@serve.zone/dcrouter 2.12.4 → 5.0.2

package/dist_ts/security/classes.ipreputationchecker.js

@@ -1,508 +0,0 @@
-import * as plugins from '../plugins.js';
-import * as paths from '../paths.js';
-import { logger } from '../logger.js';
-import { SecurityLogger, SecurityLogLevel, SecurityEventType } from './classes.securitylogger.js';
-import { LRUCache } from 'lru-cache';
-/**
- * Reputation threshold scores
- */
-export var ReputationThreshold;
-(function (ReputationThreshold) {
-    ReputationThreshold[ReputationThreshold["HIGH_RISK"] = 20] = "HIGH_RISK";
-    ReputationThreshold[ReputationThreshold["MEDIUM_RISK"] = 50] = "MEDIUM_RISK";
-    ReputationThreshold[ReputationThreshold["LOW_RISK"] = 80] = "LOW_RISK"; // Score below this is considered low risk (but not trusted)
-})(ReputationThreshold || (ReputationThreshold = {}));
-/**
- * IP type classifications
- */
-export var IPType;
-(function (IPType) {
-    IPType["RESIDENTIAL"] = "residential";
-    IPType["DATACENTER"] = "datacenter";
-    IPType["PROXY"] = "proxy";
-    IPType["TOR"] = "tor";
-    IPType["VPN"] = "vpn";
-    IPType["UNKNOWN"] = "unknown";
-})(IPType || (IPType = {}));
-/**
- * Class for checking IP reputation of inbound email senders
- */
-export class IPReputationChecker {
-    // Default DNSBL servers
-    static { this.DEFAULT_DNSBL_SERVERS = [
-        'zen.spamhaus.org', // Spamhaus
-        'bl.spamcop.net', // SpamCop
-        'b.barracudacentral.org', // Barracuda
-        'spam.dnsbl.sorbs.net', // SORBS
-        'dnsbl.sorbs.net', // SORBS (expanded)
-        'cbl.abuseat.org', // Composite Blocking List 
-        'xbl.spamhaus.org', // Spamhaus XBL
-        'pbl.spamhaus.org', // Spamhaus PBL
-        'dnsbl-1.uceprotect.net', // UCEPROTECT
-        'psbl.surriel.com' // PSBL
-    ]; }
-    // Default options
-    static { this.DEFAULT_OPTIONS = {
-        maxCacheSize: 10000,
-        cacheTTL: 24 * 60 * 60 * 1000, // 24 hours
-        dnsblServers: IPReputationChecker.DEFAULT_DNSBL_SERVERS,
-        highRiskThreshold: ReputationThreshold.HIGH_RISK,
-        mediumRiskThreshold: ReputationThreshold.MEDIUM_RISK,
-        lowRiskThreshold: ReputationThreshold.LOW_RISK,
-        enableLocalCache: true,
-        enableDNSBL: true,
-        enableIPInfo: true
-    }; }
-    /**
-     * Constructor for IPReputationChecker
-     * @param options Configuration options
-     * @param storageManager Optional StorageManager instance for persistence
-     */
-    constructor(options = {}, storageManager) {
-        // Merge with default options
-        this.options = {
-            ...IPReputationChecker.DEFAULT_OPTIONS,
-            ...options
-        };
-        this.storageManager = storageManager;
-        // If no storage manager provided, log warning
-        if (!storageManager && this.options.enableLocalCache) {
-            logger.log('warn', '⚠️  WARNING: IPReputationChecker initialized without StorageManager.\n' +
-                '   IP reputation cache will only be stored to filesystem.\n' +
-                '   Consider passing a StorageManager instance for better storage flexibility.');
-        }
-        // Initialize reputation cache
-        this.reputationCache = new LRUCache({
-            max: this.options.maxCacheSize,
-            ttl: this.options.cacheTTL, // Cache TTL
-        });
-        // Load cache from disk if enabled
-        if (this.options.enableLocalCache) {
-            // Fire and forget the load operation
-            this.loadCache().catch(error => {
-                logger.log('error', `Failed to load IP reputation cache during initialization: ${error.message}`);
-            });
-        }
-    }
-    /**
-     * Get the singleton instance of the checker
-     * @param options Configuration options
-     * @param storageManager Optional StorageManager instance for persistence
-     * @returns Singleton instance
-     */
-    static getInstance(options = {}, storageManager) {
-        if (!IPReputationChecker.instance) {
-            IPReputationChecker.instance = new IPReputationChecker(options, storageManager);
-        }
-        return IPReputationChecker.instance;
-    }
-    /**
-     * Check an IP address's reputation
-     * @param ip IP address to check
-     * @returns Reputation check result
-     */
-    async checkReputation(ip) {
-        try {
-            // Validate IP address format
-            if (!this.isValidIPAddress(ip)) {
-                logger.log('warn', `Invalid IP address format: ${ip}`);
-                return this.createErrorResult(ip, 'Invalid IP address format');
-            }
-            // Check cache first
-            const cachedResult = this.reputationCache.get(ip);
-            if (cachedResult) {
-                logger.log('info', `Using cached reputation data for IP ${ip}`, {
-                    score: cachedResult.score,
-                    isSpam: cachedResult.isSpam
-                });
-                return cachedResult;
-            }
-            // Initialize empty result
-            const result = {
-                score: 100, // Start with perfect score
-                isSpam: false,
-                isProxy: false,
-                isTor: false,
-                isVPN: false,
-                timestamp: Date.now()
-            };
-            // Check IP against DNS blacklists if enabled
-            if (this.options.enableDNSBL) {
-                const dnsblResult = await this.checkDNSBL(ip);
-                // Update result with DNSBL information
-                result.score -= dnsblResult.listCount * 10; // Subtract 10 points per blacklist
-                result.isSpam = dnsblResult.listCount > 0;
-                result.blacklists = dnsblResult.lists;
-            }
-            // Get additional IP information if enabled
-            if (this.options.enableIPInfo) {
-                const ipInfo = await this.getIPInfo(ip);
-                // Update result with IP info
-                result.country = ipInfo.country;
-                result.asn = ipInfo.asn;
-                result.org = ipInfo.org;
-                // Adjust score based on IP type
-                if (ipInfo.type === IPType.PROXY || ipInfo.type === IPType.TOR || ipInfo.type === IPType.VPN) {
-                    result.score -= 30; // Subtract 30 points for proxies, Tor, VPNs
-                    // Set proxy flags
-                    result.isProxy = ipInfo.type === IPType.PROXY;
-                    result.isTor = ipInfo.type === IPType.TOR;
-                    result.isVPN = ipInfo.type === IPType.VPN;
-                }
-            }
-            // Ensure score is between 0 and 100
-            result.score = Math.max(0, Math.min(100, result.score));
-            // Update cache with result
-            this.reputationCache.set(ip, result);
-            // Save cache if enabled
-            if (this.options.enableLocalCache) {
-                // Fire and forget the save operation
-                this.saveCache().catch(error => {
-                    logger.log('error', `Failed to save IP reputation cache: ${error.message}`);
-                });
-            }
-            // Log the reputation check
-            this.logReputationCheck(ip, result);
-            return result;
-        }
-        catch (error) {
-            logger.log('error', `Error checking IP reputation for ${ip}: ${error.message}`, {
-                ip,
-                stack: error.stack
-            });
-            return this.createErrorResult(ip, error.message);
-        }
-    }
-    /**
-     * Check an IP against DNS blacklists
-     * @param ip IP address to check
-     * @returns DNSBL check results
-     */
-    async checkDNSBL(ip) {
-        try {
-            // Reverse the IP for DNSBL queries
-            const reversedIP = this.reverseIP(ip);
-            const results = await Promise.allSettled(this.options.dnsblServers.map(async (server) => {
-                try {
-                    const lookupDomain = `${reversedIP}.${server}`;
-                    await plugins.dns.promises.resolve(lookupDomain);
-                    return server; // IP is listed in this DNSBL
-                }
-                catch (error) {
-                    if (error.code === 'ENOTFOUND') {
-                        return null; // IP is not listed in this DNSBL
-                    }
-                    throw error; // Other error
-                }
-            }));
-            // Extract successful lookups (listed in DNSBL)
-            const lists = results
-                .filter((result) => result.status === 'fulfilled' && result.value !== null)
-                .map(result => result.value);
-            return {
-                listCount: lists.length,
-                lists
-            };
-        }
-        catch (error) {
-            logger.log('error', `Error checking DNSBL for ${ip}: ${error.message}`);
-            return {
-                listCount: 0,
-                lists: []
-            };
-        }
-    }
-    /**
-     * Get information about an IP address
-     * @param ip IP address to check
-     * @returns IP information
-     */
-    async getIPInfo(ip) {
-        try {
-            // In a real implementation, this would use an IP data service API
-            // For this implementation, we'll use a simplified approach
-            // Check if it's a known Tor exit node (simplified)
-            const isTor = ip.startsWith('171.25.') || ip.startsWith('185.220.') || ip.startsWith('95.216.');
-            // Check if it's a known VPN (simplified)
-            const isVPN = ip.startsWith('185.156.') || ip.startsWith('37.120.');
-            // Check if it's a known proxy (simplified)
-            const isProxy = ip.startsWith('34.92.') || ip.startsWith('34.206.');
-            // Determine IP type
-            let type = IPType.UNKNOWN;
-            if (isTor) {
-                type = IPType.TOR;
-            }
-            else if (isVPN) {
-                type = IPType.VPN;
-            }
-            else if (isProxy) {
-                type = IPType.PROXY;
-            }
-            else {
-                // Simple datacenters detection (major cloud providers)
-                if (ip.startsWith('13.') || // AWS
-                    ip.startsWith('35.') || // Google Cloud
-                    ip.startsWith('52.') || // AWS
-                    ip.startsWith('34.') || // Google Cloud
-                    ip.startsWith('104.') // Various providers
-                ) {
-                    type = IPType.DATACENTER;
-                }
-                else {
-                    type = IPType.RESIDENTIAL;
-                }
-            }
-            // Return the information
-            return {
-                country: this.determineCountry(ip), // Simplified, would use geolocation service
-                asn: 'AS12345', // Simplified, would look up real ASN
-                org: this.determineOrg(ip), // Simplified, would use real org data
-                type
-            };
-        }
-        catch (error) {
-            logger.log('error', `Error getting IP info for ${ip}: ${error.message}`);
-            return {
-                type: IPType.UNKNOWN
-            };
-        }
-    }
-    /**
-     * Simplified method to determine country from IP
-     * In a real implementation, this would use a geolocation database or service
-     * @param ip IP address
-     * @returns Country code
-     */
-    determineCountry(ip) {
-        // Simplified mapping for demo purposes
-        if (ip.startsWith('13.') || ip.startsWith('52.'))
-            return 'US';
-        if (ip.startsWith('35.') || ip.startsWith('34.'))
-            return 'US';
-        if (ip.startsWith('185.'))
-            return 'NL';
-        if (ip.startsWith('171.'))
-            return 'DE';
-        return 'XX'; // Unknown
-    }
-    /**
-     * Simplified method to determine organization from IP
-     * In a real implementation, this would use an IP-to-org database or service
-     * @param ip IP address
-     * @returns Organization name
-     */
-    determineOrg(ip) {
-        // Simplified mapping for demo purposes
-        if (ip.startsWith('13.') || ip.startsWith('52.'))
-            return 'Amazon AWS';
-        if (ip.startsWith('35.') || ip.startsWith('34.'))
-            return 'Google Cloud';
-        if (ip.startsWith('185.156.'))
-            return 'NordVPN';
-        if (ip.startsWith('37.120.'))
-            return 'ExpressVPN';
-        if (ip.startsWith('185.220.'))
-            return 'Tor Exit Node';
-        return 'Unknown';
-    }
-    /**
-     * Reverse an IP address for DNSBL lookups (e.g., 1.2.3.4 -> 4.3.2.1)
-     * @param ip IP address to reverse
-     * @returns Reversed IP for DNSBL queries
-     */
-    reverseIP(ip) {
-        return ip.split('.').reverse().join('.');
-    }
-    /**
-     * Create an error result for when reputation check fails
-     * @param ip IP address
-     * @param errorMessage Error message
-     * @returns Error result
-     */
-    createErrorResult(ip, errorMessage) {
-        return {
-            score: 50, // Neutral score for errors
-            isSpam: false,
-            isProxy: false,
-            isTor: false,
-            isVPN: false,
-            timestamp: Date.now(),
-            error: errorMessage
-        };
-    }
-    /**
-     * Validate IP address format
-     * @param ip IP address to validate
-     * @returns Whether the IP is valid
-     */
-    isValidIPAddress(ip) {
-        // IPv4 regex pattern
-        const ipv4Pattern = /^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/;
-        return ipv4Pattern.test(ip);
-    }
-    /**
-     * Log reputation check to security logger
-     * @param ip IP address
-     * @param result Reputation result
-     */
-    logReputationCheck(ip, result) {
-        // Determine log level based on reputation score
-        let logLevel = SecurityLogLevel.INFO;
-        if (result.score < this.options.highRiskThreshold) {
-            logLevel = SecurityLogLevel.WARN;
-        }
-        else if (result.score < this.options.mediumRiskThreshold) {
-            logLevel = SecurityLogLevel.INFO;
-        }
-        // Log the check
-        SecurityLogger.getInstance().logEvent({
-            level: logLevel,
-            type: SecurityEventType.IP_REPUTATION,
-            message: `IP reputation check ${result.isSpam ? 'flagged spam' : 'completed'} for ${ip}`,
-            ipAddress: ip,
-            details: {
-                score: result.score,
-                isSpam: result.isSpam,
-                isProxy: result.isProxy,
-                isTor: result.isTor,
-                isVPN: result.isVPN,
-                country: result.country,
-                blacklists: result.blacklists
-            },
-            success: !result.isSpam
-        });
-    }
-    /**
-     * Save cache to disk or storage manager
-     */
-    async saveCache() {
-        try {
-            // Convert cache entries to serializable array
-            const entries = Array.from(this.reputationCache.entries()).map(([ip, data]) => ({
-                ip,
-                data
-            }));
-            // Only save if we have entries
-            if (entries.length === 0) {
-                return;
-            }
-            const cacheData = JSON.stringify(entries);
-            // Save to storage manager if available
-            if (this.storageManager) {
-                await this.storageManager.set('/security/ip-reputation-cache.json', cacheData);
-                logger.log('info', `Saved ${entries.length} IP reputation cache entries to StorageManager`);
-            }
-            else {
-                // Fall back to filesystem
-                const cacheDir = plugins.path.join(paths.dataDir, 'security');
-                plugins.smartfile.fs.ensureDirSync(cacheDir);
-                const cacheFile = plugins.path.join(cacheDir, 'ip_reputation_cache.json');
-                plugins.smartfile.memory.toFsSync(cacheData, cacheFile);
-                logger.log('info', `Saved ${entries.length} IP reputation cache entries to disk`);
-            }
-        }
-        catch (error) {
-            logger.log('error', `Failed to save IP reputation cache: ${error.message}`);
-        }
-    }
-    /**
-     * Load cache from disk or storage manager
-     */
-    async loadCache() {
-        try {
-            let cacheData = null;
-            let fromFilesystem = false;
-            // Try to load from storage manager first
-            if (this.storageManager) {
-                try {
-                    cacheData = await this.storageManager.get('/security/ip-reputation-cache.json');
-                    if (!cacheData) {
-                        // Check if data exists in filesystem and migrate it
-                        const cacheFile = plugins.path.join(paths.dataDir, 'security', 'ip_reputation_cache.json');
-                        if (plugins.fs.existsSync(cacheFile)) {
-                            logger.log('info', 'Migrating IP reputation cache from filesystem to StorageManager');
-                            cacheData = plugins.fs.readFileSync(cacheFile, 'utf8');
-                            fromFilesystem = true;
-                            // Migrate to storage manager
-                            await this.storageManager.set('/security/ip-reputation-cache.json', cacheData);
-                            logger.log('info', 'IP reputation cache migrated to StorageManager successfully');
-                            // Optionally delete the old file after successful migration
-                            try {
-                                plugins.fs.unlinkSync(cacheFile);
-                                logger.log('info', 'Old cache file removed after migration');
-                            }
-                            catch (deleteError) {
-                                logger.log('warn', `Could not delete old cache file: ${deleteError.message}`);
-                            }
-                        }
-                    }
-                }
-                catch (error) {
-                    logger.log('error', `Error loading from StorageManager: ${error.message}`);
-                }
-            }
-            else {
-                // No storage manager, load from filesystem
-                const cacheFile = plugins.path.join(paths.dataDir, 'security', 'ip_reputation_cache.json');
-                if (plugins.fs.existsSync(cacheFile)) {
-                    cacheData = plugins.fs.readFileSync(cacheFile, 'utf8');
-                    fromFilesystem = true;
-                }
-            }
-            // Parse and restore cache if data was found
-            if (cacheData) {
-                const entries = JSON.parse(cacheData);
-                // Validate and filter entries
-                const now = Date.now();
-                const validEntries = entries.filter(entry => {
-                    const age = now - entry.data.timestamp;
-                    return age < this.options.cacheTTL; // Only load entries that haven't expired
-                });
-                // Restore cache
-                for (const entry of validEntries) {
-                    this.reputationCache.set(entry.ip, entry.data);
-                }
-                const source = fromFilesystem ? 'disk' : 'StorageManager';
-                logger.log('info', `Loaded ${validEntries.length} IP reputation cache entries from ${source}`);
-            }
-        }
-        catch (error) {
-            logger.log('error', `Failed to load IP reputation cache: ${error.message}`);
-        }
-    }
-    /**
-     * Get the risk level for a reputation score
-     * @param score Reputation score (0-100)
-     * @returns Risk level description
-     */
-    static getRiskLevel(score) {
-        if (score < ReputationThreshold.HIGH_RISK) {
-            return 'high';
-        }
-        else if (score < ReputationThreshold.MEDIUM_RISK) {
-            return 'medium';
-        }
-        else if (score < ReputationThreshold.LOW_RISK) {
-            return 'low';
-        }
-        else {
-            return 'trusted';
-        }
-    }
-    /**
-     * Update the storage manager after instantiation
-     * This is useful when the storage manager is not available at construction time
-     * @param storageManager The StorageManager instance to use
-     */
-    updateStorageManager(storageManager) {
-        this.storageManager = storageManager;
-        logger.log('info', 'IPReputationChecker storage manager updated');
-        // If cache is enabled and we have entries, save them to the new storage manager
-        if (this.options.enableLocalCache && this.reputationCache.size > 0) {
-            this.saveCache().catch(error => {
-                logger.log('error', `Failed to save cache to new storage manager: ${error.message}`);
-            });
-        }
-    }
-}
-//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/security/classes.securitylogger.d.ts

@@ -1,140 +0,0 @@
-/**
- * Log level for security events
- */
-export declare enum SecurityLogLevel {
-    INFO = "info",
-    WARN = "warn",
-    ERROR = "error",
-    CRITICAL = "critical"
-}
-/**
- * Security event types for categorization
- */
-export declare enum SecurityEventType {
-    AUTHENTICATION = "authentication",
-    ACCESS_CONTROL = "access_control",
-    EMAIL_VALIDATION = "email_validation",
-    EMAIL_PROCESSING = "email_processing",
-    EMAIL_FORWARDING = "email_forwarding",
-    EMAIL_DELIVERY = "email_delivery",
-    DKIM = "dkim",
-    SPF = "spf",
-    DMARC = "dmarc",
-    RATE_LIMIT = "rate_limit",
-    RATE_LIMITING = "rate_limiting",
-    SPAM = "spam",
-    MALWARE = "malware",
-    CONNECTION = "connection",
-    DATA_EXPOSURE = "data_exposure",
-    CONFIGURATION = "configuration",
-    IP_REPUTATION = "ip_reputation",
-    REJECTED_CONNECTION = "rejected_connection"
-}
-/**
- * Security event interface
- */
-export interface ISecurityEvent {
-    timestamp: number;
-    level: SecurityLogLevel;
-    type: SecurityEventType;
-    message: string;
-    details?: any;
-    ipAddress?: string;
-    userId?: string;
-    sessionId?: string;
-    emailId?: string;
-    domain?: string;
-    action?: string;
-    result?: string;
-    success?: boolean;
-}
-/**
- * Security logger for enhanced security monitoring
- */
-export declare class SecurityLogger {
-    private static instance;
-    private securityEvents;
-    private maxEventHistory;
-    private enableNotifications;
-    private constructor();
-    /**
-     * Get singleton instance
-     */
-    static getInstance(options?: {
-        maxEventHistory?: number;
-        enableNotifications?: boolean;
-    }): SecurityLogger;
-    /**
-     * Log a security event
-     * @param event The security event to log
-     */
-    logEvent(event: Omit<ISecurityEvent, 'timestamp'>): void;
-    /**
-     * Get recent security events
-     * @param limit Maximum number of events to return
-     * @param filter Filter for specific event types
-     * @returns Recent security events
-     */
-    getRecentEvents(limit?: number, filter?: {
-        level?: SecurityLogLevel;
-        type?: SecurityEventType;
-        fromTimestamp?: number;
-        toTimestamp?: number;
-    }): ISecurityEvent[];
-    /**
-     * Get events by security level
-     * @param level The security level to filter by
-     * @param limit Maximum number of events to return
-     * @returns Security events matching the level
-     */
-    getEventsByLevel(level: SecurityLogLevel, limit?: number): ISecurityEvent[];
-    /**
-     * Get events by security type
-     * @param type The event type to filter by
-     * @param limit Maximum number of events to return
-     * @returns Security events matching the type
-     */
-    getEventsByType(type: SecurityEventType, limit?: number): ISecurityEvent[];
-    /**
-     * Get security events for a specific IP address
-     * @param ipAddress The IP address to filter by
-     * @param limit Maximum number of events to return
-     * @returns Security events for the IP address
-     */
-    getEventsByIP(ipAddress: string, limit?: number): ISecurityEvent[];
-    /**
-     * Get security events for a specific domain
-     * @param domain The domain to filter by
-     * @param limit Maximum number of events to return
-     * @returns Security events for the domain
-     */
-    getEventsByDomain(domain: string, limit?: number): ISecurityEvent[];
-    /**
-     * Send a notification for critical security events
-     * @param event The security event to notify about
-     * @private
-     */
-    private sendNotification;
-    /**
-     * Clear event history
-     */
-    clearEvents(): void;
-    /**
-     * Get statistical summary of security events
-     * @param timeWindow Optional time window in milliseconds
-     * @returns Summary of security events
-     */
-    getEventsSummary(timeWindow?: number): {
-        total: number;
-        byLevel: Record<SecurityLogLevel, number>;
-        byType: Record<SecurityEventType, number>;
-        topIPs: Array<{
-            ip: string;
-            count: number;
-        }>;
-        topDomains: Array<{
-            domain: string;
-            count: number;
-        }>;
-    };
-}