Биллинговая система Nodeny

gateway_enable="YES"
keymap="ua.koi8-u.shift.alt"
sshd_enable="YES"
# -- sysinstall generated deltas -- # Fri Mar  5 23:47:42 2010
ifconfig_vr0="inet 192.168.0.1  netmask 255.255.255.0"
ifconfig_re0="inet 192.168.133.1  netmask 255.255.0.0"
defaultrouter="192.168.222.1"
hostname="nodeny.com.gg"
firewall_enable="YES"

fsck_y_enable="YES"
background_fsck="NO"
mysql_enable="YES"
apache22_enable="YES"
firewall_enable="YES"
#pf_enable="YES"
ipcad_enable="YES"
#pf_rules="/etc/pf.conf"
mpd_enable=.YES.
natd_enable="YES"
natd_flags="-n re0 -p 7777"

#!/bin/sh -
f='/sbin/ipfw'
${f} add 100 allow ip from any to any

ifOut='re0'
natp='7777'
natif='re0'
lonet='192.168.0.1/24'

${f} add 10 divert ${natp} ip from ${lonet} to not me out xmit ${natif}
${f} add 20 divert ${natp} ip from any to me in recv ${natif}

${f} -f flush

${f} add 50 allow tcp from any to me 22
${f} add 51 allow tcp from me 22 to any

${f} add 110 allow ip from any to any via lo0
${f} add 120 skipto 1000 ip from me to any
${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17
${f} add 160 skipto 2000 ip from any to me

${f} add 200 skipto 500 ip from any to any via ${ifOut}

${f} add 300 skipto 4500 ip from any to any in

${f} add 400 skipto 450 ip from any to any recv ${ifOut}
${f} add 420 divert 1 ip from any to any
${f} add 450 divert 2 ip from any to any
${f} add 490 allow ip from any to any

${f} add 500 skipto 32500 ip from any to any in
${f} add 510 divert 1 ip from any to any
${f} add 540 allow ip from any to any


${f} add 1000 allow udp from any 53,7723 to any

startup:
        set user admin hardpass6
        set console self 127.0.0.1 5005
        set console open
        set web self 192.168.0.1 5006
        set web open

default:
        load pppoe_server

pppoe_server:

        create bundle template B
        set ipcp ranges 192.168.0.1/24 127.0.0.2/32
	set ipcp dns 10.1.1.1
	set ccp yes mppc
	set mppc yes e40
	set mppc yes e56
	set mppc yes e128
	set mppc yes stateless
	set ecp disable dese-bis dese-old

        create link template common pppoe
        set link enable multilink
        set link action bundle B
        set link disable chap pap eap
        set link enable pap
        load radius
        set pppoe service "*"

        create link template re0 common
        set link max-children 1000
        set pppoe iface re0
        set link enable incoming
radius:
        set radius server localhost hardpass5 1812 1813
        set radius retries 3
        set radius timeout 3
        set radius me 127.0.0.1
        set auth acct-update 45
        set auth enable radius-auth
        set auth enable radius-acct
        set radius enable message-authentic

ifconfig_re0="inet 192.168.133.1  netmask 255.255.255.0"

set ipcp dns 10.1.1.1

set pppoe iface re0

test - PPP адаптер:

        DNS-суффикс этого подключения . . :
        Описание  . . . . . . . . . . . . : WAN (PPP/SLIP) Interface
        Физический адрес. . . . . . . . . : 00-53-45-00-00-00
        Dhcp включен. . . . . . . . . . . : нет
        IP-адрес  . . . . . . . . . . . . : 192.168.0.2
        Маска подсети . . . . . . . . . . : 255.255.255.255
        Основной шлюз . . . . . . . . . . : 192.168.0.2
        DNS-серверы . . . . . . . . . . . : 195.5.46.12
        NetBIOS через TCP/IP. . . . . . . : отключен

re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
        ether 00:24:1d:74:b5:8d
        inet 192.168.133.1 netmask 0xffff0000 broadcast 192.168.255.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=2808<VLAN_MTU,WOL_UCAST,WOL_MAGIC>
        ether 00:24:01:02:9e:39
        inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255
        media: Ethernet autoselect (100baseTX)
        status: active
plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=3<RXCSUM,TXCSUM>
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
        inet6 ::1 prefixlen 128
        inet 127.0.0.1 netmask 0xff000000
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1480
        inet 192.168.0.1 --> 192.168.0.2 netmask 0xffffffff

test - PPP адаптер:

        DNS-суффикс этого подключения . . :
        Описание  . . . . . . . . . . . . : WAN (PPP/SLIP) Interface
        Физический адрес. . . . . . . . . : 00-53-45-00-00-00
        Dhcp включен. . . . . . . . . . . : нет
       [b] IP-адрес  . . . . . . . . . . . . : 192.168.0.2[/b]
        Маска подсети . . . . . . . . . . : 255.255.255.255
        [b]Основной шлюз . . . . . . . . . . : 192.168.0.2[/b]
        DNS-серверы . . . . . . . . . . . : 195.5.46.12
        NetBIOS через TCP/IP. . . . . . . : отключен

	set ippool add pool1 192.168.160.30 192.168.163.253
	set ipcp ranges 192.168.30.2/32 ippool pool1