#!/bin/bash -x

# Interupt and Exit Function
control_c()
{
setterm -cursor on
exit 0
}

# Make sure user is logged in as root
if [[ $EUID -ne 0 ]]; then
   echo "This script must be run as root" 1>&2
   exit 1
fi

clear
setterm -cursor off

# Define some paranoid stuff
fox="firefox"

# Define whitelist array
declare -a white

while true 
do

  stat=`netstat -antup | awk '{ print $7 }' | grep firefox | sed -ne "s/^[^\/]\+\///p" | awk '!x[$0]++';`
  b=$stat

     if [ "$b" = "$fox" ];
     then

     #timeout 1 ngrep -d any -O -T port http >> log
     getip=`netstat -antup | grep firefox | awk '{ print $5 }' | sed -e 's/:[^:]*$//' | awk '!x[$0]++';`
     ip+=$getip
     #ipchk=`iptables -L | egrep '($ip|ALLOW)'`
     #ipck=$ipchk


#       c=0
#       len=${#ip[@]}
#       for (( c = 0; c < $len; c++ ));
        for c in "${ip[@]}"
        do
            if [ $c == "${white[$c]}" ]
            then
                echo -e "${white[$c]} in  whitelist\n"

            else

                echo -e "Not in whitelist"

                     #else
                             # Whitespace specific like python... 
                             sudo -u ph33r kdialog --title "KNetWatch" --warningyesno "Wanna block   
${ip[$c]}"


#echo ${ip[1]}

            #fi
        #done

        #${#ip[@]}

        #echo "${ip[@]}"


        # Log what happened in background
         #echo "" >> log | date >> log | echo "" >> log;  netstat -antpu | awk '!x[$0]++' >> log; echo "" >> log; echo  "" >> log;
                                                                                                                                         
  rc=$?


        if [ "${rc}" == "0" ]; then

           getpid=`netstat -antup | awk '{ print $7 }' | grep firefox | cut -f1 -d"/" | awk '!x[$0]++'`

           # Kill the appiclation
           #pid=$getpid
           #kill -9 $pid 
           sudo -u ph33r kdialog --title "Firefox was killed by KNetWatch" --passivepopup "Examine log file for details" 7

           # Block the ip address
           #ip=$getip
           /sbin/iptables -I OUTPUT -s ${ip[$c]} -j DROP

        elif [ "${rc}" == "1" ]; then

           # Use array as iptables uses the hostname here.

                pass=${ip[$c]}
                white+=$pass

           sudo -u ph33r kdialog --title "KNetWatch" --passivepopup "
${ip[$c]} 
whitelisted." 7

           # clear array to avoid duplicates
           unset ip

        else

            echo "You shudna done that he's just a boy!"

        fi

     fi
   done
fi

sleep 2

done

        for c in "${ip[@]}"
        do
         for d in "${white[@]}"
         do
           if [ "$c" -eq "$d"]
           then
               echo -e "${white[$d]} in array\n"

           else

               echo -e "$c is not in array"

               pass=${ip[$c]}
               white+=$pass