prometheus.c

   1   /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  */
   2  /*     Prometheus QoS - you can "steal fire" from your ISP     */
   3 /*      "fair-per-IP" quality of service (QoS) utility          */
   4 /*      requires Linux 2.4.x or 2.6.x with HTB support          */
   5 /*      Copyright(C) 2005-2008 Michael Polak (xChaos)           */
   6 /*    iptables-restore support Copyright(C) 2007-2008 ludva     */
   7 /*  Credit: CZFree.Net,Martin Devera,Netdave,Aquarius,Gandalf  */
   8 /* - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  */
   9
  10 /* Modified by: xChaos, 20110427
  11                  ludva, 20080415
  12
  13    Prometheus QoS is free software; you can redistribute it and/or
  14    modify it under the terms of the GNU General Public License as
  15    published by the Free Software Foundation; either version 2.1 of
  16    the License, or (at your option) any later version.
  17
  18    Prometheus QoS is distributed in the hope that it will be useful,
  19    but WITHOUT ANY WARRANTY; without even the implied warranty of
  20    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  21    General Public License for more details.
  22
  23    You should have received a copy of the GNU General Public License
  24    along with Prometheus Qos; if not, write to the Free Software
  25    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301 USA
  26
  27    GNU General Public License is located in file COPYING */
  28
  29 #define STRLEN 256
  30 #define FIRSTGROUPID 1024
  31 #define FIRSTIPCLASS 2048
  32 #undef DEBUG
  33
  34 #include "cll1-0.6.2.h"
  35
  36 const char *version = "0.8.3";
  37
  38 /* Version numbers: 0.8.3 is development releases ("beta"), 0.8.4 will be "stable" */
  39 /* Debian(RPM) package versions/patchlevels: 0.7.9-2, 0.8.0-1, 0.8.0-2, etc. */
  40 /* C source code development versions ("beta"): 0.7.9-a, 0.8.1-b, etc. */
  41 /* C source code release versions: 0.8.0, 0.8.2, 0.8.4, etc. */
  42
  43 const char *stats_html_signature = "<small>Statistics generated by Prometheus QoS version %s<br>GPL+Copyright(C)2005-2011 Michael Polak, <a href=\"http://www.arachne.cz/\">Arachne Labs</a></small>\n";
  44
  45 /* ======= All path names are defined here (for RPM patch) =======  */
  46
  47 char              *tc = "/sbin/tc"; /* requires tc with HTB support */
  48 char        *iptables = "/sbin/iptables"; /* requires iptables utility */
  49 char    *iptablessave = "/sbin/iptables-save"; /* not yet required */
  50 char *iptablesrestore = "/sbin/iptables-restore";  /* requires iptables-restore */
  51 const char        *ls = "/bin/ls"; /* this is not user configurable :-) */
  52
  53 char          *config = "/etc/prometheus/prometheus.conf"; /* main configuration file */
  54 char           *hosts = "/etc/prometheus/hosts"; /* per-IP bandwidth definition file */
  55
  56 char    *iptablesfile = "/var/spool/prometheus.iptables"; /* temporary file for iptables-restore*/
  57 char          *credit = "/var/lib/misc/prometheus.credit"; /* credit log file */
  58 char            *html = "/var/www/traffic.html"; /* hall of fame filename */
  59 char         *preview = "/var/www/preview.html"; /* hall of fame preview */
  60 char          *cmdlog = "/var/log/prometheuslog"; /* command log filename */
  61 char         *log_dir = "/var/www/logs/"; /* log directory pathname, ended with slash */
  62 char         *log_url = "logs/"; /* log directory relative URI prefix (partial URL) */
  63 char    *html_log_dir = "/var/www/logs/html/";
  64
  65 /* ======= Help screen is hopefuly self-documenting part of code :-) ======= */
  66
  67 void help(void)
  68 {
  69  puts("Command line switches:\n\
  70 \n\
  71 -?, --help    this help screen\n\
  72 -v, --version show Version number of this utility and exit\n\
  73 -c filename   force alternative /etc/prometheus.Conf filename\n\
  74 -h filename   force alternative /etc/Hosts filename (overrides hosts keyword)\n\
  75 -f            just Flush iptables and tc classes and exit (stop shaping)\n\
  76 -9            emergency iptables flush (do not read data transfer statistics)\n\
  77 -p            just generate Preview of data transfer statistics and exit\n\
  78 -d            Dry run (preview tc and iptables commands on stdout)\n\
  79 -r            Run (reset all statistics and start shaping)\n\
  80 -n            run Now (start shaping without delay - overrides qos-free-delay keyword)\n\
  81 -l Mmm YYYY   generate HTML summary of traffic Logs (Mmm=Jan-Dec or Year, YYYY=year)\n\
  82 -m            generate HTML summary of traffic logs for yesterday's Month\n\
  83 -y            generate HTML summary of traffic logs for yesterday's Year\n");
  84 /* not yet implemented:
  85 -s            start shaping! (keep data transfer statistics - but apply shaping)\n\
  86 */
  87 }
  88
  89 /* === Configuraration file values defaults - stored in global variables ==== */
  90
  91 int        filter_type = 1; /*1 mark, 2 classify*/
  92 char             *mark = "MARK";
  93 char    *mark_iptables = "MARK --set-mark ";
  94 int            dry_run = 0; /* preview - use puts() instead of system() */
  95 char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
  96 FILE    *iptables_file = NULL;
  97 int      enable_credit = 1; /* enable credit file */
  98 int         use_credit = 0; /* use credit file (if enabled)*/
  99 char            *title = "Hall of Fame - Greatest Suckers"; /* hall of fame title */
 100 int       hall_of_fame = 1; /* enable hall of fame */
 101 char              *lan = "eth0"; /* LAN interface */
 102 char       *lan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
 103 char              *wan = "eth1"; /* WAN/ISP interface */
 104 char       *wan_medium = "100Mbit"; /* 10Mbit/100Mbit ethernet */
 105 char         *qos_leaf = "sfq perturb 5"; /* leaf discipline */
 106 char    *qos_free_zone = NULL; /* QoS free zone */
 107 int          qos_proxy = 1; /* include proxy port to QoS */
 108 int        found_lmsid = 0; /* show links to users in LMS information system */
 109 int     include_upload = 1; /* upload+download=total traffic */
 110 char         *proxy_ip = "192.168.1.1/32"; /* our IP with proxy port */
 111 int         proxy_port = 3128; /* proxy port number */
 112 long long int     line = 1024; /* WAN/ISP download in kbps */
 113 long long int       up = 1024; /* WAN/ISP upload in kbps */
 114 int           free_min = 32; /* minimum guaranted bandwidth for all undefined hosts */
 115 int           free_max = 64; /* maximum allowed bandwidth for all undefined hosts */
 116 int     qos_free_delay = 0; /* seconds to sleep before applying new QoS rules */
 117 int     digital_divide = 2; /* controls digital divide weirdness ratio, 1...3 */
 118 int        max_nesting = 3; /* maximum nesting of HTB clases, built-in maximum seems to be 4 */
 119 int            htb_r2q = 256; /* should work for leaf values 512 kbps to 8 Mbps */
 120 int              burst = 8; /* HTB burst (in kbits) */
 121 int         burst_main = 64;
 122 int        burst_group = 32;
 123 int     magic_treshold = 8; /* reduce ceil by X*magic_treshhold kbps (hard shaping) */
 124 int       keywordcount = 0;
 125 /* not yet implemented:
 126 int      fixed_packets = 0; maximum number of pps per IP address (not class!)
 127 int       packet_limit = 5; maximum number of pps to htn CEIL, not rate !!!
 128 */
 129 FILE         *log_file = NULL;
 130 char              *kwd = "via-prometheus"; /* /etc/hosts comment, eg. #qos-64-128 */
 131
 132 const int highest_priority   = 0; /* highest HTB priority (HTB built-in value is 0) */
 133 const int lowest_priority    = 7; /* lowest HTB priority (HTB built-in value is 7) */
 134 const int idxtable_treshold1 = 24;      /* this is no longer configurable */
 135 const int idxtable_treshold2 = 12;      /* this is no longer configurable */
 136 const int idxtable_bitmask1  = 3;        /* this is no longer configurable */
 137 const int idxtable_bitmask2  = 3;        /* this is no longer configurable */
 138
 139 /* ==== This is C<<1 stuff - learn C<<1 first! https://dev.arachne.cz/svn/cll1h ==== */
 140
 141 struct IP
 142 {
 143  char *addr;
 144  char *name;
 145  char *sharing;
 146  int min;
 147  int desired;
 148  int max;
 149  int mark;
 150  int prio;
 151  int fixedprio;
 152  int group;
 153  int lmsid;
 154  unsigned long long direct;
 155  unsigned long long proxy;
 156  unsigned long long upload;
 157  unsigned long long traffic;
 158  unsigned long long credit;
 159  unsigned long pktsup;
 160  unsigned long pktsdown;
 161  struct Keyword *keyword;
 162  list(IP);
 163 } *ips=NULL, *ip, *sharedip;
 164
 165 struct Group
 166 {
 167  int min;
 168  int count;
 169  int desired;
 170  int id;
 171  list(Group);
 172 } *groups=NULL, *group;
 173
 174 struct Index
 175 {
 176  char *addr;
 177  char *id;
 178  struct Index *parent;
 179  int bitmask;
 180  int children;
 181  list(Index);
 182 } *idxs=NULL, *idx, *metaindex;
 183
 184 struct Keyword
 185 {
 186  char *key;
 187
 188  int asymetry_ratio;        /* ratio for ADSL-like upload */
 189  int asymetry_fixed;        /* fixed treshold for ADSL-like upload */
 190  int data_limit;            /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
 191  int data_prio;             /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
 192  long fixed_limit;          /* fixed data limit for setting lower HTB ceil */
 193  long fixed_prio;           /* fixed data lmit for setting lower HTB prio */
 194  int reserve_min;           /* bonus for nominal HTB rate bandwidth (in kbps) */
 195  int reserve_max;           /* malus for nominal HTB ceil (in kbps) */
 196 // int divide_max;          /* relative malus: new_ceil=rate+(old_ceil-rate)/divide_max */
 197 // int htb_ceil_bonus_divide; /* relative bonus: new_ceil=old_ceil+old_ceil/htb_ceil_bonus_divide */
 198  int default_prio;          /* default HTB priority for this keyword */
 199  char *html_color;
 200  int ip_count;
 201  char *leaf_discipline;
 202
 203  list(Keyword);
 204 } *keyword,*defaultkeyword=NULL,*keywords=NULL;
 205
 206 /* Damned, this must be object oriented! This looks almost like constructor ;-) */
 207
 208 void TheIP(void)
 209 {
 210  create(ip,IP);
 211  ip->name        = "";
 212  ip->addr        = "";
 213  ip->sharing     = NULL;
 214  ip->prio        = highest_priority+1;
 215  ip->lmsid       = -1;
 216  ip->fixedprio   = \
 217  ip->mark        = \
 218  ip->min         = \
 219  ip->max         = \
 220  ip->desired     = \
 221  ip->credit      = \
 222  ip->upload      = \
 223  ip->proxy       = \
 224  ip->direct      = \
 225  ip->traffic     = \
 226  ip->pktsup      = \
 227  ip->pktsdown    = 0;
 228  ip->keyword     = keywords;
 229  push(ip,ips);
 230 }
 231
 232 /* ====== iptables indexes are used to reduce complexity to log8(N) ===== */
 233
 234 char *very_ugly_ipv4_code(char *inip,int bitmask,int format_as_chainname)
 235 {
 236  /* warning: this function was debugged only for bitmask values 20,24,28 !!!*/
 237  int dot=0,n;
 238  char *ip,*outip,*outptr,*fmt;
 239
 240  duplicate(inip,ip);
 241  /* debug printf("(%s,%d) -> ",ip,bitmask); */
 242
 243  if(ip && *ip && bitmask>=0 && bitmask<=32)
 244  {
 245   string(outip,strlen(ip)+10); /*fuck unicode? assertion: 10>strlen("_%d_%d") */
 246  }
 247  else
 248  {
 249   /* should never exit here */
 250   return "undefined";
 251  }
 252  outptr=outip;
 253  while(ip && *ip)
 254  {
 255   if(*ip=='.')
 256   {
 257    if(dot<(bitmask/8-1))
 258    {
 259     if(format_as_chainname)
 260     {
 261      *outptr='_';
 262     }
 263     else
 264     {
 265      *outptr='.';
 266     }
 267     outptr++;
 268     dot++;
 269    }
 270    else
 271    {
 272     char *cutdot=strchr(ip+1,'.'); /*for bitmask<24*/
 273     if(cutdot)*cutdot='\0';
 274     if(format_as_chainname)
 275      fmt="_%d_%d";
 276     else
 277      fmt=".%d";
 278     if(bitmask%8)
 279      n=atoi(ip+1)-atoi(ip+1)%(1<<(8-bitmask%8));
 280     else
 281      n=0;
 282
 283     /*debug  printf("%d/%d => [_%d_%d]\n",atoi(ip+1),bitmask,n,bitmask); */
 284     sprintf(outptr,fmt,n,bitmask);
 285     if(!format_as_chainname) while(bitmask<24)
 286     {
 287      strcat(outip,".0");
 288      bitmask+=8;
 289     }
 290     /* debug printf("[%s]\n",outip); */
 291     return outip;
 292    }
 293   }
 294   else
 295   {
 296    *outptr=*ip;
 297    outptr++;
 298   }
 299   ip++;
 300  }
 301  /*should never exit here*/
 302  *outptr='\0';
 303  return outip;
 304 }
 305
 306 char *hash_id(char *ip,int bitmask)
 307 {
 308  return very_ugly_ipv4_code(ip,bitmask,1);
 309 }
 310
 311 char *subnet_id(char *ip,int bitmask)
 312 {
 313  return very_ugly_ipv4_code(ip,bitmask,0);
 314 }
 315
 316 /* ================= Let's parse configuration file here =================== */
 317
 318 void reject_config_and_exit(char *filename)
 319 {
 320  printf("Configuration file %s rejected - abnormal exit.",filename);
 321  exit(-1);
 322 }
 323
 324 void get_config(char *config_filename)
 325 {
 326  char *cnf="mark";
 327
 328  printf("Configured keywords: ");
 329  parse(config_filename)
 330  {
 331   option("keyword",kwd);
 332   if(kwd)
 333   {
 334    printf("%s ",kwd);
 335
 336    create(keyword,Keyword);
 337    keyword->key=kwd;
 338    keyword->asymetry_ratio=1;          /* ratio for ADSL-like upload */
 339    keyword->asymetry_fixed=0;          /* fixed treshold for ADSL-like upload */
 340    keyword->data_limit=8;              /* hard shaping: apply magic_treshold if max*data_limit MB exceeded */
 341    keyword->data_prio=4;               /* soft shaping (qos): reduce HTB prio if max*data_prio MB exceeded */
 342    keyword->fixed_limit=0;             /* fixed data limit for setting lower HTB ceil */
 343    keyword->fixed_prio=0;              /* fixed data limit for setting lower HTB prio */
 344    keyword->reserve_min=8;             /* bonus for nominal HTB rate bandwidth (in kbps) */
 345    keyword->reserve_max=0;             /* malus for nominal HTB ceil (in kbps) */
 346    keyword->default_prio=highest_priority+1;
 347    keyword->html_color="000000";
 348    keyword->ip_count=0;
 349    keyword->leaf_discipline="";
 350
 351    push(keyword,keywords);
 352    if(!defaultkeyword) defaultkeyword=keyword;
 353    keywordcount++;
 354
 355    kwd=NULL;
 356   }
 357   else
 358   {
 359     for_each(keyword,keywords)
 360     {
 361      int l=strlen(keyword->key);
 362
 363      if(!strncmp(keyword->key,_,l) && strlen(_)>l+2)
 364      {
 365       char *tmptr=_; /*  <---- l+1 ----> */
 366       _+=l+1;        /*  via-prometheus-asymetry-ratio, etc. */
 367       ioption("asymetry-ratio",keyword->asymetry_ratio);
 368       ioption("asymetry-treshold",keyword->asymetry_fixed);
 369       ioption("magic-relative-limit",keyword->data_limit);
 370       ioption("magic-relative-prio",keyword->data_prio);
 371       loption("magic-fixed-limit",keyword->fixed_limit);
 372       loption("magic-fixed-prio",keyword->fixed_prio);
 373       ioption("htb-default-prio",keyword->default_prio);
 374       ioption("htb-rate-bonus",keyword->reserve_min);
 375       ioption("htb-ceil-malus",keyword->reserve_max);
 376       option("leaf-discipline",keyword->leaf_discipline);
 377       option("html-color",keyword->html_color);
 378       _=tmptr;
 379
 380       if(keyword->data_limit || keyword->fixed_limit ||
 381          keyword->data_prio || keyword->fixed_prio)
 382       {
 383        use_credit=1;
 384       }
 385      }
 386     }
 387   }
 388
 389   option("tc",tc);
 390   option("iptables",iptables);
 391   option("iptables-save",iptablessave); /* new */
 392   option("iptables-restore",iptablesrestore); /* new */
 393   option("iptables-file",iptablesfile); /* new */
 394   option("hosts",hosts);
 395   option("lan-interface",lan);
 396   option("wan-interface",wan);
 397   option("lan-medium",lan_medium);
 398   option("wan-medium",wan_medium);
 399   lloption("wan-download",line);
 400   lloption("wan-upload",up);
 401   ioption("hall-of-fame-enable",hall_of_fame);
 402   option("hall-of-fame-title",title);
 403   option("hall-of-fame-filename",html);
 404   option("hall-of-fame-preview",preview);
 405   option("log-filename",cmdlog);
 406   option("credit-filename",credit);
 407   ioption("credit-enable",enable_credit);
 408   option("log-traffic-directory",log_dir);
 409   option("log-traffic-html-directory",html_log_dir);
 410   option("log-traffic-url-path",log_url);
 411   option("qos-free-zone",qos_free_zone);
 412   ioption("qos-free-delay",qos_free_delay);
 413   ioption("qos-proxy-enable",qos_proxy);
 414   option("qos-proxy-ip",proxy_ip);
 415   option("htb-leaf-discipline",qos_leaf);
 416   ioption("qos-proxy-port",proxy_port);
 417   ioption("free-rate",free_min);
 418   ioption("free-ceil",free_max);
 419   ioption("htb-burst",burst);
 420   ioption("htb-burst-main",burst_main);
 421   ioption("htb-burst-group",burst_group);
 422   ioption("htb-nesting-limit",max_nesting);
 423   ioption("htb-r2q",htb_r2q);
 424   ioption("magic-include-upload",include_upload);
 425   ioption("magic-treshold",magic_treshold);
 426   option("filter-type", cnf);
 427
 428 /* not yet implemented:
 429   ioption("magic-fixed-packets",fixed_packets);
 430   ioption("magic-relative-packets",packet_limit);
 431 */
 432  }
 433  fail
 434  {
 435   perror(config_filename);
 436   puts("Warning - using built-in defaults instead ...");
 437  }
 438  done;
 439  printf("\n");
 440
 441  /*leaf discipline for keywords*/
 442  for_each(keyword,keywords)
 443  {
 444     if (!strcmpi(keyword->leaf_discipline, ""))
 445     {
 446         keyword->leaf_discipline = qos_leaf;
 447     }
 448  }
 449
 450  if (strcmpi(cnf, "mark"))
 451  {
 452   filter_type = 2;
 453   mark = "CLASSIFY";
 454   mark_iptables = "CLASSIFY --set-class 1:";
 455  }
 456  else
 457  {
 458   filter_type = 1;
 459   mark = "MARK";
 460   mark_iptables = "MARK --set-mark ";
 461  }
 462
 463  /* are supplied values meaningful ?*/
 464  if(line<=0 || up<=0)
 465  {
 466   puts("Illegal value of LAN or WAN bandwidth: 0 kbps.");
 467   reject_config_and_exit(config_filename);
 468  }
 469 }
 470
 471 /* ===================== traffic analyser - uses iptables  ================ */
 472
 473 void get_traffic_statistics(void)
 474 {
 475  char *str,*cmd;
 476  int downloadflag=0;
 477
 478  textfile(Pipe,str) *line,*lines=NULL;
 479  string(str,STRLEN);
 480  string(cmd,STRLEN);
 481
 482  sprintf(cmd,"%s -L -v -x -n -t mangle",iptables);
 483  shell(cmd);
 484  input(str,STRLEN)
 485  {
 486   create(line,Pipe);
 487   line->str=str;
 488   string(str,STRLEN);
 489   append(line,lines);
 490  }
 491
 492  for_each(line,lines)
 493  {
 494   int col, accept=0,proxyflag=0,valid=1,setchainname=0,commonflag=0;
 495   unsigned long long traffic=0;
 496   unsigned long pkts=0;
 497   char *ipaddr=NULL,*ptr;
 498
 499   /* debug puts(line->str); */
 500   valid_columns(ptr,line->str,' ',col)
 501   if(valid) switch(col)
 502   {
 503    case 1: if(eq(ptr,"Chain"))
 504             setchainname=1;
 505            else if(eq(ptr,"pkts"))
 506             valid=0;
 507            else
 508             sscanf(ptr,"%lu",&pkts);
 509            break;
 510    case 2: if(setchainname)
 511            {
 512             if(!strncmp(ptr,"post_",5) || eq(ptr,"POSTROUTING"))
 513              downloadflag=1;
 514             else
 515             if(!strncmp(ptr,"forw_",5) || eq(ptr,"FORWARD"))
 516              downloadflag=0;
 517
 518             if(eq(ptr,"post_common") || eq(ptr,"forw_common"))
 519              commonflag=1;
 520            }
 521            else
 522             sscanf(ptr,"%Lu",&traffic); traffic+=(1<<19); traffic>>=20;
 523            break;
 524    case 3: if((strncmp(ptr,"post_",5) && strncmp(ptr,"forw_",5)) || commonflag)
 525             accept=eq(ptr,mark);
 526             /*if (filter_type==1) accept=eq(ptr,"MARK"); else accept=eq(ptr,"CLASSIFY");*/
 527            break;
 528    case 8: if(downloadflag)
 529            {
 530             if(strstr(proxy_ip,ptr))proxyflag=1;
 531            }
 532            else
 533             ipaddr=ptr;
 534             break;
 535    case 9: if(downloadflag)ipaddr=ptr;break;
 536   }
 537
 538     if(accept && traffic>0 && ipaddr)
 539     {
 540      if(proxyflag)
 541      {
 542       printf("(proxy) ");
 543      }
 544      else if(!downloadflag)
 545      {
 546       printf("(upload) ");
 547      }
 548      printf("IP %s: %Lu M (%ld pkts)\n", ipaddr, traffic, pkts);
 549
 550      if_exists(ip,ips,eq(ip->addr,ipaddr));
 551      else
 552      {
 553       TheIP();
 554       ip->addr=ipaddr;
 555       if(eq(ip->addr,"0.0.0.0/0"))
 556       {
 557        ip->name="(unregistered)";
 558        ip->min=free_min;
 559        ip->max=ip->desired=free_max;
 560       }
 561      }
 562
 563      if(downloadflag)
 564      {
 565       if(proxyflag)
 566       {
 567        ip->proxy=traffic;
 568       }
 569       else
 570       {
 571        ip->traffic+=traffic;
 572       }
 573       ip->direct=ip->traffic-ip->upload-ip->proxy;
 574       ip->pktsdown=pkts;
 575      }
 576      else
 577      {
 578       ip->upload=traffic;
 579       ip->pktsup=pkts;
 580       if(include_upload)
 581       {
 582        ip->traffic+=traffic;
 583       }
 584       else
 585       {
 586        if(traffic>ip->traffic)
 587        {
 588         ip->traffic=traffic;
 589        }
 590       }
 591      }
 592     }
 593   }
 594
 595  free(cmd);
 596 }
 597
 598 /* ========== This function executes, logs OR ALSO prints command ========== */
 599
 600 void safe_run(char *cmd)
 601 {
 602  if(dry_run)
 603  {
 604   printf("\n=>%s\n",cmd);
 605  }
 606  else
 607  {
 608   system(cmd);
 609  }
 610  if(log_file)
 611  {
 612   fprintf(log_file,"%s\n",cmd);
 613  }
 614 }
 615
 616 void save_line(char *line)
 617 {
 618  fprintf(iptables_file,"%s\n",line);
 619 }
 620
 621 void run_restore(void)
 622 {
 623  char *restor, *str;
 624  string(restor,STRLEN);
 625
 626  /*-----------------------------------------------------------------*/
 627  printf("Running %s <%s ...\n",iptablesrestore,iptablesfile);
 628  /*-----------------------------------------------------------------*/
 629
 630  save_line("COMMIT");
 631  fclose(iptables_file);
 632  if(dry_run)
 633  {
 634   parse(iptablesfile)
 635   {
 636    printf("%s\n",_);
 637   }
 638   done;
 639  }
 640
 641  sprintf(restor,"%s <%s",iptablesrestore, iptablesfile);
 642  safe_run(restor);
 643
 644  free(restor);
 645 }
 646
 647 /* == This function strips extra characters after IP address and stores it = */
 648
 649 void parse_ip(char *str)
 650 {
 651  char *ptr,*ipaddr=NULL,*ipname=NULL,*lmsid=NULL;
 652
 653  ptr=strchr(str,'{');
 654  if(ptr)
 655  {
 656   lmsid=++ptr;
 657   while(*ptr && *ptr!='}')
 658   {
 659    ptr++;
 660   }
 661   *ptr=0;
 662  }
 663
 664  ptr=str;
 665  while(*ptr && *ptr!=' ' && *ptr!=9)
 666  {
 667   ptr++;
 668  }
 669
 670  *ptr=0;
 671  ipaddr=str;
 672  ptr++;
 673  while(*ptr && (*ptr==' ' || *ptr==9))
 674  {
 675   ptr++;
 676  }
 677  ipname=ptr;
 678  while(*ptr && *ptr!=' ' && *ptr!=9)
 679  {
 680   ptr++;
 681  }
 682  *ptr=0;
 683
 684  if_exists(ip,ips,eq(ip->addr,ipaddr));
 685  else
 686  {
 687   TheIP();
 688  }
 689  ip->addr=ipaddr;
 690  ip->name=ipname;
 691  if(lmsid)
 692  {
 693   ip->lmsid=atoi(lmsid);
 694   found_lmsid=1;
 695  }
 696 }
 697
 698 char *parse_datafile_line(char *str)
 699 {
 700  char *ptr=strchr(str,' ');
 701
 702  if(ptr)
 703  {
 704   *ptr=0;
 705   ptr++;
 706   return ptr;
 707  }
 708  else
 709  {
 710   return NULL;
 711  }
 712 }
 713
 714 struct IpLog
 715 {
 716  char *name;
 717  long traffic;
 718  long guaranted;
 719  int i;
 720  int lmsid;
 721  long l;
 722  list(IpLog);
 723 } *iplog,*iplogs;
 724
 725 void parse_ip_log(int argc, char **argv)
 726 {
 727  char *month, *year, *str, *name="(undefined)", *ptr, *ptr2, *filename;
 728  long traffic=0l, traffic_month, total=0, guaranted;
 729  int col, col2, y_ok, m_ok, accept_month, i=1, any_month=0, lmsid;
 730  char mstr[4], ystr[5];
 731  FILE *f;
 732  string(str,STRLEN);
 733  string(filename,STRLEN);
 734
 735  if(argv[1][1]=='l') /* -l */
 736  {
 737   if(argc<4)
 738   {
 739    puts("Missing parameter(s)!\nUsage: prometheus -l Mmm YYYY (Mmm=Jan-Dec or Year, YYYY=year)");
 740    exit(-1);
 741   }
 742   else
 743   {
 744    month=argv[2];
 745    if(eq(month,"Year")) any_month=1;
 746    year=argv[3];
 747   }
 748  }
 749  else
 750  {
 751   time_t t = time(NULL) - 3600*24 ; /* yesterday's timestamp*/
 752   struct tm *timep = localtime(&t);
 753
 754   if(argv[1][1]=='m') /* -m yestarday - month */
 755   {
 756    strftime(mstr, 4, "%b", timep);
 757    month=mstr;
 758    strftime(ystr, 5, "%Y", timep);
 759    year=ystr;
 760   }
 761   else /* -y yesterday - year */
 762   {
 763    month="Year";
 764    any_month=1;
 765    strftime(ystr, 5, "%Y", timep);
 766    year=ystr;
 767   }
 768  }
 769  printf("Analysing traffic for %s %s ...\n",month,year);
 770
 771  /* sorry... next release of C<<1 header file will include for_path_files(name,path) {  } macro */
 772  sprintf(str,"%s %s/",ls,log_dir);
 773  shell(str);
 774  input(str,STRLEN)
 775  {
 776   if(strstr(str,".log"))
 777   {
 778     ptr=strrchr(str,'\n');
 779     if(ptr) *ptr='\0';
 780     sprintf(filename,"%s/%s",log_dir,str);
 781     printf("Parsing %s ...",filename);
 782     accept_month=0;
 783     traffic_month=0;
 784     guaranted=0;
 785     lmsid=-1;
 786     parse(filename)
 787     {
 788      y_ok=m_ok=0;
 789      valid_columns(ptr,_,'\t',col) switch(col)
 790      {
 791       case 2: name = ptr;break;
 792       case 3: traffic = atol(ptr);break;
 793       /* column number   - was 7, now 11...*/
 794       case 7:
 795       case 8:
 796       case 9:
 797       case 10:
 798       case 11: if (isalpha(*ptr)) /* character, not numeric string = date, just one*/
 799                {
 800                 valid_columns(ptr2,ptr,' ',col2) switch(col2)
 801                 {
 802                  case 2: if(any_month || eq(ptr2,month)) m_ok = 1; break;
 803                  case 5: if(eq(ptr2,year)) y_ok = 1; break;
 804                 }
 805                }
 806                else
 807                {
 808                  if(col == 7) guaranted = atol(ptr);
 809                  if(col == 10) lmsid = atoi(ptr);
 810                }
 811      }
 812
 813      if(y_ok && m_ok)
 814      {
 815       traffic_month += traffic;
 816       accept_month = 1;
 817      }
 818     }
 819     done;
 820
 821     if(accept_month)
 822     {
 823      create(iplog,IpLog);
 824      iplog->name = name;
 825      iplog->guaranted = guaranted;
 826      iplog->traffic = traffic_month;
 827      iplog->lmsid = lmsid;
 828      insert(iplog,iplogs,desc_order_by,traffic);
 829      printf(" %ld MB\n",iplog->traffic);
 830     }
 831     else
 832     {
 833      puts(" no records.");
 834     }
 835   }
 836  }
 837  sprintf(str,"%s/%s-%s.html",html_log_dir,year,month);
 838  printf("Writing %s ...",str);
 839  f=fopen(str,"w");
 840  if(f)
 841  {
 842   fprintf(f,"<table border><tr><th colspan=\"2\">%s %s</th><th colspan=\"2\">Data transfers</th><th align=\"right\">Min.speed</th></tr>\n ",month,year);
 843
 844   for_each(iplog,iplogs)
 845   {
 846    if(iplog->traffic)
 847    {
 848     fprintf(f,"<tr><td align=\"right\">%d</td><th align=\"left\">%s</td><td align=\"right\">%ld M</td><th align=\"right\">%ld G</th><td align=\"right\">%ld kbps</th></tr>\n",
 849               i++, iplog->name, iplog->traffic, iplog->traffic>>10, iplog->guaranted);
 850     total+=iplog->traffic>>10;
 851     iplog->i=i;
 852     iplog->l=total;
 853    }
 854   }
 855   fprintf(f,"<tr><th colspan=\"3\" align=\"left\">Total:</th><th align=\"right\">%ld GB</th><th align=\"right\">%Ld kbps</th></tr>\n", total, line);
 856   fputs("</table>\n", f);
 857
 858   if(i>10)
 859   {
 860    fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Research and Planning (ERP)</th></tr>\n",f);
 861    fputs("<tr><td>Analytic category</td>\n",f);
 862    fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
 863
 864    if_exists(iplog,iplogs,iplog->l>=total/4)
 865    {
 866     fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
 867     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 868    }
 869
 870    if_exists(iplog,iplogs,iplog->i==10)
 871    {
 872     fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
 873     fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 874    }
 875
 876    if_exists(iplog,iplogs,iplog->l>=total/2)
 877    {
 878     fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
 879     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 880    }
 881
 882    if_exists(iplog,iplogs,iplog->l>=4*total/5)
 883    {
 884     fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
 885     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><th align=\"right\">%d %%</th></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 886    }
 887
 888    if_exists (iplog,iplogs,iplog->i>=i/5)
 889    {
 890     fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
 891     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 892    }
 893
 894    if_exists(iplog,iplogs,iplog->i>=i/4)
 895    {
 896     fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
 897     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 898    }
 899
 900    if_exists(iplog,iplogs,iplog->i>=i/2)
 901    {
 902     fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
 903     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 904    }
 905
 906    if_exists(iplog,iplogs,iplog->i>=4*i/5)
 907    {
 908     fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
 909     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%ld G</td><td align=\"right\">%d %%</td></tr>\n",iplog->i,(100*iplog->i+50)/i,iplog->l,(int)((100*iplog->l+50)/total));
 910    }
 911
 912    fprintf(f,"<tr><td>All users, all traffic</td>\n");
 913    fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%ld G</th><th align=\"right\">100 %%</th></tr>\n",i-1,total);
 914    fputs("</table>\n", f);
 915   }
 916
 917   fprintf(f, stats_html_signature, version);
 918   fclose(f);
 919   puts(" done.");
 920  }
 921 }
 922
 923 /*-----------------------------------------------------------------*/
 924 /* Are you looking for int main(int argc, char **argv) ? :-))      */
 925 /*-----------------------------------------------------------------*/
 926
 927 program
 928 {
 929  int i=0;
 930  FILE *f=NULL;
 931  char *str, *ptr, *d;
 932  char *substring;
 933  int class_count=0,ip_count=0;
 934  int parent=1;
 935  int just_flush=FALSE;
 936  int nodelay=FALSE;
 937  int just_preview=FALSE;                /* preview - generate just stats */
 938  int just_logs=FALSE;                   /* just parse logs */
 939  int run=FALSE;
 940
 941  char *chain_forward, *chain_postrouting;
 942  char *althosts=NULL;
 943
 944  printf("\n\
 945 Prometheus QoS - \"fair-per-IP\" Quality of Service setup utility.\n\
 946 Version %s - Copyright (C)2005-2011 Michael Polak (xChaos)\n\
 947 iptables-restore & burst tunning & classify modification by Ludva\n\
 948 Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
 949
 950  /*----- Boring... we have to check command line options first: ----*/
 951
 952  arguments
 953  {
 954   argument("-c") { nextargument(config); }
 955   argument("-h") { nextargument(althosts);}
 956   argument("-d") { run=TRUE; dry_run=TRUE; }
 957   argument("-f") { run=TRUE; just_flush=TRUE; }
 958   argument("-9") { run=TRUE; just_flush=9; }
 959   argument("-p") { run=TRUE; just_preview=TRUE; }
 960   argument("-r") { run=TRUE; }
 961   argument("-n") { run=TRUE; nodelay=TRUE; }
 962   argument("-l") { just_logs=TRUE; }
 963   argument("-m") { just_logs=TRUE; }
 964   argument("-y") { just_logs=TRUE; }
 965   argument("-?") { help(); exit(0); }
 966   argument("--help") { help(); exit(0); }
 967   argument("-v") { exit(0); }
 968   argument("--version") { exit(0); }
 969  }
 970
 971  if(dry_run)
 972  {
 973   puts("*** THIS IS JUST DRY RUN ! ***\n");
 974  }
 975
 976  date(d); /* this is typical cll1.h macro - prints current date */
 977
 978  /*-----------------------------------------------------------------*/
 979  printf("Parsing configuration file %s ...\n", config);
 980  /*-----------------------------------------------------------------*/
 981  get_config(config);
 982
 983  if(just_logs)
 984  {
 985   parse_ip_log(argc,argv);
 986   exit(0);
 987  }
 988  else if(not run)
 989  {
 990   help();
 991   exit(0);
 992  }
 993
 994  if(althosts)
 995  {
 996   hosts=althosts;
 997  }
 998
 999  if(just_flush<9)
1000  {
1001   /*-----------------------------------------------------------------*/
1002   puts("Parsing iptables verbose output ...");
1003   /*-----------------------------------------------------------------*/
1004   get_traffic_statistics();
1005  }
1006
1007  /*-----------------------------------------------------------------*/
1008  printf("Parsing class defintion file %s ...\n", hosts);
1009  /*-----------------------------------------------------------------*/
1010  int groupidx = FIRSTGROUPID;
1011  parse(hosts)
1012  {
1013   str=_;
1014
1015   if(*str<'0' || *str>'9')
1016   {
1017    /* any line starting with non-number is comment ...*/
1018    continue;
1019   }
1020
1021   //Does this IP share QoS class with some other ?
1022   substring=strstr(str,"sharing-");
1023   if(substring)
1024   {
1025    substring+=8; //"sharing-"
1026    parse_ip(str);
1027    ip_count++;
1028    ip->sharing=substring;
1029    ip->keyword=defaultkeyword; /* settings for default keyword */
1030    while(*substring && *substring!='\n')
1031    {
1032     substring++;
1033    }
1034    *substring=0;
1035   }
1036   else
1037   {
1038    //Do we have to create new QoS class for this IP ?
1039
1040    if_exists(keyword,keywords,(substring=strstr(str,keyword->key)))
1041    {
1042     parse_ip(str);
1043     ip_count++;
1044     ip->keyword=keyword;
1045     keyword->ip_count++;
1046     ip->prio=keyword->default_prio;
1047     substring+=strlen(keyword->key)+1;
1048     ptr=substring;
1049     while(*ptr && *ptr!='-')
1050     {
1051      ptr++;
1052     }
1053     if(*ptr=='-')
1054     {
1055      *ptr=0;
1056      ip->max=ip->desired=atoi(ptr+1);
1057     }
1058     ip->min=atoi(substring);
1059     if(ip->min<=0)
1060     {
1061      printf(" %s: Illegal value of minimum bandwidth 0 kbps, using %d kbps\n",str,free_min);
1062      ip->min=free_min;
1063     }
1064     if(ip->max<=ip->min)
1065     {
1066      ip->fixedprio=1;
1067      ip->max=ip->min+ip->keyword->reserve_min;
1068     }
1069     else
1070     {
1071      ip->max-=ip->keyword->reserve_max;
1072      if(ip->max<ip->min)
1073      {
1074       ip->max=ip->min;
1075      }
1076     }
1077     ip->mark=FIRSTIPCLASS+1+class_count++;
1078
1079     if_exists(group,groups,group->min==ip->min)
1080     {
1081      group->count++;
1082      group->desired+=ip->min;
1083      ip->group = group->id;
1084     }
1085     else
1086     {
1087      create(group,Group);
1088      group->min=ip->min;
1089      group->id = groupidx++;
1090      ip->group = group->id;
1091
1092      if(group->min<8) group->min=8;
1093      /* Warning - this is maybe because of primitive tc namespace, can be fixed */
1094      /* it is because class IDs are derived from min. bandwidth. - xCh */
1095      //if(group->min>MAX_GUARANTED_KBPS) group->min=MAX_GUARANTED_KBPS;
1096
1097      group->count=1;
1098      group->desired=ip->min;
1099      insert(group,groups,desc_order_by,min);
1100     }
1101    }//endif keyword-
1102   }//endif sharing-
1103  }
1104  fail
1105  {
1106   perror(hosts);
1107   exit(-1);
1108  }
1109  done;
1110
1111  /*-----------------------------------------------------------------*/
1112  /* cll1.h - let's allocate brand new character buffer...           */
1113  /*-----------------------------------------------------------------*/
1114  string(str,STRLEN);
1115
1116  /*-----------------------------------------------------------------*/
1117  puts("Resolving shared connections ...");
1118  /*-----------------------------------------------------------------*/
1119  for_selected(ip,ips,ip->sharing)
1120  {
1121   for_selected(sharedip,ips,eq(sharedip->name,ip->sharing))
1122   {
1123    sharedip->traffic+=ip->traffic;
1124    ip->traffic=0;
1125    ip->mark=sharedip->mark;
1126    break;
1127   }
1128   if(!sharedip)
1129   {
1130    printf("Unresolved shared connection: %s %s sharing-%s\n",ip->addr,ip->name,ip->sharing);
1131   }
1132  }
1133
1134  if(enable_credit && just_flush<9)
1135  {
1136   /*-----------------------------------------------------------------*/
1137   printf("Parsing credit file %s ...\n", credit);
1138   /*-----------------------------------------------------------------*/
1139   parse(credit)
1140   {
1141    ptr=parse_datafile_line(_);
1142    if(ptr)
1143    {
1144     if_exists(ip,ips,eq(ip->addr,_))
1145     {
1146      sscanf(ptr,"%Lu",&(ip->credit));
1147     }
1148    }
1149   }
1150   done;
1151  }
1152
1153  if(!just_preview)
1154  {
1155   /*-----------------------------------------------------------------*/
1156   puts("Initializing iptables and tc classes ...");
1157   /*-----------------------------------------------------------------*/
1158
1159   iptables_file=fopen(iptablesfile,"w");
1160   if (iptables_file == NULL)
1161   {
1162     puts("Cannot open iptablesfile!");
1163     exit(-1);
1164   }
1165
1166   log_file=fopen(cmdlog,"w");
1167   if (log_file == NULL)
1168   {
1169     puts("Cannot open logfile!");
1170     exit(-1);
1171   }
1172
1173   save_line(iptablespreamble);
1174   run_restore();
1175
1176   sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,lan);
1177   safe_run(str);
1178
1179   sprintf(str,"%s qdisc del dev %s root 2>/dev/null",tc,wan);
1180   safe_run(str);
1181
1182   iptables_file=fopen(iptablesfile,"w");
1183   save_line(iptablespreamble);
1184
1185   if(qos_free_zone && *qos_free_zone!='0')
1186   {
1187    char *chain;
1188
1189    sprintf(str,"-A FORWARD -d %s -o %s -j ACCEPT", qos_free_zone, wan);
1190    save_line(str);
1191
1192    if(qos_proxy)
1193    {
1194     save_line(":post_noproxy - [0:0]");
1195     sprintf(str,"-A POSTROUTING -p ! tcp -o %s -j post_noproxy", lan);
1196     save_line(str);
1197     sprintf(str,"-A POSTROUTING -s ! %s -o %s -j post_noproxy", proxy_ip, lan);
1198     save_line(str);
1199     sprintf(str,"-A POSTROUTING -s %s -p tcp --sport ! %d -o %s -j post_noproxy", proxy_ip, proxy_port, lan);
1200     save_line(str);
1201
1202     chain="post_noproxy";
1203    }
1204    else
1205    {
1206     chain="POSTROUTING";
1207    }
1208
1209    sprintf(str,"-A %s -s %s -o %s -j ACCEPT", chain, qos_free_zone, lan);
1210    save_line(str);
1211   }
1212
1213   if(ip_count>idxtable_treshold1 && !just_flush)
1214   {
1215    int idxcount=0, bitmask=32-idxtable_bitmask1; /* default net mask: 255.255.255.240 */
1216    char *subnet, *buf;
1217    /*-----------------------------------------------------------------*/
1218    printf("Detected %d addresses - indexing iptables rules to improve performance...\n",ip_count);
1219    /*-----------------------------------------------------------------*/
1220
1221    save_line(":post_common - [0:0]");
1222    save_line(":forw_common - [0:0]");
1223
1224    for_selected(ip,ips,ip->addr && *(ip->addr) && !eq(ip->addr,"0.0.0.0/0"))
1225    {
1226     buf=hash_id(ip->addr,bitmask);
1227     if_exists(idx,idxs,eq(idx->id,buf))
1228     {
1229      idx->children++;
1230     }
1231     else
1232     {
1233      create(idx,Index);
1234      idx->addr=ip->addr;
1235      idx->id=buf;
1236      idx->bitmask=bitmask;
1237      idx->parent=NULL;
1238      idx->children=0;
1239      idxcount++;
1240      push(idx,idxs);
1241     }
1242    }
1243
1244    /* brutal perfomance optimalization */
1245    while(idxcount>idxtable_treshold2 && bitmask>2*idxtable_bitmask2)
1246    {
1247     bitmask-=idxtable_bitmask2;
1248     idxcount=0;
1249
1250     for_selected(idx,idxs,idx->parent==NULL)
1251     {
1252      buf=hash_id(idx->addr,bitmask);
1253      if_exists(metaindex,idxs,eq(metaindex->id,buf))
1254      {
1255       metaindex->children++;
1256      }
1257      else
1258      {
1259       create(metaindex,Index);
1260       metaindex->addr=idx->addr;
1261       metaindex->id=buf;
1262       metaindex->bitmask=bitmask;
1263       metaindex->parent=NULL;
1264       metaindex->children=0;
1265       idxcount++;
1266       push(metaindex,idxs);
1267      }
1268      idx->parent=metaindex;
1269     }
1270    }
1271
1272    /* this should slightly optimize throughout ... */
1273    sort(idx,idxs,desc_order_by,children);
1274    sort(idx,idxs,order_by,bitmask);
1275
1276    i=0;
1277    for_each(idx,idxs)
1278    {
1279     subnet=subnet_id(idx->addr,idx->bitmask);
1280     printf("%d: %s/%d\n",++i,subnet,idx->bitmask);
1281
1282     sprintf(str,":post_%s - [0:0]", idx->id);
1283     save_line(str);
1284
1285     sprintf(str,":forw_%s - [0:0]", idx->id);
1286     save_line(str);
1287
1288     if(idx->parent)
1289     {
1290      string(buf,strlen(idx->parent->id)+6);
1291      sprintf(buf,"post_%s",idx->parent->id);
1292     }
1293     else
1294     {
1295      buf="POSTROUTING";
1296     }
1297
1298     sprintf(str,"-A %s -d %s/%d -o %s -j post_%s", buf, subnet, idx->bitmask, lan, idx->id);
1299     save_line(str);
1300
1301     sprintf(str,"-A %s -d %s/%d -o %s -j post_common", buf, subnet, idx->bitmask, lan);
1302     save_line(str);
1303
1304     if(idx->parent)
1305     {
1306      string(buf,strlen(idx->parent->id)+6);
1307      sprintf(buf,"forw_%s",idx->parent->id);
1308     }
1309     else
1310     {
1311      buf="FORWARD";
1312     }
1313
1314     sprintf(str,"-A %s -s %s/%d -o %s -j forw_%s", buf, subnet, idx->bitmask, wan, idx->id);
1315     save_line(str);
1316
1317     sprintf(str,"-A %s -s %s/%d -o %s -j forw_common", buf, subnet, idx->bitmask, wan);
1318     save_line(str);
1319    }
1320    printf("Total indexed iptables chains created: %d\n", i);
1321
1322    sprintf(str,"-A FORWARD -o %s -j forw_common", wan);
1323    save_line(str);
1324
1325    sprintf(str,"-A POSTROUTING -o %s -j post_common", lan);
1326    save_line(str);
1327   }
1328
1329  }
1330
1331  if(just_flush)
1332  {
1333   fclose(iptables_file);
1334   if (log_file) fclose(log_file);
1335   puts("Just flushed iptables and tc classes - now exiting ...");
1336   exit(0);
1337  }
1338
1339  if(!just_preview)
1340  {
1341   if(!dry_run && !nodelay && qos_free_delay)
1342   {
1343    printf("Flushed iptables and tc classes - now sleeping for %d seconds...\n",qos_free_delay);
1344    sleep(qos_free_delay);
1345   }
1346
1347   sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,lan,htb_r2q);
1348   safe_run(str);
1349
1350   sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1351                tc,lan,lan_medium,lan_medium,burst_main,highest_priority);
1352   safe_run(str);
1353
1354   sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1355                 tc,lan,line,line,burst_main,highest_priority);
1356   safe_run(str);
1357
1358   sprintf(str,"%s qdisc add dev %s root handle 1: htb r2q %d default 1",tc,wan,htb_r2q);
1359   safe_run(str);
1360
1361   sprintf(str, "%s class add dev %s parent 1: classid 1:2 htb rate %s ceil %s burst %dk prio %d",
1362                tc,wan,wan_medium,wan_medium,burst_main,highest_priority);
1363   safe_run(str);
1364
1365   sprintf(str, "%s class add dev %s parent 1:2 classid 1:1 htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d",
1366                tc,wan,up,up,burst_main,highest_priority);
1367   safe_run(str);
1368  }
1369
1370  /*-----------------------------------------------------------------*/
1371  puts("Locating heavy downloaders and generating root classes ...");
1372  /*-----------------------------------------------------------------*/
1373  sort(ip,ips,desc_order_by,traffic);
1374
1375  /*-----------------------------------------------------------------*/
1376  /* sub-scope - local variables */
1377  {
1378   long long int rate=line;
1379   long long int max=line;
1380   int group_count=0;
1381   FILE *credit_file=NULL;
1382
1383   if(!just_preview && !dry_run && enable_credit)
1384   {
1385    credit_file=fopen(credit,"w");
1386   }
1387
1388   for_each(group,groups)
1389   {
1390    if(!just_preview)
1391    {
1392     //download
1393     sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #down desired %d",
1394                  tc, lan, parent, group->id, rate, max, burst_group, highest_priority+1, group->desired);
1395     safe_run(str);
1396
1397     //upload
1398     sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %Ldkbit ceil %Ldkbit burst %dk prio %d #up desired %d",
1399                  tc, wan, parent, group->id, rate*up/line, max*up/line, burst_group, highest_priority+1, group->desired);
1400     safe_run(str);
1401    }
1402
1403    if(group_count++<max_nesting)
1404    {
1405     parent=group->id;
1406    }
1407
1408    rate-=digital_divide*group->min;
1409    if(rate<group->min)
1410    {
1411     rate=group->min;
1412    }
1413
1414    /*shaping of aggresive downloaders, with credit file support */
1415    if(use_credit)
1416    {
1417     int group_rate=group->min, priority_sequence=lowest_priority;
1418
1419     for_selected(ip, ips, ip->min==group->min && ip->max>ip->min)
1420     {
1421      if( ip->keyword->data_limit && !ip->fixedprio &&
1422          ip->traffic>ip->credit+
1423          (ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)) )
1424      {
1425       if(group_rate<ip->max)
1426       {
1427        ip->max=group_rate;
1428       }
1429       group_rate+=magic_treshold;
1430       ip->prio=lowest_priority;
1431       if(ip->prio<highest_priority+2)
1432       {
1433        ip->prio=highest_priority+2;
1434       }
1435      }
1436      else
1437      {
1438       if( ip->keyword->data_prio && !ip->fixedprio &&
1439           ip->traffic>ip->credit+
1440            (ip->min*ip->keyword->data_prio+(ip->keyword->fixed_prio<<20)) )
1441       {
1442        ip->prio=priority_sequence--;
1443        if(ip->prio<highest_priority+1)
1444        {
1445         ip->prio=highest_priority+1;
1446        }
1447       }
1448
1449       if(credit_file)
1450       {
1451        unsigned long long lcredit=0;
1452
1453        if((ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))>ip->traffic)
1454        {
1455         lcredit=(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20))-ip->traffic;
1456        }
1457        fprintf(credit_file,"%s %Lu\n",ip->addr,lcredit);
1458       }
1459      }
1460     }
1461
1462    }
1463   }
1464   if(credit_file)
1465   {
1466    fclose(credit_file);
1467   }
1468  }
1469
1470  if(just_preview)
1471  {
1472   f=fopen(preview,"w");
1473   ptr=preview;
1474  }
1475  else if(!dry_run && !just_flush)
1476  {
1477   /*-----------------------------------------------------------------*/
1478   printf("Writing data transfer database ...\n");
1479   /*-----------------------------------------------------------------*/
1480   f=fopen("/var/run/prometheus.previous","w");
1481   if(f)
1482   {
1483    for_selected(ip,ips,ip->traffic || ip->direct || ip->proxy ||ip->upload)
1484     fprintf(f,"%s %Lu %Lu %Lu %Lu\n",ip->addr,ip->traffic,ip->direct,ip->proxy,ip->upload);
1485    fclose(f);
1486   }
1487
1488   f=fopen(html,"w");
1489   ptr=html;
1490  }
1491
1492  if(f)
1493  {
1494   int total=0;
1495   int count=1;
1496   i=0;
1497
1498   /*-----------------------------------------------------------------*/
1499   printf("Sorting data and generating statistics page %s ...\n",ptr);
1500   /*-----------------------------------------------------------------*/
1501
1502   fputs("<table border>\n<tr><th align=\"right\">#</th><th align=\"right\">group</th><th align=\"right\">IPs</th><th align=\"right\">requested</th>\n",f);
1503   fprintf(f,"<th colspan=\"%d\">data limits</th>\n",keywordcount);
1504   fputs("</tr>\n",f);
1505
1506   for_each(group,groups)
1507   {
1508 #ifdef DEBUG
1509    printf("%d k group: %d bandwidth requested: %d k\n",group->min,group->count,group->desired);
1510 #endif
1511    fprintf(f,"<tr><td align=\"right\">%d</td><td align=\"right\">%d k</td>",count,group->min);
1512    fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d k</td>",group->count,group->desired);
1513
1514    for_each(keyword,keywords)
1515    {
1516     fprintf(f,"<td align=\"right\"><font color=\"#%s\">%d M</font></td>",keyword->html_color,group->min*keyword->data_limit);
1517    }
1518    i+=group->desired;
1519    total+=group->count;
1520    count++;
1521   }
1522 #ifdef DEBUG
1523    printf("Total groups: %d Total bandwidth requested: %d k\nAGGREGATION: 1/%d\n",count,i,i/line);
1524 #endif
1525    fprintf(f,"<tr><th colspan=\"2\" align=\"left\">Line %Ld k</td>",line);
1526    fprintf(f,"<th align=\"right\">%d</td><th align=\"right\">%d k</td>",total,i);
1527
1528    for_each(keyword,keywords)
1529    {
1530     fprintf(f,"<th align=\"right\">%d IPs</th>",keyword->ip_count);
1531    }
1532    fprintf(f,"</tr><tr><th colspan=\"4\">Aggregation 1/%d</th>\n",(int)(0.5+i/line));
1533    fprintf(f,"<th colspan=\"%d\">%d traffic classes</th></tr>\n",keywordcount,total);
1534
1535    fputs("</table>\n",f);
1536  }
1537  else if(!dry_run && !just_flush)
1538   perror(html);
1539
1540  i=1;
1541  if(f)
1542  {
1543   unsigned long long total=0, total_direct=0, total_proxy=0, total_upload=0, tmp_sum=0;
1544   int active_classes=0;
1545   int colspan;
1546   FILE *iplog;
1547   struct Sum {unsigned long long l; int i; list(Sum);} *sum,*sums=NULL;
1548
1549   colspan=11;
1550   if(qos_proxy)
1551   {
1552    colspan++;
1553   }
1554   if(found_lmsid)
1555   {
1556    colspan++;
1557   }
1558
1559   fprintf(f,"<p><table border>\n<tr><th colspan=\"%d\">%s",colspan,title);
1560   fprintf(f," (%s)</th></tr>\n", d);
1561   fputs("<tr><td align=\"right\">#</td><td>hostname</td>",f);
1562   if(found_lmsid)
1563   {
1564    fputs("<td align=\"right\">lms</td>\n",f);
1565   }
1566   fputs("<td align=\"right\">credit</td>\
1567 <td align=\"right\">limit</td>\
1568 <td align=\"right\">total</td>\
1569 <td align=\"right\">direct</td>\n",f);
1570   if(qos_proxy)
1571   {
1572    fputs("<td align=\"right\">proxy</td>\n",f);
1573   }
1574   fputs("<td align=\"right\">upload</td>\
1575 <td align=\"right\">minimum</td>\
1576 <td align=\"right\">desired</td>\
1577 <td align=\"right\">maximum</td>\
1578 <td>prio</td></tr>\n",f);
1579
1580   for_each(ip,ips)
1581   {
1582    char *f1="", *f2="";
1583    if(ip->max<ip->desired)
1584    {
1585     f1="<font color=\"red\">";
1586     f2="</font>";
1587    }
1588    else if(ip->prio>highest_priority+1)
1589    {
1590     f1="<font color=\"brown\">";
1591     f2="</font>";
1592    }
1593
1594 #ifdef DEBUG
1595    printf("%03d. %-22s %10Lu (%d/%d)\n",i ,ip->name, ip->traffic, ip->min, ip->max);
1596 #endif
1597    fprintf(f,"<tr><td align=\"right\"><a name=\"%s\"></a>%d</td><td><a href=\"%s%s.log\">%s</a></td>\n", ip->name, i, log_url, ip->name, ip->name);
1598    if(found_lmsid)
1599    {
1600     fputs("<td align=\"right\">",f);
1601     if(ip->lmsid > 0)
1602     {
1603      /*base URL will be configurable soon ... */
1604      fprintf(f,"<a href=\"https://hermes.spoje.net/?m=customerinfo&amp;id=%d\">%04d</a>\n", ip->lmsid, ip->lmsid);
1605     }
1606     else if(ip->lmsid == 0)
1607     {
1608      fputs("----",f);
1609     }
1610     fputs("</td>\n",f);
1611    }
1612    fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->credit);
1613    fprintf(f,"<td align=\"right\"><font color=\"#%s\">%Lu M</font></td>",
1614              ip->keyword->html_color, ip->credit+(ip->min*ip->keyword->data_limit+(ip->keyword->fixed_limit<<20)));
1615    fprintf(f,"<td align=\"right\">%s%Lu M%s</td><td align=\"right\">%Lu M</td>\n", f1, ip->traffic, f2, ip->direct);
1616    if(qos_proxy)
1617    {
1618     fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->proxy);
1619    }
1620    fprintf(f,"<td align=\"right\">%Lu M</td>\n", ip->upload);
1621    fprintf(f,"<td align=\"right\">%d k</td><td align=\"right\">%d k</td><td align=\"right\">%s%d k%s</td><td>%s%d%s</td></tr>\n",
1622              ip->min,ip->desired,f1,ip->max,f2,f1,ip->prio,f2);
1623    total+=ip->traffic;
1624    total_direct+=ip->direct;
1625    total_proxy+=ip->proxy;
1626    total_upload+=ip->upload;
1627    if(ip->traffic>0)
1628    {
1629     active_classes++;
1630     tmp_sum+=ip->traffic;
1631     create(sum,Sum);
1632     sum->l=tmp_sum;
1633     sum->i=active_classes;
1634     insert(sum,sums,order_by,i);
1635    }
1636
1637    i++;
1638
1639    if(!just_preview)
1640    {
1641     sprintf(str,"%s/%s.log",log_dir,ip->name);
1642     iplog=fopen(str,"a");
1643     if(iplog)
1644     {
1645      fprintf(iplog,"%ld\t%s\t%Lu\t%Lu\t%Lu\t%Lu\t%d\t%d\t%d\t%d\t%s",
1646                     time(NULL),ip->name,ip->traffic,ip->direct,ip->proxy,ip->upload,ip->min,ip->max,ip->desired,ip->lmsid,d); /* d = date*/
1647      fclose(iplog);
1648     }
1649    }
1650
1651   }
1652   fprintf(f,"<tr><th colspan=\"%d\" align=\"left\">SUMMARY:</td>",colspan-7);
1653   fprintf(f,"<th align=\"right\">%Lu M</th>\
1654   <th align=\"right\">%Lu M</th>\n", total, total_direct);
1655   if(qos_proxy)
1656   {
1657    fprintf(f,"<th align=\"right\">%Lu M</th>\n", total_proxy);
1658   }
1659   fprintf(f,"<th align=\"right\">%Lu M</th>", total_upload);
1660   fputs("<td colspan=\"4\"></td></th>\n</table>\n",f);
1661
1662   if(active_classes>10)
1663   {
1664    fputs("<a name=\"erp\"></a><p><table border><tr><th colspan=\"5\">Enterprise Research and Planning (ERP)</th></tr>\n",f);
1665    fputs("<tr><td>Analytic category</td>\n",f);
1666    fputs("<td colspan=\"2\" align=\"center\">Active Classes</td><td colspan=\"2\" align=\"center\">Data transfers</td></tr>\n",f);
1667
1668    if_exists(sum,sums,sum->l>=total/4)
1669    {
1670     fprintf(f,"<tr><td>Top 25%% of traffic</td>\n");
1671     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1672    }
1673
1674    if_exists(sum,sums,sum->i==10)
1675    {
1676     fprintf(f,"<tr><td>Top 10 downloaders</td>\n");
1677     fprintf(f,"<th align=\"right\">10</th><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1678    }
1679
1680    if_exists(sum,sums,sum->l>=total/2)
1681    {
1682     fprintf(f,"<tr><td>Top 50%% of traffic</td>\n");
1683     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1684    }
1685
1686    if_exists(sum,sums,sum->l>=4*total/5)
1687    {
1688     fprintf(f,"<tr><td>Top 80%% of traffic</td>\n");
1689     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><th align=\"right\">%Ld %%</th></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1690    }
1691
1692    if_exists (sum,sums,sum->i>=(active_classes+1)/5)
1693    {
1694     fprintf(f,"<tr><td>Top 20%% downloaders</td>\n");
1695     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1696    }
1697
1698    if_exists(sum,sums,sum->i>=(active_classes+1)/4)
1699    {
1700     fprintf(f,"<tr><td>Top 25%% downloaders</td>\n");
1701     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1702    }
1703
1704    if_exists(sum,sums,sum->i>=(active_classes+1)/2)
1705    {
1706     fprintf(f,"<tr><td>Top 50%% downloaders</td>\n");
1707     fprintf(f,"<td align=\"right\">%d</td><th align=\"right\">%d %%</th><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1708    }
1709
1710    if_exists(sum,sums,sum->i>=4*(active_classes+1)/5)
1711    {
1712     fprintf(f,"<tr><td>Top 80%% downloaders</td>\n");
1713     fprintf(f,"<td align=\"right\">%d</td><td align=\"right\">%d %%</td><td align=\"right\">%Lu M</td><td align=\"right\">%Ld %%</td></tr>\n",sum->i,(100*sum->i+50)/active_classes,sum->l,(100*sum->l+50)/total);
1714    }
1715
1716    fprintf(f,"<tr><td>All users, all traffic</td>\n");
1717    fprintf(f,"<th align=\"right\">%d</th><th align=\"right\">100 %%</th><th align=\"right\">%Lu M</th><th align=\"right\">100 %%</th></tr>\n",active_classes,total);
1718    fputs("</table>\n", f);
1719   }
1720   fprintf(f, stats_html_signature, version);
1721   fclose(f);
1722  }
1723
1724  if(just_preview)
1725  {
1726   puts("Statistics preview generated (-p switch) - now exiting ...");
1727   exit(0);
1728  }
1729
1730  /*-----------------------------------------------------------------*/
1731  puts("Generating iptables and tc classes ...");
1732  /*-----------------------------------------------------------------*/
1733
1734  i=0;
1735  printf("%-22s %-15s mark\n","name","ip");
1736
1737  for_selected(ip,ips,ip->mark>0)
1738  {
1739
1740   if(idxs)
1741   {
1742    char *buf;
1743    duplicate(ip->addr,buf);
1744    buf=hash_id(ip->addr,32-idxtable_bitmask1);
1745
1746    string(chain_forward,6+strlen(buf));
1747    strcpy(chain_forward,"forw_");
1748    strcat(chain_forward,buf);
1749
1750    string(chain_postrouting,6+strlen(buf));
1751    strcpy(chain_postrouting,"post_");
1752    strcat(chain_postrouting,buf);
1753
1754    free(buf);
1755   }
1756   else
1757   {
1758    chain_forward="FORWARD";
1759    chain_postrouting="POSTROUTING";
1760   }
1761
1762   printf("%-22s %-16s %04d ", ip->name, ip->addr, ip->mark);
1763
1764   /* -------------------------------------------------------- mark download */
1765
1766   sprintf(str,"-A %s -d %s/32 -o %s -j %s%d",chain_postrouting,ip->addr,lan,mark_iptables,ip->mark);
1767   /*sprintf(str,"-A %s -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,ip->addr,lan,ip->mark);*/
1768   /* -m limit --limit 1/s */
1769   save_line(str);
1770
1771   if(qos_proxy)
1772   {
1773    sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,mark_iptables,ip->mark);
1774    /*sprintf(str,"-A %s -s %s -p tcp --sport %d -d %s/32 -o %s -j MARK --set-mark %d",chain_postrouting,proxy_ip,proxy_port,ip->addr,lan,ip->mark);*/
1775    save_line(str);
1776   }
1777
1778   sprintf(str,"-A %s -d %s/32 -o %s -j ACCEPT",chain_postrouting,ip->addr,lan);
1779   save_line(str);
1780
1781   /* -------------------------------------------------------- mark upload */
1782   sprintf(str,"-A %s -s %s/32 -o %s -j %s%d",chain_forward,ip->addr,wan,mark_iptables,ip->mark);
1783   /*  sprintf(str,"-A %s -s %s/32 -o %s -j MARK --set-mark %d",chain_forward,ip->addr,wan,ip->mark);*/
1784   save_line(str);
1785
1786   sprintf(str,"-A %s -s %s/32 -o %s -j ACCEPT",chain_forward,ip->addr,wan);
1787   save_line(str);
1788
1789   if(ip->min)
1790   {
1791    /* -------------------------------------------------------- download class */
1792    printf("(down: %dk-%dk ", ip->min, ip->max);
1793
1794    sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d", tc, lan, ip->group, ip->mark,ip->min,ip->max, burst, ip->prio);
1795    safe_run(str);
1796
1797    if (strcmpi(ip->keyword->leaf_discipline, "none"))
1798    {
1799      sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s", tc, lan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1800      safe_run(str);
1801    }
1802    if (filter_type == 1)
1803    {
1804      sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d", tc, lan, ip->mark, ip->mark);
1805      safe_run(str);
1806    }
1807
1808    /* -------------------------------------------------------- upload class */
1809    printf("up: %dk-%dk)\n", (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1810                             (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed));
1811
1812    sprintf(str,"%s class add dev %s parent 1:%d classid 1:%d htb rate %dkbit ceil %dkbit burst %dk prio %d",
1813                 tc, wan, ip->group, ip->mark,
1814                 (int)((ip->min/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed),
1815                 (int)((ip->max/ip->keyword->asymetry_ratio)-ip->keyword->asymetry_fixed), burst, ip->prio);
1816    safe_run(str);
1817
1818    if (strcmpi(ip->keyword->leaf_discipline, "none"))
1819    {
1820      sprintf(str,"%s qdisc add dev %s parent 1:%d handle %d %s",tc, wan, ip->mark, ip->mark, ip->keyword->leaf_discipline); /*qos_leaf*/
1821      safe_run(str);
1822    }
1823    if (filter_type == 1)
1824    {
1825      sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle %d fw flowid 1:%d",tc, wan, ip->mark, ip->mark);
1826      safe_run(str);
1827    }
1828   }
1829   else
1830    printf("(sharing %s)\n", ip->sharing);
1831   i++;
1832  }
1833
1834  if(idxs)
1835  {
1836    chain_forward = "forw_common";
1837    chain_postrouting = "post_common";
1838  }
1839  else
1840  {
1841    chain_forward = "FORWARD";
1842    chain_postrouting = "POSTROUTING";
1843  }
1844  /* -------------------------------- classify or reject free download */
1845  {
1846    char *final_chain = "DROP"; /* REJECT would be better, but it is impossible in mangle */
1847    if(free_min) final_chain = "ACCEPT";
1848    if(qos_proxy)
1849    {
1850      if(free_min)
1851      {
1852        sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s%d",chain_postrouting,proxy_ip,proxy_port,lan,mark_iptables,3);
1853        save_line(str);
1854      }
1855      sprintf(str,"-A %s -s %s -p tcp --sport %d -o %s -j %s",chain_postrouting,proxy_ip,proxy_port,lan,final_chain);
1856      save_line(str);
1857    }
1858    if(free_min)
1859    {
1860      sprintf(str,"-A %s -o %s -j %s%d",chain_postrouting,lan,mark_iptables,3);
1861      save_line(str);
1862    }
1863    sprintf(str,"-A %s -o %s -j %s",chain_postrouting,lan,final_chain);
1864    save_line(str);
1865    /* ------------------------------- classify or reject free  upload */
1866    if(free_min)
1867    {
1868      sprintf(str,"-A %s -o %s -j %s%d",chain_forward,wan,mark_iptables,3);
1869      save_line(str);
1870    }
1871    sprintf(str,"-A %s -o %s -j %s",chain_forward,wan,final_chain);
1872    save_line(str);
1873  }
1874
1875  if(free_min) /* allocate free bandwith if it is not zero... */
1876  {
1877    /*-----------------------------------------------------------------*/
1878    puts("Generating free bandwith classes ...");
1879    /*-----------------------------------------------------------------*/
1880    sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1881                 tc,lan,parent,free_min,free_max,burst,lowest_priority);
1882    safe_run(str);
1883    sprintf(str, "%s class add dev %s parent 1:%d classid 1:3 htb rate %dkbit ceil %dkbit burst %dk prio %d",
1884                 tc,wan,parent,free_min,free_max,burst,lowest_priority);
1885    safe_run(str);
1886    /* tc SFQ */
1887    if (strcmpi(qos_leaf, "none"))
1888    {
1889      sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,lan,qos_leaf);
1890      safe_run(str);
1891
1892      sprintf(str,"%s qdisc add dev %s parent 1:3 handle 3 %s",tc,wan,qos_leaf);
1893      safe_run(str);
1894    }
1895    /* tc handle 1 fw flowid */
1896    sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,lan);
1897    safe_run(str);
1898
1899    sprintf(str,"%s filter add dev %s parent 1:0 protocol ip handle 3 fw flowid 1:3",tc,wan);
1900    safe_run(str);
1901  }
1902  printf("Total IP count: %d\n", i);
1903  run_restore();
1904  if (log_file) fclose(log_file);
1905  return 0;
1906  /* that's all folks, thank you for reading it all the way up to this point ;-) */
1907  /* bad luck C<<1 is not yet finished, I promise no sprintf() next time... */
1908 }