l7-filter-userspace的init脚本

comicchang兄发表了一篇l7-filter-userspace的文章（https://work.ooxxcc.com/tools/block-p2p-with-l7-filter-userspace/），试了下效果不错，唯一的遗憾是没有init script，于是拿skeleton改了一个。

平台为Debian 7.0

#! /bin/sh
### BEGIN INIT INFO
# Provides: l7-filter-userspace
# Required-Start: $remote_fs $syslog
# Required-Stop: $remote_fs $syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: Userspace layer 7 packet classifier
# Description: L7-filter running at userspace without patching
# kernel.
### END INIT INFO

# Author: Tony Zhou <tonytzhou><br>
# 05/07/2013</tonytzhou>

# PATH should only include /usr/* if it runs after the mountnfs.sh script
PATH=/sbin:/usr/sbin:/bin:/usr/bin
DESC="Userspace layer 7 packet classifier"
NAME=l7-filter
DAEMON=/usr/bin/$NAME
CONF=/etc/l7-filter.conf
DAEMON_ARGS="-f $CONF -z"
PIDFILE=/var/run/$NAME.pid
SCRIPTNAME=/etc/init.d/$NAME

# Exit if the package is not installed
[-x "$DAEMON"] || exit 0

# Read configuration variable file if it is present
[-r /etc/default/$NAME] && . /etc/default/$NAME

# Load the VERBOSE setting and other rcS variables
. /lib/init/vars.sh

# Define LSB log_* functions.
# Depend on lsb-base (>= 3.2-14) to ensure that this file is present
# and status_of_proc is working.
. /lib/lsb/init-functions

#
# Function that starts the daemon/service
#
do_start()
{
 # Return
 # 0 if daemon has been started
 # 1 if daemon was already running
 # 2 if daemon could not be started
 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null
 || return 1
 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --
 $DAEMON_ARGS > /dev/null 2>&1
 || return 2
 # Add code here, if necessary, that waits for the process to be ready
 # to handle requests from services started subsequently which depend
 # on this one. As a last resort, sleep for some time.
}

#
# Function that stops the daemon/service
#
do_stop()
{
 # Return
 # 0 if daemon has been stopped
 # 1 if daemon was already stopped
 # 2 if daemon could not be stopped
 # other if a failure occurred
 start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --name $NAME
 RETVAL="$?"
 ["$RETVAL" = 2] && return 2
 # Wait for children to finish too if this is a daemon that forks
 # and if the daemon is only ever run from this initscript.
 # If the above conditions are not satisfied then add some other code
 # that waits for the process to drop all resources that could be
 # needed by services started subsequently. A last resort is to
 # sleep for some time.
 start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON
 ["$?" = 2] && return 2
 # Many daemons don't delete their pidfiles when they exit.
 rm -f $PIDFILE
 return "$RETVAL"
}

#
# Function that sends a SIGHUP to the daemon/service
#
do_reload() {
 #
 # If the daemon can reload its configuration without
 # restarting (for example, when it is sent a SIGHUP),
 # then implement that here.
 #
 start-stop-daemon --stop --signal 1 --quiet --pidfile $PIDFILE --name $NAME
 return 0
}

case "$1" in
 start)
 log_daemon_msg "Starting $DESC" "$NAME"
 do_start
 case "$?" in
 0) log_end_msg 0 ;;
 1) log_progress_msg "already started"
 log_end_msg 0 ;;
 *) log_end_msg 1 ;;
 esac
 ;;
 stop)
 log_daemon_msg "Stopping $DESC" "$NAME"
 do_stop
 case "$?" in
 0) log_end_msg 0 ;;
 1) log_progress_msg "already stopped"
 log_end_msg 0 ;;
 *) log_end_msg 1 ;;
 esac
 ;;
 status)
 status_of_proc "$DAEMON" "$NAME" && exit 0 || exit $?
 ;;
 restart|force-reload)
 log_daemon_msg "Restarting $DESC" "$NAME"
 do_stop
 case "$?" in
 0|1)
 do_start
 case "$?" in
 0) log_end_msg 0 ;;
 1) log_end_msg 1 ;; # Old process is still running
 *) log_end_msg 1 ;; # Failed to start
 esac
 ;;
 *)
 # Failed to stop
 log_end_msg 1
 ;;
 esac
 ;;
 *)
 #echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2
 echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2
 exit 3
 ;;
esac

:

同时在Debian上需要在/etc/modules里面加入

nf_conntrack_netlink

这样就可以了。