IPCop Logo

IPBill
Host based time billing system. Front-end is decoupled from IPCop admin interface.
Install this MOD at your Own risk.
NOTE: This MOD only installs on Version 2.3 or higher of the Addons-Server.
IPBill MD5SUM 60da072491154b3c83b04a266cf8f812 IPBill-0.8-GUI.tar.gz IPCop 1.4.4/1.4.8
Name of
MOD :
IPBill-0.8-GUI.tar.gz
Version of
MOD :
0.8
Version and patch level of IPCop: 1.4.4/1.4.8
Tested with IPCop 1.4.4/1.4.8

NOTE : MOD MAY work with other versions, but has only been tested with the versions listed.
Interface type : GUI = Graphical user interface, the MOD is accessed from the Web Browser.


IPBill MOD Screenshot IPBill Admin MOD Screenshot

1.4.4/1.4.8 Version
Build Level: b1 = Build 1
This represents minor changes to the MOD.
See Changelog
Rating : Green - Opens no ports to red. No known vulnerabilities.

Description : Host based time billing system. Front-end is decoupled from IPCop admin interface. You HAVE to install this MOD via CLI because user interaction is required during install (ipbill front-end user password). Furthermore, the apache daemon will be restarted to apply changes. Reboot not required.
Operation : IPBill
To install this product on your IPCop machine, just run the "setup" script via CLI as root. this script will do all the necessary modifications for you.

NOTE !!: you cannot install this MOD via webinterface because user interaction is required during setup.

In order to use the front-end of IPBill you have to specify the front-end user's (ipbill) password during the installation procedure.

* The IPBill Back-End is accessible trough the IPCop admin interface (Services -> IPBill):

https://hostname:445/cgi-bin/ipbill.cgi

* The Front-End is accessible via:

https://hostname:445/cgi-bin/ipbill-fe.cgi

If you want to completely uninstall IPBill from your IPCop machine, just run the "uninstall" script.

Firewall Rules

--------------

If a new host is added via IPBill back-end, firewall rules are added to block all INPUT and FORWARD traffic coming from this host. That means IPBill creates his own chains (IPBILL_I and IPBILL_F) attached to the default INPUT and FORWARD chains to block all added IPBill hosts by default.

As soon as the "activate" button for this specific host has been clicked in the front-end, the chains get updated and traffic coming from this host is allowed depending on the other IPCop rules.

--INPUT chain
  |..... IPBILL_I chain
  |      |........ DROP host xy
  |      |.........DROP host xz
  |....x IPCop chain
  |....x IPCop chain
  | ...

--FORWARD chain
  |..... IPBILL_F chain
  |      |........ DROP host xy
  |      |.........DROP host xz
  |....x IPCop chain
  |....x IPCop chain
  | ...


With this setup, IPBill works with squid proxy and SquidGuard as well. The clients can be attached to GREEN, ORANGE and BLUE interface. IPBill only decides on the IP whether to drop or accepts packets from a workstation.

Comments/Corrections

--------------------

If you'd like to give some feedback/corrections or suggestions on IPBill, just write a quick e-mail to:

* reet79 (at) ggs.ch
Setup : Download and install the Addon Server MOD first.
Second download the
IPCop 1.4.4/1.4.8 Version of the MOD
Third using Winscp and Putty copy this file to your IPCop and install this MOD via CLI because user interaction is required during install (ipbill front-end user password)
Extract MOD with tar zxvf IPBill-0.8-GUI.tar.gz, then type ./setup to install.
Furthermore, the apache daemon will be restarted to apply changes.
No Reboot is required.
Configure : See Readme
ChangeLog : The current release is 0.8 and it's mostly a bugfix release, portuguese translation has been added.