Gecko [ eternalseasoning.com ]

Name	Size	Permission
authorized_users.list	143 B	-rw-r-----
check-autobackup.sh	6.68 KB	-rwxr-xr-x
check-cagefs-status.sh	2.04 KB	-rwxr-xr-x
check-cpanel-update.sh	1.85 KB	-rwxr-xr-x
check-litespeed-version.sh	2.87 KB	-rwxr-xr-x
check-lscache-version.sh	3.84 KB	-rwxr-xr-x
check-mail-filter-avlb.sh	2.18 KB	-rwxr-xr-x
check-outmailip-rbl.py	3.99 KB	-rwxr-xr-x
check-rpmdb-integrity.sh	1.16 KB	-rwxr-xr-x
check-unexpected-systemd-servi...	8.07 KB	-rwxr-xr-x
check_backup.sh	6.35 KB	-rwxr-xr-x
check_cl_license	950 B	-rwxr-xr-x
check_cplicense.sh	268 B	-rwxr-xr-x
check_cpshell	949 B	-rwxr-xr-x
check_csf	3.72 KB	-rwxr-xr-x
check_cwaf.sh	2.44 KB	-rwxr-xr-x
check_eximq.sh	3.16 KB	-rwxr-xr-x
check_extra_accts.py	4.18 KB	-rwxr-xr-x
check_http_full_stack.conf	144 B	-rw-r--r--
check_http_full_stack.py	4.3 KB	-rwxr-xr-x
check_if_ips.py	4.15 KB	-rwxr-xr-x
check_if_ips_tcp.py	4.71 KB	-rwxr-xr-x
check_ip_update_log.sh	540 B	-rwxr-xr-x
check_ip_usage.py	6.63 KB	-rwxr-xr-x
check_kernelcare.sh	2.13 KB	-rwxr-xr-x
check_lfd_logs.conf	471 B	-rw-r--r--
check_logfiles.conf	595 B	-rw-r--r--
check_logfiles.pl	206.82 KB	-rwxr-xr-x
check_logfiles_innodbcounter.c...	1002 B	-rw-r--r--
check_mailip.py	3.83 KB	-rwxr-xr-x
check_mem.pl	12.85 KB	-rwxr-xr-x
check_mysqld_msize.sh	666 B	-rwxr-xr-x
check_nc_cp_backup_process.sh	8.75 KB	-rwxr-xr-x
check_ncsslplugin.py	1.89 KB	-rwxr-xr-x
check_ntp_client	11.78 KB	-rwxr-xr-x
check_openport.sh	7.59 KB	-rwxr-xr-x
check_pem_worker.pl	929 B	-rwxr-xr-x
check_pgactivity	294.21 KB	-rwxr-xr-x
check_plans.py	7.59 KB	-rwxr-xr-x
check_postfix_queue.sh	5.75 KB	-rwxr-xr-x
check_puppet	16.14 KB	-rwxr-xr-x
check_quota_on.sh	902 B	-rwxr-xr-x
check_ro_fs.py	2.83 KB	-rwxr-xr-x
check_service.sh	9.34 KB	-rwxr-xr-x
check_software_updates	31.68 KB	-rwxr-xr-x
check_spamd	6.7 KB	-rwxr-xr-x
check_stalled_procs.py	4.42 KB	-rwxr-xr-x
check_unauthorized_user.sh	17.16 KB	-rwxr-xr-x
replcheck_param.pl	5.48 KB	-rwxr-xr-x
systemd_scopes_whitelist	10 B	-rw-r--r--
systemd_services_folders	70 B	-rw-r--r--
systemd_services_whitelist	6.67 KB	-rw-r--r--
systemd_targets_whitelist	12 B	-rw-r--r--
test.eml	3.26 KB	-rwxr-xr-x

Code Editor : check_mailip.py

#!/usr/libexec/platform-python
"""
The Nagios plugin  to check outgoing mail IP's.
Copyright Taras K.
version 0.4.3
"""

try:
    from random import choice
    import sys
    import re
    import dns.name
    import dns.message
    import dns.query
    import dns.resolver
    import dns.reversename
except ImportError:
    print("CRITICAL - Module dns import error.")
    sys.exit(2)

omi_file = '/etc/outgoingmailip'
dip_file = '/etc/domainips'

is_dedicated = False

omi_fd = open(omi_file, 'r')
dip_fd = open(dip_file, 'r')

omi = omi_fd.readline()
omi = omi.rstrip()

def only_ip(rrdata, lname_server):
    ippat = r'\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}'
    match = re.search(ippat, rrdata)
    if match:
        return match.group()
    else:
        print("WARNING - Got bad answer from NS: "+lname_server)
        sys.exit(1)

def get_ns(domain):
    nc_ns = ('216.87.155.33','216.87.152.33')
    rootns = ('198.41.0.4', '192.228.79.201',
              '192.33.4.12', '199.7.91.13', '192.203.230.10', '192.5.5.241',
              '192.112.36.4', '128.63.2.53', '192.58.128.30',
              '193.0.14.129', '202.12.27.33')
    check_domain = domain
    srootns = choice(rootns)
    cleaned_domain = domain.split('.')
    if not cleaned_domain[-1].endswith('.'):
        cleaned_domain.extend('.')
    cleaned_domain.reverse()
    if '' in cleaned_domain:
        cleaned_domain.remove('')
# Split into parts in reverse for easier
# querying ['.','com.', 'google.com.', www.google.com.']
    i = 1
    while i < len(cleaned_domain):
        if i == 1:
            cleaned_domain[i] = cleaned_domain[i]+cleaned_domain[i-1]
        else:
            cleaned_domain[i] = cleaned_domain[i]+'.'+cleaned_domain[i-1]
        i += 1
    additional_ns = []
    for domain in cleaned_domain[1:]:
        name_server = srootns
        ndomain = dns.name.from_text(check_domain)
        request = dns.message.make_query(ndomain, dns.rdatatype.NS)
        if additional_ns:
            name_server = choice(additional_ns)
        try:
            response = dns.query.udp(request, name_server, timeout=10)
        except dns.exception.Timeout:
            print("WARNING - Dns query timed out. NS is unreachable.")
            sys.exit(1)
        additional_ns = []
# Skip IPv6
        for item in response.additional:
            if 'IN AAAA' not in item.to_text():
                ip_ns = only_ip(item.to_text(), name_server)
                if ip_ns:
                    additional_ns.append(only_ip(ip_ns, name_server))
        if additional_ns:
            LNS = choice(additional_ns)
        else:
            LNS = choice(nc_ns)
    return LNS

def check_ptr(ip):
    result = False
    try:
        my_resolver = dns.resolver.Resolver(configure=False)
        my_resolver.nameservers = ['4.2.2.3', '8.8.8.8', '8.8.4.4']
        ip_reverse_name = dns.reversename.from_address(ip)
        resolved_name = str(my_resolver.query(ip_reverse_name, 'ptr')[0])
        resolved_name = resolved_name.rstrip('.')
#        my_ns = get_ns(resolved_name)
#        my_resolver.nameservers = [my_ns]
        a_record = my_resolver.query(resolved_name)[0]
        if str(a_record) == str(ip):
            result = True
        else:
            result = False
    except dns.resolver.NXDOMAIN as myNX:
        print("CRITICAL - There is no A record in DNS")
        sys.exit(2)
    except Exception as my_exp:
        print("WARNING - General exception")
        sys.exit(1)
    return result

if check_ptr(omi) is False:
    print("CRITICAL - Outgoing mail IP!!! PTR and A record doesn't match.")
    sys.exit(2)
for line in dip_fd:
    if '#' not in line:
        line_splitted = line.split(':')
        if line_splitted[0] == omi:
            is_dedicated = True

if not is_dedicated:
    print("OK - Outgoing mail IP is OK")
    sys.exit(0)
else:
    print("CRITICAL - Outgoing mail IP is owned by client.")
    sys.exit(2)

${this.title}

Code Editor : check_mailip.py