DuckCorp » CyborgHood

config

log

var

- ban keys from unknow users flooding -> counter, reseted when key added in DB

- protect against intercepted mail with falsified headers (From/Reply-To/... could be tampered to get replies, reply tampered too, and then resent to avoid being detected)

require 'yaml'

require 'log4r'

require "cyborghood/lang_additions"

module CyborgHood

PRODUCT = "CyborgHood"

VERSION = "0.2.0~dev"

# severities: # :dangerous :unrecoverable :ignorable

# categories:

# - db

refs = []

end

unless command_txt

order.user = self.user

return order

end

def parse_signed

sigs_check = verify_pgp_signature()

sig_check = sigs_check.first

logger.info "Mail content was properly signed by key #{sig_check.fingerprint}"

user = Person.find_by_fingerprint(sig_check.fingerprint)

if user.nil?

order.warn_sender = true

return order

end

logger.debug "Signature drift time: #{drift}"

unless drift.abs < MAX_DRIFT_TIME

if drift > 0

order.user = self.user

else

# mark message to prevent later replay of the message

mark_processed(sig_check.timestamp)

order.user = self.user

end

return order

end

end

end

def mark_dir

result = OpenStruct.new

result.cmd = cmdstr

result.ok = false

result.refs = nil

end

rescue CyberError => e

result = OpenStruct.new

result.cmd = cmdstr

result.ok = false

result.refs = nil

end

list = CyborgHood::DnsDomain.find_by_manager(user)

txt_list = list.collect{|z| z.cn }.sort.join(", ")

result.ok = true

when "GET"

return if cmdline.empty?

case cmdline.shift.upcase

dom = CyborgHood::DnsDomain.new(zone)

unless dom.hosted?

return result

end

unless dom.managed_by? user

return result

end

srv_dns = CyborgHood::Services::DNS.new(zone)

result.ok = true

zone_ref = {:content => srv_dns.read_zone, :filename => "dnszone_#{zone}.txt"}.to_ostruct

result.refs = [zone_ref]

end

zone = cmdline.shift.downcase

dom = CyborgHood::DnsDomain.new(zone)

unless dom.hosted?

return result

end

unless dom.managed_by? user

return result

end

srv_dns = CyborgHood::Services::DNS.new(zone)

return unless content_ref =~ /^@(\d+)$/

part_ref = $1.to_i

unless (1..refs.size).include? part_ref

return result

end

part = refs[part_ref]

unless part.content_type == "text/plain"

return result

end

dns_result = srv_dns.check_zone_file(f.path)

unless dns_result.ok

f.close!

return result

end

logger.debug "New serial: #{dns_result.serial}"

# allow new serial or missing serial (to allow creating a new zone or replacing a broken zone)

unless current_serial.nil? or dns_result.serial > current_serial

f.close!

return result

end

if srv_dns.reload_zone

logger.debug "zone reloaded"

result.ok = true

else

logger.warn "zone reload failed, replacing old content"

srv_dns.replace_zone_with_backup

end

rescue

logger.warn "Writing zone file failed"

result_tag = order.ok ? "SUCCESS" : "FAILURE"

logger.info "Processing result: #{result_tag} (#{order.message})"

logger.info "Extra processing information: " + order.system_message if order.system_message

unless order.ok

if order.warn_sender

logger.info "Sending reply for rejected message"

mail_reply = mail.create_simple_reject_reply("A message (ID: #{mail.message_id}), apparently from you," +

mail_reply.deliver

end

msg.delete

# create transcript

logger.debug "Preparing reply"

reply_attachments = []

result_list.each do |result|

reply_txt << "> #{result.cmd}\n"