Forum: iptables i Transmission

Kod Pobierz kod źródłowy
insmod sch_htb 2> /dev/null

insmod sch_sfq 2> /dev/null

insmod cls_fw 2> /dev/null



IF_DL=br-lan

IF_UL=eth0.2



################

# DOWNLOAD #

################

#klasa glowna DL

tc qdisc del dev $IF_DL root 2> /dev/null

tc qdisc add dev $IF_DL root handle 1:0 htb

tc class add dev $IF_DL parent 1:0 classid 1:1 htb rate 1024Mbit #pelny Gigabit

tc class add dev $IF_DL parent 1:1 classid 1:2 htb rate 1000Mbit #predkosc LAN

tc class add dev $IF_DL parent 1:1 classid 1:3 htb rate 5000kbit #predkosc WAN DL



#podklasy DL

tc class add dev $IF_DL parent 1:3 classid 1:12 htb rate 2048kbit ceil 4096kbit prio 2

tc class add dev $IF_DL parent 1:3 classid 1:13 htb rate 1024kbit ceil 2048kbit prio 2

tc class add dev $IF_DL parent 1:3 classid 1:14 htb rate 1024kbit ceil 2048kbit prio 2

tc class add dev $IF_DL parent 1:3 classid 1:15 htb rate 256kbit ceil 256kbit prio 1



#SFQ i filtry

tc qdisc add dev $IF_DL parent 1:2 handle 2: sfq perturb 10

tc qdisc add dev $IF_DL parent 1:12 handle 12: sfq perturb 10

tc qdisc add dev $IF_DL parent 1:13 handle 13: sfq perturb 10

tc qdisc add dev $IF_DL parent 1:14 handle 14: sfq perturb 10

tc qdisc add dev $IF_DL parent 1:15 handle 15: sfq perturb 10

tc filter add dev $IF_DL parent 1:0 prio 2 protocol ip handle 2 fw flowid 1:2

tc filter add dev $IF_DL parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12

tc filter add dev $IF_DL parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13

tc filter add dev $IF_DL parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14

tc filter add dev $IF_DL parent 1:0 prio 1 protocol ip handle 15 fw flowid 1:15

#postrouting

iptables -t mangle -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.0/24 -j MARK --set-mark 2 #nie ograniczaj sieci LAN

iptables -t mangle -A POSTROUTING ! -s 192.168.1.0/24 -d 192.168.1.2/32 -j MARK --set-mark 12

iptables -t mangle -A POSTROUTING ! -s 192.168.1.0/24 -d 192.168.1.3/32 -j MARK --set-mark 13

iptables -t mangle -A POSTROUTING ! -s 192.168.1.0/24 -d 192.168.1.4/32 -j MARK --set-mark 14

iptables -t mangle -A POSTROUTING ! -s 192.168.1.0/24 -d 192.168.1.5/32 -j MARK --set-mark 15



##############

# UPLOAD #

##############

#klasa glowna UL

tc qdisc del dev $IF_UL root 2> /dev/null

tc qdisc add dev $IF_UL root handle 2:0 htb

tc class add dev $IF_UL parent 2:0 classid 2:1 htb rate 448kbit #WAN UL



#podklasy UL

tc class add dev $IF_UL parent 2:1 classid 2:12 htb rate 96kbit ceil 256kbit prio 2

tc class add dev $IF_UL parent 2:1 classid 2:13 htb rate 64kbit ceil 128kbit prio 2

tc class add dev $IF_UL parent 2:1 classid 2:14 htb rate 64kbit ceil 128kbit prio 2

tc class add dev $IF_UL parent 2:1 classid 2:15 htb rate 192kbit ceil 192kbit prio 1

#tc class add dev $IF_UL parent 2:1 classid 2:30 htb rate 128kbit ceil 384kbit prio 3 #p2p

#SFQ i filtry

tc qdisc add dev $IF_UL parent 2:12 handle 12: sfq perturb 10

tc qdisc add dev $IF_UL parent 2:13 handle 13: sfq perturb 10

tc qdisc add dev $IF_UL parent 2:14 handle 14: sfq perturb 10

tc qdisc add dev $IF_UL parent 2:15 handle 15: sfq perturb 10

#tc qdisc add dev $IF_UL parent 2:30 handle 30: sfq perturb 10

tc filter add dev $IF_UL parent 2:0 prio 2 protocol ip handle 12 fw flowid 2:12

tc filter add dev $IF_UL parent 2:0 prio 2 protocol ip handle 13 fw flowid 2:13

tc filter add dev $IF_UL parent 2:0 prio 2 protocol ip handle 14 fw flowid 2:14

tc filter add dev $IF_UL parent 2:0 prio 1 protocol ip handle 15 fw flowid 2:15

#tc filter add dev $IF_UL parent 2:0 prio 3 protocol ip handle 30 fw flowid 2:30



#prerouting

#iptables -t mangle -A PREROUTING ! -d 192.168.1.0/24 -p tcp --dport 60666 -j MARK --set-mark 30

iptables -t mangle -A PREROUTING ! -d 192.168.1.0/24 -s 192.168.1.2 -j MARK --set-mark 12

iptables -t mangle -A PREROUTING ! -d 192.168.1.0/24 -s 192.168.1.3 -j MARK --set-mark 13

iptables -t mangle -A PREROUTING ! -d 192.168.1.0/24 -s 192.168.1.4 -j MARK --set-mark 14

iptables -t mangle -A PREROUTING ! -d 192.168.1.0/24 -s 192.168.1.5 -j MARK --set-mark 15

#iptables -t mangle -A PREROUTING -m layer7 --l7proto bittorrent -j MARK --set-mark 30