Мониторинг определенных разрешений DNS и изменение маршрутов при записи новых IP-адресов

Все, что вам нужно, это файл «dnstests.txt» в каталоге скриптов с синтаксисом:

first.domain.tld=1.2.3.4
your.second.tld=5.6.7.8

Вот код (спасибо MC ND за умный фильтр NSLookup):

  @ECHO OFF
  SETLOCAL ENABLEEXTENSIONS ENABLEDELAYEDEXPANSION

  REM ++++++++++++++++++++++++++++ BLAT EMAIL CONFIG ++++++++++++++++++++++++++++++++++++
  set [email protected]
  set [email protected]
  set eMailFROM=dnstestscript
  set server=0.0.0.0
  REM you have to install blat of course, here "echo blat ..." is used where it would be
  REM useful to send an email on interesting items, but it is also sent to shell and log
  REM +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  REM ++++++++++++++++++++++++++++ MAKE DATE ++++++++++++++++++++++++++++++++++++++++++++
  for /F "usebackq tokens=1,2 delims==" %%i in (`wmic os get LocalDateTime /VALUE 2^>NUL`) do if '.%%i.'=='.LocalDateTime.' set ldt=%%j
  REM make timestamp (date reverse)
  set STAMP=%ldt:~0,4%-%ldt:~4,2%-%ldt:~6,2%--%ldt:~8,2%-%ldt:~10,2%--%ldt:~12,2%-%ldt:~15,3%
  set ACTUALDATE=%ldt:~0,4%-%ldt:~4,2%-%ldt:~6,2%
  REM +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  REM ++++++++++++++++++++++++++++ SCRIPT CONFIG ++++++++++++++++++++++++++++++++++++++++
  set "XScriptnamE=%~n0"
  set "XSCRIPTDIR=%~dp0"
  set "LOGDIR=%XSCRIPTDIR%\%XScriptnamE%"
  if not exist "%LOGDIR%" mkdir "%LOGDIR%"
  set "LOG=%LOGDIR%\%XScriptnamE%.log"
  REM +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  REM ++++++++++++++++++++++++++++ SCRIPT ALIVE ++++++++++++++++++++++++++++++++++++++++
  REM now tell us once a day that script is up and running
  set DateLOG=%XSCRIPTDIR%\%XScriptnamE%-date.txt
  if not exist "%DateLOG%" echo %ACTUALDATE% > %DateLOG%
  set /p BEFOREDATE=< %DateLOG%
    if NOT %ACTUALDATE% == %BEFOREDATE% (
      echo %ACTUALDATE% > %DateLOG%
      echo blat %0 -subject "DNS Routes Script is alive and running! OK" -body "DNS-routing-script up and running - DNS routing is OK!" -to %eMailTO% -cc %eMailCC% -f %eMailFROM% %server% 
    )
  REM +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  REM make errorlooging expand
  set "XLOGX=xpipex && type xpipex && type xpipex >> %LOG%"
  REM or make individual run logs
  REM set "LOG=%LOGDIR%\%XScriptnamE%\%XScriptnamE%-%STAMP%.log"
  REM not global vars come here
  set "DNSTESTFILE=%XSCRIPTDIR%\dnstests.txt"
  REM set GATEWAY here
  set GW=7.7.7.7
  REM to reflect GW changes here a route has to be set with each run if this is needed turn switch to 2
  REM otherwise only missing routes get re set by switch 1 (default)
  set REFRESH-GW=1
  REM +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  REM do never set something here at errorlog plz otherwise compare of happened errors wont work
  set errorlog=
  pushd=%XSCRIPTDIR%
  REM +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  echo ================================================== >> %LOG%
  echo   Script run at %STAMP% >> %LOG%
  REM +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  REM ++++++++++++++++++++++++++++ START ++++++++++++++++++++++++++++++++++++++++++++++++
  REM if the script is run in cmd we see enough information to follow actions but they are written to a log file too for sheduled use
  REM ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  REM when a batch script needs to use drives not local, eg shares it always needs special rights, 
  REM means you need to use an account to run the script which is allowed to log on as batch task in 
  REM secpol - (click start type secpol.msc and start it - Select "Local Policies" in MSC snap 
  REM in - Select "User Rights Assignment" - Right click on "Log on as batch job" and select 
  REM Properties - Click "Add User or Group", and include the relevant user.)
  REM ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  REM ++++++++++++ make a loop for each line in file ++++++++++++++++++++++++++++++++++++
  REM first we test if script is able to set routes and got admin rights
  REM if delete fails, with false parameter -> script is elevated
  REM otherwise the missing elevated rights get reported to log
  echo.
  echo "if route delete fails, with false parameter -> script is elevated"
  echo "otherwise the missing elevated rights get reported to console"
  echo.
  route delete 999.999.999.999
  echo. >> %LOG%
  echo "if route delete fails, missing elevated rights get reported to log " >> %LOG%
  echo "otherwise the script is elevated and you find only this text in log" >> %LOG%
  echo. >> %LOG%
  route delete 999.999.999.999 >> %LOG%
  REM read them in different vars to call processing
  REM check for test file
  if NOT exist "%DNSTESTFILE%" (
    set errorlog=%errorlog% : error dns file not exist :
    echo blat error dnsfile
    echo error dnsfile not exist >> %log%
    )
  REM read test file
  set Counter=1
  for /f %%s in (%DNSTESTFILE%) do (
    set "Line_!Counter!=%%s"
    set /a Counter+=1
    )
  set /a NumLines=Counter - 1
  REM make a backup of old test file before nulling it
  copy /y %DNSTESTFILE% %DNSTESTFILE%.bak 2>&1 > %XLOGX% 
  REM as i found no easy way to rewrite the specific line i choose to read out all lines in vars, 
  REM now we nul the file and rewrite lines later, BE aware if script breaks all lines are lost most times
  REM instead of only one, so edit it carefully and test carefully all cases possible
  type NUL > %DNSTESTFILE%
  REM now use vars to call processing
  for /l %%r in (1,1,%NumLines%) do (
    set "q=!Line_%%r!"
    echo. >> %log%
    echo.
    call :check !q!
    )
  REM did all go well or what did we miss?
  if NOT "%errorlog%."=="." (
  echo.
  echo blat summary %errorlog%!
  echo. >> %LOG%
  echo %errorlog%! >> %LOG%
  )
  REM ++++++++++++++++++++++++++++ END +++++++++++++++++++++++++++++++++++++++++++++++++++
  REM next line tells us script did run through code while one may want to save this lines
  echo ==================script finished================= >> %log%
  del xpipex
  break
  goto :eof
  REM ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  REM +++++++++++++++++++++++++++++ PROCESSING +++++++++++++++++++++++++++++++++++++++++++
  :check
      REM trim whitespace from beginning and end of line
      for /f "tokens=* delims=" %%z in ("!q!") do ( 
      set "line=!q!"
        REM test if line is valid dns AND ip address syntax BUT only informational because of limited regular expression support of findstr and "1234.2.3.4" is also accepted as well formatted address
        echo !line! | findstr /i /r "^[a-z0-9-]*\.[a-z0-9-]*\.[a-z0-9-]*=[0-9]*\.[0-9]*\.[0-9]*\.[0-9]*" >NUL || (
        echo blat error in dns test line syntax with: !line!
        set errorlog=%errorlog% : error in dns test line syntax with: !line! :
        )
      REM test that trimmed line matches at least once "^char=number$" and set vars for test
      echo !line! | findstr /i "^[a-z]*=[0-9]*$" >NUL && do (
      for /f "tokens=1,2 delims==" %%x in ("!q!") do set TESTDNS=%%x&set TESTIP=%%y 
      )
      REM trim whitespace from vars
      set TESTDNS=%TESTDNS: =%
      set TESTIP=%TESTIP: =%
      echo testing %TESTDNS% to %TESTIP%
      echo checking %TESTDNS%: >> %LOG%
  REM useful to test script
  REM    nslookup %TESTDNS%
  REM useful to test script
      REM go get dns resolution and set vars to test and compare
      set "XIP="
        for /f "skip=1 tokens=*" %%a in ('nslookup "%TESTDNS%" 2^>nul ^| findstr /i /r /c:"address[e]*[s]*:.*\." /c:"address[ ]*=.*\." /c:"^[   ][  ]*[0-9].*\." ') do (
            rem get nslookup output
            set "_line=%%a"
            rem remove spaces
            set "_line=!_line: =!"
            rem parse line
            for /f "tokens=1,* delims=:=" %%b in ("!_line!") do (
                rem retrieve the correct section of the line
                if "%%c"=="" (
                    set "XTIPX=%%b"
                ) else (
                    set "XTIPX=%%c"
                )
                REM again trim whitespace from var
                set XTIPX=!XTIPX: =!
                rem test address match to old address
                if "!XTIPX!"=="%TESTIP%" (
                    set "XIP=!XTIPX!"
                    goto endRESTESTDNS
                )
                rem if no match, the first address found is saved
                if not defined XIP set "XIP=!XTIPX!"
            )
        )
        :endRESTESTDNS
        REM if dsn did change
        if NOT %XIP%==%TESTIP% (
          echo %TESTDNS% NOW is %XIP%
          REM delete the old route and set new one
          REM first check if the old false ip was set to prevent error if not found
          netsh interface ipv4 show route | find /i "%TESTIP%" >NUL 
          if errorlevel 1 ( 
          echo blat there was no route for given %TESTIP% from file, routes manipulated or file updated?
          echo there was no route for given %TESTIP% from file, routes manipulated or file updated? >> %LOG%
          set errorlog=%errorlog% : there was no route for given %TESTIP% from file, routes manipulated or file updated? :
           ) else (
           Route DELETE %TESTIP% >> %LOG%
           )
          Route ADD -P %XIP% mask 255.255.255.255 %GW% >> %LOG%
          echo blat route %TESTDNS% was changed from %TESTIP% to %XIP% by script! 
          echo %TESTDNS% was changed from %TESTIP% to %XIP% by script! >> %LOG%
          REM write it back to the testfile (which was reset above)
          echo %TESTDNS%=%XIP% >> %DNSTESTFILE%
          REM fill a log-var to report allover later in mail for example
          set errorlog=%errorlog% : route %TESTDNS% was changed from %TESTIP% to %XIP% by script! :
          )
        if %XIP%==%TESTIP% (
          REM if dns did not change
          echo ip did not change 
          echo checking if route exist
          REM now the gateway switch comes in, if set to 1 we check if route exist and if so we go on, otherwise we set the route again
            if %REFRESH-GW% == 1 (
            netsh interface ipv4 show route | find /i "%XIP%" >NUL 
            if errorlevel 1 (
            Route ADD -P %XIP% mask 255.255.255.255 %GW% >> %LOG% 
            echo blat %XIP% route was deleted by unknown manipulation and reset by script!
            echo %XIP% route was deleted by unknown manipulation and reset by script! >> %LOG%
            set errorlog=%errorlog% : %XIP% route was deleted by unknown manipulation and reset by script! :
             )
            )
              if %REFRESH-GW% == 2 (
              REM here we check if route was deleted from elsewhere (and report it) but we set it anyway to make shure the gateway gets updated in case it was changed in the var on top
              netsh interface ipv4 show route | find /i "%XIP%" >NUL 
              if errorlevel 1 (
              echo blat %XIP% was deleted by unknown manipulation!
              echo %XIP% was deleted by unknown manipulation! >> %LOG%
              set errorlog=%errorlog% : %XIP% was deleted by unknown manipulation! :
               )
              REM first delete the old and then set the new route
              Route DELETE %TESTIP% >> %LOG%
              Route ADD -P %XIP% mask 255.255.255.255 %GW% >> %LOG%
              echo blat route %TESTDNS% was reset by script! 
              )
              REM we should not forget to write back the route to our testfile
              echo %TESTDNS%=%XIP% >> %DNSTESTFILE%
              )
  REM now we tell ourself we are through on all should be fine with the address and route
  netsh interface ipv4 show route | find /i "%XIP%" >NUL 
  if errorlevel 1 ( 
  echo blat route %XIP% could not be set - ERROR setting route
  echo route %XIP% could not be set - ERROR setting route >> %LOG%
  set errorlog=%errorlog% : route %XIP% could not be set - ERROR setting route :
   ) else (
  echo OKI 
  echo OK >> %LOG%
   )
  :EOF