WebSVN – ALCASAR – Diff – /scripts/sbin/alcasar-bl.sh


#/bin/bash
# $Id: alcasar-bl.sh 885 2012-06-11 21:33:50Z richard $
 
# alcasar-bl.sh
# by Franck BOUIJOUX and Richard REY
# This script is distributed under the Gnu General Public License (GPL)
 
# Gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via Dansguardian)
# Manage the BL for DnsBlackHole (dnsmasq) and URL filtering (Dansguardian)
 
DIR_CONF="/usr/local/etc"
CONF_FILE="$DIR_CONF/alcasar.conf"
private_ip_mask=`grep PRIVATE_IP= $CONF_FILE|cut -d"=" -f2`
private_ip_mask=${private_ip_mask:=192.168.182.1/24}
PRIVATE_IP=`echo $private_ip_mask | cut -d"/" -f1`			# ALCASAR LAN IP address
DIR_tmp="/tmp/blacklists"
FILE_tmp="/tmp/fileFilter.txt"
DIR_DG="/etc/dansguardian/lists"
DIR_DG_BL="$DIR_DG/blacklists"
BL_CATEGORIES="$DIR_CONF/alcasar-bl-categories"
WL_CATEGORIES="$DIR_CONF/alcasar-wl-categories"
BL_CATEGORIES_ENABLED="$DIR_CONF/alcasar-bl-categories-enabled"
DIR_DNS_FILTER_AVAILABLE="$DIR_CONF/alcasar-dnsfilter-available"
DIR_DNS_FILTER_ENABLED="$DIR_CONF/alcasar-dnsfilter-enabled"
BL_SERVER="dsi.ut-capitole.fr"
SED="/bin/sed -i"
 
# Permet d'activer/désactiver les catégories de la BL
function cat_choice (){
	# un peu de ménage
	rm -rf $DIR_DNS_FILTER_ENABLED/*
	$SED "/\.Include/d" $DIR_DG/bannedsitelist $DIR_DG/bannedurllist
	# on adapte le fichier $BL_CATEGORIES au choix de catégorie 
	$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas
	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED` # on affecte les catégories à dansguardian et dnsmasq
	do
		$SED "/\/$ENABLE_CATEGORIE$/d" $BL_CATEGORIES
		$SED "1i\/etc\/dansguardian\/lists\/blacklists\/$ENABLE_CATEGORIE" $BL_CATEGORIES
		ln -s $DIR_DNS_FILTER_AVAILABLE/$ENABLE_CATEGORIE.conf $DIR_DNS_FILTER_ENABLED/$ENABLE_CATEGORIE
		echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/domains>" >> $DIR_DG/bannedsitelist  # dansguardian s'occupe du contournement par proxy http ;-)
		echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/urls>" >> $DIR_DG/bannedurllist
	done
	sort +0.0 -0.2 $BL_CATEGORIES -o $FILE_tmp
	mv $FILE_tmp $BL_CATEGORIES
}
function bl_enable (){
	$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf
	if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage
	then
		service dansguardian restart
		service dnsmasq restart
		/usr/local/bin/alcasar-iptables.sh
	fi
}
function bl_disable (){
	rm -rf $DIR_DNS_FILTER_ENABLED/*
	$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf
	if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage
	then
		service dansguardian restart
		service dnsmasq restart
		/usr/local/bin/alcasar-iptables.sh
	fi
}
usage="Usage: alcasar-bl.sh {-on or --on} | { -off or --off } | { -download or --download } | { -reload or --reload }"
nb_args=$#
args=$1
if [ $nb_args -eq 0 ]
then
	DNS_FILTERING=`grep DNS_FILTERING $CONF_FILE|cut -d"=" -f2`		# DNS and URLs filter (on/off)
	DNS_FILTERING=${DNS_FILTERING:=off}
	echo "Set BlackList Filtering to $DNS_FILTERING"
	if [ $DNS_FILTERING = on ]; then
		cat_choice
		bl_enable
	else
		bl_disable
	fi
	exit 0
fi
case $args in
	-\? | -h* | --h*)
		echo "$usage"
		exit 0
		;;
	# activation du filtrage
	-on | --on)	
		cat_choice
		$SED "s?^DNS_FILTERING.*?DNS_FILTERING=on?g" $CONF_FILE
		bl_enable
		;;
	# désactivation du filtrage
	-off | --off)
		$SED "s?^DNS_FILTERING.*?DNS_FILTERING=off?g" $CONF_FILE
		bl_disable
		;;
	# Récupération de l'archive de la BL Toulouse
	-download | --download)
		rm -rf /tmp/con_ok.html
		`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
		if [ ! -e /tmp/con_ok.html ]
		then
			echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"
		else 
			rm -rf /tmp/con_ok.html $DIR_tmp
			mkdir $DIR_tmp
 
			wget -P $DIR_tmp http://$BL_SERVER/blacklists/download/blacklists.tar.gz
			md5sum $DIR_tmp/blacklists.tar.gz | cut -d" " -f1 > $DIR_tmp/md5sum
			chown -R apache:apache $DIR_tmp
		fi
		;;		
	# Adaptation de la BL de Toulouse à notre structure (dnsmasq + DG)
	-adapt | --adapt)
		if [ -f $DIR_tmp/blacklists.tar.gz ]
		then
			[ -d $DIR_DG_BL/ossi ] && mv -f $DIR_DG_BL/ossi $DIR_tmp
			rm -rf $DIR_DG_BL
			mkdir $DIR_DG_BL
			tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DG/
			[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DG_BL/
			rm -rf $DIR_tmp
			chown -R dansguardian:apache $DIR_DG
			chmod -R g+w $DIR_DG
		fi
		rm -f $BL_CATEGORIES $WL_CATEGORIES $DIR_DNS_FILTER_AVAILABLE/*
		touch $BL_CATEGORIES $WL_CATEGORIES
		find $DIR_DG_BL/ -type f -name domains > $FILE_tmp # On récupère le nom des répertoire (catégories)
		$SED "s?\/domains??g" $FILE_tmp # On supprime le suffixe "/domains"
		for categorie in `cat $FILE_tmp` # creation des deux fichiers de categories (BL / WL)
		do
			if [ -e $categorie/usage ]
			then
				is_whitelist=`grep white $categorie/usage|wc -l`
			else
				is_whitelist=0 # si le fichier 'usage' n'existe pas, on considère que la catégorie est une BL
			fi
			if [ $is_whitelist -eq "0" ]
			then
				echo "$categorie" >> $BL_CATEGORIES
			else
				echo "$categorie" >> $WL_CATEGORIES
			fi
		done
		rm -f $FILE_tmp
		echo -n "Toulouse BlackList migration process. Please wait : "
		for PATH_FILE in `cat $BL_CATEGORIES`  # pour chaque catégorie
		do
			echo -n "."
		  	if [ ! -f $PATH_FILE/urls ] # on crée le fichier 'urls' s'il n'existe pas
			then
				touch $PATH_FILE/urls
				chown dansguardian:apache $PATH_FILE/urls
			fi
			# suppression des @IP, de caractères acccentués et des lignes commentées
			egrep  -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > $FILE_tmp
			$SED "/[äâëêïîöôüû]/d" $FILE_tmp
			$SED "/^#.*/d" $FILE_tmp
			$SED "s?.*?address=/&/$PRIVATE_IP?g" $FILE_tmp  # Mise en forme dnsmasq
			DOMAINE=`basename $PATH_FILE`
			mv $FILE_tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
		done
		echo
		;;
	# regénération suite à modification du choix des catégories 
	-reload | --reload)
		# pour Dansguardian
		chown -R dansguardian:apache $DIR_DG_BL/ossi
		chmod -R g+w $DIR_DG_BL/ossi
		cat_choice
		# pour dnsmasq (noms de domaine réhabilités)
		if [ `wc -w $DIR_DG/exceptionsitelist|cut -d " " -f1` != "0" ]
		then
			for i in `cat $DIR_DG/exceptionsitelist`
			do
				$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*
			done
		fi
		cp -f $DIR_DG_BL/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
		$SED "s?.*?address=/&/$PRIVATE_IP?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
		DNS_FILTERING=`grep DNS_FILTERING $CONF_FILE|cut -d"=" -f2`		# DNS and URLs filter (on/off)
		DNS_FILTERING=${DNS_FILTERING:=off}
		if [ $DNS_FILTERING = on ]; then
			bl_enable
		else
			bl_disable
		fi
		;;
	*)
		echo "Argument inconnu :$1";
		echo "$usage"
		exit 1
		;;
esac
 
 

Rev 878	Rev 885
1	`#/bin/bash`	1	`#/bin/bash`
2	`# $Id: alcasar-bl.sh 878 2012-06-03 16:07:40Z richard $`	2	`# $Id: alcasar-bl.sh 885 2012-06-11 21:33:50Z richard $`
3		3
4	`# alcasar-bl.sh`	4	`# alcasar-bl.sh`
5	`# by Franck BOUIJOUX and Richard REY`	5	`# by Franck BOUIJOUX and Richard REY`
6	`# This script is distributed under the Gnu General Public License (GPL)`	6	`# This script is distributed under the Gnu General Public License (GPL)`
7		7
8	`# Gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via Dansguardian)`	8	`# Gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via Dansguardian)`
9	`# Manage the BL for DnsBlackHole (dnsmasq) and URL filtering (Dansguardian)`	9	`# Manage the BL for DnsBlackHole (dnsmasq) and URL filtering (Dansguardian)`
10		10
11	`DIR_CONF="/usr/local/etc"`	11	`DIR_CONF="/usr/local/etc"`
12	`CONF_FILE="$DIR_CONF/alcasar.conf"`	12	`CONF_FILE="$DIR_CONF/alcasar.conf"`
13	private_ip_mask=`grep PRIVATE_IP= $CONF_FILE\|cut -d"=" -f2`	13	private_ip_mask=`grep PRIVATE_IP= $CONF_FILE\|cut -d"=" -f2`
14	`private_ip_mask=${private_ip_mask:=192.168.182.1/24}`	14	`private_ip_mask=${private_ip_mask:=192.168.182.1/24}`
15	PRIVATE_IP=`echo $private_ip_mask \| cut -d"/" -f1` # ALCASAR LAN IP address	15	PRIVATE_IP=`echo $private_ip_mask \| cut -d"/" -f1` # ALCASAR LAN IP address
16	`DIR_tmp="/tmp/blacklists"`	16	`DIR_tmp="/tmp/blacklists"`
17	`FILE_tmp="/tmp/fileFilter.txt"`	17	`FILE_tmp="/tmp/fileFilter.txt"`
18	`DIR_DG="/etc/dansguardian/lists"`	18	`DIR_DG="/etc/dansguardian/lists"`
19	`DIR_DG_BL="$DIR_DG/blacklists"`	19	`DIR_DG_BL="$DIR_DG/blacklists"`
20	`BL_CATEGORIES="$DIR_CONF/alcasar-bl-categories"`	20	`BL_CATEGORIES="$DIR_CONF/alcasar-bl-categories"`
21	`WL_CATEGORIES="$DIR_CONF/alcasar-wl-categories"`	21	`WL_CATEGORIES="$DIR_CONF/alcasar-wl-categories"`
22	`BL_CATEGORIES_ENABLED="$DIR_CONF/alcasar-bl-categories-enabled"`	22	`BL_CATEGORIES_ENABLED="$DIR_CONF/alcasar-bl-categories-enabled"`
23	`DIR_DNS_FILTER_AVAILABLE="$DIR_CONF/alcasar-dnsfilter-available"`	23	`DIR_DNS_FILTER_AVAILABLE="$DIR_CONF/alcasar-dnsfilter-available"`
24	`DIR_DNS_FILTER_ENABLED="$DIR_CONF/alcasar-dnsfilter-enabled"`	24	`DIR_DNS_FILTER_ENABLED="$DIR_CONF/alcasar-dnsfilter-enabled"`
25	`BL_SERVER="dsi.ut-capitole.fr"`	25	`BL_SERVER="dsi.ut-capitole.fr"`
26	`SED="/bin/sed -i"`	26	`SED="/bin/sed -i"`
27		27
28	`# Permet d'activer/désactiver les catégories de la BL`	28	`# Permet d'activer/désactiver les catégories de la BL`
29	`function cat_choice (){`	29	`function cat_choice (){`
30	`# un peu de ménage`	30	`# un peu de ménage`
31	`rm -rf $DIR_DNS_FILTER_ENABLED/*`	31	`rm -rf $DIR_DNS_FILTER_ENABLED/*`
32	`$SED "/\.Include/d" $DIR_DG/bannedsitelist $DIR_DG/bannedurllist`	32	`$SED "/\.Include/d" $DIR_DG/bannedsitelist $DIR_DG/bannedurllist`
33	`# on adapte le fichier $BL_CATEGORIES au choix de catégorie`	33	`# on adapte le fichier $BL_CATEGORIES au choix de catégorie`
34	`$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas`	34	`$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas`
35	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED` # on affecte les catégories à dansguardian et dnsmasq	35	for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED` # on affecte les catégories à dansguardian et dnsmasq
36	`do`	36	`do`
37	`$SED "/\/$ENABLE_CATEGORIE$/d" $BL_CATEGORIES`	37	`$SED "/\/$ENABLE_CATEGORIE$/d" $BL_CATEGORIES`
38	`$SED "1i\/etc\/dansguardian\/lists\/blacklists\/$ENABLE_CATEGORIE" $BL_CATEGORIES`	38	`$SED "1i\/etc\/dansguardian\/lists\/blacklists\/$ENABLE_CATEGORIE" $BL_CATEGORIES`
39	`ln -s $DIR_DNS_FILTER_AVAILABLE/$ENABLE_CATEGORIE.conf $DIR_DNS_FILTER_ENABLED/$ENABLE_CATEGORIE`	39	`ln -s $DIR_DNS_FILTER_AVAILABLE/$ENABLE_CATEGORIE.conf $DIR_DNS_FILTER_ENABLED/$ENABLE_CATEGORIE`
40	`echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/domains>" >> $DIR_DG/bannedsitelist # dansguardian s'occupe du contournement par proxy http ;-)`	40	`echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/domains>" >> $DIR_DG/bannedsitelist # dansguardian s'occupe du contournement par proxy http ;-)`
41	`echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/urls>" >> $DIR_DG/bannedurllist`	41	`echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/urls>" >> $DIR_DG/bannedurllist`
42	`done`	42	`done`
43	`sort +0.0 -0.2 $BL_CATEGORIES -o $FILE_tmp`	43	`sort +0.0 -0.2 $BL_CATEGORIES -o $FILE_tmp`
44	`mv $FILE_tmp $BL_CATEGORIES`	44	`mv $FILE_tmp $BL_CATEGORIES`
45	`}`	45	`}`
46	`function bl_enable (){`	46	`function bl_enable (){`
47	`$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf`	47	`$SED "s/^reportinglevel =.*/reportinglevel = 3/g" /etc/dansguardian/dansguardian.conf`
48	`if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage`	48	`if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage`
49	`then`	49	`then`
50	`service dansguardian restart`	50	`service dansguardian restart`
51	`service dnsmasq restart`	51	`service dnsmasq restart`
52	`/usr/local/bin/alcasar-iptables.sh`	52	`/usr/local/bin/alcasar-iptables.sh`
53	`fi`	53	`fi`
54	`}`	54	`}`
55	`function bl_disable (){`	55	`function bl_disable (){`
56	`rm -rf $DIR_DNS_FILTER_ENABLED/*`	56	`rm -rf $DIR_DNS_FILTER_ENABLED/*`
57	`$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf`	57	`$SED "s/^reportinglevel =.*/reportinglevel = -1/g" /etc/dansguardian/dansguardian.conf`
58	`if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage`	58	`if [ "$PARENT_SCRIPT" != "/usr/local/bin/alcasar-conf.sh" ] # don't launch on install stage`
59	`then`	59	`then`
60	`service dansguardian restart`	60	`service dansguardian restart`
61	`service dnsmasq restart`	61	`service dnsmasq restart`
62	`/usr/local/bin/alcasar-iptables.sh`	62	`/usr/local/bin/alcasar-iptables.sh`
63	`fi`	63	`fi`
64	`}`	64	`}`
65	`usage="Usage: alcasar-bl.sh {-on or --on} \| { -off or --off } \| { -download or --download } \| { -reload or --reload }"`	65	`usage="Usage: alcasar-bl.sh {-on or --on} \| { -off or --off } \| { -download or --download } \| { -reload or --reload }"`
66	`nb_args=$#`	66	`nb_args=$#`
67	`args=$1`	67	`args=$1`
68	`if [ $nb_args -eq 0 ]`	68	`if [ $nb_args -eq 0 ]`
69	`then`	69	`then`
70	DNS_FILTERING=`grep DNS_FILTERING $CONF_FILE\|cut -d"=" -f2` # DNS and URLs filter (on/off)	70	DNS_FILTERING=`grep DNS_FILTERING $CONF_FILE\|cut -d"=" -f2` # DNS and URLs filter (on/off)
71	`DNS_FILTERING=${DNS_FILTERING:=off}`	71	`DNS_FILTERING=${DNS_FILTERING:=off}`
72	`echo "Set BlackList Filtering to $DNS_FILTERING"`	72	`echo "Set BlackList Filtering to $DNS_FILTERING"`
73	`if [ $DNS_FILTERING = on ]; then`	73	`if [ $DNS_FILTERING = on ]; then`
74	`cat_choice`	74	`cat_choice`
75	`bl_enable`	75	`bl_enable`
76	`else`	76	`else`
77	`bl_disable`	77	`bl_disable`
78	`fi`	78	`fi`
79	`exit 0`	79	`exit 0`
80	`fi`	80	`fi`
81	`case $args in`	81	`case $args in`
82	`-\? \| -h* \| --h*)`	82	`-\? \| -h* \| --h*)`
83	`echo "$usage"`	83	`echo "$usage"`
84	`exit 0`	84	`exit 0`
85	`;;`	85	`;;`
86	`# activation du filtrage`	86	`# activation du filtrage`
87	`-on \| --on)`	87	`-on \| --on)`
88	`cat_choice`	88	`cat_choice`
89	`$SED "s?^DNS_FILTERING.*?DNS_FILTERING=on?g" $CONF_FILE`	89	`$SED "s?^DNS_FILTERING.*?DNS_FILTERING=on?g" $CONF_FILE`
90	`bl_enable`	90	`bl_enable`
91	`;;`	91	`;;`
92	`# désactivation du filtrage`	92	`# désactivation du filtrage`
93	`-off \| --off)`	93	`-off \| --off)`
94	`$SED "s?^DNS_FILTERING.*?DNS_FILTERING=off?g" $CONF_FILE`	94	`$SED "s?^DNS_FILTERING.*?DNS_FILTERING=off?g" $CONF_FILE`
95	`bl_disable`	95	`bl_disable`
96	`;;`	96	`;;`
97	`# Récupération de l'archive de la BL Toulouse`	97	`# Récupération de l'archive de la BL Toulouse`
98	`-download \| --download)`	98	`-download \| --download)`
99	`rm -rf /tmp/con_ok.html`	99	`rm -rf /tmp/con_ok.html`
100	`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`	100	`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
101	`if [ ! -e /tmp/con_ok.html ]`	101	`if [ ! -e /tmp/con_ok.html ]`
102	`then`	102	`then`
103	`echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"`	103	`echo "Erreur : le serveur de blacklist ($BL_SERVER) n'est pas joignable"`
104	`else`	104	`else`
105	`rm -rf /tmp/con_ok.html $DIR_tmp`	105	`rm -rf /tmp/con_ok.html $DIR_tmp`
106	`mkdir $DIR_tmp`	106	`mkdir $DIR_tmp`
107	`cd $DIR_tmp`	-
108	`wget http://$BL_SERVER/blacklists/download/blacklists.tar.gz`	107	`wget -P $DIR_tmp http://$BL_SERVER/blacklists/download/blacklists.tar.gz`
109	`md5sum $DIR_tmp/blacklists.tar.gz \| cut -d" " -f1 > $DIR_tmp/md5sum`	108	`md5sum $DIR_tmp/blacklists.tar.gz \| cut -d" " -f1 > $DIR_tmp/md5sum`
110	`cd /root`	109	`chown -R apache:apache $DIR_tmp`
111	`fi`	110	`fi`
112	`;;`	111	`;;`
113	`# Adaptation de la BL de Toulouse à notre structure (dnsmasq + DG)`	112	`# Adaptation de la BL de Toulouse à notre structure (dnsmasq + DG)`
114	`-adapt \| --adapt)`	113	`-adapt \| --adapt)`
115	`if [ -f $DIR_tmp/blacklists.tar.gz ]`	114	`if [ -f $DIR_tmp/blacklists.tar.gz ]`
116	`then`	115	`then`
117	`[ -d $DIR_DG_BL/ossi ] && mv -f $DIR_DG_BL/ossi $DIR_tmp`	116	`[ -d $DIR_DG_BL/ossi ] && mv -f $DIR_DG_BL/ossi $DIR_tmp`
118	`rm -rf $DIR_DG_BL`	117	`rm -rf $DIR_DG_BL`
119	`mkdir $DIR_DG_BL`	118	`mkdir $DIR_DG_BL`
120	`tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DG/`	119	`tar zxf $DIR_tmp/blacklists.tar.gz --directory=$DIR_DG/`
121	`[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DG_BL/`	120	`[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DG_BL/`
122	`rm -rf $DIR_tmp`	121	`rm -rf $DIR_tmp`
123	`chown -R dansguardian:apache $DIR_DG`	122	`chown -R dansguardian:apache $DIR_DG`
124	`chmod -R g+w $DIR_DG`	123	`chmod -R g+w $DIR_DG`
125	`fi`	124	`fi`
126	`rm -f $BL_CATEGORIES $WL_CATEGORIES $DIR_DNS_FILTER_AVAILABLE/*`	125	`rm -f $BL_CATEGORIES $WL_CATEGORIES $DIR_DNS_FILTER_AVAILABLE/*`
127	`touch $BL_CATEGORIES $WL_CATEGORIES`	126	`touch $BL_CATEGORIES $WL_CATEGORIES`
128	`find $DIR_DG_BL/ -type f -name domains > $FILE_tmp # On récupère le nom des répertoire (catégories)`	127	`find $DIR_DG_BL/ -type f -name domains > $FILE_tmp # On récupère le nom des répertoire (catégories)`
129	`$SED "s?\/domains??g" $FILE_tmp # On supprime le suffixe "/domains"`	128	`$SED "s?\/domains??g" $FILE_tmp # On supprime le suffixe "/domains"`
130	for categorie in `cat $FILE_tmp` # creation des deux fichiers de categories (BL / WL)	129	for categorie in `cat $FILE_tmp` # creation des deux fichiers de categories (BL / WL)
131	`do`	130	`do`
132	`if [ -e $categorie/usage ]`	131	`if [ -e $categorie/usage ]`
133	`then`	132	`then`
134	is_whitelist=`grep white $categorie/usage\|wc -l`	133	is_whitelist=`grep white $categorie/usage\|wc -l`
135	`else`	134	`else`
136	`is_whitelist=0 # si le fichier 'usage' n'existe pas, on considère que la catégorie est une BL`	135	`is_whitelist=0 # si le fichier 'usage' n'existe pas, on considère que la catégorie est une BL`
137	`fi`	136	`fi`
138	`if [ $is_whitelist -eq "0" ]`	137	`if [ $is_whitelist -eq "0" ]`
139	`then`	138	`then`
140	`echo "$categorie" >> $BL_CATEGORIES`	139	`echo "$categorie" >> $BL_CATEGORIES`
141	`else`	140	`else`
142	`echo "$categorie" >> $WL_CATEGORIES`	141	`echo "$categorie" >> $WL_CATEGORIES`
143	`fi`	142	`fi`
144	`done`	143	`done`
145	`rm -f $FILE_tmp`	144	`rm -f $FILE_tmp`
146	`echo -n "Toulouse BlackList migration process. Please wait : "`	145	`echo -n "Toulouse BlackList migration process. Please wait : "`
147	for PATH_FILE in `cat $BL_CATEGORIES` # pour chaque catégorie	146	for PATH_FILE in `cat $BL_CATEGORIES` # pour chaque catégorie
148	`do`	147	`do`
149	`echo -n "."`	148	`echo -n "."`
150	`if [ ! -f $PATH_FILE/urls ] # on crée le fichier 'urls' s'il n'existe pas`	149	`if [ ! -f $PATH_FILE/urls ] # on crée le fichier 'urls' s'il n'existe pas`
151	`then`	150	`then`
152	`touch $PATH_FILE/urls`	151	`touch $PATH_FILE/urls`
153	`chown dansguardian:apache $PATH_FILE/urls`	152	`chown dansguardian:apache $PATH_FILE/urls`
154	`fi`	153	`fi`
155	`# suppression des @IP, de caractères acccentués et des lignes commentées`	154	`# suppression des @IP, de caractères acccentués et des lignes commentées`
156	`egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > $FILE_tmp`	155	`egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > $FILE_tmp`
157	`$SED "/[äâëêïîöôüû]/d" $FILE_tmp`	156	`$SED "/[äâëêïîöôüû]/d" $FILE_tmp`
158	`$SED "/^#.*/d" $FILE_tmp`	157	`$SED "/^#.*/d" $FILE_tmp`
159	`$SED "s?.*?address=/&/$PRIVATE_IP?g" $FILE_tmp # Mise en forme dnsmasq`	158	`$SED "s?.*?address=/&/$PRIVATE_IP?g" $FILE_tmp # Mise en forme dnsmasq`
160	DOMAINE=`basename $PATH_FILE`	159	DOMAINE=`basename $PATH_FILE`
161	`mv $FILE_tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf`	160	`mv $FILE_tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf`
162	`done`	161	`done`
163	`echo`	162	`echo`
164	`;;`	163	`;;`
165	`# regénération suite à modification du choix des catégories`	164	`# regénération suite à modification du choix des catégories`
166	`-reload \| --reload)`	165	`-reload \| --reload)`
167	`# pour Dansguardian`	166	`# pour Dansguardian`
168	`chown -R dansguardian:apache $DIR_DG_BL/ossi`	167	`chown -R dansguardian:apache $DIR_DG_BL/ossi`
169	`chmod -R g+w $DIR_DG_BL/ossi`	168	`chmod -R g+w $DIR_DG_BL/ossi`
170	`cat_choice`	169	`cat_choice`
171	`# pour dnsmasq (noms de domaine réhabilités)`	170	`# pour dnsmasq (noms de domaine réhabilités)`
172	if [ `wc -w $DIR_DG/exceptionsitelist\|cut -d " " -f1` != "0" ]	171	if [ `wc -w $DIR_DG/exceptionsitelist\|cut -d " " -f1` != "0" ]
173	`then`	172	`then`
174	for i in `cat $DIR_DG/exceptionsitelist`	173	for i in `cat $DIR_DG/exceptionsitelist`
175	`do`	174	`do`
176	`$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*`	175	`$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*`
177	`done`	176	`done`
178	`fi`	177	`fi`
179	`cp -f $DIR_DG_BL/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf`	178	`cp -f $DIR_DG_BL/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf`
180	`$SED "s?.*?address=/&/$PRIVATE_IP?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf`	179	`$SED "s?.*?address=/&/$PRIVATE_IP?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf`
181	DNS_FILTERING=`grep DNS_FILTERING $CONF_FILE\|cut -d"=" -f2` # DNS and URLs filter (on/off)	180	DNS_FILTERING=`grep DNS_FILTERING $CONF_FILE\|cut -d"=" -f2` # DNS and URLs filter (on/off)
182	`DNS_FILTERING=${DNS_FILTERING:=off}`	181	`DNS_FILTERING=${DNS_FILTERING:=off}`
183	`if [ $DNS_FILTERING = on ]; then`	182	`if [ $DNS_FILTERING = on ]; then`
184	`bl_enable`	183	`bl_enable`
185	`else`	184	`else`
186	`bl_disable`	185	`bl_disable`
187	`fi`	186	`fi`
188	`;;`	187	`;;`
189	`*)`	188	`*)`
190	`echo "Argument inconnu :$1";`	189	`echo "Argument inconnu :$1";`
191	`echo "$usage"`	190	`echo "$usage"`
192	`exit 1`	191	`exit 1`
193	`;;`	192	`;;`
194	`esac`	193	`esac`
195		194
196		195

Subversion Repositories ALCASAR

(root)/scripts/sbin/alcasar-bl.sh – Rev 878 → 885