| Server IP : 88.222.222.116 / Your IP : 216.73.216.122 Web Server : LiteSpeed System : Linux id-dci-web1986.main-hosting.eu 5.14.0-611.26.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jan 29 05:24:47 EST 2026 x86_64 User : u686484674 ( 686484674) PHP Version : 8.0.30 Disable Function : system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail MySQL : OFF | cURL : ON | WGET : ON | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /proc/self/root/opt/./alt/python27/lib/python2.7/site-packages/postomaat/plugins/ |
Upload File : |
# -*- coding: UTF-8 -*-
# Copyright 2012-2018 Oli Schacher
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
#
#
"""
plugins with rdns checks
"""
from postomaat.shared import ScannerPlugin,DUNNO,REJECT,DEFER,DEFER_IF_PERMIT,FILTER,HOLD,PREPEND,WARN,FileList
import re
class IdentityCrisis(ScannerPlugin):
""" Reject clients with no FCcdns and address literal HELO """
def __init__(self,config,section=None):
ScannerPlugin.__init__(self,config,section)
self.logger=self._logger()
self.requiredvars={
'action':{
'default':'DEFER',
'description':'Action if sender has no FcRDNS and is using a address literal HELO',
},
'message':{
'default':'No FcrDNS and address literal HELO - Who are you?',
},
}
self.pattern=re.compile('^\[[0-9a-fA-F:.]+\]$')
def examine(self,suspect):
retaction=DUNNO
retmessage=""
revclient=suspect.get_value('reverse_client_name')
if revclient is None or revclient.strip()=='unknown' or revclient.strip()=='':
helo_name=suspect.get_value('helo_name')
if helo_name is None or self.pattern.match(helo_name) is not None:
retaction=self.config.get(self.section,'action').strip()
retmessage=self.config.get(self.section,'message').strip()
return retaction,retmessage
def lint(self):
lint_ok=True
retaction=self.config.get(self.section,'action').strip().lower()
reasonable_actions=[REJECT,DEFER,DEFER_IF_PERMIT,FILTER,HOLD,PREPEND,WARN]
if retaction not in reasonable_actions:
print("are you sure about action '%s' ?"%retaction)
print("I'd expect one of %s"%(",".join(reasonable_actions)))
lint_ok=False
if not self.checkConfig():
print('Error checking config')
lint_ok = False
return lint_ok
def __str__(self):
return "Identity Crisis"
class CreativeTLD(ScannerPlugin):
""" Reject clients with unofficial TLD in rdns """
def __init__(self,config,section=None):
ScannerPlugin.__init__(self,config,section)
self.logger=self._logger()
self.requiredvars={
'action':{
'default':'REJECT',
'description':'Action if sender uses invalid TLD',
},
'message':{
'default':'forged rDNS TLD',
},
'tldfile':{
'default':'/etc/mail/tlds-alpha-by-domain.txt',
},
}
self.filelist=FileList(filename=None,strip=True, skip_empty=True, skip_comments=True,lowercase=True,minimum_time_between_reloads=86400)
def examine(self,suspect):
retaction,retmessage = DUNNO,''
revclient=suspect.get_value('reverse_client_name')
self.filelist.filename=self.config.get(self.section,'domainsfile')
tlds = self.filelist.get_list()
if revclient is None or revclient.strip()=='unknown' or '.' not in revclient:
return DUNNO,''
tld=revclient.split('.')[-1].lower()
if tld not in tlds:
retaction=self.config.get(self.section,'action').strip()
retmessage=self.config.get(self.section,'message').strip()
return retaction,retmessage
def lint(self):
lint_ok=True
retaction=self.config.get(self.section,'action').strip().lower()
reasonable_actions=[REJECT,DEFER,DEFER_IF_PERMIT,FILTER,HOLD,PREPEND,WARN]
if retaction not in reasonable_actions:
print("are you sure about action '%s' ?"%retaction)
print("I'd expect one of %s"%(",".join(reasonable_actions)))
lint_ok=False
if not self.checkConfig():
print('Error checking config')
lint_ok = False
return lint_ok
def __str__(self):
return "Creative TLD"