mirror of
https://github.com/gSpotx2f/ruantiblock_openwrt.git
synced 2026-05-13 14:10:59 +00:00
gSpot
445 lines
11 KiB
Bash
Executable File
445 lines
11 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
PREFIX=""
|
|
TOR_USER="tor"
|
|
|
|
PROXY_MODE=1
|
|
BLACKLIST=0
|
|
LUA_MODULE=0
|
|
LUCI_APP=1
|
|
HTTPS_DNS_PROXY=1
|
|
|
|
OWRT_VERSION="25.12"
|
|
RUAB_VERSION="2.1.12-r2"
|
|
RUAB_MOD_LUA_VERSION="2.1.12-r1"
|
|
RUAB_LUCI_APP_VERSION="2.1.12-r1"
|
|
BASE_URL="https://raw.githubusercontent.com/gSpotx2f/packages-openwrt/master"
|
|
PKG_DIR="/tmp"
|
|
|
|
if [ -n "$1" ]; then
|
|
OWRT_VERSION="$1"
|
|
fi
|
|
|
|
### URLs
|
|
|
|
### packages
|
|
URL_RUAB_PKG="${BASE_URL}/${OWRT_VERSION}/ruantiblock-${RUAB_VERSION}.apk"
|
|
URL_MOD_LUA_PKG="${BASE_URL}/${OWRT_VERSION}/ruantiblock-mod-lua-${RUAB_MOD_LUA_VERSION}.apk"
|
|
URL_LUCI_APP_PKG="${BASE_URL}/${OWRT_VERSION}/luci-app-ruantiblock-${RUAB_LUCI_APP_VERSION}.apk"
|
|
URL_LUCI_APP_RU_PKG="${BASE_URL}/${OWRT_VERSION}/luci-i18n-ruantiblock-ru-${RUAB_LUCI_APP_VERSION}.apk"
|
|
### tor
|
|
URL_TORRC="https://raw.githubusercontent.com/gSpotx2f/ruantiblock_openwrt/master/tor/etc/tor/torrc"
|
|
|
|
### Local files
|
|
|
|
CONFIG_DIR="${PREFIX}/etc/ruantiblock"
|
|
USER_LISTS_DIR="${CONFIG_DIR}/user_lists"
|
|
EXEC_DIR="${PREFIX}/usr/bin"
|
|
BACKUP_DIR_BASE="${CONFIG_DIR}/autoinstall.bak"
|
|
BACKUP_DIR="${BACKUP_DIR_BASE}.$(date +%s)"
|
|
### packages
|
|
FILE_RUAB_PKG="${PKG_DIR}/ruantiblock-${RUAB_VERSION}.apk"
|
|
FILE_MOD_LUA_PKG="${PKG_DIR}/ruantiblock-mod-lua-${RUAB_MOD_LUA_VERSION}.apk"
|
|
FILE_LUCI_APP_PKG="${PKG_DIR}/luci-app-ruantiblock-${RUAB_LUCI_APP_VERSION}.apk"
|
|
FILE_LUCI_APP_RU_PKG="${PKG_DIR}/luci-i18n-ruantiblock-ru-${RUAB_LUCI_APP_VERSION}.apk"
|
|
### ruantiblock
|
|
FILE_CONFIG="${CONFIG_DIR}/ruantiblock.conf"
|
|
FILE_FQDN_FILTER="${CONFIG_DIR}/fqdn_filter"
|
|
FILE_IP_FILTER="${CONFIG_DIR}/ip_filter"
|
|
FILE_USER_ENTRIES="${CONFIG_DIR}/user_entries"
|
|
FILE_BYPASS_ENTRIES="${CONFIG_DIR}/bypass_entries"
|
|
FILE_GR_EXCLUDED_SLD="${CONFIG_DIR}/gr_excluded_sld"
|
|
FILE_GR_EXCLUDED_NETS="${CONFIG_DIR}/gr_excluded_nets"
|
|
FILE_UCI_CONFIG="${PREFIX}/etc/config/ruantiblock"
|
|
FILE_INIT_SCRIPT="${PREFIX}/etc/init.d/ruantiblock"
|
|
FILE_MAIN_SCRIPT="${EXEC_DIR}/ruantiblock"
|
|
### tor
|
|
FILE_TORRC="${PREFIX}/etc/tor/torrc"
|
|
|
|
AWK_CMD="awk"
|
|
WGET_CMD="$(which wget)"
|
|
if [ $? -ne 0 ]; then
|
|
echo " Error! wget doesn't exists" >&2
|
|
exit 1
|
|
fi
|
|
WGET_PARAMS="--no-check-certificate -q -O "
|
|
APK_CMD="$(which apk)"
|
|
if [ $? -ne 0 ]; then
|
|
echo " Error! apk doesn't exists" >&2
|
|
exit 1
|
|
fi
|
|
UCI_CMD="$(which uci)"
|
|
if [ $? -ne 0 ]; then
|
|
echo " Error! uci doesn't exists" >&2
|
|
exit 1
|
|
fi
|
|
|
|
FileExists() {
|
|
test -e "$1"
|
|
}
|
|
|
|
MakeDir() {
|
|
[ -d "$1" ] || mkdir -p "$1"
|
|
if [ $? -ne 0 ]; then
|
|
echo "Error! Can't create directory (${1})" >&2
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
ChmodExec() {
|
|
chmod 755 "$1"
|
|
}
|
|
|
|
RemoveFile() {
|
|
if [ -e "$1" ]; then
|
|
echo "Removing ${1}"
|
|
rm -f "$1"
|
|
fi
|
|
}
|
|
|
|
DlFile() {
|
|
local _dir _file
|
|
if [ -n "$2" ]; then
|
|
_dir=$(dirname "$2")
|
|
MakeDir "$_dir"
|
|
_file="$2"
|
|
else
|
|
_file="-"
|
|
fi
|
|
$WGET_CMD $WGET_PARAMS "$_file" "$1"
|
|
if [ $? -ne 0 ]; then
|
|
echo "Connection error (${1})" >&2
|
|
exit 1
|
|
fi
|
|
echo "Downloading ${1}"
|
|
}
|
|
|
|
BackupFile() {
|
|
[ -e "$1" ] && cp -f "$1" "${1}.bak.$(date +%s)"
|
|
}
|
|
|
|
BackupCurrentConfig() {
|
|
local _file
|
|
MakeDir "$BACKUP_DIR"
|
|
for _file in $(ls -1 "$CONFIG_DIR" | grep -v "$(basename $BACKUP_DIR_BASE)*")
|
|
do
|
|
cp -af "${CONFIG_DIR}/${_file}" "${BACKUP_DIR}/${_file}"
|
|
done
|
|
for _file in "$FILE_UCI_CONFIG" "$FILE_TORRC"
|
|
do
|
|
[ -e "$_file" ] && cp -af "$_file" "${BACKUP_DIR}/$(basename ${_file})"
|
|
done
|
|
}
|
|
|
|
RunAtStartup() {
|
|
$FILE_INIT_SCRIPT enable
|
|
}
|
|
|
|
AppStop() {
|
|
FileExists "$FILE_MAIN_SCRIPT" && $FILE_MAIN_SCRIPT destroy
|
|
}
|
|
|
|
AppStart() {
|
|
$FILE_INIT_SCRIPT start
|
|
}
|
|
|
|
SetCronTask() {
|
|
echo "0 3 */3 * * ${FILE_MAIN_SCRIPT} update" >> /etc/crontabs/root
|
|
/etc/init.d/cron restart 2> /dev/null
|
|
/etc/init.d/cron enable
|
|
}
|
|
|
|
Reboot() {
|
|
reboot
|
|
}
|
|
|
|
UpdatePackagesList() {
|
|
$APK_CMD update
|
|
}
|
|
|
|
InstallPackages() {
|
|
local _pkg
|
|
for _pkg in $@
|
|
do
|
|
if [ -z "$($APK_CMD list --installed $_pkg)" ]; then
|
|
$APK_CMD add --force-overwrite $_pkg
|
|
if [ $? -ne 0 ]; then
|
|
echo "Error during installation of the package (${_pkg})" >&2
|
|
exit 1
|
|
fi
|
|
fi
|
|
done
|
|
}
|
|
|
|
InstallBaseConfig() {
|
|
_return_code=1
|
|
InstallPackages "dnsmasq-full" "kmod-nft-tproxy"
|
|
RemoveFile "$FILE_RUAB_PKG" > /dev/null
|
|
DlFile "$URL_RUAB_PKG" "$FILE_RUAB_PKG" && $APK_CMD add --allow-untrusted "$FILE_RUAB_PKG" > /dev/null
|
|
_return_code=$?
|
|
AppStop
|
|
return $_return_code
|
|
}
|
|
|
|
EnableBlacklist() {
|
|
$UCI_CMD set ruantiblock.config.bllist_preset="ruantiblock-fqdn"
|
|
$UCI_CMD commit ruantiblock
|
|
}
|
|
|
|
InstallVPNConfig() {
|
|
local _if_vpn
|
|
$UCI_CMD set ruantiblock.config.proxy_mode="2"
|
|
$UCI_CMD set ruantiblock.config.if_vpn="tun0"
|
|
$UCI_CMD commit ruantiblock
|
|
}
|
|
|
|
InstallTPConfig() {
|
|
local _if_vpn
|
|
$UCI_CMD set ruantiblock.config.proxy_mode="3"
|
|
$UCI_CMD commit ruantiblock
|
|
}
|
|
|
|
TorrcSettings() {
|
|
local _lan_ip=$($UCI_CMD get network.lan.ipaddr | $AWK_CMD -F "/" '{print $1}')
|
|
if [ -z "$_lan_ip" ]; then
|
|
_lan_ip="0.0.0.0"
|
|
fi
|
|
$AWK_CMD -v lan_ip="$_lan_ip" -v TOR_USER="$TOR_USER" '{
|
|
if($0 ~ /^([#]?TransPort|[#]?TransListenAddress|[#]?SOCKSPort)/ && $0 !~ "127.0.0.1") sub(/([0-9]{1,3}.){3}[0-9]{1,3}/, lan_ip, $0);
|
|
else if($0 ~ /^User/) $2 = TOR_USER;
|
|
print $0;
|
|
}' "$FILE_TORRC" > "${FILE_TORRC}.tmp" && mv -f "${FILE_TORRC}.tmp" "$FILE_TORRC"
|
|
}
|
|
|
|
InstallTorConfig() {
|
|
InstallPackages "tor" "tor-geoip"
|
|
BackupFile "$FILE_TORRC"
|
|
DlFile "$URL_TORRC" "$FILE_TORRC"
|
|
TorrcSettings
|
|
$UCI_CMD set ruantiblock.config.proxy_mode="1"
|
|
$UCI_CMD commit ruantiblock
|
|
# dnsmasq rebind protection
|
|
if $UCI_CMD get dhcp.@dnsmasq[0].rebind_domain | $AWK_CMD '{for(i=1; i<=NF; i++){if($i == "onion") exit 1}}'; then
|
|
$UCI_CMD add_list dhcp.@dnsmasq[0].rebind_domain='onion'
|
|
$UCI_CMD commit dhcp
|
|
fi
|
|
}
|
|
|
|
InstallLuaModule() {
|
|
InstallPackages "lua" "luasocket" "luasec" "luabitop"
|
|
RemoveFile "$FILE_MOD_LUA_PKG" > /dev/null
|
|
DlFile "$URL_MOD_LUA_PKG" "$FILE_MOD_LUA_PKG" && $APK_CMD add --allow-untrusted "$FILE_MOD_LUA_PKG"
|
|
$UCI_CMD set ruantiblock.config.bllist_module="/usr/libexec/ruantiblock/ruab_parser.lua"
|
|
$UCI_CMD commit ruantiblock
|
|
}
|
|
|
|
InstallLuciApp() {
|
|
RemoveFile "$FILE_LUCI_APP_PKG" > /dev/null
|
|
RemoveFile "$FILE_LUCI_APP_RU_PKG" > /dev/null
|
|
DlFile "$URL_LUCI_APP_PKG" "$FILE_LUCI_APP_PKG" && $APK_CMD add --allow-untrusted "$FILE_LUCI_APP_PKG" && \
|
|
DlFile "$URL_LUCI_APP_RU_PKG" "$FILE_LUCI_APP_RU_PKG" && $APK_CMD add --allow-untrusted "$FILE_LUCI_APP_RU_PKG"
|
|
rm -f /tmp/luci-modulecache/* /tmp/luci-indexcache*
|
|
/etc/init.d/rpcd restart
|
|
/etc/init.d/uhttpd restart
|
|
}
|
|
|
|
InstallHttpsDnsProxy() {
|
|
InstallPackages "https-dns-proxy" "luci-app-https-dns-proxy" "luci-i18n-https-dns-proxy-ru"
|
|
}
|
|
|
|
PrintBold() {
|
|
printf "\033[1m - ${1}\033[0m\n"
|
|
}
|
|
|
|
InputError () {
|
|
printf "\033[1;31m Wrong input! Try again...\033[m\n"; $1
|
|
}
|
|
|
|
ConfirmProxyMode() {
|
|
local _reply
|
|
printf " Select configuration [ 1: Tor | 2: VPN | 3: Transparent proxy ] (default: 1, quit: q) > "
|
|
read _reply
|
|
case $_reply in
|
|
1|"")
|
|
PROXY_MODE=1
|
|
break
|
|
;;
|
|
2)
|
|
PROXY_MODE=2
|
|
break
|
|
;;
|
|
3)
|
|
PROXY_MODE=3
|
|
break
|
|
;;
|
|
q|Q)
|
|
printf "Bye...\n"; exit 0
|
|
;;
|
|
*)
|
|
InputError ConfirmProxyMode
|
|
;;
|
|
esac
|
|
}
|
|
|
|
ConfirmBlacklist() {
|
|
local _reply
|
|
printf " Select blacklist [ 1: User entries only | 2: Full blacklist ] (default: 1, quit: q) > "
|
|
read _reply
|
|
case $_reply in
|
|
1|"")
|
|
BLACKLIST=1
|
|
break
|
|
;;
|
|
2)
|
|
BLACKLIST=2
|
|
break
|
|
;;
|
|
q|Q)
|
|
printf "Bye...\n"; exit 0
|
|
;;
|
|
*)
|
|
InputError ConfirmBlacklist
|
|
;;
|
|
esac
|
|
}
|
|
|
|
ConfirmLuaModule() {
|
|
local _reply
|
|
printf " Would you like to install the lua module? [ y | n ] (default: y, quit: q) > "
|
|
read _reply
|
|
case $_reply in
|
|
y|Y|"")
|
|
LUA_MODULE=1
|
|
break
|
|
;;
|
|
n|N)
|
|
LUA_MODULE=0
|
|
break
|
|
;;
|
|
q|Q)
|
|
printf "Bye...\n"; exit 0
|
|
;;
|
|
*)
|
|
InputError ConfirmLuaModule
|
|
;;
|
|
esac
|
|
}
|
|
|
|
ConfirmLuciApp() {
|
|
local _reply
|
|
printf " Would you like to install the LuCI application? [ y | n ] (default: y, quit: q) > "
|
|
read _reply
|
|
case $_reply in
|
|
y|Y|"")
|
|
LUCI_APP=1
|
|
break
|
|
;;
|
|
n|N)
|
|
LUCI_APP=0
|
|
break
|
|
;;
|
|
q|Q)
|
|
printf "Bye...\n"; exit 0
|
|
;;
|
|
*)
|
|
InputError ConfirmLuciApp
|
|
;;
|
|
esac
|
|
}
|
|
|
|
ConfirmHttpsDnsProxy() {
|
|
local _reply
|
|
printf " Would you like to install the https-dns-proxy? [ y | n ] (default: y, quit: q) > "
|
|
read _reply
|
|
case $_reply in
|
|
y|Y|"")
|
|
HTTPS_DNS_PROXY=1
|
|
break
|
|
;;
|
|
n|N)
|
|
HTTPS_DNS_PROXY=0
|
|
break
|
|
;;
|
|
q|Q)
|
|
printf "Bye...\n"; exit 0
|
|
;;
|
|
*)
|
|
InputError ConfirmHttpsDnsProxy
|
|
;;
|
|
esac
|
|
}
|
|
|
|
ConfirmProcessing() {
|
|
local _reply
|
|
printf " Next, the installation will begin... Continue? [ y | n ] (default: y, quit: q) > "
|
|
read _reply
|
|
case $_reply in
|
|
y|Y|"")
|
|
break
|
|
;;
|
|
n|N|q|Q)
|
|
printf "Bye...\n"; exit 0
|
|
;;
|
|
*)
|
|
InputError ConfirmProcessing
|
|
;;
|
|
esac
|
|
}
|
|
|
|
ConfirmProxyMode
|
|
ConfirmBlacklist
|
|
#ConfirmLuaModule
|
|
ConfirmLuciApp
|
|
ConfirmHttpsDnsProxy
|
|
ConfirmProcessing
|
|
AppStop
|
|
PrintBold "Updating packages list..."
|
|
UpdatePackagesList
|
|
PrintBold "Saving current configuration..."
|
|
#BackupCurrentConfig
|
|
PrintBold "Installing basic configuration..."
|
|
InstallBaseConfig
|
|
if [ $? -eq 0 ]; then
|
|
|
|
if [ $PROXY_MODE = 2 ]; then
|
|
PrintBold "Installing VPN configuration..."
|
|
InstallVPNConfig
|
|
elif [ $PROXY_MODE = 3 ]; then
|
|
PrintBold "Installing transparent proxy configuration..."
|
|
InstallTPConfig
|
|
else
|
|
PrintBold "Installing Tor configuration..."
|
|
InstallTorConfig
|
|
if $(/etc/init.d/tor enabled); then
|
|
/etc/init.d/tor restart
|
|
fi
|
|
fi
|
|
|
|
if [ $BLACKLIST = 2 ]; then
|
|
PrintBold "Set full blacklist..."
|
|
EnableBlacklist
|
|
fi
|
|
|
|
if [ $LUA_MODULE = 1 ]; then
|
|
PrintBold "Installing lua module..."
|
|
InstallLuaModule
|
|
fi
|
|
|
|
if [ $LUCI_APP = 1 ]; then
|
|
PrintBold "Installing luci app..."
|
|
InstallLuciApp
|
|
fi
|
|
|
|
if [ $HTTPS_DNS_PROXY = 1 ]; then
|
|
PrintBold "Installing https-dns-proxy..."
|
|
InstallHttpsDnsProxy
|
|
fi
|
|
|
|
RunAtStartup
|
|
SetCronTask
|
|
else
|
|
PrintBold "An error occurred while installing the ruantiblock package!"
|
|
fi
|
|
|
|
exit 0
|