#! /bin/bash

# Author:  Zilvinas Verseckas
# Company: Kolmisoft
# Year:    2016
# About:   Script installs the Blocked Countries functionality

. /usr/src/m2/framework/bash_functions.sh

VERSION="1.2.0"
SCRIPT_NAME="iptables: Blocked Countries install"

DIR="/usr/src/m2"
SCRIPTS_DIR="/usr/local/m2"
# County codes taken from: http://www.nationsonline.org/oneworld/country_code_list.htm on the 24th of October 2016. Format: iso3166code-iso31661code
COUNTRIES="AD-020 AE-784 AF-004 AG-028 AI-660 AL-008 AM-051 AN-530 AO-024 AQ-010 AR-032 AS-016 AT-040 AU-036 AW-533 AX-248 AZ-031 BA-070 BB-052 BD-050 BE-056 BF-854 BG-100 BH-048 BI-108 BJ-204 BL-652 BM-060 BN-096 BO-068 BR-076 BS-044 BT-064 BV-074 BW-072 BY-112 BZ-084 CA-124 CC-166 CD-180 CF-140 CG-178 CH-756 CI-384 CK-184 CL-152 CM-120 CN-156 CO-170 CR-188 CU-192 CV-132 CX-162 CY-196 CZ-203 DE-276 DJ-262 DK-208 DM-212 DO-214 DZ-012 EC-218 EE-233 EG-818 EH-732 ER-232 ES-724 ET-231 FI-246 FJ-242 FK-238 FM-583 FO-234 FR-250 GA-266 GB-826 GD-308 GE-268 GF-254 GG-831 GH-288 GI-292 GL-304 GM-270 GN-324 GP-312 GQ-226 GR-300 GS-239 GT-320 GU-316 GW-624 GY-328 HK-344 HM-334 HN-340 HR-191 HT-332 HU-348 ID-360 IE-372 IL-376 IM-833 IN-356 IO-086 IQ-368 IR-364 IS-352 IT-380 JE-832 JM-388 JO-400 JP-392 KE-404 KG-417 KH-116 KI-296 KM-174 KN-659 KP-408 KR-410 KW-414 KY-136 KZ-398 LA-418 LB-422 LC-662 LI-438 LK-144 LR-430 LS-426 LT-440 LU-442 LV-428 LY-434 MA-504 MC-492 MD-498 ME-499 MF-663 MG-450 MH-584 MK-807 ML-466 MM-104 MN-496 MO-446 MP-580 MQ-474 MR-478 MS-500 MT-470 MU-480 MV-462 MW-454 MX-484 MY-458 MZ-508 NA-516 NC-540 NE-562 NF-574 NG-566 NI-558 NL-528 NO-578 NP-524 NR-520 NU-570 NZ-554 OM-512 PA-591 PE-604 PF-258 PG-598 PH-608 PK-586 PL-616 PM-666 PN-612 PR-630 PS-275 PT-620 PW-585 PY-600 QA-634 RE-638 RO-642 RS-891 RU-643 RW-646 SA-682 SB-090 SC-690 SD-729 SE-752 SG-702 SH-654 SI-705 SJ-744 SK-703 SL-694 SM-674 SN-686 SO-706 SR-740 SS-728 ST-678 SV-222 SY-760 SZ-748 TC-796 TD-148 TF-260 TG-768 TH-764 TJ-762 TK-772 TL-626 TM-795 TN-788 TO-776 TR-792 TT-780 TV-798 TW-158 TZ-834 UA-804 UG-800 UM-581 US-840 UY-858 UZ-860 VA-336 VC-670 VE-862 VG-092 VI-850 VN-704 VU-548 WF-876 WS-882 YE-887 YT-175 ZA-710 ZM-894 ZW-716"

k_start
k_config_details

# Create a directory for ip files
if [ ! -d /usr/local/m2/ip_zones ]; then
    mkdir -p /usr/local/m2/ip_zones
fi

report "Creating cron jobs" 3
cp -f $DIR/helpers/m2_blocked_countries/cronjobs/m2_blocked_countries_update /etc/cron.d/
cp -f $DIR/helpers/m2_blocked_countries/cronjobs/m2_blocked_countries_renew /etc/cron.d/
chmod 0644 /etc/cron.d/m2_blocked_countries_update
chmod 0644 /etc/cron.d/m2_blocked_countries_renew

service crond restart &> /dev/null

# To be sure to install create a table needed for setup. This might be needed when the
# Blocked Countries functionality is installed before the stable release.
MYSQL_PWD="$DB_PASSWORD" /usr/bin/mysql -h "$DB_HOST" -u "$DB_USERNAME" $P_OPT "$DB_NAME" -e "CREATE TABLE IF NOT EXISTS blocked_countries (id INT(11) NOT NULL auto_increment, direction_id INT(11) NOT NULL, state TINYINT(4) DEFAULT 0, PRIMARY KEY (id)) ENGINE=innodb DEFAULT CHARSET=utf8"
MYSQL_PWD="$DB_PASSWORD" /usr/bin/mysql -h "$DB_HOST" -u "$DB_USERNAME" $P_OPT "$DB_NAME" -e "ALTER TABLE directions ADD COLUMN iso3166code VARCHAR(2) NOT NULL DEFAULT '00'" > /dev/null 2>&1

report "Enabling kernel modules for ipset" 3
modprobe -v ip_set
modprobe -v ip_set_hash_netport

if ! lsmod | grep -q ip_set; then
    report "Kernel module ip_set was not loaded. Exiting" 1
    k_exit 1
fi

if ! lsmod | grep -q ip_set_hash_netport; then
    report "Kernel module ip_set_hash_netport was not loaded. Exiting" 1
    k_exit 1
fi

report "Creating data in DB..." 3

for country in ${COUNTRIES}; do
    iso_3166_code=$(echo "$country" | cut -f1 -d-)
    iso_31661_code=$(echo "$country" | cut -f2 -d-)
    MYSQL_PWD="$DB_PASSWORD" /usr/bin/mysql -h "$DB_HOST" -u "$DB_USERNAME" $P_OPT "$DB_NAME" -e "UPDATE directions SET iso3166code='${iso_3166_code}' WHERE iso31661code='${iso_31661_code}'"
    echo -n "."
done
echo "done"

BC_COUNT=$(MYSQL_PWD="$DB_PASSWORD" /usr/bin/mysql -h "$DB_HOST" -u "$DB_USERNAME" $P_OPT "$DB_NAME" -s -N -e "SELECT COUNT(*) FROM blocked_countries")

if [ "$BC_COUNT" ==  "0" ]; then
    MYSQL_PWD="$DB_PASSWORD" /usr/bin/mysql -h "$DB_HOST" -u "$DB_USERNAME" $P_OPT "$DB_NAME" -e "INSERT INTO blocked_countries (direction_id) (SELECT id FROM directions)"
fi

MYSQL_PWD="$DB_PASSWORD" /usr/bin/mysql -h "$DB_HOST" -u "$DB_USERNAME" $P_OPT "$DB_NAME" -e "INSERT IGNORE INTO conflines (name, value) SELECT 'Blocked_Countries_installed', '1' FROM dual WHERE NOT EXISTS (SELECT * FROM conflines WHERE name = 'Blocked_Countries_installed' AND value = '1')"

cp -f $DIR/helpers/m2_blocked_countries/m2_blocked_countries.sh $SCRIPTS_DIR/
chmod 777 $SCRIPTS_DIR/m2_blocked_countries.sh

k_exit $EXIT_CODE