WebSVN – ALCASAR – Diff – /scripts/alcasar-bl.sh


#/bin/sh
# $Id: alcasar-bl.sh 313 2010-11-08 22:41:19Z richard $
 
# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)
# By 3abtux & rexy
 
DIR_tmp="/tmp/blacklists"
FILE_tmp="/tmp/fileFilter.txt"
DIR_DANSGUARDIAN="/etc/dansguardian/lists"
BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"
BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"
IP_RETOUR="192.168.182.1"
BL_SERVER="cri.univ-tlse1.fr"
SED="/bin/sed -i"
# Récupération de l'archive de la BL Toulouse
function transfert () {
	mkdir -p $DIR_tmp
	cd $DIR_tmp
	wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz
}
 
# Décompression de la BL (en conservant la WL)
function install () {
	[ -d $DIR_DANSGUARDIAN ] || mkdir -p $DIR_DANSGUARDIAN
	[ -d $DIR_DANSGUARDIAN/blacklists/ossi ] && mv -f $DIR_DANSGUARDIAN/blacklists/ossi $DIR_tmp
	tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DANSGUARDIAN/
	[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DANSGUARDIAN/blacklists/
	cd /root
	rm -rf $DIR_tmp
}
 
# Adaptation de la BL Toulouse à la structure Dnsmasq
function adapt () {
	# On récupère le nom des répertoire (catégories)
	find $DIR_DANSGUARDIAN -type f -name domains > $BL_CATEGORIES
	# On supprime le suffice "/domains"
	$SED "s?\/domains??g" $BL_CATEGORIES
	rm -f $DIR_DNS_FILTER_AVAILABLE/*
	echo -n "Adaptation de la BL Toulouse. Veuillez patienter : "
	# On copie les fichiers de domaine pour chaque catégorie
	for PATH_FILE in `cat $BL_CATEGORIES`
	do
        	DOMAINE=`basename $PATH_FILE`
		echo -n "."
		# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü
		egrep  -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
		$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp
		$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
		# Mise en forme dnsmasq
		$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp
		mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
	done
 
 
 
 
 
 
 
 
}
 
# Permet d'activer/désactiver les catégories de la BL
function cat_choice (){
	# un peu de ménage
	rm -rf $DIR_DNS_FILTER_ENABLED/*
	$SED "/\.Include/d" $DIR_DANSGUARDIAN/bannedsitelist $DIR_DANSGUARDIAN/bannedurllist
	# on adapte le fichier $BL_CATEGORIES au choix de catégorie 
	$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas
	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED`
	do
		$SED "/^.*$ENABLE_CATEGORIE/d" $BL_CATEGORIES
		$SED "1i\/etc\/dansguardian\/lists\/blacklist\/$ENABLE_CATEGORIE" $BL_CATEGORIES
	done
	sort -o $FILE_tmp $BL_CATEGORIES 
	mv $FILE_tmp $BL_CATEGORIES
	# on affecte les catégories à dansguardian et dnsmasq
	for i in `cat $BL_CATEGORIES_ENABLED`
		do
		ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i
		# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist
		echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/urls>" >> $DIR_DANSGUARDIAN/bannedurllist
		done
}
usage="Usage: alcasar-bl.sh -on | -off | -download| -reload"
nb_args=$#
args=$1
if [ $nb_args -eq 0 ]
then
	nb_args=1
	args="-h"
fi
case $args in
	-\? | -h* | --h*)
		echo "$usage"
		exit 0
		;;
	# activation du filtrage
	-on)	
		cat_choice
		$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf
		service dansguardian restart
		service dnsmasq restart
		;;
	# désactivation du filtrage
	-off)
		rm -rf $DIR_DNS_FILTER_ENABLED/*
		$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf
		service dansguardian reload
		service dnsmasq restart
		;;
	# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq
	-download)
		rm -rf /tmp/con_ok.html
		`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
		if [ ! -e /tmp/con_ok.html ]
		then
			echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"
		else 
			transfert
			install
			chown -R dansguardian:apache $DIR_DANSGUARDIAN
			chmod -R g+w $DIR_DANSGUARDIAN
			DATE=`date '+%d %B %Y - %Hh%M'`
			echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL
			rm -rf /tmp/con_ok.html
		fi
		adapt
		;;		
	# regénération suite à modification (choix catégories ou BL secondaire)
	-reload)
		# pour Dansguardian
		chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi
		chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi
		cat_choice
		service dansguardian reload
		# pour dnsmasq (noms de domaine réhabilités)
		if [ `wc -w $DIR_DANSGUARDIAN/exceptionsitelist|cut -d " " -f1` != "0" ]
		then
			for i in `cat $DIR_DANSGUARDIAN/exceptionsitelist`
			do
				$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*
			done
		fi
		cp -f $DIR_DANSGUARDIAN/blacklists/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
		$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
		service dnsmasq reload
;;
	*)
		echo "Argument inconnu :$1";
		echo "$usage"
		exit 1
		;;
esac
 
 

Rev 311	Rev 313
1	`#/bin/sh`	1	`#/bin/sh`
2	`# $Id: alcasar-bl.sh 311 2010-11-07 22:31:52Z richard $`	2	`# $Id: alcasar-bl.sh 313 2010-11-08 22:41:19Z richard $`
3		3
4	`# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)`	4	`# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)`
5	`# By 3abtux & rexy`	5	`# By 3abtux & rexy`
6		6
7	`DIR_tmp="/tmp/blacklists"`	7	`DIR_tmp="/tmp/blacklists"`
8	`FILE_tmp="/tmp/fileFilter.txt"`	8	`FILE_tmp="/tmp/fileFilter.txt"`
9	`DIR_DANSGUARDIAN="/etc/dansguardian/lists"`	9	`DIR_DANSGUARDIAN="/etc/dansguardian/lists"`
10	`BL_CATEGORIES_AVAILABLE="/usr/local/etc/alcasar-bl-categories-available"`	10	`BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"`
11	`BL_CATEGORIES_DEFAULT="/usr/local/etc/alcasar-bl-categories-default"`	11	`BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"`
12	`DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"`	12	`DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"`
13	`DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"`	13	`DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"`
14	`IP_RETOUR="192.168.182.1"`	14	`IP_RETOUR="192.168.182.1"`
15	`BL_SERVER="cri.univ-tlse1.fr"`	15	`BL_SERVER="cri.univ-tlse1.fr"`
16	`SED="/bin/sed -i"`	16	`SED="/bin/sed -i"`
17	`# Récupération de l'archive de la BL Toulouse`	17	`# Récupération de l'archive de la BL Toulouse`
18	`function transfert () {`	18	`function transfert () {`
19	`mkdir -p $DIR_tmp`	19	`mkdir -p $DIR_tmp`
20	`cd $DIR_tmp`	20	`cd $DIR_tmp`
21	`wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz`	21	`wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz`
22	`}`	22	`}`
23		23
24	`# Décompression de la BL (en conservant la WL)`	24	`# Décompression de la BL (en conservant la WL)`
25	`function install () {`	25	`function install () {`
26	`[ -d $DIR_DANSGUARDIAN ] \|\| mkdir -p $DIR_DANSGUARDIAN`	26	`[ -d $DIR_DANSGUARDIAN ] \|\| mkdir -p $DIR_DANSGUARDIAN`
27	`[ -d $DIR_DANSGUARDIAN/blacklists/ossi ] && mv -f $DIR_DANSGUARDIAN/blacklists/ossi $DIR_tmp`	27	`[ -d $DIR_DANSGUARDIAN/blacklists/ossi ] && mv -f $DIR_DANSGUARDIAN/blacklists/ossi $DIR_tmp`
28	`tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DANSGUARDIAN/`	28	`tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DANSGUARDIAN/`
29	`[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DANSGUARDIAN/blacklists/`	29	`[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DANSGUARDIAN/blacklists/`
30	`cd /root`	30	`cd /root`
31	`rm -rf $DIR_tmp`	31	`rm -rf $DIR_tmp`
32	`}`	32	`}`
33		33
34	`# Adaptation de la BL Toulouse à la structure Dnsmasq`	34	`# Adaptation de la BL Toulouse à la structure Dnsmasq`
35	`function adapt () {`	35	`function adapt () {`
36	`# On récupère le nom des répertoire (catégories)`	36	`# On récupère le nom des répertoire (catégories)`
37	`find $DIR_DANSGUARDIAN -type f -name domains > $BL_CATEGORIES_AVAILABLE`	37	`find $DIR_DANSGUARDIAN -type f -name domains > $BL_CATEGORIES`
38	`# On supprime le suffice "/domains"`	38	`# On supprime le suffice "/domains"`
39	`$SED "s?\/domains??g" $BL_CATEGORIES_AVAILABLE`	39	`$SED "s?\/domains??g" $BL_CATEGORIES`
40	`rm -f $DIR_DNS_FILTER_AVAILABLE/*`	40	`rm -f $DIR_DNS_FILTER_AVAILABLE/*`
41	`echo -n "Adaptation de la BL Toulouse. Veuillez patienter : "`	41	`echo -n "Adaptation de la BL Toulouse. Veuillez patienter : "`
42	`# On copie les fichiers de domaine pour chaque catégorie`	42	`# On copie les fichiers de domaine pour chaque catégorie`
43	for PATH_FILE in `cat $BL_CATEGORIES_AVAILABLE`	43	for PATH_FILE in `cat $BL_CATEGORIES`
44	`do`	44	`do`
45	DOMAINE=`basename $PATH_FILE`	45	DOMAINE=`basename $PATH_FILE`
46	`echo -n "."`	46	`echo -n "."`
47	`# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü`	47	`# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü`
48	`egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp`	48	`egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp`
49	`$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp`	49	`$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp`
50	`$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp`	50	`$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp`
51	`# Mise en forme dnsmasq`	51	`# Mise en forme dnsmasq`
52	`$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp`	52	`$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp`
53	`mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf`	53	`mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf`
54	`done`	54	`done`
55	`# on adapte le fichier $BL_CATEGORIES_AVAILABLE au choix de catégorie par défaut`	-
56	`$SED "s?^[^#]?#&?g" $BL_CATEGORIES_AVAILABLE # on commente ce qui ne l'est pas`	-
57	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_DEFAULT`	-
58	`do`	-
59	`$SED "/^.*$ENABLE_CATEGORIE/d" $BL_CATEGORIES_AVAILABLE`	-
60	`$SED "1i\/etc\/dansguardian\/lists\/blacklist\/$ENABLE_CATEGORIE" $BL_CATEGORIES_AVAILABLE`	-
61	`done`	-
62	`echo`	-
63	`}`	55	`}`
64		56
65	`# Permet d'activer/désactiver les catégories de la BL`	57	`# Permet d'activer/désactiver les catégories de la BL`
66	`function cat_choice (){`	58	`function cat_choice (){`
67	`# un peu de ménage`	59	`# un peu de ménage`
68	`rm -rf $DIR_DNS_FILTER_ENABLED/*`	60	`rm -rf $DIR_DNS_FILTER_ENABLED/*`
69	`$SED "/\.Include/d" $DIR_DANSGUARDIAN/bannedsitelist $DIR_DANSGUARDIAN/bannedurllist`	61	`$SED "/\.Include/d" $DIR_DANSGUARDIAN/bannedsitelist $DIR_DANSGUARDIAN/bannedurllist`
-		62	`# on adapte le fichier $BL_CATEGORIES au choix de catégorie`
-		63	`$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas`
-		64	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED`
-		65	`do`
-		66	`$SED "/^.*$ENABLE_CATEGORIE/d" $BL_CATEGORIES`
-		67	`$SED "1i\/etc\/dansguardian\/lists\/blacklist\/$ENABLE_CATEGORIE" $BL_CATEGORIES`
-		68	`done`
-		69	`sort -o $FILE_tmp $BL_CATEGORIES`
-		70	`mv $FILE_tmp $BL_CATEGORIES`
70	`# on affecte les catégories`	71	`# on affecte les catégories à dansguardian et dnsmasq`
71	for i in `cat $BL_CATEGORIES_DEFAULT`	72	for i in `cat $BL_CATEGORIES_ENABLED`
72	`do`	73	`do`
73	`ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i`	74	`ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i`
74	`# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist`	75	`# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist`
75	`echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/urls>" >> $DIR_DANSGUARDIAN/bannedurllist`	76	`echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/urls>" >> $DIR_DANSGUARDIAN/bannedurllist`
76	`done`	77	`done`
77	`}`	78	`}`
78	`usage="Usage: alcasar-bl.sh -on \| -off \| -download\| -reload"`	79	`usage="Usage: alcasar-bl.sh -on \| -off \| -download\| -reload"`
79	`nb_args=$#`	80	`nb_args=$#`
80	`args=$1`	81	`args=$1`
81	`if [ $nb_args -eq 0 ]`	82	`if [ $nb_args -eq 0 ]`
82	`then`	83	`then`
83	`nb_args=1`	84	`nb_args=1`
84	`args="-h"`	85	`args="-h"`
85	`fi`	86	`fi`
86	`case $args in`	87	`case $args in`
87	`-\? \| -h* \| --h*)`	88	`-\? \| -h* \| --h*)`
88	`echo "$usage"`	89	`echo "$usage"`
89	`exit 0`	90	`exit 0`
90	`;;`	91	`;;`
91	`# activation du filtrage`	92	`# activation du filtrage`
92	`-on)`	93	`-on)`
93	`cat_choice`	94	`cat_choice`
94	`$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf`	95	`$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf`
95	`service dansguardian restart`	96	`service dansguardian restart`
96	`service dnsmasq restart`	97	`service dnsmasq restart`
97	`;;`	98	`;;`
98	`# désactivation du filtrage`	99	`# désactivation du filtrage`
99	`-off)`	100	`-off)`
100	`rm -rf $DIR_DNS_FILTER_ENABLED/*`	101	`rm -rf $DIR_DNS_FILTER_ENABLED/*`
101	`$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf`	102	`$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf`
102	`service dansguardian reload`	103	`service dansguardian reload`
103	`service dnsmasq restart`	104	`service dnsmasq restart`
104	`;;`	105	`;;`
105	`# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq`	106	`# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq`
106	`-download)`	107	`-download)`
107	`rm -rf /tmp/con_ok.html`	108	`rm -rf /tmp/con_ok.html`
108	`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`	109	`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
109	`if [ ! -e /tmp/con_ok.html ]`	110	`if [ ! -e /tmp/con_ok.html ]`
110	`then`	111	`then`
111	`echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"`	112	`echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"`
112	`else`	113	`else`
113	`transfert`	114	`transfert`
114	`install`	115	`install`
115	`chown -R dansguardian:apache $DIR_DANSGUARDIAN`	116	`chown -R dansguardian:apache $DIR_DANSGUARDIAN`
116	`chmod -R g+w $DIR_DANSGUARDIAN`	117	`chmod -R g+w $DIR_DANSGUARDIAN`
117	DATE=`date '+%d %B %Y - %Hh%M'`	118	DATE=`date '+%d %B %Y - %Hh%M'`
118	`echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL`	119	`echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL`
119	`rm -rf /tmp/con_ok.html`	120	`rm -rf /tmp/con_ok.html`
120	`fi`	121	`fi`
121	`adapt`	122	`adapt`
122	`;;`	123	`;;`
123	`# regénération suite à modification de la BL secondaire`	124	`# regénération suite à modification (choix catégories ou BL secondaire)`
124	`-reload)`	125	`-reload)`
125	`# pour Dansguardian`	126	`# pour Dansguardian`
126	`chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi`	127	`chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi`
127	`chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi`	128	`chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi`
128	`cat_choice`	129	`cat_choice`
129	`service dansguardian reload`	130	`service dansguardian reload`
130	`# pour dnsmasq (noms de domaine réhabilités)`	131	`# pour dnsmasq (noms de domaine réhabilités)`
131	if [ `wc -w $DIR_DANSGUARDIAN/exceptionsitelist\|cut -d " " -f1` != "0" ]	132	if [ `wc -w $DIR_DANSGUARDIAN/exceptionsitelist\|cut -d " " -f1` != "0" ]
132	`then`	133	`then`
133	for i in `cat $DIR_DANSGUARDIAN/exceptionsitelist`	134	for i in `cat $DIR_DANSGUARDIAN/exceptionsitelist`
134	`do`	135	`do`
135	`$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/sect.conf`	136	`$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*`
136	`done`	137	`done`
137	`fi`	138	`fi`
-		139	`cp -f $DIR_DANSGUARDIAN/blacklists/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf`
138	`$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf`	140	`$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf`
139	`service dnsmasq reload`	141	`service dnsmasq reload`
140	`;;`	142	`;;`
141	`*)`	143	`*)`
142	`echo "Argument inconnu :$1";`	144	`echo "Argument inconnu :$1";`
143	`echo "$usage"`	145	`echo "$usage"`
144	`exit 1`	146	`exit 1`
145	`;;`	147	`;;`
146	`esac`	148	`esac`
147		149
148		150

Subversion Repositories ALCASAR

(root)/scripts/alcasar-bl.sh @ 3099 – Rev 311 → 313