Forum: Skrypt Robsona, ustawienia portow

Kod Pobierz kod źródłowy
#--------------------------------------------

#WRT54 Script Generator v1.02

#(C) 2006-2007 Robert "Robson" Mytkowski

#--------------------------------------------

modprobe ipt_layer7

TCA="tc class add dev br0"

TFA="tc filter add dev br0"

TQA="tc qdisc add dev br0"

SFQ="sfq perturb 10"

tc qdisc del dev br0 root

tc qdisc add dev br0 root handle 1: htb

tc class add dev br0 parent 1: classid 1:1 htb rate 19000kbit

$TCA parent 1:1 classid 1:10 htb rate 256kbit ceil 768kbit prio 0

$TCA parent 1:1 classid 1:11 htb rate 128kbit ceil 256kbit prio 0

$TCA parent 1:1 classid 1:12 htb rate 256kbit ceil 512kbit prio 1

$TCA parent 1:1 classid 1:13 htb rate 256kbit ceil 512kbit prio 1

$TCA parent 1:1 classid 1:14 htb rate 2048kbit ceil 17000kbit prio 2

$TCA parent 1:1 classid 1:15 htb rate 1024kbit ceil 17000kbit prio 2

$TCA parent 1:1 classid 1:16 htb rate 64kbit ceil 256kbit prio 3

$TCA parent 1:1 classid 1:17 htb rate 80kbit ceil 256kbit prio 3

$TCA parent 1:1 classid 1:18 htb rate 256kbit ceil 5120kbit prio 3

$TCA parent 1:1 classid 1:19 htb rate 256kbit ceil 5120kbit prio 3

$TCA parent 1:1 classid 1:20 htb rate 256kbit ceil 5120kbit prio 3

$TCA parent 1:1 classid 1:21 htb rate 256kbit ceil 5120kbit prio 3

$TCA parent 1:1 classid 1:22 htb rate 1024kbit ceil 12000kbit prio 4

$TCA parent 1:1 classid 1:23 htb rate 1024kbit ceil 16000kbit prio 4

$TCA parent 1:1 classid 1:24 htb rate 1024kbit ceil 14000kbit prio 4

$TCA parent 1:1 classid 1:25 htb rate 1024kbit ceil 14000kbit prio 4

$TQA parent 1:10 handle 10: $SFQ

$TQA parent 1:11 handle 11: $SFQ

$TQA parent 1:12 handle 12: $SFQ

$TQA parent 1:13 handle 13: $SFQ

$TQA parent 1:14 handle 14: $SFQ

$TQA parent 1:15 handle 15: $SFQ

$TQA parent 1:16 handle 16: $SFQ

$TQA parent 1:17 handle 17: $SFQ

$TQA parent 1:18 handle 18: $SFQ

$TQA parent 1:19 handle 19: $SFQ

$TQA parent 1:20 handle 20: $SFQ

$TQA parent 1:21 handle 21: $SFQ

$TQA parent 1:22 handle 22: $SFQ

$TQA parent 1:23 handle 23: $SFQ

$TQA parent 1:24 handle 24: $SFQ

$TQA parent 1:25 handle 25: $SFQ

$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10

$TFA parent 1:0 prio 0 protocol ip handle 11 fw flowid 1:11

$TFA parent 1:0 prio 1 protocol ip handle 12 fw flowid 1:12

$TFA parent 1:0 prio 1 protocol ip handle 13 fw flowid 1:13

$TFA parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14

$TFA parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15

$TFA parent 1:0 prio 3 protocol ip handle 16 fw flowid 1:16

$TFA parent 1:0 prio 3 protocol ip handle 17 fw flowid 1:17

$TFA parent 1:0 prio 3 protocol ip handle 18 fw flowid 1:18

$TFA parent 1:0 prio 3 protocol ip handle 19 fw flowid 1:19

$TFA parent 1:0 prio 3 protocol ip handle 20 fw flowid 1:20

$TFA parent 1:0 prio 3 protocol ip handle 21 fw flowid 1:21

$TFA parent 1:0 prio 4 protocol ip handle 22 fw flowid 1:22

$TFA parent 1:0 prio 4 protocol ip handle 23 fw flowid 1:23

$TFA parent 1:0 prio 4 protocol ip handle 24 fw flowid 1:24

$TFA parent 1:0 prio 4 protocol ip handle 25 fw flowid 1:25

iptables -t mangle -A POSTROUTING -p tcp --sport 53 -j MARK --set-mark 10

iptables -t mangle -A POSTROUTING -p tcp --sport 6010 -j MARK --set-mark 11

iptables -t mangle -A POSTROUTING -m layer7 --l7proto skypetoskype -j MARK --set-mark 12

iptables -t mangle -A POSTROUTING -m layer7 --l7proto skypeout -j MARK --set-mark 13

iptables -t mangle -A POSTROUTING -p tcp --sport 80 -j MARK --set-mark 14

iptables -t mangle -A POSTROUTING -p tcp --sport 443 -j MARK --set-mark 15

iptables -t mangle -A POSTROUTING -m layer7 --l7proto irc -j MARK --set-mark 16

iptables -t mangle -A POSTROUTING -p tcp --sport 8074 -j MARK --set-mark 17

iptables -t mangle -A POSTROUTING -p tcp --sport 25 -j MARK --set-mark 18

iptables -t mangle -A POSTROUTING -p tcp --sport 110 -j MARK --set-mark 19

iptables -t mangle -A POSTROUTING -p tcp --sport 465 -j MARK --set-mark 20

iptables -t mangle -A POSTROUTING -p tcp --sport 995 -j MARK --set-mark 21

iptables -t mangle -A POSTROUTING -m layer7 --l7proto ftp -j MARK --set-mark 22

iptables -t mangle -A POSTROUTING -m layer7 --l7proto bittorrent -j MARK --set-mark 23

iptables -t mangle -A POSTROUTING -m layer7 --l7proto directconnect -j MARK --set-mark 24

iptables -t mangle -A POSTROUTING -m layer7 --l7proto edonkey -j MARK --set-mark 25

TCAU="tc class add dev imq0"

TFAU="tc filter add dev imq0"

TQAU="tc qdisc add dev imq0"

modprobe imq

modprobe ipt_IMQ

ip link set imq0 up

tc qdisc del dev imq0 root

tc qdisc add dev imq0 root handle 1: htb

tc class add dev imq0 parent 1: classid 1:1 htb rate 1900kbit

$TCAU parent 1:1 classid 1:10 htb rate 128kbit ceil 256kbit prio 0

$TCAU parent 1:1 classid 1:11 htb rate 64kbit ceil 128kbit prio 0

$TCAU parent 1:1 classid 1:12 htb rate 256kbit ceil 512kbit prio 1

$TCAU parent 1:1 classid 1:13 htb rate 256kbit ceil 512kbit prio 1

$TCAU parent 1:1 classid 1:14 htb rate 128kbit ceil 768kbit prio 2

$TCAU parent 1:1 classid 1:15 htb rate 256kbit ceil 768kbit prio 2

$TCAU parent 1:1 classid 1:16 htb rate 64kbit ceil 256kbit prio 3

$TCAU parent 1:1 classid 1:17 htb rate 80kbit ceil 256kbit prio 3

$TCAU parent 1:1 classid 1:18 htb rate 10kbit ceil 768kbit prio 3

$TCAU parent 1:1 classid 1:19 htb rate 10kbit ceil 768kbit prio 3

$TCAU parent 1:1 classid 1:20 htb rate 10kbit ceil 768kbit prio 3

$TCAU parent 1:1 classid 1:21 htb rate 10kbit ceil 768kbit prio 3

$TCAU parent 1:1 classid 1:22 htb rate 256kbit ceil 512kbit prio 4

$TCAU parent 1:1 classid 1:23 htb rate 64kbit ceil 768kbit prio 4

$TCAU parent 1:1 classid 1:24 htb rate 64kbit ceil 768kbit prio 4

$TCAU parent 1:1 classid 1:25 htb rate 64kbit ceil 768kbit prio 4

$TQAU parent 1:10 handle 10: $SFQ

$TQAU parent 1:11 handle 11: $SFQ

$TQAU parent 1:12 handle 12: $SFQ

$TQAU parent 1:13 handle 13: $SFQ

$TQAU parent 1:14 handle 14: $SFQ

$TQAU parent 1:15 handle 15: $SFQ

$TQAU parent 1:16 handle 16: $SFQ

$TQAU parent 1:17 handle 17: $SFQ

$TQAU parent 1:18 handle 18: $SFQ

$TQAU parent 1:19 handle 19: $SFQ

$TQAU parent 1:20 handle 20: $SFQ

$TQAU parent 1:21 handle 21: $SFQ

$TQAU parent 1:22 handle 22: $SFQ

$TQAU parent 1:23 handle 23: $SFQ

$TQAU parent 1:24 handle 24: $SFQ

$TQAU parent 1:25 handle 25: $SFQ

$TFAU parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10

$TFAU parent 1:0 prio 0 protocol ip handle 11 fw flowid 1:11

$TFAU parent 1:0 prio 1 protocol ip handle 12 fw flowid 1:12

$TFAU parent 1:0 prio 1 protocol ip handle 13 fw flowid 1:13

$TFAU parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14

$TFAU parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15

$TFAU parent 1:0 prio 3 protocol ip handle 16 fw flowid 1:16

$TFAU parent 1:0 prio 3 protocol ip handle 17 fw flowid 1:17

$TFAU parent 1:0 prio 3 protocol ip handle 18 fw flowid 1:18

$TFAU parent 1:0 prio 3 protocol ip handle 19 fw flowid 1:19

$TFAU parent 1:0 prio 3 protocol ip handle 20 fw flowid 1:20

$TFAU parent 1:0 prio 3 protocol ip handle 21 fw flowid 1:21

$TFAU parent 1:0 prio 4 protocol ip handle 22 fw flowid 1:22

$TFAU parent 1:0 prio 4 protocol ip handle 23 fw flowid 1:23

$TFAU parent 1:0 prio 4 protocol ip handle 24 fw flowid 1:24

$TFAU parent 1:0 prio 4 protocol ip handle 25 fw flowid 1:25

iptables -t mangle -A PREROUTING -p tcp --dport 53 -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -p tcp --dport 6010 -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -m layer7 --l7proto skypetoskype -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -m layer7 --l7proto skypeout -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -p tcp --dport 80 -j MARK --set-mark 14

iptables -t mangle -A PREROUTING -p tcp --dport 443 -j MARK --set-mark 15

iptables -t mangle -A PREROUTING -m layer7 --l7proto irc -j MARK --set-mark 16

iptables -t mangle -A PREROUTING -p tcp --dport 8074 -j MARK --set-mark 17

iptables -t mangle -A PREROUTING -p tcp --dport 25 -j MARK --set-mark 18

iptables -t mangle -A PREROUTING -p tcp --dport 110 -j MARK --set-mark 19

iptables -t mangle -A PREROUTING -p tcp --dport 465 -j MARK --set-mark 20

iptables -t mangle -A PREROUTING -p tcp --dport 995 -j MARK --set-mark 21

iptables -t mangle -A PREROUTING -m layer7 --l7proto ftp -j MARK --set-mark 22

iptables -t mangle -A PREROUTING -m layer7 --l7proto bittorrent -j MARK --set-mark 23

iptables -t mangle -A PREROUTING -m layer7 --l7proto directconnect -j MARK --set-mark 24

iptables -t mangle -A PREROUTING -m layer7 --l7proto edonkey -j MARK --set-mark 25

iptables -t mangle -A PREROUTING -j IMQ --todev 0