package/network/services/dnsmasq/files/dnsmasq.init

   1 #!/bin/sh /etc/rc.common
   2 # Copyright (C) 2007-2012 OpenWrt.org
   3
   4 START=60
   5
   6 USE_PROCD=1
   7 PROG=/usr/sbin/dnsmasq
   8
   9 DNS_SERVERS=""
  10 DOMAIN=""
  11
  12 ADD_LOCAL_DOMAIN=1
  13 ADD_LOCAL_HOSTNAME=1
  14
  15 CONFIGFILE="/var/etc/dnsmasq.conf"
  16 HOSTFILE="/tmp/hosts/dhcp"
  17 TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf"
  18 TIMESTAMPFILE="/etc/dnsmasq.time"
  19
  20 xappend() {
  21         local value="$1"
  22
  23         echo "${value#--}" >> $CONFIGFILE
  24 }
  25
  26 dhcp_calc() {
  27         local ip="$1"
  28         local res=0
  29
  30         while [ -n "$ip" ]; do
  31                 part="${ip%%.*}"
  32                 res="$(($res * 256))"
  33                 res="$(($res + $part))"
  34                 [ "${ip%.*}" != "$ip" ] && ip="${ip#*.}" || ip=
  35         done
  36         echo "$res"
  37 }
  38
  39 dhcp_check() {
  40         local ifname="$1"
  41         local stamp="/var/run/dnsmasq.$ifname.dhcp"
  42         local rv=0
  43
  44         [ -s "$stamp" ] && return $(cat "$stamp")
  45
  46         udhcpc -n -q -s /bin/true -t 1 -i "$ifname" >&- && rv=1 || rv=0
  47
  48         [ $rv -eq 1 ] && \
  49                 logger -t dnsmasq \
  50                         "found already running DHCP-server on interface '$ifname'" \
  51                         "refusing to start, use 'option force 1' to override"
  52
  53         echo $rv > "$stamp"
  54         return $rv
  55 }
  56
  57 log_once() {
  58         pidof dnsmasq >/dev/null || \
  59                 logger -t dnsmasq "$@"
  60 }
  61
  62 append_bool() {
  63         local section="$1"
  64         local option="$2"
  65         local value="$3"
  66         local _loctmp
  67         config_get_bool _loctmp "$section" "$option" 0
  68         [ $_loctmp -gt 0 ] && xappend "$value"
  69 }
  70
  71 append_parm() {
  72         local section="$1"
  73         local option="$2"
  74         local switch="$3"
  75         local _loctmp
  76         config_get _loctmp "$section" "$option"
  77         [ -z "$_loctmp" ] && return 0
  78         xappend "$switch=$_loctmp"
  79 }
  80
  81 append_server() {
  82         xappend "--server=$1"
  83 }
  84
  85 append_address() {
  86         xappend "--address=$1"
  87 }
  88
  89 append_ipset() {
  90         xappend "--ipset=$1"
  91 }
  92
  93 append_interface() {
  94         local ifname=$(uci_get_state network "$1" ifname "$1")
  95         xappend "--interface=$ifname"
  96 }
  97
  98 append_notinterface() {
  99         local ifname=$(uci_get_state network "$1" ifname "$1")
 100         xappend "--except-interface=$ifname"
 101 }
 102
 103 append_addnhosts() {
 104         xappend "--addn-hosts=$1"
 105 }
 106
 107 append_bogusnxdomain() {
 108         xappend "--bogus-nxdomain=$1"
 109 }
 110
 111 append_pxe_service() {
 112         xappend "--pxe-service=$1"
 113 }
 114
 115 dnsmasq() {
 116         local cfg="$1"
 117         append_bool "$cfg" authoritative "--dhcp-authoritative"
 118         append_bool "$cfg" nodaemon "--no-daemon"
 119         append_bool "$cfg" domainneeded "--domain-needed"
 120         append_bool "$cfg" filterwin2k "--filterwin2k"
 121         append_bool "$cfg" nohosts "--no-hosts"
 122         append_bool "$cfg" nonegcache "--no-negcache"
 123         append_bool "$cfg" strictorder "--strict-order"
 124         append_bool "$cfg" logqueries "--log-queries=extra"
 125         append_bool "$cfg" noresolv "--no-resolv"
 126         append_bool "$cfg" localise_queries "--localise-queries"
 127         append_bool "$cfg" readethers "--read-ethers"
 128         append_bool "$cfg" dbus "--enable-dbus"
 129         append_bool "$cfg" boguspriv "--bogus-priv"
 130         append_bool "$cfg" expandhosts "--expand-hosts"
 131         append_bool "$cfg" enable_tftp "--enable-tftp"
 132         append_bool "$cfg" tftp_no_fail "--tftp-no-fail"
 133         append_bool "$cfg" nonwildcard "--bind-dynamic"
 134         append_bool "$cfg" fqdn "--dhcp-fqdn"
 135         append_bool "$cfg" proxydnssec "--proxy-dnssec"
 136         append_bool "$cfg" localservice "--local-service"
 137         append_bool "$cfg" quietdhcp "--quiet-dhcp"
 138         append_bool "$cfg" sequential_ip "--dhcp-sequential-ip"
 139         append_bool "$cfg" allservers "--all-servers"
 140
 141         append_parm "$cfg" dhcpscript "--dhcp-script"
 142         append_parm "$cfg" cachesize "--cache-size"
 143         append_parm "$cfg" dnsforwardmax "--dns-forward-max"
 144         append_parm "$cfg" port "--port"
 145         append_parm "$cfg" ednspacket_max "--edns-packet-max"
 146         append_parm "$cfg" dhcpleasemax "--dhcp-lease-max"
 147         append_parm "$cfg" "queryport" "--query-port"
 148         append_parm "$cfg" "domain" "--domain"
 149         append_parm "$cfg" "local" "--server"
 150         config_list_foreach "$cfg" "server" append_server
 151         config_list_foreach "$cfg" "address" append_address
 152         config_list_foreach "$cfg" "ipset" append_ipset
 153         config_list_foreach "$cfg" "interface" append_interface
 154         config_list_foreach "$cfg" "notinterface" append_notinterface
 155         config_list_foreach "$cfg" "addnhosts" append_addnhosts
 156         config_list_foreach "$cfg" "bogusnxdomain" append_bogusnxdomain
 157         append_parm "$cfg" "leasefile" "--dhcp-leasefile"
 158         append_parm "$cfg" "resolvfile" "--resolv-file"
 159         append_parm "$cfg" "serversfile" "--servers-file"
 160         append_parm "$cfg" "tftp_root" "--tftp-root"
 161         append_parm "$cfg" "dhcp_boot" "--dhcp-boot"
 162         append_parm "$cfg" "local_ttl" "--local-ttl"
 163         append_parm "$cfg" "pxe_prompt" "--pxe-prompt"
 164         config_list_foreach "$cfg" "pxe_service" append_pxe_service
 165         config_get DOMAIN "$cfg" domain
 166
 167         config_get_bool ADD_LOCAL_DOMAIN "$cfg" add_local_domain 1
 168         config_get_bool ADD_LOCAL_HOSTNAME "$cfg" add_local_hostname 1
 169
 170         config_get_bool readethers "$cfg" readethers
 171         [ "$readethers" = "1" -a \! -e "/etc/ethers" ] && touch /etc/ethers
 172
 173         config_get leasefile $cfg leasefile
 174         [ -n "$leasefile" -a \! -e "$leasefile" ] && touch "$leasefile"
 175         config_get_bool cachelocal "$cfg" cachelocal 1
 176
 177         config_get hostsfile "$cfg" dhcphostsfile
 178         [ -e "$hostsfile" ] && xappend "--dhcp-hostsfile=$hostsfile"
 179
 180         local rebind
 181         config_get_bool rebind "$cfg" rebind_protection 1
 182         [ $rebind -gt 0 ] && {
 183                 log_once \
 184                         "DNS rebinding protection is active," \
 185                         "will discard upstream RFC1918 responses!"
 186                 xappend "--stop-dns-rebind"
 187
 188                 local rebind_localhost
 189                 config_get_bool rebind_localhost "$cfg" rebind_localhost 0
 190                 [ $rebind_localhost -gt 0 ] && {
 191                         log_once "Allowing 127.0.0.0/8 responses"
 192                         xappend "--rebind-localhost-ok"
 193                 }
 194
 195                 append_rebind_domain() {
 196                         log_once "Allowing RFC1918 responses for domain $1"
 197                         xappend "--rebind-domain-ok=$1"
 198                 }
 199
 200                 config_list_foreach "$cfg" rebind_domain append_rebind_domain
 201         }
 202
 203         config_get_bool dnssec "$cfg" dnssec 0
 204         [ "$dnssec" -gt 0 ] && {
 205                 xappend "--conf-file=$TRUSTANCHORSFILE"
 206                 xappend "--dnssec"
 207                 xappend "--dnssec-timestamp=$TIMESTAMPFILE"
 208                 append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned"
 209         }
 210
 211         dhcp_option_add "$cfg" "" 0
 212
 213         xappend "--dhcp-broadcast=tag:needs-broadcast"
 214
 215         mkdir -p /tmp/hosts /tmp/dnsmasq.d
 216         xappend "--addn-hosts=/tmp/hosts"
 217         xappend "--conf-dir=/tmp/dnsmasq.d"
 218
 219         echo >> $CONFIGFILE
 220 }
 221
 222 dhcp_subscrid_add() {
 223         local cfg="$1"
 224
 225         config_get networkid "$cfg" networkid
 226         [ -n "$networkid" ] || return 0
 227
 228         config_get subscriberid "$cfg" subscriberid
 229         [ -n "$subscriberid" ] || return 0
 230
 231         xappend "--dhcp-subscrid=$networkid,$subscriberid"
 232
 233         config_get_bool force "$cfg" force 0
 234
 235         dhcp_option_add "$cfg" "$networkid" "$force"
 236 }
 237
 238 dhcp_remoteid_add() {
 239         local cfg="$1"
 240
 241         config_get networkid "$cfg" networkid
 242         [ -n "$networkid" ] || return 0
 243
 244         config_get remoteid "$cfg" remoteid
 245         [ -n "$remoteid" ] || return 0
 246
 247         xappend "--dhcp-remoteid=$networkid,$remoteid"
 248
 249         config_get_bool force "$cfg" force 0
 250
 251         dhcp_option_add "$cfg" "$networkid" "$force"
 252 }
 253
 254 dhcp_circuitid_add() {
 255         local cfg="$1"
 256
 257         config_get networkid "$cfg" networkid
 258         [ -n "$networkid" ] || return 0
 259
 260         config_get circuitid "$cfg" circuitid
 261         [ -n "$circuitid" ] || return 0
 262
 263         xappend "--dhcp-circuitid=$networkid,$circuitid"
 264
 265         config_get_bool force "$cfg" force 0
 266
 267         dhcp_option_add "$cfg" "$networkid" "$force"
 268 }
 269
 270 dhcp_userclass_add() {
 271         local cfg="$1"
 272
 273         config_get networkid "$cfg" networkid
 274         [ -n "$networkid" ] || return 0
 275
 276         config_get userclass "$cfg" userclass
 277         [ -n "$userclass" ] || return 0
 278
 279         xappend "--dhcp-userclass=$networkid,$userclass"
 280
 281         config_get_bool force "$cfg" force 0
 282
 283         dhcp_option_add "$cfg" "$networkid" "$force"
 284 }
 285
 286 dhcp_vendorclass_add() {
 287         local cfg="$1"
 288
 289         config_get networkid "$cfg" networkid
 290         [ -n "$networkid" ] || return 0
 291
 292         config_get vendorclass "$cfg" vendorclass
 293         [ -n "$vendorclass" ] || return 0
 294
 295         xappend "--dhcp-vendorclass=$networkid,$vendorclass"
 296
 297         config_get_bool force "$cfg" force 0
 298
 299         dhcp_option_add "$cfg" "$networkid" "$force"
 300 }
 301
 302 dhcp_host_add() {
 303         local cfg="$1"
 304
 305         config_get_bool force "$cfg" force 0
 306
 307         config_get networkid "$cfg" networkid
 308         [ -n "$networkid" ] && dhcp_option_add "$cfg" "$networkid" "$force"
 309
 310         config_get name "$cfg" name
 311         config_get ip "$cfg" ip
 312         [ -n "$ip" -o -n "$name" ] || return 0
 313
 314         config_get_bool dns "$cfg" dns 0
 315         [ "$dns" = "1" -a -n "$ip" -a -n "$name" ] && {
 316                 echo "$ip $name${DOMAIN:+.$DOMAIN}" >> $HOSTFILE
 317         }
 318
 319         config_get mac "$cfg" mac
 320         if [ -n "$mac" ]; then
 321                 # --dhcp-host=00:20:e0:3b:13:af,192.168.0.199,lap
 322                 macs=""
 323                 for m in $mac; do append macs "$m" ","; done
 324         else
 325                 # --dhcp-host=lap,192.168.0.199
 326                 [ -n "$name" ] || return 0
 327                 macs="$name"
 328                 name=""
 329         fi
 330
 331         config_get tag "$cfg" tag
 332
 333         config_get_bool broadcast "$cfg" broadcast 0
 334         [ "$broadcast" = "0" ] && broadcast=
 335
 336         xappend "--dhcp-host=$macs${networkid:+,net:$networkid}${broadcast:+,set:needs-broadcast}${tag:+,set:$tag}${ip:+,$ip}${name:+,$name}"
 337 }
 338
 339 dhcp_tag_add() {
 340         local cfg="$1"
 341
 342         tag="$cfg"
 343
 344         [ -n "$tag" ] || return 0
 345
 346         config_get_bool force "$cfg" force 0
 347         [ "$force" = "0" ] && force=
 348
 349         config_get option "$cfg" dhcp_option
 350         for o in $option; do
 351                 xappend "--dhcp-option${force:+-force}=tag:$tag,$o"
 352         done
 353 }
 354
 355 dhcp_mac_add() {
 356         local cfg="$1"
 357
 358         config_get networkid "$cfg" networkid
 359         [ -n "$networkid" ] || return 0
 360
 361         config_get mac "$cfg" mac
 362         [ -n "$mac" ] || return 0
 363
 364         xappend "--dhcp-mac=$networkid,$mac"
 365
 366         dhcp_option_add "$cfg" "$networkid"
 367 }
 368
 369 dhcp_boot_add() {
 370         local cfg="$1"
 371
 372         config_get networkid "$cfg" networkid
 373
 374         config_get filename "$cfg" filename
 375         [ -n "$filename" ] || return 0
 376
 377         config_get servername "$cfg" servername
 378         config_get serveraddress "$cfg" serveraddress
 379
 380         [ -n "$serveraddress" -a ! -n "$servername" ] && return 0
 381
 382         xappend "--dhcp-boot=${networkid:+net:$networkid,}${filename}${servername:+,$servername}${serveraddress:+,$serveraddress}"
 383
 384         config_get_bool force "$cfg" force 0
 385
 386         dhcp_option_add "$cfg" "$networkid" "$force"
 387 }
 388
 389
 390 dhcp_add() {
 391         local cfg="$1"
 392         config_get net "$cfg" interface
 393         [ -n "$net" ] || return 0
 394
 395         config_get dhcpv4 "$cfg" dhcpv4
 396         [ "$dhcpv4" != "disabled" ] || return 0
 397
 398         config_get networkid "$cfg" networkid
 399         [ -n "$networkid" ] || networkid="$net"
 400
 401         network_get_subnet subnet "$net" || return 0
 402         network_get_device ifname "$net" || return 0
 403         network_get_protocol proto "$net" || return 0
 404
 405         [ "$cachelocal" = "0" ] && network_get_dnsserver dnsserver "$net" && {
 406                 DNS_SERVERS="$DNS_SERVERS $dnsserver"
 407         }
 408
 409         append_bool "$cfg" ignore "--no-dhcp-interface=$ifname" && return 0
 410
 411         # Do not support non-static interfaces for now
 412         [ static = "$proto" ] || return 0
 413
 414         # Override interface netmask with dhcp config if applicable
 415         config_get netmask "$cfg" netmask "${subnet##*/}"
 416
 417         #check for an already active dhcp server on the interface, unless 'force' is set
 418         config_get_bool force "$cfg" force 0
 419         [ $force -gt 0 ] || dhcp_check "$ifname" || return 0
 420
 421         config_get start "$cfg" start
 422         config_get limit "$cfg" limit
 423         config_get leasetime "$cfg" leasetime
 424         config_get options "$cfg" options
 425         config_get_bool dynamicdhcp "$cfg" dynamicdhcp 1
 426
 427         leasetime="${leasetime:-12h}"
 428         start="$(dhcp_calc "${start:-100}")"
 429         limit="${limit:-150}"
 430         [ "$limit" -gt 0 ] && limit=$((limit-1))
 431         eval "$(ipcalc.sh "${subnet%%/*}" $netmask $start $limit)"
 432         if [ "$dynamicdhcp" = "0" ]; then END="static"; fi
 433         xappend "--dhcp-range=$networkid,$START,$END,$NETMASK,$leasetime${options:+ $options}"
 434
 435         dhcp_option_add "$cfg" "$networkid"
 436 }
 437
 438 dhcp_option_add() {
 439         local cfg="$1"
 440         local networkid="$2"
 441         local force="$3"
 442
 443         [ "$force" = "0" ] && force=
 444
 445         config_get dhcp_option "$cfg" dhcp_option
 446         for o in $dhcp_option; do
 447                 xappend "--dhcp-option${force:+-force}=${networkid:+$networkid,}$o"
 448         done
 449
 450 }
 451
 452 dhcp_domain_add() {
 453         local cfg="$1"
 454         local ip name names record
 455
 456         config_get names "$cfg" name "$2"
 457         [ -n "$names" ] || return 0
 458
 459         config_get ip "$cfg" ip "$3"
 460         [ -n "$ip" ] || return 0
 461
 462         for name in $names; do
 463                 record="${record:+$record }$name"
 464         done
 465
 466         echo "$ip $record" >> $HOSTFILE
 467 }
 468
 469 dhcp_srv_add() {
 470         local cfg="$1"
 471
 472         config_get srv "$cfg" srv
 473         [ -n "$srv" ] || return 0
 474
 475         config_get target "$cfg" target
 476         [ -n "$target" ] || return 0
 477
 478         config_get port "$cfg" port
 479         [ -n "$port" ] || return 0
 480
 481         config_get class "$cfg" class
 482         config_get weight "$cfg" weight
 483
 484         local service="$srv,$target,$port${class:+,$class${weight:+,$weight}}"
 485
 486         xappend "--srv-host=$service"
 487 }
 488
 489 dhcp_mx_add() {
 490         local cfg="$1"
 491         local domain relay pref
 492
 493         config_get domain "$cfg" domain
 494         [ -n "$domain" ] || return 0
 495
 496         config_get relay "$cfg" relay
 497         [ -n "$relay" ] || return 0
 498
 499         config_get pref "$cfg" pref 0
 500
 501         local service="$domain,$relay,$pref"
 502
 503         xappend "--mx-host=$service"
 504 }
 505
 506 dhcp_cname_add() {
 507         local cfg="$1"
 508         local cname target
 509
 510         config_get cname "$cfg" cname
 511         [ -n "$cname" ] || return 0
 512
 513         config_get target "$cfg" target
 514         [ -n "$target" ] || return 0
 515
 516         xappend "--cname=${cname},${target}"
 517 }
 518
 519 dhcp_hostrecord_add() {
 520         local cfg="$1"
 521         local names addresses record val
 522
 523         config_get names "$cfg" name "$2"
 524         if [ -z "$names" ]; then
 525                 return 0
 526         fi
 527
 528         config_get addresses "$cfg" ip "$3"
 529         if [ -z "$addresses" ]; then
 530                 return 0
 531         fi
 532
 533         for val in $names $addresses; do
 534                 record="${record:+$record,}$val"
 535         done
 536
 537         xappend "--host-record=$record"
 538 }
 539
 540 service_triggers()
 541 {
 542         procd_add_reload_trigger "dhcp"
 543 }
 544
 545 boot() {
 546         # Will be launched through hotplug
 547         return 0
 548 }
 549
 550 start_service() {
 551         include /lib/functions
 552
 553         config_load dhcp
 554
 555         procd_open_instance
 556         procd_set_param command $PROG -C $CONFIGFILE -k -x /var/run/dnsmasq/dnsmasq.pid
 557         procd_set_param file $CONFIGFILE
 558         procd_set_param respawn
 559
 560         procd_add_jail dnsmasq ubus log
 561         procd_add_jail_mount $CONFIGFILE $TRUSTANCHORSFILE $HOSTFILE /etc/passwd /etc/group /etc/TZ /dev/null /dev/urandom /etc/dnsmasq.conf /tmp/dnsmasq.d /tmp/resolv.conf.auto /etc/hosts /etc/ethers
 562         procd_add_jail_mount_rw /var/run/dnsmasq/ /tmp/dhcp.leases $TIMESTAMPFILE
 563
 564         procd_close_instance
 565
 566         # before we can call xappend
 567         mkdir -p /var/run/dnsmasq/
 568         mkdir -p $(dirname $CONFIGFILE)
 569         mkdir -p /var/lib/misc
 570         touch /tmp/dhcp.leases
 571
 572         if [ ! -f "$TIMESTAMPFILE" ]; then
 573                 touch "$TIMESTAMPFILE"
 574                 chown nobody.nogroup "$TIMESTAMPFILE"
 575         fi
 576
 577         echo "# auto-generated config file from /etc/config/dhcp" > $CONFIGFILE
 578         echo "# auto-generated config file from /etc/config/dhcp" > $HOSTFILE
 579
 580         # if we did this last, we could override auto-generated config
 581         [ -f /etc/dnsmasq.conf ] && {
 582                 xappend "--conf-file=/etc/dnsmasq.conf"
 583         }
 584
 585         args=""
 586         config_foreach dnsmasq dnsmasq
 587         config_foreach dhcp_host_add host
 588         echo >> $CONFIGFILE
 589         config_foreach dhcp_boot_add boot
 590         config_foreach dhcp_mac_add mac
 591         config_foreach dhcp_tag_add tag
 592         config_foreach dhcp_vendorclass_add vendorclass
 593         config_foreach dhcp_userclass_add userclass
 594         config_foreach dhcp_circuitid_add circuitid
 595         config_foreach dhcp_remoteid_add remoteid
 596         config_foreach dhcp_subscrid_add subscrid
 597         config_foreach dhcp_domain_add domain
 598         config_foreach dhcp_hostrecord_add hostrecord
 599
 600         # add own hostname
 601         local lanaddr
 602         [ $ADD_LOCAL_HOSTNAME -eq 1 ] && network_get_ipaddr lanaddr "lan" && {
 603                 local hostname="$(uci_get system @system[0] hostname OpenWrt)"
 604                 dhcp_domain_add "" "$hostname" "$lanaddr"
 605         }
 606
 607         echo >> $CONFIGFILE
 608         config_foreach dhcp_srv_add srvhost
 609         config_foreach dhcp_mx_add mxhost
 610         echo >> $CONFIGFILE
 611
 612         config_get odhcpd_is_active odhcpd maindhcp
 613         if [ "$odhcpd_is_active" != "1" ]; then
 614                 config_foreach dhcp_add dhcp
 615         fi
 616
 617         echo >> $CONFIGFILE
 618         config_foreach dhcp_cname_add cname
 619         echo >> $CONFIGFILE
 620
 621         rm -f /tmp/resolv.conf
 622         [ $ADD_LOCAL_DOMAIN -eq 1 ] && [ -n "$DOMAIN" ] && {
 623                 echo "search $DOMAIN" >> /tmp/resolv.conf
 624         }
 625         DNS_SERVERS="$DNS_SERVERS 127.0.0.1"
 626         for DNS_SERVER in $DNS_SERVERS ; do
 627                 echo "nameserver $DNS_SERVER" >> /tmp/resolv.conf
 628         done
 629 }
 630
 631 reload_service() {
 632         rc_procd start_service "$@"
 633         return 0
 634 }
 635
 636 stop_service() {
 637         [ -f /tmp/resolv.conf ] && {
 638                 rm -f /tmp/resolv.conf
 639                 ln -s /tmp/resolv.conf.auto /tmp/resolv.conf
 640         }
 641         rm -f /var/run/dnsmasq.*.dhcp
 642 }