groove/routeros-scripts-main
1
0
Fork 0
mirror of https://github.com/eworm-de/routeros-scripts.git synced 2026-03-04 13:09:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fw-addr-lists: normalize the address in list

Browse source
This commit is contained in:
Christian Hesse 2025-10-15 10:47:56 +02:00
parent 6630d35eea
commit 23c330ef88
1 changed files with 31 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

37
fw-addr-lists.rsc
View file

@ -21,11 +21,12 @@
:global CertificateAvailable;
:global EitherOr;
:global FetchHuge;
:global GetRandom20CharAlNum;
:global HumanReadableNum;
:global IfThenElse;
:global LogPrint;
:global LogPrintOnce;
:global LogPrintVerbose;
:global MIN;
:global ScriptLock;
:global WaitFullyConnected;
@ -56,6 +57,25 @@
}
:local ListComment ("managed by " . $ScriptName);
:local GenList ($ScriptName . "-" . [ $GetRandom20CharAlNum ]);
:for I from=0 to=31 do={
/ip/firewall/address-list/add dynamic=yes timeout=30s list=$GenList address=("255.255.255.255/" . $I) comment=$I;
}
:local Maskv4 ({ "32"=255.255.255.255 });
:foreach AddressList in=[ /ip/firewall/address-list/find where list=$GenList ] do={
:local Address [ /ip/firewall/address-list/get $AddressList ];
:set ($Maskv4->($Address->"comment")) [ :toip [ :pick ($Address->"address") 0 [ :find ($Address->"address") "/" ] ] ];
}
:for I from=0 to=127 do={
/ipv6/firewall/address-list/add dynamic=yes timeout=30s list=$GenList address=("ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/" . $I) comment=$I;
}
:local Maskv6 ({ "128"=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff });
:foreach AddressList in=[ /ipv6/firewall/address-list/find where list=$GenList ] do={
:local Address [ /ipv6/firewall/address-list/get $AddressList ];
:set ($Maskv6->($Address->"comment")) [ :toip6 [ :pick ($Address->"address") 0 [ :find ($Address->"address") "/" ] ] ];
}
:foreach FwListName,FwList in=$FwAddrLists do={
:local CntAdd 0;
@ -114,8 +134,13 @@
:do {
:local Branch;
:if ($Address ~ "^[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}(/[0-9]{1,2})?\$") do={
:if ($Address ~ "/32\$") do={
:set Address [ :pick $Address 0 ([ :len $Address ] - 3) ];
:local Net $Address;
:local Cidr "32";
:local Slash [ :find $Address "/" ];
:if ([ :typeof $Slash ] = "num") do={
:set Net [ :toip [ :pick $Address 0 $Slash ] ]
:set Cidr [ :pick $Address ($Slash + 1) [ :len $Address ] ];
:set Address [ :tostr (([ :toip $Net ] & ($Maskv4->$Cidr)) . [ $IfThenElse ($Cidr < 32) ("/" . $Cidr) ]) ];
}
:set Branch [ $GetBranch $Address ];
:set ($IPv4Addresses->$Branch->$Address) $TimeOut;
@ -123,13 +148,13 @@
}
:if ($Address ~ "^[0-9a-zA-Z]*:[0-9a-zA-Z:\\.]+(/[0-9]{1,3})?\$") do={
:local Net $Address;
:local Cidr 64;
:local Cidr "128";
:local Slash [ :find $Address "/" ];
:if ([ :typeof $Slash ] = "num") do={
:set Net [ :toip6 [ :pick $Address 0 $Slash ] ]
:set Cidr [ $MIN [ :pick $Address ($Slash + 1) [ :len $Address ] ] 64 ];
:set Cidr [ :pick $Address ($Slash + 1) [ :len $Address ] ];
}
:set Address (([ :toip6 $Net ] & ffff:ffff:ffff:ffff::) . "/" . $Cidr);
:set Address (([ :toip6 $Net ] & ($Maskv6->$Cidr)) . "/" . $Cidr);
:set Branch [ $GetBranch $Address ];
:set ($IPv6Addresses->$Branch->$Address) $TimeOut;
:error true;