#!/bin/sh

STATE=0
MAIN_CONNECTION_PINGABLE_IP="31.170.8.95"
MAIN_CONNECTION_GATEWAY="IP"
MAIN_CONNECTION_IP="IP"
SECOND_CONNECTION_PINGABLE_IP="31.170.8.243"
INFO_MAIN_CONNECTION="IP - Description - interface"
INFO_SECOND_CONNECTION="IP - Description - interface"
CURRENT_GATEWAY=$(/usr/bin/netstat -nr | /usr/bin/grep "default" | /usr/bin/awk '{print $2}')

IS_GATEWAY_IN_FILE=1            # Check whether /etc/mygate has the IP of main connection
IS_VPN_USING_MAIN_CONNECTION=1  # Check whether ipsecctl use the main connection
IS_PF_USING_MAIN_CONNECTION=1   # Check whether PacketFilter has route-to using the main connection
IS_MISCELLANEOUS=1              # Check miscellaneous things
CHECK_CARP=0                    # No check if host is backup

# No check if host is backup
if [ "${CHECK_CARP}" = 1 ]; then
    CARP_STATUS=$(/sbin/ifconfig carp0 | /usr/bin/grep "status" | /usr/bin/awk '{print $2}')
    if [ "$CARP_STATUS" = "backup" ]; then
            echo "No check, I'm a backup"
            exit 0
    fi
fi

# If main connection is UP but not used => critical and continue
# If main connection is DOWN (used or not) => warning and exit
if /sbin/ping -c1 -w1 ${MAIN_CONNECTION_PINGABLE_IP} >/dev/null 2>&1; then
    if [ "${CURRENT_GATEWAY}" != "${MAIN_CONNECTION_GATEWAY}" ]; then
        echo "Main connection is UP (${INFO_MAIN_CONNECTION}) but not used as gateway !"
        STATE=2
    fi
else
    echo "Main connection (${INFO_MAIN_CONNECTION}) is down"
    STATE=1
    IS_GATEWAY_IN_FILE=0
    IS_VPN_USING_MAIN_CONNECTION=0
    IS_PF_USING_MAIN_CONNECTION=0
    IS_MISCELLANEOUS=0
fi

# If second connection is DOWN => critical and continue
if ! /sbin/ping -c1 -w1 ${SECOND_CONNECTION_PINGABLE_IP} >/dev/null 2>&1; then
    echo "Second connection (${INFO_SECOND_CONNECTION}) is down"
    STATE=2
fi

# Check whether /etc/mygate has the IP of main connection
if [ "${IS_GATEWAY_IN_FILE}" = 1 ]; then
    if ! /usr/bin/grep -q "${MAIN_CONNECTION_GATEWAY}" /etc/mygate; then
        echo "Main connection is not set in /etc/mygate"
        STATE=2
    fi
fi

# Check whether ipsecctl use the main connection
if [ "${IS_VPN_USING_MAIN_CONNECTION}" = 1 ]; then
    if ! /sbin/ipsecctl -sa | /usr/bin/grep -q "${MAIN_CONNECTION_IP}"; then
        echo "VPN is not using the main connection !"
        STATE=2
    fi
fi

# Check whether PacketFilter has route-to using the main connection
if [ "${IS_PF_USING_MAIN_CONNECTION}" = 1 ]; then
    if ! /sbin/pfctl -sr | /usr/bin/grep "route-to" | /usr/bin/grep -q "${MAIN_CONNECTION_GATEWAY}"; then
        echo "PF is not using the main connection !"
        STATE=2
    fi
fi

# Check miscellaneous things
if [ "${IS_MISCELLANEOUS}" = 1 ]; then
    echo
fi

if [ "${STATE}" = 0 ]; then
    echo "OK - Main connection is UP and used (${INFO_MAIN_CONNECTION}), second connection is UP (${INFO_SECOND_CONNECTION})"
fi

exit ${STATE}