miniupnpd/files/miniupnpd.init

   1 #!/bin/sh /etc/rc.common
   2 # Copyright (C) 2006-2011 OpenWrt.org
   3
   4 START=95
   5
   6 SERVICE_USE_PID=1
   7
   8 upnpd_get_port_range() {
   9         local _var="$1"; shift
  10         local _val
  11
  12         config_get _val "$@"
  13
  14         case "$_val" in
  15                 [0-9]*[:-][0-9]*)
  16                         export -n -- "${_var}_start=${_val%%[:-]*}"
  17                         export -n -- "${_var}_end=${_val##*[:-]}"
  18                 ;;
  19                 [0-9]*)
  20                         export -n -- "${_var}_start=$_val"
  21                         export -n -- "${_var}_end="
  22                 ;;
  23         esac
  24 }
  25
  26 conf_rule_add() {
  27         local cfg="$1"
  28         local tmpconf="$2"
  29         local action external_port_start external_port_end int_addr
  30         local internal_port_start internal_port_end
  31
  32         config_get action "$cfg" action "deny"               # allow or deny
  33         upnpd_get_port_range "ext" "$cfg" ext_ports "0-65535" # external ports: x, x-y, x:y
  34         config_get int_addr "$cfg" int_addr "0.0.0.0/0"       # ip or network and subnet mask (internal)
  35         upnpd_get_port_range "int" "$cfg" int_ports "0-65535" # internal ports: x, x-y, x:y or range
  36
  37         # Make a single IP IP/32 so that miniupnpd.conf can use it.
  38         case "$int_addr" in
  39                 */*) ;;
  40                 *) int_addr="$int_addr/32" ;;
  41         esac
  42
  43         echo "${action} ${ext_start}${ext_end:+-}${ext_end} ${int_addr} ${int_start}${int_end:+-}${int_end}" >>$tmpconf
  44 }
  45
  46 upnpd_write_bool() {
  47         local opt="$1"
  48         local def="${2:-0}"
  49         local alt="$3"
  50         local val
  51
  52         config_get_bool val config "$opt" "$def"
  53         if [ "$val" -eq 0 ]; then
  54                 echo "${alt:-$opt}=no" >> $tmpconf
  55         else
  56                 echo "${alt:-$opt}=yes" >> $tmpconf
  57         fi
  58 }
  59
  60 boot() {
  61         return
  62 }
  63
  64 start() {
  65         config_load "upnpd"
  66         local extiface intiface upload download logging secure enabled natpmp
  67         local extip port usesysuptime conffile serial_number model_number
  68         local uuid notify_interval presentation_url enable_upnp
  69         local upnp_lease_file clean_ruleset_threshold clean_ruleset_interval
  70         local ipv6_listening_ip
  71
  72         config_get extiface config external_iface
  73         config_get extzone config external_zone
  74         config_get intiface config internal_iface
  75         config_get extip config external_ip
  76         config_get port config port 5000
  77         config_get upload   config upload
  78         config_get download config download
  79         config_get_bool logging config log_output 0
  80         config_get conffile config config_file
  81         config_get serial_number config serial_number
  82         config_get model_number config model_number
  83         config_get uuid config uuid
  84         config_get notify_interval config notify_interval
  85         config_get presentation_url config presentation_url
  86         config_get upnp_lease_file config upnp_lease_file
  87         config_get clean_ruleset_threshold config clean_ruleset_threshold
  88         config_get clean_ruleset_interval config clean_ruleset_interval
  89         config_get ipv6_listening_ip config ipv6_listening_ip
  90
  91         local args
  92
  93         . /lib/functions/network.sh
  94
  95         local ifname
  96
  97         # manual external interface overrides everything
  98         if [ -z "$extiface" ] ; then
  99             # manual external zone (if dynamically find interfaces
 100             # belonging to it) overrides network_find_wan*
 101             if [ -n "$extzone" ] ; then
 102                 ifname=$(fw3 -q zone $extzone | head -1)
 103             fi
 104             [ -n "$extiface" ] || network_find_wan extiface
 105             [ -n "$extiface" ] || network_find_wan6 extiface
 106         fi
 107
 108         [ -n "$ifname"] || network_get_device ifname ${extiface}
 109
 110         if [ -n "$conffile" ]; then
 111                 args="-f $conffile"
 112         else
 113                 local tmpconf="/var/etc/miniupnpd.conf"
 114                 args="-f $tmpconf"
 115                 mkdir -p /var/etc
 116
 117                 echo "ext_ifname=$ifname" >$tmpconf
 118
 119                 [ -n "$extip" ] && \
 120                         echo "ext_ip=$extip" >>$tmpconf
 121
 122                 local iface
 123                 for iface in ${intiface:-lan}; do
 124                         local device
 125                         network_get_device device "$iface" && {
 126                                 echo "listening_ip=$device" >>$tmpconf
 127                         }
 128                 done
 129
 130                 [ "$port" != "auto" ] && \
 131                         echo "port=$port" >>$tmpconf
 132
 133                 config_load "upnpd"
 134                 upnpd_write_bool enable_natpmp 1
 135                 upnpd_write_bool enable_upnp 1
 136                 upnpd_write_bool secure_mode 1
 137                 upnpd_write_bool pcp_allow_thirdparty 0
 138                 upnpd_write_bool system_uptime 1
 139
 140                 [ -n "$upnp_lease_file" ] && \
 141                         echo "lease_file=$upnp_lease_file" >>$tmpconf
 142
 143                 [ -n "$upload" -a -n "$download" ] && {
 144                         echo "bitrate_down=$(($download * 1024 * 8))" >>$tmpconf
 145                         echo "bitrate_up=$(($upload * 1024 * 8))" >>$tmpconf
 146                 }
 147
 148                 [ -n "${presentation_url}" ] && \
 149                         echo "presentation_url=${presentation_url}" >>$tmpconf
 150
 151                 [ -n "${notify_interval}" ] && \
 152                         echo "notify_interval=${notify_interval}" >>$tmpconf
 153
 154                 [ -n "${clean_ruleset_threshold}" ] && \
 155                         echo "clean_ruleset_threshold=${clean_ruleset_threshold}" >>$tmpconf
 156
 157                 [ -n "${clean_ruleset_interval}" ] && \
 158                         echo "clean_ruleset_interval=${clean_ruleset_interval}" >>$tmpconf
 159
 160                 [ -n "${ipv6_listening_ip}" ] && \
 161                         echo "ipv6_listening_ip=${ipv6_listening_ip}" >>$tmpconf
 162
 163                 [ -z "$uuid" ] && {
 164                         uuid="$(cat /proc/sys/kernel/random/uuid)"
 165                         uci set upnpd.config.uuid=$uuid
 166                         uci commit upnpd
 167                 }
 168
 169                 [ "$uuid" = "nocli" ] || \
 170                         echo "uuid=$uuid" >>$tmpconf
 171
 172                 [ -n "${serial_number}" ] && \
 173                         echo "serial=${serial_number}" >>$tmpconf
 174
 175                 [ -n "${model_number}" ] && \
 176                         echo "model_number=${model_number}" >>$tmpconf
 177
 178             config_foreach conf_rule_add perm_rule "$tmpconf"
 179         fi
 180
 181
 182         if [ -n "$ifname" ]; then
 183                 # start firewall
 184                 iptables -L MINIUPNPD >/dev/null 2>/dev/null || fw3 reload
 185
 186                 if [ "$logging" = "1" ]; then
 187                         SERVICE_DAEMONIZE=1 \
 188                         service_start /usr/sbin/miniupnpd $args -d
 189                 else
 190                         SERVICE_DAEMONIZE= \
 191                         service_start /usr/sbin/miniupnpd $args
 192                 fi
 193         else
 194                 logger -t "upnp daemon" "external interface not found, not starting"
 195         fi
 196 }
 197
 198 stop() {
 199         service_stop /usr/sbin/miniupnpd
 200
 201         iptables -t nat -F MINIUPNPD 2>/dev/null
 202         iptables -t filter -F MINIUPNPD 2>/dev/null
 203
 204         [ -x /usr/sbin/ip6tables ] && {
 205             ip6tables -t filter -F MINIUPNPD 2>/dev/null
 206         }
 207 }