j3d1/tinc
1
0
Fork 0
Code Issues 1 Pull requests Releases Wiki Activity

Committed by Lubom�r Bulej.

Browse source
This commit is contained in:
Ivo Timmermans 2000-05-01 16:28:28 +00:00
parent 33cfdf43f4
commit 3219be5770
1 changed files with 49 additions and 40 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

89
redhat/tinc
View file

@ -2,11 +2,11 @@
# #
# tinc tincd VPN setup script # tinc tincd VPN setup script
# #
# chkconfig: 2345 15 85 # chkconfig: 2345 46 54
# #
# version: 1.0.4
# author: Lubomir Bulej <pallas@kadan.cz> # author: Lubomir Bulej <pallas@kadan.cz>
# Modified for RPM by Mads Kiilerich <mads@kiilerich.com> # Modified for RPM by Mads Kiilerich <mads@kiilerich.com>
# version: 1.0.3
# #
# description: this script takes care of starting and setting up of VPNs \ # description: this script takes care of starting and setting up of VPNs \
# provided by tincd daemon. It parses the configuration files \ # provided by tincd daemon. It parses the configuration files \
@ -24,18 +24,30 @@
[ ${NETWORKING} = "no" ] && exit 0 [ ${NETWORKING} = "no" ] && exit 0
############################################################################# #############################################################################
# configuration # configuration & sanity checks
TINCD=/usr/sbin/tincd TINCD=/usr/sbin/tincd
TCONF=/etc/tinc TCONF=/etc/tinc
TPIDS=/var/run TPIDS=/var/run
#DEBUG_OPT=-dddd #DEBUG=-dddd
# Check the daemon
if [ ! -x $TINCD ]; then
echo "**tinc: daemon $TINCD does not exist or is not executable!"
exit
fi
# Check if ip-route is installed # Check if ip-route is installed
if [ ! -f /sbin/ip ]; then if [ ! -f /sbin/ip ]; then
echo "**tinc: ip-route utilities not installed!" echo "**tinc: ip-route utilities not installed!"
exit exit
fi fi
# Check the configuration directory
if [ ! -d $TCONF ]; then
echo "**tinc: configuration directory ($TCONF) not found!"
exit
fi
############################################################################## ##############################################################################
@ -45,27 +57,26 @@ fi
vpn_load () { vpn_load () {
CFG="$TCONF/$1/tinc.conf" CFG="$TCONF/$1/tinc.conf"
[ -f $CFG ] || { echo "Error: $CFG does not exist" >&2 ; return 1 } [ -f $CFG ] || { echo "**tinc: $CFG does not exist!" >&2 ; return 1 }
# load TINCD config # load TINCD config
DEV=`grep -i -e '^TapDevice' $CFG | sed 's/[[:space:]]//g;s/^.*=//g'` DEV=`grep -i -e '^[[:space:]]*TapDevice' $CFG | sed 's/[[:space:]]//g; s/^.*=//g'`
VPN=`grep -i -e '^(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g;s/^.*=//g'` VPN=`grep -i -e '^[[:space:]]*(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g; s/^.*=//g'`
# discourage empty and multiple entries # discourage empty and multiple entries
[ -z "$DEV" ] && \ [ -z "$DEV" ] && \
{ echo "Error: TapDevice needed" >&2 ; return 2 } { echo "**tinc: TapDevice required!" >&2 ; return 2 }
echo $DEV | grep -q '^/dev/tap' || echo $DEV | grep -q '^/dev/tap' ||
{ echo "Error: TapDevice needs /dev/tapX" >&2 ; return 2 } { echo "**tinc: TapDevice should be in form /dev/tapX" >&2 ; return 2 }
[ `echo $DEV | wc -l` -gt 1 ] && \ [ `echo $DEV | wc -l` -gt 1 ] && \
{ echo "Error in TapDevice" >&2 ; return 3 } { echo "**tinc: multiple TapDevice entries not allowed!" >&2 ; return 3 }
[ -z "$VPN" ] && \ [ -z "$VPN" ] && \
{ echo "Error: MyOwnVPNIP/MyVirtualIP needed" >&2 ; return 2 } { echo "**tinc: MyOwnVPNIP/MyVirtualIP required!" >&2 ; return 2 }
[ `echo $VPN | wc -l` -gt 1 ] && \ [ `echo $VPN | wc -l` -gt 1 ] && \
{ echo "Error in MyOwnVPNIP/MyVirtualIP" >&2 ; return 3 } { echo "**tinc: multiple MyOwnVPNIP/MyVirtualIP entries not allowed!" >&2 ; return 3 }
echo $VPN | grep -q -x \ echo $VPN | grep -q -x \
'\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || '\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || \
{ echo "Error in MyOwnVPNIP/MyVirtualIP address $VPN" ; { echo "**tinc: badly formed MyOwnVPNIP/MyVirtualIP address $VPN!" ; return 3 }
return 3 }
# network device # network device
TAP=`echo $DEV | cut -d"/" -f3` TAP=`echo $DEV | cut -d"/" -f3`
@ -89,7 +100,7 @@ vpn_load () {
len=$((len-msk)) len=$((len-msk))
done done
# Network & broadcast # Network & broadcast addresses
BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2` BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2`
NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2` NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2`
@ -107,7 +118,7 @@ vpn_load () {
vpn_start () { vpn_start () {
vpn_load $1 || { echo "Error: Could not vpn_load $1" >&2 ; return 1 } vpn_load $1 || { echo "**tinc: could not vpn_load $1" >&2 ; return 1 }
# create device file # create device file
if [ ! -c $DEV ]; then if [ ! -c $DEV ]; then
@ -116,22 +127,22 @@ vpn_start () {
fi fi
# load device module # load device module
{ insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \ { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \
{ echo "Error: cannot insmod ethertap$NUM" >&2 ; return 2 } { echo "**tinc: cannot insmod ethertap$NUM" >&2 ; return 2 }
} | grep -v '^Us' } | grep -v '^Us'
# configure the interface # configure the interface
ip link set $TAP address $MAC #&> /dev/null ip link set $TAP address $MAC
ip link set $TAP up #&> /dev/null ip link set $TAP up
ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.' #&> /dev/null ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.'
ip addr add $VPN brd $BRD dev $TAP #&> /dev/null ip addr add $VPN brd $BRD dev $TAP
# start tincd # start tincd
$TINCD --net="$1" $DEBUG_OPT || { echo "Error: Cannot start $TINCD" >&2; $TINCD --net="$1" $DEBUG || \
return 3 } { echo "**tinc: could not start $TINCD" >&2; return 3 }
# default interface route # default interface route
ip route add $NET/$LEN dev $TAP #&> /dev/null # ip route add $NET/$LEN dev $TAP
# setup routes # setup routes
/etc/sysconfig/network-scripts/ifup-routes $TAP /etc/sysconfig/network-scripts/ifup-routes $TAP
@ -150,7 +161,7 @@ vpn_stop () {
vpn_load $1 || return 1 vpn_load $1 || return 1
# flush the routing table # flush the routing table
ip route flush dev $TAP &> /dev/null # ip route flush dev $TAP &> /dev/null
# kill the tincd daemon # kill the tincd daemon
PID="$TPIDS/tinc.$1.pid" PID="$TPIDS/tinc.$1.pid"
@ -164,15 +175,15 @@ vpn_stop () {
[ -f $PID ] || break [ -f $PID ] || break
sleep 1; dly=$((dly+1)) sleep 1; dly=$((dly+1))
done done
else
rm -f $PID &> /dev/null
fi fi
[ -f $PID ] && rm -f $PID
fi fi
# bring the interface down # bring the interface down
ip link set $TAP down &> /dev/null ip link set $TAP down &> /dev/null
# remove kernel module # remove ethertap module
rmmod "ethertap$NUM" &> /dev/null rmmod "ethertap$NUM" &> /dev/null
return 0 return 0
@ -182,35 +193,33 @@ vpn_stop () {
# See how we were called. # See how we were called.
case "$1" in case "$1" in
start) start)
echo -n "Bringing up VPNs: "
for vpn in `ls -1 $TCONF`; do for vpn in `ls -1 $TCONF`; do
vpn_start $vpn && echo -n "$vpn " echo -n "Bringing up VPN $vpn: "
vpn_start $vpn && action "" /bin/true
done done
touch /var/lock/subsys/tinc touch /var/lock/subsys/tinc
action "" /bin/true
;; ;;
stop) stop)
echo -n "Shutting down VPNs: "
for vpn in `ls -1 $TCONF`; do for vpn in `ls -1 $TCONF`; do
vpn_stop $vpn && echo -n "$vpn " echo -n "Shutting down VPN $vpn: "
vpn_stop $vpn && action "" /bin/true
done done
rm -f /var/lock/susbsys/tinc rm -f /var/lock/susbsys/tinc
action "" /bin/true
;; ;;
status) status)
echo -n "Currently running VPNs: " echo -n "Configured VPNs: "
for vpn in `ls -1 $TCONF`; do for vpn in `ls -1 $TCONF`; do
PID="$TPIDS/tinc.$vpn.pid" PID="$TPIDS/tinc.$vpn.pid"
echo -n "$vpn " echo -n "$vpn:"
if [ -f $PID -a `ps ax | grep "^ *$(cat $PID)" | wc -l` -eq 1 ] if [ -f $PID -a `ps ax | grep "^ *$(cat $PID)" | wc -l` -eq 1 ]
then then
echo -n "OK " echo -n "OK "
else else
echo -n "Dead " echo -n "DEAD "
fi fi
done done
echo echo