net/miniupnpd/files/miniupnpd.init

   1 #!/bin/sh /etc/rc.common
   2 START=95
   3
   4 upnpd_get_port_range() {
   5     local _var="$1"; shift
   6     local _val
   7
   8     config_get _val "$@"
   9
  10     case "$_val" in
  11         [0-9]*[:-][0-9]*)
  12             export -n -- "${_var}_start=${_val%%[:-]*}"
  13             export -n -- "${_var}_end=${_val##*[:-]}"
  14         ;;
  15         [0-9]*)
  16             export -n -- "${_var}_start=$_val"
  17             export -n -- "${_var}_end="
  18         ;;
  19     esac
  20 }
  21
  22 conf_rule_add() {
  23     local cfg="$1"
  24     local tmpconf="$2"
  25     local action external_port_start external_port_end int_addr
  26     local internal_port_start internal_port_end
  27     config_get action "$cfg" action "deny"               # allow or deny
  28     upnpd_get_port_range "ext" "$cfg" ext_ports "0-65535" # external ports: x, x-y, x:y
  29     config_get int_addr "$cfg" int_addr "0.0.0.0/0"       # ip or network and subnet mask (internal)
  30     upnpd_get_port_range "int" "$cfg" int_ports "0-65535" # internal ports: x, x-y, x:y or range
  31     echo "${action} ${ext_start}${ext_end:+-}${ext_end} ${int_addr} ${int_start}${int_end:+-}${int_end}" >>$tmpconf
  32 }
  33
  34 upnpd_write_bool() {
  35     local opt="$1"
  36     local def="${2:-0}"
  37     local alt="$3"
  38
  39     local val
  40     config_get_bool val config "$opt" "$def"
  41     if [ "$val" -eq 0 ]; then
  42         echo "${alt:-$opt}=no" >> $tmpconf
  43     else
  44         echo "${alt:-$opt}=yes" >> $tmpconf
  45     fi
  46 }
  47
  48 start() {
  49         type miniupnpd_add_rules >/dev/null 2>/dev/null || \
  50                 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
  51
  52         config_load "upnpd"
  53         local extiface intiface upload download logging secure enabled natpmp
  54         local extip port usesysuptime conffile serial_number model_number
  55         local uuid notify_interval presentation_url enable_upnp
  56         local upnp_lease_file clean_ruleset_threshold clean_ruleset_interval
  57
  58         config_get extiface config external_iface
  59         config_get intiface config internal_iface
  60         config_get extip config external_ip
  61         config_get port config port 5000
  62         config_get upload   config upload
  63         config_get download config download
  64         config_get_bool logging config log_output 0
  65         config_get conffile config config_file
  66         config_get serial_number config serial_number
  67         config_get model_number config model_number
  68         config_get uuid config uuid
  69         config_get notify_interval config notify_interval
  70         config_get presentation_url config presentation_url
  71         config_get upnp_lease_file config upnp_lease_file
  72         config_get clean_ruleset_threshold config clean_ruleset_threshold
  73         config_get clean_ruleset_interval config clean_ruleset_interval
  74
  75         local args
  76
  77         include /lib/network
  78         scan_interfaces
  79
  80         local ifname
  81         config_get ifname ${extiface:-wan} ifname
  82
  83         if [ -n "$conffile" ]; then
  84             args="-f $conffile"
  85         else
  86             local tmpconf="/var/etc/miniupnpd.conf"
  87             args="-f $tmpconf"
  88             mkdir -p /var/etc
  89
  90             echo "ext_ifname=$ifname" >$tmpconf
  91
  92             local iface
  93
  94             [ -n "$extip" ] && \
  95                 echo "ext_ip=$extip" >>$tmpconf
  96
  97             for iface in ${intiface:-lan}; do
  98                 local ipaddr
  99                 config_get ipaddr "$iface" ipaddr
 100                 [ -n "$ipaddr" ] && \
 101                     echo "listening_ip=$ipaddr" >>$tmpconf
 102             done
 103
 104             [ "$port" != "auto" ] && \
 105                 echo "port=$port" >>$tmpconf
 106
 107             config_load "upnpd"
 108             upnpd_write_bool enable_natpmp 1
 109             upnpd_write_bool enable_upnp 1
 110             upnpd_write_bool enable_secure 1 secure_mode
 111             upnpd_write_bool system_uptime 1
 112
 113             [ -n "$upnp_lease_file" ] && \
 114                 echo "lease_file=$upnp_lease_file" >>$tmpconf
 115
 116             [ -n "$upload" -a -n "$download" ] && {
 117                 echo "bitrate_down=$(($download * 1024 * 8))" >>$tmpconf
 118                 echo "bitrate_up=$(($upload * 1024 * 8))" >>$tmpconf
 119             }
 120
 121             [ -n "${presentation_url}" ] && \
 122                 echo "presentation_url=${presentation_url}" >>$tmpconf
 123
 124             [ -n "${notify_interval}" ] && \
 125                 echo "notify_interval=${notify_interval}" >>$tmpconf
 126
 127             [ -n "${clean_ruleset_threshold}" ] && \
 128                 echo "clean_ruleset_threshold=${clean_ruleset_threshold}" >>$tmpconf
 129
 130             [ -n "${clean_ruleset_interval}" ] && \
 131                 echo "clean_ruleset_interval=${clean_ruleset_interval}" >>$tmpconf
 132
 133             [ -z "$uuid" ] && {
 134                 uuid="$(cat /proc/sys/kernel/random/uuid)"
 135                 uci set upnpd.config.uuid=$uuid
 136                 uci commit upnpd
 137             }
 138
 139             [ "$uuid" = "nocli" ] || \
 140                 echo "uuid=$uuid" >>$tmpconf
 141
 142             [ -n "${serial_number}" ] && \
 143                 echo "serial=${serial_number}" >>$tmpconf
 144
 145             [ -n "${model_number}" ] && \
 146                 echo "model_number=${model_number}" >>$tmpconf
 147
 148             config_foreach conf_rule_add perm_rule "$tmpconf"
 149         fi
 150
 151
 152         if [ -n "$ifname" ]; then
 153             # start firewall
 154             local zone
 155             config_load firewall
 156             config_get zone core "${extiface:-wan}_zone"
 157             [ -n "$zone" ] && \
 158                 miniupnpd_add_rules "$zone" "${extiface:-wan}" "$ifname"
 159
 160             if [ "$logging" = "1" ]; then
 161                 eval start-stop-daemon -S -x miniupnpd -- $args -d | logger -t miniupnpd &
 162             else
 163                 eval start-stop-daemon -S -x miniupnpd -- $args 2>/dev/null
 164             fi
 165         else
 166                 logger -t "upnp daemon" "external interface not found, not starting"
 167         fi
 168 }
 169
 170 stop() {
 171         start-stop-daemon -K -q -x miniupnpd -p /var/run/miniupnpd.pid
 172         rm -f /var/run/miniupnpd.pid
 173
 174         type miniupnpd_remove_rules >/dev/null 2>/dev/null || \
 175                 ACTION=- . /etc/hotplug.d/firewall/50-miniupnpd
 176
 177         miniupnpd_remove_rules
 178
 179         iptables -t nat -F MINIUPNPD 2>/dev/null
 180         iptables -t nat -X MINIUPNPD 2>/dev/null
 181         iptables -t filter -F MINIUPNPD 2>/dev/null
 182         iptables -t filter -X MINIUPNPD 2>/dev/null
 183 }