Code

*** empty log message ***
authorStanley Hopcroft <stanleyhopcroft@users.sourceforge.net>
Mon, 29 Nov 2004 05:07:34 +0000 (05:07 +0000)
committerStanley Hopcroft <stanleyhopcroft@users.sourceforge.net>
Mon, 29 Nov 2004 05:07:34 +0000 (05:07 +0000)
git-svn-id: https://nagiosplug.svn.sourceforge.net/svnroot/nagiosplug/nagiosplug/trunk@949 f882894a-f735-0410-b71e-b25c423dba1c

contrib/README.TXT
contrib/rblcheck-dns [new file with mode: 0755]
contrib/rblcheck-web [new file with mode: 0755]
contrib/tarballs/check_icmp-0.8.tar.gz [new file with mode: 0644]

index 6544e596aeb85d1b2d5527ffef08008a48607d42..7543a5a35c35880e7264561889bdedce588f82a8 100644 (file)
@@ -55,3 +55,5 @@ fetchlog-0.94.tar.gz   - C program: The fetchlog utility displays the last new m
                          remote logfiles. The README shows how to setup fetchlog for Nagios.
                          (Alexander Haderer)
 
+check_icmp-0.8.tar.gz  - C program: check_icmp is an alternative to check_ping that doesn't require the ping
+                       utility or any other executable.
diff --git a/contrib/rblcheck-dns b/contrib/rblcheck-dns
new file mode 100755 (executable)
index 0000000..5e96195
--- /dev/null
@@ -0,0 +1,69 @@
+#!/usr/bin/perl
+# Multi-RBL Query tool, developer Vikram <vr@udel.edu>
+use strict;
+use Socket;
+my $suspect = $ARGV[1];
+
+die "Syntax: $0 -H <ip address>\n" unless $suspect;
+
+my @rblservers=qw[
+       3y.spam.mrs.kithrup.com
+       block.blars.org
+       bl.redhatgate.com
+       blackholes.five-ten-sg.com
+       blackholes.intersil.net
+       blackholes.mail-abuse.org
+       blackholes.wirehub.net
+       blacklist.spambag.org
+       dev.null.dk
+       dews.qmail.org  
+       dialup.blacklist.jippg.org
+       dialups.mail-abuse.org
+       dnsbl.njabl.org
+       dul.maps.vix.com
+       dul.orca.bc.ca
+       dynablock.wirehub.net
+       formmail.relays.monkeys.com
+       ipwhois.rfc-ignorant.org
+       list.dsbl.org
+       multihop.dsbl.org
+       okrelays.nthelp.com     
+       pm0-no-more.compu.net
+       proxies.relays.monkeys.com
+       rbl-plus.mail-abuse.org
+       rbl.maps.vix.com
+       rbl.spam.org.tr
+       relays.mail-abuse.org
+       relays.nthelp.com
+       relays.ordb.org
+       relays.radparker.com
+       relays.visi.com
+       sbl.spamhaus.org
+       spamguard.leadmon.net
+       spammers.v6net.org
+       spamsources.fabel.dk
+       spews.org
+       unconfirmed.dsbl.org
+       xbl.selwerd.cx
+];
+
+
+my $spam = 0;
+foreach ( @rblservers ) {
+       my @s = split('\.',$suspect);
+       my $req = "$s[3].$s[2].$s[1].$s[0].".$_;
+
+       my ($name,$aliases,$addrtype,$length,@addrs) = gethostbyname($req);
+       next unless (@addrs);
+
+        my $result = inet_ntoa($addrs[0]);
+       #next unless (substr($result, 7) eq '127.0.0');
+
+       print "$suspect is listed in the following RBLS: " if ( $spam == 0 );
+       print $_, " ";
+       $spam = 1;
+}
+
+print "$suspect is not listed in any RBLS" if ( $spam == 0 );
+print "\n";
+exit( $spam );
diff --git a/contrib/rblcheck-web b/contrib/rblcheck-web
new file mode 100755 (executable)
index 0000000..eb4fcde
--- /dev/null
@@ -0,0 +1,37 @@
+#!/usr/bin/perl
+# Multi-RBL Query tool, developer Vikram <vr@udel.edu>
+use IO::Socket::INET;
+
+die "Syntax: $0 -H <ip address>\n" unless $ARGV[1];
+
+$soc = new IO::Socket::INET->new(PeerPort=>80,
+Proto=>'tcp',
+PeerAddr=>"rbls.org") or die("Cannot connect to CERT");
+                                                                                                    
+$ip = $ARGV[1];        
+$uri = '/?q='.$ip;
+
+$soc->send("GET $uri HTTP/1.1\nHost: rbls.org\n\n");
+@buff = <$soc>;
+delete @buff[0..7];    
+$len = @buff;
+
+$alert = 0;
+
+
+for( $i=0;$i<$len;$i++ ) {
+       next unless( defined $buff[$i] );
+       chomp($buff[$i]);
+       #print "$buff[$i]\n";
+
+       if ( $buff[$i] eq "<tr bgcolor=#ffc0c0>" ) {
+               $rbl = substr($buff[$i+1], 5, index($buff[$i], "</tr>") - 5);
+               next if ( index($rbl, '.') == -1 );
+               print "$ip is listed in the following RBLS: " if ( $alert == 0 );
+               print "$rbl ";
+               $alert = 1;
+       }       
+}
+print "$ip is not listed in any RBLS" if ( $alert == 0 );
+print "\n";
+exit($alert);
diff --git a/contrib/tarballs/check_icmp-0.8.tar.gz b/contrib/tarballs/check_icmp-0.8.tar.gz
new file mode 100644 (file)
index 0000000..2ee5db0
Binary files /dev/null and b/contrib/tarballs/check_icmp-0.8.tar.gz differ