ip.sh 7.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290
  1. # Check ip ownership
  2. is_ip_owner() {
  3. owner=$(grep 'OWNER=' $HESTIA/data/ips/$ip |cut -f 2 -d \')
  4. if [ "$owner" != "$user" ]; then
  5. check_result $E_FORBIDEN "$ip is not owned by $user"
  6. fi
  7. }
  8. # Check if ip address is free
  9. is_ip_free() {
  10. if [ -e "$HESTIA/data/ips/$ip" ]; then
  11. check_result $E_EXISTS "$ip is already exists"
  12. fi
  13. }
  14. # Check ip address specific value
  15. is_ip_key_empty() {
  16. key="$1"
  17. string=$(cat $HESTIA/data/ips/$ip)
  18. eval $string
  19. eval value="$key"
  20. if [ ! -z "$value" ] && [ "$value" != '0' ]; then
  21. key="$(echo $key|sed -e "s/\$U_//")"
  22. check_result $E_EXISTS "IP is in use / $key = $value"
  23. fi
  24. }
  25. is_ip_rdns_valid() {
  26. local ip="$1"
  27. local network_ip=$(echo $ip | cut -d"." -f1-3)
  28. local awk_ip=$(echo $network_ip | sed 's|\.|/\&\&/|g')
  29. local rev_awk_ip=$(echo $awk_ip | rev)
  30. if [ -z "$rdns" ]; then
  31. local rdns=$(dig +short -x "$ip" | head -n 1 | sed 's/.$//') || unset rdns
  32. fi
  33. if [ ! -z "$rdns" ] && [ ! $(echo $rdns | awk "/$awk_ip/ || /$rev_awk_ip/") ]; then
  34. echo $rdns
  35. return 0 # True
  36. fi
  37. return 1 # False
  38. }
  39. # Update ip helo for exim
  40. update_ip_helo_value() {
  41. ip="$1"
  42. helo="$2"
  43. # Create or update ip value
  44. if [ ! $(get_ip_value '$HELO') ]; then
  45. echo "HELO='$helo'" >> $HESTIA/data/ips/$ip
  46. else
  47. update_ip_value '$HELO' "$helo"
  48. fi
  49. # Create mailhelo.conf file if doesn't exist
  50. if [ ! -e "/etc/${MAIL_SYSTEM}/mailhelo.conf" ]; then
  51. touch /etc/${MAIL_SYSTEM}/mailhelo.conf
  52. fi
  53. #Create or update ip:helo pair in mailhelo.conf file
  54. if [ ! -z "$helo" ]; then
  55. if [ $(cat /etc/${MAIL_SYSTEM}/mailhelo.conf | grep "$ip") ]; then
  56. sed -i "/^$ip:/c $ip:$helo" /etc/${MAIL_SYSTEM}/mailhelo.conf
  57. else
  58. echo $ip:$helo >> /etc/${MAIL_SYSTEM}/mailhelo.conf
  59. fi
  60. else
  61. sed -i "/^$ip:/d" /etc/${MAIL_SYSTEM}/mailhelo.conf
  62. fi
  63. }
  64. # Update ip address value
  65. update_ip_value() {
  66. key="$1"
  67. value="$2"
  68. conf="$HESTIA/data/ips/$ip"
  69. str=$(cat $conf)
  70. eval $str
  71. c_key=$(echo "${key//$/}")
  72. eval old="${key}"
  73. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  74. new=$(echo "$value" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  75. sed -i "$str_number s/$c_key='${old//\*/\\*}'/$c_key='${new//\*/\\*}'/g"\
  76. $conf
  77. }
  78. # Get ip name
  79. get_ip_alias() {
  80. ip_name=$(grep "NAME=" $HESTIA/data/ips/$local_ip |cut -f 2 -d \')
  81. if [ ! -z "$ip_name" ]; then
  82. echo "${1//./-}.$ip_name"
  83. fi
  84. }
  85. # Increase ip value
  86. increase_ip_value() {
  87. sip=${1-ip}
  88. USER=$user
  89. web_key='U_WEB_DOMAINS'
  90. usr_key='U_SYS_USERS'
  91. current_web=$(grep "$web_key=" $HESTIA/data/ips/$sip |cut -f 2 -d \')
  92. current_usr=$(grep "$usr_key=" $HESTIA/data/ips/$sip |cut -f 2 -d \')
  93. if [ -z "$current_web" ]; then
  94. echo "Error: Parsing error"
  95. log_event "$E_PARSING" "$ARGUMENTS"
  96. exit $E_PARSING
  97. fi
  98. new_web=$((current_web + 1))
  99. if [ -z "$current_usr" ]; then
  100. new_usr="$USER"
  101. else
  102. check_usr=$(echo -e "${current_usr//,/\\n}" | grep -x "$USER")
  103. if [ -z "$check_usr" ]; then
  104. new_usr="$current_usr,$USER"
  105. else
  106. new_usr="$current_usr"
  107. fi
  108. fi
  109. # Make sure users list does not contain duplicates
  110. new_usr=$(echo "$new_usr" |\
  111. sed "s/,/\n/g"|\
  112. sort -u |\
  113. sed ':a;N;$!ba;s/\n/,/g')
  114. sed -i "s/$web_key='$current_web'/$web_key='$new_web'/g" \
  115. $HESTIA/data/ips/$sip
  116. sed -i "s/$usr_key='$current_usr'/$usr_key='$new_usr'/g" \
  117. $HESTIA/data/ips/$sip
  118. }
  119. # Decrease ip value
  120. decrease_ip_value() {
  121. sip=${1-ip}
  122. USER=$user
  123. web_key='U_WEB_DOMAINS'
  124. usr_key='U_SYS_USERS'
  125. current_web=$(grep "$web_key=" $HESTIA/data/ips/$sip |cut -f 2 -d \')
  126. current_usr=$(grep "$usr_key=" $HESTIA/data/ips/$sip |cut -f 2 -d \')
  127. if [ -z "$current_web" ]; then
  128. check_result $E_PARSING "Parsing error"
  129. fi
  130. new_web=$((current_web - 1))
  131. check_ip=$(grep $sip $USER_DATA/web.conf |wc -l)
  132. if [[ $check_ip = 0 ]]; then
  133. new_usr=$(echo "$current_usr" |\
  134. sed "s/,/\n/g"|\
  135. sed "s/^$user$//g"|\
  136. sed "/^$/d"|\
  137. sort -u |\
  138. sed ':a;N;$!ba;s/\n/,/g')
  139. else
  140. new_usr="$current_usr"
  141. fi
  142. sed -i "s/$web_key='$current_web'/$web_key='$new_web'/g" \
  143. $HESTIA/data/ips/$sip
  144. sed -i "s/$usr_key='$current_usr'/$usr_key='$new_usr'/g" \
  145. $HESTIA/data/ips/$sip
  146. }
  147. # Get ip address value
  148. get_ip_value() {
  149. key="$1"
  150. string=$(cat $HESTIA/data/ips/$ip)
  151. eval $string
  152. eval value="$key"
  153. echo "$value"
  154. }
  155. # Get real ip address
  156. get_real_ip() {
  157. if [ -e "$HESTIA/data/ips/$1" ]; then
  158. echo $1
  159. else
  160. nat=$(grep -H "^NAT='$1'" $HESTIA/data/ips/*)
  161. if [ ! -z "$nat" ]; then
  162. echo "$nat" |cut -f 1 -d : |cut -f 7 -d /
  163. fi
  164. fi
  165. }
  166. # Convert CIDR to netmask
  167. convert_cidr() {
  168. set -- $(( 5 - ($1 / 8) )) 255 255 255 255 \
  169. $(((255 << (8 - ($1 % 8))) & 255 )) 0 0 0
  170. if [[ $1 -gt 1 ]]; then
  171. shift $1
  172. else
  173. shift
  174. fi
  175. echo ${1-0}.${2-0}.${3-0}.${4-0}
  176. }
  177. # Convert netmask to CIDR
  178. convert_netmask() {
  179. nbits=0
  180. IFS=.
  181. for dec in $1 ; do
  182. case $dec in
  183. 255) let nbits+=8;;
  184. 254) let nbits+=7;;
  185. 252) let nbits+=6;;
  186. 248) let nbits+=5;;
  187. 240) let nbits+=4;;
  188. 224) let nbits+=3;;
  189. 192) let nbits+=2;;
  190. 128) let nbits+=1;;
  191. 0);;
  192. esac
  193. done
  194. echo "$nbits"
  195. }
  196. # Calculate broadcast address
  197. get_broadcast() {
  198. OLD_IFS=$IFS
  199. IFS=.
  200. typeset -a I=($1)
  201. typeset -a N=($2)
  202. IFS=$OLD_IFS
  203. echo "$((${I[0]} |\
  204. (255 ^ ${N[0]}))).$((${I[1]} |\
  205. (255 ^ ${N[1]}))).$((${I[2]} |\
  206. (255 ^ ${N[2]}))).$((${I[3]} |\
  207. (255 ^ ${N[3]})))"
  208. }
  209. # Get user ips
  210. get_user_ips() {
  211. dedicated=$(grep -H "OWNER='$user'" $HESTIA/data/ips/*)
  212. dedicated=$(echo "$dedicated" |cut -f 1 -d : |sed 's=.*/==')
  213. shared=$(grep -H -A1 "OWNER='admin'" $HESTIA/data/ips/* |grep shared)
  214. shared=$(echo "$shared" |cut -f 1 -d : |sed 's=.*/==' |cut -f 1 -d \-)
  215. for dedicated_ip in $dedicated; do
  216. shared=$(echo "$shared" |grep -v $dedicated_ip)
  217. done
  218. echo -e "$dedicated\n$shared" |sed "/^$/d"
  219. }
  220. # Get user ip
  221. get_user_ip() {
  222. ip=$(get_user_ips |head -n1)
  223. if [ -z "$ip" ]; then
  224. check_result $E_NOTEXIST "no IP is available"
  225. fi
  226. local_ip=$ip
  227. nat=$(grep "^NAT" $HESTIA/data/ips/$ip |cut -f 2 -d \')
  228. if [ ! -z "$nat" ]; then
  229. ip=$nat
  230. fi
  231. }
  232. # Validate ip address
  233. is_ip_valid() {
  234. local_ip="$1"
  235. if [ ! -e "$HESTIA/data/ips/$1" ]; then
  236. nat=$(grep -H "^NAT='$1'" $HESTIA/data/ips/*)
  237. if [ -z "$nat" ]; then
  238. check_result $E_NOTEXIST "IP $1 doesn't exist"
  239. else
  240. nat=$(echo "$nat" |cut -f1 -d: |cut -f7 -d/)
  241. local_ip=$nat
  242. fi
  243. fi
  244. if [ ! -z $2 ]; then
  245. if [ -z "$nat" ]; then
  246. ip_data=$(cat $HESTIA/data/ips/$1)
  247. else
  248. ip_data=$(cat $HESTIA/data/ips/$nat)
  249. fi
  250. ip_owner=$(echo "$ip_data" |grep OWNER= |cut -f2 -d \')
  251. ip_status=$(echo "$ip_data" |grep STATUS= |cut -f2 -d \')
  252. if [ "$ip_owner" != "$user" ] && [ "$ip_status" = 'dedicated' ]; then
  253. check_result $E_FORBIDEN "$user user can't use IP $1"
  254. fi
  255. get_user_owner
  256. if [ "$ip_owner" != "$user" ] && [ "$ip_owner" != "$owner" ]; then
  257. check_result $E_FORBIDEN "$user user can't use IP $1"
  258. fi
  259. fi
  260. }