p2partisan 6.00

#!/bin/sh
#
# p2partisan v6.00 (15/07/2015)
#
# Official page - http://www.linksysinfo.org/index.php?posts/235301/
#
# <CONFIGURATION> ###########################################
# Adjust location where the files are kept
P2Partisandir=/cifs1/p2partisan
#
# Enable logging? Use only for troubleshooting. 0=off 1=on
syslogs=1
# Maximum number of logs to be recorded in a given 60 min
# Consider set this very low (like 3 or 6) once your are
# happy with the installation. To troubleshoot blocked
# connection close all the secondary traffic e.g. p2p
# and try a connection to the blocked site/port you should
# find a reference in the logs.
maxloghour=1
#
# Ports to be whitelisted. Whitelisted ports will never be
# blocked no matter what the source/destination IP is.
# This is very important if you're running a service like
# e.g. SMTP/HTTP/IMAP/else. Separate value in the list below
# with commas - NOTE: It is suggested to leave the following ports
# always on as a minimum:
# tcp:43,80,443
# udp:53,123,1194:1196
# you might want to append remote admin and VPN ports, and
# anything else you think it's relevant.
# Standard iptables syntax, individual ports divided by "," and ":" to
# define a range e.g. 80,443,2100:2130. Do not whitelist you P2P client!
whiteports_tcp=80,443,3658,8080
whiteports_udp=53,123,1194:1197,1723,3658
#
# Greyports are port/s you absolutely want to filter against lists.
# Think of an Internet host that has its P2P client set on port 53 UDP.
# If you have the DNS port is in the whiteports_udp then P2Partisan would
# be completely bypassed. Internet-client:53 -> your-client:"P2Pport""
# greyport is in a nutshell a list of port/s used by your LAN P2Pclient/s.
# It's suggested you disable random port on your P2Pclient and add the
# client port/s here. NOTE:
# Accepted syntax: single port, multiple ports and ranges e.g.
# greyports=22008,6789
# the above would grey list 22008 and 6789. Don't know your client port?
# try ./p2partisan.sh detective
greyports_tcp=
greyports_udp=
#
# Greyline is the limit of connections per given "IP:port" above which
# Detective becomes suspicious. NOTE: This counts 1/2 of the sessions the
# router actually reports on because of the NAT implication. So this number
# represents the session as seen on the LAN client. Affects detective only.
greyline=100
#
# Schedule defines the allowed hours when P2Partisan tutor can update lists
# Use the syntax from 0 to 23. e.g. 1,6 allows updates from 1 to 6 am
scheduleupdates="1,6"
#
# Defines how many lists can be loaded concurrently at any given time. Default 2
maxconcurrentlistload=2
#
# Enable check on script availability to help autorun.
# If the ./partisan.sh is remote wait for the file to be available
# instead of quit with a file missing error
autorun_availability_check=1
#
# IP for testing Internet connectivity
testip=8.8.8.8
# </CONFIGURATION> ###########################################

    ipsetversion=`ipset -V | grep ipset | awk '{print $2}' | cut -c2` #4=old 6=new
    if [ $ipsetversion != 6 ]; then
        echo -e "\033[1;31mipset not compatible with this P2Partisan release.
ipset available: $ipsetversion
ipset supported: 6.x\033[0;39m"
    exit
    fi

    # Wait until Internet is available
    while :
    do
            ping -c 3 $testip >/dev/null 2>&1
            if [ $? = 0 ]; then
                    break
            fi
            sleep 5
    done

pidfile="/var/run/p2partisan.pid"
logfile=`nvram get log_file_path` || logfile=`/var/log/messages`
cd $P2Partisandir
version=`head -3 ./p2partisan.sh | tail -1 | cut -f 3- -d " "`
alias ipset='/usr/sbin/ipset'
alias sed='/bin/sed'
alias iptables='/usr/sbin/iptables'
alias service='/sbin/service'
alias killall='/usr/bin/killall'
alias plog='logger -t "| P2PARTISAN" -s'
alias deaggregate='/bin/nice -n10 /tmp/deaggregate.sh'
service ntpc restart >/dev/null
now=`date +%s`
rm=1
wanif=`nvram get wan_ifname` && rm=0 || wanif=`nvram get wan_ifnames`  #RMerlin work around
lanif=`nvram get lan_ifname`

# DHCP hardcoded patch
p1=`echo $whiteports_udp | grep -Eo '^67[,|:]|[,|:]67[,|:]|,67$' | wc -l`
p2=`echo $whiteports_udp | grep -Eo '^68[,|:]|[,|:]68[,|:]|,68$' | wc -l`
if [ $p1 -eq "0" ]; then
        whiteports_udp=${whiteports_udp},67
fi
if [ $p2 -eq "0" ]; then
        whiteports_udp=${whiteports_udp},68
fi

[ -f /tmp/deaggregate.sh ] ||
{

b64="openssl enc -base64 -d"
[[ "$(echo WQ==|$b64)" != "Y" ]] && b64="b64"

{
cat <<'ENDF'| $b64 | gunzip > /tmp/deaggregate.sh
H4sIAA5hmVUCA+1UTW/TQBC976+YuobaxBvHLqWoYSuB+BASAiSOaVBce5OscNeL
vWmjfvx3ZuxNmqRC5YQ4EB/inXkzb+bNePf34nOl42bOWCGz2ayWs8zKIIQb1jq0
yiVwnQwgu/oBB2y60LlVlQZlUqVtoAxBAaZVDUEtrRhEWjSmVOSKssg763thtBTJ
cPlK6OGy1wuBYFUdlM1cTS0FRS/DKBstxyEmwuOi1vTH7tgGnbapMpST8MuOlBJl
uiBrenRE0cqIukuLtpdhV1iA3IfDHbDX9yjTTkBEBQ4flPHm3YePn5HyXNlGDJZT
92PvvwlvxMceYaig86yRwinjJ0QvdbE2pGS4mqtSQkBIeCXI3/XSWGlAwOAeAlg5
wSJwSiVRiwpD2BMtVReppptY101ApUYQHCa8i8GoU2KDLui8ltkPavTOcfd67mBq
LHald8vixV5wmHZ5XJPQFQC93draJHfsAGCfyKppuzdNXivTKtlIq7MLKfyElapB
jUvhp6xaWLOwwj9kpkbfc9ZcZUb4R6ysskL4L9jX9GtWW9XgAFUt/GM2An4NfhcH
Y3j6FFyOgXNR5JYjQfJSosgJ6wQewaRsgCcQ2wsTP+t/+vL6LaSnEBfyMtaLsoRb
uMqBlxPgM7nKyIrK5TnCVy0ZQ/1H61K4/AkpjIdg51KjGKS1zOcVGk/Ba5lMalwv
fd/J0XJ7QKOQBXAFB/H3HCdkZVwcgL/VfbwOylVRtzuPBtzUxlY1fqtT6u2RkPri
sVpojltiMFk+aDTZaLRtMnm8SdrvGdbLvwAHz3dL4CHXpu6zhb5WBl/OEI+XkgF+
CeB9H41OGpPl8mQ8frZ/drt19j2Hz6m84gSlSJ1l42pDy836G0OJC2g1wal2OvLX
wH8C34NV2eA7AM56JTZ/CzzbAiX99rlHPEizi6AV3yBpj7itZ/eA7HJl/81Q0dVO
FG5vH8a5xH+0D/n8oirg+Pj4Ly3OYHdxBv8X588X5x+b71S5O5BrnAte4N56uqZq
rJgUpF7vSTNh9UJbhbf/pB26HwTgEwQHSnEQhhPWeRwQt2KnYOcg0l98JlbpuwgA
AA==
ENDF
}
chmod 777 /tmp/deaggregate.sh
}


psoftstop() {
                [ -f /tmp/p2partisan.loading ] && echo "P2Partisan is still loading. Can't stop right now Exiting..." && exit
        echo -e "
+------------------------- P2Partisan --------------------------+
|                   _______ __
|                  |     __|  |_.-----.-----.
|                  |__     |   _|  _  |  _  |
|            Soft  |_______|____|_____|   __|
|                                     |__|
|
+---------------------------------------------------------------+"
        echo -e "| Stopping P2Partisan..."
        ./iptables-del 2> /dev/null
        plog "Stopping P2Partisan..."
        [ -f $pidfile ] && rm -f "$pidfile" 2> /dev/null
        [ -f iptables-add ] && rm -f "iptables-add" 2> /dev/null
        [ -f iptables-del ] && rm -f "iptables-del" 2> /dev/null
        ptutorunset
        echo "+---------------------------------------------------------------+"
}

pforcestop() {
if [ -n "$1" ]; then
    if [ $1 != fix ]; then
    name=$1
        echo -e "
+------------------------- P2Partisan --------------------------+
|  _____   __         __                         __         __
| |     |_|__|.-----.|  |_ ______.--.--.-----.--|  |.---.-.|  |_.-----.
| |       |  ||__ --||   _|______|  |  |  _  |  _  ||  _  ||   _|  -__|
| |_______|__||_____||____|      |_____|   __|_____||___._||____|_____|
|                                     |__|
|
+---------------------------------------------------------------+
|            background updating list: \033[1;35m$1\033[0;39m
+---------------------------------------------------------------+"
        cat blacklists | grep -Ev "^$" | tr -d "\r" | grep -E "^#( .*|)$name http*." > /dev/null 2>&1 && {
        echo -e "| Warning: \033[1;33mthe list reference exists but is currently disabled in the blacklists\033[0;39m
        +---------------------------------------------------------------+"
        exit
        }  2> /dev/null
        {
        cat blacklists | grep -Ev "^#|^$" | tr -d "\r" | grep $name > /dev/null 2>&1 || {
        echo -e "| Error: \033[1;31mit appears like the list $name is not a valid reference.\033[0;39m Typo?
        +---------------------------------------------------------------+"
        exit
        } 2> /dev/null
        }

url=`cat blacklists | grep -Ev "^#|^$" | tr -d "\r" | grep $name | awk '{print $2}'`

    if [ -n "$url" ]; then
         ps | grep -E ".*deaggregate.sh $name"| grep -v grep | cut -c1-6 | while read line; do kill $line 2> /dev/null; done
         rm "/tmp/p2partisan.$name.LOAD" 2> /dev/null
        if [ "$(ipset --swap "$name.bro" "$name.bro" 2>&1 | grep 'does not exist')" != "" ]
            then
                ipset -N "$name.bro" hash:net hashsize 1024 --resize 5 maxelem 4096000
            fi

                statusaaa=`ipset -T $name.bro 1.1.1.1 2> /dev/null && echo "1" || echo "0"`
                statusaa=`ipset -L $name 2> /dev/null | head -8 | tail -1 | grep -Eo "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5]).*" > /dev/null && echo "1" || echo "0"`
                    if [ $statusaa -eq 0 ]; then
                        if [ $statusaaa -eq 1 ]; then
                            ipset swap $name $name.bro 2> /dev/null
                            ipset -F $name.bro 2> /dev/null
                            ipset -X $name.bro 2> /dev/null
                            ipset -N $name.bro hash:net hashsize 1024 --resize 5 maxelem 4096000 2> /dev/null
                            deaggregate $name.bro $url 1 "" $name $maxconcurrentlistload $P2Partisandir &
                        elif [ $statusaaa -eq 0 ]; then
                            ipset -F $name 2> /dev/null
                            ipset -N $name hash:net hashsize 1024 --resize 5 maxelem 4096000 2> /dev/null
                            deaggregate $name $url 1 "" "" $maxconcurrentlistload $P2Partisandir &
                        fi
                    elif [ $statusaa -eq 1 ]; then
                ipset -F $name.bro 2> /dev/null
                ipset -X $name.bro 2> /dev/null
                ipset -N $name.bro hash:net hashsize 1024 --resize 5 maxelem 4096000 2> /dev/null
                deaggregate $name.bro $url 1 "" $name $maxconcurrentlistload $P2Partisandir &
                    fi
        else
            echo -e "|                    \033[1;31mError: list not found\033[0;39m
+---------------------------------------------------------------+"
        fi
    exit
    elif [ $1 == "fix" ]; then
        rm ./*.cidr 2> /dev/null

    fi
fi
        echo -e "
+------------------------- P2Partisan --------------------------+
|                   _______ __
|                  |     __|  |_.-----.-----.
|                  |__     |   _|  _  |  _  |
|            Hard  |_______|____|_____|   __|
|                                     |__|
|
+---------------------------------------------------------------+"
counter=0
        killall "deaggregate.sh" > /dev/null 2>&1
        while iptables -L wanin 2> /dev/null | grep P2PARTISAN-IN > /dev/null 2>&1
        do
                iptables -D wanin -i $wanif -m state --state NEW -j P2PARTISAN-IN > /dev/null 2>&1
        done
        while iptables -L wanout 2> /dev/null | grep P2PARTISAN-OUT > /dev/null 2>&1
        do
                iptables -D wanout -o $wanif -m state --state NEW -j P2PARTISAN-OUT > /dev/null 2>&1
        done
        while iptables -L INPUT | grep P2PARTISAN-IN > /dev/null 2>&1
        do
                iptables -D INPUT -i $wanif -m state --state NEW -j P2PARTISAN-IN > /dev/null 2>&1
        done
        while iptables -L OUTPUT | grep P2PARTISAN-OUT > /dev/null 2>&1
        do
                iptables -D OUTPUT -o $wanif -m state --state NEW -j P2PARTISAN-OUT > /dev/null 2>&1
        done
        iptables -F P2PARTISAN-DROP-IN > /dev/null 2>&1
        iptables -F P2PARTISAN-DROP-OUT > /dev/null 2>&1
        iptables -F P2PARTISAN-LISTS-IN > /dev/null 2>&1
        iptables -F P2PARTISAN-LISTS-OUT > /dev/null 2>&1
        iptables -F P2PARTISAN-IN > /dev/null 2>&1
        iptables -F P2PARTISAN-OUT > /dev/null 2>&1
        iptables -X P2PARTISAN-DROP-IN > /dev/null 2>&1
        iptables -X P2PARTISAN-DROP-OUT > /dev/null 2>&1
        iptables -X P2PARTISAN-LISTS-IN > /dev/null 2>&1
        iptables -X P2PARTISAN-LISTS-OUT > /dev/null 2>&1
        iptables -X P2PARTISAN-IN > /dev/null 2>&1
        iptables -X P2PARTISAN-OUT > /dev/null 2>&1
        ipset -F  > /dev/null 2>&1
        for i in `ipset --list | grep Name | cut -f2 -d ":" `; do
                ipset -X $i > /dev/null 2>&1
        done
        chmod 777 ./*.gz > /dev/null 2>&1
        [ -f iptables-add ] && rm iptables-add
        [ -f iptables-del ] && rm iptables-del
        [ -f ipset-del ] && rm ipset-del
        [ -f $pidfile ] && rm -f "$pidfile" > /dev/null 2>&1
        [ -f runtime ] && rm -f "runtime" > /dev/null 2>&1
        [ -f /tmp/p2partisan.loading ] && rm -r /tmp/p2partisan.loading >/dev/null 2>&1
plog " Unloading ipset modules"
        lsmod | grep "xt_set" > /dev/null 2>&1 && sleep 2 ; rmmod -f xt_set > /dev/null 2>&1
        lsmod | grep "ip_set_hash_net" > /dev/null 2>&1 && sleep 2 ; rmmod -f ip_set_hash_net > /dev/null 2>&1
        lsmod | grep "ip_set" > /dev/null 2>&1 && sleep 2 ; rmmod -f ip_set > /dev/null 2>&1
plog " Removing the list files"
        cat blacklists |  grep -Ev "^#|^$" | tr -d "\r" |
   (
    while read line
    do
            counter=`expr $counter + 1`
            counter=$(printf "%02d" $counter)
            name=`echo $line | awk '{print $1}'`
            echo -e "| Removing Blacklist_$counter --> \033[1;37m***$name***\033[0;39m"
                  [ -f ./$name.gz ] && rm -f ./$name.gz > /dev/null 2>&1
                        done
    )
        rm /tmp/*.LOAD > /dev/null 2>&1
        ptutorunset
plog " P2Partisan stopped."
echo -e "+---------------------------------------------------------------+"
}

pstatus() {
if [ -n "$1" ]; then
name=$1
        echo -e "
+------------------------- P2Partisan --------------------------+
|  _____   __         __          _______ __          __
| |     |_|__|.-----.|  |_ ______|     __|  |_.---.-.|  |_.--.--.-----.
| |       |  ||__ --||   _|______|__     |   _|  _  ||   _|  |  |__ --|
| |_______|__||_____||____|      |_______|____|___._||____|_____|_____|
|
+---------------------------------------------------------------+
|                    list name: \033[1;33m$1\033[0;39m
+---------------------------------------------------------------+"

cat blacklists | grep -Ev "^$" | tr -d "\r" | grep -E "^#( .*|)$name http*." > /dev/null 2>&1 && {
echo -e "| Warning: \033[1;33mthe list reference exists but is currently disabled in the blacklists\033[0;39m
+---------------------------------------------------------------+"
exit
}  2> /dev/null
{
cat blacklists | grep -Ev "^#|^$" | tr -d "\r" | grep -o "$name " > /dev/null 2>&1 || {
echo -e "| Error: \033[1;31mit appears like the list $name is not a valid reference.\033[0;39m Typo?
+---------------------------------------------------------------+"
exit
} 2> /dev/null
}
            statusa=`cat /tmp/p2partisan.$name.LOAD 2> /dev/null || echo 5`
            statusb=`cat /tmp/p2partisan.$name.bro.LOAD 2> /dev/null || echo 5`
            statusap=`ps w | grep $name | grep -v grep | wc -l`
            statusbp=`ps w | grep $name.bro | grep -v grep | wc -l`
            statusaa=`ipset -L $name 2> /dev/null | head -8 | tail -1 | grep -Eo "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5]).*" > /dev/null && echo "1" || echo "0"`
            statusbb=`ipset -L $name.bro 2> /dev/null | head -8 | tail -1 | grep -Eo "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5]).*" > /dev/null && echo "1" || echo "0"`
            statusaaa=`ipset -T $name 1.1.1.1 2> /dev/null && echo "1" || echo "0"`
            statusbbb=`ipset -T $name.bro 1.1.1.1 2> /dev/null && echo "1" || echo "0"`
            sizeb=`ipset -L $name 2> /dev/null | head -5 | tail -1 | awk '{print $4}' || echo=0`
            sizebb=`ipset -L $name.bro 2> /dev/null | head -5 | tail -1 | awk '{print $4}' || echo=0`
            sizem=`echo $((sizeb/1024))`
            sizemm=`echo $((sizebb/1024))`
            age=`[ -e $name.cidr ] && echo $((\`date +%s\` - \`date -r $name.cidr +%s\`)) || echo 0`
                        if [ $statusaaa -eq 0 ]; then
                            if [ $statusaa -eq 1 ]; then
                                if [ $statusa -gt 2 ]; then
                                    a="\033[1;33mPartially loaded\033[0;39m"
                                elif [ $statusa -le 2 ]; then
                                    a="\033[1;35mLoading\033[0;39m"
                                fi
                            else
                                if [ $statusap -eq 1 ]; then
                                    a="\033[1;36mQueued\033[0;39m"
                                else
                                    a="\033[1;31mEmpty\033[0;39m"
                                fi
                            fi
                        elif [ $statusaaa -eq 1 ]; then
                            a="\033[1;32mFully loaded\033[0;39m"
                        fi

                        if [ $statusbbb -eq 0 ]; then
                            if [ $statusbb -eq 1 ]; then
                                if [ $statusb -gt 2 ]; then
                                    b="\033[1;37mPartially loaded\033[0;39m"
                                elif [ $statusb -le 2 ]; then
                                    b="\033[1;35mLoading\033[0;39m"
                                fi
                            else
                                if [ $statusbp -eq 1 ]; then
                                    b="\033[1;36mQueued\033[0;39m"
                                else
                                    b="\033[1;37mEmpty\033[0;39m"
                                fi
                            fi
                        elif [ $statusbbb -eq 1 ]; then
                            b="\033[1;37mFully loaded\033[0;39m"
                        fi

                        if [ -f ./$name.cidr ]; then
                            cat ./$name.cidr 2>/dev/null | cut -d" " -f3 | grep -E "^1.1.1.1$" > /dev/null && c="\033[1;37mFully loaded\033[0;39m" || c="\033[1;37mPartially loaded\033[0;39m"
                        else
                            c="\033[1;37mEmpty\033[0;39m"
                        fi

                          d=`echo $(( $age / 86400 ))`
                          h=`echo $((( $age / 3600 ) %24 ))`
                          m=`echo $((( $age / 60 ) %60 ))`
                          s=`echo $(( $age %60 ))`
                        age=`printf "$d - %02d:%02d:%02d\n" $h $m $s`
                       ipta=`cat ./iptables-add | grep $name | wc -l`
                       iptb=`iptables -L | grep $name | wc -l`
                        if [ `echo $(( ipta + iptb ))` -eq 4 ]; then d="\033[1;32mFully loaded\033[0;39m";
                        elif [ `echo $(( ipta + iptb ))` -eq 0 ]; then d="\033[1;37mEmpty\033[0;39m";
                        else "\033[1;33mPartially loaded\033[0;39m";
                        fi
echo -e "| Primary lists and iptables are used for filtering, they are both
| expected to be Fully Loaded while P2Partisan operates.
| Secondary lists are used for updates only, so empty when unused
| cidr file are created after a list update and allow quick startup
+---------------------------------------------------------------+
|           Name: $name
|            URL: `cat blacklists | grep -Ev "^#|^$" | tr -d "\r" | grep $name | awk '{print $2}'`
+---------------------------------------------------------------+
|  ipset primary: $a
|          items: `ipset -L $name 2> /dev/null | tail -n +8 | wc -l || echo 0`
|    size in RAM: $sizem KB
+---------------------------------------------------------------+
| ipset seconday: $b
|          items: `ipset -L $name.bro 2> /dev/null | tail -n +8 | wc -l || echo 0`
|    size in RAM: $sizemm KB
+---------------------------------------------------------------+
|      cidr file: $c
|          items: `cat $name.cidr 2> /dev/null | tail -n +2 | wc -l || echo 0`
|   size on disk: `ls -lh $name.cidr 2> /dev/null | awk '{print $5}' || echo 0`
|   Last updated: `date -r $name.cidr '+%H:%M:%S %d/%b/%y' 2> /dev/null` | \033[1;37m$age\033[0;39m ago
+---------------------------------------------------------------+
|       iptables: $d
`cat ./iptables-add | grep $name`
`iptables -L | grep $name`
+---------------------------------------------------------------+
"

exit
fi

        counter=0
        running3=`iptables -L INPUT  2> /dev/null | grep P2PARTISAN-IN | wc -l`
        running4=`[ -f $pidfile ] && echo 1 || echo 0`
        running5=`nvram get script_fire | grep "p2partisan.sh ]" >/dev/null && echo "\033[1;32mYes\033[0;39m" || echo "\033[1;31mNo\033[0;39m"`
        running7=`tail -200 $logfile | grep Dropped | tail -1 | awk '{printf "| %s %s %s ",$1,$2,$3;for (i=4;i<=NF;i++) if ($i~/(IN|OUT|SRC|DST|PROTO|SPT|DPT)=/) printf "%s ",$i;print ""}'| sed -e 's/PROTO=//g' -e 's/IN=/I=/g' -e 's/OUT=/O=/g' -e 's/SPT=/S=/g' -e 's/DPT=/D=/g' -e 's/SRC=/S=/g' -e 's/DST=/D=/g'`
       running7a=`tail -200 $logfile | grep Rejected | tail -1 | awk '{printf "| %s %s %s ",$1,$2,$3;for (i=4;i<=NF;i++) if ($i~/(IN|OUT|SRC|DST|PROTO|SPT|DPT)=/) printf "%s ",$i;print ""}'| sed -e 's/PROTO=//g' -e 's/IN=/I=/g' -e 's/OUT=/O=/g' -e 's/SPT=/S=/g' -e 's/DPT=/D=/g' -e 's/SRC=/S=/g' -e 's/DST=/D=/g'`
        running9=`nvram get script_fire | grep "P2Partisan-tutor" >/dev/null && echo "\033[1;32mYes\033[0;39m" || echo "\033[1;31mNo\033[0;39m"`
        logwin=`echo $(( $now - 86400 ))`
        tail -1500 $logfile | grep -i "P2Partisan tutor had" > /tmp/tutor.tmp
         cat /tmp/tutor.tmp |
         (
         while read line
         do
                logtime=`echo $line | awk '{print $3}'`
                if [[ `date -d"$logtime" +%s` -gt $logwin ]]; then
                    echo $line >> /tmp/tutor.temp
                fi
        done
        )
        runningB=`wc -l /tmp/tutor.temp 2> /dev/null | awk '{print $1}'`
        [ -f /tmp/tutor.tmp ] && rm /tmp/tutor.tmp; [ -f /tmp/tutor.temp ] && rm /tmp/tutor.temp || runningB=0
        runningD=`[ -f ./runtime ] && cat ./runtime`
        runningF=`iptables -L P2PARTISAN-DROP-IN 2> /dev/null | grep DEBUG | wc -l`
            from=`[ -f ./iptables-add ] && head -1 ./iptables-add 2> /dev/null | awk '{print $2}' || echo $now`
         runtime=`echo $(( $now - $from ))`
               d=`echo $(( $runtime / 86400 ))`
               h=`echo $((( $runtime / 3600 ) %24 ))`
               m=`echo $((( $runtime / 60 ) %60 ))`
               s=`echo $(( $runtime %60 ))`
        runtime=`printf "$d - %02d:%02d:%02d\n" $h $m $s`
        drop_packet_count_in=`iptables -vL P2PARTISAN-DROP-IN 2> /dev/null | grep " DROP " | awk '{print $1}'`
       drop_packet_count_out=`iptables -vL P2PARTISAN-DROP-OUT 2> /dev/null | grep " REJECT " | awk '{print $1}'`
                        if [ -e ./iptables-debug-del ]; then
          dfrom=`[ -f ./iptables-debug ] && head -1 ./iptables-debug 2> /dev/null | awk '{print $2}'`
           druntime=`echo $(( $now - $dfrom ))`
                          h=`echo $((( $druntime / 3600 ) %24 ))`
                          m=`echo $((( $druntime / 60 ) %60 ))`
                          s=`echo $(( $druntime %60 ))`
           druntime=`printf "%02d:%02d:%02d\n" $h $m $s`
           dendtime=`[ -f ./iptables-debug-del ] && head -2 ./iptables-debug-del | tail -n 1 | awk '{print $2}'`
                  ttime=`echo $(( $dendtime / 60 ))`
                  ttime=`echo $(( $dfrom + $dendtime ))`
                leftime=`echo $(( $ttime - $now ))`
                          m=`echo $((( $leftime / 60 ) %60 ))`
                          s=`echo $(( $leftime %60 ))`
                leftime=`printf "%02d:%02d:%02d\n" $h $m $s`
                zzztime=`echo $(( $dendtime / 60 ))`
                        fi

        if [[ $running3 -eq "0" ]] && [[ $running4 -eq "0" ]]; then
                running8="\033[1;31mNo\033[0;39m"
        elif [[ $running3 -eq "0" ]] && [[ $running4 -eq "1" ]]; then
                running8="\033[1;35mLoading...\033[0;39m"
        elif [[ $running3 -gt "0" ]] && [[ $running4 -eq "0" ]]; then
                running8="\033[1;31mNot quite... try to run \"p2partisan.sh update\"\033[0;39m"
        else
                running8="\033[1;32mYes\033[0;39m"
        fi

                if [[ $runningF -eq 1 ]]; then
                                runningF="\033[1;35mOn\033[0;39m IP \033[1;33m`iptables -L P2PARTISAN-DROP-IN  2> /dev/null | grep DEBUG |  awk '{print $5}'` \033[1;33m$f\033[0;39mrunning for \033[1;33m$druntime\033[0;39m /\033[1;33m$zzztime\033[0;39m min (\033[1;33m$leftime\033[0;39m left)"
                else
                                runningF="Off"
                fi

whiteip=`ipset -L whitelist 2> /dev/null | grep -E "(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])" | wc -l`
whiteextra=`ipset -L whitelist 2> /dev/null | grep -E '(^10\.|(^172\.1[6-9]\.|^172\.2[0-9]\.|^172\.3[0-1]\.)|^192\.168\.)' | wc -l`
if [[ $whiteextra == "0" ]]; then
whiteextra=" "
else
whiteextra=`echo "/ $whiteextra" LAN IP ref defined`
fi
blackip=`ipset -L blacklist-custom 2> /dev/null | grep -E "(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])" | wc -l`

echo -e "
+------------------------- P2Partisan --------------------------+
|            _______ __          __
|           |     __|  |_.---.-.|  |_.--.--.-----.
|           |__     |   _|  _  ||   _|  |  |__ --|
|           |_______|____|___._||____|_____|_____|
|
| Release version:  \033[1;37m$version\033[0;39m
+---------------------------------------------------------------+
|         Running:  $running8
|         Autorun:  $running5
|           Tutor:  $running9 / \033[1;37m$runningB\033[0;39m problems in the last 24h
|        Debugger:  $runningF
| Partisan uptime:  \033[1;37m$runtime\033[0;39m
|    Startup time:  \033[1;37m$runningD\033[0;39m seconds
|      Dropped in:  \033[1;37m$drop_packet_count_in\033[0;39m
|    Rejected out:  \033[1;37m$drop_packet_count_out\033[0;39m
+---------------------------------------------------------------+"
echo -e "|       Black IPs:  \033[1;37m$blackip\033[0;39m"
echo -e "|       White IPs:  \033[1;37m$whiteip $whiteextra\033[0;39m"
transmissionenable=`nvram get bt_enable`
if [ -z $transmissionenable ]; then
    echo "|  TransmissionBT:  Not available"
    elif [ $transmissionenable -eq 0 ]; then
    echo "|  TransmissionBT:  Off"
    else
    echo -e "|  TransmissionBT:  \033[1;32mOn\033[0;39m"
        transmissionport=`nvram get bt_port 2> /dev/null`
        greyports_tcp=$greyports_tcp,$transmissionport
        greyports_udp=$greyports_udp,$transmissionport
fi
echo $greyports_tcp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
            echo -e "|  Grey ports TCP:  \033[1;37m$w\033[0;39m"
                done
echo $greyports_udp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
            echo -e "|  Grey ports UDP:  \033[1;37m$w\033[0;39m"
                done
echo $whiteports_tcp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
            echo -e "| White ports TCP:  \033[1;37m$w\033[0;39m"
                done
echo $whiteports_udp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
            ColorOff='\\\e[0;39m'
            ColorOn='\\\e[1;37m'
            BWhite='\\\e[100m'
            p1=`head -70 ./p2partisan.sh | grep -E ^whiteports_udp= | grep -Eo '[,|:|=]67[,|:]|,67$' | wc -l`
            p2=`head -70 ./p2partisan.sh | grep -E ^whiteports_udp= | grep -Eo '[,|:|=]68[,|:]|,68$' | wc -l`
            if [ $p1 -eq "0" ]; then
                    w=`echo -e $w | sed -e "s/^67,/${BWhite}67${ColorOn},/g" | sed -e "s/,67,/,${BWhite}67${ColorOff}${ColorOn},/g" | sed -e "s/,67$/,${BWhite}67/g"`
            fi
            if [ $p2 -eq "0" ]; then
                    w=`echo -e $w | sed -e "s/^68,/${BWhite}68${ColorOn},/g" | sed -e "s/,68,/,${BWhite}68${ColorOff}${ColorOn},/g" | sed -e "s/,68$/,${BWhite}68/g"`
            fi
            echo -e "| White ports UDP:  \033[1;37m$w\033[0;39m"
                done
cat blacklists | grep -Ev "^#|^$" | tr -d "\r" |
   (
    while read line
    do
            counter=`expr $counter + 1`
            counter=$(printf "%02d" $counter)
            name=`echo $line | awk '{print $1}'`
            statusa=`cat /tmp/p2partisan.$name.LOAD 2> /dev/null || echo 5`
            statusb=`cat /tmp/p2partisan.$name.bro.LOAD 2> /dev/null || echo 5`
            statusap=`ps w | grep $name | grep -v grep | wc -l`
            statusbp=`ps w | grep $name.bro | grep -v grep | wc -l`
            statusaa=`ipset -L $name 2> /dev/null | head -8 | tail -1 | grep -Eo "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5]).*" > /dev/null && echo "1" || echo "0"`
            statusbb=`ipset -L $name.bro 2> /dev/null | head -8 | tail -1 | grep -Eo "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5]).*" > /dev/null && echo "1" || echo "0"`
            statusaaa=`ipset -T $name 1.1.1.1 2> /dev/null && echo "1" || echo "0"`
            statusbbb=`ipset -T $name.bro 1.1.1.1 2> /dev/null && echo "1" || echo "0"`
            sizeb=`ipset -L $name 2> /dev/null | head -5 | tail -1 | awk '{print $4}' || echo=0`
            sizebb=`ipset -L $name.bro 2> /dev/null | head -5 | tail -1 | awk '{print $4}' || echo=0`
            sizem=`echo $((sizeb/1024))`
            sizem=$(printf "%04s" $sizem)
            sizemm=`echo $((sizebb/1024))`
            lin=`iptables -L P2PARTISAN-LISTS-IN 2> /dev/null | grep $name | wc -l`
            lout=`iptables -L P2PARTISAN-LISTS-OUT 2> /dev/null | grep $name | wc -l`
            ipt=`echo $((lin + lout))`
            if [ $ipt -eq 2 ]; then
                i="\033[1;32mo\033[0;39m"
            elif [ $ipt -eq 1 ]; then
                i="\033[1;33mp\033[0;39m"
            else
                i="\033[1;31me\033[0;39m"
            fi

            if [ $statusaaa -eq 0 ]; then
                            if [ $statusaa -eq 1 ]; then
                                if [ $statusa -gt 2 ]; then
                                    a="\033[1;33mp\033[0;39m"
                                elif [ $statusa -le 2 ]; then
                                    a="\033[1;35ml\033[0;39m"
                                fi
                            else
                                if [ $statusap -eq 1 ]; then
                                    a="\033[1;36mq\033[0;39m"
                                else
                                    a="\033[1;31me\033[0;39m"
                                fi
                            fi
                        elif [ $statusaaa -eq 1 ]; then
                            a="\033[1;32mo\033[0;39m"
                        fi

                        if [ $statusbbb -eq 0 ]; then
                            if [ $statusbb -eq 1 ]; then
                                if [ $statusb -gt 2 ]; then
                                    b="\033[1;37mp\033[0;39m"
                                elif [ $statusb -le 2 ]; then
                                    b="\033[1;35ml\033[0;39m"
                                fi
                            else
                                if [ $statusbp -eq 1 ]; then
                                    b="\033[1;36mq\033[0;39m"
                                else
                                    b="\033[1;37me\033[0;39m"
                                fi
                            fi
                        elif [ $statusbbb -eq 1 ]; then
                            b="\033[1;37mo\033[0;39m"
                        fi

                        if [ -f ./$name.cidr ];then
                            cat ./$name.cidr | cut -d" " -f3 | grep -E "^1.1.1.1$" > /dev/null && c="\033[1;37mo\033[0;39m" || c="\033[1;37mp\033[0;39m"
                        else
                            c="\033[1;37me\033[0;39m"
                        fi

                echo -e "|    Blacklist_$counter:  [$a] [$b] [$c] [$i] - $sizem KB - \033[1;37m$name\033[0;39m"

                        sizeram=`echo $((sizeram+sizeb+sizebb))`
        done
                        sizeram=`echo $((sizeram/1024))`
                echo  "|                    ^   ^   ^   ^"
             echo  -e "|      maxload: \033[1;37m$maxconcurrentlistload\033[0;39m - \e[1;37;100mpri sec cid ipt\033[0;39m - [\033[1;37me\033[0;39m]mpty [\033[1;37ml\033[0;39m]oading l[\033[1;37mo\033[0;39m]aded [\033[1;37mp\033[0;39m]artial [\033[1;37mq\033[0;39m]ueued"
             echo  -e "|    Consumed RAM:  \033[1;37m$sizeram\033[0;39m KB"
        )

echo -e "+----------------------- Logs max($maxloghour/hour) ----------------------+
$running7
$running7a
+---------------------------------------------------------------+"
}

if [ $autorun_availability_check = 1 ]; then
av="while true; do [ -f $P2Partisandir/p2partisan.sh ] && break || sleep 5; done ;"
fi

pautorunset() {
echo -e "
+------------------------- P2Partisan --------------------------+
|            ______               __               __
|           |      |.-----.-----.|  |_.----.-----.|  |
|           |   ---||  _  |     ||   _|   _|  _  ||  |
|           |______||_____|__|__||____|__| |_____||__|
|
+--------------------------- Autorun ---------------------------+"
        p=`nvram get script_fire | grep "p2partisan.sh restart" | grep -v cru | wc -l`
        if [ $p -eq "0" ] ; then
                t=`nvram get script_fire`; t=`printf "$t\n$av$P2Partisandir/p2partisan.sh restart\n"` ; nvram set "script_fire=$t"
        fi
        plog "P2Partisan AUTO RUN is ON"
                echo "+---------------------------------------------------------------+"
        nvram commit
}

pautorununset() {
echo -e "
+------------------------- P2Partisan --------------------------+
|            ______               __               __
|           |      |.-----.-----.|  |_.----.-----.|  |
|           |   ---||  _  |     ||   _|   _|  _  ||  |
|           |______||_____|__|__||____|__| |_____||__|
|
+--------------------------- Autorun ---------------------------+"
        p=`nvram get script_fire | grep "p2partisan.sh restart" | grep -v cru | wc -l`
        if [ $p -eq "1" ]; then
        t=`nvram get script_fire`; t=`printf "$t" | grep -v "p2partisan.sh restart"` ; nvram set "script_fire=$t"
        fi
        plog "P2Partisan AUTO RUN is OFF"
                echo "+---------------------------------------------------------------+"
        nvram commit
}

pdetective() {
echo -e "
+------------------------- P2Partisan --------------------------+
|         __         __               __   __
|     .--|  |.-----.|  |_.-----.----.|  |_|__|.--.--.-----.
|     |  _  ||  -__||   _|  -__|  __||   _|  ||  |  |  -__|
|     |_____||_____||____|_____|____||____|__| \___/|_____| BETA
|
+---------------------------------------------------------------+
| After an investigation it appears that the following socket/s
| should be considered a greyports candidates. Consider re-run the
| command multiple times to reduce the number of false positive. Once
| identified the port/s can be added under greyports_tcp & greyports_udp.
+---------------------------------------------------------------+"
cat /proc/net/ip_conntrack | awk '{for (i=1;i<=NF;i++) if ($i~/(src|dst|sport|dport)=/) printf "%s ",$i;print "\n"}' | grep -vE '^$' | sed s/\ src=/'\n'/ | awk '{print $1" "$3" "$2" "$4}' | sed s/\ dst=/'\n'/ | sed s/sport=//  | sed s/dport=// | grep -E '(^10\.|(^172\.1[6-9]\.|^172\.2[0-9]\.|^172\.3[0-1]\.)|^192\.168\.)' | grep -v "`nvram get lan_ipaddr`$" | grep -v "`nvram get lan1_ipaddr`$" | awk '/[0-9]/ {cnt[$1" "$2]++}END{for(k in cnt) print cnt[k],k}' | sort -nr | while read socket; do echo $socket | if [ `cut -f1 -d" "` -gt $greyline ];then echo $socket | awk '{print "| "$2" "$3" - "$1" Sessions"}'; fi ; done
echo "+---------------------------------------------------------------+"
}

pupgrade() {
        [ -f p2partisan_new.sh ] && rm -f "p2partisan_new.sh" 2> /dev/null
        wget -q -O - http://pastebin.com/raw.php?i=mUeS6jP2 | grep "p2partisan v" | grep -v grep> ./latest
        latest=`cat ./latest | cut -c3-31`
        current=`cat ./p2partisan.sh | grep "p2partisan v" | head -1 | cut -c3-32 `
        if [[ "$latest" == "$current" ]]; then
        echo "
+------------------------- P2Partisan --------------------------+
|          _______                            __
|         |   |   |.-----.-----.----.---.-.--|  |.-----.
|         |   |   ||  _  |  _  |   _|  _  |  _  ||  -__|
|         |_______||   __|___  |__| |___._|_____||_____|
|                  |__|  |_____|
|
+---------------------------------------------------------------+
You're already running the latest version of P2Partisan
"
        else
        echo "
+------------------------- P2Partisan --------------------------+
|          _______                            __
|         |   |   |.-----.-----.----.---.-.--|  |.-----.
|         |   |   ||  _  |  _  |   _|  _  |  _  ||  -__|
|         |_______||   __|___  |__| |___._|_____||_____|
|                  |__|  |_____|
|
+---------------------------------------------------------------+
| There's a new P2Partisan update available. Do you want to upgrade?
|
|                  current = $current
|
|                          to
|
|                   latest = $latest
|
| y/n"
        read answer
                if [[ $answer == "y" ]]; then
wget -q -O ./p2partisan_new.sh http://pastebin.com/raw.php?i=mUeS6jP2
pupgraderoutine
                else
                echo "| Upgrade skipped. Quitting...
+---------------------------------------------------------------+"
                exit
                fi

        fi
 }

pupgradebeta() {
        [ -f p2partisan_new.sh ] && rm -f "p2partisan_new.sh" 2> /dev/null
        wget -q -O - http://pastebin.com/raw.php?i=Lt1axJ9a | grep "p2partisan v" | grep -v grep > ./latest
        echo "| Do you want to install the latest testing beta (not suggested)?
|
| y/n"
        read answer
                if [[ $answer == "y" ]]; then
wget -q -O ./p2partisan_new.sh http://pastebin.com/raw.php?i=Lt1axJ9a
pupgraderoutine
                else
                echo "| Beta upgrade skipped. Quitting...
+---------------------------------------------------------------+"

                exit
                fi
 }

pupgraderoutine() {
                echo "| Upgrading, please wait:"
                echo "| 1/6) Stopping the script"
                                pforcestop
                [ -f p2partisan_new.sh ] || plog "There's a problem with the p2partisan upgrade. Please try again"
                echo "| 2/6) Migrating the configuration"
                sed '1,/P2Partisandir/{s@P2Partisandir=.*@'"P2Partisandir=$P2Partisandir"'@'} -i ./p2partisan_new.sh
                sed '1,/syslogs/{s@syslogs=.*@'"syslogs=$syslogs"'@'} -i ./p2partisan_new.sh
                sed '1,/maxloghour/{s@maxloghour=.*@'"maxloghour=$maxloghour"'@'} -i ./p2partisan_new.sh
                sed '1,/whiteports_tcp/{s@whiteports_tcp=.*@'"whiteports_tcp=$whiteports_tcp"'@'} -i ./p2partisan_new.sh
                sed '1,/whiteports_udp/{s@whiteports_udp=.*@'"whiteports_udp=$whiteports_udp"'@'} -i ./p2partisan_new.sh
                sed '1,/greyports_tcp/{s@greyports_tcp=.*@'"greyports_tcp=$greyports_tcp"'@'} -i ./p2partisan_new.sh
                sed '1,/greyports_udp/{s@greyports_udp=.*@'"greyports_udp=$greyports_udp"'@'} -i ./p2partisan_new.sh
                sed '1,/greyline/{s@greyline=.*@'"greyline=$greyline"'@'} -i ./p2partisan_new.sh
                sed '1,/scheduleupdates/{s@scheduleupdates=.*@'"scheduleupdates=\"$scheduleupdates\""'@'} -i ./p2partisan_new.sh
                sed '1,/maxconcurrentlistload/{s@maxconcurrentlistload=.*@'"maxconcurrentlistload=$maxconcurrentlistload"'@'} -i ./p2partisan_new.sh
                sed '1,/autorun_availability_check/{s@autorun_availability_check=.*@'"autorun_availability_check=$autorun_availability_check"'@'} -i ./p2partisan_new.sh
                sed '1,/testip/{s@testip=.*@'"testip=$testip"'@'} -i ./p2partisan_new.sh
                tr -d "\r"< ./p2partisan_new.sh > ./.temp ; mv ./.temp ./p2partisan_new.sh
                echo "| 3/6) Copying p2partisan.sh into p2partisan.sh.old"
                cp ./p2partisan.sh ./p2partisan_old
                echo "| 4/6) Installing new script into p2partisan.sh"
                mv ./p2partisan_new.sh ./p2partisan.sh
                echo "| 5/6) Setting up permissions"
                chmod -R 777 ./p2partisan.sh
                echo -e "| 6/6) all done, \033[1;32mPlease run the script manually!\033[0;39m
| NOTE: autorun setting is left as it was found
+---------------------------------------------------------------+
"
exit
}

ptutor() {
        h=`date +%H`
        pwhitelist
        pblacklistcustom
        running3=`iptables -L INPUT | grep P2PARTISAN-IN  2> /dev/null | wc -l`
        running4=`[ -f $pidfile ] && echo 1 || echo 0`
        runningE=`iptables -L wanin | grep P2PARTISAN-IN  2> /dev/null | wc -l`
         schfrom=`echo $schduleupdates | cut -d, -f1`
           schto=`echo scheduleupdates | cut -d, -f1`

        cat blacklists |  grep -Ev "^#|^$" | tr -d "\r" |
           (
            while read line
            do
                    name=`echo $line | awk '{print $1}'`
                    statusbbb=`ipset -T $name.bro 1.1.1.1 2> /dev/null && echo 1 || echo 0`
                    iptables -L P2PARTISAN-LISTS-IN | grep $name > /dev/null || {
                        plog "P2Partisan tutor had to reinstall the iptables due to: P2PARTISAN-LIST-IN $name instruction missing"
                        ./iptables-del ; ./iptables-add
                        exit
                        }
                    iptables -L P2PARTISAN-LISTS-OUT | grep $name  > /dev/null || {
                        plog "P2Partisan tutor had to reinstall the iptables due to: P2PARTISAN-LIST-OUT $name instruction missing"
                        ./iptables-del ; ./iptables-add
                        exit
                        }
                age=`echo $((\`date +%s\` - \`date -r $name.cidr +%s\`))`
                if [[ $age -gt "604800" ]] && [[ $h -ge $schfrom ]] && [[ $h -le $schto ]]; then
                    plog "P2Partisan is updating list $name"
                    pforcestop $name
                    exit
                fi
                if [[ $age -gt "300" ]] && [[ $statusbbb -eq 1 ]]; then
                    plog "P2Partisan is clearing the $name secondary list"
                    ipset -F $name.bro
                fi
            done
            )
                if [[ $runningE -gt "1" ]]; then
                        pforcestop
                        plog "P2Partisan tutor had to restart due to: iptables redundant rules found"
                        pstart
                elif [[ $running3 -eq "1" ]] && [[ $running4 -eq "0" ]]; then
                        plog "P2Partisan tutor had to restart due to: pid file missing"
                        pforcestop
                        pstart
                elif [[ $running3 -eq "0" ]] && [[ $running4 -eq "1" ]]; then
                        plog "P2Partisan tutor had to restart due to: iptables instructions missing"
                        pforcestop
                        pstart
                elif [[ $running3 -ne "1" ]] && [[ $running4 -eq "1" ]]; then
                        plog "P2Partisan appears to be loading, I'll wait 30 seconds..."
                        sleep 30
                    if [[ $running3 -ne "1" ]] && [[ $running4 -eq "1" ]]; then
                            plog "P2Partisan tutor had to restart due to Stuck on Loading"
                            pforcestop
                            pstart
                    fi
                else
                    echo -e "
+------------------------- P2Partisan --------------------------+
|                _______         __
|               |_     _|.--.--.|  |_.-----.----.
|                 |   |  |  |  ||   _|  _  |   _|
|                 |___|  |_____||____|_____|__|
|
+---------------------------------------------------------------+
| P2Partisan up and running. The tutor is happy
+---------------------------------------------------------------+"
        fi
}

ptutorset() {
        echo -e "
+------------------------- P2Partisan --------------------------+
|                _______         __
|               |_     _|.--.--.|  |_.-----.----.
|                 |   |  |  |  ||   _|  _  |   _|
|                 |___|  |_____||____|_____|__|
|
+-------------------------- Scheduler --------------------------+"
        cru d P2Partisan-tutor
        ab=`tr -cd 0-5 </dev/urandom | head -c 1`
        a=`tr -cd 0-9 </dev/urandom | head -c 1`
        a=`echo $ab$a`
        scheduleme=`echo "$a * * * *"`
        cru a P2Partisan-tutor "$scheduleme $P2Partisandir/p2partisan.sh tutor"
        p=`nvram get script_fire | grep "cru a P2Partisan-tutor" | wc -l`
        if [ $p -eq "0" ] ; then
                t=`nvram get script_fire`; t=`printf "$t\ncru a P2Partisan-tutor \"$scheduleme $P2Partisandir/p2partisan.sh tutor\"\n"` ; nvram set "script_fire=$t"
        fi
        plog "P2Partisan tutor is ON"
                echo "+---------------------------------------------------------------+"
        nvram commit
}

ptutorunset() {
        echo -e "
+------------------------- P2Partisan --------------------------+
|                _______         __
|               |_     _|.--.--.|  |_.-----.----.
|                 |   |  |  |  ||   _|  _  |   _|
|                 |___|  |_____||____|_____|__|
|
+-------------------------- Scheduler --------------------------+"
        cru d P2Partisan-tutor
        p=`nvram get script_fire | grep "cru a P2Partisan-tutor" | wc -l`
        if [ $p -eq "1" ] ; then
        t=`nvram get script_fire`; t=`printf "$t\ncru a P2Partisan-tutor \"$schedule $P2Partisandir/p2partisan.sh tutor\"\n" | grep -v "cru a P2Partisan-tutor"` ; nvram set "script_fire=$t"
        fi
        plog "P2Partisan tutor is OFF"
                echo "+---------------------------------------------------------------+"
        nvram commit
 }

 ptest() {
checklist="blacklist-custom whitelist `cat blacklists | grep -Ev "^#|^$" | tr -d "\r" | awk '{print $1}'`"
echo -e "
+------------------------- P2Partisan --------------------------+
|                  _______               __
|                 |_     _|.-----.-----.|  |_
|                   |   |  |  -__|__ --||   _|
|                   |___|  |_____|_____||____|
|
+----------- Lists are sorted in order of precedence -----------+"
        if [[ -z $1 ]]; then
echo "+---------------------------------------------------------------+
| Invalid input. Please specify a valid IP address.
+---------------------------------------------------------------+"
        else
        test=$1
        echo $test | grep -E "(^[2][5][0-5].|^[2][0-4][0-9].|^[1][0-9][0-9].|^[0-9][0-9].|^[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5]|[2][0-4][0-9]|[1][0-9][0-9]|[0-9][0-9]|[0-9])$" >/dev/null 2>&1 && test=1 || test=0
        if [[ $test -eq 1 ]]; then
        echo $checklist | tr " " "\n" |
    (
                while read LIST
                do
                ipset -T $LIST $1 > /dev/null 2>&1 && if [ $LIST = "whitelist" ]; then echo -e "| \033[1;32m$1 found in        $LIST\033[0;39m"; else echo -e "| \033[1;31m$1 found in        $LIST\033[0;39m"; fi || echo -e "| $1 not found in    $LIST"
        done
    )
        echo "+---------------------------------------------------------------+
|        in case of multiple match the first prevails
+---------------------------------------------------------------+"
        elif [[ $test -eq 0 ]]; then
        echo "| Invalid input. Please specify a valid IP address.
+---------------------------------------------------------------+"
        fi
fi
}


pdebug() {
echo -e "
+------------------------- P2Partisan --------------------------+
|                _____         __
|               |     \.-----.|  |--.--.--.-----.
|               |  --  |  -__||  _  |  |  |  _  |
|               |_____/|_____||_____|_____|___  |
|                                         |_____|
|
+--------------------------- Guide -----------------------------+
| Debug allows to fully log the P2Partisan interventions given a LAN IP
| Maximum 1 debug at the time / Debug automatically times out or can be forced off manually
+---------------------------------------------------------------+
| p2partisan.sh debug <LAN IP> <minutes>    Syntax
| p2partisan.sh debug                       Displays debug status and this help text
| p2partisan.sh debug 192.168.0.3 <1-60>    Enables debug for the given LAN IP for N min (15 def)
| p2partisan.sh debug 192.168.0.3 9         Enables debug for the given LAN IP for 9 min
| p2partisan.sh debug off                   Disable debug without waiting for the timer
| p2partisan.sh debug-display <in|out>      Syntax
| p2partisan.sh debug-display               Displays in&out debug logs + guide
| p2partisan.sh debug-display out           Same as above but displays outbound records only
+-------------------------- Activity ---------------------------+"
echo "$1" | grep -Eo "([2][5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5]|[2][0-4][0-9]|[1][0-9][0-9]|[0-9][0-9]|[0-9])" >/dev/null 2>&1 && q=0 || q=1
echo "$1" | grep "off" >/dev/null 2>&1 && off=1 || off=0

                        if [ -e ./iptables-debug-del ]; then
          dfrom=`head -1 ./iptables-debug 2> /dev/null | awk '{print $2}'`
           druntime=`echo $(( $now - $dfrom ))`
                          h=`echo $((( $druntime / 3600 ) %24 ))`
                          m=`echo $((( $druntime / 60 ) %60 ))`
                          s=`echo $(( $druntime %60 ))`
           druntime=`printf "%02d:%02d:%02d\n" $h $m $s`
           dendtime=`head -2 ./iptables-debug-del | tail -n 1 | awk '{print $2}'`
                  ttime=`echo $(( $dendtime / 60 ))`
                  ttime=`echo $(( $dfrom + $dendtime ))`
                leftime=`echo $(( $ttime - $now ))`
                          m=`echo $((( $leftime / 60 ) %60 ))`
                          s=`echo $(( $leftime %60 ))`
                leftime=`printf "%02d:%02d:%02d\n" $h $m $s`
                zzztime=`echo $(( $dendtime / 60 ))`
                        fi


        if [[ $off -eq 1 ]]; then
        f=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG `
        fc=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | wc -l`
                if [[ $fc -ge 1 ]]; then
                kill `ps | grep -E "sleep $dendtime$" | awk '{print $1}'`
                plog "| All DEBUG activities have stopped"
        while iptables -L P2PARTISAN-DROP-IN | grep DEBUG > /dev/null 2>&1
        do
                iptables -D P2PARTISAN-DROP-IN 1  > /dev/null 2>&1
                done
        while iptables -L P2PARTISAN-DROP-OUT | grep DEBUG > /dev/null 2>&1
        do
                iptables -D P2PARTISAN-DROP-OUT 1  > /dev/null 2>&1
                done
                echo -e "| Use \033[1;33m./p2partisan.sh debug-display\033[0;39m to show debug information, if any.
+---------------------------------------------------------------+" ; exit
                else
                        echo -e "| Debug is currently off and not collecting any information.
| Use \033[1;33m./p2partisan.sh debug-display\033[0;39m to show existing debug information, if any.
+---------------------------------------------------------------+" ; exit
                fi
        fi

        if [[ -z $1 ]]; then
                f=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | awk '{print $5}'`
                fc=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | wc -l`
                if [[ $fc -ge 1 ]]; then
echo -e "| P2partisan is currently debugging IP \033[1;33m$f\033[0;39m for \033[1;33m$druntime\033[0;39m /\033[1;33m$zzztime\033[0;39m min (\033[1;33m$leftime\033[0;39m left)
| Use \033[1;33m./p2partisan.sh debug-display\033[0;39m to show debug information
+---------------------------------------------------------------+" ; exit
                elif [[ $fc -eq 0 ]]; then
                        echo -e "| Debug is currently off and not collecting any information.
| Use \033[1;33m./p2partisan.sh debug-display\033[0;39m to show existing debug information, if any.
+---------------------------------------------------------------+" ; exit
                fi
        elif [[ $q -ge 1 ]]; then
                        echo -e "| The input \033[1;31m$1\033[0;39m doesn't appear to be a valid IP
+---------------------------------------------------------------+" ; exit
        fi

        f=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | awk '{print $5}'`
        fc=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | wc -l`
        if [[ $fc -ge 1 ]]; then
echo -e "| P2partisan is currently debugging IP \033[1;33m$f\033[0;39m for \033[1;33m$druntime\033[0;39m /\033[1;33m$zzztime\033[0;39m min (\033[1;33m$leftime\033[0;39m left)
| NOTE: Only one debug at the time is possible! Command ignored.
| Use \033[1;33m./p2partisan.sh debug-display\033[0;39m to show the debug information
+---------------------------------------------------------------+" ; exit
        fi

if [ -z $2 ]; then
                minutes=15
                time=900
elif [[ $2 -gt 60 ]] || [[ $2 -eq 0 ]]; then
                echo "| Please specify an acceptable time: 1 to 60 (min). If omitted 15 will be used
| Debug NOT enabled. Exiting...
+---------------------------------------------------------------+" ; exit
else
                minutes=$2
                time=` echo $(( $2 * 60 ))`
fi
echo "# $now
iptables -I P2PARTISAN-DROP-IN 1 -d $1 -j LOG --log-prefix \"P2Partisan-DEBUG-IN->> \" --log-level 1 > /dev/null 2>&1
iptables -I P2PARTISAN-DROP-OUT 1 -s $1 -j LOG --log-prefix \"P2Partisan-DEBUG-OUT->> \" --log-level 1 > /dev/null 2>&1" > ./iptables-debug
chmod 777 ./iptables-debug  > /dev/null 2>&1
plog "Debug started for IP $1 for $minutes minute"
./iptables-debug 1>/dev/null &
                echo -e "| Enabled full debug logging for LAN IP \033[1;32m$1\033[0;39m for \033[1;32m$minutes\033[0;39m minutes
| Use \033[1;33m./p2partisan.sh debug-display\033[0;39m to show the debug information
+---------------------------------------------------------------+"

echo "# $now
sleep $time
iptables -D P2PARTISAN-DROP-IN -d $1 -j LOG --log-prefix \"P2Partisan-DEBUG-IN->> \" --log-level 1  > /dev/null 2>&1
iptables -D P2PARTISAN-DROP-OUT -s $1 -j LOG --log-prefix \"P2Partisan-DEBUG-OUT->> \" --log-level 1 > /dev/null 2>&1" > ./iptables-debug-del
chmod 777 ./iptables-debug-del 2> /dev/null
./iptables-debug-del 1>/dev/null &
}

pdebugdisplay() {
echo -e "
+------------------------- P2Partisan --------------------------+
_____         __                          __ __               __
|     \.-----.|  |--.--.--.-----.______.--|  |__|.-----.-----.|  |.---.-.--.--.
|  --  |  -__||  _  |  |  |  _  |______|  _  |  ||__ --|  _  ||  ||  _  |  |  |
|_____/|_____||_____|_____|___  |      |_____|__||_____|   __||__||___._|___  |
                         |_____|                      |__|             |_____|

+---------------------------------------------------------------+
| p2partisan.sh debug-display               Displays in & outbound debug logs
| p2partisan.sh debug-display in            Displays inbound debug logs only
| p2partisan.sh debug-display out           Displays outbound debug logs only
+-------------------------- Drop Logs --------------------------+"

   dfrom=`head -1 ./iptables-debug 2> /dev/null | awk '{print $2}'`
druntime=`echo $(( $now - $dfrom ))`
      h=`echo $((( $druntime / 3600 ) %24 ))`
      m=`echo $((( $druntime / 60 ) %60 ))`
      s=`echo $(( $druntime %60 ))`
druntime=`printf "%02d:%02d:%02d\n" $h $m $s`
dendtime=`head -2 ./iptables-debug-del | tail -n 1 | awk '{print $2}'`
  ttime=`echo $(( $dendtime / 60 ))`
  ttime=`echo $(( $dfrom + $dendtime ))`
leftime=`echo $(( $ttime - $now ))`
      m=`echo $((( $leftime / 60 ) %60 ))`
      s=`echo $(( $leftime %60 ))`
leftime=`printf "%02d:%02d:%02d\n" $h $m $s`
zzztime=`echo $(( $dendtime / 60 ))`

c=0
rm ./debug.rev  > /dev/null 2>&1
tail -800 $logfile | grep -i "P2Partisan" > ./debug.log
cat ./debug.log | sed '1!G;h;$!d' |
 (
 while read line
 do
testo=`echo $line | grep "Debug started for IP" | wc -l`
if [[ $testo -ge 1 ]]; then
        echo $line >> ./debug.rev
        cat ./debug.rev | sed '1!G;h;$!d' > ./debug.log
        rm ./debug.rev  > /dev/null 2>&1
        exit
else
        echo $line >> ./debug.rev
fi
done
)

if [ -z $1 ]; then
        echo -e "\033[48;5;89m+----------------------- INPUT & OUTPUT ------------------------+\033[0m"
        head -1 ./debug.log
        cat ./debug.log | grep "DEBUG" | awk '{printf "%s %s %s ",$1,$2,$3;for (i=4;i<=NF;i++) if ($i~/(IN|OUT|SRC|DST|PROTO|SPT|DPT)=/) printf "%s ",$i;print ""}' | sed -e 's/PROTO=//g' -e 's/IN=/I=/g' -e 's/OUT=/O=/g' -e 's/SPT=/S=/g' -e 's/DPT=/D=/g' -e 's/SRC=/S=/g' -e 's/DST=/D=/g' | while read line; do
          [ $(($c%2)) -eq 1 ] && printf "\e[100m"
          printf "%s\033[0m\n" "$line"
          c=$(($c+1))
                done
        fc=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | wc -l`
                if [[ $fc -ge 1 ]]; then
                echo -e "\e[93mNOTE: debugging is active for $druntime /$zzztime min ($leftime left). Run this command again to update the report\033[0m"
                fi
        echo -e "\033[48;5;89m+----------------------- INPUT & OUTPUT ------------------------+\033[0m"
elif [[ $1 = "in" ]]; then
        echo -e "\033[48;5;89m+--------------------------- INPUT -----------------------------+\033[0m"
        head -1 ./debug.log
        cat ./debug.log | grep "DEBUG-IN" | awk '{printf "%s %s %s ",$1,$2,$3;for (i=4;i<=NF;i++) if ($i~/(IN|OUT|SRC|DST|PROTO|SPT|DPT)=/) printf "%s ",$i;print ""}' | sed -e 's/PROTO=//g' -e 's/IN=/I=/g' -e 's/OUT=/O=/g' -e 's/SPT=/S=/g' -e 's/DPT=/D=/g' -e 's/SRC=/S=/g' -e 's/DST=/D=/g' | while read line; do
          [ $(($c%2)) -eq 1 ] && printf "\e[100m"
          printf "%s\033[0m\n" "$line"
          c=$(($c+1))
                done
        fc=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | wc -l`
                if [[ $fc -ge 1 ]]; then
                echo -e "\e[93mNOTE: debugging is active for $druntime /$zzztime min ($leftime left). Run this command again to update the report\033[0m"
                fi
        echo -e "\033[48;5;89m+--------------------------- INPUT -----------------------------+\033[0m"
elif [[ $1 = "out" ]]; then
                echo -e "\033[48;5;89m+--------------------------- OUTPUT ----------------------------+\033[0m"
                head -1 ./debug.log
        cat ./debug.log | grep "DEBUG-OUT" | awk '{printf "%s %s %s ",$1,$2,$3;for (i=4;i<=NF;i++) if ($i~/(IN|OUT|SRC|DST|PROTO|SPT|DPT)=/) printf "%s ",$i;print ""}' | sed -e 's/PROTO=//g' -e 's/IN=/I=/g' -e 's/OUT=/O=/g' -e 's/SPT=/S=/g' -e 's/DPT=/D=/g' -e 's/SRC=/S=/g' -e 's/DST=/D=/g' | while read line; do
          [ $(($c%2)) -eq 1 ] && printf "\e[100m"
          printf "%s\033[0m\n" "$line"
          c=$(($c+1))
                done
        fc=`iptables -L P2PARTISAN-DROP-IN | grep DEBUG | wc -l`
                if [[ $fc -ge 1 ]]; then
                echo -e "\e[93mNOTE: debugging is active for $druntime /$zzztime min ($leftime left). Run this command again to update the report\033[0m"
                fi
                echo -e "\033[48;5;89m+--------------------------- OUTPUT ----------------------------+\033[0m"
fi
    echo -e "+---------------------------------------------------------------+"
}

pwhitelist() {
        ipset -F whitelist
    [ -f ./whitelist ] && cat ./whitelist | grep -Ev "^#|^$" | tr -d "\r" |
    (
    while read IP
    do
                q=100
                echo "$IP" | grep -E "(([a-zA-Z]|[a-zA-Z][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z]|[A-Za-z][A-Za-z0-9\-]*[A-Za-z0-9])" >/dev/null 2>&1 && q=1
                echo "$IP" | grep -Eo "^([2][5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5]|[2][0-4][0-9]|[1][0-9][0-9]|[0-9][0-9]|[0-9]-.*)" >/dev/null 2>&1 && q=0
                echo "$IP" | grep -Eo "^([2][5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5]|[2][0-4][0-9]|[1][0-9][0-9]|[0-9][0-9]|[0-9])$" >/dev/null 2>&1 && q=2
                echo "$IP" | grep -Eo "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/([0-9]|[1-2][0-9]|3[0-2]))$" >/dev/null 2>&1 && q=3
                echo "$IP" | awk '{print $2}' | grep -E '^(http)' >/dev/null 2>&1 && q=4
        if [[ $q -eq 0 ]]; then
                                echo $IP | pdeaggregate | {
                                while read cidr
                                do
                                        ipset -A whitelist $cidr 2> /dev/null
                                done
                                }
        elif [[ $q -eq 1 ]]; then
                nslookup $IP | grep "Address [0-9]*:" | grep -v 127.0.0.1 | grep -v "\:\:" | grep -Eo "([0-9\.]{7,15})" |
                                while read IPO
                                do
                                ipset -A whitelist ${IPO%*/32} 2> /dev/null
                                done
        elif [[ $q -eq 2 ]]; then
                                ipset -A whitelist ${IP%*/32} 2> /dev/null
        elif [[ $q -eq 3 ]]; then
                                ipset -A whitelist $IP 2> /dev/null
        elif [[ $q -eq 4 ]]; then
        # SORT OUT
                                url=`echo $IP | awk '{print $2}'`
                                # deaggregate whitelist $url 3 &
        fi
        done
    )
}

pblacklistcustom() {
        ipset -F blacklist-custom
    [ -f ./blacklist-custom ] && cat ./blacklist-custom | grep -Ev "^#|^$" | tr -d "\r" |
    (
    while read IP
    do
                q=100
                echo "$IP" | grep -E "(([a-zA-Z]|[a-zA-Z][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z]|[A-Za-z][A-Za-z0-9\-]*[A-Za-z0-9])" >/dev/null 2>&1 && q=1
                echo "$IP" | grep -Eo "^([2][5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5]|[2][0-4][0-9]|[1][0-9][0-9]|[0-9][0-9]|[0-9]-.*)" >/dev/null 2>&1 && q=0
                echo "$IP" | grep -Eo "^([2][5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5].|[2][0-4][0-9].|[1][0-9][0-9].|[0-9][0-9].|[0-9].)([2][0-5][0-5]|[2][0-4][0-9]|[1][0-9][0-9]|[0-9][0-9]|[0-9])$" >/dev/null 2>&1 && q=2
                echo "$IP" | grep -Eo "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/([0-9]|[1-2][0-9]|3[0-2]))$" >/dev/null 2>&1 && q=3
        if [[ $q -eq 0 ]]; then
                                echo $IP | pdeaggregate | {
                                while read cidr
                                do
                                    ipset -A whitelist $cidr 2> /dev/null
                                done
                                }
        elif [[ $q -eq 1 ]]; then
                nslookup $IP | grep "Address [0-9]*:" | grep -v 127.0.0.1 | grep -v "\:\:" | grep -Eo "([0-9\.]{7,15})" |
                                while read IPO
                                do
                                ipset -A blacklist-custom ${IPO%*/32} 2> /dev/null
                                done
        elif [[ $q -eq 2 ]]; then
                                ipset -A blacklist-custom ${IP%*/32} 2> /dev/null
        elif [[ $q -eq 3 ]]; then
                                ipset -A blacklist-custom $IP 2> /dev/null
        fi
        done
    )
}

pstart() {

        running4=`[ -f $pidfile ] && echo 1 || echo 0`
        if [ $running4 -eq "0" ] ; then
            [ -f /tmp/p2partisan.loading ] && echo "P2Partisan is still loading. Exiting..." && exit
            touch /tmp/p2partisan.loading
            pre=`date +%s`
            echo $$ > $pidfile

    [ -e iptables-add ] && rm iptables-add
    [ -e iptables-del ] && rm iptables-del
    [ -e ipset-del ] && rm ipset-del

        echo -e "
+------------------------- P2Partisan --------------------------+
|                 _______ __               __
|                |     __|  |_.---.-.----.|  |_
|                |__     |   _|  _  |   _||   _|
|                |_______|____|___._|__|  |____|
|
+---------------------------------------------------------------+
+--------- PREPARATION --------"
        echo "| Loading the ipset modules"
        lsmod | awk '{print $1}' | grep -we "^ip_set" > /dev/null 2>&1 || insmod ip_set > /dev/null 2>&1
        lsmod | awk '{print $1}' | grep -we "^xt_set" > /dev/null 2>&1 || insmod xt_set > /dev/null 2>&1
        lsmod | awk '{print $1}' | grep -we "^ip_set_hash_net" > /dev/null 2>&1 || insmod ip_set_hash_net > /dev/null 2>&1

counter=0
pos=1
                counter=$(printf "%02d" $counter)
                echo "+---- CUSTOM IP BLACKLIST -----
| preparing blacklist-custom ..."
                echo -e "| Loading Blacklist_$counter data ---> \033[1;37m***Custom IP blacklist***\033[0;39m"
                if [ "$(ipset --swap blacklist-custom blacklist-custom 2>&1 | grep 'does not exist')" != "" ]
                        then
                        ipset --create blacklist-custom hash:net hashsize 1024 --resize 5 maxelem 1024000  2> /dev/null
                        fi

        pblacklistcustom

[ -e /tmp/iptables-add.tmp ] && rm /tmp/iptables-add.tmp > /dev/null 2>&1

echo "+--------- GREYPORTs ----------"
echo $greyports_tcp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
                        echo -e "| Loading grey TCP ports:  \033[1;37m$w\033[0;39m"
                        echo "iptables -A P2PARTISAN-IN -i $wanif -p tcp --match multiport --dports $w -g P2PARTISAN-LISTS-IN
iptables -A P2PARTISAN-OUT -o $wanif -p tcp --match multiport --sports $w -g P2PARTISAN-LISTS-OUT" >> /tmp/iptables-add.tmp
done
echo $greyports_udp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
                        echo -e "| Loading grey UDP ports:  \033[1;37m$w\033[0;39m"
                        echo "iptables -A P2PARTISAN-IN -i $wanif -p udp --match multiport --dports $w -g P2PARTISAN-LISTS-IN
iptables -A P2PARTISAN-OUT -o $wanif -p udp --match multiport --sports $w -g P2PARTISAN-LISTS-OUT" >> /tmp/iptables-add.tmp
done
# Get transmission port for greylisting if enabled
transmissionenable=`nvram get bt_enable`
if [ -z $transmissionenable ]; then
    echo "|  TransmissionBT:  Not available"
    elif [ $transmissionenable -eq 0 ]; then
    echo "|  TransmissionBT:  Off"
    else
    echo -e "|  TransmissionBT:  \033[1;32mOn\033[0;39m"
        transmissionport=`nvram get bt_port 2> /dev/null`
        wanip=`nvram get wan_ipaddr`
        p3=`echo $greyports_tcp | grep -Eo '$transmissionport' | wc -l`
        p4=`echo $greyports_udp | grep -Eo '$transmissionport' | wc -l`
        if [ $p3 -eq "0" ]; then
                        echo "iptables -A P2PARTISAN-IN -i $wanif -p tcp -d $wanip --dport $transmissionport -g P2PARTISAN-LISTS-IN
iptables -A P2PARTISAN-OUT -o $wanif -p tcp -s $wanip --sport $transmissionport -g P2PARTISAN-LISTS-OUT
iptables -A P2PARTISAN-OUT -o $wanif -p tcp -s $wanip --sport 49152:65535 -g P2PARTISAN-LISTS-OUT" >> /tmp/iptables-add.tmp
        fi
        if [ $p4 -eq "0" ]; then
                        echo "iptables -A P2PARTISAN-IN -i $wanif -p udp -d $wanip --dport $transmissionport -g P2PARTISAN-LISTS-IN
iptables -A P2PARTISAN-OUT -o $wanif -p udp -s $wanip --sport $transmissionport -g P2PARTISAN-LISTS-OUT
iptables -A P2PARTISAN-OUT -o $wanif -p udp -s $wanip --sport 49152:65535 -g P2PARTISAN-LISTS-OUT" >> /tmp/iptables-add.tmp
        fi
fi

echo "+--------- WHITEPORTs ---------"
echo $whiteports_tcp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
                echo -e "| Loading white TCP ports \033[1;37m$w\033[0;39m"
                echo "iptables -A P2PARTISAN-IN -i $wanif -p tcp --match multiport --sports $w -j RETURN
iptables -A P2PARTISAN-IN -i $wanif -p tcp --match multiport --dports $w -j RETURN
iptables -A P2PARTISAN-OUT -o $wanif -p tcp --match multiport --sports $w -j RETURN
iptables -A P2PARTISAN-OUT -o $wanif -p tcp --match multiport --dports $w -j RETURN" >> /tmp/iptables-add.tmp
                done
echo $whiteports_udp | awk -v RS=',' -F : '{ gsub(/\n$/, "") } NF > 1 { r=(r ? r "," : "") $0; if (r ~ /([^,]*,){6}/) { print r; r=""; } next } { s=(s ? s "," : "") $0; if (s ~ /([^,]*,){14}/) { print s; s=""; } }  END { if (r && s) { p = r "," s; if (p !~ /([^,:]*[:,]){15}/) { print p; r=s="" } } if (r) print r ; if (s) print s }' | while read w; do
                echo -e "| Loading white UDP ports \033[1;37m$w\033[0;39m"
                echo "iptables -A P2PARTISAN-IN -i $wanif -p udp --match multiport --sports $w -j RETURN
iptables -A P2PARTISAN-IN -i $wanif -p udp --match multiport --dports $w -j RETURN
iptables -A P2PARTISAN-OUT -o $wanif -p udp --match multiport --sports $w -j RETURN
iptables -A P2PARTISAN-OUT -o $wanif -p udp --match multiport --dports $w -j RETURN" >> /tmp/iptables-add.tmp
                done
echo "iptables -A P2PARTISAN-IN -j P2PARTISAN-LISTS-IN
iptables -A P2PARTISAN-OUT -j P2PARTISAN-LISTS-OUT" >> /tmp/iptables-add.tmp

                echo "# $now
iptables -N P2PARTISAN-IN
iptables -N P2PARTISAN-OUT
iptables -N P2PARTISAN-LISTS-IN
iptables -N P2PARTISAN-LISTS-OUT
iptables -N P2PARTISAN-DROP-IN
iptables -N P2PARTISAN-DROP-OUT
iptables -F P2PARTISAN-IN
iptables -F P2PARTISAN-OUT
iptables -F P2PARTISAN-LISTS-IN
iptables -F P2PARTISAN-LISTS-OUT
iptables -F P2PARTISAN-DROP-IN
iptables -F P2PARTISAN-DROP-OUT
iptables -A P2PARTISAN-IN -m set  --match-set blacklist-custom src -j P2PARTISAN-DROP-IN
iptables -A P2PARTISAN-OUT -m set  --match-set blacklist-custom dst -j P2PARTISAN-DROP-OUT" > iptables-add

#Add winin/wanout for RMerlin compatibility only
if [ $rm -eq 1 ]; then
        echo "iptables -N wanin
iptables -I FORWARD 1 -i $wanif -j wanin
iptables -N wanout
iptables -I FORWARD 2 -o $wanif -j wanout" >> ./iptables-add
fi
#
                echo "# $now" >> iptables-del
[ -f ./custom-script-del ] && cat ./custom-script-add >> iptables-del
echo "iptables -D wanin -i $wanif -m state --state NEW -j P2PARTISAN-IN
iptables -D wanout -o $wanif -m state --state NEW -j P2PARTISAN-OUT
iptables -D INPUT -i $wanif -m state --state NEW -j P2PARTISAN-IN
iptables -D OUTPUT -o $wanif -m state --state NEW -j P2PARTISAN-OUT
iptables -F P2PARTISAN-DROP-IN
iptables -F P2PARTISAN-DROP-OUT
iptables -F P2PARTISAN-LISTS-IN
iptables -F P2PARTISAN-LISTS-OUT
iptables -F P2PARTISAN-IN
iptables -F P2PARTISAN-OUT
iptables -X P2PARTISAN-IN
iptables -X P2PARTISAN-OUT
iptables -X P2PARTISAN-LISTS-IN
iptables -X P2PARTISAN-LISTS-OUT
iptables -X P2PARTISAN-DROP-IN
iptables -X P2PARTISAN-DROP-OUT" >> iptables-del

echo "+--------- WHITE IPs ---------"
echo "| preparing IP whitelist ..."
#Load the whitelist
        if [ "$(ipset --swap whitelist whitelist 2>&1 | grep 'does not exist')" != "" ]
                then
                        ipset --create whitelist hash:net hashsize 1024 --resize 5 maxelem 1024000  > /dev/null 2>&1
        fi
        pwhitelist

        echo "# $now
ipset -F
ipset -X blacklist-custom
ipset -X whitelist" > ipset-del

                        echo -e "| Loading IP whitelist data ---> \033[1;37m***IP Whitelist***\033[0;39m"
                        echo "iptables -A P2PARTISAN-IN -m set  --match-set whitelist src -j RETURN
iptables -A P2PARTISAN-IN -m set  --match-set whitelist dst -j RETURN
iptables -A P2PARTISAN-OUT -m set  --match-set whitelist src -j RETURN
iptables -A P2PARTISAN-OUT -m set  --match-set whitelist dst -j RETURN" >> iptables-add

cat /tmp/iptables-add.tmp >> ./iptables-add
rm /tmp/iptables-add.tmp > /dev/null 2>&1

                if [ $syslogs -eq "1" ]; then
echo "iptables -A P2PARTISAN-DROP-IN -m limit --limit $maxloghour/hour --limit-burst 1 -j LOG --log-prefix 'P2Partisan Dropped IN - ' --log-level 1
iptables -A P2PARTISAN-DROP-OUT -m limit --limit $maxloghour/hour  --limit-burst 1 -j LOG --log-prefix 'P2Partisan Rejected OUT - ' --log-level 1" >> iptables-add
                fi
                echo "iptables -A P2PARTISAN-DROP-IN -j DROP
iptables -A P2PARTISAN-DROP-OUT -j REJECT --reject-with icmp-admin-prohibited"  >> iptables-add


echo "+------- IP BLACKLISTs -------"

        cat blacklists | grep -Ev "^#|^$" | tr -d "\r" |
   (
    while read line
    do
            counter=`expr $counter + 1`
            counter=$(printf "%02d" $counter)
            name=`echo $line | awk '{print $1}'`
            url=`echo $line | awk '{print $2}'`

        if [ "$(ipset swap "$name.bro" "$name.bro" 2>&1 | grep 'does not exist')" != "" ]
            then
            ipset --create "$name.bro" hash:net hashsize 1024 --resize 5 maxelem 4096000 > /dev/null
        fi
        if [ "$(ipset swap $name $name 2>&1 | grep 'does not exist')" != "" ]
            then
                [ -f ./$name.cidr ] && cat ./$name.cidr | cut -d" " -f3 | grep -E "^1.1.1.1$" > /dev/null && complete=1 || complete=0
                if [ $complete -eq 1 ]; then                #.cidr exists and populated, using it
                        echo -e "| Async loading [cached] Blacklist_$counter --> \033[1;37m***$name***\033[0;39m"
                        ipset -F $name 2> /dev/null
                        ipset -X $name 2> /dev/null
                        ipset --create $name hash:net hashsize 1024 --resize 5 maxelem 4096000 > /dev/null
                        deaggregate $name "" 2 $pre "" $maxconcurrentlistload $P2Partisandir &
                else                                        #fresh load/first run
                        echo -e "| Async loading [convert] Blacklist_$counter --> \033[1;37m***$name***\033[0;39m"
                        ipset -F $name 2> /dev/null
                        ipset -X $name 2> /dev/null
                        ipset --create $name hash:net hashsize 1024 --resize 5 maxelem 4096000 > /dev/null
                        deaggregate $name $url 0 $pre "" $maxconcurrentlistload $P2Partisandir &
                                             # 4 = On the fly record by record STOUT output
                                             # 3 = add from public whitelist sIP-dIP to ipset only
                                             # 2 = add from .cidr to ipset only
                                             # 1 = convert + add live + create .cidr file (very slow)
                                             # 0 = convert + add live + create ipset dump
                                             # different = convert + add to ipset + create .cidr file
                fi
        fi

        echo "ipset -X $name " >> ipset-del
        echo "iptables -A P2PARTISAN-LISTS-IN -m set  --match-set $name src -j P2PARTISAN-DROP-IN
iptables -A P2PARTISAN-LISTS-OUT -m set  --match-set $name dst -j P2PARTISAN-DROP-OUT" >> iptables-add
    done
    )


echo "iptables -I INPUT $pos -i $wanif -m state --state NEW -j P2PARTISAN-IN
iptables -I OUTPUT $pos -o $wanif -m state --state NEW -j P2PARTISAN-OUT
iptables -I wanin $pos -i $wanif -m state --state NEW -j P2PARTISAN-IN
iptables -I wanout $pos -o $wanif -m state --state NEW -j P2PARTISAN-OUT" >> iptables-add

#Add winin/wanout for RMerlin compatibility only
if [ $rm -eq 1 ]; then
echo "iptables -F wanin
iptables -X wanin
iptables -D FORWARD -i $wanif -j wanin
iptables -F wanout
iptables -X wanout
iptables -D FORWARD -o $wanif -j wanout" >> iptables-del
fi
#

[ -f ./custom-script-add ] && cat ./custom-script-add >> iptables-add

chmod 777 ./iptables-*
chmod 777 ./ipset-*
./iptables-del 2> /dev/null #cleaning
./iptables-add 2> /dev/null  #protecting

plog "... P2Partisan started"
echo "+------------------------- Controls ----------------------------+"

p=`nvram get dnsmasq_custom | grep log-async | wc -l`
if [ $p -eq "1" ]; then
        plog "log-async found under dnsmasq -> OK"
echo "+---------------------------------------------------------------+"
else
        plog "
| It appears like you don't have a log-async parameter in your dnsmasq
| config. This is strongly suggested due to the amount of logs involved,
| especially while debugging to consider adding the following command
| under Advanced/DHCP/DNS/Dnsmasq Custom configuration:
|
| log-async=20
|
+---------------------------------------------------------------+"
    fi
p=`nvram get script_fire | grep "cru a P2Partisan-tutor" | wc -l`
        if [ $p -eq "0" ] ; then
        ptutorset
        fi

        post=`date +%s`
        [ -f /tmp/p2partisan.loading ] && rm -r "/tmp/p2partisan.loading" >/dev/null 2>&1
        else
        echo -e "
+------------------------- P2Partisan --------------------------+
|                 _______ __               __
|                |     __|  |_.---.-.----.|  |_
|                |__     |   _|  _  |   _||   _|
|        already |_______|____|___._|__|  |____| ed
|
+---------------------------------------------------------------+
| It appears like P2Partisan is already running. Skipping...
|
| Is this is not what you expected? Try:
| \033[1;33m./p2partisan.sh update\033[0;39m
+---------------------------------------------------------------+
                "
        fi
}

b64(){
awk 'BEGIN{b64="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"}
{for(i=1;i<=length($0);i++){c=index(b64,substr($0,i,1));if(c--)
for(b=0;b<6;b++){o=o*2+int(c/32);c=(c*2)%64;if(++obc==8){if(o)
{printf"%c",o}else{system("echo -en \"\\0\"")}obc=o=0}}}}';}

pdeaggregate() {
awk '
function ip2int(ip) {
 for (ret=0,n=split(ip,a,"\."),x=1;x<=n;x++) ret=or(lshift(ret,8),a[x])
 return ret
}

function int2ip(ip,ret,x) {
 ret=and(ip,255)
 ip=rshift(ip,8)
 for(;x<3;ret=and(ip,255)"."ret,ip=rshift(ip,8),x++);
 return ret
}

BEGIN {
bits=0xffffffff
FS="[-]"
}

{
 base=ip2int($1)
 end=ip2int($2)
 while (base <= end) {
 step = 0
 while ( or(base, lshift(1, step)) != base) {
 if ( or(base, rshift((bits, (31-step)))) > end ) {
 break;
 }
 step++
 }
 print int2ip(base)"/"(32-step)
 base = base + lshift(1, step)
 }
}

'  #end of awk script
}

for p in $1
do
case "$p" in
        "start")
                pstart
                        exit
                ;;
        "stop")
                pforcestop
                        exit
                ;;
        "restart")
                psoftstop
                ;;
        "status")
                pstatus $2
                        exit
                ;;
        "pause")
                psoftstop
                        exit
                ;;
        "detective")
                pdetective
                        exit
                ;;
        "test")
                ptest $2
                        exit
                ;;
        "debug")
                pdebug $2 $3
                        exit
                ;;
        "debug-display")
                pdebugdisplay $2
                        exit
                ;;
        "update")
                pforcestop $2
                        echo "| Now updating..."
                        ;;
        "autorun-on")
                        pautorunset
                        exit
        ;;
        "autorun-off")
                        pautorununset
                        exit
        ;;
        "tutor")
                        ptutor
                        exit
                        ;;
        "upgrade")
                        pupgrade
                        ;;
        "upgrade-beta")
                        pupgradebeta
                        ;;
        "help")

                echo -e "\033[48;5;89m
      ______ ______ ______              __   __
     |   __ \__    |   __ \.---.-.----.|  |_|__|.-----.---.-.-----.
     |    __/    __|    __/|  _  |   _||   _|  ||__ --|  _  |     |
     |___|  |______|___|   |___._|__|  |____|__||_____|___._|__|__| $version
                        \e[39m\e[49m

       help                    Display this text
       \e[97mstart                   Starts the process (this runs also if no option is provided)
       stop                    Stops P2Partisan
       restart                 Soft restart, updates whiteports & whitelist only
       pause                   Soft stop P2Partisan allowing for quick start
       update                  Hard restart, slow removes p2partisan, updates
                               the lists and does a fresh start
       update <list|fix>       Updated the selected list only | remove cidr a start from scratch\e[39m
       status                  Display P2Partisan running status + extra information
       status <list>           Display P2Partisan detailed list information
       \e[93mtest <IP>               Verify existence of the given IP against lists
       debug                   Shows a guide on how to operate debug
       debug-display <in|out>  Shows all the logs relevant to the last debug only
       detective               Determines highest impact IPs:ports (number of sessions)
       \e[36mautorun-on              Sets P2Partisan to boot with the router
       autorun-off             Sets P2Partisan not to boot with the router
       upgrade                 Download and install the latest P2Partisan\e[39m
"
                                exit
                ;;
        *)
                                echo "parameter not valid. please run:

       p2partisan.sh help
       "
                                exit
                                ;;

esac
done

pstart


exit