f61bc59446
- commands/block/: block.sh, show.sh, helpers.sh - commands/unblock/: unblock.sh, show.sh, helpers.sh - flag::define array type: --ip[], --subnet[], --port[], --service[] - help.sh: use pre-cached _FLAG_C_* arrays instead of flag::_parse_constraints - remove flag::_parse_constraints/flag::_constraint_get calls from help.sh - adopt local var; var=value pattern for safe assignment
54 lines
No EOL
2.4 KiB
Bash
54 lines
No EOL
2.4 KiB
Bash
#!/usr/bin/env bash
|
|
# commands/block/show.sh
|
|
|
|
function cmd::block::show::on_load() {
|
|
help::section "Target"
|
|
flag::define --name value "Peer name to block" [label="name", section="Target"]
|
|
flag::define --identity value "Block all peers in identity" [label="identity", section="Target"]
|
|
flag::define --type value "Filter by device type" [label="type", section="Target"]
|
|
|
|
help::section "Rules"
|
|
flag::define --ip[] "Block specific IP" [label="ip", section="Rules"]
|
|
flag::define --subnet[] "Block specific subnet" [label="subnet", section="Rules"]
|
|
flag::define --port[] "Block specific port (ip:port:proto)" [label="port",section="Rules"]
|
|
flag::define --service[] "Block by service name" [label="service", section="Rules"]
|
|
flag::define --block-name value "Label for this block rule" [label="name", section="Rules"]
|
|
|
|
help::section "Options"
|
|
flag::define --reason value "Reason for block (recorded in history)" [label="reason", section="Options"]
|
|
flag::define --force bool "Skip confirmation" [section="Options"]
|
|
flag::define --quiet bool "Suppress output" [section="Options"]
|
|
|
|
flag::exclusive --name --identity
|
|
}
|
|
|
|
function cmd::block::show::run() {
|
|
flag::parse "$@" || return 1
|
|
|
|
local name; name=$(flag::value --name)
|
|
local identity; identity=$(flag::value --identity)
|
|
local type; type=$(flag::value --type)
|
|
local block_name; block_name=$(flag::value --block-name)
|
|
local reason; reason=$(flag::value --reason)
|
|
local quiet=false force=false
|
|
flag::bool --quiet && quiet=true
|
|
flag::bool --force && force=true
|
|
|
|
# Array flags
|
|
local -a ips=() subnets=() ports=() services=()
|
|
while IFS= read -r v; do [[ -n "$v" ]] && ips+=("$v"); done < <(flag::array --ip)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && subnets+=("$v"); done < <(flag::array --subnet)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && ports+=("$v"); done < <(flag::array --port)
|
|
while IFS= read -r v; do [[ -n "$v" ]] && services+=("$v"); done < <(flag::array --service)
|
|
|
|
# Require --name or --identity
|
|
if [[ -z "$name" && -z "$identity" ]]; then
|
|
log::error "Missing required flag: --name or --identity"
|
|
return 1
|
|
fi
|
|
|
|
cmd::block::_impl \
|
|
"$name" "$identity" "$type" "$block_name" "$reason" \
|
|
"$quiet" "$force" \
|
|
ips subnets ports services
|
|
} |