Bash script-pack to update blacklisted domains in BIND9 Response Policy Zone
Please consider adapting this pack to fit your environment properties,
since simple duplication may not given appropriate results.
The partial output of this script-pack can be found at this repo
- free from duplicate entries and sub-domains entries (if it's parent-domain exist) across entire categories
- free from invalid TLDs and domain entries that construct with international characters (non ASCII)
- ip-address is written in CIDR block
- updated RPZ dataBase and incremented serial-zones are syncronized to BIND9-server and propagate the new update
- grab_http.sh --grabbing and proccessing domains from sources-list
- grab_duplic.sh --removing duplicate entries and sub-domains if parent domain exist
- grab_build.sh --rewriting to Bind9-RPZ format-entry
- grab_cereal.sh --incrementing serial number at rpz.*
- grab_library --a library of functions. intended for use by other scripts, not to be executed directly
- grab_urls --urls of sources-list. case sensitive, sort as is, line count and no blank lines
- grab_regex --list of reguler expressions. case sensitive, sort as is, line count and no blank lines
- grab_rsync.sh --intended for syncronize latest dBASE to Bind9 host
- grab_config --configurations file
- rpz.* --pack of zone-files
NOTE
Place them all under the same directory
- please see these wiki and README
- execute
grab_http.sh
withnon root privileges
either directly as aroot user
or by use ofsudo command
, from your linux desktop workstation then follow the next step
- new files with prefix
db.*
are dataBases for RPZ and ready to use at BIND9-server - incremented serial of zone-files - rpz.*, ready to use too
- new files with prefix
txt.*
as the output of grab_duplic.sh can be found at this repository
- Credits to : All Owner-Maintainer of sources-list in grab_urls and KOMINFO NKRI
- This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.