freebsd-dev/etc/rc.d/ipnat

#!/bin/sh
#
# $FreeBSD$
#

# PROVIDE: ipnat
# REQUIRE: ipfilter
# KEYWORD: nojail

. /etc/rc.subr

name="ipnat"
desc="user interface to the NAT subsystem"
rcvar="ipnat_enable"
load_rc_config $name
start_cmd="ipnat_start"
stop_cmd="${ipnat_program} -F -C"
reload_cmd="${ipnat_program} -F -C -f ${ipnat_rules}"
extra_commands="reload"
required_files="${ipnat_rules}"
required_modules="ipl:ipfilter"

ipnat_start()
{
	echo "Installing NAT rules."
	${ipnat_program} -CF -f ${ipnat_rules} ${ipnat_flags}
}

run_rc_command "$1"
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`#!/bin/sh`
			`#`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-13 22:14:37 +00:00			`# $FreeBSD$`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`#`

			`# PROVIDE: ipnat`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`# REQUIRE: ipfilter`
Remove the requirement for the FreeBSD keyword as it no longer makes any sense. Discussed with: dougb, brooks MFC after: 3 days 2004-10-07 13:55:26 +00:00			`# KEYWORD: nojail`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00
			`. /etc/rc.subr`

			`name="ipnat"`
- Add descriptions to most of the rc scripts. Those are mostly taken from their daemon's manpage and probably improved. - Consistently use "filesystem" not "file system". Approved by: bapt, brueffer Differential Revision: D452 2016-04-23 16:10:54 +00:00			`desc="user interface to the NAT subsystem"`
Prepare for the removal of set_rcvar() by changing the rcvar= assignments to the literal values it would have returned. The concept of set_rcvar() was nice in theory, but the forks it creates are a drag on the startup process, which is especially noticeable on slower systems, such as embedded ones. During the discussion on freebsd-rc@ a preference was expressed for using ${name}_enable instead of the literal values. However the code portability concept doesn't really apply since there are so many other places where the literal name has to be searched for and replaced. Also, using the literal value is also a tiny bit faster than dereferencing the variables, and every little bit helps. 2012-01-14 02:18:41 +00:00			`rcvar="ipnat_enable"`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`load_rc_config $name`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`start_cmd="ipnat_start"`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`stop_cmd="${ipnat_program} -F -C"`
			`reload_cmd="${ipnat_program} -F -C -f ${ipnat_rules}"`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`extra_commands="reload"`
Use $required_modules wherever suitable. Use load_kld() in special cases. So we get rid of quite a few lines of duplicated code. 2006-12-31 10:37:18 +00:00			`required_files="${ipnat_rules}"`
			`required_modules="ipl:ipfilter"`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-13 22:14:37 +00:00
			`ipnat_start()`
			`{`
Change a bogus -n parameter to echo(1). 2003-11-03 17:03:01 +00:00			`echo "Installing NAT rules."`
Use $ipnat_program instead of the hardcoded path, which was wron anyways. Approved by: markm (mentor) (implicit) Submitted by: leafy <leafy@leafy.idv.tw> 2003-04-24 18:14:52 +00:00			`${ipnat_program} -CF -f ${ipnat_rules} ${ipnat_flags}`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`}`

			`run_rc_command "$1"`