SEQUREISP ¿el Mejor Software de Gestión de ISPs?

SequreISP es un software de gestión de ISP (Proveedores de Servicios de Internet).
El software permite gestionar el acceso a Internet garantizando calidad de servicio para los clientes
y maximizando la rentabilidad para el proveedor.

https://github.com/sequre/sequreisp

sequreisp

sequreisp is an ISP management software.

• Has a really nice and powerful web interface
• Can handle up to 3000 or more clients in a single server, thus it is oriented to small/medium ISPs
• Can group multiple internet providers and do load balancing and failover between them (current record is 32 DSL lines balanced in a single server)
• Supports all kind of internet providers, dedicated, DSL lines, cable-modem, etc.
• Does a meticulous bandwidth control and traffic prioritization
  • Allows to set maximum and minimum(guaranteed) for download/upload traffic
  • Efficiently detects P2P traffic and allows to set a maximum as a percent of client’s bandwidth
  • Prioritization can be customized even to a per client basis
• Integrates with Squid proxy to do transparent web cache(optional)
• Has a plug-in interface, you can write your custom functionality in top of sequreisp
• It is written in Ruby on Rails
• And a lot more
  • Instant and historical graphs
  • Backup & restore from the web interface with a single and lightweight file
  • Port forwarding, full DNAT, and proxy ARP to clients
  • VLAN support
  • E-mail notifications
  • Role based authentication, with audit system
  • Multilingual support (currently Spanish and English, contributions are welcome)

Demo

There is an online demo of the application available

Url: http://demo.sequreisp.com/
User: admin@sequre.com.ar
Pass: 1234

configurar modulo ipp2p en Centos 6.2

kernel version: 2.6.32-220.17.1.el6.i686
iptables version: 1.4.7


instalamos el sources del kernel:
# yum install kernel-devel

chequeamos que este instalado:
# ls -la /lib/modules/2.6.32-220.17.1.el6.i686/build

descargamos xtables-addons, descomprimimos, compilamos e instalamos:
# wget http://downloads.sourceforge.net/project/xtables-addons/Xtables-addons/1.37/xtables-addons-1.37.tar.xz
# tar Jxvf xtables-addons-1.37.tar.xz
# cd xtables-addons-1.37
# ./configure
# make
# make install

comprobamos el modulo ipp2p instalado:
# iptables -m ipp2p --help

banneamos p2p conocidos:

#iptables -A FORWARD -p tcp -m ipp2p --edk -j DROP
#iptables -A FORWARD -p udp -m ipp2p --edk -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --dc -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --kazaa -j DROP
#iptables -A FORWARD -p udp -m ipp2p --kazaa -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --gnu -j DROP
#iptables -A FORWARD -p udp -m ipp2p --gnu -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --bit -j DROP
#iptables -A FORWARD -p udp -m ipp2p --bit -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --apple -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --winmx -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --soul -j DROP
#iptables -A FORWARD -p tcp -m ipp2p --ares -j DROP

en una sola linea:-
#  iptables -A FORWARD -m ipp2p --edk --kazaa --gnu --bit --apple --dc --soul --winmx --ares  --mute --waste --xdcc j DROP

Fuente de informacion:
http://jamyy.dyndns.org/blog/2011/07/3226.html
http://supportex.net/2011/02/block-huge-amount-ip-addresses-ipset-fedora-14/1/07/3226.html
http://www.ipp2p.org/documents/README
http://www.tummy.com/journals/entries/jafo_20050717_164535