mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-12 04:05:53 +02:00
a0a33a8f10
For details see: https://bugzilla.ipfire.org/show_bug.cgi?id=11271 Download GEoIP database per HTTPS download. Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
138 lines
3.7 KiB
Bash
138 lines
3.7 KiB
Bash
#!/bin/bash
|
|
###############################################################################
|
|
# #
|
|
# IPFire.org - A linux based firewall #
|
|
# Copyright (C) 2014 IPFire Development Team <info@ipfire.org> #
|
|
# #
|
|
# This program is free software: you can redistribute it and/or modify #
|
|
# it under the terms of the GNU General Public License as published by #
|
|
# the Free Software Foundation, either version 3 of the License, or #
|
|
# (at your option) any later version. #
|
|
# #
|
|
# This program is distributed in the hope that it will be useful, #
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
|
# GNU General Public License for more details. #
|
|
# #
|
|
# You should have received a copy of the GNU General Public License #
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
|
# #
|
|
###############################################################################
|
|
|
|
TMP_PATH=$(mktemp -d)
|
|
TMP_FILE=$(mktemp -p $TMP_PATH)
|
|
|
|
SCRIPT_PATH=/usr/local/bin
|
|
DEST_PATH=/usr/share/xt_geoip
|
|
|
|
DL_URL=https://geolite.maxmind.com/download/geoip/database
|
|
DL_FILE=GeoIPCountryCSV.zip
|
|
|
|
CSV_FILE=GeoIPCountryWhois.csv
|
|
|
|
ARCH=LE
|
|
|
|
eval $(/usr/local/bin/readhash /var/ipfire/proxy/settings)
|
|
|
|
function download() {
|
|
echo "Downloading latest GeoIP ruleset..."
|
|
|
|
# Create temporary directory.
|
|
mkdir -pv $TMP_PATH
|
|
|
|
# Proxy settings.
|
|
# Check if a proxy should be used.
|
|
if [[ $UPSTREAM_PROXY ]]; then
|
|
PROXYSETTINGS="-e http_proxy=http://"
|
|
|
|
# Check if authentication against the proxy is configured.
|
|
if [[ $UPSTREAM_USER && $UPSTREAM_PASSWORD ]]; then
|
|
PROXYSETTINGS="$PROXYSETTINGS$UPSTREAM_USER:$UPSTREAM_PASSWORD@"
|
|
fi
|
|
|
|
# Add proxy server.
|
|
PROXYSETTINGS="$PROXYSETTINGS$UPSTREAM_PROXY"
|
|
fi
|
|
|
|
# Get the latest GeoIP database from server.
|
|
wget $DL_URL/$DL_FILE $PROXYSETTINGS -O $TMP_FILE
|
|
|
|
# Extract files.
|
|
unzip $TMP_FILE -d $TMP_PATH
|
|
|
|
return 0
|
|
}
|
|
|
|
function build() {
|
|
echo "Convert database..."
|
|
|
|
# Check if the csv file exists.
|
|
if [ ! -e $TMP_PATH/$CSV_FILE ]; then
|
|
echo "$TMP_PATH/$CSV_FILE not found. Exiting."
|
|
return 1
|
|
fi
|
|
|
|
# Run script to convert the CSV file into several xtables
|
|
# compatible binary files.
|
|
if ! $SCRIPT_PATH/xt_geoip_build $TMP_PATH/$CSV_FILE -D $TMP_PATH; then
|
|
echo "Could not convert ruleset. Aborting." >&2
|
|
return 1
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
function install() {
|
|
echo "Install databases..."
|
|
|
|
# Check if our destination exist.
|
|
if [ ! -e "$DEST_PATH" ]; then
|
|
mkdir -p $DEST_PATH &>/dev/null
|
|
fi
|
|
|
|
# Install databases.
|
|
if ! cp -af $TMP_PATH/$ARCH $DEST_PATH &>/dev/null; then
|
|
echo "Could not copy files. Aborting." >&2
|
|
return 1
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
function cleanup() {
|
|
echo "Cleaning up temporary files..."
|
|
if ! rm -rf $TMP_PATH &>/dev/null; then
|
|
echo "Could not remove files. Aborting." >&2
|
|
return 1
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
|
|
function main() {
|
|
# Download ruleset.
|
|
download || exit $?
|
|
|
|
# Convert the ruleset.
|
|
if ! build; then
|
|
# Do cleanup.
|
|
cleanup || exit $?
|
|
exit 1
|
|
fi
|
|
|
|
# Install the converted ruleset.
|
|
if ! install; then
|
|
# Do cleanup.
|
|
cleanup || exit $?
|
|
exit 1
|
|
fi
|
|
|
|
# Finaly remove temporary files.
|
|
cleanup || exit $?
|
|
|
|
return 0
|
|
}
|
|
|
|
# Run the main function.
|
|
main
|