update 2026-05-10 09:48:30

luci-app-parentcontrol/root/etc/config/parentcontrol

@@ -0,0 +1,54 @@
+config basic
+	option algos 'kmp'
+	option control_mode '0'
+	option enabled '0'
+
+config weburl
+	option word 'baidu'
+	option timestart '00:00'
+	option timeend '00:00'
+	option week '*'
+	option enable '0'
+
+config weburl
+	option timestart '00:00'
+	option timeend '00:00'
+	option word 'youtube'
+	option week '1,2,3,4,5'
+	option enable '0'
+
+config protocol
+	option proto 'tcp'
+	option timestart '00:00'
+	option week '*'
+	option timeend '23:00'
+	option portd '80'
+	option enable '0'
+
+config protocol
+	option proto 'tcp'
+	option timestart '00:00'
+	option week '*'
+	option portd '443'
+	option timeend '23:00'
+	option enable '0'
+
+config protocol
+	option proto 'tcp'
+	option timestart '00:00'
+	option timeend '00:00'
+	option week '1,2,3,4,5'
+	option enable '0'
+
+config time
+	option timestart '00:00'
+	option week '*'
+	option timeend '23:59'
+	option enable '0'
+
+config time
+	option timestart '00:00'
+	option enable '0'
+	option week '1,2,3,4,5'
+	option timeend '23:59'
+

luci-app-parentcontrol/root/etc/hotplug.d/iface/97-parentcontrol

@@ -0,0 +1,7 @@
+#!/bin/sh
+CONFIG=parentcontrol
+
+[ "$ACTION" = ifup ] || exit 0
+[ "$(`uci -q get $CONFIG.@basic[0].enabled`)" == 1 ] || exit 0
+/etc/init.d/parentcontrol start
+

luci-app-parentcontrol/root/etc/init.d/parentcontrol

@@ -0,0 +1,155 @@
+#!/bin/sh /etc/rc.common
+# sirpdboy at 2021-2023 , <herboy2008@gmail.com>
+
+DIR="$(cd "$(dirname "$0")" && pwd)"
+MY_PATH=$DIR/iptables.sh
+START=98
+
+CONFIG=parentcontrol
+LOG_FILE=/tmp/log/$CONFIG.log
+LOCK_DIR=/tmp/lock
+LOCK=/tmp/lock/${CONFIG}.lock
+ipt=$(command -v iptables-legacy || command -v iptables)
+ipt6=$(command -v ip6tables-legacy || command -v ip6tables)
+
+TAG="PARENTCONTROL_TIME" 
+TAGP="PARENTCONTROL_PROTOCOL" 
+TAGW="PARENTCONTROL_WEBURL" 
+FWI="/var/etc/$CONFIG.include"
+elog() {
+	local d="$(date "+%Y-%m-%d %H:%M:%S")"
+	echo -e "$d: $*" >>$LOG_FILE
+}
+
+clean_log() {
+	[ `cat $LOG_FILE  | wc -l ` -gt 500 ] && {
+		elog "clear log ."
+	}
+}
+
+
+
+set_rules() {
+mmode=$1
+   case $mmode in
+    time)
+	  controlmode=`uci -q get $CONFIG.@basic[0].control_mode`
+	  [ "x$controlmode" == 'x1' ] && chain=INPUT || chain=FORWARD
+          for ip in "$ipt" "$ipt6" ; do
+                  $ip -N $TAG 2>/dev/null || $i -F $TAG 2>/dev/null 
+                  $ip -C $chain -j  $TAG 2>/dev/null ||  $ip -I $chain -j  $TAG 2>/dev/null
+	  done
+    ;;
+    protocol)
+       chain=FORWARD
+       for ip in "$ipt" "$ipt6" ; do
+                  $ip -N $TAGP 2>/dev/null || $i -F $TAGP 2>/dev/null 
+                  $ip -C $chain -j  $TAGP 2>/dev/null ||  $ip -I $chain -j  $TAGP 2>/dev/null
+      done
+    
+    ;;
+    weburl)
+      chain=OUTPUT
+      algos=`uci -q get $CONFIG.@basic[0].algos` 
+      for ip in "$ipt" "$ipt6" ; do
+                  $ip -N $TAGW 2>/dev/null || $i -F $TAGW 2>/dev/null 
+                  $ip -C $chain -j  $TAGW 2>/dev/null ||  $ip -I $chain -j  $TAGW 2>/dev/null
+      done
+    
+    ;;
+esac  
+idlist=`uci show $CONFIG | grep "enable='1'" | grep "$mmode" | grep -oE '\[.*?\]' | grep -o '[0-9]'`
+for i in $idlist ;do
+    mac=$(uci -q get $CONFIG.@$mmode[$i].mac ) && MAC="-m mac --mac-source $mac" || MAC=""
+    timestart=$(uci -q get $CONFIG.@$mmode[$i].timestart ) || timestart="00:00"
+    timeend=$(uci -q get $CONFIG.@$mmode[$i].timeend) ||  timeend="00:00"
+    wweek=$(uci -q get $CONFIG.@$mmode[$i].week )  || wweek='*'
+    local Z1,Z2,Z3,Z4,Z5,Z6,Z7=0,0,0,0,0,0,0
+    for ww in `echo $wweek | sed 's/,/ /g' `; do 
+        [ "$ww" == "1" ] && Z1="Mon,"
+        [ "$ww" == "2" ] && Z2="Tue,"
+        [ "$ww" == "3" ] && Z3="Wed," 
+        [ "$ww" == "4" ] && Z4="Thu," 
+        [ "$ww" == "5" ] && Z5="Fri,"
+        [ "$ww" == "6" ] && Z6="Sat," 
+        [ "$ww" == "7" ] && Z7="Sun"
+    done
+    [ -z "$timestart" -o -z "$timeend" -o "$timestart" = "$timeend" ] && TIME="" || TIME="--timestart ${timestart} --timestop ${timeend}"
+    [ -z "$wweek" -o "x$wweek" = "x*" ] && WEEK="" || WEEK="--weekdays $Z1$Z2$Z3$Z4$Z5$Z6$Z7"
+    [ -n "$TIME" -o -n "$WEEK" ] && WT="-m time --kerneltz ${TIME} ${WEEK}" || WT=""
+   case $mmode in
+    time)
+          for pt in "$ipt" "$ipt6" ; do
+		$pt -I $TAG ${MAC} ${WT} -j REJECT 2>/dev/null 
+		elog "$mmode:$pt -- ${MAC} -- ${WT}  "
+	done
+    ;;
+    protocol)
+        proto=$(uci -q get $CONFIG.@$mmode[$i].proto ) || proto="tcp"
+	ports=$(uci -q get $CONFIG.@$mmode[$i].ports ) && SPO="--sport ${ports}" || SPO=""
+	portd=$(uci -q get $CONFIG.@$mmode[$i].portd ) && DPO="--dport ${portd}" || DPO=""
+	mMPT=`echo "$ports"|grep ","` && mSPO="-m multiport" || mSPO=""
+	mMPT=`echo "$portd"|grep ","` && mDPO="-m multiport" || mDPO=""
+	[ -z "$ports" -a -z "$portd" ] && PTO="" || PTO="-p ${proto} ${mSPO} ${SPO} ${mDPO} ${DPO}"
+        for pt in "$ipt" "$ipt6" ; do
+		$pt -I $TAGP ${MAC} ${WT} ${PTO} -j REJECT 2>/dev/null 
+		elog "$mmode: $pt -- ${MAC} -- ${WT} -- ${PTO}"
+	done
+    ;;
+    weburl)
+	word=$(uci -q get $CONFIG.@$mmode[$i].word ) && STR="-m string --algo ${algos} --string ${word}" || STR=""
+	word2=$(uci -q get $CONFIG.@$mmode[$i].word ) && STR2="-m string --algo ${algos} --hex-string ${word2}" || STR2=""
+          for pt in "$ipt" "$ipt6" ; do
+		$pt -I $TAGW -p UDP --dport 53 ${MAC} ${WT} ${STR} -j DROP 2>/dev/null
+		$pt -I $TAGW -p UDP --dport 53 ${MAC} ${WT} ${STR2} -j DROP 2>/dev/null
+		$pt -I $TAGW -p TCP --dport 853 ${MAC} ${WT} ${STR} -j DROP 2>/dev/null
+		$pt -I $TAGW -p TCP --dport 853 ${MAC} ${WT} ${STR2} -j DROP 2>/dev/null
+		elog "$mmode: $pt -- ${MAC} -- ${WT} -- ${STR}"
+	  done
+    ;; 
+    *) ;;
+   esac
+   unset STR MAC WT PTO
+done
+}
+
+flush_include() {
+	echo '#!/bin/sh' >$FWI
+}
+
+del_rule() {
+  for ip in "$ipt" "$ipt6" ; do
+      for ta in "$TAG" "$TAGW" "$TAGP" ; do
+	 for chain in "PREROUTING" "FORWARD" "OUTPUT" "INPUT" ; do
+	     	$ip -D  $chain -j $ta 2>/dev/null
+		
+		# elog "delrule: $ip -- $ta -- ${chain} "
+	 done
+	 $ip -F $ta 2>/dev/null
+	 $ip -X $ta 2>/dev/null
+      done
+  done
+}
+
+start(){
+     [ -f $LOCK ] && exit 1
+     del_rule
+     enabled=`uci -q get $CONFIG.@basic[0].enabled`
+     [ "x$enabled" == "x1" ] || exit 1
+     allsum=`grep -c 'enable .1.' /etc/config/$CONFIG`
+     [ "$allsum" -gt 0 ] && {
+        touch $LOCK
+        set_rules time
+	set_rules protocol
+	set_rules weburl
+    }
+     clean_log 
+     rm -f $LOCK  2>/dev/null
+}
+
+stop(){
+     del_rule
+     rm -f $LOCK  2>/dev/null
+}
+
+

luci-app-parentcontrol/root/etc/parentcontrol.include

@@ -0,0 +1,2 @@
+/etc/init.d/parentcontrol start
+

luci-app-parentcontrol/root/etc/parentcontrol/black.list

@@ -0,0 +1,3 @@
+baidu
+163.com
+

luci-app-parentcontrol/root/etc/parentcontrol/white.list

@@ -0,0 +1 @@
+baidu.com

luci-app-parentcontrol/root/etc/uci-defaults/luci-app-parentcontrol

@@ -0,0 +1,19 @@
+#!/bin/sh
+
+[ -e "/etc/config/ucitrack" ] && {
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@parentcontrol[-1]
+	add ucitrack parentcontrol
+	set ucitrack.@parentcontrol[-1].init=parentcontrol
+	commit ucitrack
+EOF
+}
+
+uci -q delete firewall.parentcontrol
+uci -q set firewall.parentcontrol=include
+uci -q set firewall.parentcontrol.type=script
+uci -q set firewall.parentcontrol.path=/etc/parentcontrol.include
+uci -q set firewall.parentcontrol.reload=1
+uci commit firewall
+rm -f /tmp/luci-indexcache
+exit 0

luci-app-parentcontrol/root/usr/share/rpcd/acl.d/luci-app-parentcontrol.json

@@ -0,0 +1,11 @@
+{
+	"luci-app-parentcontrol": {
+		"description": "Grant UCI access for luci-app-parentcontrol",
+		"read": {
+			"uci": [ "parentcontrol" ]
+		},
+		"write": {
+			"uci": [ "parentcontrol" ]
+		}
+	}
+}

luci-app-parentcontrol/root/usr/share/ucitrack/luci-app-parentcontrol.json

@@ -0,0 +1,4 @@
+{
+	"config": "parentcontrol",
+	"init": "parentcontrol"
+}