// L2TPNS Throttle Stuff // $Id: throttle.c,v 1.2 2004/03/05 00:09:03 fred_nerk Exp $ #include #include #include #include #include #include #include #include #include #include #include #include #include "l2tpns.h" #include "util.h" extern radiust *radius; extern sessiont *session; extern u32 sessionid; extern int radfd; extern tbft *filter_buckets; extern struct configt *config; // Throttle or Unthrottle a session int throttle_session(sessionidt s, int throttle) { if (!config->rl_rate) return 0; if (!*session[s].user) return 0; // User not logged in if (throttle) { // Throttle them char cmd[2048] = {0}; if (!session[s].tbf) session[s].tbf = rl_get_tbf(); if (!session[s].tbf) { log(1, 0, s, session[s].tunnel, "Error creating a filtering bucket for user %s\n", session[s].user); return 0; } log(2, 0, s, session[s].tunnel, "Throttling session %d for user %s\n", s, session[s].user); snprintf(cmd, 2048, "iptables -t mangle -A throttle -d %s -j MARK --set-mark %d", inet_toa(ntohl(session[s].ip)), session[s].tbf); log(4, 0, s, session[s].tunnel, "Running %s\n", cmd); system(cmd); } else { char cmd[2048] = {0}; log(2, 0, s, session[s].tunnel, "Unthrottling session %d for user %s\n", s, session[s].user); if (session[s].tbf) { int count = 10; snprintf(cmd, 2048, "iptables -t mangle -D throttle -d %s -j MARK --set-mark %d", inet_toa(ntohl(session[s].ip)), session[s].tbf); log(4, 0, s, session[s].tunnel, "Running %s\n", cmd); while (--count) { int status = system(cmd); if (WEXITSTATUS(status) != 0) break; } system(cmd); rl_done_tbf(session[s].tbf); session[s].tbf = 0; } } session[s].throttle = throttle; return 0; }