diff options
Diffstat (limited to 'config/denyhosts/denyhosts.inc')
| -rw-r--r-- | config/denyhosts/denyhosts.inc | 167 |
1 files changed, 167 insertions, 0 deletions
diff --git a/config/denyhosts/denyhosts.inc b/config/denyhosts/denyhosts.inc new file mode 100644 index 00000000..d83f2878 --- /dev/null +++ b/config/denyhosts/denyhosts.inc @@ -0,0 +1,167 @@ +<?php +/* $Id$ */ +/* +/* ========================================================================== */ +/* + denyhosts.inc + Copyright (C) 2009 Mark J Crane + All rights reserved. + */ +/* ========================================================================== */ +/* + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + + 1. Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + + THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, + INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY + AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE + AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, + OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. +*/ + +function php_sync_package() +{ + + //global $config; + +} + +// bounty: http://forum.pfsense.org/index.php/topic,15791.0/topicseen.html +// pkg_add -r denyhosts +// python /usr/local/share/denyhosts/denyhosts.py –file=/var/log/auth.log +// /var/run/denyhosts.pid +// http://en.wikipedia.org/wiki/DenyHosts + + +function php_install_command() +{ + + global $config; + + if (!is_dir('/usr/local/www/packages/')) { + exec("mkdir /usr/local/www/packages/"); + } + + if (!is_dir('/usr/local/www/packages/denyhosts/')) { + exec("mkdir /usr/local/www/packages/denyhosts/"); + } + + exec("pkg_delete denyhosts"); + + + + $hosts_allow = "#\n"; + $hosts_allow .= "# hosts.allow access control file for \"tcp wrapped\" applications.\n"; + $hosts_allow .= "#\n; + $hosts_allow .= "sshd : /etc/hosts.deniedssh : deny\n"; + $hosts_allow .= "sshd : ALL : allow\n"; + $hosts_allow .= "ALL : ALL : allow\n"; + $fout = fopen("/etc/hosts.allow","w"); + fwrite($fout, $hosts_allow); + unset($hosts_allow); + fclose($fout); + + exec("touch /etc/hosts.deniedssh"); + exec("chmod 755 /etc/hosts.deniedssh"); + + $download_path = 'http://www.pfsense.com/packages/config/denyhosts/'; + + //rename PHP files from .tmp to .php + chdir('/tmp/'); + exec("cd /tmp/;fetch ".$download_path."denyhosts_log.tmp"); + exec("cp /tmp/denyhosts_log.tmp /usr/local/www/packages/denyhosts/denyhosts_log.php"); + unlink_if_exists("/tmp/denyhosts_log.tmp"); + + + $denyhosts_sh = "\n"; + $denyhosts_sh .= "name=\"denyhosts\"\n"; + $denyhosts_sh .= "rcvar=\${name}_enable\n"; + $denyhosts_sh .= "\n"; + $denyhosts_sh .= "command=\"/usr/local/bin/denyhosts.py\"\n"; + $denyhosts_sh .= "command_interpreter=\"/usr/local/bin/python2.5\"\n"; + $denyhosts_sh .= "command_args=\"--config /usr/local/etc/denyhosts.conf --daemon\"\n"; + $denyhosts_sh .= "pidfile=\"/var/run/\${name}.pid\"\n"; + $denyhosts_sh .= "\n"; + $denyhosts_sh .= "load_rc_config \$name\n"; + $denyhosts_sh .= "\n"; + $denyhosts_sh .= ": \${denyhosts_enable=\"YES\"}\n"; + $denyhosts_sh .= "\n"; + $denyhosts_sh .= "run_rc_command \"\$1\"\n"; + $fout = fopen("/usr/local/etc/rc.d/denyhosts.sh","w"); + fwrite($fout, $denyhosts_sh); + unset($denyhosts_sh); + fclose($fout); + + + $filename = "/usr/local/etc/denyhosts.conf"; + $handle = fopen($filename,"rb"); + $denyhosts_conf = fread($handle, filesize($filename)); + fclose($handle); + $denyhosts_conf = str_replace("SECURE_LOG = /var/log/auth.log", "SECURE_LOG = /var/log/system.log", $denyhosts_conf); + $denyhosts_conf = str_replace("#BLOCK_SERVICE = sshd", "BLOCK_SERVICE = sshd", $denyhosts_conf); + $denyhosts_conf = str_replace("#SYNC_SERVER = http://xmlrpc.denyhosts.net:9911", "SYNC_SERVER = http://xmlrpc.denyhosts.net:9911", $denyhosts_conf); + $fout = fopen($filename,"w"); + fwrite($fout, $denyhosts_conf); + unset($filename); + fclose($fout); + + $filename = "/usr/local/etc/denyhosts.conf-dist"; + $fout = fopen($filename,"w"); + fwrite($fout, $denyhosts_conf); + unset($filename); + unset($denyhosts_conf); + fclose($fout); + + //Error reading file: denyhosts.cfg + //write_rcfile(array( + // "file" => "denyhosts.sh", + // "start" => "start command", + // "stop" => "rm /var/run/nameofservice.pid" + // ) + //); + + + php_sync_package(); + + //start denyhosts + exec("/usr/local/etc/rc.d/denyhosts.sh start"); + + //if (pkg_is_service_running('notes')) { + //documentation purposes + //} + + + +} + + +function deinstall_command() +{ + + $hosts_allow = "#\n"; + $hosts_allow .= "# hosts.allow access control file for \"tcp wrapped\" applications.\n"; + $hosts_allow .= "#\n; + $hosts_allow .= "ALL : ALL : allow\n"; + $fout = fopen("/etc/hosts.allow","w"); + fwrite($fout, $tmp); + unset($tmp); + fclose($fout); + + exec("pkg_delete denyhosts"); + exec("rm -R /usr/local/www/packages/denyhosts/"); + +} + +?>
\ No newline at end of file |