64 lines
1.8 KiB
Plaintext
64 lines
1.8 KiB
Plaintext
|
#!/bin/sh /etc/rc.common
|
||
|
|
|
||
|
|
START=70
|
||
|
|
|
||
|
|
IP=$(which ip)
|
||
|
|
IPTABLES=$(which iptables)
|
||
|
|
NATPMP=/usr/sbin/natpmp
|
||
|
|
PIDFILE=/var/run/natpmp.pid
|
||
|
|
|
||
|
|
natpmp_config() {
|
||
|
|
local cfg="$1"
|
||
|
|
|
||
|
|
config_get PUBLIC_IF "$cfg" outbound_interface
|
||
|
|
config_get PRIVATE_IFS "$cfg" inbound_interfaces
|
||
|
|
config_get IPTABLES_CHAIN "$cfg" iptables_chain
|
||
|
|
}
|
||
|
|
|
||
|
|
start() {
|
||
|
|
config_load natpmp
|
||
|
|
config_foreach natpmp_config natpmp
|
||
|
|
|
||
|
|
# Flush all the rules in the natpmp chain, or create it, if it doesn't exists.
|
||
|
|
$IPTABLES -t nat -F $IPTABLES_CHAIN 2>/dev/null || \
|
||
|
|
$IPTABLES -t nat -N $IPTABLES_CHAIN
|
||
|
|
|
||
|
|
# Handle all incoming connections in the natpmp chain.
|
||
|
|
$IPTABLES -t nat -D PREROUTING -j $IPTABLES_CHAIN 2>/dev/null || true
|
||
|
|
$IPTABLES -t nat -A PREROUTING -j $IPTABLES_CHAIN
|
||
|
|
|
||
|
|
# Iterate through the private interfaces.
|
||
|
|
BIND_ARGS=""
|
||
|
|
for IF in $PRIVATE_IFS; do
|
||
|
|
# Get the IP address of this interface.
|
||
|
|
ADDR=`$IP addr show dev $IF 2>/dev/null | grep "^ *inet .* $IF\$" | cut -d " " -f 6 | cut -d / -f 1`
|
||
|
|
if [ -n "$ADDR" ] ; then
|
||
|
|
# Add the IP address to the argument list.
|
||
|
|
BIND_ARGS="$BIND_ARGS -a $ADDR"
|
||
|
|
else
|
||
|
|
echo "Could not get IP address of interface $IF. Skipping." >&2
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
|
||
|
|
if [ -z "$BIND_ARGS" ] ; then
|
||
|
|
echo "No IP addresses to bind to. Exiting." >&2
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
$NATPMP -p $PIDFILE -b -i "$PUBLIC_IF" $BIND_ARGS -- "$IPTABLES_CHAIN"
|
||
|
|
}
|
||
|
|
|
||
|
|
stop() {
|
||
|
|
config_load natpmp
|
||
|
|
config_foreach natpmp_config natpmp
|
||
|
|
|
||
|
|
# Unlink chain
|
||
|
|
$IPTABLES -t nat -D PREROUTING -j $IPTABLES_CHAIN 2>/dev/null || true
|
||
|
|
|
||
|
|
# Flush all the rules in the natpmp chain
|
||
|
|
$IPTABLES -t nat -F $IPTABLES_CHAIN 2>/dev/null && \
|
||
|
|
$IPTABLES -t nat -X $IPTABLES_CHAIN
|
||
|
|
|
||
|
|
kill $(cat $PIDFILE)
|
||
|
|
}
|