2 15cacd92 2019-03-29 martijn * Copyright (c) 2019 Martijn van Duren <martijn@openbsd.org>
4 15cacd92 2019-03-29 martijn * Permission to use, copy, modify, and distribute this software for any
5 15cacd92 2019-03-29 martijn * purpose with or without fee is hereby granted, provided that the above
6 15cacd92 2019-03-29 martijn * copyright notice and this permission notice appear in all copies.
8 15cacd92 2019-03-29 martijn * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 15cacd92 2019-03-29 martijn * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 15cacd92 2019-03-29 martijn * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 15cacd92 2019-03-29 martijn * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 15cacd92 2019-03-29 martijn * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 15cacd92 2019-03-29 martijn * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 15cacd92 2019-03-29 martijn * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 aeda4d4e 2019-03-28 martijn #include <sys/types.h>
17 a248a3c1 2019-03-27 martijn #include <sys/socket.h>
19 2e3e5d5f 2019-03-29 martijn #include <arpa/inet.h>
20 a248a3c1 2019-03-27 martijn #include <errno.h>
21 aeda4d4e 2019-03-28 martijn #include <event.h>
22 a287838f 2019-03-31 martijn #include <inttypes.h>
23 a248a3c1 2019-03-27 martijn #include <netdb.h>
24 a248a3c1 2019-03-27 martijn #include <stdlib.h>
25 d4e702ee 2019-08-22 martijn #include <stdarg.h>
26 a248a3c1 2019-03-27 martijn #include <stdio.h>
27 a248a3c1 2019-03-27 martijn #include <string.h>
28 b633fa4c 2019-03-29 martijn #include <syslog.h>
29 a248a3c1 2019-03-27 martijn #include <unistd.h>
30 aeda4d4e 2019-03-28 martijn #include <asr.h>
32 5e62db7b 2019-08-22 martijn #include "opensmtpd.h"
34 aeda4d4e 2019-03-28 martijn struct dnsbl_session;
36 aeda4d4e 2019-03-28 martijn struct dnsbl_query {
37 aeda4d4e 2019-03-28 martijn struct event_asr *event;
38 a7f2d00f 2019-10-22 martijn int running;
39 aeda4d4e 2019-03-28 martijn int blacklist;
40 aeda4d4e 2019-03-28 martijn struct dnsbl_session *session;
43 aeda4d4e 2019-03-28 martijn struct dnsbl_session {
44 5468729e 2019-03-29 martijn int listed;
45 a287838f 2019-03-31 martijn int set_header;
46 a287838f 2019-03-31 martijn int logged_mark;
47 aeda4d4e 2019-03-28 martijn struct dnsbl_query *query;
48 5e62db7b 2019-08-22 martijn struct osmtpd_ctx *ctx;
51 1aa52bf5 2021-10-27 martijn static const char **blacklists = NULL;
52 1aa52bf5 2021-10-27 martijn static const char **printblacklists;
53 a248a3c1 2019-03-27 martijn static size_t nblacklists = 0;
54 5468729e 2019-03-29 martijn static int markspam = 0;
55 3b767c06 2019-08-22 martijn static int verbose = 0;
57 1aa52bf5 2021-10-27 martijn const char *dnsbl_printblacklist(const char *);
58 5e62db7b 2019-08-22 martijn void dnsbl_connect(struct osmtpd_ctx *, const char *,
59 5e62db7b 2019-08-22 martijn struct sockaddr_storage *);
60 5e62db7b 2019-08-22 martijn void dnsbl_begin(struct osmtpd_ctx *, uint32_t);
61 5e62db7b 2019-08-22 martijn void dnsbl_dataline(struct osmtpd_ctx *, const char *);
62 aeda4d4e 2019-03-28 martijn void dnsbl_resolve(struct asr_result *, void *);
63 5468729e 2019-03-29 martijn void dnsbl_session_query_done(struct dnsbl_session *);
64 5e62db7b 2019-08-22 martijn void *dnsbl_session_new(struct osmtpd_ctx *);
65 5e62db7b 2019-08-22 martijn void dnsbl_session_free(struct osmtpd_ctx *, void *);
66 1aa52bf5 2021-10-27 martijn void usage(void);
69 a248a3c1 2019-03-27 martijn main(int argc, char *argv[])
72 5e62db7b 2019-08-22 martijn size_t i;
74 3b767c06 2019-08-22 martijn while ((ch = getopt(argc, argv, "mv")) != -1) {
75 a248a3c1 2019-03-27 martijn switch (ch) {
76 5468729e 2019-03-29 martijn case 'm':
77 5468729e 2019-03-29 martijn markspam = 1;
79 3b767c06 2019-08-22 martijn case 'v':
80 3b767c06 2019-08-22 martijn verbose = 1;
87 b633fa4c 2019-03-29 martijn if (pledge("stdio dns", NULL) == -1)
88 8b87eb2e 2019-08-22 martijn osmtpd_err(1, "pledge");
90 96a01110 2019-03-29 martijn if ((nblacklists = argc - optind) == 0)
91 8b87eb2e 2019-08-22 martijn osmtpd_errx(1, "No blacklist specified");
93 1aa52bf5 2021-10-27 martijn blacklists = calloc(nblacklists, sizeof(*blacklists));
94 1aa52bf5 2021-10-27 martijn printblacklists = calloc(nblacklists, sizeof(*printblacklists));
95 1aa52bf5 2021-10-27 martijn if (printblacklists == NULL || blacklists == NULL)
96 8b87eb2e 2019-08-22 martijn osmtpd_err(1, "malloc");
97 1aa52bf5 2021-10-27 martijn for (i = 0; i < nblacklists; i++) {
98 deafb383 2019-03-29 martijn blacklists[i] = argv[optind + i];
99 1aa52bf5 2021-10-27 martijn printblacklists[i] = dnsbl_printblacklist(argv[optind + i]);
102 5e62db7b 2019-08-22 martijn osmtpd_register_filter_connect(dnsbl_connect);
103 5e62db7b 2019-08-22 martijn osmtpd_local_session(dnsbl_session_new, dnsbl_session_free);
104 a287838f 2019-03-31 martijn if (markspam) {
105 5e62db7b 2019-08-22 martijn osmtpd_register_report_begin(1, dnsbl_begin);
106 5e62db7b 2019-08-22 martijn osmtpd_register_filter_dataline(dnsbl_dataline);
108 5e62db7b 2019-08-22 martijn osmtpd_run();
110 a248a3c1 2019-03-27 martijn return 0;
113 1aa52bf5 2021-10-27 martijn const char *
114 1aa52bf5 2021-10-27 martijn dnsbl_printblacklist(const char *blacklist)
116 1aa52bf5 2021-10-27 martijn /* All of abusix is paid and has a key in the first spot */
117 1aa52bf5 2021-10-27 martijn if (strcasestr(blacklist, ".mail.abusix.zone") != NULL)
118 1aa52bf5 2021-10-27 martijn return strchr(blacklist, '.') + 1;
119 1aa52bf5 2021-10-27 martijn /* XXX assume dq.spamhaus.net is paid and has a key in the first spot */
120 1aa52bf5 2021-10-27 martijn if (strcasestr(blacklist, ".dq.spamhaus.net") != NULL)
121 1aa52bf5 2021-10-27 martijn return strchr(blacklist, '.') + 1;
122 1aa52bf5 2021-10-27 martijn return blacklist;
126 5e62db7b 2019-08-22 martijn dnsbl_connect(struct osmtpd_ctx *ctx, const char *hostname,
127 5e62db7b 2019-08-22 martijn struct sockaddr_storage *ss)
129 5e62db7b 2019-08-22 martijn struct dnsbl_session *session = ctx->local_session;
130 5e62db7b 2019-08-22 martijn struct asr_query *aq;
131 a248a3c1 2019-03-27 martijn char query[255];
132 a248a3c1 2019-03-27 martijn u_char *addr;
133 5e62db7b 2019-08-22 martijn size_t i;
135 5e62db7b 2019-08-22 martijn if (ss->ss_family == AF_INET)
136 5e62db7b 2019-08-22 martijn addr = (u_char *)(&(((struct sockaddr_in *)ss)->sin_addr));
138 5e62db7b 2019-08-22 martijn addr = (u_char *)(&(((struct sockaddr_in6 *)ss)->sin6_addr));
139 a248a3c1 2019-03-27 martijn for (i = 0; i < nblacklists; i++) {
140 5e62db7b 2019-08-22 martijn if (ss->ss_family == AF_INET) {
141 a248a3c1 2019-03-27 martijn if (snprintf(query, sizeof(query), "%u.%u.%u.%u.%s",
142 a248a3c1 2019-03-27 martijn addr[3], addr[2], addr[1], addr[0],
143 5e62db7b 2019-08-22 martijn blacklists[i]) >= (int) sizeof(query))
144 4525b998 2019-08-22 martijn osmtpd_errx(1,
145 4525b998 2019-08-22 martijn "Can't create query, domain too long");
146 5e62db7b 2019-08-22 martijn } else if (ss->ss_family == AF_INET6) {
147 a248a3c1 2019-03-27 martijn if (snprintf(query, sizeof(query), "%hhx.%hhx.%hhx.%hhx"
148 a248a3c1 2019-03-27 martijn ".%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx"
149 a248a3c1 2019-03-27 martijn ".%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx"
150 a248a3c1 2019-03-27 martijn ".%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%hhx.%s",
151 a248a3c1 2019-03-27 martijn (u_char) (addr[15] & 0xf), (u_char) (addr[15] >> 4),
152 a248a3c1 2019-03-27 martijn (u_char) (addr[14] & 0xf), (u_char) (addr[14] >> 4),
153 a248a3c1 2019-03-27 martijn (u_char) (addr[13] & 0xf), (u_char) (addr[13] >> 4),
154 a248a3c1 2019-03-27 martijn (u_char) (addr[12] & 0xf), (u_char) (addr[12] >> 4),
155 a248a3c1 2019-03-27 martijn (u_char) (addr[11] & 0xf), (u_char) (addr[11] >> 4),
156 a248a3c1 2019-03-27 martijn (u_char) (addr[10] & 0xf), (u_char) (addr[10] >> 4),
157 a248a3c1 2019-03-27 martijn (u_char) (addr[9] & 0xf), (u_char) (addr[9] >> 4),
158 a248a3c1 2019-03-27 martijn (u_char) (addr[8] & 0xf), (u_char) (addr[8] >> 4),
159 a248a3c1 2019-03-27 martijn (u_char) (addr[7] & 0xf), (u_char) (addr[8] >> 4),
160 a248a3c1 2019-03-27 martijn (u_char) (addr[6] & 0xf), (u_char) (addr[7] >> 4),
161 a248a3c1 2019-03-27 martijn (u_char) (addr[5] & 0xf), (u_char) (addr[5] >> 4),
162 a248a3c1 2019-03-27 martijn (u_char) (addr[4] & 0xf), (u_char) (addr[4] >> 4),
163 a248a3c1 2019-03-27 martijn (u_char) (addr[3] & 0xf), (u_char) (addr[3] >> 4),
164 a248a3c1 2019-03-27 martijn (u_char) (addr[2] & 0xf), (u_char) (addr[2] >> 4),
165 a248a3c1 2019-03-27 martijn (u_char) (addr[1] & 0xf), (u_char) (addr[1] >> 4),
166 a248a3c1 2019-03-27 martijn (u_char) (addr[0] & 0xf), (u_char) (addr[0] >> 4),
167 5e62db7b 2019-08-22 martijn blacklists[i]) >= (int) sizeof(query))
168 4525b998 2019-08-22 martijn osmtpd_errx(1,
169 4525b998 2019-08-22 martijn "Can't create query, domain too long");
171 8b87eb2e 2019-08-22 martijn osmtpd_errx(1, "Invalid address family received");
173 5e62db7b 2019-08-22 martijn aq = gethostbyname_async(query, NULL);
174 5e62db7b 2019-08-22 martijn session->query[i].event = event_asr_run(aq, dnsbl_resolve,
175 5e62db7b 2019-08-22 martijn &(session->query[i]));
176 aeda4d4e 2019-03-28 martijn session->query[i].blacklist = i;
177 aeda4d4e 2019-03-28 martijn session->query[i].session = session;
178 a7f2d00f 2019-10-22 martijn session->query[i].running = 1;
183 aeda4d4e 2019-03-28 martijn dnsbl_resolve(struct asr_result *result, void *arg)
185 aeda4d4e 2019-03-28 martijn struct dnsbl_query *query = arg;
186 aeda4d4e 2019-03-28 martijn struct dnsbl_session *session = query->session;
187 5e62db7b 2019-08-22 martijn size_t i;
189 a7f2d00f 2019-10-22 martijn query->running = 0;
190 aeda4d4e 2019-03-28 martijn query->event = NULL;
191 aeda4d4e 2019-03-28 martijn if (result->ar_hostent != NULL) {
192 5468729e 2019-03-29 martijn if (!markspam) {
193 5e62db7b 2019-08-22 martijn osmtpd_filter_disconnect(session->ctx, "Listed at %s",
194 1aa52bf5 2021-10-27 martijn printblacklists[query->blacklist]);
195 d4e702ee 2019-08-22 martijn fprintf(stderr, "%016"PRIx64" listed at %s: rejected\n",
196 1aa52bf5 2021-10-27 martijn session->ctx->reqid,
197 1aa52bf5 2021-10-27 martijn printblacklists[query->blacklist]);
198 5468729e 2019-03-29 martijn } else {
199 5468729e 2019-03-29 martijn session->listed = query->blacklist;
200 5e62db7b 2019-08-22 martijn osmtpd_filter_proceed(session->ctx);
201 a287838f 2019-03-31 martijn /* Delay logging until we have a message */
203 a7f2d00f 2019-10-22 martijn dnsbl_session_query_done(session);
206 cf6af233 2019-03-28 martijn if (result->ar_h_errno != HOST_NOT_FOUND) {
207 5e62db7b 2019-08-22 martijn osmtpd_filter_disconnect(session->ctx, "DNS error on %s",
208 1aa52bf5 2021-10-27 martijn printblacklists[query->blacklist]);
209 a7f2d00f 2019-10-22 martijn dnsbl_session_query_done(session);
213 aeda4d4e 2019-03-28 martijn for (i = 0; i < nblacklists; i++) {
214 a7f2d00f 2019-10-22 martijn if (session->query[i].running)
217 5e62db7b 2019-08-22 martijn osmtpd_filter_proceed(session->ctx);
218 3b767c06 2019-08-22 martijn if (verbose)
219 d4e702ee 2019-08-22 martijn fprintf(stderr, "%016"PRIx64" not listed\n",
220 d4e702ee 2019-08-22 martijn session->ctx->reqid);
224 5e62db7b 2019-08-22 martijn dnsbl_begin(struct osmtpd_ctx *ctx, uint32_t msgid)
226 5e62db7b 2019-08-22 martijn struct dnsbl_session *session = ctx->local_session;
228 a287838f 2019-03-31 martijn if (session->listed != -1) {
229 a287838f 2019-03-31 martijn if (!session->logged_mark) {
230 d4e702ee 2019-08-22 martijn fprintf(stderr, "%016"PRIx64" listed at %s: Marking as "
231 1aa52bf5 2021-10-27 martijn "spam\n", ctx->reqid,
232 1aa52bf5 2021-10-27 martijn printblacklists[session->listed]);
233 a287838f 2019-03-31 martijn session->logged_mark = 1;
235 a287838f 2019-03-31 martijn session->set_header = 1;
240 5e62db7b 2019-08-22 martijn dnsbl_dataline(struct osmtpd_ctx *ctx, const char *line)
242 5e62db7b 2019-08-22 martijn struct dnsbl_session *session = ctx->local_session;
244 a287838f 2019-03-31 martijn if (session->set_header) {
245 5e62db7b 2019-08-22 martijn osmtpd_filter_dataline(ctx, "X-Spam: yes");
246 5e62db7b 2019-08-22 martijn osmtpd_filter_dataline(ctx, "X-Spam-DNSBL: Listed at %s",
247 1aa52bf5 2021-10-27 martijn printblacklists[session->listed]);
248 a287838f 2019-03-31 martijn session->set_header = 0;
251 5e62db7b 2019-08-22 martijn osmtpd_filter_dataline(ctx, "%s", line);
255 5468729e 2019-03-29 martijn dnsbl_session_query_done(struct dnsbl_session *session)
257 5e62db7b 2019-08-22 martijn size_t i;
259 aeda4d4e 2019-03-28 martijn for (i = 0; i < nblacklists; i++) {
260 a7f2d00f 2019-10-22 martijn if (session->query[i].running) {
261 aeda4d4e 2019-03-28 martijn event_asr_abort(session->query[i].event);
262 a7f2d00f 2019-10-22 martijn session->query[i].running = 0;
268 5e62db7b 2019-08-22 martijn dnsbl_session_new(struct osmtpd_ctx *ctx)
270 5e62db7b 2019-08-22 martijn struct dnsbl_session *session;
272 5e62db7b 2019-08-22 martijn if ((session = calloc(1, sizeof(*session))) == NULL)
273 8b87eb2e 2019-08-22 martijn osmtpd_err(1, "malloc");
274 5e62db7b 2019-08-22 martijn if ((session->query = calloc(nblacklists, sizeof(*(session->query))))
275 5e62db7b 2019-08-22 martijn == NULL)
276 8b87eb2e 2019-08-22 martijn osmtpd_err(1, "malloc");
277 5e62db7b 2019-08-22 martijn session->listed = -1;
278 5e62db7b 2019-08-22 martijn session->set_header = 0;
279 5e62db7b 2019-08-22 martijn session->logged_mark = 0;
280 5e62db7b 2019-08-22 martijn session->ctx = ctx;
282 5e62db7b 2019-08-22 martijn return session;
286 5e62db7b 2019-08-22 martijn dnsbl_session_free(struct osmtpd_ctx *ctx, void *data)
288 5e62db7b 2019-08-22 martijn struct dnsbl_session *session = data;
290 5468729e 2019-03-29 martijn dnsbl_session_query_done(session);
291 aeda4d4e 2019-03-28 martijn free(session->query);
292 aeda4d4e 2019-03-28 martijn free(session);
295 f8356fc3 2019-03-28 martijn __dead void
296 a248a3c1 2019-03-27 martijn usage(void)
298 ce077085 2019-11-14 martijn fprintf(stderr, "usage: filter-dnsbl [-m] blacklist [...]\n");
299 a248a3c1 2019-03-27 martijn exit(1);
