forked from IDeletedSystem64/iptables-deploy
110 lines
4.6 KiB
Python
110 lines
4.6 KiB
Python
import paramiko # this sounds like an anime
|
|
import json
|
|
import os
|
|
import time # i need time to get this done
|
|
import requests # for getting the commands to run on client
|
|
import logging
|
|
|
|
# Open the config file and make it accessible via "cfg"
|
|
with open("conf.json", "r") as file:
|
|
cfg = json.load(file)
|
|
|
|
# set our variables
|
|
sshc = paramiko.client.SSHClient()
|
|
healthstatus = "" # possible values: "ok", "err"
|
|
healthpassing = True
|
|
shcommands = []
|
|
|
|
# Configure logging
|
|
logging.basicConfig(format='%(asctime)s %(levelname)s %(message)s')
|
|
log = logging.getLogger()
|
|
try:
|
|
if cfg["loglevel"] == "debug":
|
|
log.setLevel(logging.DEBUG)
|
|
else:
|
|
log.setLevel(logging.INFO)
|
|
except KeyError:
|
|
log.setLevel(logging.INFO)
|
|
log.debug("Logger was initialized")
|
|
|
|
def healthcheck(): # Uses os.system to ping the ONT to check for responses/status.
|
|
global healthstatus
|
|
response = ""
|
|
if cfg["os"] == "win":
|
|
response = os.system("ping -n 2 " + cfg["server"]+ "> nul")
|
|
else:
|
|
response = os.system("ping -c 2 " + cfg["server"] + ">> /dev/null")
|
|
if response != 0:
|
|
log.debug("healthstatus set to err!")
|
|
healthstatus = "err"
|
|
else:
|
|
log.debug("healthstatus set to ok!")
|
|
healthstatus = "ok"
|
|
|
|
def downloadLatestCommands(): # If the "srcurl" attribute in the configuration is set, downloads the latest iptables commands to be run on the ONT from another server using HTTP.
|
|
try:
|
|
r = requests.get(cfg['srcurl'])
|
|
open(cfg["filepath"], 'wb').write(r.content)
|
|
commandList() # Run this here instead of seperately if this method is used.
|
|
except:
|
|
if os.path.exists(cfg["filepath"]):
|
|
log.warning("The latest commands could not be retrieved, however a copy of the commands was saved previously, which will be used.")
|
|
else:
|
|
log.error("The latest commands could not be retrieved, and no previous copy is saved on the system.")
|
|
log.debug("The commandList method will also fail!")
|
|
|
|
def commandList(): # Opens the file defined by the configuration's "filepath" variable and splits the commands into a parseable list with every new line (\n).
|
|
global shcommands
|
|
if os.path.exists(cfg["filepath"]):
|
|
cmdtxt = open(cfg["filepath"], "r")
|
|
cmddata = cmdtxt.read()
|
|
shcommands = cmddata.split("\n")
|
|
cmdtxt.close()
|
|
else:
|
|
log.error("The commands to be run on the ONT could not be split into a list, as no previous copy is saved on the system.")
|
|
|
|
def deploy():
|
|
downloadLatestCommands()
|
|
sshc.set_missing_host_key_policy(paramiko.AutoAddPolicy()) # so we don't get whined at and crash over a unrecognized host-key
|
|
sshc.connect(cfg["server"],port=cfg["port"],username=cfg["ssh-user"],password=cfg["ssh-pw"])
|
|
|
|
time.sleep(3) # Sleep 3 seconds, because the ONT's sshd takes forever to start a shell.
|
|
|
|
for command in shcommands:
|
|
sshc.exec_command(command)
|
|
log.info(f'{command} was executed on the ONT')
|
|
|
|
log.info("All commands were executed, now disconnecting...")
|
|
sshc.close # close the connection.
|
|
|
|
def firstRun(): # Methods to run when starting the script initially.
|
|
log.debug("firstRun method started")
|
|
log.info("--iptables-deploy for Brazos WiFi ONTs--")
|
|
log.info("Co-authored by iRaven and IDeletedSystem64.")
|
|
downloadLatestCommands() # Do this at first run
|
|
commandList() # Break all the commands into a list
|
|
healthcheck() # Run the health check for the first time
|
|
main() # Start the loop.
|
|
|
|
def main(): # Main method to be looped.
|
|
while True:
|
|
healthcheck() # Run the health check
|
|
if healthstatus != "ok":
|
|
log.info("ONT is not responding- Waiting for a response, then deploying iptables commands!")
|
|
healthpassing = False
|
|
while healthpassing == False:
|
|
log.info("Checking for a response (pinging "+cfg["server"]+")...")
|
|
healthcheck()
|
|
if healthstatus == "ok":
|
|
log.warning("ONT responded after a fail, deploying payload!")
|
|
healthpassing == True
|
|
time.sleep(10) # Wait 10 seconds for the ONT to fully boot up and start sshd.
|
|
deploy()
|
|
log.info("ONT payload was deployed, resuming normal operations.")
|
|
break
|
|
else:
|
|
log.info("Got a response, the ONT is running and healthy.")
|
|
log.info("Trying again in " + cfg["chkinterval"] + " seconds.")
|
|
time.sleep(int(cfg["chkinterval"])) # we will run this loop every X seconds, defined by checkinterval
|
|
|
|
firstRun() |