Projet

Général

Profil

« Précédent | Suivant » 

Révision 0ffacdb6

Ajouté par Jérôme Schneider il y a plus de 9 ans

Add support for mac addresses blacklist

Closes #5572

Voir les différences:

usr/local/univnautes/sp/rc.sh
32 32
    ) &
33 33
}
34 34

  
35
function syncbl() {
36
    echo "sync blacklist in progress (backgrounded)" | logger -p local4.info -t sp/syncblacklists
37
    (
38
      cd /usr/local/univnautes/sp/
39
      ./update-blacklists.sh | logger -p local4.info -t sp/update-blacklists
40
    ) &
41
}
42

  
35 43
function syncdata() {
36 44
    echo "sync metadatas + geoinfos in progress (backgrounded)" | logger -p local4.info -t sp/syncdata
37 45
    (
......
56 64
    echo "started (manage.py runfcgi)" | logger -p local4.info -t sp/start
57 65
    syncdata
58 66
    syncwl
67
    syncbl
59 68
    cronstart
60 69
}
61 70

  
usr/local/univnautes/sp/update-blacklists.sh
1
#!/bin/sh
2

  
3
log() {
4
    logger -p local4.info -t macblacklist -- "$*"
5
}
6

  
7
log "update MAC blacklist"
8
cd /usr/local/univnautes/sp
9
for ctx in $(./manage.py configxml get cpnames); do
10
    /sbin/ipfw -x $ctx -fq delete 666
11
    for MAC in $(./manage.py configxml get blacklist macaddresses | sed 's/#.*$//'); do
12
        # sanitize
13
        MAC=`echo $MAC | tr -dc 0-9a-fA-F:`
14
        if test -n "$MAC"; then
15
            if /sbin/ipfw -x $ctx -fq add 666 deny MAC $MAC any; then
16
                log "added: $MAC in $ctx"
17
            else
18
                log "ERROR can't add: $MAC (incorrect MAC address ?)"
19
            fi
20
        fi
21
    done
22
done
23

  
24
exit 0

Formats disponibles : Unified diff