2 # dns based ad/abuse domain blocking
3 # Copyright (c) 2015-2021 Dirk Brenken (dev@brenken.org)
4 # This is free software, licensed under the GNU General Public License v3.
6 # set (s)hellcheck exceptions
7 # shellcheck disable=1091,2010,2016,2034,2039,2059,2086,2091,2129,2143,2154,2181,2183,2188
12 export PATH
="/usr/sbin:/usr/bin:/sbin:/bin"
32 adb_dnsprefix
="adb_list"
33 adb_locallist
="blacklist whitelist iplist"
35 adb_backupdir
="${adb_tmpbase}/adblock-Backup"
36 adb_reportdir
="${adb_tmpbase}/adblock-Report"
38 adb_pidfile
="/var/run/adblock.pid"
39 adb_blacklist
="/etc/adblock/adblock.blacklist"
40 adb_whitelist
="/etc/adblock/adblock.whitelist"
41 adb_mailservice
="/etc/adblock/adblock.mail"
42 adb_dnsfile
="${adb_dnsprefix}.overall"
43 adb_dnsjail
="${adb_dnsprefix}.jail"
44 adb_srcarc
="/etc/adblock/adblock.sources.gz"
45 adb_srcfile
="${adb_tmpbase}/adb_sources.json"
46 adb_rtfile
="${adb_tmpbase}/adb_runtime.json"
47 adb_loggercmd
="$(command -v logger)"
48 adb_dumpcmd
="$(command -v tcpdump)"
49 adb_lookupcmd
="$(command -v nslookup)"
57 adb_lookupdomain
="example.com"
58 adb_action
="${1:-"start"}"
63 # load & check adblock environment
67 local bg_pid iface port ports
69 adb_sysver
="$(ubus -S call system board 2>/dev/null | jsonfilter -e '@.model' -e '@.release.description' | \
70 "${adb_awk}" 'BEGIN{ORS=", "}{print $0}' | "${adb_awk}" '{print substr($0,1,length($0)-2)}')"
72 if [ "${adb_action}" != "report" ]
78 if [ "${adb_enabled}" = "0" ]
84 f_log "info" "adblock is currently disabled, please set the config option 'adb_enabled
' to '1' to use this service"
88 if [ "${adb_report}" = "1" ] && [ ! -x "${adb_dumpcmd}" ]
90 f_log "info" "Please install the package 'tcpdump
' or 'tcpdump-mini
' to use the reporting feature"
91 elif [ "${adb_report}" = "0" ] && [ "${adb_action}" = "report" ]
93 f_log "info" "Please enable the 'DNS Report
' option to use the reporting feature"
97 bg_pid="$(pgrep -f "^${adb_dumpcmd}.*adb_report\\.pcap$" | "${adb_awk}" '{ORS=" "; print $1}')"
98 if [ -x "${adb_dumpcmd}" ] && { [ "${adb_report}" = "0" ] || { [ -n "${bg_pid}" ] && { [ "${adb_action}" = "stop" ] || [ "${adb_action}" = "restart" ]; }; }; }
100 if [ -n "${bg_pid}" ]
102 kill -HUP "${bg_pid}" 2>/dev
/null
103 while $
(kill -0 "${bg_pid}" 2>/dev
/null
)
111 if [ -x "${adb_dumpcmd}" ] && [ "${adb_report}" = "1" ] && [ -z "${bg_pid}" ] && [ "${adb_action}" != "report" ] && [ "${adb_action}" != "stop" ]
113 for port
in ${adb_replisten}
119 ports
="${ports} or port ${port}"
122 if [ -z "${adb_repiface}" ]
124 network_get_device iface
"lan"
127 adb_repiface
="${iface}"
129 network_get_physdev iface
"lan"
132 adb_repiface
="${iface}"
135 if [ -n "${adb_repiface}" ]
137 uci_set adblock global adb_repiface
"${adb_repiface}"
141 if [ -n "${adb_reportdir}" ] && [ ! -d "${adb_reportdir}" ]
143 mkdir
-p "${adb_reportdir}"
144 f_log
"info" "report directory '${adb_reportdir}' created"
146 if [ -n "${adb_repiface}" ] && [ -d "${adb_reportdir}" ]
148 ( "${adb_dumpcmd}" -nn -p -s0 -l -i ${adb_repiface} ${ports} -C${adb_repchunksize} -W${adb_repchunkcnt} -w "${adb_reportdir}/adb_report.pcap" >/dev
/null
2>&1 & )
149 bg_pid
="$(pgrep -f "^
${adb_dumpcmd}.*adb_report\\.pcap$" | "${adb_awk}" '{ORS=" "; print $1}')"
151 f_log "info" "Please set the name of the reporting network device 'adb_repiface
' manually"
156 # check & set environment
160 adb_starttime="$(date "+%s")"
161 f_log "info" "adblock instance started ::: action: ${adb_action}, priority: ${adb_nice:-"0"}, pid: ${$}"
166 if [ "${adb_dnsflush}" = "1" ]
168 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
172 if [ ! -r "${adb_srcfile}" ]
174 if [ -r "${adb_srcarc}" ]
176 zcat "${adb_srcarc}" > "${adb_srcfile}"
178 f_log "err" "adblock source archive not found"
181 if [ -r "${adb_srcfile}" ] && [ "${adb_action}" != "report" ]
184 json_load_file "${adb_srcfile}"
186 f_log "err" "adblock source file not found"
190 # load adblock config
194 local cnt=0 cnt_max=10
196 if [ ! -r "/etc/config/adblock" ] || [ -z "$(uci -q show adblock.global.adb_safesearch)" ]
198 f_log "err" "no valid adblock config found, please re-install the package via opkg with the '--force-reinstall --force-maintainer' options"
207 eval "${option}=\"${value}\""
213 if [ "${option}" = "adb_sources" ]
215 eval "${option}=\"$(printf "%s" "${adb_sources}") ${value}\""
216 elif [ "${option}" = "adb_eng_sources" ]
218 eval "${option}=\"$(printf "%s" "${adb_eng_sources}") ${value}\""
219 elif [ "${option}" = "adb_sha_sources" ]
221 eval "${option}=\"$(printf "%s" "${adb_sha_sources}") ${value}\""
222 elif [ "${option}" = "adb_stb_sources" ]
224 eval "${option}=\"$(printf "%s" "${adb_stb_sources}") ${value}\""
225 elif [ "${option}" = "adb_utc_sources" ]
227 eval "${option}=\"$(printf "%s" "${adb_utc_sources}") ${value}\""
228 elif [ "${option}" = "adb_denyip" ]
230 eval "${option}=\"$(printf "%s" "${adb_denyip}") ${value}\""
231 elif [ "${option}" = "adb_allowip" ]
233 eval "${option}=\"$(printf "%s" "${adb_allowip}") ${value}\""
234 elif [ "${option}" = "adb_safesearchlist" ]
236 eval "${option}=\"$(printf "%s" "${adb_safesearchlist}") ${value}\""
237 elif [ "${option}" = "adb_zonelist" ]
239 eval "${option}=\"$(printf "%s" "${adb_zonelist}") ${value}\""
240 elif [ "${option}" = "adb_portlist" ]
242 eval "${option}=\"$(printf "%s" "${adb_portlist}") ${value}\""
248 if [ -z "${adb_fetchutil}" ] || [ -z "${adb_dns}" ]
250 while [ -z "${adb_packages}" ] && [ "${cnt}" -le "${cnt_max}" ]
252 adb_packages="$(opkg list-installed 2>/dev/null)"
256 if [ -z "${adb_packages}" ]
258 f_log "err" "local opkg package repository is not available, please set 'adb_fetchutil
' and 'adb_dns
' manually"
263 # load dns backend config
267 local util utils dns_up cnt=0
269 if [ -z "${adb_dns}" ]
271 utils="knot-resolver bind unbound dnsmasq raw"
274 if [ "${util}" = "raw" ] || [ -n "$(printf "%s" "${adb_packages}" | grep "^${util}")" ]
276 if [ "${util}" = "knot-resolver" ]
279 elif [ "${util}" = "bind" ]
283 if [ "${util}" = "raw" ] || [ -x "$(command -v "${util}")" ]
286 uci_set adblock global adb_dns "${util}"
292 elif [ "${adb_dns}" != "raw" ] && [ ! -x "$(command -v "${adb_dns}")" ]
297 if [ -n "${adb_dns}" ]
301 adb_dnsinotify="${adb_dnsinotify:-"0"}"
302 adb_dnsinstance="${adb_dnsinstance:-"0"}"
303 adb_dnsuser="${adb_dnsuser:-"dnsmasq"}"
304 adb_dnsdir="${adb_dnsdir:-"/tmp/dnsmasq.d"}"
305 adb_dnsheader="${adb_dnsheader}"
306 adb_dnsdeny="${adb_dnsdeny:-"${adb_awk} '{print \"address=/\"\$0\"/\"}'"}"
307 adb_dnsallow
="${adb_dnsallow:-"${adb_awk} '{print \"local=/\"\$0\"/#\"}'"}"
308 adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awk} -v item=\"\$item\" '{print \"address=/\"\$0\"/\"item\"\"}'"}"
309 adb_dnsstop="${adb_dnsstop:-"address=/#/"}"
312 adb_dnsinotify="${adb_dnsinotify:-"0"}"
313 adb_dnsinstance="${adb_dnsinstance:-"0"}"
314 adb_dnsuser="${adb_dnsuser:-"unbound"}"
315 adb_dnsdir="${adb_dnsdir:-"/var/lib/unbound"}"
316 adb_dnsheader="${adb_dnsheader}"
317 adb_dnsdeny="${adb_dnsdeny:-"${adb_awk} '{print \"local-zone: \\042\"\$0\"\\042 static\"}'"}"
318 adb_dnsallow
="${adb_dnsallow:-"${adb_awk} '{print \"local-zone: \\042\"\$0\"\\042 transparent\"}'"}"
319 adb_dnssafesearch="${adb_dnssafesearch:-"${adb_awk} -v item=\"\$item\" '{type=\"AAAA\";if(match(item,/^([0-9]{1,3}\.
){3}[0-9]{1,3}$
/)){type=\"A
\"}}{print
\"local-data
: \\042\"\
$0\" \"type\" \"item
\"\\042\"}'"}"
320 adb_dnsstop="${adb_dnsstop:-"local-zone: \".\" static"}"
323 adb_dnsinotify="${adb_dnsinotify:-"0"}"
324 adb_dnsinstance="${adb_dnsinstance:-"0"}"
325 adb_dnsuser="${adb_dnsuser:-"bind"}"
326 adb_dnsdir="${adb_dnsdir:-"/var/lib/bind"}"
327 adb_dnsheader="${adb_dnsheader:-"\$TTL 2h\n@ IN SOA localhost. root.localhost. (1 6h 1h 1w 2h)\n IN NS localhost.\n"}"
328 adb_dnsdeny="${adb_dnsdeny:-"${adb_awk} '{print \"\"\$0\" CNAME .\\n*.\"\$0\" CNAME .\"}'"}"
329 adb_dnsallow
="${adb_dnsallow:-"${adb_awk} '{print \"\"\$0\" CNAME rpz-passthru.\\n*.\"\$0\" CNAME rpz-passthru.\"}'"}"
330 adb_dnsdenyip="${adb_dnsdenyip:-"${adb_awk} '{print \"\"\$0\".rpz-client-ip CNAME .\"}'"}"
331 adb_dnsallowip="${adb_dnsallowip:-"${adb_awk} '{print \"\"\$0\".rpz-client-ip CNAME rpz-passthru.\"}'"}"
332 adb_dnssafesearch
="${adb_dnssafesearch:-"${adb_awk} -v item=\"\$item\" '{print \"\"\$0\" CNAME \"item\".\\n*.\"\$0\" CNAME \"item\".\"}'"}"
333 adb_dnsstop="${adb_dnsstop:-"* CNAME ."}"
336 adb_dnsinotify="${adb_dnsinotify:-"0"}"
337 adb_dnsinstance="${adb_dnsinstance:-"0"}"
338 adb_dnsuser="${adb_dnsuser:-"root"}"
339 adb_dnsdir="${adb_dnsdir:-"/etc/kresd"}"
340 adb_dnsheader="${adb_dnsheader:-"\$TTL 2h\n@ IN SOA localhost. root.localhost. (1 6h 1h 1w 2h)\n"}"
341 adb_dnsdeny="${adb_dnsdeny:-"${adb_awk} '{print \"\"\$0\" CNAME .\\n*.\"\$0\" CNAME .\"}'"}"
342 adb_dnsallow="${adb_dnsallow:-"${adb_awk} '{print \"\"\$0\" CNAME rpz-passthru.\\n*.\"\$0\" CNAME rpz-passthru.\"}'"}"
343 adb_dnssafesearch
="${adb_dnssafesearch:-"${adb_awk} -v item=\"\$item\" '{type=\"AAAA\";if(match(item,/^([0-9]{1,3}\.){3}[0-9]{1,3}$/)){type=\"A\"}}{print \"\"\$0\" \"type\" \"item\"\"}'"}"
344 adb_dnsstop="${adb_dnsstop:-"* CNAME ."}"
347 adb_dnsinotify="${adb_dnsinotify:-"0"}"
348 adb_dnsinstance="${adb_dnsinstance:-"0"}"
349 adb_dnsuser="${adb_dnsuser:-"root"}"
350 adb_dnsdir="${adb_dnsdir:-"/tmp"}"
351 adb_dnsheader="${adb_dnsheader}"
352 adb_dnsdeny="${adb_dnsdeny:-"0"}"
353 adb_dnsallow="${adb_dnsallow:-"1"}"
354 adb_dnssafesearch="${adb_dnssafesearch:-"0"}"
355 adb_dnsstop="${adb_dnsstop:-"0"}"
360 if [ "${adb_dns}" != "raw" ] && { [ -z "${adb_dns}" ] || [ ! -x "$(command -v "${adb_dns}")" ]; }
362 f_log
"err" "dns backend not found, please set 'adb_dns' manually"
365 if [ "${adb_dns}" != "raw" ] && { [ "${adb_dnsdir}" = "${adb_tmpbase}" ] || [ "${adb_dnsdir}" = "${adb_backupdir}" ] || [ "${adb_dnsdir}" = "${adb_reportdir}" ]; }
367 f_log "err
" "dns directory
'${adb_dnsdir}' has been misconfigured
, it must not point to the
'adb_tmpbase', 'adb_backupdir', 'adb_reportdir'"
370 if [ "${adb_action}" = "start
" ] && [ -z "${adb_trigger}" ]
372 sleep ${adb_triggerdelay}
375 if [ "${adb_dns}" != "raw
" ] && [ "${adb_action}" != "stop
" ]
377 while [ "${cnt}" -le 30 ]
379 dns_up="$
(ubus
-S call service list
"{\"name\":\"${adb_dns}\"}" 2>/dev
/null | jsonfilter
-l1 -e "@[\"${adb_dns}\"].instances.*.running" 2>/dev
/null
)"
380 if [ "${dns_up}" = "true
" ]
388 if [ -n "${adb_dnsdir}" ] && [ ! -d "${adb_dnsdir}" ]
390 mkdir -p "${adb_dnsdir}"
393 f_log "info
" "dns backend directory
'${adb_dnsdir}' created
"
395 f_log "err
" "dns backend directory
'${adb_dnsdir}' could not be created
"
399 if [ ! -f "${adb_dnsdir}/${adb_dnsfile}" ]
401 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
404 if [ "${dns_up}" != "true
" ]
409 f_log "err
" "dns backend
'${adb_dns}' not running or executable
"
413 if [ "${adb_backup}" = "1" ] && [ -n "${adb_backupdir}" ] && [ ! -d "${adb_backupdir}" ]
415 mkdir -p "${adb_backupdir}"
418 f_log "info
" "backup directory
'${adb_backupdir}' created
"
420 f_log "err
" "backup directory
'${adb_backupdir}' could not be created
"
424 if [ -n "${adb_jaildir}" ] && [ ! -d "${adb_jaildir}" ]
426 mkdir -p "${adb_jaildir}"
429 f_log "info
" "jail directory
'${adb_jaildir}' created
"
431 f_log "err
" "jail directory
'${adb_jaildir}' could not be created
"
435 f_log "debug
" "f_dns
::: dns
: ${adb_dns}, dns_dir: ${adb_dnsdir}, dns_file: ${adb_dnsfile}, dns_user: ${adb_dnsuser}, dns_inotify: ${adb_dnsinotify}, dns_instance: ${adb_dnsinstance}, backup: ${adb_backup}, backup_dir: ${adb_backupdir}, jail_dir: ${adb_jaildir}"
442 local util utils cnt=0
444 if [ -z "${adb_fetchutil}" ]
446 utils="aria2c curl wget uclient-fetch
"
449 if { [ "${util}" = "uclient-fetch" ] && [ -n "$(printf "%s" "${adb_packages}" | grep "^libustream-")" ]; } || \
450 { [ "${util}" = "wget" ] && [ -n "$(printf "%s" "${adb_packages}" | grep "^wget -")" ]; } || \
451 [ "${util}" = "curl
" ] || [ "${util}" = "aria2c
" ]
453 if [ -x "$
(command -v "${util}")" ]
455 adb_fetchutil="${util}"
456 uci_set adblock global adb_fetchutil "${util}"
462 elif [ ! -x "$
(command -v "${adb_fetchutil}")" ]
466 case "${adb_fetchutil}" in
468 adb_fetchparm="${adb_fetchparm:-"--timeout=20 --allow-overwrite=true --auto-file-renaming=false --check-certificate=true --log-level=warn --dir=/ -o"}"
471 adb_fetchparm="${adb_fetchparm:-"--connect-timeout 20 --silent --show-error --location -o"}"
474 adb_fetchparm="${adb_fetchparm:-"--timeout=20 -O"}"
477 adb_fetchparm="${adb_fetchparm:-"--no-cache --no-cookies --max-redirect=0 --timeout=20 -O"}"
480 if [ -n "${adb_fetchutil}" ] && [ -n "${adb_fetchparm}" ]
482 adb_fetchutil="$
(command -v "${adb_fetchutil}")"
484 f_log "err
" "download utility with SSL support not found
, please
install 'uclient-fetch' with a
'libustream-*' variant or another download utility like
'wget', 'curl' or
'aria2'"
486 f_log "debug
" "f_fetch
::: fetch_util
: ${adb_fetchutil:-"-"}, fetch_parm
: ${adb_fetchparm:-"-"}"
489 # create temporary files, directories and set dependent options
495 cpu="$
(grep -c '^processor' /proc
/cpuinfo
2>/dev
/null
)"
496 core="$
(grep -cm1 '^core id' /proc
/cpuinfo
2>/dev
/null
)"
497 if [ "${cpu}" = "0" ]
501 if [ "${core}" = "0" ]
507 if [ -d "${adb_tmpbase}" ]
509 adb_tmpdir="$
(mktemp
-p "${adb_tmpbase}" -d)"
510 adb_tmpload="$
(mktemp
-p "${adb_tmpdir}" -tu)"
511 adb_tmpfile="$
(mktemp
-p "${adb_tmpdir}" -tu)"
512 adb_srtopts="--temporary-directory=${adb_tmpdir} --compress-program=gzip --batch-size=32 --parallel=${cores}"
514 f_log "err
" "the temp base directory
'${adb_tmpbase}' does not exist
/is not mounted yet
, please create the directory or raise the
'adb_triggerdelay' to defer the adblock start
"
516 if [ ! -s "${adb_pidfile}" ]
518 printf "%s
" "${$}" > "${adb_pidfile}"
520 f_log "debug
" "f_temp
::: tmp_base
: ${adb_tmpbase:-"-"}, tmp_dir: ${adb_tmpdir:-"-"}, cores: ${cores:-"-"}, sort_options: ${adb_srtopts}, pid_file: ${adb_pidfile:-"-"}"
523 # remove temporary files and directories
527 if [ -d "${adb_tmpdir}" ]
529 rm -rf "${adb_tmpdir}"
531 rm -f "${adb_srcfile}"
533 f_log "debug
" "f_rmtemp
::: tmp_dir
: ${adb_tmpdir:-"-"}, src_file: ${adb_srcfile:-"-"}, pid_file: ${adb_pidfile:-"-"}"
536 # remove dns related files
542 status="$
(ubus
-S call service list
'{"name":"adblock"}' 2>/dev
/null | jsonfilter
-l1 -e '@["adblock"].instances.*.running' 2>/dev
/null
)"
543 if [ "${adb_dns}" = "raw" ] || { [ -n "${adb_dns}" ] && [ -n "${status}" ]; }
546 if [ "${adb_backup}" = "1" ]
548 rm -f "${adb_backupdir}/${adb_dnsprefix}".
*.gz
550 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
554 f_log
"debug" "f_rmdns ::: dns: ${adb_dns}, status: ${status:-"-"}, dns_dir: ${adb_dnsdir}, dns_file: ${adb_dnsfile}, rt_file: ${adb_rtfile}, backup_dir: ${adb_backupdir:-"-"}"
561 local change config
="${1}"
563 if [ -n "${config}" ]
565 change
="$(uci -q changes "${config}" | "${adb_awk}" '{ORS=" "; print $0}')"
566 if [ -n "${change}" ]
568 uci_commit "${config}"
571 "/etc/init.d/firewall" reload >/dev/null 2>&1
574 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
577 "/etc/init.d/${adb_dns}" reload >/dev/null 2>&1
581 f_log "debug" "f_uci ::: config: ${config}, change: ${change}"
589 local file mode="${1}" name="${2}"
594 if [ -s "${adb_tmpdir}/tmp.add.${name}" ]
596 adb_cnt="$(wc -l 2>/dev/null < "${adb_tmpdir}/tmp.add.${name}")"
600 if [ -s "${adb_tmpfile}.${name}" ]
602 adb_cnt="$(wc -l 2>/dev/null < "${adb_tmpfile}.${name}")"
606 if [ -s "${adb_tmpdir}/tmp.raw.${name}" ]
608 adb_cnt="$(wc -l 2>/dev/null < "${adb_tmpdir}/tmp.raw.${name}")"
609 rm -f "${adb_tmpdir}/tmp.raw.${name}"
613 if [ -s "${adb_tmpdir}/tmp.safesearch.${name}" ]
615 adb_cnt="$(wc -l 2>/dev/null < "${adb_tmpdir}/tmp.safesearch.${name}")"
619 if [ -s "${adb_tmpdir}/${adb_dnsfile}" ]
621 adb_cnt="$(wc -l 2>/dev/null < "${adb_tmpdir}/${adb_dnsfile}")"
624 "download"|"backup"|"restore")
625 if [ -s "${src_tmpfile}" ]
627 adb_cnt="$(wc -l 2>/dev/null < "${src_tmpfile}")"
631 if [ -s "${adb_dnsdir}/${adb_dnsfile}" ]
633 adb_cnt="$(wc -l 2>/dev/null < "${adb_dnsdir}/${adb_dnsfile}")"
634 if [ -s "${adb_tmpdir}/tmp.add.whitelist" ]
636 adb_cnt=$((adb_cnt-$(wc -l 2>/dev/null < "${adb_tmpdir}/tmp.add.whitelist")))
638 for file in "${adb_tmpdir}/tmp.safesearch".*
642 adb_cnt=$((adb_cnt-$(wc -l 2>/dev/null < "${file}")))
645 if [ -n "${adb_dnsheader}" ]
647 adb_cnt=$(((adb_cnt-$(printf "${adb_dnsheader}" | grep -c "^"))/2))
654 # set external config options
658 local config config_dir config_file section zone port fwcfg
663 config_dir="$(uci_get dhcp "@dnsmasq[${adb_dnsinstance}]" confdir | grep -Fo "${adb_dnsdir}")"
664 if [ "${adb_enabled}" = "1" ] && [ -z "${config_dir}" ]
666 uci_set dhcp "@dnsmasq[${adb_dnsinstance}]" confdir "${adb_dnsdir}" 2>/dev/null
671 config_file="$(uci_get resolver kresd rpz_file | grep -Fo "${adb_dnsdir}/${adb_dnsfile}")"
672 if [ "${adb_enabled}" = "1" ] && [ -z "${config_file}" ]
674 uci -q add_list resolver.kresd.rpz_file="${adb_dnsdir}/${adb_dnsfile}"
675 elif [ "${adb_enabled}" = "0" ] && [ -n "${config_file}" ]
677 uci -q del_list resolver.kresd.rpz_file="${adb_dnsdir}/${adb_dnsfile}"
684 fwcfg="$(uci -qNX show "${config}" | "${adb_awk}" 'BEGIN{FS="[.=]"};/adblock_/{if(zone==$2){next}else{ORS=" ";zone=$2;print zone}}')"
685 if [ "${adb_enabled}" = "1" ] && [ "${adb_forcedns}" = "1" ] && \
686 [ "$
(/etc
/init.d
/firewall enabled
; printf "%u" ${?})" = "0" ]
688 for zone in ${adb_zonelist}
690 for port in ${adb_portlist}
692 if [ -z "$
(printf "%s" "${fwcfg}" | grep -o -m1 "adblock_${zone}${port}[ |\$]")" ]
695 set firewall."adblock_
${zone}${port}"="redirect
"
696 set firewall."adblock_
${zone}${port}".name="Adblock DNS (${zone}, ${port})"
697 set firewall."adblock_
${zone}${port}".src="${zone}"
698 set firewall."adblock_
${zone}${port}".proto="tcp udp
"
699 set firewall."adblock_
${zone}${port}".src_dport="${port}"
700 set firewall."adblock_
${zone}${port}".dest_port="${port}"
701 set firewall."adblock_
${zone}${port}".target="DNAT
"
704 fwcfg="${fwcfg/adblock_${zone}${port}[ |\$]/}"
707 fwcfg="${fwcfg#"${fwcfg%%[![:space:]]*}"}"
708 fwcfg="${fwcfg%"${fwcfg##*[![:space:]]}"}"
710 if [ "${adb_enabled}" = "0" ] || [ "${adb_forcedns}" = "0" ] || [ -n "${fwcfg}" ]
712 for section in ${fwcfg}
714 uci_remove firewall "${section}"
720 # restart dns backend
724 local dns_service dns_up dns_pid dns_procfile restart_rc cnt=0 out_rc=4 in_rc="${1:-0}"
726 if [ "${adb_dns}" = "raw" ] || { [ "${in_rc}" = "0" ] && [ "${adb_dnsinotify}" = "1" ]; }
730 "/etc/init.d/${adb_dns}" restart
>/dev
/null
2>&1
733 if [ "${restart_rc}" = "0" ]
735 while [ "${cnt}" -le "${adb_dnstimeout}" ]
737 dns_service
="$(ubus -S call service list "{\"name
\":\"${adb_dns}\"}")"
738 dns_up
="$(printf "%s
" "${dns_service}" | jsonfilter -l1 -e "@
[\"${adb_dns}\"].instances.
*.running
")"
739 dns_pid
="$(printf "%s
" "${dns_service}" | jsonfilter -l1 -e "@
[\"${adb_dns}\"].instances.
*.pid
")"
740 dns_procfile
="$(ls -l "/proc
/${dns_pid}/fd" 2>/dev/null | grep -Fo "${adb_dnsdir}/${adb_dnsfile}")"
741 if [ "${dns_up}" = "true" ] && [ -n "${dns_pid}" ] && [ -z "${dns_procfile}" ]
743 if [ -x "${adb_lookupcmd}" ] && [ "${adb_lookupdomain}" != "false" ]
745 "${adb_lookupcmd}" "${adb_lookupdomain}" >/dev
/null
2>&1
752 sleep ${adb_dnstimeout}
753 cnt
=${adb_dnstimeout}
762 f_log
"debug" "f_dnsup ::: lookup_util: ${adb_lookupcmd:-"-"}, lookup_domain: ${adb_lookupdomain:-"-"}, restart_rc: ${restart_rc:-"-"}, dns_timeout: ${adb_dnstimeout}, dns_cnt: ${cnt}, in_rc: ${in_rc}, out_rc: ${out_rc}"
766 # backup/restore/remove blocklists
770 local hold
file rset item array safe_url safe_ips safe_cname safe_domains ip out_rc mode
="${1}" src_name="${2:-"${src_name}"}" in_rc="${src_rc:-0}" cnt="1" ffiles="-maxdepth 1 -name ${adb_dnsprefix}.*.gz"
775 if [ "${adb_dns}" = "named" ]
777 rset
="BEGIN{FS=\"[.:]\";pfx=\"32\"}{if(match(\$0,/:/))pfx=\"128\"}{printf \"%s.\",pfx;for(seg=NF;seg>=1;seg--)if(seg==1)printf \"%s\n\",\$seg;else if(\$seg>=0)printf \"%s.\",\$seg; else printf \"%s.\",\"zz\"}"
778 if [ -n "${adb_allowip}" ]
780 > "${adb_tmpdir}/tmp.raw.${src_name}"
781 for ip
in ${adb_allowip}
783 printf "%s" "${ip}" | "${adb_awk}" "${rset}" >> "${adb_tmpdir}/tmp.raw.${src_name}"
785 eval "${adb_dnsallowip}" "${adb_tmpdir}/tmp.raw.${src_name}" > "${adb_tmpdir}/tmp.add.${src_name}"
788 if [ -n "${adb_denyip}" ] && { [ -z "${out_rc}" ] || [ "${out_rc}" = "0" ]; }
790 > "${adb_tmpdir}/tmp.raw.
${src_name}"
791 for ip in ${adb_denyip}
793 printf "%s
" "${ip}" | "${adb_awk}" "${rset}" >> "${adb_tmpdir}/tmp.raw.${src_name}"
795 eval "${adb_dnsdenyip}" "${adb_tmpdir}/tmp.raw.${src_name}" >> "${adb_tmpdir}/tmp.add.${src_name}"
798 rm -f "${adb_tmpdir}/tmp.raw.
${src_name}"
801 "blacklist
"|"whitelist
")
803 if [ "${src_name}" = "blacklist
" ] && [ -f "${adb_blacklist}" ]
805 rset="/^
([[:alnum
:]_-
]{1,63}\\.
)+[[:alpha
:]]+([[:space
:]]|$
)/{print tolower
(\
$1)}"
806 "${adb_awk}" "${rset}" "${adb_blacklist}" | \
807 "${adb_awk}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' > "${adb_tmpdir}/tmp.raw.${src_name}"
808 "${adb_sort}" ${adb_srtopts} -u "${adb_tmpdir}/tmp.raw.${src_name}" 2>/dev/null > "${adb_tmpfile}.${src_name}"
810 rm -f "${adb_tmpdir}/tmp.raw.
${src_name}"
811 elif [ "${src_name}" = "whitelist
" ] && [ -f "${adb_whitelist}" ]
813 rset="/^
([[:alnum
:]_-
]{1,63}\\.
)+[[:alpha
:]]+([[:space
:]]|$
)/{print tolower
(\
$1)}"
814 "${adb_awk}" "${rset}" "${adb_whitelist}" > "${adb_tmpdir}/tmp.raw.${src_name}"
816 if [ "${out_rc}" = "0" ]
818 rset="/^
([[:alnum
:]_-
]{1,63}\\.
)+[[:alpha
:]]+([[:space
:]]|$
)/{gsub
(\"\\\\.
\",\"\\\\.
\",\
$1);print tolower
(\"^
(|.
*\\\\.
)\"\
$1\"$
\")}"
819 "${adb_awk}" "${rset}" "${adb_tmpdir}/tmp.raw.${src_name}" > "${adb_tmpdir}/tmp.rem.${src_name}"
821 if [ "${out_rc}" = "0" ] && [ "${adb_dnsallow}" != "1" ]
823 eval "${adb_dnsallow}" "${adb_tmpdir}/tmp.raw.${src_name}" > "${adb_tmpdir}/tmp.add.${src_name}"
825 if [ "${out_rc}" = "0" ] && [ "${adb_jail}" = "1" ] && [ "${adb_dnsstop}" != "0" ]
827 > "${adb_jaildir}/${adb_dnsjail}"
828 if [ -n "${adb_dnsheader}" ]
830 printf "${adb_dnsheader}" >> "${adb_jaildir}/${adb_dnsjail}"
832 cat "${adb_tmpdir}/tmp.add.${src_name}" >> "${adb_jaildir}/${adb_dnsjail}"
833 printf "%s
\n" "${adb_dnsstop}" >> "${adb_jaildir}/${adb_dnsjail}"
840 case "${src_name}" in
842 rset="/^
(\\.
[[:alnum
:]_-
]{1,63}\\.
)+[[:alpha
:]]+([[:space
:]]|$
)/{printf \"%s
\n%s
\n\",tolower
(\"www
\"\
$1),tolower
(substr
(\
$1,2,length
(\
$1)))}"
843 safe_url="https
://www.google.com
/supported_domains
"
844 safe_cname="forcesafesearch.google.com
"
845 safe_domains="${adb_tmpdir}/tmp.load.safesearch.
${src_name}"
846 if [ "${adb_backup}" = "1" ] && [ -s "${adb_backupdir}/safesearch.${src_name}.gz
" ]
848 zcat "${adb_backupdir}/safesearch.${src_name}.gz" > "${safe_domains}"
851 "${adb_fetchutil}" ${adb_fetchparm} "${safe_domains}" "${safe_url}" 2>/dev/null
853 if [ "${adb_backup}" = "1" ] && [ "${out_rc}" = "0" ]
855 gzip -cf "${safe_domains}" > "${adb_backupdir}/safesearch.${src_name}.gz
"
858 if [ "${out_rc}" = "0" ]
860 if [ -x "${adb_lookupcmd}" ]
862 safe_ips="$
("${adb_lookupcmd}" "${safe_cname}" 2>/dev/null | "${adb_awk}" '/^Address[ 0-9]*: /{ORS=" ";print $NF}')"
863 if [ -n "${safe_ips}" ]
865 "${adb_awk}" "${rset}" "${safe_domains}" > "${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
872 safe_cname
="strict.bing.com"
873 safe_domains
="www.bing.com"
874 if [ -x "${adb_lookupcmd}" ]
876 safe_ips
="$("${adb_lookupcmd}" "${safe_cname}" 2>/dev/null | "${adb_awk}" '/^Address[ 0-9]*: /{ORS=" ";print $NF}')"
877 if [ -n "${safe_ips}" ]
879 printf "%s\n" ${safe_domains} > "${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
885 safe_cname="safe.duckduckgo.com"
886 safe_domains="duckduckgo.com"
887 if [ -x "${adb_lookupcmd}" ]
889 safe_ips="$("${adb_lookupcmd}" "${safe_cname}" 2>/dev/null | "${adb_awk}" '/^Address[ 0-9]*: /{ORS=" ";print $NF}')"
890 if [ -n "${safe_ips}" ]
892 printf "%s
\n" ${safe_domains} > "${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
898 safe_cname
="safesearch.pixabay.com"
899 safe_domains
="pixabay.com"
900 if [ -x "${adb_lookupcmd}" ]
902 safe_ips
="$("${adb_lookupcmd}" "${safe_cname}" 2>/dev/null | "${adb_awk}" '/^Address[ 0-9]*: /{ORS=" ";print $NF}')"
903 if [ -n "${safe_ips}" ]
905 printf "%s\n" ${safe_domains} > "${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
911 safe_cname="familysearch.yandex.ru"
912 safe_domains="ya.ru yandex.ru yandex.com yandex.com.tr yandex.ua yandex.by yandex.ee yandex.lt yandex.lv yandex.md yandex.uz yandex.tm yandex.tj yandex.az yandex.kz"
913 if [ -x "${adb_lookupcmd}" ]
915 safe_ips="$("${adb_lookupcmd}" "${safe_cname}" 2>/dev/null | "${adb_awk}" '/^Address[ 0-9]*: /{ORS=" ";print $NF}')"
916 if [ -n "${safe_ips}" ]
918 printf "%s
\n" ${safe_domains} > "${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
924 if [ "${adb_safesearchmod}" = "0" ]
926 safe_cname
="restrict.youtube.com"
928 safe_cname
="restrictmoderate.youtube.com"
930 safe_domains
="www.youtube.com m.youtube.com youtubei.googleapis.com youtube.googleapis.com www.youtube-nocookie.com"
931 if [ -x "${adb_lookupcmd}" ]
933 safe_ips
="$("${adb_lookupcmd}" "${safe_cname}" 2>/dev/null | "${adb_awk}" '/^Address[ 0-9]*: /{ORS=" ";print $NF}')"
934 if [ -n "${safe_ips}" ]
936 printf "%s\n" ${safe_domains} > "${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
942 if [ "${out_rc}" = "0" ] && [ -s "${adb_tmpdir}/tmp.raw.safesearch.${src_name}" ]
944 > "${adb_tmpdir}/tmp.safesearch.${src_name}"
945 if [ "${adb_dns}" = "named" ]
947 array="${safe_cname}"
953 eval "${adb_dnssafesearch}" "${adb_tmpdir}/tmp.raw.safesearch.${src_name}" >> "${adb_tmpdir}/tmp.safesearch.${src_name}"
956 rm -f "${adb_tmpdir}/tmp.safesearch.${src_name}"
961 rm -f "${adb_tmpdir}/tmp.raw.safesearch.${src_name}"
966 gzip -cf "${src_tmpfile}" > "${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz"
971 if [ -n "${src_name}" ] && [ -s "${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz" ]
973 zcat "${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz" > "${src_tmpfile}"
975 elif [ -z "${src_name}" ]
977 for file in "${adb_backupdir}/${adb_dnsprefix}".*.gz
983 zcat "${file}" > "${adb_tmpfile}.${name}" &
984 hold=$((cnt%adb_maxqueue))
985 if [ "${hold}" = "0" ]
997 if [ "${adb_action}" != "start" ] && [ "${adb_action}" != "resume" ] && [ -n "${src_name}" ] && [ "${out_rc}" != "0" ]
999 adb_sources="${adb_sources/${src_name}}"
1003 if [ "${adb_backup}" = "1" ]
1005 rm "${adb_backupdir}/${adb_dnsprefix}.${src_name}.gz" 2>/dev/null
1008 adb_sources="${adb_sources/${src_name}}"
1011 if [ "${adb_backup}" = "1" ]
1013 for src_name in ${adb_sources}
1015 ffiles="${ffiles} -a ! -name ${adb_dnsprefix}.${src_name}.gz"
1017 if [ "${adb_safesearch}" = "1" ] && [ "${adb_dnssafesearch}" != "0" ]
1019 ffiles="${ffiles} -a ! -name safesearch.google.gz"
1021 find "${adb_backupdir}" ${ffiles} -print0 2>/dev/null | xargs -0 rm 2>/dev/null
1024 "${adb_sort}" ${adb_srtopts} -mu "${adb_tmpfile}".* 2>/dev/null > "${adb_tmpdir}/${adb_dnsfile}"
1026 rm -f "${adb_tmpfile}".*
1030 if [ -n "${adb_dnsheader}" ]
1032 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
1034 > "${adb_dnsdir}/${adb_dnsfile}"
1036 if [ -s "${adb_tmpdir}/tmp.add.iplist" ]
1038 cat "${adb_tmpdir}/tmp.add.iplist" >> "${adb_dnsdir}/${adb_dnsfile}"
1040 if [ -s "${adb_tmpdir}/tmp.add.whitelist" ]
1042 cat "${adb_tmpdir}/tmp.add.whitelist" >> "${adb_dnsdir}/${adb_dnsfile}"
1044 for file in "${adb_tmpdir}/tmp.safesearch".*
1048 cat "${file}" >> "${adb_dnsdir}/${adb_dnsfile}"
1051 if [ "${adb_dnsdeny}" != "0" ]
1053 eval "${adb_dnsdeny}" "${adb_tmpdir}/${adb_dnsfile}" >> "${adb_dnsdir}/${adb_dnsfile}"
1055 mv "${adb_tmpdir}/${adb_dnsfile}" "${adb_dnsdir}/${adb_dnsfile}"
1060 f_count "${mode}" "${src_name}"
1061 out_rc="${out_rc:-"${in_rc}"}"
1062 f_log "debug" "f_list ::: name: ${src_name:-"-"}, mode: ${mode}, cnt: ${adb_cnt}, in_rc: ${in_rc}, out_rc: ${out_rc}"
1066 # top level domain compression
1070 local cnt cnt_tld source="${1}" temp_tld="${1}.tld"
1072 "${adb_awk}" '{if(NR
==1){tld
=$NF};while(getline
){if(index
($NF,tld
".")==0){print tld
;tld
=$NF}}print tld
}' "${source}" | \
1073 "${adb_awk}" 'BEGIN
{FS
="."}{for(f
=NF
;f
>1;f--
)printf "%s.",$f;print
$1}' > "${temp_tld}"
1076 mv -f "${temp_tld}" "${source}"
1077 cnt_tld="$(wc -l 2>/dev/null < "${source}")"
1081 f_log "debug" "f_tld ::: source: ${source}, cnt: ${adb_cnt:-"-"}, cnt_tld: ${cnt_tld:-"-"}"
1084 # suspend/resume adblock processing
1088 local status entry done="false" mode="${1}"
1091 json_load_file "${adb_rtfile}" >/dev/null 2>&1
1092 json_select "data" >/dev/null 2>&1
1093 json_get_var status "adblock_status"
1094 if [ "${mode}" = "suspend" ] && [ "${status}" = "enabled" ]
1097 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
1098 if [ "${adb_jail}" = "1" ] && [ "${adb_jaildir}" = "${adb_dnsdir}" ]
1100 printf "${adb_dnsheader}" > "${adb_jaildir}/${adb_dnsjail}"
1101 elif [ -f "${adb_dnsdir}/${adb_dnsjail}" ]
1103 rm -f "${adb_dnsdir}/${adb_dnsjail}"
1107 elif [ "${mode}" = "resume" ] && [ "${status}" = "paused" ]
1113 if [ "${done}" = "true" ]
1115 if [ "${mode}" = "suspend" ]
1120 f_log "info" "${mode} adblock processing"
1125 # query blocklist for certain (sub-)domains
1129 local search result prefix suffix field query_start query_end query_timeout=30 domain="${1}" tld="${1#*.}"
1131 if [ -z "${domain}" ] || [ "${domain}" = "${tld}" ]
1133 printf "%s\n" "::: invalid input, please submit a single (sub-)domain :::"
1135 case "${adb_dns}" in
1147 prefix="[^\\*].*[\\.]"
1152 prefix="[^\\*].*[\\.]"
1162 query_start="$(date "+%s")"
1163 while [ "${domain}" != "${tld}" ]
1165 search="${domain//[+*~%\$&\"\']/}"
1166 search="${search//./\\.}"
1167 result="$("${adb_awk}" -F '/|\"|\t| ' "/^(${search}|${prefix}+${search}.*${suffix})$/{i++;if(i<=9){printf \" + %s\n\",\$${field}}else if(i==10){printf \" + %s\n\",\"[...]\";exit}}" "${adb_dnsdir}/${adb_dnsfile}")"
1168 printf "%s\n%s\n%s\n" ":::" "::: domain '${domain}' in active blocklist" ":::"
1169 printf "%s\n\n" "${result:-" - no match"}"
1173 if [ "${adb_backup}" = "1" ] && [ -d "${adb_backupdir}" ]
1175 search="${1//[+*~%\$&\"\']/}"
1176 search="${search//./\\.}"
1177 printf "%s\n%s\n%s\n" ":::" "::: domain '${1}' in backups and black-/whitelist" ":::"
1178 for file in "${adb_backupdir}/${adb_dnsprefix}".*.gz "${adb_blacklist}" "${adb_whitelist}"
1180 suffix="${file##*.}"
1181 if [ "${suffix}" = "gz" ]
1183 zcat "${file}" 2>/dev/null | \
1184 "${adb_awk}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.",$f;print $1}' | "${adb_awk}" -v f="${file##*/}" "BEGIN{rc=1};/^($search|.*\\.${search})$/{i++;if(i<=3){printf \" + %-30s%s\n\",f,\$1;rc=0}else if(i==4){printf \" + %-30s%s\n\",f,\"[...]\"}};END{exit rc}"
1186 "${adb_awk}" -v f="${file##*/}" "BEGIN{rc=1};/^($search|.*\\.${search})$/{i++;if(i<=3){printf \" + %-30s%s\n\",f,\$1;rc=0}else if(i==4){printf \" + %-30s%s\n\",f,\"[...]\"}};END{exit rc}" "${file}"
1191 query_end="$(date "+%s")"
1192 if [ "$((query_end-query_start))" -gt "${query_timeout}" ]
1194 printf "%s\n\n" " - [...]"
1199 if [ "${result}" != "true" ]
1201 printf "%s\n\n" " - no match"
1207 # update runtime information
1211 local entry sources runtime utils memory bg_pid status="${1:-"enabled"}"
1215 adb_endtime="$(date "+%s")"
1216 memory="$("${adb_awk}" '/^MemTotal|^MemFree|^MemAvailable/{ORS="/"; print int($2/1000)}' "/proc/meminfo" 2>/dev/null | "${adb_awk}" '{print substr($0,1,length($0)-1)}')"
1217 if [ "$
(( (adb_endtime-adb_starttime
)/60 ))" -lt 60 ]
1219 runtime="${adb_action}, $
(( (adb_endtime-adb_starttime
)/60 ))m $
(( (adb_endtime-adb_starttime
)%60 ))s
, ${memory:-0}, $
(date "+%d.%m.%Y %H:%M:%S")"
1221 runtime="${adb_action}, n
/a
, ${memory:-0}, $
(date "+%d.%m.%Y %H:%M:%S")"
1223 if [ "${status}" = "error
" ]
1236 json_load_file "${adb_rtfile}" >/dev/null 2>&1
1239 if [ -z "${adb_fetchutil}" ] || [ -z "${adb_awk}" ]
1241 json_get_var utils "utilities
"
1243 utils="${adb_fetchutil}, ${adb_awk}"
1245 if [ -z "${adb_cnt}" ]
1247 json_get_var adb_cnt "blocked_domains
"
1248 adb_cnt="${adb_cnt%% *}"
1250 if [ -z "${runtime}" ]
1252 json_get_var runtime "last_run
"
1255 if [ "${adb_jail}" = "1" ] && [ "${adb_jaildir}" = "${adb_dnsdir}" ]
1258 sources="restrictive_jail
"
1260 sources="$
(printf "%s\n" ${adb_sources} | "${adb_sort}" | "${adb_awk}" '{ORS=" ";print $0}')"
1265 json_load_file "${adb_rtfile}" >/dev/null 2>&1
1267 json_add_string "adblock_status" "${status:-"enabled"}"
1268 json_add_string "adblock_version" "${adb_ver}"
1269 json_add_string "blocked_domains" "${adb_cnt:-0}"
1270 json_add_array "active_sources"
1271 for entry in ${sources}
1274 json_add_string "source" "${entry}"
1278 json_add_string "dns_backend" "${adb_dns:-"-"}, ${adb_dnsdir:-"-"}"
1279 json_add_string "run_utils" "${utils:-"-"}"
1280 json_add_string "run_ifaces" "trigger: ${adb_trigger:-"-"}, report: ${adb_repiface:-"-"}"
1281 json_add_string "run_directories" "base: ${adb_tmpbase}, backup: ${adb_backupdir}, report: ${adb_reportdir}, jail: ${adb_jaildir}"
1282 json_add_string "run_flags" "backup: ${adb_backup}, flush: ${adb_dnsflush}, force: ${adb_forcedns}, search: ${adb_safesearch}, report: ${adb_report}, mail: ${adb_mail}, jail: ${adb_jail}"
1283 json_add_string "last_run" "${runtime:-"-"}"
1284 json_add_string "system" "${adb_sysver}"
1285 json_dump > "${adb_rtfile}"
1287 if [ "${adb_mail}" = "1" ] && [ -x "${adb_mailservice}" ] && \
1288 { [ "${status}" = "error" ] || { [ "${status}" = "enabled" ] && [ "${adb_cnt}" -le "${adb_mailcnt}" ]; } }
1290 ( "${adb_mailservice}" "${adb_ver}" >/dev/null 2>&1 )&
1293 f_log "debug" "f_jsnup ::: status: ${status:-"-"}, cnt: ${adb_cnt}, mail: ${adb_mail}, mail_service: ${adb_mailservice}, mail_cnt: ${adb_mailcnt}, mail_pid: ${bg_pid:-"-"}"
1300 local class="${1}" log_msg="${2}"
1302 if [ -n "${log_msg}" ] && { [ "${class}" != "debug" ] || [ "${adb_debug}" = "1" ]; }
1304 if [ -x "${adb_loggercmd}" ]
1306 "${adb_loggercmd}" -p "${class}" -t "adblock-${adb_ver}[${$}]" "${log_msg}"
1308 printf "%s %s %s\n" "${class}" "adblock-${adb_ver}[${$}]" "${log_msg}"
1310 if [ "${class}" = "err" ]
1319 # main function for blocklist processing
1323 local src_tmpload src_tmpfile src_name src_rset src_url src_log src_arc src_cat src_item src_list src_entries src_suffix src_rc entry memory cnt=1
1325 memory="$("${adb_awk}" '/^MemTotal|^MemFree|^MemAvailable/{ORS="/"; print int($2/1000)}' "/proc/meminfo" 2>/dev/null | "${adb_awk}" '{print substr($0,1,length($0)-1)}')"
1326 f_log "debug
" "f_main
::: memory
: ${memory:-0}, max_queue: ${adb_maxqueue}, safe_search: ${adb_safesearch}, force_dns: ${adb_forcedns}, awk: ${adb_awk}"
1328 # white- and blacklist preparation
1330 for entry in ${adb_locallist}
1332 ( f_list "${entry}" "${entry}" )&
1335 if [ "${adb_dns}" != "raw" ] && [ "${adb_jail}" = "1" ] && [ "${adb_jaildir}" = "${adb_dnsdir}" ]
1337 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
1338 chown "${adb_dnsuser}" "${adb_jaildir}/${adb_dnsjail}" 2>/dev/null
1342 if [ "${adb_action}" != "resume
" ]
1346 f_log "info
" "restrictive jail mode enabled successfully
(${adb_sysver})"
1348 f_log "err
" "dns backend restart
in jail mode failed
"
1352 elif [ -f "${adb_dnsdir}/${adb_dnsjail}" ]
1354 rm -f "${adb_dnsdir}/${adb_dnsjail}"
1358 # safe search preparation
1360 if [ "${adb_safesearch}" = "1" ] && [ "${adb_dnssafesearch}" != "0" ]
1362 if [ -z "${adb_safesearchlist}" ]
1364 adb_safesearchlist="google bing duckduckgo pixabay yandex youtube
"
1366 for entry in ${adb_safesearchlist}
1368 ( f_list safesearch "${entry}" )&
1375 for src_name in ${adb_sources}
1377 json_select "${src_name}" >/dev/null 2>&1
1378 if [ "${?}" != "0" ]
1380 adb_sources="${adb_sources/${src_name}}"
1383 json_get_var src_url "url
" >/dev/null 2>&1
1384 json_get_var src_rset "rule
" >/dev/null 2>&1
1386 src_tmpcat="${adb_tmpload}.
${src_name}.
cat"
1387 src_tmpload="${adb_tmpload}.
${src_name}.load
"
1388 src_tmpsort="${adb_tmpload}.
${src_name}.
sort"
1389 src_tmpfile="${adb_tmpfile}.
${src_name}"
1394 if [ -z "${src_url}" ] || [ -z "${src_rset}" ]
1402 if [ "${adb_backup}" = "1" ] && { [ "${adb_action}" = "start" ] || [ "${adb_action}" = "resume" ]; }
1405 if [ "${?}" = "0" ] && [ -s "${src_tmpfile}" ]
1411 # download queue processing
1413 unset src_cat src_entries
1414 if [ "${src_name}" = "shallalist" ] ||
[ "${src_name}" = "utcapitole" ]
1416 if [ "${src_name}" = "shallalist" ] && [ -n "${adb_sha_sources}" ]
1418 src_cat
="${adb_sha_sources}"
1419 elif [ "${src_name}" = "utcapitole" ] && [ -n "${adb_utc_sources}" ]
1421 src_cat
="${adb_utc_sources}"
1423 if [ -n "${src_cat}" ]
1426 src_arc
="${adb_tmpdir}/${src_url##*/}"
1427 src_log
="$("${adb_fetchutil}" ${adb_fetchparm} "${src_arc}" "${src_url}" 2>&1)"
1429 if [ "${src_rc}" = "0" ] && [ -s "${src_arc}" ]
1431 src_suffix
="$(eval printf "%s
" \"\$\{adb_src_suffix_${src_name}:-\"domains\"\}\")"
1432 src_list
="$(tar -tzf "${src_arc}" 2>/dev/null)"
1433 for src_item
in ${src_cat}
1435 src_entries
="${src_entries} $(printf "%s" "${src_list}" | grep -E "${src_item}/${src_suffix}$")"
1437 if [ -n "${src_entries}" ]
1439 tar -xOzf "${src_arc}" ${src_entries} 2>/dev/null > "${src_tmpload}"
1444 src_log="$
(printf "%s" "${src_log}" | "${adb_awk}" '{ORS=" ";print $0}')"
1445 f_log
"info" "download of '${src_name}' failed, url: ${src_url}, rule: ${src_rset:-"-"}, categories: ${src_cat:-"-"}, rc: ${src_rc}, log: ${src_log:-"-"}"
1447 if [ "${src_rc}" = "0" ] && [ -s "${src_tmpload}" ]
1449 if [ -s "${adb_tmpdir}/tmp.rem.whitelist" ]
1451 "${adb_awk}" "${src_rset}" "${src_tmpload}" |
sed "s/\r//g" | \
1452 grep -Evf "${adb_tmpdir}/tmp.rem.whitelist" | "${adb_awk}" 'BEGIN{FS="."}{for(f=NF;f>1;f--)printf "%s.
",$f;print $1}' > "${src_tmpsort}"
1454 "${adb_awk}" "${src_rset}" "${src_tmpload}" | sed "s
/\r//g
" | \
1455 "${adb_awk}" 'BEGIN{FS=".
"}{for(f=NF;f>1;f--)printf "%s.
",$f;print $1}' > "${src_tmpsort}"
1458 "${adb_sort}" ${adb_srtopts} -u "${src_tmpsort}" 2>/dev/null > "${src_tmpfile}"
1461 if [ "${src_rc}" = "0" ] && [ -s "${src_tmpfile}" ]
1464 if [ "${adb_backup}" = "1" ]
1468 elif [ "${adb_backup}" = "1" ] && [ "${adb_action}" != "start
" ]
1470 f_log "info
" "archive preparation of
'${src_name}' failed, categories: ${src_cat:-"-"}, entries: ${src_entries}, rc: ${src_rc}"
1472 rm -f "${src_tmpfile}"
1474 elif [ "${adb_backup}" = "1" ] && [ "${adb_action}" != "start" ]
1476 f_log "info" "archive extraction of '${src_name}' failed, categories: ${src_cat:-"-"}, entries: ${src_entries}, rc: ${src_rc}"
1482 if [ "${src_name}" = "energized
" ] && [ -n "${adb_eng_sources}" ]
1484 src_cat="${adb_eng_sources}"
1485 elif [ "${src_name}" = "stevenblack
" ] && [ -n "${adb_stb_sources}" ]
1487 src_cat="${adb_stb_sources}"
1488 elif { [ "${src_name}" = "energized" ] && [ -z "${adb_eng_sources}" ]; } || \
1489 { [ "${src_name}" = "stevenblack" ] && [ -z "${adb_stb_sources}" ]; }
1494 for suffix in ${src_cat:-${src_url}}
1496 if [ "${src_url}" != "${suffix}" ]
1498 src_log="$
("${adb_fetchutil}" ${adb_fetchparm} "${src_tmpcat}" "${src_url}${suffix}" 2>&1)"
1500 if [ "${src_rc}" = "0" ] && [ -s "${src_tmpcat}" ]
1502 cat "${src_tmpcat}" >> "${src_tmpload}"
1506 src_log="$
("${adb_fetchutil}" ${adb_fetchparm} "${src_tmpload}" "${src_url}" 2>&1)"
1510 if [ "${src_rc}" = "0" ] && [ -s "${src_tmpload}" ]
1512 if [ -s "${adb_tmpdir}/tmp.rem.whitelist
" ]
1514 "${adb_awk}" "${src_rset}" "${src_tmpload}" | sed "s
/\r//g
" | \
1515 grep -Evf "${adb_tmpdir}/tmp.rem.whitelist" | "${adb_awk}" 'BEGIN{FS="."}{for(f
=NF
;f
>1;f--
)printf "%s.",$f;print
$1}' > "${src_tmpsort}"
1517 "${adb_awk}" "${src_rset}" "${src_tmpload}" | sed "s/\r//g" | \
1518 "${adb_awk}" 'BEGIN
{FS
="."}{for(f
=NF
;f
>1;f--
)printf "%s.",$f;print
$1}' > "${src_tmpsort}"
1521 "${adb_sort}" ${adb_srtopts} -u "${src_tmpsort}" 2>/dev/null > "${src_tmpfile}"
1524 if [ "${src_rc}" = "0" ] && [ -s "${src_tmpfile}" ]
1527 if [ "${adb_backup}" = "1" ]
1531 elif [ "${adb_backup}" = "1" ] && [ "${adb_action}" != "start" ]
1533 f_log "info" "preparation of '${src_name}' failed, rc: ${src_rc}"
1535 rm -f "${src_tmpfile}"
1538 src_log="$(printf "%s" "${src_log}" | "${adb_awk}" '{ORS=" ";print $0}')"
1539 f_log "info
" "download of
'${src_name}' failed, url: ${src_url}, rule: ${src_rset:-"-"}, categories: ${src_cat:-"-"}, rc: ${src_rc}, log: ${src_log:-"-"}"
1540 if [ "${adb_backup}" = "1" ] && [ "${adb_action}" != "start" ]
1547 hold=$((cnt%adb_maxqueue))
1548 if [ "${hold}" = "0" ]
1557 # tld compression and dns restart
1559 if [ "${?}" = "0" ] && [ -s "${adb_tmpdir}/${adb_dnsfile}" ]
1561 f_tld "${adb_tmpdir}/${adb_dnsfile}"
1564 printf "${adb_dnsheader}" > "${adb_dnsdir}/${adb_dnsfile}"
1566 chown "${adb_dnsuser}" "${adb_dnsdir}/${adb_dnsfile}" 2>/dev/null
1570 if [ "${adb_action}" != "resume" ]
1574 f_log "info" "blocklist with overall ${adb_cnt} blocked domains loaded successfully (${adb_sysver})"
1576 f_log "err" "dns backend restart with adblock blocklist failed"
1581 # trace dns queries via tcpdump and prepare a report
1585 local report_raw report_json report_txt content status total start end blocked percent top_list top array item index hold ports value key key_list cnt=0 action="${1}" count="${2:-"50"}" search="${3:-"+"}"
1587 report_raw="${adb_reportdir}/adb_report.raw"
1588 report_srt="${adb_reportdir}/adb_report.srt"
1589 report_jsn="${adb_reportdir}/adb_report.json"
1590 report_txt="${adb_reportdir}/adb_mailreport.txt"
1594 if [ "${action}" != "json" ]
1600 for file in "${adb_reportdir}/adb_report.pcap"*
1603 "${adb_dumpcmd}" -nn -tttt -r "${file}" 2>/dev/null | \
1604 "${adb_awk}" -v cnt="${cnt}" '!/\.lan\. |PTR
\? | SOA
\? /&&/ A
[\? ]+|NXDomain|
0\
.0\
.0\
.0/{a
=$1;b
=substr
($2,0,8);c
=$4;sub
(/\.
[0-9]+$
/,"",c
);gsub
(/[^
[:alnum
:]\.
:-]/,"",c
);d
=cnt
$7;sub
(/\
*$
/,"",d
);
1605 e
=$
(NF-1
);sub
(/[0-9]\
/[0-9]\
/[0-9]|
0\
.0\
.0\
.0/,"NX",e
);sub
(/\.$
/,"",e
);sub
(/([0-9]{1,3}\.
){3}[0-9]{1,3}/,"OK",e
);gsub
(/[^
[:alnum
:]\.
-]/,"",e
);if(e
==""){e
="err"};printf "%s\t%s\t%s\t%s\t%s\n",d
,e
,a
,b
,c
}' >> "${report_raw}"
1607 hold=$((cnt%adb_maxqueue))
1608 if [ "${hold}" = "0" ]
1615 if [ -s "${report_raw}" ]
1617 "${adb_sort}" ${adb_srtopts} -k1 -k3 -k4 -k5 -k1 -ur "${report_raw}" | \
1618 "${adb_awk}" '{currA
=($1+0);currB
=$1;currC
=substr
($1,length
($1),1);if(reqA
==currB
){reqA
=0;printf "%s\t%s\n",d
,$2}else if(currC
=="+"){reqA
=currA
;d
=$3"\t"$4"\t"$5"\t"$2}}' | \
1619 "${adb_sort}" ${adb_srtopts} -k1 -k2 -k3 -k4 -ur > "${report_srt}"
1620 rm -f "${report_raw}"
1623 if [ -s "${report_srt}" ]
1625 start="$("${adb_awk}" 'END
{printf "%s_%s",$1,$2}' "${report_srt}")"
1626 end="$("${adb_awk}" 'NR
==1{printf "%s_%s",$1,$2}' "${report_srt}")"
1627 total="$(wc -l < "${report_srt}")"
1628 blocked="$("${adb_awk}" '{if($5=="NX")cnt
++}END
{printf "%s",cnt
}' "${report_srt}")"
1629 percent="$("${adb_awk}" -v t="${total}" -v b="${blocked}" 'BEGIN{printf "%.2f%s",b/t*100,"%"}')"
1631 printf "%s
\n" "{ " >> "${report_jsn}"
1632 printf "\t%s
\n" "\"start_date
\": \"${start%_*}\", " >> "${report_jsn}"
1633 printf "\t%s
\n" "\"start_time
\": \"${start#*_}\", " >> "${report_jsn}"
1634 printf "\t%s
\n" "\"end_date
\": \"${end%_*}\", " >> "${report_jsn}"
1635 printf "\t%s
\n" "\"end_time
\": \"${end#*_}\", " >> "${report_jsn}"
1636 printf "\t%s
\n" "\"total
\": \"${total}\", " >> "${report_jsn}"
1637 printf "\t%s
\n" "\"blocked
\": \"${blocked}\", " >> "${report_jsn}"
1638 printf "\t%s
\n" "\"percent
\": \"${percent}\", " >> "${report_jsn}"
1639 top_list="top_clients top_domains top_blocked
"
1640 for top in ${top_list}
1642 printf "\t%s
" "\"${top}\": [ " >> "${report_jsn}"
1645 "${adb_awk}" '{print $3}' "${report_srt}" | "${adb_sort}" ${adb_srtopts} |
uniq -c | \
1646 "${adb_sort}" ${adb_srtopts} -nr | \
1647 "${adb_awk}" '{ORS=" ";if(NR==1)printf "\n\t\t{\n\t\t\t\"count\": \"%s\",\n\t\t\t\"address\": \"%s\"\n\t\t}",$1,$2; else if(NR<10)printf ",\n\t\t{\n\t\t\t\"count\": \"%s\",\n\t\t\t\"address\": \"%s\"\n\t\t}",$1,$2}' >> "${report_jsn}"
1650 "${adb_awk}" '{if($5!="NX")print $4}' "${report_srt}" | "${adb_sort}" ${adb_srtopts} | uniq -c | \
1651 "${adb_sort}" ${adb_srtopts} -nr | \
1652 "${adb_awk}" '{ORS=" ";if(NR==1)printf "\n\t\t{\n\t\t\t\"count
\": \"%s
\",\n\t\t\t\"address
\": \"%s
\"\n\t\t}",$1,$2; else if(NR<10)printf ",\n\t\t{\n\t\t\t\"count
\": \"%s
\",\n\t\t\t\"address
\": \"%s
\"\n\t\t}",$1,$2}' >> "${report_jsn}"
1655 "${adb_awk}" '{if($5=="NX
")print $4}' "${report_srt}" | \
1656 "${adb_sort}" ${adb_srtopts} | uniq -c | "${adb_sort}" ${adb_srtopts} -nr | \
1657 "${adb_awk}" '{ORS=" ";if(NR==1)printf "\n\t\t{\n\t\t\t\"count\": \"%s\",\n\t\t\t\"address\": \"%s\"\n\t\t}",$1,$2; else if(NR<10)printf ",\n\t\t{\n\t\t\t\"count\": \"%s\",\n\t\t\t\"address\": \"%s\"\n\t\t}",$1,$2}' >> "${report_jsn}"
1660 printf "\n\t%s\n" "]," >> "${report_jsn}"
1662 search
="${search//./\\.}"
1663 search
="${search//[+*~%\$&\"\' ]/}"
1664 "${adb_awk}" "BEGIN{i=0;printf \"\t\\\"requests\\\": [\n\"}/(${search})/{i++;if(i==1)printf \"\n\t\t{\n\t\t\t\\\"date\\\": \\\"%s\\\",\n\t\t\t\\\"time\\\": \\\"%s\\\",\n\t\t\t\\\"client\\\": \\\"%s\\\",\n\t\t\t\\\"domain\\\": \\\"%s\\\",\n\t\t\t\\\"rc\\\": \\\"%s\\\"\n\t\t}\",\$1,\$2,\$3,\$4,\$5;else if(i<=${count})printf \",\n\t\t{\n\t\t\t\\\"date\\\": \\\"%s\\\",\n\t\t\t\\\"time\\\": \\\"%s\\\",\n\t\t\t\\\"client\\\": \\\"%s\\\",\n\t\t\t\\\"domain\\\": \\\"%s\\\",\n\t\t\t\\\"rc\\\": \\\"%s\\\"\n\t\t}\",\$1,\$2,\$3,\$4,\$5}END{printf \"\n\t]\n}\n\"}" "${adb_reportdir}/adb_report.srt" >> "${report_jsn}"
1665 rm -f "${report_srt}"
1669 # output preparation
1671 if [ -s "${report_jsn}" ] && { [ "${action}" = "cli" ] || [ "${action}" = "mail" ]; }
1673 printf "%s
\n%s
\n%s
\n" ":::" "::: Adblock DNS-Query Report
" ":::" >> "${report_txt}"
1675 json_load_file "${report_jsn}"
1676 json_get_keys key_list
1677 for key in ${key_list}
1679 json_get_var value "${key}"
1680 eval "${key}=\"${value}\""
1682 printf " + %s
\n + %s
\n" "Start
::: ${start_date}, ${start_time}" "End ::: ${end_date}, ${end_time}" >> "${report_txt}"
1683 printf " + %s
\n + %s
%s
\n" "Total
::: ${total}" "Blocked ::: ${blocked}" "(${percent})" >> "${report_txt}"
1684 top_list="top_clients top_domains top_blocked requests
"
1685 for top in ${top_list}
1689 item="::: Top
10 Clients
"
1692 item="::: Top
10 Domains
"
1695 item="::: Top
10 Blocked Domains
"
1698 if json_get_type status "${top}" && [ "${top}" != "requests" ] && [ "${status}" = "array
" ]
1700 printf "%s
\n%s
\n%s
\n" ":::" "${item}" ":::" >> "${report_txt}"
1701 json_select "${top}"
1704 while json_get_type status "${index}" && [ "${status}" = "object
" ]
1706 json_get_values item "${index}"
1707 printf " + %-9s::: %s
\n" ${item} >> "${report_txt}"
1710 elif json_get_type status "${top}" && [ "${top}" = "requests" ] && [ "${status}" = "array
" ]
1712 printf "%s
\n%s
\n%s
\n" ":::" "::: Latest DNS Queries
" ":::" >> "${report_txt}"
1713 printf "%-15s%-15s%-45s%-80s%s
\n" "Date
" "Time
" "Client
" "Domain
" "Answer
" >> "${report_txt}"
1714 json_select "${top}"
1716 while json_get_type status "${index}" && [ "${status}" = "object
" ]
1718 json_get_values item "${index}"
1719 printf "%-15s%-15s%-45s%-80s%s
\n" ${item} >> "${report_txt}"
1725 content="$
(cat "${report_txt}" 2>/dev
/null
)"
1726 rm -f "${report_txt}"
1731 if [ "${action}" = "cli
" ]
1733 printf "%s
\n" "${content}"
1734 elif [ "${action}" = "json
" ]
1737 elif [ "${action}" = "mail" ] && [ "${adb_mail}" = "1" ] && [ -x "${adb_mailservice}" ]
1739 ( "${adb_mailservice}" "${adb_ver}" "${content}" >/dev/null 2>&1 )&
1742 f_log "debug
" "f_report
::: action
: ${action}, count: ${count}, search: ${search}, dump_util: ${adb_dumpcmd}, rep_dir: ${adb_reportdir}, rep_iface: ${adb_repiface:-"-"}, rep_listen: ${adb_replisten}, rep_chunksize: ${adb_repchunksize}, rep_chunkcnt: ${adb_repchunkcnt}"
1745 # source required system libraries
1747 if [ -r "/lib
/functions.sh
" ] && [ -r "/lib
/functions
/network.sh
" ] && [ -r "/usr
/share
/libubox
/jshn.sh
" ]
1749 . "/lib
/functions.sh
"
1750 . "/lib
/functions
/network.sh
"
1751 . "/usr
/share
/libubox
/jshn.sh
"
1753 f_log "err
" "system libraries not found
"
1758 adb_awk="$
(command -v gawk
)"
1759 if [ -z "${adb_awk}" ]
1761 adb_awk="$
(command -v awk)"
1762 if [ -z "${adb_awk}" ]
1764 f_log "err
" "awk not found
"
1770 adb_sort="$
(command -v /usr
/libexec
/sort-coreutils
)"
1771 if [ -z "${adb_sort}" ]
1773 adb_sort="$
(command -v sort)"
1774 if [ -z "$
("${adb_sort}" --help 2>/dev
/null |
grep -Fo -m1 "coreutils")" ]
1776 f_log "err
" "coreutils
sort not found
"
1780 # version information
1782 if [ "${adb_action}" = "version
" ]
1784 printf "%s
\n" "${adb_ver}"
1788 # handle different adblock actions
1791 case "${adb_action}" in
1801 if [ "${adb_dns}" != "raw
" ]
1807 if [ "${adb_dns}" != "raw
" ]
1813 f_report "${2}" "${3}" "${4}"