suricata: Change midstream policy to "pass-flow"

[people/pmueller/ipfire-2.x.git] / src / scripts / update-location-database

#!/bin/bash
###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2007-2022  IPFire Team  <info@ipfire.org>                     #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

eval $(/usr/local/bin/readhash /var/ipfire/proxy/settings)

UPDATE_INTERVAL="weekly"

# Proxy settings.
# Check if a proxy should be used.
if [[ $UPSTREAM_PROXY ]]; then
	PROXYSETTINGS="https_proxy=http://"

	# Check if authentication against the proxy is configured.
	if [[ $UPSTREAM_USER && $UPSTREAM_PASSWORD ]]; then
		PROXYSETTINGS="$PROXYSETTINGS$UPSTREAM_USER:$UPSTREAM_PASSWORD@"
	fi

	# Add proxy server.
	PROXYSETTINGS="$PROXYSETTINGS$UPSTREAM_PROXY"

	# Export proxy settings.
	export HTTPS_PROXY="$PROXYSETTINGS"
fi

# Get the latest location database from server.
if /usr/bin/location update --cron=$UPDATE_INTERVAL; then
	# Call location and export all countries in an ipset compatible format.
	if /usr/bin/location export --directory=/var/lib/location/ipset --family=ipv4 --format=ipset; then

		# Call initscript to reload the firewall.
		/etc/init.d/firewall reload
	fi
fi