Initial import
This commit is contained in:
556
change_network_gateway.sh
Executable file
556
change_network_gateway.sh
Executable file
@ -0,0 +1,556 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
|
||||
base_dir=/root/Office_Networks
|
||||
chown -R root:root $base_dir
|
||||
|
||||
function usage() {
|
||||
if [ -n "$1" ];then
|
||||
echo -e "\nError: $1"
|
||||
fi
|
||||
|
||||
cat<<EOF
|
||||
|
||||
`basename $0` - configure that gateway for a certain network
|
||||
|
||||
Usage: `basename $0` <network-name>
|
||||
|
||||
network-name possible values are:
|
||||
|
||||
NONE-WF
|
||||
NONE-CKUBU
|
||||
|
||||
AKB
|
||||
ANW-URB
|
||||
ANW-KM
|
||||
B3-Bornim
|
||||
CKUBU
|
||||
FLR-BRB
|
||||
GA-AL
|
||||
GA-Ersatz
|
||||
GA-NH
|
||||
GA-Schloss
|
||||
JONAS
|
||||
Kanzlei-Kiel
|
||||
MBR
|
||||
OOLM
|
||||
OPP
|
||||
ReachOut
|
||||
SPR-BE
|
||||
WF
|
||||
|
||||
|
||||
Notice:
|
||||
|
||||
!! To change the network, you have to chroot into /ro !!
|
||||
|
||||
remountrw
|
||||
rebind on
|
||||
chroot /ro
|
||||
|
||||
`basename $0` <network-name>
|
||||
|
||||
exit
|
||||
rebind off
|
||||
remountro
|
||||
|
||||
EOF
|
||||
exit
|
||||
|
||||
}
|
||||
|
||||
function echo_OK() {
|
||||
echo -en "\\033[45G[ \\033[1;32mOK\\033[0;39m ]\n"
|
||||
}
|
||||
|
||||
function echo_FAILED() {
|
||||
echo -en "\\033[45G[ \\033[1;31mFAIL\\033[0;39m ]\n"
|
||||
}
|
||||
|
||||
[ $# -ne "1" ] && usage "wrong number of arguments"
|
||||
|
||||
|
||||
case $1 in
|
||||
CKUBU)
|
||||
network=$1
|
||||
_igmproxy=true
|
||||
_add_support_if=true
|
||||
;;
|
||||
NONE-CKUBU|NONE-WF)
|
||||
network=$1
|
||||
_igmproxy=false
|
||||
_add_support_if=false
|
||||
;;
|
||||
AKB|ANW-URB|ANW-KM|B3-Bornim|FLR-BRB|GA-AL|GA-Ersatz|GA-NH|GA-Schloss|JONAS|Kanzlei-Kiel|MBR|OOLM|OPP|ReachOut|SPR-BE|WF)
|
||||
network=$1
|
||||
_igmproxy=false
|
||||
_add_support_if=true
|
||||
;;
|
||||
*)
|
||||
usage
|
||||
exit 1
|
||||
esac
|
||||
echo ""
|
||||
echo "Configure gateway for network \"$network\".."
|
||||
|
||||
# - Nameserver Bind
|
||||
# - /etc/bind/*
|
||||
# -
|
||||
echo -en "\tNameserver settings.."
|
||||
_rval=true
|
||||
rm -rf /etc/bind
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
mkdir -p /var/log/named
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
chown bind:bind /var/log/named > /dev/null 2>&1
|
||||
cp -a ${base_dir}/${network}/bind /etc/bind
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
if ! $_rval ; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
|
||||
|
||||
# - OpenVPN:
|
||||
# - /etc/openvpn/*
|
||||
# -
|
||||
echo -en "\tVPN settings.."
|
||||
/etc/init.d/openvpn stop > /dev/null
|
||||
rm -rf /etc/openvpn
|
||||
cp -a ${base_dir}/${network}/openvpn /etc/openvpn
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
|
||||
if [ -d "/root/.openvpn" ]; then
|
||||
echo -en "\tCleanup private VPN settings for user root.."
|
||||
rm -rf /root/.openvpn
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ -d "${base_dir}/${network}/.openvpn" ];then
|
||||
echo -en "\tPrivate VPN settings for root user.."
|
||||
cp -a ${base_dir}/${network}/.openvpn /root/.openvpn
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
chown -R root:root /root/.openvpn
|
||||
chmod 700 /root/.openvpn
|
||||
else
|
||||
if [ -d "/root/.openvpn" ];then
|
||||
rm /root/.openvpn
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
# - DynDNS
|
||||
# - /etc/ddclient.conf
|
||||
if [ -f ${base_dir}/${network}/ddclient.conf.${network} ];then
|
||||
echo -en "\tConfigure DynDNS.."
|
||||
cp -a ${base_dir}/${network}/ddclient.conf.${network} /etc/ddclient.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
# - DHCP Server
|
||||
# - /etc/dhcp/dhcpd.conf
|
||||
echo -en "\tDHCP Server settings.."
|
||||
if [ -d /etc/dhcp ]; then
|
||||
cp -a ${base_dir}/${network}/dhcpd.conf.${network} /etc/dhcp/dhcpd.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
elif [ -d /etc/dhcp3 ];then
|
||||
cp -a ${base_dir}/${network}/dhcpd.conf.${network} /etc/dhcp3/dhcpd.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
if [ -f ${base_dir}/${network}/dhcpd6.conf.${network} ];then
|
||||
echo -en "\tDHCP IPv6 Server settings.."
|
||||
if [ -d /etc/dhcp ]; then
|
||||
cp -a ${base_dir}/${network}/dhcpd6.conf.${network} /etc/dhcp/dhcpd6.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
elif [ -d /etc/dhcp3 ];then
|
||||
cp -a ${base_dir}/${network}/dhcpd6.conf.${network} /etc/dhcp3/dhcpd6.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
|
||||
#if [ -f "${base_dir}/${network}/isc-dhcp6-server.${network}" ]; then
|
||||
# echo -en "\tINIT-Script isc-dhcp6-server.."
|
||||
# cp -a ${base_dir}/${network}/isc-dhcp6-server.${network} /etc/init.d/isc-dhcp6-server
|
||||
# if [ "$?" != "0" ]; then
|
||||
# echo_FAILED
|
||||
# else
|
||||
# echo_OK
|
||||
# fi
|
||||
#fi
|
||||
|
||||
|
||||
# - DSL:
|
||||
# - /etc/ppp/peers/dsl-provider
|
||||
# - /etc/ppp/ip-up.d/email_notice
|
||||
echo -en "\tDSL settings.."
|
||||
_rval=true
|
||||
cp -a ${base_dir}/${network}/dsl-provider.${network} /etc/ppp/peers/dsl-provider
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
_network_name=`echo $network | tr '[:upper:]' '[:lower:]'`
|
||||
if [ -f ${base_dir}/${network}/dsl-${_network_name}.${network} ]; then
|
||||
cp -a ${base_dir}/${network}/dsl-${_network_name}.${network} /etc/ppp/peers/dsl-${_network_name}
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/email_notice.${network} /etc/ppp/ip-up.d/email_notice
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/pap-secrets.${network} /etc/ppp/pap-secrets
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/chap-secrets.${network} /etc/ppp/chap-secrets
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
if ! $_rval ; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
|
||||
|
||||
# - Postfix SMTP
|
||||
# - /etc/postfix/main.cf
|
||||
# - /etc/mailname
|
||||
# - /etc/postfix/generic
|
||||
# - /etc/postfix/generic.db
|
||||
echo -en "\tConfigure Postfix SMTP Server.."
|
||||
_rval=true
|
||||
/etc/init.d/postfix stop > /dev/null
|
||||
cp -a ${base_dir}/${network}/main.cf.${network} /etc/postfix/main.cf
|
||||
if [ -f ${base_dir}/${network}/generic.${network} ]; then
|
||||
cp -a ${base_dir}/${network}/generic.${network} /etc/postfix/generic
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/generic.db.${network} /etc/postfix/generic.db
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
fi
|
||||
if [ -f ${base_dir}/${network}/sasl_passwd.${network} ]; then
|
||||
cp -a ${base_dir}/${network}/sasl_passwd.${network} /etc/postfix/sasl_passwd
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/sasl_passwd.db.${network} /etc/postfix/sasl_passwd.db
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/mailname.${network} /etc/mailname
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
if ! $_rval ; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
|
||||
|
||||
# - Netzwerk:
|
||||
# - /etc/network/interfaces
|
||||
# - /etc/resolv.conf
|
||||
# - /etc/hostname
|
||||
# - /etc/hosts
|
||||
echo -en "\tConfigure network settings.."
|
||||
_rval=true
|
||||
cp -a ${base_dir}/${network}/interfaces.${network} /etc/network/interfaces
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/resolv.conf.${network} /etc/resolv.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/hosts.${network} /etc/hosts
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/hostname.${network} /etc/hostname
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
if ! $_rval ; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
|
||||
|
||||
# - Firewall:
|
||||
# -
|
||||
echo -en "\tFirewall.."
|
||||
if [ -f ${base_dir}/${network}/ipt-firewall.${network} ]; then
|
||||
cp -a ${base_dir}/${network}/ipt-firewall.${network} /etc/init.d/ipt-firewall
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
if [ -f ${base_dir}/${network}/ip6t-firewall.${network} ]; then
|
||||
echo -en "\tFirewall IPv6.."
|
||||
cp -a ${base_dir}/${network}/ip6t-firewall.${network} /etc/init.d/ip6t-firewall
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
else
|
||||
if [ -f "/etc/init.d/ip6t-firewall" ]; then
|
||||
rm /etc/init.d/ip6t-firewall
|
||||
fi
|
||||
fi
|
||||
_rval=true
|
||||
if [ -f ${base_dir}/${network}/ipt-firewall.service.${_network} ] ; then
|
||||
systemctl enable ipt-firewall.service
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/ipt-firewall.service.${_network} /etc/systemd/system/ipt-firewall.service
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/ipt-firewall-gateway.${_network} /usr/local/sbin/ipt-firewall-gateway
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
mkdir -p /etc/ipt-firewall
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/ipt-firewall-gateway.conf.${_network} /etc/ipt-firewall/ipt-firewall-gateway.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
if ! $_rval ; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
_rval=true
|
||||
if [ -f ${base_dir}/${network}/ip6t-firewall.service.${_network} ] ; then
|
||||
systemctl enable ip6t-firewall.service
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/ip6t-firewall.service.${_network} /etc/systemd/system/ip6t-firewall.service
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/ip6t-firewall-gateway.${_network} /usr/local/sbin/ip6t-firewall-gateway
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/ip6t-firewall-gateway.conf.${_network} /etc/ipt-firewall/ip6t-firewall-gateway.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
if ! $_rval ; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
# - Check Script Onlinestatus
|
||||
# -
|
||||
echo -en "\tCheck Script Onlinestatus.."
|
||||
_rval=true
|
||||
if [ -f ${base_dir}/${network}/check_net.service.${_network} ] ; then
|
||||
cp -a ${base_dir}/${network}/check_net.service.${_network} /etc/systemd/system/check_net.service
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
systemctl enable check_net.service
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/check_net.sh.${_network} /usr/local/sbin/check_net/check_net.sh
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/netconfig.sh.${_network} /usr/local/sbin/check_net/netconfig.sh
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/check_net.conf.${_network} /etc/check_net/check_net.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
mkdir -p /etc/check_net
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
cp -a ${base_dir}/${network}/check_net-logrotate.${_network} /etc/logrotated.d/check_net
|
||||
if [ "$?" != "0" ]; then
|
||||
_rval=false
|
||||
fi
|
||||
if ! $_rval ; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
#if $_igmproxy ; then
|
||||
if [ -f ${base_dir}/${network}/igmpproxy.conf.${network} ];then
|
||||
echo -en "\tConfigure igmproxy (Entertain TV).."
|
||||
PID=`ps aux | grep "/igmpproxy " | grep -v grep | awk '{print$2}'`
|
||||
kill -9 $PID > /dev/null 2>&1
|
||||
cp -a ${base_dir}/${network}/igmpproxy.conf.${network} /usr/local/igmpproxy/etc/igmpproxy.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ -f ${base_dir}/${network}/aiccu.conf.${network} ]; then
|
||||
echo -en "\tConfigure aiccu (IPv6 Tunnel).."
|
||||
cp -a ${base_dir}/${network}/aiccu.conf.${network} /etc/aiccu.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
if [ -f ${base_dir}/${network}/aiccu.${network} ]; then
|
||||
echo -en "\tSetting /etc/defaults/aiccu.."
|
||||
cp -a ${base_dir}/${network}/aiccu.${network} /etc/default/aiccu
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ -f ${base_dir}/${network}/radvd.conf.${network} ]; then
|
||||
echo -en "\tConfigure radvd (Router Advertisment Daemon).."
|
||||
cp -a ${base_dir}/${network}/radvd.conf.${network} /etc/radvd.conf
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
if $_add_support_if ; then
|
||||
|
||||
if ! grep -e "eth1:rescue " /etc/network/interfaces > /dev/null ; then
|
||||
|
||||
echo -en "\tAdd interface eth1:rescue.."
|
||||
cat << EOF >> /etc/network/interfaces
|
||||
|
||||
|
||||
auto eth1:rescue
|
||||
iface eth1:rescue inet static
|
||||
address 172.16.1.1
|
||||
network 172.16.1.0
|
||||
netmask 255.255.255.0
|
||||
broadcast 172.16.1.255
|
||||
EOF
|
||||
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
fi
|
||||
|
||||
fi
|
||||
|
||||
|
||||
|
||||
## - Cron (root)
|
||||
## -
|
||||
echo -en "\tSetting up cronjobs.."
|
||||
if [ "$network" = "NONE-CKUBU" -o "$network" = "NONE-WF" ];then
|
||||
cp -a ${base_dir}/crontab_root.NONE /var/spool/cron/crontabs/root
|
||||
else
|
||||
if [ -f ${base_dir}/${network}/cron_root.${network} ];then
|
||||
cp -a ${base_dir}/${network}/cron_root.${network} /var/spool/cron/crontabs/root
|
||||
fi
|
||||
fi
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
|
||||
echo -en "\tSetting up rc.local.."
|
||||
if [ "$network" = "NONE-CKUBU" -o "$network" = "NONE-WF" ];then
|
||||
cp -a ${base_dir}/rc.local.NONE /etc/rc.local
|
||||
else
|
||||
#cp -a ${base_dir}/rc.local /etc/rc.local
|
||||
cp -a ${base_dir}/${network}/rc.local.${network} /etc/rc.local
|
||||
fi
|
||||
if [ "$?" != "0" ]; then
|
||||
echo_FAILED
|
||||
else
|
||||
echo_OK
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo ""
|
||||
echo -e " \\033[1;31m Take care, you are chrooted into /ro. Otherwise"
|
||||
echo -e " changes are not persistent \\033[0;39m !!"
|
||||
echo ""
|
||||
echo ""
|
||||
if $_add_support_if ; then
|
||||
echo -e " After restarting, you can reach that device"
|
||||
echo -e " at ip-address: \\033[1;33m172.16.1.1\\033[0;39m"
|
||||
fi
|
||||
echo ""
|
||||
echo ""
|
||||
echo -e " \\033[1;33mExit from chroot environment and restart to make changes active..\\033[0;39m"
|
||||
echo ""
|
||||
|
||||
exit 0
|
||||
Reference in New Issue
Block a user