Forum: Prosba o pomoc z generatorem.

Cytat

modprobe ipt_layer7
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 6144kbit
$TCA parent 1:1 classid 1:10 htb rate 512kbit ceil 4096kbit prio 2
$TCA parent 1:1 classid 1:11 htb rate 512kbit ceil 4096kbit prio 2
$TCA parent 1:1 classid 1:12 htb rate 512kbit ceil 4096kbit prio 2
$TCA parent 1:1 classid 1:13 htb rate 512kbit ceil 4096kbit prio 2
$TCA parent 1:1 classid 1:14 htb rate 512kbit ceil 4096kbit prio 2
$TCA parent 1:1 classid 1:50 htb rate 32kbit ceil 80kbit prio 3
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:50 handle 50: $SFQ
$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFA parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13
$TFA parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14
$TFA parent 1:0 prio 3 protocol ip handle 50 fw flowid 1:50
iptables -t mangle -A POSTROUTING -d 192.168.1.5 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.1.6 -j MARK --set-mark 11
iptables -t mangle -A POSTROUTING -d 192.168.1.7 -j MARK --set-mark 12
iptables -t mangle -A POSTROUTING -d 192.168.1.9 -j MARK --set-mark 13
iptables -t mangle -A POSTROUTING -d 192.168.1.10 -j MARK --set-mark 14

#ograniczanie downloadu wybranym dla p2p
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.5-192.168.1.7 --l7proto bittorrent -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.5-192.168.1.7 --l7proto directconnect -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.5-192.168.1.7 --l7proto edonkey -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.5-192.168.1.7 --l7proto fasttrack -j MARK --set-mark 50

iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.9-192.168.1.10 --l7proto bittorrent -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.9-192.168.1.10 --l7proto directconnect -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.9-192.168.1.10 --l7proto edonkey -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range 192.168.1.9-192.168.1.10 --l7proto fasttrack -j MARK --set-mark 50

#Limity
modprobe ipt_layer7
$TCA parent 1:1 classid 1:50 htb rate 32kbit ceil 80kbit prio 3
$TQA parent 1:50 handle 50: $SFQ
$TFA parent 1:0 prio 3 protocol ip handle 50 fw flowid 1:50
#ograniczanie downloadu wybranym dla p2p
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.5-192.168.1.7 --l7proto bittorrent -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.5-192.168.1.7 --l7proto directconnect -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.5-192.168.1.7 --l7proto edonkey -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.5-192.168.1.7 --l7proto fasttrack -j MARK --set-mark 50

iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.9-192.168.1.10 --l7proto bittorrent -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.9-192.168.1.10 --l7proto directconnect -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.9-192.168.1.10 --l7proto edonkey -j MARK --set-mark 50
iptables -t mangle -A POSTROUTING -m layer7 -m iprange --dst-range
192.168.1.9-192.168.1.10 --l7proto fasttrack -j MARK --set-mark 50