Subversion Repositories ALCASAR

Rev

Rev 2979 | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 2979 Rev 2983
1 
#!/bin/bash
 1 
#!/bin/bash
2 
 
 2 
 
3 
# alcasar-network.sh
 3 
# alcasar-network.sh
4 
# by Pierre RIVAULT and Rexy
 4 
# by Pierre RIVAULT and Rexy
5 
# This script is distributed under the Gnu General Public License (GPL)
 5 
# This script is distributed under the Gnu General Public License (GPL)
6 
 
 6 
 
7 
# Met à jour la configuration réseau conformément au fichier de configuration (alcasar.conf)
 7 
# Met à jour la configuration réseau conformément au fichier de configuration (alcasar.conf)
8 
# update network configuration according to alcasar.conf
 8 
# update network configuration according to alcasar.conf
9 
 
 9 
 
10 
CONF_FILE="/usr/local/etc/alcasar.conf"
 10 
CONF_FILE="/usr/local/etc/alcasar.conf"
11 
TMP_ip_gw_save="/tmp/ipset_ip_gw_save"
 11 
TMP_ip_gw_save="/tmp/ipset_ip_gw_save"
12 
EXTIF=`grep ^EXTIF= $CONF_FILE|cut -d"=" -f2`
 12 
EXTIF=`grep ^EXTIF= $CONF_FILE|cut -d"=" -f2`
13 
PUBLIC_IP=`grep ^PUBLIC_IP= $CONF_FILE|cut -d"=" -f2`
 13 
PUBLIC_IP=`grep ^PUBLIC_IP= $CONF_FILE|cut -d"=" -f2`
- 
 
 14 
if [ $PUBLIC_IP != "dhcp" ]; then
14 
GW1=`grep ^GW= $CONF_FILE|cut -d"=" -f2`
 15 
	GW1=`grep ^GW= $CONF_FILE|cut -d"=" -f2`
15 
MTU=`grep ^PUBLIC_MTU= $CONF_FILE|cut -d"=" -f2`
 16 
	MTU=`grep ^PUBLIC_MTU= $CONF_FILE|cut -d"=" -f2`
16 
MULTIWAN=`grep ^MULTIWAN= $CONF_FILE|cut -d"=" -f2`
 17 
	MULTIWAN=`grep ^MULTIWAN= $CONF_FILE|cut -d"=" -f2`
17 
MULTIWAN=${MULTIWAN:=off}
 18 
	MULTIWAN=${MULTIWAN:=off}
18 
NET="`ipcalc -n $PUBLIC_IP | cut -d"=" -f2`/`ipcalc -p $PUBLIC_IP | cut -d"=" -f2`"
 19 
	NET="`ipcalc -n $PUBLIC_IP | cut -d"=" -f2`/`ipcalc -p $PUBLIC_IP | cut -d"=" -f2`"
19 
IP=`echo $PUBLIC_IP | cut -d"/" -f1`
 20 
	IP=`echo $PUBLIC_IP | cut -d"/" -f1`
20 
PRIVATE_IP_MASK=`grep ^PRIVATE_IP $CONF_FILE | cut -d"=" -f2`
 21 
	PRIVATE_IP_MASK=`grep ^PRIVATE_IP $CONF_FILE | cut -d"=" -f2`
21 
PRIVATE_IP=`echo $PRIVATE_IP_MASK | cut -d"/" -f1`
 22 
	PRIVATE_IP=`echo $PRIVATE_IP_MASK | cut -d"/" -f1`
22 
PRIVATE_NETMASK=`echo $PRIVATE_IP_MASK | cut -d"/" -f2`
 23 
	PRIVATE_NETMASK=`echo $PRIVATE_IP_MASK | cut -d"/" -f2`
23 
PRIVATE_PREFIX=`/bin/ipcalc -p $PRIVATE_IP $PRIVATE_NETMASK |cut -d"=" -f2`		# prefixe du réseau (ex. 24)
 24 
	PRIVATE_PREFIX=`/bin/ipcalc -p $PRIVATE_IP $PRIVATE_NETMASK |cut -d"=" -f2`	# prefixe du réseau (ex. 24)
24 
PRIVATE_NETWORK=`/bin/ipcalc -n $PRIVATE_IP $PRIVATE_NETMASK| cut -d"=" -f2`	# @ réseau de consultation (ex.: 192.168.182.0)
 25 
	PRIVATE_NETWORK=`/bin/ipcalc -n $PRIVATE_IP $PRIVATE_NETMASK| cut -d"=" -f2`	# @ réseau de consultation (ex.: 192.168.182.0)
25 
PRIVATE_NETWORK_MASK=$PRIVATE_NETWORK/$PRIVATE_PREFIX							# @ + masque du réseau de consult (192.168.182.0/24)
 26 
	PRIVATE_NETWORK_MASK=$PRIVATE_NETWORK/$PRIVATE_PREFIX				# @ + masque du réseau de consult (192.168.182.0/24)
26 
nb_gw=`grep ^WAN $CONF_FILE | wc -l`
 27 
	nb_gw=`grep ^WAN $CONF_FILE | wc -l`
- 
 
 28 
fi
27 
routecmd="ip route replace default scope global"
 29 
routecmd="ip route replace default scope global"
28 
 
 30 
 
29 
if [ $(whoami) != "root" ]; then
 31 
if [ $(whoami) != "root" ]; then
30 
	echo "You must be root to run this!" ; echo ; exit 1
 32 
	echo "You must be root to run this!" ; echo ; exit 1
31 
fi
 33 
fi
32 
 
 34 
 
33 
if [ $# -eq 0 ]; then
 35 
if [ $# -eq 0 ]; then
34 
	args="--apply"
 36 
	args="--apply"
35 
else
 37 
else
36 
	args=$1
 38 
	args=$1
37 
fi
 39 
fi
38 
 
 40 
 
39 
case $args in
 41 
case $args in
40 
	--save)	# save all the IP before changing the configuration
 42 
	--save)	# save all the IP before changing the configuration
41 
		rm -f $TMP_ip_gw_save
 43 
		rm -f $TMP_ip_gw_save
42 
		gw_list="gw0"	# ipset name list for load_balancing
 44 
		gw_list="gw0"	# ipset name list for load_balancing
43 
		for ((i=1 ; i<=$nb_gw ; i++)); do
 45 
		for ((i=1 ; i<=$nb_gw ; i++)); do
44 
			gw_list="${gw_list} gw$i"
 46 
			gw_list="${gw_list} gw$i"
45 
		done
 47 
		done
46 
		# Saving all of the already connected IP in order to put them back in the load balancing after
 48 
		# Saving all of the already connected IP in order to put them back in the load balancing after
47 
		for i in $gw_list;do
 49 
		for i in $gw_list;do
48 
			ipset list $i 1>/dev/null 2>&1
 50 
			ipset list $i 1>/dev/null 2>&1
49 
			if [ $? -eq 0 ]
 51 
			if [ $? -eq 0 ]
50 
			then
 52 
			then
51 
				# the cut -d":" -f5 deletes all the lines with a :, i.e all the lines except the members
 53 
				# the cut -d":" -f5 deletes all the lines with a :, i.e all the lines except the members
52 
				ipset list $i | grep -v ":" >> $TMP_ip_gw_save
 54 
				ipset list $i | grep -v ":" >> $TMP_ip_gw_save
53 
			fi
 55 
			fi
54 
		done
 56 
		done
55 
	exit 0
 57 
	exit 0
56 
	;;
 58 
	;;
57 
	--apply)
 59 
	--apply)
58 
		[ -e /etc/sysconfig/network-scripts/ifcfg-$EXTIF ] && ifdown $EXTIF
 60 
		[ -e /etc/sysconfig/network-scripts/ifcfg-$EXTIF ] && ifdown $EXTIF
59 
		# set the new configuration for EXTIF
 61 
		# set the new configuration for EXTIF
- 
 
 62 
		if [ $PUBLIC_IP == "dhcp" ]; then
60 
		cat <<EOF > /etc/sysconfig/network-scripts/ifcfg-$EXTIF
 63 
			cat <<EOF > /etc/sysconfig/network-scripts/ifcfg-$EXTIF
- 
 
 64 
DEVICE=$EXTIF
- 
 
 65 
BOOTPROTO=dhcp
- 
 
 66 
DNS1=127.0.0.1
- 
 
 67 
PEERDNS=no
- 
 
 68 
RESOLV_MODS=yes
- 
 
 69 
ONBOOT=yes
- 
 
 70 
NOZEROCONF=yes
- 
 
 71 
METRIC=10
- 
 
 72 
MII_NOT_SUPPORTED=yes
- 
 
 73 
IPV6INIT=no
- 
 
 74 
IPV6TO4INIT=no
- 
 
 75 
ACCOUNTING=no
- 
 
 76 
USERCTL=no
- 
 
 77 
MTU=$MTU
- 
 
 78 
EOF
- 
 
 79 
			ifup $EXTIF
- 
 
 80 
		else
- 
 
 81 
			cat <<EOF > /etc/sysconfig/network-scripts/ifcfg-$EXTIF
61 
DEVICE=$EXTIF
 82 
DEVICE=$EXTIF
62 
BOOTPROTO=static
 83 
BOOTPROTO=static
63 
IPADDR=$IP
 84 
IPADDR=$IP
64 
NETMASK=`ipcalc -m $PUBLIC_IP | cut -d= -f2`
 85 
NETMASK=`ipcalc -m $PUBLIC_IP | cut -d= -f2`
65 
NETWORK=`ipcalc -n $PUBLIC_IP | cut -d= -f2`
 86 
NETWORK=`ipcalc -n $PUBLIC_IP | cut -d= -f2`
66 
GATEWAY=$GW1
 87 
GATEWAY=$GW1
67 
DNS1=127.0.0.1
 88 
DNS1=127.0.0.1
68 
RESOLV_MODS=yes
 89 
RESOLV_MODS=yes
69 
ONBOOT=yes
 90 
ONBOOT=yes
70 
METRIC=10
 91 
METRIC=10
71 
MII_NOT_SUPPORTED=yes
 92 
MII_NOT_SUPPORTED=yes
72 
IPV6INIT=no
 93 
IPV6INIT=no
73 
IPV6TO4INIT=no
 94 
IPV6TO4INIT=no
74 
ACCOUNTING=no
 95 
ACCOUNTING=no
75 
USERCTL=no
 96 
USERCTL=no
76 
MTU=$MTU
 97 
MTU=$MTU
77 
NOZEROCONF=yes
 98 
NOZEROCONF=yes
78 
EOF
 99 
EOF
79 
		ifup $EXTIF
 100 
			ifup $EXTIF
80 
		ip route flush ${NET}	# Remove the previous route for the network of EXTIF
 101 
			ip route flush ${NET}	# Remove the previous route for the network of EXTIF
81 
		ip route delete default scope global	# Remove the previous default route
 102 
			ip route delete default scope global	# Remove the previous default route
82 
		ip route add ${NET} dev ${EXTIF} src ${IP}	 # Set the new route for EXTIF network
 103 
			ip route add ${NET} dev ${EXTIF} src ${IP}	 # Set the new route for EXTIF network
83 
		ip route add ${NET} dev ${EXTIF} src ${IP} table 200	# Set the new default route. If no multiwan, these lines are equivalent to `ip route add default via ${GW1}`
 104 
			ip route add ${NET} dev ${EXTIF} src ${IP} table 200	# Set the new default route. If no multiwan, these lines are equivalent to `ip route add default via ${GW1}`
84 
		ip route add default via ${GW1} table 200
 105 
			ip route add default via ${GW1} table 200
85 
		routecmd="${routecmd} nexthop via ${GW1} dev ${EXTIF}"
 106 
			routecmd="${routecmd} nexthop via ${GW1} dev ${EXTIF}"
86 
		ip rule flush	# Remove the previous routing rules
 107 
			ip rule flush	# Remove the previous routing rules
87 
		ip rule add from all lookup main pref 32766	# Set back the main rules
 108 
			ip rule add from all lookup main pref 32766	# Set back the main rules
88 
		ip rule add from all lookup default pref 32767	# Set back the default rules
 109 
			ip rule add from all lookup default pref 32767	# Set back the default rules
89 
		ip rule add from ${PRIVATE_NETWORK_MASK} fwmark 200 lookup 200	# Add the rule for the first gateway
 110 
			ip rule add from ${PRIVATE_NETWORK_MASK} fwmark 200 lookup 200	# Add the rule for the first gateway
90 
		if [ "$MULTIWAN" == "on" ] || [ "$MULTIWAN" == "On" ]; then
 111 
			if [ "$MULTIWAN" == "on" ] || [ "$MULTIWAN" == "On" ]; then
91 
			nb_gw_supp=`grep ^WAN $CONF_FILE|wc -l`
 112 
				nb_gw_supp=`grep ^WAN $CONF_FILE|wc -l`
92 
			for ((i=0 ; $i < $nb_gw_supp ; i++)); do
 113 
				for ((i=0 ; $i < $nb_gw_supp ; i++)); do
93 
				table=$(($i + 201))	# This number is used to mark the paquets in order to route them to the choosen GW
114 
					table=$(($i + 201))	# This number is used to mark the paquets in order to route them to the choosen GW
94 
				GW=`grep ^WAN$(($i + 1))= $CONF_FILE|awk -F'"' '{ print $2 }' | awk -F, '{print $1}'`
 115 
					GW=`grep ^WAN$(($i + 1))= $CONF_FILE|awk -F'"' '{ print $2 }' | awk -F, '{print $1}'`
95 
				ip route add ${NET} dev ${EXTIF} src ${IP} table $table	# Add the others route in their respective tables
 116 
					ip route add ${NET} dev ${EXTIF} src ${IP} table $table	# Add the others route in their respective tables
96 
				ip route add default via ${GW} table $table
 117 
					ip route add default via ${GW} table $table
97 
				ip rule add from ${PRIVATE_NETWORK_MASK} fwmark $table lookup $table	# Add the rule for each rule depending of the mark set by the firewall
 118 
					ip rule add from ${PRIVATE_NETWORK_MASK} fwmark $table lookup $table	# Add the rule for each rule depending of the mark set by the firewall
98 
				routecmd="${routecmd} nexthop via ${GW} dev ${EXTIF}"	# add the added gateway into the default gateway
 119 
					routecmd="${routecmd} nexthop via ${GW} dev ${EXTIF}"	# add the added gateway into the default gateway
99 
			done
 120 
				done
- 
 
 121 
			fi
- 
 
 122 
			${routecmd}	# define the default gateway for outgoing traffic
- 
 
 123 
			ip route flush cache
100 
		fi
 124 
		fi
101 
		${routecmd}	# define the default gateway for outgoing traffic
 - 
 
102 
		ip route flush cache
 125 
		/usr/local/bin/alcasar-iptables.sh
103 
		exit 0
 126 
		exit 0
104 
		;;
 127 
		;;
105 
	*)
 128 
	*)
106 
		exit 1
 129 
		exit 1
107 
		;;
 130 
		;;
108 
esac
 131 
esac
109 
 
 132 
 
110 
 
 133 
 
111 
Generated by GNU Enscript 1.6.6.
 134 
Generated by GNU Enscript 1.6.6.
112 
 
 135 
 
113 
 
 136 
 
114 
 
 137