[packages] miniupnpd: add option to enable NAT-PMP (#8747)
[packages.git] / net / miniupnpd / files / miniupnpd.init
1 #!/bin/sh /etc/rc.common
2 START=95
3
4 start() {
5         type miniupnpd_add_rules >/dev/null 2>/dev/null || \
6                 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
7
8         config_load "upnpd"
9         local extiface intiface upload download logging secure enabled natpmp
10
11         config_get extiface config external_iface
12         config_get intiface config internal_iface
13         config_get upload   config upload
14         config_get download config download
15         config_get_bool logging config log_output 0
16         config_get_bool secure config secure_mode 0
17         config_get_bool natpmp config enable_natpmp 0
18         config_get_bool enabled config enabled 0 
19
20         include /lib/network
21         scan_interfaces
22
23         local ifname
24         config_get ifname ${extiface:-wan} ifname
25
26         if [ -n "$ifname" ]; then
27                 local args="-i $ifname"
28                 local iface
29
30                 for iface in ${intiface:-lan}; do
31                         local ipaddr
32                         config_get ipaddr "$iface" ipaddr
33                         [ -n "$ipaddr" ] && append args "-a $ipaddr"
34                 done
35
36                 append args "-p 5000 -U"
37
38                 [ -n "$upload" -a -n "$download" ] && \
39                         append args "-B $(($download * 1024 * 8)) $(($upload * 1024 * 8))"
40
41                 [ "$secure" -gt 0 ] && \
42                         append args "-S"
43
44                 [ "$natpmp" -gt 0 ] && \
45                         append args "-N"
46
47                 # start firewall
48                 local zone
49                 config_load firewall
50                 config_get zone core "${extiface:-wan}_zone"
51                 [ -n "$zone" ] && \
52                         miniupnpd_add_rules "$zone" "${extiface:-wan}" "$ifname"
53
54                 if [ "$logging" = "1" ]; then
55                         [ "$enabled" -gt 0 ] && eval start-stop-daemon -S -x miniupnpd -- $args -d | logger -t miniupnpd &
56                 else
57                         [ "$enabled" -gt 0 ] && eval start-stop-daemon -S -x miniupnpd -- $args 2>/dev/null
58                 fi
59         else
60                 logger -t "upnp daemon" "external interface not found, not starting"
61         fi
62 }
63
64 stop() {
65         start-stop-daemon -K -q -x miniupnpd -p /var/run/miniupnpd.pid
66         rm -f /var/run/miniupnpd.pid
67
68         type miniupnpd_remove_rules >/dev/null 2>/dev/null || \
69                 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
70
71         miniupnpd_remove_rules
72
73         iptables -t nat -F MINIUPNPD 2>/dev/null
74         iptables -t nat -X MINIUPNPD 2>/dev/null
75         iptables -t filter -F MINIUPNPD 2>/dev/null
76         iptables -t filter -X MINIUPNPD 2>/dev/null
77 }