#!/bin/bash

# The directory where are stored the allowed clients
CLIENTS_DIR="/etc/racoon/allowed_clients"

# Path to the setkey command
SETKEY="/usr/sbin/setkey"

# IP of this machine
IP="192.168.3.1"

if [ ! -d $CLIENTS_DIR ]; then
    echo "Clients dir doesn't exists, giving up."
    exit 1;
fi


# Cleaning the old SAs and SPs
$SETKEY -c <<EOF
  flush;
  spdflush;
EOF


# Defining SPs for clients in $CLIENTS_DIR
cd $CLIENTS_DIR
for i in *; do
    $SETKEY -c <<EOF
      spdadd -4 $IP[500] $i[500] any -P out none;
      
      spdadd -4 $i[500] $IP[500] any -P in none;
      
      spdadd -4 $i 0.0.0.0/0[0] any -P in ipsec
        esp/tunnel/$i-$IP/require;

      spdadd -4 0.0.0.0/0[0] $i any -P out ipsec
        esp/tunnel/$IP-$i/require;
EOF
done