solene
/
iblock
2
2
Fork 1
Code Issues Pull Requests 1 Projects Releases Wiki Activity

Enable blocking as root, ipv4 only

This commit is contained in:
Solene Rapenne 2021-02-28 14:07:01 +01:00
parent a6e23e761b
commit 629d57262a
1 changed files with 1 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
main.c
View File

@ -12,10 +12,8 @@ int main(void){
socklen_t slen = sizeof(sock);
char host[1024] = "";
char port[1044] = "";
char cmd[1000] = "";
int status;
unveil("/usr/bin/doas", "rx");
unveil("/sbin/pfctl", "rx");
pledge("exec inet dns stdio", NULL);
@ -31,13 +29,10 @@ int main(void){
}
syslog(LOG_DAEMON, "blocking %s", host);
snprintf(cmd, sizeof(cmd), "/sbin/pfctl -t blocked -T add %s", host);
syslog(LOG_DAEMON, "%s", cmd);
switch(sock. sa_family)
{
case AF_INET:
execlp(cmd, cmd, NULL);
execlp("/sbin/pfctl", "pfctl", "-t", "blocked", "-T", "add", host, NULL);
break;
// case AF_INET6:
// printf("%s %s\n", host, cmd);