Return to up.sh.in CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / coova-chilli / conf

Annotation of embedaddon/coova-chilli/conf/up.sh.in, revision 1.1

1.1     ! misho       1: #!/bin/sh
        !             2: # Coova Chilli - David Bird <david@coova.com>
        !             3: # Licensed under the GPL, see http://coova.org/
        !             4: # up.sh /dev/tun0 192.168.0.10 255.255.255.0
        !             5: 
        !             6: . @ETCCHILLI@/functions
        !             7: 
        !             8: [ -e "@VARRUN@/chilli.iptables" ] && sh @VARRUN@/chilli.iptables 2>/dev/null
        !             9: rm -f @VARRUN@/chilli.iptables 2>/dev/null
        !            10: 
        !            11: IF=$(basename $DEV)
        !            12: 
        !            13: ipt() {
        !            14:     opt=$1; shift
        !            15:     echo "iptables -D $*" >> @VARRUN@/chilli.iptables
        !            16:     iptables $opt $*
        !            17: }
        !            18: 
        !            19: ipt_in() {
        !            20:     ipt -A INPUT -i $IF $*
        !            21: }
        !            22: 
        !            23: [ -n "$DHCPIF" ] && {
        !            24: 
        !            25:     [ -n "$UAMPORT" -a "$UAMPORT" != "0" ] && \
        !            26:        ipt_in -p tcp -m tcp --dport $UAMPORT --dst $ADDR -j ACCEPT
        !            27: 
        !            28:     [ -n "$UAMUIPORT" -a "$UAMUIPORT" != "0" ] && \
        !            29:        ipt_in -p tcp -m tcp --dport $UAMUIPORT --dst $ADDR -j ACCEPT
        !            30: 
        !            31:     [ -n "HS_TCP_PORTS" ] && {
        !            32:        for port in $HS_TCP_PORTS; do
        !            33:            ipt_in -p tcp -m tcp --dport $port --dst $ADDR -j ACCEPT
        !            34:        done
        !            35:     }
        !            36:     
        !            37:     ipt_in -p udp -d 255.255.255.255 --destination-port 67:68 -j ACCEPT
        !            38:     ipt_in -p udp --dst $ADDR --dport 53 -j ACCEPT
        !            39: 
        !            40:     ipt -A INPUT -i $IF --dst $ADDR -j DROP
        !            41:     ipt -A INPUT -i $IF -j DROP
        !            42: 
        !            43:     ipt -I FORWARD -i $DHCPIF -j DROP
        !            44:     ipt -I FORWARD -o $DHCPIF -j DROP
        !            45:     ipt -I FORWARD -i $IF -j ACCEPT
        !            46:     ipt -I FORWARD -o $IF -j ACCEPT
        !            47: 
        !            48:     [ "$HS_LAN_ACCESS" != "on" -a "$HS_LAN_ACCESS" != "allow" ] && \
        !            49:        ipt -I FORWARD -i $IF -o \! $HS_WANIF -j DROP
        !            50: 
        !            51:     [ "$HS_LOCAL_DNS" = "on" ] && \
        !            52:        ipt -I PREROUTING -t nat -i $IF -p udp --dport 53 -j DNAT --to-destination $ADDR
        !            53: }
        !            54: 
        !            55: # site specific stuff optional
        !            56: [ -e @ETCCHILLI@/ipup.sh ] && . @ETCCHILLI@/ipup.sh