3 # Configure routing and miscellaneous network tunables
9 # REQUIRE: faith netif ppp stf
16 start_cmd="routing_start doall"
17 stop_cmd="routing_stop"
18 extra_commands="options static"
19 static_cmd="routing_start static"
20 options_cmd="routing_start options"
22 ROUTE_CMD="/sbin/route"
32 ""|[Aa][Ll][Ll]|[Aa][Nn][Yy]) _if="" ;;
37 if afexists $_af; then
38 setroutes $_cmd $_af $_if
40 err 1 "Unsupported address family: $_af."
43 ""|[Aa][Ll][Ll]|[Aa][Nn][Yy])
44 for _a in inet inet6 ipx atm; do
45 afexists $_a && setroutes $_cmd $_a $_if
49 err 1 "Unsupported address family: $_af."
61 ""|[Aa][Ll][Ll]|[Aa][Nn][Yy]) _if="" ;;
66 if afexists $_af; then
67 eval static_${_af} delete $_if
68 # When $_if is specified, do not flush routes.
69 if ! [ -n "$_if" ]; then
70 eval routing_stop_${_af}
73 err 1 "Unsupported address family: $_af."
76 ""|[Aa][Ll][Ll]|[Aa][Nn][Yy])
77 for _a in inet inet6 ipx atm; do
78 afexists $_a || continue
79 eval static_${_a} delete $_if
80 # When $_if is specified, do not flush routes.
81 if ! [ -n "$_if" ]; then
82 eval routing_stop_${_a}
87 err 1 "Unsupported address family: $_af."
110 ${ROUTE_CMD} -n flush -inet
117 ${ROUTE_CMD} -n flush -inet6
118 for i in ${ipv6_network_interfaces}; do
119 ifconfig $i inet6 -defaultif
135 local _action _if _skip
140 case ${defaultrouter} in
144 static_routes="_default ${static_routes}"
145 route__default="default ${defaultrouter}"
149 # Install configured routes.
150 if [ -n "${static_routes}" ]; then
151 for i in ${static_routes}; do
153 if [ -n "$_if" ]; then
159 if [ $_skip = 0 ]; then
160 route_args=`get_if_var ${i%:*} route_IF`
161 if [ -n "$route_args" ]; then
162 ${ROUTE_CMD} ${_action} ${route_args}
164 warn "route_${i%:*} not found."
173 local _action _if _skip fibmod fibs
177 # get the number of FIBs supported.
178 fibs=$((`${SYSCTL_N} net.fibs` - 1))
179 if [ "$fibs" -gt 0 ]; then
180 fibmod="-fib 0-$fibs"
185 # Add pre-defined static routes first.
186 ipv6_static_routes="_v4mapped _v4compat ${ipv6_static_routes}"
187 ipv6_static_routes="_lla _llma ${ipv6_static_routes}"
189 # disallow "internal" addresses to appear on the wire
190 ipv6_route__v4mapped="::ffff:0.0.0.0 -prefixlen 96 ::1 -reject ${fibmod}"
191 ipv6_route__v4compat="::0.0.0.0 -prefixlen 96 ::1 -reject ${fibmod}"
193 # Disallow link-local unicast packets without outgoing scope
194 # identifiers. However, if you set "ipv6_default_interface",
195 # for the host case, you will allow to omit the identifiers.
196 # Under this configuration, the packets will go to the default
198 ipv6_route__lla="fe80:: -prefixlen 10 ::1 -reject ${fibmod}"
199 ipv6_route__llma="ff02:: -prefixlen 16 ::1 -reject ${fibmod}"
202 case ${ipv6_defaultrouter} in
206 ipv6_static_routes="_default ${ipv6_static_routes}"
207 ipv6_route__default="default ${ipv6_defaultrouter}"
211 # Install configured routes.
212 if [ -n "${ipv6_static_routes}" ]; then
213 for i in ${ipv6_static_routes}; do
215 if [ -n "$_if" ]; then
221 if [ $_skip = 0 ]; then
222 ipv6_route_args=`get_if_var ${i%:*} ipv6_route_IF`
223 if [ -n "$ipv6_route_args" ]; then
224 ${ROUTE_CMD} ${_action} \
225 -inet6 ${ipv6_route_args}
227 warn "route_${i%:*} not found"
233 # Install the "default interface" to kernel, which will be used
234 # as the default route when there's no router.
236 # Disable installing the default interface when we act
237 # as router to avoid conflict between the default
238 # router list and the manual configured default route.
239 if checkyesno ipv6_gateway_enable; then
243 case "${ipv6_default_interface}" in
244 [Nn][Oo] | [Nn][Oo][Nn][Ee])
247 [Aa][Uu][Tt][Oo] | "")
248 for i in ${ipv6_network_interfaces}; do
257 laddr=`network6_getladdr $i exclude_tentative`
262 ipv6_default_interface=$i
270 ifconfig ${ipv6_default_interface} inet6 defaultif
271 sysctl net.inet6.ip6.use_defaultzone=1
276 local _action i route_args
279 if [ -n "${natm_static_routes}" ]; then
280 for i in ${natm_static_routes}; do
281 route_args=`get_if_var $i route_IF`
282 if [ -n "$route_args" ]; then
283 atmconfig natm ${_action} ${route_args}
285 warn "route_${i} not found."
297 if [ -z "${_ropts_initdone}" ]; then
298 echo -n "Additional $1 routing options:"
306 if checkyesno icmp_bmcastecho; then
308 echo -n ' broadcast ping responses=YES'
309 ${SYSCTL} net.inet.icmp.bmcastecho=1 > /dev/null
311 ${SYSCTL} net.inet.icmp.bmcastecho=0 > /dev/null
314 if checkyesno icmp_drop_redirect; then
316 echo -n ' ignore ICMP redirect=YES'
317 ${SYSCTL} net.inet.icmp.drop_redirect=1 > /dev/null
319 ${SYSCTL} net.inet.icmp.drop_redirect=0 > /dev/null
322 if checkyesno icmp_log_redirect; then
324 echo -n ' log ICMP redirect=YES'
325 ${SYSCTL} net.inet.icmp.log_redirect=1 > /dev/null
327 ${SYSCTL} net.inet.icmp.log_redirect=0 > /dev/null
330 if checkyesno gateway_enable; then
332 echo -n ' gateway=YES'
333 ${SYSCTL} net.inet.ip.forwarding=1 > /dev/null
335 ${SYSCTL} net.inet.ip.forwarding=0 > /dev/null
338 if checkyesno forward_sourceroute; then
340 echo -n ' do source routing=YES'
341 ${SYSCTL} net.inet.ip.sourceroute=1 > /dev/null
343 ${SYSCTL} net.inet.ip.sourceroute=0 > /dev/null
346 if checkyesno accept_sourceroute; then
348 echo -n ' accept source routing=YES'
349 ${SYSCTL} net.inet.ip.accept_sourceroute=1 > /dev/null
351 ${SYSCTL} net.inet.ip.accept_sourceroute=0 > /dev/null
354 if checkyesno arpproxy_all; then
356 echo -n ' ARP proxyall=YES'
357 ${SYSCTL} net.link.ether.inet.proxyall=1 > /dev/null
359 ${SYSCTL} net.link.ether.inet.proxyall=0 > /dev/null
362 [ -n "${_ropts_initdone}" ] && echo '.'
369 if checkyesno ipv6_gateway_enable; then
371 echo -n ' gateway=YES'
372 ${SYSCTL} net.inet6.ip6.forwarding=1 > /dev/null
374 ${SYSCTL} net.inet6.ip6.forwarding=0 > /dev/null
377 [ -n "${_ropts_initdone}" ] && echo '.'
384 [ -n "${_ropts_initdone}" ] && echo '.'
391 if checkyesno ipxgateway_enable; then
393 echo -n ' gateway=YES'
394 ${SYSCTL} net.ipx.ipx.ipxforwarding=1 > /dev/null
396 ${SYSCTL} net.ipx.ipx.ipxforwarding=0 > /dev/null
399 [ -n "${_ropts_initdone}" ] && echo '.'