#!/bin/bash                                             


. /var/www/maincp/var/etc/config


MAC=$2

if [ "$2" == "" ]
then
 
MAC=`/var/www/maincp/root/im $1`

fi

if [ "$1" == "" ]
then
  echo  "$0 (ip) mac"
  exit 1
fi 

/sbin/iptables -D FORWARD -p tcp -i tun0 -s $1 --sport 1:65535 --dport 1:65535 -m state --state NEW,ESTABLISHED -j DROP 1>& /dev/null
/sbin/iptables -D FORWARD -p udp -i tun0 -s $1 --sport 1:65535 --dport 1:65535 -m state --state NEW,ESTABLISHED -j DROP 1>& /dev/null
/sbin/iptables -D FORWARD -p all -i tun0 -s $1 --dport 1:65535 -m state --state NEW,ESTABLISHED -j DROP 1>& /dev/null
/sbin/iptables -D INPUT -p all -s $1 -j DROP 1>& /dev/null
/sbin/iptables -D INPUT -p tcp -s $1 -j DROP 1>& /dev/null
/sbin/iptables -D INPUT -p udp -s $1 -j DROP 1>& /dev/null

/sbin/iptables -D FORWARD -p tcp -i tun0 -s $1 --dport 1:52 -m state --state NEW,ESTABLISHED -j DROP  
/sbin/iptables -D FORWARD -p tcp -i tun0 -s $1 --dport 54:79 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p tcp -i tun0 -s $1 --dport 81:442 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p tcp -i tun0 -s $1 --dport 444:1862 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p tcp -i tun0 -s $1 --dport 1864:65535 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p udp -i tun0 -s $1 --dport 1:52 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p udp -i tun0 -s $1 --dport 54:79 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p udp -i tun0 -s $1 --dport 81:122 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p udp -i tun0 -s $1 --dport 124:442 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p udp -i tun0 -s $1 --dport 444:1862 -m state --state NEW,ESTABLISHED -j DROP 
/sbin/iptables -D FORWARD -p udp -i tun0 -s $1 --dport 1864:65535 -m state --state NEW,ESTABLISHED -j DROP 


if [ -f /var/www/maincp/sub/BAN/$MAC ]
then

IPBM=`cat /var/www/maincp/sub/BAN/$MAC`

/var/www/maincp/root/removeban $IPBM 
/var/www/maincp/root/removeban $IPBM 


rm -f /var/www/maincp/sub/BAN/$MAC

fi


TI=`date`


echo "1" > /var/www/maincp/logs/BM/$1


MSG=`/var/www/maincp/root/ip-mac $1`

echo "$TI EEE REMOVE BAN AUTH QBM - IMAC=$MAC $MSG " >> $DISP

rm -f $BMO

#rm -f /var/www/maincp/sub/BAN/$MAC



