gateway: reload whitelist on HUP

gateway/usr/bin/eterban.sh

@@ -89,6 +89,11 @@ if [ "$command" = "clear" ] ; then
     exit
 fi
 
+if [ "$command" = "reload-whitelist" ] ; then
+    systemctl kill --signal=HUP eterban.service
+    exit
+fi
+
 if [ "$command" = "info" ] ; then
     /usr/share/eterban/autoban_cli.py info $1
     exit
@@ -121,6 +126,7 @@ Commands:
     unban <ip>    - unban IP
     ban <ip>      - ban IP
     clear --force - remove all IPs from ban
+    reload-whitelist - reload whitelist.txt without restarting eterban
 
 Auto-unban commands:
     info <ip>     - show ban info and history for IP

gateway/usr/share/eterban/eterban_switcher.py

@@ -329,6 +329,15 @@ def log_redis_error(message):
     log.flush()
 
 
+def reload_whitelist(signum, frame):
+    """Reload the configured whitelist without changing firewall topology."""
+    try:
+        loaded = load_whitelist()
+        log_redis_error("Whitelist reloaded: " + str(loaded) + " entries")
+    except (OSError, subprocess.SubprocessError) as error:
+        log_redis_error("Unable to reload whitelist: " + str(error))
+
+
 def configure_autoban_logging():
     autoban_log = logging.getLogger('autoban_manager')
     autoban_log.setLevel(logging.ERROR)
@@ -339,6 +348,7 @@ def configure_autoban_logging():
 
 
 configure_autoban_logging()
+signal.signal(signal.SIGHUP, reload_whitelist)
 
 
 conntrack_queue = queue.Queue(maxsize=1024)