config/qos/makeqosscripts.pl

   1 #!/usr/bin/perl
   2 ###############################################################################
   3 #                                                                             #
   4 # IPFire.org - A linux based firewall                                         #
   5 # Copyright (C) 2007-2013  IPFire Team  <info@ipfire.org>                     #
   6 #                                                                             #
   7 # This program is free software: you can redistribute it and/or modify        #
   8 # it under the terms of the GNU General Public License as published by        #
   9 # the Free Software Foundation, either version 3 of the License, or           #
  10 # (at your option) any later version.                                         #
  11 #                                                                             #
  12 # This program is distributed in the hope that it will be useful,             #
  13 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  15 # GNU General Public License for more details.                                #
  16 #                                                                             #
  17 # You should have received a copy of the GNU General Public License           #
  18 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  19 #                                                                             #
  20 ###############################################################################
  21
  22 use strict;
  23 # enable only the following on debugging purpose
  24 # use warnings;
  25
  26 require '/var/ipfire/general-functions.pl';
  27 require "${General::swroot}/lang.pl";
  28 require "${General::swroot}/header.pl";
  29
  30 my %qossettings = ();
  31 my %checked = ();
  32 my %netsettings = ();
  33 my $message = "";
  34 my $errormessage = "";
  35 my $c = "";
  36 my $direntry = "";
  37 my $classentry = "";
  38 my $l7ruleentry = "";
  39 my $portruleentry = "";
  40 my $tosruleentry = "";
  41 my @tmp = ();
  42 my @classes = ();
  43 my @l7rules = ();
  44 my @portrules = ();
  45 my @tosrules = ();
  46 my @tmpline = ();
  47 my @classline = ();
  48 my @tosruleline = ();
  49 my @l7ruleline = ();
  50 my @portruleline = ();
  51 my @proto = ();
  52 my %selected= () ;
  53 my $classfile = "/var/ipfire/qos/classes";
  54 my $level7file = "/var/ipfire/qos/level7config";
  55 my $portfile = "/var/ipfire/qos/portconfig";
  56 my $tosfile = "/var/ipfire/qos/tosconfig";
  57 my $fqcodel_options = "limit 800 quantum 500";
  58
  59 &General::readhash("${General::swroot}/ethernet/settings", \%netsettings);
  60
  61 $qossettings{'ENABLED'} = 'off';
  62 $qossettings{'EDIT'} = 'no';
  63 $qossettings{'OUT_SPD'} = '';
  64 $qossettings{'INC_SPD'} = '';
  65 $qossettings{'DEF_OUT_SPD'} = '';
  66 $qossettings{'DEF_INC_SPD'} = '';
  67 $qossettings{'DEFCLASS_INC'} = '';
  68 $qossettings{'DEFCLASS_OUT'} = '';
  69 $qossettings{'ACK'} = '';
  70 $qossettings{'RED_DEV'} = `cat /var/ipfire/red/iface`;
  71 $qossettings{'IMQ_DEV'} = 'imq0';
  72 $qossettings{'TOS'} = '';
  73 $qossettings{'VALID'} = 'yes';
  74
  75 &General::readhash("${General::swroot}/qos/settings", \%qossettings);
  76
  77 open( FILE, "< $classfile" ) or die "Unable to read $classfile";
  78 @classes = <FILE>;
  79 close FILE;
  80 open( FILE, "< $level7file" ) or die "Unable to read $level7file";
  81 @l7rules = <FILE>;
  82 close FILE;
  83 open( FILE, "< $portfile" ) or die "Unable to read $portfile";
  84 @portrules = <FILE>;
  85 close FILE;
  86 open( FILE, "< $tosfile" ) or die "Unable to read $tosfile";
  87 @tosrules = <FILE>;
  88 close FILE;
  89
  90 ############################################################################################################################
  91 ############################################################################################################################
  92
  93 print <<END
  94 #/bin/bash
  95 #################################################
  96 # This is an autocreated QoS-Script for         #
  97 # IPFIRE                                        #
  98 # Copyright by the IPFire Team (GPLv2)          #
  99 # www.ipfire.org                                #
 100 #################################################
 101
 102 ### SYSTEMVARIABLES:
 103 # RED INTERFACE:        $qossettings{'RED_DEV'}
 104 # IMQ DEVICE:           $qossettings{'IMQ_DEV'}
 105
 106 eval \$(/usr/local/bin/readhash /var/ipfire/main/settings)
 107 if [ "\$RRDLOG" == "" ]; then
 108         RRDLOG=/var/log/rrd
 109 fi
 110
 111 case "\$1" in
 112
 113   status)
 114         case "\$2" in
 115           qdisc)
 116                 echo "[qdisc]"
 117                 tc -s qdisc show dev $qossettings{'RED_DEV'}
 118                 tc -s qdisc show dev $qossettings{'IMQ_DEV'}
 119                 exit 0
 120           ;;
 121           class)
 122                 echo "[class]"
 123                 tc -s class show dev $qossettings{'RED_DEV'}
 124                 tc -s class show dev $qossettings{'IMQ_DEV'}
 125                 exit 0
 126           ;;
 127           iptables)
 128                 echo "[iptables]"
 129                 iptables -t mangle -n -L QOS-OUT -v -x 2> /dev/null
 130                 iptables -t mangle -n -L QOS-INC -v -x 2> /dev/null
 131                 iptables -t mangle -n -L QOS-TOS -v -x 2> /dev/null
 132                 exit 0
 133           ;;
 134         esac
 135         \$0 \$1 qdisc
 136         \$0 \$1 class
 137         \$0 \$1 iptables
 138         exit 0
 139   ;;
 140   start)
 141         ###
 142         ### $qossettings{'RED_DEV'}
 143         ###
 144
 145         ### INIT KERNEL
 146         modprobe sch_htb
 147
 148         ### ADD HTB QDISC FOR $qossettings{'RED_DEV'}
 149         tc qdisc del dev $qossettings{'RED_DEV'} root >/dev/null 2>&1
 150         tc qdisc add dev $qossettings{'RED_DEV'} root handle 1: htb default $qossettings{'DEFCLASS_OUT'}
 151
 152         ### MAIN RATE LIMIT
 153         tc class add dev $qossettings{'RED_DEV'} parent 1: classid 1:1 htb rate $qossettings{'OUT_SPD'}kbit
 154
 155         ### CLASSES FOR $qossettings{'RED_DEV'}
 156 END
 157 ;
 158 foreach $classentry (sort @classes)
 159 {
 160         @classline = split( /\;/, $classentry );
 161         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 162                 $qossettings{'DEVICE'} = $classline[0];
 163                 $qossettings{'CLASS'} = $classline[1];
 164                 $qossettings{'PRIO'} = $classline[2];
 165                 $qossettings{'RATE'} = $classline[3];
 166                 $qossettings{'CEIL'} = $classline[4];
 167                 $qossettings{'BURST'} = $classline[5];
 168                 $qossettings{'CBURST'} = $classline[6];
 169                 print "\ttc class add dev $qossettings{'DEVICE'} parent 1:1 classid 1:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 170                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 171                         print "burst $qossettings{'BURST'}k ";
 172                 }
 173                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 174                         print "cburst $qossettings{'CBURST'}k";
 175                 }
 176                 print "\n";
 177         }
 178 }
 179
 180 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 181 foreach $classentry (sort @classes)
 182 {
 183         @classline = split( /\;/, $classentry );
 184         if ($qossettings{'RED_DEV'} eq $classline[0]) {
 185                 $qossettings{'DEVICE'} = $classline[0];
 186                 $qossettings{'CLASS'} = $classline[1];
 187                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 1:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: fq_codel $fqcodel_options\n";
 188         }
 189 }
 190 print <<END
 191
 192         ### ADD QOS-OUT CHAIN TO THE MANGLE TABLE IN IPTABLES
 193         iptables -t mangle -N QOS-OUT
 194         iptables -t mangle -N QOS-TOS
 195         iptables -t mangle -I POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT
 196         iptables -t mangle -A POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-TOS
 197
 198         ### Don't change mark on traffic for the ipsec tunnel
 199         iptables -t mangle -A QOS-OUT -m mark --mark 50 -j RETURN
 200
 201         ### MARK ACKs
 202         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j TOS --set-tos 4
 203         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 204         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j RETURN
 205
 206         iptables -t mangle -A QOS-OUT -p icmp -m length --length 40:100 -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 207         iptables -t mangle -A QOS-OUT -p icmp -m length --length 40:100 -j RETURN
 208
 209         iptables -t mangle -A QOS-OUT -p tcp --syn -m length --length 40:68 -j TOS --set-tos 4
 210         iptables -t mangle -A QOS-OUT -p tcp --syn -m length --length 40:68 -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 211         iptables -t mangle -A QOS-OUT -p tcp --syn -m length --length 40:68 -j RETURN
 212
 213         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j TOS --set-tos 4
 214         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 215         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j RETURN
 216
 217         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j TOS --set-tos 4
 218         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 219         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK -m length --length 40:100 -j RETURN
 220
 221         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL RST -j TOS --set-tos 4
 222         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL RST -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 223         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL RST -j RETURN
 224
 225         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,RST -j TOS --set-tos 4
 226         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,RST -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 227         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,RST -j RETURN
 228
 229         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,FIN -j TOS --set-tos 4
 230         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,FIN -j CLASSIFY --set-class 1:$qossettings{'ACK'}
 231         iptables -t mangle -A QOS-OUT -p tcp --tcp-flags ALL ACK,FIN -j RETURN
 232
 233         ### SET TOS
 234 END
 235 ;
 236         foreach $tosruleentry (sort @tosrules)
 237         {
 238                 @tosruleline = split( /\;/, $tosruleentry );
 239                 $qossettings{'CLASS'} = $tosruleline[0];
 240                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 241                 if ( $tosruleline[1] eq $qossettings{'RED_DEV'} )
 242                 {
 243                         print "\tiptables -t mangle -A QOS-OUT -m tos --tos $qossettings{'TOS'} -j CLASSIFY --set-class 1:$qossettings{'CLASS'}\n";
 244                         print "\tiptables -t mangle -A QOS-OUT -m tos --tos $qossettings{'TOS'} -j RETURN\n";
 245                 }
 246         }
 247
 248 print "\n\t### SET PORT-RULES\n";
 249         foreach $portruleentry (sort @portrules)
 250         {
 251                 @portruleline = split( /\;/, $portruleentry );
 252                 if ( $portruleline[1] eq $qossettings{'RED_DEV'} )
 253                 {
 254                         $qossettings{'CLASS'} = $portruleline[0];
 255                         $qossettings{'DEVICE'} = $portruleline[1];
 256                         $qossettings{'PPROT'} = $portruleline[2];
 257                         $qossettings{'QIP'} = $portruleline[3];
 258                         $qossettings{'QPORT'} = $portruleline[4];
 259                         $qossettings{'DIP'} = $portruleline[5];
 260                         $qossettings{'DPORT'} = $portruleline[6];
 261                         print "\tiptables -t mangle -A QOS-OUT ";
 262                         if ($qossettings{'QIP'} ne ''){
 263                                 print "-s $qossettings{'QIP'} ";
 264                         }
 265                         if ($qossettings{'DIP'} ne ''){
 266                                 print "-d $qossettings{'DIP'} ";
 267                         }
 268                         print "-p $qossettings{'PPROT'} ";
 269 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 270 #                               print "-m multiport ";
 271 #                       }
 272                         if ($qossettings{'QPORT'} ne ''){
 273                                 print "--sport $qossettings{'QPORT'} ";
 274                         }
 275                         if ($qossettings{'DPORT'} ne ''){
 276                                 print "--dport $qossettings{'DPORT'} ";
 277                         }
 278                         print "-j CLASSIFY --set-class 1:$qossettings{'CLASS'}\n";
 279                         print "\tiptables -t mangle -A QOS-OUT ";
 280                         if ($qossettings{'QIP'} ne ''){
 281                                 print "-s $qossettings{'QIP'} ";
 282                         }
 283                         if ($qossettings{'DIP'} ne ''){
 284                                 print "-d $qossettings{'DIP'} ";
 285                         }
 286                         print "-p $qossettings{'PPROT'} ";
 287 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 288 #                               print "-m multiport ";
 289 #                       }
 290                         if ($qossettings{'QPORT'} ne ''){
 291                                 print "--sport $qossettings{'QPORT'} ";
 292                         }
 293                         if ($qossettings{'DPORT'} ne ''){
 294                                 print "--dport $qossettings{'DPORT'} ";
 295                         }
 296                         print "-j RETURN\n\n";
 297                 }
 298         }
 299 print <<END
 300
 301         ### SET LEVEL7-RULES
 302 END
 303 ;
 304         foreach $l7ruleentry (sort @l7rules)
 305         {
 306                 @l7ruleline = split( /\;/, $l7ruleentry );
 307                 if ( $l7ruleline[1] eq $qossettings{'RED_DEV'} )
 308                 {
 309                         $qossettings{'CLASS'} = $l7ruleline[0];
 310                         $qossettings{'DEVICE'} = $l7ruleline[1];
 311                         $qossettings{'L7PROT'} = $l7ruleline[2];
 312                         $qossettings{'QIP'} = $l7ruleline[3];
 313                         $qossettings{'DIP'} = $l7ruleline[4];
 314                         print "\tiptables -t mangle -A QOS-OUT ";
 315                         if ($qossettings{'QIP'} ne ''){
 316                                 print "-s $qossettings{'QIP'} ";
 317                         }
 318                         if ($qossettings{'DIP'} ne ''){
 319                                 print "-d $qossettings{'DIP'} ";
 320                         }
 321                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j CLASSIFY --set-class 1:$qossettings{'CLASS'}\n";
 322                         print "\tiptables -t mangle -A QOS-OUT ";
 323                         if ($qossettings{'QIP'} ne ''){
 324                                 print "-s $qossettings{'QIP'} ";
 325                         }
 326                         if ($qossettings{'DIP'} ne ''){
 327                                 print "-d $qossettings{'DIP'} ";
 328                         }
 329                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
 330                 }
 331         }
 332
 333 print <<END
 334
 335         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 336         iptables -t mangle -A QOS-OUT -j CLASSIFY --set-class 1:$qossettings{'DEFCLASS_OUT'}
 337
 338         ###
 339         ### $qossettings{'IMQ_DEV'}
 340         ###
 341
 342         tc qdisc del dev $qossettings{'RED_DEV'} ingress >/dev/null 2>&1
 343         tc qdisc add dev $qossettings{'RED_DEV'} handle ffff: ingress
 344
 345         ### BRING UP $qossettings{'IMQ_DEV'}
 346         if [ ! -d "/sys/class/net/$qossettings{'IMQ_DEV'}" ]; then
 347                 ip link add name $qossettings{'IMQ_DEV'} type ifb
 348         fi
 349
 350         #tc qdisc del dev $qossettings{'IMQ_DEV'} root
 351         #tc qdisc del dev $qossettings{'IMQ_DEV'} ingress
 352         ip link set $qossettings{'IMQ_DEV'} up
 353
 354         tc filter add dev $qossettings{'RED_DEV'} parent ffff: protocol all u32 match u32 0 0 \\
 355                 action mirred egress redirect dev $qossettings{'IMQ_DEV'}
 356
 357         ### ADD HTB QDISC FOR $qossettings{'IMQ_DEV'}
 358         tc qdisc del dev $qossettings{'IMQ_DEV'} root >/dev/null 2>&1
 359         tc qdisc add dev $qossettings{'IMQ_DEV'} root handle 2: htb default $qossettings{'DEFCLASS_INC'}
 360
 361         ### MAIN RATE LIMIT
 362         tc class add dev $qossettings{'IMQ_DEV'} parent 2: classid 2:1 htb rate $qossettings{'INC_SPD'}kbit
 363
 364         ### CLASSES FOR $qossettings{'IMQ_DEV'}
 365 END
 366 ;
 367 foreach $classentry (sort @classes)
 368 {
 369         @classline = split( /\;/, $classentry );
 370         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 371                 $qossettings{'DEVICE'} = $classline[0];
 372                 $qossettings{'CLASS'} = $classline[1];
 373                 $qossettings{'PRIO'} = $classline[2];
 374                 $qossettings{'RATE'} = $classline[3];
 375                 $qossettings{'CEIL'} = $classline[4];
 376                 $qossettings{'BURST'} = $classline[5];
 377                 $qossettings{'CBURST'} = $classline[6];
 378                 print "\ttc class add dev $qossettings{'DEVICE'} parent 2:1 classid 2:$qossettings{'CLASS'} htb rate $qossettings{'RATE'}kbit ceil $qossettings{'CEIL'}kbit prio $qossettings{'PRIO'} ";
 379                 if (($qossettings{'BURST'} ne '') && ($qossettings{'BURST'} ne 0)) {
 380                         print "burst $qossettings{'BURST'}k ";
 381                 }
 382                 if (($qossettings{'CBURST'} ne '') && ($qossettings{'CBURST'} ne 0)) {
 383                         print "cburst $qossettings{'CBURST'}k";
 384                 }
 385                 print "\n";
 386         }
 387 }
 388
 389 print "\n\t### ATTACH QDISC TO LEAF CLASSES\n";
 390 foreach $classentry (sort @classes)
 391 {
 392         @classline = split( /\;/, $classentry );
 393         if ($qossettings{'IMQ_DEV'} eq $classline[0]) {
 394                 $qossettings{'DEVICE'} = $classline[0];
 395                 $qossettings{'CLASS'} = $classline[1];
 396                 print "\ttc qdisc add dev $qossettings{'DEVICE'} parent 2:$qossettings{'CLASS'} handle $qossettings{'CLASS'}: fq_codel $fqcodel_options\n";
 397         }
 398 }
 399 print <<END
 400
 401         ### ADD QOS-INC CHAIN TO THE MANGLE TABLE IN IPTABLES
 402         iptables -t mangle -N QOS-INC
 403         iptables -t mangle -A FORWARD -i $qossettings{'RED_DEV'} -j QOS-INC
 404         iptables -t mangle -A FORWARD -i $qossettings{'RED_DEV'} -j QOS-TOS
 405
 406         ### SET TOS
 407 END
 408 ;
 409         foreach $tosruleentry (sort @tosrules)
 410         {
 411                 @tosruleline = split( /\;/, $tosruleentry );
 412                 $qossettings{'CLASS'} = $tosruleline[0];
 413                 $qossettings{'TOS'} = abs $tosruleline[2] * 2;
 414                 if ( $tosruleline[1] eq $qossettings{'IMQ_DEV'} )
 415                 {
 416                         print "\tiptables -t mangle -A QOS-INC -m tos --tos $qossettings{'TOS'} -j CLASSIFY --set-class 2:$qossettings{'CLASS'}\n";
 417                         print "\tiptables -t mangle -A QOS-INC -m tos --tos $qossettings{'TOS'} -j RETURN\n";
 418                 }
 419
 420         }
 421
 422 print "\n\t### SET PORT-RULES\n";
 423         foreach $portruleentry (sort @portrules)
 424         {
 425                 @portruleline = split( /\;/, $portruleentry );
 426                 if ( $portruleline[1] eq $qossettings{'IMQ_DEV'} )
 427                 {
 428                         $qossettings{'CLASS'} = $portruleline[0];
 429                         $qossettings{'DEVICE'} = $portruleline[1];
 430                         $qossettings{'PPROT'} = $portruleline[2];
 431                         $qossettings{'QIP'} = $portruleline[3];
 432                         $qossettings{'QPORT'} = $portruleline[4];
 433                         $qossettings{'DIP'} = $portruleline[5];
 434                         $qossettings{'DPORT'} = $portruleline[6];
 435                         print "\tiptables -t mangle -A QOS-INC ";
 436                         if ($qossettings{'QIP'} ne ''){
 437                                 print "-s $qossettings{'QIP'} ";
 438                         }
 439                         if ($qossettings{'DIP'} ne ''){
 440                                 print "-d $qossettings{'DIP'} ";
 441                         }
 442                         print "-p $qossettings{'PPROT'} ";
 443 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 444 #                               print "-m multiport ";
 445 #                       }
 446                         if ($qossettings{'QPORT'} ne ''){
 447                                 print "--sport $qossettings{'QPORT'} ";
 448                         }
 449                         if ($qossettings{'DPORT'} ne ''){
 450                                 print "--dport $qossettings{'DPORT'} ";
 451                         }
 452                         print "-j CLASSIFY --set-class 2:$qossettings{'CLASS'}\n";
 453                         print "\tiptables -t mangle -A QOS-INC ";
 454                         if ($qossettings{'QIP'} ne ''){
 455                                 print "-s $qossettings{'QIP'} ";
 456                         }
 457                         if ($qossettings{'DIP'} ne ''){
 458                                 print "-d $qossettings{'DIP'} ";
 459                         }
 460                         print "-p $qossettings{'PPROT'} ";
 461 #                       if (($qossettings{'QPORT'} ne '') || ($qossettings{'DPORT'} ne '')){
 462 #                               print "-m multiport ";
 463 #                       }
 464                         if ($qossettings{'QPORT'} ne ''){
 465                                 print "--sport $qossettings{'QPORT'} ";
 466                         }
 467                         if ($qossettings{'DPORT'} ne ''){
 468                                 print "--dport $qossettings{'DPORT'} ";
 469                         }
 470                         print "-j RETURN\n\n";
 471                 }
 472         }
 473
 474 print <<END
 475
 476         ### SET LEVEL7-RULES
 477 END
 478 ;
 479         foreach $l7ruleentry (sort @l7rules)
 480         {
 481                 @l7ruleline = split( /\;/, $l7ruleentry );
 482                 if ( $l7ruleline[1] eq $qossettings{'IMQ_DEV'} )
 483                 {
 484                         $qossettings{'CLASS'} = $l7ruleline[0];
 485                         $qossettings{'DEVICE'} = $l7ruleline[1];
 486                         $qossettings{'L7PROT'} = $l7ruleline[2];
 487                         $qossettings{'QIP'} = $l7ruleline[3];
 488                         $qossettings{'DIP'} = $l7ruleline[4];
 489                         print "\tiptables -t mangle -A QOS-INC ";
 490                         if ($qossettings{'QIP'} ne ''){
 491                                 print "-s $qossettings{'QIP'} ";
 492                         }
 493                         if ($qossettings{'DIP'} ne ''){
 494                                 print "-d $qossettings{'DIP'} ";
 495                         }
 496                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j CLASSIFY --set-class 2:$qossettings{'CLASS'}\n";
 497                         print "\tiptables -t mangle -A QOS-INC ";
 498                         if ($qossettings{'QIP'} ne ''){
 499                                 print "-s $qossettings{'QIP'} ";
 500                         }
 501                         if ($qossettings{'DIP'} ne ''){
 502                                 print "-d $qossettings{'DIP'} ";
 503                         }
 504                         print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
 505                 }
 506         }
 507
 508 print <<END
 509         ### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
 510         iptables -t mangle -A QOS-INC -j CLASSIFY --set-class 2:$qossettings{'DEFCLASS_INC'}
 511
 512         ### SETTING TOS BITS
 513 END
 514 ;
 515         foreach $classentry (sort @classes)
 516         {
 517                 @classline = split( /\;/, $classentry );
 518                 $qossettings{'CLASS'} = $classline[1];
 519                 $qossettings{'TOS'} = abs $classline[7] * 2;
 520                 if ($qossettings{'TOS'} ne "0") {
 521                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'CLASS'} -j TOS --set-tos $qossettings{'TOS'}\n";
 522                         print "\tiptables -t mangle -A QOS-TOS -m mark --mark $qossettings{'CLASS'} -j RETURN\n";
 523                 }
 524         }
 525
 526 print <<END
 527
 528         ## STARTING COLLECTOR
 529         /usr/local/bin/qosd $qossettings{'RED_DEV'} >/dev/null 2>&1
 530         /usr/local/bin/qosd $qossettings{'IMQ_DEV'} >/dev/null 2>&1
 531
 532         for i in \$(ls \$RRDLOG/class_*.rrd); do
 533                 rrdtool update \$i \$(date +%s): 2>/dev/null
 534         done
 535
 536         echo "Quality of Service was successfully started!"
 537         exit 0
 538   ;;
 539   clear|stop)
 540         ### RESET EVERYTHING TO A KNOWN STATE
 541         killall qosd >/dev/null 2>&1
 542
 543         # DELETE QDISCS
 544         tc qdisc del dev $qossettings{'RED_DEV'} root >/dev/null 2>&1
 545         tc qdisc del dev $qossettings{'RED_DEV'} ingress >/dev/null 2>&1
 546         tc qdisc add root dev $qossettings{'RED_DEV'} fq_codel >/dev/null 2>&1
 547         tc qdisc del dev $qossettings{'IMQ_DEV'} root >/dev/null 2>&1
 548         tc qdisc del dev $qossettings{'IMQ_DEV'} ingress >/dev/null 2>&1
 549         tc qdisc add root dev $qossettings{'IMQ_DEV'} fq_codel >/dev/null 2>&1
 550         # STOP IMQ-DEVICE
 551         ip link set $qossettings{'IMQ_DEV'} down >/dev/null 2>&1
 552         ip link del $qossettings{'IMQ_DEV'} >/dev/null 2>&1
 553
 554         # REMOVE & FLUSH CHAINS
 555         iptables -t mangle --delete POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT >/dev/null 2>&1
 556         iptables -t mangle --delete POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 557         iptables -t mangle --delete FORWARD -i $qossettings{'RED_DEV'} -j QOS-INC >/dev/null 2>&1
 558         iptables -t mangle --delete FORWARD -i $qossettings{'RED_DEV'} -j QOS-TOS >/dev/null 2>&1
 559         iptables -t mangle --flush  QOS-OUT >/dev/null 2>&1
 560         iptables -t mangle --delete-chain QOS-OUT >/dev/null 2>&1
 561         iptables -t mangle --flush  QOS-INC >/dev/null 2>&1
 562         iptables -t mangle --delete-chain QOS-INC >/dev/null 2>&1
 563         iptables -t mangle --flush  QOS-TOS >/dev/null 2>&1
 564         iptables -t mangle --delete-chain QOS-TOS >/dev/null 2>&1
 565
 566         rmmod sch_htb >/dev/null 2>&1
 567
 568         for i in \$(ls \$RRDLOG/class_*.rrd); do
 569                 rrdtool update \$i \$(date +%s):
 570         done
 571
 572         echo "Quality of Service was successfully cleared!"
 573   ;;
 574   gen|generate)
 575         echo -n "Generating the QoS-Scripts..."
 576         /usr/bin/perl /var/ipfire/qos/bin/makeqosscripts.pl > /var/ipfire/qos/bin/qos.sh
 577         echo ".Done!"
 578         exit 0
 579         ;;
 580   restart)
 581         ### FIRST CLEAR EVERYTHING
 582         \$0 clear
 583
 584         ### THEN START
 585         \$0 start
 586         ;;
 587 esac
 588 ### EOF
 589 END
 590 ;
 591
 592 ############################################################################################################################
 593 ############################################################################################################################