dnsmasq: Add option --min-port
[openwrt.git] / package / network / services / dnsmasq / files / dnsmasq.init
1 #!/bin/sh /etc/rc.common
2 # Copyright (C) 2007-2012 OpenWrt.org
3
4 START=60
5
6 USE_PROCD=1
7 PROG=/usr/sbin/dnsmasq
8
9 DNS_SERVERS=""
10 DOMAIN=""
11
12 ADD_LOCAL_DOMAIN=1
13 ADD_LOCAL_HOSTNAME=1
14
15 CONFIGFILE="/var/etc/dnsmasq.conf"
16 HOSTFILE="/tmp/hosts/dhcp"
17 TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf"
18 TIMESTAMPFILE="/etc/dnsmasq.time"
19
20 xappend() {
21         local value="$1"
22
23         echo "${value#--}" >> $CONFIGFILE
24 }
25
26 dhcp_calc() {
27         local ip="$1"
28         local res=0
29
30         while [ -n "$ip" ]; do
31                 part="${ip%%.*}"
32                 res="$(($res * 256))"
33                 res="$(($res + $part))"
34                 [ "${ip%.*}" != "$ip" ] && ip="${ip#*.}" || ip=
35         done
36         echo "$res"
37 }
38
39 dhcp_check() {
40         local ifname="$1"
41         local stamp="/var/run/dnsmasq.$ifname.dhcp"
42         local rv=0
43
44         [ -s "$stamp" ] && return $(cat "$stamp")
45
46         udhcpc -n -q -s /bin/true -t 1 -i "$ifname" >&- && rv=1 || rv=0
47
48         [ $rv -eq 1 ] && \
49                 logger -t dnsmasq \
50                         "found already running DHCP-server on interface '$ifname'" \
51                         "refusing to start, use 'option force 1' to override"
52
53         echo $rv > "$stamp"
54         return $rv
55 }
56
57 log_once() {
58         pidof dnsmasq >/dev/null || \
59                 logger -t dnsmasq "$@"
60 }
61
62 append_bool() {
63         local section="$1"
64         local option="$2"
65         local value="$3"
66         local _loctmp
67         config_get_bool _loctmp "$section" "$option" 0
68         [ $_loctmp -gt 0 ] && xappend "$value"
69 }
70
71 append_parm() {
72         local section="$1"
73         local option="$2"
74         local switch="$3"
75         local _loctmp
76         config_get _loctmp "$section" "$option"
77         [ -z "$_loctmp" ] && return 0
78         xappend "$switch=$_loctmp"
79 }
80
81 append_server() {
82         xappend "--server=$1"
83 }
84
85 append_address() {
86         xappend "--address=$1"
87 }
88
89 append_ipset() {
90         xappend "--ipset=$1"
91 }
92
93 append_interface() {
94         local ifname=$(uci_get_state network "$1" ifname "$1")
95         xappend "--interface=$ifname"
96 }
97
98 append_notinterface() {
99         local ifname=$(uci_get_state network "$1" ifname "$1")
100         xappend "--except-interface=$ifname"
101 }
102
103 append_addnhosts() {
104         xappend "--addn-hosts=$1"
105 }
106
107 append_bogusnxdomain() {
108         xappend "--bogus-nxdomain=$1"
109 }
110
111 append_pxe_service() {
112         xappend "--pxe-service=$1"
113 }
114
115 dnsmasq() {
116         local cfg="$1"
117         append_bool "$cfg" authoritative "--dhcp-authoritative"
118         append_bool "$cfg" nodaemon "--no-daemon"
119         append_bool "$cfg" domainneeded "--domain-needed"
120         append_bool "$cfg" filterwin2k "--filterwin2k"
121         append_bool "$cfg" nohosts "--no-hosts"
122         append_bool "$cfg" nonegcache "--no-negcache"
123         append_bool "$cfg" strictorder "--strict-order"
124         append_bool "$cfg" logqueries "--log-queries=extra"
125         append_bool "$cfg" noresolv "--no-resolv"
126         append_bool "$cfg" localise_queries "--localise-queries"
127         append_bool "$cfg" readethers "--read-ethers"
128         append_bool "$cfg" dbus "--enable-dbus"
129         append_bool "$cfg" boguspriv "--bogus-priv"
130         append_bool "$cfg" expandhosts "--expand-hosts"
131         append_bool "$cfg" enable_tftp "--enable-tftp"
132         append_bool "$cfg" tftp_no_fail "--tftp-no-fail"
133         append_bool "$cfg" nonwildcard "--bind-dynamic"
134         append_bool "$cfg" fqdn "--dhcp-fqdn"
135         append_bool "$cfg" proxydnssec "--proxy-dnssec"
136         append_bool "$cfg" localservice "--local-service"
137         append_bool "$cfg" quietdhcp "--quiet-dhcp"
138         append_bool "$cfg" sequential_ip "--dhcp-sequential-ip"
139         append_bool "$cfg" allservers "--all-servers"
140         append_bool "$cfg" noping "--no-ping"
141
142         append_parm "$cfg" dhcpscript "--dhcp-script"
143         append_parm "$cfg" cachesize "--cache-size"
144         append_parm "$cfg" dnsforwardmax "--dns-forward-max"
145         append_parm "$cfg" port "--port"
146         append_parm "$cfg" ednspacket_max "--edns-packet-max"
147         append_parm "$cfg" dhcpleasemax "--dhcp-lease-max"
148         append_parm "$cfg" "queryport" "--query-port"
149         append_parm "$cfg" "minport" "--min-port"
150         append_parm "$cfg" "domain" "--domain"
151         append_parm "$cfg" "local" "--server"
152         config_list_foreach "$cfg" "server" append_server
153         config_list_foreach "$cfg" "address" append_address
154         config_list_foreach "$cfg" "ipset" append_ipset
155         config_list_foreach "$cfg" "interface" append_interface
156         config_list_foreach "$cfg" "notinterface" append_notinterface
157         config_list_foreach "$cfg" "addnhosts" append_addnhosts
158         config_list_foreach "$cfg" "bogusnxdomain" append_bogusnxdomain
159         append_parm "$cfg" "leasefile" "--dhcp-leasefile"
160         append_parm "$cfg" "resolvfile" "--resolv-file"
161         append_parm "$cfg" "serversfile" "--servers-file"
162         append_parm "$cfg" "tftp_root" "--tftp-root"
163         append_parm "$cfg" "dhcp_boot" "--dhcp-boot"
164         append_parm "$cfg" "local_ttl" "--local-ttl"
165         append_parm "$cfg" "pxe_prompt" "--pxe-prompt"
166         config_list_foreach "$cfg" "pxe_service" append_pxe_service
167         config_get DOMAIN "$cfg" domain
168
169         config_get_bool ADD_LOCAL_DOMAIN "$cfg" add_local_domain 1
170         config_get_bool ADD_LOCAL_HOSTNAME "$cfg" add_local_hostname 1
171
172         config_get_bool readethers "$cfg" readethers
173         [ "$readethers" = "1" -a \! -e "/etc/ethers" ] && touch /etc/ethers
174
175         config_get leasefile $cfg leasefile
176         [ -n "$leasefile" -a \! -e "$leasefile" ] && touch "$leasefile"
177         config_get_bool cachelocal "$cfg" cachelocal 1
178
179         config_get hostsfile "$cfg" dhcphostsfile
180         [ -e "$hostsfile" ] && xappend "--dhcp-hostsfile=$hostsfile"
181
182         local rebind
183         config_get_bool rebind "$cfg" rebind_protection 1
184         [ $rebind -gt 0 ] && {
185                 log_once \
186                         "DNS rebinding protection is active," \
187                         "will discard upstream RFC1918 responses!"
188                 xappend "--stop-dns-rebind"
189
190                 local rebind_localhost
191                 config_get_bool rebind_localhost "$cfg" rebind_localhost 0
192                 [ $rebind_localhost -gt 0 ] && {
193                         log_once "Allowing 127.0.0.0/8 responses"
194                         xappend "--rebind-localhost-ok"
195                 }
196
197                 append_rebind_domain() {
198                         log_once "Allowing RFC1918 responses for domain $1"
199                         xappend "--rebind-domain-ok=$1"
200                 }
201
202                 config_list_foreach "$cfg" rebind_domain append_rebind_domain
203         }
204
205         config_get_bool dnssec "$cfg" dnssec 0
206         [ "$dnssec" -gt 0 ] && {
207                 xappend "--conf-file=$TRUSTANCHORSFILE"
208                 xappend "--dnssec"
209                 xappend "--dnssec-timestamp=$TIMESTAMPFILE"
210                 append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned"
211         }
212
213         dhcp_option_add "$cfg" "" 0
214
215         xappend "--dhcp-broadcast=tag:needs-broadcast"
216
217         mkdir -p /tmp/hosts /tmp/dnsmasq.d
218         xappend "--addn-hosts=/tmp/hosts"
219         xappend "--conf-dir=/tmp/dnsmasq.d"
220
221         echo >> $CONFIGFILE
222 }
223
224 dhcp_subscrid_add() {
225         local cfg="$1"
226
227         config_get networkid "$cfg" networkid
228         [ -n "$networkid" ] || return 0
229
230         config_get subscriberid "$cfg" subscriberid
231         [ -n "$subscriberid" ] || return 0
232
233         xappend "--dhcp-subscrid=$networkid,$subscriberid"
234
235         config_get_bool force "$cfg" force 0
236
237         dhcp_option_add "$cfg" "$networkid" "$force"
238 }
239
240 dhcp_remoteid_add() {
241         local cfg="$1"
242
243         config_get networkid "$cfg" networkid
244         [ -n "$networkid" ] || return 0
245
246         config_get remoteid "$cfg" remoteid
247         [ -n "$remoteid" ] || return 0
248
249         xappend "--dhcp-remoteid=$networkid,$remoteid"
250
251         config_get_bool force "$cfg" force 0
252
253         dhcp_option_add "$cfg" "$networkid" "$force"
254 }
255
256 dhcp_circuitid_add() {
257         local cfg="$1"
258
259         config_get networkid "$cfg" networkid
260         [ -n "$networkid" ] || return 0
261
262         config_get circuitid "$cfg" circuitid
263         [ -n "$circuitid" ] || return 0
264
265         xappend "--dhcp-circuitid=$networkid,$circuitid"
266
267         config_get_bool force "$cfg" force 0
268
269         dhcp_option_add "$cfg" "$networkid" "$force"
270 }
271
272 dhcp_userclass_add() {
273         local cfg="$1"
274
275         config_get networkid "$cfg" networkid
276         [ -n "$networkid" ] || return 0
277
278         config_get userclass "$cfg" userclass
279         [ -n "$userclass" ] || return 0
280
281         xappend "--dhcp-userclass=$networkid,$userclass"
282
283         config_get_bool force "$cfg" force 0
284
285         dhcp_option_add "$cfg" "$networkid" "$force"
286 }
287
288 dhcp_vendorclass_add() {
289         local cfg="$1"
290
291         config_get networkid "$cfg" networkid
292         [ -n "$networkid" ] || return 0
293
294         config_get vendorclass "$cfg" vendorclass
295         [ -n "$vendorclass" ] || return 0
296
297         xappend "--dhcp-vendorclass=$networkid,$vendorclass"
298
299         config_get_bool force "$cfg" force 0
300
301         dhcp_option_add "$cfg" "$networkid" "$force"
302 }
303
304 dhcp_host_add() {
305         local cfg="$1"
306
307         config_get_bool force "$cfg" force 0
308
309         config_get networkid "$cfg" networkid
310         [ -n "$networkid" ] && dhcp_option_add "$cfg" "$networkid" "$force"
311
312         config_get name "$cfg" name
313         config_get ip "$cfg" ip
314         [ -n "$ip" -o -n "$name" ] || return 0
315
316         config_get_bool dns "$cfg" dns 0
317         [ "$dns" = "1" -a -n "$ip" -a -n "$name" ] && {
318                 echo "$ip $name${DOMAIN:+.$DOMAIN}" >> $HOSTFILE
319         }
320
321         config_get mac "$cfg" mac
322         if [ -n "$mac" ]; then
323                 # --dhcp-host=00:20:e0:3b:13:af,192.168.0.199,lap
324                 macs=""
325                 for m in $mac; do append macs "$m" ","; done
326         else
327                 # --dhcp-host=lap,192.168.0.199
328                 [ -n "$name" ] || return 0
329                 macs="$name"
330                 name=""
331         fi
332
333         config_get tag "$cfg" tag
334
335         config_get_bool broadcast "$cfg" broadcast 0
336         [ "$broadcast" = "0" ] && broadcast=
337
338         xappend "--dhcp-host=$macs${networkid:+,net:$networkid}${broadcast:+,set:needs-broadcast}${tag:+,set:$tag}${ip:+,$ip}${name:+,$name}"
339 }
340
341 dhcp_tag_add() {
342         local cfg="$1"
343
344         tag="$cfg"
345
346         [ -n "$tag" ] || return 0
347
348         config_get_bool force "$cfg" force 0
349         [ "$force" = "0" ] && force=
350
351         config_get option "$cfg" dhcp_option
352         for o in $option; do
353                 xappend "--dhcp-option${force:+-force}=tag:$tag,$o"
354         done
355 }
356
357 dhcp_mac_add() {
358         local cfg="$1"
359
360         config_get networkid "$cfg" networkid
361         [ -n "$networkid" ] || return 0
362
363         config_get mac "$cfg" mac
364         [ -n "$mac" ] || return 0
365
366         xappend "--dhcp-mac=$networkid,$mac"
367
368         dhcp_option_add "$cfg" "$networkid"
369 }
370
371 dhcp_boot_add() {
372         local cfg="$1"
373
374         config_get networkid "$cfg" networkid
375
376         config_get filename "$cfg" filename
377         [ -n "$filename" ] || return 0
378
379         config_get servername "$cfg" servername
380         config_get serveraddress "$cfg" serveraddress
381
382         [ -n "$serveraddress" -a ! -n "$servername" ] && return 0
383
384         xappend "--dhcp-boot=${networkid:+net:$networkid,}${filename}${servername:+,$servername}${serveraddress:+,$serveraddress}"
385
386         config_get_bool force "$cfg" force 0
387
388         dhcp_option_add "$cfg" "$networkid" "$force"
389 }
390
391
392 dhcp_add() {
393         local cfg="$1"
394         config_get net "$cfg" interface
395         [ -n "$net" ] || return 0
396
397         config_get dhcpv4 "$cfg" dhcpv4
398         [ "$dhcpv4" != "disabled" ] || return 0
399
400         config_get networkid "$cfg" networkid
401         [ -n "$networkid" ] || networkid="$net"
402
403         network_get_subnet subnet "$net" || return 0
404         network_get_device ifname "$net" || return 0
405         network_get_protocol proto "$net" || return 0
406
407         [ "$cachelocal" = "0" ] && network_get_dnsserver dnsserver "$net" && {
408                 DNS_SERVERS="$DNS_SERVERS $dnsserver"
409         }
410
411         append_bool "$cfg" ignore "--no-dhcp-interface=$ifname" && return 0
412
413         # Do not support non-static interfaces for now
414         [ static = "$proto" ] || return 0
415
416         # Override interface netmask with dhcp config if applicable
417         config_get netmask "$cfg" netmask "${subnet##*/}"
418
419         #check for an already active dhcp server on the interface, unless 'force' is set
420         config_get_bool force "$cfg" force 0
421         [ $force -gt 0 ] || dhcp_check "$ifname" || return 0
422
423         config_get start "$cfg" start
424         config_get limit "$cfg" limit
425         config_get leasetime "$cfg" leasetime
426         config_get options "$cfg" options
427         config_get_bool dynamicdhcp "$cfg" dynamicdhcp 1
428
429         leasetime="${leasetime:-12h}"
430         start="$(dhcp_calc "${start:-100}")"
431         limit="${limit:-150}"
432         [ "$limit" -gt 0 ] && limit=$((limit-1))
433         eval "$(ipcalc.sh "${subnet%%/*}" $netmask $start $limit)"
434         if [ "$dynamicdhcp" = "0" ]; then END="static"; fi
435         xappend "--dhcp-range=$networkid,$START,$END,$NETMASK,$leasetime${options:+ $options}"
436
437         dhcp_option_add "$cfg" "$networkid"
438 }
439
440 dhcp_option_add() {
441         local cfg="$1"
442         local networkid="$2"
443         local force="$3"
444
445         [ "$force" = "0" ] && force=
446
447         config_get dhcp_option "$cfg" dhcp_option
448         for o in $dhcp_option; do
449                 xappend "--dhcp-option${force:+-force}=${networkid:+$networkid,}$o"
450         done
451
452 }
453
454 dhcp_domain_add() {
455         local cfg="$1"
456         local ip name names record
457
458         config_get names "$cfg" name "$2"
459         [ -n "$names" ] || return 0
460
461         config_get ip "$cfg" ip "$3"
462         [ -n "$ip" ] || return 0
463
464         for name in $names; do
465                 record="${record:+$record }$name"
466         done
467
468         echo "$ip $record" >> $HOSTFILE
469 }
470
471 dhcp_srv_add() {
472         local cfg="$1"
473
474         config_get srv "$cfg" srv
475         [ -n "$srv" ] || return 0
476
477         config_get target "$cfg" target
478         [ -n "$target" ] || return 0
479
480         config_get port "$cfg" port
481         [ -n "$port" ] || return 0
482
483         config_get class "$cfg" class
484         config_get weight "$cfg" weight
485
486         local service="$srv,$target,$port${class:+,$class${weight:+,$weight}}"
487
488         xappend "--srv-host=$service"
489 }
490
491 dhcp_mx_add() {
492         local cfg="$1"
493         local domain relay pref
494
495         config_get domain "$cfg" domain
496         [ -n "$domain" ] || return 0
497
498         config_get relay "$cfg" relay
499         [ -n "$relay" ] || return 0
500
501         config_get pref "$cfg" pref 0
502
503         local service="$domain,$relay,$pref"
504
505         xappend "--mx-host=$service"
506 }
507
508 dhcp_cname_add() {
509         local cfg="$1"
510         local cname target
511
512         config_get cname "$cfg" cname
513         [ -n "$cname" ] || return 0
514
515         config_get target "$cfg" target
516         [ -n "$target" ] || return 0
517
518         xappend "--cname=${cname},${target}"
519 }
520
521 dhcp_hostrecord_add() {
522         local cfg="$1"
523         local names addresses record val
524
525         config_get names "$cfg" name "$2"
526         if [ -z "$names" ]; then
527                 return 0
528         fi
529
530         config_get addresses "$cfg" ip "$3"
531         if [ -z "$addresses" ]; then
532                 return 0
533         fi
534
535         for val in $names $addresses; do
536                 record="${record:+$record,}$val"
537         done
538
539         xappend "--host-record=$record"
540 }
541
542 service_triggers()
543 {
544         procd_add_reload_trigger "dhcp"
545 }
546
547 boot() {
548         # Will be launched through hotplug
549         return 0
550 }
551
552 start_service() {
553         include /lib/functions
554
555         config_load dhcp
556
557         procd_open_instance
558         procd_set_param command $PROG -C $CONFIGFILE -k -x /var/run/dnsmasq/dnsmasq.pid
559         procd_set_param file $CONFIGFILE
560         procd_set_param respawn
561
562         procd_add_jail dnsmasq ubus log
563         procd_add_jail_mount $CONFIGFILE $TRUSTANCHORSFILE $HOSTFILE /etc/passwd /etc/group /etc/TZ /dev/null /dev/urandom /etc/dnsmasq.conf /tmp/dnsmasq.d /tmp/resolv.conf.auto /etc/hosts /etc/ethers
564         procd_add_jail_mount_rw /var/run/dnsmasq/ /tmp/dhcp.leases $TIMESTAMPFILE
565         
566         procd_close_instance
567
568         # before we can call xappend
569         mkdir -p /var/run/dnsmasq/
570         mkdir -p $(dirname $CONFIGFILE)
571         mkdir -p /var/lib/misc
572         touch /tmp/dhcp.leases
573
574         if [ ! -f "$TIMESTAMPFILE" ]; then
575                 touch "$TIMESTAMPFILE"
576                 chown nobody.nogroup "$TIMESTAMPFILE"
577         fi
578
579         echo "# auto-generated config file from /etc/config/dhcp" > $CONFIGFILE
580         echo "# auto-generated config file from /etc/config/dhcp" > $HOSTFILE
581
582         # if we did this last, we could override auto-generated config
583         [ -f /etc/dnsmasq.conf ] && {
584                 xappend "--conf-file=/etc/dnsmasq.conf"
585         }
586
587         args=""
588         config_foreach dnsmasq dnsmasq
589         config_foreach dhcp_host_add host
590         echo >> $CONFIGFILE
591         config_foreach dhcp_boot_add boot
592         config_foreach dhcp_mac_add mac
593         config_foreach dhcp_tag_add tag
594         config_foreach dhcp_vendorclass_add vendorclass
595         config_foreach dhcp_userclass_add userclass
596         config_foreach dhcp_circuitid_add circuitid
597         config_foreach dhcp_remoteid_add remoteid
598         config_foreach dhcp_subscrid_add subscrid
599         config_foreach dhcp_domain_add domain
600         config_foreach dhcp_hostrecord_add hostrecord
601
602         # add own hostname
603         [ $ADD_LOCAL_HOSTNAME -eq 1 ] && {
604                 local lanaddr lanaddr6
605                 local ulaprefix="$(uci_get network @globals[0] ula_prefix)"
606                 local hostname="$(uci_get system @system[0] hostname OpenWrt)"
607
608                 network_get_ipaddr lanaddr "lan" && {
609                         dhcp_domain_add "" "$hostname" "$lanaddr"
610                 }
611
612                 network_get_ipaddrs6 lanaddr6 "lan" && {
613                         for lanaddr6 in $lanaddr6; do
614                                 case "$lanaddr6" in
615                                         "${ulaprefix%%:/*}"*)
616                                                 dhcp_domain_add "" "$hostname" "${ulaprefix%%/*}1"
617                                         ;;
618                                 esac
619                         done
620                 }
621         }
622
623         echo >> $CONFIGFILE
624         config_foreach dhcp_srv_add srvhost
625         config_foreach dhcp_mx_add mxhost
626         echo >> $CONFIGFILE
627
628         config_get odhcpd_is_active odhcpd maindhcp
629         if [ "$odhcpd_is_active" != "1" ]; then
630                 config_foreach dhcp_add dhcp
631         fi
632
633         echo >> $CONFIGFILE
634         config_foreach dhcp_cname_add cname
635         echo >> $CONFIGFILE
636
637         rm -f /tmp/resolv.conf
638         [ $ADD_LOCAL_DOMAIN -eq 1 ] && [ -n "$DOMAIN" ] && {
639                 echo "search $DOMAIN" >> /tmp/resolv.conf
640         }
641         DNS_SERVERS="$DNS_SERVERS 127.0.0.1"
642         for DNS_SERVER in $DNS_SERVERS ; do
643                 echo "nameserver $DNS_SERVER" >> /tmp/resolv.conf
644         done
645 }
646
647 reload_service() {
648         rc_procd start_service "$@"
649         return 0
650 }
651
652 stop_service() {
653         [ -f /tmp/resolv.conf ] && {
654                 rm -f /tmp/resolv.conf
655                 ln -s /tmp/resolv.conf.auto /tmp/resolv.conf
656         }
657         rm -f /var/run/dnsmasq.*.dhcp
658 }