<![CDATA[Ashus.ashus.net - Bash scripts]]> https://ashus.ashus.net/ Wed, 29 Apr 2026 14:29:13 +0000 MyBB <![CDATA[OpenWRT static IPv6 DUID auto-assign script]]> https://ashus.ashus.net/thread-175.html Sun, 13 Dec 2015 22:05:08 +0100 Ashus]]> https://ashus.ashus.net/thread-175.html jhnphm's post here.
The idea is to assign client's DUID addresses (IPv6) just like MAC addresses for IPv4 to the config file. The prerequisite is to have odhcpd configured and IPv6 prefixes filled for DHCP clients via LuCI. Since the DUID is required for static IPv6 to work and there are no fields in LuCI, you can use the script after the client is seen for the first time (probably configured dynamically).

Code:
#!/bin/sh

for I in $(uci show dhcp|awk -F '(\\[|\\]|\\.|=)' '{if ($2=="@host" && $5=="name") print $6}'); do # find existing static host entries and find hostnames
    NAME=$(echo -ne $I | sed -r "s/'//g")
    DUID=$(cat /var/hosts/odhcpd |awk -F ' '  "{if (\$1 == \"#\" && \$5 == \"$NAME\") print \$3 }"|head -n 1)  # find duid for existing hostname in leases
    ID=$(uci show dhcp|awk -F '(\\[|\\]|\\.|=)' "{if (\$2==\"@host\" && \$6==\"$I\") print \$3}") # Find placement of host entry
        if [ "$DUID" != "0000000000000000000000000000" ]; then
                echo Found: $NAME = $DUID
                uci set dhcp.@host[$ID].duid=$DUID # Set DUID
        fi
done
echo Commiting changes.
uci commit
killall -HUP odhcpd
]]> jhnphm's post here.
The idea is to assign client's DUID addresses (IPv6) just like MAC addresses for IPv4 to the config file. The prerequisite is to have odhcpd configured and IPv6 prefixes filled for DHCP clients via LuCI. Since the DUID is required for static IPv6 to work and there are no fields in LuCI, you can use the script after the client is seen for the first time (probably configured dynamically).

Code:
#!/bin/sh

for I in $(uci show dhcp|awk -F '(\\[|\\]|\\.|=)' '{if ($2=="@host" && $5=="name") print $6}'); do # find existing static host entries and find hostnames
    NAME=$(echo -ne $I | sed -r "s/'//g")
    DUID=$(cat /var/hosts/odhcpd |awk -F ' '  "{if (\$1 == \"#\" && \$5 == \"$NAME\") print \$3 }"|head -n 1)  # find duid for existing hostname in leases
    ID=$(uci show dhcp|awk -F '(\\[|\\]|\\.|=)' "{if (\$2==\"@host\" && \$6==\"$I\") print \$3}") # Find placement of host entry
        if [ "$DUID" != "0000000000000000000000000000" ]; then
                echo Found: $NAME = $DUID
                uci set dhcp.@host[$ID].duid=$DUID # Set DUID
        fi
done
echo Commiting changes.
uci commit
killall -HUP odhcpd
]]> <![CDATA[Nastavení minimálních oprávnění v podsložkách]]> https://ashus.ashus.net/thread-157.html Mon, 21 Apr 2014 14:52:41 +0200 Ashus]]> https://ashus.ashus.net/thread-157.html
Code:
chown -R www-data:www-data *
chmod -R 640 *
find . -maxdepth 10 -type d -exec chmod 750 {} \;
]]>
Code:
chown -R www-data:www-data *
chmod -R 640 *
find . -maxdepth 10 -type d -exec chmod 750 {} \;
]]> <![CDATA[Nahrazení obsahu souborů pomocí 'sed']]> https://ashus.ashus.net/thread-140.html Mon, 03 Jun 2013 16:25:48 +0200 Ashus]]> https://ashus.ashus.net/thread-140.html
Code:
find . -name "*.php" -exec sed -i "s/mysql_escape_string/mysql_real_escape_string/g" '{}' \;

Tím nahradíme ve všech souborech s příponou php mysql_escape_string za mysql_real_escape_string.]]>
Code:
find . -name "*.php" -exec sed -i "s/mysql_escape_string/mysql_real_escape_string/g" '{}' \;

Tím nahradíme ve všech souborech s příponou php mysql_escape_string za mysql_real_escape_string.]]> <![CDATA[Delete old uploads]]> https://ashus.ashus.net/thread-136.html Fri, 08 Feb 2013 20:15:05 +0100 Ashus]]> https://ashus.ashus.net/thread-136.html
Code:
#!/bin/sh

IFS=$'\n'
for s in $(find /var/www/files/upload/ -type f -mtime +7 -exec echo {} \; | egrep -v "/var/www/files/upload/(\.|up/)")
    do
    rm "$s"
    done
]]>
Code:
#!/bin/sh

IFS=$'\n'
for s in $(find /var/www/files/upload/ -type f -mtime +7 -exec echo {} \; | egrep -v "/var/www/files/upload/(\.|up/)")
    do
    rm "$s"
    done
]]> <![CDATA[COD Hammering Protective shaper]]> https://ashus.ashus.net/thread-87.html Thu, 30 Oct 2008 22:37:51 +0100 Ashus]]> https://ashus.ashus.net/thread-87.html The gameserver gets hammered constantly by hundreds of players each second, because they use so-called 'game managers' like HLSW or All Seeing Eye. Programs like this often send hundreds of UDP requests to get the server status - map, gametype and playerlist. That alone would be OK, but they keep refreshing the lists like every 10 seconds! Imagine a thousand of users choosing where to connect. Or even worse, those who left the tool open and leave the computer physically.

Naturally, our slow network line or weak CPU didn't manage to work it out without problems. The game lagged.
So my aim was to differentiate between gameplay packets and those of HLSW-like tools. It wasn't easy, because the game uses the same UDP port for all communication. I needed to examine the content of packets somehow and filter out the bad guys.

For this to work, you need a linux kernel with IMQ and U32 support and appropriately patched IPtables.

.rar hammering-protect.rar Size: 741 bytes  Downloads: 1025


The script I wrote sends all INPUT and OUTPUT game packets [UDP, 28960] to IMQ virtual device. Then TC's plugin U32 scans their content to match specific content. Actually the bad packets contain the words getstatus and statusResponse inside, so finding this was quite easy; maintaining the syntax U32 wanted to hear was a little tricky. Matched packets are redirected to a class, that we designated as shaped. All other packets must come through instantly to keep ping low and minimize lagging.

So now we have set up a shaper, that shapes packets from HLSW-like tools. And unforutnately also game's own serverstatus packets. We wanted to keep some data flowing, so users would see the server as online in the game menu. So we need to balance it.

My first try was to shape it 3/3 kbit/s [down/up]. It seemed successful, becaused the game lagged no more. Another day no players came. I began to think people actually are dependant on those tools, as I saw them thinking the server was offline or that they were banned. They had no idea how to connect to the game, except using HLSW-like tools. Some I've told "use the game menu --> favorites", but the server was more empty each day.
So I raised the limits to 20/20. There still are some lags, but it sure is more playable than without it.

Now that I think of it, the Upload should be large and we should only limit Download a lot because of UDP 'deliver now or never' behaviour.
At the time of writing this, I'm testing 10/50 on Kafemlynek.]]> The gameserver gets hammered constantly by hundreds of players each second, because they use so-called 'game managers' like HLSW or All Seeing Eye. Programs like this often send hundreds of UDP requests to get the server status - map, gametype and playerlist. That alone would be OK, but they keep refreshing the lists like every 10 seconds! Imagine a thousand of users choosing where to connect. Or even worse, those who left the tool open and leave the computer physically.

Naturally, our slow network line or weak CPU didn't manage to work it out without problems. The game lagged.
So my aim was to differentiate between gameplay packets and those of HLSW-like tools. It wasn't easy, because the game uses the same UDP port for all communication. I needed to examine the content of packets somehow and filter out the bad guys.

For this to work, you need a linux kernel with IMQ and U32 support and appropriately patched IPtables.

.rar hammering-protect.rar Size: 741 bytes  Downloads: 1025


The script I wrote sends all INPUT and OUTPUT game packets [UDP, 28960] to IMQ virtual device. Then TC's plugin U32 scans their content to match specific content. Actually the bad packets contain the words getstatus and statusResponse inside, so finding this was quite easy; maintaining the syntax U32 wanted to hear was a little tricky. Matched packets are redirected to a class, that we designated as shaped. All other packets must come through instantly to keep ping low and minimize lagging.

So now we have set up a shaper, that shapes packets from HLSW-like tools. And unforutnately also game's own serverstatus packets. We wanted to keep some data flowing, so users would see the server as online in the game menu. So we need to balance it.

My first try was to shape it 3/3 kbit/s [down/up]. It seemed successful, becaused the game lagged no more. Another day no players came. I began to think people actually are dependant on those tools, as I saw them thinking the server was offline or that they were banned. They had no idea how to connect to the game, except using HLSW-like tools. Some I've told "use the game menu --> favorites", but the server was more empty each day.
So I raised the limits to 20/20. There still are some lags, but it sure is more playable than without it.

Now that I think of it, the Upload should be large and we should only limit Download a lot because of UDP 'deliver now or never' behaviour.
At the time of writing this, I'm testing 10/50 on Kafemlynek.]]> <![CDATA[GeoIP updater]]> https://ashus.ashus.net/thread-73.html Sat, 19 Apr 2008 00:54:23 +0200 Ashus]]> https://ashus.ashus.net/thread-73.html
Code:
#! /bin/bash

cd /usr/share/GeoIP

wget "http://www.maxmind.com/download/geoip/database/GeoIP.dat.gz" -O GeoIP.dat.gz
7z e -y GeoIP.dat.gz
rm GeoIP.dat.gz
]]>
Code:
#! /bin/bash

cd /usr/share/GeoIP

wget "http://www.maxmind.com/download/geoip/database/GeoIP.dat.gz" -O GeoIP.dat.gz
7z e -y GeoIP.dat.gz
rm GeoIP.dat.gz
]]> <![CDATA[NOD32 linux mirror update 1.1]]> https://ashus.ashus.net/thread-62.html Sat, 01 Sep 2007 01:03:18 +0200 Ashus]]> https://ashus.ashus.net/thread-62.html
This version of update tool doesn't require ESET Gateway Security and supports mirroring protocol version 2 and 3. Their update URL must be different - filename of both versions is update.ver, the content is different.


Installation:
  • Download and install linux executable unrar-free (Debian package name is unrar-free; it should be compatible with other distributions as well though).
  • Download the script below, modify the settings and test the script.
  • Configure the webserver to access the mirror update directory at certain path.
  • Add the script execution hourly to crontab (ex. 15 * * * * root /root/scripts/nodupdate.sh &> /dev/null).
  • Configure NOD32 update server on client computers to use local mirror.


PHP version is more advanced and faster.


.rar unrar-free.rar Size: 31,96 KB  Downloads: 2030

.rar nodupdate.rar Size: 1,52 KB  Downloads: 2828
]]>
This version of update tool doesn't require ESET Gateway Security and supports mirroring protocol version 2 and 3. Their update URL must be different - filename of both versions is update.ver, the content is different.


Installation:
  • Download and install linux executable unrar-free (Debian package name is unrar-free; it should be compatible with other distributions as well though).
  • Download the script below, modify the settings and test the script.
  • Configure the webserver to access the mirror update directory at certain path.
  • Add the script execution hourly to crontab (ex. 15 * * * * root /root/scripts/nodupdate.sh &> /dev/null).
  • Configure NOD32 update server on client computers to use local mirror.


PHP version is more advanced and faster.


.rar unrar-free.rar Size: 31,96 KB  Downloads: 2030

.rar nodupdate.rar Size: 1,52 KB  Downloads: 2828
]]> <![CDATA[IP Accounting 1.1 CZ]]> https://ashus.ashus.net/thread-60.html Fri, 17 Aug 2007 16:03:24 +0200 Ashus]]> https://ashus.ashus.net/thread-60.html Sbírá a odlišuje data: na proxy server (kombinace ip a portu), místní síť (ip/maska), internet (vše ostatní).
Podle toho pak zobrazuje data za posledních 24 hodin a za poslední interval ("aktuální" bitrate).
Generuje barevné grafy podle odlišných dat (RRDtool stack).

Je potřeba: Apache, PHP5, Cron, RRDtool, MySQL.


Část první: instalace
Pokud vám chybí některá z aplikací výše, doinstalovat. Do databáze přidat tabulku podle obsahu přiloženého souboru db.sql. Nastavit a ověřit nastavení v hlavičce ipaccounting.sh. Dovytvářet chybějící adresáře. PHP soubory hodit na www stránky, přidat do ip.php a iplist.php hlavičky a patičky, aby se to hodilo do theme vaší stránky. Do cronu přidat spouštění skriptu ipaccounting.sh každé 3 minuty (*/3 * * * *). Pokud se rozhodnete používat část skriptu proti zacyklení, nezapomeňte si přidat do skriptu spouštěného po restartu serveru spouštění "ipaccounting.sh clean" - tím se mimo jiné vymaže soubor, který by mohl zůstat přítomný po pádu systému při spuštěném ipaccountingu a zabraňovat dalšímu spouštění.


Část druhá: sběr informací
Bash skript IP accounting založený na práci Standuse a Bohdyho
  • automaticky označí pakety pomocí iptables v tabulce mangle
  • data z bufferů každé tři minuty vybírá a nuluje čítače
  • sesbíraná data ukládá pro grafy do rrd databází
  • do txt souborů ukládá data přenesená v posledním intervalu (aktuální aktivita klientů)
  • vše průběžně ukládá do mysql databáze


Část třetí: interpretace informací pomocí PHP
iplist.php, __mysql_connect.php, bar.gif
  • vypíše seznam klientů z aktivních (txt) a živých (sql)
  • přepočítá aktivitu za poslední interval na lidské jednotky kB(MB)/s
  • z databáze vyčte data za posledních 24 hodin pro každou IP adresu zvlášť (a přepočítá)
  • tento výčet je jakž takž optimalizován, síť okolo 60 PC trvá na Athlonu 1300MHz, 560MB RAM do 1s, podruhé stejné data (ve stejném intervalu) mysql optimalizuje na ~200ms
  • provede DNS resolve jednotlivých adres na názvy
  • je k dispozici filtr aktivity: aktivní (nenulové data v intervalu), neaktivní (nenulové data za 24h), všechny
  • data lze seřadit
  • parametr pro veřejnost skrytý: last=week, month, year (náročné na sql, month mi trvalo 25s)
  • u každého klienta je odkaz na skript ip.php

ip.php, make.php, _resolutions.php
  • vygeneruje graf datových toků pomocí RRDtool
  • barevně odlišuje tři síťové pásma (proxy, czf-lan, net)
  • zapamatuje si pomocí cookies poslední zobrazené časové měřítko (1h, 6h, 12h, 1d, 3d, týden, měsíc, rok)
  • šetří CPU - pokud není poslední požadovaný generovaný obrázek starší, než minuta, nebude generovat nový, ale jen vyhodí img src

.rar IP-accounting.rar Size: 8,2 KB  Downloads: 1066
]]> Sbírá a odlišuje data: na proxy server (kombinace ip a portu), místní síť (ip/maska), internet (vše ostatní).
Podle toho pak zobrazuje data za posledních 24 hodin a za poslední interval ("aktuální" bitrate).
Generuje barevné grafy podle odlišných dat (RRDtool stack).

Je potřeba: Apache, PHP5, Cron, RRDtool, MySQL.


Část první: instalace
Pokud vám chybí některá z aplikací výše, doinstalovat. Do databáze přidat tabulku podle obsahu přiloženého souboru db.sql. Nastavit a ověřit nastavení v hlavičce ipaccounting.sh. Dovytvářet chybějící adresáře. PHP soubory hodit na www stránky, přidat do ip.php a iplist.php hlavičky a patičky, aby se to hodilo do theme vaší stránky. Do cronu přidat spouštění skriptu ipaccounting.sh každé 3 minuty (*/3 * * * *). Pokud se rozhodnete používat část skriptu proti zacyklení, nezapomeňte si přidat do skriptu spouštěného po restartu serveru spouštění "ipaccounting.sh clean" - tím se mimo jiné vymaže soubor, který by mohl zůstat přítomný po pádu systému při spuštěném ipaccountingu a zabraňovat dalšímu spouštění.


Část druhá: sběr informací
Bash skript IP accounting založený na práci Standuse a Bohdyho
  • automaticky označí pakety pomocí iptables v tabulce mangle
  • data z bufferů každé tři minuty vybírá a nuluje čítače
  • sesbíraná data ukládá pro grafy do rrd databází
  • do txt souborů ukládá data přenesená v posledním intervalu (aktuální aktivita klientů)
  • vše průběžně ukládá do mysql databáze


Část třetí: interpretace informací pomocí PHP
iplist.php, __mysql_connect.php, bar.gif
  • vypíše seznam klientů z aktivních (txt) a živých (sql)
  • přepočítá aktivitu za poslední interval na lidské jednotky kB(MB)/s
  • z databáze vyčte data za posledních 24 hodin pro každou IP adresu zvlášť (a přepočítá)
  • tento výčet je jakž takž optimalizován, síť okolo 60 PC trvá na Athlonu 1300MHz, 560MB RAM do 1s, podruhé stejné data (ve stejném intervalu) mysql optimalizuje na ~200ms
  • provede DNS resolve jednotlivých adres na názvy
  • je k dispozici filtr aktivity: aktivní (nenulové data v intervalu), neaktivní (nenulové data za 24h), všechny
  • data lze seřadit
  • parametr pro veřejnost skrytý: last=week, month, year (náročné na sql, month mi trvalo 25s)
  • u každého klienta je odkaz na skript ip.php

ip.php, make.php, _resolutions.php
  • vygeneruje graf datových toků pomocí RRDtool
  • barevně odlišuje tři síťové pásma (proxy, czf-lan, net)
  • zapamatuje si pomocí cookies poslední zobrazené časové měřítko (1h, 6h, 12h, 1d, 3d, týden, měsíc, rok)
  • šetří CPU - pokud není poslední požadovaný generovaný obrázek starší, než minuta, nebude generovat nový, ale jen vyhodí img src

.rar IP-accounting.rar Size: 8,2 KB  Downloads: 1066
]]> <![CDATA[Availability]]> https://ashus.ashus.net/thread-59.html Fri, 17 Aug 2007 14:58:57 +0200 Ashus]]> https://ashus.ashus.net/thread-59.html Included PHP script counts relevant nonzero lines from the end of datafile and equates a percentage of availability last month.

If results are to be accurate, it is required for the server to run 24/7 and for cron to run the script regularly. If the server freezes and is kept frozen for an hour, the percentage may still output 100% incorrectly. On the other hand, the script doesn't require much resources and is as lightweight as it can be.
.rar availability.rar Size: 863 bytes  Downloads: 1018
]]> Included PHP script counts relevant nonzero lines from the end of datafile and equates a percentage of availability last month.

If results are to be accurate, it is required for the server to run 24/7 and for cron to run the script regularly. If the server freezes and is kept frozen for an hour, the percentage may still output 100% incorrectly. On the other hand, the script doesn't require much resources and is as lightweight as it can be.
.rar availability.rar Size: 863 bytes  Downloads: 1018
]]> <![CDATA[SiteCheck SMS]]> https://ashus.ashus.net/thread-58.html Fri, 17 Aug 2007 14:38:36 +0200 Ashus]]> https://ashus.ashus.net/thread-58.html When state changes, an email is send via sendmail. In Czech republic, only O2 and Vodafone give out free SMS support from internet.

Names of the sites must be resolvable to IP addresses - they have to be in /etc/hosts or an alternative.
.rar sitecheck_sms.rar Size: 1,01 KB  Downloads: 880
]]> When state changes, an email is send via sendmail. In Czech republic, only O2 and Vodafone give out free SMS support from internet.

Names of the sites must be resolvable to IP addresses - they have to be in /etc/hosts or an alternative.
.rar sitecheck_sms.rar Size: 1,01 KB  Downloads: 880
]]> <![CDATA[Proxy Guard]]> https://ashus.ashus.net/thread-57.html Fri, 17 Aug 2007 14:35:13 +0200 Ashus]]> https://ashus.ashus.net/thread-57.html
Use cron to execute this script regularly (each 3-10 minutes, depends on how quickly you want your clients happy).

Two modes are available: automatic and manual - automatics act according to custom settings and switches the cascaded proxy server by priorities of your servers, if the server above in the list doesn't work. Manual settings blocks the automatics and sets an uplink of your choice.

Furthermore, to test the functionality of the proxy, the script uses links (text web browser), or availability of the site by pinging. Each has its pros and cons: checking functionality - finds out practical real functionality, but is dependant on a website; availability - lesser data rate, but server can be available without working proxy service.
.rar proxy_guard.rar Size: 1,52 KB  Downloads: 1023
]]>
Use cron to execute this script regularly (each 3-10 minutes, depends on how quickly you want your clients happy).

Two modes are available: automatic and manual - automatics act according to custom settings and switches the cascaded proxy server by priorities of your servers, if the server above in the list doesn't work. Manual settings blocks the automatics and sets an uplink of your choice.

Furthermore, to test the functionality of the proxy, the script uses links (text web browser), or availability of the site by pinging. Each has its pros and cons: checking functionality - finds out practical real functionality, but is dependant on a website; availability - lesser data rate, but server can be available without working proxy service.
.rar proxy_guard.rar Size: 1,52 KB  Downloads: 1023
]]>