051abe8e18
support for 21.02.0-rc2 and up support for reloading a single interface on ifup/ifupdate rename config file updated shellcheck compatibility remove obsolete create/remove_lock interface processing optimizations to speed up reloads drop dependency on curl in user scripts uniform styling of functions Signed-off-by: Stan Grishin <stangri@melmac.net>
19 lines
634 B
Bash
19 lines
634 B
Bash
#!/bin/sh
|
|
# This file is heavily based on code from https://github.com/Xentrk/netflix-vpn-bypass/blob/master/IPSET_Netflix.sh
|
|
|
|
TARGET_IPSET='wan'
|
|
|
|
TARGET_URL="https://ip-ranges.amazonaws.com/ip-ranges.json"
|
|
TARGET_FNAME="/var/vpn-policy-routing_tmp_aws_ip_ranges"
|
|
|
|
_ret=1
|
|
|
|
if [ ! -s "$TARGET_FNAME" ]; then
|
|
uclient-fetch --no-check-certificate -qO- "$TARGET_URL" 2>/dev/null | grep "ip_prefix" | sed 's/^.*\"ip_prefix\": \"//; s/\",//' > "$TARGET_FNAME"
|
|
fi
|
|
if [ -s "$TARGET_FNAME" ]; then
|
|
awk -v ipset="$TARGET_IPSET" '{print "add " ipset " " $1}' "$TARGET_FNAME" | ipset restore -! && _ret=0
|
|
fi
|
|
rm -f "$TARGET_FNAME"
|
|
|
|
return $_ret
|