paramah/ossec-blacklist
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

forwarding_rule and --compressed not supported

Browse Source
This commit is contained in:
Pawel Krawczyk 2014-11-24 22:38:37 +00:00
parent b719780fe7
commit ca1ed35f92
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
firewall.user
View File

@ -40,8 +40,8 @@ if ! iptables -L ${blocklist_chain_name}; then iptables -N ${blocklist_chain_nam
if ! iptables -L input_rule |grep -q ${blocklist_chain_name}; then if ! iptables -L input_rule |grep -q ${blocklist_chain_name}; then
iptables -I input_rule 1 -m state --state NEW,RELATED -j ${blocklist_chain_name} iptables -I input_rule 1 -m state --state NEW,RELATED -j ${blocklist_chain_name}
fi fi
if ! iptables -L forward_rule |grep -q ${blocklist_chain_name}; then if ! iptables -L forwarding_rule |grep -q ${blocklist_chain_name}; then
iptables -I forward_rule 1 -m state --state NEW,RELATED -j ${blocklist_chain_name} iptables -I forwarding_rule 1 -m state --state NEW,RELATED -j ${blocklist_chain_name}
fi fi
wan_iface=$(uci get network.wan.ifname) wan_iface=$(uci get network.wan.ifname)
@ -56,7 +56,7 @@ for url in $urls; do
tmp=$(mktemp) tmp=$(mktemp)
tmp2=$(mktemp) tmp2=$(mktemp)
set_name=$(basename $url) set_name=$(basename $url)
curl -s --compressed -k "$url" >"$tmp" curl -s -k "$url" >"$tmp"
sort -u <"$tmp" | egrep "^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$" >"$tmp2" sort -u <"$tmp" | egrep "^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$" >"$tmp2"
ipset create ${set_name} hash:net ipset create ${set_name} hash:net
while read line; do while read line; do