powiedzmy, ale nie widze filtrów..?!?
start () { stop $IPT -t mangle -N LIMITS $IPT -t mangle -I FORWARD -i $WAN -j LIMITS $IPT -t mangle -I FORWARD -o $WAN -j LIMITS
$IPT -t mangle -I INPUT -p tcp --dport 8080 -j LIMITS >/dev/null 2>&1 $IPT -t mangle -I OUTPUT -p tcp --sport 8080 -j LIMITS >/dev/null 2>&1
# incomming traffic $TC qdisc add dev $LAN root handle 1:0 htb default 3 r2q 1 $TC class add dev $LAN parent 1:0 classid 1:1 htb rate 99000kbit ceil 99000kbit quantum 1500 $TC class add dev $LAN parent 1:1 classid 1:2 htb rate $DOWNLOAD ceil $DOWNLOAD
# outgoing traffic $TC qdisc add dev $WAN root handle 2:0 htb default 11 r2q 1 $TC class add dev $WAN parent 2:0 classid 2:1 htb rate $UPLOAD ceil $UPLOAD $IPT -t mangle -A LIMITS -s 192.168.0.9 -j MARK --set-mark 100
# ADMIN(pelen zakres) $IPT -t mangle -A LIMITS -d 192.168.0.2 -j MARK --set-mark 101 $TC class add dev $WAN parent 2:1 classid 2:101 htb rate 300.00kbit ceil 512.00kbit $BURST prio 2 quantum 1500 $TC qdisc add dev $WAN parent 2:101 esfq perturb 10 hash dst $TC filter add dev $WAN parent 2:0 protocol ip prio 5 handle 101 fw flowid 2:101 $TC class add dev $LAN parent 1:2 classid 1:101 htb rate 500.00kbit ceil 2000.00kbit $BURST prio 2 quantum 1500 $TC qdisc add dev $LAN parent 1:101 esfq perturb 10 hash dst $TC filter add dev $LAN parent 1:0 protocol ip prio 5 handle 101 fw flowid 1:101 $IPT -t mangle -A LIMITS -s 192.168.0.23 -j MARK --set-mark 102
# ZWYKLY UZYTKOWNIK: $IPT -t mangle -A LIMITS -d 192.168.0.6 -j MARK --set-mark 112 $TC class add dev $WAN parent 2:1 classid 2:112 htb rate 25.00kbit ceil 50.00kbit $BURST prio 2 quantum 1500 $TC qdisc add dev $WAN parent 2:112 esfq perturb 10 hash dst $TC filter add dev $WAN parent 2:0 protocol ip prio 5 handle 112 fw flowid 2:112 $TC class add dev $LAN parent 1:2 classid 1:112 htb rate 150.00kbit ceil 200.00kbit $BURST prio 2 quantum 1500 $TC qdisc add dev $LAN parent 1:112 esfq perturb 10 hash dst $TC filter add dev $LAN parent 1:0 protocol ip prio 5 handle 112 fw flowid 1:112 $IPT -t mangle -A LIMITS -s 192.168.0.30 -j MARK --set-mark 113
# UZYTKOWNIK2 (na nim sprawdzam czy dzielenie pasma dziala ;) $IPT -t mangle -A LIMITS -d 192.168.0.30 -j MARK --set-mark 113 $IPT -t filter -I FORWARD -p tcp -s 192.168.0.30 -m connlimit --connlimit-above 35 -j REJECT $TC class add dev $WAN parent 2:1 classid 2:113 htb rate 8.00kbit ceil 32.00kbit $BURST prio 2 quantum 1500 $TC qdisc add dev $WAN parent 2:113 esfq perturb 10 hash dst $TC filter add dev $WAN parent 2:0 protocol ip prio 5 handle 113 fw flowid 2:113 $TC class add dev $LAN parent 1:2 classid 1:113 htb rate 64.00kbit ceil 128.00kbit $BURST prio 2 quantum 1500 $TC qdisc add dev $LAN parent 1:113 esfq perturb 10 hash dst $TC filter add dev $LAN parent 1:0 protocol ip prio 5 handle 113 fw flowid 1:113 }
w takim razie jak to zrobic zeby dzialalo ?
_______________________________________________ lms mailing list lms@lists.lms.org.pl http://lists.lms.org.pl/mailman/listinfo/lms
uczestnicy (1)
-
Łukasz C.