diff options
| -rwxr-xr-x | skripti/zone/axfr.py | 85 | ||||
| -rwxr-xr-x | skripti/zone/update.py | 174 |
2 files changed, 259 insertions, 0 deletions
diff --git a/skripti/zone/axfr.py b/skripti/zone/axfr.py new file mode 100755 index 0000000..fe508f1 --- /dev/null +++ b/skripti/zone/axfr.py @@ -0,0 +1,85 @@ +#!/usr/bin/python3 +import dns.zone +import dns.resolver +import json +import sys +domena = sys.argv[1] +strežniki = [dns.resolver.resolve(domena, "SOA")[0].mname] +for i in dns.resolver.resolve(domena, "NS"): + strežniki.append(i.target) +naslovi = [] +for strežnik in strežniki: + for i in dns.resolver.resolve(strežnik, "AAAA"): + naslovi.append(i.address) + for i in dns.resolver.resolve(strežnik, "A"): + naslovi.append(i.address) +for naslov in naslovi: # opcijsko dodaj tule kakšen try catch + zone = None + zone = dns.zone.from_xfr(dns.query.xfr(naslov, domena)) + if zone != None: + break +config = None +try: + config = json.loads(b''.join(dns.resolver.resolve("_urejevalnik." + domena, "TXT")[0].strings).decode()) +except dns.resolver.NXDOMAIN: + pass +except json.decoder.JSONDecodeError: + pass +if config == None: + berime = """; Dobrodošli v preprost urejevalnik DNS zapisov. +; Komentarji se shranijo v DNS strežnik in so javni. Morajo biti na samostojnih vrsticah. +; Te komentarje z navodili lahko izbrišete -- ne bodo se ponovno pojavili. +; Nove zapise naložite na strežnik z ukazom zone/update.py zonefile.db +; Zapise prenesete iz strežnika z ukazom zone/axfr.py domena > zonefile.db +; Prva vrstica je konfiguracijski zapis v JSON obliki. Naslednje podatke lahko spremenite: +; "t": privzeti TTL, ki se uporabi, če zapis v datoteki nima TTLja +; "+": koliko naj prištejem serijski številki pred nalaganjem na strežnik + +""" + config = {"v": 0, "d": domena, "c": {"@ SOA": berime}, "t": 1, "+": 100, "i": {}} +configout = config.copy() +del configout["c"] +del configout["i"] +print(f"{json.dumps(configout)}") +for r in zone.iterate_rdatas(): + if r[0].to_unicode() == "_urejevalnik" or r[2].rdtype in [dns.rdatatype.RRSIG, dns.rdatatype.NSEC, dns.rdatatype.NSEC3, dns.rdatatype.DNSKEY]: + continue + commentkey = r[0].to_unicode() + " " + r[2].rdtype.name + if commentkey in config["c"].keys(): + print(config["c"][commentkey], end="") + del config["c"][commentkey] + konec = "\t" + if r[0].to_unicode() in config["i"].keys(): + konec = config["i"][r[0].to_unicode()] + print(r[0].to_unicode(), end=konec) + if r[1] != config["t"]: + print(r[1], end="\t") + if r[2].rdclass != dns.rdataclass.IN: + print(r[2].rdataclass.name, end="\t") + print(r[2].rdtype.name, end="\t") + if r[2].rdtype == dns.rdatatype.TXT: + prvič = True + for string in r[2].strings: + if prvič: + prvič = False + else: + print(" ", end="") + bajti = b'' + for char in string: + if char < ord(b' '): + bajti += b'\\' + ("%03d" % ord(char)).encode() + else: + bajti += bytes([char]) + niz = "" + for znak in bajti.replace(b'\\', b'\\\\').replace(b'"', b'\\"').decode('utf-8', errors='surrogateescape'): + if '\udc80' <= znak <= '\udcff': + niz += '\\'+("%03d" % (ord(znak)-0xdc00)) + else: + niz += znak + + print('"' + niz + '"', end="") + else: + print(r[2].to_text(), end="") + print() +for i in config["c"].items(): + print(i[1], end="") diff --git a/skripti/zone/update.py b/skripti/zone/update.py new file mode 100755 index 0000000..34a4e39 --- /dev/null +++ b/skripti/zone/update.py @@ -0,0 +1,174 @@ +#!/usr/bin/python3 +import dns.zone +import dns.resolver +import dns.update +import dns.tsigkeyring +import json +import sys +import math +with open(sys.argv[1], "r") as db: + lines = db.readlines() +newconfig = json.loads(lines.pop(0)[:-1]) +domena = newconfig["d"] +strežniki = [dns.resolver.resolve(domena, "SOA")[0].mname] +naslovi = [] +for strežnik in strežniki: + for i in dns.resolver.resolve(strežnik, "AAAA"): + naslovi.append(i.address) + for i in dns.resolver.resolve(strežnik, "A"): + naslovi.append(i.address) +for naslov in naslovi: # opcijsko dodaj tule kakšen try catch + zone = None + zone = dns.zone.from_xfr(dns.query.xfr(naslov, domena)) + if zone != None: + break +config = None +try: + config = json.loads(b''.join(dns.resolver.resolve("_urejevalnik." + domena, "TXT")[0].strings).decode()) +except dns.resolver.NXDOMAIN: + pass +except json.decoder.JSONDecodeError: + pass +if config == None: + config = {"v": 0, "d": domena, "c": {}, "t": 1, "+": 100, "i": {}} +rrs = [] +for r in zone.iterate_rdatas(): + if r[0].to_unicode() == "_urejevalnik" or r[2].rdtype in [dns.rdatatype.RRSIG, dns.rdatatype.NSEC, dns.rdatatype.NSEC3, dns.rdatatype.DNSKEY]: + continue + commentkey = r[0].to_unicode() + " " + r[2].rdtype.name + komentar = "" + if commentkey in config["c"].keys(): + komentar = config["c"][commentkey] + del config["c"][commentkey] + konec = "\t" + if r[0].to_unicode() in config["i"].keys(): + konec = config["i"][r[0].to_unicode()] + vrednost = "" + if r[2].rdtype == dns.rdatatype.TXT: + for string in r[2].strings: + bajti = b'' + for char in string: + if char < ord(b' '): + bajti += b'\\' + ("%03d" % ord(char)).encode() + else: + bajti += bytes([char]) + niz = "" + for znak in bajti.replace(b'\\', b'\\\\').replace(b'"', b'\\"').decode('utf-8', errors='surrogateescape'): + if '\udc80' <= znak <= '\udcff': + niz += '\\'+("%03d" % (ord(znak)-0xdc00)) + else: + niz += znak + vrednost = '"' + niz + '"' + else: + vrednost = r[2].to_text() + rrs.append((r[1], r[0].to_unicode(), komentar, konec, r[2].rdclass, r[2].rdtype, vrednost)) +komentar = "" +lineno = 1 +novikomentarji = {} +novikonci = {} +keyring = None +plus = 0 +minus = 0 +if len(sys.argv) == 3: + with open(sys.argv[2]) as file: + ključ = file.read() + keyring = dns.tsigkeyring.from_text({ključ.split()[ključ.split().index("key")+1].replace('"', "").replace(";", ""): ključ.split()[ključ.split().index("secret")+1].replace('"', "").replace(";", "")}) +update = dns.update.Update(domena, keyring=keyring) +while True: + try: + lineno += 1 + line = lines.pop(0)[:-1] # odstranimo zadnji \n, ki ga zraven da .readlines + if len(line.split()) == 0 or line[0] == ';' or line[0] == '#' or line[0] == '/': + komentar += line + "\n" + continue + ime = line.split()[0] + konec = "" + index = len(ime) + while line[index] in ["\t", " "]: + konec += line[index] + index += 1 + nizi = line.split()[1:] + tip = None + razred = None + ttl = None + while tip == None: + try: + ttl = int(nizi[0]) + nizi.pop(0) + except ValueError: + pass + try: + razred = dns.rdataclass.from_text(nizi[0]) + nizi.pop(0) + except dns.rdataclass.UnknownRdataclass: + pass + try: + tip = dns.rdatatype.from_text(nizi[0]) + for i in [" ", "\t"]: + for j in [" ", "\t"]: + try: + datastart = line.index(i+nizi[0]+j)+len(i+nizi[0]+i) + except ValueError: + continue + break + else: + continue + break + nizi.pop(0) + except dns.rdatatype.UnknownRdatatype: + pass + if tip == None: + print(f"NAPAKA: na vrstici {lineno} ne najdem tipa zapisa. Vrstica je lahko bodisi komentar, ki se začne z ';', bodisi je v obliki IME [TTL={newconfig["t"]}] [CLASS=IN] TIP PODATKI.") + print(f"Vsebina neveljavne vrstice: " + line) + sys.exit(1) + while line[datastart] in [" ", "\t"]: + datastart += 1 + data = line[datastart:] + if razred == None: + razred = dns.rdataclass.IN + if ttl == None: + ttl = newconfig["t"] + ime = dns.name.from_unicode(ime, dns.name.from_unicode(domena)).choose_relativity(dns.name.from_unicode(domena), True).to_unicode() + if tip == dns.rdatatype.SOA: + data = data.split() + data[2] = str(int(data[2])+newconfig["+"]) + data = " ".join(data) + tapl = (ttl, ime, komentar, konec, razred, tip, data) + if komentar != "": + novikomentarji[ime + " " + tip.to_text(tip)] = komentar + if konec != "\t": + novikonci[ime] = konec + if not tapl in rrs: + print("+ " + komentar.replace("\n", "\n+ ") + ime + konec + str(ttl) + "\t" + razred.to_text(razred) + "\t" + tip.to_text(tip) + "\t" + data) + plus += 1 + update.add(ime, ttl, tip, data) + else: + rrs.remove(tapl) + komentar = "" + except IndexError: + break +obstoječ = "" # zadnji komentar +for komentar in config["c"].values(): + obstoječ += komentar +for rr in rrs: + print("- " + komentar.replace("\n", "\n- ") + rr[1] + konec + str(rr[0]) + "\t" + rr[4].to_text(rr[4]) + "\t" + rr[5].to_text(rr[5]) + "\t" + rr[6]) + minus += 1 + update.delete(rr[1], rr[5].to_text(rr[5]), rr[6]) +if obstoječ != komentar: + print("- " + "\n+ ".join(obstoječ.split("\n"))) + print("+ " + "\n+ ".join(komentar.split("\n"))) + plus += 1 + minus += 1 +novikomentarji["z"] = komentar +newconfig["c"] = novikomentarji +newconfig["i"] = novikonci +odziv = input(f"(-{minus}/+{plus}) Ali želite te spremembe poslati na strežnik? [Y/D/J/n] ") +if len(odziv) != 0 and odziv[0] in ["n", "N", "0", "f", "F"]: + print("Prekinjam. Nasvidenje!") + sys.exit(0) +jason = json.dumps(newconfig) +jasonsplit = " ".join(['"' + jason[i*255:i*255+255].replace("\\", "\\\\").replace('"', '\\"') + '"' for i in range(math.ceil(len(jason)/255))]) +update.replace("_urejevalnik", 1, dns.rdatatype.TXT, jasonsplit) +response = dns.query.tcp(update, naslov) +print("Poslal zahtevo. Odziv strežnika:") +print(response) |