Биллинговая система Nodeny

#!/bin/sh -
f='/sbin/ipfw'

ifOut='age0'

${f} -f flush

ipfw pipe 11 config bw 7Mbit/s


ipfw queue 1 config pipe 11 weight 100
ipfw queue 2 config pipe 11 weight 99
ipfw queue 3 config pipe 11 weight 98
ipfw queue 4 config pipe 11 weight 97
ipfw queue 5 config pipe 11 weight 96
ipfw queue 6 config pipe 11 weight 95
ipfw queue 7 config pipe 11 weight 1


ipfw add 25 set 5 queue 1 ip from any to 192.168.1.10 not 4000 via tun0
ipfw add 25 set 5 queue 2 ip from any to 192.168.1.10 not 4100 via tun0
ipfw add 25 set 5 queue 3 ip from any to 192.168.1.10 not 3724 via tun0
ipfw add 25 set 5 queue 4 ip from any to 192.168.1.10 not 2106 via tun0
ipfw add 25 set 5 queue 5 ip from any to 192.168.1.10 not 7777 via tun0
ipfw add 25 set 5 queue 6 ip from any to 192.168.1.10 not 80 via tun0
ipfw add 25 set 5 queue 7 ip from any to any via tun0


${f} add 50 allow tcp from any to me 22
${f} add 51 allow tcp from me 22 to any

${f} add 52 allow tcp from any to me 21
${f} add 53 allow tcp from me 21 to any

${f} add 54 allow tcp from any to me 10000
${f} add 55 allow tcp from me 10000 to any

${f} add 56 allow tcp from any to me 3306
${f} add 57 allow tcp from me 3306 to any


${f} add 110 allow ip from any to any via lo0
${f} add 120 skipto 1000 ip from me to any
${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17
${f} add 160 skipto 2000 ip from any to me

${f} add 200 skipto 500 ip from any to any via ${ifOut}

${f} add 300 skipto 4500 ip from any to any in

${f} add 400 skipto 450 ip from any to any recv ${ifOut}
${f} add 420 divert 1 ip from any to any
${f} add 450 divert 2 ip from any to any
${f} add 490 allow ip from any to any


${f} add 500 skipto 32500 ip from any to any in
${f} add 510 divert 1 ip from any to any
${f} add 540 allow ip from any to any


${f} add 1000 allow udp from any 53,7723 to any
${f} add 1010 allow tcp from any to any setup keep-state
${f} add 1020 allow udp from any to any keep-state
${f} add 1100 allow ip from any to any

${f} add 2000 check-state
${f} add 2010 allow icmp from any to any
${f} add 2020 allow tcp from any to any 80,443
${f} add 2050 deny ip from any to any via ${ifOut}
${f} add 2060 allow udp from any to any 53,7723

${f} add 2100 deny ip from any to any

${f} add 32490 deny ip from any to any