adb_dnsflush="0"
adb_dnstimeout="20"
adb_safesearch="0"
-adb_safesearchlist=""
adb_safesearchmod="0"
adb_report="0"
adb_trigger=""
-adb_triggerdelay="0"
+adb_triggerdelay="5"
adb_backup="1"
adb_mail="0"
adb_mailcnt="0"
adb_jail="0"
+adb_tld="1"
adb_dns=""
adb_dnsprefix="adb_list"
adb_locallist="blacklist whitelist iplist"
adb_rtfile="${adb_tmpbase}/adb_runtime.json"
adb_fetchutil=""
adb_fetchinsecure=""
-adb_zonelist=""
-adb_portlist=""
adb_repiface=""
adb_replisten="53"
adb_repchunkcnt="5"
adb_lookupdomain="example.com"
adb_action="${1:-"start"}"
adb_packages=""
-adb_sources=""
adb_cnt=""
# command selector
adb_ver="$(printf "%s" "${adb_packages}" | "${adb_jsoncmd}" -ql1 -e '@.packages.adblock')"
adb_sysver="$("${adb_ubuscmd}" -S call system board 2>/dev/null | "${adb_jsoncmd}" -ql1 -e '@.model' -e '@.release.target' -e '@.release.distribution' -e '@.release.version' -e '@.release.revision' |
"${adb_awkcmd}" 'BEGIN{RS="";FS="\n"}{printf "%s, %s, %s %s %s %s",$1,$2,$3,$4,$5,$6}')"
- adb_memory="$("${adb_awkcmd}" '/^MemAvailable/{printf "%s",int($2/1000)}' "/proc/meminfo" 2>/dev/null)"
f_conf
if [ -z "${adb_cores}" ]; then
[ "${adb_cores}" -gt "16" ] && adb_cores="16"
fi
- if [ "${adb_action}" != "report" ]; then
- f_dns
- f_fetch
- fi
-
if [ "${adb_enabled}" = "0" ]; then
f_extconf
f_temp
exit 0
fi
+ if [ "${adb_action}" != "report" ] && [ "${adb_action}" != "mail" ]; then
+ f_dns
+ f_fetch
+ fi
+
if [ "${adb_report}" = "1" ] && [ ! -x "${adb_dumpcmd}" ]; then
f_log "info" "Please install the package 'tcpdump' or 'tcpdump-mini' to use the reporting feature"
- elif [ "${adb_report}" = "0" ] && [ "${adb_action}" = "report" ]; then
- f_log "info" "Please enable the 'DNS Report' option to use the reporting feature"
- exit 0
- fi
+ elif [ -x "${adb_dumpcmd}" ]; then
+ bg_pid="$("${adb_pgrepcmd}" -f "^${adb_dumpcmd}.*adb_report\\.pcap$" | "${adb_awkcmd}" '{ORS=" "; print $1}')"
+ if [ "${adb_report}" = "0" ] || { [ -n "${bg_pid}" ] && { [ "${adb_action}" = "stop" ] || [ "${adb_action}" = "restart" ]; }; }; then
+ if [ -n "${bg_pid}" ]; then
+ kill -HUP "${bg_pid}" 2>/dev/null
+ while kill -0 "${bg_pid}" 2>/dev/null; do
+ sleep 1
+ done
+ unset bg_pid
+ fi
+ rm -f "${adb_reportdir}"/adb_report.pcap*
+ fi
- bg_pid="$("${adb_pgrepcmd}" -f "^${adb_dumpcmd}.*adb_report\\.pcap$" | "${adb_awkcmd}" '{ORS=" "; print $1}')"
- if [ -x "${adb_dumpcmd}" ] && { [ "${adb_report}" = "0" ] || { [ -n "${bg_pid}" ] && { [ "${adb_action}" = "stop" ] || [ "${adb_action}" = "restart" ]; }; }; }; then
- if [ -n "${bg_pid}" ]; then
- kill -HUP "${bg_pid}" 2>/dev/null
- while kill -0 "${bg_pid}" 2>/dev/null; do
- sleep 1
+ if [ "${adb_report}" = "1" ] && [ -z "${bg_pid}" ] && [ "${adb_action}" != "report" ] && [ "${adb_action}" != "stop" ]; then
+ [ ! -d "${adb_reportdir}" ] && mkdir -p "${adb_reportdir}"
+
+ for port in ${adb_replisten}; do
+ [ -z "${ports}" ] && ports="port ${port}" || ports="${ports} or port ${port}"
done
- unset bg_pid
- fi
- rm -f "${adb_reportdir}"/adb_report.pcap*
- fi
+ if [ -z "${adb_repiface}" ]; then
+ network_get_device iface "lan"
+ [ -z "${iface}" ] && network_get_physdev iface "lan"
+ [ -n "${iface}" ] && adb_repiface="${iface}"
+ [ -n "${adb_repiface}" ] && { uci_set adblock global adb_repiface "${adb_repiface}"; f_uci "adblock"; }
+ fi
- if [ -x "${adb_dumpcmd}" ] && [ "${adb_report}" = "1" ] && [ -z "${bg_pid}" ] && [ "${adb_action}" != "report" ] && [ "${adb_action}" != "stop" ]; then
- for port in ${adb_replisten}; do
- [ -z "${ports}" ] && ports="port ${port}" || ports="${ports} or port ${port}"
- done
- if [ -z "${adb_repiface}" ]; then
- network_get_device iface "lan"
- [ -z "${iface}" ] && network_get_physdev iface "lan"
- [ -n "${iface}" ] && adb_repiface="${iface}"
- [ -n "${adb_repiface}" ] && { uci_set adblock global adb_repiface "${adb_repiface}"; f_uci "adblock"; }
- fi
- if [ -n "${adb_reportdir}" ] && [ ! -d "${adb_reportdir}" ]; then
- mkdir -p "${adb_reportdir}"
- f_log "info" "report directory '${adb_reportdir}' created"
- fi
- if [ -n "${adb_repiface}" ] && [ -d "${adb_reportdir}" ]; then
- ("${adb_dumpcmd}" --immediate-mode -nn -p -s0 -l -i ${adb_repiface} ${ports} -C${adb_repchunksize} -W${adb_repchunkcnt} -w "${adb_reportdir}/adb_report.pcap" >/dev/null 2>&1 &)
- bg_pid="$("${adb_pgrepcmd}" -f "^${adb_dumpcmd}.*adb_report\\.pcap$" | "${adb_awkcmd}" '{ORS=" "; print $1}')"
- else
- f_log "info" "Please set the name of the reporting network device 'adb_repiface' manually"
+ if [ -n "${adb_repiface}" ] && [ -d "${adb_reportdir}" ]; then
+ ("${adb_dumpcmd}" --immediate-mode -nn -p -s0 -l -i ${adb_repiface} ${ports} -C${adb_repchunksize} -W${adb_repchunkcnt} -w "${adb_reportdir}/adb_report.pcap" >/dev/null 2>&1 &)
+ bg_pid="$("${adb_pgrepcmd}" -f "^${adb_dumpcmd}.*adb_report\\.pcap$" | "${adb_awkcmd}" '{ORS=" "; print $1}')"
+ else
+ f_log "info" "Please set the name of the reporting network device 'adb_repiface' manually"
+ fi
fi
fi
- f_log "info" "DEBUG ::: $(ubus call rpc-sys packagelist '{ "all": true }' | wc -l) packages"
}
# check & set environment
#
f_env() {
+ local mem_free
+
adb_starttime="$(date "+%s")"
+ mem_free="$("${adb_awkcmd}" '/^MemAvailable/{printf "%s",int($2/1000)}' "/proc/meminfo" 2>/dev/null)"
+
f_log "info" "adblock instance started ::: action: ${adb_action}, priority: ${adb_nice:-"0"}, pid: ${$}"
f_jsnup "running"
f_extconf
f_temp
- if [ "${adb_dnsflush}" = "1" ] || [ "${adb_memory##*/}" -lt "64" ]; then
+ if [ "${adb_dnsflush}" = "1" ] || [ "${mem_free}" -lt "64" ]; then
printf "%b" "${adb_dnsheader}" >"${adb_dnsdir}/${adb_dnsfile}"
f_dnsup
fi
if [ ! -r "${adb_srcfile}" ]; then
if [ -r "${adb_srcarc}" ]; then
- zcat "${adb_srcarc}" >"${adb_srcfile}"
+ "${adb_zcatcmd}" "${adb_srcarc}" >"${adb_srcfile}"
else
f_log "err" "adblock source archive not found"
fi
# load adblock config
#
f_conf() {
- [ ! -r "/etc/config/adblock" ] && f_log "err" "no valid adblock config found, please re-install the adblock package"
+ unset adb_sources adb_hag_sources adb_hst_sources adb_stb_sources adb_utc_sources adb_denyip adb_allowip adb_safesearchlist adb_zonelist adb_portlist
config_cb() {
option_cb() {
list_cb() {
local option="${1}"
local value="${2}"
- if [ "${option}" = "adb_sources" ]; then
- eval "${option}=\"$(printf "%s" "${adb_sources}") ${value}\""
- elif [ "${option}" = "adb_hag_sources" ]; then
- eval "${option}=\"$(printf "%s" "${adb_hag_sources}") ${value}\""
- elif [ "${option}" = "adb_hst_sources" ]; then
- eval "${option}=\"$(printf "%s" "${adb_hst_sources}") ${value}\""
- elif [ "${option}" = "adb_stb_sources" ]; then
- eval "${option}=\"$(printf "%s" "${adb_stb_sources}") ${value}\""
- elif [ "${option}" = "adb_utc_sources" ]; then
- eval "${option}=\"$(printf "%s" "${adb_utc_sources}") ${value}\""
- elif [ "${option}" = "adb_denyip" ]; then
- eval "${option}=\"$(printf "%s" "${adb_denyip}") ${value}\""
- elif [ "${option}" = "adb_allowip" ]; then
- eval "${option}=\"$(printf "%s" "${adb_allowip}") ${value}\""
- elif [ "${option}" = "adb_safesearchlist" ]; then
- eval "${option}=\"$(printf "%s" "${adb_safesearchlist}") ${value}\""
- elif [ "${option}" = "adb_zonelist" ]; then
- eval "${option}=\"$(printf "%s" "${adb_zonelist}") ${value}\""
- elif [ "${option}" = "adb_portlist" ]; then
- eval "${option}=\"$(printf "%s" "${adb_portlist}") ${value}\""
- fi
+ case "${option}" in
+ "adb_sources")
+ eval "${option}=\"$(printf "%s" "${adb_sources}") ${value}\""
+ ;;
+ "adb_hag_sources")
+ eval "${option}=\"$(printf "%s" "${adb_hag_sources}") ${value}\""
+ ;;
+ "adb_hst_sources")
+ eval "${option}=\"$(printf "%s" "${adb_hst_sources}") ${value}\""
+ ;;
+ "adb_stb_sources")
+ eval "${option}=\"$(printf "%s" "${adb_stb_sources}") ${value}\""
+ ;;
+ "adb_utc_sources")
+ eval "${option}=\"$(printf "%s" "${adb_utc_sources}") ${value}\""
+ ;;
+ "adb_denyip")
+ eval "${option}=\"$(printf "%s" "${adb_denyip}") ${value}\""
+ ;;
+ "adb_allowip")
+ eval "${option}=\"$(printf "%s" "${adb_allowip}") ${value}\""
+ ;;
+ "adb_safesearchlist")
+ eval "${option}=\"$(printf "%s" "${adb_safesearchlist}") ${value}\""
+ ;;
+ "adb_zonelist")
+ eval "${option}=\"$(printf "%s" "${adb_zonelist}") ${value}\""
+ ;;
+ "adb_portlist")
+ eval "${option}=\"$(printf "%s" "${adb_portlist}") ${value}\""
+ ;;
+ esac
}
}
config_load adblock
# load dns backend config
#
f_dns() {
- local util utils dns_up cnt="0"
+ local util utils
+
+ if [ "${adb_action}" = "start" ] && [ -z "${adb_trigger}" ]; then
+ sleep ${adb_triggerdelay}
+ fi
if [ -z "${adb_dns}" ]; then
- utils="knot-resolver bind-server unbound-daemon dnsmasq raw"
+ utils="knot-resolver bind-server unbound-daemon dnsmasq-full dnsmasq-dhcpv6 dnsmasq"
for util in ${utils}; do
- if [ "${util}" = "raw" ] || printf "%s" "${adb_packages}" | "${adb_grepcmd}" -q "${util}"; then
- if [ "${util}" = "knot-resolver" ]; then
- util="kresd"
- elif [ "${util}" = "bind-server" ]; then
- util="named"
- elif [ "${util}" = "unbound-daemon" ]; then
- util="unbound"
- fi
- if [ "${util}" = "raw" ] || [ -x "$(command -v "${util}")" ]; then
+ if printf "%s" "${adb_packages}" | "${adb_jsoncmd}" -ql1 -e "@.packages.${util}" >/dev/null 2>&1; then
+ case "${util}" in
+ "knot-resolver")
+ util="kresd"
+ ;;
+ "bind-server")
+ util="named"
+ ;;
+ "unbound-daemon")
+ util="unbound"
+ ;;
+ "dnsmasq-full" | "dnsmasq-dhcpv6")
+ util="dnsmasq"
+ ;;
+ esac
+
+ if [ -x "$(command -v "${util}")" ]; then
adb_dns="${util}"
uci_set adblock global adb_dns "${util}"
f_uci "adblock"
fi
fi
done
- elif [ "${adb_dns}" != "raw" ] && [ ! -x "$(command -v "${adb_dns}")" ]; then
- unset adb_dns
fi
- if [ -n "${adb_dns}" ]; then
- case "${adb_dns}" in
- "dnsmasq")
- adb_dnscachecmd="-"
- adb_dnsinstance="${adb_dnsinstance:-"0"}"
- adb_dnsuser="${adb_dnsuser:-"dnsmasq"}"
- adb_dnsdir="${adb_dnsdir:-"/tmp/dnsmasq.d"}"
- adb_dnsheader="${adb_dnsheader:-""}"
- adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"local=/\"\$0\"/\"}'"}"
- adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"local=/\"\$0\"/#\"}'"}"
- adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{print \"address=/\"\$0\"/\"item\"\";print \"local=/\"\$0\"/\"}'"}"
- adb_dnsstop="${adb_dnsstop:-"address=/#/\nlocal=/#/"}"
- ;;
- "unbound")
- adb_dnscachecmd="$(command -v unbound-control || printf "%s" "-")"
- adb_dnsinstance="${adb_dnsinstance:-"0"}"
- adb_dnsuser="${adb_dnsuser:-"unbound"}"
- adb_dnsdir="${adb_dnsdir:-"/var/lib/unbound"}"
- adb_dnsheader="${adb_dnsheader:-""}"
- adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"local-zone: \\042\"\$0\"\\042 always_nxdomain\"}'"}"
- adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"local-zone: \\042\"\$0\"\\042 always_transparent\"}'"}"
- adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{type=\"AAAA\";if(match(item,/^([0-9]{1,3}\.){3}[0-9]{1,3}$/)){type=\"A\"}}{print \"local-data: \\042\"\$0\" \"type\" \"item\"\\042\"}'"}"
- adb_dnsstop="${adb_dnsstop:-"local-zone: \".\" always_nxdomain"}"
- ;;
- "named")
- adb_dnscachecmd="$(command -v rndc || printf "%s" "-")"
- adb_dnsinstance="${adb_dnsinstance:-"0"}"
- adb_dnsuser="${adb_dnsuser:-"bind"}"
- adb_dnsdir="${adb_dnsdir:-"/var/lib/bind"}"
- adb_dnsheader="${adb_dnsheader:-"\$TTL 2h\n@ IN SOA localhost. root.localhost. (1 6h 1h 1w 2h)\n IN NS localhost.\n"}"
- adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"\"\$0\" CNAME .\\n*.\"\$0\" CNAME .\"}'"}"
- adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"\"\$0\" CNAME rpz-passthru.\\n*.\"\$0\" CNAME rpz-passthru.\"}'"}"
- adb_dnsdenyip="${adb_dnsdenyip:-"${adb_awkcmd} '{print \"\"\$0\".rpz-client-ip CNAME .\"}'"}"
- adb_dnsallowip="${adb_dnsallowip:-"${adb_awkcmd} '{print \"\"\$0\".rpz-client-ip CNAME rpz-passthru.\"}'"}"
- adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{print \"\"\$0\" CNAME \"item\".\\n*.\"\$0\" CNAME \"item\".\"}'"}"
- adb_dnsstop="${adb_dnsstop:-"* CNAME ."}"
- ;;
- "kresd")
- adb_dnscachecmd="-"
- adb_dnsinstance="${adb_dnsinstance:-"0"}"
- adb_dnsuser="${adb_dnsuser:-"root"}"
- adb_dnsdir="${adb_dnsdir:-"/etc/kresd"}"
- adb_dnsheader="${adb_dnsheader:-"\$TTL 2h\n@ IN SOA localhost. root.localhost. (1 6h 1h 1w 2h)\n"}"
- adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"\"\$0\" CNAME .\\n*.\"\$0\" CNAME .\"}'"}"
- adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"\"\$0\" CNAME rpz-passthru.\\n*.\"\$0\" CNAME rpz-passthru.\"}'"}"
- adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{type=\"AAAA\";if(match(item,/^([0-9]{1,3}\.){3}[0-9]{1,3}$/)){type=\"A\"}}{print \"\"\$0\" \"type\" \"item\"\"}'"}"
- adb_dnsstop="${adb_dnsstop:-"* CNAME ."}"
- ;;
- "raw")
- adb_dnscachecmd="-"
- adb_dnsinstance="${adb_dnsinstance:-"0"}"
- adb_dnsuser="${adb_dnsuser:-"root"}"
- adb_dnsdir="${adb_dnsdir:-"/tmp"}"
- adb_dnsheader="${adb_dnsheader:-""}"
- adb_dnsdeny="${adb_dnsdeny:-"0"}"
- adb_dnsallow="${adb_dnsallow:-"1"}"
- adb_dnssafesearch="${adb_dnssafesearch:-"0"}"
- adb_dnsstop="${adb_dnsstop:-"0"}"
- ;;
- esac
- fi
-
- if [ "${adb_dns}" != "raw" ] && { [ -z "${adb_dns}" ] || [ ! -x "$(command -v "${adb_dns}")" ]; }; then
+ if [ "${adb_dns}" != "raw" ] && [ ! -x "$(command -v "${adb_dns}")" ]; then
f_log "err" "dns backend not found, please set 'adb_dns' manually"
fi
- if [ "${adb_dns}" != "raw" ] && { [ "${adb_dnsdir}" = "${adb_tmpbase}" ] || [ "${adb_dnsdir}" = "${adb_backupdir}" ] || [ "${adb_dnsdir}" = "${adb_reportdir}" ]; }; then
- f_log "err" "dns directory '${adb_dnsdir}' has been misconfigured, it must not point to the 'adb_tmpbase', 'adb_backupdir', 'adb_reportdir'"
- fi
-
- if [ "${adb_action}" = "start" ] && [ -z "${adb_trigger}" ]; then
- sleep ${adb_triggerdelay}
- fi
-
- if [ "${adb_dns}" != "raw" ] && [ "${adb_action}" != "stop" ]; then
- while [ "${cnt}" -le 30 ]; do
- dns_up="$("${adb_ubuscmd}" -S call service list "{\"name\":\"${adb_dns}\"}" 2>/dev/null | "${adb_jsoncmd}" -ql1 -e "@[\"${adb_dns}\"].instances.*.running" 2>/dev/null)"
- if [ "${dns_up}" = "true" ]; then
- break
- fi
- sleep 1
- cnt="$((cnt + 1))"
- done
- fi
+ case "${adb_dns}" in
+ "dnsmasq")
+ adb_dnscachecmd="-"
+ adb_dnsinstance="${adb_dnsinstance:-"0"}"
+ adb_dnsuser="${adb_dnsuser:-"dnsmasq"}"
+ adb_dnsdir="${adb_dnsdir:-"/tmp/dnsmasq.d"}"
+ adb_dnsheader="${adb_dnsheader:-""}"
+ adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"local=/\"\$0\"/\"}'"}"
+ adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"local=/\"\$0\"/#\"}'"}"
+ adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{print \"address=/\"\$0\"/\"item\"\";print \"local=/\"\$0\"/\"}'"}"
+ adb_dnsstop="${adb_dnsstop:-"address=/#/\nlocal=/#/"}"
+ ;;
+ "unbound")
+ adb_dnscachecmd="$(command -v unbound-control || printf "%s" "-")"
+ adb_dnsinstance="${adb_dnsinstance:-"0"}"
+ adb_dnsuser="${adb_dnsuser:-"unbound"}"
+ adb_dnsdir="${adb_dnsdir:-"/var/lib/unbound"}"
+ adb_dnsheader="${adb_dnsheader:-""}"
+ adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"local-zone: \\042\"\$0\"\\042 always_nxdomain\"}'"}"
+ adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"local-zone: \\042\"\$0\"\\042 always_transparent\"}'"}"
+ adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{type=\"AAAA\";if(match(item,/^([0-9]{1,3}\.){3}[0-9]{1,3}$/)){type=\"A\"}}{print \"local-data: \\042\"\$0\" \"type\" \"item\"\\042\"}'"}"
+ adb_dnsstop="${adb_dnsstop:-"local-zone: \".\" always_nxdomain"}"
+ ;;
+ "named")
+ adb_dnscachecmd="$(command -v rndc || printf "%s" "-")"
+ adb_dnsinstance="${adb_dnsinstance:-"0"}"
+ adb_dnsuser="${adb_dnsuser:-"bind"}"
+ adb_dnsdir="${adb_dnsdir:-"/var/lib/bind"}"
+ adb_dnsheader="${adb_dnsheader:-"\$TTL 2h\n@ IN SOA localhost. root.localhost. (1 6h 1h 1w 2h)\n IN NS localhost.\n"}"
+ adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"\"\$0\" CNAME .\\n*.\"\$0\" CNAME .\"}'"}"
+ adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"\"\$0\" CNAME rpz-passthru.\\n*.\"\$0\" CNAME rpz-passthru.\"}'"}"
+ adb_dnsdenyip="${adb_dnsdenyip:-"${adb_awkcmd} '{print \"\"\$0\".rpz-client-ip CNAME .\"}'"}"
+ adb_dnsallowip="${adb_dnsallowip:-"${adb_awkcmd} '{print \"\"\$0\".rpz-client-ip CNAME rpz-passthru.\"}'"}"
+ adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{print \"\"\$0\" CNAME \"item\".\\n*.\"\$0\" CNAME \"item\".\"}'"}"
+ adb_dnsstop="${adb_dnsstop:-"* CNAME ."}"
+ ;;
+ "kresd")
+ adb_dnscachecmd="-"
+ adb_dnsinstance="${adb_dnsinstance:-"0"}"
+ adb_dnsuser="${adb_dnsuser:-"root"}"
+ adb_dnsdir="${adb_dnsdir:-"/etc/kresd"}"
+ adb_dnsheader="${adb_dnsheader:-"\$TTL 2h\n@ IN SOA localhost. root.localhost. (1 6h 1h 1w 2h)\n"}"
+ adb_dnsdeny="${adb_dnsdeny:-"${adb_awkcmd} '{print \"\"\$0\" CNAME .\\n*.\"\$0\" CNAME .\"}'"}"
+ adb_dnsallow="${adb_dnsallow:-"${adb_awkcmd} '{print \"\"\$0\" CNAME rpz-passthru.\\n*.\"\$0\" CNAME rpz-passthru.\"}'"}"
+ adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awkcmd} -v item=\"\$item\" '{type=\"AAAA\";if(match(item,/^([0-9]{1,3}\.){3}[0-9]{1,3}$/)){type=\"A\"}}{print \"\"\$0\" \"type\" \"item\"\"}'"}"
+ adb_dnsstop="${adb_dnsstop:-"* CNAME ."}"
+ ;;
+ "raw")
+ adb_dnscachecmd="-"
+ adb_dnsinstance="${adb_dnsinstance:-"0"}"
+ adb_dnsuser="${adb_dnsuser:-"root"}"
+ adb_dnsdir="${adb_dnsdir:-"/tmp"}"
+ adb_dnsheader="${adb_dnsheader:-""}"
+ adb_dnsdeny="${adb_dnsdeny:-"0"}"
+ adb_dnsallow="${adb_dnsallow:-"1"}"
+ adb_dnssafesearch="${adb_dnssafesearch:-"0"}"
+ adb_dnsstop="${adb_dnsstop:-"0"}"
+ ;;
+ esac
if [ "${adb_action}" != "stop" ]; then
- if [ -n "${adb_dnsdir}" ] && [ ! -d "${adb_dnsdir}" ]; then
- if mkdir -p "${adb_dnsdir}"; then
- f_log "info" "dns backend directory '${adb_dnsdir}' created"
- else
- f_log "err" "dns backend directory '${adb_dnsdir}' could not be created"
- fi
- fi
+ [ ! -d "${adb_dnsdir}" ] && mkdir -p "${adb_dnsdir}"
+ [ "${adb_jail}" = "1" ] && [ ! -d "${adb_jaildir}" ] && mkdir -p "${adb_jaildir}"
+ [ "${adb_backup}" = "1" ] && [ ! -d "${adb_backupdir}" ] && mkdir -p "${adb_backupdir}"
[ ! -f "${adb_dnsdir}/${adb_dnsfile}" ] && printf "%b" "${adb_dnsheader}" >"${adb_dnsdir}/${adb_dnsfile}"
-
- if [ "${dns_up}" != "true" ]; then
- if ! f_dnsup 4; then
- f_log "err" "dns backend '${adb_dns}' not running or executable"
- fi
- fi
-
- if [ "${adb_backup}" = "1" ] && [ -n "${adb_backupdir}" ] && [ ! -d "${adb_backupdir}" ]; then
- if mkdir -p "${adb_backupdir}"; then
- f_log "info" "backup directory '${adb_backupdir}' created"
- else
- f_log "err" "backup directory '${adb_backupdir}' could not be created"
- fi
- fi
-
- if [ -n "${adb_jaildir}" ] && [ ! -d "${adb_jaildir}" ]; then
- if mkdir -p "${adb_jaildir}"; then
- f_log "info" "jail directory '${adb_jaildir}' created"
- else
- f_log "err" "jail directory '${adb_jaildir}' could not be created"
- fi
- fi
fi
- f_log "debug" "f_dns ::: dns: ${adb_dns}, dns_dir: ${adb_dnsdir}, dns_file: ${adb_dnsfile}, dns_user: ${adb_dnsuser}, dns_instance: ${adb_dnsinstance}, backup: ${adb_backup}, backup_dir: ${adb_backupdir}, jail_dir: ${adb_jaildir}"
+
+ f_log "debug" "f_dns ::: dns: ${adb_dns}, dns_dir: ${adb_dnsdir}, dns_file: ${adb_dnsfile}, dns_user: ${adb_dnsuser}, dns_instance: ${adb_dnsinstance}, backup_dir: ${adb_backupdir}, jail_dir: ${adb_jaildir}"
}
# load fetch utility
#
f_fetch() {
- local util utils insecure cnt="0"
+ local util utils insecure
if [ -z "${adb_fetchutil}" ]; then
- utils="aria2c curl wget uclient-fetch"
+ utils="aria2 curl wget-ssl libustream-openssl libustream-wolfssl libustream-mbedtls"
for util in ${utils}; do
- if { [ "${util}" = "uclient-fetch" ] && printf "%s" "${adb_packages}" | "${adb_grepcmd}" -q "libustream-"; } ||
- { [ "${util}" = "wget" ] && printf "%s" "${adb_packages}" | "${adb_grepcmd}" -q "wget-ssl"; } ||
- [ "${util}" = "curl" ] || [ "${util}" = "aria2c" ]; then
+ if printf "%s" "${adb_packages}" | "${adb_jsoncmd}" -ql1 -e "@.packages.${util}" >/dev/null 2>&1; then
+ case "${util}" in
+ "aria2")
+ util="aria2c"
+ ;;
+ "wget-ssl")
+ util="wget"
+ ;;
+ "libustream-openssl" | "libustream-wolfssl" | "libustream-mbedtls")
+ util="uclient-fetch"
+ ;;
+ esac
+
if [ -x "$(command -v "${util}")" ]; then
adb_fetchutil="${util}"
uci_set adblock global adb_fetchutil "${util}"
fi
fi
done
- elif [ ! -x "$(command -v "${adb_fetchutil}")" ]; then
- unset adb_fetchutil
fi
+
+ if [ ! -x "$(command -v "${adb_fetchutil}")" ]; then
+ f_log "err" "download utility with SSL support not found, please set 'adb_fetchutil' manually"
+ fi
+
case "${adb_fetchutil}" in
"aria2c")
[ "${adb_fetchinsecure}" = "1" ] && insecure="--check-certificate=false"
adb_fetchparm="${adb_fetchparm:-"${insecure} --no-cache --no-cookies --max-redirect=0 --timeout=20 -O"}"
;;
esac
- if [ -n "${adb_fetchutil}" ] && [ -n "${adb_fetchparm}" ]; then
- adb_fetchutil="$(command -v "${adb_fetchutil}")"
- else
- f_log "err" "download utility with SSL support not found, please install 'uclient-fetch' with a 'libustream-*' variant or another download utility like 'wget', 'curl' or 'aria2'"
- fi
+
+ adb_fetchutil="$(command -v "${adb_fetchutil}")"
+
f_log "debug" "f_fetch ::: fetch_util: ${adb_fetchutil:-"-"}, fetch_parm: ${adb_fetchparm:-"-"}"
}
f_log "err" "the temp base directory '${adb_tmpbase}' does not exist/is not mounted yet, please create the directory or raise the 'adb_triggerdelay' to defer the adblock start"
fi
[ ! -s "${adb_pidfile}" ] && printf "%s" "${$}" >"${adb_pidfile}"
- f_log "debug" "f_temp ::: tmp_base: ${adb_tmpbase:-"-"}, tmp_dir: ${adb_tmpdir:-"-"}, sort_options: ${adb_srtopts}, pid_file: ${adb_pidfile:-"-"}"
}
# remove temporary files and directories
#
f_rmtemp() {
- [ -d "${adb_tmpdir}" ] && rm -rf "${adb_tmpdir}"
- rm -f "${adb_srcfile}"
+ rm -rf "${adb_tmpdir}" "${adb_srcfile}"
: >"${adb_pidfile}"
- f_log "debug" "f_rmtemp ::: tmp_dir: ${adb_tmpdir:-"-"}, src_file: ${adb_srcfile:-"-"}, pid_file: ${adb_pidfile:-"-"}"
}
# remove dns related files
#
f_rmdns() {
- local status
-
- status="$("${adb_ubuscmd}" -S call service list '{"name":"adblock"}' 2>/dev/null | "${adb_jsoncmd}" -l1 -e '@["adblock"].instances.*.running' 2>/dev/null)"
- if [ "${adb_dns}" = "raw" ] || { [ -n "${adb_dns}" ] && [ -n "${status}" ]; }; then
+ if "${adb_ubuscmd}" -S call service list '{"name":"adblock"}' | "${adb_jsoncmd}" -ql1 -e '@["adblock"].instances.*.running' >/dev/null; then
: >"${adb_rtfile}"
- [ "${adb_backup}" = "1" ] && rm -f "${adb_backupdir}/${adb_dnsprefix}".*.gz
+ if [ "${adb_backup}" = "0" ] || [ "${adb_action}" = "stop" ]; then
+ rm -f "${adb_backupdir}/${adb_dnsprefix}".*.gz
+ fi
printf "%b" "${adb_dnsheader}" >"${adb_dnsdir}/${adb_dnsfile}"
f_dnsup 4
fi
f_rmtemp
- f_log "debug" "f_rmdns ::: dns: ${adb_dns}, status: ${status:-"-"}, dns_dir: ${adb_dnsdir}, dns_file: ${adb_dnsfile}, rt_file: ${adb_rtfile}, backup_dir: ${adb_backupdir:-"-"}"
}
# commit uci changes
# get list counter
#
f_count() {
- local file mode="${1}" name="${2}"
+ local mode="${1}" file="${2}" var="${3}"
adb_cnt="0"
- case "${mode}" in
- "iplist")
- [ -s "${adb_tmpdir}/tmp.add.${name}" ] && adb_cnt="$(wc -l 2>/dev/null <"${adb_tmpdir}/tmp.add.${name}")"
- ;;
- "blacklist")
- [ -s "${adb_tmpfile}.${name}" ] && adb_cnt="$(wc -l 2>/dev/null <"${adb_tmpfile}.${name}")"
- ;;
- "whitelist")
- [ -s "${adb_tmpdir}/tmp.raw.${name}" ] && { adb_cnt="$(wc -l 2>/dev/null <"${adb_tmpdir}/tmp.raw.${name}")"; : >"${adb_tmpdir}/tmp.raw.${name}"; }
- ;;
- "safesearch")
- [ -s "${adb_tmpdir}/tmp.safesearch.${name}" ] && adb_cnt="$(wc -l 2>/dev/null <"${adb_tmpdir}/tmp.safesearch.${name}")"
- ;;
- "merge")
- [ -s "${adb_tmpdir}/${adb_dnsfile}" ] && adb_cnt="$(wc -l 2>/dev/null <"${adb_tmpdir}/${adb_dnsfile}")"
- ;;
- "download" | "backup" | "restore")
- [ -s "${src_tmpfile}" ] && adb_cnt="$(wc -l 2>/dev/null <"${src_tmpfile}")"
- ;;
- "final")
- if [ -s "${adb_dnsdir}/${adb_dnsfile}" ]; then
- adb_cnt="$(wc -l 2>/dev/null <"${adb_dnsdir}/${adb_dnsfile}")"
+ if [ -s "${file}" ]; then
+ adb_cnt="$("${adb_wccmd}" -l 2>/dev/null <"${file}")"
+ if [ -n "${var}" ]; then
+ printf "%s" "${adb_cnt}"
+ else
+ if [ "${mode}" = "final" ]; then
if [ -s "${adb_tmpdir}/tmp.add.whitelist" ]; then
- adb_cnt="$((adb_cnt - $(wc -l 2>/dev/null <"${adb_tmpdir}/tmp.add.whitelist")))"
+ adb_cnt="$((adb_cnt - $("${adb_wccmd}" -l 2>/dev/null <"${adb_tmpdir}/tmp.add.whitelist")))"
fi
for file in "${adb_tmpdir}/tmp.safesearch".*; do
if [ -r "${file}" ]; then
- adb_cnt="$((adb_cnt - $(wc -l 2>/dev/null <"${file}")))"
+ adb_cnt="$((adb_cnt - $("${adb_wccmd}" -l 2>/dev/null <"${file}")))"
fi
done
[ -n "${adb_dnsheader}" ] && adb_cnt="$(((adb_cnt - $(printf "%b" "${adb_dnsheader}" | "${adb_grepcmd}" -c "^")) / 2))"
fi
- ;;
- esac
+ fi
+ fi
}
# set external config options
f_dnsup() {
local rset dns_service dns_up dns_pid restart_rc cnt="0" out_rc="4" in_rc="${1:-0}"
- if [ "${adb_dns}" = "raw" ]; then
+ if [ "${adb_dns}" = "raw" ] || [ -z "${adb_dns}" ]; then
out_rc="0"
else
if [ "${in_rc}" = "0" ] && [ "${adb_dnsflush}" = "0" ]; then
fi
fi
fi
+
f_log "debug" "f_dnsup ::: dns: ${adb_dns}, cache_cmd: ${adb_dnscachecmd:-"-"}, lookup_cmd: ${adb_lookupcmd:-"-"}, lookup_domain: ${adb_lookupdomain:-"-"}, restart_rc: ${restart_rc:-"-"}, dns_flush: ${adb_dnsflush}, dns_timeout: ${adb_dnstimeout}, dns_cnt: ${cnt}, in_rc: ${in_rc}, out_rc: ${out_rc}"
return "${out_rc}"
}
# backup/restore/remove blocklists
#
f_list() {
- local hold file rset item array safe_url safe_ips safe_cname safe_domains ip out_rc mode="${1}" src_name="${2:-"${src_name}"}" in_rc="${src_rc:-0}" cnt ffiles="-maxdepth 1 -name ${adb_dnsprefix}.*.gz"
+ local hold file rset item array safe_url safe_ips safe_cname safe_domains ip out_rc file_name mode="${1}" src_name="${2:-"${src_name}"}" in_rc="${src_rc:-0}" cnt ffiles="-maxdepth 1 -name ${adb_dnsprefix}.*.gz"
case "${mode}" in
"iplist")
src_name="${mode}"
+ file_name="${adb_tmpdir}/tmp.add.${src_name}"
if [ "${adb_dns}" = "named" ]; then
rset="BEGIN{FS=\"[.:]\";pfx=\"32\"}{if(match(\$0,/:/))pfx=\"128\"}{printf \"%s.\",pfx;for(seg=NF;seg>=1;seg--)if(seg==1)printf \"%s\n\",\$seg;else if(\$seg>=0)printf \"%s.\",\$seg; else printf \"%s.\",\"zz\"}"
if [ -n "${adb_allowip}" ]; then
for ip in ${adb_allowip}; do
printf "%s" "${ip}" | "${adb_awkcmd}" "${rset}" >>"${adb_tmpdir}/tmp.raw.${src_name}"
done
- eval "${adb_dnsallowip}" "${adb_tmpdir}/tmp.raw.${src_name}" >"${adb_tmpdir}/tmp.add.${src_name}"
+ eval "${adb_dnsallowip}" "${adb_tmpdir}/tmp.raw.${src_name}" >"${file_name}"
out_rc="${?}"
fi
if [ -n "${adb_denyip}" ] && { [ -z "${out_rc}" ] || [ "${out_rc}" = "0" ]; }; then
for ip in ${adb_denyip}; do
printf "%s" "${ip}" | "${adb_awkcmd}" "${rset}" >>"${adb_tmpdir}/tmp.raw.${src_name}"
done
- eval "${adb_dnsdenyip}" "${adb_tmpdir}/tmp.raw.${src_name}" >>"${adb_tmpdir}/tmp.add.${src_name}"
+ eval "${adb_dnsdenyip}" "${adb_tmpdir}/tmp.raw.${src_name}" >>"${file_name}"
out_rc="${?}"
fi
: >"${adb_tmpdir}/tmp.raw.${src_name}"
"blacklist" | "whitelist")
src_name="${mode}"
if [ "${src_name}" = "blacklist" ] && [ -f "${adb_blacklist}" ]; then
+ file_name="${adb_tmpfile}.${src_name}"
rset="/^([[:alnum:]_-]{1,63}\\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower(\$1)}"
"${adb_awkcmd}" "${rset}" "${adb_blacklist}" >"${adb_tmpdir}/tmp.raw.${src_name}"
if [ -s "${adb_whitelist}" ]; then
"${adb_awkcmd}" 'NR==FNR{member[$1];next}!($1 in member)' "${adb_whitelist}" "${adb_tmpdir}/tmp.raw.${src_name}" >"${adb_tmpdir}/tmp.deduplicate.${src_name}"
else
- cat "${adb_tmpdir}/tmp.raw.${src_name}" >"${adb_tmpdir}/tmp.deduplicate.${src_name}"
+ "${adb_catcmd}" "${adb_tmpdir}/tmp.raw.${src_name}" >"${adb_tmpdir}/tmp.deduplicate.${src_name}"
fi
"${adb_awkcmd}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' "${adb_tmpdir}/tmp.deduplicate.${src_name}" >"${adb_tmpdir}/tmp.raw.${src_name}"
- "${adb_sortcmd}" ${adb_srtopts} -u "${adb_tmpdir}/tmp.raw.${src_name}" 2>/dev/null >"${adb_tmpfile}.${src_name}"
+ "${adb_sortcmd}" ${adb_srtopts} -u "${adb_tmpdir}/tmp.raw.${src_name}" 2>/dev/null >"${file_name}"
out_rc="${?}"
- : > "${adb_tmpdir}/tmp.raw.${src_name}"
elif [ "${src_name}" = "whitelist" ] && [ -f "${adb_whitelist}" ]; then
+ file_name="${adb_tmpdir}/tmp.raw.${src_name}"
rset="/^([[:alnum:]_-]{1,63}\\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower(\$1)}"
- printf "%s\n" "${adb_lookupdomain}" | "${adb_awkcmd}" "${rset}" >"${adb_tmpdir}/tmp.raw.${src_name}"
- "${adb_awkcmd}" "${rset}" "${adb_whitelist}" >>"${adb_tmpdir}/tmp.raw.${src_name}"
+ printf "%s\n" "${adb_lookupdomain}" | "${adb_awkcmd}" "${rset}" >"${file_name}"
+ "${adb_awkcmd}" "${rset}" "${adb_whitelist}" >>"${file_name}"
out_rc="${?}"
if [ "${out_rc}" = "0" ]; then
rset="/^([[:alnum:]_-]{1,63}\\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower(\$1)}"
if [ "${out_rc}" = "0" ] && [ "${adb_jail}" = "1" ] && [ "${adb_dnsstop}" != "0" ]; then
rm -f "${adb_jaildir}/${adb_dnsjail}"
[ -n "${adb_dnsheader}" ] && printf "%b" "${adb_dnsheader}" >>"${adb_jaildir}/${adb_dnsjail}"
- cat "${adb_tmpdir}/tmp.add.${src_name}" >>"${adb_jaildir}/${adb_dnsjail}"
+ "${adb_catcmd}" "${adb_tmpdir}/tmp.add.${src_name}" >>"${adb_jaildir}/${adb_dnsjail}"
printf "%b\n" "${adb_dnsstop}" >>"${adb_jaildir}/${adb_dnsjail}"
fi
fi
fi
;;
"safesearch")
+ file_name="${adb_tmpdir}/tmp.safesearch.${src_name}"
case "${src_name}" in
"google")
rset="/^\\.([[:alnum:]_-]{1,63}\\.)+[[:alpha:]]+([[:space:]]|$)/{printf \"%s\n%s\n\",tolower(\"www\"\$1),tolower(substr(\$1,2,length(\$1)))}"
safe_cname="forcesafesearch.google.com"
safe_domains="${adb_tmpdir}/tmp.load.safesearch.${src_name}"
if [ "${adb_backup}" = "1" ] && [ -s "${adb_backupdir}/safesearch.${src_name}.gz" ]; then
- zcat "${adb_backupdir}/safesearch.${src_name}.gz" >"${safe_domains}"
+ "${adb_zcatcmd}" "${adb_backupdir}/safesearch.${src_name}.gz" >"${safe_domains}"
out_rc="${?}"
else
"${adb_fetchutil}" ${adb_fetchparm} "${safe_domains}" "${safe_url}" 2>/dev/null
out_rc="${?}"
if [ "${adb_backup}" = "1" ] && [ "${out_rc}" = "0" ]; then
- gzip -cf "${safe_domains}" >"${adb_backupdir}/safesearch.${src_name}.gz"
+ "${adb_gzipcmd}" -cf "${safe_domains}" >"${adb_backupdir}/safesearch.${src_name}.gz"
out_rc="${?}"
fi
fi
;;
esac
if [ "${out_rc}" = "0" ] && [ -s "${adb_tmpdir}/tmp.raw.safesearch.${src_name}" ]; then
- : >"${adb_tmpdir}/tmp.safesearch.${src_name}"
+ : >"${file_name}"
[ "${adb_dns}" = "named" ] && array="${safe_cname}" || array="${safe_ips}"
for item in ${array}; do
- if ! eval "${adb_dnssafesearch}" "${adb_tmpdir}/tmp.raw.safesearch.${src_name}" >>"${adb_tmpdir}/tmp.safesearch.${src_name}"; then
- : >"${adb_tmpdir}/tmp.safesearch.${src_name}"
+ if ! eval "${adb_dnssafesearch}" "${adb_tmpdir}/tmp.raw.safesearch.${src_name}" >>"${file_name}"; then
+ : >"${file_name}"
break
fi
done
: >"${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
fi
;;
+ "download")
+ file_name="${src_tmpfile}"
+ ;;
"backup")
- (
- gzip -cf "${src_tmpfile}" >"${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz"
- out_rc="${?}"
- ) &
+ file_name="${src_tmpfile}"
+ "${adb_gzipcmd}" -cf "${src_tmpfile}" >"${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz"
+ out_rc="${?}"
;;
"restore")
+ file_name="${src_tmpfile}"
if [ -n "${src_name}" ] && [ -s "${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz" ]; then
- zcat "${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz" >"${src_tmpfile}"
+ "${adb_zcatcmd}" "${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz" >"${src_tmpfile}"
out_rc="${?}"
elif [ -z "${src_name}" ]; then
cnt="1"
if [ -r "${file}" ]; then
name="${file##*/}"
name="${name%.*}"
- zcat "${file}" >"${adb_tmpfile}.${name}" &
+ "${adb_zcatcmd}" "${file}" >"${adb_tmpfile}.${name}" &
hold="$((cnt % adb_cores))"
if [ "${hold}" = "0" ]; then
wait
adb_sources="${adb_sources/${src_name}}"
;;
"merge")
+ src_name=""
+ file_name="${adb_tmpdir}/${adb_dnsfile}"
if [ "${adb_backup}" = "1" ]; then
- for src_name in ${adb_sources}; do
- ffiles="${ffiles} -a ! -name ${adb_dnsprefix}.${src_name}.gz"
+ for file in ${adb_sources}; do
+ ffiles="${ffiles} -a ! -name ${adb_dnsprefix}.${file}.gz"
done
if [ "${adb_safesearch}" = "1" ] && [ "${adb_dnssafesearch}" != "0" ]; then
ffiles="${ffiles} -a ! -name safesearch.google.gz"
fi
find "${adb_backupdir}" ${ffiles} -print0 2>/dev/null | xargs -0 rm 2>/dev/null
fi
- unset src_name
- "${adb_sortcmd}" ${adb_srtopts} -mu "${adb_tmpfile}".* 2>/dev/null >"${adb_tmpdir}/${adb_dnsfile}"
+ "${adb_sortcmd}" ${adb_srtopts} -mu "${adb_tmpfile}".* 2>/dev/null >"${file_name}"
out_rc="${?}"
rm -f "${adb_tmpfile}".*
;;
"final")
- unset src_name
- { [ -n "${adb_dnsheader}" ] && printf "%b" "${adb_dnsheader}" >"${adb_dnsdir}/${adb_dnsfile}"; } || : >"${adb_dnsdir}/${adb_dnsfile}"
- [ -s "${adb_tmpdir}/tmp.add.iplist" ] && cat "${adb_tmpdir}/tmp.add.iplist" >>"${adb_dnsdir}/${adb_dnsfile}"
- [ -s "${adb_tmpdir}/tmp.add.whitelist" ] && cat "${adb_tmpdir}/tmp.add.whitelist" >>"${adb_dnsdir}/${adb_dnsfile}"
- for file in "${adb_tmpdir}/tmp.safesearch".*; do
- [ -r "${file}" ] && cat "${file}" >>"${adb_dnsdir}/${adb_dnsfile}"
- done
- { [ "${adb_dnsdeny}" != "0" ] && eval "${adb_dnsdeny}" "${adb_tmpdir}/${adb_dnsfile}" >>"${adb_dnsdir}/${adb_dnsfile}"; } || mv "${adb_tmpdir}/${adb_dnsfile}" "${adb_dnsdir}/${adb_dnsfile}"
+ src_name=""
+ file_name="${adb_dnsdir}/${adb_dnsfile}"
+ : >"${file_name}"
+ [ -n "${adb_dnsheader}" ] && printf "%b" "${adb_dnsheader}" >>"${file_name}"
+ [ -s "${adb_tmpdir}/tmp.add.iplist" ] && "${adb_catcmd}" "${adb_tmpdir}/tmp.add.iplist" >>"${file_name}"
+ [ -s "${adb_tmpdir}/tmp.add.whitelist" ] && "${adb_catcmd}" "${adb_tmpdir}/tmp.add.whitelist" >>"${file_name}"
+ "${adb_catcmd}" "${adb_tmpdir}/tmp.safesearch".* 2>/dev/null >>"${file_name}"
+ if [ "${adb_dnsdeny}" != "0" ]; then
+ eval "${adb_dnsdeny}" "${adb_tmpdir}/${adb_dnsfile}" >>"${file_name}"
+ else
+ "${adb_catcmd}" "${adb_tmpdir}/${adb_dnsfile}" >>"${file_name}"
+ fi
out_rc="${?}"
;;
esac
- f_count "${mode}" "${src_name}"
+ [ "${adb_debug}" = "1" ] || [ "${mode}" = "final" ] && f_count "${mode}" "${file_name}"
out_rc="${out_rc:-"${in_rc}"}"
+
f_log "debug" "f_list ::: name: ${src_name:-"-"}, mode: ${mode}, cnt: ${adb_cnt}, in_rc: ${in_rc}, out_rc: ${out_rc}"
return "${out_rc}"
}
if "${adb_awkcmd}" '{if(NR==1){tld=$NF};while(getline){if(index($NF,tld".")==0){print tld;tld=$NF}}print tld}' "${source}" |
"${adb_awkcmd}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' >"${temp_tld}"; then
- cnt_tld="$(wc -l 2>/dev/null <"${temp_tld}")"
+ [ "${adb_debug}" = "1" ] && cnt_tld="$(f_count tld "${temp_tld}" "var")"
if [ -s "${adb_tmpdir}/tmp.rem.whitelist" ]; then
"${adb_awkcmd}" 'NR==FNR{del[$0];next};!($0 in del)' "${adb_tmpdir}/tmp.rem.whitelist" "${temp_tld}" >"${source}"
- cnt_rem="$(wc -l 2>/dev/null <"${source}")"
+ [ "${adb_debug}" = "1" ] && cnt_rem="$(f_count tld "${source}" "var")"
else
- mv -f "${temp_tld}" "${source}"
+ "${adb_catcmd}" "${temp_tld}" >"${source}"
fi
fi
: > "${temp_tld}"
- f_log "debug" "f_tld ::: source: ${source}, cnt: ${adb_cnt:-"-"}, cnt_tld: ${cnt_tld:-"-"}, cnt_rem: ${cnt_rem:-"-"}"
+
+ f_log "debug" "f_tld ::: name: -, cnt: ${adb_cnt:-"-"}, cnt_tld: ${cnt_tld:-"-"}, cnt_rem: ${cnt_rem:-"-"}"
}
# suspend/resume adblock processing
for file in "${adb_backupdir}/${adb_dnsprefix}".*.gz "${adb_blacklist}" "${adb_whitelist}"; do
suffix="${file##*.}"
if [ "${suffix}" = "gz" ]; then
- zcat "${file}" 2>/dev/null |
+ "${adb_zcatcmd}" "${file}" 2>/dev/null |
"${adb_awkcmd}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' | "${adb_awkcmd}" -v f="${file##*/}" "BEGIN{rc=1};/^($search|.*\\.${search})$/{i++;if(i<=3){printf \" + %-30s%s\n\",f,\$1;rc=0}else if(i==4){printf \" + %-30s%s\n\",f,\"[...]\"}};END{exit rc}"
else
"${adb_awkcmd}" -v f="${file##*/}" "BEGIN{rc=1};/^($search|.*\\.${search})$/{i++;if(i<=3){printf \" + %-30s%s\n\",f,\$1;rc=0}else if(i==4){printf \" + %-30s%s\n\",f,\"[...]\"}};END{exit rc}" "${file}"
# update runtime information
#
f_jsnup() {
- local object sources runtime utils bg_pid status="${1:-"enabled"}"
+ local object sources runtime utils mem_free mem_max status="${1:-"enabled"}"
- adb_memory="$("${adb_awkcmd}" '/^MemTotal|^MemFree|^MemAvailable/{ORS="/"; print int($2/1000)}' "/proc/meminfo" 2>/dev/null |
- "${adb_awkcmd}" '{print substr($0,1,length($0)-1)}')"
+ mem_free="$("${adb_awkcmd}" '/^MemAvailable/{printf "%s",int($2/1024)}' "/proc/meminfo" 2>/dev/null)"
+ mem_max="$("${adb_awkcmd}" '/^VmHWM/{printf "%s",int($2)}' /proc/${$}/status 2>/dev/null)"
case "${status}" in
"enabled" | "error")
adb_endtime="$(date "+%s")"
if [ "$(((adb_endtime - adb_starttime) / 60))" -lt 60 ]; then
- runtime="${adb_action}, $(((adb_endtime - adb_starttime) / 60))m $(((adb_endtime - adb_starttime) % 60))s, ${adb_memory:-0}, $(date -Iseconds)"
+ runtime="${adb_action}, $(((adb_endtime - adb_starttime) / 60))m $(((adb_endtime - adb_starttime) % 60))s, ${mem_free:-0} MB available, ${mem_max:-0} KB max. used, $(date -Iseconds)"
else
- runtime="${adb_action}, n/a, ${adb_memory:-0}, $(date -Iseconds)"
+ runtime="${adb_action}, n/a, ${mem_free:-0} MB available, ${mem_max:-0} KB max. used, $(date -Iseconds)"
fi
[ "${status}" = "error" ] && adb_cnt="0"
;;
json_add_string "run_utils" "${utils:-"-"}"
json_add_string "run_ifaces" "trigger: ${adb_trigger:-"-"}, report: ${adb_repiface:-"-"}"
json_add_string "run_directories" "base: ${adb_tmpbase}, backup: ${adb_backupdir}, report: ${adb_reportdir}, jail: ${adb_jaildir}"
- json_add_string "run_flags" "backup: $(f_char ${adb_backup}), flush: $(f_char ${adb_dnsflush}), force: $(f_char ${adb_forcedns}), search: $(f_char ${adb_safesearch}), report: $(f_char ${adb_report}), mail: $(f_char ${adb_mail}), jail: $(f_char ${adb_jail})"
+ json_add_string "run_flags" "backup: $(f_char ${adb_backup}), tld: $(f_char ${adb_tld}), force: $(f_char ${adb_forcedns}), flush: $(f_char ${adb_dnsflush}), search: $(f_char ${adb_safesearch}), report: $(f_char ${adb_report}), mail: $(f_char ${adb_mail}), jail: $(f_char ${adb_jail})"
json_add_string "last_run" "${runtime:-"-"}"
json_add_string "system" "${adb_sysver}"
json_dump >"${adb_rtfile}"
[ "${status}" = "enabled" ] && [ "${adb_cnt}" -le "${adb_mailcnt}" ]; then
"${adb_mailservice}" >/dev/null 2>&1
fi
- f_log "debug" "f_jsnup ::: status: ${status:-"-"}, cnt: ${adb_cnt}, mail: ${adb_mail}, mail_service: ${adb_mailservice}, mail_cnt: ${adb_mailcnt}, mail_pid: ${bg_pid:-"-"}"
}
# write to syslog
f_main() {
local src_tmpload src_tmpfile src_name src_rset src_url src_log src_arc src_cat src_item src_list src_entries src_suffix src_rc entry cnt
- f_log "debug" "f_main ::: memory: ${adb_memory:-0}, cores: ${adb_cores}, safe_search: ${adb_safesearch}, force_dns: ${adb_forcedns}, awk: ${adb_awkcmd}"
-
# white- and blacklist preparation
#
for entry in ${adb_locallist}; do
json_select ..
src_tmpcat="${adb_tmpload}.${src_name}.cat"
src_tmpload="${adb_tmpload}.${src_name}.load"
- src_tmpsort="${adb_tmpload}.${src_name}.sort"
src_tmpfile="${adb_tmpfile}.${src_name}"
src_rc=4
continue
fi
- # backup mode
+ # backup/restore mode
#
- if [ "${adb_backup}" = "1" ] && { [ "${adb_action}" = "start" ] || [ "${adb_action}" = "resume" ]; }; then
+ if [ "${adb_backup}" = "1" ] && { [ "${adb_action}" = "start" ] || [ "${adb_action}" = "restart" ] || [ "${adb_action}" = "resume" ]; }; then
if f_list restore && [ -s "${src_tmpfile}" ]; then
continue
fi
f_log "info" "download of '${src_name}' failed, url: ${src_url}, rule: ${src_rset:-"-"}, categories: ${src_cat:-"-"}, rc: ${src_rc}, log: ${src_log:-"-"}"
fi
if [ "${src_rc}" = "0" ] && [ -s "${src_tmpload}" ]; then
- "${adb_awkcmd}" "${src_rset}" "${src_tmpload}" | "${adb_sedcmd}" "s/\r//g" | "${adb_awkcmd}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' >"${src_tmpsort}"
- : >"${src_tmpload}"
- "${adb_sortcmd}" ${adb_srtopts} -u "${src_tmpsort}" 2>/dev/null >"${src_tmpfile}"
+ "${adb_awkcmd}" "${src_rset}" "${src_tmpload}" | "${adb_sedcmd}" "s/\r//g" |
+ "${adb_awkcmd}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' |
+ "${adb_sortcmd}" ${adb_srtopts} -u 2>/dev/null >"${src_tmpfile}"
src_rc="${?}"
- : >"${src_tmpsort}"
if [ "${src_rc}" = "0" ] && [ -s "${src_tmpfile}" ]; then
f_list download
[ "${adb_backup}" = "1" ] && f_list backup
) &
fi
else
- if [ "${src_name}" = "1hosts" ] && [ -n "${adb_hst_sources}" ]; then
- src_cat="${adb_hst_sources}"
- elif [ "${src_name}" = "hagezi" ] && [ -n "${adb_hag_sources}" ]; then
- src_cat="${adb_hag_sources}"
- elif [ "${src_name}" = "stevenblack" ] && [ -n "${adb_stb_sources}" ]; then
- src_cat="${adb_stb_sources}"
- elif { [ "${src_name}" = "1hosts" ] && [ -z "${adb_hst_sources}" ]; } ||
- { [ "${src_name}" = "hagezi" ] && [ -z "${adb_hag_sources}" ]; } ||
- { [ "${src_name}" = "stevenblack" ] && [ -z "${adb_stb_sources}" ]; }; then
- continue
- fi
+ case "${src_name}" in
+ "1hosts")
+ [ -n "${adb_hst_sources}" ] && src_cat="${adb_hst_sources}" || continue
+ ;;
+ "hagezi")
+ [ -n "${adb_hag_sources}" ] && src_cat="${adb_hag_sources}" || continue
+ ;;
+ "stevenblack")
+ [ -n "${adb_stb_sources}" ] && src_cat="${adb_stb_sources}" || continue
+ ;;
+ esac
(
for suffix in ${src_cat:-${src_url}}; do
if [ "${src_url}" != "${suffix}" ]; then
src_log="$("${adb_fetchutil}" ${adb_fetchparm} "${src_tmpcat}" "${src_url}${suffix}" 2>&1)"
src_rc="${?}"
if [ "${src_rc}" = "0" ] && [ -s "${src_tmpcat}" ]; then
- cat "${src_tmpcat}" >>"${src_tmpload}"
+ "${adb_catcmd}" "${src_tmpcat}" >>"${src_tmpload}"
: >"${src_tmpcat}"
fi
else
done
if [ "${src_rc}" = "0" ] && [ -s "${src_tmpload}" ]; then
"${adb_awkcmd}" "${src_rset}" "${src_tmpload}" | "${adb_sedcmd}" "s/\r//g" |
- "${adb_awkcmd}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' >"${src_tmpsort}"
- : >"${src_tmpload}"
- "${adb_sortcmd}" ${adb_srtopts} -u "${src_tmpsort}" 2>/dev/null >"${src_tmpfile}"
+ "${adb_awkcmd}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' |
+ "${adb_sortcmd}" ${adb_srtopts} -u >"${src_tmpfile}"
src_rc="${?}"
- : >"${src_tmpsort}"
if [ "${src_rc}" = "0" ] && [ -s "${src_tmpfile}" ]; then
f_list download
[ "${adb_backup}" = "1" ] && f_list backup
# tld compression and dns restart
#
if f_list merge && [ -s "${adb_tmpdir}/${adb_dnsfile}" ]; then
- f_tld "${adb_tmpdir}/${adb_dnsfile}"
+ [ "${adb_tld}" = "1" ] && f_tld "${adb_tmpdir}/${adb_dnsfile}"
f_list final
else
printf "%b" "${adb_dnsheader}" >"${adb_dnsdir}/${adb_dnsfile}"
if [ -s "${report_srt}" ]; then
start="$("${adb_awkcmd}" 'END{printf "%s_%s",$1,$2}' "${report_srt}")"
end="$("${adb_awkcmd}" 'NR==1{printf "%s_%s",$1,$2}' "${report_srt}")"
- total="$(wc -l <"${report_srt}")"
+ total="$(f_count tld "${report_srt}" "var")"
blocked="$("${adb_awkcmd}" '{if($5=="NX")cnt++}END{printf "%s",cnt}' "${report_srt}")"
percent="$("${adb_awkcmd}" -v t="${total}" -v b="${blocked}" 'BEGIN{printf "%.2f%s",b/t*100,"%"}')"
: >"${report_jsn}"
fi
json_select ".."
done
- content="$(cat "${report_txt}" 2>/dev/null)"
+ content="$("${adb_catcmd}" "${report_txt}" 2>/dev/null)"
: >"${report_txt}"
fi
if [ "${action}" = "cli" ]; then
printf "%s\n" "${content}"
elif [ "${action}" = "json" ]; then
- cat "${report_jsn}"
+ "${adb_catcmd}" "${report_jsn}"
elif [ "${action}" = "mail" ] && [ "${adb_mail}" = "1" ] && [ -x "${adb_mailservice}" ]; then
"${adb_mailservice}" "${content}" >/dev/null 2>&1
fi
- f_log "debug" "f_report ::: action: ${action}, top_count: ${top_count}, res_count: ${res_count}, search: ${search}, dump_util: ${adb_dumpcmd}, rep_dir: ${adb_reportdir}, rep_iface: ${adb_repiface:-"-"}, rep_listen: ${adb_replisten}, rep_chunksize: ${adb_repchunksize}, rep_chunkcnt: ${adb_repchunkcnt}, rep_resolve: ${adb_represolve}"
}
# source required system libraries
# reference required system utilities
#
+adb_wccmd="$(f_cmd wc)"
+adb_catcmd="$(f_cmd cat)"
+adb_zcatcmd="$(f_cmd zcat)"
adb_awkcmd="$(f_cmd gawk awk)"
adb_sortcmd="$(f_cmd sort)"
adb_grepcmd="$(f_cmd grep)"
+adb_gzipcmd="$(f_cmd gzip)"
adb_pgrepcmd="$(f_cmd pgrep)"
adb_sedcmd="$(f_cmd sed)"
adb_jsoncmd="$(f_cmd jsonfilter)"