Transmission-block-xunlei-pcdn/block_blacklist.sh

220 lines
5.3 KiB
Bash
Raw Permalink Normal View History

#!/bin/sh
# 用户定义的变量
username="用户名"
password="密码"
host="127.0.0.1"
port=9091
chain="OUTPUT"
custom_chain_ipv4="CUSTOM_CHAIN_IPV4"
custom_chain_ipv6="CUSTOM_CHAIN_IPV6"
log_path="/tmp/block_xunlei.log"
interval_hour=12 # 12: 12:00/24:00 重置防火墙规则, 0:禁用
DEBUG=0 # 默认禁用调试
block_clients="xunlei
xl
thunder
gt0002
xl0012
xfplay
dandanplay
dl3760
qq
hp
dt
xm
go
taibei
sp
StellarPlayer
flashget
torrentstorm
github
ljyun
cacao
offline
anacrolix
unknown
trafficConsume
-tt
-gt
-sd
-xf
-qd
-bn
-dl
qbittorrent/3.3.15
Transmission 2.9
BitComet 2.04"
# 打印自定义链规则
print_chain_rules() {
echo_info "当前IPv4自定义链规则:"
iptables -nL $custom_chain_ipv4
echo_info "当前IPv6自定义链规则:"
ip6tables -nL $custom_chain_ipv6
}
print_log() {
echo -e "当前时间: $(date '+%Y-%m-%d %H:%M:%S')\n"
cat $log_path
}
# 清空自定义链函数和日志
flush_chains() {
echo "清空自定义链 $custom_chain_ipv4$custom_chain_ipv6"
iptables -F $custom_chain_ipv4 # 清空IPv4自定义链
ip6tables -F $custom_chain_ipv6 # 清空IPv6自定义链
echo "清空日志"
echo "" >$log_path
}
# 处理参数函数
process_args() {
while [ $# -gt 0 ]; do
case "$1" in
--debug)
DEBUG=1
echo "调试模式已启用"
;;
--chain)
print_chain_rules
exit 0
;;
--log)
print_log
exit 0
;;
--flush)
flush_chains
exit 0
;;
--help)
echo " --debug Enable debug mode"
echo " --chain Print chain rules"
echo " --log Print log"
echo " --flush Flush chains and log"
echo " --help Show this help message"
exit 0
;;
*)
echo "Invalid option: $1" >&2
exit 1
;;
esac
shift
done
}
# 处理传入的参数
process_args "$@"
# 主脚本逻辑部分
# 调试输出函数
debug_echo() {
if [ "$DEBUG" -eq 1 ]; then
echo "$@"
fi
}
# 检查时间是否为 interval_hour 的整数倍
check_interval() {
if [ "$interval_hour" -eq 0 ]; then
return
fi
local minute=$(date "+%M")
local hour=$(date "+%H")
if [ "$minute" -eq 00 ] && [ $(($hour % $interval_hour)) -eq 0 ] && [ "$DEBUG" -eq 0 ]; then
debug_echo_info "当前时间是 $interval_hour 的整数倍"
flush_chains
fi
}
# 检查并创建自定义链并获取规则
create_chains_and_get_rules() {
debug_echo "检查并创建自定义链(如果不存在)并获取当前规则..."
ipv4_rules=$(iptables -nL $custom_chain_ipv4 2>/dev/null)
if [ -z "$ipv4_rules" ]; then
debug_echo "创建IPv4自定义链 $custom_chain_ipv4"
iptables -N $custom_chain_ipv4
else
debug_echo "当前IPv4自定义链规则: $ipv4_rules"
fi
ipv6_rules=$(ip6tables -nL $custom_chain_ipv6 2>/dev/null)
if [ -z "$ipv6_rules" ]; then
debug_echo "创建IPv6自定义链 $custom_chain_ipv6"
ip6tables -N $custom_chain_ipv6
else
debug_echo "当前IPv6自定义链规则: $ipv6_rules"
fi
}
# 确保自定义链在主链中被调用函数
ensure_chain_calls() {
debug_echo_info "确保自定义链在主链中被调用..."
iptables -C $chain -j $custom_chain_ipv4 > /dev/null 2>&1 || (
debug_echo_info "添加 $custom_chain_ipv4$chain"
iptables -A $chain -j $custom_chain_ipv4
)
ip6tables -C $chain -j $custom_chain_ipv6 > /dev/null 2>&1 || (
debug_echo_info "添加 $custom_chain_ipv6$chain"
ip6tables -A $chain -j $custom_chain_ipv6
)
}
# 检查是否为私有地址函数
is_private_ip() {
local ip=$1
if echo "$ip" | grep -q ":"; then
echo $ip | grep -qE '^fc00:|^fd00:|^fe80:'
else
echo $ip | grep -qE '^10\.|^172\.1[6-9]\.|^172\.2[0-9]\.|^172\.3[0-1]\.|^192\.168\.|^127\.0\.0\.1'
fi
}
# 获取所有传输任务的对等节点IP地址
debug_echo "获取传输任务对等节点的IP地址..."
ips=$(transmission-remote $host:$port --auth $username:$password -t all --info-peers | grep -v "^Address" | grep -v "^$")
debug_echo "$ips"
# 执行函数
check_interval
create_chains_and_get_rules
ensure_chain_calls
# 遍历指定的客户端名称
echo "$block_clients" | while IFS= read -r client; do
debug_echo "处理客户端 $client: " # 输出正在处理的客户端名称
# 获取与当前客户端匹配的IP地址
client_ips=$(echo "$ips" | grep -F -i -- "$client" | cut -d " " -f 1)
for ip in $client_ips; do
# 检查当前IP是否已经在规则中
if (echo "$ip" | grep -q ":" && echo "$ipv6_rules" | grep -q "$ip") || (echo "$ip" | grep -qv ":" && echo "$ipv4_rules" | grep -q "$ip"); then
debug_echo "$ip 已在规则中"
else
debug_echo "$ip 不在规则中"
# 检查是否为私有地址
if is_private_ip "$ip"; then
debug_echo "$ip 是私有地址, 忽略."
else
# 添加规则
2024-07-31 06:08:08 +08:00
[ "$DEBUG" -eq 0 ] && echo -e "$(date '+%Y-%m-%d %H:%M:%S')\t$client\t$ip" >>$log_path
if echo "$ip" | grep -q ":"; then
debug_echo "添加IPv6地址 $ip 到自定义链 $custom_chain_ipv6"
[ "$DEBUG" -eq 0 ] && ip6tables -I $custom_chain_ipv6 -d $ip -j DROP
else
debug_echo "添加IPv4地址 $ip 到自定义链 $custom_chain_ipv4"
[ "$DEBUG" -eq 0 ] && iptables -I $custom_chain_ipv4 -d $ip -j DROP
fi
fi
fi
done
done
echo "脚本执行完毕."