Line 1... |
Line 1... |
1 |
#/bin/bash
|
1 |
#/bin/bash
|
2 |
# $Id: alcasar-bl.sh 852 2012-04-09 13:26:51Z richard $
|
2 |
# $Id: alcasar-bl.sh 854 2012-04-09 19:31:46Z richard $
|
3 |
|
3 |
|
4 |
# alcasar-bl.sh
|
4 |
# alcasar-bl.sh
|
5 |
# by Franck BOUIJOUX and Richard REY
|
5 |
# by Franck BOUIJOUX and Richard REY
|
6 |
# This script is distributed under the Gnu General Public License (GPL)
|
6 |
# This script is distributed under the Gnu General Public License (GPL)
|
7 |
|
7 |
|
8 |
# Gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via Dansguardian)
|
8 |
# Gestion de la BL pour le filtrage de domaine (via dnsmasq) et d'URL (via Dansguardian)
|
9 |
# Manage the BL for DnsBlackHole (dnsmasq) and URL filtering (Dansguardian)
|
9 |
# Manage the BL for DnsBlackHole (dnsmasq) and URL filtering (Dansguardian)
|
10 |
|
10 |
|
11 |
CONF_FILE="/usr/local/etc/alcasar.conf"
|
11 |
CONF_FILE="/usr/local/etc/alcasar.conf"
|
- |
|
12 |
private_ip_mask=`grep PRIVATE_IP= $CONF_FILE|cut -d"=" -f2`
|
- |
|
13 |
private_ip_mask=${private_ip_mask:=192.168.182.1/24}
|
- |
|
14 |
PRIVATE_IP=`echo $private_ip_mask | cut -d"/" -f1` # ALCASAR LAN IP address
|
12 |
DIR_tmp="/tmp/blacklists"
|
15 |
DIR_tmp="/tmp/blacklists"
|
13 |
FILE_tmp="/tmp/fileFilter.txt"
|
16 |
FILE_tmp="/tmp/fileFilter.txt"
|
14 |
DIR_DG="/etc/dansguardian/lists"
|
17 |
DIR_DG="/etc/dansguardian/lists"
|
15 |
DIR_DG_BL="$DIR_DG/blacklists"
|
18 |
DIR_DG_BL="$DIR_DG/blacklists"
|
16 |
BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"
|
19 |
BL_CATEGORIES="/usr/local/etc/alcasar-bl-categories"
|
17 |
BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"
|
20 |
BL_CATEGORIES_ENABLED="/usr/local/etc/alcasar-bl-categories-enabled"
|
18 |
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
|
21 |
DIR_DNS_FILTER_AVAILABLE="/usr/local/etc/alcasar-dnsfilter-available"
|
19 |
DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"
|
22 |
DIR_DNS_FILTER_ENABLED="/usr/local/etc/alcasar-dnsfilter-enabled"
|
20 |
IP_RETOUR="20.0.0.1"
|
- |
|
21 |
BL_SERVER="cri.univ-tlse1.fr"
|
23 |
BL_SERVER="cri.univ-tlse1.fr"
|
22 |
SED="/bin/sed -i"
|
24 |
SED="/bin/sed -i"
|
23 |
|
25 |
|
24 |
# Récupération de l'archive de la BL Toulouse
|
26 |
# Récupération de l'archive de la BL Toulouse
|
25 |
function transfert () {
|
27 |
function transfert () {
|
Line 36... |
Line 38... |
36 |
[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DG_BL/
|
38 |
[ -d $DIR_tmp/ossi ] && mv -f $DIR_tmp/ossi $DIR_DG_BL/
|
37 |
[ -d $DIR_tmp/ip ] && mv -f $DIR_tmp/ip $DIR_DG_BL/
|
39 |
[ -d $DIR_tmp/ip ] && mv -f $DIR_tmp/ip $DIR_DG_BL/
|
38 |
cd /root
|
40 |
cd /root
|
39 |
rm -rf $DIR_tmp
|
41 |
rm -rf $DIR_tmp
|
40 |
}
|
42 |
}
|
41 |
# Adaptation de la BL Toulouse à la structure Dnsmasq
|
- |
|
42 |
function adapt () {
|
- |
|
43 |
# On récupère le nom des répertoire (catégories)
|
- |
|
44 |
find $DIR_DG_BL/ -type f -name domains > $BL_CATEGORIES
|
- |
|
45 |
# On supprime le suffice "/domains"
|
- |
|
46 |
$SED "s?\/domains??g" $BL_CATEGORIES
|
- |
|
47 |
rm -f $DIR_DNS_FILTER_AVAILABLE/*
|
- |
|
48 |
echo -n "Toulouse BlackList migration process. Please wait : "
|
- |
|
49 |
# pour chaque catégorie
|
- |
|
50 |
for PATH_FILE in `cat $BL_CATEGORIES`
|
- |
|
51 |
do
|
- |
|
52 |
echo -n "."
|
- |
|
53 |
# on crée le fichier 'urls' s'il n'existe pas
|
- |
|
54 |
if [ ! -f $PATH_FILE/urls ]
|
- |
|
55 |
then
|
- |
|
56 |
touch $PATH_FILE/urls
|
- |
|
57 |
chown dansguardian:apache $PATH_FILE/urls
|
- |
|
58 |
fi
|
- |
|
59 |
# suppression des @IP, des lignes commentées et des caractères bizarres comme les ô et û ö ü
|
- |
|
60 |
egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
|
- |
|
61 |
$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp
|
- |
|
62 |
$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
|
- |
|
63 |
# Mise en forme dnsmasq
|
- |
|
64 |
$SED "s?.*?address=/&/$IP_RETOUR?g" /tmp/dnsmasq-bl.tmp
|
- |
|
65 |
DOMAINE=`basename $PATH_FILE`
|
- |
|
66 |
mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
|
- |
|
67 |
done
|
- |
|
68 |
echo
|
- |
|
69 |
}
|
- |
|
70 |
# Permet d'activer/désactiver les catégories de la BL
|
43 |
# Permet d'activer/désactiver les catégories de la BL
|
71 |
function cat_choice (){
|
44 |
function cat_choice (){
|
72 |
# un peu de ménage
|
45 |
# un peu de ménage
|
73 |
rm -rf $DIR_DNS_FILTER_ENABLED/*
|
46 |
rm -rf $DIR_DNS_FILTER_ENABLED/*
|
74 |
$SED "/\.Include/d" $DIR_DG/bannedsitelist $DIR_DG/bannedurllist
|
47 |
$SED "/\.Include/d" $DIR_DG/bannedsitelist $DIR_DG/bannedurllist
|
Line 77... |
Line 50... |
77 |
for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED` # on affecte les catégories à dansguardian et dnsmasq
|
50 |
for ENABLE_CATEGORIE in `cat $BL_CATEGORIES_ENABLED` # on affecte les catégories à dansguardian et dnsmasq
|
78 |
do
|
51 |
do
|
79 |
$SED "/\/$ENABLE_CATEGORIE$/d" $BL_CATEGORIES
|
52 |
$SED "/\/$ENABLE_CATEGORIE$/d" $BL_CATEGORIES
|
80 |
$SED "1i\/etc\/dansguardian\/lists\/blacklists\/$ENABLE_CATEGORIE" $BL_CATEGORIES
|
53 |
$SED "1i\/etc\/dansguardian\/lists\/blacklists\/$ENABLE_CATEGORIE" $BL_CATEGORIES
|
81 |
ln -s $DIR_DNS_FILTER_AVAILABLE/$ENABLE_CATEGORIE.conf $DIR_DNS_FILTER_ENABLED/$ENABLE_CATEGORIE
|
54 |
ln -s $DIR_DNS_FILTER_AVAILABLE/$ENABLE_CATEGORIE.conf $DIR_DNS_FILTER_ENABLED/$ENABLE_CATEGORIE
|
82 |
echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/domains>" >> $DIR_DANSGUARDIAN/bannedsitelist # dansguardian s'occupe du contournement par proxy http ;-)
|
55 |
echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/domains>" >> $DIR_DG/bannedsitelist # dansguardian s'occupe du contournement par proxy http ;-)
|
83 |
echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/urls>" >> $DIR_DG/bannedurllist
|
56 |
echo ".Include<$DIR_DG_BL/$ENABLE_CATEGORIE/urls>" >> $DIR_DG/bannedurllist
|
84 |
done
|
57 |
done
|
85 |
sort -k2n $BL_CATEGORIES > $FILE_tmp
|
58 |
sort -k2n $BL_CATEGORIES > $FILE_tmp
|
86 |
mv $FILE_tmp $BL_CATEGORIES
|
59 |
mv $FILE_tmp $BL_CATEGORIES
|
87 |
}
|
60 |
}
|
Line 136... |
Line 109... |
136 |
# désactivation du filtrage
|
109 |
# désactivation du filtrage
|
137 |
-off | --off)
|
110 |
-off | --off)
|
138 |
$SED "s?^DNS_FILTERING.*?DNS_FILTERING=off?g" $CONF_FILE
|
111 |
$SED "s?^DNS_FILTERING.*?DNS_FILTERING=off?g" $CONF_FILE
|
139 |
bl_disable
|
112 |
bl_disable
|
140 |
;;
|
113 |
;;
|
141 |
# Mise a jour de la blacklist 'Toulouse' et adaptation à dansguardian et dnsmasq
|
114 |
# Mise a jour de la blacklist 'Toulouse' (attente validation md5 avant adaptation à notre structure)
|
142 |
-download | --download)
|
115 |
-download | --download)
|
143 |
rm -rf /tmp/con_ok.html
|
116 |
rm -rf /tmp/con_ok.html
|
144 |
`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
|
117 |
`/usr/bin/curl $BL_SERVER -# -o /tmp/con_ok.html`
|
145 |
if [ ! -e /tmp/con_ok.html ]
|
118 |
if [ ! -e /tmp/con_ok.html ]
|
146 |
then
|
119 |
then
|
Line 151... |
Line 124... |
151 |
chown -R dansguardian:apache $DIR_DG
|
124 |
chown -R dansguardian:apache $DIR_DG
|
152 |
chmod -R g+w $DIR_DG
|
125 |
chmod -R g+w $DIR_DG
|
153 |
rm -rf /tmp/con_ok.html
|
126 |
rm -rf /tmp/con_ok.html
|
154 |
fi
|
127 |
fi
|
155 |
;;
|
128 |
;;
|
156 |
# Adaptation de la BL à notre structure 'dnsmasq + DG)
|
129 |
# Adaptation de la BL à notre structure (dnsmasq + DG)
|
157 |
-adapt | --adapt)
|
130 |
-adapt | --adapt)
|
- |
|
131 |
find $DIR_DG_BL/ -type f -name domains > $BL_CATEGORIES # On récupère le nom des répertoire (catégories)
|
- |
|
132 |
$SED "s?\/domains??g" $BL_CATEGORIES # On supprime le suffice "/domains"
|
- |
|
133 |
rm -f $DIR_DNS_FILTER_AVAILABLE/*
|
- |
|
134 |
echo -n "Toulouse BlackList migration process. Please wait : "
|
- |
|
135 |
for PATH_FILE in `cat $BL_CATEGORIES` # pour chaque catégorie
|
- |
|
136 |
do
|
- |
|
137 |
echo -n "."
|
- |
|
138 |
if [ ! -f $PATH_FILE/urls ] # on crée le fichier 'urls' s'il n'existe pas
|
- |
|
139 |
then
|
- |
|
140 |
touch $PATH_FILE/urls
|
- |
|
141 |
chown dansguardian:apache $PATH_FILE/urls
|
- |
|
142 |
fi
|
- |
|
143 |
# suppression des @IP, de caractères acccentués et des lignes commentées
|
- |
|
144 |
egrep -v "([0-9]{1,3}\.){3}[0-9]{1,3}" $PATH_FILE/domains > /tmp/dnsmasq-bl.tmp
|
- |
|
145 |
$SED "/[äâëêïîöôüû]/d" /tmp/dnsmasq-bl.tmp
|
- |
|
146 |
$SED "/^#.*/d" /tmp/dnsmasq-bl.tmp
|
- |
|
147 |
$SED "s?.*?address=/&/$PRIVATE_IP?g" /tmp/dnsmasq-bl.tmp # Mise en forme dnsmasq
|
- |
|
148 |
DOMAINE=`basename $PATH_FILE`
|
- |
|
149 |
mv /tmp/dnsmasq-bl.tmp $DIR_DNS_FILTER_AVAILABLE/$DOMAINE.conf
|
158 |
adapt
|
150 |
done
|
159 |
cat_choice
|
151 |
echo
|
160 |
;;
|
152 |
;;
|
161 |
# regénération suite à modification (choix catégories ou BL secondaire)
|
153 |
# regénération suite à modification de la BL secondaire ou du choix des catégories
|
162 |
-reload | --reload)
|
154 |
-reload | --reload)
|
163 |
adapt
|
- |
|
164 |
# pour Dansguardian
|
155 |
# pour Dansguardian
|
165 |
chown -R dansguardian:apache $DIR_DG_BL/ossi
|
156 |
chown -R dansguardian:apache $DIR_DG_BL/ossi
|
166 |
chmod -R g+w $DIR_DG_BL/ossi
|
157 |
chmod -R g+w $DIR_DG_BL/ossi
|
167 |
cat_choice
|
158 |
cat_choice
|
168 |
# pour dnsmasq (noms de domaine réhabilités)
|
159 |
# pour dnsmasq (noms de domaine réhabilités)
|
Line 172... |
Line 163... |
172 |
do
|
163 |
do
|
173 |
$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*
|
164 |
$SED "/$i/d" $DIR_DNS_FILTER_AVAILABLE/*
|
174 |
done
|
165 |
done
|
175 |
fi
|
166 |
fi
|
176 |
cp -f $DIR_DG_BL/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
|
167 |
cp -f $DIR_DG_BL/ossi/domains $DIR_DNS_FILTER_AVAILABLE/ossi.conf
|
177 |
$SED "s?.*?address=/&/$IP_RETOUR?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
|
168 |
$SED "s?.*?address=/&/$PRIVATE_IP?g" $DIR_DNS_FILTER_AVAILABLE/ossi.conf
|
178 |
IP_PURE=`grep '^ip' $BL_CATEGORIES_ENABLED|wc -l`
|
169 |
IP_PURE=`grep '^ip' $BL_CATEGORIES_ENABLED|wc -l`
|
179 |
if [ $IP_PURE -eq "1" ]; then # filtrage des url sans nom de domaine
|
170 |
if [ $IP_PURE -eq "1" ]; then # filtrage des url sans nom de domaine
|
180 |
$SED "s/^\#\*ip$/*ip/g" $DIR_DG/bannedsitelist
|
171 |
$SED "s/^\#\*ip$/*ip/g" $DIR_DG/bannedsitelist
|
181 |
else
|
172 |
else
|
182 |
$SED "s/^\*ip$/#*ip/g" $DIR_DG/bannedsitelist
|
173 |
$SED "s/^\*ip$/#*ip/g" $DIR_DG/bannedsitelist
|