modprobe ipt_TTL
iptables -t mangle -I PREROUTING -i eth1 -j TTL --ttl-inc 1
iptables -t mangle -I POSTROUTING -o br0 -j TTL --ttl-set 2
modprobe ipt_layer7
DEV="br0"
TCA="tc class add dev ${DEV}"
TFA="tc filter add dev ${DEV}"
TQA="tc qdisc add dev ${DEV}"
SFQ="sfq perturb 10"
CEIL=6000
WWWMAX=500000
PRIO1="1023"
PRIO2="20,21,22,23,80,110,443"
P2P="0"
tc qdisc del dev ${DEV} root
tc qdisc add dev ${DEV} root handle 1: htb default 40
tc class add dev ${DEV} parent 1: classid 1:1 htb rate ${CEIL}kbit
$TCA parent 1:1 classid 1:10 htb rate 200kbit ceil 500kbit prio 1
$TCA parent 1:1 classid 1:20 htb rate 2000kbit ceil ${CEIL}kbit prio 2
$TCA parent 1:1 classid 1:30 htb rate 1000kbit ceil 3000kbit prio 3
$TCA parent 1:1 classid 1:40 htb rate 400kbit ceil 2000kbit prio 4
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:20 handle 20: $SFQ
$TQA parent 1:30 handle 30: $SFQ
$TQA parent 1:40 handle 40: $SFQ
$TFA parent 1:0 prio 1 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 20 fw flowid 1:20
$TFA parent 1:0 prio 3 protocol ip handle 30 fw flowid 1:30
$TFA parent 1:0 prio 4 protocol ip handle 40 fw flowid 1:40
iptables -t mangle -A PREROUTING -j BCOUNT
iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -p tcp -m mport --dports ${P2P} -j RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -p udp -m mport --dports ${P2P} -j RETURN
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO1} -j RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO1} -j RETURN
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO2} -m bcount --range 0x0-${WWWMAX} -j MARK

--set-mark 20
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO2} -m bcount --range 0x0-${WWWMAX} -j

RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO2} -m bcount --range 0x0-${WWWMAX} -j MARK

--set-mark 20
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO2} -m bcount --range 0x0-${WWWMAX} -j

RETURN
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO2} -m bcount --range $(($WWWMAX+1)) -j MARK

--set-mark 30
iptables -t mangle -A PREROUTING -p tcp -m mport --sports ${PRIO2} -m bcount --range $(($WWWMAX+1)) -j

RETURN
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO2} -m bcount --range $(($WWWMAX+1)) -j MARK

--set-mark 30
iptables -t mangle -A PREROUTING -p udp -m mport --sports ${PRIO2} -m bcount --range $(($WWWMAX+1)) -j

RETURN
iptables -t mangle -A PREROUTING -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -m layer7 --l7proto skypetoskype -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -m layer7 --l7proto shoutcast -j MARK --set-mark 30
iptables -t mangle -A PREROUTING -m layer7 --l7proto httpaudio -j MARK --set-mark 30
iptables -t mangle -A PREROUTING -m layer7 --l7proto httpvideo -j MARK --set-mark 30
iptables -t mangle -A PREROUTING -m layer7 --l7proto exe -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -m layer7 --l7proto rar -j MARK --set-mark 40
iptables -t mangle -A PREROUTING -m layer7 --l7proto zip -j MARK --set-mark 40

iptables -I FORWARD 1 -p tcp --dport 3074 -j DROP
iptables -I FORWARD 2 -p udp --dport 3074 -j DROP
iptables -I FORWARD 3 -p tcp --dport 88 -j DROP