[packages] miniupnpd: properly handle multiple internal interfaces in hotplug helper...
[openwrt/svn-archive/archive.git] / net / miniupnpd / files / miniupnpd.init
1 #!/bin/sh /etc/rc.common
2 START=95
3
4 upnpd_get_port_range() {
5 local _var="$1"; shift
6 local _val
7
8 config_get _val "$@"
9
10 case "$_val" in
11 [0-9]*[:-][0-9]*)
12 export -n -- "${_var}_start=${_val%%[:-]*}"
13 export -n -- "${_var}_end=${_val##*[:-]}"
14 ;;
15 [0-9]*)
16 export -n -- "${_var}_start=$_val"
17 export -n -- "${_var}_end="
18 ;;
19 esac
20 }
21
22 conf_rule_add() {
23 local cfg="$1"
24 local tmpconf="$2"
25 local action external_port_start external_port_end int_addr
26 local internal_port_start internal_port_end
27
28 config_get action "$cfg" action "deny" # allow or deny
29 upnpd_get_port_range "ext" "$cfg" ext_ports "0-65535" # external ports: x, x-y, x:y
30 config_get int_addr "$cfg" int_addr "0.0.0.0/0" # ip or network and subnet mask (internal)
31 upnpd_get_port_range "int" "$cfg" int_ports "0-65535" # internal ports: x, x-y, x:y or range
32
33 # Make a single IP IP/32 so that miniupnpd.conf can use it.
34 case "$int_addr" in
35 */*) ;;
36 *) int_addr="$int_addr/32" ;;
37 esac
38
39 echo "${action} ${ext_start}${ext_end:+-}${ext_end} ${int_addr} ${int_start}${int_end:+-}${int_end}" >>$tmpconf
40 }
41
42 upnpd_write_bool() {
43 local opt="$1"
44 local def="${2:-0}"
45 local alt="$3"
46 local val
47
48 config_get_bool val config "$opt" "$def"
49 if [ "$val" -eq 0 ]; then
50 echo "${alt:-$opt}=no" >> $tmpconf
51 else
52 echo "${alt:-$opt}=yes" >> $tmpconf
53 fi
54 }
55
56 start() {
57 type miniupnpd_add_rules >/dev/null 2>/dev/null || \
58 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
59
60 config_load "upnpd"
61 local extiface intiface upload download logging secure enabled natpmp
62 local extip port usesysuptime conffile serial_number model_number
63 local uuid notify_interval presentation_url enable_upnp
64 local upnp_lease_file clean_ruleset_threshold clean_ruleset_interval
65
66 config_get extiface config external_iface
67 config_get intiface config internal_iface
68 config_get extip config external_ip
69 config_get port config port 5000
70 config_get upload config upload
71 config_get download config download
72 config_get_bool logging config log_output 0
73 config_get conffile config config_file
74 config_get serial_number config serial_number
75 config_get model_number config model_number
76 config_get uuid config uuid
77 config_get notify_interval config notify_interval
78 config_get presentation_url config presentation_url
79 config_get upnp_lease_file config upnp_lease_file
80 config_get clean_ruleset_threshold config clean_ruleset_threshold
81 config_get clean_ruleset_interval config clean_ruleset_interval
82
83 local args
84
85 include /lib/network
86 scan_interfaces
87
88 local ifname
89 config_get ifname ${extiface:-wan} ifname
90
91 if [ -n "$conffile" ]; then
92 args="-f $conffile"
93 else
94 local tmpconf="/var/etc/miniupnpd.conf"
95 args="-f $tmpconf"
96 mkdir -p /var/etc
97
98 echo "ext_ifname=$ifname" >$tmpconf
99
100 [ -n "$extip" ] && \
101 echo "ext_ip=$extip" >>$tmpconf
102
103 local iface
104 for iface in ${intiface:-lan}; do
105 local ipaddr
106 config_get ipaddr "$iface" ipaddr
107 [ -n "$ipaddr" ] && \
108 echo "listening_ip=$ipaddr" >>$tmpconf
109 done
110
111 [ "$port" != "auto" ] && \
112 echo "port=$port" >>$tmpconf
113
114 config_load "upnpd"
115 upnpd_write_bool enable_natpmp 1
116 upnpd_write_bool enable_upnp 1
117 upnpd_write_bool secure_mode 1
118 upnpd_write_bool system_uptime 1
119
120 [ -n "$upnp_lease_file" ] && \
121 echo "lease_file=$upnp_lease_file" >>$tmpconf
122
123 [ -n "$upload" -a -n "$download" ] && {
124 echo "bitrate_down=$(($download * 1024 * 8))" >>$tmpconf
125 echo "bitrate_up=$(($upload * 1024 * 8))" >>$tmpconf
126 }
127
128 [ -n "${presentation_url}" ] && \
129 echo "presentation_url=${presentation_url}" >>$tmpconf
130
131 [ -n "${notify_interval}" ] && \
132 echo "notify_interval=${notify_interval}" >>$tmpconf
133
134 [ -n "${clean_ruleset_threshold}" ] && \
135 echo "clean_ruleset_threshold=${clean_ruleset_threshold}" >>$tmpconf
136
137 [ -n "${clean_ruleset_interval}" ] && \
138 echo "clean_ruleset_interval=${clean_ruleset_interval}" >>$tmpconf
139
140 [ -z "$uuid" ] && {
141 uuid="$(cat /proc/sys/kernel/random/uuid)"
142 uci set upnpd.config.uuid=$uuid
143 uci commit upnpd
144 }
145
146 [ "$uuid" = "nocli" ] || \
147 echo "uuid=$uuid" >>$tmpconf
148
149 [ -n "${serial_number}" ] && \
150 echo "serial=${serial_number}" >>$tmpconf
151
152 [ -n "${model_number}" ] && \
153 echo "model_number=${model_number}" >>$tmpconf
154
155 config_foreach conf_rule_add perm_rule "$tmpconf"
156 fi
157
158
159 if [ -n "$ifname" ]; then
160 # start firewall
161 local zone
162 config_load firewall
163 config_get zone core "${extiface:-wan}_zone"
164
165 [ -n "$zone" ] && \
166 miniupnpd_add_rules "$zone" "${extiface:-wan}" "$ifname"
167
168 if [ "$logging" = "1" ]; then
169 start-stop-daemon -b -S -x miniupnpd -- $args -d
170 else
171 start-stop-daemon -S -x miniupnpd -- $args
172 fi
173 else
174 logger -t "upnp daemon" "external interface not found, not starting"
175 fi
176 }
177
178 stop() {
179 start-stop-daemon -K -q -x miniupnpd -p /var/run/miniupnpd.pid
180 rm -f /var/run/miniupnpd.pid
181
182 type miniupnpd_remove_rules >/dev/null 2>/dev/null || \
183 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
184
185 miniupnpd_remove_rules
186
187 iptables -t nat -F MINIUPNPD 2>/dev/null
188 iptables -t nat -X MINIUPNPD 2>/dev/null
189 iptables -t filter -F MINIUPNPD 2>/dev/null
190 iptables -t filter -X MINIUPNPD 2>/dev/null
191 }