Script Archives - Vavai's Personal Notes

Script to Add Dynamic IP to /etc/hosts

Muhammad Rivai — Sun, 28 Oct 2018 12:40:49 +0000

I have a dynamic IP from my internet service provider and sometimes it takes longer to SSH to my server as it needs to resolve the address. On static IP, I can put the address into public DNS server to a quick resolving process, but as it uses dynamic IP, I would need to use a different approach.

As I have dynamic DNS from Synology (can also work with other DDNS provider), a little bash script below can help me to automatically add IP on an interval basis, replace the selected predefined row on /etc/hosts.
Script : add-host-markasdj.sh
[code lang=”bash”]
FILE=”/etc/hosts”
ip=`nslookup myhomesweethome.myds.me | grep -i addr | grep -v “#” | cut -d “:” -f2 | sed -e ‘s/^[[:space:]]*//’`
if grep -q $ip $FILE;
then
echo “Ignore, IP has been previously added”
else
echo “$ip myhomesweethome.myds.me” >> /etc/hosts
echo “$ip has been added to /etc/hosts”
fi
#echo “IP:$ip”
[/code]

The post Script to Add Dynamic IP to /etc/hosts appeared first on Vavai's Personal Notes.

Script to Remove Over Quota Message from Zimbra Queue

Muhammad Rivai — Fri, 26 Oct 2018 14:19:30 +0000

Sometimes we have a bunch of over quota message filling up Zimbra queue, with detail as below :
197CF170F9 59761 Wed Oct 24 09:49:48 email-palsu@vivianchow.id
(host alt1.gmail-smtp-in.l.google.com[74.125.195.27] said: 452-4.2.2 The email account that you tried to reach is over quota. Please direct 452-4.2.2 the recipient to 452 4.2.2 https://support.google.com/mail/?p=OverQuotaTemp m3-v6si2776998pld.435 – gsmtp (in reply to RCPT TO command))
email-palsu@gmail.com
The email message will be automatically removed from the queue after a while, depending on our queue lifetime setting on the server. If we want to automatically remove on the selected time interval, we can then set up crontab to run the following script :
del-over-quota.sh
[code lang=”bash”]
#!/bin/sh
clear
/opt/zimbra/postfix/sbin/postqueue -p | grep -A 1 “over quota” | grep @ | sort | uniq > /tmp/over-quota.txt
USERS=`cat /tmp/over-quota.txt`
echo “Looping for all users”
for ACCOUNT in $USERS; do
#Remove over quota queue
echo “Account over quota : $ACCOUNT”
pfdel $ACCOUNT
echo “”
done
echo “All over quota queue has been removed successfully”
[/code]
The above script is run together with pfdel script, so don’t forget to download and save pfdel script as well.

The post Script to Remove Over Quota Message from Zimbra Queue appeared first on Vavai's Personal Notes.

Script to Delete the Spam Queue on Zimbra with Confirmation

Muhammad Rivai — Sat, 20 Oct 2018 02:43:16 +0000

On previous script, we can delete spam from queue by passing sender or recipient address on the script :
[code lang=”bash”]
pfdel email-spammer
[/code]

But what about situation where spammer filling up queue with random sender and recipient, and it tooks time to delete each message. Yes, we can use Postfix powerful binary, with postsuper -d ALL but it will remove entire message, including normal message.
Below is a modified script, to delete spam queue by confirming whether the message are legitimate or not. It will display sender and recipient so we can check each message accordingly.
[code lang=”bash”]
#!/bin/sh
#Hapus Layar
clear
/opt/zimbra/postfix/sbin/postqueue -p | grep -A 1 “$1” | grep @ | sort | uniq | cut -d “:” -f3 | cut -d ” ” -f3 > /tmp/over-quota.txt
USERS=`cat /tmp/over-quota.txt`
echo “Looping for all users”
for ACCOUNT in $USERS; do
ACC1=`echo $ACCOUNT | awk -F@ ‘{print $1}’`;
ACC2=`echo $ACCOUNT | cut -d ‘.’ -f1`
#echo $ACC1
#echo $ACC2
/opt/zimbra/postfix/sbin/postqueue -p | grep $ACCOUNT -A 3
echo -n “Remove queue for account : $ACCOUNT [Y/N]? ”
read TANYA
if [ $TANYA == Y ] || [ $TANYA == y ]; then
pfdel $ACCOUNT
fi
echo “”
done
echo “Removal queue messages for $1 has been completed successfully”
[/code]
The script will also takes time if queue contains too many spam messages, so a better choice is to prevent spam by strengthening server anti spam and enforcing a tight security policy.

The post Script to Delete the Spam Queue on Zimbra with Confirmation appeared first on Vavai's Personal Notes.

Bash Script for Spam Queue Removal on Zimbra Mail Server (Updated)

Muhammad Rivai — Thu, 18 Oct 2018 13:00:03 +0000

I have a small script-got it from Internet-for Zimbra spam queue removal based on Postfix queue message removal. The script written on Perl language and become a mandatory script on each Zimbra server deployment, as a quick tools to remove spam message from queue caused by compromised account.

image from pixabay

As of Zimbra 8.7, there is a little change on path for some Postfix binary. On previous version, Postfix binary located on /opt/zimbra/postfix/ but since version 8.7, the binary folder moved into /opt/zimbra/common/ so I take a little time to change the script.
Below is an updated script, check for Zimbra version and change binary folder accordingly :
[code lang=”bash”]
#!/usr/bin/perl -w
#
# pfdel – deletes message containing specified address from
# Postfix queue. Matches either sender or recipient address.
#
# Usage: pfdel sender-or-recipient-address
#
use strict;
my $LISTQ;
my $POSTSUPER;
# Change these paths if necessary.
system(“su – zimbra -c ‘zmcontrol -v’ > /tmp/zcs-ver.txt”);
my $VER=`awk ‘/Release 6|Release 7|Release 8.0|Release 8.5|Release 8.6/’ /tmp/zcs-ver.txt`;
#print $VER
if (length($VER) > 0)
{
$LISTQ = “/opt/zimbra/postfix/sbin/postqueue -p”;
$POSTSUPER = “/opt/zimbra/postfix/sbin/postsuper”;
}
else
{
$LISTQ = “/opt/zimbra/common/sbin/postqueue -p”;
$POSTSUPER = “/opt/zimbra/common/sbin/postsuper”;
}
my $email_addr = “”;
my $qid = “”;
my $euid = $>;
if ( @ARGV != 1 ) {
die “Usage: pfdel \n”;
} else {
$email_addr = $ARGV[0];
}
if ( $euid != 0 ) {
die “You must be root to delete queue files.\n”;
}
open(QUEUE, “$LISTQ |”) ||
die “Can’t get pipe to $LISTQ: $!\n”;
my $entry = ; # skip single header line
$/ = “”; # Rest of queue entries print on
# multiple lines.
while ( $entry = ) {
if ( $entry =~ / $email_addr$/m ) {
($qid) = split(/\s+/, $entry, 2);
$qid =~ s/[\*\!]//;
next unless ($qid);
#
# Execute postsuper -d with the queue id.
# postsuper provides feedback when it deletes
# messages. Let its output go through.
#
if ( system($POSTSUPER, “-d”, $qid) != 0 ) {
# If postsuper has a problem, bail.
die “Error executing $POSTSUPER: error ” .
“code ” . ($?/256) . “\n”;
}
}
}
close(QUEUE);
if (! $qid ) {
die “No messages with the address <$email_addr> ” .
“found in queue.\n”;
}
exit 0;
[/code]
If you tend to lazy to copy-paste the script, get it from mine :
[code lang=”bash”]
wget https://www.vavai.com/pfdel
chmod +x pfdel
[/code]
And to run it, just run this script with root permissions :
[code lang=”bash”]
./pfdel email-spammer
[/code]
ex :
[code lang=”bash”]
./pfdel spammersampah@vavai.com
[/code]
However, this is only a quick tools to remove spam, but more importantly is prevent spam from being filling into queue.

The post Bash Script for Spam Queue Removal on Zimbra Mail Server (Updated) appeared first on Vavai's Personal Notes.

Script for Export-Import Zimbra Mail Server Account & Password

Muhammad Rivai — Fri, 06 Aug 2010 02:19:22 +0000

Zimbra save all account and profile information on the LDAP database. Zimbra has no function for only import and export it’s account, although they have bundled Zimbra to Zimbra migration command. The Zimbra to Zimbra migration command export all mailbox and account while I only need a list of account with some primary fields like password, first name, full name, etc, especially for testing purpose only.
I decided to create a simple script that look for related information on Zimbra LDAP with the following algorithm :

CheckÂ Zimbra version, because Zimbra 5 and Zimbra 6 has different method for accessing LDAP and also these are a few changes on Zimbra CLI. Zimbra 6 need paramater for command while Zimbra 5 doesn’t need it, e.g, on Zimbra 5, running zmprov gaa will list all Zimbra account but on Zimbra 6 we must use zmprov -l gaa to display same result.
Export all account profile to temporary parameter and loop for all account
Skip all system account : admin, ham, spam, galsync and wiki. All these system account doesn’t need to be exported because Zimbra will create all system account on installation process.
Get all account identity/fields from Zimbra LDAP by usingÂ LDAPsearch command
Create a text file with zmp extension. This file will containsÂ zmprov ca command with proper parameter from step 4
Create ldif file for updating Zimbra LDAP password, because Zimbra LDAP using SSHA encryption and the better method for updating Zimbra LDAP password is using ldapmodify command.
Finish

Algorithm for Import Account

Check whether user are already on Zimbra user environment or not
Check is there existingÂ zmp and ldif file (the result from export script)
Import zmp file
Run ldapmodify command to change Zimbra LDAP password by usingÂ ldif data
Finish

Please remember that you must running exportÂ script by using root privilegeÂ but theÂ import account must be run withinÂ Zimbra user environment (su – zimbra).
Look at following example to run Zimbra Account export script :
[code language=’cpp’]
su
cd /srv
wget -c http://vavai.com/wp-content/uploads/exim-acc-zcs.tar.gz
tar -zxvf exim-acc-zcs.tar.gz
cd exim-acc-zcs
./export-acc-zcs.sh
[/code]
The above command will produceÂ zcs-acc-add.zmp and zcs-acc-mod.ldif file. Copy all four file (the last two areÂ script file) onto some folder on target server and run the following command to import the account and it’s profile :
[code language=’cpp’]
su
su – zimbra
cd /home/vavai
./import-acc-zcs.sh
[/code]
Script has been sucessfully tested on Zimbra 6.0.5, 6.0.6 dan 6.0.7 on SUSE Linux Enterprise Server 11 and openSUSE 11.

Download Zimbra Account Export-Import Script by click on the download icon belows :

Script for export :
[code language=’cpp’]
#!/bin/sh
#Hapus Layar
clear
echo -e “###################################################################################”
echo -e “# Zimbra export-acc-zcs.sh ver 0.0.2 #”
echo -e “# Skrip untuk export account Zimbra berikut profile dan password #”
echo -e “# Masim ‘Vavai’ Sugianto – vavai@vavai.com – http://www.vavai.com #”
echo -e “# Untuk saran dan pertanyaan silakan menggunakan Milis Komunitas Zimbra Indonesia #”
echo -e “# Link Komunitas : http://www.zimbra.web.id – http://www.opensuse.or.id #”
echo -e “###################################################################################”
# /* Variable untuk bold */
ibold=”33[1m””n===> ”
ebold=”33[0m”
# /* Parameter */
echo “”
echo -n “Enter Domain Name (ex : vavai.com) : ”
read NAMA_DOMAIN
echo -n “Enter path folder for exported account (ex : /home/vavai/) : ”
read FOLDER
# /* Membuat file hasil export dan mengisi nama domain */
NAMA_FILE=”$FOLDER/zcs-acc-add.zmp”
LDIF_FILE=”$FOLDER/zcs-acc-mod.ldif”
rm -f $NAMA_FILE
rm -f $LDIF_FILE
touch $NAMA_FILE
touch $LDIF_FILE
echo “createDomain $NAMA_DOMAIN” > $NAMA_FILE
# /* Check versi Zimbra yang digunakan */
VERSION=`su – zimbra -c ‘zmcontrol -v’`;
ZCS_VER=”/tmp/zcsver.txt”
# get Zimbra LDAP password
ZIMBRA_LDAP_PASSWORD=`su – zimbra -c “zmlocalconfig -s zimbra_ldap_password | cut -d ‘ ‘ -f3″`
touch $ZCS_VER
echo $VERSION > $ZCS_VER
echo -e $ibold”Retrieve Zimbra User…………………………”$ebold
grep “Release 5.” $ZCS_VER
if [ $? = 0 ]; then
USERS=`su – zimbra -c ‘zmprov gaa’`;
LDAP_MASTER_URL=`su – zimbra -c “zmlocalconfig -s ldap_master_url | cut -d ‘ ‘ -f3″`
fi
grep “Release 6.” $ZCS_VER
if [ $? = 0 ]; then
USERS=`su – zimbra -c ‘zmprov -l gaa’`;
LDAP_MASTER_URL=”ldapi:///”
fi
echo -e $ibold”Processing account, please wait…………………………”$ebold
# /* Proses insert account kedalam file hasil export */
for ACCOUNT in $USERS; do
NAME=`echo $ACCOUNT`;
DOMAIN=`echo $ACCOUNT | awk -F@ ‘{print $2}’`;
ACCOUNT=`echo $ACCOUNT | awk -F@ ‘{print $1}’`;
ACC=`echo $ACCOUNT | cut -d ‘.’ -f1`
if [ $NAMA_DOMAIN == $DOMAIN ] ;
then
OBJECT=”(&(objectClass=zimbraAccount)(mail=$NAME))”
dn=`/opt/zimbra/bin/ldapsearch -H $LDAP_MASTER_URL -w $ZIMBRA_LDAP_PASSWORD -D uid=zimbra,cn=admins,cn=zimbra -x $OBJECT | grep dn:`
displayName=`/opt/zimbra/bin/ldapsearch -H $LDAP_MASTER_URL -w $ZIMBRA_LDAP_PASSWORD -D uid=zimbra,cn=admins,cn=zimbra -x $OBJECT | grep displayName: | cut -d ‘:’ -f2 | sed ‘s/^ *//g’ | sed ‘s/ *$//g’`
givenName=`/opt/zimbra/bin/ldapsearch -H $LDAP_MASTER_URL -w $ZIMBRA_LDAP_PASSWORD -D uid=zimbra,cn=admins,cn=zimbra -x $OBJECT | grep givenName: | cut -d ‘:’ -f2 | sed ‘s/^ *//g’ | sed ‘s/ *$//g’`
userPassword=`/opt/zimbra/bin/ldapsearch -H $LDAP_MASTER_URL -w $ZIMBRA_LDAP_PASSWORD -D uid=zimbra,cn=admins,cn=zimbra -x $OBJECT | grep userPassword: | cut -d ‘:’ -f3 | sed ‘s/^ *//g’ | sed ‘s/ *$//g’`
cn=`/opt/zimbra/bin/ldapsearch -H $LDAP_MASTER_URL -w $ZIMBRA_LDAP_PASSWORD -D uid=zimbra,cn=admins,cn=zimbra -x $OBJECT | grep cn: | cut -d ‘:’ -f2 | sed ‘s/^ *//g’ | sed ‘s/ *$//g’`
initials=`/opt/zimbra/bin/ldapsearch -H $LDAP_MASTER_URL -w $ZIMBRA_LDAP_PASSWORD -D uid=zimbra,cn=admins,cn=zimbra -x $OBJECT | grep initials: | cut -d ‘:’ -f2 | sed ‘s/^ *//g’ | sed ‘s/ *$//g’`
sn=`/opt/zimbra/bin/ldapsearch -H $LDAP_MASTER_URL -w $ZIMBRA_LDAP_PASSWORD -D uid=zimbra,cn=admins,cn=zimbra -x $OBJECT | grep sn: | cut -d ‘:’ -f2 | sed ‘s/^ *//g’ | sed ‘s/ *$//g’`
if [ $ACC == “admin” ] || [ $ACC == “wiki” ] || [ $ACC == “galsync” ] || [ $ACC == “ham” ] || [ $ACC == “spam” ]; then
echo “Skipping system account, $NAME…”
else
echo “createAccount $NAME passwordtemp displayName ‘$displayName’ givenName ‘$givenName’ sn ‘$sn’ initials ‘$initials’ zimbraPasswordMustChange FALSE” >> $NAMA_FILE
echo “$dn
changetype: modify
replace: userPassword
userPassword:: $userPassword
” >> $LDIF_FILE
echo “Adding account $NAME”
fi
else
echo “Skipping account $NAME”
fi
done
echo -e $ibold”All account has been exported sucessfully into $NAMA_FILE and $LDIF_FILE…”$ebold
[/code]
Script for import :
[code language=’cpp’]
#!/bin/sh
#Hapus Layar
clear
echo -e ‘###################################################################################’
echo -e ‘# Zimbra import-zcs-acc.sh ver 0.0.1 #’
echo -e ‘# Skrip untuk import data account Zimbra #’
echo -e ‘# Masim ‘Vavai’ Sugianto – vavai@vavai.com – http://www.vavai.com #’
echo -e ‘# Untuk saran dan pertanyaan silakan menggunakan Milis Komunitas Zimbra Indonesia #’
echo -e ‘# Link Komunitas : http://www.zimbra.web.id – http://www.opensuse.or.id #’
echo -e ‘###################################################################################’
# /* Variable untuk bold */
ibold=”33[1m””n===> ”
ebold=”33[0m”
if [ “$USER” != “zimbra” ]
then
echo -e $ibold”You need to be user zimbra to run this script…”$ebold
exit
fi
CURRENT_FOLDER=`pwd`;
echo “”
echo -e “Please verify that you have copied zcs-acc-add.zmp & zcs-acc-mod.ldif on current folder !”
echo -e “Current Folder : $CURRENT_FOLDER, Please change to your folder before running this script.”
echo -e “Press ENTER to continue…”
read jawab
if [ -f ./zcs-acc-add.zmp ];
then
if [ -f ./zcs-acc-add.zmp ];
then
echo -e $ibold”Importing account…”$ebold
ZIMBRA_LDAP_PASSWORD=`zmlocalconfig -s zimbra_ldap_password | cut -d ‘ ‘ -f3`
# cat ./zcs-acc-add.zmp | su – zimbra -c zmprov
zmprov < $CURRENT_FOLDER/zcs-acc-add.zmp echo -e $ibold"Modify password..."$ebold ldapmodify -f "$CURRENT_FOLDER/zcs-acc-mod.ldif" -x -H ldapi:/// -D cn=config -w $ZIMBRA_LDAP_PASSWORD # su - zimbra -c '$LDAP_CMD' echo -e $ibold"Zimbra account has been modified sucessfully ..."$ebold else echo "Sorry, file $CURRENT_FOLDER/zcs-acc-mod.ldif does not exists, import process will not be continue..." exit fi else echo "Sorry, file $CURRENT_FOLDER/zcs-acc-add.zmp does not exists, import process will not be continue..." exit fi [/code]

The post Script for Export-Import Zimbra Mail Server Account & Password appeared first on Vavai's Personal Notes.