2010-09-06 17:07:42 +02:00
|
|
|
#!/bin/bash
|
|
|
|
|
#============================================================================
|
|
|
|
|
# /etc/xen/vif-route-qubes
|
|
|
|
|
#
|
|
|
|
|
# Script for configuring a vif in routed mode.
|
|
|
|
|
# The hotplugging system will call this script if it is specified either in
|
|
|
|
|
# the device configuration given to Xend, or the default Xend configuration
|
|
|
|
|
# in /etc/xen/xend-config.sxp. If the script is specified in neither of those
|
|
|
|
|
# places, then vif-bridge is the default.
|
|
|
|
|
#
|
|
|
|
|
# Usage:
|
|
|
|
|
# vif-route (add|remove|online|offline)
|
|
|
|
|
#
|
|
|
|
|
# Environment vars:
|
|
|
|
|
# vif vif interface name (required).
|
|
|
|
|
# XENBUS_PATH path to this device's details in the XenStore (required).
|
|
|
|
|
#
|
|
|
|
|
# Read from the store:
|
|
|
|
|
# ip list of IP networks for the vif, space-separated (default given in
|
|
|
|
|
# this script).
|
|
|
|
|
#============================================================================
|
|
|
|
|
|
|
|
|
|
dir=$(dirname "$0")
|
|
|
|
|
. "$dir/vif-common.sh"
|
|
|
|
|
|
|
|
|
|
#main_ip=$(dom0_ip)
|
|
|
|
|
|
|
|
|
|
case "$command" in
|
|
|
|
|
online)
|
|
|
|
|
ifconfig ${vif} up
|
|
|
|
|
echo 1 >/proc/sys/net/ipv4/conf/${vif}/proxy_arp
|
2012-03-03 01:26:06 +01:00
|
|
|
ipcmd='replace'
|
2010-09-06 17:07:42 +02:00
|
|
|
iptables_cmd='-I FORWARD 1'
|
|
|
|
|
cmdprefix=''
|
|
|
|
|
;;
|
|
|
|
|
offline)
|
|
|
|
|
do_without_error ifdown ${vif}
|
|
|
|
|
ipcmd='del'
|
|
|
|
|
iptables_cmd='-D FORWARD'
|
|
|
|
|
cmdprefix='do_without_error'
|
|
|
|
|
;;
|
|
|
|
|
esac
|
|
|
|
|
|
|
|
|
|
if [ "${ip}" ] ; then
|
|
|
|
|
# If we've been given a list of IP addresses, then add routes from dom0 to
|
|
|
|
|
# the guest using those addresses.
|
|
|
|
|
for addr in ${ip} ; do
|
2012-02-24 17:10:16 +01:00
|
|
|
${cmdprefix} ip route ${ipcmd} ${addr} dev ${vif} || true
|
2010-09-06 17:07:42 +02:00
|
|
|
done
|
|
|
|
|
echo ${cmdprefix} iptables $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
|
|
|
|
|
${cmdprefix} iptables $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
log debug "Successful vif-route-qubes $command for $vif."
|
|
|
|
|
if [ "$command" = "online" ]
|
|
|
|
|
then
|
|
|
|
|
success
|
|
|
|
|
fi
|
