etc/periodic/daily/470.status-named

   1 #!/bin/sh
   2 #
   3 # $FreeBSD$
   4 #
   5
   6 # If there is a global system configuration file, suck it in.
   7 #
   8 if [ -r /etc/defaults/periodic.conf ]
   9 then
  10     . /etc/defaults/periodic.conf
  11     source_periodic_confs
  12 fi
  13
  14 catmsgs() {
  15         find /var/log -name 'messages.*' -mtime -2 |
  16             sort -t. -r -n -k 2,2 |
  17             while read f
  18             do
  19                 case $f in
  20                     *.gz)       zcat -f $f;;
  21                     *.bz2)      bzcat -f $f;;
  22                 esac
  23             done
  24         [ -f /var/log/messages ] && cat /var/log/messages
  25 }
  26
  27 case "$daily_status_named_enable" in
  28     [Yy][Ee][Ss])
  29         echo
  30         echo 'Checking for denied zone transfers (AXFR and IXFR):'
  31
  32         start=`date -v-1d '+%b %e'`
  33         rc=$(catmsgs |
  34             fgrep '^'"$start"'.*named\[[[:digit:]]\+\]: denied [AI]XFR from \[.*\]\.[[:digit:]]\+ for' | \
  35             sed -e 's/.*: denied [AI]XFR from \[\(.*\)\]\.[[:digit:]]* for "\(.*\)".*$/\2 from \1/'
  36             sort -f | uniq -ic | (
  37                 usedns=0
  38                 if [ X"${daily_status_named_usedns}" != X"" ]; then
  39                         case $daily_status_named_usedns in
  40                         [yY][eE][sS])   usedns=1 ;;
  41                         esac
  42                 fi
  43
  44                 while read line ;do
  45                         ipaddr=`echo "$line" | sed -e 's/^.*from //'`
  46                         if [ $usedns -eq 1 ]; then
  47                                 name=`host "${ipaddr}" 2>/dev/null | \
  48                                    grep 'domain name pointer' | \
  49                                    sed -e 's/^.* //'`
  50                         fi
  51                         if [ X"${name}" != X"" ]; then
  52                                 echo "${line} (${name})"
  53                         else
  54                                 echo "${line}"
  55                         fi
  56                 done ) | \
  57                 tee /dev/stderr | wc -l)
  58         [ $rc -gt 0 ] && rc=1
  59         ;;
  60
  61     *)  rc=0;;
  62 esac
  63
  64 exit $rc