mirror of
https://github.com/docker-mailserver/docker-mailserver.git
synced 2024-01-19 02:48:50 +00:00
b9dbec3276
* refactored scripts located under `target/bin/` The scripts under `target/bin/` now use the new log and I replaced some `""` with `''` on the way. The functionality stays the same, this mostly style and log. * corrected fail2ban (script and tests) * corrected OpenDKIM log output in tests * reverted (some) changes to `sedfile` Moreover, a few messages for BATS were streamlined and a regression in the linting script reverted. * apple PR feedback * improve log output from `fail2ban` script The new output has a single, clear message with the '[ ERROR ] ' prefix, and then output that explains the error afterwards. This is coherent with the logging style which should be used while providing more information than just a single line about IPTables not functioning. * simplified `setquota` script * consistently named the `__usage` function Before, scripts located under `target/bin/` were using `usage` or `__usage`. Now, they're using `__usage` as they should. * improved `sedfile` With `sedfile`, we cannot use the helper functions in a nice way because it is used early in the Dockerfile at a stage where the helper scripts are not yet copied. The script has been adjusted to be canonical with all the other scripts under `target/bin/`. * fixed tests * removed `__usage` from places where it does not belong `__usage` is to be used on wrong user input, not on other failures as well. This was fixed in `delquota` and `setquota`. * apply PR review feedback
84 lines
1.7 KiB
Bash
Executable file
84 lines
1.7 KiB
Bash
Executable file
#! /bin/bash
|
|
|
|
# shellcheck source=../scripts/helpers/index.sh
|
|
source /usr/local/bin/helpers/index.sh
|
|
|
|
if ! IPTABLES_OUTPUT=$(iptables -L -n 2>&1)
|
|
then
|
|
_exit_with_error "IPTables is not functioning correctly
|
|
|
|
The output of \`iptables -L\` was:
|
|
|
|
${IPTABLES_OUTPUT}
|
|
|
|
Possible causes for this error are
|
|
|
|
1. Missing capabilities (you need CAP_NET_RAW & CAP_NET_ADMIN, see \`capsh --print\`)
|
|
2. Modifications caused by user-patches.sh
|
|
3. Host is configured incorrectly
|
|
"
|
|
fi
|
|
|
|
function __usage { echo "Usage: ${0} [<unban> <ip-address>]" ; }
|
|
|
|
unset JAILS
|
|
declare -a JAILS
|
|
for LIST in $(fail2ban-client status | grep "Jail list" | cut -f2- | sed 's/,/ /g')
|
|
do
|
|
JAILS+=("${LIST}")
|
|
done
|
|
|
|
if [[ -z ${1} ]]
|
|
then
|
|
|
|
IP_COUNT=0
|
|
|
|
for JAIL in "${JAILS[@]}"
|
|
do
|
|
BANNED_IP="$(iptables -L "f2b-${JAIL}" -n 2>/dev/null | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' | grep -v '0.0.0.0')"
|
|
|
|
if [[ -n ${BANNED_IP} ]]
|
|
then
|
|
echo "Banned in ${JAIL}: ${BANNED_IP//$'\n'/, }"
|
|
IP_COUNT=$(( IP_COUNT + 1 ))
|
|
fi
|
|
done
|
|
|
|
if [[ ${IP_COUNT} -eq 0 ]]
|
|
then
|
|
_log 'info' 'No IPs have been banned'
|
|
fi
|
|
|
|
else
|
|
|
|
case "${1}" in
|
|
|
|
( 'unban' )
|
|
shift
|
|
if [[ -n ${1} ]]
|
|
then
|
|
|
|
for JAIL in "${JAILS[@]}"
|
|
do
|
|
RESULT="$(fail2ban-client set "${JAIL}" unbanip "${@}" 2>&1)"
|
|
|
|
[[ ${RESULT} != *"is not banned"* ]] && [[ ${RESULT} != *"NOK"* ]] && echo -e "Unbanned IP from ${JAIL}: ${RESULT}"
|
|
done
|
|
|
|
else
|
|
_log 'warn' "You need to specify an IP address: Run './setup.sh debug fail2ban' to get a list of banned IP addresses"
|
|
exit 0
|
|
fi
|
|
;;
|
|
|
|
( * )
|
|
__usage
|
|
_exit_with_error "Unknown command '${1}'"
|
|
;;
|
|
|
|
esac
|
|
|
|
fi
|
|
|
|
exit 0
|