[packages] miniupnpd: use network.sh to find devices and subnets
[openwrt/svn-archive/archive.git] / net / miniupnpd / files / miniupnpd.init
1 #!/bin/sh /etc/rc.common
2 # Copyright (C) 2006-2011 OpenWrt.org
3
4 START=95
5
6 SERVICE_USE_PID=1
7
8 upnpd_get_port_range() {
9 local _var="$1"; shift
10 local _val
11
12 config_get _val "$@"
13
14 case "$_val" in
15 [0-9]*[:-][0-9]*)
16 export -n -- "${_var}_start=${_val%%[:-]*}"
17 export -n -- "${_var}_end=${_val##*[:-]}"
18 ;;
19 [0-9]*)
20 export -n -- "${_var}_start=$_val"
21 export -n -- "${_var}_end="
22 ;;
23 esac
24 }
25
26 conf_rule_add() {
27 local cfg="$1"
28 local tmpconf="$2"
29 local action external_port_start external_port_end int_addr
30 local internal_port_start internal_port_end
31
32 config_get action "$cfg" action "deny" # allow or deny
33 upnpd_get_port_range "ext" "$cfg" ext_ports "0-65535" # external ports: x, x-y, x:y
34 config_get int_addr "$cfg" int_addr "0.0.0.0/0" # ip or network and subnet mask (internal)
35 upnpd_get_port_range "int" "$cfg" int_ports "0-65535" # internal ports: x, x-y, x:y or range
36
37 # Make a single IP IP/32 so that miniupnpd.conf can use it.
38 case "$int_addr" in
39 */*) ;;
40 *) int_addr="$int_addr/32" ;;
41 esac
42
43 echo "${action} ${ext_start}${ext_end:+-}${ext_end} ${int_addr} ${int_start}${int_end:+-}${int_end}" >>$tmpconf
44 }
45
46 upnpd_write_bool() {
47 local opt="$1"
48 local def="${2:-0}"
49 local alt="$3"
50 local val
51
52 config_get_bool val config "$opt" "$def"
53 if [ "$val" -eq 0 ]; then
54 echo "${alt:-$opt}=no" >> $tmpconf
55 else
56 echo "${alt:-$opt}=yes" >> $tmpconf
57 fi
58 }
59
60 start() {
61 type miniupnpd_add_rules >/dev/null 2>/dev/null || \
62 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
63
64 config_load "upnpd"
65 local extiface intiface upload download logging secure enabled natpmp
66 local extip port usesysuptime conffile serial_number model_number
67 local uuid notify_interval presentation_url enable_upnp
68 local upnp_lease_file clean_ruleset_threshold clean_ruleset_interval
69
70 config_get extiface config external_iface
71 config_get intiface config internal_iface
72 config_get extip config external_ip
73 config_get port config port 5000
74 config_get upload config upload
75 config_get download config download
76 config_get_bool logging config log_output 0
77 config_get conffile config config_file
78 config_get serial_number config serial_number
79 config_get model_number config model_number
80 config_get uuid config uuid
81 config_get notify_interval config notify_interval
82 config_get presentation_url config presentation_url
83 config_get upnp_lease_file config upnp_lease_file
84 config_get clean_ruleset_threshold config clean_ruleset_threshold
85 config_get clean_ruleset_interval config clean_ruleset_interval
86
87 local args
88
89 . /lib/functions/network.sh
90
91 local ifname
92 network_get_device ifname ${extiface:-wan}
93
94 if [ -n "$conffile" ]; then
95 args="-f $conffile"
96 else
97 local tmpconf="/var/etc/miniupnpd.conf"
98 args="-f $tmpconf"
99 mkdir -p /var/etc
100
101 echo "ext_ifname=$ifname" >$tmpconf
102
103 [ -n "$extip" ] && \
104 echo "ext_ip=$extip" >>$tmpconf
105
106 local iface
107 for iface in ${intiface:-lan}; do
108 local ipnet
109 network_get_subnet ipnet "$iface" && {
110 echo "listening_ip=$ipnet" >>$tmpconf
111 }
112 done
113
114 [ "$port" != "auto" ] && \
115 echo "port=$port" >>$tmpconf
116
117 config_load "upnpd"
118 upnpd_write_bool enable_natpmp 1
119 upnpd_write_bool enable_upnp 1
120 upnpd_write_bool secure_mode 1
121 upnpd_write_bool system_uptime 1
122
123 [ -n "$upnp_lease_file" ] && \
124 echo "lease_file=$upnp_lease_file" >>$tmpconf
125
126 [ -n "$upload" -a -n "$download" ] && {
127 echo "bitrate_down=$(($download * 1024 * 8))" >>$tmpconf
128 echo "bitrate_up=$(($upload * 1024 * 8))" >>$tmpconf
129 }
130
131 [ -n "${presentation_url}" ] && \
132 echo "presentation_url=${presentation_url}" >>$tmpconf
133
134 [ -n "${notify_interval}" ] && \
135 echo "notify_interval=${notify_interval}" >>$tmpconf
136
137 [ -n "${clean_ruleset_threshold}" ] && \
138 echo "clean_ruleset_threshold=${clean_ruleset_threshold}" >>$tmpconf
139
140 [ -n "${clean_ruleset_interval}" ] && \
141 echo "clean_ruleset_interval=${clean_ruleset_interval}" >>$tmpconf
142
143 [ -z "$uuid" ] && {
144 uuid="$(cat /proc/sys/kernel/random/uuid)"
145 uci set upnpd.config.uuid=$uuid
146 uci commit upnpd
147 }
148
149 [ "$uuid" = "nocli" ] || \
150 echo "uuid=$uuid" >>$tmpconf
151
152 [ -n "${serial_number}" ] && \
153 echo "serial=${serial_number}" >>$tmpconf
154
155 [ -n "${model_number}" ] && \
156 echo "model_number=${model_number}" >>$tmpconf
157
158 config_foreach conf_rule_add perm_rule "$tmpconf"
159 fi
160
161
162 if [ -n "$ifname" ]; then
163 # start firewall
164 local zone
165 config_load firewall
166 config_get zone core "${extiface:-wan}_zone"
167
168 [ -n "$zone" ] && \
169 miniupnpd_add_rules "$zone" "${extiface:-wan}" "$ifname"
170
171 if [ "$logging" = "1" ]; then
172 SERVICE_DAEMONIZE=1 \
173 service_start /usr/sbin/miniupnpd $args -d
174 else
175 SERVICE_DAEMONIZE= \
176 service_start /usr/sbin/miniupnpd $args
177 fi
178 else
179 logger -t "upnp daemon" "external interface not found, not starting"
180 fi
181 }
182
183 stop() {
184 service_stop /usr/sbin/miniupnpd
185
186 type miniupnpd_remove_rules >/dev/null 2>/dev/null || \
187 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
188
189 miniupnpd_remove_rules
190
191 iptables -t nat -F MINIUPNPD 2>/dev/null
192 iptables -t nat -X MINIUPNPD 2>/dev/null
193 iptables -t filter -F MINIUPNPD 2>/dev/null
194 iptables -t filter -X MINIUPNPD 2>/dev/null
195 }