View source for RBL check con Nagios

=Installazione pacchetto=
==Debian >= Jessie==
 sudo apt-get install nagios-plugins-contrib

==Debian < Jessie==
* Scaricare il tar:
 wget https://trac.id.ethz.ch/projects/nagios_plugins/downnloads/check_rbl-1.3.0.tar.gz --no-check-certificates
 tar xvzf check_rbl-1.3.0.tar.gz

* Creare il file .deb
 sudo checkinstall \
    -D --install=no \
    -A all \
    --maintainer email@example.com \
    --requires libnagios-plugin-perl,libreadonly-perl \
    --pkgname nagios-plugins-rbl \
    --review-control

'''Quando si edita il file control alla fine, eliminare le ricghe vuote con Conflicts: e xxxx:'''

* Eventualmente uploadarlo per signarlo

* Se si installa a mano:
 sudo dpkg -i nagios-plugins-rbl libnagios-plugin-perl libreadonly-perl

* Dal  repository su cui lo si è caricato:
 sudo apt-get install nagios-plugins-rbl

=Configurazione=

* Disablitare l'interprete embedded di Nagios

 sudoedit /etc/nagios3/nagios.cfg
    ...
    enable_embedded_perl=0
    use_embedded_perl_implicitly=0
    ...

* Creare i comandi:
<pre>
cat | sudo tee /etc/nagios3/conf.d/check_commands/check-rbl.cfg > /dev/null <<'EOFile'
define command{
                command_name    check-rbl
                command_line    $USER1$/contrib/check_rbl -H '$HOSTADDRESS$' -t 60 --extra-opts=rbl@etc/nagios-plugins/check_rbl.ini
                        #--extra-opts=check_rbl@/etc/nagios-plugins.ini -v -d
        }
EOFile
</pre>

<pre>
cat | sudo tee /etc/nagios3/conf.d/check_commands/check-rbl-address.cfg > /dev/null <<'EOFile'
define command{
                command_name    check-rbl-address
                command_line    $USER1$/contrib/check_rbl -H '$ARG1$' -t 60 --extra-opts=rbl@etc/nagios-plugins/check_rbl.ini
                        #--extra-opts=check_rbl@/etc/nagios-plugins.ini -v -d
        }
EOFile
</pre>


* Creare il file di configurazione contenente i server da testare, OPPURE EDITARE QUELLO ESISTENTE:
<pre>
cat | sudo tee -a /etc/nagios-plugins/check_rbl.ini > /dev/null <<EOFile
[rbl]
server=0spam.fusionzero.com
server=access.redhawk.org
server=b.barracudacentral.org
#server=blackholes.mail-abuse.org
server=blacklist.sci.kun.nl
server=bl.deadbeef.com
server=bl.spamcannibal.org
server=bl.spamcop.net
server=bogons.cymru.com
server=cbl.abuseat.org
server=cdl.anti-spam.org.cn
#server=combined.njabl.org
server=csi.cloudmark.com
server=db.wpbl.info
server=dnsbl-1.uceprotect.net
server=dnsbl-2.uceprotect.net
server=dnsbl-3.uceprotect.net
server=dnsbl.cyberlogic.net
server=dnsbl.dronebl.org
server=dnsbl.inps.de
server=dnsbl.kempt.net
#server=dnsbl.njabl.org
#server=dnsbl.solid.net
server=dnsbl.sorbs.net
server=drone.abuse.ch
server=dsn.rfc-ignorant.org
server=dul.dnsbl.sorbs.net
server=dyna.spamrats.com
server=forbidden.icm.edu.pl
server=hil.habeas.com
server=httpbl.abuse.ch
server=http.dnsbl.sorbs.net
server=ips.backscatterer.org
server=ix.dnsbl.manitu.net
server=korea.services.net
server=mail-abuse.blacklist.jippg.org
server=misc.dnsbl.sorbs.net
server=multi.surbl.org
server=netblock.pedantic.org
server=no-more-funn.moensted.dk
server=noptr.spamrats.com
server=opm.tornevall.org
server=pbl.spamhaus.org
server=psbl.surriel.com
server=query.senderbase.org
server=rbl.efnetrbl.org
server=rbl.interserver.net
#server=rbl-plus.mail-abuse.org
server=rbl.schulte.org
server=rbl.spamlab.com
server=rbl.suresupport.com
#server=relays.mail-abuse.org
server=relays.nether.net
server=sbl.spamhaus.org
server=sbl-xbl.spamhaus.org
server=short.rbl.jp
server=smtp.dnsbl.sorbs.net
server=socks.dnsbl.sorbs.net
server=spam.dnsbl.sorbs.net
server=spamguard.leadmon.net
server=spamrbl.imp.ch
server=spamsources.fabel.dk
server=spam.spamrats.com
server=spamtrap.drbl.drand.net
server=tor.dan.me.uk
server=ubl.unsubscore.com
server=virbl.bit.nl
server=virus.rbl.jp
server=web.dnsbl.sorbs.net
server=wormrbl.imp.ch
server=xbl.spamhaus.org
server=zen.spamhaus.org
server=zombie.dnsbl.sorbs.net
EOFile
</pre>

* Utilizzarlo come ad esempio in:

<pre>
define service{
    use                 generic-service
    host_name           server.example.com
    service_description RBL
    check_command       check-rbl
}
</pre>

oppure

<pre>
define service{
    use                 generic-service
    host_name           server.example.com
    service_description RBL
    check_command       check-rbl-address!1.2.3.4
}
</pre>

=Riferimenti=
*[http://blog.matteocorti.ch/?tag=nagios Teo's Blog » nagios]
*[https://trac.id.ethz.ch/projects/nagios_plugins/wiki/check_rbl check_rbl – nagios_plugins]
*[http://nagiosplugins.org/extra-opts Extra-Opts | Nagios Plugins]
*[http://www.anti-abuse.org/multi-rbl-check/ Multi-RBL Check | The Anti-Abuse Project]
*[http://www.msfaq.eu/nagios-rbl-check-plugin/ Nagios RBL Check Plugin | FAQ - HowTos - Tipps - Tricks]
*[http://www.blacklistalert.org/ BLACKLISTALERT.ORG - Test if your IP or DOMAIN is listed in a spamdatabase]
*[http://freshmeat.net/projects/nagioscheckbl/ nagios-check_bl is a Nagios plugin that checks whether a server is in any known anti-spam block lists]
*[http://nagioswiki.com/wiki/index.php/Checking_Blacklisted_MTAs_with_CentOS_%2B_check_bl Checking Blacklisted MTAs with CentOS + check bl - Nagios Wiki]

[[Category: Published]]