whmcsKerioEmail/core/Helper/DnsHelper.php

<?php

namespace ThurData\Servers\KerioEmail\Core\Helper;
use ThurData\Servers\KerioEmail\Core\Models\Whmcs\Server;
use ThurData\Servers\KerioEmail\Api\KerioWhmcs;
use \WHMCS\Database\Capsule;

require_once '/usr/share/php/Net/DNS2.php';
use \Net\DNS2\Net_DNS2_Resolver as Net_DNS2_Resolver;

/**
 * Wrapper for WHMCS params passed to controler functions
 *
 * @autor ThurData <info@thurdata.ch>
 */
class DnsHelper
{
    use \ThurData\Servers\KerioEmail\Core\UI\Traits\WhmcsParams;

    public function __construct()
    {
        $this->params = $this->getWhmcsParamsByKeys(['domain', 'userid', 'serverhostname', 'serverusername', 'serverpassword', 'domainid', 'serverid', 'pid']);
        $this->server = Server::select('id', 'nameserver1ip', 'nameserver2ip')->findOrFail($this->params['serverid']);
//        $this->nameserver = array(trim($this->server->nameserver1ip), trim($this->server->nameserver2ip));
        $this->nameserver = array('127.0.0.1', '127.0.0.2'); //test
        $this->clientDomains = localAPI('GetClientsDomains', array('clientid' => $this->params['userid']));
        $api = new KerioWhmcs('whmcsKerioEmail', 'Thurdata', '1.0');
        try {
        	$api->login($this->params['serverhostname'], $this->params['serverusername'], $this->params['serverpassword']);
        } catch (KerioApiException $error) {
            logModuleCall(
                'kerioEmail',
                __FUNCTION__,
                $this->params,
                'Error: cannot login to ' . $this->params['kerioServer'],
        		$error->getMessage()
            );
        }
        $dkimSet = $api->getDkimDnsRecord($this->params['domain']);
        $dkimArray = explode(PHP_EOL,$dkimSet['detail']);
        $dkimValue = explode(":",$dkimArray[1]);
        $this->domainKey = ltrim($dkimValue[1]);
        $dkimName = explode(":",$dkimArray[0]);
        $this->dkimName = ltrim($dkimName[1]);
    }    
    
    public function KerioEmailCheckDNS()
    {
        $vars['maildomain'] = $this->params['domain'];
        $vars['dmarcconfig'] = $this->dmarcConfig;
        $vars['spfconfig'] = $this->spfConfig;
        $vars['domainkey'] = $this->domainKey;
        $vars['dkimname'] = $this->dkimName;
        if($this->clientDomains['totalresults'] == 0){
            $vars['selfdomain'] = FALSE;
            $vars['dmarcconfig'] = $this->dmarcConfig;
            $vars['spfconfig'] = $this->spfConfig;
            $vars['correctable'] = FALSE;
            return $vars;
        } else {
            $vars['selfdomain'] = TRUE;
        }
        $resolver = new \Net_DNS2_Resolver(array('nameservers' => $this->nameserver));
        try {
                $result = $resolver->query($this->params['domain'], 'MX');
                
        } catch(\Net_DNS2_Exception $e) {
                
                echo "::query() failed: ", $e->getMessage(), "\n";
        }
        $domainMX = $result->answer;
        try {
            $result = $resolver->query($this->params['domain'], 'TXT');
            
        } catch(\Net_DNS2_Exception $e) {
                
                echo "::query() failed: ", $e->getMessage(), "\n";
        }
        $domainTXT = $result->answer;
        $domainSPF = array();
        $domainDKIM = array();
        $domainDMARC = array();
        foreach($domainTXT as $txtRecord) {
            foreach($txtRecord->text as $txtData) {
                if(strstr($txtData,'v=spf')) {
                    array_push($domainSPF,$txtData);
                }
                if(strstr($txtData,'v=DKIM')) {
                    array_push($domainDKIM,$txtData);
                }
                if(strstr($txtData,'v=DMARC')) {
                    array_push($domainDMARC,$txtData);
                }
            }
        }
        # self hosted DNS
        $vars['selfDNS'] = FALSE;
        for($i=$this->clientDomains['startnumber'];$i<=$this->clientDomains['numreturned'];$i++) {
            if($this->params['domain'] == $this->clientDomains['domains']['domain'][$i]['domainname']) {
                $vars['selfDNS'] = TRUE;
                $vars['domainId'] = $this->clientDomains['domains']['domain'][$i]['id'];
            }
        }
        # SPF, multi verboten
        if (count($domainSPF) > 1) {
            $vars['multiSPF'] = TRUE;
            $vars['spf'] = 'wrong';
        } else {
            $vars['multiSPF'] = FALSE;
            if (empty($domainSPF)) {
                $vars['spf'] = 'unset';
            } else {        
                if($domainSPF[0] === $spfConfig) {
                    $vars['spf'] = 'set';
                } else {
                    $vars['spf'] = 'wrong';
                }
            }
        }
        # DKIM
        if (count($domainDKIM) > 1) {
            $vars['multiDKIM'] = TRUE;
        } else {
            $vars['multiDKIM'] = FALSE;
        }
        if (empty($domainDKIM)) {
            $vars['dkim'] = 'unset';
        } else {        
            $vars['dkim'] = 'set';
        }
        $vars['domainDKIM'] = $domainDKIM;
        # DMARC
        if (count($domainDMARC) > 1) {
            $vars['multiDMARC'] = TRUE;
        } else {
            $vars['multiDMARC'] = FALSE;
        }
        $vars['dmarc'] = 'wrong';
        if (empty($domainDMARC)) {
            $vars['dmarc'] = 'unset';
        } else {        
            foreach($domainDMARC as $dmarc) {
                if($dmarc === $dmarcConfig) {
                    $vars['dmarc'] = 'set';
                }
            }
        }
        $vars['domainDMARC'] = $domainDMARC;
        # MX
        if(count($domainMX) > 1) {
            $vars['multiMX'] = TRUE;
        } else {
            $vars['multiMX'] = FALSE;
        }
        if(empty($domainMX)){
            $vars['mx'] = 'unset';
            $vars['mxtarget'] = $this->params['serverhostname'];
        } else {
            $vars['domainMX'] = $domainMX;
            $domainMXrecord = array_shift($domainMX);
            $vars['mxtarget'] = $domainMXrecord->exchange;
            if($domainMXrecord->exchange == $this->params['serverhostname']) {
                $vars['mx'] = 'set';
            } else {
                $var['mx'] = 'wrong';
            }
        }
        // summary
        if($vars['mx'] == 'set' && $vars['dmarc'] == 'set' && $vars['dkim'] == 'set' && $vars['spf'] == 'set') {
            $vars['dnscheck'] = TRUE;
        } else {
            $vars['dnscheck'] = FALSE; 
            $vars['correctable'] = TRUE;
        }
        return $vars;
    }

    function KerioEmailsetDNS()
    {
        return 'success';
        $zoneIDcollection = Capsule::table('dns_manager2_zone')
            ->select('id')
            ->where('name', '=', $this->params['domain'])
            ->get();
        $zoneIDobj = $zoneIDcollection[0];
        $zoneID = $zoneIDobj->{'id'};
        if(!isset($zoneID)) {
            return 'Error: zone ID not found for domain ' . $this->params['domain'];
        }
        $dnsZone = localAPI('dnsmanager', array( 'dnsaction' => 'getZone', 'zone_id' => $zoneID));
        
            logModuleCall(
                'kerioEmail',
                __FUNCTION__,
                $this->params,
                'DEbug',
                $dnsZone['result']
            );

        if($dnsZone['result'] != 'success') {
            return 'Error: cloud not fetch zone for ID ' . $zoneID;
        }
        $zoneRecords = array();
        $mxRecord = array(
            'line' => $this->params['domain'].'.|MX|0',
            'name' => '@',
            'type' => 'MX',
            'class' => 'IN',
            'data' => array(
                'preference' => '10',
                'exchange' => $this->params['serverhostname'],
            ),
        );
        array_push($zoneRecords, $mxRecord);
        $spfRecord = array(
            'line' => $this->params['domain'].'.|TXT|0',
            'name' => '@',
            'type' => 'TXT',
            'class' => 'IN',
            'data' => $this->spfConfig
        );
        array_push($zoneRecords, $spfRecord);
        $dmarcRecord = array(
            'line' => $this->params['domain'].'.|TXT|0',
            'name' => '@',
            'type' => 'TXT',
            'class' => 'IN',
            'data' => $this->dmarcConfig
        );
        array_push($zoneRecords, $dmarcRecord);
        foreach($dnsZone['data']->records as $record) {
            if($record->type == 'MX') continue;
            if(!$record->type === 'TXT') {
                // skip dmarc
                if(preg_match('/^v=DMARC1(.*)$/i', trim($record->rdata->txtdata,'"'))) continue; 
                // skip spf
                if(preg_match('/^v=spf(.*)$/i', trim($record->rdata->txtdata,'"'))) continue; 
                // skip own dkim
                if(($this->dkimName == $record->name) && ($this->domainKey == trim($record->rdata->txtdata,'"'))) continue; 
            };
            array_push($zoneRecords, $record);
        }


        logModuleCall(
            'kerioEmail',
            __FUNCTION__,
            $this->params,
            'DEbug',
            $zoneRecords
        );

/*        $result = localAPI('dnsmanager' ,
            array(
                'dnsaction' => 'updateZone',
                'zone_id' => $zoneID,
                'records' => $zoneRecords,
            )
        );
        if($result['result'] != 'success') {
            return 'Error: cloud not update zone for ID ' . $zoneID;
        } */
        return 'success';
    }
    
    function KerioEmailunsetMX()
    {
        $zoneIDcollection = Capsule::table('dns_manager2_zone')
            ->select('id')
            ->where('name', '=', $this->params['domain'])
            ->get();
        $zoneIDobj = $zoneIDcollection[0];
        $zoneID = $zoneIDobj->{'id'};
        if(!isset($zoneID)) {
            return 'Error: zone ID not found for domain ' . $this->params['domain'];
        }
        $dnsZone = localAPI('dnsmanager', array( 'dnsaction' => 'getZone', 'zone_id' => $zoneID));
        if($dnsZone['result'] != 'success') {
            return 'Error: cloud not fetch zone for ID ' . $zoneID;
        }
        $zoneRecords = array();
        foreach($dnsZone['data']->records as $record) {
            if($record->type == 'MX') continue;
            array_push($zoneRecords, $record);
        }


        logModuleCall(
            'kerioEmail',
            __FUNCTION__,
            $this->params,
            'DEbug',
            $zoneRecords
        );

/*        $result = localAPI('dnsmanager' ,
            array(
                'dnsaction' => 'updateZone',
                'zone_id' => $zoneID,
                'records' => $zoneRecords,
            )
        );
        if($result['result'] != 'success') {
            return 'Error: cloud not update zone for ID ' . $zoneID;
        } */
        return 'success';
}

}