Update script (fw_upgrade)
Posted by
hans2 on
Feb 11, 2016; 4:48pm
URL: https://itus.accessinnov.com/Update-script-fw-upgrade-tp43.html
This is a start post to keep track of changes to the
FW_UPGRADE script. For any updates, please reply to this thread and I will update this first post.
VERSION 7.1
To update:
download the fw_upgrade script:
fw_upgrade71.fw_upgrade71copy fw_upgrade.txt to the
/sbin folder and rename it to
fw_upgradeJob schedule: In LuCI System>Scheduled Job
31 03 * * 0 sh /sbin/fw_upgrade (default settings)
Tun manually: In CLI
sh /sbin/fw_upgradeChanges below:
----
################################################################################################
# File name fw_upgrade #
# Created by ITUS #
# Original version from firmware 1.51 sp1 #
# VERSION NUMBER 1.51 - 7.1 #
# Last Modified date 15th March 2016 #
# Changes - roadrunnere42 - forgot to uncomment webfilter and one snort rule my mistake due to #
# testing #
# Changes - roadrunnere42 - Checks for duplicate rules and removes, tidy code and bug fixes #
# removed drug rule because www.shallalist.de sit is too up and down causing script #
# to stall. #
# Changes - roadrunnere42 - Only new snort rules are added to the list instead of rewritting #
# the whole list, complete new snort list download ever 14 days. Malicious and #
# ads list, downloaded in memory and duplicate ip's are removed before writting. #
# Drug rules are now updated in memory from http://www.shallalist.de and added to #
# original from Itus, only updated if selected in gui. #
# #
# Changes - Hans run webfilter based on ads/malicious settings in UCI #
# Perform DNSMASQ restart / SNORT restart only in case of updates #
# Changes - Hans correction in line 17 based on Wisywig error #
# Changes - Hans added rules function calls into scripts #
# Changes - roadrunnere42 added ramdisk and checks to see if files exist before removing #
# Changes - user8446 added option switches to curl commands as follows: added -1 to force #
# connections =/> TLS1.0 for IPS, -m to exit if connection drops or host is down to keep script#
# from hanging for all curl commands #
# #
# When changing the script please update WHAT YOU CHANGED OR ADDED, ADD 1 TO THE VERSION #
# NUMBER AND DATE CHANGED. #
# This will make it easied to time to come to identiy what your you have and who did what. #
################################################################################################
Also my cron job to update these rules are not daily anymore, I've set it to weekly for now.
No more: Shield Pro v1, Chaos Calmer, FW 1.51 SP1