123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154 |
- #!/bin/sh /etc/rc.common
- # Copyright (C) 2010-2014 OpenWrt.org
- START=99
- USE_PROCD=1
- PROG=/usr/sbin/igmpproxy
- CONFIGFILE=/var/etc/igmpproxy.conf
- igmp_header() {
- local quickleave verbose
- config_get_bool quickleave "$1" quickleave 0
- config_get verbose "$1" verbose 1
- [ $verbose = "0" ] && logopts="-d"
- [ $verbose = "2" ] && logopts="-v"
- [ $verbose = "3" ] && logopts="-v -v"
- mkdir -p /var/etc
- rm -f /var/etc/igmpproxy.conf
- [ $quickleave -gt 0 ] && echo "quickleave" >> /var/etc/igmpproxy.conf
- [ -L /etc/igmpproxy.conf ] || ln -nsf /var/etc/igmpproxy.conf /etc/igmpproxy.conf
- }
- igmp_add_phyint() {
- local network direction altnets device up
- config_get network $1 network
- config_get direction $1 direction
- config_get altnets $1 altnet
- local status="$(ubus -S call "network.interface.$network" status)"
- [ -n "$status" ] || return
- json_load "$status"
- json_get_var device l3_device
- json_get_var up up
- [ -n "$device" -a "$up" = "1" ] || {
- procd_append_param error "$network is not up"
- return;
- }
- append netdevs "$device"
- [[ "$direction" = "upstream" ]] && has_upstream=1
- echo -e "\nphyint $device $direction ratelimit 0 threshold 1" >> /var/etc/igmpproxy.conf
- if [ -n "$altnets" ]; then
- local altnet
- for altnet in $altnets; do
- echo -e "\taltnet $altnet" >> /var/etc/igmpproxy.conf
- done
- fi
- }
- igmp_add_network() {
- local network
- config_get network $1 network
- procd_add_interface_trigger "interface.*" $network /etc/init.d/igmpproxy reload
- }
- igmp_add_firewall_routing() {
- config_get direction $1 direction
- config_get zone $1 zone
- [[ "$direction" = "downstream" && ! -z "$zone" ]] || return 0
- # First drop SSDP packets then accept all other multicast
- json_add_object ""
- json_add_string type rule
- json_add_string src "$upstream"
- json_add_string dest "$zone"
- json_add_string family ipv4
- json_add_string proto udp
- json_add_string dest_ip "239.255.255.250"
- json_add_string target DROP
- json_close_object
- json_add_object ""
- json_add_string type rule
- json_add_string src "$upstream"
- json_add_string dest "$zone"
- json_add_string family ipv4
- json_add_string proto udp
- json_add_string dest_ip "224.0.0.0/4"
- json_add_string target ACCEPT
- json_close_object
- }
- igmp_add_firewall_network() {
- config_get direction $1 direction
- config_get zone $1 zone
- [ ! -z "$zone" ] || return
- json_add_object ""
- json_add_string type rule
- json_add_string src "$zone"
- json_add_string family ipv4
- json_add_string proto igmp
- json_add_string target ACCEPT
- json_close_object
- [[ "$direction" = "upstream" ]] && {
- upstream="$zone"
- config_foreach igmp_add_firewall_routing phyint
- }
- }
- service_triggers() {
- procd_add_reload_trigger "igmpproxy"
- config_foreach igmp_add_network phyint
- }
- start_service() {
- has_upstream=
- netdevs=
- logopts=
- config_load igmpproxy
- config_foreach igmp_header igmpproxy
- config_foreach igmp_add_phyint phyint
- [ -n "$has_upstream" ] || return
- procd_open_instance
- procd_set_param command $PROG '-n'
- [ -n "$logopts" ] && procd_append_param command $logopts
- procd_append_param command $CONFIGFILE
- procd_set_param file $CONFIGFILE
- procd_set_param netdev $netdevs
- procd_set_param respawn
- procd_open_data
- json_add_array firewall
- config_foreach igmp_add_firewall_network phyint
- json_close_array
- procd_close_data
- procd_close_instance
- }
- service_started() {
- procd_set_config_changed firewall
- }
- stop_service() {
- procd_set_config_changed firewall
- }
|