All pastes #27303 Raw Edit

Untitled

public text v1 · immutable
#27303 ·published 2005-11-01 15:41 UTC
rendered paste body
root@r1:~# /etc/init.d/S46qos
iptables: No chain/target/match by that name
root@r1:~# sh -v /tmp/.qos.sh
#!/bin/sh
insmod cls_fw >&- 2>&-
insmod sch_hfsc >&- 2>&-
insmod ipt_CONNMARK >&- 2>&-
insmod ipt_length >&- 2>&-
insmod ipt_limit >&- 2>&-
insmod ipt_tos >&- 2>&-
iptables -t mangle -F
iptables -t mangle -X
tc qdisc del dev ppp0 root
tc qdisc add dev ppp0 root handle 1: hfsc default 1
tc class add dev ppp0 parent 1: classid 1:1 hfsc sc rate 552kbit ul rate 552kbit
tc class add dev ppp0 parent 1:1 classid 1:10 hfsc sc umax 1500b dmax 30ms rate 331kbit ul rate 552kbit
tc filter add dev ppp0 parent 1: prio 1 protocol ip handle 1 fw flowid 1:10
tc filter add dev ppp0 parent 1: prio 1 protocol ip handle 128 fw flowid 1:10
tc class add dev ppp0 parent 1:1 classid 1:20 hfsc sc umax 1500b dmax 100ms rate 165kbit ul rate 524kbit
tc filter add dev ppp0 parent 1: prio 2 protocol ip handle 2 fw flowid 1:20
tc class add dev ppp0 parent 1:1 classid 1:30 hfsc ls umax 1500b dmax 1000ms rate 55kbit ul rate 441kbit
tc filter add dev ppp0 parent 1: prio 3 protocol ip handle 3 fw flowid 1:30
insmod ipt_layer7 >&- 2>&-
insmod ipt_multiport >&- 2>&-
iptables -t mangle -A POSTROUTING -o ppp0 -j CONNMARK --restore-mark
iptables -t mangle -A POSTROUTING -m mark --mark 0 -m layer7 --l7proto edonkey -j MARK --set-mark 3
iptables -t mangle -A POSTROUTING -m mark --mark 0 -p udp -m multiport --dports 53,5190 -j MARK --set-mark 1
iptables -t mangle -A POSTROUTING -m mark --mark 0 -p tcp -m multiport --dports 22,53,5190 -j MARK --set-mark 1
iptables -t mangle -A POSTROUTING -m mark --mark 0 -p tcp -m multiport --dports 993 -j MARK --set-mark 2
iptables -t mangle -A POSTROUTING -o ppp0 -j CONNMARK --save-mark

iptables -t mangle -A POSTROUTING -m mark ! --mark 3 -p tcp --tcp-flags ALL SYN -j MARK --set-mark 128
iptables -t mangle -A POSTROUTING -m mark ! --mark 3 -p tcp --tcp-flags ALL ACK -j MARK --set-mark 128
iptables -t mangle -A POSTROUTING -m mark ! --mark 3 -m tos --tos Minimize-Delay -j MARK --set-mark 128
iptables -t mangle -A POSTROUTING -m mark ! --mark 3 -p icmp --icmp-type echo-request -j MARK --set-mark 128

iptables -t mangle -N BULK_2
iptables -t mangle -A BULK_2 -m limit --limit 20 -j MARK --set-mark 2
iptables: No chain/target/match by that name
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 46 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 50 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 55 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 58 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 60 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 62 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 84 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 86 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 98 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 108 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 117 -j BULK_2
iptables -t mangle -A POSTROUTING -m mark --mark 3 -m length --length 131 -j BULK_2

iptables -t mangle -A POSTROUTING -o ppp0 -m mark --mark 0 -p tcp --dport 0:1024 -j MARK --set-mark 2
iptables -t mangle -A POSTROUTING -o ppp0 -m mark --mark 0 -j MARK --set-mark 3
root@r1:~#