From: Ralph Ronnquist Date: Sun, 16 Feb 2025 00:50:53 +0000 (+1100) Subject: simplified X-Git-Tag: 0.1~18 X-Git-Url: https://git.rrq.au/?a=commitdiff_plain;h=65cdcab6d3ef9883722fc0762c80d92c2489aea6;p=rrq%2Fnfblocker.git simplified --- diff --git a/bin/nfblockerctl b/bin/nfblockerctl index 661d8d0..aed8d22 100755 --- a/bin/nfblockerctl +++ b/bin/nfblockerctl @@ -1,38 +1,20 @@ -#!/bin/bash +#!/bin/sh # -# This is a control script for nfblocker. -# - -if [ -z "$1" ] ; then - echo "start or stop?" - exit 1 -fi +# Control script for manual use of nfblocker. -cd $(dirname $(readlink $0)) +do_start() { + iptables -I OUTPUT -p tcp -j NFQUEUE --queue-num 99 + nfblocker /etc/nfblocker/blocked/*.acl & +} -function start_nfblocker() { - LOG=/var/log/nfblocker.$(date +%Y%m%d) - BLOCKED=( ../acl/*.acl ) - echo "BLOCKING ${BLOCKED[@]}" >> $LOG - ./nfblocker ../blocked/*.acl >> $LOG 2>&1 & +do_stop() { + iptables -D OUTPUT -p tcp -j NFQUEUE --queue-num 99 + pkill nfblocker } -TABLE=OUTPUT -case $1 in - start) - iptables -I $TABLE -p tcp -j NFQUEUE --queue-num 99 - pkill -x nfblocker - start_nfblocker - ;; - reload) - pkill -x nfblocker - start_nfblocker - ;; - stop) - iptables -D $TABLE -p tcp -j NFQUEUE --queue-num 99 - pkill -x nfblocker - ;; - *) - echo "Use start, stop or reload" >&2 - ;; +case "$1" in + start) do_start ;; + reload) do_stop ; do_start ;; + stop) do_stop ;; + *) echo "Use start, stop or reload" >&2 ;; esac