1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
#!/bin/sh
#
# ppp-linkup
#
# part of pfSense (https://www.pfsense.org)
# Copyright (c) 2004-2016 Electric Sheep Fencing, LLC
# All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#
# 1. Redistributions of source code must retain the above copyright notice,
# this list of conditions and the following disclaimer.
#
# 2. Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in
# the documentation and/or other materials provided with the
# distribution.
#
# 3. All advertising materials mentioning features or use of this software
# must display the following acknowledgment:
# "This product includes software developed by the pfSense Project
# for use in the pfSense® software distribution. (http://www.pfsense.org/).
#
# 4. The names "pfSense" and "pfSense Project" must not be used to
# endorse or promote products derived from this software without
# prior written permission. For written permission, please contact
# coreteam@pfsense.org.
#
# 5. Products derived from this software may not be called "pfSense"
# nor may "pfSense" appear in their names without prior written
# permission of the Electric Sheep Fencing, LLC.
#
# 6. Redistributions of any form whatsoever must retain the following
# acknowledgment:
#
# "This product includes software developed by the pfSense Project
# for use in the pfSense software distribution (http://www.pfsense.org/).
#
# THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY
# EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR
# ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
# OF THE POSSIBILITY OF SUCH DAMAGE.
export PATH=/bin:/usr/bin:/usr/local/bin:/sbin:/usr/sbin:/usr/local/sbin
DNSALLOWOVERRIDE=$(/usr/local/sbin/read_xml_tag.sh boolean system/dnsallowoverride)
IF="${1}"
PROTOCOL="${2}"
LOCAL_IP="${3}"
REMOTE_IP="${4}"
AUTH_NAME="${5}"
DNS1_RAW="${6}"
DNS2_RAW="${7}"
if [ "${PROTOCOL}" == "inet" ]; then
OLD_ROUTER=`cat /tmp/${IF}_router`
if [ -n "${OLD_ROUTER}" ]; then
echo "Removing states to old router ${OLD_ROUTER}" | logger -t ppp-linkup
pfctl -i ${IF} -k 0.0.0.0/0 -k ${OLD_ROUTER}/32
pfctl -i ${IF} -k ${OLD_ROUTER}/32 -k 0.0.0.0/0
fi
# let the configuration system know that the ipv4 has changed.
echo ${REMOTE_IP} > /tmp/${IF}_router
echo ${LOCAL_IP} > /tmp/${IF}_ip
touch /tmp/${IF}up
if [ "${DNSALLOWOVERRIDE}" = "true" ]; then
# write nameservers to file
echo -n "" > /var/etc/nameserver_${IF}
if echo "${DNS1_RAW}" | grep -q dns1; then
DNS1=`echo "${DNS1_RAW}" | awk '{print $2}'`
echo "${DNS1}" >> /var/etc/nameserver_${IF}
route change "${DNS1}" ${REMOTE_IP}
fi
if echo "${DNS2_RAW}" | grep -q dns2; then
DNS2=`echo "${DNS2_RAW}" | awk '{print $2}'`
echo "${DNS2}" >> /var/etc/nameserver_${IF}
route change "${DNS2}" ${REMOTE_IP}
fi
pfSctl -c 'service reload dns'
sleep 1
fi
pfSctl -c "interface newip ${IF}"
elif [ "${PROTOCOL}" == "inet6" ]; then
/usr/local/sbin/ppp-ipv6 ${IF} up
# let the configuration system know that the ipv6 has changed.
echo ${REMOTE_IP} |cut -d% -f1 > /tmp/${IF}_routerv6
echo ${LOCAL_IP} |cut -d% -f1 > /tmp/${IF}_ipv6
touch /tmp/${IF}upv6
if [ "${DNSALLOWOVERRIDE}" = "true" ]; then
# write nameservers to file
echo -n "" > /var/etc/nameserver_v6${IF}
if echo "${DNS1_RAW}" | grep -q dns1; then
DNS1=`echo "${DNS1_RAW}" | awk '{print $2}'`
echo "${DNS1}" >> /var/etc/nameserver_v6${IF}
route change -inet6 "${DNS1}" ${REMOTE_IP}
fi
if echo "${DNS2_RAW}" | grep -q dns2; then
DNS2=`echo "${DNS2_RAW}" | awk '{print $2}'`
echo "${DNS2}" >> /var/etc/nameserver_v6${IF}
route change -inet6 "${DNS2}" ${REMOTE_IP}
fi
pfSctl -c 'service reload dns'
sleep 1
fi
pfSctl -c "interface newipv6 ${IF}"
fi
exit 0
|
