Биллинговая система Nodeny

dev.igb.0.rx_processing_limit=4096
dev.igb.1.rx_processing_limit=4096
net.route.netisr_maxqlen=4096
kern.ipc.maxsockbuf=83886080
net.inet.ip.dummynet.pipe_slot_limit=1000
net.inet.ip.dummynet.io_fast=1

hw.igb.rxd=4096
hw.igb.txd=4096
hw.igb.rx_process_limit=2048
hw.igb.num_queues=2
hw.igb.lro=0
hw.igb.fc_setting=0

ifconfig_igb0="-rxcsum -txcsum -lro -tso up"
ifconfig_igb1="-rxcsum -txcsum -lro -tso up"

ifconfig_igb0="-rxcsum -txcsum -lro -tso up"
ifconfig_igb1="-rxcsum -txcsum -lro -tso up"

#!/bin/sh -
f='/sbin/ipfw'

ifOut='igb1'

${f} -f flush

${f} add 50 allow tcp from any to me 22
${f} add 51 allow tcp from me 22 to any

${f} add 65 allow tcp from any to me 1723
${f} add 66 allow tcp from me 1723 to any
${f} add 67 allow gre from any to any

${f} add 70 allow tcp from any to me 42
${f} add 71 allow tcp from me 42 to any

${f} add 80 allow udp from any to me 42
${f} add 81 allow udp from me 42 to any

${f} add 110 allow ip from any to any via lo0
${f} add 120 skipto 1000 ip from me to any
${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17

${f} add 140 deny ip from any to "table(120)"
${f} add 150 deny ip from "table(120)" to any
${f} add 160 skipto 2000 ip from any to me

${f} add 200 skipto 500 ip from any to any via ${ifOut}

${f} add 300 skipto 4500 ip from any to any in

${f} add 400 skipto 450 ip from any to any recv ${ifOut}
${f} add 420 divert 1 ip from any to any
${f} add 450 divert 2 ip from any to any
${f} add 490 allow ip from any to any

${f} add 500 skipto 32500 ip from any to any in
${f} add 510 divert 1 ip from any to any
${f} add 540 allow ip from any to any


${f} add 1000 allow udp from any 53,7723 to any
${f} add 1010 allow tcp from any to any setup keep-state
${f} add 1020 allow udp from any to any keep-state
${f} add 1100 allow ip from any to any

${f} add 2000 check-state
${f} add 2010 allow icmp from any to any
${f} add 2020 allow tcp from any to any 80,443
#${f} add 2050 deny ip from any to any via ${ifOut}
${f} add 2060 allow udp from any to any 53,7723

#${f} add 2100 pass tcp pass tcp from any 1723 to any 1024-65535 out xmit ${ifOut}
#${f} add 2110 pass tcp from any 1024-65535 to any 1723 in recv ${ifOut}
#${f} add 2120 pass gre from any to any out xmit ${ifOut}
#${f} add 2130 pass gre from any to any in recv ${ifOut}

${f} add 2100 deny ip from any to any

${f} add 32490 deny ip from any to any

kern.maxdsiz="1G"
kern.dfldsiz="1G"
if_igb_load="YES"
hw.igb.rxd=4096
hw.igb.txd=4096
hw.igb.rx_process_limit=2048
hw.igb.num_queues=2
hw.igb.lro=0
hw.igb.fc_setting=0

# $FreeBSD: src/etc/sysctl.conf,v 1.8.34.1.4.1 2010/06/14 02:09:06 kensmith Exp $
#
#  This file is read when going to multi-user and its contents piped thru
#  ``sysctl'' to adjust kernel values.  ``man 5 sysctl.conf'' for details.
#

# Uncomment this to prevent users from seeing information about processes that
# are being run under another UID.
#security.bsd.see_other_uids=0
net.inet.ip.forwarding=1
net.inet.ip.fastforwarding=1
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=0
net.route.netisr_maxqlen=4096
#net.inet.icmp.drop_redirect=1
#net.inet.icmp.log_redirect=0
#net.inet.ip.redirect=0
#net.inet.ip.sourceroute=0
#net.inet.ip.accept_sourceroute=0
#net.inet.icmp.bmcastecho=0
#net.inet.icmp.maskrepl=0
#net.link.ether.inet.max_age=30
#net.inet.tcp.drop_synfin=1
#net.inet.tcp.syncookies=1
kern.ipc.somaxconn=32768
kern.maxfiles=204800
kern.maxfilesperproc=200000
kern.ipc.numbclusters=524288
kern.ipc.maxsockbuf=83886080
#kern.random.sys.harvest.ethernet=0
#kern.rendom.sys.harvest.interrupt=0
net.inet.ip.dummynet.io_fast=1
net.inet.ip.dummynet.max_chain_len=2048
net.inet.ip.dummynet.hash_size=65535
net.inet.ip.dummynet.pipe_slot_limit=2048
net.inet.carp.preempt=1
net.inet.carp.log=1
kern.ipc.shmmax=67108864
net.inet.ip.intr_queue_maxlen=1024

#net.inet.ip.fw.one_pass=0
dev.igb.0.enable_lro=0
dev.igb.1.enable_lro=0
dev.igb.0.enable_aim=0
dev.igb.1.enable_aim=0
dev.igb.0.rx_processing_limit=4096
dev.igb.0.flow_control=0
dev.igb.1.rx_processing_limit=4096
dev.igb.1.flow_control=0