Subversion Repositories ALCASAR

Rev

Rev 612 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 612 Rev 615
1 
#/bin/sh
 1 
#/bin/sh
2 
# $Id: alcasar-bl.sh 612 2011-05-22 21:19:27Z richard $
 2 
# $Id: alcasar-bl.sh 615 2011-05-24 21:47:25Z richard $
3 
 
 3 
 
4 
# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)
 4 
# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)
5 
# By 3abtux & rexy
 5 
# By 3abtux & rexy
6 
 
 6 
 
7 
CONF_FILE="/usr/local/etc/alcasar.conf"
 7 
CONF_FILE="/usr/local/etc/alcasar.conf"
8 
DIR_tmp="/tmp/blacklists"
 8 
DIR_tmp="/tmp/blacklists"
9 
FILE_tmp="/tmp/fileFilter.txt"
 9 
FILE_tmp="/tmp/fileFilter.txt"
10 
DIR_DG="/etc/dansguardian/lists"
 10 
DIR_DG="/etc/dansguardian/lists"
11 
DIR_DG_BL="$DIR_DG/blacklists"
 11 
DIR_DG_BL="$DIR_DG/blacklists"
12 
BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"
 12 
BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"
13 
BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"
 13 
BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"
14 
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
 14 
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
15 
DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"
 15 
DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"
16 
IP_RETOUR="192.168.182.1"
 16 
IP_RETOUR="192.168.182.1"
17 
BL_SERVER="cri.univ-tlse1.fr"
 17 
BL_SERVER="cri.univ-tlse1.fr"
18 
SED="/bin/sed -i"
 18 
SED="/bin/sed -i"
19 
# Récupération de l'archive de la BL Toulouse
 19 
# Récupération de l'archive de la BL Toulouse
20 
function transfert () {
 20 
function transfert () {
21 
	mkdir -p $DIR_tmp
 21 
	mkdir -p $DIR_tmp
22 
	cd $DIR_tmp
 22 
	cd $DIR_tmp
23 
	wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz
 23 
	wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz
24 
}
 24 
}
25 
 
 25 
 
26 
# Décompression de la BL (en conservant la WL)
 26 
# Décompression de la BL (en conservant la WL)
27 
function install () {
 27 
function install () {
28 
	[ -d $DIR_DG ] || mkdir -p $DIR_DG
 28 
	[ -d $DIR_DG ] || mkdir -p $DIR_DG
29 
	[ -d $DIR_DG_BL/ossi ] && mv -f $DIR_DG_BL/ossi $DIR_tmp
 29 
	[ -d $DIR_DG_BL/ossi ] && mv -f $DIR_DG_BL/ossi $DIR_tmp
30 
	tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DG/
 30 
	tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DG/
31 
	[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DG_BL/
 31 
	[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DG_BL/
32 
	cd /root
 32 
	cd /root
33 
	rm -rf $DIR_tmp
 33 
	rm -rf $DIR_tmp
34 
}
 34 
}
35 
 
 35 
 
36 
# Adaptation de la BL Toulouse à la structure Dnsmasq
 36 
# Adaptation de la BL Toulouse à la structure Dnsmasq
37 
function adapt () {
 37 
function adapt () {
38 
	# On récupère le nom des répertoire (catégories)
 38 
	# On récupère le nom des répertoire (catégories)
39 
	find $DIR_DG_BL/ -type f -name domains > $BL_CATEGORIES
 39 
	find $DIR_DG_BL/ -type f -name domains > $BL_CATEGORIES
40 
	# On supprime le suffice "/domains"
 40 
	# On supprime le suffice "/domains"
41 
	$SED "s?\/domains??g" $BL_CATEGORIES
 41 
	$SED "s?\/domains??g" $BL_CATEGORIES
42 
	rm -f $DIR_DNS_FILTER_AVAILABLE/*
 42 
	rm -f $DIR_DNS_FILTER_AVAILABLE/*
43 
	echo -n "Toulouse BlackList migration process. Please wait : "
 43 
	echo -n "Toulouse BlackList migration process. Please wait : "
44 
	# pour chaque catégorie
 44 
	# pour chaque catégorie
45 
	for PATH_FILE in `cat $BL_CATEGORIES`
 45 
	for PATH_FILE in `cat $BL_CATEGORIES`
46 
	do
 46 
	do
47 
		echo -n "."
 47 
		echo -n "."
48 
		# on crée le le fichier 'urls' s'il n'existe pas
 48 
		# on crée le le fichier 'urls' s'il n'existe pas
49 
		if [ ! -f $PATH_FILE/urls ]
 49 
		if [ ! -f $PATH_FILE/urls ]
50 
		then
 50 
		then
51 
			touch $PATH_FILE/urls
 51 
			touch $PATH_FILE/urls
52 
			chown dansguardian:apache $PATH_FILE/urls
 52 
			chown dansguardian:apache $PATH_FILE/urls
53 
		fi
 53 
		fi
54 
		# on suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü
 54 
		# on suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü
55 
		egrep  -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
 55 
		egrep  -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
56 
		$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp
 56 
		$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp
57 
		$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
 57 
		$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
58 
		# Mise en forme dnsmasq
 58 
		# Mise en forme dnsmasq
59 
		$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp
 59 
		$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp
60 
        	DOMAINE=`basename $PATH_FILE`
 60 
        	DOMAINE=`basename $PATH_FILE`
61 
		mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
 61 
		mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
62 
	done
 62 
	done
63 
	echo
 63 
	echo
64 
}
 64 
}
65 
 
 65 
 
66 
# Permet d'activer/désactiver les catégories de la BL
 66 
# Permet d'activer/désactiver les catégories de la BL
67 
function cat_choice (){
 67 
function cat_choice (){
68 
	# un peu de ménage
 68 
	# un peu de ménage
69 
	rm -rf $DIR_DNS_FILTER_ENABLED/*
 69 
	rm -rf $DIR_DNS_FILTER_ENABLED/*
70 
	$SED "/\.Include/d" $DIR_DG/bannedsitelist $DIR_DG/bannedurllist
 70 
	$SED "/\.Include/d" $DIR_DG/bannedsitelist $DIR_DG/bannedurllist
71 
	# on adapte le fichier $BL_CATEGORIES au choix de catégorie
71 
	# on adapte le fichier $BL_CATEGORIES au choix de catégorie
72 
	$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas
 72 
	$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas
73 
	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED`
 73 
	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED`
74 
	do
 74 
	do
75 
		$SED "/\/$ENABLE_CATEGORIE$/d" $BL_CATEGORIES
 75 
		$SED "/\/$ENABLE_CATEGORIE$/d" $BL_CATEGORIES
76 
		$SED "1i\/etc\/dansguardian\/lists\/blacklists\/$ENABLE_CATEGORIE" $BL_CATEGORIES
 76 
		$SED "1i\/etc\/dansguardian\/lists\/blacklists\/$ENABLE_CATEGORIE" $BL_CATEGORIES
77 
	done
 77 
	done
78 
	sort -k2n $BL_CATEGORIES > $FILE_tmp
 78 
	sort -k2n $BL_CATEGORIES > $FILE_tmp
79 
	mv $FILE_tmp $BL_CATEGORIES
 79 
	mv $FILE_tmp $BL_CATEGORIES
80 
	# on affecte les catégories à dansguardian et dnsmasq
 80 
	# on affecte les catégories à dansguardian et dnsmasq
81 
	for i in `cat $BL_CATEGORIES_ENABLED`
 81 
	for i in `cat $BL_CATEGORIES_ENABLED`
82 
		do
 82 
		do
83 
		ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i
 83 
		ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i
84 
		# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist
 84 
		# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist
85 
		echo ".Include<$DIR_DG_BL/$i/urls>" >> $DIR_DG/bannedurllist
 85 
		echo ".Include<$DIR_DG_BL/$i/urls>" >> $DIR_DG/bannedurllist
86 
		done
 86 
		done
87 
}
 87 
}
- 
 
 88 
function bl_enable (){
- 
 
 89 
	$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf
- 
 
 90 
	$SED "s?^#\"?\"?g" $DIR_DG/urlregexplist # Enable 'safesearch'
- 
 
 91 
	if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage
- 
 
 92 
	then
- 
 
 93 
		service dansguardian restart
- 
 
 94 
		service dnsmasq restart
- 
 
 95 
		/usr/local/bin/alcasar-iptables.sh
- 
 
 96 
	fi
- 
 
 97 
}
- 
 
 98 
function bl_disable (){
- 
 
 99 
	rm -rf $DIR_DNS_FILTER_ENABLED/*
- 
 
 100 
	$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf
- 
 
 101 
	$SED "s?^[^#]?#&?g" $DIR_DG/urlregexplist # Disable 'safesearch'
- 
 
 102 
	if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage
- 
 
 103 
	then
- 
 
 104 
		service dansguardian restart
- 
 
 105 
		/usr/local/bin/alcasar-iptables.sh
- 
 
 106 
	fi
- 
 
 107 
}
88 
usage="Usage: alcasar-bl.sh {-on or --on} | { -off or --off } | { -download or --download } | { -reload - --reload }"
 108 
usage="Usage: alcasar-bl.sh {-on or --on} | { -off or --off } | { -download or --download } | { -reload or --reload } | { -conf or --conf}"
89 
nb_args=$#
 109 
nb_args=$#
90 
args=$1
 110 
args=$1
91 
if [ $nb_args -eq 0 ]
 111 
if [ $nb_args -eq 0 ]
92 
then
 112 
then
93 
	nb_args=1
 113 
	nb_args=1
94 
	args="-h"
 114 
	args="-h"
95 
fi
 115 
fi
96 
case $args in
 116 
case $args in
97 
	-\? | -h* | --h*)
 117 
	-\? | -h* | --h*)
98 
		echo "$usage"
 118 
		echo "$usage"
99 
		exit 0
 119 
		exit 0
100 
		;;
 120 
		;;
101 
	# activation du filtrage
 121 
	# activation du filtrage
102 
	-on | --on)
122 
	-on | --on)
103 
		cat_choice
 123 
		cat_choice
104 
		$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf
 - 
 
105 
		$SED "s?^#\"?\"?g" $DIR_DG/urlregexplist # Enable 'safesearch'
 - 
 
106 
		$SED "s?^DNS_FILTERING.*?DNS_FILTERING=on?g" $CONF_FILE
 124 
		$SED "s?^DNS_FILTERING.*?DNS_FILTERING=on?g" $CONF_FILE
107 
		if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # on ne relance lors d'une install
 - 
 
108 
		then
 125 
		bl_enable
109 
		service dansguardian restart
 - 
 
110 
		service dnsmasq restart
 - 
 
111 
		/usr/local/bin/alcasar-iptables.sh
 - 
 
112 
		fi
 - 
 
113 
		;;
 126 
		;;
114 
	# désactivation du filtrage
 127 
	# désactivation du filtrage
115 
	-off | --off)
 128 
	-off | --off)
116 
		rm -rf $DIR_DNS_FILTER_ENABLED/*
 - 
 
117 
		$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf
 - 
 
118 
		$SED "s?^[^#]?#&?g" $DIR_DG/urlregexplist # Disable 'safesearch'
 - 
 
119 
		$SED "s?^DNS_FILTERING.*?DNS_FILTERING=off?g" $CONF_FILE
 129 
		$SED "s?^DNS_FILTERING.*?DNS_FILTERING=off?g" $CONF_FILE
120 
		if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # on ne relance lors d'une install
 - 
 
121 
		then
 - 
 
122 
		service dansguardian restart
 - 
 
123 
		/usr/local/bin/alcasar-iptables.sh
 - 
 
124 
		fi
 130 
		bl_disable
125 
		;;
 131 
		;;
- 
 
 132 
	-conf | --conf)
- 
 
 133 
		DNS_FILTERING=`grep DNS_FILTERING $CONF_FILE|cut -d"=" -f2`		# DNS and URLs filter (on/off)
- 
 
 134 
		DNS_FILTERING=${DNS_FILTERING:=off}
- 
 
 135 
		if [ $DNS_FILTERING = on ]; then
- 
 
 136 
			cat_choice
- 
 
 137 
			bl_enable
- 
 
 138 
		else
- 
 
 139 
			bl_disable
- 
 
 140 
		fi
- 
 
 141 
		;;
126 
	# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq
 142 
	# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq
127 
	-download | --download)
 143 
	-download | --download)
128 
		rm -rf /tmp/con_ok.html
 144 
		rm -rf /tmp/con_ok.html
129 
		`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
 145 
		`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
130 
		if [ ! -e /tmp/con_ok.html ]
 146 
		if [ ! -e /tmp/con_ok.html ]
131 
		then
 147 
		then
132 
			echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"
 148 
			echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"
133 
		else
149 
		else
134 
			transfert
 150 
			transfert
135 
			install
 151 
			install
136 
			chown -R dansguardian:apache $DIR_DG
 152 
			chown -R dansguardian:apache $DIR_DG
137 
			chmod -R g+w $DIR_DG
 153 
			chmod -R g+w $DIR_DG
138 
			DATE=`date '+%d %B %Y - %Hh%M'`
 154 
			DATE=`date '+%d %B %Y - %Hh%M'`
139 
			echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL
 155 
			echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL
140 
			rm -rf /tmp/con_ok.html
 156 
			rm -rf /tmp/con_ok.html
141 
		fi
 157 
		fi
142 
		adapt
 158 
		adapt
143 
		;;
159 
		;;
144 
	# regénération suite à modification (choix catégories ou BL secondaire)
 160 
	# regénération suite à modification (choix catégories ou BL secondaire)
145 
	-reload | --reload)
 161 
	-reload | --reload)
146 
		adapt
 162 
		adapt
147 
		# pour Dansguardian
 163 
		# pour Dansguardian
148 
		chown -R dansguardian:apache $DIR_DG_BL/ossi
 164 
		chown -R dansguardian:apache $DIR_DG_BL/ossi
149 
		chmod -R g+w $DIR_DG_BL/ossi
 165 
		chmod -R g+w $DIR_DG_BL/ossi
150 
		cat_choice
 166 
		cat_choice
151 
		service dansguardian restart
 167 
		service dansguardian restart
152 
		# pour dnsmasq (noms de domaine réhabilités)
 168 
		# pour dnsmasq (noms de domaine réhabilités)
153 
		if [ `wc -w $DIR_DG/exceptionsitelist|cut -d " " -f1` != "0" ]
 169 
		if [ `wc -w $DIR_DG/exceptionsitelist|cut -d " " -f1` != "0" ]
154 
		then
 170 
		then
155 
			for i in `cat $DIR_DG/exceptionsitelist`
 171 
			for i in `cat $DIR_DG/exceptionsitelist`
156 
			do
 172 
			do
157 
				$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*
 173 
				$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*
158 
			done
 174 
			done
159 
		fi
 175 
		fi
160 
		cp -f $DIR_DG_BL/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
 176 
		cp -f $DIR_DG_BL/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
161 
		$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
 177 
		$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
162 
		service dnsmasq restart
 178 
		service dnsmasq restart
163 
		;;
 179 
		;;
164 
	*)
 180 
	*)
165 
		echo "Argument inconnu :$1";
 181 
		echo "Argument inconnu :$1";
166 
		echo "$usage"
 182 
		echo "$usage"
167 
		exit 1
 183 
		exit 1
168 
		;;
 184 
		;;
169 
esac
 185 
esac
170 
 
 186 
 
171 
 
 187