@serve.zone/dcrouter 2.12.4

package/dist_ts/ts/mail/delivery/smtpserver/security-handler.d.ts

@@ -0,0 +1,86 @@
+/**
+ * SMTP Security Handler
+ * Responsible for security aspects including IP reputation checking,
+ * email validation, and authentication
+ */
+import * as plugins from '../../../plugins.js';
+import type { ISmtpAuth } from './interfaces.js';
+import type { ISecurityHandler, ISmtpServer } from './interfaces.js';
+/**
+ * Handles security aspects for SMTP server
+ */
+export declare class SecurityHandler implements ISecurityHandler {
+    /**
+     * Reference to the SMTP server instance
+     */
+    private smtpServer;
+    /**
+     * IP reputation checker service
+     */
+    private ipReputationService;
+    /**
+     * Simple in-memory IP denylist
+     */
+    private ipDenylist;
+    /**
+     * Cleanup interval timer
+     */
+    private cleanupInterval;
+    /**
+     * Creates a new security handler
+     * @param smtpServer - SMTP server instance
+     */
+    constructor(smtpServer: ISmtpServer);
+    /**
+     * Check IP reputation for a connection
+     * @param socket - Client socket
+     * @returns Promise that resolves to true if IP is allowed, false if blocked
+     */
+    checkIpReputation(socket: plugins.net.Socket | plugins.tls.TLSSocket): Promise<boolean>;
+    /**
+     * Validate an email address
+     * @param email - Email address to validate
+     * @returns Whether the email address is valid
+     */
+    isValidEmail(email: string): boolean;
+    /**
+     * Validate authentication credentials
+     * @param auth - Authentication credentials
+     * @returns Promise that resolves to true if authenticated
+     */
+    authenticate(auth: ISmtpAuth): Promise<boolean>;
+    /**
+     * Log a security event
+     * @param event - Event type
+     * @param level - Log level
+     * @param details - Event details
+     */
+    logSecurityEvent(event: string, level: string, message: string, details: Record<string, any>): void;
+    /**
+     * Add an IP to the denylist
+     * @param ip - IP address
+     * @param reason - Reason for denylisting
+     * @param duration - Duration in milliseconds (optional, indefinite if not specified)
+     */
+    private addToDenylist;
+    /**
+     * Check if an IP is denylisted
+     * @param ip - IP address
+     * @returns Whether the IP is denylisted
+     */
+    private isIpDenylisted;
+    /**
+     * Get the reason an IP was denylisted
+     * @param ip - IP address
+     * @returns Reason for denylisting or undefined if not denylisted
+     */
+    private getDenylistReason;
+    /**
+     * Clean expired denylist entries
+     */
+    private cleanExpiredDenylistEntries;
+    /**
+     * Clean up resources
+     */
+    destroy(): void;
+}

package/dist_ts/ts/mail/delivery/smtpserver/security-handler.js

@@ -0,0 +1,234 @@
+/**
+ * SMTP Security Handler
+ * Responsible for security aspects including IP reputation checking,
+ * email validation, and authentication
+ */
+import * as plugins from '../../../plugins.js';
+import { SmtpLogger } from './utils/logging.js';
+import { SecurityEventType, SecurityLogLevel } from './constants.js';
+import { isValidEmail } from './utils/validation.js';
+import { getSocketDetails, getTlsDetails } from './utils/helpers.js';
+import { IPReputationChecker } from '../../../security/classes.ipreputationchecker.js';
+/**
+ * Handles security aspects for SMTP server
+ */
+export class SecurityHandler {
+    /**
+     * Creates a new security handler
+     * @param smtpServer - SMTP server instance
+     */
+    constructor(smtpServer) {
+        /**
+         * Simple in-memory IP denylist
+         */
+        this.ipDenylist = [];
+        /**
+         * Cleanup interval timer
+         */
+        this.cleanupInterval = null;
+        this.smtpServer = smtpServer;
+        // Initialize IP reputation checker
+        this.ipReputationService = new IPReputationChecker();
+        // Clean expired denylist entries periodically
+        this.cleanupInterval = setInterval(() => this.cleanExpiredDenylistEntries(), 60000); // Every minute
+    }
+    /**
+     * Check IP reputation for a connection
+     * @param socket - Client socket
+     * @returns Promise that resolves to true if IP is allowed, false if blocked
+     */
+    async checkIpReputation(socket) {
+        const socketDetails = getSocketDetails(socket);
+        const ip = socketDetails.remoteAddress;
+        // Check local denylist first
+        if (this.isIpDenylisted(ip)) {
+            // Log the blocked connection
+            this.logSecurityEvent(SecurityEventType.IP_REPUTATION, SecurityLogLevel.WARN, `Connection blocked from denylisted IP: ${ip}`, { reason: this.getDenylistReason(ip) });
+            return false;
+        }
+        // Check with IP reputation service
+        if (!this.ipReputationService) {
+            return true;
+        }
+        try {
+            // Check with IP reputation service
+            const reputationResult = await this.ipReputationService.checkReputation(ip);
+            // Block if score is below HIGH_RISK threshold (20) or if it's spam/proxy/tor/vpn
+            const isBlocked = reputationResult.score < 20 ||
+                reputationResult.isSpam ||
+                reputationResult.isTor ||
+                reputationResult.isProxy;
+            if (isBlocked) {
+                // Add to local denylist temporarily
+                const reason = reputationResult.isSpam ? 'spam' :
+                    reputationResult.isTor ? 'tor' :
+                        reputationResult.isProxy ? 'proxy' :
+                            `low reputation score: ${reputationResult.score}`;
+                this.addToDenylist(ip, reason, 3600000); // 1 hour
+                // Log the blocked connection
+                this.logSecurityEvent(SecurityEventType.IP_REPUTATION, SecurityLogLevel.WARN, `Connection blocked by reputation service: ${ip}`, {
+                    reason,
+                    score: reputationResult.score,
+                    isSpam: reputationResult.isSpam,
+                    isTor: reputationResult.isTor,
+                    isProxy: reputationResult.isProxy,
+                    isVPN: reputationResult.isVPN
+                });
+                return false;
+            }
+            // Log the allowed connection
+            this.logSecurityEvent(SecurityEventType.IP_REPUTATION, SecurityLogLevel.INFO, `IP reputation check passed: ${ip}`, {
+                score: reputationResult.score,
+                country: reputationResult.country,
+                org: reputationResult.org
+            });
+            return true;
+        }
+        catch (error) {
+            // Log the error
+            SmtpLogger.error(`IP reputation check error: ${error instanceof Error ? error.message : String(error)}`, {
+                ip,
+                error: error instanceof Error ? error : new Error(String(error))
+            });
+            // Allow the connection on error (fail open)
+            return true;
+        }
+    }
+    /**
+     * Validate an email address
+     * @param email - Email address to validate
+     * @returns Whether the email address is valid
+     */
+    isValidEmail(email) {
+        return isValidEmail(email);
+    }
+    /**
+     * Validate authentication credentials
+     * @param auth - Authentication credentials
+     * @returns Promise that resolves to true if authenticated
+     */
+    async authenticate(auth) {
+        const { username, password } = auth;
+        // Get auth options from server
+        const options = this.smtpServer.getOptions();
+        const authOptions = options.auth;
+        // Check if authentication is enabled
+        if (!authOptions) {
+            this.logSecurityEvent(SecurityEventType.AUTHENTICATION, SecurityLogLevel.WARN, 'Authentication attempt when auth is disabled', { username });
+            return false;
+        }
+        // Note: Method validation and TLS requirement checks would need to be done
+        // at the caller level since the interface doesn't include session/method info
+        try {
+            let authenticated = false;
+            // Use custom validation function if provided
+            if (authOptions.validateUser) {
+                authenticated = await authOptions.validateUser(username, password);
+            }
+            else {
+                // Default behavior - no authentication
+                authenticated = false;
+            }
+            // Log the authentication result
+            this.logSecurityEvent(SecurityEventType.AUTHENTICATION, authenticated ? SecurityLogLevel.INFO : SecurityLogLevel.WARN, authenticated ? 'Authentication successful' : 'Authentication failed', { username });
+            return authenticated;
+        }
+        catch (error) {
+            // Log authentication error
+            this.logSecurityEvent(SecurityEventType.AUTHENTICATION, SecurityLogLevel.ERROR, `Authentication error: ${error instanceof Error ? error.message : String(error)}`, { username, error: error instanceof Error ? error.message : String(error) });
+            return false;
+        }
+    }
+    /**
+     * Log a security event
+     * @param event - Event type
+     * @param level - Log level
+     * @param details - Event details
+     */
+    logSecurityEvent(event, level, message, details) {
+        SmtpLogger.logSecurityEvent(level, event, message, details, details.ip, details.domain, details.success);
+    }
+    /**
+     * Add an IP to the denylist
+     * @param ip - IP address
+     * @param reason - Reason for denylisting
+     * @param duration - Duration in milliseconds (optional, indefinite if not specified)
+     */
+    addToDenylist(ip, reason, duration) {
+        // Remove existing entry if present
+        this.ipDenylist = this.ipDenylist.filter(entry => entry.ip !== ip);
+        // Create new entry
+        const entry = {
+            ip,
+            reason,
+            expiresAt: duration ? Date.now() + duration : undefined
+        };
+        // Add to denylist
+        this.ipDenylist.push(entry);
+        // Log the action
+        this.logSecurityEvent(SecurityEventType.ACCESS_CONTROL, SecurityLogLevel.INFO, `Added IP to denylist: ${ip}`, {
+            ip,
+            reason,
+            duration: duration ? `${duration / 1000} seconds` : 'indefinite'
+        });
+    }
+    /**
+     * Check if an IP is denylisted
+     * @param ip - IP address
+     * @returns Whether the IP is denylisted
+     */
+    isIpDenylisted(ip) {
+        const entry = this.ipDenylist.find(e => e.ip === ip);
+        if (!entry) {
+            return false;
+        }
+        // Check if entry has expired
+        if (entry.expiresAt && entry.expiresAt < Date.now()) {
+            // Remove expired entry
+            this.ipDenylist = this.ipDenylist.filter(e => e !== entry);
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Get the reason an IP was denylisted
+     * @param ip - IP address
+     * @returns Reason for denylisting or undefined if not denylisted
+     */
+    getDenylistReason(ip) {
+        const entry = this.ipDenylist.find(e => e.ip === ip);
+        return entry?.reason;
+    }
+    /**
+     * Clean expired denylist entries
+     */
+    cleanExpiredDenylistEntries() {
+        const now = Date.now();
+        const initialCount = this.ipDenylist.length;
+        this.ipDenylist = this.ipDenylist.filter(entry => {
+            return !entry.expiresAt || entry.expiresAt > now;
+        });
+        const removedCount = initialCount - this.ipDenylist.length;
+        if (removedCount > 0) {
+            this.logSecurityEvent(SecurityEventType.ACCESS_CONTROL, SecurityLogLevel.INFO, `Cleaned up ${removedCount} expired denylist entries`, { remainingCount: this.ipDenylist.length });
+        }
+    }
+    /**
+     * Clean up resources
+     */
+    destroy() {
+        // Clear the cleanup interval
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+        // Clear the denylist
+        this.ipDenylist = [];
+        // Clean up IP reputation service if it has a destroy method
+        if (this.ipReputationService && typeof this.ipReputationService.destroy === 'function') {
+            this.ipReputationService.destroy();
+        }
+        SmtpLogger.debug('SecurityHandler destroyed');
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/ts/mail/delivery/smtpserver/session-manager.d.ts

@@ -0,0 +1,140 @@
+/**
+ * SMTP Session Manager
+ * Responsible for creating, managing, and cleaning up SMTP sessions
+ */
+import * as plugins from '../../../plugins.js';
+import { SmtpState } from './interfaces.js';
+import type { ISmtpSession } from './interfaces.js';
+import type { ISessionManager, ISessionEvents } from './interfaces.js';
+/**
+ * Manager for SMTP sessions
+ * Handles session creation, tracking, timeout management, and cleanup
+ */
+export declare class SessionManager implements ISessionManager {
+    /**
+     * Map of socket ID to session
+     */
+    private sessions;
+    /**
+     * Map of socket to socket ID
+     */
+    private socketIds;
+    /**
+     * SMTP server options
+     */
+    private options;
+    /**
+     * Event listeners
+     */
+    private eventListeners;
+    /**
+     * Timer for cleanup interval
+     */
+    private cleanupTimer;
+    /**
+     * Creates a new session manager
+     * @param options - Session manager options
+     */
+    constructor(options?: {
+        socketTimeout?: number;
+        connectionTimeout?: number;
+        cleanupInterval?: number;
+    });
+    /**
+     * Creates a new session for a socket connection
+     * @param socket - Client socket
+     * @param secure - Whether the connection is secure (TLS)
+     * @returns New SMTP session
+     */
+    createSession(socket: plugins.net.Socket | plugins.tls.TLSSocket, secure: boolean): ISmtpSession;
+    /**
+     * Updates the session state
+     * @param session - SMTP session
+     * @param newState - New state
+     */
+    updateSessionState(session: ISmtpSession, newState: SmtpState): void;
+    /**
+     * Updates the session's last activity timestamp
+     * @param session - SMTP session
+     */
+    updateSessionActivity(session: ISmtpSession): void;
+    /**
+     * Removes a session
+     * @param socket - Client socket
+     */
+    removeSession(socket: plugins.net.Socket | plugins.tls.TLSSocket): void;
+    /**
+     * Gets a session for a socket
+     * @param socket - Client socket
+     * @returns SMTP session or undefined if not found
+     */
+    getSession(socket: plugins.net.Socket | plugins.tls.TLSSocket): ISmtpSession | undefined;
+    /**
+     * Cleans up idle sessions
+     */
+    cleanupIdleSessions(): void;
+    /**
+     * Gets the current number of active sessions
+     * @returns Number of active sessions
+     */
+    getSessionCount(): number;
+    /**
+     * Clears all sessions (used when shutting down)
+     */
+    clearAllSessions(): void;
+    /**
+     * Register an event listener
+     * @param event - Event name
+     * @param listener - Event listener function
+     */
+    on<K extends keyof ISessionEvents>(event: K, listener: ISessionEvents[K]): void;
+    /**
+     * Remove an event listener
+     * @param event - Event name
+     * @param listener - Event listener function
+     */
+    off<K extends keyof ISessionEvents>(event: K, listener: ISessionEvents[K]): void;
+    /**
+     * Emit an event to registered listeners
+     * @param event - Event name
+     * @param args - Event arguments
+     */
+    private emitEvent;
+    /**
+     * Start the cleanup timer
+     */
+    private startCleanupTimer;
+    /**
+     * Stop the cleanup timer
+     */
+    private stopCleanupTimer;
+    /**
+     * Replace socket mapping for STARTTLS upgrades
+     * @param oldSocket - Original plain socket
+     * @param newSocket - New TLS socket
+     * @returns Whether the replacement was successful
+     */
+    replaceSocket(oldSocket: plugins.net.Socket | plugins.tls.TLSSocket, newSocket: plugins.net.Socket | plugins.tls.TLSSocket): boolean;
+    /**
+     * Gets a unique key for a socket
+     * @param socket - Client socket
+     * @returns Socket key
+     */
+    private getSocketKey;
+    /**
+     * Get all active sessions
+     */
+    getAllSessions(): ISmtpSession[];
+    /**
+     * Update last activity for a session by socket
+     */
+    updateLastActivity(socket: plugins.net.Socket | plugins.tls.TLSSocket): void;
+    /**
+     * Check for timed out sessions
+     */
+    checkTimeouts(timeoutMs: number): ISmtpSession[];
+    /**
+     * Clean up resources
+     */
+    destroy(): void;
+}