Forum: skrypt doswidczonych prosze o lookniecie

Kod Pobierz kod źródłowy
modprobe ipt_TTL

iptables -t mangle -I PREROUTING -i eth1 -j TTL --ttl-inc 2

iptables -t mangle -I POSTROUTING -o br0 -j TTL --ttl-set 2

#wczytanie L7, mozna usunac jesli nie uzywasz

modprobe ipt_layer7

#nazwa device. Na std. tomato do download to br0

DEV="br0"

#makra do budowy klas, filtrow i kolejek

TCA="tc class add dev ${DEV}"

TFA="tc filter add dev ${DEV}"

TQA="tc qdisc add dev ${DEV}"

SFQ="sfq perturb 10"

#max download twojego lacza

CEIL=10000

WWWMAX=2000000

PRIO0="27964,27015:27016,27045"

PRIO1="20:80,110,443"

P2P="48805"

#usuwanie/tworzenie roota

tc qdisc del dev ${DEV} root

tc qdisc add dev ${DEV} root handle 1: htb

tc class add dev ${DEV} parent 1: classid 1:1 htb rate ${CEIL}kbit

$TCA parent 1:1 classid 1:10 htb rate 256kbit ceil 256kbit prio 0

$TCA parent 1:1 classid 1:11 htb rate 6000kbit ceil ${CEIL}kbit prio 1

$TCA parent 1:1 classid 1:12 htb rate 3616kbit ceil 5000kbit prio 3

$TCA parent 1:1 classid 1:13 htb rate 128kbit ceil 3000kbit prio 4

#tworzenie kolejek

$TQA parent 1:10 handle 10: $SFQ

$TQA parent 1:11 handle 11: $SFQ

$TQA parent 1:12 handle 12: $SFQ

$TQA parent 1:13 handle 13: $SFQ

#tworzenie filtrow

$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10

$TFA parent 1:0 prio 1 protocol ip handle 11 fw flowid 1:11

$TFA parent 1:0 prio 3 protocol ip handle 12 fw flowid 1:12

$TFA parent 1:0 prio 4 protocol ip handle 13 fw flowid 1:13

#regula zapewniajaca zliczanie pakietow, niezbedna dla

#automatycznego przerzucania z PRIO1 do PRIO2 po przekrocznieu WWWMAX

iptables -t mangle -A PREROUTING -j BCOUNT

# reguly dla programow P2P

iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j RETURN

# reguly dla PRIO0

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j RETURN

# reguly dla PRIO1

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN

# reguly dla PRIO2

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN

# regula dla PRIO3

iptables -t mangle -A PREROUTING -j MARK --set-mark 13

#filtry layer7

iptables -t mangle -A PREROUTING -m layer7 --l7proto skypetoskype -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -m layer7 --l7proto shoutcast -j MARK --set-mark 12