mirror of
				https://github.com/eworm-de/routeros-scripts.git
				synced 2024-05-11 05:55:19 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			68 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			68 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
#!rsc by RouterOS
 | 
						|
# RouterOS script: update-tunnelbroker
 | 
						|
# Copyright (c) 2013-2024 Christian Hesse <mail@eworm.de>
 | 
						|
#                         Michael Gisbers <michael@gisbers.de>
 | 
						|
# https://git.eworm.de/cgit/routeros-scripts/about/COPYING.md
 | 
						|
#
 | 
						|
# provides: ppp-on-up
 | 
						|
# requires RouterOS, version=7.12
 | 
						|
#
 | 
						|
# update local address of tunnelbroker interface
 | 
						|
# https://git.eworm.de/cgit/routeros-scripts/about/doc/update-tunnelbroker.md
 | 
						|
 | 
						|
:global GlobalFunctionsReady;
 | 
						|
:while ($GlobalFunctionsReady != true) do={ :delay 500ms; }
 | 
						|
 | 
						|
:local Main do={
 | 
						|
  :local ScriptName [ :tostr $1 ];
 | 
						|
 | 
						|
  :global CertificateAvailable;
 | 
						|
  :global LogPrintExit2;
 | 
						|
  :global ParseKeyValueStore;
 | 
						|
  :global ScriptLock;
 | 
						|
 | 
						|
  :if ([ $ScriptLock $ScriptName ] = false) do={
 | 
						|
    :return false;
 | 
						|
  }
 | 
						|
 | 
						|
  :if ([ $CertificateAvailable "Starfield Secure Certificate Authority - G2" ] = false) do={
 | 
						|
    $LogPrintExit2 error $ScriptName ("Downloading required certificate failed.") true;
 | 
						|
  }
 | 
						|
 | 
						|
  :foreach Interface in=[ /interface/6to4/find where comment~"^tunnelbroker" !disabled ] do={
 | 
						|
    :local Data false;
 | 
						|
    :local InterfaceVal [ /interface/6to4/get $Interface ];
 | 
						|
    :local Comment [ $ParseKeyValueStore ($InterfaceVal->"comment") ];
 | 
						|
 | 
						|
    :for I from=2 to=0 do={
 | 
						|
      :if ($Data = false) do={
 | 
						|
        :do {
 | 
						|
          :set Data ([ /tool/fetch check-certificate=yes-without-crl \
 | 
						|
            ("https://ipv4.tunnelbroker.net/nic/update?hostname=" . $Comment->"id") \
 | 
						|
            user=($Comment->"user") password=($Comment->"pass") output=user as-value ]->"data");
 | 
						|
        } on-error={
 | 
						|
          $LogPrintExit2 debug $ScriptName ("Failed downloading, " . $I . " retries pending.") false;
 | 
						|
          :delay 2s;
 | 
						|
        }
 | 
						|
      }
 | 
						|
    }
 | 
						|
 | 
						|
    :if (!($Data ~ "^(good|nochg) ")) do={
 | 
						|
      $LogPrintExit2 error $ScriptName ("Failed sending the local address to tunnelbroker or unexpected response!") true;
 | 
						|
    }
 | 
						|
 | 
						|
    :local PublicAddress [ :pick $Data ([ :find $Data " " ] + 1) [ :find $Data "\n" ] ];
 | 
						|
 | 
						|
    :if ($PublicAddress != $InterfaceVal->"local-address") do={
 | 
						|
      :if ([ :len [ /ip/address find where address~("^" . $PublicAddress . "/") ] ] < 1) do={
 | 
						|
        $LogPrintExit2 warning $ScriptName ("The address " . $PublicAddress . " is not configured on your device. NAT by ISP?") false;
 | 
						|
      }
 | 
						|
 | 
						|
      $LogPrintExit2 info $ScriptName ("Local address changed, updating tunnel configuration with address: " . $PublicAddress) false;
 | 
						|
      /interface/6to4/set $Interface local-address=$PublicAddress;
 | 
						|
    }
 | 
						|
  }
 | 
						|
}
 | 
						|
 | 
						|
$Main [ :jobname ];
 |