Subversion Repositories ALCASAR

#/bin/sh

# $Id: alcasar-bl.sh 313 2010-11-08 22:41:19Z richard $

# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)

# By 3abtux & rexy

DIR_tmp="/tmp/blacklists"

FILE_tmp="/tmp/fileFilter.txt"

DIR_DANSGUARDIAN="/etc/dansguardian/lists"

BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"

BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"

DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"

DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"

IP_RETOUR="192.168.182.1"

BL_SERVER="cri.univ-tlse1.fr"

SED="/bin/sed -i"

# Récupération de l'archive de la BL Toulouse

function transfert () {

	mkdir -p $DIR_tmp

	cd $DIR_tmp

	wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz

}

# Décompression de la BL (en conservant la WL)

function install () {

	[ -d $DIR_DANSGUARDIAN ] || mkdir -p $DIR_DANSGUARDIAN

	[ -d $DIR_DANSGUARDIAN/blacklists/ossi ] && mv -f $DIR_DANSGUARDIAN/blacklists/ossi $DIR_tmp

	tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DANSGUARDIAN/

	[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DANSGUARDIAN/blacklists/

	cd /root

	rm -rf $DIR_tmp

}

# Adaptation de la BL Toulouse à la structure Dnsmasq

function adapt () {

	# On récupère le nom des répertoire (catégories)

	find $DIR_DANSGUARDIAN -type f -name domains > $BL_CATEGORIES

	# On supprime le suffice "/domains"

	$SED "s?\/domains??g" $BL_CATEGORIES

	rm -f $DIR_DNS_FILTER_AVAILABLE/*

	echo -n "Adaptation de la BL Toulouse. Veuillez patienter : "

	# On copie les fichiers de domaine pour chaque catégorie

	for PATH_FILE in `cat $BL_CATEGORIES`

	do

        	DOMAINE=`basename $PATH_FILE`

		echo -n "."

		# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü

		egrep  -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp

		$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp

		$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp

		# Mise en forme dnsmasq

		$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp

		mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf

	done

}

# Permet d'activer/désactiver les catégories de la BL

function cat_choice (){

	# un peu de ménage

	rm -rf $DIR_DNS_FILTER_ENABLED/*

	$SED "/\.Include/d" $DIR_DANSGUARDIAN/bannedsitelist $DIR_DANSGUARDIAN/bannedurllist

	# on adapte le fichier $BL_CATEGORIES au choix de catégorie 

	$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas

	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED`

	do

		$SED "/^.*$ENABLE_CATEGORIE/d" $BL_CATEGORIES

		$SED "1i\/etc\/dansguardian\/lists\/blacklist\/$ENABLE_CATEGORIE" $BL_CATEGORIES

	done

	sort -o $FILE_tmp $BL_CATEGORIES 

	mv $FILE_tmp $BL_CATEGORIES

	# on affecte les catégories à dansguardian et dnsmasq

	for i in `cat $BL_CATEGORIES_ENABLED`

		do

		ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i

		# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist

		echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/urls>" >> $DIR_DANSGUARDIAN/bannedurllist

		done

}

usage="Usage: alcasar-bl.sh -on | -off | -download| -reload"

nb_args=$#

args=$1

if [ $nb_args -eq 0 ]

then

	nb_args=1

	args="-h"

fi

case $args in

	-\? | -h* | --h*)

		echo "$usage"

		exit 0

		;;

	# activation du filtrage

	-on)	

		cat_choice

		$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf

		service dansguardian restart

		service dnsmasq restart

		;;

	# désactivation du filtrage

	-off)

		rm -rf $DIR_DNS_FILTER_ENABLED/*

		$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf

		service dansguardian reload

		service dnsmasq restart

		;;

	# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq

	-download)

		rm -rf /tmp/con_ok.html

		`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`

		if [ ! -e /tmp/con_ok.html ]

		then

			echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"

		else 

			transfert

			install

			chown -R dansguardian:apache $DIR_DANSGUARDIAN

			chmod -R g+w $DIR_DANSGUARDIAN

			DATE=`date '+%d %B %Y - %Hh%M'`

			echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL

			rm -rf /tmp/con_ok.html

		fi

		adapt

		;;		

	# regénération suite à modification (choix catégories ou BL secondaire)

	-reload)

		# pour Dansguardian

		chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi

		chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi

		cat_choice

		service dansguardian reload

		# pour dnsmasq (noms de domaine réhabilités)

		if [ `wc -w $DIR_DANSGUARDIAN/exceptionsitelist|cut -d " " -f1` != "0" ]

		then

			for i in `cat $DIR_DANSGUARDIAN/exceptionsitelist`

			do

				$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*

			done

		fi

		cp -f $DIR_DANSGUARDIAN/blacklists/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf

		$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf

		service dnsmasq reload

;;

	*)

		echo "Argument inconnu :$1";

		echo "$usage"

		exit 1

		;;

esac