File ipdeny-update-firewalld.sh.in of Package firewalld-ipdeny-ipsets

Overview Repositories Revisions Requests Users Attributes Meta

File ipdeny-update-firewalld.sh.in of Package firewalld-ipdeny-ipsets (Revision f45fa9364d16266116954d0f61f879d2)

Currently displaying revision f45fa9364d16266116954d0f61f879d2 , Show latest

#!/bin/bash
# Handles firewall part of the show

function firewall_cmds
{
    FIREWALLD_PARMS="--quiet --permanent"
    if [ -n "${VERBOSE}" ]
    then
        FIREWALLD_PARMS="--permanent"
        echo "firewall_cmds(): Version is '${VERSION}' and param is '${1}'"
        echo "firewall_cmds(): Basic FirewallD params: '${FIREWALLD_PARMS}'"
    fi

if [ -x /usr/bin/firewall-cmd ]
    then
        case "${1}" in
            pre-create)
                OUTPUT_FILE=$(mktemp)
                FIREWALLD_FILE="/etc/firewalld/ipsets/ipdeny_com_${VERSION}.xml"
                xzcat /usr/share/ipdeny/*.zone.xz | sort --unique > "${OUTPUT_FILE}"
                sed -e "s#__CUR_VERSION__#${VERSION}#g" /usr/share/ipdeny/ipdeny_com_template.xml > "${FIREWALLD_FILE}"
                sed -e "s#$.*$#  <entry>\1</entry>#g" "${OUTPUT_FILE}" >> "${FIREWALLD_FILE}"
                echo "</ipset>" >> "${FIREWALLD_FILE}"
                rm "${OUTPUT_FILE}"
                ;;
            add-entries)
                OUTPUT_FILE=$(mktemp)
                xzcat /usr/share/ipdeny/*.zone.xz | sort --unique > "${OUTPUT_FILE}"
                firewall-cmd ${FIREWALLD_PARMS} --ipset="ipdeny_com_${VERSION}" --add-entries-from-file="${OUTPUT_FILE}"
                rm "${OUTPUT_FILE}"
                ;;
            remove-entry)
                ;;
            create-ipset)
                firewall-cmd ${FIREWALLD_PARMS} --new-ipset="ipdeny_com_${VERSION}" --type=hash:net --option=family=inet --option=hashsize=4096 --option=maxelem=200000
                firewall-cmd ${FIREWALLD_PARMS} --ipset="ipdeny_com_${VERSION}" --set-description="FirewallD IPDENY.COM Blocklist conversion ${VERSION}"
                firewall-cmd ${FIREWALLD_PARMS} --ipset="ipdeny_com_${VERSION}" --set-short="Firewalld IPDENY.COM"
                ;;
            remove-ipset)
                firewall-cmd ${FIREWALLD_PARMS} --delete-ipset="ipdeny_com_${VERSION}"
                ;;
            add-source)
                firewall-cmd ${FIREWALLD_PARMS} --zone="${ZONE}" --add-source="ipset:ipdeny_com_${VERSION}"
                ;;
            remove-source)
                firewall-cmd ${FIREWALLD_PARMS} --zone="${ZONE}" --remove-source="ipset:ipdeny_com_${VERSION}"
                ;;
        esac
    fi
}

if [ -z "${VERSION}" ]
then
    VERSION=__CUR_VERSION__
fi

if [ -z "${ZONE}" ]
then
    ZONE="drop"
fi

if [ -z "$1" ]
then
    firewall_cmds create-ipset
    firewall_cmds add-entries
    firewall_cmds add-source
else
    firewall_cmds "$1"
fi

if [ -f "/etc/firewalld/ipsets/ipdeny_com_${VERSION}.xml.old" ]
then
    rm "/etc/firewalld/ipsets/ipdeny_com_${VERSION}.xml.old"
fi

Places

File ipdeny-update-firewalld.sh.in of Package firewalld-ipdeny-ipsets (Revision f45fa9364d16266116954d0f61f879d2)

Places