#!/bin/bash
/usr/bin/grep -r -w -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' /var/cpanel/mysql/notes/|/usr/bin/awk -F ':' {'print $2'}| /usr/bin/sort | /usr/bin/uniq > /etc/csf/allowed_mysql
/usr/bin/grep "auto_mysql_whitelist" /etc/csf/csf.allow|/usr/bin/grep -w -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | /usr/bin/sort | /usr/bin/uniq > /etc/csf/exist_mysql
to_remove=$(/usr/bin/comm -13 /etc/csf/allowed_mysql /etc/csf/exist_mysql)
to_insert=$(/usr/bin/comm -23 /etc/csf/allowed_mysql /etc/csf/exist_mysql)

for ip in $to_insert; do 
	/usr/sbin/csf -a "tcp:in:d=3306:s=$ip" "auto_mysql_whitelist" 
done
for ip in $to_remove; do
	/usr/sbin/csf -ar "tcp:in:d=3306:s=$ip"
done