Line 1... |
Line 1... |
1 |
#/bin/sh
|
1 |
#/bin/sh
|
2 |
# $Id: alcasar-bl.sh 311 2010-11-07 22:31:52Z richard $
|
2 |
# $Id: alcasar-bl.sh 313 2010-11-08 22:41:19Z richard $
|
3 |
|
3 |
|
4 |
# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)
|
4 |
# Script de gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via dansguardian)
|
5 |
# By 3abtux & rexy
|
5 |
# By 3abtux & rexy
|
6 |
|
6 |
|
7 |
DIR_tmp="/tmp/blacklists"
|
7 |
DIR_tmp="/tmp/blacklists"
|
8 |
FILE_tmp="/tmp/fileFilter.txt"
|
8 |
FILE_tmp="/tmp/fileFilter.txt"
|
9 |
DIR_DANSGUARDIAN="/etc/dansguardian/lists"
|
9 |
DIR_DANSGUARDIAN="/etc/dansguardian/lists"
|
10 |
BL_CATEGORIES_AVAILABLE="/usr/local/etc/alcasar-bl-categories-available"
|
10 |
BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"
|
11 |
BL_CATEGORIES_DEFAULT="/usr/local/etc/alcasar-bl-categories-default"
|
11 |
BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"
|
12 |
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
|
12 |
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
|
13 |
DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"
|
13 |
DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"
|
14 |
IP_RETOUR="192.168.182.1"
|
14 |
IP_RETOUR="192.168.182.1"
|
15 |
BL_SERVER="cri.univ-tlse1.fr"
|
15 |
BL_SERVER="cri.univ-tlse1.fr"
|
16 |
SED="/bin/sed -i"
|
16 |
SED="/bin/sed -i"
|
Line 32... |
Line 32... |
32 |
}
|
32 |
}
|
33 |
|
33 |
|
34 |
# Adaptation de la BL Toulouse à la structure Dnsmasq
|
34 |
# Adaptation de la BL Toulouse à la structure Dnsmasq
|
35 |
function adapt () {
|
35 |
function adapt () {
|
36 |
# On récupère le nom des répertoire (catégories)
|
36 |
# On récupère le nom des répertoire (catégories)
|
37 |
find $DIR_DANSGUARDIAN -type f -name domains > $BL_CATEGORIES_AVAILABLE
|
37 |
find $DIR_DANSGUARDIAN -type f -name domains > $BL_CATEGORIES
|
38 |
# On supprime le suffice "/domains"
|
38 |
# On supprime le suffice "/domains"
|
39 |
$SED "s?\/domains??g" $BL_CATEGORIES_AVAILABLE
|
39 |
$SED "s?\/domains??g" $BL_CATEGORIES
|
40 |
rm -f $DIR_DNS_FILTER_AVAILABLE/*
|
40 |
rm -f $DIR_DNS_FILTER_AVAILABLE/*
|
41 |
echo -n "Adaptation de la BL Toulouse. Veuillez patienter : "
|
41 |
echo -n "Adaptation de la BL Toulouse. Veuillez patienter : "
|
42 |
# On copie les fichiers de domaine pour chaque catégorie
|
42 |
# On copie les fichiers de domaine pour chaque catégorie
|
43 |
for PATH_FILE in `cat $BL_CATEGORIES_AVAILABLE`
|
43 |
for PATH_FILE in `cat $BL_CATEGORIES`
|
44 |
do
|
44 |
do
|
45 |
DOMAINE=`basename $PATH_FILE`
|
45 |
DOMAINE=`basename $PATH_FILE`
|
46 |
echo -n "."
|
46 |
echo -n "."
|
47 |
# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü
|
47 |
# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü
|
48 |
egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
|
48 |
egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
|
Line 50... |
Line 50... |
50 |
$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
|
50 |
$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
|
51 |
# Mise en forme dnsmasq
|
51 |
# Mise en forme dnsmasq
|
52 |
$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp
|
52 |
$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp
|
53 |
mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
|
53 |
mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
|
54 |
done
|
54 |
done
|
55 |
# on adapte le fichier $BL_CATEGORIES_AVAILABLE au choix de catégorie par défaut
|
- |
|
56 |
$SED "s?^[^#]?#&?g" $BL_CATEGORIES_AVAILABLE # on commente ce qui ne l'est pas
|
- |
|
57 |
for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_DEFAULT`
|
- |
|
58 |
do
|
- |
|
59 |
$SED "/^.*$ENABLE_CATEGORIE/d" $BL_CATEGORIES_AVAILABLE
|
- |
|
60 |
$SED "1i\/etc\/dansguardian\/lists\/blacklist\/$ENABLE_CATEGORIE" $BL_CATEGORIES_AVAILABLE
|
- |
|
61 |
done
|
- |
|
62 |
echo
|
- |
|
63 |
}
|
55 |
}
|
64 |
|
56 |
|
65 |
# Permet d'activer/désactiver les catégories de la BL
|
57 |
# Permet d'activer/désactiver les catégories de la BL
|
66 |
function cat_choice (){
|
58 |
function cat_choice (){
|
67 |
# un peu de ménage
|
59 |
# un peu de ménage
|
68 |
rm -rf $DIR_DNS_FILTER_ENABLED/*
|
60 |
rm -rf $DIR_DNS_FILTER_ENABLED/*
|
69 |
$SED "/\.Include/d" $DIR_DANSGUARDIAN/bannedsitelist $DIR_DANSGUARDIAN/bannedurllist
|
61 |
$SED "/\.Include/d" $DIR_DANSGUARDIAN/bannedsitelist $DIR_DANSGUARDIAN/bannedurllist
|
- |
|
62 |
# on adapte le fichier $BL_CATEGORIES au choix de catégorie
|
- |
|
63 |
$SED "s?^[^#]?#&?g" $BL_CATEGORIES # on commente ce qui ne l'est pas
|
- |
|
64 |
for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED`
|
- |
|
65 |
do
|
- |
|
66 |
$SED "/^.*$ENABLE_CATEGORIE/d" $BL_CATEGORIES
|
- |
|
67 |
$SED "1i\/etc\/dansguardian\/lists\/blacklist\/$ENABLE_CATEGORIE" $BL_CATEGORIES
|
- |
|
68 |
done
|
- |
|
69 |
sort -o $FILE_tmp $BL_CATEGORIES
|
- |
|
70 |
mv $FILE_tmp $BL_CATEGORIES
|
70 |
# on affecte les catégories
|
71 |
# on affecte les catégories à dansguardian et dnsmasq
|
71 |
for i in `cat $BL_CATEGORIES_DEFAULT`
|
72 |
for i in `cat $BL_CATEGORIES_ENABLED`
|
72 |
do
|
73 |
do
|
73 |
ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i
|
74 |
ln -s $DIR_DNS_FILTER_AVAILABLE/$i.conf $DIR_DNS_FILTER_ENABLED/$i
|
74 |
# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist
|
75 |
# echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist
|
75 |
echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/urls>" >> $DIR_DANSGUARDIAN/bannedurllist
|
76 |
echo ".Include<$DIR_DANSGUARDIAN/blacklists/$i/urls>" >> $DIR_DANSGUARDIAN/bannedurllist
|
76 |
done
|
77 |
done
|
Line 118... |
Line 119... |
118 |
echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL
|
119 |
echo "Univ-tlse du $DATE " > /var/www/html/VERSION-BL
|
119 |
rm -rf /tmp/con_ok.html
|
120 |
rm -rf /tmp/con_ok.html
|
120 |
fi
|
121 |
fi
|
121 |
adapt
|
122 |
adapt
|
122 |
;;
|
123 |
;;
|
123 |
# regénération suite à modification de la BL secondaire
|
124 |
# regénération suite à modification (choix catégories ou BL secondaire)
|
124 |
-reload)
|
125 |
-reload)
|
125 |
# pour Dansguardian
|
126 |
# pour Dansguardian
|
126 |
chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi
|
127 |
chown -R dansguardian:apache $DIR_DANSGUARDIAN/blacklists/ossi
|
127 |
chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi
|
128 |
chmod -R g+w $DIR_DANSGUARDIAN/blacklists/ossi
|
128 |
cat_choice
|
129 |
cat_choice
|
Line 130... |
Line 131... |
130 |
# pour dnsmasq (noms de domaine réhabilités)
|
131 |
# pour dnsmasq (noms de domaine réhabilités)
|
131 |
if [ `wc -w $DIR_DANSGUARDIAN/exceptionsitelist|cut -d " " -f1` != "0" ]
|
132 |
if [ `wc -w $DIR_DANSGUARDIAN/exceptionsitelist|cut -d " " -f1` != "0" ]
|
132 |
then
|
133 |
then
|
133 |
for i in `cat $DIR_DANSGUARDIAN/exceptionsitelist`
|
134 |
for i in `cat $DIR_DANSGUARDIAN/exceptionsitelist`
|
134 |
do
|
135 |
do
|
135 |
$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/sect.conf
|
136 |
$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*
|
136 |
done
|
137 |
done
|
137 |
fi
|
138 |
fi
|
- |
|
139 |
cp -f $DIR_DANSGUARDIAN/blacklists/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
|
138 |
$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
|
140 |
$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
|
139 |
service dnsmasq reload
|
141 |
service dnsmasq reload
|
140 |
;;
|
142 |
;;
|
141 |
*)
|
143 |
*)
|
142 |
echo "Argument inconnu :$1";
|
144 |
echo "Argument inconnu :$1";
|