CheckAuthLog Installation instructions - Revision history

John at 19:34, 7 December 2016

2016-12-07T19:34:12Z

← Older revision		Revision as of 21:34, 7 December 2016
Line 1:		Line 1:
			For V3.0.0

	PREREQUISITES		PREREQUISITES
	-------------		-------------

John at 19:33, 7 December 2016

2016-12-07T19:33:45Z

← Older revision		Revision as of 21:33, 7 December 2016
Line 100:		Line 100:
	--------------------------------		--------------------------------

	(1) Customize variables in check_auth_log.conf to your mysql hostname		(1) Customize variables in check_auth_log.conf to your mysql hostname database and query for blocking/unblocking users
	database and query for blocking/unblocking users

	sql_connect: mysql://username:password@hostname:port/database		<pre>
	sql_block: update mailbox set active=0 where username='%u'		sql_connect = "mysql://username:password@hostname:port/database"
	sql_unblock: update mailbox set active=1 where username='%u'		sql_block = "update mailbox set active=0 where username='%u'"
			sql_unblock = "update mailbox set active=1 where username='%u'"
			</pre>

	C. IF USING EXIM TO BLOCK USERS		C. IF USING EXIM TO BLOCK USERS
Line 114:		Line 115:
	Example		Example

			<pre>
	exim_blcok_file = /tmp/blocklist		exim_blcok_file = /tmp/blocklist
	exim_temp_file = /tmp/blocklist.out		exim_temp_file = /tmp/blocklist.out
			</pre>

	(2) In your exim configuration, setup so that those senders cannot send email.		(2) In your exim configuration, setup so that those senders cannot send email.

	Example		Example:

			<pre>
	acl_check_sender:		acl_check_sender:
	deny senders = /etc/blocklist		deny senders = /etc/blocklist
	accept		accept
			</pre>

	POST-INSTALL		POST-INSTALL
Line 131:		Line 135:
	1. If upgrading from a previous version find the database files, e.g		1. If upgrading from a previous version find the database files, e.g

			<pre>
	ls -la /tmp/.check_auth_log*		ls -la /tmp/.check_auth_log*
			</pre>

	and remove them, for example		and remove them, for example
			<pre>
	rm /tmp/.check_auth_log_cache		rm /tmp/.check_auth_log_cache
	rm /tmp/.check_auth_log_db		rm /tmp/.check_auth_log_db
			</pre>

	(this will also cancel previously logged authentications from the internal		(this will also cancel previously logged authentications from the internal
Line 142:		Line 150:
	2. do a test run		2. do a test run

	/path-to-script/check_auth_log		<pre> /path-to-script/check_auth_log
			</pre>

	then check that the database and cache files have been created in the		then check that the database and cache files have been created in the
	configured locations, for example		configured locations, for example
	/tmp/.check_auth_log_cache
			<pre> /tmp/.check_auth_log_cache
	/tmp/.check_auth_log_db		/tmp/.check_auth_log_db
			</pre>

	if there are sasl authentication sessions in the log file you should		if there are sasl authentication sessions in the log file you should
	also get an output from:		also get an output from:
	/path-to-script/check_auth_log -x
			<pre> /path-to-script/check_auth_log -x
			</pre>

	Check that blocking is set up correctly, so that if number of		Check that blocking is set up correctly, so that if number of
Line 160:		Line 173:

	e.g. (if using access files)		e.g. (if using access files)
			<pre>
	/5 * * * root /usr/local/bin/check_auth_log/run_check_auth_log		/5 * * * root /usr/local/bin/check_auth_log/run_check_auth_log
			</pre>

	or (if using mysql)		or (if using mysql)
			<pre>
	/5 * * * root /usr/local/bin/check_auth_log/check_auth_log		/5 * * * root /usr/local/bin/check_auth_log/check_auth_log
			</pre>

John at 19:30, 7 December 2016

2016-12-07T19:30:16Z

← Older revision		Revision as of 21:30, 7 December 2016
Line 47:		Line 47:

	(1) Customize variables in check_auth_log_makefile to your postfix installation		(1) Customize variables in check_auth_log_makefile to your postfix installation
	and database type/databsae extension (default is hash with .db extension)		and database type/databsae extension (default is hash with .db extension)

	(2) Customize path in run_check_auth_log to your script install directory		(2) Customize path in run_check_auth_log to your script install directory
Line 53:		Line 53:
	(3) If needed setup whitelist to exlude some senders from checks		(3) If needed setup whitelist to exlude some senders from checks

	touch /etc/postfix/smtp_auth_access_whitelist		<pre> touch /etc/postfix/smtp_auth_access_whitelist
	postmap /etc/postfix/smtp_auth_access_whitelist		postmap /etc/postfix/smtp_auth_access_whitelist
			</pre>

	If not using whitelist adjust the submission_sender_checks below so		If not using whitelist adjust the submission_sender_checks below so
Line 61:		Line 62:
	(4) Setup initial empty access database		(4) Setup initial empty access database

			<pre>
	touch /etc/postfix/smtp_auth_access		touch /etc/postfix/smtp_auth_access
	postmap /etc/postfix/smtp_auth_access		postmap /etc/postfix/smtp_auth_access
			</pre>

	(5) Update postfix submission access restrictions		(5) Update postfix submission access restrictions

	In main.cf add a new smtpd_restriction_class. In that class the		In main.cf add a new smtpd_restriction_class. In that class the
	suggested actions are		suggested actions are
	- exclude any users needed via whitelist		* exclude any users needed via whitelist
	- add check_sender_access to read the access file containing		* add check_sender_access to read the access file containing blocked senders (as written by check_auth_log script)
	blocked senders (as written by check_auth_log script)		* rest of checks normally done in smtpd_sender_restrictions on your submission service (e.g. reject unless sender is logged in as owner of email address)
	- rest of checks normally done in smtpd_sender_restrictions
	on your submission service (e.g. reject unless sender is
	logged in as owner of email address)

			<pre>
	main.cf:		main.cf:
	smtpd_restriction_classes = submission_sender_checks		smtpd_restriction_classes = submission_sender_checks
	submission_sender_checks = check_sender_access hash:/etc/postfix/smtp_auth_access_whitelist,check_sender_access hash:/etc/postfix/smtp_auth_access,reject_sender_login_mismatch		submission_sender_checks = check_sender_access hash:/etc/postfix/smtp_auth_access_whitelist,check_sender_access hash:/etc/postfix/smtp_auth_access,reject_sender_login_mismatch
			</pre>

			In master.cf configure the smtp_sender_restrictions fro the submission service.

	~~In master.cf configure the smtp_sender_restrictions fro the submission~~		<pre>
	~~service.~~

	master.cf;		master.cf;
	submission inet n - n - - smtpd		submission inet n - n - - smtpd
Line 88:		Line 89:
	-o smtpd_sender_restrictions=submission_sender_checks		-o smtpd_sender_restrictions=submission_sender_checks
	...		...
			</pre>

	(6). reload postfix		(6) reload postfix

			<pre>
	postfix reload		postfix reload
			</pre>

	B. IF USING MYSQL TO BLOCK USERS		B. IF USING MYSQL TO BLOCK USERS

John at 19:27, 7 December 2016

2016-12-07T19:27:59Z

← Older revision		Revision as of 21:27, 7 December 2016
Line 30:		Line 30:

	4. If using the email notification to blocked users, set up the template		4. If using the email notification to blocked users, set up the template
	file (see example notify.txt). The file contains headers and text of		file (see example notify.txt). The file contains headers and text of
	the notify message, with headers separated from the text by a blank line.		the notify message, with headers separated from the text by a blank line.
	It is useful to specify at least a Subject: header. From: and To: headers		It is useful to specify at least a Subject: header. From: and To: headers
	should not be specified as these are added by the script. Setup the		should not be specified as these are added by the script. Setup the
	notify_block_email_template variable to point to the template and make		notify_block_email_template variable to point to the template and make
	sure the user running check_auth_log has read permission to the file.		sure the user running check_auth_log has read permission to the file.

	notify_block_email_template = /path to template /notify.txt		notify_block_email_template = /path to template /notify.txt

	5. Depending on the blocking method you wish to use (via access files		5. Depending on the blocking method you wish to use (via access files
	mysql query or exim) follow the instructions below in one of		mysql query or exim) follow the instructions below in one of
	sections A, B or C		sections A, B or C

	A. IF USING POSTFIX ACCESS FILES TO BLOCK USERS		A. IF USING POSTFIX ACCESS FILES TO BLOCK USERS

John at 19:27, 7 December 2016

2016-12-07T19:27:08Z

← Older revision		Revision as of 21:27, 7 December 2016
Line 14:		Line 14:
	1. Copy the files to a suitable directory and change permissions		1. Copy the files to a suitable directory and change permissions

	~~e.g.~~ tar -xvzf check_auth_log_vX.Y.tgz		<pre> tar -xvzf check_auth_log_vX.Y.tgz
	cd check_auth_log_vX.Y		cd check_auth_log_vX.Y
	mkdir /usr/local/bin/check_auth_log		mkdir /usr/local/bin/check_auth_log
Line 23:		Line 23:
	chown root:root /usr/local/bin/check_auth_log/*		chown root:root /usr/local/bin/check_auth_log/*
	chmod 600 /usr/local/bin/check_auth_log/*		chmod 600 /usr/local/bin/check_auth_log/*
			</pre>

	2. Check that the path to php is correct at the first line of check_auth_log		2. Check that the path to php is correct at the first line of check_auth_log

John at 19:26, 7 December 2016

2016-12-07T19:26:16Z

← Older revision		Revision as of 21:26, 7 December 2016
Line 2:		Line 2:
	-------------		-------------

	1. Postfix		* Postfix
	2. PHP5 with DBA support (php5-dba)		* PHP5 with DBA support (php5-dba)
	3. Oracle Berkley DB 4 or 5		* Oracle Berkley DB 4 or 5
	4. Optionally mysql and PHP mysql extension (php5-mysql)		* Optionally mysql and PHP mysql extension (php5-mysql) if using mysql queries to block users instead of postfix access files
	if using mysql queries to block users instead of
	postfix access files

John at 19:25, 7 December 2016

2016-12-07T19:25:33Z

← Older revision		Revision as of 21:25, 7 December 2016
Line 1:		Line 1:
	~~For further details see: http://www.voipsupport.it/wiki/index.php/CheckAuthLog~~


	PREREQUISITES		PREREQUISITES
	-------------		-------------

John at 19:25, 7 December 2016

2016-12-07T19:25:17Z

Show changes

John: Created page with "Detailed instructions are contained in the file INSTALL in the download package."

2016-06-13T17:08:47Z

Created page with "Detailed instructions are contained in the file INSTALL in the download package."

New page

Detailed instructions are contained in the file INSTALL in the download package.