1 | 7 | simandl | #!/bin/bash |
2 | | | # author : Petr Simandl www.simandl.cz |
3 | 21 | simandl | # release date : 03/06/2007 |
4 | 7 | simandl | # name : sedlo |
5 | | | # description : dynamic side routing tables tool |
6 | | | # license : GPL |
7 | | | |
8 | 22 | simandl | sl_version="0.0.4pre10" |
9 | 7 | simandl | |
10 | | | PATH=$PATH:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin |
11 | | | |
12 | | | sl_nmcnf="sedlo.conf" |
13 | | | sl_sedlocnf="/etc/$sl_nmcnf" |
14 | | | sl_sedlocache="/var/cache/sedlo" |
15 | | | |
16 | | | sl_rttab="/etc/iproute2/rt_tables" |
17 | | | sl_rtnmin=110 |
18 | | | sl_rtnmax=200 |
19 | 16 | simandl | #all traffic that is handled as internal (CZF traffic) |
20 | 7 | simandl | sl_ipnodef="10.0.0.0/8" |
21 | 22 | simandl | #this will specify base priority in rule table |
22 | | | sl_priobase=10000 |
23 | | | #this will specify base priority in rule table select mask |
24 | | | sl_priorulesmask="100.." |
25 | 16 | simandl | #no default traffic will have rule at higher priority |
26 | 22 | simandl | sl_prionodef=$(($sl_priobase - 1)) |
27 | 7 | simandl | |
28 | | | slm_unknown="Nezname parametry : " |
29 | | | |
30 | | | sl_ipcmd=`which ip` |
31 | | | sl_trcmd=`which tr` |
32 | | | sl_wgetcmd=`which wget` |
33 | | | sl_hnmcmd=`which hostname` |
34 | | | sl_awkcmd=`which awk` |
35 | | | sl_catcmd=`which cat` |
36 | | | sl_grepcmd=`which grep` |
37 | 10 | simandl | sl_diffcmd=`which diff` |
38 | 7 | simandl | |
39 | | | if [ -e $sl_sedlocnf ] |
40 | | | then |
41 | | | sl_nop=1 |
42 | | | else |
43 | | | echo "$sl_sedlocnf not found" |
44 | | | exit 1 |
45 | | | fi |
46 | | | |
47 | | | if [ -e $sl_rttab ] |
48 | | | then |
49 | | | sl_nop=1 |
50 | | | else |
51 | | | echo "$sl_rttab not found" |
52 | | | exit 1 |
53 | | | fi |
54 | | | |
55 | 9 | simandl | sl_murlcfg=`cat $sl_sedlocnf | grep "^mcnf" | uniq | awk '{print $2" "$3" "$4}'` |
56 | 7 | simandl | |
57 | | | ###################################################################### |
58 | 22 | simandl | #this will delete all rules at sl_prionodef and sl_priorulesmask priorities |
59 | 16 | simandl | s_flruall() |
60 | | | { |
61 | | | if [ $scm_info -gt 0 ]; then echo "Flushing all rules" ; fi |
62 | | | |
63 | | | sl_rules=`$sl_ipcmd ru ls | $sl_grepcmd "^"$sl_prionodef":" | $sl_trcmd '[:blank:]' '*'` |
64 | | | for sl_rule in $sl_rules |
65 | | | do |
66 | | | sl_ipgws=`echo $sl_rule | $sl_awkcmd -F '*' '{print $2,$3,$4,$5,$6,$7}'` |
67 | | | $sl_ipcmd ru del $sl_ipgws |
68 | | | #this should make faster applying of new routing tables |
69 | | | $sl_ipcmd ro flush cache |
70 | | | done |
71 | | | |
72 | 22 | simandl | sl_rules=`$sl_ipcmd ru ls | $sl_grepcmd "^"$sl_priorulesmask":" | $sl_trcmd '[:blank:]' '*'` |
73 | 16 | simandl | for sl_rule in $sl_rules |
74 | | | do |
75 | | | sl_ipgws=`echo $sl_rule | $sl_awkcmd -F '*' '{print $2,$3,$4,$5,$6,$7}'` |
76 | | | $sl_ipcmd ru del $sl_ipgws |
77 | | | #this should make faster applying of new routing tables |
78 | | | $sl_ipcmd ro flush cache |
79 | | | done |
80 | | | |
81 | | | } # s_flruall |
82 | | | |
83 | | | ###################################################################### |
84 | | | s_checknodefru() |
85 | | | { |
86 | | | #checking if we have present nodef rule and if not we create it |
87 | | | sl_nodefrule=`$sl_ipcmd ru ls | $sl_grepcmd "^"$sl_prionodef":" | $sl_trcmd '[:blank:]' '*'` |
88 | | | #echo $sl_nodefrule |
89 | | | if [ "$sl_nodefrule x" == " x" ] |
90 | | | then |
91 | | | if [ $scm_info -gt 0 ]; then echo "Creating rule for nodef route" ; fi |
92 | | | $sl_ipcmd ru add from $sl_ipnodef to $sl_ipnodef lookup main prio $sl_prionodef |
93 | 22 | simandl | echo "delam novou" |
94 | 16 | simandl | fi |
95 | | | } |
96 | | | |
97 | | | ###################################################################### |
98 | 10 | simandl | # here we get each ip and we create a rule to send this ip to a |
99 | | | # certain table |
100 | | | # this routine can be skipped when the number of ips and ip directions |
101 | | | # are still the same = old and new configs are the same |
102 | 7 | simandl | s_fillrules() |
103 | | | { |
104 | 8 | simandl | |
105 | 16 | simandl | #this will check no default rule if exists and if not it will be created |
106 | | | s_checknodefru |
107 | | | |
108 | 17 | simandl | if [ $scm_info -gt 0 ]; then echo "Checking rules for ips" ; fi |
109 | 7 | simandl | |
110 | | | sl_ips=`$sl_catcmd $sl_sedlocache/$sl_nmcnf | $sl_grepcmd "^ip" | $sl_awkcmd '{print $2"*"$4"*"$5"*"$6}'` |
111 | 22 | simandl | sl_rules=`$sl_ipcmd ru ls | $sl_grepcmd ^$sl_priorulesmask":" | $sl_trcmd '[:blank:]' '*'` |
112 | 7 | simandl | |
113 | 17 | simandl | #for all IPs we check and leave, change or create rule |
114 | 7 | simandl | for sl_ip in $sl_ips |
115 | | | do |
116 | | | sl_ipn=`echo $sl_ip | $sl_awkcmd -F '*' '{print $1}'` |
117 | | | sl_ipgws=`echo $sl_ip | $sl_awkcmd -F '*' '{print $2,$3,$4}'` |
118 | | | sl_ok="no" |
119 | 17 | simandl | #for all GWs we check rules |
120 | 7 | simandl | for sl_ipgw in $sl_ipgws |
121 | | | do |
122 | | | sl_tbl=`$sl_ipcmd ro ls ta $sl_ipgw` |
123 | 17 | simandl | #check if table exists |
124 | 7 | simandl | if [ "$sl_tbl x" != " x" ] && [ "$sl_ok" = "no" ] |
125 | | | then |
126 | 17 | simandl | #we have IP and GW table |
127 | | | #check if the rule alredady exists |
128 | | | sl_oldrule=`echo $sl_rules | $sl_trcmd " " "\n" | $sl_grepcmd "\*"$sl_ipn"\*"` |
129 | | | sl_exactrule=`echo $sl_oldrule | $sl_trcmd " " "\n" | $sl_grepcmd "\*"$sl_ipgw"\*"` |
130 | | | if [ "$sl_exactrule x" == " x" ] |
131 | | | then |
132 | | | #exact rule doesn't exist so we check if an old rule for this IP is present |
133 | | | if [ "$sl_oldrule x" != " x" ] |
134 | | | then |
135 | | | #some old rule(s) for IP is present so we delete it |
136 | | | for sl_rule in $sl_oldrule |
137 | | | do |
138 | | | sl_ipgws=`echo $sl_rule | $sl_awkcmd -F '*' '{print $2,$3,$4,$5,$6,$7}'` |
139 | | | if [ $scm_info -gt 0 ]; then echo "Deleting old rule $sl_ipgws" ; fi |
140 | | | $sl_ipcmd ru del $sl_ipgws |
141 | | | #this should make faster applying of new routing tables |
142 | | | $sl_ipcmd ro flush cache |
143 | | | done |
144 | | | fi |
145 | 22 | simandl | #getting subnet mask if exists |
146 | | | sl_subnet=`echo $sl_ip | $sl_awkcmd -F '/' '{print $2}' | $sl_awkcmd -F '*' '{print $1}' ` |
147 | | | if [ "$sl_subnet x" == " x" ] |
148 | | | then |
149 | | | #if subnet was not found we set subnet to 32 |
150 | | | sl_subnet=32 |
151 | | | else |
152 | | | #this is just to be sure to have subnet between 1 and 32 |
153 | | | if [ $sl_subnet -gt 32 ]; then sl_subnet=32 ; fi |
154 | | | if [ $sl_subnet -lt 1 ]; then sl_subnet=1 ; fi |
155 | | | fi |
156 | | | #bigger subnets have lower priority |
157 | | | sl_priorule=$(($sl_priobase + 32)) |
158 | | | sl_priorule=$(($sl_priorule - $sl_subnet)) |
159 | | | |
160 | 17 | simandl | if [ $scm_info -gt 0 ]; then echo "Creating new rule to send $sl_ipn to table $sl_ipgw" ; fi |
161 | 22 | simandl | $sl_ipcmd ru add from $sl_ipn lookup $sl_ipgw prio $sl_priorule |
162 | 17 | simandl | |
163 | | | else |
164 | | | if [ $scm_info -gt 1 ]; then echo "Rule to send $sl_ipn to table $sl_ipgw already exists" ; fi |
165 | | | fi |
166 | 7 | simandl | sl_ok="yes" |
167 | | | else |
168 | 17 | simandl | #we have no table |
169 | 7 | simandl | if [ "$sl_ok" = "no" ] |
170 | | | then |
171 | | | if [ $scm_info -gt 1 ]; then echo "For $sl_ipn table $sl_ipgw not used because it is empty" ; fi |
172 | | | else |
173 | 16 | simandl | if [ $scm_info -gt 1 ]; then echo "For $sl_ipn table $sl_ipgw not used because it has lower priority" ; fi |
174 | 7 | simandl | fi |
175 | | | fi |
176 | | | done |
177 | | | done |
178 | | | |
179 | 17 | simandl | #finally we check all rules and if there is a rule without IP from config we delete it |
180 | | | for sl_rule in $sl_rules |
181 | | | do |
182 | | | sl_iprule=`echo $sl_rule | $sl_awkcmd -F '*' '{print $3}'` |
183 | | | sl_ipconf=`echo $sl_ips | $sl_trcmd " " "\n" | $sl_grepcmd "^"$sl_iprule"\*"` |
184 | 7 | simandl | |
185 | 17 | simandl | if [ "$sl_ipconf x" == " x" ] |
186 | | | then |
187 | | | #we have a rule without an IP in config so we delete this rule |
188 | | | sl_ipgws=`echo $sl_rule | $sl_awkcmd -F '*' '{print $2,$3,$4,$5,$6,$7}'` |
189 | | | if [ $scm_info -gt 0 ]; then echo "Deleting non config rule $sl_ipgws" ; fi |
190 | | | $sl_ipcmd ru del $sl_ipgws |
191 | | | #this should make faster applying of new routing tables |
192 | | | $sl_ipcmd ro flush cache |
193 | | | fi |
194 | | | done |
195 | | | |
196 | 7 | simandl | } # s_fillrules |
197 | 8 | simandl | |
198 | 7 | simandl | ###################################################################### |
199 | 10 | simandl | # here we look into the main routing table for path to our iGWs |
200 | | | # and we fill these tables with two halves default nets that |
201 | | | # point to appropriate direction |
202 | | | # this routine can be skipped when the routing table is the same |
203 | 7 | simandl | s_filltables() |
204 | | | { |
205 | 10 | simandl | if [ $scm_info -gt 0 ]; then echo "Checking main routing table" ; fi |
206 | | | |
207 | 7 | simandl | if [ $scm_info -gt 0 ]; then echo "Filling tables" ; fi |
208 | | | |
209 | 9 | simandl | sl_igws=`$sl_catcmd $sl_sedlocache/$sl_nmcnf | $sl_grepcmd -E "^igw|^myigw" | $sl_awkcmd '{print $3"*"$2"*"$1}'` |
210 | 7 | simandl | |
211 | | | for sl_igw in $sl_igws |
212 | | | do |
213 | | | sl_igwn=`echo $sl_igw | $sl_awkcmd -F '*' '{print $1}'` |
214 | | | sl_igwip=`echo $sl_igw | $sl_awkcmd -F '*' '{print $2}'` |
215 | 9 | simandl | sl_igwtype=`echo $sl_igw | $sl_awkcmd -F '*' '{print $3}'` |
216 | 15 | simandl | |
217 | 14 | simandl | #oprava falesneho routovani na lokalni iface - pokud jsme lokalni igw tak se nema najit ip |
218 | | | #protoze cesta dal neni - jsme totiz uz na lokalnim iface |
219 | 15 | simandl | #head je tam proto ze se pro prespolni(a bgp) muze objevit vice rout s ruznou metrikou tak vezmem jen prvni (head) |
220 | | | #s nejmensi metrikou (sort) |
221 | | | sl_igwgt=`$sl_ipcmd ro ls | $sl_grepcmd -v "proto kernel" | $sl_grepcmd "^$sl_igwip " | sort | $sl_awkcmd '{print $3}' | head -n 1` |
222 | 7 | simandl | |
223 | 9 | simandl | # equal cost multipath detection - just first IP is taken as way to igw |
224 | 7 | simandl | if [ "$sl_igwgt x" = "zebra x" ] |
225 | | | then |
226 | | | sl_igwgt=`$sl_ipcmd ro ls | $sl_grepcmd -A 1 "^$sl_igwip " | $sl_grepcmd "nexthop" | $sl_awkcmd '{print $3}'` |
227 | | | fi |
228 | | | |
229 | 9 | simandl | #if myigw then fill table for local gateway with single ip from config |
230 | | | if [ "$sl_igwtype x" = "myigw x" ] |
231 | | | then |
232 | | | sl_igwgt=$sl_igwip |
233 | | | fi |
234 | 11 | simandl | #testing if the igw has not a route in global routing table |
235 | 7 | simandl | if [ "$sl_igwgt x" = " x" ] |
236 | | | then |
237 | 11 | simandl | if [ $scm_info -gt 1 ]; then echo "Route not found for igw $sl_igwn" ; fi |
238 | | | sl_myigw=`cat $sl_sedlocnf | $sl_grepcmd "^myigw" | $sl_grepcmd $sl_igwn | $sl_awkcmd '{print $3}'` |
239 | | | #testing if the igw without route is in local config |
240 | | | #if not we go to flush its table and set flag to redo rules |
241 | | | if [ "$sl_myigw x" = " x" ] |
242 | | | then |
243 | | | #getting num of routes of igw |
244 | 13 | simandl | sl_igwnr=`$sl_ipcmd ro ls ta all | $sl_grepcmd -c "table ${sl_igwn} "` |
245 | 11 | simandl | if [ "$sl_igwnr x" = "0 x" ] |
246 | | | then |
247 | 12 | simandl | if [ $scm_info -gt 1 ]; then echo "Table $sl_igwn is already empty - no action taken" ; fi |
248 | 11 | simandl | else |
249 | 12 | simandl | if [ $scm_info -gt 1 ]; then echo "Table $sl_igwn will be flushed and rules rearranged" ; fi |
250 | 11 | simandl | $sl_ipcmd ro fl ta $sl_igwn |
251 | | | #because this igw dissapeared we set a flag for rules recreation |
252 | | | sl_diffigw=1 |
253 | | | fi |
254 | | | else |
255 | 13 | simandl | if [ $scm_info -gt 1 ]; then echo "Igw $sl_igwn found in local config - leaving table as is" ; fi |
256 | 11 | simandl | fi |
257 | 7 | simandl | else |
258 | | | sl_tbl=`$sl_ipcmd ro ls ta $sl_igwn` |
259 | 12 | simandl | #if the table is empty we fill it and we set flag for rules recreation |
260 | | | if [ "$sl_tbl x" = " x" ] |
261 | 7 | simandl | then |
262 | 12 | simandl | sl_diffigw=1 |
263 | | | $sl_ipcmd ro add 0.0.0.0/1 via $sl_igwgt ta $sl_igwn |
264 | | | $sl_ipcmd ro add 128.0.0.0/1 via $sl_igwgt ta $sl_igwn |
265 | | | if [ "$sl_igwtype x" = "myigw x" ] |
266 | | | then |
267 | | | if [ $scm_info -gt 1 ]; then echo "Table $sl_igwn filled with default myigw $sl_igwgt" ; fi |
268 | | | else |
269 | | | if [ $scm_info -gt 1 ]; then echo "Table $sl_igwn filled with default gw $sl_igwgt" ; fi |
270 | | | fi |
271 | | | #the table is not empty so we check if routes are the same |
272 | 9 | simandl | else |
273 | 12 | simandl | #picking default gateway from the table |
274 | | | sl_igwogt=`$sl_ipcmd ro ls ta $sl_igwn | $sl_awkcmd '{print $3}' | uniq` |
275 | | | #checking if the old default is same as the new one |
276 | | | if [ "$sl_igwogt x" = "$sl_igwgt x" ] |
277 | | | then |
278 | | | if [ $scm_info -gt 1 ]; then echo "Table $sl_igwn will not be changed and default is $sl_igwgt" ; fi |
279 | | | else |
280 | | | #the new default is different so we will flush the table, fill new default |
281 | 15 | simandl | if [ $scm_info -gt 1 ]; then echo "Table $sl_igwn will be rewritten to default $sl_igwgt" ; fi |
282 | 12 | simandl | #flushing old default route in the table |
283 | | | $sl_ipcmd ro fl ta $sl_igwn |
284 | | | #filling new default |
285 | | | $sl_ipcmd ro add 0.0.0.0/1 via $sl_igwgt ta $sl_igwn |
286 | | | $sl_ipcmd ro add 128.0.0.0/1 via $sl_igwgt ta $sl_igwn |
287 | | | fi |
288 | 9 | simandl | fi |
289 | 7 | simandl | fi |
290 | | | done |
291 | | | |
292 | | | } # s_filltables |
293 | 8 | simandl | |
294 | 7 | simandl | ###################################################################### |
295 | 10 | simandl | # filling rttab with tables from config |
296 | | | # only new tables are created with a new uniq number that is not important because |
297 | | | # usually we handle tables just by their names |
298 | | | # this routine acts only when a new iGW appears - only adding a table is supported |
299 | | | # no deleting is implemented because it seems to be not necessary to delete an old table |
300 | | | # because there is space enough and after reboot table will not be created |
301 | 7 | simandl | s_mktables() |
302 | | | { |
303 | 10 | simandl | if [ $scm_info -gt 0 ]; then echo "Checking tables" ; fi |
304 | | | |
305 | 9 | simandl | sl_igws=`$sl_catcmd $sl_sedlocache/$sl_nmcnf | $sl_grepcmd -E "^igw|^myigw" | $sl_awkcmd '{print $3}'` |
306 | 7 | simandl | for sl_igw in $sl_igws |
307 | | | do |
308 | | | sl_igwrttb=`$sl_catcmd $sl_rttab | $sl_awkcmd '{print $2}' | $sl_grepcmd $sl_igw ` |
309 | | | if [ "$sl_igwrttb x" = " x" ] |
310 | | | then |
311 | | | if [ $scm_info -gt 1 ]; then echo "Creating table for $sl_igw" ; fi |
312 | | | sl_cnt="$sl_rtnmax" |
313 | | | sl_ok="no" |
314 | | | until [ "$sl_cnt" -eq "$sl_rtnmin" ] || [ "$sl_ok" = "yes" ] |
315 | | | do |
316 | | | #space is used to recognized two and three digit numbers |
317 | | | sl_igwrttb=`cat $sl_rttab | awk '{print $1" "}' | grep "$sl_cnt " ` |
318 | | | if [ "$sl_igwrttb x" = " x" ] |
319 | | | then |
320 | | | sl_ok="yes" |
321 | | | echo "$sl_cnt $sl_igw" >> $sl_rttab |
322 | | | fi |
323 | | | sl_cnt=$(($sl_cnt - 1 )) |
324 | 11 | simandl | done |
325 | | | # a new table was created so we should set a flag for rules creation |
326 | | | sl_difftbl=1 |
327 | 7 | simandl | else |
328 | | | if [ $scm_info -gt 1 ]; then echo "Table found for $sl_igw no action taken" ; fi |
329 | | | fi |
330 | 9 | simandl | done |
331 | 7 | simandl | } # s_mktables |
332 | 8 | simandl | |
333 | 7 | simandl | ###################################################################### |
334 | | | s_getcfg() |
335 | | | { |
336 | | | if [ $scm_info -gt 0 ]; then echo "Getting config" ; fi |
337 | | | if [ $scm_info -gt 1 ]; then echo "Using main config $sl_murlcfg" ; fi |
338 | | | if [ $scm_info -gt 1 ]; then echo "Using local config $sl_sedlocnf" ; fi |
339 | | | |
340 | 10 | simandl | rm -f "$sl_sedlocache/$sl_nmcnf.main.tmp" |
341 | 7 | simandl | |
342 | 10 | simandl | $sl_wgetcmd -q -t 3 $sl_murlcfg -O "$sl_sedlocache/$sl_nmcnf.main.tmp" |
343 | | | |
344 | 7 | simandl | if [ -s $sl_sedlocache/$sl_nmcnf.main.tmp ] |
345 | | | then |
346 | | | date > $sl_sedlocache/last_getcnf.txt |
347 | | | cp $sl_sedlocache/$sl_nmcnf.main.tmp $sl_sedlocache/$sl_nmcnf.main |
348 | 10 | simandl | if [ $scm_info -gt 1 ]; then echo "Main config downloaded and accepted" ; fi |
349 | 7 | simandl | else |
350 | 8 | simandl | if [ $scm_info -gt 1 ]; then echo "Main config not downloaded - cached config will be used" ; fi |
351 | | | echo -n "Main config not downloaded " > $sl_sedlocache/last_getcnf.txt |
352 | 7 | simandl | date >> $sl_sedlocache/last_getcnf.txt |
353 | | | fi |
354 | | | |
355 | 10 | simandl | # before generating a new cached config we store the old one for |
356 | | | # comparison with the new one |
357 | | | rm -f "$sl_sedlocache/$sl_nmcnf.old" |
358 | | | if [ -s $sl_sedlocache/$sl_nmcnf ] |
359 | | | then |
360 | | | cp $sl_sedlocache/$sl_nmcnf $sl_sedlocache/$sl_nmcnf.old |
361 | | | else |
362 | | | touch $sl_sedlocache/$sl_nmcnf.old |
363 | | | fi |
364 | | | |
365 | 7 | simandl | # preparing cached config from local and main |
366 | 22 | simandl | # the local config should be processed as the first to have |
367 | 7 | simandl | # higher priority for rules from local config |
368 | | | echo "# generated file" > $sl_sedlocache/$sl_nmcnf |
369 | 22 | simandl | for sl_file in `ls $sl_sedlocnf ; ls $sl_sedlocache/$sl_nmcnf.main ` |
370 | 7 | simandl | do |
371 | | | cat $sl_file | grep "^mcnf" | $sl_trcmd ';' '#' | awk '{print $1"\t"$2}' >> $sl_sedlocache/$sl_nmcnf |
372 | | | cat $sl_file | grep "^igw" | $sl_trcmd ';' '#' | awk '{print $1"\t"$2"\t"$3}' >> $sl_sedlocache/$sl_nmcnf |
373 | | | cat $sl_file | grep "^ip" | $sl_trcmd ';' '#' | awk '{print $1"\t"$2"\t"$3"\t"$4"\t"$5"\t"$6}' >> $sl_sedlocache/$sl_nmcnf |
374 | | | done |
375 | 8 | simandl | |
376 | | | #local gateways taken from local config |
377 | | | cat $sl_sedlocnf | grep "^myigw" | $sl_trcmd ';' '#' | awk '{print $1"\t"$2"\t"$3}' >> $sl_sedlocache/$sl_nmcnf |
378 | | | |
379 | 7 | simandl | #cat $sl_sedlocache/$sl_nmcnf | sort | uniq > $sl_sedlocache/$sl_nmcnf.uniq |
380 | | | #mv $sl_sedlocache/$sl_nmcnf.uniq $sl_sedlocache/$sl_nmcnf |
381 | | | |
382 | 10 | simandl | sl_diffcfg=`diff $sl_sedlocache/$sl_nmcnf $sl_sedlocache/$sl_nmcnf.old | grep -c .` |
383 | | | if [ $sl_diffcfg -gt 0 ] |
384 | | | then |
385 | | | if [ $scm_info -gt 0 ]; then echo "New config is different than the old one" ; fi |
386 | | | else |
387 | | | if [ $scm_info -gt 0 ]; then echo "New config is the same as the old one" ; fi |
388 | | | fi |
389 | | | |
390 | 11 | simandl | # showing number of rules in config and system |
391 | 10 | simandl | sl_numru=`ip ru ls | grep -c lookup` |
392 | | | sl_numip=`grep -c ^ip $sl_sedlocache/$sl_nmcnf` |
393 | | | sl_numru=$(($sl_numru - 3 )) |
394 | | | if [ $sl_numip -gt $sl_numru ] |
395 | | | then |
396 | | | if [ $scm_info -gt 0 ]; then echo "We have less rules ($sl_numru) than new config has ips ($sl_numip)" ; fi |
397 | 11 | simandl | # sl_diffcfg="1" |
398 | 10 | simandl | else |
399 | | | if [ $scm_info -gt 0 ]; then echo "We have $sl_numru rules and $sl_numip ips" ; fi |
400 | | | fi |
401 | 7 | simandl | } |
402 | 8 | simandl | |
403 | 7 | simandl | ###################################################################### |
404 | | | s_version() |
405 | | | { |
406 | | | echo sedlo $sl_version |
407 | | | } # s_version |
408 | 8 | simandl | |
409 | 7 | simandl | ###################################################################### |
410 | | | s_report() |
411 | | | { |
412 | 9 | simandl | echo Content-type: text/html |
413 | | | echo |
414 | | | echo "Sedlo na routeru `hostname`" |
415 | | | echo "<pre>" |
416 | 7 | simandl | echo "##### SEDLO #####" |
417 | | | echo "date : `date`" |
418 | | | echo "version : $sl_version" |
419 | | | echo "local_config : $sl_sedlocnf" |
420 | 9 | simandl | echo "main_config : <a href=\"$sl_murlcfg\">$sl_murlcfg</a>" |
421 | 7 | simandl | echo "last update : `cat $sl_sedlocache/last_getcnf.txt`" |
422 | | | echo "##### TABLES #####" |
423 | | | cat $sl_rttab |
424 | 9 | simandl | echo ; echo "##### DEFAULT ROUTES IN TABLES #####" |
425 | | | $sl_ipcmd ro ls ta all | $sl_grepcmd table | $sl_grepcmd -v local | $sl_trcmd " " "\t" |
426 | | | echo ; echo "##### RULES FOR IPS #####" |
427 | | | $sl_ipcmd ru ls | $sl_trcmd " " "\t" |
428 | | | echo "</pre>" |
429 | 7 | simandl | } # s_report |
430 | 8 | simandl | |
431 | 7 | simandl | ###################################################################### |
432 | | | s_help() |
433 | | | { |
434 | | | echo Pouziti: sedlo [param] |
435 | | | echo param: |
436 | | | echo -V vypise verzi |
437 | | | echo -help vypise napovedu |
438 | | | echo -v malo upovidany |
439 | | | echo -vv hodne upovidany |
440 | | | echo -nogetcfg zajisti ze se nedude znovu nacitat konfigurace a pouzije se predchozi z cache |
441 | | | echo -report vypise prehled pravidel a tabulek |
442 | | | echo -flru odstrani vsechny pravidla |
443 | 11 | simandl | echo -force bezpodminecne znovu obnovi vsechny pravidla |
444 | 7 | simandl | } # s_help |
445 | 8 | simandl | |
446 | 7 | simandl | ###################################################################### |
447 | | | ###################################################################### |
448 | | | |
449 | | | sl_unknown="" |
450 | | | scm_nogetcfg=0 |
451 | | | scm_flru=0 |
452 | | | scm_info=0 |
453 | 11 | simandl | scm_force=0 |
454 | | | sl_diffigw=0 |
455 | | | sl_difftbl=0 |
456 | 7 | simandl | |
457 | | | # parsing input parameters |
458 | | | while [ "a$1" != "a" ] |
459 | | | do |
460 | | | case $1 in |
461 | | | -V) |
462 | | | s_version |
463 | | | exit 0 |
464 | | | ;; |
465 | | | -h) |
466 | | | s_help |
467 | | | exit 0 |
468 | | | ;; |
469 | | | -report) |
470 | | | s_report |
471 | | | exit 0 |
472 | | | ;; |
473 | | | -flru) |
474 | | | scm_flru=1 |
475 | | | shift |
476 | | | ;; |
477 | 11 | simandl | -force) |
478 | | | scm_force=1 |
479 | | | shift |
480 | | | ;; |
481 | 7 | simandl | -help) |
482 | | | s_help |
483 | | | exit 0 |
484 | | | ;; |
485 | | | -nogetcfg) |
486 | | | scm_nogetcfg=1 |
487 | | | shift |
488 | | | ;; |
489 | | | -v) |
490 | | | scm_info=1 |
491 | | | shift |
492 | | | ;; |
493 | | | -vv) |
494 | | | scm_info=2 |
495 | | | shift |
496 | | | ;; |
497 | | | *) |
498 | | | sl_unknown="$sl_unknown$1 " |
499 | | | shift |
500 | | | esac |
501 | | | done |
502 | | | |
503 | | | # printing the list of bad parameters (if there are some) |
504 | | | if [ "a$sl_unknown" != "a" ] |
505 | | | then |
506 | | | echo "$slm_unknown $sl_unknown" |
507 | | | s_help |
508 | | | exit 0 |
509 | | | fi |
510 | | | |
511 | | | if [ $scm_flru -eq 1 ] |
512 | | | then |
513 | 16 | simandl | s_flruall |
514 | 7 | simandl | exit 0 |
515 | | | fi |
516 | | | |
517 | | | if [ $scm_nogetcfg -eq 0 ] |
518 | | | then |
519 | | | s_getcfg |
520 | | | fi |
521 | | | |
522 | | | s_mktables |
523 | | | s_filltables |
524 | 15 | simandl | #toto je pro ladici ucely |
525 | 11 | simandl | #echo $sl_difftbl |
526 | | | #echo $sl_diffcfg |
527 | | | #echo $sl_diffigw |
528 | | | #echo $scm_force |
529 | 13 | simandl | #exit 0 |
530 | 15 | simandl | |
531 | 11 | simandl | #flushing and filling rules is done only when |
532 | | | #new table is created |
533 | | | #config is changed |
534 | | | #some igw dissapears or appears |
535 | | | #-force command line parameter was used |
536 | | | if [ $sl_difftbl -gt 0 ] || [ $sl_diffcfg -gt 0 ] || [ $sl_diffigw -gt 0 ] || [ $scm_force -gt 0 ] |
537 | 10 | simandl | then |
538 | | | s_fillrules |
539 | | | fi |
540 | | | |
541 | 16 | simandl | |
542 | 7 | simandl | exit 0 |