Clear ARP / Neighbour cache on Linux

Posted on January 6, 2018.

I am trying to diagnose why out-of-scope ARP requests are being sent (ARP requests for addresses that should be on the default gateway). I thought I had figured it out, but my ARP table was still full of 100’s of incomplete entries. “arp -d” just marks an entry as incomplete, so does “ip neigh del“. I wanted to flush the entire cache.

What finally worked was to flip ARP on/off.

ip link set arp off dev eth0; ip link set arp on dev eth0

1	ip link set arp off dev eth0; ip link set arp on dev eth0

1 Comment

Hide Dropbox File Explorer Icon

Posted on December 25, 2017.

I use dropbox but it isn’t my main sync app. Dropbox doesn’t give you the option to remove the icon from File Explorer, and if you manually remove the registry entries that are related to it, they are recreated at each automated update of Dropbox.

Another way of removing the icon is to add an entry to Windows “NoEnum” registry key. This tells Windows to not process matching keys, so Dropbox just gets ignored.

Add the following registry entries:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum]
"{E31EA727-12ED-4702-820C-4B6445F28E1B}"=dword:00000001
"{E31EA727-12ED-4702-820C-4B6445F28E1A}"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum]

"{E31EA727-12ED-4702-820C-4B6445F28E1B}"=dword:00000001

"{E31EA727-12ED-4702-820C-4B6445F28E1A}"=dword:00000001

Download reg file
dropbox-removal.reg (476 bytes, 2,240 hits)

Self-Hosted Dynamic DNS with BIND9 & PHP

Posted on July 2, 2014.

There are several free Dynamic DNS services available, but the ones I have used require the user to respond to an email every 30-days to confirm the account is still in use. DynDns no longer offer free accounts, and some recent news that no-ip.com domains have been ceased by US courts and handed over to Microsoft means I felt relieved I was now running my own system for some time now. And so could you.

This system uses BIND9 to host the DNS and PHP to handle the update requests. Setting up BIND and Apache/Nginx/PHP is outside the scope of this guide.

A user updates their IP by visiting a unique link. In the guide you will find methods of automating dns updates with Linux, OSX and Windows.

I suggest hosting the script on HTTPS or a non-standard port as some Internet Providers (I know Virgin does) use transparent cache proxies for web traffic meaning the web server doesn’t see the correct IP.

In my examples I am creating a domain named dyndns.example.com and have a webserver at web1.example.com, and a nameserver at ns1.example.com. Guide is based on Debian Wheezy, but should be distribution independent.

Creating DNSSEC keys
First you will need to create a set of DNSSEC keys for the 2 systems to authenticate with.

dnssec-keygen -r /dev/urandom -a HMAC-MD5 -b 512 -n HOST web1.example.com

1	dnssec-keygen -r /dev/urandom -a HMAC-MD5 -b 512 -n HOST web1.example.com

Note: Using “-r /dev/urandom” tells the command to use the less secure non-blocking random generator. Without it, you may find the command blocks until enough random entropy has been gathered to generate the keys.

You will then have 2 new files, in my case Kweb1.example.com.+165+60641.key and Kweb1.example.com.+165+60641.private

In the .private file there is a field “key”:

Kweb1.example.com.+165+60641.private

Private-key-format: v1.3
Algorithm: 165 (HMAC_SHA512)
Key: f3QY8vTQwgX0mo/7hYUR9m5Vw+X3GsKmRLp850vPTOtgzLmGmIokB9Q1MxYk76CTmVkqPlIyMQxpwizfrLgHsA==
Bits: AAA=
Created: 20140702092344
Publish: 20140702092344
Activate: 20140702092344

Private-key-format: v1.3

Algorithm: 165 (HMAC_SHA512)

Key: f3QY8vTQwgX0mo/7hYUR9m5Vw+X3GsKmRLp850vPTOtgzLmGmIokB9Q1MxYk76CTmVkqPlIyMQxpwizfrLgHsA==

Bits: AAA=

Created: 20140702092344

Publish: 20140702092344

Activate: 20140702092344

Adding BIND config
You then need to add this key to BIND and create the zone config. I personally create a new file /etc/bind/named.conf.dyndns and add an extra include directive in /etc/bind/named.conf

Add to /etc/bind/named.conf

include "/etc/bind/named.conf.dyndns";

1	include "/etc/bind/named.conf.dyndns";

Create /etc/bind/named.conf.dyndns

Create /etc/bind/named.conf.dyndns
// key used by web1.example.com
key "web1.example.com" {
   algorithm hmac-md5;
   secret "f3QY8vTQwgX0mo/7hYUR9m5Vw+X3GsKmRLp850vPTOtgzLmGmIokB9Q1MxYk76CTmVkqPlIyMQxpwizfrLgHsA==";
};

zone "dyndns.example.com" {
   type master;
   file "/etc/bind/db/dyndns.example.com";
   allow-update {
      key "web1.example.com";
   };
};

Create /etc/bind/named.conf.dyndns

// key used by web1.example.com

key "web1.example.com" {

algorithm hmac-md5;

secret "f3QY8vTQwgX0mo/7hYUR9m5Vw+X3GsKmRLp850vPTOtgzLmGmIokB9Q1MxYk76CTmVkqPlIyMQxpwizfrLgHsA==";

};

zone "dyndns.example.com" {

type master;

file "/etc/bind/db/dyndns.example.com";

allow-update {

key "web1.example.com";

};

Note: I point zonefiles to /etc/bind/db/, either edit the location or create the directory (remember to give bind write permissions to this directory)
Example zone file
You will need to start your zonefile with the basics.

Create /etc/bind/db/dyndns.example.com

$TTL 86400      ; 1 day
@                IN SOA  ns1.example.com. hostmaster.example.com. (
                                2014070101 ; serial
                                3600       ; refresh (1 hour)
                                600        ; retry (10 minutes)
                                2419200    ; expire (4 weeks)
                                3600       ; minimum (1 hour)
                                )
                        NS      ns1.example.com.
                        NS      ns2.example.com.
                        A       192.168.0.1
$ORIGIN @
$TTL 60 ; 1 minute

$TTL 86400 ; 1 day

@ IN SOA ns1.example.com. hostmaster.example.com. (

2014070101 ; serial

3600 ; refresh (1 hour)

600 ; retry (10 minutes)

2419200 ; expire (4 weeks)

3600 ; minimum (1 hour)

)

NS ns1.example.com.

NS ns2.example.com.

A 192.168.0.1

$ORIGIN @

$TTL 60 ; 1 minute

Setting up the web server
This code relies on the program nsupdate. On Debian this is available in the dnsutils package. On Redhat based systems it is in the bind-utils package.

The PHP code has settings and user authentication in the first 2 arrays, $settings and $acl.

// Various settings
$settings = array(
	"domain"     => "dyndns.example.com",
	"nsupdate"   => "/usr/bin/nsupdate",
	"nameserver" => "192.168.0.1",
	"keyfile"    => "include/Kweb1.example.com.+165+60641.private",
	"ttl"        => "60",
	"logdir"     => "log/"
);

// Access Control List
$acl = array(
	"customer1"  => "YRnog2nMaXyzumya2VQX",
	"customer2"  => "27iAsCPAqdVHGf3CVGa4",
);

// Various settings

$settings = array(

"domain" => "dyndns.example.com",

"nsupdate" => "/usr/bin/nsupdate",

"nameserver" => "192.168.0.1",

"keyfile" => "include/Kweb1.example.com.+165+60641.private",

"ttl" => "60",

"logdir" => "log/"

);

// Access Control List

$acl = array(

"customer1" => "YRnog2nMaXyzumya2VQX",

"customer2" => "27iAsCPAqdVHGf3CVGa4",

);

The array $acl is made up of 2 fields. These are used as the ID and KEY for authentication. The ID is the subdomain to be updated (ie. customer1.dyndns.example.com).

In order to authenticate and update the IP, a user only needs to visit the page with the correct details. (ie. https://web1.example.com/update.php?id=customer1&key=YRnog2nMaXyzumya2VQX)

The script needs access to the key files generated earlier. I placed them in a new directory include/.

The ttl setting determines how long the internet should cache each DNS entry. A lower TTL would make changes propagate quicker, but would increase the number of requests for busy entries.

The script will attempt to create a log/ directory. If your webserver doesn’t have permission to do this, you would need to do it manually and give the webserver write permission.

You should deny public access to the include and log directories. If using Apache, you can add a .htaccess file to each directory to deny access.
.htaccess

Order Allow,Deny
Deny from all

1 2	Order Allow,Deny Deny from all

The script logs failed requests and successful updates to log/access_YEARMONTH.log

[Tue, 01 Jul 14 11:11:53 +0100] (x.x.x.x) Success: customer1
[Tue, 01 Jul 14 14:15:57 +0100] (x.x.x.x) Forbidden: /update.php?id=customer1&key=test
[Tue, 01 Jul 14 14:16:08 +0100] (x.x.x.x) Success: customer2

[Tue, 01 Jul 14 11:11:53 +0100] (x.x.x.x) Success: customer1

[Tue, 01 Jul 14 14:15:57 +0100] (x.x.x.x) Forbidden: /update.php?id=customer1&key=test

[Tue, 01 Jul 14 14:16:08 +0100] (x.x.x.x) Success: customer2

Automatic Updates on Linux/OSX
Because this system just visits a URL to update the IP, there is no need for special software. All you need to do is visit the link.

You can make this automatic by adding an entry to your systems crontab that will visit the link for you on a regular basis.
crontab

*/30 * * * * wget -qq --no-check-certificate 'https://web1.example.com/update.php?id=customer1&key=YRnog2nMaXyzumya2VQX'

1	/30 * * * wget -qq --no-check-certificate 'https://web1.example.com/update.php?id=customer1&key=YRnog2nMaXyzumya2VQX'

Note: It is important to include the link in quotes as the & symbol has a special meaning on some shells.

Automatic Updates on Windows
For Windows I have written a small VBScript program that can be ran by a scheduled task. The script has been tested on XP/Vista/7/8.

dynamic-dns.vbs (478 bytes, 3,216 hits)

' This is the client counterpart to a Dynamic DNS system
' Steve Allison 2014 -- http://www.nooblet.org/blog/2014/php-dynamic-dns/

Sub fetchURL()
  Set objHTTP = CreateObject("WinHttp.WinHttpRequest.5.1")
  objHTTP.Open "GET", strURL, False
  objHTTP.Send
End Sub

Dim objHTTP, strURL, strID, strKey

strID = "customer1"
strKey = "YRnog2nMaXyzumya2VQX"
strURL = "https://web1.example.com/update.php?id=" + strID + "&key=" + strKey

On Error Resume Next
fetchURL

' This is the client counterpart to a Dynamic DNS system

' Steve Allison 2014 -- http://www.nooblet.org/blog/2014/php-dynamic-dns/

Sub fetchURL()

Set objHTTP = CreateObject("WinHttp.WinHttpRequest.5.1")

objHTTP.Open "GET", strURL, False

objHTTP.Send

End Sub

Dim objHTTP, strURL, strID, strKey

strID = "customer1"

strKey = "YRnog2nMaXyzumya2VQX"

strURL = "https://web1.example.com/update.php?id=" + strID + "&key=" + strKey

On Error Resume Next

fetchURL

The PHP code

update.php (3.8 KiB, 8,576 hits)

<?php

/**
 * Dynamic DNS update script
 *
 * This script takes a username and password and uses the BIND command "nsupdate"
 * to update a BIND installation with the remote IP of the request
 *
 * Steve Allison 2014 -- http://www.nooblet.org/blog/2014/php-dynamic-dns/
 *
**/

// Various settings
$settings = array(
	"domain"	=> "dyndns.example.com",
	"nsupdate"	=> "/usr/bin/nsupdate",
	"nameserver"	=> "192.168.0.1",
	"keyfile"	=> "include/Kweb1.example.com.+165+60641.private",
	"ttl"		=> "60",
	"logdir"	=> "log/"
);

// Access Control List
$acl = array(
	"customer1"		=> "YRnog2nMaXyzumya2VQX",
	"customer2"		=> "27iAsCPAqdVHGf3CVGa4",
	"customer2"		=> "tdo2WHLAi454xwMLwOA6",
	"customer4"		=> "4AAkBgMCvyig4yGTtAyD",
);


// Removes unwanted characters from the GET request, probably malicious
function escapeString($string) {
	return strtr($string, 
		array(
			";" => '_',
			"," => '_',
			"\n" => '_',
			"\r" => '_',
			"\\" => '_',
		)
	);
}

// Logs string to file, creates logdir with .htaccess file if necessary
function logString($string) {

	global $settings, $_SERVER;

	if (!file_exists($settings['logdir'])) {
		mkdir($settings['logdir']);
		file_put_contents($settings['logdir'] . "/.htaccess", "order allow,deny\ndeny from all\n");
	}

	if (file_exists($settings['logdir'])) {
		file_put_contents($settings['logdir'] . "/access_" . date('Ym') . ".log", sprintf("[%s] (%15s) %s\n", date(DATE_RFC822), $_SERVER['REMOTE_ADDR'], $string), FILE_APPEND);
	}
}


// Check we have the arrays available, or die a quick death
if ((!isset($_GET)) || (!isset($_SERVER)) || (!array_key_exists('REMOTE_ADDR', $_SERVER))) {
	header('HTTP/1.0 500 Internal Server Error');
	print("500 Internal Server Error\n");
	die();
}

// Get remote IP
$remoteip = $_SERVER['REMOTE_ADDR'];

// Check that all variables are available to PHP
if ((!array_key_exists('id', $_GET)) || (!array_key_exists('key', $_GET))) {
        header('HTTP/1.0 400 Bad Request');
        print("400 Bad Request\n");
		logString("Bad request (required GET field missing): " . $_SERVER['REQUEST_URI']);
        die();
}

// define our 2 main variables
$id = escapeString($_GET['id']);
$key = escapeString($_GET['key']);

// If any are null, die
if ((!$id) || (!$key)) {
	header('HTTP/1.0 400 Bad Request');
	print("400 Bad Request\n");
	logString("Bad request (required GET field empty): " . $_SERVER['REQUEST_URI']);
	die();
}

// If there is no entry, or the key doesn't match, die
if ((!$acl[$id]) || (strcmp($acl[$id],$key)) != 0) {
	header('HTTP/1.0 403 Forbidden');
	print("403 Forbidden");
	logString("Forbidden: " . $_SERVER['REQUEST_URI']);
	die();
}

// Perform DNS request to fetch current IP, the extra '.' is to disable appending local domain to request
$currentip = gethostbyname($id . "." . $settings['domain'] . ".");

// Check if an update is required, if not, die
if (strcmp($currentip,$remoteip) == 0) {
	header("Content-Type: text/plain");
	print("No update required.");
	die();
}

// Check nsupdate exists
if (!file_exists($settings['nsupdate'])) {
	header('HTTP/1.0 500 Internal Server Error');
	print("500 Internal Server Error");
	logString("Error: " . $settings['nsupdate'] . " is not a valid nsupdate binary");
	die();
}

// Run nsupdate
$pipe = popen($settings['nsupdate'] . " -d -D -k " . $settings['keyfile'], 'w');
// Pass update string
fwrite($pipe, "server " . $settings['nameserver'] . "\n");
//fwrite($pipe, "debug yes\n");
fwrite($pipe, "zone " . $settings['domain'] . "\n");
fwrite($pipe, "update delete " . $id . "." . $settings['domain'] . " A\n");
fwrite($pipe, "update add " . $id . "." . $settings['domain'] . " " . $settings['ttl'] . " A " . $remoteip . "\n");
//fwrite($pipe, "show\n");
fwrite($pipe, "send\n");
// Close pipe
$int = pclose($pipe);

// log to file
logString("Success: " . $id);

header("Content-Type: text/plain");
print("Request submitted.\n" . $id . " => " . $remoteip . "\n");

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

<?php

/**

* Dynamic DNS update script

* This script takes a username and password and uses the BIND command "nsupdate"

* to update a BIND installation with the remote IP of the request

* Steve Allison 2014 -- http://www.nooblet.org/blog/2014/php-dynamic-dns/

**/

// Various settings

$settings = array(

"domain" => "dyndns.example.com",

"nsupdate" => "/usr/bin/nsupdate",

"nameserver" => "192.168.0.1",

"keyfile" => "include/Kweb1.example.com.+165+60641.private",

"ttl" => "60",

"logdir" => "log/"

);

// Access Control List

$acl = array(

"customer1" => "YRnog2nMaXyzumya2VQX",

"customer2" => "27iAsCPAqdVHGf3CVGa4",

"customer2" => "tdo2WHLAi454xwMLwOA6",

"customer4" => "4AAkBgMCvyig4yGTtAyD",

);

// Removes unwanted characters from the GET request, probably malicious

function escapeString($string) {

return strtr($string,

array(

";" => '_',

"," => '_',

"\n" => '_',

"\r" => '_',

"\\" => '_',

)

);

}

// Logs string to file, creates logdir with .htaccess file if necessary

function logString($string) {

global $settings, $_SERVER;

if (!file_exists($settings['logdir'])) {

mkdir($settings['logdir']);

file_put_contents($settings['logdir'] . "/.htaccess", "order allow,deny\ndeny from all\n");

}

if (file_exists($settings['logdir'])) {

file_put_contents($settings['logdir'] . "/access_" . date('Ym') . ".log", sprintf("[%s] (%15s) %s\n", date(DATE_RFC822), $_SERVER['REMOTE_ADDR'], $string), FILE_APPEND);

}

// Check we have the arrays available, or die a quick death

if ((!isset($_GET)) || (!isset($_SERVER)) || (!array_key_exists('REMOTE_ADDR', $_SERVER))) {

header('HTTP/1.0 500 Internal Server Error');

print("500 Internal Server Error\n");

die();

}

// Get remote IP

$remoteip = $_SERVER['REMOTE_ADDR'];

// Check that all variables are available to PHP

if ((!array_key_exists('id', $_GET)) || (!array_key_exists('key', $_GET))) {

header('HTTP/1.0 400 Bad Request');

print("400 Bad Request\n");

logString("Bad request (required GET field missing): " . $_SERVER['REQUEST_URI']);

die();

}

// define our 2 main variables

$id = escapeString($_GET['id']);

$key = escapeString($_GET['key']);

// If any are null, die

if ((!$id) || (!$key)) {

header('HTTP/1.0 400 Bad Request');

print("400 Bad Request\n");

logString("Bad request (required GET field empty): " . $_SERVER['REQUEST_URI']);

die();

}

// If there is no entry, or the key doesn't match, die

if ((!$acl[$id]) || (strcmp($acl[$id],$key)) != 0) {

header('HTTP/1.0 403 Forbidden');

print("403 Forbidden");

logString("Forbidden: " . $_SERVER['REQUEST_URI']);

die();

}

// Perform DNS request to fetch current IP, the extra '.' is to disable appending local domain to request

$currentip = gethostbyname($id . "." . $settings['domain'] . ".");

// Check if an update is required, if not, die

if (strcmp($currentip,$remoteip) == 0) {

header("Content-Type: text/plain");

print("No update required.");

die();

}

// Check nsupdate exists

if (!file_exists($settings['nsupdate'])) {

header('HTTP/1.0 500 Internal Server Error');

print("500 Internal Server Error");

logString("Error: " . $settings['nsupdate'] . " is not a valid nsupdate binary");

die();

}

// Run nsupdate

$pipe = popen($settings['nsupdate'] . " -d -D -k " . $settings['keyfile'], 'w');

// Pass update string

fwrite($pipe, "server " . $settings['nameserver'] . "\n");

//fwrite($pipe, "debug yes\n");

fwrite($pipe, "zone " . $settings['domain'] . "\n");

fwrite($pipe, "update delete " . $id . "." . $settings['domain'] . " A\n");

fwrite($pipe, "update add " . $id . "." . $settings['domain'] . " " . $settings['ttl'] . " A " . $remoteip . "\n");

//fwrite($pipe, "show\n");

fwrite($pipe, "send\n");

// Close pipe

$int = pclose($pipe);

// log to file

logString("Success: " . $id);

header("Content-Type: text/plain");

print("Request submitted.\n" . $id . " => " . $remoteip . "\n");

Using VBScript to Create Dated Backups with 7-Zip

Posted on June 30, 2014.

I needed a simple method to backup a small folder using 7-Zip on a regular basis without installing extra software. I wanted to be able to leave it running daily and have it remove old backups.

I chose VBScript to complete this task, re-learning a few things from the last time I used the language.

The script shall backup C:\Customer to S:\Backup\backup_DATE.7z. It will also delete old backups, only keeping the first 5. The directories and number of kept backups are variables, check the code comments.

' Backup folder using 7-Zip
' Written by Steve Allison 2014 - steve@allison.im

Dim fso, rs, shell

' File System Object
Set fso = CreateObject("Scripting.FileSystemObject")
' RecordSet
Set rs = CreateObject("Ador.Recordset")
' Shell
Set shell = CreateObject("WScript.Shell")

Const adVarChar = 200
Const adDate = 7

srcFolder="C:\Customer"
dstFolder="S:\Backup"
backupName="backup"
zipEXE="C:\Program Files\7-Zip\7z.exe"

' Number of files to keep
iNum = 5

' Get the date in the correct order. Why does vbscript suck so hard at date formatting?
Function getDateString()
    d = ZeroPad(Day(Now()), 2)
    m = ZeroPad(Month(Now()), 2)    
    y = Year(Now())
    getDateString = y & m & d
End Function

' No printf() in VBScript it seems
Function ZeroPad(int, length)
	If Len(int) < length Then
		ZeroPad = Right(String(length, "0") & int, length)
	End If
End Function

' Sanity checking
If Not fso.FolderExists(srcFolder) Then
	Wscript.Echo "Aborted. Source folder does not exist: " & srcFolder
	Wscript.Quit
End If
If Not fso.FolderExists(dstFolder) Then
	Wscript.Echo "Aborted. Destination folder does not exist: " & dstFolder
	Wscript.Quit
End If
If Not fso.FileExists(zipEXE) Then
	Wscript.Echo "Aborted. 7-Zip program does not exist: " & zipEXE
	Wscript.Quit
End If

' Create suffix of date-time
backupFileDate = getDateString() & "-" & replace(FormatDateTime(now,4),":","")

' File extension
backupFileExt = ".7z"

' Backup path without extension
backupFilePre = dstFolder & "/" & backupName & "_" & backupFileDate

' Full backup path
backupFile = backupFilePre & backupFileExt

' More sanity checking
n = 1
Do While fso.FileExists(backupFile)
	' Add integeer to file, loop until it doesn't already exist
	backupFile = backupFilePre & "_" & ZeroPad(n, 2) & backupFileExt
	n = n + 1
Loop

'''' Zip Source Folder
' Create shell command
shCommand = """" & zipEXE & """ a -r """ & backupFile & """"
' Change to source directory
shell.CurrentDirectory = srcFolder & "/"
' Run 7-Zip in shell
shVal = shell.Run(shCommand,4,true)

' Check 7-Zip exit code
If shVal > 1 Then
	Wscript.Echo "7-Zip failed with error code: " & shVal
	Wscript.Quit
End If

'''' Remove old backup files
' Add required fields to recordset
With rs.Fields
	.append "filepath", adVarChar, 255
	.append "datelastmodified", adDate
End With

' Get folder object
set rsFolder=fso.getfolder(dstFolder)

' List folder contents to RecordSet
With rs
    .open
    For Each rsFile in rsFolder.files
        .addnew array("filepath","datelastmodified"), array(rsFile.path,rsFile.datelastmodified)
        .update
    Next
End With

' Loop through folder listing recordset
i=0
If Not (rs.EOF and rs.BOF) then
	' Sort by last modified, newest first
	rs.Sort = "datelastmodified desc"
	' Move recordset pointer to first record
	rs.MoveFirst
	' Loop through recordset
	Do While Not rs.EOF
		' get path from recordset
		dFile = fso.GetFile(rs.Fields("filepath"))
		' get filename from path
		dFileName = fso.GetFileName(dFile)
		' Check if backupName is in the filename
		if InStr(1, dFileName, backupName, 1) Then
			i=i+1
			' wait until >iNum matches
			if i > iNum Then
				' Delete file, ignore errors
				On Error Resume Next
				fso.DeleteFile rs.Fields("filepath"), true
				On Error Goto 0
			End If
		End If
		rs.MoveNext
	Loop
End If

Wscript.Echo "Backup complete at " & backupFile

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

' Backup folder using 7-Zip

' Written by Steve Allison 2014 - [email protected]

Dim fso, rs, shell

' File System Object

Set fso = CreateObject("Scripting.FileSystemObject")

' RecordSet

Set rs = CreateObject("Ador.Recordset")

' Shell

Set shell = CreateObject("WScript.Shell")

Const adVarChar = 200

Const adDate = 7

srcFolder="C:\Customer"

dstFolder="S:\Backup"

backupName="backup"

zipEXE="C:\Program Files\7-Zip\7z.exe"

' Number of files to keep

iNum = 5

' Get the date in the correct order. Why does vbscript suck so hard at date formatting?

Function getDateString()

d = ZeroPad(Day(Now()), 2)

m = ZeroPad(Month(Now()), 2)

y = Year(Now())

getDateString = y & m & d

End Function

' No printf() in VBScript it seems

Function ZeroPad(int, length)

If Len(int) < length Then

ZeroPad = Right(String(length, "0") & int, length)

End If

End Function

' Sanity checking

If Not fso.FolderExists(srcFolder) Then

Wscript.Echo "Aborted. Source folder does not exist: " & srcFolder

Wscript.Quit

End If

If Not fso.FolderExists(dstFolder) Then

Wscript.Echo "Aborted. Destination folder does not exist: " & dstFolder

Wscript.Quit

End If

If Not fso.FileExists(zipEXE) Then

Wscript.Echo "Aborted. 7-Zip program does not exist: " & zipEXE

Wscript.Quit

End If

' Create suffix of date-time

backupFileDate = getDateString() & "-" & replace(FormatDateTime(now,4),":","")

' File extension

backupFileExt = ".7z"

' Backup path without extension

backupFilePre = dstFolder & "/" & backupName & "_" & backupFileDate

' Full backup path

backupFile = backupFilePre & backupFileExt

' More sanity checking

n = 1

Do While fso.FileExists(backupFile)

' Add integeer to file, loop until it doesn't already exist

backupFile = backupFilePre & "_" & ZeroPad(n, 2) & backupFileExt

n = n + 1

Loop

'''' Zip Source Folder

' Create shell command

shCommand = """" & zipEXE & """ a -r """ & backupFile & """"

' Change to source directory

shell.CurrentDirectory = srcFolder & "/"

' Run 7-Zip in shell

shVal = shell.Run(shCommand,4,true)

' Check 7-Zip exit code

If shVal > 1 Then

Wscript.Echo "7-Zip failed with error code: " & shVal

Wscript.Quit

End If

'''' Remove old backup files

' Add required fields to recordset

With rs.Fields

.append "filepath", adVarChar, 255

.append "datelastmodified", adDate

End With

' Get folder object

set rsFolder=fso.getfolder(dstFolder)

' List folder contents to RecordSet

With rs

.open

For Each rsFile in rsFolder.files

.addnew array("filepath","datelastmodified"), array(rsFile.path,rsFile.datelastmodified)

.update

End With

' Loop through folder listing recordset

i=0

If Not (rs.EOF and rs.BOF) then

' Sort by last modified, newest first

rs.Sort = "datelastmodified desc"

' Move recordset pointer to first record

rs.MoveFirst

' Loop through recordset

Do While Not rs.EOF

' get path from recordset

dFile = fso.GetFile(rs.Fields("filepath"))

' get filename from path

dFileName = fso.GetFileName(dFile)

' Check if backupName is in the filename

if InStr(1, dFileName, backupName, 1) Then

i=i+1

' wait until >iNum matches

if i > iNum Then

' Delete file, ignore errors

On Error Resume Next

fso.DeleteFile rs.Fields("filepath"), true

On Error Goto 0

End If

rs.MoveNext

Loop

End If

Wscript.Echo "Backup complete at " & backupFile

Download
backup-folder.vbs (3.4 KiB, 3,237 hits)

4 Comments

Adding extra fields to Fail2Ban mails

Posted on June 25, 2014.

I needed fail2ban to give the full hostname in an email and not just the short system name to reduce ambiguity.

To do this I copied the action “sendmail-whois” to “local_sendmail-whois”

cp /etc/fail2ban/actions.d/sendmail-whois.conf /etc/fail2ban/actions.d/sendmail-whois.conf

1	cp /etc/fail2ban/actions.d/sendmail-whois.conf /etc/fail2ban/actions.d/sendmail-whois.conf

And then adjusted /etc/fail2ban/actions.d/sendmail-whois.conf by editing the actionstart, actionstop and actionban sections. These simply run the sendmail command with the given Subject, Date, From, To and body. I swapped uname -n with <hostname> and adjusted the format for each section.

[Definition]

# Option:  actionstart
# Notes.:  command executed once at the start of Fail2Ban.
# Values:  CMD
#
actionstart = printf %%b "Subject: Fail2Ban / <hostname> / <name> / Started
              Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"`
              From: <sendername> <<sender>>
              To: <dest>\n
              Hi,\n
              The jail <name> has been started successfully on <hostname>.\n
              Regards,\n
              Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>

# Option:  actionstop
# Notes.:  command executed once at the end of Fail2Ban
# Values:  CMD
#
actionstop = printf %%b "Subject: Fail2Ban / <hostname> / <name> / Stopped
             Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"`
             From: <sendername> <<sender>>
             To: <dest>\n
             Hi,\n
             The jail <name> has been stopped on <hostname>.\n
             Regards,\n
             Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>

# Option:  actioncheck
# Notes.:  command executed once before each actionban command
# Values:  CMD
#
actioncheck =

# Option:  actionban
# Notes.:  command executed when banning an IP. Take care that the
#          command is executed with Fail2Ban user rights.
# Tags:    See jail.conf(5) man page
# Values:  CMD
#
actionban = printf %%b "Subject: Fail2Ban / <hostname> / <name> /  Banned <ip>
            Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"`
            From: <sendername> <<sender>>
            To: <dest>\n
            Hi,\n
            The IP <ip> has just been banned by Fail2Ban on <hostname> after
            <failures> attempts against <name>.\n\n
            Here is more information about <ip>:\n
            `/usr/bin/whois <ip> || echo missing whois program`\n
            Regards,\n
            Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>

[Definition]

# Option: actionstart

# Notes.: command executed once at the start of Fail2Ban.

# Values: CMD

actionstart = printf %%b "Subject: Fail2Ban / <hostname> / <name> / Started

Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"`

From: <sendername> <<sender>>

To: <dest>\n

Hi,\n

The jail <name> has been started successfully on <hostname>.\n

Regards,\n

Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>

# Option: actionstop

# Notes.: command executed once at the end of Fail2Ban

# Values: CMD

actionstop = printf %%b "Subject: Fail2Ban / <hostname> / <name> / Stopped

Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"`

From: <sendername> <<sender>>

To: <dest>\n

Hi,\n

The jail <name> has been stopped on <hostname>.\n

Regards,\n

Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>

# Option: actioncheck

# Notes.: command executed once before each actionban command

# Values: CMD

actioncheck =

# Option: actionban

# Notes.: command executed when banning an IP. Take care that the

# command is executed with Fail2Ban user rights.

# Tags: See jail.conf(5) man page

# Values: CMD

actionban = printf %%b "Subject: Fail2Ban / <hostname> / <name> / Banned <ip>

Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"`

From: <sendername> <<sender>>

To: <dest>\n

Hi,\n

The IP <ip> has just been banned by Fail2Ban on <hostname> after

<failures> attempts against <name>.\n\n

Here is more information about <ip>:\n

`/usr/bin/whois <ip> || echo missing whois program`\n

Regards,\n

Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>

I then added this new action to jail.conf

action_local_sendmail-whois = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
                        local_sendmail-whois[name=%(__name__)s, dest="%(destemail)s", protocol="%(protocol)s", chain="%(chain)s", sendername="%(sendername)s", hostname="`hostname --fqdn`"]

1 2	action_local_sendmail-whois = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"] local_sendmail-whois[name=%(__name__)s, dest="%(destemail)s", protocol="%(protocol)s", chain="%(chain)s", sendername="%(sendername)s", hostname="`hostname --fqdn`"]

By default I use the “action_” action, which doesn’t send an email. And then in the jails that I do want an email I just put

action = %(local_sendmail-whois)s

1	action = %(local_sendmail-whois)s

#!/usr/bin/nooblet.org

/* not just your average nub */

Clear ARP / Neighbour cache on Linux

Hide Dropbox File Explorer Icon

Self-Hosted Dynamic DNS with BIND9 & PHP

Using VBScript to Create Dated Backups with 7-Zip

Adding extra fields to Fail2Ban mails