unblock_ip.sh

#!/bin/sh
#VERSION=1.0

BF=/root/blocked_ips.txt

# This is the default chain where shorewall puts it's manual entries
BLOCK_CHAIN=dynamic

if [ "$ip" = "" ]; then
        echo "Usage:";
        echo "  $0 1.2.3.4";
        exit 1;
fi

VALID4=`ip -4 route get $ip > /dev/null 2>&1`
RET4=$?
VALID6=`ip -6 route get $ip > /dev/null 2>&1`
RET6=$?

if [ $RET4 == "0" ]
then
	IPVERSION="ipv4"
elif [ $RET6 == "0" ]
then
	IPVERSION="ipv6"
else
	IPVERSION="0"
fi

if [ ! -e "$BF" ]; then
        echo "cannot find $BF to unblock the IP";
        exit 2;
fi

COUNT=`grep -c "^$ip=" $BF`;

if [ "$COUNT" -eq 0 ]; then
        echo "$1 was not in $BF. Not unblocking";
        exit 2;
fi

#unblock.
echo "Unblocking $ip ...";

cat $BF | grep -v "^$ip=" > $BF.temp
mv $BF.temp $BF
chmod 600 $BF

if [ $IPVERSION == "ipv6" ]
then
	/usr/sbin/shorewall6 allow $ip
elif [ $IPVERSION == "ipv4" ]
then
	/usr/sbin/shorewall allow $ip
else
	echo "$ip is not valid. Not blocking.";
	curriptables
	exit 2;
fi

exit 0;