#--------------------------------------------

#WRT54 Script Generator v1.01

#(C) 2006-2007 Robert "Robson" Mytkowski

#--------------------------------------------

modprobe ipt_TTL

iptables -t mangle -I PREROUTING -i vlan1 -j TTL --ttl-inc 1

iptables -t mangle -I POSTROUTING -o br0 -j TTL --ttl-inc 1

modprobe ipt_layer7

TCA="tc class add dev br0"

TFA="tc filter add dev br0"

TQA="tc qdisc add dev br0"

SFQ="sfq perturb 10"

tc qdisc del dev br0 root

tc qdisc add dev br0 root handle 1: htb

tc class add dev br0 parent 1: classid 1:1 htb rate 800000kbit

$TCA parent 1:1 classid 1:10 htb rate 650kbit ceil 1000kbit prio 0

$TCA parent 1:1 classid 1:11 htb rate 20kbit ceil 800kbit prio 4

$TCA parent 1:1 classid 1:12 htb rate 20kbit ceil 800kbit prio 4

$TCA parent 1:1 classid 1:13 htb rate 20kbit ceil 800kbit prio 1

$TCA parent 1:1 classid 1:14 htb rate 20kbit ceil 800kbit prio 2

$TCA parent 1:1 classid 1:15 htb rate 20kbit ceil 800kbit prio 3

$TCA parent 1:1 classid 1:16 htb rate 500000kbit ceil 800000kbit prio 2

$TQA parent 1:10 handle 10: $SFQ

$TQA parent 1:11 handle 11: $SFQ

$TQA parent 1:12 handle 12: $SFQ

$TQA parent 1:13 handle 13: $SFQ

$TQA parent 1:14 handle 14: $SFQ

$TQA parent 1:15 handle 15: $SFQ

$TQA parent 1:16 handle 16: $SFQ

$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10

$TFA parent 1:0 prio 4 protocol ip handle 11 fw flowid 1:11

$TFA parent 1:0 prio 4 protocol ip handle 12 fw flowid 1:12

$TFA parent 1:0 prio 1 protocol ip handle 13 fw flowid 1:13

$TFA parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14

$TFA parent 1:0 prio 3 protocol ip handle 15 fw flowid 1:15

$TFA parent 1:0 prio 2 protocol ip handle 16 fw flowid 1:16

iptables -t mangle -A POSTROUTING -d 192.168.1.12 -j MARK --set-mark 10

iptables -t mangle -A POSTROUTING -m layer7 --l7proto bittorrent -j MARK --set-mark 11

iptables -t mangle -A POSTROUTING -m layer7 --l7proto edonkey -j MARK --set-mark 12

iptables -t mangle -A POSTROUTING -p tcp --sport 80 -j MARK --set-mark 13

iptables -t mangle -A POSTROUTING -p tcp --sport 443 -j MARK --set-mark 14

iptables -t mangle -A POSTROUTING -p tcp --sport 110 -j MARK --set-mark 15

iptables -t mangle -A POSTROUTING -m iprange --dst-range 10.135.1.1-10.135.1.254 -j MARK --set-mark 16

tc qdisc add dev br0 ingress



$TFA parent ffff: protocol ip u32 match ip src 192.168.1.12 flowid :1 police rate 100kbit mtu 12k burst 10k drop



$TFA parent ffff: protocol ip handle 51 fw police rate 50kbit mtu 12k burst 10k drop

iptables -t mangle -A PREROUTING -m layer7 --l7proto bittorrent -j MARK --set-mark 51

$TFA parent ffff: protocol ip handle 52 fw police rate 50kbit mtu 12k burst 10k drop

iptables -t mangle -A PREROUTING -m layer7 --l7proto edonkey -j MARK --set-mark 52

$TFA parent ffff: protocol ip u32 match ip dport 80 0xffff flowid :1 police rate 20kbit mtu 12k burst 10k drop

$TFA parent ffff: protocol ip u32 match ip dport 443 0xffff flowid :1 police rate 10kbit mtu 12k burst 10k drop

$TFA parent ffff: protocol ip u32 match ip dport 110 0xffff flowid :1 police rate 10kbit mtu 12k burst 10k drop

$TFA parent ffff: protocol ip handle 56 fw police rate 50000kbit mtu 12k burst 10k drop

iptables -t mangle -A PREROUTING -m iprange --src-range 10.135.1.1-10.135.1.254 -j MARK --set-mark 56