nano /etc/network/interfaces

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
 
# The loopback network interface
auto lo
iface lo inet loopback
 
# The primary network interface
auto eth0
allow-hotplug eth0
iface eth0 inet static
address 10.10.20.10
netmask 255.255.255.0
gateway 10.10.20.1
 
# The secondary network interface
auto eth1
allow-hotplug eth1
iface eth1 inet static
address 10.10.1.1
netmask 255.255.255.0
 
# The secondary network interface alias for unknown user
auto eth1:1
allow-hotplug eth1:1
iface eth1:1 inet static
address 172.32.0.1
netmask 255.255.255.0

apt-get install mysql-server-core-5.5 mysql-client-5.5 libmysqlclient18 libmysqlclient-dev phpmyadmin apache2 mysql-server expat libexpat1-dev php5-cli libapache2-mod-php5 php5-mysql dhcp3-server build-essential bind9 bandwidthd softflowd libxmlrpc-c3-dev sudo

nano /etc/default/isc-dhcp-server

cd /usr/share/doc/bandwidthd/
cp bandwidthd.conf /etc/bandwidthd/
nano /etc/bandwidthd/bandwidthd.conf

subnet 10.10.1.0/24
dev "eth1"
 
#Log data to cdf file htdocs/log.cdf
output_cdf true
 
#DEBCONF_OUTPUTCDF#
 
#Set the cdf log output directory
log_dir "/var/lib/bandwidthd"
 
#Read back the cdf file on startup
recover_cdf true
 
htdocs_dir "/var/lib/bandwidthd/htdocs"

ln -fs /var/lib/bandwidthd/htdocs/ /var/www/band

/etc/init.d/bandwidthd restart

a2enmod php5

#
# This file MUST be edited with the 'visudo' command as root.
#
# Please consider adding local content in /etc/sudoers.d/ instead of
# directly modifying this file.
#
# See the man page for details on how to write a sudoers file.
#
Defaults        env_reset
Defaults        mail_badpass
Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
 
# Host alias specification
 
# User alias specification
User_Alias BILLING = www-data
 
# Cmnd alias specification
 
# User privilege specification
root    ALL=(ALL:ALL) ALL
BILLING ALL = NOPASSWD: ALL
 
# Allow members of group sudo to execute any command
%sudo   ALL=(ALL:ALL) ALL
 
# See sudoers(5) for more information on "#include" directives:
 
#includedir /etc/sudoers.d

cd /home/sergio
wget downloads.sourceforge.net/project/htbinit/HTB.init/0.8.5/htb.init-v0.8.5?use_mirror=surfnet
mv htb.init-v0.8.5?use_mirror=surfnet /usr/local/sbin/htb
cd /usr/local/sbin/
chmod +x htb
ln -fs /usr/local/sbin/htb /etc/init.d/

mkdir -p /etc/sysconfig/htb
cd /etc/sysconfig/htb
touch eth0
touch eth1
touch eth0-2.root
touch eth1-2.root
 

nano /etc/sysconfig/htb/eth0
 
DEFAULT=0
R2Q=100
 
nano /etc/sysconfig/htb/eth1
 
DEFAULT=0
R2Q=100
 
nano /etc/sysconfig/htb/eth0-2.root
 
RATE=100Mbit
CEIL=100Mbit
 
nano /etc/sysconfig/htb/eth1-2.root
 
RATE=100Mbit
CEIL=100Mbit

htb compile
htb start
htb stats

### eth0: queueing disciplines
 
qdisc htb 1: root refcnt 2 r2q 100 default 0 direct_packets_stat 36
 Sent 4768 bytes 36 pkt (dropped 0, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 0p requeues 0
 
### eth0: traffic classes
 
class htb 1:2 root prio 0 rate 100000Kbit ceil 100000Kbit burst 1600b cburst 1600b
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 0p requeues 0
 lended: 0 borrowed: 0 giants: 0
 tokens: 2000 ctokens: 2000
 
### eth1: queueing disciplines
 
qdisc htb 1: root refcnt 2 r2q 100 default 0 direct_packets_stat 3
 Sent 242 bytes 3 pkt (dropped 0, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 0p requeues 0
 
### eth1: traffic classes
 
class htb 1:2 root prio 0 rate 100000Kbit ceil 100000Kbit burst 1600b cburst 1600b
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
 rate 0bit 0pps backlog 0b 0p requeues 0
 lended: 0 borrowed: 0 giants: 0
 tokens: 2000 ctokens: 2000

nano /etc/default/softflowd

INTERFACE="eth1"
OPTIONS="-n 10.10.1.1:42111"

mkdir /root/BILLING
cd /root/BILLING
wget http://stargazer.dp.ua/download/server/2.408/stg-2.408.tar.gz
tar zxvf stg-2.408.tar.gz
cd stg-2.408/projects/stargazer/
./build
make install
cd ../sgconf && ./build && make && make install
cd ../sgconf_xml/ && ./build && make && make install
cd /root/BILLING/stg-2.408/projects/stargazer/plugins/configuration/rpcconfig
make && make install

cd /etc/stargazer/conf-available.d/
cp store_mysql.conf /etc/stargazer/conf-enabled.d/
cp mod_rpc.conf /etc/stargazer/conf-enabled.d/
cp mod_cap_nf.conf /etc/stargazer/conf-enabled.d/
cp mod_remote_script.conf /etc/stargazer/conf-enabled.d/

nano /etc/stargazer/stargazer.conf

LogFile = /var/log/stargazer/stargazer.log
 
<DirNames>
    DirName0 = Internet
    DirName1 =
    DirName2 =
    DirName3 =
    DirName4 =
    DirName5 =
    DirName6 =
    DirName7 =
    DirName8 =
    DirName9 =
</DirNames>
 
################################################################################
# Store module
# Configure the module that works with the database server
 
# Warning: Only one store module could be used at the same time!
 
<IncludeFile "conf-enabled.d/store_mysql.conf">
</IncludeFile>
################################################################################
# Other modules
 
<Modules>
 
    <IncludeFile "conf-enabled.d/mod_ao.conf">
    </IncludeFile>
 
    <IncludeFile "conf-enabled.d/mod_ia.conf">
    </IncludeFile>
 
    <IncludeFile "conf-enabled.d/mod_sg.conf">
    </IncludeFile>
 
    <IncludeFile "conf-enabled.d/mod_cap_nf.conf">
    </IncludeFile>
 
    <IncludeFile "conf-enabled.d/mod_rpc.conf">
    </IncludeFile>
 
    <IncludeFile "conf-enabled.d/mod_remote_script.conf">
    </IncludeFile>
 
</Modules>

mkdir /var/log/stargazer/
cd /var/log/stargazer/
touch /var/log/stargazer/stargazer.log

nano /etc/stargazer/conf-enabled.d/store_mysql.conf

dbuser=root - ваш пользователь
rootdbpass=password - ваш пароль

nano /etc/stargazer/conf-enabled.d/mod_cap_nf.conf

TCPPort = 42111
UDPPort = 42111

nano /etc/stargazer/conf-enabled.d/mod_rpc.conf

Port = 8081

nano /etc/stargazer/conf-enabled.d/mod_remote_script.conf

SubnetFile = /etc/stargazer/subnets

cd /etc/stargazer
touch subnets
nano subnets 
10.10.1.0/24 10.10.20.10 - наши сети которые мы указывали в файле конфигурации сетевых интерфейсов
chmod 777 subnets

nano /etc/stargazer/rules

ALL     0.0.0.0/0    DIR0

root@debian:/# stargazer

nano /var/log/stargazer/stargazer.log

2015-02-17 22:43:56 -- Stg v. 2.408
2015-02-17 22:43:56 -- Message queue created successfully. msgKey=5555 msgID=32768
2015-02-17 22:43:56 -- Timer thread started successfully.
2015-02-17 22:43:56 -- Storage plugin: mysql_store v.0.67. Loading successfull.
2015-02-17 22:43:56 -- Users started successfully.
2015-02-17 22:43:56 -- Traffcounter started successfully.
2015-02-17 22:43:56 -- Module: 'Remote script v 0.3'. Start successfull.
2015-02-17 22:43:56 -- Module: 'Stg configurator v.0.08'. Start successfull.
2015-02-17 22:43:56 -- Module: 'Stargazer RPC v. 0.2'. Start successfull.
2015-02-17 22:43:56 -- Module: 'Always Online authorizator v.1.0'. Start successfull.
2015-02-17 22:43:56 -- Module: 'InetAccess authorization plugin v.1.4'. Start successfull.
2015-02-17 22:43:56 -- Module: 'CAP_NF v. 0.4'. Start successfull.
2015-02-17 22:43:56 -- Stg started successfully.
2015-02-17 22:43:56 -- +++++++++++++++++++++++++++++++++++++++++++++

killall stargazer

cd /var/www/
mkdir billing
cd billing
wget http://ubilling.net.ua/ub.tgz
tar zxvf ub.tgz

cat /var/www/billing/docs/test_dump.sql | mysql -u root -p stg

nano /var/www/billing/config/mysql.ini

;user login
username = "root" - ваш логин
;user password 
password = "password" - ваш пароль

nano /var/www/billing/config/billing.ini

SUDO=/usr/bin/sudo
RC_DHCPD=/etc/init.d/isc-dhcp-server

cd /var/www/billing
mv multinet multinet_back

mkdir /etc/dhcp_back
mv  /etc/dhcp/* /etc/dhcp_back/

ln -fs /var/www/billing/multinet/* /etc/dhcp/

nano /var/www/billing/config/dhcp/global.template

option domain-name "НАЗВАНИЕ ВАШЕГО ПРОВАЙДЕРА";
option domain-name-servers 10.10.1.1;
default-lease-time 3600;
max-lease-time 43200;
authoritative;
ddns-update-style none;
log-facility local7;
one-lease-per-client true;
deny duplicates;
 
shared-network НАЗВАНИЕ ВАШЕГО ПРОВАЙДЕРА {
{SUBNETS}
}

nano /var/www/billing/config/dhcp/subnets.template

subnet {NETWORK} netmask {MASK} {
default-lease-time 3600;
option domain-name "НАЗВАНИЕ ВАШЕГО ПРОВАЙДЕРА";
option subnet-mask {MASK};
option routers 10.10.1.1;
include "/etc/dhcp/{HOSTS}";
}

cp -f /var/www/billing/docs/presets/Linux/etc/* /etc/stargazer/
chmod a+x /etc/stargazer/*

nano /etc/stargazer/config

host = localhost
username = root - ваш логин
password = password - ваш пароль
database = stg

nano /etc/stargazer/OnConnect
 
IFUP="eth0"
IFDOWN="eth1"
 
echo "$cur_date $cur_time CONNECT: ID-$ID;LOGIN-$LOGIN;IP-$IP;CASH-$CASH;SPEED-$SPEED;UPSPEED-$UPSPEED,MAC-$MAC" >> /var/log/stargazer/allconnect.log

nano /etc/stargazer/OnDisconnect
 
IFUP="eth0" 
IFDOWN="eth1"
 
echo "$cur_date $cur_time DISCONNECT: ID-$ID;LOGIN-$LOGIN;IP-$IP;CASH-$CASH;SPEED-$SPEED;UPSPEED-$UPSPEED,MAC-$MAC" >> /var/log/stargazer/allconnect.log

nano /etc/stargazer/GetMac
#! /usr/bin/php
 
nano /etc/stargazer/GetSpeed
#! /usr/bin/php
 
nano /etc/stargazer/GetUpSpeed
#! /usr/bin/php

touch /var/log/stargazer/allconnect.log

chown www-data:www-data  -R /etc/dhcp 
chown www-data:www-data  -R /var/www/billing

nano /etc/sysctl.conf
net.ipv4.ip_forward=1

nano /etc/stargazer/conf-enabled.d/mod_remote_script.conf
SubnetFile = /var/www/billing/remote_nas.conf

stargazer

nano /etc/rc.local

# IPTables
iptables -P FORWARD DROP
# Разрешаем интернет в подсети пользователей
iptables -t nat -A POSTROUTING -s 10.10.1.0/24 -o eth0 -j SNAT --to-source 10.10.20.10
# Перенаправляем не известных пользователей
iptables -t nat -A PREROUTING -p tcp -s 172.32.0.0/20 ! -d 10.10.1.0/24 -j DNAT --to 10.10.1.1
# IPTables
 
# HTB
/etc/init.d/htb start
 
# Stargazer
stargazer

nano /etc/stargazer/OnConnect

# DELETE RULEZ FOR DEPTORS
$IPT -t nat -D PREROUTING -p tcp -s $IP ! -d 10.10.1.0/24 -j DNAT --to 10.10.1.1
while [ $? -eq 0 ]
do
$IPT -t nat -D PREROUTING -p tcp -s $IP ! -d 10.10.1.0/24 -j DNAT --to 10.10.1.1
done

nano /etc/stargazer/OnDisconnect

# ADD RULEZ FOR DEPTORS
iptables -t nat -A PREROUTING -p tcp -s $IP ! -d 10.10.1.0/24 -j DNAT --to 10.10.1.1

nano /var/www/index.php

<?
if (preg_match("/10.10.1.[0-9]{1,3}/", $_SERVER["REMOTE_ADDR"])){
echo'
<script type="text/javascript">
<!--
window.location = "http://userstat.isp"
-->
</script>
';
} 
?>

touch /var/log/dhcpd.log
chmod 0777 /var/log/dhcpd.log

#
# Logging for the mail system.  Split it up so that
# it is easy to write scripts to parse these files.
#
mail.info                       -/var/log/mail.info
mail.warn                       -/var/log/mail.warn
mail.err                        /var/log/mail.err
 
#
# Logging ISC DHCP Server
#
!dhcpd
*.*               /var/log/dhcpd.log
 
#
# Logging for INN news system.
#
news.crit                       /var/log/news/news.crit
news.err                        /var/log/news/news.err
news.notice 

NMLEASES = /var/log/dhcpd.log

service rsyslog restart
service isc-dhcp-server restart

 
Jun 16 21:08:41 ZT-L1 isc-dhcp-server[4695]: Stopping ISC DHCP server: dhcpd.
Jun 16 21:08:41 ZT-L1 dhcpd: Internet Systems Consortium DHCP Server 4.3.1
Jun 16 21:08:41 ZT-L1 dhcpd: Copyright 2004-2014 Internet Systems Consortium.
Jun 16 21:08:41 ZT-L1 dhcpd: All rights reserved.
Jun 16 21:08:41 ZT-L1 dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Jun 16 21:08:41 ZT-L1 dhcpd: Internet Systems Consortium DHCP Server 4.3.1
Jun 16 21:08:41 ZT-L1 dhcpd: Copyright 2004-2014 Internet Systems Consortium.
Jun 16 21:08:41 ZT-L1 dhcpd: All rights reserved.
Jun 16 21:08:41 ZT-L1 dhcpd: For info, please visit https://www.isc.org/software/dhcp/
Jun 16 21:08:41 ZT-L1 dhcpd: Wrote 0 leases to leases file.
Jun 16 21:08:41 ZT-L1 dhcpd: Server starting service.
Jun 16 21:08:43 ZT-L1 isc-dhcp-server[4702]: Starting ISC DHCP server: dhcpd.
 

apt-get install arpwatch

touch /var/lib/arpwatch/arp.dat
chown arpwatch:arpwatch /var/lib/arpwatch/arp.dat

eth1 -a -n 10.10.1.0/24 -m mail@mydomain.com

 
# Global options for arpwatch(8).
 
# Debian: don't report bogons, don't use PROMISC.
ARGS="-N -p"
 
# Debian: run as `arpwatch' user.  Empty this to run as root.
RUNAS="arpwatch"
 

#
# Logging for the mail system.  Split it up so that
# it is easy to write scripts to parse these files.
#
mail.info                       -/var/log/mail.info
mail.warn                       -/var/log/mail.warn
mail.err                        /var/log/mail.err
 
#
# Logging ISC DHCP Server
#
!dhcpd
*.*               /var/log/dhcpd.log
 
#
# Logging ARPWATCH
#
!arpwatch
*.notice /var/log/messages
 
#
# Logging for INN news system.
#
news.crit                       /var/log/news/news.crit
news.err                        /var/log/news/news.err
news.notice                     -/var/log/news/news.notice
 
#
# Some "catch-all" log files.
#
 

service rsyslog restart
service arpwatch start