Return to phase1-down.sh CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / elwix / config / etc / default / racoon / roadwarrior / client

Annotation of elwix/config/etc/default/racoon/roadwarrior/client/phase1-down.sh, revision 1.1.1.1

1.1       misho       1: #!/bin/sh
                      2: 
                      3: #
                      4: # sa-down.sh local configuration for a new SA
                      5: #
                      6: 
                      7: PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
                      8: 
                      9: case `uname -s` in
                     10: NetBSD)
                     11:        DEFAULT_GW=`netstat -rn | awk '($1 == "default"){print $2}'`
                     12:        ;;
                     13: Linux)
                     14:        DEFAULT_GW=`netstat -rn | awk '($1 == "0.0.0.0"){print $2}'`
                     15:        ;;
                     16: esac
                     17: 
                     18: echo $@
                     19: echo "LOCAL_ADDR = ${LOCAL_ADDR}"
                     20: echo "LOCAL_PORT = ${LOCAL_PORT}"
                     21: echo "REMOTE_ADDR = ${REMOTE_ADDR}"
                     22: echo "REMOTE_PORT = ${REMOTE_PORT}"
                     23: echo "DEFAULT_GW = ${DEFAULT_GW}"
                     24: echo "INTERNAL_ADDR4 = ${INTERNAL_ADDR4}"
                     25: echo "INTERNAL_DNS4 = ${INTERNAL_DNS4}"
                     26: 
                     27: echo ${INTERNAL_ADDR4} | grep '[0-9]' > /dev/null || exit 0
                     28: echo ${DEFAULT_GW} | grep '[0-9]' > /dev/null || exit 0
                     29: 
                     30: test -f /etc/resolv.conf.bak && cp /etc/resolv.conf.bak /etc/resolv.conf
                     31: 
                     32: case `uname -s` in
                     33: NetBSD)
                     34:        if=`netstat -rn|awk '($1 == "default"){print $7}'`
                     35:        ifconfig ${if} delete ${INTERNAL_ADDR4}
                     36:        route delete default
                     37:        route delete ${REMOTE_ADDR}
                     38:        route add default ${DEFAULT_GW} -ifa ${LOCAL_ADDR}
                     39:        ;;
                     40: Linux)
                     41:        if=`netstat -rn|awk '($1 == "0.0.0.0"){print $8}'`
                     42:        route delete default
                     43:        route delete ${REMOTE_ADDR}
                     44:        ifconfig ${if}:1 del ${INTERNAL_ADDR4}
                     45:        route add default gw ${DEFAULT_GW}
                     46: 
                     47:        #
                     48:        # XXX This is a workaround because Linux seems to ignore
                     49:        # the deleteall commands below. This is bad because it flushes
                     50:        # any SAD instead of flushing what needs to be flushed.
                     51:        # Someone using Linux please fix it
                     52:        #
                     53:        setkey -F
                     54:        ;;
                     55: esac
                     56: 
                     57: # Use this for a NAT-T setup
                     58: LOCAL="${LOCAL_ADDR}[${LOCAL_PORT}]"
                     59: REMOTE="${REMOTE_ADDR}[${REMOTE_PORT}]"
                     60: 
                     61: # Use this for a non NAT-T setup
                     62: #LOCAL="${LOCAL_ADDR}"
                     63: #REMOTE="${REMOTE_ADDR}"
                     64: 
                     65: echo "
                     66: deleteall ${REMOTE_ADDR} ${LOCAL_ADDR} esp;
                     67: deleteall ${LOCAL_ADDR} ${REMOTE_ADDR} esp; 
                     68: spddelete ${INTERNAL_ADDR4}/32[any] 0.0.0.0/0[any] any
                     69:        -P out ipsec esp/tunnel/${LOCAL}-${REMOTE}/require;
                     70: spddelete 0.0.0.0/0[any] ${INTERNAL_ADDR4}[any] any
                     71:        -P in ipsec esp/tunnel/${REMOTE}-${LOCAL}/require;
                     72: " | setkey -c
                     73: