automated DNS-based routing

scripts/opt_bin/apply_unblock_rules.sh

@@ -0,0 +1,14 @@
+#!/opt/bin/sh
+
+set -o xtrace
+export PATH=/opt/sbin:/opt/bin:/opt/usr/sbin:/opt/usr/bin:/usr/sbin:/usr/bin:/sbin:/bin
+export HOME=/opt/root
+
+ssh -i /opt/root/.ssg/id_dropbear dns@fb.megavenik.ru "dig a api.themoviedb.org +short" < /dev/zero | awk '/^[0-9]/{print "address=/api.themoviedb.org/"$1}' > /opt/etc/dnsmasq.themoviedb.conf
+echo "address=/api.themoviedb.org/::" >> /opt/etc/dnsmasq.themoviedb.conf
+ssh -i /opt/root/.ssh/id_dropbear dns@fb.megavenik.ru "dig a image.tmdb.org +short" < /dev/zero | awk '/^[0-9]/{print "address=/image.tmdb.org/"$1}' >> /opt/etc/dnsmasq.themoviedb.conf
+echo "address=/image.tmdb.org/::" >> /opt/etc/dnsmasq.themoviedb.conf
+/opt/bin/unblock_dnsmasq.sh
+/opt/etc/init.d/S56dnsmasq restart
+/opt/bin/unblock_ipset.sh
+

scripts/opt_bin/unblock_dnsmasq.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+
+cat /dev/null > /opt/etc/unblock.dnsmasq
+
+while read line || [ -n "$line" ]; do
+
+  [ -z "$line" ] && continue
+  [ "${line:0:1}" = "#" ] && continue
+
+  echo $line | grep -Eq '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' && continue
+
+  echo "ipset=/$line/unblock" >> /opt/etc/unblock.dnsmasq
+
+done < /opt/etc/unblock.txt

scripts/opt_bin/unblock_ipset.sh

@@ -0,0 +1,33 @@
+#!/bin/sh
+
+until ADDRS=$(dig +short google.com @localhost) && [ -n "$ADDRS" ] > /dev/null 2>&1; do sleep 5; done
+
+while read line || [ -n "$line" ]; do
+
+  [ -z "$line" ] && continue
+  [ "${line:0:1}" = "#" ] && continue
+
+  cidr=$(echo $line | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/[0-9]{1,2}')
+
+  if [ ! -z "$cidr" ]; then
+    ipset -exist add unblock $cidr
+    continue
+  fi
+
+  range=$(echo $line | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}-[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}')
+
+  if [ ! -z "$range" ]; then
+    ipset -exist add unblock $range
+    continue
+  fi
+
+  addr=$(echo $line | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}')
+
+  if [ ! -z "$addr" ]; then
+    ipset -exist add unblock $addr
+    continue
+  fi
+
+  dig +short $line @localhost | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' | awk '{system("ipset -exist add unblock "$1)}'
+
+done < /opt/etc/unblock.txt

scripts/opt_etc/unblock.txt

@@ -0,0 +1,171 @@
+###Торрент-трекеры
+rutracker.org
+rutracker.cc
+bt4.t-ru.org
+rutor.info
+rutor.is
+mega-tor.org
+kinozal.tv
+nnm-club.me
+nnm-club.ws
+tfile.me
+tfile-home.org
+tfile1.cc
+megatfile.cc
+megapeer.org
+megapeer.ru
+tapochek.net
+tparser.org
+tparser.me
+rustorka.com
+uniongang.tv
+fast-torrent.ru
+1337x.to
+1337x.ws
+1337x.so
+1337x.st
+1337x.se
+1337x.eu
+nnm-club.to
+nnmclub.to
+gofile.io
+
+
+###Каталоги медиаконтента для программ
+rezka.ag
+hdrezka.ag
+hdrezka.me
+filmix.co
+filmix.cc
+seasonvar.ru
+api.themoviedb.org
+www.themoviedb.org
+image.tmdb.org
+cdn.syncfusion.com
+help.syncfusion.com
+radarr.video
+image.tmdb.org
+prowlarr.com
+prowlarr.servarr.com
+#kinopub
+6786.dpr.ovh
+kino.pub
+mos-gorsud.org
+xszt.sfm.ovh
+cdntogo.net
+cdn.service-kp.com
+api.srvkp.com
+3ds.customfw.xyz
+
+www.gamedev.tv
+api.gamedev.tv
+getoutline.com
+mattermost.com
+mattermost.uservoice.com
+cdn.srvkp.com
+play.google.com
+quora.com
+www.quora.com
+www.coursera.org
+
+###Книги
+lib.rus.ec
+flibusta.is
+flibs.me
+flisland.net
+flibusta.site
+
+###Сайтики
+medium.com
+hashicorp.com
+drawio.com
+all3dp.com
+paperpaper.io
+
+## onshape.com
+cad.onshape.com
+forum.onshape.com
+cad-euw1.onshape.com
+www.zuora.com
+
+###Порно
+fakku.net
+pornhub.com
+ei.phncdn.com
+ev-h.phncdn.com
+ev.phncdn.com
+pornolab.net
+plab.site
+
+###Социалки
+facebook.com
+instagram.com
+cdninstagram.com
+cdnfacebook.com
+facebook.net
+i.ytimg.com
+ads-twitter.com
+mobile.twitter.com
+static.ads-twitter.com
+twitter.com
+api.twitter.com
+t.co
+twimg.com
+abs.twimg.com
+104.244.40.0/21
+147.75.208.0/20
+185.89.216.0/22
+31.13.24.0/21
+31.13.64.0/18
+45.64.40.0/22
+66.220.144.0/20
+69.63.176.0/20
+69.171.224.0/19
+74.119.76.0/22
+102.132.96.0/20
+103.4.96.0/22
+129.134.0.0/16
+157.240.0.0/16
+163.70.128.0/17
+163.77.128.0/17
+173.252.64.0/18
+179.60.192.0/22
+185.60.216.0/22
+204.15.20.0/22
+93.184.220.0/22
+192.229.128.0/17
+69.195.160.0/19
+
+###Телеграм
+#telegram.org
+#tdesktop.com
+#tdesktop.org
+#tdesktop.info
+#tdesktop.net
+#telesco.pe
+#telegram.dog
+#telegram.me
+#t.me
+#telegra.ph
+#web.telegram.org
+#desktop.telegram.org
+#updates.tdesktop.com
+#venus.web.telegram.org
+#flora.web.telegram.org
+#vesta.web.telegram.org
+#pluto.web.telegram.org
+#aurora.web.telegram.org
+#149.154.160.0/20
+#91.108.4.0/22
+#91.108.8.0/22
+#91.108.12.0/22
+#91.108.16.0/22
+#91.108.56.0/22
+#109.239.140.0/24
+#67.198.55.0/24
+
+###Разное
+7-zip.org
+edem.tv
+4pna.com
+2019.vote