prometheus.c

   1   /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  */
   2  /*     Prometheus QoS - you can "steal fire" from your ISP     */
   3 /*      "fair-per-IP" quality of service (QoS) utility          */
   4 /*      requires Linux 2.4.x or 2.6.x with HTB support          */
   5 /*      Copyright(C) 2005-2008 Michael Polak (xChaos)           */
   6 /*    iptables-restore support Copyright(C) 2007-2008 ludva     */
   7 /*  Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf  */
   8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  */
   9
  10 /* Modified by: xChaos, 20111130
  11                  ludva, 20080415
  12
  13    Prometheus QoS is free software; you can redistribute it and/or
  14    modify it under the terms of the GNU General Public License as
  15    published by the Free Software Foundation; either version 2.1 of
  16    the License, or (at your option) any later version.
  17
  18    Prometheus QoS is distributed in the hope that it will be useful,
  19    but WITHOUT ANY WARRANTY; without even the implied warranty of
  20    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  21    General Public License for more details.
  22
  23    You should have received a copy of the GNU General Public License
  24    along with Prometheus Qos; if not, write to the Free Software
  25    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301 USA
  26
  27    GNU General Public License is located in file COPYING */
  28
  29 #define STRLEN 256
  30 #define FIRSTGROUPID 1024
  31 #define FIRSTIPCLASS 2048
  32 #undef DEBUG
  33
  34 #include "cll1-0.6.2.h"
  35
  36 const char *version = "0.8.3-b";
  37
  38 /* Version numbers: 0.8.3 is development releases ("beta"), 0.8.4 will be "stable" */
  39 /* Debian(RPM) package versions/patchlevels: 0.7.9-2, 0.8.0-1, 0.8.0-2, etc. */
  40 /* C source code development versions ("beta"): 0.7.9-a, 0.8.1-b, etc. */
  41 /* C source code release versions: 0.8.0, 0.8.2, 0.8.4, etc. */
  42
  43 const char *stats_html_signature = "<small>Statistics generated by Prometheus QoS version %s<br>GPL+Copyright(C)2005-2011 Michael Polak, <a href=\"http://www.arachne.cz/\">Arachne Labs</a></small>\n";
  44
  45 /* ======= All path names are defined here (for RPM patch) =======  */
  46
  47 char              *tc = "/sbin/tc"; /* requires tc with HTB support */
  48 char        *iptables = "/sbin/iptables"; /* requires iptables utility */
  49 char    *iptablessave = "/sbin/iptables-save"; /* not yet required */
  50 char *iptablesrestore = "/sbin/iptables-restore";  /* requires iptables-restore */
  51 const char        *ls = "/bin/ls"; /* this is not user configurable :-) */
  52
  53 char          *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */
  54 char           *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
  55
  56 char    *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
  57 char          *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */
  58 char            *html = "/var/www/traffic.html"; /* hall of fame filename */
  59 char         *preview = "/var/www/preview.html"; /* hall of fame preview */
  60 char          *cmdlog = "/var/log/prometheuslog"; /* command log filename */
  61 char         *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */
  62 char         *log_url = "logs/"; /* log directory relative URI prefix (partial URL) */
  63 char    *html_log_dir = "/var/www/logs/html/";
  64
  65 /* ======= Help screen is hopefuly self-documenting part of code :-) ======= */
  66
  67 void help(void)
  68 {
  69  puts("Command line switches:\n\
  70 \n\
  71 -?, --help    this help screen\n\
  72 -v, --version show Version number of this utility and exit\n\
  73 -c filename   force alternative /etc/prometheus.Conf filename\n\
  74 -h filename   force alternative /etc/Hosts filename (overrides hosts keyword)\n\
  75 -f            just Flush iptables and tc classes and exit (stop shaping)\n\
  76 -9            emergency iptables flush (do not read data transfer statistics)\n\
  77 -p            just generate Preview of data transfer statistics and exit\n\
  78 -d            Dry run (preview tc and iptables commands on stdout)\n\
  79 -r            Run (reset all statistics and start shaping)\n\
  80 -n            run Now (start shaping without delay - overrides qos-free-delay keyword)\n\
  81 -l Mmm YYYY   generate HTML summary of traffic Logs (Mmm=Jan-Dec or Year, YYYY=year)\n\
  82 -m            generate HTML summary of traffic logs for yesterday's Month\n\
  83 -y            generate HTML summary of traffic logs for yesterday's Year\n");
  84 /* not yet implemented:
  85 -s            start shaping! (keep data transfer statistics - but apply shaping)\n\
  86 */
  87 }
  88
  89 /* === Configuraration file values defaults - stored in global variables ==== */
  90
  91 int        filter_type = 1; /*1 mark, 2 classify*/
  92 char             *mark = "MARK";
  93 char    *mark_iptables = "MARK --set-mark ";
  94 int            dry_run = 0; /* preview - use puts() instead of system() */
  95 char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
  96 FILE    *iptables_file = NULL;
  97 int      enable_credit = 1; /* enable credit file */
  98 int         use_credit = 0; /* use credit file (if enabled)*/
  99 char            *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */
 100 int       hall_of_fame = 1; /* enable hall of fame */
 101 char              *lan = "eth0"; /* LAN interface */
 102 char       *lan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
 103 char              *wan = "eth1"; /* WAN/ISP interface */
 104 char       *wan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
 105 char         *qos_leaf = "sfq perturb 5"; /* leaf discipline */
 106 char    *qos_free_zone = NULL; /* QoS free zone */
 107 int          qos_proxy = 1; /* include proxy port to QoS */
 108 int        found_lmsid = 0; /* show links to users in LMS information system */
 109 int     include_upload = 1; /* upload+download=total traffic */
 110 char         *proxy_ip = "192.168.1.1/32"; /* our IP with proxy port */
 111 int         proxy_port = 3128; /* proxy port number */
 112 long long int     line = 1024; /* WAN/ISP download in kbps */
 113 long long int       up = 1024; /* WAN/ISP upload in kbps */
 114 int           free_min = 32; /* minimum guaranted bandwidth for all undefined hosts */
 115 int           free_max = 64; /* maximum allowed bandwidth for all undefined hosts */
 116 int     qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */
 117 int     digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */
 118 int        max_nesting = 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
 119 int            htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */
 120 int              burst = 8; /* HTB burst (in kbits) */
 121 int         burst_main = 64;
 122 int        burst_group = 32;
 123 int     magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
 124 int       keywordcount = 0;
 125 /* not yet implemented:
 126 int      fixed_packets = 0; maximum number of pps per IP address (not class!)
 127 int       packet_limit = 5; maximum number of pps to htn CEIL, not rate !!!
 128 */
 129 FILE         *log_file = NULL;
 130 char              *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
 131
 132 const int highest_priority   = 0; /* highest HTB priority (HTB built-in value is 0) */
 133 const int lowest_priority    = 7; /* lowest HTB priority (HTB built-in value is 7) */
 134 const int idxtable_treshold1 = 24;      /* this is no longer configurable */
 135 const int idxtable_treshold2 = 12;      /* this is no longer configurable */
 136 const int idxtable_bitmask1  = 3;        /* this is no longer configurable */
 137 const int idxtable_bitmask2  = 3;        /* this is no longer configurable */
 138
 139 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
 140
 141 struct IP
 142 {
 143  char *addr;
 144  char *name;
 145  char *sharing;
 146  int min;
 147  int desired;
 148  int max;
 149  int mark;
 150  int prio;
 151  int fixedprio;
 152  int group;
 153  int lmsid;
 154  unsigned long long direct;
 155  unsigned long long proxy;
 156  unsigned long long upload;
 157  unsigned long long traffic;
 158  unsigned long long credit;
 159  unsigned long pktsup;
 160  unsigned long pktsdown;
 161  struct Keyword *keyword;
 162  list(IP);
 163 } *ips=NULL, *ip, *sharedip;
 164
 165 struct Group
 166 {
 167  int min;
 168  int count;
 169  int desired;
 170  int id;
 171  list(Group);
 172 } *groups=NULL, *group;
 173
 174 struct Index
 175 {
 176  char *addr;
 177  char *id;
 178  struct Index *parent;
 179  int bitmask;
 180  int children;
 181  list(Index);
 182 } *idxs=NULL, *idx, *metaindex;
 183
 184 struct Keyword
 185 {
 186  char *key;
 187
 188  int asymetry_ratio;        /* ratio for ADSL-like upload */
 189  int asymetry_fixed;        /* fixed treshold for ADSL-like upload */
 190  int data_limit;            /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
 191  int data_prio;             /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
 192  long fixed_limit;          /* fixed data limit for setting lower HTB ceil */
 193  long fixed_prio;           /* fixed data lmit for setting lower HTB prio */
 194  int reserve_min;           /* bonus for nominal HTB rate bandwidth (in kbps) */
 195  int reserve_max;           /* malus for nominal HTB ceil (in kbps) */
 196 // int divide_max;          /* relative malus: new_ceil=rate+(old_ceil-rate)/divide_max */
 197 // int htb_ceil_bonus_divide; /* relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide */
 198  int default_prio;          /* default HTB priority for this keyword */
 199  char *html_color;
 200  int ip_count;
 201  char *leaf_discipline;
 202
 203  list(Keyword);
 204 } *keyword,*defaultkeyword=NULL,*keywords=NULL;
 205
 206 /* Damned, this must be object oriented! This looks almost like constructor ;-) */
 207
 208 void TheIP(void)
 209 {
 210  create(ip,IP);
 211  ip->name        = "";
 212  ip->addr        = "";
 213  ip->sharing     = NULL;
 214  ip->prio        = highest_priority+1;
 215  ip->lmsid       = -1;
 216  ip->fixedprio   = \
 217  ip->mark        = \
 218  ip->min         = \
 219  ip->max         = \
 220  ip->desired     = \
 221  ip->credit      = \
 222  ip->upload      = \
 223  ip->proxy       = \
 224  ip->direct      = \
 225  ip->traffic     = \
 226  ip->pktsup      = \
 227  ip->pktsdown    = 0;
 228  ip->keyword     = keywords;
 229  push(ip,ips);
 230 }
 231
 232 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
 233
 234 char *very_ugly_ipv4_code(char *inip,int bitmask,int format_as_chainname)
 235 {
 236  /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/
 237  int dot=0,n;
 238  char *ip,*outip,*outptr,*fmt;
 239
 240  duplicate(inip,ip);
 241  /* debug printf("(%s,%d) -> ",ip,bitmask); */
 242
 243  if(ip && *ip && bitmask>=0 && bitmask<=32)
 244  {
 245   string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */
 246  }
 247  else
 248  {
 249   /* should never exit here */
 250   return "undefined";
 251  }
 252  outptr=outip;
 253  while(ip && *ip)
 254  {
 255   if(*ip=='.')
 256   {
 257    if(dot<(bitmask/8-1))
 258    {
 259     if(format_as_chainname)
 260     {
 261      *outptr='_';
 262     }
 263     else
 264     {
 265      *outptr='.';
 266     }
 267     outptr++;
 268     dot++;
 269    }
 270    else
 271    {
 272     char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/
 273     if(cutdot)*cutdot='\0';
 274     if(format_as_chainname)
 275      fmt="_%d_%d";
 276     else
 277      fmt=".%d";
 278     if(bitmask%8)
 279      n=atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));
 280     else
 281      n=0;
 282
 283     /*debug  printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */
 284     sprintf(outptr,fmt,n,bitmask);
 285     if(!format_as_chainname) while(bitmask<24)
 286     {
 287      strcat(outip,".0");
 288      bitmask+=8;
 289     }
 290     /* debug printf("[%s]\n",outip); */
 291     return outip;
 292    }
 293   }
 294   else
 295   {
 296    *outptr=*ip;
 297    outptr++;
 298   }
 299   ip++;
 300  }
 301  /*should never exit here*/
 302  *outptr='\0';
 303  return outip;
 304 }
 305
 306 char *hash_id(char *ip,int bitmask)
 307 {
 308  return very_ugly_ipv4_code(ip,bitmask,1);
 309 }
 310
 311 char *subnet_id(char *ip,int bitmask)
 312 {
 313  return very_ugly_ipv4_code(ip,bitmask,0);
 314 }
 315
 316 /* ================= Let's parse configuration file here =================== */
 317
 318 void reject_config_and_exit(char *filename)
 319 {
 320  printf("Configuration file %s rejected - abnormal exit.",filename);
 321  exit(-1);
 322 }
 323
 324 void get_config(char *config_filename)
 325 {
 326  char *cnf="mark";
 327
 328  printf("Configured keywords: ");
 329  parse(config_filename)
 330  {
 331   option("keyword",kwd);
 332   if(kwd)
 333   {
 334    printf("%s ",kwd);
 335
 336    create(keyword,Keyword);
 337    keyword->key=kwd;
 338    keyword->asymetry_ratio=1;          /* ratio for ADSL-like upload */
 339    keyword->asymetry_fixed=0;          /* fixed treshold for ADSL-like upload */
 340    keyword->data_limit=8;              /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
 341    keyword->data_prio=4;               /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
 342    keyword->fixed_limit=0;             /* fixed data limit for setting lower HTB ceil */
 343    keyword->fixed_prio=0;              /* fixed data limit for setting lower HTB prio */
 344    keyword->reserve_min=8;             /* bonus for nominal HTB rate bandwidth (in kbps) */
 345    keyword->reserve_max=0;             /* malus for nominal HTB ceil (in kbps) */
 346    keyword->default_prio=highest_priority+1;
 347    keyword->html_color="000000";
 348    keyword->ip_count=0;
 349    keyword->leaf_discipline="";
 350
 351    push(keyword,keywords);
 352    if(!defaultkeyword) defaultkeyword=keyword;
 353    keywordcount++;
 354
 355    kwd=NULL;
 356   }
 357   else
 358   {
 359     for_each(keyword,keywords)
 360     {
 361      int l=strlen(keyword->key);
 362
 363      if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)
 364      {
 365       char *tmptr=_; /*  <---- l+1 ----> */
 366       _+=l+1;        /*  via-prometheus-asymetry-ratio, etc. */
 367       ioption("asymetry-ratio",keyword->asymetry_ratio);
 368       ioption("asymetry-treshold",keyword->asymetry_fixed);
 369       ioption("magic-relative-limit",keyword->data_limit);
 370       ioption("magic-relative-prio",keyword->data_prio);
 371       loption("magic-fixed-limit",keyword->fixed_limit);
 372       loption("magic-fixed-prio",keyword->fixed_prio);
 373       ioption("htb-default-prio",keyword->default_prio);
 374       ioption("htb-rate-bonus",keyword->reserve_min);
 375       ioption("htb-ceil-malus",keyword->reserve_max);
 376       option("leaf-discipline",keyword->leaf_discipline);
 377       option("html-color",keyword->html_color);
 378       _=tmptr;
 379
 380       if(keyword->data_limit || keyword->fixed_limit ||
 381          keyword->data_prio || keyword->fixed_prio)
 382       {
 383        use_credit=1;
 384       }
 385      }
 386     }
 387   }
 388
 389   option("tc",tc);
 390   option("iptables",iptables);
 391   option("iptables-save",iptablessave); /* new */
 392   option("iptables-restore",iptablesrestore); /* new */
 393   option("iptables-file",iptablesfile); /* new */
 394   option("hosts",hosts);
 395   option("lan-interface",lan);
 396   option("wan-interface",wan);
 397   option("lan-medium",lan_medium);
 398   option("wan-medium",wan_medium);
 399   lloption("wan-download",line);
 400   lloption("wan-upload",up);
 401   ioption("hall-of-fame-enable",hall_of_fame);
 402   option("hall-of-fame-title",title);
 403   option("hall-of-fame-filename",html);
 404   option("hall-of-fame-preview",preview);
 405   option("log-filename",cmdlog);
 406   option("credit-filename",credit);
 407   ioption("credit-enable",enable_credit);
 408   option("log-traffic-directory",log_dir);
 409   option("log-traffic-html-directory",html_log_dir);
 410   option("log-traffic-url-path",log_url);
 411   option("qos-free-zone",qos_free_zone);
 412   ioption("qos-free-delay",qos_free_delay);
 413   ioption("qos-proxy-enable",qos_proxy);
 414   option("qos-proxy-ip",proxy_ip);
 415   option("htb-leaf-discipline",qos_leaf);
 416   ioption("qos-proxy-port",proxy_port);
 417   ioption("free-rate",free_min);
 418   ioption("free-ceil",free_max);
 419   ioption("htb-burst",burst);
 420   ioption("htb-burst-main",burst_main);
 421   ioption("htb-burst-group",burst_group);
 422   ioption("htb-nesting-limit",max_nesting);
 423   ioption("htb-r2q",htb_r2q);
 424   ioption("magic-include-upload",include_upload);
 425   ioption("magic-treshold",magic_treshold);
 426   option("filter-type", cnf);
 427
 428 /* not yet implemented:
 429   ioption("magic-fixed-packets",fixed_packets);
 430   ioption("magic-relative-packets",packet_limit);
 431 */
 432  }
 433  fail
 434  {
 435   perror(config_filename);
 436   puts("Warning - using built-in defaults instead ...");
 437  }
 438  done;
 439  printf("\n");
 440
 441  /*leaf discipline for keywords*/
 442  for_each(keyword,keywords)
 443  {
 444     if (!strcmpi(keyword->leaf_discipline, ""))
 445     {
 446         keyword->leaf_discipline = qos_leaf;
 447     }
 448  }
 449
 450  if (strcmpi(cnf, "mark"))
 451  {
 452   filter_type = 2;
 453   mark = "CLASSIFY";
 454   mark_iptables = "CLASSIFY --set-class 1:";
 455  }
 456  else
 457  {
 458   filter_type = 1;
 459   mark = "MARK";
 460   mark_iptables = "MARK --set-mark ";
 461  }
 462
 463  /* are supplied values meaningful ?*/
 464  if(line<=0 || up<=0)
 465  {
 466   puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
 467   reject_config_and_exit(config_filename);
 468  }
 469 }
 470
 471 /* ===================== traffic analyser - uses iptables  ================ */
 472
 473 void get_traffic_statistics(void)
 474 {
 475  char *str,*cmd;
 476  int downloadflag=0;
 477
 478  textfile(Pipe,str) *line,*lines=NULL;
 479  string(str,STRLEN);
 480  string(cmd,STRLEN);
 481
 482  sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);
 483  shell(cmd);
 484  input(str,STRLEN)
 485  {
 486   create(line,Pipe);
 487   line->str=str;
 488   string(str,STRLEN);
 489   append(line,lines);
 490  }
 491
 492  for_each(line,lines)
 493  {
 494   int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0;
 495   unsigned long long traffic=0;
 496   unsigned long pkts=0;
 497   char *ipaddr=NULL,*ptr;
 498
 499   /* debug puts(line->str); */
 500   valid_columns(ptr,line->str,' ',col)
 501   if(valid) switch(col)
 502   {
 503    case 1: if(eq(ptr,"Chain"))
 504             setchainname=1;
 505            else if(eq(ptr,"pkts"))
 506             valid=0;
 507            else
 508             sscanf(ptr,"%lu",&pkts);
 509            break;
 510    case 2: if(setchainname)
 511            {
 512             if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))
 513              downloadflag=1;
 514             else
 515             if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))
 516              downloadflag=0;
 517
 518             if(eq(ptr,"post_common") || eq(ptr,"forw_common"))
 519              commonflag=1;
 520            }
 521            else
 522             sscanf(ptr,"%Lu",&traffic); traffic+=(1<<19); traffic>>=20;
 523            break;
 524    case 3: if((strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5)) || commonflag)
 525             accept=eq(ptr,mark);
 526             /*if (filter_type==1) accept=eq(ptr,"MARK"); else accept=eq(ptr,"CLASSIFY");*/
 527            break;
 528    case 8: if(downloadflag)
 529            {
 530             if(strstr(proxy_ip,ptr))proxyflag=1;
 531            }
 532            else
 533             ipaddr=ptr;
 534             break;
 535    case 9: if(downloadflag)ipaddr=ptr;break;
 536   }
 537
 538     if(accept && traffic>0 && ipaddr)
 539     {
 540      if(proxyflag)
 541      {
 542       printf("(proxy) ");
 543      }
 544      else if(!downloadflag)
 545      {
 546       printf("(upload) ");
 547      }
 548      printf("IP %s: %Lu M (%ld pkts)\n", ipaddr, traffic, pkts);
 549
 550      if_exists(ip,ips,eq(ip->addr,ipaddr));
 551      else
 552      {
 553       TheIP();
 554       ip->addr=ipaddr;
 555       if(eq(ip->addr,"0.0.0.0/0"))
 556       {
 557        ip->name="(unregistered)";
 558        ip->min=free_min;
 559        ip->max=ip->desired=free_max;
 560       }
 561      }
 562
 563      if(downloadflag)
 564      {
 565       if(proxyflag)
 566       {
 567        ip->proxy=traffic;
 568       }
 569       else
 570       {
 571        ip->traffic+=traffic;
 572       }
 573       ip->direct=ip->traffic-ip->upload-ip->proxy;
 574       ip->pktsdown=pkts;
 575      }
 576      else
 577      {
 578       ip->upload=traffic;
 579       ip->pktsup=pkts;
 580       if(include_upload)
 581       {
 582        ip->traffic+=traffic;
 583       }
 584       else
 585       {
 586        if(traffic>ip->traffic)
 587        {
 588         ip->traffic=traffic;
 589        }
 590       }
 591      }
 592     }
 593   }
 594
 595  free(cmd);
 596 }
 597
 598 /* ========== This function executes, logs OR ALSO prints command ========== */
 599
 600 void safe_run(char *cmd)
 601 {
 602  if(dry_run)
 603  {
 604   printf("\n=>%s\n",cmd);
 605  }
 606  else
 607  {
 608   system(cmd);
 609  }
 610  if(log_file)
 611  {
 612   fprintf(log_file,"%s\n",cmd);
 613  }
 614 }
 615
 616 void save_line(char *line)
 617 {
 618  fprintf(iptables_file,"%s\n",line);
 619 }
 620
 621 void run_restore(void)
 622 {
 623  char *restor;
 624  string(restor,STRLEN);
 625
 626  /*-----------------------------------------------------------------*/
 627  printf("Running %s <%s ...\n",iptablesrestore,iptablesfile);
 628  /*-----------------------------------------------------------------*/
 629
 630  save_line("COMMIT");
 631  fclose(iptables_file);
 632  if(dry_run)
 633  {
 634   parse(iptablesfile)
 635   {
 636    printf("%s\n",_);
 637   }
 638   done;
 639  }
 640
 641  sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);
 642  safe_run(restor);
 643
 644  free(restor);
 645 }
 646
 647 /* == This function strips extra characters after IP address and stores it = */
 648
 649 void parse_ip(char *str)
 650 {
 651  char *ptr,*ipaddr=NULL,*ipname=NULL,*lmsid=NULL;
 652
 653  ptr=strchr(str,'{');
 654  if(ptr)
 655  {
 656   lmsid=++ptr;
 657   while(*ptr && *ptr!='}')
 658   {
 659    ptr++;
 660   }
 661   *ptr=0;
 662  }
 663
 664  ptr=str;
 665  while(*ptr && *ptr!=' ' && *ptr!=9)
 666  {
 667   ptr++;
 668  }
 669
 670  *ptr=0;
 671  ipaddr=str;
 672  ptr++;
 673  while(*ptr && (*ptr==' ' || *ptr==9))
 674  {
 675   ptr++;
 676  }
 677  ipname=ptr;
 678  while(*ptr && *ptr!=' ' && *ptr!=9)
 679  {
 680   ptr++;
 681  }
 682  *ptr=0;
 683
 684  if_exists(ip,ips,eq(ip->addr,ipaddr));
 685  else
 686  {
 687   TheIP();
 688  }
 689  ip->addr=ipaddr;
 690  ip->name=ipname;
 691  if(lmsid)
 692  {
 693   ip->lmsid=atoi(lmsid);
 694   found_lmsid=1;
 695  }
 696 }
 697
 698 char *parse_datafile_line(char *str)
 699 {
 700  char *ptr=strchr(str,' ');
 701
 702  if(ptr)
 703  {
 704   *ptr=0;
 705   ptr++;
 706   return ptr;
 707  }
 708  else
 709  {
 710   return NULL;
 711  }
 712 }
 713
 714 struct IpLog
 715 {
 716  char *name;
 717  long traffic;
 718  long guaranted;
 719  int i;
 720  int lmsid;
 721  long l;
 722  list(IpLog);
 723 } *iplog,*iplogs;
 724
 725 void parse_ip_log(int argc, char **argv)
 726 {
 727  char *month, *year, *str, *name="(undefined)", *ptr, *ptr2, *filename;
 728  long traffic=0l, traffic_month, total=0, guaranted;
 729  int col, col2, y_ok, m_ok, accept_month, i=1, any_month=0, lmsid;
 730  char mstr[4], ystr[5];
 731  FILE *f;
 732  string(str,STRLEN);
 733  string(filename,STRLEN);
 734
 735  if(argv[1][1]=='l') /* -l */
 736  {
 737   if(argc<4)
 738   {
 739    puts("Missing parameter(s)!\nUsage: prometheus -l Mmm YYYY (Mmm=Jan-Dec or Year, YYYY=year)");
 740    exit(-1);
 741   }
 742   else
 743   {
 744    month=argv[2];
 745    if(eq(month,"Year")) any_month=1;
 746    year=argv[3];
 747   }
 748  }
 749  else
 750  {
 751   time_t t = time(NULL) - 3600*24 ; /* yesterday's timestamp*/
 752   struct tm *timep = localtime(&t);
 753
 754   if(argv[1][1]=='m') /* -m yestarday - month */
 755   {
 756    strftime(mstr, 4, "%b", timep);
 757    month=mstr;
 758    strftime(ystr, 5, "%Y", timep);
 759    year=ystr;
 760   }
 761   else /* -y yesterday - year */
 762   {
 763    month="Year";
 764    any_month=1;
 765    strftime(ystr, 5, "%Y", timep);
 766    year=ystr;
 767   }
 768  }
 769  printf("Analysing traffic for %s %s ...\n",month,year);
 770
 771  /* sorry... next release of C<<1 header file will include for_path_files(name,path) {  } macro */
 772  sprintf(str,"%s %s/",ls,log_dir);
 773  shell(str);
 774  input(str,STRLEN)
 775  {
 776   if(strstr(str,".log"))
 777   {
 778     ptr=strrchr(str,'\n');
 779     if(ptr) *ptr='\0';
 780     sprintf(filename,"%s/%s",log_dir,str);
 781     printf("Parsing %s ...",filename);
 782     accept_month=0;
 783     traffic_month=0;
 784     guaranted=0;
 785     lmsid=-1;
 786     parse(filename)
 787     {
 788      y_ok=m_ok=0;
 789      valid_columns(ptr,_,'\t',col) switch(col)
 790      {
 791       case 2: name = ptr;break;
 792       case 3: traffic = atol(ptr);break;
 793       /* column number   - was 7, now 11...*/
 794       case 7:
 795       case 8:
 796       case 9:
 797       case 10:
 798       case 11: if (isalpha(*ptr)) /* character, not numeric string = date, just one*/
 799                {
 800                 valid_columns(ptr2,ptr,' ',col2) switch(col2)
 801                 {
 802                  case 2: if(any_month || eq(ptr2,month)) m_ok = 1; break;
 803                  case 5: if(eq(ptr2,year)) y_ok = 1; break;
 804                 }
 805                }
 806                else
 807                {
 808                  if(col == 7) guaranted = atol(ptr);
 809                  if(col == 10) lmsid = atoi(ptr);
 810                }
 811      }
 812
 813      if(y_ok && m_ok)
 814      {
 815       traffic_month += traffic;
 816       accept_month = 1;
 817      }
 818     }
 819     done;
 820
 821     if(accept_month)
 822     {
 823      create(iplog,IpLog);
 824      iplog->name = name;
 825      iplog->guaranted = guaranted;
 826      iplog->traffic = traffic_month;
 827      iplog->lmsid = lmsid;
 828      insert(iplog,iplogs,desc_order_by,traffic);
 829      printf(" %ld MB\n",iplog->traffic);
 830     }
 831     else
 832     {
 833      puts(" no records.");
 834     }
 835   }
 836  }
 837  sprintf(str,"%s/%s-%s.html",html_log_dir,year,month);
 838  printf("Writing %s ...",str);
 839  f=fopen(str,"w");
 840  if(f)
 841  {
 842   fprintf(f,"<table border><tr><th colspan=\"2\">%s %s</th><th align=\"right\">lms</th><th colspan=\"2\">Data transfers</th><th align=\"right\">Min.speed</th></tr>\n ",month,year);
 843
 844   for_each(iplog,iplogs)
 845   {
 846    if(iplog->traffic)
 847    {
 848     fprintf(f,"<tr><td align=\"right\">%d</td><th align=\"left\">%s</td><td align=\"right\">", i++, iplog->name);
 849     if(iplog->lmsid > 0)
 850     {
 851      /*base URL will be configurable soon ... */
 852      fprintf(f,"<a href=\"https://hermes.spoje.net/?m=customerinfo&amp;id=%d\">%04d</a>\n", iplog->lmsid, iplog->lmsid);
 853     }
 854     else if(iplog->lmsid == 0)
 855     {
 856      fputs("-------",f);
 857     }
 858     fprintf(f,"<td align=\"right\">%ld M</td><th align=\"right\">%ld G</th><td align=\"right\">%ld kbps</th></tr>\n",
 859               iplog->traffic, iplog->traffic>>10, iplog->guaranted);
 860     total+=iplog->traffic>>10;
 861     iplog->i=i;
 862     iplog->l=total;
 863    }
 864   }
 865   fprintf(f,"<tr><th colspan=\"4\" align=\"left\">Total:</th><th align=\"right\">%ld GB</th><th align=\"right\">%Ld kbps</th></tr>\n", total, line);
 866   fputs("</table>\n", f);
 867
 868   if(i>10)
 869   {
 870    fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Resource Planning (ERP)</th></tr>\n",f);
 871    fputs("<tr><td>Analytic category</td>\n",f);
 872    fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
 873
 874    if_exists(iplog,iplogs,iplog->l>=total/4)
 875    {
 876     fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
 877     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 878    }
 879
 880    if_exists(iplog,iplogs,iplog->i==10)
 881    {
 882     fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
 883     fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 884    }
 885
 886    if_exists(iplog,iplogs,iplog->l>=total/2)
 887    {
 888     fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
 889     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 890    }
 891
 892    if_exists(iplog,iplogs,iplog->l>=4*total/5)
 893    {
 894     fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
 895     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 896    }
 897
 898    if_exists (iplog,iplogs,iplog->i>=i/5)
 899    {
 900     fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
 901     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 902    }
 903
 904    if_exists(iplog,iplogs,iplog->i>=i/4)
 905    {
 906     fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
 907     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 908    }
 909
 910    if_exists(iplog,iplogs,iplog->i>=i/2)
 911    {
 912     fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
 913     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 914    }
 915
 916    if_exists(iplog,iplogs,iplog->i>=4*i/5)
 917    {
 918     fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
 919     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 920    }
 921
 922    fprintf(f,"<tr><td>All users, all traffic</td>\n");
 923    fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%ld G</th><th align=\"right\">100 %%</th></tr>\n",i-1,total);
 924    fputs("</table>\n", f);
 925   }
 926
 927   fprintf(f, stats_html_signature, version);
 928   fclose(f);
 929   puts(" done.");
 930  }
 931 }
 932
 933 /*-----------------------------------------------------------------*/
 934 /* Are you looking for int main(int argc, char **argv) ? :-))      */
 935 /*-----------------------------------------------------------------*/
 936
 937 program
 938 {
 939  int i=0;
 940  FILE *f=NULL;
 941  char *str, *ptr, *d;
 942  char *substring;
 943  int class_count=0,ip_count=0;
 944  int parent=1;
 945  int just_flush=FALSE;
 946  int nodelay=FALSE;
 947  int just_preview=FALSE;                /* preview - generate just stats */
 948  int just_logs=FALSE;                   /* just parse logs */
 949  int run=FALSE;
 950  int total=0;
 951
 952  char *chain_forward, *chain_postrouting;
 953  char *althosts=NULL;
 954
 955  printf("\n\
 956 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
 957 Version %s - Copyright (C)2005-2011 Michael Polak (xChaos)\n\
 958 iptables-restore & burst tunning & classify modification by Ludva\n\
 959 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
 960
 961  /*----- Boring... we have to check command line options first: ----*/
 962
 963  arguments
 964  {
 965   argument("-c") { nextargument(config); }
 966   argument("-h") { nextargument(althosts);}
 967   argument("-d") { run=TRUE; dry_run=TRUE; }
 968   argument("-f") { run=TRUE; just_flush=TRUE; }
 969   argument("-9") { run=TRUE; just_flush=9; }
 970   argument("-p") { run=TRUE; just_preview=TRUE; }
 971   argument("-r") { run=TRUE; }
 972   argument("-n") { run=TRUE; nodelay=TRUE; }
 973   argument("-l") { just_logs=TRUE; }
 974   argument("-m") { just_logs=TRUE; }
 975   argument("-y") { just_logs=TRUE; }
 976   argument("-?") { help(); exit(0); }
 977   argument("--help") { help(); exit(0); }
 978   argument("-v") { exit(0); }
 979   argument("--version") { exit(0); }
 980  }
 981
 982  if(dry_run)
 983  {
 984   puts("*** THIS IS JUST DRY RUN ! ***\n");
 985  }
 986
 987  date(d); /* this is typical cll1.h macro - prints current date */
 988
 989  /*-----------------------------------------------------------------*/
 990  printf("Parsing configuration file %s ...\n", config);
 991  /*-----------------------------------------------------------------*/
 992  get_config(config);
 993
 994  if(just_logs)
 995  {
 996   parse_ip_log(argc,argv);
 997   exit(0);
 998  }
 999  else if(not run)
1000  {
1001   help();
1002   exit(0);
1003  }
1004
1005  if(althosts)
1006  {
1007   hosts=althosts;
1008  }
1009
1010  if(just_flush<9)
1011  {
1012   /*-----------------------------------------------------------------*/
1013   puts("Parsing iptables verbose output ...");
1014   /*-----------------------------------------------------------------*/
1015   get_traffic_statistics();
1016  }
1017
1018  /*-----------------------------------------------------------------*/
1019  printf("Parsing class defintion file %s ...\n", hosts);
1020  /*-----------------------------------------------------------------*/
1021  int groupidx = FIRSTGROUPID;
1022  parse(hosts)
1023  {
1024   str=_;
1025
1026   if(*str<'0' || *str>'9')
1027   {
1028    /* any line starting with non-number is comment ...*/
1029    continue;
1030   }
1031
1032   //Does this IP share QoS class with some other ?
1033   substring=strstr(str,"sharing-");
1034   if(substring)
1035   {
1036    substring+=8; //"sharing-"
1037    parse_ip(str);
1038    ip_count++;
1039    ip->sharing=substring;
1040    ip->keyword=defaultkeyword; /* settings for default keyword */
1041    while(*substring && *substring!='\n')
1042    {
1043     substring++;
1044    }
1045    *substring=0;
1046   }
1047   else
1048   {
1049    //Do we have to create new QoS class for this IP ?
1050
1051    if_exists(keyword,keywords,(substring=strstr(str,keyword->key)))
1052    {
1053     parse_ip(str);
1054     ip_count++;
1055     ip->keyword=keyword;
1056     keyword->ip_count++;
1057     ip->prio=keyword->default_prio;
1058     substring+=strlen(keyword->key)+1;
1059     ptr=substring;
1060     while(*ptr && *ptr!='-')
1061     {
1062      ptr++;
1063     }
1064     if(*ptr=='-')
1065     {
1066      *ptr=0;
1067      ip->max=ip->desired=atoi(ptr+1);
1068     }
1069     ip->min=atoi(substring);
1070     if(ip->min<=0)
1071     {
1072      printf(" %s: Illegal value of minimum bandwidth 0 kbps, using %d kbps\n",str,free_min);
1073      ip->min=free_min;
1074     }
1075     if(ip->max<=ip->min)
1076     {
1077      ip->fixedprio=1;
1078      ip->max=ip->min+ip->keyword->reserve_min;
1079     }
1080     else
1081     {
1082      ip->max-=ip->keyword->reserve_max;
1083      if(ip->max<ip->min)
1084      {
1085       ip->max=ip->min;
1086      }
1087     }
1088     ip->mark=FIRSTIPCLASS+1+class_count++;
1089
1090     if_exists(group,groups,group->min==ip->min)
1091     {
1092      group->count++;
1093      group->desired+=ip->min;
1094      ip->group = group->id;
1095     }
1096     else
1097     {
1098      create(group,Group);
1099      group->min=ip->min;
1100      group->id = groupidx++;
1101      ip->group = group->id;
1102
1103      if(group->min<8) group->min=8;
1104      /* Warning - this is maybe because of primitive tc namespace, can be fixed */
1105      /* it is because class IDs are derived from min. bandwidth. - xCh */
1106      //if(group->min>MAX_GUARANTED_KBPS) group->min=MAX_GUARANTED_KBPS;
1107
1108      group->count=1;
1109      group->desired=ip->min;
1110      insert(group,groups,desc_order_by,min);
1111     }
1112    }//endif keyword-
1113   }//endif sharing-
1114  }
1115  fail
1116  {
1117   perror(hosts);
1118   exit(-1);
1119  }
1120  done;
1121
1122  /*-----------------------------------------------------------------*/
1123  /* cll1.h - let's allocate brand new character buffer...           */
1124  /*-----------------------------------------------------------------*/
1125  string(str,STRLEN);
1126
1127  /*-----------------------------------------------------------------*/
1128  puts("Resolving shared connections ...");
1129  /*-----------------------------------------------------------------*/
1130  for_selected(ip,ips,ip->sharing)
1131  {
1132   for_selected(sharedip,ips,eq(sharedip->name,ip->sharing))
1133   {
1134    sharedip->traffic+=ip->traffic;
1135    ip->traffic=0;
1136    ip->mark=sharedip->mark;
1137    ip->lmsid=sharedip->lmsid;
1138    break;
1139   }
1140   if(!sharedip)
1141   {
1142    printf("Unresolved shared connection: %s %s sharing-%s\n",ip->addr,ip->name,ip->sharing);
1143   }
1144  }
1145
1146  if(enable_credit && just_flush<9)
1147  {
1148   /*-----------------------------------------------------------------*/
1149   printf("Parsing credit file %s ...\n", credit);
1150   /*-----------------------------------------------------------------*/
1151   parse(credit)
1152   {
1153    ptr=parse_datafile_line(_);
1154    if(ptr)
1155    {
1156     if_exists(ip,ips,eq(ip->addr,_))
1157     {
1158      sscanf(ptr,"%Lu",&(ip->credit));
1159     }
1160    }
1161   }
1162   done;
1163  }
1164
1165  if(!just_preview)
1166  {
1167   /*-----------------------------------------------------------------*/
1168   puts("Initializing iptables and tc classes ...");
1169   /*-----------------------------------------------------------------*/
1170
1171   iptables_file=fopen(iptablesfile,"w");
1172   if (iptables_file == NULL)
1173   {
1174     puts("Cannot open iptablesfile!");
1175     exit(-1);
1176   }
1177
1178   log_file=fopen(cmdlog,"w");
1179   if (log_file == NULL)
1180   {
1181     puts("Cannot open logfile!");
1182     exit(-1);
1183   }
1184
1185   save_line(iptablespreamble);
1186   run_restore();
1187
1188   sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);
1189   safe_run(str);
1190
1191   sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);
1192   safe_run(str);
1193
1194   iptables_file=fopen(iptablesfile,"w");
1195   save_line(iptablespreamble);
1196
1197   if(qos_free_zone && *qos_free_zone!='0')
1198   {
1199    char *chain;
1200
1201    sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);
1202    save_line(str);
1203
1204    if(qos_proxy)
1205    {
1206     save_line(":post_noproxy - [0:0]");
1207     sprintf(str,"-A POSTROUTING -p ! tcp -o %s -j post_noproxy", lan);
1208     save_line(str);
1209     sprintf(str,"-A POSTROUTING -s ! %s -o %s -j post_noproxy", proxy_ip, lan);
1210     save_line(str);
1211     sprintf(str,"-A POSTROUTING -s %s -p tcp --sport ! %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
1212     save_line(str);
1213
1214     chain="post_noproxy";
1215    }
1216    else
1217    {
1218     chain="POSTROUTING";
1219    }
1220
1221    sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);
1222    save_line(str);
1223   }
1224
1225   if(ip_count>idxtable_treshold1 && !just_flush)
1226   {
1227    int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */
1228    char *subnet, *buf;
1229    /*-----------------------------------------------------------------*/
1230    printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
1231    /*-----------------------------------------------------------------*/
1232
1233    save_line(":post_common - [0:0]");
1234    save_line(":forw_common - [0:0]");
1235
1236    for_selected(ip,ips,ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
1237    {
1238     buf=hash_id(ip->addr,bitmask);
1239     if_exists(idx,idxs,eq(idx->id,buf))
1240     {
1241      idx->children++;
1242     }
1243     else
1244     {
1245      create(idx,Index);
1246      idx->addr=ip->addr;
1247      idx->id=buf;
1248      idx->bitmask=bitmask;
1249      idx->parent=NULL;
1250      idx->children=0;
1251      idxcount++;
1252      push(idx,idxs);
1253     }
1254    }
1255
1256    /* brutal perfomance optimalization */
1257    while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)
1258    {
1259     bitmask-=idxtable_bitmask2;
1260     idxcount=0;
1261
1262     for_selected(idx,idxs,idx->parent==NULL)
1263     {
1264      buf=hash_id(idx->addr,bitmask);
1265      if_exists(metaindex,idxs,eq(metaindex->id,buf))
1266      {
1267       metaindex->children++;
1268      }
1269      else
1270      {
1271       create(metaindex,Index);
1272       metaindex->addr=idx->addr;
1273       metaindex->id=buf;
1274       metaindex->bitmask=bitmask;
1275       metaindex->parent=NULL;
1276       metaindex->children=0;
1277       idxcount++;
1278       push(metaindex,idxs);
1279      }
1280      idx->parent=metaindex;
1281     }
1282    }
1283
1284    /* this should slightly optimize throughout ... */
1285    sort(idx,idxs,desc_order_by,children);
1286    sort(idx,idxs,order_by,bitmask);
1287
1288    i=0;
1289    for_each(idx,idxs)
1290    {
1291     subnet=subnet_id(idx->addr,idx->bitmask);
1292     printf("%d: %s/%d\n",++i,subnet,idx->bitmask);
1293
1294     sprintf(str,":post_%s - [0:0]", idx->id);
1295     save_line(str);
1296
1297     sprintf(str,":forw_%s - [0:0]", idx->id);
1298     save_line(str);
1299
1300     if(idx->parent)
1301     {
1302      string(buf,strlen(idx->parent->id)+6);
1303      sprintf(buf,"post_%s",idx->parent->id);
1304     }
1305     else
1306     {
1307      buf="POSTROUTING";
1308     }
1309
1310     sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);
1311     save_line(str);
1312
1313     sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);
1314     save_line(str);
1315
1316     if(idx->parent)
1317     {
1318      string(buf,strlen(idx->parent->id)+6);
1319      sprintf(buf,"forw_%s",idx->parent->id);
1320     }
1321     else
1322     {
1323      buf="FORWARD";
1324     }
1325
1326     sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);
1327     save_line(str);
1328
1329     sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);
1330     save_line(str);
1331    }
1332    printf("Total indexed iptables chains created: %d\n", i);
1333
1334    sprintf(str,"-A FORWARD -o %s -j forw_common", wan);
1335    save_line(str);
1336
1337    sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);
1338    save_line(str);
1339   }
1340
1341  }
1342
1343  if(just_flush)
1344  {
1345   fclose(iptables_file);
1346   if (log_file) fclose(log_file);
1347   puts("Just flushed iptables and tc classes - now exiting ...");
1348   exit(0);
1349  }
1350
1351  if(!just_preview)
1352  {
1353   if(!dry_run && !nodelay && qos_free_delay)
1354   {
1355    printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);
1356    sleep(qos_free_delay);
1357   }
1358
1359   sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,lan,htb_r2q);
1360   safe_run(str);
1361
1362   sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1363                tc,lan,lan_medium,lan_medium,burst_main,highest_priority);
1364   safe_run(str);
1365
1366   sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1367                 tc,lan,line,line,burst_main,highest_priority);
1368   safe_run(str);
1369
1370   sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);
1371   safe_run(str);
1372
1373   sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1374                tc,wan,wan_medium,wan_medium,burst_main,highest_priority);
1375   safe_run(str);
1376
1377   sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1378                tc,wan,up,up,burst_main,highest_priority);
1379   safe_run(str);
1380  }
1381
1382  /*-----------------------------------------------------------------*/
1383  puts("Locating heavy downloaders and generating root classes ...");
1384  /*-----------------------------------------------------------------*/
1385  sort(ip,ips,desc_order_by,traffic);
1386
1387  /*-----------------------------------------------------------------*/
1388  /* sub-scope - local variables */
1389  {
1390   long long int rate=line;
1391   long long int max=line;
1392   int group_count=0;
1393   FILE *credit_file=NULL;
1394
1395   if(!just_preview && !dry_run && enable_credit)
1396   {
1397    credit_file=fopen(credit,"w");
1398   }
1399
1400   for_each(group,groups)
1401   {
1402    if(!just_preview)
1403    {
1404     //download
1405     sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
1406                  tc, lan, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);
1407     safe_run(str);
1408
1409     //upload
1410     sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
1411                  tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, highest_priority+1, group->desired);
1412     safe_run(str);
1413    }
1414
1415    if(group_count++<max_nesting)
1416    {
1417     parent=group->id;
1418    }
1419
1420    rate-=digital_divide*group->min;
1421    if(rate<group->min)
1422    {
1423     rate=group->min;
1424    }
1425
1426    /*shaping of aggresive downloaders, with credit file support */
1427    if(use_credit)
1428    {
1429     int group_rate=group->min, priority_sequence=lowest_priority;
1430
1431     for_selected(ip, ips, ip->min==group->min && ip->max>ip->min)
1432     {
1433      if( ip->keyword->data_limit && !ip->fixedprio &&
1434          ip->traffic>ip->credit+
1435          (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)) )
1436      {
1437       if(group_rate<ip->max)
1438       {
1439        ip->max=group_rate;
1440       }
1441       group_rate+=magic_treshold;
1442       ip->prio=lowest_priority;
1443       if(ip->prio<highest_priority+2)
1444       {
1445        ip->prio=highest_priority+2;
1446       }
1447      }
1448      else
1449      {
1450       if( ip->keyword->data_prio && !ip->fixedprio &&
1451           ip->traffic>ip->credit+
1452            (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20)) )
1453       {
1454        ip->prio=priority_sequence--;
1455        if(ip->prio<highest_priority+1)
1456        {
1457         ip->prio=highest_priority+1;
1458        }
1459       }
1460
1461       if(credit_file)
1462       {
1463        unsigned long long lcredit=0;
1464
1465        if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)
1466        {
1467         lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;
1468        }
1469        fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);
1470       }
1471      }
1472     }
1473
1474    }
1475   }
1476   if(credit_file)
1477   {
1478    fclose(credit_file);
1479   }
1480  }
1481
1482  if(just_preview)
1483  {
1484   f=fopen(preview,"w");
1485   ptr=preview;
1486  }
1487  else if(!dry_run && !just_flush)
1488  {
1489   /*-----------------------------------------------------------------*/
1490   printf("Writing data transfer database ...\n");
1491   /*-----------------------------------------------------------------*/
1492   f=fopen("/var/run/prometheus.previous","w");
1493   if(f)
1494   {
1495    for_selected(ip,ips,ip->traffic || ip->direct || ip->proxy ||ip->upload)
1496     fprintf(f,"%s %Lu %Lu %Lu %Lu\n",ip->addr,ip->traffic,ip->direct,ip->proxy,ip->upload);
1497    fclose(f);
1498   }
1499
1500   f=fopen(html,"w");
1501   ptr=html;
1502  }
1503
1504  if(f)
1505  {
1506
1507   int count=1;
1508   i=0;
1509
1510   /*-----------------------------------------------------------------*/
1511   printf("Sorting data and generating statistics page %s ...\n",ptr);
1512   /*-----------------------------------------------------------------*/
1513
1514   fputs("<script type=\"text/javascript\" src=\"/jquery.js\"></script>\n",f);
1515   fputs("<table border>\n<tr><th align=\"right\">#</th><th align=\"right\">group</th><th align=\"right\">IPs</th><th align=\"right\">requested</th>\n",f);
1516   fprintf(f,"<th colspan=\"%d\">data limits</th>\n",keywordcount);
1517   fputs("</tr>\n",f);
1518
1519   for_each(group,groups)
1520   {
1521 #ifdef DEBUG
1522    printf("%d k group: %d bandwidth requested: %d k\n",group->min,group->count,group->desired);
1523 #endif
1524    fprintf(f,"<tr><td align=\"right\">%d</td><td align=\"right\">%d k</td>",count,group->min);
1525    fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d k</td>",group->count,group->desired);
1526
1527    for_each(keyword,keywords)
1528    {
1529     fprintf(f,"<td align=\"right\"><span style=\"color:#%s\">%d M</span></td>",keyword->html_color,group->min*keyword->data_limit);
1530    }
1531    i+=group->desired;
1532    total+=group->count;
1533    count++;
1534   }
1535 #ifdef DEBUG
1536    printf("Total groups: %d Total bandwidth requested: %d k\nAGGREGATION: 1/%d\n",count,i,i/line);
1537 #endif
1538    fprintf(f,"<tr><th colspan=\"2\" align=\"left\">Line %Ld k</td>",line);
1539    fprintf(f,"<th align=\"right\">%d</td><th align=\"right\">%d k</td>",total,i);
1540
1541    for_each(keyword,keywords)
1542    {
1543     fprintf(f,"<th align=\"right\">%d IPs</th>",keyword->ip_count);
1544    }
1545    fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n",(int)(0.5+i/line));
1546    fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n",keywordcount,total);
1547
1548    fputs("</table>\n",f);
1549  }
1550  else if(!dry_run && !just_flush)
1551   perror(html);
1552
1553  i=1;
1554  if(f)
1555  {
1556   unsigned long long total_traffic=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;
1557   int active_classes=0;
1558   int colspan=11;
1559   FILE *iplog;
1560   struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;
1561   int limit_count=0, prio_count=0;
1562   int popup_button=0;
1563
1564   if(qos_proxy)
1565   {
1566    colspan++;
1567   }
1568   if(found_lmsid)
1569   {
1570    colspan++;
1571   }
1572
1573   fprintf(f,"<p><table border>\n<tr><th colspan=\"%d\">%s",colspan,title);
1574   fprintf(f," (%s)</th></tr>\n", d);
1575   fputs("<tr><td align=\"right\">#</td><td>hostname</td>",f);
1576   if(found_lmsid)
1577   {
1578    fputs("<td align=\"right\">lms</td>\n",f);
1579   }
1580   fputs("<td align=\"right\">credit</td>\
1581 <td align=\"right\">limit</td>\
1582 <td align=\"right\">total</td>\
1583 <td align=\"right\">direct</td>\n",f);
1584   if(qos_proxy)
1585   {
1586    fputs("<td align=\"right\">proxy</td>\n",f);
1587   }
1588   fputs("<td align=\"right\">upload</td>\
1589 <td align=\"right\">minimum</td>\
1590 <td align=\"right\">desired</td>\
1591 <td align=\"right\">maximum</td>\
1592 <td>prio</td></tr>\n",f);
1593
1594   for_each(ip,ips)
1595   {
1596    char *f1="", *f2="";
1597    if(ip->max<ip->desired)
1598    {
1599     f1="<span style=\"color:red\">";
1600     f2="</span>";
1601     limit_count++;
1602    }
1603    else if(ip->prio>highest_priority+1)
1604    {
1605     f1="<span style=\"color:brown\">";
1606     f2="</span>";
1607     prio_count++;
1608    }
1609
1610 #ifdef DEBUG
1611    printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max);
1612 #endif
1613    /* hostnames -------------------------------------- */
1614    fprintf(f,"<tr><td align=\"right\"><a name=\"%s\"></a>%d</td><td><a href=\"%s%s.log\">%s</a>\n", ip->name, i, log_url, ip->name, ip->name);
1615    fprintf(f,"<span id=\"sharing_%d\" style=\"display:none\">",i);
1616    popup_button=0;
1617    for_selected(sharedip,ips,eq(ip->name,sharedip->sharing))
1618    {
1619     fprintf(f,"<br /><a href=\"%s%s.log\">%s</a>\n", log_url, sharedip->name, sharedip->name);
1620     popup_button=1;
1621    }
1622    fputs("</span>\n",f);
1623    if(popup_button)
1624    {
1625     fprintf(f,"<span id=\"toggle_%d\">[<a href=\"#\" onClick=\"$(\'#toggle_%d\').remove();$(\'#sharing_%d\').show();$(\'#download_%d\').show();$(\'#upload_%d\').show();return(false);\" style=\"cursor: pointer; text-decoration:none;\">+</a>]</span>",
1626               i, i, i, i, i);
1627    }
1628    fputs("</td>\n",f);
1629    /* ----------------------------------------------- */
1630
1631    if(found_lmsid)
1632    {
1633     fputs("<td align=\"right\">",f);
1634     if(ip->lmsid > 0)
1635     {
1636      /*base URL will be configurable soon ... */
1637      fprintf(f,"<a href=\"https://hermes.spoje.net/?m=customerinfo&amp;id=%d\">%04d</a>\n", ip->lmsid, ip->lmsid);
1638     }
1639     else if(ip->lmsid == 0)
1640     {
1641      fputs("-------",f);
1642     }
1643     fputs("</td>\n",f);
1644    }
1645    fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->credit);
1646    fprintf(f,"<td align=\"right\"><span style=\"color:#%s\">%Lu M</span></td>",
1647              ip->keyword->html_color,
1648              ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));
1649    fprintf(f,"<td align=\"right\">%s%Lu M%s",f1, ip->traffic, f2);
1650
1651    /* download --------------------------------------- */
1652    fprintf(f,"</td><td align=\"right\">%Lu M", ip->direct);
1653    fprintf(f,"<span id=\"download_%d\" style=\"display:none\">",i);
1654    for_selected(sharedip,ips,eq(ip->name,sharedip->sharing))
1655    {
1656     fprintf(f,"<br />%Lu M", sharedip->direct);
1657    }
1658    fputs("</span></td>\n",f);
1659    /* ----------------------------------------------- */
1660
1661    if(qos_proxy)
1662    {
1663     fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->proxy);
1664    }
1665    /* upload ---------------------------------------- */
1666    fprintf(f,"<td align=\"right\">%Lu M", ip->upload);
1667    fprintf(f,"<span id=\"upload_%d\" style=\"display:none\">",i);
1668    for_selected(sharedip,ips,eq(ip->name,sharedip->sharing))
1669    {
1670     fprintf(f,"<br />%Lu M", sharedip->upload);
1671    }
1672    fputs("</span></td>\n",f);
1673    /* ----------------------------------------------- */
1674
1675    fprintf(f,"<td align=\"right\">%d k</td><td align=\"right\">%d k</td><td align=\"right\">%s%d k%s</td><td>%s%d%s</td></tr>\n",
1676              ip->min,ip->desired,f1,ip->max,f2,f1,ip->prio,f2);
1677    total_traffic+=ip->traffic;
1678    total_direct+=ip->direct;
1679    total_proxy+=ip->proxy;
1680    total_upload+=ip->upload;
1681    if(ip->traffic>0)
1682    {
1683     active_classes++;
1684     tmp_sum+=ip->traffic;
1685     create(sum,Sum);
1686     sum->l=tmp_sum;
1687     sum->i=active_classes;
1688     insert(sum,sums,order_by,i);
1689    }
1690
1691    i++;
1692
1693    if(!just_preview)
1694    {
1695     sprintf(str,"%s/%s.log",log_dir,ip->name);
1696     iplog=fopen(str,"a");
1697     if(iplog)
1698     {
1699      fprintf(iplog,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%d\t%d\t%d\t%d\t%s",
1700                     time(NULL),ip->name,ip->traffic,ip->direct,ip->proxy,ip->upload,ip->min,ip->max,ip->desired,ip->lmsid,d); /* d = date*/
1701      fclose(iplog);
1702     }
1703    }
1704   }
1705   fprintf(f,"<tr><th colspan=\"%d\" align=\"left\">SUMMARY:</td>",colspan-7);
1706   fprintf(f,"<th align=\"right\">%Lu M</th><th align=\"right\">%Lu M</th>\n", total_traffic, total_direct);
1707   if(qos_proxy)
1708   {
1709    fprintf(f,"<th align=\"right\">%Lu M</th>\n", total_proxy);
1710   }
1711   fprintf(f,"<th align=\"right\">%Lu M</th>", total_upload);
1712   fprintf(f,"<th colspan=\"4\"><span style=\"color:red\">FUP-LIMIT %dx</span> <span style=\"color:brown\">LOW-PRIO %dx</span></th></tr>\n</table>\n",limit_count,prio_count);
1713
1714   if(active_classes>10)
1715   {
1716    int top20_count=0,top20_perc1=0;
1717    long long top20_perc2=0;
1718    unsigned long long top20_sum=0l;
1719
1720    fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Resource Planning (ERP)</th></tr>\n",f);
1721    fputs("<tr><td>Analytic category</td>\n",f);
1722    fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
1723
1724    if_exists(sum,sums,sum->l>=total_traffic/4)
1725    {
1726     fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
1727     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1728    }
1729
1730    if_exists(sum,sums,sum->i==10)
1731    {
1732     fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
1733     fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1734    }
1735
1736    if_exists(sum,sums,sum->l>=total_traffic/2)
1737    {
1738     fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
1739     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1740    }
1741
1742    if_exists(sum,sums,sum->l>=4*total_traffic/5)
1743    {
1744     fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
1745     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1746    }
1747
1748    if_exists(sum,sums,sum->i>=(active_classes+1)/5)
1749    {
1750     fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
1751     top20_count=sum->i;
1752     top20_perc1=(100*sum->i+50)/active_classes;
1753     top20_sum=sum->l;
1754     top20_perc2=(100*sum->l+50)/total_traffic;
1755     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",top20_count,top20_perc1,top20_sum,top20_perc2);
1756    }
1757
1758    if_exists(sum,sums,sum->i>=(active_classes+1)/4)
1759    {
1760     fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
1761     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1762    }
1763
1764    if_exists(sum,sums,sum->i>=(active_classes+1)/2)
1765    {
1766     fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
1767     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1768    }
1769
1770    if_exists(sum,sums,sum->i>=4*(active_classes+1)/5)
1771    {
1772     fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
1773     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total_traffic);
1774    }
1775
1776    fprintf(f,"<tr><td><a href=\"%sERP.log\">All users, all traffic</a></td>\n", log_url);
1777    fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%Lu M</th><th align=\"right\">100 %%</th></tr>\n",active_classes,total_traffic);
1778    fputs("</table>\n", f);
1779
1780    /* write basic ERP data to log directory */
1781    if(!just_preview)
1782    {
1783     sprintf(str,"%s/ERP.log",log_dir);
1784     iplog=fopen(str,"a");
1785     if(iplog)
1786     {
1787      fprintf(iplog,"%ld\t%d\t%d %%\t%Lu M\t%Ld %%\tACTIVE %d\tTRAFFIC %Lu M\tCLASSES %d\tFUP-LIMIT %d\tLOW-PRIO %d\t%s",
1788                    time(NULL), top20_count, top20_perc1, top20_sum, top20_perc2,
1789                    active_classes, total_traffic, total, limit_count, prio_count, d); /* d = date*/
1790      fclose(iplog);
1791     }
1792    }
1793   }
1794
1795   fprintf(f, stats_html_signature, version);
1796   fclose(f);
1797  }
1798
1799  if(just_preview)
1800  {
1801   puts("Statistics preview generated (-p switch) - now exiting ...");
1802   exit(0);
1803  }
1804
1805  /*-----------------------------------------------------------------*/
1806  puts("Generating iptables and tc classes ...");
1807  /*-----------------------------------------------------------------*/
1808
1809  i=0;
1810  printf("%-22s %-15s mark\n","name","ip");
1811
1812  for_selected(ip,ips,ip->mark>0)
1813  {
1814
1815   if(idxs)
1816   {
1817    char *buf;
1818    duplicate(ip->addr,buf);
1819    buf=hash_id(ip->addr,32-idxtable_bitmask1);
1820
1821    string(chain_forward,6+strlen(buf));
1822    strcpy(chain_forward,"forw_");
1823    strcat(chain_forward,buf);
1824
1825    string(chain_postrouting,6+strlen(buf));
1826    strcpy(chain_postrouting,"post_");
1827    strcat(chain_postrouting,buf);
1828
1829    free(buf);
1830   }
1831   else
1832   {
1833    chain_forward="FORWARD";
1834    chain_postrouting="POSTROUTING";
1835   }
1836
1837   printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark);
1838
1839   /* -------------------------------------------------------- mark download */
1840
1841   sprintf(str,"-A %s -d %s/32 -o %s -j %s%d",chain_postrouting,ip->addr,lan,mark_iptables,ip->mark);
1842   /*sprintf(str,"-A %s -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,ip->addr,lan,ip->mark);*/
1843   /* -m limit --limit 1/s */
1844   save_line(str);
1845
1846   if(qos_proxy)
1847   {
1848    sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,mark_iptables,ip->mark);
1849    /*sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,ip->mark);*/
1850    save_line(str);
1851   }
1852
1853   sprintf(str,"-A %s -d %s/32 -o %s -j ACCEPT",chain_postrouting,ip->addr,lan);
1854   save_line(str);
1855
1856   /* -------------------------------------------------------- mark upload */
1857   sprintf(str,"-A %s -s %s/32 -o %s -j %s%d",chain_forward,ip->addr,wan,mark_iptables,ip->mark);
1858   /*  sprintf(str,"-A %s -s %s/32 -o %s -j MARK --set-mark %d",chain_forward,ip->addr,wan,ip->mark);*/
1859   save_line(str);
1860
1861   sprintf(str,"-A %s -s %s/32 -o %s -j ACCEPT",chain_forward,ip->addr,wan);
1862   save_line(str);
1863
1864   if(ip->min)
1865   {
1866    /* -------------------------------------------------------- download class */
1867    printf("(down: %dk-%dk ", ip->min, ip->max);
1868
1869    sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);
1870    safe_run(str);
1871
1872    if (strcmpi(ip->keyword->leaf_discipline, "none"))
1873    {
1874      sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, lan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1875      safe_run(str);
1876    }
1877    if (filter_type == 1)
1878    {
1879      sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, lan, ip->mark, ip->mark);
1880      safe_run(str);
1881    }
1882
1883    /* -------------------------------------------------------- upload class */
1884    printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1885                             (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
1886
1887    sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1888                 tc, wan, ip->group, ip->mark,
1889                 (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1890                 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
1891    safe_run(str);
1892
1893    if (strcmpi(ip->keyword->leaf_discipline, "none"))
1894    {
1895      sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s",tc, wan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1896      safe_run(str);
1897    }
1898    if (filter_type == 1)
1899    {
1900      sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",tc, wan, ip->mark, ip->mark);
1901      safe_run(str);
1902    }
1903   }
1904   else
1905    printf("(sharing %s)\n", ip->sharing);
1906   i++;
1907  }
1908
1909  if(idxs)
1910  {
1911    chain_forward = "forw_common";
1912    chain_postrouting = "post_common";
1913  }
1914  else
1915  {
1916    chain_forward = "FORWARD";
1917    chain_postrouting = "POSTROUTING";
1918  }
1919  /* -------------------------------- classify or reject free download */
1920  {
1921    char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */
1922    if(free_min) final_chain = "ACCEPT";
1923    if(qos_proxy)
1924    {
1925      if(free_min)
1926      {
1927        sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables,3);
1928        save_line(str);
1929      }
1930      sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s",chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1931      save_line(str);
1932    }
1933    if(free_min)
1934    {
1935      sprintf(str,"-A %s -o %s -j %s%d",chain_postrouting,lan,mark_iptables,3);
1936      save_line(str);
1937    }
1938    sprintf(str,"-A %s -o %s -j %s",chain_postrouting,lan,final_chain);
1939    save_line(str);
1940    /* ------------------------------- classify or reject free  upload */
1941    if(free_min)
1942    {
1943      sprintf(str,"-A %s -o %s -j %s%d",chain_forward,wan,mark_iptables,3);
1944      save_line(str);
1945    }
1946    sprintf(str,"-A %s -o %s -j %s",chain_forward,wan,final_chain);
1947    save_line(str);
1948  }
1949
1950  if(free_min) /* allocate free bandwith if it is not zero... */
1951  {
1952    /*-----------------------------------------------------------------*/
1953    puts("Generating free bandwith classes ...");
1954    /*-----------------------------------------------------------------*/
1955    sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1956                 tc,lan,parent,free_min,free_max,burst,lowest_priority);
1957    safe_run(str);
1958    sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1959                 tc,wan,parent,free_min,free_max,burst,lowest_priority);
1960    safe_run(str);
1961    /* tc SFQ */
1962    if (strcmpi(qos_leaf, "none"))
1963    {
1964      sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,lan,qos_leaf);
1965      safe_run(str);
1966
1967      sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,wan,qos_leaf);
1968      safe_run(str);
1969    }
1970    /* tc handle 1 fw flowid */
1971    sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,lan);
1972    safe_run(str);
1973
1974    sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,wan);
1975    safe_run(str);
1976  }
1977  printf("Total IP count: %d\n", i);
1978  run_restore();
1979  if (log_file) fclose(log_file);
1980  return 0;
1981  /* that's all folks, thank you for reading it all the way up to this point ;-) */
1982  /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
1983 }