blob: eddcae97ec3d3d2392a5be9e4b4650db283e83d7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
#!/sbin/openrc-run
# Copyright 1999-2017 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
CONNTRACKD_BIN="/usr/sbin/conntrackd"
CONNTRACKD_CFG=${CONNTRACKD_CFG:-/etc/conntrackd/conntrackd.conf}
CONNTRACKD_LOCK=${CONNTRACKD_LOCK:-/run/lock/conntrack.lock}
depend() {
use logger
need net
}
checkconfig() {
# check for netfilter conntrack kernel support
local nf_ct_available=0
for k in net.netfilter.nf_conntrack_max \
net.ipv4.netfilter.ip_conntrack_max \
net.nf_conntrack_max; do
if sysctl ${k} >/dev/null 2>&1; then
nf_ct_available=1 # sysctl key found
break
fi
done
if [ ${nf_ct_available} -eq 0 ]; then
eerror
eerror "Your kernel is missing netfilter conntrack support!"
eerror "Make sure your kernel was compiled with netfilter conntrack support."
eerror
eerror "If it was compiled as a module you need to ensure the module is being"
eerror "loaded before starting conntrackd."
eerror "Either add an entry to /etc/modules.autoload/[...] (for baselayout-1)"
eerror "or /etc/conf.d/modules (for baselayout-2/OpenRC) or load the module"
eerror "by hand like this, depending on your kernel version:"
eerror
eerror " modprobe nf_conntrack # (for newer kernels)"
eerror " modprobe ip_conntrack # (for older kernels)"
eerror
return 1
fi
# check for config file
if [ ! -e "${CONNTRACKD_CFG}" ]; then
eerror
eerror "The conntrackd config file (${CONNTRACKD_CFG})"
eerror "is missing!"
eerror
return 1
fi
# check for leftover lockfile
if [ -f "${CONNTRACKD_LOCK}" ]; then
ewarn
ewarn "The conntrackd lockfile (${CONNTRACKD_LOCK})"
ewarn "exists although the service is not marked as started."
ewarn "Will remove the lockfile and start the service in 10s"
ewarn "if not interrupted..."
ewarn
sleep 10
if ! rm -f "${CONNTRACKD_LOCK}"; then
eerror "Failed to remove the conntrackd lockfile (${CONNTRACKD_LOCK})"
return 1
fi
fi
}
start() {
checkconfig || return 1
ebegin "Starting conntrackd"
start-stop-daemon --start --exec "${CONNTRACKD_BIN}" \
-- -d -C "${CONNTRACKD_CFG}" ${CONNTRACKD_OPTS}
eend $?
}
stop() {
ebegin "Stopping conntrackd"
start-stop-daemon --stop --exec "${CONNTRACKD_BIN}"
eend $?
}
|