FM / dedrads

/opt/dedrads

Name	Size	Mode	Actions
account_review/	-	0555	rm
check_software_mods/	-	0555	rm
cms_tools/	-	0555	rm
etc/	-	0555	rm
extras/	-	0555	rm
mailparse/	-	0555	rm
mysql/	-	0555	rm
nlp_scripts/	-	0555	rm
oldrads/	-	0555	rm
perl/	-	0555	rm
provision/	-	0555	rm
python/	-	0555	rm
suspended/	-	0555	rm
__pycache__/	-	0555	rm
account-review	799	0555	edit dl rm
allfw	6259	0555	edit dl rm
alp.py	16553	0555	edit dl rm
autossl_sync	6267	0555	edit dl rm
check_apache	9205	0555	edit dl rm
check_bandwidth	4546	0555	edit dl rm
check_boxtrapper	1684	0555	edit dl rm
check_cpu	12212	0555	edit dl rm
check_crons	1827	0555	edit dl rm
check_dcpumon	1973	0555	edit dl rm
check_dns	1827	0555	edit dl rm
check_domlogs	61	0555	edit dl rm
check_exim	3731	0555	edit dl rm
check_hacks	22604	0555	edit dl rm
check_imap	5249	0555	edit dl rm
check_io	6635	0555	edit dl rm
check_max_children	16341	0555	edit dl rm
check_mem	1660	0555	edit dl rm
check_misc	1510	0555	edit dl rm
check_pacct	5201	0555	edit dl rm
check_php	4344	0555	edit dl rm
check_pop3	2295	0555	edit dl rm
check_prov.py	4714	0555	edit dl rm
check_server	696	0555	edit dl rm
check_size	490	0555	edit dl rm
check_software	9849	0555	edit dl rm
check_spamd	2426	0555	edit dl rm
check_traffic	1933	0555	edit dl rm
check_user	1887	0555	edit dl rm
clean_exim.py	6390	0555	edit dl rm
clusterfix	5343	0555	edit dl rm
cmspass.py	3970	0555	edit dl rm
cms_check.py	9825	0555	edit dl rm
cms_counter.py	36734	0555	edit dl rm
cms_creds	713	0555	edit dl rm
cms_dumpdb	4485	0555	edit dl rm
cms_pw	1416	0555	edit dl rm
cpanel-api	7040	0555	edit dl rm
cpanel_postgres_manager.py	29004	0555	edit dl rm
cpmerge	4631	0555	edit dl rm
cpumon	2195	0555	edit dl rm
dcpumon.pl	1239	0555	edit dl rm
dedcheck	18127	0555	edit dl rm
dns-sync	14386	0555	edit dl rm
docroot.py	4425	0555	edit dl rm
du-tree	7450	0555	edit dl rm
envinfo.py	6633	0555	edit dl rm
exclude_rbl.py	5249	0555	edit dl rm
extract-vhost	2691	0555	edit dl rm
filescan	3566	0555	edit dl rm
find_warez	1460	0555	edit dl rm
first_setup.py	19120	0555	edit dl rm
fixwpcron.py	4822	0555	edit dl rm
fix_dns_cluster	353	0555	edit dl rm
goaccess	1217720	0555	edit dl rm
hostsfilemods	4467	0555	edit dl rm
imap_io	2323	0555	edit dl rm
innodb_converter.py	9343	0555	edit dl rm
killall911	530	0555	edit dl rm
killdns	941	0555	edit dl rm
lastcommcache.sh	1374	0555	edit dl rm
legal_lock_down.sh	7450	0555	edit dl rm
lil-cpanel	52002	0555	edit dl rm
listacct	4575	0555	edit dl rm
mailscan	4544	0555	edit dl rm
mail_sources.py	7407	0555	edit dl rm
megaclisas-status	38664	0555	edit dl rm
migrate2central.sh	14418	0555	edit dl rm
modify-account	40631	0555	edit dl rm
modsec_disable.py	11461	0555	edit dl rm
monarxctl	8912	0555	edit dl rm
msp.pl	27714	0555	edit dl rm
mysql_dstat	474	0555	edit dl rm
mysql_selector.py	73102	0555	edit dl rm
nlp	4582	0555	edit dl rm
procscrape	1863	0555	edit dl rm
quarantine	11083	0555	edit dl rm
radsfunctions.sh	863	0555	edit dl rm
recent-cp	16148	0555	edit dl rm
remote_dump	18347	0555	edit dl rm
reset_cpanel	3205	0555	edit dl rm
server-load	2192	0555	edit dl rm
show-conns	20105	0555	edit dl rm
show-conns-adv.py	54667	0555	edit dl rm
sparta.py	382498	0555	edit dl rm
sqltop	27129	0555	edit dl rm
telcheck	2411	0555	edit dl rm
temprootreset	186	0555	edit dl rm
unsuspend_user	1307	0555	edit dl rm
unsusprunner.sh	1840	0555	edit dl rm
updatednsadmin	526	0555	edit dl rm
update_spf	14972	0555	edit dl rm
upgrade-check	9216	0555	edit dl rm
vhost_data.py	6221	0555	edit dl rm
wp-xray.sh	85816	0555	edit dl rm

Edit: /opt/dedrads/check_exim (3731B)

#!/bin/bash

LINESDEF="120000"
LINES=$LINESDEF;
MAIL_LOG="/var/log/exim_mainlog";
if [ ! -f $MAIL_LOG ]; then
	echo "Can't find $MAIL_LOG - bailing."
	exit 1;
fi

function separatorbar {
        echo "========================================================================================="
}

function printUsage () {
	echo;echo "$0 --status"
	echo "	Sorts the output of the exiwhat command, giving you total incoming connetions, also gives you top IPs/subnets connecting."
	echo "====LOOKING FOR SPAM/UNAPPROVED MAIL FROM SCRIPTS====";
	echo "	Lists all the dirs where mail has originated from in the last $LINES lines, with timestamps."
	echo;echo "$0 --dirtotals"
	echo "	Lists all the dirs where mail has originated from in the last $LINES lines, sorted and counted."
	echo;echo "$0 --listdirs|--dirtotals  --lines NUM_LINES"
	echo "	Same as above, but if the third argument is --lines, you'll be checking NUM_LINES back in the log files."
	echo;echo "$0 --queuebysender --lines NUM_LINES"
	echo "	Show the count of messages in the mail queue by sender."
	echo;echo "$0 --queuebybounceback --lines NUM_LINES"
	echo "	Show a count of who bouncebacks are going to."
	echo;echo "$0 --recipientisp"
	echo "	Show the recipient isp with the most queued."
	echo;echo "$0 --recipienttest mail.remoteserver.com"
	echo " Test the recipient mail server for connectivity or rejection errors."
	echo;echo "$0 --fullmbox "
	echo "	Show errors about accounts reaching mail quota."
	echo
}

function topconns () {
	tail -${LINES-$LINEDEF} $MAIL_LOG | awk '/SMTP connection from/{gsub(/.:[0-9]+/,"",$0);gsub(/\[/,"",$0);print $7 }' |sort | uniq -c | sort -nk1
}

function listdirs () {
	 tail -${LINES-$LINESDEF} $MAIL_LOG | awk '/cwd=.home./{print $1,$2,$4}' | sort -k3;
}

function dirtotals () {
	 tail -${LINES:-$LINESDEF} $MAIL_LOG | awk '/cwd=.home./{print $4}' | sort | uniq -c | sort -nk1;
}

function queuebysender () {
	exim -bp | grep -P "^ *\d+[a-z]\s+" | awk '{print $4}' | sort | uniq -c | sort -nk1
}

# SamuelP 2/16/2012 added a listing for bounceback recipients
function queuebybounceback()
{
	exim -bp | grep '<>' | awk '{print $3}' | xargs -i exim -Mvh {} | grep -iE "To:" | awk '{print $3}' | tr '[:upper:]' '[:lower:]' | sort | uniq -c | sort -nk1
}
function recipientisp () {
   	exim -bp |exiqsumm |sort -nk1
}

function recipienttest () {
	echo "testing" | mail -vv -s 'testing connectivity' test@$2
}

function fullmbox () {
	tail -${LINES:-$LINESDEF} $MAIL_LOG | grep "mailbox is full " | awk '{print $1,$6}' | sort | uniq -c |sort -nk1
}

function check_time () {
        START=$(tail -${LINES:-$LINESDEF} $MAIL_LOG | head -1|awk '{print $1,$2}')
        END=$(tail -${LINES:-$LINESDEF} $MAIL_LOG | tail -1|awk '{print $1,$2}')
	echo "Logs from $START to $END";
}

if [ $# -eq 3 ] && [ "$2" == "--lines" ];
then
	LINES=$3;
	#echo $LINES;
fi
case $1 in
--status)
	exiwhat | awk -F'from' '{print $1}' | awk '{$1=""; print}' | sort | uniq -c |sort -nk1;
	echo "===IPs Connecting==="
	exiwhat | awk '$NF ~ /[0-9]*\.[0-9]*\.[0-9]*\./ && /incoming/{gsub(/\[|\]/,"",$NF);print $NF}' | sort | uniq -c | sort -nk1
	echo "===Subnets Connecting==="
	exiwhat | awk '$NF ~ /[0-9]*\.[0-9]*\.[0-9]*\./ && /incoming/{gsub(/\[|\]/,"",$NF);print $NF}'| sort | uniq |
	 awk -F. '{print $1"."$2"."$3}' | sort | uniq -c | sort -nk1
	;;
--listdirs)
	listdirs
	check_time
	;;
--dirtotals)
	dirtotals
	check_time
	;;
--topconns)
	topconns
	check_time
	;;
--queuebysender)
	queuebysender
	check_time
	;;
--queuebybounceback)
	queuebybounceback
	check_time
	;;
--recipientisp)
        recipientisp
        ;;
--recipienttest)
	recipienttest
	;;
--fullmbox)
	fullmbox
	check_time
	;;
--help) printUsage; exit;;
*) printUsage; exit 1;;
esac

cmd: