#--------------------------------------------

#WRT54 Script Generator v1.00

#Copyright (C) 2006 Robert "Robson" Mytkowski

#--------------------------------------------

modprobe ipt_layer7

TCA="tc class add dev br0"

TFA="tc filter add dev br0"

TQA="tc qdisc add dev br0"

SFQ="sfq perturb 10"

tc qdisc del dev br0 root

tc qdisc add dev br0 root handle 1: htb

tc class add dev br0 parent 1: classid 1:1 htb rate 256kbit

$TCA parent 1:1 classid 1:11 htb rate 160kbit ceil 256kbit prio 0

$TCA parent 1:1 classid 1:12 htb rate 64kbit ceil 256kbit prio 2

$TCA parent 1:1 classid 1:13 htb rate 32kbit ceil 256kbit prio 2

$TQA parent 1:11 handle 11: $SFQ

$TQA parent 1:12 handle 12: $SFQ

$TQA parent 1:13 handle 13: $SFQ

$TFA parent 1:0 prio 0 protocol ip handle 11 fw flowid 1:11

$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12

$TFA parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13

iptables -t mangle -A POSTROUTING -d 192.168.1.3 -j MARK --set-mark 11

iptables -t mangle -A POSTROUTING -d 192.168.1.4 -j MARK --set-mark 12

iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.1.5-192.168.1.100 -j MARK --set-mark 13

tc qdisc add dev br0 ingress

$TFA parent ffff: protocol ip handle 50 fw police rate 32kbit mtu 12k burst 10k drop

iptables -t mangle -A PREROUTING -m layer7 --l7proto edonkey -j MARK --set-mark 50

$TFA parent ffff: protocol ip u32 match ip src 192.168.1.4 flowid :1 police rate 64kbit mtu 12k burst 10k drop

$TFA parent ffff: protocol ip handle 53 fw police rate 32kbit mtu 12k burst 10k drop

iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.1.5-192.168.1.100 -j MARK --set-mark 53