mirror of
https://github.com/evilsocket/opensnitch.git
synced 2026-06-08 20:27:34 +00:00
Self Denial
4dd8c45eea
This commit adds a new bash script that automates the synchronization of IP-to-ASN and AS names databases for OpenSnitch. The script: 1. Downloads pre-processed ASN data from a GitHub repository 2. Creates backups of existing files before updates 3. Updates ipasn_db.dat.gz and asnames.json files 4. Restores backups if downloads fail 5. Can be run via cron to keep the databases updated The script is designed to be easily integrated into system automation tasks and includes error handling for common issues like missing dependencies (wget) or failed downloads.
56 lines
1.7 KiB
Bash
Executable File
56 lines
1.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# Synchronize ipasn and asnames data for use with OpenSnitch
|
|
#
|
|
# Author: Self Denial <selfdenial at pm dot me>
|
|
#
|
|
# This script downloads pre-processed asn data from
|
|
# https://github.com/lainedfles/opensnitch-asn-data
|
|
# Wget is required.
|
|
#
|
|
# Example crontab:
|
|
#
|
|
# Poll every 7 days
|
|
# 0 0 */7 * * /home/user/.config/opensnitch/ipasn_db_sync.sh 2>&1 | logger -t ipasn_db_sync.sh
|
|
|
|
# Vars
|
|
OPENSNITCH_CONF_PATH=~/.config/opensnitch
|
|
SOURCE_REPO="https://github.com/lainedfles/opensnitch-asn-data"
|
|
IPASN_FILE="ipasn_db.dat.gz"
|
|
ASNAMES_FILE="asnames.json"
|
|
|
|
# Ensure wget are available
|
|
if ! command -v "wget" &>/dev/null; then
|
|
echo "wget not found! Please ensure that wget is in your PATH."
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure destination exists
|
|
if [ ! -e "$OPENSNITCH_CONF_PATH" ]; then
|
|
mkdir -pv "$OPENSNITCH_CONF_PATH" || exit 1
|
|
fi
|
|
cd "$OPENSNITCH_CONF_PATH" || exit 1
|
|
|
|
# Update asnames
|
|
echo "******** Updating $ASNAMES_FILE... ********"
|
|
# Create backup
|
|
[ -f "$ASNAMES_FILE" ] && mv -vf "$ASNAMES_FILE" "$ASNAMES_FILE.last"
|
|
if wget --no-verbose --output-document="$ASNAMES_FILE" "${SOURCE_REPO}/releases/latest/download/$ASNAMES_FILE"; then
|
|
echo "Updated asnames data"
|
|
else
|
|
echo "Failed to update asnames data, restoring backup"
|
|
# Restore backup upon failure
|
|
mv -vf "$ASNAMES_FILE.last" "$ASNAMES_FILE"
|
|
fi
|
|
|
|
# Update ipasn db
|
|
echo "******** Updating $IPASN_FILE... ********"
|
|
# Create backup
|
|
[ -f "$IPASN_FILE" ] && mv -vf "$IPASN_FILE" "$IPASN_FILE.last"
|
|
if wget --no-verbose --output-document="$IPASN_FILE" "${SOURCE_REPO}/releases/latest/download/$IPASN_FILE"; then
|
|
echo "Downloaded ipasn data"
|
|
else
|
|
echo "Failed to download ipasn data, restoring backup"
|
|
mv -vf "$IPASN_FILE.last" "$IPASN_FILE"
|
|
fi
|