root@broadband:~# cat /etc/traffpro/traffpro.cfg
to_install_dir=/opt/traffpro
daemon=true
db_url=localhost
db_usr=root
db_passwd=12345456
db_name=traffpro
time_in=10
time_out=360
control_eth_addr=true
net_number=0
ports_detail=true
ss_enabled=false
eth_out=eth0
url_block=true
url_detail=true
out_ip=172.16.16.1
listen_addr=127.0.0.1
listen_port=9999
ip_queue_maxlen=2048000
#squid_connect=true
#squid_log_file=/var/log/squid/traffpro.log
#url_port_squid=80
timer=false
antiflood=500
not_udptcp_control=true
not_resolv_dn=true
nat_data_in_db=true
log_route=true
shaper_type_linear=false
url_agregate=true
url_no_port=false
algo=2
secret_files=true

root@broadband:~# cat /etc/traffpro/traffpro_rule.cfg
echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/ip_dynaddr
echo 1 > /proc/sys/net/ipv4/conf/eth2/proxy_arp
#load modules:
modprobe ip_conntrack_ftp
modprobe ip_nat_ftp
modprobe iptable_filter
modprobe ipt_limit
modprobe ipt_state
modprobe ip_gre
modprobe ip_nat_pptp
modprobe iptable_nat
#
iptables -A FORWARD -s 192.168.1.0/24 -d 192.168.2.0/24 -j ACCEPT
iptables -A FORWARD -d 192.168.1.0/24 -s 192.168.2.0/24 -j ACCEPT
#
iptables -t mangle -A PREROUTING -p tcp --dport 80 -d 192.168.2.0/255.255.255.0 -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp --dport 443 -d 192.168.2.0/255.255.255.0 -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp --dport 5000 -d 192.168.2.0/255.255.255.0 -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp --dport 55000 -d 192.168.2.0/255.255.255.0 -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.254 --dport 80 -j QUEUE
iptables -t mangle -A PREROUTING -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.254 --dport 443 -j QUEUE
iptables -t mangle -A PREROUTING -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.101 --dport 3128 -j QUEUE
iptables -t mangle -A PREROUTING -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.254 --dport 5000 -j QUEUE
iptables -t mangle -A PREROUTING -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.101 --dport 55000 -j QUEUE
iptables -t nat -A PREROUTING -m tcp -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.0/255.255.255.0 --dport 80 -j REDIRECT --to-ports 3128
iptables -t nat -A PREROUTING -m tcp -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.0/255.255.255.0 --dport 443 -j REDIRECT --to-ports 3128
iptables -t nat -A PREROUTING -m tcp -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.0/255.255.255.0 --dport 5000 -j REDIRECT --to-ports 3128
iptables -t nat -A PREROUTING -m tcp -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.0/255.255.255.0 --dport 55000 -j REDIRECT --to-ports 3128
iptables -A INPUT -s 192.168.2.0/255.255.255.0 -m tcp -p tcp --dport 3128 -j ACCEPT
iptables -A OUTPUT -p tcp -d 192.168.2.0/255.255.255.0 --sport 3128 -j QUEUE

root@broadband:~# cat /etc/pptpd.conf
###############################################################################
# $Id: pptpd.conf 4255 2004-10-03 18:44:00Z rene $
#
# Sample Poptop configuration file /etc/pptpd.conf
#
# Changes are effective when pptpd is restarted.
###############################################################################
ppp /usr/sbin/pppd
option /etc/ppp/pptpd-options
debug
#logwtmp
localip 192.168.2.254
remoteip 192.168.2.10-50

root@broadband:~# cat /etc/ppp/pptpd-options
###############################################################################
# $Id: pptpd-options 4643 2006-11-06 18:42:43Z rene $
#
# Sample Poptop PPP options file /etc/ppp/pptpd-options
# Options used by PPP when a connection arrives from a client.
# This file is pointed to by /etc/pptpd.conf option keyword.
# Changes are effective on the next connection.  See "man pppd".
#
# You are expected to change this file to suit your system.  As
# packaged, it requires PPP 2.4.2 and the kernel MPPE module.
###############################################################################
name pptpd
proxyarp
debug
logfile /var/log/pptpd.log
lock
nobsdcomp
novj
novjccomp
nologfd
auth
+pap
+chap
+mschap
+mschap-v2
plugin /opt/traffpro/billing-daemon/bin/libtraffpro.so

root@broadband:~# cat /etc/traffpro/traffpro_rule.cfg
echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/ip_dynaddr
echo 1 > /proc/sys/net/ipv4/conf/eth2/proxy_arp
#load modules:
modprobe ip_conntrack_ftp
modprobe ip_nat_ftp
modprobe iptable_filter
modprobe ipt_limit
modprobe ipt_state
modprobe ip_gre
modprobe ip_nat_pptp
modprobe iptable_nat
#
iptables -A FORWARD -s 192.168.1.0/24 -d 192.168.2.0/24 -j ACCEPT
iptables -A FORWARD -d 192.168.1.0/24 -s 192.168.2.0/24 -j ACCEPT
#ROUTE
iptables -t nat -A POSTROUTING -d 192.168.2.0/24 -j SNAT --to-source 192.168.2.254
#LAN2-PROXY
iptables -t mangle -A PREROUTING -p tcp --dport 80 -d 192.168.2.0/255.255.255.0 -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.254 --dport 80 -j QUEUE
iptables -t nat -A PREROUTING -m tcp -p tcp -s 192.168.2.0/255.255.255.0 ! -d 192.168.2.0/255.255.255.0 --dport 80 -j REDIRECT --to-ports 3128
iptables -A INPUT -s 192.168.2.0/255.255.255.0 -m tcp -p tcp --dport 3128 -j ACCEPT
iptables -A OUTPUT -p tcp -d 192.168.2.0/255.255.255.0 --sport 3128 -j QUEUE