Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

2026-01-17T07:12:39Z

Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

← Older revision		Revision as of 07:12, 17 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

			'''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]'''''


	== sync-snort2c-tables.sh ==		== sync-snort2c-tables.sh ==

Admin at 17:01, 20 December 2025

2025-12-20T17:01:40Z

← Older revision		Revision as of 17:01, 20 December 2025
Line 4:		Line 4:

	<pre>		<pre>
	#!~~/usr~~/bin/~~env~~ bash		#!/bin/bash

	# ==============================		# ==============================
Line 71:		Line 71:

	echo "[✓] Injection completed successfully."		echo "[✓] Injection completed successfully."

	~~# ==============================~~
	~~# Cleanup (optional)~~
	~~# ==============================~~

	~~# rm -rf "${WORKDIR}"~~
	</pre>		</pre>

Admin: Created page with "Category:Wiki == sync-snort2c-tables.sh ==

 #!/usr/bin/env bash  # ============================== # User-defined variables # ==============================  # Space-separated list of source pfSense IPs IP_SOURCE_PFSENSE="1.2.3.4 5.6.7.8"  # Destination pfSense IP IP_DESTINATION_PFSENSE="10.11.12.13"  # SSH user (usually root on pfSense) SSH_USER="root"  # Name of the PF table created/managed by snort2c PF_TABLE_NAME="snort2c_blacklist"  # Temporary working di..."

2025-12-20T17:01:08Z

Created page with "Category:Wiki == sync-snort2c-tables.sh == <pre> #!/usr/bin/env bash # ============================== # User-defined variables # ============================== # Space-separated list of source pfSense IPs IP_SOURCE_PFSENSE="1.2.3.4 5.6.7.8" # Destination pfSense IP IP_DESTINATION_PFSENSE="10.11.12.13" # SSH user (usually root on pfSense) SSH_USER="root" # Name of the PF table created/managed by snort2c PF_TABLE_NAME="snort2c_blacklist" # Temporary working di..."

New page

[[Category:Wiki]]

== sync-snort2c-tables.sh ==

<pre>
#!/usr/bin/env bash

# ==============================
# User-defined variables
# ==============================

# Space-separated list of source pfSense IPs
IP_SOURCE_PFSENSE="1.2.3.4 5.6.7.8"

# Destination pfSense IP
IP_DESTINATION_PFSENSE="10.11.12.13"

# SSH user (usually root on pfSense)
SSH_USER="root"

# Name of the PF table created/managed by snort2c
PF_TABLE_NAME="snort2c_blacklist"

# Temporary working directory
WORKDIR="/tmp/snort2c_merge"
MERGED_FILE="${WORKDIR}/merged_ips.txt"

# ==============================
# Safety checks
# ==============================

set -euo pipefail

mkdir -p "${WORKDIR}"
> "${MERGED_FILE}"

# ==============================
# Fetch IPs from source pfSense
# ==============================

echo "[*] Fetching IP lists from source pfSense firewalls..."

for SRC_IP in ${IP_SOURCE_PFSENSE}; do
echo " - Connecting to ${SRC_IP}"

ssh "${SSH_USER}@${SRC_IP}" \
"pfctl -t ${PF_TABLE_NAME} -T show" \
>> "${MERGED_FILE}"
done

# ==============================
# Merge and deduplicate
# ==============================

echo "[*] Merging and deduplicating IPs..."

sort -u "${MERGED_FILE}" -o "${MERGED_FILE}"

IP_COUNT=$(wc -l < "${MERGED_FILE}")
echo " -> Total unique IPs: ${IP_COUNT}"

# ==============================
# Inject into destination pfSense
# ==============================

echo "[*] Injecting merged list into destination pfSense (${IP_DESTINATION_PFSENSE})..."

ssh "${SSH_USER}@${IP_DESTINATION_PFSENSE}" \
"pfctl -t ${PF_TABLE_NAME} -T replace -f -" \
< "${MERGED_FILE}"

echo "[✓] Injection completed successfully."

# ==============================
# Cleanup (optional)
# ==============================

# rm -rf "${WORKDIR}"
</pre>

BASH - sync-snort2c-tables.sh - Revision history

Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

Admin at 17:01, 20 December 2025