90 lines
2.9 KiB
Bash
90 lines
2.9 KiB
Bash
#!/bin/sh /etc/rc.common
|
|
|
|
START=90
|
|
|
|
interface() {
|
|
nic=$(ifconfig -a | grep -o '^[^ ]*')
|
|
dhcpv6_interface=$(uci -q show network | grep dhcpv6 | grep -o 'network\.\([^\.]*\)' | sed 's/network.//')
|
|
IFS=$'\n'
|
|
for interface_name in $dhcpv6_interface
|
|
do
|
|
device=$(uci -q show network.$interface_name.device | grep -o "'.*'" | awk -F"'" '{print $2}')
|
|
if [ "$(echo $device | grep -c @)" = 1 ]; then
|
|
alias_interface=$(echo $device | sed 's/@//')
|
|
device=$(uci -q show network.$alias_interface.device | grep -o "'.*'" | awk -F"'" '{print $2}')
|
|
if [ -z $(uci -q show network.$alias_interface.device) ]; then
|
|
ipaddr=$(uci -q show network.$alias_interface.ipaddr | grep -o "'.*'" | awk -F"'" '{print $2}')
|
|
device=$(ifconfig | grep -B 1 $ipaddr | head -1 | awk '{print $1}')
|
|
fi
|
|
fi
|
|
if [ $(ifconfig $device | grep -c "inet6 addr") -gt 0 ]; then
|
|
gateway=$(ip -6 route | grep "default from" | awk '{print $5}')
|
|
break
|
|
fi
|
|
done
|
|
}
|
|
|
|
common_config() {
|
|
if [ -z $(uci -q get network.globals.ula_prefix) ] || [ $(uci -q get network.globals.ula_prefix | grep -c "/48") != 1 ]; then
|
|
r1=$(dd if=/dev/urandom bs=1 count=1 2>/dev/null | hexdump -e '1/1 "%02x"')
|
|
uci -q batch <<-EOF >/dev/null
|
|
set network.globals.ula_prefix="fd$r1:2024::/48"
|
|
commit network
|
|
EOF
|
|
fi
|
|
uci -q batch <<-EOF >/dev/null
|
|
set dhcp.lan.ra='server'
|
|
set dhcp.lan.dhcpv6='server'
|
|
del dhcp.lan.ndp
|
|
set dhcp.lan.ra_default='2'
|
|
del dhcp.lan.ra_slaac
|
|
commit dhcp
|
|
EOF
|
|
/etc/init.d/network reload
|
|
/etc/init.d/odhcpd reload
|
|
}
|
|
|
|
start() {
|
|
[ "$(uci -q get firewall.@defaults[0].nat6)" != 1 ] && return 0
|
|
interface
|
|
common_config
|
|
ip -6 r add default via $gateway dev $device 2>/dev/null
|
|
nft delete table ip6 nat 2>/dev/null
|
|
nft add table ip6 nat 2>/dev/null
|
|
nft add chain ip6 nat prerouting { type nat hook prerouting priority 0\; } 2>/dev/null
|
|
nft add chain ip6 nat postrouting { type nat hook postrouting priority 100\; } 2>/dev/null
|
|
nft add rule ip6 nat postrouting oif $device masquerade 2>/dev/null
|
|
[ ! -f /etc/hotplug.d/iface/90-nat6 ] && cat > /etc/hotplug.d/iface/90-nat6 << "EOF"
|
|
#!/bin/sh
|
|
|
|
dhcpv6_interface=$(uci -q show network | grep dhcpv6 | grep -o 'network\.\([^\.]*\)' | sed 's/network.//')
|
|
IFS=$'\n'
|
|
for interface_name in $dhcpv6_interface
|
|
do
|
|
device=$(uci -q show network.$interface_name.device | grep -o "'.*'" | awk -F"'" '{print $2}')
|
|
if [ $(ifconfig $device | grep -c "inet6 addr") -gt 0 ]; then
|
|
interface_name=$interface_name
|
|
fi
|
|
done
|
|
|
|
[ "$INTERFACE" = "$interface_name" ] || exit 0
|
|
|
|
if [ "$ACTION" = ifup ] || [ "$ACTION" = iflink ] || [ "$ACTION" = ifupdate ] || [ "$ACTION" = reload ]; then
|
|
/etc/init.d/nat6 restart
|
|
fi
|
|
EOF
|
|
logger -p notice -t network -s "nat6: IPv6 NAT is ready"
|
|
}
|
|
|
|
stop() {
|
|
interface
|
|
nft delete table ip6 nat 2>/dev/null
|
|
ip -6 r del default via $gateway dev $device 2>/dev/null
|
|
rm -f /etc/hotplug.d/iface/90-nat6
|
|
uci -q batch <<-EOF >/dev/null
|
|
del dhcp.lan.ra_default
|
|
commit dhcp
|
|
EOF
|
|
/etc/init.d/odhcpd reload
|
|
}
|