src/functions/functions.routing

   1 #!/bin/bash
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2010  Michael Tremer & Christian Schmidt                      #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 routing_has_default() {
  23         ip route | grep -q "^default"
  24 }
  25
  26 routing_default_update() {
  27         local routes
  28
  29         local zones=$(zones_get_nonlocal)
  30         if [ -z "${zones}" ]; then
  31                 zones=$(zones_get_local)
  32         fi
  33
  34         local gateway
  35         local proto
  36         local weight
  37         local zone
  38         local cmd
  39
  40         for proto in ${IP_SUPPORTED_PROTOCOLS}; do
  41                 # Clear routes
  42                 routes=""
  43
  44                 cmd="ip $([ "${proto}" = "ipv6" ] && echo "-6") route"
  45
  46                 for zone in ${zones}; do
  47                         # Skip if zone is not up
  48                         db_exists "${zone}/${proto}" || continue
  49
  50                         if [ "$(db_get "${zone}/${proto}/active")" = "1" ]; then
  51                                 gateway="$(db_get "${zone}/${proto}/remote-ip-address")"
  52
  53                                 # Go on if the device is not there anymore.
  54                                 device_exists ${zone} || continue
  55
  56                                 # On other devices, we will use the gateway if we got one.
  57                                 if isset gateway; then
  58                                         routes="${routes} nexthop via ${gateway}"
  59
  60                                 # If we have got a Point-to-Point device, we will directly send all
  61                                 # packets into the pipe.
  62                                 elif device_is_ptp ${zone}; then
  63                                         routes="${routes} dev ${zone}"
  64
  65                                 # If none of the cases above apply, we cannot go on.
  66                                 else
  67                                         continue
  68                                 fi
  69
  70                                 # Apply weight.
  71                                 weight="$(db_get "${zone}/${proto}/weight")"
  72                                 if isinteger ${weight}; then
  73                                         routes="${routes} weight ${weight}"
  74                                 fi
  75                         else
  76                                 log DEBUG "Ignoring zone '${zone}' which is not active."
  77                         fi
  78                 done
  79
  80                 # Remove too much spaces.
  81                 routes=$(echo ${routes})
  82
  83                 # Remove all default routes.
  84                 if [ -z "${routes}" ]; then
  85                         cmd ${cmd} del default
  86                         log INFO "Removed default route for ${proto}."
  87                         return ${EXIT_OK}
  88                 fi
  89
  90                 log INFO "Setting default route for ${proto}: ${routes}"
  91
  92                 cmd ${cmd} replace default ${routes}
  93                 assert [ $? -eq 0 ]
  94
  95                 case "${proto}" in
  96                         ipv6)
  97                                 # Apply radvd configuration.
  98                                 radvd_update
  99                                 ;;
 100                 esac
 101
 102                 triggers_execute_all "online"
 103         done
 104 }
 105
 106 routing_db_from_ppp() {
 107         local zone=${1}
 108         local proto=${2}
 109
 110         assert isset zone
 111         assert isset proto
 112
 113         # Save ppp configuration
 114         db_set "${zone}/${proto}/type" "ppp"
 115
 116         if [ "${proto}" = "ipv6" ]; then
 117                 db_set "${zone}/${proto}/local-ip-address" "${PPP_LLLOCAL}"
 118                 db_set "${zone}/${proto}/remote-ip-address" "${PPP_LLREMOTE}"
 119         elif [ "${proto}" = "ipv4" ]; then
 120                 db_set "${zone}/${proto}/local-ip-address" "${PPP_IPLOCAL}"
 121                 db_set "${zone}/${proto}/remote-ip-address" "${PPP_IPREMOTE}"
 122         fi
 123
 124         # Save the transmitted DNS servers
 125         if isset PPP_DNS1 || isset PPP_DNS2; then
 126                 db_set "${zone}/${proto}/domain-name-servers" "${PPP_DNS1} ${PPP_DNS2}"
 127         else
 128                 db_set "${zone}/${proto}/domain-name-servers"
 129         fi
 130
 131         # Save the MAC address of the remote DSLAM
 132         if isset PPP_MACREMOTE; then
 133                 db_set "${zone}/remote-address" "${PPP_MACREMOTE,,}"
 134         fi
 135 }
 136
 137 routing_update() {
 138         local zone=${1}
 139         assert isset zone
 140
 141         # Nothing to do for local zones.
 142         if zone_is_local ${zone}; then
 143                 return ${EXIT_OK}
 144         fi
 145
 146         local proto=${2}
 147         local table=${zone}
 148         assert isset proto
 149
 150         local ip_cmd="ip"
 151         if [ "${proto}" = "ipv6" ]; then
 152                 ip_cmd="${ip_cmd} -6"
 153         fi
 154
 155         # Create routing table if not exists
 156         route_table_create ${table}
 157
 158         log DEBUG "Flushing routing table ${table}"
 159         cmd ${ip_cmd} route flush table ${table}
 160
 161         # Exit here if there is no routing information.
 162         if ! db_exists "${zone}/${proto}"; then
 163                 return ${EXIT_OK}
 164         fi
 165
 166         local local_ip_address="$(db_get "${zone}/${proto}/local-ip-address")"
 167         local remote_ip_address="$(db_get "${zone}/${proto}/remote-ip-address")"
 168
 169         case "${proto}" in
 170                 ipv4)
 171                         local net_address=$(ipv4_get_netaddress ${local_ip_address})
 172
 173                         log DEBUG "Adding route for subnet ${local_ip_address} to table ${table}"
 174                         cmd ${ip_cmd} route add table ${table} ${net_address} dev ${zone}
 175                         ;;
 176         esac
 177
 178         log DEBUG "Adding default route for table ${table}"
 179         local routing_cmd="${ip_cmd} route add table ${table} default"
 180         if isset remote_ip_address; then
 181                 routing_cmd="${routing_cmd} via ${remote_ip_address}"
 182         else
 183                 routing_cmd="${routing_cmd} dev ${zone}"
 184         fi
 185         cmd ${routing_cmd}
 186
 187         cmd ${ip_cmd} rule add from ${local_ip_address} lookup ${table}
 188 }