You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

207 lines
6.0 KiB

  1. #!/bin/sh /etc/rc.common
  2. # Copyright (C) 2006-2014 OpenWrt.org
  3. START=94
  4. STOP=15
  5. USE_PROCD=1
  6. PROG=/usr/sbin/miniupnpd
  7. upnpd_get_port_range() {
  8. local var="$1"; shift
  9. local val
  10. config_get val "$@"
  11. case "$val" in
  12. [0-9]*[:-][0-9]*)
  13. export -n -- "${var}_start=${val%%[:-]*}"
  14. export -n -- "${var}_end=${val##*[:-]}"
  15. ;;
  16. [0-9]*)
  17. export -n -- "${var}_start=$val"
  18. export -n -- "${var}_end="
  19. ;;
  20. esac
  21. }
  22. conf_rule_add() {
  23. local cfg="$1"
  24. local action int_addr
  25. local ext_start ext_end int_start int_end comment
  26. config_get action "$cfg" action "deny" # allow or deny
  27. upnpd_get_port_range "ext" "$cfg" ext_ports "0-65535" # external ports: x, x-y, x:y
  28. config_get int_addr "$cfg" int_addr "0.0.0.0/0" # ip or network and subnet mask (internal)
  29. upnpd_get_port_range "int" "$cfg" int_ports "0-65535" # internal ports: x, x-y, x:y or range
  30. config_get comment "$cfg" comment "ACL" # comment
  31. # Make a single IP IP/32 so that miniupnpd.conf can use it.
  32. [ "${int_addr%/*}" = "$int_addr" ] && int_addr="$int_addr/32"
  33. echo "$action $ext_start${ext_end:+-}$ext_end $int_addr $int_start${int_end:+-}$int_end #$comment"
  34. }
  35. upnpd_write_bool() {
  36. local opt="$1"
  37. local def="${2:-0}"
  38. local alt="${3:-$opt}"
  39. local val
  40. config_get_bool val config "$opt" "$def"
  41. if [ "$val" -eq 0 ]; then
  42. echo "$alt=no"
  43. else
  44. echo "$alt=yes"
  45. fi
  46. }
  47. upnpd() {
  48. config_load "upnpd"
  49. local external_iface external_iface6 external_zone external_ip internal_iface
  50. local upload download log_output port config_file serial_number model_number
  51. local use_stun stun_host stun_port uuid notify_interval presentation_url
  52. local upnp_lease_file clean_ruleset_threshold clean_ruleset_interval
  53. local ipv6_disable
  54. local enabled
  55. config_get_bool enabled config enabled 1
  56. [ "$enabled" -eq 0 ] && return 1
  57. config_get external_iface config external_iface
  58. config_get external_iface6 config external_iface6
  59. config_get external_zone config external_zone
  60. config_get external_ip config external_ip
  61. config_get internal_iface config internal_iface
  62. config_get port config port 5000
  63. config_get upload config upload
  64. config_get download config download
  65. config_get_bool log_output config log_output 0
  66. config_get config_file config config_file
  67. config_get serial_number config serial_number
  68. config_get model_number config model_number
  69. config_get uuid config uuid
  70. config_get use_stun config use_stun 0
  71. config_get stun_host config stun_host
  72. config_get stun_port config stun_port
  73. config_get notify_interval config notify_interval
  74. config_get presentation_url config presentation_url
  75. config_get upnp_lease_file config upnp_lease_file
  76. config_get clean_ruleset_threshold config clean_ruleset_threshold
  77. config_get clean_ruleset_interval config clean_ruleset_interval
  78. config_get ipv6_disable config ipv6_disable 0
  79. local conf ifname ifname6
  80. . /lib/functions/network.sh
  81. if [ -n "$external_iface" ] ; then
  82. network_get_device ifname "$external_iface"
  83. else
  84. if [ -n "$external_zone" ] ; then
  85. ifname=$(fw3 -q zone "$external_zone" 2>/dev/null | head -1)
  86. else
  87. network_find_wan external_iface && \
  88. network_get_device ifname "$external_iface"
  89. fi
  90. fi
  91. if [ -n "$external_iface6" ] ; then
  92. network_get_device ifname6 "$external_iface6"
  93. else
  94. if [ -n "$external_zone" ] ; then
  95. ifname6=$(fw3 -q zone "$external_zone" 2>/dev/null | head -1)
  96. else
  97. network_find_wan6 external_iface6 && \
  98. network_get_device ifname6 "$external_iface6"
  99. fi
  100. fi
  101. if [ -n "$config_file" ]; then
  102. conf="$config_file"
  103. else
  104. local tmpconf="/var/etc/miniupnpd.conf"
  105. conf="$tmpconf"
  106. mkdir -p /var/etc
  107. {
  108. echo "ext_ifname=$ifname"
  109. echo "ext_ifname6=$ifname6"
  110. [ -n "$external_ip" ] && echo "ext_ip=$external_ip"
  111. local iface
  112. for iface in ${internal_iface:-lan}; do
  113. local device
  114. network_get_device device "$iface" && echo "listening_ip=$device"
  115. network_get_device device "$iface" && echo "ipv6_listening_ip=$device"
  116. done
  117. config_load "upnpd"
  118. upnpd_write_bool enable_natpmp 1
  119. upnpd_write_bool enable_upnp 1
  120. upnpd_write_bool secure_mode 1
  121. upnpd_write_bool system_uptime 1
  122. upnpd_write_bool igdv1 0 force_igd_desc_v1
  123. upnpd_write_bool use_stun 0 ext_perform_stun
  124. upnpd_write_bool ipv6_disable $ipv6_disable
  125. [ "$use_stun" -eq 0 ] || {
  126. [ -n "$stun_host" ] && echo "ext_stun_host=$stun_host"
  127. [ -n "$stun_port" ] && echo "ext_stun_port=$stun_port"
  128. }
  129. [ -n "$upload" ] && [ -n "$download" ] && {
  130. echo "bitrate_down=$((download * 1024 * 8))"
  131. echo "bitrate_up=$((upload * 1024 * 8))"
  132. }
  133. [ -n "$upnp_lease_file" ] && touch "$upnp_lease_file" && echo "lease_file=$upnp_lease_file"
  134. [ -n "$presentation_url" ] && echo "presentation_url=$presentation_url"
  135. [ -n "$notify_interval" ] && echo "notify_interval=$notify_interval"
  136. [ -n "$clean_ruleset_threshold" ] && echo "clean_ruleset_threshold=$clean_ruleset_threshold"
  137. [ -n "$clean_ruleset_interval" ] && echo "clean_ruleset_interval=$clean_ruleset_interval"
  138. [ -n "$serial_number" ] && echo "serial=$serial_number"
  139. [ -n "$model_number" ] && echo "model_number=$model_number"
  140. [ -n "$port" ] && echo "port=$port"
  141. [ -z "$uuid" ] && {
  142. uuid="$(cat /proc/sys/kernel/random/uuid)"
  143. uci set upnpd.config.uuid="$uuid"
  144. uci commit upnpd
  145. }
  146. [ "$uuid" = "nocli" ] || echo "uuid=$uuid"
  147. config_foreach conf_rule_add perm_rule
  148. } > "$tmpconf"
  149. fi
  150. if [ -n "$ifname" ]; then
  151. # start firewall
  152. iptables -L MINIUPNPD >/dev/null 2>&1 || fw3 reload
  153. else
  154. logger -t "upnp daemon" "external interface not found, not starting"
  155. fi
  156. procd_open_instance
  157. procd_set_param command "$PROG"
  158. procd_append_param command -f "$conf"
  159. [ "$log_output" = "1" ] && procd_append_param command -d
  160. procd_close_instance
  161. }
  162. stop_service() {
  163. iptables -t nat -F MINIUPNPD 2>/dev/null
  164. iptables -t nat -F MINIUPNPD-POSTROUTING 2>/dev/null
  165. iptables -t filter -F MINIUPNPD 2>/dev/null
  166. [ -x /usr/sbin/ip6tables ] && ip6tables -t filter -F MINIUPNPD 2>/dev/null
  167. }
  168. start_service() {
  169. config_load "upnpd"
  170. config_foreach upnpd "upnpd"
  171. }
  172. service_triggers() {
  173. procd_add_reload_trigger "upnpd"
  174. }