Новый скрипт

скрипт, сделаный и протестеный мною только что

#!/bin/sh -v
LOGIN_INT="***"
PASSW_INT="***"
LOGIN_LAN="***/local"
PASSW_LAN="***"
VLAN="***"
DNS3=192.168.1.1
DNS1=10.152.195.41
DNS2=8.8.8.8

#jdem, poka router progruzit vse svoi servisy
sleep 3

#podnimaev VLAN esli nyzhno########
if [ -n 'ifconfig |grep ${VLAN}' ]; then
ifconfig ${VLAN} up
sleep 1
fi

#ochischaem marshruty
iptables -t nat -F POSTROUTING

#-----------------------------------------------
#Sozdanie failov(configov) podklyuchenii
################################################
echo "plugin /usr/lib/rp-pppoe.so
nic-${VLAN}
noccp
nomppc
noipdefault
noauth
defaultroute
noaccomp
nobsdcomp
nodeflate
nopcomp
nomppe
user '${LOGIN_INT}'
password '${PASSW_INT}'
default-asyncmap
mtu 1492
mru 1492
unit 0
persist
maxfail 0
holdoff 30
lcp-echo-interval 10
lcp-echo-failure 5" > /tmp/int.pppoe

echo "plugin /usr/lib/rp-pppoe.so
nic-${VLAN}
noccp
nomppc
noipdefault
noauth
nodefaultroute
noaccomp
nobsdcomp
nodeflate
nopcomp
nomppe
user '${LOGIN_LAN}'
password '${PASSW_LAN}'
default-asyncmap
mtu 1492
mru 1492
unit 1
persist
maxfail 0
holdoff 30
lcp-echo-interval 10
lcp-echo-failure 5" > /tmp/loc.pppoe

#-----------------------------------------------
#Sozdaem fail, podnimayuschii soedinenie s internetom,
#i propisyvayuschii marshrutizaciyu
################################################
echo '#!/bin/sh -v
#podnimaet soedinenie
pppd file /tmp/int.pppoe
#Pishem marshrutizaciyu
WLAN_SUBNET=192.168.1.0/24
iptables -t nat -I POSTROUTING -s ${WLAN_SUBNET} -o ppp0 -j MASQUERADE
' > /tmp/run_int.sh
#-----------------------------------------------

#-----------------------------------------------
#Sozdaem fail, podnimayuschii soedinenie s lokalkoi,
#ojidayuschii ustanovlenie soedineniya, propisyvayuschii
#marshrutizaciyu i otkryvayuschii porty
################################################
echo '#!/bin/sh -v
#podnimaet soedinenie
pppd file /tmp/loc.pppoe
#ojidanie ustanovleniya soedineniya
i=0
while [ -n `ifconfig |grep ppp1` ] && [ $i -le 500 ]; do
let i=$i+3
sleep 3
done
#Pishem marshrutizaciyu
WLAN_SUBNET=192.168.1.0/24
LAN_SUBNET=10.152.0.0/16
OPEN_PORT=12312
OPEN_PORT_2=12313
LOCAL_CLIENT=192.168.1.100
LOCAL_CLIENT_2=192.168.1.101

iptables -t nat -I POSTROUTING 2 -s ${WLAN_SUBNET} -d ${LAN_SUBNET} -o ppp1 -j MASQUERADE
ip ro add ${LAN_SUBNET} dev ppp1
# ip ro flush cache

iptables -t nat -I PREROUTING -p tcp --dport ${OPEN_PORT} -i ppp1 -s ${LAN_SUBNET} -j DNAT --to-destination ${LOCAL_CLIENT}:${OPEN_PORT}
iptables -t nat -I PREROUTING -p udp --dport ${OPEN_PORT} -i ppp1 -s ${LAN_SUBNET} -j DNAT --to-destination ${LOCAL_CLIENT}:${OPEN_PORT}
iptables -t nat -I PREROUTING -p tcp --dport ${OPEN_PORT_2} -i ppp1 -s ${LAN_SUBNET} -j DNAT --to-destination ${LOCAL_CLIENT_2}:${OPEN_PORT_2}
iptables -t nat -I PREROUTING -p udp --dport ${OPEN_PORT_2} -i ppp1 -s ${LAN_SUBNET} -j DNAT --to-destination ${LOCAL_CLIENT_2}:${OPEN_PORT_2}

' > /tmp/run_loc.sh
#-----------------------------------------------

#Delaem faily ispolnyaemymi
chmod +x /tmp/run_int.sh
chmod +x /tmp/run_loc.sh

#Startuem skripty soedinenii
/tmp/run_int.sh
/tmp/run_loc.sh

sleep 3

#-----------------------------------------------
#propisovaem DNS
################################################
nvram set wan_dns="$DNS1 $DNS2 $DNS3"
echo "nameserver $DNS1" >/tmp/resolv.dnsmasq
echo "nameserver $DNS2" >>/tmp/resolv.dnsmasq
echo "nameserver $DNS3" >>/tmp/resolv.dnsmasq
echo "address=/torrent.dml/10.152.195.95
address=/taunt.local/10.152.203.3
address=/decker.local/10.152.196.50
address=/radio.local/10.152.205.167
address=/cat.dsl/10.152.203.3
address=/forum.local/10.152.205.139
address=/img.local/10.152.195.4
" >>/tmp/dnsmasq.conf
pr="$(ps|awk '/dnsmasq/ {print $1}')"
kill -9 $pr
dnsmasq --conf-file=/tmp/dnsmasq.conf


#-----------------------------------------------
#Sozdaem fail, proveryayuschii nalichie marshruta
#k lokalke. Reconnect route control block.
################################################
echo '#!/bin/sh
LAN_SUBNET=10.152.0.0/16
if [ -n `ip ro|grep ${LAN_SUBNET}` ]; then
ip ro add ${LAN_SUBNET} dev ppp1
fi' > /tmp/loc.ip-up

#Delaem fail ispolnyaemym i dobavlyaem na
#zapusk kajdye 2 minuty v cron
chmod +x /tmp/loc.ip-up
echo "*/2 * * * * root /tmp/loc.ip-up" >> /tmp/cron.d/cron_jobs

#Blok dlya pravil'noi raboty cron
/usr/bin/killall -9 cron
/bin/rm /tmp/cron.d/check_ps
/bin/touch /tmp/cron.d/check_ps
/usr/sbin/cron

# ifconfig
# ip ro
# iptables -t nat -n -L
# Copyright dE1l v 2.0

Известные проблемы - при реконекте отваливается маршрут ip ro add ${LAN_SUBNET} dev ppp1
Из подводных камней - если не работает ДНС - проверьте /tmp/dnsmasq.conf на наличие записей вида address=/
Если их нет, значит скрипт сработал быстрей, чем загрузился дефолтный dnsmasq демон роутера. Выход - увеличить sleep перед прописыванием dns.