Changeset 3a5184c in lab.git for iptables

Timestamp:

Jul 7, 2009 11:48:58 PM (15 years ago)

Author:

mitty <mitty@…>

Branches:

master, trunk

Children:

b9ae53a

Parents:

7c270d4

Message:

• FIX: now the script needs 2nd argument to fix IP address of LAN device
  • LAN device can be down before the this script is invoked

git-svn-id: ​https://lab.mitty.jp/svn/lab/trunk@19 7d2118f6-f56c-43e7-95a2-4bb3031d96e7

File:

• iptables/setlan2wan.sh (modified) (3 diffs)

iptables/setlan2wan.sh

@@ -13 +13 @@
 #        up, post-up, pre-down and post-down phases.
 
-LANIF="${1:?"usage: $0 <LAN_device> "}"
-
-LANIP=`/sbin/ip addr show dev ${LANIF} | grep -w inet | tr -s ' ' | cut -d ' ' -f 3 | cut -d / -f 1`
-LANMASK=`/sbin/ip route show dev ${LANIF} | grep -w ${LANIP} | tr -s ' ' | cut -d ' ' -f 1`
+LANIF="${1:?"usage: $0 <LAN_device> <IPADDR> "}"
+LANIP="${2:?"usage: $0 <LAN_device> <IPADDR> "}"
 
 WANIP=`/sbin/ip addr show dev ${IFACE} | grep -w inet | tr -s ' ' | cut -d ' ' -f 3 | cut -d / -f 1`
@@ -22 +20 @@
 if [ "${PHASE}" = "pre-down" ]; then
     # delete rule and exit
-    /sbin/iptables -t nat -D PREROUTING -i ${LANIF} -s ${LANMASK} -d ${WANIP} -j DNAT --to-destination ${LANIP}
+    /sbin/iptables -t nat -D PREROUTING -i ${LANIF} -d ${WANIP} -j DNAT --to-destination ${LANIP}
     echo "remove rule for access to WAN device on router node from LAN clients"
     exit
@@ -32 +30 @@
 sleep 60
 
-/sbin/iptables -t nat -A PREROUTING -i ${LANIF} -s ${LANMASK} -d ${WANIP} -j DNAT --to-destination ${LANIP}
+/sbin/iptables -t nat -A PREROUTING -i ${LANIF} -d ${WANIP} -j DNAT --to-destination ${LANIP}
 echo "set rule for access to WAN device on router node from LAN clients"