/etc/network/if-up.d/30check-gateway is in ifupdown-extra 0.24.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 | #!/bin/sh
# Check if the (default) gateway configured for the interface is
# present in our network
#
# This script should be installed in /etc/network/if-up.d/
# It can also be used as a standalone script by setting up
# its environment:
# IFACE=eth0 IF_GATEWAY=192.168.0.1 check-gateway
#
# NOTE: If IF_GATEWAY is not provided the script will try to test
# the default gateway.
#
# TODO:
#
# - Support non-default gateways that might have been set at the
# same time the interface was enabled.
#
# ------------------------------------------------------------------------
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
# You can also find a copy of the GNU General Public License at
# http://www.gnu.org/licenses/licenses.html#TOCLGPL
# Check if an IP we are going to assign to an Ethernet interface
# is already in use by another system.
#
# Read system default file
[ -r /etc/default/network-test ] && . /etc/default/network-test
# Defaults
ARPING=/usr/bin/arping
ETHTOOL=/sbin/ethtool
[ ! -x "$ETHTOOL" ] && [ -x "/usr/sbin/ethtool" ] && ETHTOOL=/usr/sbin/ethtool
ARP_COUNT=${ARP_COUNT:-2}
ARP_TIMEOUT=${ARP_TIMEOUT:-3}
DO_SYSLOG=${DO_SYSLOG:-yes}
VERBOSITY=${VERBOSITY:-0}
# Do not continue if ETHTOOL is not available
[ ! -x "$ARPING" ] && exit 0
# or if the user has told us to not do arpings
[ "$DO_ARPING" = "no" ] && exit 0
# Break out if we don't have an interface to work with
[ -z "$IFACE" ] && exit 0
if [ "$DO_SYSLOG" = "yes" ] ; then
OUTPUT="logger -i -p daemon.err -s"
else
OUTPUT="echo"
fi
# Try to obtain the IP address of our gateway (DHCP case)
if [ -z "$IF_GATEWAY" ] ; then
IF_GATEWAY=$(ip route list | grep "^default " | grep "dev $IFACE" | awk '{print $3}')
# Warn if there are multiple gateways
echo $IF_GATEWAY | grep -q " " && [ "$VERBOSITY" -eq 1 ] && $OUTPUT "Found multiple gateways as default routes for $IFACE"
fi
# Still no IP? Bail out
[ -z "$IF_GATEWAY" ] && exit 0
# Set up our environment
LC_ALL=C
export LC_ALL
do_arping() {
# Send ARP pings to detect if the default gateway is "out there"
# Curiously enough, the script will return faster if there *is* a system
# with the same IP address and will take ${ARP_TIMEOUT}*${ARP_COUNT} seconds
# to return if there is none.
# Do not do the check if ethtool (if installed) tells us the interface
# does not have link, notice that ARPING will try to send the ARP requests
# even if there is no link so we use this to speed things up
local GATEWAY=$1
local ARPING_OPTIONS="-q -c $ARP_COUNT -w $ARP_TIMEOUT -f -I $IFACE"
local GATEWAY_FOUND=1
if [ "`id -u`" = 0 ] ; then
# Only do this if we are root, otherwise assume the interface is
# up
if [ -x "$ETHTOOL" ] ; then
LINK=$($ETHTOOL "$IFACE" 2>&1| grep "Link detected")
if ! $ETHTOOL "$IFACE" | grep -q "Link detected: yes" ; then
return 0
fi
fi
fi
[ "$VERBOSITY" -eq 1 ] && $OUTPUT "DEBUG: Sending arp pings through $IFACE to detect if the gateway $GATEWAY is present"
if [ "`id -u`" = 0 ] ; then
if $ARPING $ARPING_OPTIONS $GATEWAY ; then
GATEWAY_FOUND=0
fi
else
# If we are not root we can only use arping in DAD mode
# in this case we negate the check as it will return 1
# if there is an answer
if ! $ARPING $ARPING_OPTIONS -D $GATEWAY ; then
GATEWAY_FOUND=0
fi
fi
if [ "$GATEWAY_FOUND" = 1 ] ; then
$OUTPUT "ERROR: Cannot find default gateway $GATEWAY in the network where $IFACE is connected to"
fi
}
# Check our IFACE name, if it does not start with eth, bail out
case "$IFACE" in
eth*) for gateway in $IF_GATEWAY ; do do_arping $gateway; done ;;
*) ;;
esac
exit 0
|