webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-12 20:16:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Captive-Portal: add crontab and cleanup scripts

Browse Source 
The cleanup script is called every hour and deletes expired clients from
the clients file.
every night the captivectrl warpper runs once to flush the chains and
reload rules for active clients

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
This commit is contained in:
Alexander Marx
2016-01-28 16:05:53 +01:00
committed by Michael Tremer
parent 8b92078917
commit 4d9002279f
4 changed files with 51 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/cron/crontab
View File

@@ -65,6 +65,12 @@ HOME=/
# Retry sending spooled mails regularly
%hourly * /usr/sbin/dma -q
# Cleanup captive clients
%hourly * /usr/bin/captive-cleanup
# Reload captive firewall rules
%nightly * 23-1 /usr/local/bin/captivectrl >/dev/null
# Cleanup the mail spool directory
%weekly * * /usr/sbin/dma-cleanup-spool

1
config/rootfiles/common/stage2
View File

@@ -72,6 +72,7 @@ run
#usr/bin/perl
#usr/include
#usr/lib
usr/bin/captive-cleanup
usr/lib/firewall
usr/lib/firewall/firewall-lib.pl
usr/lib/firewall/ipsec-block

1
lfs/stage2
View File

@@ -107,6 +107,7 @@ endif
# Move script to correct place.
mv -vf /usr/local/bin/ovpn-ccd-convert /usr/sbin/
mv -vf /usr/local/bin/ovpn-collectd-convert /usr/sbin/
mv -vf /usr/local/bin/captive-cleanup /usr/bin/
# Install firewall scripts.
mkdir -pv /usr/lib/firewall

43
src/scripts/captive-cleanup Executable file
View File

@@ -0,0 +1,43 @@
#!/usr/bin/perl
###############################################################################
# #
# IPFire.org - A linux based firewall #
# Copyright (C) 2016 IPFire Team <alexander.marx@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation, either version 3 of the License, or #
# (at your option) any later version. #
# #
# This program is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
# #
###############################################################################
use strict;
require '/var/ipfire/general-functions.pl';
my %settings=();
my %clientshash=();
my $settingsfile="${General::swroot}/captive/settings";
my $clients="${General::swroot}/captive/clients";
my $time;
my $expiretime;
if (-f $settingsfile && -f $clients && ! -z $clients){
&General::readhash("$settingsfile", \%settings) if(-f $settingsfile);
&General::readhasharray("$clients", \%clientshash);
$time = time();
foreach my $key (keys %clientshash) {
$expiretime=($clientshash{$key}[5]*3600)+$clientshash{$key}[6];
if ($expiretime < $time){
delete $clientshash{key};
}
}
}