مراية لـ
https://github.com/postalserver/postal.git
تم المزامنة 2025-12-01 05:43:04 +00:00
Log access CRAM-MD5 authentication failures (#2304)
see https://github.com/postalserver/postal/issues/1182#issuecomment-1360832523
هذا الالتزام موجود في:
@@ -228,7 +228,10 @@ module Postal
|
|||||||
username, password = Base64.decode64(data).split(' ', 2).map{ |a| a.chomp }
|
username, password = Base64.decode64(data).split(' ', 2).map{ |a| a.chomp }
|
||||||
org_permlink, server_permalink = username.split(/[\/\_]/, 2)
|
org_permlink, server_permalink = username.split(/[\/\_]/, 2)
|
||||||
server = ::Server.includes(:organization).where(:organizations => {:permalink => org_permlink}, :permalink => server_permalink).first
|
server = ::Server.includes(:organization).where(:organizations => {:permalink => org_permlink}, :permalink => server_permalink).first
|
||||||
next '535 Denied' if server.nil?
|
if server.nil?
|
||||||
|
log "\e[33m WARN: AUTH failure for #{@ip_address}\e[0m"
|
||||||
|
next '535 Denied'
|
||||||
|
end
|
||||||
grant = nil
|
grant = nil
|
||||||
server.credentials.where(:type => 'SMTP').each do |credential|
|
server.credentials.where(:type => 'SMTP').each do |credential|
|
||||||
correct_response = OpenSSL::HMAC.hexdigest(CRAM_MD5_DIGEST, credential.key, challenge)
|
correct_response = OpenSSL::HMAC.hexdigest(CRAM_MD5_DIGEST, credential.key, challenge)
|
||||||
@@ -239,7 +242,11 @@ module Postal
|
|||||||
break
|
break
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
grant || '535 Denied'
|
if grant.nil?
|
||||||
|
log "\e[33m WARN: AUTH failure for #{@ip_address}\e[0m"
|
||||||
|
next "535 Denied"
|
||||||
|
end
|
||||||
|
grant
|
||||||
end
|
end
|
||||||
|
|
||||||
@proc = handler
|
@proc = handler
|
||||||
|
|||||||
المرجع في مشكلة جديدة
حظر مستخدم