#!/bin/sh
vpn_keepalive_host1="10.66.15.68"
vpn_keepalive_host2="10.66.128.219"

vpnc-disconnect

pingtest1 () {
 ping -q -c1 $param1 >> /dev/null
 if [ "$?" == "0" ]; then
       echo 0 #reachable

 else
  echo 1 #not reachable
 fi
}

pingtest2 () {
 ping -q -c2 $param2 >> /dev/null
 if [ "$?" == "0" ]; then
       echo 0 #reachable

 else
  echo 1 #not reachable
 fi
}

while [ true ]; do
  param1=$vpn_concentrator;
  if [ "`pingtest1`" == "0" ]; then  #Vpn concentrator reachable
    doloop=1;
    while [ $doloop -gt 0 ]; do
      param1=$vpn_keepalive_host1;

      if [ "`pingtest1`" == "0" ]; then
        sleep 300
      else
        param2=$vpn_keepalive_host2;
        if [ "`pingtest2`" == "0" ]; then
          sleep 300
        else
          doloop=0;
          vpnc-disconnect
          vpnc /tmp/etc/vpnc/vpn.conf --dpd-idle 0
          sleep 1
          if [ "`pingtest1`" != "0" ]; then
            sleep 10
          fi
          tundev="`ifconfig |grep tun |cut -b 1-4`"
          iptables -A FORWARD -o $tundev -j ACCEPT
          iptables -A FORWARD -i $tundev -j ACCEPT
          iptables -t nat -A POSTROUTING -o $tundev -j MASQUERADE
          iptables -t nat -A PREROUTING -p tcp -i $tundev --dport 3902 -j DNAT --to 192.168.7.11:3389
          ip route add default dev $tundev metric 9 table 202
          sleep 9
        fi
      fi
    done
  else
  sleep 10;
  fi

done

return 0;