Login  Register

Update script (fw_upgrade)

Posted by hans2 on Feb 11, 2016; 4:48pm
URL: https://itus.accessinnov.com/Update-script-fw-upgrade-tp43.html

This is a start post to keep track of changes to the FW_UPGRADE script. For any updates, please reply to this thread and I will update this first post.

VERSION 7.1

To update:
download the fw_upgrade script: fw_upgrade71.fw_upgrade71
copy fw_upgrade.txt to the /sbin folder and rename it to fw_upgrade
Job schedule: In LuCI System>Scheduled Job 31 03 * * 0 sh /sbin/fw_upgrade (default settings)
Tun manually: In CLI sh /sbin/fw_upgrade

Changes below:
----
################################################################################################
# File name  fw_upgrade                                                                        #
# Created by ITUS                                                                              #
# Original version from firmware 1.51 sp1              	                                       # 
# VERSION NUMBER 1.51 - 7.1                                                                    #
# Last Modified date 15th March 2016 							                               #
# Changes - roadrunnere42 - forgot to uncomment webfilter and one snort rule my mistake due to # 
#			    testing		                                                                   #
# Changes - roadrunnere42 - Checks for duplicate rules and removes, tidy code and bug fixes    #
#           removed drug rule because www.shallalist.de sit is too up and down causing script  #
#            to stall.									                                       #
# Changes - roadrunnere42 - Only new snort rules are added to the list instead of rewritting   #
#           the whole list, complete new snort list download ever 14 days. Malicious and       # 
#           ads list, downloaded in memory and duplicate ip's are removed before writting.     #
#	    Drug rules are now updated in memory from http://www.shallalist.de and added to        #
#	    original from Itus, only updated if selected in gui.	                   		       #
#											                                                   #
# Changes - Hans run webfilter based on ads/malicious settings in UCI                          #
#           Perform DNSMASQ restart / SNORT restart only in case of updates                    #
# Changes - Hans correction in line 17 based on Wisywig error                                  #
# Changes - Hans added rules function calls into scripts                                       #            
# Changes - roadrunnere42 added ramdisk and checks to see if files exist before removing       #
# Changes - user8446 added option switches to curl commands as follows: added -1 to force      #
# connections =/> TLS1.0 for IPS, -m to exit if connection drops or host is down to keep script#
# from hanging for all curl commands                                                           #
#                                                                                              #
# When changing the script please update WHAT YOU CHANGED OR ADDED, ADD 1 TO THE VERSION       #
# NUMBER AND DATE CHANGED.                                                                     #
# This will make it easied to time to come to identiy what your you have and who did what.     #
################################################################################################

Also my cron job to update these rules are not daily anymore, I've set it to weekly for now.
No more: Shield Pro v1, Chaos Calmer, FW 1.51 SP1