Added inbound rejections to failed deliveries

app/Console/Commands/ParsePostfixMailLog.php

@@ -0,0 +1,193 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\Alias;
+use App\Models\FailedDelivery;
+use Carbon\Carbon;
+use Illuminate\Console\Command;
+use Illuminate\Database\QueryException;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Log;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+class ParsePostfixMailLog extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'anonaddy:parse-postfix-mail-log';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Parse Postfix log for inbound rejections and store them';
+
+    /**
+     * Execute the console command.
+     *
+     * @return int
+     */
+    public function handle()
+    {
+        $logPath = config('anonaddy.postfix_log_path', '/var/log/mail.log');
+
+        if (! file_exists($logPath) || ! is_readable($logPath)) {
+            $this->error("Cannot read log file: {$logPath}");
+
+            return 1;
+        }
+
+        $positionFile = 'postfix_log_position.txt';
+        $lastPosition = Storage::disk('local')->exists($positionFile)
+            ? (int) Storage::disk('local')->get($positionFile)
+            : 0;
+
+        $fileSize = filesize($logPath);
+
+        // If the file is smaller than our last position, it was likely rotated
+        if ($fileSize < $lastPosition) {
+            $lastPosition = 0;
+        }
+
+        if ($fileSize === $lastPosition) {
+            return 0;
+        }
+
+        $handle = fopen($logPath, 'r');
+        if (! $handle) {
+            $this->error("Failed to open log file: {$logPath}");
+
+            return 1;
+        }
+
+        fseek($handle, $lastPosition);
+
+        $allDomains = config('anonaddy.all_domains', []);
+
+        $count = 0;
+        $storeErrors = 0;
+
+        // Pattern to match syslog and ISO8601 timestamps
+        $pattern = '/^(.*?)\s+(?:[^\s]+\s+)?postfix\/(?:smtpd|cleanup)\[\d+\]:\s*(?:[A-Z0-9]+:\s*)?(?:reject|milter-reject|discard):\s*(?:RCPT|END-OF-MESSAGE) from\s*([^:]+):\s*(?:<[^>]+>:\s*)?(?:(\d{3}\s+\d\.\d\.\d|\d\.\d\.\d)\s+)?(.*?);\s*from=<(.*?)>\s*to=<(.*?)>/i';
+
+        while (($line = fgets($handle)) !== false) {
+            if (! preg_match('/(?:reject:|milter-reject:|discard:)/', $line) || ! str_contains($line, 'to=<')) {
+                continue;
+            }
+
+            if (preg_match($pattern, $line, $matches)) {
+                $timestampStr = trim($matches[1]);
+                $remoteMta = trim($matches[2]);
+                $smtpCodeStr = trim($matches[3] ?? '');
+                $reason = trim($matches[4]);
+                $sender = trim($matches[5]);
+                $recipient = trim($matches[6]);
+
+                $smtpCode = '';
+                if ($smtpCodeStr) {
+                    $parts = explode(' ', $smtpCodeStr);
+                    $smtpCode = $parts[0];
+                    $reason = $smtpCodeStr.' '.$reason;
+                } elseif (preg_match('/^(\d{3})\s+(.*)$/', $reason, $reasonMatches)) {
+                    $smtpCode = $reasonMatches[1];
+                }
+
+                try {
+                    $attemptedAt = Carbon::parse($timestampStr);
+                    if ($attemptedAt->isFuture()) {
+                        $attemptedAt->subYear();
+                    }
+                } catch (\Exception $e) {
+                    $attemptedAt = now();
+                }
+
+                $recipientLower = strtolower($recipient);
+                $aliasLookup = $recipientLower;
+
+                if (str_contains($recipientLower, '+')) {
+                    $parts = explode('@', $recipientLower);
+                    if (count($parts) === 2) {
+                        $aliasLookup = explode('+', $parts[0])[0].'@'.$parts[1];
+                    }
+                }
+
+                $alias = Alias::withTrashed()->where('email', $aliasLookup)->first();
+                $userId = null;
+
+                if ($alias) {
+                    $userId = $alias->user_id;
+                }
+
+                if (! $userId) {
+                    continue;
+                }
+
+                $bounceType = 'hard';
+                if (str_contains(strtolower($reason), 'spam message rejected')) {
+                    $bounceType = 'spam';
+                }
+
+                $irDedupeKey = hash('sha256', $userId.'|'.($alias ? $alias->id : '').'|'.$attemptedAt->format('Y-m-d H:i:s'));
+
+                try {
+                    FailedDelivery::create([
+                        'user_id' => $userId,
+                        'alias_id' => $alias ? $alias->id : null,
+                        'email_type' => 'IR',
+                        'ir_dedupe_key' => $irDedupeKey,
+                        'sender' => $sender === '' ? '<>' : Str::limit($sender, 255),
+                        'destination' => $recipientLower,
+                        'remote_mta' => Str::limit($remoteMta, 255),
+                        'code' => Str::limit($reason, 255),
+                        'status' => $smtpCode ? Str::limit($smtpCode, 10) : null,
+                        'attempted_at' => $attemptedAt,
+                        'created_at' => $attemptedAt,
+                        'updated_at' => $attemptedAt,
+                        'bounce_type' => $bounceType,
+                    ]);
+
+                    $count++;
+                } catch (QueryException $e) {
+                    if ($this->isDuplicateKeyException($e)) {
+                        continue;
+                    }
+
+                    report($e);
+                    $storeErrors++;
+                }
+            }
+        }
+
+        $newPosition = ftell($handle);
+        Storage::disk('local')->put($positionFile, (string) $newPosition);
+
+        fclose($handle);
+
+        if ($count > 0) {
+            $this->info("Stored {$count} inbound rejections.");
+            Log::info("Stored {$count} inbound rejections.");
+        }
+
+        if ($storeErrors > 0) {
+            $this->warn("Failed to store {$storeErrors} inbound rejection(s); see application log for details.");
+            Log::info("Failed to store {$storeErrors} inbound rejection(s); see application log for details.");
+        }
+
+        return 0;
+    }
+
+    protected function isDuplicateKeyException(QueryException $e): bool
+    {
+        return match (DB::getDriverName()) {
+            'mysql' => ($e->errorInfo[1] ?? 0) === 1062,
+            'sqlite' => str_contains($e->getMessage(), 'UNIQUE constraint failed'),
+            default => ($e->errorInfo[0] ?? '') === '23000',
+        };
+    }
+}