mirror of
https://github.com/openwrt/packages.git
synced 2026-02-04 12:06:29 +08:00
389baa9d00
* added firewall rules based on nftables in a separate isolated nftables table (inet adblock)
and chains (prerouting), with MAC addresses stored in an nftables set.
Implemented the following firewall‑integrated features:
* external DNS Routing (unfiltered): routes DNS queries from selected devices or interfaces
to an external unfiltered DNS resolver
* external DNS Routing (filtered): routes DNS queries from selected devices or interfaces
to an external filtered DNS resolver
* force DNS: blocks or redirects all external DNS traffic from selected interfaces
to ensure that clients use the local resolver
* removed the optional generation of an additional jail list (only supported bydnsmasq),
use the new, resolver independent ext. DNS routing instead
* removed the pz-client-ip feature (only supported by bind),
use the new, resolver independent ext. DNS routing instead
* removed the obsolete, hardcoded fw4 rules for DNS enforcement
existing rules will be removed via uci-defaults script after adblock update
* changed the Jail mode to a simple allowlist-only mode
* fixed minor issues in the mail template
* readme update
* LuCI: added a new config tab "Firewall Settings"
* LuCI: fixed minor usability issues
Signed-off-by: Dirk Brenken <dev@brenken.org>
56 lines
2.7 KiB
Bash
Executable File
56 lines
2.7 KiB
Bash
Executable File
#!/bin/sh
|
|
# send mail script for adblock notifications
|
|
# Copyright (c) 2015-2026 Dirk Brenken (dev@brenken.org)
|
|
# This is free software, licensed under the GNU General Public License v3.
|
|
|
|
# Please note: you have to manually install and configure the package 'msmtp' before using this script
|
|
|
|
# set (s)hellcheck exceptions
|
|
# shellcheck disable=all
|
|
|
|
[ -r "/usr/bin/adblock.sh" ] && . "/usr/bin/adblock.sh" "mail"
|
|
|
|
adb_debug="$(uci_get adblock global adb_debug "0")"
|
|
adb_mailsender="$(uci_get adblock global adb_mailsender "no-reply@adblock")"
|
|
adb_mailreceiver="$(uci_get adblock global adb_mailreceiver)"
|
|
adb_mailtopic="$(uci_get adblock global adb_mailtopic "adblock notification")"
|
|
adb_mailprofile="$(uci_get adblock global adb_mailprofile "adb_notify")"
|
|
|
|
[ -z "${adb_mailreceiver}" ] && f_log "info" "please set the mail receiver with the 'adb_mailreceiver' option"
|
|
[ "${adb_debug}" = "1" ] && debug="--debug"
|
|
|
|
adb_mailhead="From: ${adb_mailsender}\nTo: ${adb_mailreceiver}\nSubject: ${adb_mailtopic}\nReply-to: ${adb_mailsender}\nMime-Version: 1.0\nContent-Type: text/html;charset=utf-8\nContent-Disposition: inline\n\n"
|
|
|
|
# info preparation
|
|
#
|
|
sys_info="$("${adb_catcmd}" /etc/banner 2>/dev/null; "${adb_ubuscmd}" call system board | "${adb_awkcmd}" 'BEGIN{FS="[{}\"]"}{if($2=="kernel"||$2=="hostname"||$2=="system"||$2=="model"||$2=="description")printf " + %-12s: %s\n",$2,$4}' 2>/dev/null)"
|
|
adb_info="$(/etc/init.d/adblock status 2>/dev/null)"
|
|
rep_info="${1}"
|
|
if [ -x "${adb_logreadcmd}" ]; then
|
|
log_info="$("${adb_logreadcmd}" -l 100 -e "adblock-" | "${adb_awkcmd}" '{NR=1;max=120;if(length($0)>max+1)while($0){if(NR==1){print substr($0,1,max)}else{print substr($0,1,max)}{$0=substr($0,max+1);NR=NR+1}}else print}')"
|
|
fi
|
|
|
|
# mail body
|
|
#
|
|
adb_mailtext="<html><body><pre style='display:block;font-family:monospace;font-size:1rem;padding:20;background-color:#f3eee5;white-space:pre'>"
|
|
adb_mailtext="${adb_mailtext}\n<strong>++\n++ System Information ++\n++</strong>\n${sys_info}"
|
|
adb_mailtext="${adb_mailtext}\n\n<strong>++\n++ Adblock Information ++\n++</strong>\n${adb_info}"
|
|
if [ -n "${rep_info}" ]; then
|
|
adb_mailtext="${adb_mailtext}\n\n<strong>++\n++ Report Information ++\n++</strong>\n${rep_info}"
|
|
fi
|
|
adb_mailtext="${adb_mailtext}\n\n<strong>++\n++ Logfile Information ++\n++</strong>\n${log_info}"
|
|
adb_mailtext="${adb_mailtext}</pre></body></html>"
|
|
|
|
# send mail
|
|
#
|
|
if [ -x "${adb_mailcmd}" ]; then
|
|
printf "%b" "${adb_mailhead}${adb_mailtext}" 2>/dev/null | "${adb_mailcmd}" ${debug} -a "${adb_mailprofile}" "${adb_mailreceiver}" >/dev/null 2>&1
|
|
if [ "${?}" = "0" ]; then
|
|
f_log "info" "mail successfully sent to '${adb_mailreceiver}'"
|
|
else
|
|
f_log "info" "failed to send mail to '${adb_mailreceiver}' with rc '${?}'"
|
|
fi
|
|
else
|
|
f_log "info" "msmtp mail daemon not found"
|
|
fi
|
|
exit 0 |