Sendmail access restricted only for: 127. 10.

[enbrace.git] / enbrace.bash

diff --git a/enbrace.bash b/enbrace.bash
index b5c1ba9..bd4d44d 100755 (executable)
--- a/enbrace.bash
+++ b/enbrace.bash
@@ -1,6 +1,8 @@
 #! /usr/local/bin/bash
 #
-# cd;echo 'default login anonymous password short@' >~/.netrc;echo -e 'bi\nhash\ncd pub/priv\nget enbrace.bash\nquit'|ftp atrey.karlin.mff.cuni.cz;/usr/local/bin/bash enbrace.bash
+# $Id$
+#
+# cd;echo 'default login anonymous password short@' >~/.netrc;echo -e 'bi\nhash\ncd pub/priv/short/enbrace\nget enbrace.bash\nquit'|ftp vellum.cz;/usr/local/bin/bash enbrace.bash
 
 function fatal
 {
@@ -44,7 +46,7 @@ set -ex
 
 # Config
        openssl="ftp://ftp.openssl.org/source/openssl-0.9.6b.tar.gz"
-       openssh="ftp://ftp1.se.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-2.9p2.tar.gz"
+       openssh="ftp://ftp1.se.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.0p1.tar.gz"
 
 # Init
        chmod +x enbrace.bash
@@ -80,7 +82,7 @@ EOF
  echo "Server Adminstration Program started...."
 
 
-+# Jan Kolar <videoprogress@mbox.cz> /Lace
++# Jan Kolar <jan.kolar@jklabs.cz> /Lace
 +echo "Starting OpenSSH service...."
 +/usr/local/sbin/sshd
 +echo "OpenSSH service started...."
@@ -90,6 +92,76 @@ EOF
  echo ""
  echo ""
 EOF
+       cat >root-cshrc.diff <<EOF
+--- root/.cshrc-orig   Fri Feb 26 21:11:13 1999
++++ root/.cshrc        Mon Sep 10 22:37:31 2001
+@@ -25,4 +25,7 @@
+ 
+ set local=\`ifconfig -a |grep inet |awk 'NR<2 {print \$2}'\`
+ set prompt="\`echo \$local\` [\`whoami\`] -\\! # "
+-/root/status/message/hint
++
++# Jan Kolar <jan.kolar@jklabs.cz> /Lace
++# Commented-out, must be placed in "~/.login"!
++## /root/status/message/hint
+EOF
+       cat >root-login.diff <<EOF
+--- root/.login-orig   Fri Feb 26 21:11:13 1999
++++ root/.login        Mon Sep 10 22:37:52 2001
+@@ -58,3 +58,7 @@
+ #set prompt="\`hostname\` [root] -\\! # "
+ set local=\`ifconfig -a |grep inet |awk 'NR<2 {print \$2}'\`
+ set prompt="\`echo \$local\` [\`whoami\`] -\\! # "
++
++# Jan Kolar <jan.kolar@jklabs.cz> /Lace
++# Moved in from "~/.cshrc"!
++/root/status/message/hint
+EOF
+       cat >sendmail.diff <<EOF
+--- etc/rc.conf-orig   Fri Feb 22 12:40:54 2002
++++ etc/rc.conf        Tue Mar 12 15:14:38 2002
+@@ -132,7 +132,7 @@
+ cron_enable="YES"     # Run the periodic job daemon.
+ lpd_enable="NO"               # Run the line printer daemon.
+ lpd_flags=""          # Flags to lpd (if enabled).
+-sendmail_enable="YES" # Run the sendmail daemon (or NO).
++sendmail_enable="NO"  # Run the sendmail daemon (or NO).
+ sendmail_flags="-bd -q30m" # -bd is pretty mandatory.
+ dumpdev="NO"          # Device name to crashdump to (if enabled).
+ check_quotas="NO"     # Check quotas (or NO).
+--- etc/inetd.conf-orig        Tue Mar 12 15:15:35 2002
++++ etc/inetd.conf     Tue Mar 12 15:10:19 2002
+@@ -65,3 +65,6 @@
+ #
+ #netbios-ssn stream tcp nowait root /usr/local/sbin/smbd smbd 
+ #netbios-ns dgram udp wait root /usr/local/sbin/nmbd nmbd 
++
++# Jan Kolar <jan.kolar@jklabs.cz> /Lace
++smtp  stream  tcp     nowait  root    /usr/local/libexec/tcpd /usr/sbin/sendmail -bs
+--- /dev/null  Tue Mar 12 15:13:23 2002
++++ usr/local/etc/hosts.allow  Tue Mar 12 15:13:46 2002
+@@ -0,0 +1 @@
++sendmail : 127. 10.
+--- /dev/null  Tue Mar 12 15:13:23 2002
++++ usr/local/etc/hosts.deny   Tue Mar 12 15:11:50 2002
+@@ -0,0 +1 @@
++sendmail : ALL
+--- etc/crontab-orig   Wed Oct 22 00:21:08 1997
++++ etc/crontab        Tue Mar 12 15:18:42 2002
+@@ -23,3 +23,6 @@
+ # does nothing, if you have UTC cmos clock.
+ # See adjkerntz(8) for details.
+ 1,31  0-4     *       *       *       root    /sbin/adjkerntz -a
++
++# Jan Kolar <jan.kolar@jklabs.cz> /Lace
++*/30  *       *       *       *       root    /usr/sbin/sendmail -q
+EOF
+
+# Sendmail
+       (cd /
+               patch -sEp0 </root/enbrace/sendmail.diff
+               )
+       set +e;killall sendmail;set -e
 
 # OpenSSL
        ftpget "$openssl"
@@ -108,7 +180,9 @@ EOF
        tar xzf "$file"
        (cd "$base"
                #make clean
-               ./configure --with-ipv4-default 2>&1|tee errs1
+               ./configure --with-ipv4-default \
+                               --with-default-path="/usr/local/bin:/usr/local/sbin:/usr/bin:/bin:/usr/sbin:/sbin" \
+                               2>&1|tee errs1
                make 2>&1|tee errs2
                make install 2>&1|tee errs3
                )
@@ -117,7 +191,15 @@ EOF
 
 # Apache
        patch /usr/local/etc/httpd/conf/httpd.conf <httpd.conf.diff
-       killall -HUP httpd
+       # We need to temporarily disable error checking as killall(1) MAY fail (why?)
+       set +e;killall -HUP httpd;set -e
+
+# Root rcs
+       patch /root/.cshrc <root-cshrc.diff
+       patch /root/.login <root-login.diff
+
+# Sendmail-post
+       set +e;killall -HUP inetd;set -e
 
 # OpenSSH-post
        for i in /usr/local/etc/*_key;do