config/urlfilter/redirect_wrapper

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007  Michael Tremer & Christian Schmidt                      #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 # Based on Steffen Schoch (sschoch@users.sourceforge.net)                     #
  21 #                                                                             #
  22 ###############################################################################
  23
  24 use strict;
  25 use IPC::Open2;
  26 use IO::Handle;
  27
  28 # define here your redirectors (use a comma sperated list)
  29 my $redirectors;
  30
  31 require '/var/ipfire/general-functions.pl';
  32
  33 my %proxysettings=();
  34 $proxysettings{'ENABLE_FILTER'} = 'off';
  35 $proxysettings{'ENABLE_CLAMAV'} = 'off';
  36 $proxysettings{'ENABLE_UPDXLRATOR'} = 'off';
  37 &General::readhash("${General::swroot}/proxy/settings", \%proxysettings);
  38
  39 # define here your redirectors (use a comma sperated list)
  40 if ( $proxysettings{'ENABLE_FILTER'} eq 'on' && $proxysettings{'ENABLE_CLAMAV'} eq 'on' && $proxysettings{'ENABLE_UPDXLRATOR'} eq 'on' ){$redirectors = [ '/usr/bin/squidGuard', '/usr/bin/squidclamav', '/usr/sbin/updxlrator' ];}
  41 elsif ( $proxysettings{'ENABLE_FILTER'} eq 'on' && $proxysettings{'ENABLE_CLAMAV'} eq 'on' && $proxysettings{'ENABLE_UPDXLRATOR'} eq 'off' ){$redirectors = [ '/usr/bin/squidGuard', '/usr/bin/squidclamav' ];}
  42 elsif ( $proxysettings{'ENABLE_FILTER'} eq 'on' && $proxysettings{'ENABLE_CLAMAV'} eq 'off' && $proxysettings{'ENABLE_UPDXLRATOR'} eq 'on' ){$redirectors = [ '/usr/bin/squidGuard', '/usr/sbin/updxlrator' ];}
  43 elsif ( $proxysettings{'ENABLE_FILTER'} eq 'on' && $proxysettings{'ENABLE_CLAMAV'} eq 'off' && $proxysettings{'ENABLE_UPDXLRATOR'} eq 'off' ){$redirectors = [ '/usr/bin/squidGuard' ];}
  44 elsif ( $proxysettings{'ENABLE_FILTER'} eq 'off' && $proxysettings{'ENABLE_CLAMAV'} eq 'on' && $proxysettings{'ENABLE_UPDXLRATOR'} eq 'on' ){$redirectors = [ '/usr/bin/squidclamav', '/usr/sbin/updxlrator' ];}
  45 elsif ( $proxysettings{'ENABLE_FILTER'} eq 'off' && $proxysettings{'ENABLE_CLAMAV'} eq 'on' && $proxysettings{'ENABLE_UPDXLRATOR'} eq 'off' ){$redirectors = [ '/usr/bin/squidclamav' ];}
  46 elsif ( $proxysettings{'ENABLE_FILTER'} eq 'off' && $proxysettings{'ENABLE_CLAMAV'} eq 'off' && $proxysettings{'ENABLE_UPDXLRATOR'} eq 'on' ){$redirectors = [ '/usr/sbin/updxlrator' ];}
  47 else  { $redirectors = [ '/usr/bin/squidGuard', '/usr/sbin/updxlrator' ];}
  48
  49 # Attention: keep in mind that the order of your redirectors is important.
  50 # It doesn't make sense to scan for viruses on pages you restrict access to...
  51 # So place first your tools which restrict access, then the tools which do the
  52 # content filtering!
  53
  54 ##### no need to change anything below this line #####
  55
  56 # init
  57 $| = 1;
  58 STDOUT->autoflush(1);
  59 my $line;
  60 my $return;
  61 my $i;
  62 my $debug=0; # enable only for debugging
  63
  64 if ($debug){
  65          print "Urlfilter = ".$proxysettings{'ENABLE_FILTER'}."\n";
  66          print "Clamav = ".$proxysettings{'ENABLE_CLAMAV'}."\n";
  67          print "Updxlrator = ".$proxysettings{'ENABLE_UPDXLRATOR'}."\n";
  68          }
  69
  70 # open progamms
  71 my $pidlist = [];
  72 my $rlist = [];
  73 my $wlist = [];
  74 for($i = 0; $i < @$redirectors; $i++) {
  75                          if ($debug){print "Current redirector is ".$redirectors->[$i]."\n";}
  76                          $pidlist->[$i] = open2($rlist->[$i], $wlist->[$i], $redirectors->[$i]);
  77 }
  78
  79 # wait for data...
  80 while($line = <>) {
  81         for($i = 0; $i < @$redirectors; $i++) {
  82                 $wlist->[$i]->print($line);
  83                 $return = $rlist->[$i]->getline;
  84                 last if($return ne "\n" and $return ne $line);
  85                                                                 # break if redirector changes data
  86         }
  87         print $return;
  88
  89                                 if ($debug){
  90                  chomp $line;
  91                  chomp $return;
  92                  if ( $line ne $return ){
  93                  open(DATEI, ">>/var/log/squid/redirector_debug") || die "Unable to acces file /var/log/redirector_debug";
  94                                          print DATEI "Requested ".$line."\nAnswer    ".$return."\n";
  95                                          close(DATEI);
  96                                          }
  97                                 }
  98 }
  99 exit 0;