X7ROOT File Manager
Current Path:
/usr/sbin
usr
/
sbin
/
📁
..
📄
ModemManager
(1.19 MB)
📄
NetworkManager
(2.83 MB)
📄
abrt-auto-reporting
(10.98 KB)
📄
abrt-configuration
(31.66 KB)
📄
abrt-dbus
(31.22 KB)
📄
abrt-harvest-pstoreoops
(1.32 KB)
📄
abrt-harvest-vmcore
(8.19 KB)
📄
abrt-install-ccpp-hook
(2.85 KB)
📄
abrt-server
(31.11 KB)
📄
abrtd
(31.22 KB)
📄
accept
(10.95 KB)
📄
accessdb
(11.55 KB)
📄
accton
(11.19 KB)
📄
activate-devpay
(15.04 KB)
📄
addgnupghome
(3.05 KB)
📄
addpart
(19.69 KB)
📄
adduser
(134.39 KB)
📄
agetty
(48.48 KB)
📄
alsa-info
(28.09 KB)
📄
alsa-info.sh
(28.09 KB)
📄
alsabat-test.sh
(4.04 KB)
📄
alsactl
(99.15 KB)
📄
alternatives
(27.61 KB)
📄
amaddclient
(15.02 KB)
📄
amadmin
(55.69 KB)
📄
amaespipe
(3.29 KB)
📄
amandad
(35.36 KB)
📄
amarchiver
(15.3 KB)
📄
amcheck
(63.25 KB)
📄
amcheckdb
(1.79 KB)
📄
amcheckdump
(14.25 KB)
📄
amcleanup
(6.21 KB)
📄
amcleanupdisk
(4.16 KB)
📄
amcrypt
(1.02 KB)
📄
amcrypt-ossl
(3.12 KB)
📄
amcrypt-ossl-asym
(6.8 KB)
📄
amcryptsimple
(4.55 KB)
📄
amdevcheck
(4.51 KB)
📄
amdump
(10.46 KB)
📄
amfetchdump
(26.87 KB)
📄
amflush
(27.13 KB)
📄
amgetconf
(12.24 KB)
📄
amgpgcrypt
(2.68 KB)
📄
amlabel
(11.22 KB)
📄
amoverview
(6.42 KB)
📄
amplot
(5.94 KB)
📄
amreport
(17.65 KB)
📄
amrestore
(12.7 KB)
📄
amrmtape
(8.91 KB)
📄
amserverconfig
(20.99 KB)
📄
amservice
(19.16 KB)
📄
amstatus
(49.23 KB)
📄
amtape
(19.47 KB)
📄
amtapetype
(22.56 KB)
📄
amtoc
(7.54 KB)
📄
amvault
(29.59 KB)
📄
anaconda
(54.99 KB)
📄
anacron
(35.52 KB)
📄
apachectl
(4.19 KB)
📄
applygnupgdefaults
(2.21 KB)
📄
arp
(63.98 KB)
📄
arpd
(52.98 KB)
📄
arping
(23.19 KB)
📄
atd
(27.17 KB)
📄
atrun
(67 B)
📄
attrd_updater
(16.52 KB)
📄
audispd
(39.75 KB)
📄
auditctl
(39.56 KB)
📄
auditd
(125.65 KB)
📄
augenrules
(3.7 KB)
📄
aureport
(105.39 KB)
📄
ausearch
(109.8 KB)
📄
authconfig
(43.49 KB)
📄
authconfig-tui
(43.49 KB)
📄
autrace
(15.49 KB)
📄
avahi-daemon
(133.04 KB)
📄
avcstat
(11.25 KB)
📄
badblocks
(27.69 KB)
📄
biosdecode
(24.15 KB)
📄
biosdevname
(36.57 KB)
📄
blkdeactivate
(15.97 KB)
📄
blkdiscard
(23.84 KB)
📄
blkid
(77.92 KB)
📄
blkmapd
(43.81 KB)
📄
blockdev
(32.2 KB)
📄
brctl
(32.13 KB)
📄
bridge
(77.61 KB)
📄
btrfs
(690.59 KB)
📄
btrfs-convert
(378.62 KB)
📄
btrfs-debug-tree
(354.23 KB)
📄
btrfs-find-root
(346.22 KB)
📄
btrfs-image
(374.63 KB)
📄
btrfs-map-logical
(350.27 KB)
📄
btrfs-select-super
(346.2 KB)
📄
btrfs-zero-log
(346.2 KB)
📄
btrfsck
(690.59 KB)
📄
btrfstune
(350.24 KB)
📄
build-locale-archive
(860.52 KB)
📄
cacertdir_rehash
(644 B)
📄
cache_check
(1.23 MB)
📄
cache_dump
(1.23 MB)
📄
cache_metadata_size
(1.23 MB)
📄
cache_repair
(1.23 MB)
📄
cache_restore
(1.23 MB)
📄
cache_writeback
(1.23 MB)
📄
capsh
(19.43 KB)
📄
cbq
(32.73 KB)
📄
cfdisk
(71.37 KB)
📄
cgdisk
(176.87 KB)
📄
chat
(27.3 KB)
📄
chcpu
(23.7 KB)
📄
chgpasswd
(64.1 KB)
📄
chkconfig
(40.22 KB)
📄
chpasswd
(55.88 KB)
📄
chronyd
(263.08 KB)
📄
chroot
(32.48 KB)
📄
cibadmin
(27.2 KB)
📄
cifs.idmap
(15.07 KB)
📄
cifs.upcall
(31.23 KB)
📄
clamd
(208.18 KB)
📄
clamonacc
(200.67 KB)
📄
clock
(48.44 KB)
📄
clockdiff
(19.04 KB)
📄
consoletype
(6.95 KB)
📄
convertquota
(70.88 KB)
📄
corosync
(284.76 KB)
📄
corosync-cfgtool
(14.97 KB)
📄
corosync-cmapctl
(23.31 KB)
📄
corosync-cpgtool
(11 KB)
📄
corosync-keygen
(11.12 KB)
📄
corosync-notifyd
(33.63 KB)
📄
corosync-quorumtool
(23.16 KB)
📄
cracklib-check
(7.04 KB)
📄
cracklib-format
(246 B)
📄
cracklib-packer
(11.06 KB)
📄
cracklib-unpacker
(7.02 KB)
📄
crda
(11.34 KB)
📄
create-cracklib-dict
(990 B)
📄
crm_attribute
(21.51 KB)
📄
crm_diff
(16.73 KB)
📄
crm_error
(11.48 KB)
📄
crm_failcount
(6.56 KB)
📄
crm_master
(2.37 KB)
📄
crm_mon
(84.05 KB)
📄
crm_node
(24.93 KB)
📄
crm_report
(15.9 KB)
📄
crm_resource
(112.09 KB)
📄
crm_shadow
(21.02 KB)
📄
crm_simulate
(50.68 KB)
📄
crm_standby
(3.33 KB)
📄
crm_ticket
(31.15 KB)
📄
crm_verify
(16.38 KB)
📄
crmadmin
(21.1 KB)
📄
crond
(68.48 KB)
📄
cryptsetup
(85.41 KB)
📄
ctrlaltdel
(11.2 KB)
📄
ctstat
(20.09 KB)
📄
cups-browsed
(136.9 KB)
📄
cups-genppd.5.2
(56.05 KB)
📄
cups-genppdupdate
(34.2 KB)
📄
cupsaccept
(10.95 KB)
📄
cupsaddsmb
(10.98 KB)
📄
cupsctl
(14.97 KB)
📄
cupsd
(427.17 KB)
📄
cupsdisable
(10.95 KB)
📄
cupsenable
(10.95 KB)
📄
cupsfilter
(27.37 KB)
📄
cupsreject
(10.95 KB)
📄
dcbtool
(60.03 KB)
📄
ddns-confgen
(19.44 KB)
📄
debugfs
(120.65 KB)
📄
delpart
(19.69 KB)
📄
depmod
(143.24 KB)
📄
devlink
(64.72 KB)
📄
dhclient
(414.34 KB)
📄
dhclient-script
(30.38 KB)
📄
dm_dso_reg_tool
(11.29 KB)
📄
dmevent_tool
(11.29 KB)
📄
dmeventd
(39.56 KB)
📄
dmfilemapd
(19.16 KB)
📄
dmidecode
(120.2 KB)
📄
dmraid
(22.1 KB)
📄
dmraid.static
(22.1 KB)
📄
dmsetup
(149.2 KB)
📄
dmstats
(149.2 KB)
📄
dnsmasq
(340.79 KB)
📄
dnssec-checkds
(922 B)
📄
dnssec-coverage
(924 B)
📄
dnssec-dsfromkey
(56.6 KB)
📄
dnssec-importkey
(52.59 KB)
📄
dnssec-keyfromlabel
(60.52 KB)
📄
dnssec-keygen
(64.55 KB)
📄
dnssec-keymgr
(920 B)
📄
dnssec-revoke
(48.46 KB)
📄
dnssec-settime
(56.52 KB)
📄
dnssec-signzone
(105.71 KB)
📄
dnssec-verify
(48.47 KB)
📄
dosfsck
(56.24 KB)
📄
dosfslabel
(52.23 KB)
📄
dovecot
(88.1 KB)
📄
dracut
(55.83 KB)
📄
dump-acct
(19.63 KB)
📄
dump-utmp
(15.47 KB)
📄
dumpe2fs
(23.62 KB)
📄
e2freefrag
(11.15 KB)
📄
e2fsck
(250.55 KB)
📄
e2image
(27.85 KB)
📄
e2label
(69.41 KB)
📄
e2undo
(11.32 KB)
📄
e4defrag
(23.55 KB)
📄
eapol_test
(1.77 MB)
📄
ebtables
(6.85 KB)
📄
ebtables-restore
(10.88 KB)
📄
ebtables-save
(851 B)
📄
editmap.sendmail
(95.55 KB)
📄
edquota
(83.09 KB)
📄
era_check
(1.23 MB)
📄
era_dump
(1.23 MB)
📄
era_invalidate
(1.23 MB)
📄
era_restore
(1.23 MB)
📄
ether-wake
(73.26 KB)
📄
ethtool
(293.87 KB)
📄
eventlogadm
(39.17 KB)
📄
exportfs
(76.91 KB)
📄
faillock
(15.02 KB)
📄
fancontrol
(14.01 KB)
📄
fatlabel
(52.23 KB)
📄
fcgistarter
(11 KB)
📄
fcgiwrap
(19.8 KB)
📄
fcnsq
(15.13 KB)
📄
fcoeadm
(48.52 KB)
📄
fcoemon
(69.21 KB)
📄
fcping
(31.52 KB)
📄
fcrls
(19.16 KB)
📄
fdformat
(11.27 KB)
📄
fdisk
(195.8 KB)
📄
fence_amt_ws
(8.77 KB)
📄
fence_apc
(7.49 KB)
📄
fence_apc_snmp
(6.28 KB)
📄
fence_bladecenter
(3.09 KB)
📄
fence_brocade
(2.45 KB)
📄
fence_cisco_mds
(2.62 KB)
📄
fence_cisco_ucs
(5.53 KB)
📄
fence_compute
(16.43 KB)
📄
fence_drac5
(5 KB)
📄
fence_eaton_snmp
(6.66 KB)
📄
fence_emerson
(1.85 KB)
📄
fence_eps
(3.52 KB)
📄
fence_evacuate
(13 KB)
📄
fence_heuristics_ping
(5.78 KB)
📄
fence_hpblade
(3.66 KB)
📄
fence_ibmblade
(1.96 KB)
📄
fence_idrac
(6.5 KB)
📄
fence_ifmib
(3.18 KB)
📄
fence_ilo
(4.42 KB)
📄
fence_ilo2
(4.42 KB)
📄
fence_ilo3
(6.5 KB)
📄
fence_ilo3_ssh
(2.03 KB)
📄
fence_ilo4
(6.5 KB)
📄
fence_ilo4_ssh
(2.03 KB)
📄
fence_ilo5
(6.5 KB)
📄
fence_ilo5_ssh
(2.03 KB)
📄
fence_ilo_moonshot
(1.56 KB)
📄
fence_ilo_mp
(1.29 KB)
📄
fence_ilo_ssh
(2.03 KB)
📄
fence_imm
(6.5 KB)
📄
fence_intelmodular
(2.43 KB)
📄
fence_ipdu
(3.86 KB)
📄
fence_ipmilan
(6.5 KB)
📄
fence_kdump
(23.4 KB)
📄
fence_mpath
(9.98 KB)
📄
fence_redfish
(5.34 KB)
📄
fence_rhevm
(6.4 KB)
📄
fence_rsa
(1.76 KB)
📄
fence_rsb
(2.22 KB)
📄
fence_sbd
(11.11 KB)
📄
fence_scsi
(15.95 KB)
📄
fence_virt
(57.66 KB)
📄
fence_vmware_rest
(5.61 KB)
📄
fence_vmware_soap
(8.44 KB)
📄
fence_wti
(7.53 KB)
📄
fence_xvm
(57.66 KB)
📄
filefrag
(15.23 KB)
📄
findfs
(11.2 KB)
📄
fipvlan
(40.16 KB)
📄
firewalld
(6.87 KB)
📄
firstboot
(6.45 KB)
📄
fixfiles
(11.03 KB)
📄
fixparts
(61.65 KB)
📄
fsadm
(23.97 KB)
📄
fsck
(32.12 KB)
📄
fsck.btrfs
(1.16 KB)
📄
fsck.cramfs
(19.57 KB)
📄
fsck.ext2
(250.55 KB)
📄
fsck.ext3
(250.55 KB)
📄
fsck.ext4
(250.55 KB)
📄
fsck.fat
(56.24 KB)
📄
fsck.minix
(73.32 KB)
📄
fsck.msdos
(56.24 KB)
📄
fsck.vfat
(56.24 KB)
📄
fsck.xfs
(433 B)
📄
fsfreeze
(11.23 KB)
📄
fstrim
(40.59 KB)
📄
ftpscrub
(16.47 KB)
📄
ftpshut
(10.98 KB)
📄
fuser
(32.34 KB)
📄
fxload
(19.26 KB)
📄
gdisk
(184.49 KB)
📄
gdm
(430.45 KB)
📄
genhomedircon
(23.77 KB)
📄
genhostid
(6.94 KB)
📄
genl
(52.81 KB)
📄
genl-ctrl-list
(11.27 KB)
📄
genrandom
(11.16 KB)
📄
getcap
(11.13 KB)
📄
getenforce
(7.01 KB)
📄
getpcaps
(7.07 KB)
📄
getsebool
(11.13 KB)
📄
glibc_post_upgrade.i686
(700.2 KB)
📄
glibc_post_upgrade.x86_64
(772.05 KB)
📄
gluster
(465.84 KB)
📄
groupadd
(85.65 KB)
📄
groupdel
(77.38 KB)
📄
groupmems
(55.97 KB)
📄
groupmod
(85.66 KB)
📄
grpck
(59.93 KB)
📄
grpconv
(51.73 KB)
📄
grpunconv
(51.73 KB)
📄
grub2-bios-setup
(1.03 MB)
📄
grub2-get-kernel-settings
(2.08 KB)
📄
grub2-install
(1.28 MB)
📄
grub2-macbless
(1.01 MB)
📄
grub2-mkconfig
(7.63 KB)
📄
grub2-ofpathname
(225.54 KB)
📄
grub2-probe
(1.03 MB)
📄
grub2-reboot
(4 KB)
📄
grub2-rpm-sort
(258.52 KB)
📄
grub2-set-default
(3.46 KB)
📄
grub2-setpassword
(2.96 KB)
📄
grub2-sparc64-setup
(1.03 MB)
📄
grubby
(71.27 KB)
📄
gssproxy
(130.64 KB)
📄
halt
(704.8 KB)
📄
handle-sshpw
(2.35 KB)
📄
hardlink
(15.29 KB)
📄
htcacheclean
(31.16 KB)
📄
httpd
(511.44 KB)
📄
hwclock
(48.44 KB)
📄
hwloc-dump-hwdata
(15.32 KB)
📄
hypervfcopyd
(11.18 KB)
📄
hypervkvpd
(27.38 KB)
📄
hypervvssd
(15.23 KB)
📄
iconvconfig
(22.15 KB)
📄
iconvconfig.i686
(21.44 KB)
📄
iconvconfig.x86_64
(22.15 KB)
📄
ifcfg
(2.99 KB)
📄
ifconfig
(80.05 KB)
📄
ifdown
(1.61 KB)
📄
ifenslave
(19.74 KB)
📄
ifstat
(40.6 KB)
📄
ifup
(4.89 KB)
📄
in.proftpd
(988.23 KB)
📄
init
(1.56 MB)
📄
insmod
(143.24 KB)
📄
install-info
(110.42 KB)
📄
installkernel
(2.69 KB)
📄
intel-microcode2ucode
(11.1 KB)
📄
ip
(459.59 KB)
📄
ip6tables
(91.52 KB)
📄
ip6tables-restore
(91.52 KB)
📄
ip6tables-save
(91.52 KB)
📄
ipmaddr
(19.33 KB)
📄
ipmievd
(488.98 KB)
📄
iprconfig
(394.37 KB)
📄
iprdbg
(135.94 KB)
📄
iprdump
(123.67 KB)
📄
iprinit
(123.64 KB)
📄
iprsos
(2.18 KB)
📄
iprupdate
(123.64 KB)
📄
ipsec
(14.96 KB)
📄
ipset
(7.02 KB)
📄
iptables
(91.52 KB)
📄
iptables-restore
(91.52 KB)
📄
iptables-save
(91.52 KB)
📄
iptunnel
(23.33 KB)
📄
irqbalance
(48.5 KB)
📄
isadump
(15.02 KB)
📄
isaset
(10.98 KB)
📄
isc-hmac-fixup
(11.2 KB)
📄
iscsi-iname
(11.01 KB)
📄
iscsiadm
(794.39 KB)
📄
iscsid
(819.81 KB)
📄
iscsistart
(361.05 KB)
📄
iscsiuio
(182.09 KB)
📄
iso8601
(16.04 KB)
📄
iw
(157.97 KB)
📄
jk_check
(11.2 KB)
📄
jk_chrootlaunch
(20.77 KB)
📄
jk_chrootsh
(32.73 KB)
📄
jk_cp
(4.12 KB)
📄
jk_init
(9.68 KB)
📄
jk_jailuser
(11.81 KB)
📄
jk_list
(4.93 KB)
📄
jk_lsh
(24.66 KB)
📄
jk_socketd
(29.05 KB)
📄
jk_update
(9.11 KB)
📄
kexec
(166.06 KB)
📄
key.dns_resolver
(19.45 KB)
📄
killall5
(23.17 KB)
📄
kpartx
(39.47 KB)
📄
kpatch
(14.53 KB)
📄
ksmtuned
(3.36 KB)
📄
lchage
(15.41 KB)
📄
ldattach
(27.93 KB)
📄
ldconfig
(952.08 KB)
📄
ledctl
(61.97 KB)
📄
ledmon
(62.15 KB)
📄
lgroupadd
(11.28 KB)
📄
lgroupdel
(11.26 KB)
📄
lgroupmod
(15.44 KB)
📄
libvirtd
(506.11 KB)
📄
lid
(15.4 KB)
📄
liveinst
(5.83 KB)
📄
lldpad
(402.72 KB)
📄
lldptool
(96.02 KB)
📄
lnewusers
(15.46 KB)
📄
lnstat
(20.09 KB)
📄
load_policy
(10.97 KB)
📄
loaderinfo
(40.91 KB)
📄
lockdev
(10.95 KB)
📄
logrotate
(68.61 KB)
📄
logsave
(11.27 KB)
📄
losetup
(82.45 KB)
📄
lpadmin
(27.09 KB)
📄
lpasswd
(15.5 KB)
📄
lpc
(15.07 KB)
📄
lpc.cups
(15.07 KB)
📄
lpinfo
(14.96 KB)
📄
lpmove
(10.98 KB)
📄
lsmod
(143.24 KB)
📄
lsof
(150.57 KB)
📄
lspci
(73.67 KB)
📄
luseradd
(15.38 KB)
📄
luserdel
(11.3 KB)
📄
lusermod
(19.43 KB)
📄
lvchange
(2.15 MB)
📄
lvconvert
(2.15 MB)
📄
lvcreate
(2.15 MB)
📄
lvdisplay
(2.15 MB)
📄
lvextend
(2.15 MB)
📄
lvm
(2.15 MB)
📄
lvmconf
(12.55 KB)
📄
lvmconfig
(2.15 MB)
📄
lvmdiskscan
(2.15 MB)
📄
lvmdump
(10.07 KB)
📄
lvmetad
(71.66 KB)
📄
lvmpolld
(64.07 KB)
📄
lvmsadc
(2.15 MB)
📄
lvmsar
(2.15 MB)
📄
lvreduce
(2.15 MB)
📄
lvremove
(2.15 MB)
📄
lvrename
(2.15 MB)
📄
lvresize
(2.15 MB)
📄
lvs
(2.15 MB)
📄
lvscan
(2.15 MB)
📄
lwresd
(768.03 KB)
📄
mailstats
(79.11 KB)
📄
makedumpfile
(376.52 KB)
📄
makemap.sendmail
(95.63 KB)
📄
matchpathcon
(11.19 KB)
📄
mcelog
(152.67 KB)
📄
mdadm
(593.45 KB)
📄
mdmon
(331.55 KB)
📄
mii-diag
(20.08 KB)
📄
mii-tool
(19.51 KB)
📄
milter-greylist
(253.3 KB)
📄
mkdict
(246 B)
📄
mkdosfs
(28.05 KB)
📄
mkdumprd
(13.99 KB)
📄
mke2fs
(94.08 KB)
📄
mkfs
(11.25 KB)
📄
mkfs.btrfs
(366.45 KB)
📄
mkfs.cramfs
(36.16 KB)
📄
mkfs.ext2
(94.08 KB)
📄
mkfs.ext3
(94.08 KB)
📄
mkfs.ext4
(94.08 KB)
📄
mkfs.fat
(28.05 KB)
📄
mkfs.minix
(36.27 KB)
📄
mkfs.msdos
(28.05 KB)
📄
mkfs.vfat
(28.05 KB)
📄
mkfs.xfs
(359.8 KB)
📄
mkhomedir_helper
(19.05 KB)
📄
mklost+found
(11.11 KB)
📄
mkswap
(69.64 KB)
📄
modinfo
(143.24 KB)
📄
modprobe
(143.24 KB)
📄
mount.cifs
(40.05 KB)
📄
mount.fuse
(11.1 KB)
📄
mount.nfs
(114.68 KB)
📄
mount.nfs4
(114.68 KB)
📄
mountstats
(40.59 KB)
📄
mpathconf
(10.6 KB)
📄
mpathpersist
(27.91 KB)
📄
mtr
(83.18 KB)
📄
mtx
(49.87 KB)
📄
multipath
(22.99 KB)
📄
multipathd
(84.37 KB)
📄
named
(768.03 KB)
📄
named-checkconf
(32.25 KB)
📄
named-checkzone
(32.06 KB)
📄
named-compilezone
(32.06 KB)
📄
named-journalprint
(11.13 KB)
📄
nameif
(15.32 KB)
📄
netreport
(10.96 KB)
📄
netscsid
(19.55 KB)
📄
new-kernel-pkg
(24.96 KB)
📄
newusers
(93.45 KB)
📄
nfsdcltrack
(40.11 KB)
📄
nfsidmap
(19.32 KB)
📄
nfsiostat
(23.64 KB)
📄
nfsstat
(29.84 KB)
📄
nl-class-add
(11.7 KB)
📄
nl-class-delete
(11.55 KB)
📄
nl-class-list
(11.48 KB)
📄
nl-classid-lookup
(11.29 KB)
📄
nl-cls-add
(11.76 KB)
📄
nl-cls-delete
(11.68 KB)
📄
nl-cls-list
(11.58 KB)
📄
nl-link-list
(11.52 KB)
📄
nl-pktloc-lookup
(11.36 KB)
📄
nl-qdisc-add
(11.6 KB)
📄
nl-qdisc-delete
(11.54 KB)
📄
nl-qdisc-list
(11.63 KB)
📄
nmbd
(249.07 KB)
📄
nologin
(7.01 KB)
📄
nsec3hash
(11.13 KB)
📄
nstat
(23.88 KB)
📄
ntpdate
(107.58 KB)
📄
ntsysv
(36.24 KB)
📄
ocft
(22.04 KB)
📄
oddjobd
(72.11 KB)
📄
opendkim
(158.3 KB)
📄
opendkim-default-keygen
(1.4 KB)
📄
opendkim-genkey
(6.29 KB)
📄
opendkim-genzone
(66.68 KB)
📄
opendkim-reportstats
(14.16 KB)
📄
opendkim-testkey
(70.98 KB)
📄
opendkim-testmsg
(15.27 KB)
📄
osd_login
(2.55 KB)
📄
ownership
(15.04 KB)
📄
pacemakerd
(59.74 KB)
📄
packer
(11.06 KB)
📄
pam_console_apply
(39.69 KB)
📄
pam_tally2
(15.05 KB)
📄
pam_timestamp_check
(10.97 KB)
📄
paperconfig
(4.07 KB)
📄
parted
(77.22 KB)
📄
partprobe
(11.23 KB)
📄
partx
(86.55 KB)
📄
pcs
(292 B)
📄
pdata_tools
(1.23 MB)
📄
pethtool
(8.94 KB)
📄
php-fpm
(5.03 MB)
📄
pidof
(23.17 KB)
📄
pifconfig
(3.03 KB)
📄
ping6
(64.63 KB)
📄
pivot_root
(11.19 KB)
📄
plipconfig
(11.06 KB)
📄
pluginviewer
(15.23 KB)
📄
plymouth-set-default-theme
(6.21 KB)
📄
plymouthd
(84.22 KB)
📄
pm-hibernate
(2.86 KB)
📄
pm-powersave
(2.09 KB)
📄
pm-suspend
(2.86 KB)
📄
pm-suspend-hybrid
(2.86 KB)
📄
pm-utils-bugreport-info.sh
(1.47 KB)
📄
portrelease
(15.02 KB)
📄
portreserve
(15.02 KB)
📄
postalias
(253.87 KB)
📄
postcat
(136.08 KB)
📄
postconf
(363.19 KB)
📄
postdrop
(213.44 KB)
📄
postfix
(119.17 KB)
📄
postgrey
(37.94 KB)
📄
postgreyreport
(23.8 KB)
📄
postkick
(131.43 KB)
📄
postlock
(127.38 KB)
📄
postlog
(119.38 KB)
📄
postmap
(257.69 KB)
📄
postmulti
(135.89 KB)
📄
postqueue
(257.94 KB)
📄
postsuper
(139.95 KB)
📄
poweroff
(704.8 KB)
📄
ppp-watch
(23.2 KB)
📄
pppd
(372.98 KB)
📄
pppdump
(52.77 KB)
📄
pppoe-discovery
(18.04 KB)
📄
pppstats
(14.99 KB)
📄
praliases
(95.64 KB)
📄
proftpd
(988.23 KB)
📄
pvchange
(2.15 MB)
📄
pvck
(2.15 MB)
📄
pvcreate
(2.15 MB)
📄
pvdisplay
(2.15 MB)
📄
pvmove
(2.15 MB)
📄
pvremove
(2.15 MB)
📄
pvresize
(2.15 MB)
📄
pvs
(2.15 MB)
📄
pvscan
(2.15 MB)
📄
pwck
(51.71 KB)
📄
pwconv
(47.57 KB)
📄
pwhistory_helper
(15.44 KB)
📄
pwmconfig
(22.92 KB)
📄
pwunconv
(47.59 KB)
📄
qb-blackbox
(7.02 KB)
📄
quot
(70.66 KB)
📄
quotacheck
(107.29 KB)
📄
quotaoff
(75.03 KB)
📄
quotaon
(75.03 KB)
📄
quotastats
(14.03 KB)
📄
radvd
(101.59 KB)
📄
radvdump
(23.64 KB)
📄
raid-check
(3.7 KB)
📄
ras-mc-ctl
(38.48 KB)
📄
rasdaemon
(185.11 KB)
📄
rdisc
(23.17 KB)
📄
rdma
(73.42 KB)
📄
rdma-ndd
(15.36 KB)
📄
readprofile
(15.46 KB)
📄
realm
(138.77 KB)
📄
reboot
(704.8 KB)
📄
regdbdump
(7.12 KB)
📄
reject
(10.95 KB)
📄
repquota
(75.16 KB)
📄
request-key
(19.41 KB)
📄
resize2fs
(48.41 KB)
📄
resizepart
(32.36 KB)
📄
restorecon
(27.16 KB)
📄
rfkill
(11.29 KB)
📄
rmmod
(143.24 KB)
📄
rndc
(35.88 KB)
📄
rndc-confgen
(19.44 KB)
📄
rngd
(42.39 KB)
📄
rotatelogs
(19.04 KB)
📄
route
(66.6 KB)
📄
routef
(173 B)
📄
routel
(1.59 KB)
📄
rpc.gssd
(88.73 KB)
📄
rpc.idmapd
(48.13 KB)
📄
rpc.mountd
(128.91 KB)
📄
rpc.nfsd
(40.2 KB)
📄
rpc.rquotad
(78.95 KB)
📄
rpc.statd
(97.59 KB)
📄
rpcbind
(60.07 KB)
📄
rpcdebug
(18.05 KB)
📄
rpcinfo
(27.3 KB)
📄
rsyslogd
(648.45 KB)
📄
rtacct
(41.93 KB)
📄
rtcwake
(31.96 KB)
📄
rtkitctl
(10.88 KB)
📄
rtmon
(48.67 KB)
📄
rtpr
(37 B)
📄
rtstat
(20.09 KB)
📄
runlevel
(704.8 KB)
📄
runuser
(32.21 KB)
📄
sa
(36.77 KB)
📄
safe_finger
(11.08 KB)
📄
saned
(47.41 KB)
📄
sasl2-shared-mechlist
(10.98 KB)
📄
saslauthd
(92.59 KB)
📄
sasldblistusers2
(19.26 KB)
📄
saslpasswd2
(15.09 KB)
📄
scsieject
(41.07 KB)
📄
scsitape
(45.38 KB)
📄
sedispatch
(15.56 KB)
📄
sefcontext_compile
(60.53 KB)
📄
selabel_digest
(11.17 KB)
📄
selabel_lookup
(11.14 KB)
📄
selabel_lookup_best_match
(11.16 KB)
📄
selabel_partial_match
(11.09 KB)
📄
selinux_restorecon
(15.21 KB)
📄
selinuxconlist
(11.1 KB)
📄
selinuxdefcon
(11.12 KB)
📄
selinuxenabled
(6.98 KB)
📄
selinuxexeccon
(7.09 KB)
📄
semanage
(42.76 KB)
📄
semodule
(23.77 KB)
📄
sendmail
(242.11 KB)
📄
sendmail.postfix
(242.11 KB)
📄
sendmail.sendmail
(817.3 KB)
📄
sensors-detect
(207.11 KB)
📄
service
(3.17 KB)
📄
sestatus
(15.02 KB)
📄
setcap
(11.13 KB)
📄
setenforce
(7.05 KB)
📄
setfiles
(27.16 KB)
📄
setpci
(23.4 KB)
📄
setquota
(83.16 KB)
📄
setregdomain
(1.7 KB)
📄
setroubleshootd
(3.22 KB)
📄
setsebool
(14.99 KB)
📄
setup
(15.38 KB)
📄
sfdisk
(83.25 KB)
📄
sgdisk
(168.33 KB)
📄
sgpio
(15.63 KB)
📄
showmount
(19.56 KB)
📄
shutdown
(704.8 KB)
📄
skdump
(15.2 KB)
📄
sktest
(6.98 KB)
📄
slattach
(42.4 KB)
📄
sln
(743.78 KB)
📄
sm-notify
(68.43 KB)
📄
smartctl
(864.48 KB)
📄
smartd
(670.63 KB)
📄
smbd
(91.84 KB)
📄
smrsh
(74.97 KB)
📄
smtp-sink
(90.91 KB)
📄
smtp-source
(77.79 KB)
📄
sosreport
(561 B)
📄
spice-vdagentd
(43.73 KB)
📄
ss
(128.44 KB)
📄
sshd
(832.9 KB)
📄
sshd-keygen
(3.53 KB)
📄
start-statd
(842 B)
📄
stinit
(35.52 KB)
📄
stonith_admin
(25.69 KB)
📄
suexec
(15.01 KB)
📄
sulogin
(40.53 KB)
📄
sushell
(67 B)
📄
swaplabel
(15.31 KB)
📄
swapoff
(15.53 KB)
📄
swapon
(53.29 KB)
📄
switch_root
(15.35 KB)
📄
sys-unconfig
(184 B)
📄
sysctl
(23.57 KB)
📄
tapeinfo
(45 KB)
📄
tc
(384.66 KB)
📄
tcpd
(36.62 KB)
📄
tcpdmatch
(40.83 KB)
📄
tcpdump
(920.16 KB)
📄
tcpslice
(23.64 KB)
📄
tcsd
(300.27 KB)
📄
telinit
(704.8 KB)
📄
testsaslauthd
(15.09 KB)
📄
thin_check
(1.23 MB)
📄
thin_delta
(1.23 MB)
📄
thin_dump
(1.23 MB)
📄
thin_ls
(1.23 MB)
📄
thin_metadata_size
(1.23 MB)
📄
thin_repair
(1.23 MB)
📄
thin_restore
(1.23 MB)
📄
thin_rmap
(1.23 MB)
📄
thin_trim
(1.23 MB)
📄
tracepath
(15.05 KB)
📄
tracepath6
(15.05 KB)
📄
try-from
(23.47 KB)
📄
tsig-keygen
(19.44 KB)
📄
tune2fs
(69.41 KB)
📄
tuned
(3.29 KB)
📄
tuned-adm
(5.22 KB)
📄
udevadm
(414.27 KB)
📄
umount.nfs
(114.68 KB)
📄
umount.nfs4
(114.68 KB)
📄
umount.udisks2
(10.98 KB)
📄
unbound-anchor
(55.62 KB)
📄
unix_chkpwd
(35.42 KB)
📄
unix_update
(35.42 KB)
📄
update-alternatives
(27.61 KB)
📄
update-pciids
(1.71 KB)
📄
update-smart-drivedb
(14.34 KB)
📄
usb_modeswitch
(57.61 KB)
📄
usb_modeswitch_dispatcher
(236.66 KB)
📄
usbmuxd
(69.72 KB)
📄
useradd
(134.39 KB)
📄
userdel
(93.5 KB)
📄
userhelper
(39.38 KB)
📄
usermod
(130.33 KB)
📄
usernetctl
(11.03 KB)
📄
vdptool
(48.96 KB)
📄
vgcfgbackup
(2.15 MB)
📄
vgcfgrestore
(2.15 MB)
📄
vgchange
(2.15 MB)
📄
vgck
(2.15 MB)
📄
vgconvert
(2.15 MB)
📄
vgcreate
(2.15 MB)
📄
vgdisplay
(2.15 MB)
📄
vgexport
(2.15 MB)
📄
vgextend
(2.15 MB)
📄
vgimport
(2.15 MB)
📄
vgimportclone
(2.15 MB)
📄
vgmerge
(2.15 MB)
📄
vgmknodes
(2.15 MB)
📄
vgreduce
(2.15 MB)
📄
vgremove
(2.15 MB)
📄
vgrename
(2.15 MB)
📄
vgs
(2.15 MB)
📄
vgscan
(2.15 MB)
📄
vgsplit
(2.15 MB)
📄
vigr
(62.54 KB)
📄
vipw
(62.54 KB)
📄
virt-what
(11.57 KB)
📄
virtlockd
(723.38 KB)
📄
virtlogd
(719.13 KB)
📄
virtualmin
(1.3 KB)
📄
visudo
(200.89 KB)
📄
vmcore-dmesg
(19.28 KB)
📄
vpddecode
(15.33 KB)
📄
weak-modules
(31.9 KB)
📄
wipefs
(28.05 KB)
📄
wpa_cli
(128.06 KB)
📄
wpa_passphrase
(56.79 KB)
📄
wpa_supplicant
(1.93 MB)
📄
xfs_admin
(1.35 KB)
📄
xfs_bmap
(638 B)
📄
xfs_copy
(339.33 KB)
📄
xfs_db
(576.38 KB)
📄
xfs_estimate
(11.16 KB)
📄
xfs_freeze
(767 B)
📄
xfs_fsr
(31.83 KB)
📄
xfs_growfs
(327.2 KB)
📄
xfs_info
(472 B)
📄
xfs_io
(122.68 KB)
📄
xfs_logprint
(355.81 KB)
📄
xfs_mdrestore
(314.81 KB)
📄
xfs_metadump
(747 B)
📄
xfs_mkfile
(1007 B)
📄
xfs_ncheck
(650 B)
📄
xfs_quota
(84.88 KB)
📄
xfs_repair
(563.2 KB)
📄
xfs_rtcp
(15.25 KB)
📄
xfsdump
(291.69 KB)
📄
xfsinvutil
(61.87 KB)
📄
xfsrestore
(353.2 KB)
📄
xqmstats
(14.03 KB)
📄
xtables-multi
(91.52 KB)
📄
yum-complete-transaction
(9.22 KB)
📄
yumdb
(8.67 KB)
📄
zdump
(14.02 KB)
📄
zic
(50.02 KB)
📄
zramctl
(82.23 KB)
Editing: postgreyreport
#!/usr/bin/perl # postgreyreport by tbaker@bakerfl.org # bits and peices of code taken from postgrey 1.11 ( http://isg.ee.ethz.ch/tools/postgrey/ ) package postgreyreport; use strict; use BerkeleyDB; use Getopt::Long 2.25 qw(:config posix_default no_ignore_case); use Net::Server::Daemonize qw( get_uid get_gid set_uid set_gid ); use Pod::Usage; #use Net::RBLClient; my $VERSION='1.14.3 (20100321)'; # used in maillog processing my $RE_revdns_ip = qr/ ([^\[\s]+)\[(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})\]/; # ptr[1.2.3.4] my $RE_reject = qr/reject: /; my $RE_triplet = qr/$RE_revdns_ip: 450 .+from=<([^>]+)> to=<([^>]+)>/; my $dns; my %dns_cache; # used for --check_sender my $rbl = undef; # Net::RBLClient object select((select(STDOUT), $| = 1)[0]); # Unbuffer standard output. # default options, override via command line my %opt = ( user => 'postgrey', dbdir => '/var/spool/postfix/postgrey', delay => 300, return_string => 'Greylisted', # match on this string check_sender => '', # = mx,a,mx/24,a/24 # todo=spf - uses Net::DNS show_tries => 0, # number of greylist attempts within --delay separate_by_subnet => '', # if not blank output this string for every new /24 separate_by_ip => '', # if not blank output this string for every new IP single_line => 1, # output everything on a single line? (grouping enabled if false ) tab => 0, # use tabs as separators, not spaces (only in single line mode) show_time => 0, # show entry time in maillog skip_dnsbl => [], # list of DNSBL servers to check and skip reporting for skip_clients => [], # files of clients to skip reporting skip_pool => 0, # skip entries that appear to be a provider pool (last 2 ips in ptr) match_clients => [], # files of ONLY clients to report on v => 0, # verbose? used mainly for script debugging debug_db => 0, # output time() values from btree db debug_re => '', # but only for these hosts (separate by commas ) ); # start here sub main { GetOptions(\%opt, 'help|h', 'version', 'man', 'delay=s', 'user|u=s', 'dbdir=s', 'debug_db', 'debug_re=s', 'v+', 'return_string|greylist-text=s', 'show_tries', 'check_sender=s', 'separate_by_subnet=s', 'separate_by_ip=s', 'single_line!', 'tab', 'show_time', 'skip_dnsbl=s@','skip_clients=s@', 'match_clients=s@', 'skip_pool', ) or exit(1); if($opt{help}) { pod2usage(1) } if($opt{man}) { pod2usage(-exitstatus => 0, -verbose => 2) } if ($opt{version}) { print "postgreyreport $VERSION\n"; exit(0) } if (scalar(@{$opt{skip_dnsbl}}) > 0) { require Net::RBLClient; $rbl = Net::RBLClient->new ( lists => $opt{skip_dnsbl} ); } setup_debug(); # display key/value pairs from db read_client_files(); postgrey_fatal_report(); # do the work } ####################################################### # postgrey_fatal(): report on all fatal triplets # sub postgrey_fatal_report() { umask 0077; # mode 600 my %triplets; # hash of all triplets we will look at drop_priv($opt{user}); # change UID to 'postgrey' # convert --check_sender into hash: opt{do_checks}{VAL} if ($opt{check_sender}) { use Net::DNS; $dns = Net::DNS::Resolver->new; $opt{check_sender} = lc $opt{check_sender}; foreach my $check ( split(/,/,$opt{check_sender}) ) { $opt{do_checks}{$check}=1; print "Enabling Check: opt{do_checks}{$check} \n" if ($opt{v}); } } my $db = setup_dbm($opt{dbdir}); # connect to BerkeleyDB my @greyfatal = find_and_sort_fatal( \%{$db}, \%triplets ); # read STDIN and sort the fatal triplets # foreach: loop through (sorted) fatal triplets and display to STDOUT my ($last_ip,$last_subnet); # define now $opt{separate_by_ip} =~ s|\\n|\n|g; # do it once before the for loop $opt{separate_by_subnet} =~ s|\\n|\n|g; # "" foreach my $key (@greyfatal) { my ($ip,$sender,$recipient) = split(/\//,$key); # separate the triplet my $revdns = $triplets{$key}{revdns}; # we saved revdns during maillog parse, so we dont have to look it up # --check_sender=mx,mx/24,a,a/24 # dns lookups from Net::DNS are cached and only performed once per sender's @domain my $check_sender = ''; if ( $opt{do_checks}{mx} and check_sender_mx( $sender,$ip,'mx') ) { $check_sender='MX'; } elsif ( $opt{do_checks}{'mx/24'} and check_sender_mx( $sender,$ip,'mx/24') ) { $check_sender='MX/24'; } elsif ( $opt{do_checks}{a} and check_sender_a( $sender,$ip,'a') ) { $check_sender='A'; } elsif ( $opt{do_checks}{'a/24'} and check_sender_a( $sender,$ip,'a/24') ) { $check_sender='A/24'; } # if separate_by_ip or separate_by_subnet display configured text if ($last_subnet eq $triplets{$key}{subnet}) { print "$opt{separate_by_ip}" if ( ($last_ip ne $ip) and $opt{separate_by_ip}) ; } else { if ( $opt{separate_by_subnet} ) { print $opt{separate_by_subnet}; } elsif ( $opt{separate_by_ip} ) { print $opt{separate_by_ip}; } } # display output on single line or multi-line if ($opt{single_line}) { if ($opt{tab}) { printf "%s\t", $triplets{$key}{entrytime} if($opt{show_time}) ; printf "%s\t", $triplets{$key}{counter} if($opt{show_tries}) ; printf "%s\t", $check_sender if($opt{check_sender}) ; printf "%s\t", $ip ; printf "%s\t", $revdns ; printf "%s\t", $sender ; } else { printf "%s ", $triplets{$key}{entrytime} if($opt{show_time}) ; printf "%s ", $triplets{$key}{counter} if($opt{show_tries}) ; printf "%5s ", $check_sender if($opt{check_sender}) ; printf "%15s ", $ip ; printf "%s ", $revdns ; printf "%s ", $sender ; } printf "%s\n", $recipient; ; } else { ### multi-line ## only output PTR - IP if its a new IP (grouping) printf "%-77s ", $revdns if($last_ip ne $ip) ; printf "%15s" , $ip if($last_ip ne $ip) ; print "\n" if($last_ip ne $ip) ; ## always output the new pairs MX/A? (sender/recipient) # if sender was from MX or A of above IP printf "%5s " , $check_sender if($opt{check_sender}) ; printf " ", $check_sender if(! $opt{check_sender}); # tries or blank space printf " %2s ", $triplets{$key}{counter} if($opt{show_tries}) ; print " " if(! $opt{show_tries}) ; # sender - recipient printf " %40s ", $sender ; printf " %40s ", $recipient ; print "\n" ; } ($last_ip, $last_subnet) = ($ip, $triplets{$key}{subnet}); # save for next iteration } } ##################################################################### # find_and_sort_fatal( \%db, \%triplets ) # read STDIN (maillog) and remember any 4xx greylisted log entries # return array of fatal triplets (ip/sender/recipient) sorted by ip sub find_and_sort_fatal { my ($db, $triplets) = @_; # while(<>): STDIN is maillog.0, looking at reject: 4xx greylist entries and remembering all triplets MAILLOG: while (<>) { next unless (/$RE_reject/o); # only look at reject: lines next unless (/$opt{return_string}/o); # only look at greylisted lines next unless (/$RE_triplet/o); # extract the triplet my ($revdns,$ipaddr,$sender,$recipient) = ($1,$2,$3,$4); my @ip = split(/\./, $ipaddr); $sender = do_sender_substitutions($sender); my ($subnet) = do_client_substitutions($ipaddr,$revdns); # 1.2.3.0 my $key = lc "$ipaddr/$sender/$recipient"; # postgrey key my $subkey = lc "$subnet/$sender/$recipient"; # subnet key 1.2.3.0/sender/recipient # if we are wanting to dump first,last out of the db do it before we determine if its fatal if ( is_debug_host($revdns) ) { foreach my $testkey ( @{[$key,$subkey]} ) { my ($tfirst, $tlast) = split(/,/,$db->{$testkey}); my $tdiff = $tlast - $tfirst; print "$testkey : $db->{$testkey} = " .$tdiff . "s \n"; } } # if --match_clients was specified on command line then move on to the next line unless a match is found if ( scalar(@{$opt{match_clients}}) > 0 ) { next unless ( find_in_array($ipaddr, $opt{MATCH_CLIENT_IPS}) or find_in_array($revdns, $opt{MATCH_CLIENT_PTR}) ); } # if --skip_clients was specified on command line, skip to next line if a match is found next if ( find_in_array($ipaddr, $opt{SKIP_CLIENT_IPS}) or find_in_array($revdns, $opt{SKIP_CLIENT_PTR}) ); # if --skip_pool then if last 2 ips are in ptr skip to next line next if ( $opt{skip_pool} and defined $ip[3] and $revdns =~ /$ip[2]/ and $revdns =~ /$ip[3]/ ); # check the db, proceed if the triplet was fatal next MAILLOG unless is_fatal_triplet($db, $key, $subkey); # if --skip_dnsbl then do RBL lookups (slow!) if ( defined $rbl ) { $rbl->lookup($ipaddr); my @listed = $rbl->listed_by; next if ( scalar(@listed) > 0 ); } # we made it past all the filtering checks, remember the triplet as fatal $triplets->{$key}{counter}++; # increase counter for this triplet $triplets->{$key}{revdns}=$revdns; # save its ptr for later use $triplets->{$key}{ipaddr}=$ipaddr; # save IP in easy to access form $triplets->{$key}{subnet}=$subnet; # save subnet in easy to access form $triplets->{$key}{subkey}=$subkey; # save key in subnet form $triplets->{$key}{entrytime}=substr($_,0,15); } die "Debugging DB active, report shutdown" if ($opt{debug_db}); # don't do anything other than spit out key pairs and stop my @greyfatal = keys %{ $triplets }; # create an array containing all triplets in form: ip/sender/recipient # sort fatal triplets by IP address @greyfatal = sort { pack('C4' => $a =~ /(\d+)\.(\d+)\.(\d+)\.(\d+)/) cmp pack('C4' => $b =~ /(\d+)\.(\d+)\.(\d+)\.(\d+)/) } @greyfatal; return @greyfatal; } sub find_in_array($$) { my ($var, $patterns) = @_; for my $w (@{$patterns}) { return 1 if $var =~ $w; } return 0; } sub is_fatal_triplet($$$) { my ($db, $key, $subkey) = @_; my ($lapsed_ip, $lapsed_subnet) = (undef,undef); # try lookup by key if ( $db->{$key} =~ /,/ ) { my ($tfirst,$tlast) = split(/,/,$db->{$key}); # time_first_seen,time_last_seen $lapsed_ip = $tlast - $tfirst; # difference is time lapsed } # try subnet lookup if ( $db->{$subkey} =~ /,/ ) { my ($tfirst,$tlast) = split(/,/,$db->{$subkey}); # time_first_seen,time_last_seen $lapsed_subnet = $tlast - $tfirst; } if ( ( defined $lapsed_ip or defined $lapsed_subnet ) and (!( ($lapsed_ip >= $opt{delay} ) or ($lapsed_subnet >= $opt{delay}) ) ) ) { #push (@greyfatal, $key); # if lapsed time less than --delay, then it was a fatal triplet return 1; } elsif (( ! defined $lapsed_ip ) and ( ! defined $lapsed_subnet )) { #push (@greyfatal, $key); # if neither is found in the db it must have been removed. return 1; } return 0; } ########################################################################### # check_sender_mx(sender, ip, subnet) # subnet='' or '/24' # return true if ip is in MX list for sender domain (or /24 if specified) # enable via --check_sender=mx or --check_sender=mx,mx/24 sub check_sender_mx($$$) { my ($sender, $ip, $subnet) = @_; my ($user, $hostname) = split(/\@/,$sender); my @iplist; if ( $dns_cache{$hostname}{mx} ) { @iplist = @{$dns_cache{$hostname}{mx}}; # use the cache for MX records } else { my @mxr = mx($dns, $hostname); # no cache existed, call out to Net::DNS # mx records if ($#mxr >= 0) { foreach my $mxrr (@mxr) { # print "MX for $hostname: ". $mxrr->exchange . "\n"; my $ipquery = $dns->search($mxrr->exchange); if ($ipquery) { foreach my $iprr ($ipquery->answer) { next unless ($iprr->type eq "A"); # print " IP=" . $iprr->address . "\n"; push (@iplist, $iprr->address); } } } } if ( $#iplist < 0 ) { push (@iplist, '0.0.0.0'); } # cache ip of all zero's so we dont keep calling net::dns if nothing is returned $dns_cache{$hostname}{mx} = [ @iplist ]; # cache the array IPs of the MX records into an hash location. } $subnet =~ s/^mx//i; return check_sender_ip_vs_list($ip, $subnet, \@iplist); } ########################################################################### # check_sender_a(sender, ip, subnet) # subnet='' or '/24' # return true if ip is in A record for sender domain (or /24 if specified) # enable via --check_sender=a or --check_sender=a,24 sub check_sender_a($$$) { my ($sender, $ip, $subnet) = @_; my ($user, $hostname) = split(/\@/,$sender); my @iplist; if ( $dns_cache{$hostname}{a} ) { @iplist = @{$dns_cache{$hostname}{a}}; # use the cache'd A records } else { my $ipquery = $dns->search($hostname); # no cache existed, call out to Net::DNS if ($ipquery) { foreach my $iprr ($ipquery->answer) { next unless ($iprr->type eq "A"); # print " IP=" . $iprr->address . "\n"; push (@iplist, $iprr->address); } } if ( $#iplist < 0 ) { push (@iplist, '0.0.0.0'); } # cache ip of all zero's so we dont keep calling net::dns if nothing is returned $dns_cache{$hostname}{a} = [ @iplist ]; # cache the array IPs of the A records into an hash location. } $subnet =~ s/^a//i; return check_sender_ip_vs_list($ip, $subnet, \@iplist); } ################################################### # used by check_sender_mx and check_sender_a # return true if IP is in list # if /24 then return true if first 3 octets match sub check_sender_ip_vs_list($$$) { my ($client_ip, $match, $iplist) = @_; foreach my $ipaddr ( @{$iplist} ) { return 1 if ($client_ip eq $ipaddr); return 0 if (! $match eq '/24'); $client_ip =~ /^(\d{1,3}\.\d{1,3}\.\d{1,3}\.)/; my $client_classaddr = $1; $ipaddr =~ /^(\d{1,3}\.\d{1,3}\.\d{1,3}\.)/; my $ipaddr_classaddr = $1; return 1 if ( $client_classaddr eq $ipaddr_classaddr ); } return 0 } ######################################### # drop_priv(username) # code from Net::Server sub drop_priv { my ($user) = @_; ### drop privileges eval{ if( $user ne $> ){ # print "Setting uid to \"$user\"\n"; set_uid( $user ); } }; if( $@ ){ if( $> == 0 ){ die $@; } elsif( $< == 0){ # print "NOTICE: Effective UID changed, but Real UID is 0: $@\n"; }else{ print $@."\n"; } } } ###########################################3 # setup_dbm(dbdir) # connect to BerkeleyDB *READ_ONLY*, return reference to db hash sub setup_dbm { my ($dbdir) = @_; my %db; tie(%db, 'BerkeleyDB::Btree', -Filename => "$dbdir/postgrey.db", -Flags => DB_RDONLY, ) or die "ERROR: can't find database $dbdir/postgrey.db: $!\n"; return \%db; } # from postgrey 1.14 http://isg.ee.ethz.ch/tools/postgrey/ sub do_sender_substitutions($) { my ($addr) = @_; my ($user, $domain) = split(/@/, $addr, 2); defined $domain or return $addr; # strip extension, used sometimes for mailing-list VERP $user =~ s/\+.*//; # replace numbers in VERP addresses with '#' so that # we don't create a new key for each mail $user =~ s/\b\d+\b/#/g; return "$user\@$domain"; } # from postgrey 1.14 http://isg.ee.ethz.ch/tools/postgrey/ sub do_client_substitutions($$) { my ($ip, $revdns) = @_; # --lookup-by-subnet: return ($ip, undef) if $revdns eq 'unknown'; my @ip=split(/\./, $ip); return ($ip, undef) unless defined $ip[3]; # skip if it contains the last two IP numbers in the hostname # (we assume it is a pool of dialup addresses of a provider) return ($ip, undef) if $revdns =~ /$ip[2]/ and $revdns =~ /$ip[3]/; return (join('.', @ip[0..2], '0'), $ip[3]); } ## used code from postgrey for read_client_whitelists() to import client files sub read_client_files() { my @skip_client_ips; my @skip_client_ptr; my @match_client_ips; my @match_client_ptr; for my $f (@{$opt{'skip_clients'}}) { if(open(CLIENTS, $f)) { while(<CLIENTS>) { s/^\s+//; s/\s+$//; next if $_ eq '' or /^#/; if(/^\/(\S+)\/$/) { # regular expression push @skip_client_ptr, qr{$1}i; } elsif(/^\d{1,3}(?:\.\d{1,3}){0,3}$/) { # IP address or part of it push @skip_client_ips, qr{^$_}; } # note: we had ^[^\s\/]+$ but it triggers a bug in perl 5.8.0 elsif(/^\S+$/) { push @skip_client_ptr, qr{\Q$_\E$}i; } else { warn "WARNING: $f line $.: doesn't look like a hostname\n"; } } } } $opt{SKIP_CLIENT_PTR} = \@skip_client_ptr; $opt{SKIP_CLIENT_IPS} = \@skip_client_ips; for my $f (@{$opt{'match_clients'}}) { if(open(CLIENTS, $f)) { while(<CLIENTS>) { s/^\s+//; s/\s+$//; next if $_ eq '' or /^#/; if(/^\/(\S+)\/$/) { # regular expression push @match_client_ptr, qr{$1}i; } elsif(/^\d{1,3}(?:\.\d{1,3}){0,3}$/) { # IP address or part of it push @match_client_ips, qr{^$_}; } # note: we had ^[^\s\/]+$ but it triggers a bug in perl 5.8.0 elsif(/^\S+$/) { push @match_client_ptr, qr{\Q$_\E$}i; } else { warn "WARNING: $f line $.: doesn't look like a hostname\n"; } } } } $opt{MATCH_CLIENT_PTR} = \@match_client_ptr; $opt{MATCH_CLIENT_IPS} = \@match_client_ips; } sub setup_debug() { if ($opt{debug_db} or $opt{search_db}) { die "\nDebugging_DB Activated, but no matching RE's defined. use --debug_re also! \n " if (! $opt{debug_re} ); print "\nDebugging_DB Active, Displaying hosting matching REs: "; foreach my $RE ( split(/,/,$opt{debug_re}) ) { print "$RE ; "; push ( @{ $opt{debug_RE} }, qr/$RE/i ); } print "\n\n"; } } sub is_debug_host($) { my ($host) = @_; foreach my $RE ( @{$opt{debug_RE}} ) { return 1 if ($host =~ /$RE/); } return 0; } main(); exit 0; __END__ =head1 NAME postgreyreport - Fatal report for Postfix Greylisting Policy Server =head1 SYNOPSIS B<postgreyreport> [I<options>...] -h, --help display this help and exit --version display version and exit --user=USER run as USER (default: postgrey) --dbdir=PATH find db files in PATH (default: /var/spool/postfix/postgrey) --delay=N report triplets that did not try again after N seconds (default: 300) --greylist-text=TXT text to match on for greylist maillog lines --skip_pool Skip report for 'subscriber pools' ( last 2 octets of IP found in PTR name ) --skip_dnsbl=RBL RBL server to query and skip reporting for any listed hosts (SLOW!!) --skip_clients=FILE PTR or IP or REGEXP of clients to skip in report --match_clients=FILE *ONLY* report if fatal *AND* PTR/IP of client matches --show_tries display the number of attempts failed triplets made in first column --show_time show entry time in maillog (single line only) --tab use tabs as separators for easy cut(1)ting --nosingle_line display sender/recipients grouped by ptr - ip --separate_by_subnet=TXT display TXT for every new /24 (ex: "=================\n" ) --separate_by_ip=TXT display TXT for every new IP (ex: "\n") --check_sender=LIST one or more of: mx,mx/24,a,a/24 does DNS/A lookups for sender @domain and compares sending IP if match displays "MX" "A" or "MX/24" or "A/24" depending on LIST Note that --(skip|match)_clients can be specified multiple times and there are no default files. Same rules apply as postgrey's --whitelist-clients, see postgrey doc for more info. --skip_dnsbl can also be specified multiple times to query multiple DNSBL servers. =head1 DESCRIPTION postgreyreport opens postgrey.db as read-only; reads a maillog via STDIN, extracts the triplets for any Greylisted lines and looks them up in postgrey.db. if the difference in first and last time seen is less than --delay=N then the triplet is considered fatal and displayed to STDOUT The report sorts by client IP address =head2 Note: unless you are using --lookup_by_subnet or excluding all known MTA pools you will likely have false fatal reports for "BigISPs". A message that was tried from every IP in SMTP pool before making it through will show up in the report for all of the attempted source IPs =head2 USAGE It is best to run postgreyreport against a maillog that is at least several hours old (yesterdays?) ( you be the judge on how old is acceptable ). if you run the report against a live maillog you are not giving legit MTA's enough time to try again and you will have lots of inaccurate information. =over =item * Ex usage: zcat /var/log/maillog.0.gz | ./postgreyreport [options] > postgreyreport.log or zcat /var/log/maillog.0.gz | \ ./postgreyreport --nosingle_line --check_sender=mx,a \ --separate_by_subnet=":==================\n" # 94 "=" total, some were omitted for clarity =item * Ex Output: ( POD wrapping will mess this up, view source ) :============================================================================================ unknown 4.29.43.31 marissa_mcclendonuu@abit.com.tw user1@recipient1.com jake_meyerdt@ali.com.tw user2@recipient1.com jenny_banks_sh@translate.ru user1@recipient2.com rvazquezpo@ali.com.tw user3@recipient1.com aep@notimexico.com user2@recipient1.com brittneystanley_ei@cetra.org.tw user2@recipient1.com brendasheehan_cw@lib.ru user2@recipient1.com :============================================================================================ lsanca1-ar5-127-189.biz.dsl.gtei.net 4.33.127.189 A fokkensr@lsanca1-ar5-127-189.biz.dsl.gtei.net user2@recipient1.com cyxlfrfwciercu@publicist.com user3@recipient4.com :============================================================================================ smtpout.mac.com 17.250.248.83 do_not_reply@apple.com user4@recipient5.com smtpout.mac.com 17.250.248.88 MX legituser@mac.com user6@recipient7.com :============================================================================================ =back =head1 HISTORY B<1.14.3 20100321> =over 4 Some additions, Leonard den Ottolander <leonard.den.ottolander.nl> New option: --tab Use tabs as separator in single line mode New option: --show_time Show entry time in maillog in single line mode =back B<1.14.2 20040715> =over 4 BUGFIX: (automatic) lookup-by-subnet support was broken, fixed. BUGFIX: corrected a few spelling errors new Option: --skip_pool Skip report for 'subscriber pools' =back B<1.14.1 20040712> =over 4 Changed --return-string to --greylist-text to match postgrey new Option: --skip_clients=FILE new Option: --match_clients=FILE new Option: --skip_dnsbl=RBL.DNS.NAME All 3 of the new options can be specified multiple times. Updated do_*_subsititions again to match postgrey =back B<1.11.1 20040701> =over 4 missing keys from DB are considered fatal triplets and included in report Changed --delay testing from "greater than" to "greater than or equal to" Fixed --help and --man switches Removed setuid Notice =back B<1.6.4 20040618> =over 4 Initial Public Version (postgrey/contrib) =back =head1 AUTHOR S<Tom Baker E<lt>tbaker@bakerfl.orgE<gt>> =cut
Upload File
Create Folder