755c953329
- use firewall hotplug calls to configure rules - properly clean and rebuild rules on restart - cope with ifdown/ifup events on external iface (#4669) - bump pkg revision git-svn-id: svn://svn.openwrt.org/openwrt/packages@17680 3c298f89-4303-0410-b956-a3cf2f4a3e73
88 lines
2.1 KiB
Bash
88 lines
2.1 KiB
Bash
#!/bin/sh /etc/rc.common
|
|
START=95
|
|
|
|
start() {
|
|
config_load "upnpd"
|
|
local extiface intiface upload download logging secure
|
|
|
|
config_get extiface config external_iface
|
|
config_get intiface config internal_iface
|
|
config_get upload config upload
|
|
config_get download config download
|
|
config_get_bool logging config log_output 0
|
|
config_get_bool secure config secure_mode 0
|
|
|
|
include /lib/network
|
|
scan_interfaces
|
|
|
|
local ifname
|
|
config_get ifname ${extiface:-wan} ifname
|
|
|
|
if [ -n "$ifname" ]; then
|
|
local args="-i $ifname"
|
|
local iface
|
|
|
|
for iface in ${intiface:-lan}; do
|
|
local ipaddr
|
|
config_get ipaddr "$iface" ipaddr
|
|
[ -n "$ipaddr" ] && append args "-a $ipaddr"
|
|
done
|
|
|
|
append args "-p 5000 -U"
|
|
|
|
[ -n "$upload" -a -n "$download" ] && \
|
|
append args "-B $(($download * 1024 * 8)) $(($upload * 1024 * 8))"
|
|
|
|
[ "$secure" -gt 0 ] && \
|
|
append args "-S"
|
|
|
|
if [ "$logging" = "1" ]; then
|
|
eval start-stop-daemon -S -x miniupnpd -- $args -d | logger -t miniupnpd &
|
|
else
|
|
eval start-stop-daemon -S -x miniupnpd -- $args 2>/dev/null
|
|
fi
|
|
|
|
# start firewall
|
|
local zone
|
|
config_load firewall
|
|
config_get zone core "${extiface:-wan}_zone"
|
|
[ -n "$zone" ] && \
|
|
ACTION="add" ZONE="$zone" INTERFACE="${extiface:-wan}" DEVICE="$ifname" \
|
|
. /etc/hotplug.d/firewall/50-miniupnpd
|
|
else
|
|
logger -t "upnp daemon" "external interface not found, not starting"
|
|
fi
|
|
}
|
|
|
|
clear_rule() {
|
|
local state="$1"
|
|
local ifname ipaddr
|
|
|
|
config_get ifname "$state" ifname
|
|
config_get ipaddr "$state" ipaddr
|
|
|
|
[ -n "$ifname" ] && [ -n "$ipaddr" ] && {
|
|
iptables -t nat -D prerouting_rule -i $ifname -d $ipaddr -j MINIUPNPD
|
|
iptables -t filter -D forwarding_rule -i $ifname ! -o $ifname -j MINIUPNPD
|
|
uci_revert_state upnpd "$state"
|
|
unset "CONFIG_${state}_ifname"
|
|
unset "CONFIG_${state}_ipaddr"
|
|
}
|
|
}
|
|
|
|
stop() {
|
|
start-stop-daemon -K -q -x miniupnpd -p /var/run/miniupnpd.pid
|
|
rm -f /var/run/miniupnpd.pid
|
|
|
|
logger -t "upnp" "removing firewall rules"
|
|
|
|
config_load upnpd
|
|
config_foreach clear_rule firewall
|
|
|
|
iptables -t nat -F MINIUPNPD 2>/dev/null
|
|
iptables -t nat -X MINIUPNPD 2>/dev/null
|
|
iptables -t filter -F MINIUPNPD 2>/dev/null
|
|
iptables -t filter -X MINIUPNPD 2>/dev/null
|
|
}
|
|
|