Mercurial > prosody-modules
view mod_register_dnsbl_firewall_mark/mod_register_dnsbl_firewall_mark.lua @ 5243:d5dc8edb2695
mod_http_oauth2: Use more compact IDs
UUIDs are nice but so verbose!
The reduction in entropy for the nonce should be fine since the
timestamp is also counts towards this, and it changes every second
(modulo clock shenanigans), so the chances of someone managing to get
the same client_secret by registering with the same information at the
same time as another entity should be negligible.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sat, 11 Mar 2023 22:46:27 +0100 |
parents | de40686ae9c8 |
children |
line wrap: on
line source
local adns = require "net.adns"; local rbl = module:get_option_string("registration_rbl"); local rbl_message = module:get_option_string("registration_rbl_message"); local st = require "util.stanza"; local function cleanup_ip(ip) if ip:sub(1,7):lower() == "::ffff:" then return ip:sub(8); end return ip; end local function reverse(ip, suffix) local a,b,c,d = ip:match("^(%d+).(%d+).(%d+).(%d+)$"); if not a then return end return ("%d.%d.%d.%d.%s"):format(d,c,b,a, suffix); end module:hook("user-registered", function (event) local session = event.session; local ip = session and session.ip and cleanup_ip(session.ip); local rbl_ip = ip and reverse(ip, rbl); if rbl_ip then local registration_time = os.time(); local log = session.log; adns.lookup(function (reply) if reply and reply[1] then log("warn", "Account %s@%s registered from IP %s found in RBL (%s)", event.username, event.host or module.host, ip, reply[1].a); local user = prosody.bare_sessions[event.username .. "@" .. module.host]; if user and user.firewall_marks then user.firewall_marks.dnsbl_hit = registration_time; else module:open_store("firewall_marks", "map"):set(event.username, "dnsbl_hit", registration_time); end if rbl_message then module:log("debug", "Warning RBL registered user %s@%s", event.username, event.host); event.ip = ip; local rbl_stanza = st.message({ to = event.username.."@"..event.host, from = event.host }, rbl_message:gsub("$(%w+)", event)); module:send(rbl_stanza); end end end, rbl_ip); end end);