WebSVN – ALCASAR – Diff – /scripts/alcasar-dns-local.sh


#!/bin/bash
# $Id: alcasar-dns-local.sh 2833 2020-06-14 10:13:18Z rexy $
 
# alcasar-dns-local.sh
# by Rexy - 3abtux
# This script is distributed under the Gnu General Public License (GPL)
 
# active ou desactive la redirection du service DNS sur le réseau de consultation
# enable or disable the redirector of internal DNS service on consultation LAN
 
SED="/bin/sed -i"
 
ALCASAR_CONF_FILE="/usr/local/etc/alcasar.conf"
LOCAL_DOMAIN_CONF_FILE="/etc/unbound/conf.d/common/local-forward/dns-redirector.conf"
LOCAL_HOSTNAME_FILE="/etc/hosts"
 
# define DNS parameters (LAN side)
INT_DNS_DOMAIN=`grep ^DOMAIN $ALCASAR_CONF_FILE|cut -d"=" -f2`
INT_DNS_HOST=`grep ^HOSTNAME $ALCASAR_CONF_FILE|cut -d"=" -f2`
INT_DNS_IP_MASK=`grep ^PRIVATE_IP $ALCASAR_CONF_FILE|cut -d"=" -f2`
INT_DNS_IP=`grep ^PRIVATE_IP $ALCASAR_CONF_FILE|cut -d"=" -f2|cut -d"/" -f1`
INTIF=`grep ^INTIF $ALCASAR_CONF_FILE|cut -d"=" -f2`
INT_DNS_ACTIVE=`grep INT_DNS_ACTIVE $ALCASAR_CONF_FILE|cut -d"=" -f2`
LOCAL_DNS_FILE="/etc/unbound/conf.d/common/local-dns/$INTIF.conf"
LOCAL_DNS_BLACKHOLE_FILE="/etc/unbound/conf.d/blackhole/iface.$INTIF.conf"
 
usage="Usage: alcasar-dns-local.sh {--on | -on} | {--off | -off} | {--add | -add} ip domain | {--del | -del} ip domain | {--reload | -reload}"
nb_args=$#
args=$1
if [ $nb_args -eq 0 ]
then
	echo "$usage"
	exit 1
fi
 
function restart_dns(){
	for dns in unbound unbound-blacklist unbound-whitelist dnsmasq-whitelist unbound-blackhole
	do
		systemctl restart $dns
	done
}
 
function hosts_to_unbound(){  # configure the unbound conf file with local host names resolution (forward + blackhole)
		cat << EOF > $LOCAL_DNS_FILE
server:
	local-zone: "$INT_DNS_DOMAIN" static
	local-data: "$INT_DNS_HOST.$INT_DNS_DOMAIN A $INT_DNS_IP"
	local-data-ptr: "$INT_DNS_IP $INT_DNS_HOST.$INT_DNS_DOMAIN"
EOF
	if [ "$HOSTNAME" != 'alcasar' ]
	then
		echo -e "\tlocal-zone: \"alcasar\" static" >> /etc/unbound/conf.d/common/local-dns/${INTIF}.conf
		echo -e "\tlocal-zone: \"alcasar A $PRIVATE_IP\"" >> /etc/unbound/conf.d/common/local-dns/${INTIF}.conf
		echo -e "\tlocal-zone: \"alcasar\" static" >> /etc/unbound/conf.d/forward/iface.lo.conf
		echo -e "\tlocal-zone: \"alcasar A 127.0.0.1\"" >> /etc/unbound/conf.d/forward/iface.lo.conf
	fi
		cat << EOF > $LOCAL_DNS_BLACKHOLE_FILE
server:
	server:
	interface: ${INT_DNS_IP}@56
	access-control-view: $INT_DNS_IP_MASK $INTIF
view:
	name: "$INTIF"
	local-zone: "." redirect
	local-data: ". A $INT_DNS_IP"
	local-zone: "$INT_DNS_DOMAIN" static
	local-data: "$INT_DNS_HOST.$INT_DNS_DOMAIN A $INT_DNS_IP"
	local-data-ptr: "$INT_DNS_IP $INT_DNS_HOST.$INT_DNS_DOMAIN"
EOF
	while read -r line
	do
		ip_address=$(echo $line | awk '{ print $1 }')
		domain=$(echo $line | awk '{ print $2 }')
		if ! echo $line | grep -E -q "^([0-9\.\t ]+alcasar( |$)|127\.0\.0)"
		then
			echo -e "\tlocal-data: \"$domain.$INT_DNS_DOMAIN A $ip_address\"" >> $LOCAL_DNS_FILE
			echo -e "\tlocal-data-ptr: \"$ip_address $domain.$INT_DNS_DOMAIN\"" >> $LOCAL_DNS_FILE
			echo -e "\tlocal-data: \"$domain.$INT_DNS_DOMAIN A $ip_address\"" >> $LOCAL_DNS_BLACKHOLE_FILE
			echo -e "\tlocal-data-ptr: \"$ip_address $domain.$INT_DNS_DOMAIN\"" >> $LOCAL_DNS_BLACKHOLE_FILE
		fi
	done < $LOCAL_HOSTNAME_FILE
}
 
case $args in
	-\? | -h | --h)
		echo "$usage"
		exit 0
		;;
	--add|-add) # add a local host resolution
		if [ $nb_args -ne 3 ]
		then
			echo "$usage"
			exit 1
		else
			# removing if already exists
			$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE
			# adding to the hosts file
			echo -e "$2\t$3" >> $LOCAL_HOSTNAME_FILE
			hosts_to_unbound
			restart_dns
		fi
		;;
	--del|-del) # remove a local host resolution
		if [ $nb_args -ne 3 ]
		then
			echo "$usage"
			exit 1
		else
			$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE
			hosts_to_unbound
			restart_dns
		fi
		;;
	--reload|-reload)
			hosts_to_unbound
			restart_dns
		;;
	--hosts_to_unbound|-hosts_to_unbound)
			hosts_to_unbound
		;;
	--off|-off) # disable DNS redirector
		#$SED "s?^#filterwin2k.*?filterwin2k?g" $DNSMASQ_CONF_FILE
		rm -f $LOCAL_DOMAIN_CONF_FILE
		$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=off?g" $ALCASAR_CONF_FILE
		restart_dns
 
		# Reload firewall
		/usr/local/bin/alcasar-iptables.sh
		;;
	--on|-on) # enable DNS redirector
		#$SED "s?^filterwin2k.*?#filterwin2k?g" $DNSMASQ_CONF_FILE
		cat > $LOCAL_DOMAIN_CONF_FILE << EOF
server:
    local-zone: "$INT_DNS_DOMAIN." transparent
forward-zone:
	name: "$INT_DNS_DOMAIN."
	forward-addr: $INT_DNS_IP
EOF
		$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=on?g" $ALCASAR_CONF_FILE
		restart_dns
		# Reload firewall
		/usr/local/bin/alcasar-iptables.sh
		;;
	*)
		echo "Argument inconnu : $1";
		echo "$usage"
		exit 1
		;;
esac
 

Rev 2831	Rev 2833
1	`#!/bin/bash`	1	`#!/bin/bash`
2	`# $Id: alcasar-dns-local.sh 2831 2020-06-07 21:43:19Z rexy $`	2	`# $Id: alcasar-dns-local.sh 2833 2020-06-14 10:13:18Z rexy $`
3		3
4	`# alcasar-dns-local.sh`	4	`# alcasar-dns-local.sh`
5	`# by Rexy - 3abtux`	5	`# by Rexy - 3abtux`
6	`# This script is distributed under the Gnu General Public License (GPL)`	6	`# This script is distributed under the Gnu General Public License (GPL)`
7		7
8	`# active ou desactive la redirection du service DNS sur le réseau de consultation`	8	`# active ou desactive la redirection du service DNS sur le réseau de consultation`
9	`# enable or disable the redirector of internal DNS service on consultation LAN`	9	`# enable or disable the redirector of internal DNS service on consultation LAN`
10		10
11	`SED="/bin/sed -i"`	11	`SED="/bin/sed -i"`
12		12
13	`ALCASAR_CONF_FILE="/usr/local/etc/alcasar.conf"`	13	`ALCASAR_CONF_FILE="/usr/local/etc/alcasar.conf"`
14	`LOCAL_DOMAIN_CONF_FILE="/etc/unbound/conf.d/common/local-forward/dns-redirector.conf"`	14	`LOCAL_DOMAIN_CONF_FILE="/etc/unbound/conf.d/common/local-forward/dns-redirector.conf"`
15	`LOCAL_HOSTNAME_FILE="/etc/hosts"`	15	`LOCAL_HOSTNAME_FILE="/etc/hosts"`
16		16
17	`# define DNS parameters (LAN side)`	17	`# define DNS parameters (LAN side)`
18	INT_DNS_DOMAIN=`grep ^DOMAIN $ALCASAR_CONF_FILE\|cut -d"=" -f2`	18	INT_DNS_DOMAIN=`grep ^DOMAIN $ALCASAR_CONF_FILE\|cut -d"=" -f2`
19	INT_DNS_HOST=`grep ^HOSTNAME $ALCASAR_CONF_FILE\|cut -d"=" -f2`	19	INT_DNS_HOST=`grep ^HOSTNAME $ALCASAR_CONF_FILE\|cut -d"=" -f2`
-		20	INT_DNS_IP_MASK=`grep ^PRIVATE_IP $ALCASAR_CONF_FILE\|cut -d"=" -f2`
20	INT_DNS_IP=`grep ^PRIVATE_IP $ALCASAR_CONF_FILE\|cut -d"=" -f2\|cut -d"/" -f1`	21	INT_DNS_IP=`grep ^PRIVATE_IP $ALCASAR_CONF_FILE\|cut -d"=" -f2\|cut -d"/" -f1`
21	INTIF=`grep ^INTIF $ALCASAR_CONF_FILE\|cut -d"=" -f2`	22	INTIF=`grep ^INTIF $ALCASAR_CONF_FILE\|cut -d"=" -f2`
22	INT_DNS_ACTIVE=`grep INT_DNS_ACTIVE $ALCASAR_CONF_FILE\|cut -d"=" -f2`	23	INT_DNS_ACTIVE=`grep INT_DNS_ACTIVE $ALCASAR_CONF_FILE\|cut -d"=" -f2`
23	`LOCAL_DNS_FILE="/etc/unbound/conf.d/common/local-dns/$INTIF.conf"`	24	`LOCAL_DNS_FILE="/etc/unbound/conf.d/common/local-dns/$INTIF.conf"`
-		25	`LOCAL_DNS_BLACKHOLE_FILE="/etc/unbound/conf.d/blackhole/iface.$INTIF.conf"`
24		26
25	`usage="Usage: alcasar-dns-local.sh {--on \| -on} \| {--off \| -off} \| {--add \| -add} ip domain \| {--del \| -del} ip domain \| {--reload \| -reload}"`	27	`usage="Usage: alcasar-dns-local.sh {--on \| -on} \| {--off \| -off} \| {--add \| -add} ip domain \| {--del \| -del} ip domain \| {--reload \| -reload}"`
26	`nb_args=$#`	28	`nb_args=$#`
27	`args=$1`	29	`args=$1`
28	`if [ $nb_args -eq 0 ]`	30	`if [ $nb_args -eq 0 ]`
29	`then`	31	`then`
30	`echo "$usage"`	32	`echo "$usage"`
31	`exit 1`	33	`exit 1`
32	`fi`	34	`fi`
33		35
34	`function restart_dns(){`	36	`function restart_dns(){`
35	`for dns in unbound unbound-blacklist unbound-whitelist dnsmasq-whitelist unbound-blackhole`	37	`for dns in unbound unbound-blacklist unbound-whitelist dnsmasq-whitelist unbound-blackhole`
36	`do`	38	`do`
37	`systemctl restart $dns`	39	`systemctl restart $dns`
38	`done`	40	`done`
39	`}`	41	`}`
40		42
41	`function hosts_to_unbound(){`	43	`function hosts_to_unbound(){ # configure the unbound conf file with local host names resolution (forward + blackhole)`
42	`cat << EOF > $LOCAL_DNS_FILE`	44	`cat << EOF > $LOCAL_DNS_FILE`
43	`server:`	45	`server:`
44	`local-zone: "$INT_DNS_DOMAIN" static`	46	`local-zone: "$INT_DNS_DOMAIN" static`
45	`local-data: "$INT_DNS_HOST.$INT_DNS_DOMAIN A $INT_DNS_IP"`	47	`local-data: "$INT_DNS_HOST.$INT_DNS_DOMAIN A $INT_DNS_IP"`
46	`local-data-ptr: "$INT_DNS_IP $INT_DNS_HOST.$INT_DNS_DOMAIN"`	48	`local-data-ptr: "$INT_DNS_IP $INT_DNS_HOST.$INT_DNS_DOMAIN"`
47	`EOF`	49	`EOF`
-		50	`if [ "$HOSTNAME" != 'alcasar' ]`
-		51	`then`
-		52	`echo -e "\tlocal-zone: \"alcasar\" static" >> /etc/unbound/conf.d/common/local-dns/${INTIF}.conf`
-		53	`echo -e "\tlocal-zone: \"alcasar A $PRIVATE_IP\"" >> /etc/unbound/conf.d/common/local-dns/${INTIF}.conf`
-		54	`echo -e "\tlocal-zone: \"alcasar\" static" >> /etc/unbound/conf.d/forward/iface.lo.conf`
-		55	`echo -e "\tlocal-zone: \"alcasar A 127.0.0.1\"" >> /etc/unbound/conf.d/forward/iface.lo.conf`
-		56	`fi`
-		57	`cat << EOF > $LOCAL_DNS_BLACKHOLE_FILE`
-		58	`server:`
-		59	`server:`
-		60	`interface: ${INT_DNS_IP}@56`
-		61	`access-control-view: $INT_DNS_IP_MASK $INTIF`
-		62	`view:`
-		63	`name: "$INTIF"`
-		64	`local-zone: "." redirect`
-		65	`local-data: ". A $INT_DNS_IP"`
-		66	`local-zone: "$INT_DNS_DOMAIN" static`
-		67	`local-data: "$INT_DNS_HOST.$INT_DNS_DOMAIN A $INT_DNS_IP"`
-		68	`local-data-ptr: "$INT_DNS_IP $INT_DNS_HOST.$INT_DNS_DOMAIN"`
-		69	`EOF`
48	`while read -r line`	70	`while read -r line`
49	`do`	71	`do`
50	`ip_address=$(echo $line \| awk '{ print $1 }')`	72	`ip_address=$(echo $line \| awk '{ print $1 }')`
51	`domain=$(echo $line \| awk '{ print $2 }')`	73	`domain=$(echo $line \| awk '{ print $2 }')`
52	`if ! echo $line \| grep -E -q "^([0-9\.\t ]+alcasar( \|$)\|127\.0\.0)"`	74	`if ! echo $line \| grep -E -q "^([0-9\.\t ]+alcasar( \|$)\|127\.0\.0)"`
53	`then`	75	`then`
54	`echo -e "\tlocal-data: \"$domaini.$INT_DNS_DOMAIN A $ip_address\"" >> $LOCAL_DNS_FILE`	76	`echo -e "\tlocal-data: \"$domain.$INT_DNS_DOMAIN A $ip_address\"" >> $LOCAL_DNS_FILE`
55	`echo -e "\tlocal-data-ptr: \"$ip_address $domain.$INT_DNS_DOMAIN\"" >> $LOCAL_DNS_FILE`	77	`echo -e "\tlocal-data-ptr: \"$ip_address $domain.$INT_DNS_DOMAIN\"" >> $LOCAL_DNS_FILE`
-		78	`echo -e "\tlocal-data: \"$domain.$INT_DNS_DOMAIN A $ip_address\"" >> $LOCAL_DNS_BLACKHOLE_FILE`
-		79	`echo -e "\tlocal-data-ptr: \"$ip_address $domain.$INT_DNS_DOMAIN\"" >> $LOCAL_DNS_BLACKHOLE_FILE`
56	`fi`	80	`fi`
57	`done < $LOCAL_HOSTNAME_FILE`	81	`done < $LOCAL_HOSTNAME_FILE`
58	`}`	82	`}`
59		83
60	`case $args in`	84	`case $args in`
61	`-\? \| -h \| --h)`	85	`-\? \| -h \| --h)`
62	`echo "$usage"`	86	`echo "$usage"`
63	`exit 0`	87	`exit 0`
64	`;;`	88	`;;`
65	`--add\|-add) # add a local host resolution`	89	`--add\|-add) # add a local host resolution`
66	`if [ $nb_args -ne 3 ]`	90	`if [ $nb_args -ne 3 ]`
67	`then`	91	`then`
68	`echo "$usage"`	92	`echo "$usage"`
69	`exit 1`	93	`exit 1`
70	`else`	94	`else`
71	`# removing if already exists`	95	`# removing if already exists`
72	`$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE`	96	`$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE`
73	`# adding to the hosts file`	97	`# adding to the hosts file`
74	`echo -e "$2\t$3" >> $LOCAL_HOSTNAME_FILE`	98	`echo -e "$2\t$3" >> $LOCAL_HOSTNAME_FILE`
75	`hosts_to_unbound`	99	`hosts_to_unbound`
76	`restart_dns`	100	`restart_dns`
77	`fi`	101	`fi`
78	`;;`	102	`;;`
79	`--del\|-del) # remove a local host resolution`	103	`--del\|-del) # remove a local host resolution`
80	`if [ $nb_args -ne 3 ]`	104	`if [ $nb_args -ne 3 ]`
81	`then`	105	`then`
82	`echo "$usage"`	106	`echo "$usage"`
83	`exit 1`	107	`exit 1`
84	`else`	108	`else`
85	`$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE`	109	`$SED "/^$2\t$3/d" $LOCAL_HOSTNAME_FILE`
86	`hosts_to_unbound`	110	`hosts_to_unbound`
87	`restart_dns`	111	`restart_dns`
88	`fi`	112	`fi`
89	`;;`	113	`;;`
90	`--reload\|-reload)`	114	`--reload\|-reload)`
91	`hosts_to_unbound`	115	`hosts_to_unbound`
92	`restart_dns`	116	`restart_dns`
93	`;;`	117	`;;`
94	`--hosts_to_unbound\|-hosts_to_unbound)`	118	`--hosts_to_unbound\|-hosts_to_unbound)`
95	`hosts_to_unbound`	119	`hosts_to_unbound`
96	`;;`	120	`;;`
97	`--off\|-off) # disable DNS redirector`	121	`--off\|-off) # disable DNS redirector`
98	`#$SED "s?^#filterwin2k.*?filterwin2k?g" $DNSMASQ_CONF_FILE`	122	`#$SED "s?^#filterwin2k.*?filterwin2k?g" $DNSMASQ_CONF_FILE`
99	`rm -f $LOCAL_DOMAIN_CONF_FILE`	123	`rm -f $LOCAL_DOMAIN_CONF_FILE`
100	`$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=off?g" $ALCASAR_CONF_FILE`	124	`$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=off?g" $ALCASAR_CONF_FILE`
101	`restart_dns`	125	`restart_dns`
102		126
103	`# Reload firewall`	127	`# Reload firewall`
104	`/usr/local/bin/alcasar-iptables.sh`	128	`/usr/local/bin/alcasar-iptables.sh`
105	`;;`	129	`;;`
106	`--on\|-on) # enable DNS redirector`	130	`--on\|-on) # enable DNS redirector`
107	`#$SED "s?^filterwin2k.*?#filterwin2k?g" $DNSMASQ_CONF_FILE`	131	`#$SED "s?^filterwin2k.*?#filterwin2k?g" $DNSMASQ_CONF_FILE`
108	`cat > $LOCAL_DOMAIN_CONF_FILE << EOF`	132	`cat > $LOCAL_DOMAIN_CONF_FILE << EOF`
109	`server:`	133	`server:`
110	`local-zone: "$INT_DNS_DOMAIN." transparent`	134	`local-zone: "$INT_DNS_DOMAIN." transparent`
111	`forward-zone:`	135	`forward-zone:`
112	`name: "$INT_DNS_DOMAIN."`	136	`name: "$INT_DNS_DOMAIN."`
113	`forward-addr: $INT_DNS_IP`	137	`forward-addr: $INT_DNS_IP`
114	`EOF`	138	`EOF`
115	`$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=on?g" $ALCASAR_CONF_FILE`	139	`$SED "s?^INT_DNS_ACTIVE.*?INT_DNS_ACTIVE=on?g" $ALCASAR_CONF_FILE`
116	`restart_dns`	140	`restart_dns`
117	`# Reload firewall`	141	`# Reload firewall`
118	`/usr/local/bin/alcasar-iptables.sh`	142	`/usr/local/bin/alcasar-iptables.sh`
119	`;;`	143	`;;`
120	`*)`	144	`*)`
121	`echo "Argument inconnu : $1";`	145	`echo "Argument inconnu : $1";`
122	`echo "$usage"`	146	`echo "$usage"`
123	`exit 1`	147	`exit 1`
124	`;;`	148	`;;`
125	`esac`	149	`esac`
126		150

Subversion Repositories ALCASAR

(root)/scripts/alcasar-dns-local.sh – Rev 2831 → 2833