update_pingdom_probes.sh

#!/bin/bash
# Update the pingdom firewall rules based on their feed

# rotate pingdom ip list (keep 8 days)
LIST=$(ls -r /root/pingdom_ips*);
for i in $LIST; do
	# get index of file
	INDEX=$(ls $i | cut -d"." -f 2)

	# if there's no index, rename to pingdom_ips.0
	if [ $INDEX = "/root/pingdom_ips" ]; then
		NEW=$INDEX.0
		mv $i $NEW
	# remove files with index > 6 (keep 8 files)
	elif [ $INDEX -gt 6 ]; then
		rm $i
	# increment index for all other files
	else
		BASE=$(ls $i | cut -d"." -f 1)
		NEW=$BASE.$(($INDEX+1))
		mv $i $NEW
	fi
done

# get pingdom ips from their rss feed
wget https://www.pingdom.com/rss/probe_servers.xml -O /root/probe_servers.xml -o /dev/null
cat /root/probe_servers.xml | grep IP | sed -e 's/.*IP: //g' | sed -e 's/; Host.*//g' | grep -v IP > /root/pingdom_ips

# if old lists do not exist, just allow all ips
if [ ! -f /root/pingdom_ips.0 ]; then
	cat /root/pingdom_ips | xargs -n 1 csf -a
else
	# if there any differences between previous and current list, replace ips in allow list
	if ! diff -q /root/pingdom_ips /root/pingdom_ips.0 > /dev/null; then
		cat /root/pingdom_ips.0 | xargs -n 1 csf -ar
		cat /root/pingdom_ips | xargs -n 1 csf -a
	fi
fi