From 528ec8dbab5cb14aa8f41c1b84abefcdff59fecb Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Tue, 27 Nov 2007 20:28:36 +0000 Subject: [PATCH] * Download bogons entries from pfsense.com * Do not update on every minute on the 1st of the month * Sleep for a random period before updating to avoid killing the server --- cf/conf/config.xml | 2 +- conf.default/config.xml | 2 +- etc/rc.update_bogons.sh | 12 +++++++++++- 3 files changed, 13 insertions(+), 3 deletions(-) diff --git a/cf/conf/config.xml b/cf/conf/config.xml index eb008cb4ef..fafa419ac3 100644 --- a/cf/conf/config.xml +++ b/cf/conf/config.xml @@ -554,7 +554,7 @@ 1 - * + 1 1 * * diff --git a/conf.default/config.xml b/conf.default/config.xml index 90b396d2b4..9b133d4de9 100644 --- a/conf.default/config.xml +++ b/conf.default/config.xml @@ -545,7 +545,7 @@ 1 - * + 1 1 * * diff --git a/etc/rc.update_bogons.sh b/etc/rc.update_bogons.sh index 562c79b7eb..d94fd9a1ca 100755 --- a/etc/rc.update_bogons.sh +++ b/etc/rc.update_bogons.sh @@ -4,8 +4,18 @@ # Part of the pfSense project # www.pfsense.com +# Grab a random value between 0-999. +value=$RANDOM +while [ $value -gt 999 ] ; do + value=$RANDOM +done + +# Sleep for that time. +sleep $value + /etc/rc.conf_mount_rw -/usr/bin/fetch -q -o /tmp/bogons "http://www.cymru.com/Documents/bogon-bn-nonagg.txt" +/usr/bin/fetch -q -o /tmp/bogons "http://www.pfsense.com/mirrors/bogon-bn-nonagg.txt" egrep -v "^192.168.0.0/16|^172.16.0.0/12|^10.0.0.0/8" /tmp/bogons > /etc/bogons /etc/rc.conf_mount_ro /sbin/pfctl -t bogons -T replace -f /etc/bogons +