X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=exec%2Fvif_up;h=0f905c6402ea6ecb9530d62c94ee7ff9b9de84d8;hb=153c335cbebbd3ba11fa7fd56fabfcb9eb895b95;hp=2829b586db2d5666ee973389c7d650db8a785eca;hpb=52d7e99d55883cc377c9aee400848ccb0d67ba09;p=vsys-scripts.git

diff --git a/exec/vif_up b/exec/vif_up
index 2829b58..0f905c6 100755
--- a/exec/vif_up
+++ b/exec/vif_up
@@ -101,6 +101,7 @@ if vmask<mask:
 
 opt_txqueuelen = None
 opt_rp_filter = None
+opt_snat = None
 
 
 for optionline in options:
@@ -127,6 +128,10 @@ for optionline in options:
             sys.exit(1)
         opt_txqueuelen = intval
 
+    elif opt=="snat":
+	intval = int(val)
+	if val=="1":
+	  opt_snat = True
     else:
         print >>sys.stderr, "Unknown option: \"%s\"" % (opt)
         sys.exit(1)
@@ -148,12 +153,24 @@ cmd_iptables_del_in = "/sbin/iptables -D INPUT -i %s -m mark -m state --state NE
 cmd_iptables_out = "/sbin/iptables -A OUTPUT -o %s -m state --state NEW -m mark ! --mark %d -j DROP" % (vif, sliceid)
 cmd_iptables_del_out = "/sbin/iptables -D OUTPUT -o %s -m state --state NEW -m mark ! --mark %d -j DROP 2>/dev/null" % (vif, sliceid)
 
+public_src = os.popen("ip route get 1.1.1.1 | head -1 | awk '{print $7;}'").read().rstrip();
+cmd_iptables_pr = "/sbin/iptables -t nat -A POSTROUTING -s %s/%d -j SNAT --to-source %s --random" % (vip, vmask, public_src)
+cmd_iptables_del_pr = "/sbin/iptables -t nat -D POSTROUTING -s %s/%d -j SNAT --to-source %s --random" % (vip, vmask, public_src)
+
 os.system(cmd_iptables_del_in)
 os.system(cmd_iptables_in)
 os.system(cmd_iptables_del_out)
 os.system(cmd_iptables_out)
 
+if (opt_snat):
+    os.system(cmd_iptables_del_pr)
+    os.system(cmd_iptables_pr)
+    #print cmd_iptables_del_pr
+    #print cmd_iptables_pr
+
 # Process additional options
 if opt_rp_filter is not None:
     rp_cmd = "/sbin/sysctl net.ipv4.conf.%s.rp_filter=%s" % (vif, opt_rp_filter)
     os.system(rp_cmd)
+
+