Subversion Repositories ALCASAR

Rev

Rev 3179 | Rev 3190 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 3179 Rev 3180
Line 1... Line 1...
1
#!/bin/bash
1
#!/bin/bash
2
#  $Id: alcasar.sh 3179 2024-03-03 23:23:58Z rexy $
2
#  $Id: alcasar.sh 3180 2024-03-04 17:33:37Z rexy $
3
 
3
 
4
# ALCASAR is a Free and open source NAC (Network Access Controler) created by Franck BOUIJOUX (3abtux), Pascal LEVANT and Richard REY (Rexy)
4
# ALCASAR is a Free and open source NAC (Network Access Controler) created by Franck BOUIJOUX (3abtux), Pascal LEVANT and Richard REY (Rexy)
5
# ALCASAR is based on a stripped Mageia (LSB) with the following open source softwares Coovachilli, freeradius, mariaDB, lighttpd, php, netfilter, e2guardian, ntpd, openssl, unbound, gammu, Ulog, fail2ban, vnstat, wkhtml2pdf, ipt_NETFLOW, NFsen and NFdump
5
# ALCASAR is based on a stripped Mageia (LSB) with the following open source softwares Coovachilli, freeradius, mariaDB, lighttpd, php, netfilter, e2guardian, ntpd, openssl, unbound, gammu, Ulog, fail2ban, vnstat, wkhtml2pdf, ipt_NETFLOW, NFsen and NFdump
6
# contact : info@alcasar.net
6
# contact : info@alcasar.net
7
 
7
 
Line 206... Line 206...
206
			if [ $local_unbound_unit -ne 4 ]; then
206
			if [ $local_unbound_unit -ne 4 ]; then
207
				cp -f /lib/systemd/system/unbound*.service /etc/systemd/system/
207
				cp -f /lib/systemd/system/unbound*.service /etc/systemd/system/
208
			fi
208
			fi
209
			mode="update"
209
			mode="update"
210
		fi
210
		fi
-
 
211
	else
-
 
212
		license
211
	fi
213
	fi
212
# Free /var (when updating) and test free space
214
# Free /var (when updating) and test free space
213
	[ -d /var/log/netflow ] && rm -rf /var/log/netflow  # remove old porttracker RRD database
215
	[ -d /var/log/netflow ] && rm -rf /var/log/netflow  # remove old porttracker RRD database
214
	journalctl -q --vacuum-files 1  # remove previous journal logs
216
	journalctl -q --vacuum-files 1  # remove previous journal logs
215
	free_space=`df -BG --output=avail /var|tail -1|tr -d '[:space:]G'`
217
	free_space=`df -BG --output=avail /var|tail -1|tr -d '[:space:]G'`
Line 2081... Line 2083...
2081
{
2083
{
2082
	[ -e /etc/php.d/05_mail.ini.default ] || cp /etc/php.d/05_mail.ini /etc/php.d/05_mail.ini.default
2084
	[ -e /etc/php.d/05_mail.ini.default ] || cp /etc/php.d/05_mail.ini /etc/php.d/05_mail.ini.default
2083
	$SED "s?^mail.add_x_header =.*?mail.add_x_header = Off?g" /etc/php.d/05_mail.ini
2085
	$SED "s?^mail.add_x_header =.*?mail.add_x_header = Off?g" /etc/php.d/05_mail.ini
2084
	[ -e /etc/postfix/main.cf.orig ] || cp /etc/postfix/main.cf /etc/postfix/main.cf.orig
2086
	[ -e /etc/postfix/main.cf.orig ] || cp /etc/postfix/main.cf /etc/postfix/main.cf.orig
2085
	$SED "s?^inet_protocols =.*?inet_protocols = ipv4?g" /etc/postfix/main.cf
2087
	$SED "s?^inet_protocols =.*?inet_protocols = ipv4?g" /etc/postfix/main.cf
2086
	$SED "s?^smtp_tls_security_level =.*?smtp_tls_security_level = encrypt?g" /etc/postfix/main.cf	
2088
	$SED "s?^smtp_tls_security_level =.*?smtp_tls_security_level = encrypt?g" /etc/postfix/main.cf
-
 
2089
	$SED "s?^smtpd_banner =.*?smtpd_banner = $myhostname ESMTP?g" /etc/postfix/main.cf
2087
	cat << EOT >> /etc/postfix/main.cf
2090
	cat << EOT >> /etc/postfix/main.cf
2088
smtputf8_enable = no
2091
smtputf8_enable = no
2089
smtp_use_tls = yes
2092
smtp_use_tls = yes
2090
smtp_tls_wrappermode = yes
2093
smtp_tls_wrappermode = yes
2091
smtp_sasl_auth_enable = yes
2094
smtp_sasl_auth_enable = yes
Line 2329... Line 2332...
2329
	-\? | -h* | --h*)
2332
	-\? | -h* | --h*)
2330
		echo "$usage"
2333
		echo "$usage"
2331
		exit 0
2334
		exit 0
2332
		;;
2335
		;;
2333
	-i | --install)
2336
	-i | --install)
2334
		for func in license system_testing network_testing
2337
		for func in system_testing network_testing
2335
		do
2338
		do
2336
			header_install
2339
			header_install
2337
			$func
2340
			$func
2338
			if [ $DEBUG_ALCASAR == "on" ]
2341
			if [ $DEBUG_ALCASAR == "on" ]
2339
			then
2342
			then