Subversion Repositories ALCASAR

Rev

Rev 260 | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 260 Rev 308
Line 1... Line 1...
1 
#/bin/sh
 1 
#/bin/sh
2 
# $Id: alcasar-bl.sh 260 2010-09-16 21:32:38Z richard $
 2 
# $Id: alcasar-bl.sh 308 2010-10-25 22:17:29Z richard $
3 
 
 3 
 
- 
 
 4 
# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)
4 
# Gestion des Blacklists/Whitelists
 5 
# By 3abtux & rexy
5 
 
 6 
 
6 
DIR_tmp="/root/blacklists"
 7 
DIR_tmp="/tmp/blacklists"
- 
 
 8 
FILE_tmp="/tmp/fileFilter.txt"
- 
 
 9 
BL_CATEGORIES=/usr/local/etc/alcasar-bl-categories
7 
DIR_DANSGUARDIAN="/etc/dansguardian/lists/"
 10 
DIR_DANSGUARDIAN="/etc/dansguardian/lists/"
- 
 
 11 
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
- 
 
 12 
DIR_DNS_FILTER_ENABLE="/usr/local/etc/alcasar-dnsfilter-enabled"
- 
 
 13 
IP_RETOUR="127.0.0.1"
8 
BL_SERVER="cri.univ-tlse1.fr"
 14 
BL_SERVER="cri.univ-tlse1.fr"
9 
SED="/bin/sed -i"
 15 
SED="/bin/sed -i"
10 
 
 - 
 
- 
 
 16 
# Récupération de l'archive de la BL Toulouse
11 
function transfert () {
 17 
function transfert () {
12 
	mkdir -p $DIR_tmp
 18 
	mkdir -p $DIR_tmp
13 
	cd $DIR_tmp
 19 
	cd $DIR_tmp
14 
	wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz
 20 
	wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz
15 
}
 21 
}
16 
 
 22 
 
- 
 
 23 
# Décompression de la BL (en conservant la WL)
17 
function install () {
 24 
function install () {
18 
	[ -d $DIR_DANSGUARDIAN ] || mkdir -p $DIR_DANSGUARDIAN
 25 
	[ -d $DIR_DANSGUARDIAN ] || mkdir -p $DIR_DANSGUARDIAN
19 
	[ -d $DIR_DANSGUARDIAN/blacklists/ossi ] && mv -f $DIR_DANSGUARDIAN/blacklists/ossi $DIR_tmp
 26 
	[ -d $DIR_DANSGUARDIAN/blacklists/ossi ] && mv -f $DIR_DANSGUARDIAN/blacklists/ossi $DIR_tmp
20 
	tar zxvf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DANSGUARDIAN
 27 
	tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DANSGUARDIAN
21 
	[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DANSGUARDIAN/blacklists/
 28 
	[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DANSGUARDIAN/blacklists/
22 
	cd /root
 29 
	cd /root
23 
	rm -rf $DIR_tmp
 30 
	rm -rf $DIR_tmp
24 
}
 31 
}
25 
 
 32 
 
- 
 
 33 
# Adaptation de la BL Toulouse à la structure Dnsmasq
- 
 
 34 
function adapt () {
- 
 
 35 
# On récupère le nom des répertoire (catégories)
- 
 
 36 
find $DIR_DANSGUARDIAN -type f -name domains > $FILE_tmp
- 
 
 37 
# On supprime le suffice "/domains"
- 
 
 38 
$SED "s?\/domains??g" $FILE_tmp
- 
 
 39 
rm -f $DIR_DNS_FILTER_AVAILABLE/*
- 
 
 40 
echo -n "Adaptation de la BL Toulouse. Veuillez patienter : "
- 
 
 41 
# On copie les fichiers de domaine pour chaque catégorie
- 
 
 42 
for PATH_FILE in `cat $FILE_tmp`
- 
 
 43 
do
- 
 
 44 
        DOMAINE=`basename $PATH_FILE`
- 
 
 45 
	echo -n "."
- 
 
 46 
	# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü
- 
 
 47 
	# cela supprime quelques domaines ... qui restent filtrés par dansguardian
- 
 
 48 
	egrep  -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
- 
 
 49 
	$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp
- 
 
 50 
	$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
- 
 
 51 
	# Mise en forme dnsmasq
- 
 
 52 
	$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp
- 
 
 53 
	mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
- 
 
 54 
done
- 
 
 55 
rm -f $FILE_tmp
- 
 
 56 
echo
- 
 
 57 
}
- 
 
 58 
 
- 
 
 59 
# Permet d'activer/désactiver les catégories de la BL
- 
 
 60 
function cat_choice (){
- 
 
 61 
rm -rf $DIR_DNS_FILTER_ENABLE
- 
 
 62 
for i in `cat $BL_CATEGORIES`
- 
 
 63 
	do
- 
 
 64 
	echo $i
- 
 
 65 
	done
- 
 
 66 
}
26 
usage="Usage: alcasar-bl.sh -on | -off | -download| -reload"
 67 
usage="Usage: alcasar-bl.sh -on | -off | -download| -reload"
27 
nb_args=$#
 68 
nb_args=$#
28 
args=$1
 69 
args=$1
29 
if [ $nb_args -eq 0 ]
 70 
if [ $nb_args -eq 0 ]
30 
then
 71 
then
Line 34... Line 75...
34 
case $args in
 75 
case $args in
35 
	-\? | -h* | --h*)
 76 
	-\? | -h* | --h*)
36 
		echo "$usage"
 77 
		echo "$usage"
37 
		exit 0
 78 
		exit 0
38 
		;;
 79 
		;;
- 
 
 80 
	# activation du filtrage
39 
	-on)
81 
	-on)
40 
		# activation du filtrage
 - 
 
41 
		$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf
 82 
		$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf
- 
 
 83 
		cat_choice
42 
		service dansguardian reload
 84 
		service dansguardian reload
43 
		/usr/local/bin/alcasar-dnsfilter-activate.sh
 - 
 
44 
		service dnsmasq restart
 85 
		service dnsmasq restart
45 
		;;
 86 
		;;
- 
 
 87 
	# désactivation du filtrage
46 
	-off)
 88 
	-off)
47 
		# désactivation du filtrage
 - 
 
48 
		$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf
 89 
		$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf
- 
 
 90 
		rm -rf $DIR_DNS_FILTER_ENABLE
49 
		service dansguardian reload
 91 
		service dansguardian reload
50 
		/usr/local/bin/alcasar-dnsfilter-activate.sh
 - 
 
51 
		service dnsmasq restart
 92 
		service dnsmasq restart
52 
		;;
 93 
		;;
- 
 
 94 
	# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq
53 
	-download)
 95 
	-download)
54 
		# Mise a jour de la blacklist 'Toulouse' et compilation de la base
 - 
 
55 
		rm -rf /tmp/con_ok.html
 96 
		rm -rf /tmp/con_ok.html
56 
		`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
 97 
		`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
57 
		if [ ! -e /tmp/con_ok.html ]
 98 
		if [ ! -e /tmp/con_ok.html ]
58 
		then
 99 
		then
59 
			echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"
 100 
			echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"
60 
		else
101 
		else
61 
			transfert
 102 
			transfert
62 
			install
 103 
			install
63 
			chown -R dansguardian:apache $DIR_DANSGUARDIAN
 104 
			chown -R dansguardian:apache $DIR_DANSGUARDIAN
64 
			chmod -R g+w $DIR_DANSGUARDIAN
 105 
			chmod -R g+w $DIR_DANSGUARDIAN
65 
			service dansguardian reload
 - 
 
66 
			DATE=`date '+%d %B %Y - %Hh%M'`
 106 
			DATE=`date '+%d %B %Y - %Hh%M'`
67 
			echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL
 107 
			echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL
68 
			rm -rf /tmp/con_ok.html
 108 
			rm -rf /tmp/con_ok.html
69 
		fi
 109 
		fi
- 
 
 110 
		adapt
70 
		;;
111 
		;;
- 
 
 112 
	# regénération suite à modification de la BL OSSI/RSSI
71 
	-reload)
 113 
	-reload)
72 
		# regénération de la base OSSI/RSSI
 114 
		# pour Dansguardian
73 
		chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi
 115 
		chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi
74 
		chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi
 116 
		chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi
75 
		service dansguardian reload
 117 
		service dansguardian reload
- 
 
 118 
		# pour dnsmasq
- 
 
 119 
		cp $DIR_DANSGUARDIAN/blacklists/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
- 
 
 120 
		$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
- 
 
 121 
		service dnsmasq reload
76 
		;;
 122 
;;
77 
	*)
 123 
	*)
78 
		echo "Argument inconnu :$1";
 124 
		echo "Argument inconnu :$1";
79 
		echo "$usage"
 125 
		echo "$usage"
80 
		exit 1
 126 
		exit 1
81 
		;;
 127 
		;;