' target='_blank'>Link
27 Listopada 2024 09:38:00
Nawigacja
· Strona Główna
· Forum
· Tomato by Shibby
· FreshTomato

Wątki na forum
Najnowsze dyskusje
· Nowe routery: UX, UC...
· DIR868l OFW asus vs ...
· [S] Asus RT-AC56U
· Szukam zaproszenia n...
· [MOD] FreshTomato-AR...
· Asus RT-AC5300 ,prob...
· archer c6 v3.20
· [S] Nighthawk R7000P...
· [S]Asus RT-AC5300 - ...
· Tanie N100 na promce...
· net z telefonu wifi+...
· Tomato - bugi/proble...
· HUAWEI z światłowodem
· Asus TUF-AX3000_V2 p...
· rt-ax88upro częste ...
· [Howto] Xpenology na...
· Jaki router pod Open...
· Ruter z tomato
· Czy to jeszcze NAS?
· RT AC66U B1
Najpopularniejsze obecnie wątki
· DIR868l OFW asus ... [11]
· Nowe routery: UX,... [1]
· [S] Asus RT-AC56U [0]
Ankieta
Jaki procesor posiada twój router?

Broadcom MIPSEL
Broadcom MIPSEL
36% [151 głosów]

Broadcom ARM
Broadcom ARM
52% [219 głosów]

Atheros
Atheros
5% [22 głosów]

Marvell
Marvell
1% [4 głosów]

Ralink
Ralink
1% [3 głosów]

Intel/AMD/VIA
Intel/AMD/VIA
1% [5 głosów]

Żaden z powyższych
Żaden z powyższych
4% [15 głosów]

Ogółem głosów: 419
Musisz zalogować się, aby móc zagłosować.
Rozpoczęto: 02/02/2015 09:38
Twoje IP
3.136.23.132
Zobacz wątek
OpenLinksys » :: OPROGRAMOWANIE :: » Tomato - firmware
 Drukuj wątek
podział łacza 6Mbit/512Kbit
westmen3
Top  #1 Drukuj post
Dodano 27-11-2009 06:14
proszę o poprawienie skryptu łącze 6/Mbit/512Kbit na 20 kompow

Cytat

#HTB
modprobe ipt_layer7
TCA="tc class add dev br0 parent 1:1 classid"
TFA="tc filter add dev br0 parent 1:0 prio"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
POST="iptables -t mangle -A POSTROUTING ! -s 192.168.1.100/24"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 6144kbit
$TCA 1:12 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:13 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:14 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:17 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:18 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:19 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:21 htb rate 720kbit ceil 4000kbit prio 2
$TCA 1:22 htb rate 720kbit ceil 4000kbit prio 2
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TFA 2 protocol ip handle 12 fw flowid 1:12
$TFA 2 protocol ip handle 13 fw flowid 1:13
$TFA 2 protocol ip handle 14 fw flowid 1:14
$TFA 2 protocol ip handle 17 fw flowid 1:17
$TFA 2 protocol ip handle 18 fw flowid 1:18
$TFA 2 protocol ip handle 19 fw flowid 1:19
$TFA 2 protocol ip handle 21 fw flowid 1:21
$TFA 2 protocol ip handle 22 fw flowid 1:22
$POST -d 192.168.1.101 -j MARK --set-mark 12
$POST -d 192.168.1.102 -j MARK --set-mark 12
$POST -d 192.168.1.103 -j MARK --set-mark 12
$POST -d 192.168.1.104 -j MARK --set-mark 13
$POST -d 192.168.1.105 -j MARK --set-mark 13
$POST -d 192.168.1.106 -j MARK --set-mark 13
$POST -d 192.168.1.107 -j MARK --set-mark 14
$POST -d 192.168.1.108 -j MARK --set-mark 14
$POST -d 192.168.1.109 -j MARK --set-mark 14
$POST -d 192.168.1.110 -j MARK --set-mark 17
$POST -d 192.168.1.111 -j MARK --set-mark 17
$POST -d 192.168.1.112 -j MARK --set-mark 17
$POST -d 192.168.1.113 -j MARK --set-mark 18
$POST -d 192.168.1.114 -j MARK --set-mark 18
$POST -d 192.168.1.115 -j MARK --set-mark 18
$POST -d 192.168.1.116 -j MARK --set-mark 19
$POST -d 192.168.1.117 -j MARK --set-mark 19
$POST -d 192.168.1.118 -j MARK --set-mark 19
$POST -d 192.168.1.119 -j MARK --set-mark 21
$POST -d 192.168.1.120 -j MARK --set-mark 21
$POST -d 192.168.1.121 -j MARK --set-mark 22
$POST -d 192.168.1.122 -j MARK --set-mark 22
$POST -d 192.168.1.123 -j MARK --set-mark 22



$POST -m iprange --dst-range 192.168.1.124-192.168.1.254 -j DROP

TCAU="tc class add dev imq0 parent 2:1 classid"
TFAU="tc filter add dev imq0 parent 2:0 prio"
TQAU="tc qdisc add dev imq0"
PRE="iptables -t mangle -A PREROUTING ! -d 192.168.1.100/24"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 2: htb
tc class add dev imq0 parent 2: classid 2:1 htb rate 512kbit
$TCAU 2:12 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:13 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:14 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:17 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:18 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:19 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:21 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:22 htb rate 56kbit ceil 256kbit prio 2
$TCAU 2:30 htb rate 28kbit ceil 80kbit prio 3 #p2p
$TQAU parent 2:12 handle 12: $SFQ
$TQAU parent 2:13 handle 13: $SFQ
$TQAU parent 2:14 handle 14: $SFQ
$TQAU parent 2:17 handle 17: $SFQ
$TQAU parent 2:18 handle 18: $SFQ
$TQAU parent 2:19 handle 19: $SFQ
$TQAU parent 2:21 handle 21: $SFQ
$TQAU parent 2:22 handle 22: $SFQ
$TQAU parent 2:30 handle 30: $SFQ
$TFAU 2 protocol ip handle 12 fw flowid 2:12
$TFAU 2 protocol ip handle 13 fw flowid 2:13
$TFAU 2 protocol ip handle 14 fw flowid 2:14
$TFAU 2 protocol ip handle 17 fw flowid 2:17
$TFAU 2 protocol ip handle 18 fw flowid 2:18
$TFAU 2 protocol ip handle 19 fw flowid 2:19
$TFAU 2 protocol ip handle 21 fw flowid 2:21
$TFAU 2 protocol ip handle 22 fw flowid 2:22
$TFAU 4 protocol ip handle 30 fw flowid 2:30
$PRE -s 192.168.1.101 -j MARK --set-mark 12
$PRE -s 192.168.1.102 -j MARK --set-mark 12
$PRE -s 192.168.1.103 -j MARK --set-mark 12
$PRE -s 192.168.1.104 -j MARK --set-mark 13
$PRE -s 192.168.1.105 -j MARK --set-mark 13
$PRE -s 192.168.1.106 -j MARK --set-mark 13
$PRE -s 192.168.1.107 -j MARK --set-mark 14
$PRE -s 192.168.1.108 -j MARK --set-mark 14
$PRE -s 192.168.1.109 -j MARK --set-mark 14
$PRE -s 192.168.1.110 -j MARK --set-mark 17
$PRE -s 192.168.1.111 -j MARK --set-mark 17
$PRE -s 192.168.1.112 -j MARK --set-mark 17
$PRE -s 192.168.1.113 -j MARK --set-mark 18
$PRE -s 192.168.1.114 -j MARK --set-mark 18
$PRE -s 192.168.1.115 -j MARK --set-mark 18
$PRE -s 192.168.1.116 -j MARK --set-mark 19
$PRE -s 192.168.1.117 -j MARK --set-mark 19
$PRE -s 192.168.1.118 -j MARK --set-mark 19
$PRE -s 192.168.1.119 -j MARK --set-mark 21
$PRE -s 192.168.1.120 -j MARK --set-mark 21
$PRE -s 192.168.1.121 -j MARK --set-mark 22
$PRE -s 192.168.1.122 -j MARK --set-mark 22
$PRE -s 192.168.1.123 -j MARK --set-mark 22
$PRE -m layer7 --l7proto bittorrent -j MARK --set-mark 30
$PRE -m layer7 --l7proto directconnect -j MARK --set-mark 30
$PRE -m layer7 --l7proto edonkey -j MARK --set-mark 30
$PRE -m layer7 --l7proto fasttrack -j MARK --set-mark 30
$PRE -m iprange --src-range 192.168.1.124-192.168.1.254 -j DROP
$PRE -j IMQ --todev 0
 
shibby
Top  #2 Drukuj post
Dodano 27-11-2009 09:19
Kolego nie przepisuj slepo tego co ci dalem, patrz co robisz.
Wielokrotnie pisalem na forum jak czutac ze zrozumieniem skrypt...

Nie lubie dawac gotowego rozwiazania ale łap...
Troche slabe lacze na tylu userow ale moze bedzie jakos dzialac.


Cytat

#HTB
modprobe ipt_layer7
TCA="tc class add dev br0 parent 1:1 classid "
TFA="tc filter add dev br0 parent 1:0 prio 2 protocol ip handle"
TQA="tc qdisc add dev br0"
POST="iptables -t mangle -A POSTROUTING"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 6144kbit
$TCA 1:10 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:11 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:12 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:13 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:14 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:15 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:16 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:17 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:18 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:19 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:20 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:21 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:22 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:23 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:24 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:25 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:26 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:27 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:28 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:29 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:30 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:31 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:32 htb rate 260kbit ceil 4000kbit prio 2
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:15 handle 15: $SFQ
$TQA parent 1:16 handle 16: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:20 handle 20: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TQA parent 1:23 handle 23: $SFQ
$TQA parent 1:24 handle 24: $SFQ
$TQA parent 1:25 handle 25: $SFQ
$TQA parent 1:26 handle 26: $SFQ
$TQA parent 1:27 handle 27: $SFQ
$TQA parent 1:28 handle 28: $SFQ
$TQA parent 1:29 handle 29: $SFQ
$TQA parent 1:30 handle 30: $SFQ
$TQA parent 1:31 handle 31: $SFQ
$TQA parent 1:32 handle 32: $SFQ
$TFA 10 fw flowid 1:10
$TFA 11 fw flowid 1:11
$TFA 12 fw flowid 1:12
$TFA 13 fw flowid 1:13
$TFA 14 fw flowid 1:14
$TFA 15 fw flowid 1:15
$TFA 16 fw flowid 1:16
$TFA 17 fw flowid 1:17
$TFA 18 fw flowid 1:18
$TFA 19 fw flowid 1:19
$TFA 20 fw flowid 1:20
$TFA 21 fw flowid 1:21
$TFA 22 fw flowid 1:22
$TFA 23 fw flowid 1:23
$TFA 24 fw flowid 1:24
$TFA 25 fw flowid 1:25
$TFA 26 fw flowid 1:26
$TFA 27 fw flowid 1:27
$TFA 28 fw flowid 1:28
$TFA 29 fw flowid 1:29
$TFA 30 fw flowid 1:30
$TFA 31 fw flowid 1:31
$TFA 32 fw flowid 1:32
$POST -d 192.168.1.101 -j MARK --set-mark 10
$POST -d 192.168.1.102 -j MARK --set-mark 11
$POST -d 192.168.1.103 -j MARK --set-mark 12
$POST -d 192.168.1.104 -j MARK --set-mark 13
$POST -d 192.168.1.105 -j MARK --set-mark 14
$POST -d 192.168.1.106 -j MARK --set-mark 15
$POST -d 192.168.1.107 -j MARK --set-mark 16
$POST -d 192.168.1.108 -j MARK --set-mark 17
$POST -d 192.168.1.109 -j MARK --set-mark 18
$POST -d 192.168.1.110 -j MARK --set-mark 19
$POST -d 192.168.1.111 -j MARK --set-mark 20
$POST -d 192.168.1.112 -j MARK --set-mark 21
$POST -d 192.168.1.113 -j MARK --set-mark 22
$POST -d 192.168.1.114 -j MARK --set-mark 23
$POST -d 192.168.1.115 -j MARK --set-mark 24
$POST -d 192.168.1.116 -j MARK --set-mark 25
$POST -d 192.168.1.117 -j MARK --set-mark 26
$POST -d 192.168.1.118 -j MARK --set-mark 27
$POST -d 192.168.1.119 -j MARK --set-mark 28
$POST -d 192.168.1.120 -j MARK --set-mark 29
$POST -d 192.168.1.121 -j MARK --set-mark 30
$POST -d 192.168.1.122 -j MARK --set-mark 31
$POST -d 192.168.1.123 -j MARK --set-mark 32
TCAU="tc class add dev imq0 parent 1:1 classid"
TFAU="tc filter add dev imq0 parent 1:0 prio 2 protocol ip handle"
TQAU="tc qdisc add dev imq0"
PRE="iptables -t mangle -A PREROUTING"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 2: htb
tc class add dev imq0 parent 2: classid 2:1 htb rate 512kbit
$TCAU 2:10 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:11 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:12 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:13 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:14 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:15 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:16 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:17 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:18 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:19 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:20 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:21 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:22 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:23 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:24 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:25 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:26 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:27 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:28 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:29 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:30 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:31 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:32 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:40 htb rate 20kbit ceil 80kbit prio 3 #p2p
$TQAU parent 2:10 handle 10: $SFQ
$TQAU parent 2:11 handle 11: $SFQ
$TQAU parent 2:12 handle 12: $SFQ
$TQAU parent 2:13 handle 13: $SFQ
$TQAU parent 2:14 handle 14: $SFQ
$TQAU parent 2:15 handle 15: $SFQ
$TQAU parent 2:16 handle 16: $SFQ
$TQAU parent 2:17 handle 17: $SFQ
$TQAU parent 2:18 handle 18: $SFQ
$TQAU parent 2:19 handle 19: $SFQ
$TQAU parent 2:20 handle 20: $SFQ
$TQAU parent 2:21 handle 21: $SFQ
$TQAU parent 2:22 handle 22: $SFQ
$TQAU parent 2:23 handle 23: $SFQ
$TQAU parent 2:24 handle 24: $SFQ
$TQAU parent 2:25 handle 25: $SFQ
$TQAU parent 2:26 handle 26: $SFQ
$TQAU parent 2:27 handle 27: $SFQ
$TQAU parent 2:28 handle 28: $SFQ
$TQAU parent 2:29 handle 29: $SFQ
$TQAU parent 2:30 handle 30: $SFQ
$TQAU parent 2:31 handle 31: $SFQ
$TQAU parent 2:32 handle 32: $SFQ
$TQAU parent 2:40 handle 40: $SFQ
$TFAU 10 fw flowid 2:10
$TFAU 11 fw flowid 2:11
$TFAU 12 fw flowid 2:12
$TFAU 13 fw flowid 2:13
$TFAU 14 fw flowid 2:14
$TFAU 15 fw flowid 2:15
$TFAU 16 fw flowid 2:16
$TFAU 17 fw flowid 2:17
$TFAU 18 fw flowid 2:18
$TFAU 19 fw flowid 2:19
$TFAU 20 fw flowid 2:20
$TFAU 21 fw flowid 2:21
$TFAU 22 fw flowid 2:22
$TFAU 23 fw flowid 2:23
$TFAU 24 fw flowid 2:24
$TFAU 25 fw flowid 2:25
$TFAU 26 fw flowid 2:26
$TFAU 27 fw flowid 2:27
$TFAU 28 fw flowid 2:28
$TFAU 29 fw flowid 2:29
$TFAU 30 fw flowid 2:30
$TFAU 31 fw flowid 2:31
$TFAU 32 fw flowid 2:32
$TFAU 40 fw flowid 2:40
$PRE -s 192.168.1.101 -j MARK --set-mark 10
$PRE -s 192.168.1.102 -j MARK --set-mark 11
$PRE -s 192.168.1.103 -j MARK --set-mark 12
$PRE -s 192.168.1.104 -j MARK --set-mark 13
$PRE -s 192.168.1.105 -j MARK --set-mark 14
$PRE -s 192.168.1.106 -j MARK --set-mark 15
$PRE -s 192.168.1.107 -j MARK --set-mark 16
$PRE -s 192.168.1.108 -j MARK --set-mark 17
$PRE -s 192.168.1.109 -j MARK --set-mark 18
$PRE -s 192.168.1.110 -j MARK --set-mark 19
$PRE -s 192.168.1.111 -j MARK --set-mark 20
$PRE -s 192.168.1.112 -j MARK --set-mark 21
$PRE -s 192.168.1.113 -j MARK --set-mark 22
$PRE -s 192.168.1.114 -j MARK --set-mark 23
$PRE -s 192.168.1.115 -j MARK --set-mark 24
$PRE -s 192.168.1.116 -j MARK --set-mark 25
$PRE -s 192.168.1.117 -j MARK --set-mark 26
$PRE -s 192.168.1.118 -j MARK --set-mark 27
$PRE -s 192.168.1.119 -j MARK --set-mark 28
$PRE -s 192.168.1.120 -j MARK --set-mark 29
$PRE -s 192.168.1.121 -j MARK --set-mark 30
$PRE -s 192.168.1.122 -j MARK --set-mark 31
$PRE -s 192.168.1.123 -j MARK --set-mark 32
$PRE -m layer7 --l7proto bittorrent -j MARK --set-mark 40
$PRE -m layer7 --l7proto directconnect -j MARK --set-mark 40
$PRE -m layer7 --l7proto edonkey -j MARK --set-mark 40
$PRE -m layer7 --l7proto fasttrack -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -j IMQ --todev 0
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
 
westmen3
Top  #3 Drukuj post
Dodano 27-11-2009 19:22
dzięki sliczne za cierpliwość tylko mam problem bo skrypt nie działa wkleiłem go do administration/scripts/firewall potem reboot.
Co riobie nie tak
 
shibby
Top  #4 Drukuj post
Dodano 27-11-2009 21:44
moj maly blad

Cytat

#HTB
modprobe ipt_layer7
TCA="tc class add dev br0 parent 1:1 classid "
TFA="tc filter add dev br0 parent 1:0 prio 2 protocol ip handle"
TQA="tc qdisc add dev br0"
POST="iptables -t mangle -A POSTROUTING"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 6144kbit
$TCA 1:10 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:11 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:12 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:13 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:14 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:15 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:16 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:17 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:18 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:19 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:20 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:21 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:22 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:23 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:24 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:25 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:26 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:27 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:28 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:29 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:30 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:31 htb rate 260kbit ceil 4000kbit prio 2
$TCA 1:32 htb rate 260kbit ceil 4000kbit prio 2
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:15 handle 15: $SFQ
$TQA parent 1:16 handle 16: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:20 handle 20: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TQA parent 1:23 handle 23: $SFQ
$TQA parent 1:24 handle 24: $SFQ
$TQA parent 1:25 handle 25: $SFQ
$TQA parent 1:26 handle 26: $SFQ
$TQA parent 1:27 handle 27: $SFQ
$TQA parent 1:28 handle 28: $SFQ
$TQA parent 1:29 handle 29: $SFQ
$TQA parent 1:30 handle 30: $SFQ
$TQA parent 1:31 handle 31: $SFQ
$TQA parent 1:32 handle 32: $SFQ
$TFA 10 fw flowid 1:10
$TFA 11 fw flowid 1:11
$TFA 12 fw flowid 1:12
$TFA 13 fw flowid 1:13
$TFA 14 fw flowid 1:14
$TFA 15 fw flowid 1:15
$TFA 16 fw flowid 1:16
$TFA 17 fw flowid 1:17
$TFA 18 fw flowid 1:18
$TFA 19 fw flowid 1:19
$TFA 20 fw flowid 1:20
$TFA 21 fw flowid 1:21
$TFA 22 fw flowid 1:22
$TFA 23 fw flowid 1:23
$TFA 24 fw flowid 1:24
$TFA 25 fw flowid 1:25
$TFA 26 fw flowid 1:26
$TFA 27 fw flowid 1:27
$TFA 28 fw flowid 1:28
$TFA 29 fw flowid 1:29
$TFA 30 fw flowid 1:30
$TFA 31 fw flowid 1:31
$TFA 32 fw flowid 1:32
$POST -d 192.168.1.101 -j MARK --set-mark 10
$POST -d 192.168.1.102 -j MARK --set-mark 11
$POST -d 192.168.1.103 -j MARK --set-mark 12
$POST -d 192.168.1.104 -j MARK --set-mark 13
$POST -d 192.168.1.105 -j MARK --set-mark 14
$POST -d 192.168.1.106 -j MARK --set-mark 15
$POST -d 192.168.1.107 -j MARK --set-mark 16
$POST -d 192.168.1.108 -j MARK --set-mark 17
$POST -d 192.168.1.109 -j MARK --set-mark 18
$POST -d 192.168.1.110 -j MARK --set-mark 19
$POST -d 192.168.1.111 -j MARK --set-mark 20
$POST -d 192.168.1.112 -j MARK --set-mark 21
$POST -d 192.168.1.113 -j MARK --set-mark 22
$POST -d 192.168.1.114 -j MARK --set-mark 23
$POST -d 192.168.1.115 -j MARK --set-mark 24
$POST -d 192.168.1.116 -j MARK --set-mark 25
$POST -d 192.168.1.117 -j MARK --set-mark 26
$POST -d 192.168.1.118 -j MARK --set-mark 27
$POST -d 192.168.1.119 -j MARK --set-mark 28
$POST -d 192.168.1.120 -j MARK --set-mark 29
$POST -d 192.168.1.121 -j MARK --set-mark 30
$POST -d 192.168.1.122 -j MARK --set-mark 31
$POST -d 192.168.1.123 -j MARK --set-mark 32
TCAU="tc class add dev imq0 parent 2:1 classid"
TFAU="tc filter add dev imq0 parent 2:0 prio 2 protocol ip handle"
TQAU="tc qdisc add dev imq0"
PRE="iptables -t mangle -A PREROUTING"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 2: htb
tc class add dev imq0 parent 2: classid 2:1 htb rate 512kbit
$TCAU 2:10 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:11 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:12 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:13 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:14 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:15 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:16 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:17 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:18 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:19 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:20 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:21 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:22 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:23 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:24 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:25 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:26 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:27 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:28 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:29 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:30 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:31 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:32 htb rate 20kbit ceil 256kbit prio 2
$TCAU 2:40 htb rate 20kbit ceil 80kbit prio 3 #p2p
$TQAU parent 2:10 handle 10: $SFQ
$TQAU parent 2:11 handle 11: $SFQ
$TQAU parent 2:12 handle 12: $SFQ
$TQAU parent 2:13 handle 13: $SFQ
$TQAU parent 2:14 handle 14: $SFQ
$TQAU parent 2:15 handle 15: $SFQ
$TQAU parent 2:16 handle 16: $SFQ
$TQAU parent 2:17 handle 17: $SFQ
$TQAU parent 2:18 handle 18: $SFQ
$TQAU parent 2:19 handle 19: $SFQ
$TQAU parent 2:20 handle 20: $SFQ
$TQAU parent 2:21 handle 21: $SFQ
$TQAU parent 2:22 handle 22: $SFQ
$TQAU parent 2:23 handle 23: $SFQ
$TQAU parent 2:24 handle 24: $SFQ
$TQAU parent 2:25 handle 25: $SFQ
$TQAU parent 2:26 handle 26: $SFQ
$TQAU parent 2:27 handle 27: $SFQ
$TQAU parent 2:28 handle 28: $SFQ
$TQAU parent 2:29 handle 29: $SFQ
$TQAU parent 2:30 handle 30: $SFQ
$TQAU parent 2:31 handle 31: $SFQ
$TQAU parent 2:32 handle 32: $SFQ
$TQAU parent 2:40 handle 40: $SFQ
$TFAU 10 fw flowid 2:10
$TFAU 11 fw flowid 2:11
$TFAU 12 fw flowid 2:12
$TFAU 13 fw flowid 2:13
$TFAU 14 fw flowid 2:14
$TFAU 15 fw flowid 2:15
$TFAU 16 fw flowid 2:16
$TFAU 17 fw flowid 2:17
$TFAU 18 fw flowid 2:18
$TFAU 19 fw flowid 2:19
$TFAU 20 fw flowid 2:20
$TFAU 21 fw flowid 2:21
$TFAU 22 fw flowid 2:22
$TFAU 23 fw flowid 2:23
$TFAU 24 fw flowid 2:24
$TFAU 25 fw flowid 2:25
$TFAU 26 fw flowid 2:26
$TFAU 27 fw flowid 2:27
$TFAU 28 fw flowid 2:28
$TFAU 29 fw flowid 2:29
$TFAU 30 fw flowid 2:30
$TFAU 31 fw flowid 2:31
$TFAU 32 fw flowid 2:32
$TFAU 40 fw flowid 2:40
$PRE -s 192.168.1.101 -j MARK --set-mark 10
$PRE -s 192.168.1.102 -j MARK --set-mark 11
$PRE -s 192.168.1.103 -j MARK --set-mark 12
$PRE -s 192.168.1.104 -j MARK --set-mark 13
$PRE -s 192.168.1.105 -j MARK --set-mark 14
$PRE -s 192.168.1.106 -j MARK --set-mark 15
$PRE -s 192.168.1.107 -j MARK --set-mark 16
$PRE -s 192.168.1.108 -j MARK --set-mark 17
$PRE -s 192.168.1.109 -j MARK --set-mark 18
$PRE -s 192.168.1.110 -j MARK --set-mark 19
$PRE -s 192.168.1.111 -j MARK --set-mark 20
$PRE -s 192.168.1.112 -j MARK --set-mark 21
$PRE -s 192.168.1.113 -j MARK --set-mark 22
$PRE -s 192.168.1.114 -j MARK --set-mark 23
$PRE -s 192.168.1.115 -j MARK --set-mark 24
$PRE -s 192.168.1.116 -j MARK --set-mark 25
$PRE -s 192.168.1.117 -j MARK --set-mark 26
$PRE -s 192.168.1.118 -j MARK --set-mark 27
$PRE -s 192.168.1.119 -j MARK --set-mark 28
$PRE -s 192.168.1.120 -j MARK --set-mark 29
$PRE -s 192.168.1.121 -j MARK --set-mark 30
$PRE -s 192.168.1.122 -j MARK --set-mark 31
$PRE -s 192.168.1.123 -j MARK --set-mark 32
$PRE -m layer7 --l7proto bittorrent -j MARK --set-mark 40
$PRE -m layer7 --l7proto directconnect -j MARK --set-mark 40
$PRE -m layer7 --l7proto edonkey -j MARK --set-mark 40
$PRE -m layer7 --l7proto fasttrack -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -j IMQ --todev 0


wklejasz w firewall, save i reboot.
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
 
westmen3
Top  #5 Drukuj post
Dodano 18-12-2009 20:31
Witam skrypt ten nie za bardzo mi działa wygenerowałem drugi

Cytat

#--------------------------------------------
#WRT54 Script Generator v1.02
#(C) 2006-2007 Robert "Robson" Mytkowski
#--------------------------------------------
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb default 99
tc class add dev br0 parent 1: classid 1:1 htb rate 5800kbit
$TCA parent 1:1 classid 1:10 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:11 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:12 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:13 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:14 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:15 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:16 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:17 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:18 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:19 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:20 htb rate 305kbit ceil 5800kbit prio 2
$TCA parent 1:1 classid 1:21 htb rate 305kbit ceil 5800kbit prio 2
$TCA parent 1:1 classid 1:22 htb rate 305kbit ceil 5800kbit prio 2
$TCA parent 1:1 classid 1:23 htb rate 305kbit ceil 5800kbit prio 2
$TCA parent 1:1 classid 1:24 htb rate 305kbit ceil 5800kbit prio 2
$TCA parent 1:1 classid 1:25 htb rate 305kbit ceil 5800kbit prio 2
$TCA parent 1:1 classid 1:26 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:27 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:28 htb rate 305kbit ceil 5800kbit prio 2
$TCA parent 1:1 classid 1:99 htb rate 1kbit ceil 1kbit
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:15 handle 15: $SFQ
$TQA parent 1:16 handle 16: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:20 handle 20: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TQA parent 1:23 handle 23: $SFQ
$TQA parent 1:24 handle 24: $SFQ
$TQA parent 1:25 handle 25: $SFQ
$TQA parent 1:26 handle 26: $SFQ
$TQA parent 1:27 handle 27: $SFQ
$TQA parent 1:28 handle 28: $SFQ
$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFA parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13
$TFA parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14
$TFA parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15
$TFA parent 1:0 prio 2 protocol ip handle 16 fw flowid 1:16
$TFA parent 1:0 prio 2 protocol ip handle 17 fw flowid 1:17
$TFA parent 1:0 prio 2 protocol ip handle 18 fw flowid 1:18
$TFA parent 1:0 prio 2 protocol ip handle 19 fw flowid 1:19
$TFA parent 1:0 prio 2 protocol ip handle 20 fw flowid 1:20
$TFA parent 1:0 prio 2 protocol ip handle 21 fw flowid 1:21
$TFA parent 1:0 prio 2 protocol ip handle 22 fw flowid 1:22
$TFA parent 1:0 prio 2 protocol ip handle 23 fw flowid 1:23
$TFA parent 1:0 prio 2 protocol ip handle 24 fw flowid 1:24
$TFA parent 1:0 prio 2 protocol ip handle 25 fw flowid 1:25
$TFA parent 1:0 prio 2 protocol ip handle 26 fw flowid 1:26
$TFA parent 1:0 prio 2 protocol ip handle 27 fw flowid 1:27
$TFA parent 1:0 prio 2 protocol ip handle 28 fw flowid 1:28
iptables -t mangle -A POSTROUTING -d 192.168.1.100 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.1.101 -j MARK --set-mark 11
iptables -t mangle -A POSTROUTING -d 192.168.1.102 -j MARK --set-mark 12
iptables -t mangle -A POSTROUTING -d 192.168.1.103 -j MARK --set-mark 13
iptables -t mangle -A POSTROUTING -d 192.168.1.104 -j MARK --set-mark 14
iptables -t mangle -A POSTROUTING -d 192.168.1.105 -j MARK --set-mark 15
iptables -t mangle -A POSTROUTING -d 192.168.1.106 -j MARK --set-mark 16
iptables -t mangle -A POSTROUTING -d 192.168.1.107 -j MARK --set-mark 17
iptables -t mangle -A POSTROUTING -d 192.168.1.108 -j MARK --set-mark 18
iptables -t mangle -A POSTROUTING -d 192.168.1.109 -j MARK --set-mark 19
iptables -t mangle -A POSTROUTING -d 192.168.1.110 -j MARK --set-mark 20
iptables -t mangle -A POSTROUTING -d 192.168.1.111 -j MARK --set-mark 21
iptables -t mangle -A POSTROUTING -d 192.168.1.112 -j MARK --set-mark 22
iptables -t mangle -A POSTROUTING -d 192.168.1.113 -j MARK --set-mark 23
iptables -t mangle -A POSTROUTING -d 192.168.1.114 -j MARK --set-mark 24
iptables -t mangle -A POSTROUTING -d 192.168.1.115 -j MARK --set-mark 25
iptables -t mangle -A POSTROUTING -d 192.168.1.116 -j MARK --set-mark 26
iptables -t mangle -A POSTROUTING -d 192.168.1.117 -j MARK --set-mark 27
iptables -t mangle -A POSTROUTING -d 192.168.1.118 -j MARK --set-mark 28
$TCAU parent 1:1 classid 1:99 htb rate 1kbit ceil 1kbit
iptables -I FORWARD -s 192.168.1.117 -p tcp -m connlimit --connlimit-above 120 -j DROP
iptables -I FORWARD -s 192.168.1.117 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.106 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.106 -p udp -m limit --limit 4/sec -j DROP
iptables -I FORWARD -s 192.168.1.112-p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.112 -p udp -m limit --limit 4/sec -j DROP

i qos upload

lecz nadal siec jest zmulona
przy łaczu 6000/512 działa beznadziejnie co mogę poprawić
 
shibby
Top  #6 Drukuj post
Dodano 18-12-2009 20:56
czytac to co pisze w kazdym temacie o skrypcie.
NIGDY NIE DAWAC NIKOMU FULLA.

zobacz jak ja dziele swoje 6m/512k. (pierwszy port westmen3 to moj skrypt)
Router: Unifi Cloud Gateway Max
Switch: Netgear MS510TXPP
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD, Intel X710-DA2 SFP+
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
 
westmen3
Top  #7 Drukuj post
Dodano 19-12-2009 14:49

Cytat

#--------------------------------------------
#WRT54 Script Generator v1.02
#(C) 2006-2007 Robert "Robson" Mytkowski
#--------------------------------------------
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb default 99
tc class add dev br0 parent 1: classid 1:1 htb rate 5800kbit
$TCA parent 1:1 classid 1:10 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:11 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:12 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:13 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:14 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:15 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:16 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:17 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:18 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:19 htb rate 305kbit ceil 5000kbit prio 2
$TCA parent 1:1 classid 1:20 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:21 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:22 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:23 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:24 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:25 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:26 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:27 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:28 htb rate 305kbit ceil 4000kbit prio 2
$TCA parent 1:1 classid 1:99 htb rate 1kbit ceil 1kbit
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TQA parent 1:14 handle 14: $SFQ
$TQA parent 1:15 handle 15: $SFQ
$TQA parent 1:16 handle 16: $SFQ
$TQA parent 1:17 handle 17: $SFQ
$TQA parent 1:18 handle 18: $SFQ
$TQA parent 1:19 handle 19: $SFQ
$TQA parent 1:20 handle 20: $SFQ
$TQA parent 1:21 handle 21: $SFQ
$TQA parent 1:22 handle 22: $SFQ
$TQA parent 1:23 handle 23: $SFQ
$TQA parent 1:24 handle 24: $SFQ
$TQA parent 1:25 handle 25: $SFQ
$TQA parent 1:26 handle 26: $SFQ
$TQA parent 1:27 handle 27: $SFQ
$TQA parent 1:28 handle 28: $SFQ
$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFA parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13
$TFA parent 1:0 prio 2 protocol ip handle 14 fw flowid 1:14
$TFA parent 1:0 prio 2 protocol ip handle 15 fw flowid 1:15
$TFA parent 1:0 prio 2 protocol ip handle 16 fw flowid 1:16
$TFA parent 1:0 prio 2 protocol ip handle 17 fw flowid 1:17
$TFA parent 1:0 prio 2 protocol ip handle 18 fw flowid 1:18
$TFA parent 1:0 prio 2 protocol ip handle 19 fw flowid 1:19
$TFA parent 1:0 prio 2 protocol ip handle 20 fw flowid 1:20
$TFA parent 1:0 prio 2 protocol ip handle 21 fw flowid 1:21
$TFA parent 1:0 prio 2 protocol ip handle 22 fw flowid 1:22
$TFA parent 1:0 prio 2 protocol ip handle 23 fw flowid 1:23
$TFA parent 1:0 prio 2 protocol ip handle 24 fw flowid 1:24
$TFA parent 1:0 prio 2 protocol ip handle 25 fw flowid 1:25
$TFA parent 1:0 prio 2 protocol ip handle 26 fw flowid 1:26
$TFA parent 1:0 prio 2 protocol ip handle 27 fw flowid 1:27
$TFA parent 1:0 prio 2 protocol ip handle 28 fw flowid 1:28
iptables -t mangle -A POSTROUTING -d 192.168.1.100 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.1.101 -j MARK --set-mark 11
iptables -t mangle -A POSTROUTING -d 192.168.1.102 -j MARK --set-mark 12
iptables -t mangle -A POSTROUTING -d 192.168.1.103 -j MARK --set-mark 13
iptables -t mangle -A POSTROUTING -d 192.168.1.104 -j MARK --set-mark 14
iptables -t mangle -A POSTROUTING -d 192.168.1.105 -j MARK --set-mark 15
iptables -t mangle -A POSTROUTING -d 192.168.1.106 -j MARK --set-mark 16
iptables -t mangle -A POSTROUTING -d 192.168.1.107 -j MARK --set-mark 17
iptables -t mangle -A POSTROUTING -d 192.168.1.108 -j MARK --set-mark 18
iptables -t mangle -A POSTROUTING -d 192.168.1.109 -j MARK --set-mark 19
iptables -t mangle -A POSTROUTING -d 192.168.1.110 -j MARK --set-mark 20
iptables -t mangle -A POSTROUTING -d 192.168.1.111 -j MARK --set-mark 21
iptables -t mangle -A POSTROUTING -d 192.168.1.112 -j MARK --set-mark 22
iptables -t mangle -A POSTROUTING -d 192.168.1.113 -j MARK --set-mark 23
iptables -t mangle -A POSTROUTING -d 192.168.1.114 -j MARK --set-mark 24
iptables -t mangle -A POSTROUTING -d 192.168.1.115 -j MARK --set-mark 25
iptables -t mangle -A POSTROUTING -d 192.168.1.116 -j MARK --set-mark 26
iptables -t mangle -A POSTROUTING -d 192.168.1.117 -j MARK --set-mark 27
iptables -t mangle -A POSTROUTING -d 192.168.1.118 -j MARK --set-mark 28
$TCAU parent 1:1 classid 1:99 htb rate 1kbit ceil 1kbit
iptables -I FORWARD -s 192.168.1.100 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.101 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.102 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.103 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.104 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.105 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.106 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.107 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.108 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.110 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.111 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.112 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.113 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.114 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.115 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.116 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.117 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.118 -p tcp -m connlimit --connlimit-above 100 -j DROP
iptables -I FORWARD -s 192.168.1.100 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.101 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.102 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.103 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.104 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.105 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.106 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.107 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.108 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.110 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.111 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.112 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.113 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.114 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.115 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.116 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.117 -p udp -m limit --limit 3/sec -j DROP
iptables -I FORWARD -s 192.168.1.118 -p udp -m limit --limit 3/sec -j DROP


dalej mi ktoś zamula sieć wyłaczyłem porty TCP/UDP, dst port 1024-6881,6883-8073,8075-8079, i nie chodzi tak jak powinno co mam poprawić
 
westmen3
Top  #8 Drukuj post
Dodano 19-12-2009 16:44
obczaiłem gościa który zapycha sieć to jest przykładowy kawełek loga

Cytat

Dec 19 16:24:20 unknown user.warn kernel: nvram_commit(): init
Dec 19 16:24:22 unknown user.warn kernel: nvram_commit(): end
Dec 19 16:24:57 unknown user.warn kernel: nvram_commit(): init
Dec 19 16:24:58 unknown user.warn kernel: nvram_commit(): end
Dec 19 16:25:13 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:25:13 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:26:17 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:26:17 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:27:20 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:27:20 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:28:23 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:28:23 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:29:41 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:29:41 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:30:45 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:30:45 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:31:50 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:31:50 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:32:54 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:32:54 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:33:57 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:33:57 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:35:00 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:35:00 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:36:16 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:36:16 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:37:37 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:37:37 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008
Dec 19 16:38:58 unknown daemon.info dnsmasq[93]: DHCPINFORM(br0) 192.168.1.104 00:1f:29:7b:2c:30
Dec 19 16:38:58 unknown daemon.info dnsmasq[93]: DHCPACK(br0) 192.168.1.104 00:1f:29:7b:2c:30 p124020nb00008

o co chodzi??
 
Przejdź do forum
Zaloguj
Wprowadź adres e-mail lub nazwę użytkownika

Hasło



Nie masz jeszcze konta? Zarejestruj się.

Zapomniałeś/aś hasła?
Aktualnie online
· Gości online: 79

· Użytkowników online: 0

· Łącznie użytkowników: 24,115
· Najnowszy użytkownik: Ja
Czat
Musisz się zalogować, aby opublikować wiadomość.

Maniek91PL
06-11-2024 22:37
dzięki !Grin

maxikaaz
29-10-2024 14:27
@Maniek91PL - Administration=> Admin Access, i tam masz "Allow Wireless Access" do zaznaczenia

Maniek91PL
26-10-2024 22:07
siemka! ktoś przypomni co się ustawiało jeśli nie mogę wejść od strony wifi do tomato? od lan działa

overflow2
04-10-2024 17:34
Kupowałem Asusy n10u albo n12d1 ale nie widzę ich, chyba już nie produkują, Chodzi o coś nowego i taniego. Transfery niewielkie.

maxikaaz
04-10-2024 09:38
@overflow2 patrząc po dostępności funkcji w nowych kompilacjach, to chyba nawet WRT54G/GL jeszcze ma OpenVPN, albo jakiś odpowiednik... zależy, na jakie transfery liczysz.

overflow2
30-09-2024 20:53
Jaki aktualnie najtańszy router do tomato do openvpn?

maxikaaz
27-07-2024 15:07
@servee - na początek router do rozebrania i obejrzenia, ciężko wróżyć tak tylko po objawach

maxikaaz
27-07-2024 14:55
@servee - cały kontroler nie pada tak sobie z powodu "zbiegu okoliczności",
więc prawdopodobnie gdzieś przepięcie.

servee
25-07-2024 13:33
@maxikaaz: działało, aż pewnego pięknego dnia przestało działać. W tym dniu była też burza, ale to raczej zbieg okoliczności.

maxikaaz
25-07-2024 11:38
@servee - o ile problem jest w obrębie samych wyjść (dławiki, warystory), to naprawialne, ale jeśli w samym SoC - to nienaprawialne ze względu na koszta. A co było przyczyną?
95,955,746 unikalnych wizyt
Copyright © OpenLinksys 2006-2021


Powered by PHPFusion Copyright © 2024 PHP Fusion Inc
Released as free software without warranties under GNU Affero GPL v3.