#!/bin/sh
########################################################################
# Begin $rc_base/init.d/network
#
# Description : Network Control Script
#
# Authors     : Michael Tremer - m.s.tremer@googlemail.com
#
# Version     : 01.00
#
# Notes       : Written for IPFire by its team
#
########################################################################

. /etc/sysconfig/rc
. ${rc_functions}
eval $(/usr/local/bin/readhash /var/ipfire/ethernet/settings)

DO="${1}"
shift

if [ -n "${1}" ]; then
	ALL=0
	for i in green red blue orange; do	
		eval "${i}=0"
	done
else
	ALL=1
	for i in green red blue orange; do
		eval "${i}=1"
	done
fi

while [ ! $# = 0 ]; do
	for i in green red blue orange; do
		if [ "${i}" == "${1}" ]; then
			eval "${i}=1"
			shift
		fi
	done
done

case "${DO}" in
	start)
		if [ "${ALL}" == "1" ]; then
			boot_mesg "Loading iptables helper modules"
			modprobe iptable_nat || failed=1
			modprobe ip_conntrack || failed=1
			modprobe ip_conntrack_ftp || failed=1
			modprobe ip_nat_ftp || failed=1
			modprobe ip_conntrack_h323 || failed=1
			modprobe ip_nat_h323 || failed=1
			modprobe ip_conntrack_irc || failed=1
			modprobe ip_nat_irc || failed=1
			modprobe ip_conntrack_mms || failed=1
			modprobe ip_nat_mms || failed=1
			modprobe ip_conntrack_pptp || failed=1
			modprobe ip_nat_pptp || failed=1
			modprobe ip_conntrack_sip || failed=1
			modprobe ip_nat_sip || failed=1
			(exit ${failed})
			evaluate_retval
			
			boot_mesg "Setting up IPFire firewall rules"
			/etc/rc.d/init.d/firewall start; evaluate_retval
	
			boot_mesg "Setting up IP Accounting"
			/etc/rc.d/helper/writeipac.pl || failed=1
			/usr/sbin/fetchipac -S || failed=1 
			(exit ${failed})
			evaluate_retval
	
			boot_mesg "Setting IPFire DMZ pinholes"
			/usr/local/bin/setdmzholes; evaluate_retval
	
			if [ "$CONFIG_TYPE" = "3" -o "$CONFIG_TYPE" = "4" ]; then
				boot_mesg "Setting up wireless firewall rules"
				/usr/local/bin/restartwireless; evaluate_retval
			fi
			
			# Start DNSMASQ with defaults
			killall -KILL dnsmasq 2> /dev/null
			sleep 1
			if [ "$DOMAIN_NAME_GREEN" == "" ]; then
				/usr/sbin/dnsmasq -l /var/state/dhcp/dhcpd.leases
			else 
				/usr/sbin/dnsmasq -l /var/state/dhcp/dhcpd.leases -s "$DOMAIN_NAME_GREEN"
			fi
		fi
		
		# Starting interfaces...
		# GREEN
		if [ "$green" == "1" ]; then
			name=green /etc/rc.d/init.d/net/ifup
		fi
		
		# BLUE
		if [ "$blue" == "1" ]; then
			if [ "$CONFIG_TYPE" = "3" -o "$CONFIG_TYPE" = "4" ]; then
				name=blue /etc/rc.d/init.d/net/ifup
			fi
		fi
		
		# ORANGE
		if [ "$orange" == "1" ]; then
			if [ "$CONFIG_TYPE" = "2" -o "$CONFIG_TYPE" = "4" ]; then
				name=orange /etc/rc.d/init.d/net/ifup
			fi
		fi
		
		# RED
		if [ "$red" == "1" ]; then
			if [ "$CONFIG_TYPE" = "1" -o "$CONFIG_TYPE" = "2" -o "$CONFIG_TYPE" = "3" -o "$CONFIG_TYPE" = "4" ]; then
				# Remove possible leftover files
				rm -f /var/ipfire/red/{active,device,dial-on-demand,dns1,dns2,local-ipaddress,remote-ipaddress,resolv.conf}
				if [ "$AUTOCONNECT" == "off" ]; then
					echo -n		# Do anything
				else
					name=red /etc/rc.d/init.d/net/ifup
				fi
			boot_mesg "Setting OpenVPN Rules if enabled"
			/etc/rc.d/init.d/firewall startovpn; evaluate_retval
			fi
		fi
		
			boot_mesg "Setting OpenVPN if enabled"
			/usr/local/bin/openvpnctrl -s; evaluate_retval
			
			boot_mesg "Starting Snort if enabled"
			/etc/rc.d/init.d/snort start; evaluate_retval						
		;;

	stop)
		# Stopping interfaces...
		# GREEN
		if [ "$green" == "1" ]; then
			name=green /etc/rc.d/init.d/net/ifdown
		fi
		
		# BLUE
		if [ "$blue" == "1" ]; then
			if [ "$CONFIG_TYPE" = "3" -o "$CONFIG_TYPE" = "4" ]; then
				name=blue /etc/rc.d/init.d/net/ifdown
			fi
		fi
		
		# ORANGE
		if [ "$orange" == "1" ]; then
			if [ "$CONFIG_TYPE" = "2" -o "$CONFIG_TYPE" = "4" ]; then
				name=orange /etc/rc.d/init.d/net/ifdown
			fi
		fi
		
		# RED
		if [ "$red" == "1" ]; then
			if [ "$CONFIG_TYPE" = "1" -o "$CONFIG_TYPE" = "2" -o "$CONFIG_TYPE" = "3" -o "$CONFIG_TYPE" = "4" ]; then
				name=red /etc/rc.d/init.d/net/ifdown
			  boot_mesg "Deleting OpenVPN Rules if enabled"
			  /etc/rc.d/init.d/firewall stopovpn; evaluate_retval	
			fi
		fi
		
			boot_mesg "Stopping OpenVPN if enabled"
			/usr/local/bin/openvpnctrl -k; evaluate_retval
			
			boot_mesg "Stopping Snort if enabled"
			/etc/rc.d/init.d/snort stop; evaluate_retval		
		;;

	restart)
		for i in green red blue orange; do
			if [ "${!i}" == "1" ]; then
				ARGS+=" ${i}"
			fi
		done
		${0} stop ${ARGS}
		sleep 1
		${0} start ${ARGS}
		;;

	*)
		echo "Usage: ${0} {start|stop|restart}"
		exit 1
		;;
esac

# End /etc/rc.d/init.d/network