rebbler 0.0.1

checksums.yaml

@@ -0,0 +1,15 @@
+---
+!binary "U0hBMQ==":
+  metadata.gz: !binary |-
+    ZjRmNzFjY2Y0Y2QzM2QzOTQ3ZDAxYTNjZGVjOWM2MjBjY2ZjN2UyZA==
+  data.tar.gz: !binary |-
+    N2MxOWZlNzRmZjQwZGJhMmU5MzRhYjAwYWU2ZWE4Njc1NDM0OThjMQ==
+SHA512:
+  metadata.gz: !binary |-
+    MWQ3MWNmMjIyODQwMTYzYmI2NWZkZDg0NDBkOTY4YzJiMzA4Njc2M2ZlNGE2
+    Y2YzMDc2M2Y3YjEzMzFlNzU2Y2I1NGVkZWFlNTQ3MDUxZTZjNTVhNDM3Nzc0
+    ZTA0ZjllMjZhZDk2MDZiNjE1ZWI0MjIxZjY2YzQyMjY4NmU2MTc=
+  data.tar.gz: !binary |-
+    MDc3NzI0MzQ1N2Y4OWJlMDI0ZGY0N2QwZjJkNmY2MDlkZDIwMWUxM2JhMTA4
+    NjUzNWNkZTk2Y2E2NjZjMzY3NTAwZTAwOTQwYTdkZDUyMTQwNGQ2ZWQyZjY5
+    ZTdjNWQwZTQ3OGJmOGIyY2QwOTU3NzQyZTdhMzFkOWIzMDY0NjI=

data/bin/rebbler

@@ -0,0 +1,80 @@
+#!/usr/bin/env ruby
+
+require 'bundler/setup'
+require 'net/dns'
+require 'pp'
+require 'ostruct'
+require 'optparse'
+
+require_relative '../lib/checker'
+require_relative '../lib/app'
+
+def do_commandline
+  format = "%-55s %-16s %-s"
+  @checker.check do |response|
+    response = OpenStruct.new response
+    puts format % [ response.rbl, response.result, response.message ]
+  end
+end
+
+def do_nagios_check(key)
+  format = "%-55s %-16s %-s"
+  hits = []
+
+  @checker.check do |response|
+    hits << OpenStruct.new(response)
+  end
+
+  hits = hits.reject { |v| v.result.to_s == "" }
+  
+  if hits.length == 0
+    puts "RBL OK - %s not listed on any RBLS|" % [ key ]
+    exit 0
+  else
+    puts "RBL WARNING - %s listed on %s RBLS||" % [ key, hits.length ]
+    hits.each { |hit|
+       puts format % [ hit.rbl, hit.result, hit.message ]
+    }
+    exit 1
+  end
+end
+
+options = OpenStruct.new
+
+OptionParser.new do |opts|
+  opts.banner = "Usage: #{File.basename(__FILE__)} [options]"
+
+  opts.on("-s", "--server", "Run web server") do |v|
+    options.server = v
+  end
+
+  opts.on("-r", "--rbls=filename", "file of RBLs one per line") do |v|
+    puts "Setting rbl list from #{v}"
+    options.rbl_file = v
+    RBL::Loader.file = v
+  end
+
+  opts.on("-n", "--nagios-check", "Nagios RBL check") do |v|
+    options.nagios = v
+  end
+end.parse!
+
+if options.server
+  App.run!
+else
+  key = ARGV.first
+  
+  if key == "" or key.nil?
+    $stderr.puts "USAGE: %s {ip|hostname}" % [ File.basename(__FILE__) ]
+    exit 1
+  end
+  
+  @checker = Checker.new key
+  
+  if options.nagios
+    do_nagios_check(key)
+  else
+    do_commandline
+  end
+end
+

data/lib/app.rb

@@ -0,0 +1,45 @@
+require 'sinatra/base'
+require "sinatra/reloader" if Sinatra::Base.development?
+require 'sinatra-websocket'
+require 'haml'
+require 'json'
+require 'rbconfig'
+
+class App < Sinatra::Base
+  set :server, 'thin'
+  set :root, File.join(File.dirname(__FILE__), '..')
+
+
+  get '/', provides: 'html' do
+    haml :index
+  end
+
+  get '/req' do
+    return unless request.websocket?
+
+    request.websocket do |ws|
+      ws.onopen do
+      end
+
+      ws.onmessage do |msg|
+        thing = Thread.new do
+          begin
+            checker = Checker.new msg
+            checker.check do |response|
+              EM.next_tick { ws.send(response.to_json + "\n\n") }
+            end
+          rescue Exception => e
+            puts e
+            raise e
+          end
+          Thread.self.join
+          ws.close()
+        end
+        thing.run
+      end
+
+      ws.onclose do
+      end
+    end
+  end
+end

data/lib/checker.rb

@@ -0,0 +1,59 @@
+
+class Checker
+  module RBL
+    class Loader
+      def self.file= file
+        @@filename = file
+      end
+
+      def self.load
+        @@filename ||= File.join(File.dirname(__FILE__), '..', 'rbls.txt')
+        File.readlines(@@filename).sort
+      end
+    end
+  end
+
+  attr_accessor :ip
+
+  def initialize(to_check)
+    @ip = resolve_to_ip(to_check)
+  end
+
+  def resolve_to_ip name_to_lookup
+    begin
+      IPAddr.new(name_to_lookup)
+    rescue ArgumentError => e
+      Resolver(name_to_lookup).answer.first.address
+    end
+  end
+
+  def check(&blk)
+    rbls.each do |line|
+      rbl_domain = line.strip
+      name = name_to_lookup rbl_domain
+
+      answer = resolver.query(name).answer
+      if answer.length > 0
+        rbl_response_code = answer.first.address
+        text = resolver.query(name, Net::DNS::TXT).answer
+        rbl_txt_message = text.first.nil? ? "" : text.first.txt
+        yield({ rbl: rbl_domain, result: rbl_response_code, message: rbl_txt_message })
+      else
+        yield({ rbl: rbl_domain, result: "", message: 'Not Listed' })
+      end
+    end
+  end
+
+  def rbls
+    @@rbls ||= RBL::Loader.load
+  end
+
+  def name_to_lookup(rbl_domain)
+    ip.reverse.gsub(/in-addr.arpa/, rbl_domain)
+  end
+
+  def resolver
+    @resolver ||= Net::DNS::Resolver.new(:nameservers => ['8.8.8.8','8.8.4.4'] * 10, :log_file => nil)
+  end
+end
+

data/rbls.txt

@@ -0,0 +1,62 @@
+dnsbl.kineticweb.com
+cbl.abuseat.org
+b.barracudacentral.org
+dnsbl.sorbs.net
+http.dnsbl.sorbs.net
+dul.dnsbl.sorbs.net
+misc.dnsbl.sorbs.net
+smtp.dnsbl.sorbs.net
+socks.dnsbl.sorbs.net
+spam.dnsbl.sorbs.net
+web.dnsbl.sorbs.net
+zombie.dnsbl.sorbs.net
+dnsbl-1.uceprotect.net
+dnsbl-2.uceprotect.net
+dnsbl-3.uceprotect.net
+pbl.spamhaus.org
+sbl.spamhaus.org
+xbl.spamhaus.org
+zen.spamhaus.org
+bl.spamcannibal.org
+psbl.surriel.com
+ubl.unsubscore.com
+dnsbl.njabl.org
+combined.njabl.org
+rbl.spamlab.com
+dnsbl.ahbl.org
+ircbl.ahbl.org
+dyna.spamrats.com
+noptr.spamrats.com
+spam.spamrats.com
+cbl.anti-spam.org.cn
+cdl.anti-spam.org.cn
+dnsbl.inps.de
+drone.abuse.ch
+httpbl.abuse.ch
+dul.ru
+korea.services.net
+short.rbl.jp
+virus.rbl.jp
+spamrbl.imp.ch
+wormrbl.imp.ch
+virbl.bit.nl
+rbl.suresupport.com
+dsn.rfc-ignorant.org
+ips.backscatterer.org
+spamguard.leadmon.net
+opm.tornevall.org
+netblock.pedantic.org
+multi.surbl.org
+ix.dnsbl.manitu.net
+tor.dan.me.uk
+rbl.efnetrbl.org
+relays.mail-abuse.org
+blackholes.mail-abuse.org
+rbl-plus.mail-abuse.org
+dnsbl.dronebl.org
+access.redhawk.org
+db.wpbl.info
+rbl.interserver.net
+query.senderbase.org
+bogons.cymru.com
+csi.cloudmark.com

data/views/index.haml

@@ -0,0 +1,80 @@
+!!!html
+
+%head
+  %title Rebbler
+
+  :css
+    #field, #results {
+      box-shadow: 1px 1px 5px #888888;
+      border: 1px solid black;
+    }
+
+    #field {
+      height: 1.5em;
+      background-color: #a8a8a8;
+      margin: 0;
+      padding: 15px;
+    }
+
+    #field input { border: 1px solid black; }
+
+    #server { width: 200px; }
+
+    #results {
+      margin-top: 10px;
+      width: 100%;
+      border-collapse: collapse;
+      border-spacing: 0;
+    }
+
+    #results tr:nth-child(odd) { background-color: #A2A2A2; }
+    #results .rbl { width: 200px; }
+    #results .response { width: 200px; }
+    #results tr.danger { background-color: yellow; }
+
+  %script{ :language => 'javascript', :src => 'https://code.jquery.com/jquery-2.1.1.min.js' }
+
+  :javascript
+    $(function() { 
+      $('#server').focus()
+
+      $('#server').keypress(function(e) { 
+        if(e.which == 13) 
+          $('#submit').click() 
+      })
+
+      $('#submit').click(function(e) {
+        $('#results tr:not(:first-child)').remove()
+        var host = window.location.host
+        var path = '/req'
+        var ws = new WebSocket('ws://' + host + path)
+
+        ws.onopen    = function()  { ws.send($('#server').get(0).value) }
+
+        ws.onclose   = function()  { console.log('websocket closed'); }
+
+        ws.onmessage = function(m) { 
+          var rbl = JSON.parse(m.data)
+          tr = $('<tr>')
+          if(rbl.result.length > 0) 
+            tr.addClass('danger')
+          tr.append($('<td>').css('class', 'rbl').text(rbl.rbl))
+          tr.append($('<td>').css('class', 'result').text(rbl.result))
+          tr.append($('<td>').css('class', 'message').text(rbl.message))
+          $('#results').append(tr)
+        };
+      })
+     })
+
+%body
+  #field
+    Server Name or IP: 
+    %input{ :id => 'server', :type => 'text', :name => 'server' }
+    %input{ :id => 'submit', :type => 'submit', :name => 'submit' }
+
+  %table#results
+    %tr.heading
+      %th.rbl RBL
+      %th.response Response
+      %th.message Message
+

metadata

@@ -0,0 +1,49 @@
+--- !ruby/object:Gem::Specification
+name: rebbler
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Andrew Libby
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-11-19 00:00:00.000000000 Z
+dependencies: []
+description: DNS Block List Lookup Tool
+email: alibby@xforty.com
+executables:
+- rebbler
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/rebbler
+- lib/app.rb
+- lib/checker.rb
+- rbls.txt
+- views/index.haml
+homepage: http://rubygems.org/gems/hola
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: DNS Block List Lookup Tool
+test_files: []