Mercurial > prosody-modules
view mod_register_dnsbl_firewall_mark/mod_register_dnsbl_firewall_mark.lua @ 5186:fa3059e653fa
mod_http_oauth2: Implement the Implicit flow
Everyone says this is insecure and bad, but it's also the only thing
that makes sense for e.g. pure JavaScript clients, but hey implement
this even more complicated thing instead!
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Thu, 02 Mar 2023 22:06:50 +0100 |
parents | de40686ae9c8 |
children |
line wrap: on
line source
local adns = require "net.adns"; local rbl = module:get_option_string("registration_rbl"); local rbl_message = module:get_option_string("registration_rbl_message"); local st = require "util.stanza"; local function cleanup_ip(ip) if ip:sub(1,7):lower() == "::ffff:" then return ip:sub(8); end return ip; end local function reverse(ip, suffix) local a,b,c,d = ip:match("^(%d+).(%d+).(%d+).(%d+)$"); if not a then return end return ("%d.%d.%d.%d.%s"):format(d,c,b,a, suffix); end module:hook("user-registered", function (event) local session = event.session; local ip = session and session.ip and cleanup_ip(session.ip); local rbl_ip = ip and reverse(ip, rbl); if rbl_ip then local registration_time = os.time(); local log = session.log; adns.lookup(function (reply) if reply and reply[1] then log("warn", "Account %s@%s registered from IP %s found in RBL (%s)", event.username, event.host or module.host, ip, reply[1].a); local user = prosody.bare_sessions[event.username .. "@" .. module.host]; if user and user.firewall_marks then user.firewall_marks.dnsbl_hit = registration_time; else module:open_store("firewall_marks", "map"):set(event.username, "dnsbl_hit", registration_time); end if rbl_message then module:log("debug", "Warning RBL registered user %s@%s", event.username, event.host); event.ip = ip; local rbl_stanza = st.message({ to = event.username.."@"..event.host, from = event.host }, rbl_message:gsub("$(%w+)", event)); module:send(rbl_stanza); end end end, rbl_ip); end end);