Undo change to tag, commit to trunk instead

[vsys.git] / factory / setup-nat

diff --git a/factory/setup-nat b/factory/setup-nat
index 5955868..64be40b 100755 (executable)
--- a/factory/setup-nat
+++ b/factory/setup-nat
@@ -1,18 +1,22 @@
 #!/bin/sh +x
 
+IP=/sbin/ip
+
 SLICE=$1
 SLICEID=`id -u $SLICE`
 read KEY
 
+modprobe etun
+
 ### Setup etun
 ETUN0=nat$KEY
 ETUN1=natx$KEY
-ip link add name $ETUN0 type veth peer name $ETUN1
+echo $ETUN0,$ETUN1 > /sys/module/etun/parameters/newif
 ifconfig $ETUN1 10.0.$KEY.1 up
 
-iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
-iptables -A FORWARD -i eth0 -o $ETUN1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-iptables -A FORWARD -i $ETUN1 -o eth0 -j ACCEPT
+/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
+/sbin/iptables -A FORWARD -i eth0 -o $ETUN1 -m state --state RELATED,ESTABLISHED -j ACCEPT
+/sbin/iptables -A FORWARD -i $ETUN1 -o eth0 -j ACCEPT
 
 ### Create "grab link" script
 GRAB=/vsys/local_grab-$ETUN0
@@ -23,7 +27,7 @@ cat > $GRAB <<EOF
 
 read PID
 
-ip link set $ETUN0 netns $PID 
+chcontext --ctx 1 -- echo \$PID > /sys/class/net/$ETUN0/new_ns_pid 
 EOF
 chmod +x $GRAB
 
@@ -37,12 +41,12 @@ cat > $DELETE <<EOF
 read NULL
 
 # Remove iptables rules
-iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
-iptables -D FORWARD -i eth0 -o $ETUN1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-iptables -D FORWARD -i $ETUN1 -o eth0 -j ACCEPT
+/sbin/iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
+/sbin/iptables -D FORWARD -i eth0 -o $ETUN1 -m state --state RELATED,ESTABLISHED -j ACCEPT
+/sbin/iptables -D FORWARD -i $ETUN1 -o eth0 -j ACCEPT
 
 # Get rid of etun devices, only need name of one of them
-ip link delete dev $ETUN1 
+echo $ETUN1 > /sys/module/etun/parameters/delif
 
 # Clean up files
 rm -f $GRAB $GRAB.acl