pfSense

<?php

 * rc.newwanip

 * Copyright (c) 2006-2013 BSD Perimeter

 * Copyright (c) 2014-2024 Rubicon Communications, LLC (Netgate)

 * All rights reserved.

 * Copyright (c) 2003-2005 Manuel Kasper <mk@neon1.net>.

 * All rights reserved.

 * Licensed under the Apache License, Version 2.0 (the "License");

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 */

/* parse the configuration and include all functions used below */

require_once("filter.inc");

require_once("ipsec.inc");

require_once("openvpn.inc");

require_once("Net/IPv6.php");

require_once("rrd.inc");

function restart_packages() {

	global $oldip, $curwanip, $g;

	log_error("{$g['product_label']} package system has detected an IP change or dynamic WAN reconnection - $oldip ->  $curwanip - Restarting packages.");

	send_event("service reload packages");

}

/* Interface IP address has changed */

if (isset($_GET['interface'])) {

	$argument = $_GET['interface'];

} else {

	$argument = str_replace("\n", "", $argv[1]);

}

log_error("rc.newwanip: Info: starting on {$argument}.");

if (empty($argument)) {

	$interface = "wan";

} else {

	$interface = convert_real_interface_to_friendly_interface_name($argument);

	$interface_real = $argument;

}

$interface_descr = convert_friendly_interface_to_friendly_descr($interface);

/* If the interface is configured and not enabled, bail. We do not need to change settings for disabled interfaces. #3313 */

if (is_array(config_get_path("interfaces/{$interface}")) && !config_path_enabled("interfaces/{$interface}")) {

	log_error("Interface is disabled, nothing to do.");

if (empty($argument)) {

	$curwanip = get_interface_ip();

} else {

	$curwanip = find_interface_ip($interface_real, true);

	if ($curwanip == "") {

		$curwanip = get_interface_ip($interface);

	}

}

log_error("rc.newwanip: on (IP address: {$curwanip}) (interface: {$interface_descr}[{$interface}]) (real interface: {$interface_real}).");

/*

 * NOTE: Take care of openvpn, no-ip or similar interfaces if you generate the event to reconfigure an interface.

 *      i.e. OpenVPN might be in tap mode and not have an ip.

if ($curwanip == "0.0.0.0" || !is_ipaddr($curwanip)) {

		if (!empty(config_get_path("interfaces/{$interface}/ipaddr"))) {

			log_error("rc.newwanip: Failed to update {$interface} IP, restarting...");

}

/* XXX: This really possible? */

if (empty($interface)) {

	if (is_platform_booting()) {

		return;

	}

	log_error("rc.newwanip called with empty interface.");

	filter_configure();

	return;

}

$oldip = "0.0.0.0";

if (file_exists(g_get('vardb_path') . "/{$interface_real}_cacheip")) {

}

/* regenerate resolv.conf */

/* write the current interface IP to file */

if (is_ipaddr($curwanip)) {

	@file_put_contents(g_get('vardb_path') . "/{$interface_real}_ip", $curwanip);

}

link_interface_to_vips($interface, "update");

$gre = link_interface_to_tunnelif($interface, 'gre', 'inet');

array_walk($gre, 'interface_gre_configure');

$gif = link_interface_to_tunnelif($interface, 'gif', 'inet');

array_walk($gif, 'interface_gif_configure');

/* reconfigure L2TP/PPTP tunnels, see https://redmine.pfsense.org/issues/12072 */ 

$grouptmp = link_interface_to_group($interface);

if (!empty($grouptmp)) {

	array_walk($grouptmp, 'interface_group_add_member');

}

unset($bridgetmp);

if (!empty($bridgetmp)) {

	interface_bridge_add_member($bridgetmp, $interface_real);

}

system_hosts_generate();

/* check tunnelled IPv6 interface tracking */

switch (config_get_path("interfaces/{$interface}/ipaddrv6")) {

	case "6to4":

		interface_6to4_configure($interface, config_get_path("interfaces/{$interface}"));

		break;

		interface_6rd_configure($interface, config_get_path("interfaces/{$interface}"));

		break;

	case "slaac":

	case "dhcp6":

		// N.B. PPP connections using PPP as the IPv6 parent interface are excluded because the ppp-ipv6 script calls

		if ((((config_get_path("interfaces/{$interface}/ipaddrv6") == 'dhcp6') &&

		    !interface_isppp_type($interface)) {

			interface_dhcpv6_configure($interface, config_get_path("interfaces/{$interface}"));

		}

		break;

	default:

}

/* Check Gif tunnels */

foreach ($gif as $giftun) {

	}

foreach ($gre as $gretun) {

	}

foreach ($ppp as $ppptun) {

if (is_platform_booting() && !in_array(substr($interface_real, 0, 3), array("ppp", "ppt", "l2t"))) {

	// unlike dhcp interfaces which wait until they get an ip, a ppp connection lets the boot continue while 

	// trying to acquire a ip address so to avoid a race condition where it would be possible that the default

	// route would not be set, this script must continue to use the new assigned ip even while booting

	// avoid race conditions in many of the below functions that occur during boot

	filter_configure_sync();

	setup_gateways_monitor();

	exit;

/*

if (!is_ipaddr($oldip) || ($curwanip != $oldip) || file_exists("{$g['tmp_path']}/{$interface}_upstart4") ||

    (!is_ipaddrv4(config_get_path("interfaces/{$interface}/ipaddr")) && (config_get_path("interfaces/{$interface}/ipaddr") != 'dhcp'))) {

	/*

	 * Some services (e.g. dyndns, see ticket #4066) depend on

	 * filter_configure() to be called before, otherwise pass out

	 * route-to rules have the old ip set in 'from' and connections

	 */

	filter_configure_sync();

	/* reconfigure our gateway monitor, dpinger results need to be 

	/* reconfigure static routes (kernel may have deleted them) */

	/* If the IP address changed, kill old states after rules and routing have been updated */

		if (config_path_enabled('system', 'ip_change_kill_states')) {

			log_error("IP Address has changed, killing all states (ip_change_kill_states is set).");

			pfSense_kill_states($oldip);

		}

	/* reload unbound */

	services_unbound_configure(true, $interface);

	if (is_ipaddr($curwanip)) {

		@file_put_contents(g_get('vardb_path') . "/{$interface_real}_cacheip", $curwanip);

	}

	/* signal dyndns update */

	/* reconfigure IPsec tunnels */

	ipsec_force_reload($interface, 'inet');

	if (substr($interface_real, 0, 4) != "ovpn") {

		openvpn_resync_all($interface, 'inet');

	}

	/* reload graphing functions */

	/* reload igmpproxy */

	services_igmpproxy_configure($interface);

	/* restart snmp */

	services_snmpd_configure($interface);

	/* restart L2TP VPN */

	restart_packages();

	if (empty(config_get_path("interfaces/{$interface}/ipaddrv6"))) {

		unlink_if_exists("{$g['tmp_path']}/{$interface}_upstart6");

}

/* Unconditional filter reload to ensure the correct rules and gateways are

?>