Mercurial > prosody-modules
view mod_register_dnsbl_firewall_mark/mod_register_dnsbl_firewall_mark.lua @ 4340:7cd3b7ec59e9
mod_http_oauth2: Rudimentary support for scopes (but not really)
We don't support limiting access, but this change will inform the
client what permissions the created token has (e.g. is the user an
admin or not).
There is some work in progress on real scope support.
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Sat, 16 Jan 2021 19:47:22 +0000 |
parents | de40686ae9c8 |
children |
line wrap: on
line source
local adns = require "net.adns"; local rbl = module:get_option_string("registration_rbl"); local rbl_message = module:get_option_string("registration_rbl_message"); local st = require "util.stanza"; local function cleanup_ip(ip) if ip:sub(1,7):lower() == "::ffff:" then return ip:sub(8); end return ip; end local function reverse(ip, suffix) local a,b,c,d = ip:match("^(%d+).(%d+).(%d+).(%d+)$"); if not a then return end return ("%d.%d.%d.%d.%s"):format(d,c,b,a, suffix); end module:hook("user-registered", function (event) local session = event.session; local ip = session and session.ip and cleanup_ip(session.ip); local rbl_ip = ip and reverse(ip, rbl); if rbl_ip then local registration_time = os.time(); local log = session.log; adns.lookup(function (reply) if reply and reply[1] then log("warn", "Account %s@%s registered from IP %s found in RBL (%s)", event.username, event.host or module.host, ip, reply[1].a); local user = prosody.bare_sessions[event.username .. "@" .. module.host]; if user and user.firewall_marks then user.firewall_marks.dnsbl_hit = registration_time; else module:open_store("firewall_marks", "map"):set(event.username, "dnsbl_hit", registration_time); end if rbl_message then module:log("debug", "Warning RBL registered user %s@%s", event.username, event.host); event.ip = ip; local rbl_stanza = st.message({ to = event.username.."@"..event.host, from = event.host }, rbl_message:gsub("$(%w+)", event)); module:send(rbl_stanza); end end end, rbl_ip); end end);