From 410023fd604af49434ed5039c99c7ee6abc99b20 Mon Sep 17 00:00:00 2001
From: Daniil Baturin <daniil.baturin@vyatta.com>
Date: Fri, 4 Nov 2011 04:46:00 +0700
Subject: Initial commit.

---
 .../system/conntrack/modules/gre/disable/node.def   | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 templates/system/conntrack/modules/gre/disable/node.def

(limited to 'templates/system/conntrack/modules/gre/disable/node.def')

diff --git a/templates/system/conntrack/modules/gre/disable/node.def b/templates/system/conntrack/modules/gre/disable/node.def
new file mode 100644
index 0000000..f6f9546
--- /dev/null
+++ b/templates/system/conntrack/modules/gre/disable/node.def
@@ -0,0 +1,21 @@
+help: Disable GRE connection tracking
+
+# GRE shouldn't be disabled when PPTP is enabled because PPTP depends on it
+create: cli-shell-api exists system conntrack modules pptp disable
+        if [ $? == 0 ]; then
+          # Unload PPTP modules if they are loaded
+          lsmod | grep -e "^nf_nat_pptp" 2>&1 >/dev/null
+          if [ $? == 0 ]; then
+            sudo rmmod nf_nat_pptp
+            sudo rmmod nf_conntrack_pptp
+          fi
+          # And GRE modules then
+          sudo rmmod nf_nat_proto_gre
+          sudo rmmod nf_conntrack_proto_gre
+        else
+          echo "Error: can not disable GRE connection tracking when PPTP connection tracking is enabled!"
+          exit 1
+        fi
+
+delete: sudo modprobe nf_conntrack_proto_gre
+        sudo modprobe nf_nat_proto_gre
-- 
cgit v1.2.3

