3
# This is an example of a Mandos client network hook. This hook
4
# brings up a bridge interface as specified in a separate
5
# configuration file. To be used, this file and any needed
6
# configuration file(s) should be copied into the
7
# /etc/mandos/network-hooks.d directory.
9
# Copying and distribution of this file, with or without modification,
10
# are permitted in any medium without royalty provided the copyright
11
# notice and this notice are preserved. This file is offered as-is,
12
# without any warranty.
16
CONFIG="$MANDOSNETHOOKDIR/bridge.conf"
19
grep -liFe "$1" /sys/class/net/*/address | sed -e 's,.*/\([^/]*\)/[^/]*,\1,'
22
# Read config file, which must set "BRIDGE", "PORT_ADDRESSES", and
23
# optionally "IPADDRS" and "ROUTES".
24
if [ -e "$CONFIG" ]; then
28
if [ -z "$BRIDGE" -o -z "$PORT_ADDRESSES" ]; then
32
if [ -n "$DEVICE" -a "$DEVICE" != "$BRIDGE" ]; then
36
for b in /sbin/brctl /usr/sbin/brctl; do
45
"$brctl" addbr "$BRIDGE"
46
for address in $PORT_ADDRESSES; do
47
interface=`addrtoif "$address"`
48
"$brctl" addif "$BRIDGE" "$interface"
49
ip link set dev "$interface" up
51
ip link set dev "$BRIDGE" up
53
if [ -n "$IPADDRS" ]; then
54
for ipaddr in $IPADDRS; do
55
ip addr add "$ipaddr" dev "$BRIDGE"
58
if [ -n "$ROUTES" ]; then
59
for route in $ROUTES; do
60
ip route add "$route" dev "$BRIDGE"
65
ip link set dev "$BRIDGE" down
66
for address in $PORT_ADDRESSES; do
67
interface=`addrtoif "$address"`
68
ip link set dev "$interface" down
69
"$brctl" delif "$BRIDGE" "$interface"
71
"$brctl" delbr "$BRIDGE"
added
removed
network-hooks.d/bridge
