You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
175 lines
5.3 KiB
175 lines
5.3 KiB
#!/bin/sh /etc/rc.common
|
|
#
|
|
# Fwknop is developed primarily by the people listed in the file 'AUTHORS'.
|
|
# Copyright (C) 2009-2014 fwknop developers and contributors. For a full
|
|
# list of contributors, see the file 'CREDITS'.
|
|
#
|
|
|
|
USE_PROCD=1
|
|
START=95
|
|
|
|
. "${IPKG_INSTROOT}/lib/functions/network.sh"
|
|
|
|
FWKNOPD_BIN=/usr/sbin/fwknopd
|
|
FWKNOPD_CFGDIR=/var/etc/fwknop
|
|
|
|
start_service()
|
|
{
|
|
generate_configuration
|
|
|
|
if [ -n "${DEPEND_IFNAME}" ] ; then
|
|
# We know the interface, so we can start
|
|
procd_open_instance
|
|
procd_set_param command "${FWKNOPD_BIN}" --foreground --syslog-enable
|
|
procd_set_param respawn
|
|
if [ "${UCI_ENABLED}" -eq 1 ]; then
|
|
procd_append_param command -c "${FWKNOPD_CFGDIR}/fwknopd.conf"
|
|
procd_append_param command -a "${FWKNOPD_CFGDIR}/access.conf"
|
|
fi
|
|
procd_append_param command -i "${DEPEND_IFNAME}"
|
|
procd_set_param netdev "${DEPEND_IFNAME}"
|
|
procd_close_instance
|
|
else
|
|
logger -p daemon.info -t "fwknopd[$$]" "Postponing start-up of fwknopd, network ${NETWORK} is not up"
|
|
fi
|
|
}
|
|
|
|
service_triggers()
|
|
{
|
|
procd_add_reload_trigger "fwknopd"
|
|
|
|
if [ -n "${NETWORK}" ] ; then
|
|
logger -p daemon.info -t "fwknopd[$$]" "Listening for changes on network ${NETWORK}"
|
|
procd_add_reload_interface_trigger "${NETWORK}"
|
|
fi
|
|
}
|
|
|
|
get_bool()
|
|
{
|
|
local _tmp="${1}"
|
|
case "${_tmp}" in
|
|
1|on|true|yes|enabled) _tmp=1;;
|
|
0|off|false|no|disabled) _tmp=0;;
|
|
*) _tmp="${2}";;
|
|
esac
|
|
echo -n "${_tmp}"
|
|
}
|
|
|
|
generate_configuration()
|
|
{
|
|
[ -f /tmp/access.conf.tmp ] && rm /tmp/access.conf.tmp
|
|
|
|
UCI_ENABLED=0
|
|
DEPEND_IFNAME=
|
|
NETWORK=
|
|
local PCAP_INTF=
|
|
local USER_CONFIG_PATH=/etc/fwknop/fwknopd.conf
|
|
local DEFAULT_UCI_NETWORK=wan
|
|
local DEFAULT_FWKNOPD_IFNAME=
|
|
|
|
network_get_device DEFAULT_FWKNOPD_IFNAME "${DEFAULT_UCI_NETWORK}"
|
|
|
|
config_cb() {
|
|
local type="${1}"
|
|
local name="${2}"
|
|
if [ "${type}" = "global" ]; then
|
|
option_cb() {
|
|
local option="${1}"
|
|
local value="${2}"
|
|
if [ "${option}" = "uci_enabled" ] && [ "$(get_bool "${value}" 0)" -eq 1 ] ; then
|
|
mkdir -p "${FWKNOPD_CFGDIR}"
|
|
> "${FWKNOPD_CFGDIR}/fwknopd.conf"
|
|
> "${FWKNOPD_CFGDIR}/access.conf"
|
|
chmod 600 "${FWKNOPD_CFGDIR}/fwknopd.conf"
|
|
chmod 600 "${FWKNOPD_CFGDIR}/access.conf"
|
|
UCI_ENABLED=1
|
|
fi
|
|
}
|
|
elif [ "${type}" = "network" ]; then
|
|
option_cb() {
|
|
local option="${1}"
|
|
local value="${2}"
|
|
if [ "${UCI_ENABLED}" -eq 1 ] && [ "${option}" = "network" ]; then
|
|
NETWORK="${value}"
|
|
fi
|
|
}
|
|
elif [ "${type}" = "config" ]; then
|
|
option_cb() {
|
|
local option="${1}"
|
|
local value="${2}"
|
|
if [ "${UCI_ENABLED}" -eq 1 ]; then
|
|
if [ "${option}" = "PCAP_INTF" ]; then
|
|
PCAP_INTF="${value}"
|
|
fi
|
|
echo "${option} ${value}" >> "${FWKNOPD_CFGDIR}/fwknopd.conf" #writing each option to fwknopd.conf
|
|
fi
|
|
}
|
|
elif [ "${type}" = "access" ]; then
|
|
if [ -f /tmp/access.conf.tmp ] ; then
|
|
cat /tmp/access.conf.tmp >> "${FWKNOPD_CFGDIR}/access.conf"
|
|
rm /tmp/access.conf.tmp
|
|
fi
|
|
option_cb() {
|
|
local option="${1}"
|
|
local value="${2}"
|
|
if [ "${UCI_ENABLED}" -eq 1 ]; then
|
|
if [ "${option}" = "SOURCE" ]; then
|
|
echo "${option} ${value}" >> "${FWKNOPD_CFGDIR}/access.conf" #writing each option to access.conf
|
|
else
|
|
echo "${option} ${value}" >> /tmp/access.conf.tmp #writing each option to access.conf
|
|
fi
|
|
fi
|
|
}
|
|
else
|
|
reset_cb
|
|
if [ -z "${type}" ]; then
|
|
# Finalize reading
|
|
if [ -f /tmp/access.conf.tmp ] ; then
|
|
cat /tmp/access.conf.tmp >> "${FWKNOPD_CFGDIR}/access.conf"
|
|
rm /tmp/access.conf.tmp
|
|
fi
|
|
fi
|
|
fi
|
|
}
|
|
|
|
if [ -f /etc/config/fwknopd ]; then
|
|
config_load fwknopd
|
|
fi
|
|
|
|
if [ "${UCI_ENABLED}" -eq 0 ]; then
|
|
if [ -f "${USER_CONFIG_PATH}" ] ; then
|
|
# Scan user configuration for PCAP_INTF settings and fallback to fwknopd's default
|
|
DEPEND_IFNAME="$( sed -ne '/^\s*PCAP_INTF\s\+/ { s/^\s*PCAP_INTF\s\+//; s/\s\+$//; p; q; }' ${USER_CONFIG_PATH} )"
|
|
if [ -n "${DEPEND_IFNAME}" ]; then
|
|
logger -p daemon.debug -t "fwknopd[$$]" "Found fwknopd.conf configuration, using PCAP_INTF interface ${DEPEND_IFNAME}"
|
|
else
|
|
logger -p daemon.info -t "fwknopd[$$]" "No PCAP_INTF interface specified in fwknopd.conf, fwknopd's default ${DEFAULT_FWKNOPD_IFNAME} will be used"
|
|
DEPEND_IFNAME="${DEFAULT_FWKNOPD_IFNAME}"
|
|
fi
|
|
else
|
|
logger -p daemon.error -t "fwknopd[$$]" "No ${USER_CONFIG_PATH} found, not starting"
|
|
exit 1
|
|
fi
|
|
elif [ "${UCI_ENABLED}" -eq 1 ]; then
|
|
if [ -n "${NETWORK}" ] && [ -n "${PCAP_INTF}" ]; then
|
|
logger -p daemon.warn -t "fwknopd[$$]" "Specified both network and PCAP_INTF. Ignoring PCAP_INTF"
|
|
elif [ -z "${NETWORK}" ] && [ -z "${PCAP_INTF}" ]; then
|
|
# Fallback - compatibility with old script, which used wan interface by default
|
|
logger -p daemon.info -t "fwknopd[$$]" "Neither network, nor PCAP_INTF interface specified, trying network ${DEFAULT_UCI_NETWORK}"
|
|
NETWORK="${DEFAULT_UCI_NETWORK}"
|
|
fi
|
|
|
|
# Resolve network if possible
|
|
if [ -n "${NETWORK}" ]; then
|
|
network_get_device DEPEND_IFNAME "${NETWORK}"
|
|
if [ -n "${DEPEND_IFNAME}" ]; then
|
|
logger -p daemon.debug -t "fwknopd[$$]" "Resolved network ${NETWORK} as interface ${DEPEND_IFNAME}"
|
|
else
|
|
logger -p daemon.warn -t "fwknopd[$$]" "Cannot find interface for network ${NETWORK}, probably the network is not up"
|
|
fi
|
|
elif [ -n "${PCAP_INTF}" ]; then
|
|
DEPEND_IFNAME="${PCAP_INTF}"
|
|
logger -p daemon.debug -t "fwknopd[$$]" "Using configured PCAP_INTF interface ${DEPEND_IFNAME}"
|
|
fi
|
|
fi
|
|
}
|