]> git.ipfire.org Git - ipfire-2.x.git/blob - src/scripts/update-location-database
suricata: Change midstream policy to "pass-flow"
[ipfire-2.x.git] / src / scripts / update-location-database
1 #!/bin/bash
2 ###############################################################################
3 # #
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2019 IPFire Development Team <info@ipfire.org> #
6 # #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
11 # #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
16 # #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 # #
20 ###############################################################################
21
22 eval $(/usr/local/bin/readhash /var/ipfire/proxy/settings)
23
24 UPDATE_INTERVAL="weekly"
25
26 # Proxy settings.
27 # Check if a proxy should be used.
28 if [[ $UPSTREAM_PROXY ]]; then
29 PROXYSETTINGS="https_proxy=http://"
30
31 # Check if authentication against the proxy is configured.
32 if [[ $UPSTREAM_USER && $UPSTREAM_PASSWORD ]]; then
33 PROXYSETTINGS="$PROXYSETTINGS$UPSTREAM_USER:$UPSTREAM_PASSWORD@"
34 fi
35
36 # Add proxy server.
37 PROXYSETTINGS="$PROXYSETTINGS$UPSTREAM_PROXY"
38
39 # Export proxy settings.
40 export HTTPS_PROXY="$PROXYSETTINGS"
41 fi
42
43 # Get the latest location database from server.
44 if /usr/bin/location update --cron=$UPDATE_INTERVAL; then
45 # Call location and export all countries in xt_geoip compatible format.
46 if /usr/bin/location export --directory=/usr/share/xt_geoip --family=ipv4 --format=xt_geoip; then
47
48 # Call initscript to reload the firewall.
49 /etc/init.d/firewall reload
50 fi
51 fi