ipnat revision 1.11
11.1Slukem#!/bin/sh
21.1Slukem#
31.11Smycroft# $NetBSD: ipnat,v 1.11 2004/08/13 18:08:03 mycroft Exp $
41.1Slukem#
51.1Slukem
61.1Slukem# PROVIDE: ipnat
71.5Slukem# REQUIRE: ipfilter mountcritremote
81.10Smrg# BEFORE:  SERVERS
91.1Slukem
101.11Smycroft$_rc_subr_loaded . /etc/rc.subr
111.1Slukem
121.1Slukemname="ipnat"
131.6Slukemrcvar=$name
141.1Slukemconfig="/etc/ipnat.conf"
151.1Slukemstart_cmd="ipnat_start"
161.1Slukemstop_cmd="/usr/sbin/ipnat -F -C"
171.9Sgrantreload_cmd="/usr/sbin/ipnat -C -f ${config}"
181.9Sgrantrestart_cmd="/usr/sbin/ipnat -F -C -f ${config}"
191.3Slukemextra_commands="reload"
201.3Slukem
211.1Slukemipnat_start()
221.1Slukem{
231.1Slukem	if [ ! -f ${config} ]; then
241.1Slukem		return 0
251.8Smartti	fi
261.8Smartti	if [ "`/sbin/sysctl -n net.inet.ip.forwarding`" = "0" ]; then
271.8Smartti		logger -s -p daemon.warning -t ipnat \
281.8Smartti			"WARNING: net.inet.ip.forwarding is 0"
291.1Slukem	fi
301.1Slukem	if ! checkyesno ipfilter || [ ! -f /etc/ipf.conf ]; then
311.2Sthorpej		echo "Enabling ipfilter for NAT."
321.1Slukem		/sbin/ipf -E -Fa
331.1Slukem	fi
341.2Sthorpej	echo -n "Installing NAT rules ... "
351.1Slukem	/usr/sbin/ipnat -F -f ${config}
361.1Slukem}
371.1Slukem
381.4Slukemload_rc_config $name
391.3Slukemrun_rc_command "$1"
40