From 52f7c47e4ea1dca60dd518f9c91743644e9b46c0 Mon Sep 17 00:00:00 2001 From: Ycarus Date: Wed, 6 Jun 2018 17:56:39 +0200 Subject: [PATCH] Add omrvpn interface --- .../files/etc/uci-defaults/1990-omr-tracker | 13 ++++---- .../files/etc/uci-defaults/2020-omr-vpn | 33 +++++++++++++++++++ 2 files changed, 40 insertions(+), 6 deletions(-) create mode 100644 openmptcprouter/files/etc/uci-defaults/2020-omr-vpn diff --git a/openmptcprouter/files/etc/uci-defaults/1990-omr-tracker b/openmptcprouter/files/etc/uci-defaults/1990-omr-tracker index 871b25c65..e2134d812 100755 --- a/openmptcprouter/files/etc/uci-defaults/1990-omr-tracker +++ b/openmptcprouter/files/etc/uci-defaults/1990-omr-tracker @@ -1,12 +1,13 @@ #!/bin/sh -if [ "$(uci -q get omr-tracker.glorytun)" = "" ]; then +if [ "$(uci -q get omr-tracker.omrvpn)" = "" ]; then uci -q batch <<-EOF >/dev/null - set omr-tracker.glotytun=interface - set omr-tracker.glorytun.type="none" - set omr-tracker.glorytun.timeout=10 - set omr-tracker.glorytun.tries=5 - set omr-tracker.glorytun.interval=5 + delete omr-tracker.glorytun + set omr-tracker.omrvpn=interface + set omr-tracker.omrvpn.type="none" + set omr-tracker.omrvpn.timeout=10 + set omr-tracker.omrvpn.tries=5 + set omr-tracker.omrvpn.interval=5 commit omr-tracker EOF fi diff --git a/openmptcprouter/files/etc/uci-defaults/2020-omr-vpn b/openmptcprouter/files/etc/uci-defaults/2020-omr-vpn new file mode 100644 index 000000000..a267fffd3 --- /dev/null +++ b/openmptcprouter/files/etc/uci-defaults/2020-omr-vpn @@ -0,0 +1,33 @@ +#!/bin/sh + +if [ "$(uci -q get network.omrvpn)" = "" ]; then + uci -q batch <<-EOF >/dev/null + delete network.glorytun + delete network.omrvpn + set network.omrvpn=interface + set network.omrvpn.ifname=tun0 + set network.omrvpn.proto=dhcp + set network.omrvpn.ip4table=vpn + set network.omrvpn.multipath=off + set network.omrvpn.leasetime=12h + set network.omrvpn.mtu=1400 + commit network + EOF +fi + +if [ "$(uci -q show firewall | grep omrvpn)" = "" ]; then + uci -q batch <<-EOF >/dev/null + add_list firewall.@zone[2].network=omrvpn + delete firewall.allow_dhcp_request_vpn + set firewall.allow_dhcp_request_vpn=rule + set firewall.allow_dhcp_request_vpn.name=Allow-DHCP-Request-VPN + set firewall.allow_dhcp_request_vpn.src=vpn + set firewall.allow_dhcp_request_vpn.proto=udp + set firewall.allow_dhcp_request_vpn.dest_port=67 + set firewall.allow_dhcp_request_vpn.target=ACCEPT + set firewall.allow_dhcp_request_vpn.family=ipv4 + commit firewall + EOF +fi +rm -f /tmp/luci-indexcache +exit 0