HardenedBSD/etc/rc.d/ipmon

#!/bin/sh
#
# $NetBSD: ipmon,v 1.9 2002/04/18 05:02:01 lukem Exp $
# $FreeBSD$
#

# PROVIDE: ipmon
# REQUIRE: mountcritlocal hostname sysctl cleanvar ipfilter
# BEFORE:  SERVERS
# KEYWORD: nojail

. /etc/rc.subr

name="ipmon"
rcvar=`set_rcvar`
command="/sbin/ipmon"
start_precmd="ipmon_precmd"

ipmon_precmd()
{
	# Continue only if ipfilter or ipnat is enabled and the
	# ipfilter module is loaded.
	#
	if ! checkyesno ipfilter_enable -o ! checkyesno ipnat_enable ; then
		err 1  "${name} requires either ipfilter or ipnat enabled"
	fi
	if ! sysctl net.inet.ipf.fr_pass >/dev/null 2>&1; then
		err 1 "ipfilter module is not loaded"
	fi
	return 0
}

load_rc_config $name
run_rc_command "$1"
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 09:16:14 +02:00			`#!/bin/sh`
			`#`
Restore NetBSD SCM ID. Submitted by: delphij@beastie.frontfree.net 2004-09-09 18:41:55 +02:00			`# $NetBSD: ipmon,v 1.9 2002/04/18 05:02:01 lukem Exp $`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-14 00:14:37 +02:00			`# $FreeBSD$`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 09:16:14 +02:00			`#`

			`# PROVIDE: ipmon`
apply patch so pr can be closed PR: misc/56715 Submitted by: grant@NetBSD.org Reviewed by: darrenr 2004-04-20 15:30:49 +02:00			`# REQUIRE: mountcritlocal hostname sysctl cleanvar ipfilter`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-14 00:14:37 +02:00			`# BEFORE: SERVERS`
Remove the requirement for the FreeBSD keyword as it no longer makes any sense. Discussed with: dougb, brooks MFC after: 3 days 2004-10-07 15:55:26 +02:00			`# KEYWORD: nojail`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 09:16:14 +02:00
			`. /etc/rc.subr`

			`name="ipmon"`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-14 00:14:37 +02:00			rcvar=`set_rcvar`
Luke Mewburn has indicated that they (NetBSD) are not interested in keeping the scripts under rc.d in sync with us. So, remove NetBSD specific stuff (which made our scripts more complicated than necessary). The NetBSD ident string will be left intact, both for history and also incase we wish to pull in future versions. 2004-01-17 11:40:45 +01:00			`command="/sbin/ipmon"`
			`start_precmd="ipmon_precmd"`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-14 00:14:37 +02:00
			`ipmon_precmd()`
			`{`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 10:20:47 +02:00			`# Continue only if ipfilter or ipnat is enabled and the`
			`# ipfilter module is loaded.`
			`#`
			`if ! checkyesno ipfilter_enable -o ! checkyesno ipnat_enable ; then`
			`err 1 "${name} requires either ipfilter or ipnat enabled"`
			`fi`
Fix style bugs: * Space -> tabs conversion. * Removed blanks before semicolon in "if ... ; then". * Proper indentation of misindented lines. * Put a full stop after some comments. * Removed whitespace at end of line. Approved by: silence from gordon 2002-10-12 12:31:31 +02:00			`if ! sysctl net.inet.ipf.fr_pass >/dev/null 2>&1; then`
Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc. o group them together so they run one right after another o use the NetBSD supplied ipfs script instead of tacking it on to the end of ipnat o Load the ipl module in ipnat and ipfilter, if it's not already loaded o In ipmon and ipnat show a warning if neither ipfilter nor ipnat is enabled or the ipl module is not loaded, and exit Approved by: markm (mentor) (implicit) Tested by: leafy <leafy@leafy.idv.tw> 2003-04-24 10:20:47 +02:00			`err 1 "ipfilter module is not loaded"`
Fix style bugs: * Space -> tabs conversion. * Removed blanks before semicolon in "if ... ; then". * Proper indentation of misindented lines. * Put a full stop after some comments. * Removed whitespace at end of line. Approved by: silence from gordon 2002-10-12 12:31:31 +02:00			`fi`
Merge in all the changes that Mike Makonnen has been maintaining for a while. This is only the script pieces, the glue for the build comes next. Submitted by: Mike Makonnen <makonnen@pacbell.net> Reviewed by: silence on -current and -hackers Prodded by: rwatson 2002-06-14 00:14:37 +02:00			`return 0`
			`}`
Import the NetBSD 1.5 RC system. Note that `rc' and `rc.shutdown' could not be imported because we already have files with those names. 2001-06-16 09:16:14 +02:00
			`load_rc_config $name`
			`run_rc_command "$1"`