From 3c17fd41a44327e15f800098a9e4f913e5dbbe5a Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Mon, 6 May 2013 08:44:54 +0000 Subject: Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset SVN-Revision: 36552 --- .../services/ipset-dns/files/ipset-dns.config | 13 +++++ .../services/ipset-dns/files/ipset-dns.init | 64 ++++++++++++++++++++++ 2 files changed, 77 insertions(+) create mode 100644 package/network/services/ipset-dns/files/ipset-dns.config create mode 100755 package/network/services/ipset-dns/files/ipset-dns.init (limited to 'package/network/services/ipset-dns/files') diff --git a/package/network/services/ipset-dns/files/ipset-dns.config b/package/network/services/ipset-dns/files/ipset-dns.config new file mode 100644 index 0000000000..52e87b27cc --- /dev/null +++ b/package/network/services/ipset-dns/files/ipset-dns.config @@ -0,0 +1,13 @@ +# declare an ipset-dns listener instance, multiple allowed +config ipset-dns + # use given ipset + option ipset 'domain-filter' + + # use given listening port + # defaults to 53000 + instance number + #option port '53001' + + # use given upstream DNS server, + # defaults to first entry in /tmp/resolv.conf.auto + #option dns '8.8.8.8' + diff --git a/package/network/services/ipset-dns/files/ipset-dns.init b/package/network/services/ipset-dns/files/ipset-dns.init new file mode 100755 index 0000000000..5d41539a7b --- /dev/null +++ b/package/network/services/ipset-dns/files/ipset-dns.init @@ -0,0 +1,64 @@ +#!/bin/sh /etc/rc.common +# Copyright (C) 2013 OpenWrt.org + +START=61 + +SERVICE_DAEMONIZE=1 +SERVICE_WRITE_PID=1 + + +find_nameserver() { + . /lib/functions/network.sh + + local tmp + if network_find_wan tmp && network_get_dnsserver tmp "$tmp"; then + echo "${tmp%% *}" + return 0 + fi + + return 1 +} + +start_instance() { + local cfg="$1" + local ipset port dns + + config_get ipset "$cfg" ipset + [ -n "$ipset" ] || { + echo "No ipset specified for instance $cfg" >&2 + return 1 + } + + config_get dns "$cfg" dns "$DEFNS" + [ -n "$dns" ] || { + echo "No DNS server specified for instance $cfg" >&2 + return 1 + } + + config_get port "$cfg" port $((PORT++)) + + SERVICE_PID_FILE="/var/run/ipset-dns-$port.pid" \ + service_start /usr/sbin/ipset-dns "$ipset" "$port" "$dns" +} + +start() { + PORT=53001 + DEFNS="$(find_nameserver)" + + # required by ipset-dns to not daemonize itself + export NO_DAEMONIZE=1 + + config_load ipset-dns + config_foreach start_instance ipset-dns +} + +stop() { + local pid + for pid in /var/run/ipset-dns-*.pid; do + [ -f "$pid" ] || continue + SERVICE_PID_FILE="$pid" \ + service_stop /usr/sbin/ipset-dns + rm -f "$pid" + done +} + -- cgit v1.2.3