From 410023fd604af49434ed5039c99c7ee6abc99b20 Mon Sep 17 00:00:00 2001
From: Daniil Baturin <daniil.baturin@vyatta.com>
Date: Fri, 4 Nov 2011 04:46:00 +0700
Subject: Initial commit.

---
 .../system/conntrack/modules/pptp/disable/node.def   | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 templates/system/conntrack/modules/pptp/disable/node.def

(limited to 'templates/system/conntrack/modules/pptp/disable/node.def')

diff --git a/templates/system/conntrack/modules/pptp/disable/node.def b/templates/system/conntrack/modules/pptp/disable/node.def
new file mode 100644
index 0000000..4ffd980
--- /dev/null
+++ b/templates/system/conntrack/modules/pptp/disable/node.def
@@ -0,0 +1,20 @@
+help: Disable PPTP connection tracking
+
+create: cli-shell-api exists system conntrack modules gre disable
+        if [ $? == 0 ]; then
+          # Do nothing, this case is handled in GRE module templates
+          :;
+        else
+          sudo rmmod nf_nat_pptp
+          sudo rmmod nf_conntrack_pptp
+        fi
+
+# PPTP shouldn't be enabled when GRE is disabled because PPTP depends on it
+delete: cli-shell-api exists system conntrack modules gre disable
+        if [ $? == 0 ]; then
+          echo "Error: can not enable PPTP connection tracking when GRE connection tracking is disabled!"
+          exit 1
+        else
+          sudo modprobe nf_conntrack_pptp
+          sudo modprobe nf_nat_pptp
+        fi
-- 
cgit v1.2.3

