forked from freifunk-franken/firmware
Christian Dresel
825d760bd8
With this new package it is possible to do SNAT for client IPv4. The user must set a router_ip in gateway.meta.router_ip, so an ip address is available for peering interfaces and reachability. Currently, no extra filtering is done, so the client interface should only use ip ranges, which are already filtered from being announced (e.g. 192.168.0.0/16). Using NAT for IPv4 significantly reduces the need for big Freifunk-global IP range allocations. Signed-off-by: Christian Dresel <freifunk@dresel.systems> Co-authored-by: Fabian Bläse <fabian@blaese.de> Signed-off-by: Fabian Bläse <fabian@blaese.de> Tested-by: Christian Dresel <freifunk@dresel.systems>
35 lines
818 B
Plaintext
35 lines
818 B
Plaintext
configure() {
|
|
# first we delete the snat config
|
|
uci -q del network.client.fff_snat
|
|
uci -q del network.client.fff_snat_sourceip
|
|
if [ "$(uci -q get gateway.@client[0].snat)" = '1' ]; then
|
|
|
|
# first check the config is plausible
|
|
if ! routerip=$(uci -q get gateway.meta.router_ip); then
|
|
echo "ERROR: No router_ip set, which is required for SNAT!"
|
|
return 1
|
|
fi
|
|
if ! uci -q get gateway.@client[0].ipaddr >/dev/null; then
|
|
echo "ERROR: No ipaddr set, which is required for SNAT!"
|
|
return 1
|
|
fi
|
|
|
|
# keep only the first IP
|
|
routerip=${routerip%% *}
|
|
# keep only the IP without the CIDR
|
|
routerip=${routerip%%/*}
|
|
|
|
# We set the snat config
|
|
uci set network.client.fff_snat=1
|
|
uci set network.client.fff_snat_sourceip=$routerip
|
|
fi
|
|
}
|
|
|
|
apply() {
|
|
uci commit network
|
|
}
|
|
|
|
revert() {
|
|
uci revert network
|
|
}
|