mirror of
https://github.com/Ysurac/openmptcprouter-feeds.git
synced 2025-03-09 15:40:03 +00:00
227 lines
6.3 KiB
Bash
Executable file
227 lines
6.3 KiB
Bash
Executable file
#!/bin/sh /etc/rc.common
|
|
# vim: set noexpandtab tabstop=4 shiftwidth=4 softtabstop=4 :
|
|
|
|
# shellcheck disable=SC2034
|
|
START=90
|
|
# shellcheck disable=SC2034
|
|
STOP=10
|
|
# shellcheck disable=SC2034
|
|
USE_PROCD=1
|
|
|
|
# shellcheck disable=SC1091
|
|
. /lib/functions.sh
|
|
|
|
# Get the lan interface name
|
|
lan_device=
|
|
config_load network
|
|
config_get lan_device lan ifname
|
|
|
|
#config_load dscp
|
|
|
|
_add_dscp_domain() {
|
|
domain=""; config_get domain "$1" name ""
|
|
class=""; config_get class "$1" class ""
|
|
[ -n "$domain" ] && [ -n "$class" ] && [ -z "$(uci -q get dhcp.omr_dscp_$class.domain | grep $domain)" ] && [ "$(uci -q get dhcp.dnsmasq1.filter_aaaa)" != "1" ]&& {
|
|
uci -q batch <<-EOF
|
|
add_list dhcp.omr_dscp_$class.domain="$domain"
|
|
commit dhcp
|
|
EOF
|
|
}
|
|
}
|
|
|
|
_add_dscp_domains_rules() {
|
|
for class in cs0 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef; do
|
|
uci -q batch <<-EOF
|
|
set dhcp.omr_dscp_${class}=ipset
|
|
add_list dhcp.omr_dscp_${class}.name="omr_dscp_${class}_4"
|
|
commit dhcp
|
|
EOF
|
|
if [ "$disableipv6" = "0" ]; then
|
|
uci -q batch <<-EOF
|
|
add_list dhcp.omr_dscp_${class}.name="omr_dscp_${class}_6"
|
|
commit dhcp
|
|
EOF
|
|
fi
|
|
uci batch <<-EOF
|
|
set firewall.omr_dscp_${class}_4=ipset
|
|
set firewall.omr_dscp_${class}_4.name="omr_dscp_${class}_4"
|
|
set firewall.omr_dscp_${class}_4.match='dest_ip'
|
|
EOF
|
|
if [ "$disableipv6" = "0" ]; then
|
|
uci -q batch <<-EOF
|
|
set firewall.omr_dscp_${class}_6=ipset
|
|
set firewall.omr_dscp_${class}_6.name="omr_dscp_${class}_6"
|
|
set firewall.omr_dscp_${class}_6.match='dest_ip'
|
|
EOF
|
|
fi
|
|
uci -q batch <<-EOF
|
|
set firewall.omr_dscp_rule_${class}_4=rule
|
|
set firewall.omr_dscp_rule_${class}_4.name="omr_dscp_${class}_4"
|
|
set firewall.omr_dscp_rule_${class}_4.ipset="omr_dscp_${class}_4"
|
|
set firewall.omr_dscp_rule_${class}_4.set_dscp="$(echo ${class} | tr '[a-z'] '[A-Z]')"
|
|
set firewall.omr_dscp_rule_${class}_4.target='DSCP'
|
|
set firewall.omr_dscp_rule_${class}_4.enabled='1'
|
|
set firewall.omr_dscp_rule_${class}_4.src='*'
|
|
set firewall.omr_dscp_rule_${class}_4.dest='*'
|
|
commit firewall
|
|
EOF
|
|
if [ "$disableipv6" = "0" ]; then
|
|
uci -q batch <<-EOF
|
|
set firewall.omr_dscp_rule_${class}_6=rule
|
|
set firewall.omr_dscp_rule_${class}_6.name="omr6_dscp_${class}_6"
|
|
set firewall.omr_dscp_rule_${class}_6.ipset="omr_dscp_${class}_6"
|
|
set firewall.omr_dscp_rule_${class}_6.target='DSCP'
|
|
set firewall.omr_dscp_rule_${class}_6.set_dscp="$(echo ${class} | tr '[a-z'] '[A-Z]')"
|
|
set firewall.omr_dscp_rule_${class}_6.enabled='1'
|
|
set firewall.omr_dscp_rule_${class}_6.src='*'
|
|
set firewall.omr_dscp_rule_${class}_6.dest='*'
|
|
commit firewall
|
|
EOF
|
|
fi
|
|
done
|
|
}
|
|
|
|
_add_dscp_rules() {
|
|
proto="" ; config_get proto "$1" proto all
|
|
src_ip="" ; config_get src_ip "$1" src_ip 0.0.0.0/0
|
|
src_port="" ; config_get src_port "$1" src_port 0:65535
|
|
dest_ip="" ; config_get dest_ip "$1" dest_ip 0.0.0.0/0
|
|
dest_port="" ; config_get dest_port "$1" dest_port 0:65535
|
|
class="" ; config_get class "$1" class
|
|
direction="" ; config_get direction "$1" direction "upload"
|
|
comment="" ; config_get comment "$1" comment "-"
|
|
|
|
src_port="$(echo $src_port | sed 's/:/-/g')"
|
|
dest_port="$(echo $dest_port | sed 's/:/-/g')"
|
|
count=$((count + 1))
|
|
[ "$proto" = "all" ] && proto="tcp udp"
|
|
src=""
|
|
dst=""
|
|
case "$direction" in
|
|
upload)
|
|
src="lan"
|
|
;;
|
|
download)
|
|
dst="lan"
|
|
;;
|
|
both)
|
|
# to also use local generated traffic, maybe a local origin should be set...
|
|
src="*"
|
|
dst="*"
|
|
;;
|
|
esac
|
|
# Apply the rule locally
|
|
uci -q batch <<-EOF
|
|
set firewall.omr_dscp_rule$count=rule
|
|
set firewall.omr_dscp_rule$count.name="omr_dscp_rule$count"
|
|
set firewall.omr_dscp_rule$count.target="DSCP"
|
|
set firewall.omr_dscp_rule$count.set_dscp="$(echo ${class} | tr '[a-z'] '[A-Z]')"
|
|
set firewall.omr_dscp_rule$count.src="$src"
|
|
set firewall.omr_dscp_rule$count.dest="$dst"
|
|
set firewall.omr_dscp_rule$count.src_ip="$src_ip"
|
|
set firewall.omr_dscp_rule$count.dest_ip="$dest_ip"
|
|
set firewall.omr_dscp_rule$count.proto="$proto"
|
|
set firewall.omr_dscp_rule$count.enabled='1'
|
|
EOF
|
|
src_port="$(echo $src_port | sed 's/,/ /g')"
|
|
dest_port="$(echo $dest_port | sed 's/,/ /g')"
|
|
for port in $src_port; do
|
|
uci -q add_list firewall.omr_dscp_rule$count.src_port="$port"
|
|
done
|
|
for port in $dest_port; do
|
|
uci -q add_list firewall.omr_dscp_rule$count.dest_port="$port"
|
|
done
|
|
#_add_dscp_rule -m multiport --sports "$src_port" -m multiport --dports "$dest_port"
|
|
uci -q commit firewall
|
|
|
|
}
|
|
|
|
|
|
_add_fwmark_chain() {
|
|
_ipt4 -N dscp_mark
|
|
_ipt4 -A PREROUTING -i "$lan_device" -j dscp_mark
|
|
_ipt4 -A POSTROUTING -j dscp_mark
|
|
if [ "$disableipv6" = "0" ]; then
|
|
_ipt6 -N dscp_mark
|
|
_ipt6 -A PREROUTING -i "$lan_device" -j dscp_mark
|
|
_ipt6 -A POSTROUTING -j dscp_mark
|
|
fi
|
|
for class in cs4 cs5 cs6 cs7; do
|
|
# xtun (hex) -> 0x7874756e
|
|
_ipt4 -A dscp_mark \
|
|
-m comment --comment "$class" \
|
|
-m dscp --dscp-class "$class" \
|
|
-j MARK --set-mark 0x7874756e
|
|
if [ "$disableipv6" = "0" ]; then
|
|
_ipt6 -A dscp_mark \
|
|
-m comment --comment "$class" \
|
|
-m dscp --dscp-class "$class" \
|
|
-j MARK --set-mark 0x7874756e
|
|
fi
|
|
done
|
|
}
|
|
|
|
_remove_old_ipset_dnsmasq() {
|
|
[ -n "$(uci -q get dhcp.${1}.name | grep omr)" ] && uci -q delete dhcp.$1
|
|
}
|
|
_remove_ipset_dnsmasq() {
|
|
[ -n "$(echo $1 | grep omr_dscp)" ] && uci -q delete dhcp.$1
|
|
}
|
|
|
|
_remove_rules() {
|
|
([ -n "$(echo $1 | grep omr_dscp)" ] || [ -n "$(echo $1 | grep omr6_dscp)" ]) && uci -q delete firewall.$1
|
|
}
|
|
|
|
_setup_tunnel() {
|
|
# Mark the packets to route through xtun0
|
|
_add_fwmark_chain
|
|
# tun0: cs0 (default)
|
|
# xtun0: cs6
|
|
_ipt4 -A dscp_output -o "tun0" -j DSCP --set-dscp-class cs6
|
|
if [ "$disableipv6" = "0" ]; then
|
|
_ipt6 -A dscp_output -o "tun0" -j DSCP --set-dscp-class cs6
|
|
fi
|
|
}
|
|
|
|
_cleanup() {
|
|
uci -q del dhcp.@dnsmasq[0].ipset
|
|
config_load dhcp
|
|
config_foreach _remove_ipset_dnsmasq
|
|
config_foreach _remove_old_ipset_dnsmasq
|
|
config_load firewall
|
|
config_foreach _remove_rules
|
|
uci -q commit dhcp
|
|
uci -q commit firewall
|
|
fw4 -q restart
|
|
}
|
|
|
|
start_service() {
|
|
# Cleanup
|
|
_cleanup
|
|
disableipv6="$(uci -q get openmptcprouter.settings.disable_ipv6)"
|
|
config_load dscp
|
|
# Add chains
|
|
_add_dscp_domains_rules
|
|
|
|
# Setup the tunnels dscp / marks
|
|
#_setup_tunnel
|
|
|
|
# Add rules base on the user configuration
|
|
count=0
|
|
config_foreach _add_dscp_rules classify
|
|
config_foreach _add_dscp_domain domains
|
|
uci -q commit dhcp
|
|
fw4 -q restart
|
|
}
|
|
|
|
stop_service() {
|
|
_cleanup
|
|
}
|
|
|
|
reload_service() {
|
|
start
|
|
}
|
|
|
|
service_triggers() {
|
|
procd_add_reload_trigger dscp
|
|
}
|