summaryrefslogtreecommitdiff
path: root/templates/firewall/conntrack-options/sip/node.def
blob: 38add571a392666ef288fd842e49e1f9fad4f1fd (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
help: Set SIP conntrack options

end: reload=0
  sdm=2
  if [ -f /sys/module/nf_conntrack_sip/parameters/sip_direct_media ]; then
    sdm=$(sudo cat /sys/module/nf_conntrack_sip/parameters/sip_direct_media)
  fi
  if [ -n "$VAR(./enable-indirect-media)" ]; then
    indirectmedia='sip_direct_media=0'
    if [ $sdm -ge 1 ]; then reload=1; fi
  else
    if [ $sdm -eq 0 ]; then reload=1; fi
  fi

  sds=2
  if [ -f /sys/module/nf_conntrack_sip/parameters/sip_direct_signalling ]; then
    sds=$(sudo cat /sys/module/nf_conntrack_sip/parameters/sip_direct_signalling)
  fi
  if [ -n "$VAR(./enable-indirect-signalling)" ]; then
    indirectsignalling='sip_direct_signalling=0'
    if [ $sds -ge 1 ]; then reload=1; fi
  else
    if [ $sds -eq 0 ]; then reload=1; fi
  fi

  if [ -n "$VAR(./port/@@)" ]; then
     numports=0
     for port in $VAR(./port/@@); do
     	 if [ -z "$portval" ]; then
     	     portval=$port
	 else
	     portval="${portval},$port"
	 fi
	 (( numports++ ))
     done
     portopt="ports=$portval"
     if [ $numports -gt 8 ]; then
     	echo "Error: Can not specify more than 8 ports."
	exit 1
     fi
     reload=1
  fi

  if [ -f /etc/modprobe.d/options ]; then
    sudo sed -i '/nf_conntrack_sip/d' /etc/modprobe.d/options
  fi

  if [ -n "$indirectmedia" ] || [ -n "$indirectsignalling" ] || \
      [ -n "$portopt" ]; then
      sudo sh -c "echo \# Auto-generated by `whoami` at `date` > /etc/modprobe.d/vyatta_sip_options"
      sudo sh -c "echo options nf_conntrack_sip $indirectmedia $indirectsignalling $portopt >> /etc/modprobe.d/vyatta_sip_options "
  else
      sudo rm -f /etc/modprobe.d/vyatta_sip_options
  fi

  if [ $reload -eq 1 ]; then
    sudo modprobe -r nf_nat_sip nf_conntrack_sip
    sudo modprobe nf_conntrack_sip
    sudo modprobe nf_nat_sip
  fi