|
niestabilne Tomato v1.28 k26 beta20 extra
|
| szalikmars |
Dodano 17-09-2010 23:44
|
User
Posty: 182
Dołączył: 02/12/2007 23:56
|
shibby uzywasz na Asus RT-N16
wersje Tomato v1.28 k26 beta20
którą to extra czy inna
u mnie jest dziwny objaw na extra na Tomato v1.28 k26 beta20
serwer na tym sofcie podłączony do 1 kompa działa idealnie wiele dni
ale jak podłączę do niego cała sieć nie działa w ogóle
pingi po wewnętrzej sieci
rwą jak diabli
8 pingów idzie 4 nie nie itp
co moze być przyczyną
wgranie od nowa softu v 20 extra nic nie dało |
| |
|
|
| szalikmars |
Dodano 22-09-2010 12:59
|
User
Posty: 182
Dołączył: 02/12/2007 23:56
|
sprawa się wyjaśniła
nie działa skrypt robsona ,on rozwala całą sieć
skopiowanybył on z wersji na Asusa 500G
na Asusa RT-n16 czyli na wersję oprogramowania Mips2
pytanie co trzeba przerobić w skrypcie htb aby dało sie skrypt robsona wrzucić na asusa RT-N16 |
| |
|
|
| shibby |
Dodano 22-09-2010 13:03
|
SysOp
Posty: 17111
Dołączył: 15/01/2009 20:30
|
uzywam beta20-ext i wszysto dziala elegancko.
skrypt htb tez dziala ladnie.
wklej swoj tu to zobaczymy co go boli.
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| szalikmars |
Dodano 22-09-2010 15:09
|
User
Posty: 182
Dołączył: 02/12/2007 23:56
|
ponowne próby skrypt zarzyna od razu serwer
jak wrzuce go na pracującym tomato od razu restart
jak odpalam tomato z wgranym skryptem do jffs objawy jak wyżej
rwane pingi brak komunikacji z serwerem
wklejam swój skrypt z generatora robsona (na asus 500g rok pracował bez zarzutu i działał dobrze)
#--------------------------------------------
#WRT54 Script Generator v1.02
#(C) 2006-2007 Robert "Robson" Mytkowski
#--------------------------------------------
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 9500kbit
$TCA parent 1:1 classid 1:10 htb rate 200kbit ceil 7000kbit prio 2
$TCA parent 1:1 classid 1:11 htb rate 200kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:12 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:13 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:14 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:15 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:16 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:17 htb rate 100kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:18 htb rate 100kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:19 htb rate 100kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:20 htb rate 400kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:21 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:22 htb rate 200kbit ceil 1000kbit prio 2
$TCA parent 1:1 classid 1:23 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:24 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:25 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:26 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:27 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:28 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:29 htb rate 200kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:30 htb rate 200kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:31 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:32 htb rate 300kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:33 htb rate 600kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:34 htb rate 200kbit ceil 8000kbit prio 0
$TCA parent 1:1 classid 1:35 htb rate 300kbit ceil 1000kbit prio 0
$TCA parent 1:1 classid 1:36 htb rate 1kbit ceil 1kbit prio 2
$TCA parent 1:1 classid 1:37 htb rate 600kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:38 htb rate 200kbit ceil 1000kbit prio 2
$TCA parent 1:1 classid 1:39 htb rate 800kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:40 htb rate 500kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:41 htb rate 1699kbit ceil 6000kbit prio 2
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:15 handle 15: $SFQ
$TQA parent 1:16 handle 16: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:20 handle 20: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TQA parent 1:23 handle 23: $SFQ
$TQA parent 1:24 handle 24: $SFQ
$TQA parent 1:25 handle 25: $SFQ
$TQA parent 1:26 handle 26: $SFQ
$TQA parent 1:27 handle 27: $SFQ
$TQA parent 1:28 handle 28: $SFQ
$TQA parent 1:29 handle 29: $SFQ
$TQA parent 1:30 handle 30: $SFQ
$TQA parent 1:31 handle 31: $SFQ
$TQA parent 1:32 handle 32: $SFQ
$TQA parent 1:33 handle 33: $SFQ
$TQA parent 1:34 handle 34: $SFQ
$TQA parent 1:35 handle 35: $SFQ
$TQA parent 1:36 handle 36: $SFQ
$TQA parent 1:37 handle 37: $SFQ
$TQA parent 1:38 handle 38: $SFQ
$TQA parent 1:39 handle 39: $SFQ
$TQA parent 1:40 handle 40: $SFQ
$TQA parent 1:41 handle 41: $SFQ
$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFA parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13
$TFA parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14
$TFA parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15
$TFA parent 1:0 prio 2 protocol ip handle 16 fw flowid 1:16
$TFA parent 1:0 prio 2 protocol ip handle 17 fw flowid 1:17
$TFA parent 1:0 prio 2 protocol ip handle 18 fw flowid 1:18
$TFA parent 1:0 prio 2 protocol ip handle 19 fw flowid 1:19
$TFA parent 1:0 prio 2 protocol ip handle 20 fw flowid 1:20
$TFA parent 1:0 prio 2 protocol ip handle 21 fw flowid 1:21
$TFA parent 1:0 prio 2 protocol ip handle 22 fw flowid 1:22
$TFA parent 1:0 prio 2 protocol ip handle 23 fw flowid 1:23
$TFA parent 1:0 prio 2 protocol ip handle 24 fw flowid 1:24
$TFA parent 1:0 prio 2 protocol ip handle 25 fw flowid 1:25
$TFA parent 1:0 prio 2 protocol ip handle 26 fw flowid 1:26
$TFA parent 1:0 prio 2 protocol ip handle 27 fw flowid 1:27
$TFA parent 1:0 prio 2 protocol ip handle 28 fw flowid 1:28
$TFA parent 1:0 prio 2 protocol ip handle 29 fw flowid 1:29
$TFA parent 1:0 prio 2 protocol ip handle 30 fw flowid 1:30
$TFA parent 1:0 prio 2 protocol ip handle 31 fw flowid 1:31
$TFA parent 1:0 prio 2 protocol ip handle 32 fw flowid 1:32
$TFA parent 1:0 prio 2 protocol ip handle 33 fw flowid 1:33
$TFA parent 1:0 prio 0 protocol ip handle 34 fw flowid 1:34
$TFA parent 1:0 prio 0 protocol ip handle 35 fw flowid 1:35
$TFA parent 1:0 prio 2 protocol ip handle 36 fw flowid 1:36
$TFA parent 1:0 prio 2 protocol ip handle 37 fw flowid 1:37
$TFA parent 1:0 prio 2 protocol ip handle 38 fw flowid 1:38
$TFA parent 1:0 prio 2 protocol ip handle 39 fw flowid 1:39
$TFA parent 1:0 prio 2 protocol ip handle 40 fw flowid 1:40
$TFA parent 1:0 prio 2 protocol ip handle 41 fw flowid 1:41
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.2-192.168.2.20 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.21-192.168.2.30 -j MARK --set-mark 11
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.31-192.168.2.38 -j MARK --set-mark 12
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.39-192.168.2.43 -j MARK --set-mark 13
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.44-192.168.2.52 -j MARK --set-mark 14
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.53-192.168.2.61 -j MARK --set-mark 15
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.62-192.168.2.70 -j MARK --set-mark 16
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.71-192.168.2.74 -j MARK --set-mark 17
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.75-192.168.2.79 -j MARK --set-mark 18
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.80-192.168.2.84 -j MARK --set-mark 19
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.85-192.168.2.90 -j MARK --set-mark 20
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.91-192.168.2.94 -j MARK --set-mark 21
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.95-192.168.2.97 -j MARK --set-mark 22
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.98-192.168.2.104 -j MARK --set-mark 23
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.105-192.168.2.111 -j MARK --set-mark 24
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.112-192.168.2.115 -j MARK --set-mark 25
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.116-192.168.2.119 -j MARK --set-mark 26
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.120-192.168.2.124 -j MARK --set-mark 27
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.125-192.168.2.128 -j MARK --set-mark 28
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.129-192.168.2.133 -j MARK --set-mark 29
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.134-192.168.2.139 -j MARK --set-mark 30
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.140-192.168.2.145 -j MARK --set-mark 31
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.146-192.168.2.150 -j MARK --set-mark 32
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.151-192.168.2.175 -j MARK --set-mark 33
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.176-192.168.2.199 -j MARK --set-mark 34
iptables -t mangle -A POSTROUTING -d 192.168.2.200 -j MARK --set-mark 35
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.201-192.168.2.220 -j MARK --set-mark 36
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.221-192.168.2.234 -j MARK --set-mark 37
iptables -t mangle -A POSTROUTING -d 192.168.2.235 -j MARK --set-mark 38
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.236-192.168.2.244 -j MARK --set-mark 39
iptables -t mangle -A POSTROUTING -d 192.168.2.245 -j MARK --set-mark 40
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.2.246-192.168.2.254 -j MARK --set-mark 41
TCAU="tc class add dev imq0"
TFAU="tc filter add dev imq0"
TQAU="tc qdisc add dev imq0"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1: htb
tc class add dev imq0 parent 1: classid 1:1 htb rate 950kbit
$TCAU parent 1:1 classid 1:10 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:11 htb rate 20kbit ceil 800kbit prio 2
$TCAU parent 1:1 classid 1:12 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:13 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:14 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:15 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:16 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:17 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:18 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:19 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:20 htb rate 25kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:21 htb rate 15kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:22 htb rate 10kbit ceil 150kbit prio 2
$TCAU parent 1:1 classid 1:23 htb rate 15kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:24 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:25 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:26 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:27 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:28 htb rate 15kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:29 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:30 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:31 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:32 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:33 htb rate 69kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:34 htb rate 40kbit ceil 300kbit prio 0
$TCAU parent 1:1 classid 1:35 htb rate 150kbit ceil 500kbit prio 0
$TCAU parent 1:1 classid 1:36 htb rate 1kbit ceil 1kbit prio 2
$TCAU parent 1:1 classid 1:37 htb rate 40kbit ceil 700kbit prio 2
$TCAU parent 1:1 classid 1:38 htb rate 40kbit ceil 500kbit prio 2
$TCAU parent 1:1 classid 1:39 htb rate 40kbit ceil 700kbit prio 2
$TCAU parent 1:1 classid 1:40 htb rate 50kbit ceil 250kbit prio 2
$TCAU parent 1:1 classid 1:41 htb rate 150kbit ceil 700kbit prio 2
$TQAU parent 1:10 handle 10: $SFQ
$TQAU parent 1:11 handle 11: $SFQ
$TQAU parent 1:12 handle 12: $SFQ
$TQAU parent 1:13 handle 13: $SFQ
$TQAU parent 1:14 handle 14: $SFQ
$TQAU parent 1:15 handle 15: $SFQ
$TQAU parent 1:16 handle 16: $SFQ
$TQAU parent 1:17 handle 17: $SFQ
$TQAU parent 1:18 handle 18: $SFQ
$TQAU parent 1:19 handle 19: $SFQ
$TQAU parent 1:20 handle 20: $SFQ
$TQAU parent 1:21 handle 21: $SFQ
$TQAU parent 1:22 handle 22: $SFQ
$TQAU parent 1:23 handle 23: $SFQ
$TQAU parent 1:24 handle 24: $SFQ
$TQAU parent 1:25 handle 25: $SFQ
$TQAU parent 1:26 handle 26: $SFQ
$TQAU parent 1:27 handle 27: $SFQ
$TQAU parent 1:28 handle 28: $SFQ
$TQAU parent 1:29 handle 29: $SFQ
$TQAU parent 1:30 handle 30: $SFQ
$TQAU parent 1:31 handle 31: $SFQ
$TQAU parent 1:32 handle 32: $SFQ
$TQAU parent 1:33 handle 33: $SFQ
$TQAU parent 1:34 handle 34: $SFQ
$TQAU parent 1:35 handle 35: $SFQ
$TQAU parent 1:36 handle 36: $SFQ
$TQAU parent 1:37 handle 37: $SFQ
$TQAU parent 1:38 handle 38: $SFQ
$TQAU parent 1:39 handle 39: $SFQ
$TQAU parent 1:40 handle 40: $SFQ
$TQAU parent 1:41 handle 41: $SFQ
$TFAU parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFAU parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFAU parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFAU parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13
$TFAU parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14
$TFAU parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15
$TFAU parent 1:0 prio 2 protocol ip handle 16 fw flowid 1:16
$TFAU parent 1:0 prio 2 protocol ip handle 17 fw flowid 1:17
$TFAU parent 1:0 prio 2 protocol ip handle 18 fw flowid 1:18
$TFAU parent 1:0 prio 2 protocol ip handle 19 fw flowid 1:19
$TFAU parent 1:0 prio 2 protocol ip handle 20 fw flowid 1:20
$TFAU parent 1:0 prio 2 protocol ip handle 21 fw flowid 1:21
$TFAU parent 1:0 prio 2 protocol ip handle 22 fw flowid 1:22
$TFAU parent 1:0 prio 2 protocol ip handle 23 fw flowid 1:23
$TFAU parent 1:0 prio 2 protocol ip handle 24 fw flowid 1:24
$TFAU parent 1:0 prio 2 protocol ip handle 25 fw flowid 1:25
$TFAU parent 1:0 prio 2 protocol ip handle 26 fw flowid 1:26
$TFAU parent 1:0 prio 2 protocol ip handle 27 fw flowid 1:27
$TFAU parent 1:0 prio 2 protocol ip handle 28 fw flowid 1:28
$TFAU parent 1:0 prio 2 protocol ip handle 29 fw flowid 1:29
$TFAU parent 1:0 prio 2 protocol ip handle 30 fw flowid 1:30
$TFAU parent 1:0 prio 2 protocol ip handle 31 fw flowid 1:31
$TFAU parent 1:0 prio 2 protocol ip handle 32 fw flowid 1:32
$TFAU parent 1:0 prio 2 protocol ip handle 33 fw flowid 1:33
$TFAU parent 1:0 prio 0 protocol ip handle 34 fw flowid 1:34
$TFAU parent 1:0 prio 0 protocol ip handle 35 fw flowid 1:35
$TFAU parent 1:0 prio 2 protocol ip handle 36 fw flowid 1:36
$TFAU parent 1:0 prio 2 protocol ip handle 37 fw flowid 1:37
$TFAU parent 1:0 prio 2 protocol ip handle 38 fw flowid 1:38
$TFAU parent 1:0 prio 2 protocol ip handle 39 fw flowid 1:39
$TFAU parent 1:0 prio 2 protocol ip handle 40 fw flowid 1:40
$TFAU parent 1:0 prio 2 protocol ip handle 41 fw flowid 1:41
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.2-192.168.2.20 -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.21-192.168.2.30 -j MARK --set-mark 11
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.31-192.168.2.38 -j MARK --set-mark 12
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.39-192.168.2.43 -j MARK --set-mark 13
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.44-192.168.2.52 -j MARK --set-mark 14
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.53-192.168.2.61 -j MARK --set-mark 15
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.62-192.168.2.70 -j MARK --set-mark 16
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.71-192.168.2.74 -j MARK --set-mark 17
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.75-192.168.2.79 -j MARK --set-mark 18
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.80-192.168.2.84 -j MARK --set-mark 19
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.85-192.168.2.90 -j MARK --set-mark 20
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.91-192.168.2.94 -j MARK --set-mark 21
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.95-192.168.2.97 -j MARK --set-mark 22
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.98-192.168.2.104 -j MARK --set-mark 23
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.105-192.168.2.111 -j MARK --set-mark 24
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.112-192.168.2.115 -j MARK --set-mark 25
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.116-192.168.2.119 -j MARK --set-mark 26
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.120-192.168.2.124 -j MARK --set-mark 27
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.125-192.168.2.128 -j MARK --set-mark 28
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.129-192.168.2.133 -j MARK --set-mark 29
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.134-192.168.2.139 -j MARK --set-mark 30
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.140-192.168.2.145 -j MARK --set-mark 31
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.146-192.168.2.150 -j MARK --set-mark 32
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.151-192.168.2.175 -j MARK --set-mark 33
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.176-192.168.2.199 -j MARK --set-mark 34
iptables -t mangle -A PREROUTING -s 192.168.2.200 -j MARK --set-mark 35
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.201-192.168.2.220 -j MARK --set-mark 36
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.221-192.168.2.234 -j MARK --set-mark 37
iptables -t mangle -A PREROUTING -s 192.168.2.235 -j MARK --set-mark 38
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.236-192.168.2.244 -j MARK --set-mark 39
iptables -t mangle -A PREROUTING -s 192.168.2.245 -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.2.246-192.168.2.254 -j MARK --set-mark 41
iptables -t mangle -A PREROUTING -j IMQ --todev 0
iptables -I FORWARD -m iprange --src-range 192.168.2.2-192.168.2.20 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.31-192.168.2.38 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.39-192.168.2.43 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.44-192.168.2.52 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.53-192.168.2.61 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.62-192.168.2.70 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.71-192.168.2.74 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.75-192.168.2.79 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.80-192.168.2.84 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.85-192.168.2.90 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.91-192.168.2.94 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.95-192.168.2.97 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.98-192.168.2.104 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.105-192.168.2.111 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.112-192.168.2.115 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.116-192.168.2.119 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.120-192.168.2.124 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.125-192.168.2.128 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.129-192.168.2.133 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.134-192.168.2.139 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.140-192.168.2.145 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.146-192.168.2.150 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -s 192.168.2.245 -p tcp -m connlimit --connlimit-above 500 -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.2-192.168.2.20 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.31-192.168.2.38 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.39-192.168.2.43 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.44-192.168.2.52 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.53-192.168.2.61 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.62-192.168.2.70 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.71-192.168.2.74 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.75-192.168.2.79 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.80-192.168.2.84 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.85-192.168.2.90 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.91-192.168.2.94 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.95-192.168.2.97 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.98-192.168.2.104 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.105-192.168.2.111 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.112-192.168.2.115 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.116-192.168.2.119 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.120-192.168.2.124 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.125-192.168.2.128 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.129-192.168.2.133 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.134-192.168.2.139 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.140-192.168.2.145 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -m iprange --src-range 192.168.2.146-192.168.2.150 -p udp -m limit --limit 75/sec -j DROP
iptables -I FORWARD -s 192.168.2.245 -p udp -m limit --limit 75/sec -j DROP |
| |
|
|
| shibby |
Dodano 22-09-2010 15:17
|
SysOp
Posty: 17111
Dołączył: 15/01/2009 20:30
|
najpierw sprawdz taki skrypt
Cytat TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
POST="iptables -t mangle -A POSTROUTING ! -s 192.168.2.0/24"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 9500kbit
$TCA parent 1:1 classid 1:10 htb rate 200kbit ceil 7000kbit prio 2
$TCA parent 1:1 classid 1:11 htb rate 200kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:12 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:13 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:14 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:15 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:16 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:17 htb rate 100kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:18 htb rate 100kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:19 htb rate 100kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:20 htb rate 400kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:21 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:22 htb rate 200kbit ceil 1000kbit prio 2
$TCA parent 1:1 classid 1:23 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:24 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:25 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:26 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:27 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:28 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:29 htb rate 200kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:30 htb rate 200kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:31 htb rate 200kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:32 htb rate 300kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:33 htb rate 600kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:34 htb rate 200kbit ceil 8000kbit prio 0
$TCA parent 1:1 classid 1:35 htb rate 300kbit ceil 1000kbit prio 0
$TCA parent 1:1 classid 1:36 htb rate 1kbit ceil 1kbit prio 2
$TCA parent 1:1 classid 1:37 htb rate 600kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:38 htb rate 200kbit ceil 1000kbit prio 2
$TCA parent 1:1 classid 1:39 htb rate 800kbit ceil 8000kbit prio 2
$TCA parent 1:1 classid 1:40 htb rate 500kbit ceil 2000kbit prio 2
$TCA parent 1:1 classid 1:41 htb rate 1699kbit ceil 6000kbit prio 2
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:15 handle 15: $SFQ
$TQA parent 1:16 handle 16: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:20 handle 20: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TQA parent 1:23 handle 23: $SFQ
$TQA parent 1:24 handle 24: $SFQ
$TQA parent 1:25 handle 25: $SFQ
$TQA parent 1:26 handle 26: $SFQ
$TQA parent 1:27 handle 27: $SFQ
$TQA parent 1:28 handle 28: $SFQ
$TQA parent 1:29 handle 29: $SFQ
$TQA parent 1:30 handle 30: $SFQ
$TQA parent 1:31 handle 31: $SFQ
$TQA parent 1:32 handle 32: $SFQ
$TQA parent 1:33 handle 33: $SFQ
$TQA parent 1:34 handle 34: $SFQ
$TQA parent 1:35 handle 35: $SFQ
$TQA parent 1:36 handle 36: $SFQ
$TQA parent 1:37 handle 37: $SFQ
$TQA parent 1:38 handle 38: $SFQ
$TQA parent 1:39 handle 39: $SFQ
$TQA parent 1:40 handle 40: $SFQ
$TQA parent 1:41 handle 41: $SFQ
$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFA parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13
$TFA parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14
$TFA parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15
$TFA parent 1:0 prio 2 protocol ip handle 16 fw flowid 1:16
$TFA parent 1:0 prio 2 protocol ip handle 17 fw flowid 1:17
$TFA parent 1:0 prio 2 protocol ip handle 18 fw flowid 1:18
$TFA parent 1:0 prio 2 protocol ip handle 19 fw flowid 1:19
$TFA parent 1:0 prio 2 protocol ip handle 20 fw flowid 1:20
$TFA parent 1:0 prio 2 protocol ip handle 21 fw flowid 1:21
$TFA parent 1:0 prio 2 protocol ip handle 22 fw flowid 1:22
$TFA parent 1:0 prio 2 protocol ip handle 23 fw flowid 1:23
$TFA parent 1:0 prio 2 protocol ip handle 24 fw flowid 1:24
$TFA parent 1:0 prio 2 protocol ip handle 25 fw flowid 1:25
$TFA parent 1:0 prio 2 protocol ip handle 26 fw flowid 1:26
$TFA parent 1:0 prio 2 protocol ip handle 27 fw flowid 1:27
$TFA parent 1:0 prio 2 protocol ip handle 28 fw flowid 1:28
$TFA parent 1:0 prio 2 protocol ip handle 29 fw flowid 1:29
$TFA parent 1:0 prio 2 protocol ip handle 30 fw flowid 1:30
$TFA parent 1:0 prio 2 protocol ip handle 31 fw flowid 1:31
$TFA parent 1:0 prio 2 protocol ip handle 32 fw flowid 1:32
$TFA parent 1:0 prio 2 protocol ip handle 33 fw flowid 1:33
$TFA parent 1:0 prio 0 protocol ip handle 34 fw flowid 1:34
$TFA parent 1:0 prio 0 protocol ip handle 35 fw flowid 1:35
$TFA parent 1:0 prio 2 protocol ip handle 36 fw flowid 1:36
$TFA parent 1:0 prio 2 protocol ip handle 37 fw flowid 1:37
$TFA parent 1:0 prio 2 protocol ip handle 38 fw flowid 1:38
$TFA parent 1:0 prio 2 protocol ip handle 39 fw flowid 1:39
$TFA parent 1:0 prio 2 protocol ip handle 40 fw flowid 1:40
$TFA parent 1:0 prio 2 protocol ip handle 41 fw flowid 1:41
$POST -m iprange --dst-range 192.168.2.2-192.168.2.20 -j MARK --set-mark 10
$POST -m iprange --dst-range 192.168.2.21-192.168.2.30 -j MARK --set-mark 11
$POST -m iprange --dst-range 192.168.2.31-192.168.2.38 -j MARK --set-mark 12
$POST -m iprange --dst-range 192.168.2.39-192.168.2.43 -j MARK --set-mark 13
$POST -m iprange --dst-range 192.168.2.44-192.168.2.52 -j MARK --set-mark 14
$POST -m iprange --dst-range 192.168.2.53-192.168.2.61 -j MARK --set-mark 15
$POST -m iprange --dst-range 192.168.2.62-192.168.2.70 -j MARK --set-mark 16
$POST -m iprange --dst-range 192.168.2.71-192.168.2.74 -j MARK --set-mark 17
$POST -m iprange --dst-range 192.168.2.75-192.168.2.79 -j MARK --set-mark 18
$POST -m iprange --dst-range 192.168.2.80-192.168.2.84 -j MARK --set-mark 19
$POST -m iprange --dst-range 192.168.2.85-192.168.2.90 -j MARK --set-mark 20
$POST -m iprange --dst-range 192.168.2.91-192.168.2.94 -j MARK --set-mark 21
$POST -m iprange --dst-range 192.168.2.95-192.168.2.97 -j MARK --set-mark 22
$POST -m iprange --dst-range 192.168.2.98-192.168.2.104 -j MARK --set-mark 23
$POST -m iprange --dst-range 192.168.2.105-192.168.2.111 -j MARK --set-mark 24
$POST -m iprange --dst-range 192.168.2.112-192.168.2.115 -j MARK --set-mark 25
$POST -m iprange --dst-range 192.168.2.116-192.168.2.119 -j MARK --set-mark 26
$POST -m iprange --dst-range 192.168.2.120-192.168.2.124 -j MARK --set-mark 27
$POST -m iprange --dst-range 192.168.2.125-192.168.2.128 -j MARK --set-mark 28
$POST -m iprange --dst-range 192.168.2.129-192.168.2.133 -j MARK --set-mark 29
$POST -m iprange --dst-range 192.168.2.134-192.168.2.139 -j MARK --set-mark 30
$POST -m iprange --dst-range 192.168.2.140-192.168.2.145 -j MARK --set-mark 31
$POST -m iprange --dst-range 192.168.2.146-192.168.2.150 -j MARK --set-mark 32
$POST -m iprange --dst-range 192.168.2.151-192.168.2.175 -j MARK --set-mark 33
$POST -m iprange --dst-range 192.168.2.176-192.168.2.199 -j MARK --set-mark 34
$POST -d 192.168.2.200 -j MARK --set-mark 35
$POST -m iprange --dst-range 192.168.2.201-192.168.2.220 -j MARK --set-mark 36
$POST -m iprange --dst-range 192.168.2.221-192.168.2.234 -j MARK --set-mark 37
$POST -d 192.168.2.235 -j MARK --set-mark 38
$POST -m iprange --dst-range 192.168.2.236-192.168.2.244 -j MARK --set-mark 39
$POST -d 192.168.2.245 -j MARK --set-mark 40
$POST -m iprange --dst-range 192.168.2.246-192.168.2.254 -j MARK --set-mark 41
TCAU="tc class add dev imq0"
TFAU="tc filter add dev imq0"
TQAU="tc qdisc add dev imq0"
PRE="iptables -t mangle -A PREROUTING ! -d 192.168.2.0/24"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1: htb
tc class add dev imq0 parent 1: classid 1:1 htb rate 950kbit
$TCAU parent 1:1 classid 1:10 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:11 htb rate 20kbit ceil 800kbit prio 2
$TCAU parent 1:1 classid 1:12 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:13 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:14 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:15 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:16 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:17 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:18 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:19 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:20 htb rate 25kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:21 htb rate 15kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:22 htb rate 10kbit ceil 150kbit prio 2
$TCAU parent 1:1 classid 1:23 htb rate 15kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:24 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:25 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:26 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:27 htb rate 20kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:28 htb rate 15kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:29 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:30 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:31 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:32 htb rate 10kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:33 htb rate 69kbit ceil 300kbit prio 2
$TCAU parent 1:1 classid 1:34 htb rate 40kbit ceil 300kbit prio 0
$TCAU parent 1:1 classid 1:35 htb rate 150kbit ceil 500kbit prio 0
$TCAU parent 1:1 classid 1:36 htb rate 1kbit ceil 1kbit prio 2
$TCAU parent 1:1 classid 1:37 htb rate 40kbit ceil 700kbit prio 2
$TCAU parent 1:1 classid 1:38 htb rate 40kbit ceil 500kbit prio 2
$TCAU parent 1:1 classid 1:39 htb rate 40kbit ceil 700kbit prio 2
$TCAU parent 1:1 classid 1:40 htb rate 50kbit ceil 250kbit prio 2
$TCAU parent 1:1 classid 1:41 htb rate 150kbit ceil 700kbit prio 2
$TQAU parent 1:10 handle 10: $SFQ
$TQAU parent 1:11 handle 11: $SFQ
$TQAU parent 1:12 handle 12: $SFQ
$TQAU parent 1:13 handle 13: $SFQ
$TQAU parent 1:14 handle 14: $SFQ
$TQAU parent 1:15 handle 15: $SFQ
$TQAU parent 1:16 handle 16: $SFQ
$TQAU parent 1:17 handle 17: $SFQ
$TQAU parent 1:18 handle 18: $SFQ
$TQAU parent 1:19 handle 19: $SFQ
$TQAU parent 1:20 handle 20: $SFQ
$TQAU parent 1:21 handle 21: $SFQ
$TQAU parent 1:22 handle 22: $SFQ
$TQAU parent 1:23 handle 23: $SFQ
$TQAU parent 1:24 handle 24: $SFQ
$TQAU parent 1:25 handle 25: $SFQ
$TQAU parent 1:26 handle 26: $SFQ
$TQAU parent 1:27 handle 27: $SFQ
$TQAU parent 1:28 handle 28: $SFQ
$TQAU parent 1:29 handle 29: $SFQ
$TQAU parent 1:30 handle 30: $SFQ
$TQAU parent 1:31 handle 31: $SFQ
$TQAU parent 1:32 handle 32: $SFQ
$TQAU parent 1:33 handle 33: $SFQ
$TQAU parent 1:34 handle 34: $SFQ
$TQAU parent 1:35 handle 35: $SFQ
$TQAU parent 1:36 handle 36: $SFQ
$TQAU parent 1:37 handle 37: $SFQ
$TQAU parent 1:38 handle 38: $SFQ
$TQAU parent 1:39 handle 39: $SFQ
$TQAU parent 1:40 handle 40: $SFQ
$TQAU parent 1:41 handle 41: $SFQ
$TFAU parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFAU parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFAU parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFAU parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13
$TFAU parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14
$TFAU parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15
$TFAU parent 1:0 prio 2 protocol ip handle 16 fw flowid 1:16
$TFAU parent 1:0 prio 2 protocol ip handle 17 fw flowid 1:17
$TFAU parent 1:0 prio 2 protocol ip handle 18 fw flowid 1:18
$TFAU parent 1:0 prio 2 protocol ip handle 19 fw flowid 1:19
$TFAU parent 1:0 prio 2 protocol ip handle 20 fw flowid 1:20
$TFAU parent 1:0 prio 2 protocol ip handle 21 fw flowid 1:21
$TFAU parent 1:0 prio 2 protocol ip handle 22 fw flowid 1:22
$TFAU parent 1:0 prio 2 protocol ip handle 23 fw flowid 1:23
$TFAU parent 1:0 prio 2 protocol ip handle 24 fw flowid 1:24
$TFAU parent 1:0 prio 2 protocol ip handle 25 fw flowid 1:25
$TFAU parent 1:0 prio 2 protocol ip handle 26 fw flowid 1:26
$TFAU parent 1:0 prio 2 protocol ip handle 27 fw flowid 1:27
$TFAU parent 1:0 prio 2 protocol ip handle 28 fw flowid 1:28
$TFAU parent 1:0 prio 2 protocol ip handle 29 fw flowid 1:29
$TFAU parent 1:0 prio 2 protocol ip handle 30 fw flowid 1:30
$TFAU parent 1:0 prio 2 protocol ip handle 31 fw flowid 1:31
$TFAU parent 1:0 prio 2 protocol ip handle 32 fw flowid 1:32
$TFAU parent 1:0 prio 2 protocol ip handle 33 fw flowid 1:33
$TFAU parent 1:0 prio 0 protocol ip handle 34 fw flowid 1:34
$TFAU parent 1:0 prio 0 protocol ip handle 35 fw flowid 1:35
$TFAU parent 1:0 prio 2 protocol ip handle 36 fw flowid 1:36
$TFAU parent 1:0 prio 2 protocol ip handle 37 fw flowid 1:37
$TFAU parent 1:0 prio 2 protocol ip handle 38 fw flowid 1:38
$TFAU parent 1:0 prio 2 protocol ip handle 39 fw flowid 1:39
$TFAU parent 1:0 prio 2 protocol ip handle 40 fw flowid 1:40
$TFAU parent 1:0 prio 2 protocol ip handle 41 fw flowid 1:41
$PRE -m iprange --src-range 192.168.2.2-192.168.2.20 -j MARK --set-mark 10
$PRE -m iprange --src-range 192.168.2.21-192.168.2.30 -j MARK --set-mark 11
$PRE -m iprange --src-range 192.168.2.31-192.168.2.38 -j MARK --set-mark 12
$PRE -m iprange --src-range 192.168.2.39-192.168.2.43 -j MARK --set-mark 13
$PRE -m iprange --src-range 192.168.2.44-192.168.2.52 -j MARK --set-mark 14
$PRE -m iprange --src-range 192.168.2.53-192.168.2.61 -j MARK --set-mark 15
$PRE -m iprange --src-range 192.168.2.62-192.168.2.70 -j MARK --set-mark 16
$PRE -m iprange --src-range 192.168.2.71-192.168.2.74 -j MARK --set-mark 17
$PRE -m iprange --src-range 192.168.2.75-192.168.2.79 -j MARK --set-mark 18
$PRE -m iprange --src-range 192.168.2.80-192.168.2.84 -j MARK --set-mark 19
$PRE -m iprange --src-range 192.168.2.85-192.168.2.90 -j MARK --set-mark 20
$PRE -m iprange --src-range 192.168.2.91-192.168.2.94 -j MARK --set-mark 21
$PRE -m iprange --src-range 192.168.2.95-192.168.2.97 -j MARK --set-mark 22
$PRE -m iprange --src-range 192.168.2.98-192.168.2.104 -j MARK --set-mark 23
$PRE -m iprange --src-range 192.168.2.105-192.168.2.111 -j MARK --set-mark 24
$PRE -m iprange --src-range 192.168.2.112-192.168.2.115 -j MARK --set-mark 25
$PRE -m iprange --src-range 192.168.2.116-192.168.2.119 -j MARK --set-mark 26
$PRE -m iprange --src-range 192.168.2.120-192.168.2.124 -j MARK --set-mark 27
$PRE -m iprange --src-range 192.168.2.125-192.168.2.128 -j MARK --set-mark 28
$PRE -m iprange --src-range 192.168.2.129-192.168.2.133 -j MARK --set-mark 29
$PRE -m iprange --src-range 192.168.2.134-192.168.2.139 -j MARK --set-mark 30
$PRE -m iprange --src-range 192.168.2.140-192.168.2.145 -j MARK --set-mark 31
$PRE -m iprange --src-range 192.168.2.146-192.168.2.150 -j MARK --set-mark 32
$PRE -m iprange --src-range 192.168.2.151-192.168.2.175 -j MARK --set-mark 33
$PRE -m iprange --src-range 192.168.2.176-192.168.2.199 -j MARK --set-mark 34
$PRE -s 192.168.2.200 -j MARK --set-mark 35
$PRE -m iprange --src-range 192.168.2.201-192.168.2.220 -j MARK --set-mark 36
$PRE -m iprange --src-range 192.168.2.221-192.168.2.234 -j MARK --set-mark 37
$PRE -s 192.168.2.235 -j MARK --set-mark 38
$PRE -m iprange --src-range 192.168.2.236-192.168.2.244 -j MARK --set-mark 39
$PRE -s 192.168.2.245 -j MARK --set-mark 40
$PRE -m iprange --src-range 192.168.2.246-192.168.2.254 -j MARK --set-mark 41
$PRE -j IMQ --todev 0
Jak bedzie sie sprawowal dobrze to dopiero dodaj ograniczanie polaczen.
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| szalikmars |
Dodano 22-09-2010 15:41
|
User
Posty: 182
Dołączył: 02/12/2007 23:56
|
skrypt wrzucony odpalony serwer działa
polecenie tc -s class show dev br0 pokazuje to co trzeba
polecenie iptables -t mangle -L nie pokazuje klas
|
| |
|
|
| shibby |
Dodano 23-09-2010 08:53
|
SysOp
Posty: 17111
Dołączył: 15/01/2009 20:30
|
bo ci nie pokaze 
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| szalikmars |
Dodano 23-09-2010 13:21
|
User
Posty: 182
Dołączył: 02/12/2007 23:56
|
w takim razie co trzeba zmienić w skrypcie robsona aby dało sie go używać na asusie Rt-N16 z softem tomato ? |
| |
|
|
| shibby |
Dodano 23-09-2010 14:02
|
SysOp
Posty: 17111
Dołączył: 15/01/2009 20:30
|
no porownaj to co ty dales i to co dalem ja Ja poprostu dodalem by nie obraniczal sieci LAN (przy okazji wyrzucilem czesc kodu do zmiennych POST i PRE.
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| szalikmars |
Dodano 25-09-2010 16:58
|
User
Posty: 182
Dołączył: 02/12/2007 23:56
|
porównać porównałem
ale nie nie wiem co podopisywać aby skrypt robsona mozna było zaadoptować do Asusa Rt-N16
a sprzęt ten bez podziału łacza jest dla mnie bezwartościowy |
| |
|
|
| shibby |
Dodano 27-09-2010 07:51
|
SysOp
Posty: 17111
Dołączył: 15/01/2009 20:30
|
ale sprypt dziala na nim bez problemu. Nie trzeba go "adoprowac".
jedyna zmiana jaka zrobilem (i poolecam innym) to nieograniczanie sieci lan a wiec zamiast
iptables -t mangle -A POSTROUTING
jest
iptables -t mangle -A POSTROUTING ! -s 192.168.2.0/24
oraz zamiast
iptables -t mangle -A PREROUTING
jest
iptables -t mangle -A PREROUTING ! -d 192.168.2.0/24
oczywiscie 192.168.2.0/24 trzeba zmienic na swoja podsiec LAN.
to jedyna zmiana
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
|
| szalikmars |
Dodano 02-10-2010 20:54
|
User
Posty: 182
Dołączył: 02/12/2007 23:56
|
shibby napisał
Jak bedzie sie sprawowal dobrze to dopiero dodaj ograniczanie polaczen.
czyli co mam dopisać aby ten skrypt podany przez ciebie działał ? |
| |
|
|
| shibby |
Dodano 03-10-2010 00:07
|
SysOp
Posty: 17111
Dołączył: 15/01/2009 20:30
|
nie czytasz uwaznie tego co pisze. Przeciez skrypt dziala bez problemu. To co ja dodalem to by skrypt NIE OGRANICZAL lokalnej sieci. Nic ponadto.
Ja jednakze nie uzywam limitowania polaczen (twoje wpisy z forwadrami) i byc moze to jest powodem twoich problemow. Dlatego zaproponowalem bys sprawdzil bez tych wpisow. Napisales ze dziala poprawnie wiec wychodzi na to ze winne byly wpisy odnosnie limitowania polaczen jednoczesnych!
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
|
| |
|
' target='_blank'>Link
