Subversion Repositories ALCASAR

Rev

Rev 2559 | Rev 2825 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 2559 Rev 2688
1 
#!/bin/bash
 1 
#!/bin/bash
2 
# $Id: alcasar-dns-local.sh 2559 2018-06-10 12:56:39Z rexy $
 2 
# $Id: alcasar-dns-local.sh 2688 2019-01-18 23:15:49Z lucas.echard $
3 
 
 3 
 
4 
# alcasar-dns-interne.sh
 4 
# alcasar-dns-local.sh
5 
# by Rexy - 3abtux
 5 
# by Rexy - 3abtux
6 
# This script is distributed under the Gnu General Public License (GPL)
 6 
# This script is distributed under the Gnu General Public License (GPL)
7 
 
 7 
 
8 
# active ou desactive la redirection du service DNS sur le réseau de consultation
 8 
# active ou desactive la redirection du service DNS sur le réseau de consultation
9 
# enable or disable the redirector of internal DNS service on consultation LAN
 9 
# enable or disable the redirector of internal DNS service on consultation LAN
10 
 
 10 
 
11 
SED="/bin/sed -i"
 11 
SED="/bin/sed -i"
12 
 
 12 
 
13 
ALCASAR_CONF_FILE="/usr/local/etc/alcasar.conf"
 13 
ALCASAR_CONF_FILE="/usr/local/etc/alcasar.conf"
14 
DNSMASQ_CONF_FILE="/etc/dnsmasq.conf /etc/dnsmasq-blackhole.conf /etc/dnsmasq-blacklist.conf /etc/dnsmasq-whitelist.conf"
 - 
 
15 
LOCAL_DOMAIN_CONF_FILE="/usr/local/etc/alcasar-dns-name"
 14 
LOCAL_DOMAIN_CONF_FILE="/etc/unbound/conf.d/common/local-forward/dns-redirector.conf"
16 
LOCAL_HOSTNAME_FILE="/etc/hosts"
 15 
LOCAL_HOSTNAME_FILE="/etc/hosts"
- 
 
 16 
LOCAL_DNS_FILE="/etc/unbound/conf.d/common/local-dns/global.conf"
17 
 
 17 
 
18 
# define DNS parameters (LAN side)
 18 
# define DNS parameters (LAN side)
19 
 
 19 
 
20 
INT_DNS_DOMAIN=`grep INT_DNS_DOMAIN $ALCASAR_CONF_FILE|cut -d"=" -f2`			# Nom du domaine DNS interne
 20 
INT_DNS_DOMAIN=`grep INT_DNS_DOMAIN $ALCASAR_CONF_FILE|cut -d"=" -f2`		# Nom du domaine DNS interne
21 
INT_DNS_IP=`grep INT_DNS_IP $ALCASAR_CONF_FILE|cut -d"=" -f2`				# Adresse du serveur DNS interne
 21 
INT_DNS_IP=`grep INT_DNS_IP $ALCASAR_CONF_FILE|cut -d"=" -f2`				# Adresse du serveur DNS interne
22 
INT_DNS_ACTIVE=`grep INT_DNS_ACTIVE $ALCASAR_CONF_FILE|cut -d"=" -f2`			# Activation de la redirection DNS interne
 22 
INT_DNS_ACTIVE=`grep INT_DNS_ACTIVE $ALCASAR_CONF_FILE|cut -d"=" -f2`		# Activation de la redirection DNS interne
23 
 
 23 
 
24 
usage="Usage: alcasar-dns-interne.sh {--on | -on} | {--off | -off} | {--add | -add}"
 24 
usage="Usage: alcasar-dns-local.sh {--on | -on} | {--off | -off} | {--add | -add} ip domain | {--del | -del} ip domain | {--reload | -reload}"
25 
nb_args=$#
 25 
nb_args=$#
26 
args=$1
 26 
args=$1
27 
if [ $nb_args -eq 0 ]
 27 
if [ $nb_args -eq 0 ]
28 
then
 28 
then
29 
	echo "$usage"
 29 
	echo "$usage"
30 
	exit 1
 30 
	exit 1
31 
fi
 31 
fi
- 
 
 32 
 
32 
function restart_dns(){
 33 
function restart_dns(){
33 
	for dns in dnsmasq dnsmasq-blacklist dnsmasq-whitelist dnsmasq-blackhole
 34 
	for dns in unbound unbound-blacklist unbound-whitelist dnsmasq-whitelist unbound-blackhole
34 
	do
 35 
	do
35 
		systemctl restart $dns
 36 
		systemctl restart $dns
36 
	done
 37 
	done
37 
}
 38 
}
38 
 
 39 
 
- 
 
 40 
function hosts_to_unbound(){
- 
 
 41 
	# Empty the local DNS file
- 
 
 42 
	echo "server:" > $LOCAL_DNS_FILE
- 
 
 43 
 
- 
 
 44 
	while read -r line
- 
 
 45 
	do
- 
 
 46 
		ip_address=$(echo $line | awk '{ print $1 }')
- 
 
 47 
		domain=$(echo $line | awk '{ print $2 }')
- 
 
 48 
 
- 
 
 49 
		if ! echo $line | grep -E -q "^([0-9\.\t ]+alcasar( |$)|127\.0\.0)"
- 
 
 50 
		then
- 
 
 51 
			echo -e "\tlocal-zone: \"$domain\" redirect" >> $LOCAL_DNS_FILE
- 
 
 52 
			echo -e "\tlocal-data: \"$domain A $ip_address\"" >> $LOCAL_DNS_FILE
- 
 
 53 
		fi
- 
 
 54 
	done < $LOCAL_HOSTNAME_FILE
- 
 
 55 
}
- 
 
 56 
 
39 
case $args in
 57 
case $args in
40 
	-\? | -h | --h)
 58 
	-\? | -h | --h)
41 
		echo "$usage"
 59 
		echo "$usage"
42 
		exit 0
 60 
		exit 0
43 
		;;
 61 
		;;
44 
	--add|-add) # add a local host resolution
 62 
	--add|-add) # add a local host resolution
45 
		if [ $nb_args -ne 3 ]
 63 
		if [ $nb_args -ne 3 ]
46 
		then
 64 
		then
47 
			echo "$usage"
 65 
			echo "$usage"
48 
			exit 1
 66 
			exit 1
49 
		else
 67 
		else
- 
 
 68 
			# removing if already exists
- 
 
 69 
			$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE
- 
 
 70 
 
- 
 
 71 
			# adding to the hosts file
50 
			echo -e "$2\t$3" >> $LOCAL_HOSTNAME_FILE
 72 
			echo -e "$2\t$3" >> $LOCAL_HOSTNAME_FILE
- 
 
 73 
			hosts_to_unbound
51 
			restart_dns
 74 
			restart_dns
52 
		fi
 75 
		fi
53 
		;;
 76 
		;;
54 
	--del|-del) # remove a local host resolution
 77 
	--del|-del) # remove a local host resolution
55 
		if [ $nb_args -ne 3 ]
 78 
		if [ $nb_args -ne 3 ]
56 
		then
 79 
		then
57 
			echo "$usage"
 80 
			echo "$usage"
58 
			exit 1
 81 
			exit 1
59 
		else
 82 
		else
60 
			$SED "/^$2\t$3/d" SLOCAL_HOSTNAME_FILE
 83 
			$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE
- 
 
 84 
			hosts_to_unbound
61 
			restart_dns
 85 
			restart_dns
62 
		fi
 86 
		fi
63 
		;;
 87 
		;;
- 
 
 88 
	--reload|-reload)
- 
 
 89 
			hosts_to_unbound
- 
 
 90 
			restart_dns
64 
 
 91 
		;;
65 
	--off|-off) # disable DNS redirector
 92 
	--off|-off) # disable DNS redirector
66 
		$SED "s?^#filterwin2k.*?filterwin2k?g" $DNSMASQ_CONF_FILE
 93 
		#$SED "s?^#filterwin2k.*?filterwin2k?g" $DNSMASQ_CONF_FILE
67 
		$SED "s?^server.*?#&?g" $LOCAL_DOMAIN_CONF_FILE
 94 
		rm -f $LOCAL_DOMAIN_CONF_FILE
68 
		$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=off?g" $ALCASAR_CONF_FILE
 95 
		$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=off?g" $ALCASAR_CONF_FILE
69 
		restart_dns
 96 
		restart_dns
- 
 
 97 
 
- 
 
 98 
		# Reload firewall
- 
 
 99 
		/usr/local/bin/alcasar-iptables.sh
70 
		;;
 100 
		;;
71 
	--on|-on) # enable DHCP service on all range of IP addresses
 101 
	--on|-on) # enable DNS redirector
72 
		$SED "s?^filterwin2k.*?#filterwin2k?g" $DNSMASQ_CONF_FILE
 102 
		#$SED "s?^filterwin2k.*?#filterwin2k?g" $DNSMASQ_CONF_FILE
73 
		$SED "s?^server=/.*?server=/$INT_DNS_DOMAIN/$INT_DNS_IP?g" $LOCAL_DOMAIN_CONF_FILE
 103 
		cat > $LOCAL_DOMAIN_CONF_FILE << EOF
- 
 
 104 
server:
74 
		$SED "s?^#server=/.*?server=/$INT_DNS_DOMAIN/$INT_DNS_IP?g" $LOCAL_DOMAIN_CONF_FILE
 105 
    local-zone: "$INT_DNS_DOMAIN." transparent
- 
 
 106 
forward-zone:
- 
 
 107 
	name: "$INT_DNS_DOMAIN."
- 
 
 108 
	forward-addr: $INT_DNS_IP
- 
 
 109 
EOF
75 
		$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=on?g" $ALCASAR_CONF_FILE
 110 
		$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=on?g" $ALCASAR_CONF_FILE
76 
		restart_dns
 111 
		restart_dns
- 
 
 112 
 
- 
 
 113 
		# Reload firewall
- 
 
 114 
		/usr/local/bin/alcasar-iptables.sh
77 
		;;
 115 
		;;
78 
	*)
 116 
	*)
79 
		echo "Argument inconnu :$1";
 117 
		echo "Argument inconnu : $1";
80 
		echo "$usage"
 118 
		echo "$usage"
81 
		exit 1
 119 
		exit 1
82 
		;;
 120 
		;;
83 
esac
 121 
esac
84 
 
 122