freebsd-nq/etc/rc.d/ipnat

#!/bin/sh
#
# $NetBSD: ipnat,v 1.6 2000/09/19 13:04:38 lukem Exp $
# $FreeBSD$
#

# PROVIDE: ipnat
# REQUIRE: ipfilter
# BEFORE:  DAEMON netif
# KEYWORD: nojail

. /etc/rc.subr

name="ipnat"
rcvar=`set_rcvar`
load_rc_config $name
start_precmd="ipnat_precmd"
start_cmd="ipnat_start"
stop_cmd="${ipnat_program} -F -C"
reload_cmd="${ipnat_program} -F -C -f ${ipnat_rules}"
extra_commands="reload"

ipnat_precmd()
{
	# Make sure ipfilter is loaded before continuing
	if ! ${SYSCTL} net.inet.ipf.fr_pass >/dev/null 2>&1; then
		if kldload ipl; then
			info 'IP-filter module loaded.'
		else
			err 1 'IP-filter module failed to load.'
		fi
	fi
	return 0
}

ipnat_start()
{
	if [ ! -f ${ipnat_rules} ]; then
		warn 'NO IPNAT RULES'
		return 0
	fi
	echo "Installing NAT rules."
	${ipnat_program} -CF -f ${ipnat_rules} ${ipnat_flags}
}

run_rc_command "$1"
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`#!/bin/sh`
			`#`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-13 22:14:37 +00:00			`# $NetBSD: ipnat,v 1.6 2000/09/19 13:04:38 lukem Exp $`
			`# $FreeBSD$`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`#`

			`# PROVIDE: ipnat`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`# REQUIRE: ipfilter`
			`# BEFORE: DAEMON netif`
Remove the requirement for the FreeBSD keyword as it no longer makes any sense. Discussed with: dougb, brooks MFC after: 3 days 2004-10-07 13:55:26 +00:00			`# KEYWORD: nojail`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00
			`. /etc/rc.subr`

			`name="ipnat"`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-13 22:14:37 +00:00			rcvar=`set_rcvar`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`load_rc_config $name`
			`start_precmd="ipnat_precmd"`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`start_cmd="ipnat_start"`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`stop_cmd="${ipnat_program} -F -C"`
			`reload_cmd="${ipnat_program} -F -C -f ${ipnat_rules}"`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`extra_commands="reload"`

Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-13 22:14:37 +00:00			`ipnat_precmd()`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`{`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-13 22:14:37 +00:00			`# Make sure ipfilter is loaded before continuing`
Fix style bugs: * Space -> tabs conversion. * Removed blanks before semicolon in "if ... ; then". * Proper indentation of misindented lines. * Put a full stop after some comments. * Removed whitespace at end of line. Approved by: silence from gordon 2002-10-12 10:31:31 +00:00			`if ! ${SYSCTL} net.inet.ipf.fr_pass >/dev/null 2>&1; then`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`if kldload ipl; then`
o Make the 'Ip-filter module loaded' messages informational o Make 'No ipnat rules' a warning o Remove unecessary ' ..' Approved by: markm (implicit) 2003-04-30 02:54:17 +00:00			`info 'IP-filter module loaded.'`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`else`
			`err 1 'IP-filter module failed to load.'`
			`fi`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`fi`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-13 22:14:37 +00:00			`return 0`
			`}`

			`ipnat_start()`
			`{`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`if [ ! -f ${ipnat_rules} ]; then`
o Make the 'Ip-filter module loaded' messages informational o Make 'No ipnat rules' a warning o Remove unecessary ' ..' Approved by: markm (implicit) 2003-04-30 02:54:17 +00:00			`warn 'NO IPNAT RULES'`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 08:20:47 +00:00			`return 0`
			`fi`
Change a bogus -n parameter to echo(1). 2003-11-03 17:03:01 +00:00			`echo "Installing NAT rules."`
Use $ipnat_program instead of the hardcoded path, which was wron anyways. Approved by: markm (mentor) (implicit) Submitted by: leafy <leafy@leafy.idv.tw> 2003-04-24 18:14:52 +00:00			`${ipnat_program} -CF -f ${ipnat_rules} ${ipnat_flags}`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 07:16:14 +00:00			`}`

			`run_rc_command "$1"`