mirror
/
openwrt-packages
mirror of https://git.openwrt.org/feed/packages.git
1
0
Fork 0
Code Releases Activity

Shorewall: start and enable interfaces all in hotplug 

Using shorewall-lite {en|dis}able instead of completely restarting
Shorewall is much more efficient.

But it also makes sense to move the starting of Shorewall from init
to an interface hotplug event.  The "lan" interface should be a good
indicator that networking it ready.  Besides, Shorewall won't start
until br-lan is available.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
This commit is contained in:
Brian J. Murrell 2019-03-01 06:27:44 -05:00
parent 1acacbbf6c
commit c4b18c8e96
4 changed files with 42 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
net/shorewall-lite/files/hotplug_iface
View File

@ -1,13 +1,19 @@
#!/bin/sh #!/bin/sh
# should restart shorewall when an interface comes up DEVICE=${DEVICE:-$(/sbin/uci -p /var/state get network."$INTERFACE".ifname)}
case "$ACTION" in case "$ACTION" in
ifup) ifup)
/etc/init.d/shorewall-lite restart if [ "$INTERFACE" = "lan" ]; then
/usr/sbin/shorewall -l start
elif [ "${INTERFACE:0:3}" = "wan" ] &&
[ "${INTERFACE:$((${#INTERFACE}-2)):2}" != "_6" ]; then
/etc/shorewall-lite/state/firewall enable "$DEVICE"
fi
;; ;;
ifdown) ifdown)
# might need to restore some routing if [ "${INTERFACE:0:3}" = "wan" ]; then
/etc/init.d/shorewall-lite restart /etc/shorewall-lite/state/firewall disable "$DEVICE"
fi
;; ;;
esac esac

14
net/shorewall/files/hotplug_iface
View File

@ -1,13 +1,19 @@
#!/bin/sh #!/bin/sh
# should restart shorewall when an interface comes up DEVICE=${DEVICE:-$(/sbin/uci -p /var/state get network."$INTERFACE".ifname)}
case "$ACTION" in case "$ACTION" in
ifup) ifup)
/etc/init.d/shorewall restart if [ "$INTERFACE" = "lan" ]; then
/usr/sbin/shorewall start
elif [ "${INTERFACE:0:3}" = "wan" ] &&
[ "${INTERFACE:$((${#INTERFACE}-2)):2}" != "_6" ]; then
/etc/shorewall/state/firewall enable "$DEVICE"
fi
;; ;;
ifdown) ifdown)
# might need to restore some routing if [ "${INTERFACE:0:3}" = "wan" ]; then
/etc/init.d/shorewall restart /etc/shorewall/state/firewall disable "$DEVICE"
fi
;; ;;
esac esac

16
net/shorewall6-lite/files/hotplug_iface
View File

@ -1,13 +1,19 @@
#!/bin/sh #!/bin/sh
# should restart shorewall when an interface comes up DEVICE=${DEVICE:-$(/sbin/uci -p /var/state get network."$INTERFACE".ifname)}
case "$ACTION" in case "$ACTION" in
ifup) ifup)
/etc/init.d/shorewall6-lite restart if [ "$INTERFACE" = "lan" ]; then
/usr/sbin/shorewall -6 -l start
elif [ "${INTERFACE:0:3}" = "wan" ] &&
[ "${INTERFACE:$((${#INTERFACE}-2)):2}" != "_6" ]; then
/etc/shorewall6-lite/state/firewall enable "$DEVICE"
fi
;; ;;
ifdown) ifdown)
# might need to restore some routing if [ "${INTERFACE:0:3}" = "wan" ]; then
/etc/init.d/shorewall6-lite restart /etc/shorewall6-lite/state/firewall disable "$DEVICE"
fi
;; ;;
esac esac

14
net/shorewall6/files/hotplug_iface
View File

@ -1,13 +1,19 @@
#!/bin/sh #!/bin/sh
# should restart shorewall when an interface comes up DEVICE=${DEVICE:-$(/sbin/uci -p /var/state get network."$INTERFACE".ifname)}
case "$ACTION" in case "$ACTION" in
ifup) ifup)
/etc/init.d/shorewall6 restart if [ "$INTERFACE" = "lan" ]; then
/usr/sbin/shorewall -6 start
elif [ "${INTERFACE:0:3}" = "wan" ] &&
[ "${INTERFACE:$((${#INTERFACE}-2)):2}" != "_6" ]; then
/etc/shorewall6/state/firewall enable "$DEVICE"
fi
;; ;;
ifdown) ifdown)
# might need to restore some routing if [ "${INTERFACE:0:3}" = "wan" ]; then
/etc/init.d/shorewall6 restart /etc/shorewall6/state/firewall disable "$DEVICE"
fi
;; ;;
esac esac