changeset 2895:589cc51209f7

mod_register_dnsbl_firewall_mark: Another copy of DNSBL module, this time creating "user marks" for mod_firewall
author Kim Alvefur <zash@zash.se>
date Sat, 24 Feb 2018 21:42:54 +0100
parents 165d2877eeac
children d276bf3f0464
files mod_register_dnsbl_firewall_mark/mod_register_dnsbl_firewall_mark.lua
diffstat 1 files changed, 29 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mod_register_dnsbl_firewall_mark/mod_register_dnsbl_firewall_mark.lua	Sat Feb 24 21:42:54 2018 +0100
@@ -0,0 +1,29 @@
+local adns = require "net.adns";
+local rbl = module:get_option_string("registration_rbl");
+
+local function reverse(ip, suffix)
+	local a,b,c,d = ip:match("^(%d+).(%d+).(%d+).(%d+)$");
+	if not a then return end
+	return ("%d.%d.%d.%d.%s"):format(d,c,b,a, suffix);
+end
+
+module:hook("user-registered", function (event)
+	local session = event.session;
+	local ip = session and session.ip;
+	local rbl_ip = ip and reverse(ip, rbl);
+	if rbl_ip then
+		local registration_time = os.time();
+		local log = session.log;
+		adns.lookup(function (reply)
+			if reply and reply[1] then
+				log("warn", "Account %s@%s registered from IP %s found in RBL (%s)", event.username, event.host or module.host, ip, reply[1].a);
+				local user = prosody.bare_sessions[event.username .. "@" .. module.host];
+				if user and user.firewall_marks then
+					user.firewall_marks.dnsbl_hit = registration_time;
+				else
+					module:open_store("firewall_marks", "map"):set(event.username, "dnsbl_hit", registration_time);
+				end
+			end
+		end, rbl_ip);
+	end
+end);