kevin
353bfa88f2
- 每个连接记录一条日志：协议、端口、来源 IP、用户名、成功/失败、 失败原因（密码错误/IP封禁/中继被拒/发件人伪造/未认证发信等）、 操作摘要、消息数与会话时长 - 管理后台新增「协议日志」页：按协议/状态/IP/用户名/时间筛选， 今日与历史成功/失败统计卡片，分页查看，可手动清理 - 后台每 6 小时自动清理超出 protocol_log_keep_days（默认30天） 的日志；新增 [web] protocol_log_keep_days 配置项 - 修复 POP3 认证既有 bug：handleUSER 丢弃邮箱域名导致 PASS 永远失败 - 新增 store 单测、SMTP/POP3 端到端测试与模板渲染测试
94 lines
2.4 KiB
Go
94 lines
2.4 KiB
Go
package imap_server
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"fmt"
|
|
"log"
|
|
"net"
|
|
"strconv"
|
|
|
|
"mail_go/config"
|
|
"mail_go/internal/store"
|
|
"mail_go/internal/tlsutil"
|
|
|
|
"github.com/emersion/go-imap/backend"
|
|
imapserver "github.com/emersion/go-imap/server"
|
|
)
|
|
|
|
// IMAPServer wraps a go-imap Server and provides mailbox access capability.
|
|
type IMAPServer struct {
|
|
stores *store.Stores
|
|
cfg config.IMAPConfig
|
|
banCfg config.BanConfig
|
|
tlsLoader *tlsutil.Loader
|
|
}
|
|
|
|
// NewIMAPServer creates a new IMAP server instance. tlsLoader may be nil
|
|
// when TLS is not configured.
|
|
func NewIMAPServer(cfg config.IMAPConfig, stores *store.Stores, tlsLoader *tlsutil.Loader, banCfg config.BanConfig) *IMAPServer {
|
|
return &IMAPServer{
|
|
stores: stores,
|
|
cfg: cfg,
|
|
banCfg: banCfg,
|
|
tlsLoader: tlsLoader,
|
|
}
|
|
}
|
|
|
|
func (s *IMAPServer) tlsConfig() (*tls.Config, error) {
|
|
if s.tlsLoader == nil {
|
|
return nil, fmt.Errorf("IMAP TLS certificate or key not configured")
|
|
}
|
|
// GetCertificate 每次握手按需重载证书，证书更新后无需重启服务
|
|
return &tls.Config{GetCertificate: s.tlsLoader.GetCertificate}, nil
|
|
}
|
|
|
|
// newServer creates a configured imapserver.Server with the given address.
|
|
func (s *IMAPServer) newServer(addr string, tlsConfig *tls.Config) *imapserver.Server {
|
|
be := &imapBackend{stores: s.stores, banCfg: s.banCfg, port: portOf(addr)}
|
|
srv := imapserver.New(be)
|
|
srv.Addr = addr
|
|
srv.TLSConfig = tlsConfig
|
|
srv.AllowInsecureAuth = tlsConfig == nil
|
|
return srv
|
|
}
|
|
|
|
// portOf 从监听地址解析端口号，失败返回 0。
|
|
func portOf(addr string) int {
|
|
_, portStr, err := net.SplitHostPort(addr)
|
|
if err != nil {
|
|
return 0
|
|
}
|
|
port, err := strconv.Atoi(portStr)
|
|
if err != nil {
|
|
return 0
|
|
}
|
|
return port
|
|
}
|
|
|
|
// Start starts the IMAP server on the plain-text port.
|
|
func (s *IMAPServer) Start() error {
|
|
tlsConfig, err := s.tlsConfig()
|
|
if err != nil {
|
|
log.Printf("IMAP STARTTLS 未启用: %v", err)
|
|
}
|
|
srv := s.newServer(s.cfg.Addr, tlsConfig)
|
|
log.Printf("IMAP server listening on %s", s.cfg.Addr)
|
|
return srv.ListenAndServe()
|
|
}
|
|
|
|
// StartTLS starts the IMAP server on the TLS port.
|
|
func (s *IMAPServer) StartTLS() error {
|
|
tlsConfig, err := s.tlsConfig()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
srv := s.newServer(s.cfg.TLSAddr, tlsConfig)
|
|
|
|
log.Printf("IMAPS server listening on %s", s.cfg.TLSAddr)
|
|
return srv.ListenAndServeTLS()
|
|
}
|
|
|
|
// ensure imapBackend satisfies backend.Backend at compile time
|
|
var _ backend.Backend = (*imapBackend)(nil)
|