dnstun

#!/bin/bash
# Update Firewall & Tunnel Configuration

#################
# Configuration #
#################

CFGDIR=/etc/dnstun
CFGURL=$1
DNSMASQ="/etc/dnsmasq.conf"
SNIPROXY="/etc/sniproxy.conf"
#IP=$(ifconfig | grep 'inet addr:' | grep -v '127.0.0.1' | cut -d: -f2 | awk '{ print $1}')
IP=$(curl -s http://myip.enix.org/REMOTE_ADDR)

################
# Update Lists #
################

# Download Host List
wget -O $CFGDIR/host $CFGURL/host

# Download User List
wget -O $CFGDIR/user $CFGURL/user

################
# Update Hosts #
################

# Check Configuration
CONFCS="$(cksum $DNSMASQ)"

# Write Configuration
cat << EOF > $DNSMASQ
bogus-priv
domain-needed
no-poll
no-resolv
server=8.8.8.8
server=8.8.4.4
EOF

# Loop Over Host List
while read i; do
	# Add Host To Configuration
	echo "address=/$i/$IP" >> $DNSMASQ
done < $CFGDIR/host

# Check For Changes
if [ "$CONFCS" != "$(cksum $DNSMASQ)" ]; then
	# Restart Service
	service dnsmasq restart
fi

# Check Configuration
CONFCS="$(cksum $SNIPROXY)"

# Write Configuration
cat << EOF > $SNIPROXY
pidfile /var/tmp/sniproxy.pid
user daemon

listener 80 {
	proto http
}

listener 443 {
	proto tls
}

table {
EOF

# Loop Over Host List
while read i; do
	# Add Host To Configuration
	echo "$i *" >> $SNIPROXY
done < $CFGDIR/host
echo "}" >> $SNIPROXY

# Check For Changes
if [ "$CONFCS" != "$(cksum $SNIPROXY)" ]; then
	# Stop Service
	killall sniproxy

	# Start Service
	sniproxy
fi

################
# Update Users #
################

# Clear Firewall
iptables -F DYNAMIC

# Loop Over User List
while read i; do
	# Add User To Firewall
	iptables -A DYNAMIC -s "$i" -j ACCEPT
done < $CFGDIR/user