etc/rc.d/routing

   1 #!/bin/sh
   2 #
   3 # Configure routing and miscellaneous network tunables
   4 #
   5 # $FreeBSD$
   6 #
   7
   8 # PROVIDE: routing
   9 # REQUIRE: faith netif ppp stf
  10 # KEYWORD: nojailvnet
  11
  12 . /etc/rc.subr
  13 . /etc/network.subr
  14
  15 name="routing"
  16 start_cmd="routing_start doall"
  17 stop_cmd="routing_stop"
  18 extra_commands="options static"
  19 static_cmd="routing_start static"
  20 options_cmd="routing_start options"
  21
  22 ROUTE_CMD="/sbin/route"
  23
  24 routing_start()
  25 {
  26         local _cmd _af _if _a
  27         _cmd=$1
  28         _af=$2
  29         _if=$3
  30
  31         case $_if in
  32         ""|[Aa][Ll][Ll]|[Aa][Nn][Yy])   _if="" ;;
  33         esac
  34
  35         case $_af in
  36         inet|inet6|ipx|atm)
  37                 if afexists $_af; then
  38                         setroutes $_cmd $_af $_if
  39                 else
  40                         err 1 "Unsupported address family: $_af."
  41                 fi
  42                 ;;
  43         ""|[Aa][Ll][Ll]|[Aa][Nn][Yy])
  44                 for _a in inet inet6 ipx atm; do
  45                         afexists $_a && setroutes $_cmd $_a $_if
  46                 done
  47                 ;;
  48         *)
  49                 err 1 "Unsupported address family: $_af."
  50                 ;;
  51         esac
  52 }
  53
  54 routing_stop()
  55 {
  56         local _af _if _a
  57         _af=$1
  58         _if=$2
  59
  60         case $_if in
  61         ""|[Aa][Ll][Ll]|[Aa][Nn][Yy])   _if="" ;;
  62         esac
  63
  64         case $_af in
  65         inet|inet6|ipx|atm)
  66                 if afexists $_af; then
  67                         eval static_${_af} delete $_if
  68                         # When $_if is specified, do not flush routes.
  69                         if ! [ -n "$_if" ]; then
  70                                 eval routing_stop_${_af}
  71                         fi
  72                 else
  73                         err 1 "Unsupported address family: $_af."
  74                 fi
  75                 ;;
  76         ""|[Aa][Ll][Ll]|[Aa][Nn][Yy])
  77                 for _a in inet inet6 ipx atm; do
  78                         afexists $_a || continue
  79                         eval static_${_a} delete $_if
  80                         # When $_if is specified, do not flush routes.
  81                         if ! [ -n "$_if" ]; then
  82                                 eval routing_stop_${_a}
  83                         fi
  84                 done
  85                 ;;
  86         *)
  87                 err 1 "Unsupported address family: $_af."
  88                 ;;
  89         esac
  90 }
  91
  92 setroutes()
  93 {
  94         case $1 in
  95         static)
  96                 static_$2 add $3
  97                 ;;
  98         options)
  99                 options_$2
 100                 ;;
 101         doall)
 102                 static_$2 add $3
 103                 options_$2
 104                 ;;
 105         esac
 106 }
 107
 108 routing_stop_inet()
 109 {
 110         ${ROUTE_CMD} -n flush -inet
 111 }
 112
 113 routing_stop_inet6()
 114 {
 115         local i
 116
 117         ${ROUTE_CMD} -n flush -inet6
 118         for i in `list_net_interfaces`; do
 119                 if ipv6if $i; then
 120                         ifconfig $i inet6 -defaultif
 121                 fi
 122         done
 123 }
 124
 125 routing_stop_atm()
 126 {
 127         return 0
 128 }
 129
 130 routing_stop_ipx()
 131 {
 132         return 0
 133 }
 134
 135 static_inet()
 136 {
 137         local _action _if _skip
 138         _action=$1
 139         _if=$2
 140
 141         # Add default route.
 142         case ${defaultrouter} in
 143         [Nn][Oo] | '')
 144                 ;;
 145         *)
 146                 static_routes="${static_routes} _default"
 147                 route__default="default ${defaultrouter}"
 148                 ;;
 149         esac
 150
 151         # Install configured routes.
 152         if [ -n "${static_routes}" ]; then
 153                 for i in ${static_routes}; do
 154                         _skip=0
 155                         if [ -n "$_if" ]; then
 156                                 case $i in
 157                                 *:$_if) ;;
 158                                 *)      _skip=1 ;;
 159                                 esac
 160                         fi
 161                         if [ $_skip = 0 ]; then
 162                                 route_args=`get_if_var ${i%:*} route_IF`
 163                                 if [ -n "$route_args" ]; then
 164                                         ${ROUTE_CMD} ${_action} ${route_args}
 165                                 else
 166                                         warn "route_${i%:*} not found."
 167                                 fi
 168                         fi
 169                 done
 170         fi
 171 }
 172
 173 static_inet6()
 174 {
 175         local _action _if _skip fibmod fibs
 176         _action=$1
 177         _if=$2
 178
 179         # get the number of FIBs supported.
 180         fibs=$((`${SYSCTL_N} net.fibs` - 1))
 181         if [ "$fibs" -gt 0 ]; then
 182                 fibmod="-fib 0-$fibs"
 183         else
 184                 fibmod=
 185         fi
 186
 187         # Add pre-defined static routes first.
 188         ipv6_static_routes="_v4mapped _v4compat ${ipv6_static_routes}"
 189         ipv6_static_routes="_lla _llma ${ipv6_static_routes}"
 190
 191         # disallow "internal" addresses to appear on the wire
 192         ipv6_route__v4mapped="::ffff:0.0.0.0 -prefixlen 96 ::1 -reject ${fibmod}"
 193         ipv6_route__v4compat="::0.0.0.0 -prefixlen 96 ::1 -reject ${fibmod}"
 194
 195         # Disallow link-local unicast packets without outgoing scope
 196         # identifiers.  However, if you set "ipv6_default_interface",
 197         # for the host case, you will allow to omit the identifiers.
 198         # Under this configuration, the packets will go to the default
 199         # interface.
 200         ipv6_route__lla="fe80:: -prefixlen 10 ::1 -reject ${fibmod}"
 201         ipv6_route__llma="ff02:: -prefixlen 16 ::1 -reject ${fibmod}"
 202
 203         # Add default route.
 204         case ${ipv6_defaultrouter} in
 205         [Nn][Oo] | '')
 206                 ;;
 207         *)
 208                 ipv6_static_routes="${ipv6_static_routes} _default"
 209                 ipv6_route__default="default ${ipv6_defaultrouter}"
 210                 ;;
 211         esac
 212
 213         # Install configured routes.
 214         if [ -n "${ipv6_static_routes}" ]; then
 215                 for i in ${ipv6_static_routes}; do
 216                         _skip=0
 217                         if [ -n "$_if" ]; then
 218                                 case $i in
 219                                 *:$_if) ;;
 220                                 *)      _skip=1 ;;
 221                                 esac
 222                         fi
 223                         if [ $_skip = 0 ]; then
 224                                 ipv6_route_args=`get_if_var ${i%:*} ipv6_route_IF`
 225                                 if [ -n "$ipv6_route_args" ]; then
 226                                         ${ROUTE_CMD} ${_action} \
 227                                                 -inet6 ${ipv6_route_args}
 228                                 else
 229                                         warn "route_${i%:*} not found"
 230                                 fi
 231                         fi
 232                 done
 233         fi
 234
 235         # Install the "default interface" to kernel, which will be used
 236         # as the default route when there's no router.
 237
 238         # Disable installing the default interface when we act
 239         # as router to avoid conflict between the default
 240         # router list and the manual configured default route.
 241         if checkyesno ipv6_gateway_enable; then
 242                 return
 243         fi
 244
 245         case "${ipv6_default_interface}" in
 246         [Nn][Oo] | [Nn][Oo][Nn][Ee])
 247                 return
 248                 ;;
 249         [Aa][Uu][Tt][Oo] | "")
 250                 for i in ${ipv6_network_interfaces}; do
 251                         case $i in
 252                         [Nn][Oo][Nn][Ee])
 253                                 return
 254                                 ;;
 255                         lo0|faith[0-9]*)
 256                                 continue
 257                                 ;;
 258                         esac
 259                         laddr=`network6_getladdr $i exclude_tentative`
 260                         case ${laddr} in
 261                         '')
 262                                 ;;
 263                         *)
 264                                 ipv6_default_interface=$i
 265                                 break
 266                                 ;;
 267                         esac
 268                 done
 269                 ;;
 270         esac
 271
 272         ifconfig ${ipv6_default_interface} inet6 defaultif
 273         sysctl net.inet6.ip6.use_defaultzone=1
 274 }
 275
 276 static_atm()
 277 {
 278         local _action i route_args
 279         _action=$1
 280
 281         if [ -n "${natm_static_routes}" ]; then
 282                 for i in ${natm_static_routes}; do
 283                         route_args=`get_if_var $i route_IF`
 284                         if [ -n "$route_args" ]; then
 285                                 atmconfig natm ${_action} ${route_args}
 286                         else
 287                                 warn "route_${i} not found."
 288                         fi
 289                 done
 290         fi
 291 }
 292
 293 static_ipx()
 294 {
 295         :
 296 }
 297
 298 ropts_init()
 299 {
 300         if [ -z "${_ropts_initdone}" ]; then
 301                 echo -n "Additional $1 routing options:"
 302                 _ropts_initdone=yes
 303         fi
 304 }
 305
 306 options_inet()
 307 {
 308         _ropts_initdone=
 309         if checkyesno icmp_bmcastecho; then
 310                 ropts_init inet
 311                 echo -n ' broadcast ping responses=YES'
 312                 ${SYSCTL} net.inet.icmp.bmcastecho=1 > /dev/null
 313         else
 314                 ${SYSCTL} net.inet.icmp.bmcastecho=0 > /dev/null
 315         fi
 316
 317         if checkyesno icmp_drop_redirect; then
 318                 ropts_init inet
 319                 echo -n ' ignore ICMP redirect=YES'
 320                 ${SYSCTL} net.inet.icmp.drop_redirect=1 > /dev/null
 321         else
 322                 ${SYSCTL} net.inet.icmp.drop_redirect=0 > /dev/null
 323         fi
 324
 325         if checkyesno icmp_log_redirect; then
 326                 ropts_init inet
 327                 echo -n ' log ICMP redirect=YES'
 328                 ${SYSCTL} net.inet.icmp.log_redirect=1 > /dev/null
 329         else
 330                 ${SYSCTL} net.inet.icmp.log_redirect=0 > /dev/null
 331         fi
 332
 333         if checkyesno gateway_enable; then
 334                 ropts_init inet
 335                 echo -n ' gateway=YES'
 336                 ${SYSCTL} net.inet.ip.forwarding=1 > /dev/null
 337         else
 338                 ${SYSCTL} net.inet.ip.forwarding=0 > /dev/null
 339         fi
 340
 341         if checkyesno forward_sourceroute; then
 342                 ropts_init inet
 343                 echo -n ' do source routing=YES'
 344                 ${SYSCTL} net.inet.ip.sourceroute=1 > /dev/null
 345         else
 346                 ${SYSCTL} net.inet.ip.sourceroute=0 > /dev/null
 347         fi
 348
 349         if checkyesno accept_sourceroute; then
 350                 ropts_init inet
 351                 echo -n ' accept source routing=YES'
 352                 ${SYSCTL} net.inet.ip.accept_sourceroute=1 > /dev/null
 353         else
 354                 ${SYSCTL} net.inet.ip.accept_sourceroute=0 > /dev/null
 355         fi
 356
 357         if checkyesno arpproxy_all; then
 358                 ropts_init inet
 359                 echo -n ' ARP proxyall=YES'
 360                 ${SYSCTL} net.link.ether.inet.proxyall=1 > /dev/null
 361         else
 362                 ${SYSCTL} net.link.ether.inet.proxyall=0 > /dev/null
 363         fi
 364
 365         [ -n "${_ropts_initdone}" ] && echo '.'
 366 }
 367
 368 options_inet6()
 369 {
 370         _ropts_initdone=
 371
 372         if checkyesno ipv6_gateway_enable; then
 373                 ropts_init inet6
 374                 echo -n ' gateway=YES'
 375                 ${SYSCTL} net.inet6.ip6.forwarding=1 > /dev/null
 376         else
 377                 ${SYSCTL} net.inet6.ip6.forwarding=0 > /dev/null
 378         fi
 379
 380         [ -n "${_ropts_initdone}" ] && echo '.'
 381 }
 382
 383 options_atm()
 384 {
 385         _ropts_initdone=
 386
 387         [ -n "${_ropts_initdone}" ] && echo '.'
 388 }
 389
 390 options_ipx()
 391 {
 392         _ropts_initdone=
 393
 394         if checkyesno ipxgateway_enable; then
 395                 ropts_init ipx
 396                 echo -n ' gateway=YES'
 397                 ${SYSCTL} net.ipx.ipx.ipxforwarding=1 > /dev/null
 398         else
 399                 ${SYSCTL} net.ipx.ipx.ipxforwarding=0 > /dev/null
 400         fi
 401
 402         [ -n "${_ropts_initdone}" ] && echo '.'
 403 }
 404
 405 load_rc_config $name
 406 run_rc_command "$@"