Forum: gdzie jest blad? ;/

Cytat

TFA="tc filter add dev ${DEV}"
TQA="tc qdisc add dev ${DEV}"
SFQ="sfq perturb 10"
CEIL=9000
WWWMAX=1000000
PRIO0="27964,27015:27016,27045,80,443,5223,3478,3479,3658,10070,10070 - 10080"
PRIO1="20:110"
PRIO2="10009,10010,10011"
P2P="48805"

tc qdisc del dev ${DEV} root
tc qdisc add dev ${DEV} root handle 1: htb
tc class add dev ${DEV} parent 1: classid 1:1 htb rate ${CEIL}kbit
$TCA parent 1:1 classid 1:10 htb rate 1000kbit ceil 6000kbit prio 0
$TCA parent 1:1 classid 1:11 htb rate 2000kbit ceil 7000kbit prio 1
$TCA parent 1:1 classid 1:12 htb rate 2000kbit ceil 7000kbit prio 2
$TCA parent 1:1 classid 1:13 htb rate 1000kbit ceil 6000kbit prio 3
$TCA parent 1:1 classid 1:14 htb rate 500kbit ceil 6000kbit prio 4
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 1 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFA parent 1:0 prio 3 protocol ip handle 13 fw flowid 1:13
$TFA parent 1:0 prio 4 protocol ip handle 14 fw flowid 1:14
iptables -t mangle -A PREROUTING -j BCOUNT
iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j MARK --set-mark 14
iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j MARK --set-mark 14
iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j RETURN
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO0} -j RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO0} -j RETURN
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j RETURN
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j RETURN
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO2} -j MARK --set-mark 13
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO2} -j RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO2} -j MARK --set-mark 13
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO2} -j RETURN
iptables -t mangle -A PREROUTING -j MARK --set-mark 14
iptables -t mangle -A PREROUTING -m layer7 --l7proto shoutcast -j MARK --set-mark 11
iptables -t mangle -A PREROUTING -m layer7 --l7proto skypetoskype -j MARK --set-mark 11

Cytat

iptables -I FORWARD -p tcp -d 192.168.1.1 --dport 1:65535 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -i eth0 -s 0/0 -d 0/0 --dport 1:65535 -j DNAT --to 192.168.1.2
iptables -I FORWARD -p udp -d 192.168.1.1 --dport 1:65535 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -i eth0 -s 0/0 -d 0/0 --dport 1:65535 -j DNAT --to 192.168.1.2
iptables -I FORWARD -p tcp -d 192.168.1.1 --dport 27964,27015,27016,27045,80,443,5223,3478,3479,3658,10070,10070:10080 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -i eth0 -s 0/0 -d 0/0 --dport 27964,27015:27016,27045,80,443,5223,3478,3479,3658,10070,10070:10080 -j DNAT --to 192.168.1.3
iptables -I FORWARD -p udp -d 192.168.1.1 --dport 27964,27015,27016,27045,80,443,5223,3478,3479,3658,10070,10070:10080 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -i eth0 -s 0/0 -d 0/0 --dport 27964,27015:27016,27045,80,443,5223,3478,3479,3658,10070,10070:10080 -j DNAT --to 192.168.1.3
iptables -I FORWARD -p tcp -d 192.168.1.1 --dport 555 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -i eth0 -s 0/0 -d 0/0 --dport 555 -j DNAT --to 192.168.1.4
iptables -I FORWARD -p udp -d 192.168.1.1 --dport 555 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -i eth0 -s 0/0 -d 0/0 --dport 555 -j DNAT --to 192.168.1.4