Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/etc this should have been removed as part of the rc.d commit
details: https://anonhg.NetBSD.org/src/rev/d11151ae1ff4
branches: trunk
changeset: 486104:d11151ae1ff4
user: lukem <lukem%NetBSD.org@localhost>
date: Sat May 13 08:02:35 2000 +0000
description:
this should have been removed as part of the rc.d commit
diffstat:
etc/netstart | 312 -----------------------------------------------------------
1 files changed, 0 insertions(+), 312 deletions(-)
diffs (truncated from 316 to 300 lines):
diff -r 81abbbd1f66f -r d11151ae1ff4 etc/netstart
--- a/etc/netstart Sat May 13 07:55:05 2000 +0000
+++ /dev/null Thu Jan 01 00:00:00 1970 +0000
@@ -1,312 +0,0 @@
-#!/bin/sh -
-#
-# $NetBSD: netstart,v 1.75 2000/05/03 07:04:22 itojun Exp $
-# from: @(#)netstart 8.1 (Berkeley) 7/23/93
-
-if [ -f /etc/rc.subr ]; then
- . /etc/rc.subr
-else
- echo "Can't read /etc/rc.subr; aborting."
- exit 1;
-fi
-
-if [ -f /etc/rc.conf ]; then
- . /etc/rc.conf
-fi
-
-# If $hostname is set, use it for my Internet name, otherwise use /etc/myname
-if [ -z "$hostname" -a -f /etc/myname ]; then
- hostname=`cat /etc/myname`
-fi
-if [ -n "$hostname" ]; then
- echo "hostname: $hostname"
- hostname $hostname
-fi
-
-# Check $domainname first, then /etc/defaultdomain, for NIS/YP domain name
-if [ -z "$domainname" -a -f /etc/defaultdomain ]; then
- domainname=`cat /etc/defaultdomain`
-fi
-if [ -n "$domainname" ]; then
- echo "domainname: $domainname"
- domainname $domainname
-fi
-
-# Flush all routes just to make sure it is clean
-if checkyesno flushroutes; then
- route -n flush
-fi
-
-# Enable, flush and install packet filter rules before configuring interfaces.
-if checkyesno ipfilter; then
- if [ -f /etc/ipf.conf ]; then
- echo 'installing packet filter rules ... '
- ipf -E -Fa -f /etc/ipf.conf
- else
- echo
- echo "WARNING: /etc/ipf.conf not readable " \
- "ipfilter not started."
- # abort the boot rather than risk a security problem
- exit 1;
- fi
-fi
-
-# Set the address for the first loopback interface, so that the auto-route
-# from a newly configured interface's address to lo0 works correctly.
-#
-# NOTE: obscure networking problems may occur if lo0 isn't configured...
-#
-ifconfig lo0 inet 127.0.0.1
-
-# Configure all of the network interfaces listed in $net_interfaces;
-# if $auto_ifconfig is YES, grab all interfaces from ifconfig.
-# In the following, "xxN" stands in for interface names, like "le0".
-# For any interfaces that has an $ifconfig_xxN variable associated,
-# we do "ifconfig xxN $ifconfig_xxN".
-# If there is no such variable, we take the contents of the file
-# /etc/ifconfig.xxN, and run "ifconfig xxN" repeatedly, using each
-# line of the file as the arguments for a seperate "ifconfig" invocation.
-#
-# In order to configure an interface reasonably, you at the very least
-# need to specify "[addr_family] [hostname]" (as in "inet my.domain.org"),
-# and probably a netmask (as in "netmask 0xffffffe0"). You will
-# frequently need to specify a media type, as in "media UTP", for
-# interface cards with multiple media connections that do not autoconfigure.
-# see the ifconfig manual page for details.
-#
-# Note that /etc/ifconfig.xxN takes multiple lines. The following
-# configuration is possible:
-# inet 10.1.1.1 netmask 0xffffff00
-# inet 10.1.1.2 netmask 0xffffff00 alias
-# inet6 fec0::1 prefixlen 64 alias
-#
-if [ "$net_interfaces" != NO ]; then
- if checkyesno auto_ifconfig; then
- tmp="`ifconfig -l`"
- else
- tmp="$net_interfaces"
- fi
- echo -n 'configuring network interfaces:'
- for int in $tmp; do
- eval `echo 'args=$ifconfig_'$int`
- if [ -n "$args" ]; then
- echo -n " $int"
- ifconfig $int $args
- elif [ -f /etc/ifconfig.$int ]; then
- echo -n " $int"
- (while read args; do
- if [ -n "`eval echo '$args'`" ] ; then
- ifconfig $int $args
- fi
- done) < /etc/ifconfig.$int
- else
- if ! checkyesno auto_ifconfig; then
- echo
- echo "WARNING: /etc/ifconfig.$int missing " \
- "and ifconfig_$int not set; " \
- "interface $int not configured."
- fi
- continue
- fi
- configured_interfaces="$configured_interfaces $int"
- done
- echo '.'
-fi
-
-# Check $defaultroute, then /etc/mygate, for the name of my gateway host.
-# That name must be in /etc/hosts.
-if [ -z "$defaultroute" -a -f /etc/mygate ]; then
- defaultroute=`cat /etc/mygate`
-fi
-if [ -n "$defaultroute" ]; then
- route add default $defaultroute
-fi
-
-# Check if each configured interface xxN has an $ifaliases_xxN variable
-# associated, then configure additional IP addresses for that interface.
-# The variable contains a list of "address netmask" pairs, with "netmask"
-# set to "-" if the interface default netmask is to be used.
-#
-# Note that $ifaliases_xxN works only with certain configurations and
-# considered not recommended. Use /etc/ifconfig.xxN if possible.
-#
-if [ -n "$configured_interfaces" ]; then
- echo 'adding interface aliases:';
- done_aliases_message=yes
-fi
-for int in $configured_interfaces; do
- eval `echo 'args=$ifaliases_'$int`
- if [ -n "$args" ]; then
- set -- $args
- while [ $# -ge 2 ]; do
- addr=$1 ; net=$2 ; shift 2
- if [ "$net" = "-" ]; then
- ifconfig $int inet alias $addr
- else
- ifconfig $int inet alias $addr netmask $net
- fi
- # Use loopback, not the wire
- route add $addr 127.0.0.1
- done
- fi
-done
-
-# /etc/ifaliases, if it exists, contains the names of additional IP
-# addresses for each interface. It is formatted as a series of lines
-# that contain
-# address interface netmask
-#
-# Note that /etc/ifaliases works only with certain cases only and considered
-# not recommended. Use /etc/ifconfig.xxN instead.
-#
-if [ -f /etc/ifaliases ]; then
-(
- if [ "$done_aliases_message" != yes ]; then
- echo 'adding interface aliases:';
- fi
- while read addr int net; do
- if [ -z "$net" ]; then
- ifconfig $int inet alias $addr
- else
- ifconfig $int inet alias $addr netmask $net
- fi
- # use loopback, not the wire
- route add $addr 127.0.0.1
- done
-) < /etc/ifaliases
-fi
-
-# /etc/ppp/peers and $ppp_peers contain boot configuration information
-# for pppd. each value in $ppp_peers that has a file in /etc/ppp/peers
-# of the same name, will be run as `pppd <peer>'.
-if [ -n "$ppp_peers" ]; then
- # pppd is in /usr - need to ensure it is mounted
- mount /usr >/dev/null 2>&1
- set -- $ppp_peers
- echo -n "starting pppd:"
- while [ $# -ge 1 ]; do
- peer=$1; shift
- if [ -f /etc/ppp/peers/$peer ]; then
- pppd call $peer
- echo -n " $peer"
- fi
- done
- echo "."
-fi
-
-if checkyesno dhclient; then
- echo -n "starting dhcp client...";
- dhclient $dhclient_flags
-fi
-
-# IPv6
-# Note that manual configuration can be done in the above, using ifconfig.
-if ifconfig lo0 inet6 >/dev/null 2>&1; then
- # We have IPv6 support in kernel.
-
- # disallow link-local unicast dest without outgoing scope
- # identifiers.
- #
- route add -inet6 fe80:: -prefixlen 10 ::1 -reject
-
- # disallow site-local unicast dest without outgoing scope
- # identifiers.
- # If you configure site-locals without scope id (it is
- # permissible config for routers that are not on scope
- # boundary), you may want to comment the following one out.
- #
- route add -inet6 fec0:: -prefixlen 10 ::1 -reject
-
- # disallow "internal" addresses to appear on the wire.
- #
- route add -inet6 ::ffff:0.0.0.0 -prefixlen 96 ::1 -reject
-
- # disallow packets to malicious IPv4 compatible prefix
- #
- route add -inet6 ::224.0.0.0 -prefixlen 100 ::1 -reject
- route add -inet6 ::127.0.0.0 -prefixlen 104 ::1 -reject
- route add -inet6 ::0.0.0.0 -prefixlen 104 ::1 -reject
- route add -inet6 ::255.0.0.0 -prefixlen 104 ::1 -reject
-
- # disallow packets to malicious 6to4 prefix
- #
- route add -inet6 2002:e000:: -prefixlen 20 ::1 -reject
- route add -inet6 2002:7f00:: -prefixlen 24 ::1 -reject
- route add -inet6 2002:0000:: -prefixlen 24 ::1 -reject
- route add -inet6 2002:ff00:: -prefixlen 24 ::1 -reject
-
- # Completely disallow packets to IPv4 compatible prefix.
- # This may conflict with RFC1933 under following circumstances:
- # (1) An IPv6-only KAME node tries to originate packets to IPv4
- # comatible destination. The KAME node has no IPv4
- # compatible support. Under RFC1933, it should transmit
- # native IPv6 packets toward IPv4 compatible destination,
- # hoping it would reach a router that forwards the packet
- # toward auto-tunnel interface.
- # (2) An IPv6-only node originates a packet to IPv4 compatible
- # destination. A KAME node is acting as an IPv6 router, and
- # asked to forward it.
- # Due to rare use of IPv4 compatible address, and security
- # issues with it, we disable it by default.
- #
- route add -inet6 ::0.0.0.0 -prefixlen 96 ::1 -reject
-
- sysctl -w net.inet6.ip6.forwarding=0 >/dev/null
- sysctl -w net.inet6.ip6.accept_rtadv=0 >/dev/null
-
- # backward compatibility
- if test "x$ip6mode" = "x" -a "x$ip6forwarding" != "x"; then
- echo 'WARNING: please migrate to newer rc.conf' \
- '(use ip6mode, not ip6forwarding)'
- if checkyesno ip6forwarding; then
- ip6mode=router
- else
- if checkyesno rtsol; then
- ip6mode=autohost
- else
- ip6mode=host
- fi
- fi
- fi
-
- case $ip6mode in
- router) echo 'IPv6 mode: router'
- sysctl -w net.inet6.ip6.forwarding=1 >/dev/null
- ;;
- autohost)
- echo 'IPv6 mode: autoconfigured host'
- sysctl -w net.inet6.ip6.accept_rtadv=1 >/dev/null
- if test "x$ip6defaultif" != "x"; then
- ndp -I $ip6defaultif
- fi
- ;;
- host) echo 'IPv6 mode: host'
- if test "x$ip6defaultif" != "x"; then
- ndp -I $ip6defaultif
- fi
- ;;
- *) echo 'WARNING: invalid value in ip6mode'
- ;;
- esac
-
- if checkyesno rtsol; then
- if test "x$ip6mode" = "xautohost"; then
- echo 'Sending router solicitation...'
- rtsol $rtsol_flags
- else
Home |
Main Index |
Thread Index |
Old Index