@rakay-technology/kraft 0.7.4

package/dist/server/engine/tools/create_mail_user_OpenLDAP.sh

@@ -0,0 +1,287 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin (zhb _at_ iredmail.org)
+# Purpose:  Add new OpenLDAP user for postfix mail server.
+# Project:  iRedMail (http://www.iredmail.org/)
+
+# --------------------------- WARNING ------------------------------
+# This script only works under iRedMail >= 0.8.4 due to ldap schema
+# changes.
+# ------------------------------------------------------------------
+
+# --------------------------- USAGE --------------------------------
+# 1) Please change variables below to fit your env:
+#
+#   - In 'Global Setting' section:
+#       * STORAGE_BASE_DIRECTORY
+#
+#   - In 'LDAP Setting' section:
+#       * LDAP_SUFFIX
+#       * BINDDN
+#       * BINDPW
+#       * QUOTA
+#
+#   - In 'Virtual Domains & Users' section:
+#       * QUOTA
+#       * TRANSPORT
+#       * PASSWORD_SCHEME       # SSHA is recommended.
+#       * DEFAULT_PASSWD
+#       * USE_DEFAULT_PASSWD
+#
+#   - Optional variables:
+#       * SEND_WELCOME_MSG
+#
+# 2) Execute this script with domain name and username (without @domain) directly:
+#
+#       shell# bash create_mail_user_OpenLDAP.sh example.com new_user
+#
+#    It will create a mail user with mail address "new_user@example.com".
+#    To add multiple mail users, just list all usernames:
+#
+#       shell# bash create_mail_user_OpenLDAP.sh example.com new_user new_user2 new_user3
+#
+# ------------------------------------------------------------------
+
+# Source functions.
+. ../conf/global
+. ../conf/core
+
+# ----------------------------------------------
+# ------------ Global Setting ------------------
+# ----------------------------------------------
+# Storage base directory used to store users' mail.
+# mailbox of LDAP user will be:
+#    ${STORAGE_BASE_DIRECTORY}/${DOMAIN_NAME}/${USERNAME}/
+# Such as:
+#    /var/vmail/vmail1/iredmail.org/zhb/
+#   -------------------|===========|-----|
+#   STORAGE_BASE_DIRECTORY|DOMAIN_NAME|USERNAME
+#
+STORAGE_BASE_DIRECTORY="/var/vmail/vmail1"
+
+# ------------------------------------------------------------------
+# -------------------------- LDAP Setting --------------------------
+# ------------------------------------------------------------------
+LDAP_SUFFIX="dc=example,dc=com"
+
+# Setting 'BASE_DN'.
+BASE_DN="o=domains,${LDAP_SUFFIX}"
+
+# Setting 'DOMAIN_NAME' and DOMAIN_DN':
+#     * DOMAIN will be used in mail address: ${USERNAME}@${DOMAIN}
+#    * DOMAIN_DN will be used in LDAP dn.
+DOMAIN_NAME="$1"
+DOMAIN_DN="domainName=${DOMAIN_NAME}"
+OU_USER_DN="ou=Users"
+
+# ---------- rootdn of LDAP Server ----------
+# Setting rootdn of LDAP.
+BINDDN="cn=Manager,${LDAP_SUFFIX}"
+
+# Setting rootpw of LDAP.
+BINDPW='passwd'
+
+# ---------- Virtual Domains & Users --------------
+# Set default quota for LDAP users: 104857600 = 100M
+QUOTA='1048576000'
+
+# Default MTA Transport (Defined in postfix master.cf).
+TRANSPORT='dovecot'
+
+# Password scheme. Support schemes: BCRYPT, SSHA512, SSHA, PLAIN.
+PASSWORD_SCHEME='SSHA'
+DEFAULT_PASSWD='888888'
+USE_DEFAULT_PASSWD='NO'
+
+# ------------------------------------------------------------------
+# ------------------------- Welcome Msg ----------------------------
+# ------------------------------------------------------------------
+# Send a welcome mail after user created.
+SEND_WELCOME_MSG='NO'
+
+# Set welcome mail info.
+WELCOME_MSG_SUBJECT="Welcome!"
+WELCOME_MSG_BODY="Welcome, new user."
+
+# -------------------------------------------
+# ----------- End Global Setting ------------
+# -------------------------------------------
+
+# Time stamp, will be appended in maildir.
+DATE="$(date +%Y.%m.%d.%H.%M.%S)"
+
+STORAGE_BASE="$(dirname ${STORAGE_BASE_DIRECTORY})"
+STORAGE_NODE="$(basename ${STORAGE_BASE_DIRECTORY})"
+
+# Get days since 1970-01-01
+EPOCH_SECONDS="$(date +%s)"
+DAYS_SINCE_EPOCH="$((EPOCH_SECONDS / 24 / 60 / 60))"
+
+generate_password_hash()
+{
+    # Usage: generate_password_hash <password-scheme> <plain-password>
+    _scheme="${1}"
+    _password="${2}"
+
+    if [ X"${_scheme}" == X'BCRYPT' ]; then
+        _scheme='BLF-CRYPT'
+    fi
+
+    doveadm pw -s "${_scheme}" -p "${_password}"
+}
+
+add_new_domain()
+{
+    domain="$(echo ${1} | tr '[A-Z]' '[a-z]')"
+    ldapsearch -x -D "${BINDDN}" -w "${BINDPW}" -b "${BASE_DN}" | grep "domainName: ${domain}" >/dev/null
+
+    if [ X"$?" != X"0" ]; then
+        echo "Add new domain: ${domain}."
+
+        ldapadd -x -D "${BINDDN}" -w "${BINDPW}" <<EOF
+dn: ${DOMAIN_DN},${BASE_DN}
+objectClass: mailDomain
+domainName: ${domain}
+mtaTransport: ${TRANSPORT}
+accountStatus: active
+enabledService: mail
+EOF
+    else
+        :
+    fi
+
+    ldapadd -x -D "${BINDDN}" -w "${BINDPW}" <<EOF
+dn: ${OU_USER_DN},${DOMAIN_DN},${BASE_DN}
+objectClass: organizationalUnit
+objectClass: top
+ou: Users
+EOF
+
+    ldapadd -x -D "${BINDDN}" -w "${BINDPW}" <<EOF
+dn: ou=Groups,${DOMAIN_DN},${BASE_DN}
+objectClass: organizationalUnit
+objectClass: top
+ou: Groups
+EOF
+
+    ldapadd -x -D "${BINDDN}" -w "${BINDPW}" <<EOF
+dn: ou=Aliases,${DOMAIN_DN},${BASE_DN}
+objectClass: organizationalUnit
+objectClass: top
+ou: Aliases
+EOF
+
+    ldapadd -x -D "${BINDDN}" -w "${BINDPW}" <<EOF
+dn: ou=Externals,${DOMAIN_DN},${BASE_DN}
+objectClass: organizationalUnit
+objectClass: top
+ou: Externals
+EOF
+}
+
+add_new_user()
+{
+    USERNAME="$(echo $1 | tr [A-Z] [a-z])"
+    MAIL="$( echo $2 | tr [A-Z] [a-z])"
+
+    maildir="${DOMAIN_NAME}/$(hash_maildir ${USERNAME})"
+
+    # Generate user password.
+    if [ X"${USE_DEFAULT_PASSWD}" == X'YES' ]; then
+        PASSWD="$(generate_password_hash ${PASSWORD_SCHEME} ${DEFAULT_PASSWD})"
+    else
+        PASSWD="$(generate_password_hash ${PASSWORD_SCHEME} ${USERNAME})"
+    fi
+
+    ldapadd -x -D "${BINDDN}" -w "${BINDPW}" <<EOF
+dn: mail=${MAIL},${OU_USER_DN},${DOMAIN_DN},${BASE_DN}
+objectClass: inetOrgPerson
+objectClass: shadowAccount
+objectClass: amavisAccount
+objectClass: mailUser
+objectClass: top
+accountStatus: active
+homeDirectory: ${STORAGE_BASE_DIRECTORY}/${maildir}
+mail: ${MAIL}
+mailQuota: ${QUOTA}
+userPassword: ${PASSWD}
+cn: ${USERNAME}
+sn: ${USERNAME}
+givenName: ${USERNAME}
+uid: ${USERNAME}
+shadowLastChange: ${DAYS_SINCE_EPOCH}
+amavisLocal: TRUE
+enabledService: internal
+enabledService: doveadm
+enabledService: lib-storage
+enabledService: quota-status
+enabledService: indexer-worker
+enabledService: dsync
+enabledService: mail
+enabledService: pop3
+enabledService: pop3secured
+enabledService: pop3tls
+enabledService: imap
+enabledService: imapsecured
+enabledService: imaptls
+enabledService: smtp
+enabledService: smtpsecured
+enabledService: smtptls
+enabledService: managesieve
+enabledService: managesievesecured
+enabledService: managesievetls
+enabledService: sieve
+enabledService: sievesecured
+enabledService: sievetls
+enabledService: deliver
+enabledService: lda
+enabledService: lmtp
+enabledService: forward
+enabledService: senderbcc
+enabledService: recipientbcc
+enabledService: shadowaddress
+enabledService: displayedInGlobalAddressBook
+enabledService: sogo
+enabledService: sogowebmail
+enabledService: sogocalendar
+enabledService: sogoactivesync
+EOF
+}
+
+send_welcome_mail()
+{
+    MAIL="$1"
+    echo "Send a welcome mail to new user: ${MAIL}"
+
+    echo "${WELCOME_MSG_BODY}" | mail -s "${WELCOME_MSG_SUBJECT}" ${MAIL}
+}
+
+usage()
+{
+    echo "Usage:"
+    echo -e "\t$0 DOMAIN USERNAME"
+    echo -e "\t$0 DOMAIN USER1 USER2 USER3 ..."
+}
+
+if [ $# -lt 2 ]; then
+    usage
+else
+    # Promopt to check settings.
+    [ X"${LDAP_SUFFIX}" == X"dc=example,dc=com" ] && echo "You should change 'LDAP_SUFFIX' in $0."
+
+    # Get domain name.
+    DOMAIN_NAME="$(echo $1 | tr '[A-Z]' '[a-z]')"
+    shift 1
+
+    add_new_domain ${DOMAIN_NAME}
+    for i in $@; do
+        USERNAME="$(echo $i | tr '[A-Z]' '[a-z]')"
+        MAIL="${USERNAME}@${DOMAIN_NAME}"
+
+        # Add new user in LDAP.
+        add_new_user ${USERNAME} ${MAIL}
+
+        # Send welcome msg to new user.
+        [ X"${SEND_WELCOME_MSG}" == X'YES' ] && send_welcome_mail ${MAIL}
+    done
+fi

package/dist/server/engine/tools/create_mail_user_SQL.sh

@@ -0,0 +1,127 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin (zhb _at_ iredmail.org)
+# Purpose:  Import users to SQL database from plain text file.
+# Project:  iRedMail (http://www.iredmail.org/)
+
+# -------------------------------------------------------------------
+# Usage:
+#   * Edit these variables:
+#       STORAGE_BASE_DIRECTORY
+#       DEFAULT_QUOTA='1024'   # 1024 is 1GB
+#
+#   * Run this script to generate SQL command used to create new user.
+#
+#       bash create_mail_user_SQL.sh <new-email> <plain-password>
+#
+#     For example:
+#
+#       bash create_mail_user_SQL.sh user@domain.ltd plain_password
+#
+#     It will print SQL commands on console directly, you can redirect the
+#     output to a file for further use like this:
+#
+#       bash create_mail_user_SQL.sh user@domain.ltd plain_password > output.sql
+#
+#   * Import output.sql into SQL database like below:
+#
+#       # mysql -uroot -p
+#       mysql> USE vmail;
+#       mysql> SOURCE /path/to/output.sql;
+#
+#       # psql -d vmail
+#       sql> \i /path/to/output.sql;
+
+# --------- CHANGE THESE VALUES ----------
+# Storage base directory used to store users' mail.
+STORAGE_BASE_DIRECTORY="/var/vmail/vmail1"
+
+###########
+# Password
+#
+# Password scheme. Available schemes: BCRYPT, SSHA512, SSHA, PLAIN.
+# Check file Available
+PASSWORD_SCHEME='SSHA512'
+
+# Default mail quota (in MB).
+DEFAULT_QUOTA='1024'
+
+#
+# Maildir settings
+#
+# Maildir style: hashed, normal.
+# Hashed maildir style, so that there won't be many large directories
+# in your mail storage file system. Better performance in large scale
+# deployment.
+# Format: e.g. username@domain.td
+#   hashed  -> domain.ltd/u/us/use/username/
+#   normal  -> domain.ltd/username/
+# Default hash level is 3.
+MAILDIR_STYLE='hashed'      # hashed, normal.
+
+if [ X"$#" != X'2' ]; then
+    echo "Invalid command arguments. Usage:"
+    echo "bash create_mail_user_SQL.sh user@domain.ltd plain_password"
+    exit 255
+fi
+
+# Time stamp, will be appended in maildir.
+DATE="$(date +%Y.%m.%d.%H.%M.%S)"
+WC_L='wc -L'
+if [ X"$(uname -s)" == X'OpenBSD' ]; then
+    WC_L='wc -l'
+fi
+
+STORAGE_BASE="$(dirname ${STORAGE_BASE_DIRECTORY})"
+STORAGE_NODE="$(basename ${STORAGE_BASE_DIRECTORY})"
+
+generate_password_hash()
+{
+    # Usage: generate_password_hash <password-scheme> <plain-password>
+    _scheme="${1}"
+    _password="${2}"
+
+    if [ X"${_scheme}" == X'BCRYPT' ]; then
+        _scheme='BLF-CRYPT'
+    fi
+
+    doveadm pw -s "${_scheme}" -p "${_password}"
+}
+
+# Read input.
+# Convert email address to lower cases.
+mail="$(echo $1 | tr '[:upper:]' '[:lower:]')"
+plain_password="$2"
+
+username="$(echo $mail | awk -F'@' '{print $1}')"
+domain="$(echo $mail | awk -F'@' '{print $2}')"
+
+# Cyrpt default password.
+export CRYPT_PASSWD="$(generate_password_hash ${PASSWORD_SCHEME} ${plain_password})"
+
+# Different maildir style: hashed, normal.
+if [ X"${MAILDIR_STYLE}" == X"hashed" ]; then
+    length="$(echo ${username} | ${WC_L} )"
+    str1="$(echo ${username} | cut -c1)"
+    str2="$(echo ${username} | cut -c2)"
+    str3="$(echo ${username} | cut -c3)"
+
+    test -z "${str2}" && str2="${str1}"
+    test -z "${str3}" && str3="${str2}"
+
+    # Use mbox, will be changed later.
+    maildir="${domain}/${str1}/${str2}/${str3}/${username}-${DATE}/"
+else
+    maildir="${domain}/${username}-${DATE}/"
+fi
+
+cat <<EOF
+INSERT INTO mailbox (username, password, name,
+                     storagebasedirectory,storagenode, maildir,
+                     quota, domain, active, passwordlastchange, created)
+             VALUES ('${mail}', '${CRYPT_PASSWD}', '${username}',
+                     '${STORAGE_BASE}','${STORAGE_NODE}', '${maildir}',
+                     '${DEFAULT_QUOTA}', '${domain}', '1', NOW(), NOW());
+INSERT INTO forwardings (address, forwarding, domain, dest_domain, is_forwarding)
+                 VALUES ('${mail}', '${mail}','${domain}', '${domain}', 1);
+EOF

package/dist/server/engine/tools/enable_postscreen.sh

@@ -0,0 +1,144 @@
+#!/usr/bin/env bash
+
+# Author: Zhang Huangbin <zhb@iredmail.org>
+# Purpose: Enable Postfix postscreen.
+# Last update: Dec 1, 2015
+
+export KERNEL_NAME="$(uname -s | tr '[a-z]' '[A-Z]')"
+export DATE="$(/bin/date +%Y.%m.%d.%H.%M.%S)"
+export SYS_GROUP_ROOT='root'
+
+export SYS_USER_POSTFIX='postfix'
+export SYS_GROUP_POSTFIX='postfix'
+
+export POSTFIX_ROOT_DIR='/etc/postfix'
+export POSTFIX_DATA_DIRECTORY='/var/lib/postfix'   # postconf data_directory
+
+if [ X"${KERNEL_NAME}" == X'FREEBSD' ]; then
+    export SYS_GROUP_ROOT='wheel'
+    export POSTFIX_ROOT_DIR='/usr/local/etc/postfix'
+    export POSTFIX_DATA_DIRECTORY='/var/db/postfix'
+elif [ X"${KERNEL_NAME}" == X'OPENBSD' ]; then
+    export SYS_GROUP_ROOT='wheel'
+    export SYS_USER_POSTFIX='_postfix'
+    export SYS_GROUP_POSTFIX='_postfix'
+    export POSTFIX_DATA_DIRECTORY='/var/postfix'
+fi
+
+# path to some config files
+export MAIN_CF="${POSTFIX_ROOT_DIR}/main.cf"
+export MASTER_CF="${POSTFIX_ROOT_DIR}/master.cf"
+export POSTSCREEN_DNSBL_REPLY="${POSTFIX_ROOT_DIR}/postscreen_dnsbl_reply"
+export POSTSCREEN_ACCESS_CIDR="${POSTFIX_ROOT_DIR}/postscreen_access.cidr"
+
+# Get Postfix version number.
+export POSTFIX_VERSION="$(postconf mail_version 2>/dev/null | awk '{print $NF}')"
+
+# postscreen requires Postfix 2.8 or later.
+if echo ${POSTFIX_VERSION} | grep '^2\.[01234567]\.' &>/dev/null; then
+    echo "<WARNING> postscreen requires Postfix 2.8 or later, you're running ${POSTFIX_VERSION}."
+    exit 255
+fi
+
+backup_file()
+{
+    # Usage: backup_file file1 [file2 file3 ... fileN]
+    if [ X"$#" != X"0" ]; then
+        for f in $@; do
+            if [ -f ${f} ]; then
+                echo -e "* [BACKUP] ${f} -> ${f}.${DATE}."
+                cp -f ${f} ${f}.${DATE}
+            fi
+        done
+    fi
+}
+
+backup_file ${MAIN_CF} ${MASTER_CF} ${POSTSCREEN_ACCESS_CIDR} ${POSTSCREEN_DNSBL_REPLY}
+
+echo "* Comment out 'smtp inet ... smtpd' service in ${MASTER_CF}."
+perl -pi -e 's/^(smtp .*inet.*smtpd)$/#${1}/g' ${MASTER_CF}
+
+echo "* Uncomment the new 'smtpd pass ... smtpd' service in ${MASTER_CF}."
+perl -pi -e 's/^#(smtpd.*pass.*smtpd)$/${1}/g' ${MASTER_CF}
+
+echo "* Uncomment the new "smtp inet ... postscreen" service in ${MASTER_CF}."
+perl -pi -e 's/^#(smtp *.*inet.*postscreen)$/${1}/g' ${MASTER_CF}
+
+echo "* Uncomment the new 'tlsproxy unix ... tlsproxy' service in ${MASTER_CF}."
+perl -pi -e 's/^#(tlsproxy.*unix.*tlsproxy)$/${1}/g' ${MASTER_CF}
+
+echo "* Uncomment the new 'dnsblog unix ... dnsblog' service in ${MASTER_CF}."
+perl -pi -e 's/^#(dnsblog.*unix.*dnsblog)$/${1}/g' ${MASTER_CF}
+
+echo "* Update ${MAIN_CF} to enable postscreen."
+postconf -e postscreen_dnsbl_threshold=2
+postconf -e postscreen_dnsbl_sites='zen.spamhaus.org=127.0.0.[2..11]*3 b.barracudacentral.org=127.0.0.2*2'
+
+postconf -e postscreen_dnsbl_reply_map="texthash:${POSTSCREEN_DNSBL_REPLY}"
+cat > ${POSTSCREEN_DNSBL_REPLY} <<EOF
+# Secret DNSBL name           Name in postscreen(8) replies
+EOF
+
+postconf -e postscreen_access_list="permit_mynetworks, cidr:${POSTSCREEN_ACCESS_CIDR}"
+cat > ${POSTSCREEN_ACCESS_CIDR} <<EOF
+# Rules are evaluated in the order as specified.
+#1.2.3.4 permit
+#2.3.4.5 reject
+
+# Permit local clients
+127.0.0.0/8 permit
+EOF
+
+postconf -e postscreen_greet_action='drop'
+postconf -e postscreen_dnsbl_action='drop'
+postconf -e postscreen_blacklist_action='drop'
+
+# Require Postfix-2.11.
+if echo ${POSTFIX_VERSION} | grep '^2\.[123456789][123456789]' &>/dev/null; then
+    postconf -e postscreen_dnsbl_whitelist_threshold='-2'
+fi
+
+# From Postfix author Wietse Venema, posted in Postfix mailing list on Jul 14, 2015:
+# ----
+# I would not enable the "after 220 greeting" protocol tests, because
+# some senders that pass the tests will not retry (mail will never
+# be delivered), and some will retry from a different client IP address
+# (mail will be delayed).  Whitelisting Google does not solve the
+# problem because it also affects other senders.
+#
+# The amount of mail stopped by these tests is so small that it is not
+# worth the trouble at this time.
+# ----
+#postscreen_pipelining_enable=yes
+#postscreen_pipelining_action=
+#
+#postscreen_non_smtp_command_enable=yes
+#postscreen_non_smtp_command_action=
+#
+#postscreen_bare_newline_enable=yes
+#postscreen_bare_newline_action=
+
+# Create directory inside chroot directory used to store file `postscreen_cache`.
+# queue directory. Postfix will be chrooted to this directory.
+queue_directory="$(postconf queue_directory | awk '{print $3}')"
+# data directory. used to store additional files.
+data_directory="$(postconf data_directory | awk '{print $3}')"
+chrooted_data_directory="${queue_directory}/${data_directory}"
+
+echo "* Create ${chrooted_data_directory}/postscreen_cache.db."
+mkdir -p ${chrooted_data_directory}
+chown ${SYS_USER_POSTFIX}:${SYS_GROUP_ROOT} ${chrooted_data_directory}
+chmod 0700 ${chrooted_data_directory}
+
+# Create db file.
+cd ${chrooted_data_directory}
+touch postscreen_cache
+postmap btree:postscreen_cache
+rm postscreen_cache
+chown ${SYS_USER_POSTFIX}:${SYS_GROUP_POSTFIX} postscreen_cache.db
+chmod 0700 postscreen_cache.db
+
+echo "* Reloading postfix service to read the new configuration."
+postfix reload
+
+echo "* postscreen is now enabled."

package/dist/server/engine/tools/fail2ban_unban_ip.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+
+# Purpose: Unban specified IP address(es) from all Fail2ban jails.
+# Author: Zhang Huangbin
+
+# Usage:
+#
+#   bash fail2ban_unban_ip.sh 192.168.1.1 [192.168.2.2 ...]
+
+if [ X"$#" == X'0' ]; then
+    cat <<EOF
+Usage: specify the IP addresses you want to unban on command line. For example:
+
+$ bash fail2ban_unban_ip.sh 173.254.22.21
+
+Multiple IP addresses must be spearated by space.
+
+$ bash fail2ban_unban_ip.sh 173.254.22.21 8.8.8.8 8.8.4.4
+
+EOF
+fi
+
+# Get all IP addresses from command line.
+IPS="$@"
+
+# Path to command 'fail2ban-client'
+F2B='fail2ban-client'
+
+# Get all jails.
+JAILS="$(${F2B} status | grep 'Jail list:' | awk -F'Jail list:' '{print $2}' | sed 's/,//g')"
+
+for jail in ${JAILS}; do
+    for ip in ${IPS}; do
+        ${F2B} set ${jail} unbanip ${ip} &>/dev/null
+        if [ X"$?" == X'0' ]; then
+            echo "Removed ${ip} from jail '${jail}'"
+        fi
+    done
+done

package/dist/server/engine/tools/find_sasl_login_ip.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# Purpose: Find login IP address of specified username which is used for smtp
+#          authentication.
+
+MAIL_LOG="$1"
+USER="$2"
+
+if [ -z ${MAIL_LOG} -o -z ${USER} ]; then
+    echo "Please run script with a log file and email address: $0 /path/to/maillog mail_address"
+    exit 255
+fi
+
+tmpfile="/tmp/sasl_username_${RANDOM}"
+
+# extract 'client=xxx[__IP__]' lines
+grep "sasl_username=${USER}" ${MAIL_LOG} | awk '{print $7}' | sort | uniq -c | sort -n > sort > ${tmpfile}
+
+cat ${tmpfile}
+
+rm -f ${tmpfile}

package/dist/server/engine/tools/find_top_sasl_usernames.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+# Author: Zhang Huangbin <zhb@iredmail.org>
+# Purpose: Find usernames used for smtp authentication in Postfix log file,
+#          sorted by login times.
+
+MAILLOG_FILE="$1"
+
+# Detect mail log file if not specified on command line.
+if [ -z ${MAILLOG_FILE} ]; then
+    for f in /var/log/maillog /var/log/mail.log; do
+        if [ -f ${f} ]; then
+            MAILLOG_FILE="${f}"
+            break
+        fi
+    done
+fi
+
+if [ -z ${MAILLOG_FILE} ]; then
+    echo "Please specify Postfix log file on command line: $0 /path/to/maillog"
+    exit 255
+fi
+
+grep 'sasl_username=' ${MAILLOG_FILE} \
+    | awk -F'sasl_username=' '{print $2}' \
+    | awk '{print $NF}' \
+    | sort \
+    | uniq -c \
+    | sort -nr