summaryrefslogtreecommitdiffstats
path: root/etc/rc.d/pflog
blob: 7647ebf676e7dae8cbfc675268c559025280df5d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
#!/bin/sh
#
# $FreeBSD$
#

# PROVIDE: pflog
# REQUIRE: FILESYSTEMS netif FILESYSTEMS
# KEYWORD: nojail

. /etc/rc.subr

name="pflog"
rcvar="pflog_enable"
command="/sbin/pflogd"
pidfile="/var/run/pflogd.pid"
start_precmd="pflog_prestart"
stop_postcmd="pflog_poststop"
extra_commands="reload resync"

# for backward compatibility
resync_cmd="pflog_resync"

pflog_prestart()
{
	load_kld pflog || return 1

	# set pflog_dev interface to up state
	if ! ifconfig $pflog_dev up; then
		warn "could not bring up $pflog_dev."
		return 1
	fi

	# prepare the command line for pflogd
	rc_flags="-f $pflog_logfile -i $pflog_dev $rc_flags"

	# report we're ready to run pflogd
	return 0
}

pflog_poststart() {
	# Allow child pflogd to settle
	sleep 0.10
	# More elegant(?) method for getting a unique pid
	if [ -f /var/run/pflogd.pid ]; then
		mv /var/run/pflogd.pid $pidfile
	else
		warn "/var/run/pflogd.pid does not exist. Too fast."
	fi
}

pflog_poststop()
{
	if ! ifconfig $pflog_dev down; then
		warn "could not bring down $pflog_dev."
		return 1
	fi

	if [ "$pflog_instances" ] && [ -n "$pflog_instances" ]; then
		rm $pidfile
	fi

	return 0
}

# for backward compatibility
pflog_resync()
{
	run_rc_command reload
}

load_rc_config $name

# Check if spawning multiple pflogd
echo "Starting pflogd: $pflog_instances"
if [ "$pflog_instances" ] && [ -n "$pflog_instances" ]; then
	start_postcmd="pflog_poststart"
	# Interate through requested instances.
	for i in $pflog_instances; do
		# Set required variables
		eval pflog_dev=\$pflog_${i}_dev
		eval pflog_logfile=\$pflog_${i}_logfile
		eval pflog_flags=\$pflog_${i}_flags
		# Check that required vars have non-zero length, warn if not.
		if [ -z $pflog_dev ]; then
			warn "pflog_dev not set"
			continue
		fi
		if [ -z $pflog_logfile ]; then
			warn "pflog_logfile not set"
			continue
		fi
		# pflogd sets a pidfile, but the name is hardcoded. Concoct a
		# unique pidfile name.
		pidfile="/var/run/pflogd.$i.pid"
		run_rc_command "$1"
	done
else
	# Typical case, spawn single instance only.
	pflog_dev=${pflog_dev:-"pflog0"}
	run_rc_command "$1"
fi
OpenPOWER on IntegriCloud