Биллинговая система Nodeny

# ifconfig
igb0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=53b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,TSO4,LRO>
        ether 00:1b:21:55:ab:ec
        inet 10.0.0.1 netmask 0xff000000 broadcast 10.255.255.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
igb1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=53b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,TSO4,LRO>
        ether 00:1b:21:55:ab:ed
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
        ether 00:26:18:d3:c5:5f
        inet 2xx.xxx.xxxx.1 netmask 0xffffff00 broadcast 217.66.99.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
vlan577: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 00:1b:21:55:ab:ed
        inet 193.x.x.1 netmask 0xfffffffc broadcast 193.110.107.119
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
        vlan: 577 parent interface: igb1
vlan578: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 00:1b:21:55:ab:ed
        inet 193.x.x.2 netmask 0xfffffffc broadcast 193.110.107.123
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
        vlan: 578 parent interface: igb1

!/bin/sh -
f='/sbin/ipfw'

ifOut1='vlan577'
ifOut2='vlan578'

${f} -f flush

${f} add 50 allow tcp from any to me 22
${f} add 51 allow tcp from me 22 to any
${f} add 52 allow tcp from any to me 5006
${f} add 53 allow tcp from me 5006 to any
${f} add 54 allow tcp from any to me 3306
${f} add 55 allow tcp from me 3306 to any

${f} add 56 allow tcp from me 1812 to any
${f} add 57 allow tcp from any to me 1812
${f} add 58 allow tcp from me 1813 to any
${f} add 59 allow tcp from any to me 1813

${f} add 60 allow udp from me 1812 to any
${f} add 61 allow udp from any to me 1812
${f} add 62 allow udp from me 1813 to any
${f} add 63 allow udp from any to me 1813

${f} add 64 allow ip from 10.0.0.0/8 to me 53
${f} add 65 allow tcp from 194.x.x.1to me 512-1023
${f} add 66 allow tcp from 194.x.x.233 to me 512-1023
${f} add 67 allow tcp from 2x.x.x.2 to me 512-1023
${f} add 68 allow tcp from 2x.x.x.3 to me 512-1023

${f} add 110 allow ip from any to any via lo0
${f} add 120 skipto 1000 ip from me to any
${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17
${f} add 160 skipto 2000 ip from any to me

${f} add 200 skipto 500 ip from any to any via ${ifOut1}
${f} add 201 skipto 500 ip from any to any via ${ifOut2}

${f} add 300 skipto 4500 ip from any to any in

${f} add 400 skipto 450 ip from any to any recv ${ifOut1}
${f} add 401 skipto 450 ip from any to any recv ${ifOut2}
${f} add 420 divert 1 ip from any to any
${f} add 450 divert 2 ip from any to any
${f} add 490 allow ip from any to any

${f} add 500 skipto 32500 ip from any to any in
${f} add 510 divert 1 ip from any to any
${f} add 540 allow ip from any to any


${f} add 1000 allow udp from any 53,7723 to any
${f} add 1010 allow tcp from any to any setup keep-state
${f} add 1020 allow udp from any to any keep-state
${f} add 1100 allow ip from any to any

${f} add 2000 check-state
${f} add 2010 allow icmp from any to any
${f} add 2020 allow tcp from any to any 80,443
${f} add 2050 deny ip from any to any via ${ifOut1}
${f} add 2051 deny ip from any to any via ${ifOut2}
${f} add 2060 allow udp from any to any 53,7723

${f} add 2100 deny ip from any to any

${f} add 32490 deny ip from any to any

ALTER TABLE `users_trf` ADD UNIQUE (`uid`)

ALTER TABLE `users_trf` ADD UNIQUE (`uid`)

[root@gateway /usr/local/etc]# whereis logrotate
logrotate: /usr/ports/sysutils/logrotate

/var/db/mysql/mysqld.log {
    daily
    rotate 5
    missingok
    delaycompress
    create 0640 mysql mysql
    # skip 'notifempty'

    postrotate
        MYCNF_FILE=/root/.my.cnf
        MYSQLADMIN=/usr/local/bin/mysqladmin
        if test -x $MYSQLADMIN && \
                $MYSQLADMIN --defaults-file="$MYCNF_FILE" ping >/dev/null
        then
            $MYSQLADMIN --defaults-file="$MYCNF_FILE" flush-logs
        fi
    endscript
}

[mysqld]
#bind-address=127.0.0.1
datadir=/var/db/mysql
#tmpdir=/var/lib/mysqltmp
socket=/tmp/mysql.sock

skip-external-locking
#skip-innodb

## cache
table_cache                     = 2048
thread_cache_size               = 64
query-cache-size                = 32M
query-cache-limit               = 1M

## Per-thread Buffers
sort-buffer-size                = 1M
read-buffer-size                = 1M
read-rnd-buffer-size            = 8M
join-buffer-size                = 1M

## Temp Tables
tmp-table-size                  = 64M
max-heap-table-size             = 64M

## Networking
back-log                        = 100
#max-connections                = 200
max-connect-errors              = 10000
max-allowed-packet              = 16M
interactive-timeout             = 600
wait-timeout                    = 600

## MyISAM
key-buffer-size                 = 64M
myisam-sort-buffer-size         = 128M

myisam_repair_threads           = 1
myisam_recover

## InnoDB
#innodb-log-group-home-dir      = /var/db/mysql
#innodb-data-home-dir           = /var/db/mysql
#innodb-data-file-path          = ibdata1:2000M;ibdata2:10M:autoextend
innodb-buffer-pool-size         = 16M
innodb-additional-mem-pool-size= 20M
#innodb-log-file-size           = 100M
innodb_log_files_in_group       = 2
innodb-log-buffer-size          = 4M
#innodb-flush-method            = O_DIRECT
#innodb-file-per-table          = 1
#innodb-open-files              = 300
innodb-thread-concurrency      = 2
#innodb-support-xa              = 0

[mysqld_safe]
log-error                       = /var/db/mysql/mysqld.log
open-files-limit                = 65535

log_warnings = 0