You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
281 lines
6.8 KiB
281 lines
6.8 KiB
#!/bin/bash
|
|
|
|
#===========================================================================#
|
|
# #
|
|
# Hestia Control Panel - IP/Network Function Library #
|
|
# #
|
|
#===========================================================================#
|
|
|
|
# Global definitions
|
|
REGEX_IPV4="^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){4}$"
|
|
|
|
# Check ip ownership
|
|
is_ip_owner() {
|
|
owner=$(grep 'OWNER=' $HESTIA/data/ips/$ip | cut -f 2 -d \')
|
|
if [ "$owner" != "$user" ]; then
|
|
check_result "$E_FORBIDEN" "$ip is not owned by $user"
|
|
fi
|
|
}
|
|
|
|
# Check if ip address is free
|
|
is_ip_free() {
|
|
if [ -e "$HESTIA/data/ips/$ip" ]; then
|
|
check_result "$E_EXISTS" "$ip is already exists"
|
|
fi
|
|
}
|
|
|
|
# Check ip address specific value
|
|
is_ip_key_empty() {
|
|
key="$1"
|
|
string=$(cat $HESTIA/data/ips/$ip)
|
|
eval $string
|
|
eval value="$key"
|
|
if [ -n "$value" ] && [ "$value" != '0' ]; then
|
|
key="$(echo $key | sed -e "s/\$U_//")"
|
|
check_result "$E_EXISTS" "IP is in use / $key = $value"
|
|
fi
|
|
}
|
|
|
|
is_ip_rdns_valid() {
|
|
local ip="$1"
|
|
local network_ip=$(echo $ip | cut -d"." -f1-3)
|
|
local awk_ip=$(echo $network_ip | sed 's|\.|/\&\&/|g')
|
|
local rev_awk_ip=$(echo $awk_ip | rev)
|
|
|
|
if [ -z "$rdns" ]; then
|
|
local rdns=$(dig +short -x "$ip" | head -n 1 | sed 's/.$//') || unset rdns
|
|
fi
|
|
|
|
if [ -n "$rdns" ] && [ ! $(echo $rdns | awk "/$awk_ip/ || /$rev_awk_ip/") ]; then
|
|
echo $rdns
|
|
return 0 # True
|
|
fi
|
|
|
|
return 1 # False
|
|
}
|
|
|
|
# Update ip address value
|
|
update_ip_value() {
|
|
key="$1"
|
|
value="$2"
|
|
conf="$HESTIA/data/ips/$ip"
|
|
str=$(cat $conf)
|
|
eval $str
|
|
c_key=$(echo "${key//$/}")
|
|
eval old="${key}"
|
|
old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
|
|
new=$(echo "$value" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
|
|
sed -i "$str_number s/$c_key='${old//\*/\\*}'/$c_key='${new//\*/\\*}'/g" \
|
|
$conf
|
|
}
|
|
|
|
# New method that is improved on a later date we need to check if we can improve it for other locations
|
|
update_ip_value_new() {
|
|
key="$1"
|
|
value="$2"
|
|
conf="$HESTIA/data/ips/$ip"
|
|
check_ckey=$(grep "^$key='" $conf)
|
|
if [ -z "$check_ckey" ]; then
|
|
echo "$key='$value'" >> $conf
|
|
else
|
|
sed -i "s|^$key=.*|$key='$value'|g" $conf
|
|
fi
|
|
}
|
|
|
|
# Get ip name
|
|
get_ip_alias() {
|
|
ip_name=$(grep "NAME=" $HESTIA/data/ips/$local_ip | cut -f 2 -d \')
|
|
if [ -n "$ip_name" ]; then
|
|
echo "${1//./-}.$ip_name"
|
|
fi
|
|
}
|
|
|
|
# Increase ip value
|
|
increase_ip_value() {
|
|
sip=${1-ip}
|
|
USER=${2-$user}
|
|
web_key='U_WEB_DOMAINS'
|
|
usr_key='U_SYS_USERS'
|
|
current_web=$(grep "$web_key=" $HESTIA/data/ips/$sip | cut -f 2 -d \')
|
|
current_usr=$(grep "$usr_key=" $HESTIA/data/ips/$sip | cut -f 2 -d \')
|
|
if [ -z "$current_web" ]; then
|
|
echo "Error: Parsing error"
|
|
log_event "$E_PARSING" "$ARGUMENTS"
|
|
exit "$E_PARSING"
|
|
fi
|
|
new_web=$((current_web + 1))
|
|
if [ -z "$current_usr" ]; then
|
|
new_usr="$USER"
|
|
else
|
|
check_usr=$(echo -e "${current_usr//,/\\n}" | grep -x "$USER")
|
|
if [ -z "$check_usr" ]; then
|
|
new_usr="$current_usr,$USER"
|
|
else
|
|
new_usr="$current_usr"
|
|
fi
|
|
fi
|
|
|
|
# Make sure users list does not contain duplicates
|
|
new_usr=$(echo "$new_usr" \
|
|
| sed "s/,/\n/g" \
|
|
| sort -u \
|
|
| sed ':a;N;$!ba;s/\n/,/g')
|
|
|
|
sed -i "s/$web_key='$current_web'/$web_key='$new_web'/g" \
|
|
$HESTIA/data/ips/$sip
|
|
sed -i "s/$usr_key='$current_usr'/$usr_key='$new_usr'/g" \
|
|
$HESTIA/data/ips/$sip
|
|
}
|
|
|
|
# Decrease ip value
|
|
decrease_ip_value() {
|
|
sip=${1-ip}
|
|
local user=${2-$user}
|
|
web_key='U_WEB_DOMAINS'
|
|
usr_key='U_SYS_USERS'
|
|
|
|
current_web=$(grep "$web_key=" $HESTIA/data/ips/$sip | cut -f 2 -d \')
|
|
current_usr=$(grep "$usr_key=" $HESTIA/data/ips/$sip | cut -f 2 -d \')
|
|
|
|
if [ -z "$current_web" ]; then
|
|
check_result $E_PARSING "Parsing error"
|
|
fi
|
|
|
|
new_web=$((current_web - 1))
|
|
check_ip=$(grep $sip $USER_DATA/web.conf | wc -l)
|
|
if [[ $check_ip = 0 ]]; then
|
|
new_usr=$(echo "$current_usr" \
|
|
| sed "s/,/\n/g" \
|
|
| sed "s/^$user$//g" \
|
|
| sed "/^$/d" \
|
|
| sort -u \
|
|
| sed ':a;N;$!ba;s/\n/,/g')
|
|
else
|
|
new_usr="$current_usr"
|
|
fi
|
|
|
|
sed -i "s/$web_key='$current_web'/$web_key='$new_web'/g" \
|
|
$HESTIA/data/ips/$sip
|
|
sed -i "s/$usr_key='$current_usr'/$usr_key='$new_usr'/g" \
|
|
$HESTIA/data/ips/$sip
|
|
}
|
|
|
|
# Get ip address value
|
|
get_ip_value() {
|
|
key="$1"
|
|
string=$(cat $HESTIA/data/ips/$ip)
|
|
eval $string
|
|
eval value="$key"
|
|
echo "$value"
|
|
}
|
|
|
|
# Get real ip address
|
|
get_real_ip() {
|
|
if [ -e "$HESTIA/data/ips/$1" ]; then
|
|
echo "$1"
|
|
else
|
|
nat=$(grep -H "^NAT='$1'" $HESTIA/data/ips/* | head -n1)
|
|
if [ -n "$nat" ]; then
|
|
echo "$nat" | cut -f 1 -d : | cut -f 7 -d /
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Convert CIDR to netmask
|
|
convert_cidr() {
|
|
set -- $((5 - ($1 / 8))) 255 255 255 255 \
|
|
$(((255 << (8 - ($1 % 8))) & 255)) 0 0 0
|
|
if [[ $1 -gt 1 ]]; then
|
|
shift $1
|
|
else
|
|
shift
|
|
fi
|
|
echo ${1-0}.${2-0}.${3-0}.${4-0}
|
|
}
|
|
|
|
# Convert netmask to CIDR
|
|
convert_netmask() {
|
|
nbits=0
|
|
IFS=.
|
|
for dec in $1; do
|
|
case $dec in
|
|
255) let nbits+=8 ;;
|
|
254) let nbits+=7 ;;
|
|
252) let nbits+=6 ;;
|
|
248) let nbits+=5 ;;
|
|
240) let nbits+=4 ;;
|
|
224) let nbits+=3 ;;
|
|
192) let nbits+=2 ;;
|
|
128) let nbits+=1 ;;
|
|
0) ;;
|
|
esac
|
|
done
|
|
echo "$nbits"
|
|
}
|
|
|
|
# Calculate broadcast address
|
|
get_broadcast() {
|
|
OLD_IFS=$IFS
|
|
IFS=.
|
|
typeset -a I=($1)
|
|
typeset -a N=($2)
|
|
IFS=$OLD_IFS
|
|
|
|
echo "$((${I[0]} | (255 ^ ${N[0]}))).$((${I[1]} | (255 ^ ${N[1]}))).$((${I[2]} | (255 ^ ${N[2]}))).$((${I[3]} | (255 ^ ${N[3]})))"
|
|
}
|
|
|
|
# Get user ips
|
|
get_user_ips() {
|
|
dedicated=$(grep -H "OWNER='$user'" $HESTIA/data/ips/*)
|
|
dedicated=$(echo "$dedicated" | cut -f 1 -d : | sed 's=.*/==' | grep -E ${REGEX_IPV4})
|
|
shared=$(grep -H -A1 "OWNER='admin'" $HESTIA/data/ips/* | grep shared)
|
|
shared=$(echo "$shared" | cut -f 1 -d : | sed 's=.*/==' | cut -f 1 -d \- | grep -E ${REGEX_IPV4})
|
|
for dedicated_ip in $dedicated; do
|
|
shared=$(echo "$shared" | grep -v $dedicated_ip)
|
|
done
|
|
echo -e "$dedicated\n$shared" | sed "/^$/d"
|
|
}
|
|
|
|
# Get user ip
|
|
get_user_ip() {
|
|
ip=$(get_user_ips | head -n1)
|
|
if [ -z "$ip" ]; then
|
|
check_result $E_NOTEXIST "no IP is available"
|
|
fi
|
|
local_ip=$ip
|
|
nat=$(grep "^NAT" $HESTIA/data/ips/$ip | cut -f 2 -d \')
|
|
if [ -n "$nat" ]; then
|
|
ip=$nat
|
|
fi
|
|
}
|
|
|
|
# Validate ip address
|
|
is_ip_valid() {
|
|
local_ip="$1"
|
|
if [ ! -e "$HESTIA/data/ips/$1" ]; then
|
|
nat=$(grep -H "^NAT='$1'" $HESTIA/data/ips/*)
|
|
if [ -z "$nat" ]; then
|
|
check_result "$E_NOTEXIST" "IP $1 doesn't exist"
|
|
else
|
|
nat=$(echo "$nat" | cut -f1 -d: | cut -f7 -d/)
|
|
local_ip=$nat
|
|
fi
|
|
fi
|
|
if [ -n "$2" ]; then
|
|
if [ -z "$nat" ]; then
|
|
ip_data=$(cat $HESTIA/data/ips/$1)
|
|
else
|
|
ip_data=$(cat $HESTIA/data/ips/$nat)
|
|
fi
|
|
ip_owner=$(echo "$ip_data" | grep OWNER= | cut -f2 -d \')
|
|
ip_status=$(echo "$ip_data" | grep STATUS= | cut -f2 -d \')
|
|
if [ "$ip_owner" != "$user" ] && [ "$ip_status" = 'dedicated' ]; then
|
|
check_result "$E_FORBIDEN" "$user user can't use IP $1"
|
|
fi
|
|
get_user_owner
|
|
if [ "$ip_owner" != "$user" ] && [ "$ip_owner" != "$owner" ]; then
|
|
check_result "$E_FORBIDEN" "$user user can't use IP $1"
|
|
fi
|
|
fi
|
|
}
|