package/network/services/dnsmasq/files/dnsmasq.init

   1 #!/bin/sh /etc/rc.common
   2 # Copyright (C) 2007-2012 OpenWrt.org
   3
   4 START=19
   5
   6 USE_PROCD=1
   7 PROG=/usr/sbin/dnsmasq
   8
   9 ADD_LOCAL_DOMAIN=1
  10 ADD_LOCAL_HOSTNAME=1
  11 ADD_WAN_HOSTNAME=0
  12
  13 BASECONFIGFILE="/var/etc/dnsmasq.conf"
  14 BASEHOSTFILE="/tmp/hosts/dhcp"
  15 BASETIMESTAMPFILE="/etc/dnsmasq.time"
  16 TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf"
  17 TIMEVALIDFILE="/var/state/dnsmasqsec"
  18 BASEDHCPSTAMPFILE="/var/run/dnsmasq"
  19
  20 xappend() {
  21         local value="$1"
  22
  23         echo "${value#--}" >> $CONFIGFILE_TMP
  24 }
  25
  26 hex_to_hostid() {
  27         local var="$1"
  28         local hex="${2#0x}" # strip optional "0x" prefix
  29
  30         if [ -n "${hex//[0-9a-fA-F]/}" ]; then
  31                 # is invalid hex literal
  32                 return 1
  33         fi
  34
  35         # convert into host id
  36         export "$var=$(
  37                 printf "%0x:%0x" \
  38                 $(((0x$hex >> 16) % 65536)) \
  39                 $(( 0x$hex        % 65536))
  40                 )"
  41
  42         return 0
  43 }
  44
  45 dhcp_calc() {
  46         local ip="$1"
  47         local res=0
  48
  49         while [ -n "$ip" ]; do
  50                 part="${ip%%.*}"
  51                 res="$(($res * 256))"
  52                 res="$(($res + $part))"
  53                 [ "${ip%.*}" != "$ip" ] && ip="${ip#*.}" || ip=
  54         done
  55         echo "$res"
  56 }
  57
  58 dhcp_check() {
  59         local ifname="$1"
  60         local stamp="${BASEDHCPSTAMPFILE_CFG}.${ifname}.dhcp"
  61         local rv=0
  62
  63         [ -s "$stamp" ] && return $(cat "$stamp")
  64
  65         # If there's no carrier yet, skip this interface.
  66         # The init script will be called again once the link is up
  67         case "$(devstatus "$ifname" | jsonfilter -e @.carrier)" in
  68                 false) return 1;;
  69         esac
  70
  71         udhcpc -n -q -s /bin/true -t 1 -i "$ifname" >&- && rv=1 || rv=0
  72
  73         [ $rv -eq 1 ] && \
  74                 logger -t dnsmasq \
  75                         "found already running DHCP-server on interface '$ifname'" \
  76                         "refusing to start, use 'option force 1' to override"
  77
  78         echo $rv > "$stamp"
  79         return $rv
  80 }
  81
  82 log_once() {
  83         pidof dnsmasq >/dev/null || \
  84                 logger -t dnsmasq "$@"
  85 }
  86
  87 append_bool() {
  88         local section="$1"
  89         local option="$2"
  90         local value="$3"
  91         local _loctmp
  92         config_get_bool _loctmp "$section" "$option" 0
  93         [ $_loctmp -gt 0 ] && xappend "$value"
  94 }
  95
  96 append_parm() {
  97         local section="$1"
  98         local option="$2"
  99         local switch="$3"
 100         local default="$4"
 101         local _loctmp
 102         config_get _loctmp "$section" "$option" "$default"
 103         [ -z "$_loctmp" ] && return 0
 104         xappend "$switch=$_loctmp"
 105 }
 106
 107 append_server() {
 108         xappend "--server=$1"
 109 }
 110
 111 append_address() {
 112         xappend "--address=$1"
 113 }
 114
 115 append_ipset() {
 116         xappend "--ipset=$1"
 117 }
 118
 119 append_interface() {
 120         network_get_device ifname "$1" || return
 121         xappend "--interface=$ifname"
 122 }
 123
 124 append_notinterface() {
 125         network_get_device ifname "$1" || return
 126         xappend "--except-interface=$ifname"
 127 }
 128
 129 append_addnhosts() {
 130         xappend "--addn-hosts=$1"
 131 }
 132
 133 append_bogusnxdomain() {
 134         xappend "--bogus-nxdomain=$1"
 135 }
 136
 137 append_pxe_service() {
 138         xappend "--pxe-service=$1"
 139 }
 140
 141 filter_dnsmasq() {
 142         local cfg="$1" func="$2" match_cfg="$3" found_cfg
 143
 144         # use entry when no instance entry set, or if it matches
 145         config_get found_cfg "$cfg" "instance"
 146         if [ -z "$found_cfg" -o "$found_cfg" = "$match_cfg" ]; then
 147                 $func $cfg
 148         fi
 149 }
 150
 151 dhcp_subscrid_add() {
 152         local cfg="$1"
 153
 154         config_get networkid "$cfg" networkid
 155         [ -n "$networkid" ] || return 0
 156
 157         config_get subscriberid "$cfg" subscriberid
 158         [ -n "$subscriberid" ] || return 0
 159
 160         xappend "--dhcp-subscrid=$networkid,$subscriberid"
 161
 162         config_get_bool force "$cfg" force 0
 163
 164         dhcp_option_add "$cfg" "$networkid" "$force"
 165 }
 166
 167 dhcp_remoteid_add() {
 168         local cfg="$1"
 169
 170         config_get networkid "$cfg" networkid
 171         [ -n "$networkid" ] || return 0
 172
 173         config_get remoteid "$cfg" remoteid
 174         [ -n "$remoteid" ] || return 0
 175
 176         xappend "--dhcp-remoteid=$networkid,$remoteid"
 177
 178         config_get_bool force "$cfg" force 0
 179
 180         dhcp_option_add "$cfg" "$networkid" "$force"
 181 }
 182
 183 dhcp_circuitid_add() {
 184         local cfg="$1"
 185
 186         config_get networkid "$cfg" networkid
 187         [ -n "$networkid" ] || return 0
 188
 189         config_get circuitid "$cfg" circuitid
 190         [ -n "$circuitid" ] || return 0
 191
 192         xappend "--dhcp-circuitid=$networkid,$circuitid"
 193
 194         config_get_bool force "$cfg" force 0
 195
 196         dhcp_option_add "$cfg" "$networkid" "$force"
 197 }
 198
 199 dhcp_userclass_add() {
 200         local cfg="$1"
 201
 202         config_get networkid "$cfg" networkid
 203         [ -n "$networkid" ] || return 0
 204
 205         config_get userclass "$cfg" userclass
 206         [ -n "$userclass" ] || return 0
 207
 208         xappend "--dhcp-userclass=$networkid,$userclass"
 209
 210         config_get_bool force "$cfg" force 0
 211
 212         dhcp_option_add "$cfg" "$networkid" "$force"
 213 }
 214
 215 dhcp_vendorclass_add() {
 216         local cfg="$1"
 217
 218         config_get networkid "$cfg" networkid
 219         [ -n "$networkid" ] || return 0
 220
 221         config_get vendorclass "$cfg" vendorclass
 222         [ -n "$vendorclass" ] || return 0
 223
 224         xappend "--dhcp-vendorclass=$networkid,$vendorclass"
 225
 226         config_get_bool force "$cfg" force 0
 227
 228         dhcp_option_add "$cfg" "$networkid" "$force"
 229 }
 230
 231 dhcp_match_add() {
 232         local cfg="$1"
 233
 234         config_get networkid "$cfg" networkid
 235         [ -n "$networkid" ] || return 0
 236
 237         config_get match "$cfg" match
 238         [ -n "$match" ] || return 0
 239
 240         xappend "--dhcp-match=$networkid,$match"
 241
 242         config_get_bool force "$cfg" force 0
 243
 244         dhcp_option_add "$cfg" "$networkid" "$force"
 245 }
 246
 247 dhcp_host_add() {
 248         local cfg="$1"
 249
 250         config_get_bool force "$cfg" force 0
 251
 252         config_get networkid "$cfg" networkid
 253         [ -n "$networkid" ] && dhcp_option_add "$cfg" "$networkid" "$force"
 254
 255         config_get_bool enable "$cfg" enable 1
 256         [ "$enable" = "0" ] && return 0
 257
 258         config_get name "$cfg" name
 259         config_get ip "$cfg" ip
 260         [ -n "$ip" -o -n "$name" ] || return 0
 261
 262         config_get_bool dns "$cfg" dns 0
 263         [ "$dns" = "1" -a -n "$ip" -a -n "$name" ] && {
 264                 echo "$ip $name${DOMAIN:+.$DOMAIN}" >> $HOSTFILE
 265         }
 266
 267         config_get mac "$cfg" mac
 268         if [ -n "$mac" ]; then
 269                 # --dhcp-host=00:20:e0:3b:13:af,192.168.0.199,lap
 270                 macs=""
 271                 for m in $mac; do append macs "$m" ","; done
 272         else
 273                 # --dhcp-host=lap,192.168.0.199
 274                 [ -n "$name" ] || return 0
 275                 macs="$name"
 276                 name=""
 277         fi
 278
 279         config_get tag "$cfg" tag
 280
 281         if [ "$DHCPv6CAPABLE" -eq 1 ]; then
 282                 config_get duid "$cfg" duid
 283                 config_get hostid "$cfg" hostid
 284                 if [ -n "$hostid" ]; then
 285                         hex_to_hostid hostid "$hostid"
 286                 fi
 287         fi
 288
 289         config_get_bool broadcast "$cfg" broadcast 0
 290         [ "$broadcast" = "0" ] && broadcast=
 291
 292         config_get leasetime "$cfg" leasetime
 293
 294         xappend "--dhcp-host=$macs${duid:+,id:$duid}${networkid:+,net:$networkid}${broadcast:+,set:needs-broadcast}${tag:+,set:$tag}${ip:+,$ip${hostid:+,[::$hostid]}}${name:+,$name}${leasetime:+,$leasetime}"
 295 }
 296
 297 dhcp_this_host_add() {
 298         # TODO: case-in do/not short-host or FQDN; UCI already intended ...
 299         local ifname="$1"
 300         local do_enable="$2"
 301         local routerstub routername ifdashname
 302
 303
 304         if [ "$do_enable" -gt 0 ] ; then
 305                 # All IP addresses discovered by dnsmasq will be labeled robustly (except fe80::)
 306                 ifdashname="${ifname//./-}"
 307                 routerstub="$( md5sum /etc/os-release )"
 308                 routerstub="router-${routerstub// */}"
 309                 routername="$( uci_get system @system[0] hostname $routerstub )"
 310
 311                 xappend "--interface-name=$ifdashname.$routername.$DOMAIN,$ifname"
 312                 xappend "--interface-name=$routername.$DOMAIN,$ifname"
 313                 xappend "--interface-name=$routername,$ifname"
 314         fi
 315 }
 316
 317 dhcp_tag_add() {
 318         local cfg="$1"
 319
 320         tag="$cfg"
 321
 322         [ -n "$tag" ] || return 0
 323
 324         config_get_bool force "$cfg" force 0
 325         [ "$force" = "0" ] && force=
 326
 327         config_get option "$cfg" dhcp_option
 328         for o in $option; do
 329                 xappend "--dhcp-option${force:+-force}=tag:$tag,$o"
 330         done
 331 }
 332
 333 dhcp_mac_add() {
 334         local cfg="$1"
 335
 336         config_get networkid "$cfg" networkid
 337         [ -n "$networkid" ] || return 0
 338
 339         config_get mac "$cfg" mac
 340         [ -n "$mac" ] || return 0
 341
 342         xappend "--dhcp-mac=$networkid,$mac"
 343
 344         dhcp_option_add "$cfg" "$networkid"
 345 }
 346
 347 dhcp_boot_add() {
 348         local cfg="$1"
 349
 350         config_get networkid "$cfg" networkid
 351
 352         config_get filename "$cfg" filename
 353         [ -n "$filename" ] || return 0
 354
 355         config_get servername "$cfg" servername
 356         config_get serveraddress "$cfg" serveraddress
 357
 358         [ -n "$serveraddress" -a ! -n "$servername" ] && return 0
 359
 360         xappend "--dhcp-boot=${networkid:+net:$networkid,}${filename}${servername:+,$servername}${serveraddress:+,$serveraddress}"
 361
 362         config_get_bool force "$cfg" force 0
 363
 364         dhcp_option_add "$cfg" "$networkid" "$force"
 365 }
 366
 367
 368 dhcp_add() {
 369         local cfg="$1"
 370         config_get net "$cfg" interface
 371         [ -n "$net" ] || return 0
 372
 373         config_get dhcpv4 "$cfg" dhcpv4
 374         [ "$dhcpv4" != "disabled" ] || return 0
 375
 376         config_get networkid "$cfg" networkid
 377         [ -n "$networkid" ] || networkid="$net"
 378
 379         network_get_subnet subnet "$net" || return 0
 380         network_get_device ifname "$net" || return 0
 381         network_get_protocol proto "$net" || return 0
 382
 383         [ "$cachelocal" = "0" ] && network_get_dnsserver dnsserver "$net" && {
 384                 DNS_SERVERS="$DNS_SERVERS $dnsserver"
 385         }
 386
 387         append_bool "$cfg" ignore "--no-dhcp-interface=$ifname" && {
 388                 # Many ISP do not have useful names for DHCP customers (your WAN).
 389                 dhcp_this_host_add $ifname $ADD_WAN_HOSTNAME
 390                 return 0
 391         }
 392
 393         # Do not support non-static interfaces for now
 394         [ static = "$proto" ] || return 0
 395
 396         # Override interface netmask with dhcp config if applicable
 397         config_get netmask "$cfg" netmask "${subnet##*/}"
 398
 399         #check for an already active dhcp server on the interface, unless 'force' is set
 400         config_get_bool force "$cfg" force 0
 401         [ $force -gt 0 ] || dhcp_check "$ifname" || return 0
 402
 403         config_get start "$cfg" start
 404         config_get limit "$cfg" limit
 405         config_get leasetime "$cfg" leasetime
 406         config_get options "$cfg" options
 407         config_get_bool dynamicdhcp "$cfg" dynamicdhcp 1
 408
 409         # Put the router host name on this DHCP served interface address(es)
 410         dhcp_this_host_add $ifname $ADD_LOCAL_HOSTNAME
 411
 412         leasetime="${leasetime:-12h}"
 413         start="$(dhcp_calc "${start:-100}")"
 414         limit="${limit:-150}"
 415         [ "$limit" -gt 0 ] && limit=$((limit-1))
 416         eval "$(ipcalc.sh "${subnet%%/*}" $netmask $start $limit)"
 417         if [ "$dynamicdhcp" = "0" ]; then END="static"; fi
 418         xappend "--dhcp-range=$networkid,$START,$END,$NETMASK,$leasetime${options:+ $options}"
 419
 420         dhcp_option_add "$cfg" "$networkid"
 421 }
 422
 423 dhcp_option_add() {
 424         local cfg="$1"
 425         local networkid="$2"
 426         local force="$3"
 427
 428         [ "$force" = "0" ] && force=
 429
 430         config_get dhcp_option "$cfg" dhcp_option
 431         for o in $dhcp_option; do
 432                 xappend "--dhcp-option${force:+-force}=${networkid:+$networkid,}$o"
 433         done
 434
 435 }
 436
 437 dhcp_domain_add() {
 438         local cfg="$1"
 439         local ip name names record
 440
 441         config_get names "$cfg" name "$2"
 442         [ -n "$names" ] || return 0
 443
 444         config_get ip "$cfg" ip "$3"
 445         [ -n "$ip" ] || return 0
 446
 447         for name in $names; do
 448                 record="${record:+$record }$name"
 449         done
 450
 451         echo "$ip $record" >> $HOSTFILE
 452 }
 453
 454 dhcp_srv_add() {
 455         local cfg="$1"
 456
 457         config_get srv "$cfg" srv
 458         [ -n "$srv" ] || return 0
 459
 460         config_get target "$cfg" target
 461         [ -n "$target" ] || return 0
 462
 463         config_get port "$cfg" port
 464         [ -n "$port" ] || return 0
 465
 466         config_get class "$cfg" class
 467         config_get weight "$cfg" weight
 468
 469         local service="$srv,$target,$port${class:+,$class${weight:+,$weight}}"
 470
 471         xappend "--srv-host=$service"
 472 }
 473
 474 dhcp_mx_add() {
 475         local cfg="$1"
 476         local domain relay pref
 477
 478         config_get domain "$cfg" domain
 479         [ -n "$domain" ] || return 0
 480
 481         config_get relay "$cfg" relay
 482         [ -n "$relay" ] || return 0
 483
 484         config_get pref "$cfg" pref 0
 485
 486         local service="$domain,$relay,$pref"
 487
 488         xappend "--mx-host=$service"
 489 }
 490
 491 dhcp_cname_add() {
 492         local cfg="$1"
 493         local cname target
 494
 495         config_get cname "$cfg" cname
 496         [ -n "$cname" ] || return 0
 497
 498         config_get target "$cfg" target
 499         [ -n "$target" ] || return 0
 500
 501         xappend "--cname=${cname},${target}"
 502 }
 503
 504 dhcp_hostrecord_add() {
 505         local cfg="$1"
 506         local names addresses record val
 507
 508         config_get names "$cfg" name "$2"
 509         if [ -z "$names" ]; then
 510                 return 0
 511         fi
 512
 513         config_get addresses "$cfg" ip "$3"
 514         if [ -z "$addresses" ]; then
 515                 return 0
 516         fi
 517
 518         for val in $names $addresses; do
 519                 record="${record:+$record,}$val"
 520         done
 521
 522         xappend "--host-record=$record"
 523 }
 524
 525 dhcp_relay_add() {
 526         local cfg="$1"
 527         local local_addr server_addr interface
 528
 529         config_get local_addr "$cfg" local_addr
 530         [ -n "$local_addr" ] || return 0
 531
 532         config_get server_addr "$cfg" server_addr
 533         [ -n "$server_addr" ] || return 0
 534
 535         config_get interface "$cfg" interface
 536         if [ -z "$interface" ]; then
 537                 xappend "--dhcp-relay=$local_addr,$server_addr"
 538         else
 539                 xappend "--dhcp-relay=$local_addr,$server_addr,$interface"
 540         fi
 541 }
 542
 543 dnsmasq_start()
 544 {
 545         local cfg="$1" disabled
 546
 547         config_get_bool disabled "$cfg" disabled 0
 548         [ "$disabled" -gt 0 ] && return 0
 549
 550         # reset list of DOMAINS and DNS servers (for each dnsmasq instance)
 551         DNS_SERVERS=""
 552         DOMAIN=""
 553         CONFIGFILE="${BASECONFIGFILE}.${cfg}"
 554         CONFIGFILE_TMP="${CONFIGFILE}.$$"
 555         HOSTFILE="${BASEHOSTFILE}.${cfg}"
 556         TIMESTAMPFILE="${BASETIMESTAMPFILE}.${cfg}"
 557         BASEDHCPSTAMPFILE_CFG="${BASEDHCPSTAMPFILE}.${cfg}"
 558
 559         # before we can call xappend
 560         mkdir -p /var/run/dnsmasq/
 561         mkdir -p $(dirname $CONFIGFILE)
 562         mkdir -p $(dirname $HOSTFILE)
 563         mkdir -p /var/lib/misc
 564         chown dnsmasq:dnsmasq /var/run/dnsmasq
 565
 566         [ -f "$TIMESTAMPFILE" ] && rm -f "$TIMESTAMPFILE"
 567
 568         echo "# auto-generated config file from /etc/config/dhcp" > $CONFIGFILE_TMP
 569         echo "# auto-generated config file from /etc/config/dhcp" > $HOSTFILE
 570
 571         # if we did this last, we could override auto-generated config
 572         [ -f /etc/dnsmasq.conf ] && {
 573                 xappend "--conf-file=/etc/dnsmasq.conf"
 574         }
 575
 576         $PROG --version | grep -osqE "^Compile time options:.* DHCPv6( |$)" && DHCPv6CAPABLE=1 || DHCPv6CAPABLE=0
 577
 578         append_bool "$cfg" authoritative "--dhcp-authoritative"
 579         append_bool "$cfg" nodaemon "--no-daemon"
 580         append_bool "$cfg" domainneeded "--domain-needed"
 581         append_bool "$cfg" filterwin2k "--filterwin2k"
 582         append_bool "$cfg" nohosts "--no-hosts"
 583         append_bool "$cfg" nonegcache "--no-negcache"
 584         append_bool "$cfg" strictorder "--strict-order"
 585         append_bool "$cfg" logqueries "--log-queries=extra"
 586         append_bool "$cfg" noresolv "--no-resolv"
 587         append_bool "$cfg" localise_queries "--localise-queries"
 588         append_bool "$cfg" readethers "--read-ethers"
 589         append_bool "$cfg" dbus "--enable-dbus"
 590         append_bool "$cfg" boguspriv "--bogus-priv"
 591         append_bool "$cfg" expandhosts "--expand-hosts"
 592         config_get tftp_root "$cfg" "tftp_root"
 593         [ -d "$tftp_root" ] && append_bool "$cfg" enable_tftp "--enable-tftp"
 594         append_bool "$cfg" tftp_no_fail "--tftp-no-fail"
 595         append_bool "$cfg" nonwildcard "--bind-dynamic"
 596         append_bool "$cfg" fqdn "--dhcp-fqdn"
 597         append_bool "$cfg" proxydnssec "--proxy-dnssec"
 598         append_bool "$cfg" localservice "--local-service"
 599         append_bool "$cfg" logdhcp "--log-dhcp"
 600         append_bool "$cfg" quietdhcp "--quiet-dhcp"
 601         append_bool "$cfg" sequential_ip "--dhcp-sequential-ip"
 602         append_bool "$cfg" allservers "--all-servers"
 603         append_bool "$cfg" noping "--no-ping"
 604
 605         append_parm "$cfg" logfacility "--log-facility"
 606         append_parm "$cfg" dhcpscript "--dhcp-script"
 607         append_parm "$cfg" cachesize "--cache-size"
 608         append_parm "$cfg" dnsforwardmax "--dns-forward-max"
 609         append_parm "$cfg" port "--port"
 610         append_parm "$cfg" ednspacket_max "--edns-packet-max"
 611         append_parm "$cfg" dhcpleasemax "--dhcp-lease-max"
 612         append_parm "$cfg" "queryport" "--query-port"
 613         append_parm "$cfg" "minport" "--min-port"
 614         append_parm "$cfg" "maxport" "--max-port"
 615         append_parm "$cfg" "domain" "--domain"
 616         append_parm "$cfg" "local" "--server"
 617         config_list_foreach "$cfg" "server" append_server
 618         config_list_foreach "$cfg" "address" append_address
 619         config_list_foreach "$cfg" "ipset" append_ipset
 620         config_list_foreach "$cfg" "interface" append_interface
 621         config_list_foreach "$cfg" "notinterface" append_notinterface
 622         config_list_foreach "$cfg" "addnhosts" append_addnhosts
 623         config_list_foreach "$cfg" "bogusnxdomain" append_bogusnxdomain
 624         append_parm "$cfg" "leasefile" "--dhcp-leasefile" "/tmp/dhcp.leases"
 625         append_parm "$cfg" "resolvfile" "--resolv-file" "/tmp/resolv.conf.auto"
 626         append_parm "$cfg" "serversfile" "--servers-file"
 627         append_parm "$cfg" "tftp_root" "--tftp-root"
 628         append_parm "$cfg" "dhcp_boot" "--dhcp-boot"
 629         append_parm "$cfg" "local_ttl" "--local-ttl"
 630         append_parm "$cfg" "pxe_prompt" "--pxe-prompt"
 631         config_list_foreach "$cfg" "pxe_service" append_pxe_service
 632         config_get DOMAIN "$cfg" domain
 633
 634         config_get_bool ADD_LOCAL_DOMAIN "$cfg" add_local_domain 1
 635         config_get_bool ADD_LOCAL_HOSTNAME "$cfg" add_local_hostname 1
 636         config_get_bool ADD_WAN_HOSTNAME "$cfg" add_wan_hostname 0
 637
 638         config_get_bool readethers "$cfg" readethers
 639         [ "$readethers" = "1" -a \! -e "/etc/ethers" ] && touch /etc/ethers
 640
 641         config_get resolvfile $cfg resolvfile
 642         config_get dhcpscript $cfg dhcpscript
 643
 644         config_get leasefile $cfg leasefile "/tmp/dhcp.leases"
 645         [ -n "$leasefile" -a \! -e "$leasefile" ] && touch "$leasefile"
 646         config_get_bool cachelocal "$cfg" cachelocal 1
 647
 648         config_get_bool noresolv "$cfg" noresolv 0
 649         if [ "$noresolv" != "1" ]; then
 650                 config_get resolvfile "$cfg" resolvfile "/tmp/resolv.conf.auto"
 651                 # So jail doesn't complain if file missing
 652                 [ -n "$resolvfile" -a \! -e "$resolvfile" ] && touch "$resolvfile"
 653         fi
 654
 655         config_get hostsfile "$cfg" dhcphostsfile
 656         [ -e "$hostsfile" ] && xappend "--dhcp-hostsfile=$hostsfile"
 657
 658         local rebind
 659         config_get_bool rebind "$cfg" rebind_protection 1
 660         [ $rebind -gt 0 ] && {
 661                 log_once \
 662                         "DNS rebinding protection is active," \
 663                         "will discard upstream RFC1918 responses!"
 664                 xappend "--stop-dns-rebind"
 665
 666                 local rebind_localhost
 667                 config_get_bool rebind_localhost "$cfg" rebind_localhost 0
 668                 [ $rebind_localhost -gt 0 ] && {
 669                         log_once "Allowing 127.0.0.0/8 responses"
 670                         xappend "--rebind-localhost-ok"
 671                 }
 672
 673                 append_rebind_domain() {
 674                         log_once "Allowing RFC1918 responses for domain $1"
 675                         xappend "--rebind-domain-ok=$1"
 676                 }
 677
 678                 config_list_foreach "$cfg" rebind_domain append_rebind_domain
 679         }
 680
 681         config_get_bool dnssec "$cfg" dnssec 0
 682         [ "$dnssec" -gt 0 ] && {
 683                 xappend "--conf-file=$TRUSTANCHORSFILE"
 684                 xappend "--dnssec"
 685                 [ -x /etc/init.d/sysntpd ] && {
 686                         /etc/init.d/sysntpd enabled
 687                         [ "$?" -ne 0 -o "$(uci_get system.ntp.enabled)" = "1" ] && {
 688                                 [ -f "$TIMEVALIDFILE" ] || xappend "--dnssec-no-timecheck"
 689                         }
 690                 }
 691                 append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned"
 692         }
 693
 694         config_get addmac "$cfg" addmac 0
 695         [ "$addmac" != "0" ] && {
 696                 [ "$addmac" = "1" ] && addmac=
 697                 xappend "--add-mac${addmac:+="$addmac"}"
 698         }
 699
 700         dhcp_option_add "$cfg" "" 0
 701
 702         xappend "--dhcp-broadcast=tag:needs-broadcast"
 703
 704         xappend "--addn-hosts=$(dirname $HOSTFILE)"
 705
 706         config_get dnsmasqconfdir "$cfg" confdir "/tmp/dnsmasq.d"
 707         [ ! -d "$dnsmasqconfdir" ] && mkdir -p $dnsmasqconfdir
 708         xappend "--conf-dir=$dnsmasqconfdir"
 709         xappend "--user=dnsmasq"
 710         xappend "--group=dnsmasq"
 711         echo >> $CONFIGFILE_TMP
 712
 713         config_get_bool enable_tftp "$cfg" enable_tftp 0
 714         [ "$enable_tftp" -gt 0 ] && {
 715                 config_get tftp_root "$cfg" tftp_root
 716                 append EXTRA_MOUNT $tftp_root
 717         }
 718
 719         config_foreach filter_dnsmasq host dhcp_host_add "$cfg"
 720         echo >> $CONFIGFILE_TMP
 721         config_foreach filter_dnsmasq boot dhcp_boot_add "$cfg"
 722         config_foreach filter_dnsmasq mac dhcp_mac_add "$cfg"
 723         config_foreach filter_dnsmasq tag dhcp_tag_add "$cfg"
 724         config_foreach filter_dnsmasq vendorclass dhcp_vendorclass_add "$cfg"
 725         config_foreach filter_dnsmasq userclass dhcp_userclass_add "$cfg"
 726         config_foreach filter_dnsmasq circuitid dhcp_circuitid_add "$cfg"
 727         config_foreach filter_dnsmasq remoteid dhcp_remoteid_add "$cfg"
 728         config_foreach filter_dnsmasq subscrid dhcp_subscrid_add "$cfg"
 729         config_foreach filter_dnsmasq match dhcp_match_add "$cfg"
 730         config_foreach filter_dnsmasq domain dhcp_domain_add "$cfg"
 731         config_foreach filter_dnsmasq hostrecord dhcp_hostrecord_add "$cfg"
 732         config_foreach filter_dnsmasq relay dhcp_relay_add "$cfg"
 733
 734         echo >> $CONFIGFILE_TMP
 735         config_foreach filter_dnsmasq srvhost dhcp_srv_add "$cfg"
 736         config_foreach filter_dnsmasq mxhost dhcp_mx_add "$cfg"
 737         echo >> $CONFIGFILE_TMP
 738
 739         config_get odhcpd_is_active odhcpd maindhcp
 740         if [ "$odhcpd_is_active" != "1" ]; then
 741                 config_foreach filter_dnsmasq dhcp dhcp_add "$cfg"
 742         fi
 743
 744         echo >> $CONFIGFILE_TMP
 745         config_foreach filter_dnsmasq cname dhcp_cname_add "$cfg"
 746         echo >> $CONFIGFILE_TMP
 747
 748         echo >> $CONFIGFILE_TMP
 749         mv -f $CONFIGFILE_TMP $CONFIGFILE
 750
 751         [ "$resolvfile" = "/tmp/resolv.conf.auto" ] && {
 752                 rm -f /tmp/resolv.conf
 753                 [ $ADD_LOCAL_DOMAIN -eq 1 ] && [ -n "$DOMAIN" ] && {
 754                         echo "search $DOMAIN" >> /tmp/resolv.conf
 755                 }
 756                 DNS_SERVERS="$DNS_SERVERS 127.0.0.1"
 757                 for DNS_SERVER in $DNS_SERVERS ; do
 758                         echo "nameserver $DNS_SERVER" >> /tmp/resolv.conf
 759                 done
 760         }
 761
 762         procd_open_instance $cfg
 763         procd_set_param command $PROG -C $CONFIGFILE -k -x /var/run/dnsmasq/dnsmasq."${cfg}".pid
 764         procd_set_param file $CONFIGFILE
 765         procd_set_param respawn
 766
 767         local dnsmasqconffile="/etc/dnsmasq.${cfg}.conf"
 768         if [ ! -r "$dnsmasqconffile" ]; then
 769                 dnsmasqconffile=/etc/dnsmasq.conf
 770         fi
 771
 772         procd_add_jail dnsmasq ubus log
 773         procd_add_jail_mount $CONFIGFILE $TRUSTANCHORSFILE $HOSTFILE /etc/passwd /etc/group /etc/TZ /dev/null /dev/urandom $dnsmasqconffile $dnsmasqconfdir $resolvfile $dhcpscript /etc/hosts /etc/ethers $EXTRA_MOUNT
 774         procd_add_jail_mount_rw /var/run/dnsmasq/ $leasefile
 775
 776         procd_close_instance
 777 }
 778
 779 dnsmasq_stop()
 780 {
 781         local cfg="$1"
 782
 783         config_get resolvfile "$cfg" "resolvfile"
 784
 785         #relink /tmp/resolve.conf only for main instance
 786         [ "$resolvfile" = "/tmp/resolv.conf.auto" ] && {
 787                 [ -f /tmp/resolv.conf ] && {
 788                         rm -f /tmp/resolv.conf
 789                         ln -s "$resolvfile" /tmp/resolv.conf
 790                 }
 791         }
 792
 793         rm -f ${BASEDHCPSTAMPFILE}.${cfg}.*.dhcp
 794 }
 795
 796 service_triggers()
 797 {
 798         procd_add_reload_trigger "dhcp"
 799         procd_add_raw_trigger "interface.*" 2000 /etc/init.d/dnsmasq reload
 800 }
 801
 802 boot()
 803 {
 804         BOOT=1
 805         start "$@"
 806 }
 807
 808 start_service() {
 809         local instance="$1"
 810         local instance_found=0
 811
 812         [ -n "$BOOT" ] && return
 813
 814         . /lib/functions/network.sh
 815
 816         config_cb() {
 817                 local type="$1"
 818                 local name="$2"
 819                 if [ "$type" = "dnsmasq" ]; then
 820                         if [ -n "$instance" -a "$instance" = "$name" ]; then
 821                                 instance_found=1
 822                         fi
 823                 fi
 824         }
 825
 826         config_load dhcp
 827
 828         if [ -n "$instance" ]; then
 829                 [ "$instance_found" -gt 0 ] || return
 830                 dnsmasq_start "$instance"
 831         else
 832                 config_foreach dnsmasq_start dnsmasq
 833         fi
 834 }
 835
 836 reload_service() {
 837         rc_procd start_service "$@"
 838         return 0
 839 }
 840
 841 stop_service() {
 842         local instance="$1"
 843         local instance_found=0
 844
 845         config_cb() {
 846                 local type="$1"
 847                 local name="$2"
 848                 if [ "$type" = "dnsmasq" ]; then
 849                         if [ -n "$instance" -a "$instance" = "$name" ]; then
 850                                 instance_found=1
 851                         fi
 852                 fi
 853         }
 854
 855         config_load dhcp
 856
 857         if [ -n "$instance" ]; then
 858                 [ "$instance_found" -gt 0 ] || return
 859                 dnsmasq_stop "$instance"
 860         else
 861                 config_foreach dnsmasq_stop dnsmasq
 862         fi
 863 }