#wczytanie L7, mozna usunac jesli nie uzywasz

modprobe ipt_layer7

#nazwa device. Na std. tomato do download to br0

DEV="br0"

#makra do budowy klas, filtrow i kolejek

TCA="tc class add dev ${DEV}"

TFA="tc filter add dev ${DEV}"

TQA="tc qdisc add dev ${DEV}"

SFQ="sfq perturb 10"

#max download twojego lacza

CEIL=6100

WWWMAX=500000

PRIO0=""

PRIO1="20:80,110,443"

P2P="0"

#usuwanie/tworzenie roota

tc qdisc del dev ${DEV} root

tc qdisc add dev ${DEV} root handle 1: htb

tc class add dev ${DEV} parent 1: classid 1:1 htb rate ${CEIL}kbit

$TCA parent 1:1 classid 1:10 htb rate 400kbit ceil ${CEIL}kbit prio 0

$TCA parent 1:1 classid 1:11 htb rate 1000kbit ceil ${CEIL}kbit prio 1

$TCA parent 1:1 classid 1:12 htb rate 1000kbit ceil 3000kbit prio 3

$TCA parent 1:1 classid 1:13 htb rate 200kbit ceil 2000kbit prio 4

#tworzenie kolejek

$TQA parent 1:10 handle 10: $SFQ

$TQA parent 1:11 handle 11: $SFQ

$TQA parent 1:12 handle 12: $SFQ

$TQA parent 1:13 handle 13: $SFQ

#tworzenie filtrow

$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10

$TFA parent 1:0 prio 1 protocol ip handle 11 fw flowid 1:11

$TFA parent 1:0 prio 3 protocol ip handle 12 fw flowid 1:12

$TFA parent 1:0 prio 4 protocol ip handle 13 fw flowid 1:13

#regula zapewniajaca zliczanie pakietow, niezbedna dla

#automatycznego przezucania z PRIO1 do PRIO2 po przekrocznieu WWWMAX

iptables -t mangle -A PREROUTING -j BCOUNT

#reguly dla programow P2P

iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j RETURN

#reguly dla PRIO0

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j RETURN

#reguly dla PRIO1

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN

#reguly dla PRIO2

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN

#regula dla PRIO3

iptables -t mangle -A PREROUTING -j MARK --set-mark 13

#filtry layer7

iptables -t mangle -A PREROUTING -p udp -m layer7 --l7proto skypetoskype -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p tcp -m mport --dport 80 layer7 --l7proto httpvideo -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m mport --dport 80 layer7 --l7proto httpaudio -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto exe -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto zip -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto rar -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto tar -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto rpm -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto mp3 -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto ogg -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m layer7 --l7proto flash -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -m layer7 --l7proto ares -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -m layer7 --l7proto bittorrent -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -m layer7 --l7proto directconnect -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -m layer7 --l7proto edonkey -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -m layer7 --l7proto gnutella -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -m layer7 --l7proto soulseek -j MARK --set-mark 13