pfSense

!/bin/sh

# check_backup_wan script

# ue0  is the 2nd WAN interface. igb0 is the primary WAN

# 1.1.1.1 is set as the monitor IP on the primary WAN interface

# The idea is to get the IP addresses of the primary and secondary WAN interfaces.

# If the primary WAN IP address is not available, assume the primary WAN is still down.

# Assuming the primary WAN is still up, check if there any live TCP connections on the backup WAN.

# If live TCP/UDP connections are found on the backup WAN, check that the primary WAN is responding to

# pings on the monitor IP address.  If the primary WAN is responding to pings, then kill the states

# on the backup WAN, and they will automatically reconnect over the primary WAN.

check_wan_time=`date "+%Y-%m-%d %H:%M:%S"`

check_wan='1.1.1.1'

wan_ipaddress=`ifconfig igb0 | grep 'inet ' | awk '{ print $2}' | cut -d'/' -f1`

wan2_ipaddress=`ifconfig ue0 | grep 'inet ' | awk '{ print $2}' | cut -d'/' -f1`

active_tcp_udp_sessions=$(pfctl -i ue0 -ss | grep 'tcp\|udp' | wc -l)

echo 'primary, backup WAN IP address ' ${wan_ipaddress} '(primary) ' ${wan2_ipaddress} '(backup)'

# check for valid primary WAN IP address.

if [ -z "${wan_ipaddress}" ]; then

  echo ${check_wan_time} '... primary WAN is still down (no WAN IP)' | tee -a /var/log/check_backup_wan.log

  exit 0

fi

# check for active connections on backup_wan

pfctl -i ue0 -ss | grep 'tcp\|udp'

wan2_liveconn=`pfctl -i ue0 -ss | grep 'tcp\|udp'`

if [ -n "${wan2_liveconn}" ]; then

# found active tcp/udp connection(s) on the backup wan interface

  ping -c 2 -t 2 -S ${wan_ipaddress} ${check_wan} > /dev/null 2>&1

  wan1_resp=$?

  wan_resp=`expr ${wan1_resp}`

  echo 'primary WAN ping check (0 means passed)' ${wan1_resp}

  if [ ${wan_resp} -eq 0 ]; then

    echo ${check_wan_time} 'Killing states and resetting connections on backup WAN. The total number of active TCP/UDP sessions on backup WAN are $active_tcp_udp_sessions and they have been disconnected as the primary WAN is now online.  The secondary WAN active sessions

are no longer required.' | tee -a /var/log/check_backup_wan.log

    echo -e "${check_wan_time} \n \n  The total number of active TCP/UDP sessions on backup WAN are $active_tcp_udp_sessions and they have been disconnected as the primary WAN is now online.  The secondary WAN active sessions are no longer required." | /usr/local/bin/mail.php -s"Cleared WAN2 Active Sessions"

    pfctl -k 192.168.1.118

  else

    echo ${check_wan_time} 'The primary WAN is still down (pings failing)' | tee -a /var/log/check_backup_wan.log

  fi

else

  echo ${check_wan_time} 'There are no active TCP or UDP connections found on backup WAN' | tee -a /var/log/check_backup_wan.log

fi