logfile>
|
||||
#
|
||||
# or for online monitoring
|
||||
#
|
||||
# tail -f <logfile> | lograte.sh [OPTIONS]
|
||||
#
|
||||
# by JPK
|
||||
|
||||
PATH=/usr/local/bin:/bin:/usr/bin
|
||||
|
||||
# default values
|
||||
PATTERN=".*"
|
||||
MINIMUM=1
|
||||
TOPLIST=10
|
||||
|
||||
# show usage
|
||||
Usage () {
|
||||
{
|
||||
echo "Usage: `basename $0` -m <mincount> -t <topcount> -s <filter> <file> <file> ...";
|
||||
echo " -m minimum events to display"
|
||||
echo " -t how many rankings?"
|
||||
echo " -T print rankings only"
|
||||
echo " -s filter input through this regexp"
|
||||
echo "Example: `basename $0` -m 10 -t 5 -s \"(panic|error)\" /var/log/messages"
|
||||
} >&2
|
||||
}
|
||||
|
||||
# parse arguments
|
||||
while getopts Tt:m:s: o
|
||||
do case "$o" in
|
||||
s) PATTERN="$OPTARG";;
|
||||
m) MINIMUM="$OPTARG";;
|
||||
t) TOPLIST="$OPTARG";;
|
||||
T) TOPONLY=1;;
|
||||
*) Usage;
|
||||
exit 1;;
|
||||
esac
|
||||
done
|
||||
shift `expr $OPTIND - 1`
|
||||
|
||||
# a single awk
|
||||
awk ' ($0 ~ PATTERN) {
|
||||
split($3,TIME,":");
|
||||
CURRTIME=$1 " " $2 " " TIME[1] ":" TIME[2];
|
||||
if (LASTTIME != CURRTIME) {
|
||||
if (COUNT >= MINIMUM) {
|
||||
if (!(TOPONLY == 1)) {
|
||||
printf ( "%s %7d events, %8.2f per sec\n", LASTTIME, COUNT, ( COUNT / 60 ) );
|
||||
};
|
||||
for (i=1;i<=TOPLIST;i++) {
|
||||
if (COUNT > MAXCOUNT[i]) {
|
||||
MAXCOUNT[i+1]=MAXCOUNT[i];
|
||||
MAXCOUNT[i]=COUNT;
|
||||
MAXTIME[i+1]=MAXTIME[i];
|
||||
MAXTIME[i]=LASTTIME;
|
||||
break;
|
||||
};
|
||||
};
|
||||
};
|
||||
COUNT=1;
|
||||
} else {
|
||||
COUNT++;
|
||||
};
|
||||
LASTTIME=CURRTIME;
|
||||
}
|
||||
|
||||
END {
|
||||
if (CURRTIME != "") {
|
||||
if ( (COUNT >= MINIMUM) && (!(TOPONLY == 1)) ) {
|
||||
printf ( "%s %7d events, %8.2f per sec\n\n", LASTTIME, COUNT, ( COUNT / 60 ) );
|
||||
};
|
||||
print "###########";
|
||||
printf ("# TOP %3d #\n",TOPLIST);
|
||||
print "###########";
|
||||
for (i=1;i<=TOPLIST;i++) {
|
||||
printf ( "# TOP %3d:\t%s %7d events, %8.2f per sec\n", i, MAXTIME[i], MAXCOUNT[i], ( MAXCOUNT[i] / 60 ) );;
|
||||
};
|
||||
exit 0;
|
||||
} else {
|
||||
exit 1;
|
||||
};
|
||||
}' PATTERN="${PATTERN}" MINIMUM="${MINIMUM}" TOPLIST="${TOPLIST}" TOPONLY="${TOPONLY}" $*
|
||||
|
||||
# set exitcode=1 if no matching lines found
|
||||
exit $?
|
||||
174
tools/postfwd-rblcheck.pl
Executable file
174
tools/postfwd-rblcheck.pl
Executable file
|
|
@ -0,0 +1,174 @@
|
|||
#!/usr/bin/perl -T -w
|
||||
#
|
||||
# Tool to query a bunch of dnsbls. Usage:
|
||||
#
|
||||
# postfwd-rblcheck.pl <hostname or ip> [<hostname or ip> ...]
|
||||
#
|
||||
# by JPK
|
||||
|
||||
|
||||
use Net::DNS::Async;
|
||||
use strict;
|
||||
|
||||
# length of screen
|
||||
my $mylen = 79;
|
||||
|
||||
# RBLs (ip based)
|
||||
my @rbls = qw(
|
||||
query.bondedsender.org
|
||||
exemptions.ahbl.org
|
||||
spf.trusted-forwarder.org
|
||||
list.dnswl.org
|
||||
zz.countries.nerd.dk
|
||||
zen.spamhaus.org
|
||||
bl.spamcop.net
|
||||
list.dsbl.org
|
||||
multihop.dsbl.org
|
||||
unconfirmed.dsbl.org
|
||||
combined.njabl.org
|
||||
dnsbl.sorbs.net
|
||||
dnsbl.ahbl.org
|
||||
ix.dnsbl.manitu.net
|
||||
dnsbl-1.uceprotect.net
|
||||
dnsbl-2.uceprotect.net
|
||||
dnsbl-3.uceprotect.net
|
||||
ips.backscatterer.org
|
||||
sorbs.dnsbl.net.au
|
||||
korea.services.net
|
||||
blackholes.five-ten-sg.com
|
||||
cbl.anti-spam.org.cn
|
||||
cblplus.anti-spam.org.cn
|
||||
cblless.anti-spam.org.cn
|
||||
bogons.cymru.com
|
||||
dynamic.tqmrbl.com
|
||||
relays.tqmrbl.com
|
||||
clients.tqmrbl.com
|
||||
hostkarma.junkemailfilter.com
|
||||
);
|
||||
|
||||
# RHSBLs (domain based)
|
||||
my @rhsbls = qw(
|
||||
rhsbl.sorbs.net
|
||||
rhsbl.ahbl.org
|
||||
multi.surbl.org
|
||||
dsn.rfc-ignorant.org
|
||||
abuse.rfc-ignorant.org
|
||||
whois.rfc-ignorant.org
|
||||
bogusmx.rfc-ignorant.org
|
||||
blackhole.securitysage.com
|
||||
ex.dnsbl.org
|
||||
rddn.dnsbl.net.au
|
||||
block.rhs.mailpolice.com
|
||||
dynamic.rhs.mailpolice.com
|
||||
dnsbl.cyberlogic.net
|
||||
hostkarma.junkemailfilter.com
|
||||
);
|
||||
|
||||
# async dns object
|
||||
my $DNS = new Net::DNS::Async ( QueueSize => 100, Retries => 3, Timeout => 20 );
|
||||
our %RBLres = ();
|
||||
|
||||
# async dns callback method
|
||||
sub callback {
|
||||
my $myresponse = shift;
|
||||
my $query = ''; my $result = '';
|
||||
|
||||
# get query
|
||||
if ( defined $myresponse ) {
|
||||
foreach ($myresponse->question) {
|
||||
next unless (($_->qtype eq 'A') or ($_->qtype eq 'TXT'));
|
||||
$query = $_->qname;
|
||||
};
|
||||
|
||||
# get answer and fill result hash
|
||||
if ( defined $query ) {
|
||||
foreach ($myresponse->answer) {
|
||||
if ($_->type eq 'A') {
|
||||
$result = $_->address;
|
||||
$query ||= ''; $result ||= '';
|
||||
$RBLres{$query}{result} = $result;
|
||||
$RBLres{$query}{end} = time;
|
||||
} elsif ($_->type eq 'TXT') {
|
||||
$RBLres{$query}{text} = join(" ", $_->char_str_list());
|
||||
$RBLres{$query}{end} = time;
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
# main, parse argument list
|
||||
foreach (@ARGV) {
|
||||
my $query = $_;
|
||||
my $now = time;
|
||||
my @lookups = ();
|
||||
my $name = my $addr = my $res = 'unknown';
|
||||
my $rblcount = my $rhlcount = 0;
|
||||
|
||||
# clear result hash
|
||||
%RBLres = ();
|
||||
|
||||
# lookup hostname or ip address, remove localpart if email address
|
||||
if ($query =~ /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/) {
|
||||
$addr = $query;
|
||||
$name = $res
|
||||
if ( defined($res = gethostbyaddr (pack ('C4', (split /\./, $addr)), 2)) );
|
||||
} else {
|
||||
$name = ($query =~ /@([^@]+)$/) ? $1 : $query;
|
||||
$addr = ( join ".", (unpack ('C4', $res)) )
|
||||
if ( defined ($res = gethostbyname ($name.".")) );
|
||||
};
|
||||
|
||||
# header
|
||||
print "\n", "=" x $mylen, "\n";
|
||||
print "QUERY: ", $query, " NAME: ", $name, " ADDR: ", $addr, "\n";
|
||||
|
||||
# prepare rbl lookups
|
||||
unless ($addr eq 'unknown') {
|
||||
$addr = join ".", reverse split /\./, $addr;
|
||||
foreach my $rbl (@rbls) {
|
||||
$RBLres{$addr.".".$rbl}{query} = $rbl;
|
||||
$RBLres{$addr.".".$rbl}{type} = 'RBL';
|
||||
$RBLres{$addr.".".$rbl}{start} = time;
|
||||
push @lookups, $addr.".".$rbl;
|
||||
#print "query ", $RBLres{$addr.".".$rbl}{query}, " for ", $addr.".".$rbl, "\n";
|
||||
};
|
||||
};
|
||||
|
||||
# prepare rhsbl lookups
|
||||
unless ($name eq 'unknown') {
|
||||
foreach my $rhsbl (@rhsbls) {
|
||||
$RBLres{$name.".".$rhsbl}{query} = $rhsbl;
|
||||
$RBLres{$name.".".$rhsbl}{type} = 'RHSBL';
|
||||
$RBLres{$name.".".$rhsbl}{start} = time;
|
||||
push @lookups, $name.".".$rhsbl;
|
||||
#print "name ", $RBLres{$name.".".$rhsbl}{query}, " for ", $name.".".$rhsbl, "\n";
|
||||
};
|
||||
};
|
||||
|
||||
# perform lookups
|
||||
map { $DNS->add (\&callback, $_) } @lookups;
|
||||
map { $DNS->add (\&callback, $_, 'TXT') } @lookups;
|
||||
$DNS->await();
|
||||
|
||||
# evaluate results
|
||||
foreach $query (sort keys %RBLres) {
|
||||
if ($query and (defined $RBLres{$query}{result})) {
|
||||
print " ", "-" x ($mylen - 4), "\n";
|
||||
printf " listed on %s:%s, result: %s, time: %ds\n %s\n",
|
||||
$RBLres{$query}{type},
|
||||
$RBLres{$query}{query}, $RBLres{$query}{result},
|
||||
($RBLres{$query}{end} - $RBLres{$query}{start}),
|
||||
((defined $RBLres{$query}{text}) ? "\"".$RBLres{$query}{text}."\"" : '<undef>');
|
||||
$rblcount++ if $RBLres{$query}{type} eq 'RBL';
|
||||
$rhlcount++ if $RBLres{$query}{type} eq 'RHSBL';
|
||||
};
|
||||
};
|
||||
|
||||
# footer
|
||||
print " ", "-" x ($mylen - 4), "\n";
|
||||
printf "%d of %d RBLs, ", $rblcount, $#rbls if ($rblcount > 0);
|
||||
printf "%d of %d RHSBLs, ", $rhlcount, $#rhsbls if ($rhlcount > 0);
|
||||
printf "Finished after %d seconds\n", (time - $now);
|
||||
print "=" x $mylen, "\n\n";
|
||||
};
|
||||
21
tools/request.sample
Normal file
21
tools/request.sample
Normal file
|
|
@ -0,0 +1,21 @@
|
|||
ccert_fingerprint=
|
||||
size=64063
|
||||
helo_name=english-breakfast.cloud9.net
|
||||
reverse_client_name=english-breakfast.cloud9.net
|
||||
queue_id=
|
||||
encryption_cipher=
|
||||
encryption_protocol=
|
||||
etrn_domain=
|
||||
ccert_subject=
|
||||
request=smtpd_access_policy
|
||||
protocol_state=RCPT
|
||||
recipient=someone@domain.local
|
||||
instance=6748.46adf3f8.62156.0
|
||||
protocol_name=ESMTP
|
||||
encryption_keysize=0
|
||||
recipient_count=0
|
||||
ccert_issuer=
|
||||
sender=owner-postfix-users@postfix.org
|
||||
client_name=english-breakfast.cloud9.net
|
||||
client_address=168.100.1.7
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue