ipif: ship and use ipif-access
[userv-utils] / ipif / udptunnel-vpn-defaults
1 m4_dnl udptunnel-vpn-defaults: default settings for udptunnel-reconf
2
3 m4_dnl This file is part of ipif, part of userv-utils
4 m4_dnl
5 m4_dnl Copyright 1996-2013 Ian Jackson <ijackson@chiark.greenend.org.uk>
6 m4_dnl Copyright 1998 David Damerell <damerell@chiark.greenend.org.uk>
7 m4_dnl Copyright 1999,2003
8 m4_dnl Chancellor Masters and Scholars of the University of Cambridge
9 m4_dnl Copyright 2010 Tony Finch <fanf@dotat.at>
10 m4_dnl
11 m4_dnl This is free software; you can redistribute it and/or modify it
12 m4_dnl under the terms of the GNU General Public License as published by
13 m4_dnl the Free Software Foundation; either version 3 of the License, or
14 m4_dnl (at your option) any later version.
15 m4_dnl
16 m4_dnl This program is distributed in the hope that it will be useful, but
17 m4_dnl WITHOUT ANY WARRANTY; without even the implied warranty of
18 m4_dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
19 m4_dnl General Public License for more details.
20 m4_dnl
21 m4_dnl You should have received a copy of the GNU General Public License
22 m4_dnl along with userv-utils; if not, see http://www.gnu.org/licenses/.
23
24 SET( lcommand, [udptunnel])
25 SET( clock_maxskew, 45)
26 SET( crypto,
27 [-e nonce -e timestamp/V_clock_maxskew/V_clock_maxskew -e pkcs5/8 \
28 -e blowfish-cbcmac/128 -e blowfish-cbc/128])
29
30 SET( lpublic, [`hostname`])
31 SET( lport, [Any])
32 m4_dnl rpublic -- usually set in sites
33 SET( rport, [Command])
34 m4_dnl lend -- usually set in global
35 m4_dnl rend -- usually set in sites
36 SET( mtu, [1000])
37 SET( proto, [slip])
38 SET( to_restart, [10])
39 SET( to_poll, [30])
40 SET( to_quit, [130])
41 SET( to_report, [1800])
42 SET( timeouts, [V_to_poll,V_to_quit,V_to_report])
43 SET( lnets, [-])m4_dnl often overridden in global
44 SET( rnets, [-])m4_dnl often overridden in sites
45 SET( forbid_remote, [V_lnets])
46
47 SET( rcommandprefix, [])
48 SET( rcommand, [V_rcommandprefix udptunnel])
49
50 SET( sshprotoka, [-o 'ProtocolKeepAlives 300'])
51 SET( sshstdopts, [-o 'ForwardAgent no' -o 'ForwardX11 no' -o 'BatchMode yes'])
52 SET( sshverbose, [-v])
53 SET( sshopts, [])
54 SET( ssh,
55 [ssh V_sshstdopts \
56 V_sshprotoka V_sshverbose \
57 V_sshopts])
58 SET( sshinvoke, [V_ssh V_ruser@V_sshdest])
59
60 SET( sshdest, [V_rpublic])
61
62 SET( sites, [sites])
63 SET( tunnels, [tunnels])
64
65 m4_dnl varlibvpn -- global can override
66
67 SET( ipifnetsfile, [V_varlibvpn/ipif-networks])
68 SET( activesfile, [V_varlibvpn/active-sites])
69 SET( activesxinfo, [])
70 SET( passivesfile, [V_varlibvpn/passive-sites])
71 SET( passivesxinfo, [])
72
73 SET( postconfigure, [])
74
75 SET( invoke_file, [V_varlibvpn/command.V_site])
76 SET( invoke_head, [#!/bin/sh])
77 SET( invoke_hook, [])
78
79 SET( syslog_facility, local2)
80 SET( syslog_priority, info)
81
82 SET( inittab_runlevels, 2345)
83 SET( inittab_pfx, [])
84 SET( inittab_sfx,
85 [</dev/null 2>&1 | logger -p V_syslog_facility.V_syslog_priority -t tunnel-V_site])
86 SET( inittab_command,[V_inittab_pfx V_invoke_file V_inittab_sfx])
87 SET( inittab_line, [V_inittab_runlevels:respawn:V_inittab_command])
88
89 SET( invoke_body,
90 [set -e
91 V_invoke_hook
92 echo "STARTING TUNNEL `date`" >&2
93 set +e
94 V_command
95 rc=$?
96 set -e
97 echo "TUNNEL CLOSED rc=$rc" >&2
98 sleep V_to_restart
99 echo "TUNNEL MAYRESTART" >&2
100 exit $rc
101 ])
102
103 m4_dnl lgroup -- usually set in global
104
105 SET( command,
106 [V_lcommand \
107 V_crypto \
108 V_lpublic,V_lport \
109 V_rpublic,V_rport \
110 V_lend,V_rend,V_mtu,V_proto \
111 V_timeouts \
112 V_rnets \
113 V_lnets \
114 V_sshinvoke V_rcommand
115 ])