config/qos/makeqosscripts.pl

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007-2021  IPFire Team  <info@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 use strict;
  23 # enable only the following on debugging purpose
  24 # use warnings;
  25
  26 require '/var/ipfire/general-functions.pl';
  27 require "${General::swroot}/lang.pl";
  28 require "${General::swroot}/header.pl";
  29
  30 my %qossettings = ();
  31 my %checked = ();
  32 my %netsettings = ();
  33 my $message = "";
  34 my $errormessage = "";
  35 my $c = "";
  36 my $direntry = "";
  37 my $classentry = "";
  38 my $l7ruleentry = "";
  39 my $portruleentry = "";
  40 my $tosruleentry = "";
  41 my @tmp = ();
  42 my @classes = ();
  43 my @l7rules = ();
  44 my @portrules = ();
  45 my @tosrules = ();
  46 my @tmpline = ();
  47 my @classline = ();
  48 my @tosruleline = ();
  49 my @l7ruleline = ();
  50 my @portruleline = ();
  51 my @proto = ();
  52 my %selected= () ;
  53 my $classfile = "/var/ipfire/qos/classes";
  54 my $level7file = "/var/ipfire/qos/level7config";
  55 my $portfile = "/var/ipfire/qos/portconfig";
  56 my $tosfile = "/var/ipfire/qos/tosconfig";
  57 my @cake_options = ();
  58
  59 # Define iptables MARKs
  60 my $QOS_INC_MASK = 0x0000ff00;
  61 my $QOS_INC_SHIFT = 8;
  62 my $QOS_OUT_MASK = 0x000000ff;
  63 my $QOS_OUT_SHIFT = 0;
  64 my $QOS_INC_SKIP_MASK = $QOS_INC_MASK;
  65 my $QOS_OUT_SKIP_MASK = $QOS_OUT_MASK;
  66
  67 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
  68
  69 $qossettings{'ENABLED'} = 'off';
  70 $qossettings{'EDIT'} = 'no';
  71 $qossettings{'OUT_SPD'} = '';
  72 $qossettings{'INC_SPD'} = '';
  73 $qossettings{'DEF_OUT_SPD'} = '';
  74 $qossettings{'DEF_INC_SPD'} = '';
  75 $qossettings{'DEFCLASS_INC'} = '';
  76 $qossettings{'DEFCLASS_OUT'} = '';
  77 $qossettings{'RED_DEV'} = `cat /var/ipfire/red/iface`;
  78 $qossettings{'IMQ_DEV'} = 'imq0';
  79 $qossettings{'TOS'} = '';
  80 $qossettings{'VALID'} = 'yes';
  81
  82 &General::readhash("${General::swroot}/qos/settings", \%qossettings);
  83
  84 my $DEF_OUT_MARK = ($qossettings{'DEFCLASS_OUT'} << $QOS_OUT_SHIFT) . "/$QOS_OUT_MASK";
  85 my $DEF_INC_MARK = ($qossettings{'DEFCLASS_INC'} << $QOS_INC_SHIFT) . "/$QOS_INC_MASK";
  86
  87 open( FILE, "< $classfile" ) or die "Unable to read $classfile";
  88 @classes = <FILE>;
  89 close FILE;
  90 open( FILE, "< $level7file" ) or die "Unable to read $level7file";
  91 @l7rules = <FILE>;
  92 close FILE;
  93 open( FILE, "< $portfile" ) or die "Unable to read $portfile";
  94 @portrules = <FILE>;
  95 close FILE;
  96 open( FILE, "< $tosfile" ) or die "Unable to read $tosfile";
  97 @tosrules = <FILE>;
  98 close FILE;
  99
 100 ############################################################################################################################
 101 ############################################################################################################################
 102
 103 print <<END
 104 #/bin/bash
 105 #################################################
 106 # This is an autocreated QoS-Script for         #
 107 # IPFIRE                                        #
 108 # Copyright by the IPFire Team (GPLv2)          #
 109 # www.ipfire.org                                #
 110 #################################################
 111
 112 ### SYSTEMVARIABLES:
 113 # RED INTERFACE:        $qossettings{'RED_DEV'}
 114 # IMQ DEVICE:           $qossettings{'IMQ_DEV'}
 115
 116 eval \$(/usr/local/bin/readhash /var/ipfire/main/settings)
 117 if [ "\$RRDLOG" == "" ]; then
 118         RRDLOG=/var/log/rrd
 119 fi
 120
 121 case "\$1" in
 122
 123   status)
 124         case "\$2" in
 125           qdisc)
 126                 echo "[qdisc]"
 127                 tc -s qdisc show dev $qossettings{'RED_DEV'}
 128                 tc -s qdisc show dev $qossettings{'IMQ_DEV'}
 129                 exit 0
 130           ;;
 131           class)
 132                 echo "[class]"
 133                 tc -s class show dev $qossettings{'RED_DEV'}
 134                 tc -s class show dev $qossettings{'IMQ_DEV'}
 135                 exit 0
 136           ;;
 137           filter)
 138                 echo "[filter]"
 139                 tc -s filter show dev $qossettings{'RED_DEV'}
 140                 tc -s filter show dev $qossettings{'IMQ_DEV'}
 141                 exit 0
 142           ;;
 143           iptables)
 144                 echo "[iptables]"
 145                 iptables -t mangle -n -L QOS-OUT -v -x 2> /dev/null
 146                 iptables -t mangle -n -L QOS-INC -v -x 2> /dev/null
 147                 exit 0
 148           ;;
 149         esac
 150         \$0 \$1 qdisc
 151         \$0 \$1 class
 152         \$0 \$1 filter
 153         \$0 \$1 iptables
 154         exit 0
 155   ;;
 156   start)
 157         ###
 158         ### $qossettings{'RED_DEV'}
 159         ###
 160
 161         ### INIT KERNEL
 162         modprobe sch_htb
 163
 164         ### ADD HTB QDISC FOR $qossettings{'RED_DEV'}
 165         tc qdisc del dev $qossettings{'RED_DEV'} root >/dev/null 2>&1
 166         tc qdisc add dev $qossettings{'RED_DEV'} root handle 1: htb default $qossettings{'DEFCLASS_OUT'}
 167
 168         ### MAIN RATE LIMIT
 169         tc class add dev $qossettings{'RED_DEV'} parent 1: classid 1:1 htb rate $qossettings{'OUT_SPD'}kbit
 170
 171         ### CLASSES FOR $qossettings{'RED_DEV'}
 172 END
 173 ;
 174 foreach $classentry (sort @classes)
 175 {
 176         @classline = split( /\;/, $classentry );
 177         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 178                 $qossettings{'DEVICE'} = $classline[0];
 179                 $qossettings{'CLASS'} = $classline[1];
 180                 $qossettings{'PRIO'} = $classline[2];
 181                 $qossettings{'RATE'} = $classline[3];
 182                 $qossettings{'CEIL'} = $classline[4];
 183                 $qossettings{'BURST'} = $classline[5];
 184                 $qossettings{'CBURST'} = $classline[6];
 185                 print "\ttc class add dev $qossettings{'DEVICE'} parent 1:1 classid 1:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 186                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 187                         print "burst $qossettings{'BURST'}k ";
 188                 }
 189                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 190                         print "cburst $qossettings{'CBURST'}k";
 191                 }
 192                 print "\n";
 193         }
 194 }
 195
 196 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 197 foreach $classentry (sort @classes)
 198 {
 199         @classline = split( /\;/, $classentry );
 200         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 201                 $qossettings{'DEVICE'} = $classline[0];
 202                 $qossettings{'CLASS'} = $classline[1];
 203                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 1:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: cake @cake_options\n";
 204         }
 205 }
 206 print "\n\t### FILTER TRAFFIC INTO CLASSES\n";
 207 foreach $classentry (sort @classes)
 208 {
 209         @classline = split( /\;/, $classentry );
 210         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 211                 $qossettings{'DEVICE'} = $classline[0];
 212                 $qossettings{'CLASS'} = $classline[1];
 213                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 1:0 prio 0 protocol ip";
 214                 printf(" u32 match mark 0x%x 0x%x flowid 1:%d\n", ($qossettings{'CLASS'} << $QOS_OUT_SHIFT), $QOS_OUT_MASK, $qossettings{'CLASS'});
 215         }
 216 }
 217
 218 print <<END
 219
 220         ### ADD QOS-OUT CHAIN TO THE MANGLE TABLE IN IPTABLES
 221         iptables -t mangle -N QOS-OUT
 222         iptables -t mangle -A POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT
 223
 224         # If the packet is already marked, then skip the processing
 225         iptables -t mangle -A QOS-OUT -m mark ! --mark 0/$QOS_OUT_SKIP_MASK -j RETURN
 226
 227         ### SET TOS
 228 END
 229 ;
 230         foreach $tosruleentry (sort @tosrules)
 231         {
 232                 @tosruleline = split( /\;/, $tosruleentry );
 233                 $qossettings{'CLASS'} = $tosruleline[0];
 234                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 235                 if ( $tosruleline[1] eq $qossettings{'RED_DEV'} )
 236                 {
 237                         print "\tiptables -t mangle -A QOS-OUT -m tos --tos $qossettings{'TOS'} -j MARK --set-xmark " . ($qossettings{'CLASS'} << $QOS_OUT_SHIFT) . "/$QOS_OUT_MASK\n";
 238                         print "\tiptables -t mangle -A QOS-OUT -m tos --tos $qossettings{'TOS'} -j RETURN\n";
 239                 }
 240         }
 241
 242 print "\n\t### SET PORT-RULES\n";
 243         foreach $portruleentry (sort @portrules)
 244         {
 245                 @portruleline = split( /\;/, $portruleentry );
 246                 if ( $portruleline[1] eq $qossettings{'RED_DEV'} )
 247                 {
 248                         $qossettings{'CLASS'} = $portruleline[0];
 249                         $qossettings{'DEVICE'} = $portruleline[1];
 250                         $qossettings{'PPROT'} = $portruleline[2];
 251                         $qossettings{'QIP'} = $portruleline[3];
 252                         $qossettings{'QPORT'} = $portruleline[4];
 253                         $qossettings{'DIP'} = $portruleline[5];
 254                         $qossettings{'DPORT'} = $portruleline[6];
 255                         print "\tiptables -t mangle -A QOS-OUT -m mark --mark 0/$QOS_OUT_MASK ";
 256                         if ($qossettings{'QIP'} ne ''){
 257                                 print "-s $qossettings{'QIP'} ";
 258                         }
 259                         if ($qossettings{'DIP'} ne ''){
 260                                 print "-d $qossettings{'DIP'} ";
 261                         }
 262                         print "-p $qossettings{'PPROT'} ";
 263 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 264 #                               print "-m multiport ";
 265 #                       }
 266                         if ($qossettings{'QPORT'} ne ''){
 267                                 print "--sport $qossettings{'QPORT'} ";
 268                         }
 269                         if ($qossettings{'DPORT'} ne ''){
 270                                 print "--dport $qossettings{'DPORT'} ";
 271                         }
 272                         print "-j MARK --set-xmark " . ($qossettings{'CLASS'} << $QOS_OUT_SHIFT) . "/$QOS_OUT_MASK\n";
 273                 }
 274         }
 275
 276 print <<END
 277
 278         ### SET LEVEL7-RULES
 279 END
 280 ;
 281         foreach $l7ruleentry (sort @l7rules)
 282         {
 283                 @l7ruleline = split( /\;/, $l7ruleentry );
 284                 if ( $l7ruleline[1] eq $qossettings{'RED_DEV'} )
 285                 {
 286                         $qossettings{'CLASS'} = $l7ruleline[0];
 287                         $qossettings{'DEVICE'} = $l7ruleline[1];
 288                         $qossettings{'L7PROT'} = $l7ruleline[2];
 289                         $qossettings{'QIP'} = $l7ruleline[3];
 290                         $qossettings{'DIP'} = $l7ruleline[4];
 291                         print "\tiptables -t mangle -A QOS-OUT -m mark --mark 0/$QOS_OUT_MASK ";
 292                         if ($qossettings{'QIP'} ne ''){
 293                                 print "-s $qossettings{'QIP'} ";
 294                         }
 295                         if ($qossettings{'DIP'} ne ''){
 296                                 print "-d $qossettings{'DIP'} ";
 297                         }
 298                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-xmark " . ($qossettings{'CLASS'} << $QOS_OUT_SHIFT) . "/$QOS_OUT_MASK\n";
 299                 }
 300         }
 301
 302 print <<END
 303
 304         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 305         iptables -t mangle -A QOS-OUT -m mark --mark 0/$QOS_OUT_MASK -m layer7 ! --l7proto unset -j MARK --set-xmark $DEF_OUT_MARK
 306
 307         # Save mark in connection tracking
 308         iptables -t mangle -A QOS-OUT -m mark ! --mark 0/$QOS_OUT_MASK -j CONNMARK --save-mark --mask $QOS_OUT_MASK
 309
 310         ###
 311         ### $qossettings{'IMQ_DEV'}
 312         ###
 313
 314         tc qdisc del dev $qossettings{'RED_DEV'} ingress >/dev/null 2>&1
 315         tc qdisc add dev $qossettings{'RED_DEV'} handle ffff: ingress
 316
 317         ### BRING UP $qossettings{'IMQ_DEV'}
 318         if [ ! -d "/sys/class/net/$qossettings{'IMQ_DEV'}" ]; then
 319                 ip link add name $qossettings{'IMQ_DEV'} type ifb
 320         fi
 321
 322         ip link set $qossettings{'IMQ_DEV'} up
 323
 324         ### Pass IPSec traffic without redirect
 325         tc filter add dev $qossettings{'RED_DEV'} parent ffff: prio 1 protocol all basic \\
 326                 match "ipt(-m policy --pol ipsec --dir in)" \\
 327                 action pass
 328
 329         ### Restore connmark and send rest of the traffic to $qossettings{'IMQ_DEV'}
 330         tc filter add dev $qossettings{'RED_DEV'} parent ffff: prio 2 protocol all u32 \\
 331                 match u32 0 0 \\
 332                 action connmark \\
 333                 action mirred egress redirect dev $qossettings{'IMQ_DEV'}
 334
 335         ### ADD HTB QDISC FOR $qossettings{'IMQ_DEV'}
 336         tc qdisc del dev $qossettings{'IMQ_DEV'} root >/dev/null 2>&1
 337         tc qdisc add dev $qossettings{'IMQ_DEV'} root handle 2: htb default $qossettings{'DEFCLASS_INC'}
 338
 339         ### MAIN RATE LIMIT
 340         tc class add dev $qossettings{'IMQ_DEV'} parent 2: classid 2:1 htb rate $qossettings{'INC_SPD'}kbit
 341
 342         ### CLASSES FOR $qossettings{'IMQ_DEV'}
 343 END
 344 ;
 345 foreach $classentry (sort @classes)
 346 {
 347         @classline = split( /\;/, $classentry );
 348         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 349                 $qossettings{'DEVICE'} = $classline[0];
 350                 $qossettings{'CLASS'} = $classline[1];
 351                 $qossettings{'PRIO'} = $classline[2];
 352                 $qossettings{'RATE'} = $classline[3];
 353                 $qossettings{'CEIL'} = $classline[4];
 354                 $qossettings{'BURST'} = $classline[5];
 355                 $qossettings{'CBURST'} = $classline[6];
 356                 print "\ttc class add dev $qossettings{'DEVICE'} parent 2:1 classid 2:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 357                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 358                         print "burst $qossettings{'BURST'}k ";
 359                 }
 360                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 361                         print "cburst $qossettings{'CBURST'}k";
 362                 }
 363                 print "\n";
 364         }
 365 }
 366
 367 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 368 foreach $classentry (sort @classes)
 369 {
 370         @classline = split( /\;/, $classentry );
 371         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 372                 $qossettings{'DEVICE'} = $classline[0];
 373                 $qossettings{'CLASS'} = $classline[1];
 374                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 2:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: cake @cake_options\n";
 375         }
 376 }
 377 print "\n\t### FILTER TRAFFIC INTO CLASSES\n";
 378 foreach $classentry (sort @classes)
 379 {
 380         @classline = split( /\;/, $classentry );
 381         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 382                 $qossettings{'DEVICE'} = $classline[0];
 383                 $qossettings{'CLASS'} = $classline[1];
 384                 print "\ttc filter add dev $qossettings{'DEVICE'} parent 2:0 prio 0 protocol ip";
 385                 printf(" u32 match mark 0x%x 0x%x flowid 2:%d\n", ($qossettings{'CLASS'} << $QOS_INC_SHIFT), $QOS_INC_MASK, $qossettings{'CLASS'});
 386         }
 387 }
 388 print <<END
 389
 390         ### ADD QOS-INC CHAIN TO THE MANGLE TABLE IN IPTABLES
 391         iptables -t mangle -N QOS-INC
 392         iptables -t mangle -A PREROUTING -i $qossettings{'RED_DEV'} -j QOS-INC
 393
 394         # If the packet is already marked, then skip the processing
 395         iptables -t mangle -A QOS-INC -m mark ! --mark 0/$QOS_INC_SKIP_MASK -j RETURN
 396
 397         ### SET TOS
 398 END
 399 ;
 400         foreach $tosruleentry (sort @tosrules)
 401         {
 402                 @tosruleline = split( /\;/, $tosruleentry );
 403                 $qossettings{'CLASS'} = $tosruleline[0];
 404                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 405                 if ( $tosruleline[1] eq $qossettings{'IMQ_DEV'} )
 406                 {
 407                         print "\tiptables -t mangle -A QOS-INC -m tos --tos $qossettings{'TOS'} -j MARK --set-xmark " . ($qossettings{'CLASS'} << $QOS_INC_SHIFT) . "/$QOS_INC_MASK\n";
 408                 }
 409
 410         }
 411
 412 print "\n\t### SET PORT-RULES\n";
 413         foreach $portruleentry (sort @portrules)
 414         {
 415                 @portruleline = split( /\;/, $portruleentry );
 416                 if ( $portruleline[1] eq $qossettings{'IMQ_DEV'} )
 417                 {
 418                         $qossettings{'CLASS'} = $portruleline[0];
 419                         $qossettings{'DEVICE'} = $portruleline[1];
 420                         $qossettings{'PPROT'} = $portruleline[2];
 421                         $qossettings{'QIP'} = $portruleline[3];
 422                         $qossettings{'QPORT'} = $portruleline[4];
 423                         $qossettings{'DIP'} = $portruleline[5];
 424                         $qossettings{'DPORT'} = $portruleline[6];
 425                         print "\tiptables -t mangle -A QOS-INC -m mark --mark 0/$QOS_INC_MASK ";
 426                         if ($qossettings{'QIP'} ne ''){
 427                                 print "-s $qossettings{'QIP'} ";
 428                         }
 429                         if ($qossettings{'DIP'} ne ''){
 430                                 print "-d $qossettings{'DIP'} ";
 431                         }
 432                         print "-p $qossettings{'PPROT'} ";
 433 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 434 #                               print "-m multiport ";
 435 #                       }
 436                         if ($qossettings{'QPORT'} ne ''){
 437                                 print "--sport $qossettings{'QPORT'} ";
 438                         }
 439                         if ($qossettings{'DPORT'} ne ''){
 440                                 print "--dport $qossettings{'DPORT'} ";
 441                         }
 442                         print "-j MARK --set-xmark " . ($qossettings{'CLASS'} << $QOS_INC_SHIFT) . "/$QOS_INC_MASK\n";
 443                 }
 444         }
 445
 446 print <<END
 447
 448         ### SET LEVEL7-RULES
 449 END
 450 ;
 451         foreach $l7ruleentry (sort @l7rules)
 452         {
 453                 @l7ruleline = split( /\;/, $l7ruleentry );
 454                 if ( $l7ruleline[1] eq $qossettings{'IMQ_DEV'} )
 455                 {
 456                         $qossettings{'CLASS'} = $l7ruleline[0];
 457                         $qossettings{'DEVICE'} = $l7ruleline[1];
 458                         $qossettings{'L7PROT'} = $l7ruleline[2];
 459                         $qossettings{'QIP'} = $l7ruleline[3];
 460                         $qossettings{'DIP'} = $l7ruleline[4];
 461                         print "\tiptables -t mangle -A QOS-INC -m mark --mark 0/$QOS_INC_MASK ";
 462                         if ($qossettings{'QIP'} ne ''){
 463                                 print "-s $qossettings{'QIP'} ";
 464                         }
 465                         if ($qossettings{'DIP'} ne ''){
 466                                 print "-d $qossettings{'DIP'} ";
 467                         }
 468                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-xmark " . ($qossettings{'CLASS'} << $QOS_INC_SHIFT) . "/$QOS_INC_MASK\n";
 469                 }
 470         }
 471
 472 print <<END
 473         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 474         iptables -t mangle -A QOS-INC -m mark --mark 0/$QOS_INC_MASK -m layer7 ! --l7proto unset -j MARK --set-xmark $DEF_INC_MARK
 475
 476         # Save mark in connection tracking
 477         iptables -t mangle -A QOS-INC -m mark ! --mark 0/$QOS_INC_MASK -j CONNMARK --save-mark --mask $QOS_INC_MASK
 478
 479         ## STARTING COLLECTOR
 480         /usr/local/bin/qosd $qossettings{'RED_DEV'} >/dev/null 2>&1
 481         /usr/local/bin/qosd $qossettings{'IMQ_DEV'} >/dev/null 2>&1
 482
 483         for i in \$(ls \$RRDLOG/class_*.rrd); do
 484                 rrdtool update \$i \$(date +%s): 2>/dev/null
 485         done
 486
 487         echo "Quality of Service was successfully started!"
 488         exit 0
 489   ;;
 490   clear|stop)
 491         ### RESET EVERYTHING TO A KNOWN STATE
 492         killall qosd >/dev/null 2>&1
 493
 494         # DELETE QDISCS
 495         tc qdisc del dev $qossettings{'RED_DEV'} root >/dev/null 2>&1
 496         tc qdisc del dev $qossettings{'RED_DEV'} ingress >/dev/null 2>&1
 497         INTERFACE="$qossettings{'RED_DEV'}" ACTION="add" /lib/udev/network-aqm &>/dev/null
 498         # STOP IMQ-DEVICE
 499         ip link set $qossettings{'IMQ_DEV'} down >/dev/null 2>&1
 500         ip link del $qossettings{'IMQ_DEV'} >/dev/null 2>&1
 501
 502         # REMOVE & FLUSH CHAINS
 503         iptables -t mangle --delete POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT >/dev/null 2>&1
 504         iptables -t mangle --delete PREROUTING -i $qossettings{'RED_DEV'} -j QOS-INC >/dev/null 2>&1
 505         iptables -t mangle --flush  QOS-OUT >/dev/null 2>&1
 506         iptables -t mangle --delete-chain QOS-OUT >/dev/null 2>&1
 507         iptables -t mangle --flush  QOS-INC >/dev/null 2>&1
 508         iptables -t mangle --delete-chain QOS-INC >/dev/null 2>&1
 509
 510         for i in \$(ls \$RRDLOG/class_*.rrd); do
 511                 rrdtool update \$i \$(date +%s):
 512         done
 513
 514         echo "Quality of Service was successfully cleared!"
 515   ;;
 516   gen|generate)
 517         echo -n "Generating the QoS-Scripts..."
 518         /usr/bin/perl /var/ipfire/qos/bin/makeqosscripts.pl > /var/ipfire/qos/bin/qos.sh
 519         echo ".Done!"
 520         exit 0
 521         ;;
 522   restart)
 523         ### FIRST CLEAR EVERYTHING
 524         \$0 clear
 525
 526         ### THEN START
 527         \$0 start
 528         ;;
 529 esac
 530 ### EOF
 531 END
 532 ;
 533
 534 ############################################################################################################################
 535 ############################################################################################################################