stf (198190) | stf (208060) |
---|---|
1#!/bin/sh | 1#!/bin/sh |
2# $FreeBSD: head/etc/rc.d/stf 198190 2009-10-17 21:09:15Z dougb $ | 2# $FreeBSD: head/etc/rc.d/stf 208060 2010-05-14 04:53:57Z dougb $ |
3# 4 5# PROVIDE: stf 6# REQUIRE: netif 7# KEYWORD: nojail 8 9. /etc/rc.subr 10. /etc/network.subr --- 33 unchanged lines hidden (view full) --- 44 'fe80::\(.*\)%\(.*\)'` 45 case ${stf_interface_ipv6_ifid} in 46 '') 47 stf_interface_ipv6_ifid=0:0:0:1 48 ;; 49 esac 50 ;; 51 esac | 3# 4 5# PROVIDE: stf 6# REQUIRE: netif 7# KEYWORD: nojail 8 9. /etc/rc.subr 10. /etc/network.subr --- 33 unchanged lines hidden (view full) --- 44 'fe80::\(.*\)%\(.*\)'` 45 case ${stf_interface_ipv6_ifid} in 46 '') 47 stf_interface_ipv6_ifid=0:0:0:1 48 ;; 49 esac 50 ;; 51 esac |
52 echo "Configuring 6to4 tunnel interface: stf0." | 52 echo "Configuring 6to4 tunnel interface: stf0." |
53 ifconfig stf0 create >/dev/null 2>&1 54 ifconfig stf0 inet6 2002:${ipv4_in_hexformat}:${stf_interface_ipv6_slaid:-0}:${stf_interface_ipv6_ifid} \ 55 prefixlen ${stf_prefixlen} 56 check_startmsgs && /sbin/ifconfig stf0 57 58 # disallow packets to malicious 6to4 prefix 59 route add -inet6 2002:e000:: -prefixlen 20 ::1 -reject 60 route add -inet6 2002:7f00:: -prefixlen 24 ::1 -reject 61 route add -inet6 2002:0000:: -prefixlen 24 ::1 -reject 62 route add -inet6 2002:ff00:: -prefixlen 24 ::1 -reject 63 ;; 64 esac 65} 66 67stf_down() 68{ | 53 ifconfig stf0 create >/dev/null 2>&1 54 ifconfig stf0 inet6 2002:${ipv4_in_hexformat}:${stf_interface_ipv6_slaid:-0}:${stf_interface_ipv6_ifid} \ 55 prefixlen ${stf_prefixlen} 56 check_startmsgs && /sbin/ifconfig stf0 57 58 # disallow packets to malicious 6to4 prefix 59 route add -inet6 2002:e000:: -prefixlen 20 ::1 -reject 60 route add -inet6 2002:7f00:: -prefixlen 24 ::1 -reject 61 route add -inet6 2002:0000:: -prefixlen 24 ::1 -reject 62 route add -inet6 2002:ff00:: -prefixlen 24 ::1 -reject 63 ;; 64 esac 65} 66 67stf_down() 68{ |
69 echo "Removing 6to4 tunnel interface: stf0." | 69 echo "Removing 6to4 tunnel interface: stf0." |
70 ifconfig stf0 destroy 71 route delete -inet6 2002:e000:: -prefixlen 20 ::1 72 route delete -inet6 2002:7f00:: -prefixlen 24 ::1 73 route delete -inet6 2002:0000:: -prefixlen 24 ::1 74 route delete -inet6 2002:ff00:: -prefixlen 24 ::1 75} 76 77load_rc_config $name 78run_rc_command "$1" | 70 ifconfig stf0 destroy 71 route delete -inet6 2002:e000:: -prefixlen 20 ::1 72 route delete -inet6 2002:7f00:: -prefixlen 24 ::1 73 route delete -inet6 2002:0000:: -prefixlen 24 ::1 74 route delete -inet6 2002:ff00:: -prefixlen 24 ::1 75} 76 77load_rc_config $name 78run_rc_command "$1" |