bandwidth limitation using public IP addresses, using the two configuration files for upload and download

bandwidth limitation using private IP addresses (SNAT), using a single configuration file

match mark

match mark in u32

match MAC address in u16 and u32 for both download and upload

metropolitan/external limitation

when mark is set upload will be ignored

any modern linux, or any system with kernel.org based

iproute2 with tc

apache and php5 (or newer) with php-mysql, php-xml and optionaly php-pecl-ssh2 or php-ssh2

ssh2 server accepting root logins from localhost

modules compiled into kernel like: sch_sfq, cls_u32, sch_htb, sch_ingress and optionaly sch_esfq

SELinux down or configured to permit work with WebHTB

unzip (necessary for auto updates)

MySQL server

WebHTB was tested on Firefox, IE, Chrome, Opera and Safari .

Release Notes for WebHTB 2.9

Jul 20, 2009

Fix "limit" value of default class when add interfaces from menu;

Add support for php-pecl-ssh2 module as auth and exec alternative when phpseclib fail.

Release Notes for WebHTB 2.8

Jul 12, 2009

Correct class default limit (bandwidth changed with limit);

Add short netmask (optional) to ip`s (ex: 192.168.0.3/32 or 192.168.0.0/24). Please use corect values of netmask, netmask like "/32" are optional, webhtb should work fine with no netmask.

download latest version from downloads section or direct download link

put the packet into your web document root (ex.: Fedora normaly: "/var/www/html")

extract the packet, ex.: tar -jxvf WebHTB_V2.9.bz2

setup permision, (see in "httpd.conf" the user who start apache server) and after that run command "chown -R apacheuser.apacheuser webhtb" from apache document root

  Note: replace "apacheuser" with user who start apache webserver !!

in "php.ini" short_open_tag must be On

run from your browser: "http://SERVER_IP/webhtb/setup/index.php" and complete all boxes

  Note: replace "SERVER_IP" with „ip or name“ of your server !!

Firstly, add interfaces from the system, create the classes, then add the clients inside these classes.

„Apply changes“ button start or restart que rules on the system.

When you add a client, you must choose the way:

1. With IP and MARK and MAC;

2. With only IP or only MARK or only MAC;

3. With combined IP and/or MARK and/or MAC.

When you have MARK option set and not have DST IP set your settings about upload will be ignored because DST IP become SRC IP in U32u and because when you mark the packets with iptables for download probably you use „POSTROUTING“ and for uplad „FORWARD“.

More details of how all should look in the end can be found HERE (video demo)

For more help join forum.

development continues

improvements to current code

some new features

for about 100 € you will have:

some integrations with iptablesREADY

import ip/mac from arpREADY

view realime traffic for all clients with uploadREADY

graphics and statisctics for all clients on different periods of time READY

back-up and restore (encrypted batch files)IN PROGRESS

sheduled time based profiles and rules

invoices and receipts in pdf or html and send via e-mail to clients

Internet service packagesREADY

contracts

change MySQL password from application

change deafult interface from application

complete personal informationsREADY

stop and start internet service for clients from applicationREADY

improved securityREADY

more documentation and one year free complete support

and more...