shell bypass 403
�
e f'u � @ s' d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
m Z d d l m
Z
m Z d d d d g Z e j d Z d Z Gd
d � d � Z e � a d Z d
Z d Z d Z d
d d � Z Gd d � d e j � Z Gd d � d e j � Z Gd d � d e � Z Gd d � d e � Z Gd d � d e � Z Gd d � d � Z! d d � Z" e# d k r#e" � Z$ e$ j% Z% d e% k r e% j& d � Z' e( e% d e' � e) � e* � d
g � Z+ e% e' d d � Z% n d d l, Z+ e- e+ e% � Z. e. e$ j/ e$ j0 f e$ j1 e$ j2 f e$ j3 � Z4 e$ j5 r�y d d l6 Z6 Wn2 e7 k
r�e8 d d e j9 �e j: d � Yn Xe6 j; d! � d" Z< y e j5 e< � Wn2 e= k
r�e8 d# d e j9 �e j: d � Yn Xn y e j> � Wn e? k
r Yn Xn d S)$a An RFC 5321 smtp proxy.
Usage: %(program)s [options] [localhost:localport [remotehost:remoteport]]
Options:
--nosetuid
-n
This program generally tries to setuid `nobody', unless this flag is
set. The setuid call will fail if this program is not run as root (in
which case, use this flag).
--version
-V
Print the version number and exit.
--class classname
-c classname
Use `classname' as the concrete SMTP proxy class. Uses `PureProxy' by
default.
--size limit
-s limit
Restrict the total size of the incoming message to "limit" number of
bytes via the RFC 1870 SIZE extension. Defaults to 33554432 bytes.
--debug
-d
Turn on debugging prints.
--help
-h
Print this message and exit.
Version: %(__version__)s
If localhost is not given then `localhost' is used, and if localport is not
given then 8025 is used. If remotehost is not given then `localhost' is used,
and if remoteport is not given, then 25 is used.
� N)�warn)�
get_addr_spec�get_angle_addr�
SMTPServer�DebuggingServer� PureProxy� MailmanProxyz Python SMTP proxy version 0.3c @ s( e Z d Z d d � Z d d � Z d S)�Devnullc C s d S)N� )�self�msgr
r
�*/opt/alt/python34/lib64/python3.4/smtpd.py�write_ s z
Devnull.writec C s d S)Nr
)r r
r
r
�flush` s z
Devnull.flushN)�__name__�
__module__� __qualname__r r r
r
r
r
r ^ s r �
� z, i c C sG t t t � d t j �| r6 t | d t j �n t j | � d S)N�file)�print�__doc__�globals�sys�stderr�exit)�coder r
r
r
�usagej s r c @ s� e Z d Z d Z d Z d Z e j e d d � � Z e j i e d d 6� e
e j � � Z e
d d d
� Z e d d � � Z e j d
d � � Z e d d � � Z e j d d � � Z e d d � � Z e j d d � � Z e d d � � Z e j d d � � Z e d d � � Z e j d d � � Z e d d � � Z e j d d � � Z e d d � � Z e j d d � � Z e d d! � � Z e j d" d! � � Z e d# d$ � � Z e j d% d$ � � Z e d& d' � � Z e j d( d' � � Z e d) d* � � Z e j d+ d* � � Z d, d- � Z d. d/ � Z d0 d1 � Z d2 d3 � Z d4 d5 � Z d6 d7 � Z! d8 d9 � Z" d: d; � Z# d< d= � Z$ d> d? � Z% d@ dA � Z& dB dC � Z' dD dE � Z( dF dG � Z) dH dI � Z* dJ dK � Z+ dL dM � Z, d S)N� SMTPChannelr � i c C s | S)Nr
)�xr
r
r
�<lambda>v s zSMTPChannel.<lambda>� �MAILNc C sC t j j | | d | �| | _ | | _ | | _ | | _ g | _ | j | _ d | _
d | _ g | _ d | _
t j � | _ d | _ y | j � | _ WnO t k
r� } z/ | j � | j d t j k r� � n d SWYd d } ~ Xn Xt d t | j � d t �| j d | j t f � | j d � d | _ d S) N�mapr r zPeer:r z 220 %s %ss
F) �asynchat�
async_chat�__init__� smtp_server�conn�addr�data_size_limit�received_lines�COMMAND�
smtp_state�
seen_greeting�mailfrom�rcpttos�
received_data�socketZgetfqdn�fqdn� num_bytesZ getpeername�peer�OSError�close�args�errnoZENOTCONNr �repr� DEBUGSTREAM�push� __version__�set_terminator�
extended_smtp)r Zserverr) r* r+ r$ �errr
r
r
r' | s0
zSMTPChannel.__init__c C s t d t d � | j S)NzTAccess to __server attribute on SMTPChannel is deprecated, use 'smtp_server' instead� )r �DeprecationWarningr( )r r
r
r
�__server� s
zSMTPChannel.__serverc C s t d t d � | | _ d S)NzRSetting __server attribute on SMTPChannel is deprecated, set 'smtp_server' insteadrB )r rC r( )r �valuer
r
r
rD � s
c C s t d t d � | j S)NzUAccess to __line attribute on SMTPChannel is deprecated, use 'received_lines' insteadrB )r rC r, )r r
r
r
�__line� s
zSMTPChannel.__linec C s t d t d � | | _ d S)NzSSetting __line attribute on SMTPChannel is deprecated, set 'received_lines' insteadrB )r rC r, )r rE r
r
r
rF � s
c C s t d t d � | j S)NzRAccess to __state attribute on SMTPChannel is deprecated, use 'smtp_state' insteadrB )r rC r. )r r
r
r
�__state� s
zSMTPChannel.__statec C s t d t d � | | _ d S)NzPSetting __state attribute on SMTPChannel is deprecated, set 'smtp_state' insteadrB )r rC r. )r rE r
r
r
rG � s
c C s t d t d � | j S)NzXAccess to __greeting attribute on SMTPChannel is deprecated, use 'seen_greeting' insteadrB )r rC r/ )r r
r
r
�
__greeting� s
zSMTPChannel.__greetingc C s t d t d � | | _ d S)NzVSetting __greeting attribute on SMTPChannel is deprecated, set 'seen_greeting' insteadrB )r rC r/ )r rE r
r
r
rH � s
c C s t d t d � | j S)NzSAccess to __mailfrom attribute on SMTPChannel is deprecated, use 'mailfrom' insteadrB )r rC r0 )r r
r
r
�
__mailfrom� s
zSMTPChannel.__mailfromc C s t d t d � | | _ d S)NzQSetting __mailfrom attribute on SMTPChannel is deprecated, set 'mailfrom' insteadrB )r rC r0 )r rE r
r
r
rI � s
c C s t d t d � | j S)NzQAccess to __rcpttos attribute on SMTPChannel is deprecated, use 'rcpttos' insteadrB )r rC r1 )r r
r
r
� __rcpttos� s
zSMTPChannel.__rcpttosc C s t d t d � | | _ d S)NzOSetting __rcpttos attribute on SMTPChannel is deprecated, set 'rcpttos' insteadrB )r rC r1 )r rE r
r
r
rJ � s
c C s t d t d � | j S)NzTAccess to __data attribute on SMTPChannel is deprecated, use 'received_data' insteadrB )r rC r2 )r r
r
r
�__data� s
zSMTPChannel.__datac C s t d t d � | | _ d S)NzRSetting __data attribute on SMTPChannel is deprecated, set 'received_data' insteadrB )r rC r2 )r rE r
r
r
rK � s
c C s t d t d � | j S)NzKAccess to __fqdn attribute on SMTPChannel is deprecated, use 'fqdn' insteadrB )r rC r4 )r r
r
r
�__fqdn� s
zSMTPChannel.__fqdnc C s t d t d � | | _ d S)NzISetting __fqdn attribute on SMTPChannel is deprecated, set 'fqdn' insteadrB )r rC r4 )r rE r
r
r
rL � s
c C s t d t d � | j S)NzKAccess to __peer attribute on SMTPChannel is deprecated, use 'peer' insteadrB )r rC r6 )r r
r
r
�__peer� s
zSMTPChannel.__peerc C s t d t d � | | _ d S)NzISetting __peer attribute on SMTPChannel is deprecated, set 'peer' insteadrB )r rC r6 )r rE r
r
r
rM � s
c C s t d t d � | j S)NzKAccess to __conn attribute on SMTPChannel is deprecated, use 'conn' insteadrB )r rC r) )r r
r
r
�__conn� s
zSMTPChannel.__connc C s t d t d � | | _ d S)NzISetting __conn attribute on SMTPChannel is deprecated, set 'conn' insteadrB )r rC r) )r rE r
r
r
rN s
c C s t d t d � | j S)NzKAccess to __addr attribute on SMTPChannel is deprecated, use 'addr' insteadrB )r rC r* )r r
r
r
�__addr s
zSMTPChannel.__addrc C s t d t d � | | _ d S)NzISetting __addr attribute on SMTPChannel is deprecated, set 'addr' insteadrB )r rC r* )r rE r
r
r
rO
s
c C s$ t j j | t | d d � � d S)Nz
�ascii)r% r& r= �bytes)r r r
r
r
r= s zSMTPChannel.pushc C s� d } | j | j k r$ | j } n | j | j k rB | j } n | r[ | j | k r[ d S| ry | j t | � 7_ n | j j t | d � � d S)Nzutf-8)
r. r- �max_command_size_limit�DATAr+ r5 �lenr, �append�str)r �data�limitr
r
r
�collect_incoming_data s z!SMTPChannel.collect_incoming_datac C s� t j | j � } t d t | � d t �g | _ | j | j k rQ| j d } | _ | sp | j d � d Sd } | j
d � } | d k r� | j � } d } n0 | d | � j � } | | d d � j � } | j
r� | j | n | j } | | k r| j d � d St | d | d � } | sC| j d | � d S| | � d S| j | j k r}| j d
� d | _ d S| j r�| j | j k r�| j d � d | _ d Sg } xT | j d � D]C } | r�| d d
k r�| j | d d � � q�| j | � q�Wt j | � | _ | j j | j | j | j | j � }
g | _ d | _ | j | _ d | _ | j d � |
s�| j d � n
| j |
� d S)NzData:r r z500 Error: bad syntax� r z500 Error: line too longZsmtp_z&500 Error: command "%s" not recognizedz451 Internal confusionz 552 Error: Too much mail dataz
�.s
z250 OK) � EMPTYSTRING�joinr, r r; r< r. r- r5 r= �find�upper�stripr@ �command_size_limits�command_size_limit�getattrrS r+ �splitrU �NEWLINEr2 r( �process_messager6 r0 r1 r? ) r �lineZsz�method�i�command�argZmax_szrW �textZstatusr
r
r
�found_terminator% sf
z SMTPChannel.found_terminatorc C sZ | s | j d � d S| j r0 | j d � n& | | _ d | _ | j d | j � d S)Nz501 Syntax: HELO hostnamez503 Duplicate HELO/EHLOFz250 %s)r= r/ r@ r4 )r rk r
r
r
� smtp_HELOb s
zSMTPChannel.smtp_HELOc C s� | s | j d � d S| j r0 | j d � nS | | _ d | _ | j d | j � | j rv | j d | j � n | j d � d S)Nz501 Syntax: EHLO hostnamez503 Duplicate HELO/EHLOTz250-%sz 250-SIZE %sz250 HELP)r= r/ r@ r4 r+ )r rk r
r
r
� smtp_EHLOm s
zSMTPChannel.smtp_EHLOc C s' | r | j d � n
| j d � d S)Nz501 Syntax: NOOPz250 OK)r= )r rk r
r
r
� smtp_NOOP{ s zSMTPChannel.smtp_NOOPc C s | j d � | j � d S)Nz221 Bye)r= Zclose_when_done)r rk r
r
r
� smtp_QUIT� s
zSMTPChannel.smtp_QUITc C s@ t | � } | d | � j � | k r< | | d � j � Sd S)Nr )rT r_ r` )r �keywordrk Zkeylenr
r
r
�_strip_command_keyword� s z"SMTPChannel._strip_command_keywordc C sc | s
d S| j � j d � r4 t | � \ } } n t | � \ } } | sV | | f S| j | f S)Nr �<)r r )�lstrip�
startswithr r Z addr_spec)r rk �address�restr
r
r
�_getaddr� s
zSMTPChannel._getaddrc C s* d d � | j � D� } d d � | D� S)Nc S s. g | ]$ } d | k r | j d d � � q S)�=r )rd )�.0Zparamr
r
r
�
<listcomp>� s z*SMTPChannel._getparams.<locals>.<listcomp>c S s+ i | ]! \ } } | j � r | | � q Sr
)�isalnum)r{ �k�vr
r
r
�
<dictcomp>� s z*SMTPChannel._getparams.<locals>.<dictcomp>)rd )r �paramsr
r
r
�
_getparams� s zSMTPChannel._getparamsc C sm | r\d } | j � } | d k r4 | j d � qi| d k rP | j d � qi| d k r� d } | j rx | | 7} n | j | � qi| d k r� d } | j r� | | 7} n | j | � qi| d
k r� | j d � qi| d k r� | j d
� qi| d k r| j d � qi| d k r0| j d � qi| d k rL| j d � qi| j d � n
| j d � d S)Nz [SP <mail-parameters>]ZEHLOz250 Syntax: EHLO hostnameZHELOz250 Syntax: HELO hostnamer# z 250 Syntax: MAIL FROM: <address>ZRCPTz 250 Syntax: RCPT TO: <address>rS z250 Syntax: DATAZRSETz250 Syntax: RSETZNOOPz250 Syntax: NOOPZQUITz250 Syntax: QUITZVRFYz250 Syntax: VRFY <address>zD501 Supported commands: EHLO HELO MAIL RCPT DATA RSET NOOP QUIT VRFYzD250 Supported commands: EHLO HELO MAIL RCPT DATA RSET NOOP QUIT VRFY)r_ r= r@ )r rk ZextendedZlc_argr r
r
r
� smtp_HELP� s:
zSMTPChannel.smtp_HELPc C sV | rE | j | � \ } } | r1 | j d � qR | j d | � n
| j d � d S)NzB252 Cannot VRFY user, but will accept message and attempt deliveryz502 Could not VRFY %sz501 Syntax: VRFY <address>)ry r= )r rk rw r� r
r
r
� smtp_VRFY� s zSMTPChannel.smtp_VRFYc C s� | j s | j d � d St d | d t �d } | j rI | d 7} n | d k rf | j | � d S| j d | � } | j | � \ } } | s� | j | � d S| j r� | r� | j | � d S| j r� | j d � d S| j | j � � } | d k r| j | � d S| j
d d � } | rx| j � sF| j | � d S| j rxt
| � | j k rx| j d � d Sn t | j � � d
k r�| j d � d S| | _ t d | j d t �| j d
� d S)Nz503 Error: send HELO firstz ===> MAILr z 501 Syntax: MAIL FROM: <address>z [SP <mail-parameters>]zFROM:z 503 Error: nested MAIL commandZSIZEz:552 Error: message size exceeds fixed maximum message sizer z:555 MAIL FROM parameters not recognized or not implementedzsender:z250 OK)r/ r= r r< r@ rs ry r0 r� r_ �pop�isdigitr+ �intrT �keys)r rk � syntaxerrrw r� �sizer
r
r
� smtp_MAIL� sN
zSMTPChannel.smtp_MAILc C s| | j s | j d � d St d | d t �| j sG | j d � d Sd } | j rc | d 7} n | d k r� | j | � d S| j d | � } | j | � \ } } | s� | j | � d S| r| j r| j | j � � } | d k r| j | � d Sq| j | � d Sn | rEt
| j � � d k rE| j d � d S| j j
| � t d
| j d t �| j d � d S) Nz503 Error: send HELO firstz ===> RCPTr z 503 Error: need MAIL commandz 501 Syntax: RCPT TO: <address>z [SP <mail-parameters>]zTO:r z8555 RCPT TO parameters not recognized or not implementedzrecips:z250 OK)r/ r= r r< r0 r@ rs ry r� r_ rT r� r1 rU )r rk r� rw r� r
r
r
� smtp_RCPT� s@
zSMTPChannel.smtp_RCPTc C sO | r | j d � d Sd | _ g | _ d | _ | j | _ | j d � d S)Nz501 Syntax: RSETr z250 OK)r= r0 r1 r2 r- r. )r rk r
r
r
� smtp_RSET s
zSMTPChannel.smtp_RSETc C su | j s | j d � d S| j s4 | j d � d S| rK | j d � d S| j | _ | j d � | j d � d S)Nz503 Error: send HELO firstz 503 Error: need RCPT commandz501 Syntax: DATAs
.
z#354 End data with <CR><LF>.<CR><LF>)r/ r= r1 rS r. r? )r rk r
r
r
� smtp_DATA# s
zSMTPChannel.smtp_DATAc C s | j d � d S)Nz502 EXPN not implemented)r= )r rk r
r
r
� smtp_EXPN2 s zSMTPChannel.smtp_EXPN)-r r r r- rS rb � collections� defaultdictra �update�max�valuesrR �DATA_SIZE_DEFAULTr' �propertyZ_SMTPChannel__server�setterZ_SMTPChannel__lineZ_SMTPChannel__stateZ_SMTPChannel__greetingZ_SMTPChannel__mailfromZ_SMTPChannel__rcpttosZ_SMTPChannel__dataZ_SMTPChannel__fqdnZ_SMTPChannel__peerZ_SMTPChannel__connZ_SMTPChannel__addrr= rY rm rn ro rp rq rs ry r� r� r� r� r� r� r� r� r
r
r
r
r q s`
= # ) # r c @ s@ e Z d Z e Z e d d d � Z d d � Z d d � Z d S)r Nc C s� | | _ | | _ | | _ t j j | d | �y> | j t j t j � | j
� | j | � | j d � Wn | j
� � Yn6 Xt d | j j t j t j � � | | f d t �d S)Nr$ � z0%s started at %s
Local addr: %s
Remote addr:%sr )Z
_localaddr� _remoteaddrr+ �asyncore�
dispatcherr' Z
create_socketr3 ZAF_INETZ SOCK_STREAMZset_reuse_addrZbindZlistenr8 r � __class__r �time�ctimer< )r Z localaddrZ
remoteaddrr+ r$ r
r
r
r' : s
zSMTPServer.__init__c C s? t d t | � d t �| j | | | | j | j � } d S)NzIncoming connection from %sr )r r; r< �
channel_classr+ Z_map)r r) r* Zchannelr
r
r
�handle_acceptedN s zSMTPServer.handle_acceptedc C s
t � d S)aI Override this abstract method to handle messages from the client.
peer is a tuple containing (ipaddr, port) of the client that made the
socket connection to our smtp port.
mailfrom is the raw address the client claims the message is coming
from.
rcpttos is a list of raw addresses the client wishes to deliver the
message to.
data is a string containing the entire full text of the message,
headers (if supplied) and all. It has been `de-transparencied'
according to RFC 821, Section 4.5.2. In other words, a line
containing a `.' followed by other text has had the leading dot
removed.
This function should return None, for a normal `250 Ok' response;
otherwise it returns the desired response string in RFC 821 format.
N)�NotImplementedError)r r6 r0 r1 rW r
r
r
rf T s zSMTPServer.process_message) r r r r r� r� r' r� rf r
r
r
r
r 6 s c @ s e Z d Z d d � Z d S)r c C so d } | j d � } t d � x? | D]7 } | rS | rS t d | d � d } n t | � q& Wt d � d S)Nr r z%---------- MESSAGE FOLLOWS ----------zX-Peer:r z%------------ END MESSAGE ------------)rd r )r r6 r0 r1 rW Z inheaders�linesrg r
r
r
rf o s
z DebuggingServer.process_messageN)r r r rf r
r
r
r
r m s c @ s( e Z d Z d d � Z d d � Z d S)r c C s� | j d � } d } x" | D] } | s, Pn | d 7} q W| j | d | d � t j | � } | j | | | � } t d | d t �d S)Nr r r z
X-Peer: %szwe got some refusals:r )rd �insertre r] �_deliverr r< ) r r6 r0 r1 rW r� ri rg �refusedr
r
r
rf } s
zPureProxy.process_messagec C s7 d d l } i } yU | j � } | j | j d | j d � z | j | | | � } Wd | j � XWn� | j k
r� } z t d d t �| j } WYd d } ~ Xn� t
| j f k
r2} z` t d | j d t �t
| d d � } t
| d d � } x | D] }
| | f | |
<qWWYd d } ~ Xn X| S)
Nr r zgot SMTPRecipientsRefusedr ZgotZ smtp_codeZ
smtp_error�ignore���)�smtplibZSMTPZconnectr� Zsendmail�quitZSMTPRecipientsRefusedr r< Z
recipientsr7 Z
SMTPExceptionr� rc ) r r0 r1 rW r� r� �s�eZerrcode�errmsg�rr
r
r
r� � s$
'zPureProxy._deliverN)r r r rf r� r
r
r
r
r | s c @ s e Z d Z d d � Z d S)r c C s d d l m } d d l m } d d l m } d d l m } g } x� | D]� }
|
j � j d � d } | j d � } t | � d k r� qM n | d }
t | � d k r� | d } n d
} | j |
� sM | d! k r� qM n | j
|
|
| f � qM Wx$ | D] \ }
}
} | j |
� qWt d d j
| � d t �| rr| j | | | � } t d | d t �n i } | | � } | j | � } | j d � s�| | d <n | j d � s�t j t j � � | d <n x.| D]&\ }
}
} t d |
d t �| j |
� } | s:| j |
d d �} | | |
<n | d
k r\| j | d d �q�| d k r~| j | d d �q�| d k r�| j | d d �q�| d
k r�| j | d d �q�| d" k r�| d k r�d | d <n
d | d <| j | d d �q�q�Wd S)#Nr )�StringIO)�Utils)�Message)�MailList�@�-rB r r �admin�owner�requestr] �leavezforwarding recips:rZ r zwe got refusals:�fromZFromZdateZDatezsending message to�lock�tolistZtoadminZtoownerZ torequestZ subscribeZSubjectZ unsubscribe)r r� zownerr� �joinr� )r� r� )�ior� ZMailmanr� r� r� �lowerrd rT Z list_existsrU �remover r] r< r� �getr� r� ZEnqueue)r r6 r0 r1 rW r� r� r� r� Z listnamesZrcptZlocal�partsZlistnamerj r� Zmlistsr� r Zmlistr
r
r
rf � sd
z MailmanProxy.process_messageN)r r r rf r
r
r
r
r � s c @ s" e Z d Z d Z d Z d Z d S)�Optionsr r N)r r r �setuid� classname�
size_limitr
r
r
r
r� � s r� c
! C s y> t j t j d d � d d d d d d d g � \ } } Wn5 t j k
ru } z t d | � WYd d } ~ Xn Xt � } x� | D]� \ } } | d" k r� t d � q� | d# k r� t t � t j d � q� | d$ k r� d | _ q� | d% k r| | _
q� | d& k rt j a q� | d' k r� y t
| � } | | _ Wqpt d | d t j �t j d � YqpXq� q� Wt | � d k r�d } d } nh t | � d k r�| d } d } nC t | � d k r�| d } | d } n t d d t j | � � | j d � } | d k r,t d d | � n | d | � | _ y! t
| | d d � � | _ Wn# t k
r�t d d | � Yn X| j d � } | d k r�t d d | � n | d | � | _ y! t
| | d d � � | _ Wn# t k
rt d d! | � Yn X| S)(Nr znVhc:s:dzclass=Znosetuid�version�helpzsize=�debug�-h�--helpr �-V� --version�-n�
--nosetuid�-c�--class�-d�--debug�-s�--sizezInvalid size: r zlocalhost:8025z localhost:25rB � zInvalid arguments: %s�:zBad local spec: %szBad local port: %szBad remote spec: %szBad remote port: %s)r� r� )r� r� )r� r� )r� r� )r� r� )r� r� )�getoptr �argv�errorr r� r r> r r� r� r r< r� r� rT �
COMMASPACEr] r^ � localhost� localport�
ValueError�
remotehost�
remoteport)
Zoptsr9 r� �optionsZoptrk Zint_sizeZ localspecZ
remotespecri r
r
r
� parseargs� sj %
!
!
r� �__main__r[ r z7Cannot import module "pwd"; try running with -n option.r �nobodyrB z3Cannot setuid "nobody"; try running with -n option.)@r r �osr: r� r� r3 r� r% r� �warningsr Zemail._header_value_parserr r �__all__r� Zprogramr> r r< re r\ r� r� r r& r r� r r r r r� r� r r� r� �rfindZlastdot�
__import__r �locals�modr� rc Zclass_r� r� r� r� r� �proxyr� �pwd� ImportErrorr r r �getpwnamr� �PermissionErrorZloop�KeyboardInterruptr
r
r
r
�<module>) sr #
� �7(N ? (