| 1 | 2 | simandl | #!/bin/sh |
| 2 | | | # |
| 3 | | | # CZFree.Net RFC-QoS script |
| 4 | | | # |
| 5 | 26 | simandl | # date: 30/06/2008 |
| 6 | 28 | simandl | # authors: Rakerihoo, Fyzik, Libor, Dzus, Bonez, Simandl, Danny, Sinda |
| 7 | 2 | simandl | # references: http://www.lartc.org/ |
| 8 | | | # http://luxik.cdi.cz/~devik/qos/htb/ |
| 9 | 28 | simandl | # http://connected.prosek.czf/forum/showthread.php?s=&threadid=9 |
| 10 | 13 | simandl | # http://www.simandl.cz/stranky/linux/qos/soubory/qos_base |
| 11 | 4 | simandl | # version: 2.1.6 |
| 12 | 29 | simandl | # ps ver : 0.1.9 |
| 13 | 2 | simandl | # |
| 14 | | | # Changelog |
| 15 | | | # |
| 16 | 51 | sinda | # 25/03/09 [sinda] VoIP IP addr for sip.volny.cz (rtp servery) |
| 17 | 50 | simandl | # 20/03/09 [simandl] VoIP IP addr for sip.volny.cz |
| 18 | 49 | sinda | # 18/03/09 [sinda] podpora ip RTP pro VoIP od t-com.sk (195.146.137.186/31 TCP/UDP) |
| 19 | 48 | simandl | # 13/03/09 [simandl] OpenVPN presunuto do web tridy |
| 20 | 47 | sinda | # 03/03/09 [sinda] podpora obecne pro PS3 (TCP: 5223, 10070-10080, UDP: 3478-3479, 3658, 3678, 10070-10080) |
| 21 | 46 | sinda | # 03/03/09 [sinda] uprava ceil trid, snaha o rozliseni preferenci |
| 22 | | | # 03/03/09 [sinda] oprava podpory pro Battlefield 2 (TCP 16567, 16667) |
| 23 | 45 | sinda | # 26/02/09 [sinda] podpora pro Vonage voip, UDP vse z 69.59.241/24 |
| 24 | 44 | simandl | # 11/02/09 [simandl] za provoz na 802.cz povazovano vse v subnetu 212.71.146.128/26 |
| 25 | | | # 10/02/09 [simandl] doplnena podpora pro Cisco VPN |
| 26 | 41 | simandl | # 09/02/09 [sinda] doplnena podpora pro Call of Duty 4 (na PS3) - UDP: 3074, 3075, 3080 |
| 27 | 40 | sinda | # 02/02/09 [sinda] doplnena podpora pro nntps a vnc do tridy 40 (data transfer) |
| 28 | 39 | simandl | # 25/01/09 [simandl] doplnena podpora pro svn port 3690 |
| 29 | 38 | simandl | # 14/01/09 [sinda] doplnena podpora pro hru "Sniper Elite" porty UDP 21540 a 54468 |
| 30 | | | # 13/01/09 [sinda] doplnena podpora pro RTP dle ip operatora systinet.com a rozsireni portu OpenVPN o 1194/UDP |
| 31 | 37 | simandl | # 07/01/09 [simandl] doplnena podpora pro hru "World Of Warcraft" porty 6112 a 6881-6999 |
| 32 | 34 | simandl | # 23/12/08 [simandl] podpora pro ventrilo |
| 33 | 31 | simandl | # 04/12/08 [sinda] doplnena podpora pro RTP dle ip operatoru fayn.cz, mujtelefon.cz, netphone.cz, aps.sbohempevnalinko.cz, fax.sipcz.net |
| 34 | 32 | simandl | # 01/12/08 [sinda] File download over http do class airfree (TERASPACE-GMBH, yandex.ru, ...) |
| 35 | 30 | simandl | # 04/11/08 [simandl] podpora pro hry "Battlefield" a "Call of Duty" |
| 36 | 29 | simandl | # 13/10/08 [simandl] podpora pro hru "Warhammer Online" |
| 37 | 28 | simandl | # 28/09/08 [simandl] doplneni chybejicich autoru a zmena v references 10.24.1.2 na connected.prosek.czf |
| 38 | 27 | simandl | # 05/08/08 [simandl] podpora pro Americas Army |
| 39 | 26 | simandl | # 30/06/08 [simandl] podpora pro L2TP port 1701 UDP |
| 40 | 25 | simandl | # 09/03/08 [simandl] podpora pro noncontrib |
| 41 | 23 | simandl | # 01/12/07 [simandl] doplnena podpora pro hru "World Of Warcraft" 8085 3724 |
| 42 | 19 | simandl | # 09/08/07 [sinda] doplnena podpora pro hru "Counter-Strike Source" UDP 270xx |
| 43 | 18 | simandl | # 26/07/07 [sinda] doplnena podpora pro RTP ha-vel.cz a 802.cz dle ip adresy rtp serveru operatora |
| 44 | 15 | simandl | # 31/08/06 [simandl] doplnena podpora pro definici rychlosti a delitelu pro kazdy iface zvlast v souboru iface_conf |
| 45 | 14 | simandl | # 14/07/06 [sinda] doplneny porty pro hru Quake 3 arena |
| 46 | 13 | simandl | # 17/01/06 [simandl] doplneny TOSy pro ha-vel a hlas.802.cz do VoIP tridy 50 |
| 47 | | | # 12/12/05 [simandl] preskupeny protokoly trid - 40 mail&data 50 voip 60 web&squid - tak aby byly rovnomerne vyuzite |
| 48 | 10 | simandl | # 23/11/05 [simandl] doplneny porty pro Lineage2 a Teamspeak |
| 49 | 9 | simandl | # 22/11/05 [danny] DSCP/ToS filtry pro SIP/RTP (VoIP), maximum reliability [DEV] |
| 50 | 8 | simandl | # 20/11/05 [simandl] doplnen port pro RTP |
| 51 | 6 | simandl | # 14/11/05 [simandl] doplneny porty pro SIP a gnomemeeting |
| 52 | 5 | simandl | # 08/11/05 [simandl] doplneny porty pro H.323 |
| 53 | | | # 19/08/05 [simandl] doplneny porty pro hru DarkEden |
| 54 | 4 | simandl | # 30/10/04 [dzus] oprava parseru MTU, vylepseni kontroly konfig. souboru |
| 55 | | | # 27/10/04 [bonez] OpenVPN pridano do data transfer class |
| 56 | | | # 05/06/04 [dzus] do interactive class pridan BZFlag, uprava parseru konfig souboru |
| 57 | 2 | simandl | # 18/02/04 [dzus] SCP zarazeno do download class (rozliseno podle TOS maximize throughput) |
| 58 | | | # 04/01/04 [dzus] podpora pro Jedi Knight, oprava prio u filtru, oprava filtru na FTP, zruseni PPTP class |
| 59 | | | # 20/11/03 [dzus] zrusena H323 class, pridan filtr na TCP ACK, nastaveni quantum podle MTU |
| 60 | | | # 28/09/03 [dzus] oprava bugu ve filtrech (bez prio to nechodi dobre) |
| 61 | | | # 27/09/03 [dzus] konfigurace interfacu se nacita z ext souboru, pridan TOS minimize delay filtr |
| 62 | | | # 20/09/03 [dzus] vyhazeni marku z IPtables, nyni pouze filtry v tc |
| 63 | | | # 01/09/03 [dzus] vynechani internetoveho rozhrani z konfigurace |
| 64 | | | # 07/08/03 [fyzik] preference Inetoveho traffiku |
| 65 | | | # 31/07/03 [fyzik] podpora pro HL@tchor, airfree, fixes |
| 66 | | | # 05/05/03 [fyzik] podpora pro IRC, PPTP, H323, LDAP, DC, NTP |
| 67 | | | # 04/05/03 [fyzik] napsal uvod |
| 68 | | | # 01/05/03 [fyzik] non-CZF-RFC, inspirovan Liborovym Heaven QoS |
| 69 | | | # 00/03/03 [Rakerihoo] napsal RFC-QoS :) |
| 70 | | | # |
| 71 | | | # ToDo |
| 72 | | | # * zkusit a otestovat podtridy CZF-transfer, CZF-klient, CZF-shared a markovanat podle MAC |
| 73 | | | # * pridat podporu ostatnich interaktivnich games |
| 74 | | | |
| 75 | | | |
| 76 | | | ### Configuration START |
| 77 | | | |
| 78 | 21 | simandl | IFACECONFFILE='/etc/qos/iface_conf' |
| 79 | | | IPADDRFILE="/etc/qos/ip_adresy" |
| 80 | 2 | simandl | |
| 81 | 15 | simandl | #default speeds and dividers |
| 82 | | | DNONCZFSPD='64' |
| 83 | 25 | simandl | DNONCONTRIBSPD='64' |
| 84 | 18 | simandl | DAIRFREESPD='2048' |
| 85 | 15 | simandl | DSSHDIV='2' |
| 86 | | | DPINGDIV='2' |
| 87 | | | DINTERACTDIV='2' |
| 88 | | | DVOIPDIV='2' |
| 89 | | | DWWWDIV='2' |
| 90 | | | DXFERDIV='4' |
| 91 | | | DDFLTDIV='8' |
| 92 | 13 | simandl | |
| 93 | 2 | simandl | ### Configuration STOP |
| 94 | | | |
| 95 | | | if [ ! -f $IFACECONFFILE ] |
| 96 | | | then |
| 97 | | | echo "Interface configuration file doesn't exist - program terminated" 1>&2 |
| 98 | | | exit 1 |
| 99 | | | fi |
| 100 | | | |
| 101 | 4 | simandl | IFACECONF=`grep -v '^[[:space:]]*#' $IFACECONFFILE` |
| 102 | | | IFACECONF=`echo $IFACECONF | sed -e 's/[[:space:]]*}[[:space:]]*/}\\\n/g'` |
| 103 | | | FACES=`echo -e $IFACECONF | sed -e 's/^[[:space:]]*interface[[:space:]]\+\([[:alnum:]]\+\).*/\1/;t;d'` |
| 104 | 2 | simandl | |
| 105 | | | echo "Applying CZF-QOS rules" |
| 106 | | | |
| 107 | | | echo "-Set global variables" |
| 108 | | | IPTABLES="`which iptables`" |
| 109 | | | TC="`which tc`" |
| 110 | | | IP="`which ip`" |
| 111 | | | IPT_RESTORE="`which iptables-restore`" |
| 112 | | | |
| 113 | | | STOCHASIS="sfq perturb 10" |
| 114 | | | |
| 115 | | | QUANTUMOFFS="500" |
| 116 | | | |
| 117 | | | #$IPT_RESTORE < /etc/network/iptables |
| 118 | | | |
| 119 | | | echo "-Remove Qdisc root classes" |
| 120 | | | for FACE in ${FACES} ; do |
| 121 | | | $TC qdisc del dev ${FACE} root &>/dev/null |
| 122 | 15 | simandl | #echo $FACE |
| 123 | 2 | simandl | done |
| 124 | | | |
| 125 | | | ## qoseni podle IP - priklad |
| 126 | | | if [ -f $IPADDRFILE ] |
| 127 | | | then |
| 128 | 4 | simandl | NONCZF="`sed -e 's/^[[:space:]]*\([[:digit:].,/]\+\)[[:space:]].*NONCZF[[:space:]]*\+/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
| 129 | | | NONCZF="$NONCZF `sed -e 's/^.*[[:space:]]\+NONCZF[[:space:]]\+\([[:digit:].,/]\+\)[[:space:]]*/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
| 130 | 25 | simandl | NONCONTRIB="`sed -e 's/^[[:space:]]*\([[:digit:].,/]\+\)[[:space:]].*NONCONTRIB[[:space:]]*\+/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
| 131 | | | NONCONTRIB="$NONCONTRIB `sed -e 's/^.*[[:space:]]\+NONCONTRIB[[:space:]]\+\([[:digit:].,/]\+\)[[:space:]]*/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
| 132 | 4 | simandl | AIRFREE="`sed -e 's/^[[:space:]]*\([[:digit:].,/]\+\)[[:space:]].*AIRFREE[[:space:]]*\+/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
| 133 | | | AIRFREE="$AIRFREE `sed -e 's/^.*[[:space:]]\+AIRFREE[[:space:]]\+\([[:digit:].,/]\+\)[[:space:]]*/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
| 134 | 2 | simandl | fi |
| 135 | | | |
| 136 | | | set_qos_classes () { |
| 137 | | | echo "-Initializing QoS_base rules on interface $FACE (speed $SPEED)" |
| 138 | | | |
| 139 | | | $TC qdisc add dev ${FACE} root handle 1: htb default 300 r2q 2 |
| 140 | | | $TC class add dev ${FACE} parent 1: classid 1:1 htb rate $((${SPEED}/2))kbit ceil ${SPEED}kbit burst 15k quantum ${QUANTUM} |
| 141 | 32 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:5 htb rate 64kbit ceil $((${SPEED}/${SSHDIV}))kbit burst 5k prio 1 # SSH class |
| 142 | 38 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:10 htb rate 192kbit ceil $((${SPEED}/${INTERACTDIV}))kbit burst 5k prio 1 # interactive class |
| 143 | 46 | sinda | $TC class add dev ${FACE} parent 1:1 classid 1:20 htb rate 64kbit ceil $((${SPEED}/${PINGDIV}))kbit burst 5k prio 0 |
| 144 | | | $TC class add dev ${FACE} parent 1:1 classid 1:30 htb rate 64kbit ceil 128kbit burst 5k prio 0 # routing class |
| 145 | | | $TC class add dev ${FACE} parent 1:1 classid 1:40 htb rate 48kbit ceil $((${SPEED}/${XFERDIV}))kbit burst 5k prio 4 # email & data transfer class |
| 146 | 38 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:50 htb rate 192kbit ceil $((${SPEED}/${VOIPDIV}))kbit burst 5k prio 0 # voip class |
| 147 | 46 | sinda | $TC class add dev ${FACE} parent 1:1 classid 1:60 htb rate 48kbit ceil $((${SPEED}/${WWWDIV}))kbit burst 8k prio 3 # web & squid class |
| 148 | 13 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:300 htb rate 32kbit ceil $((${SPEED}/${DFLTDIV}))kbit burst 1k prio 5 # default trafic class |
| 149 | 2 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:666 htb rate 32kbit ceil ${NONCZFSPD}kbit burst 1k prio 5 # unsupported trafic class |
| 150 | | | $TC class add dev ${FACE} parent 1:1 classid 1:667 htb rate 32kbit ceil ${AIRFREESPD}kbit burst 1k prio 4 # local wireless free band |
| 151 | 25 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:668 htb rate 32kbit ceil ${NONCONTRIBSPD}kbit burst 1k prio 5 # non contributors trafic class |
| 152 | 4 | simandl | # $TC class add dev ${FACE} parent 1:1 classid 1:999 htb rate 32kbit ceil $((${SPEED}/2))kbit burst 8k prio 4 # Inet traffic class |
| 153 | 2 | simandl | |
| 154 | | | $TC qdisc add dev ${FACE} parent 1:5 handle 5: $STOCHASIS # SSH sub-classes |
| 155 | | | $TC qdisc add dev ${FACE} parent 1:10 handle 10: $STOCHASIS # interactive sub-classes |
| 156 | | | $TC qdisc add dev ${FACE} parent 1:20 handle 20: $STOCHASIS # ping sub-classes |
| 157 | | | $TC qdisc add dev ${FACE} parent 1:30 handle 30: $STOCHASIS # routing sub-classes |
| 158 | 13 | simandl | $TC qdisc add dev ${FACE} parent 1:40 handle 40: $STOCHASIS # email & data transfer sub-classes |
| 159 | | | $TC qdisc add dev ${FACE} parent 1:50 handle 50: $STOCHASIS # voip sub-classes |
| 160 | | | $TC qdisc add dev ${FACE} parent 1:60 handle 60: $STOCHASIS # web & squid sub-classes |
| 161 | 2 | simandl | $TC qdisc add dev ${FACE} parent 1:300 handle 300: $STOCHASIS # default class |
| 162 | 25 | simandl | $TC qdisc add dev ${FACE} parent 1:666 handle 666: $STOCHASIS # unsupported |
| 163 | | | $TC qdisc add dev ${FACE} parent 1:667 handle 667: $STOCHASIS # local wireless |
| 164 | | | $TC qdisc add dev ${FACE} parent 1:668 handle 668: $STOCHASIS # non contributor class |
| 165 | 4 | simandl | # $TC qdisc add dev ${FACE} parent 1:999 handle 999: $STOCHASIS # Inet traffic |
| 166 | 2 | simandl | |
| 167 | | | |
| 168 | | | ## SSH class |
| 169 | | | # SSH |
| 170 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 3 u32 match ip sport 22 0xffff match ip protocol 0x6 0xff flowid 1:5 |
| 171 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 3 u32 match ip dport 22 0xffff match ip protocol 0x6 0xff flowid 1:5 |
| 172 | | | |
| 173 | | | ## Interactive class |
| 174 | 13 | simandl | # NTP |
| 175 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 123 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 176 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 123 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 177 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 123 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 178 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 123 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 179 | 9 | simandl | # DNS |
| 180 | 2 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 53 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 181 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 53 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 182 | | | # IRC |
| 183 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 194 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 184 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 194 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 185 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 186 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 187 | | | # LDAP, LDAPs |
| 188 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 389 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 189 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 389 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 190 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 636 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 191 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 636 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 192 | | | # GAMES |
| 193 | 38 | simandl | # Sniper Elite |
| 194 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 21540 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 195 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 21540 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 196 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 54468 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 197 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 54468 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 198 | 23 | simandl | # World Of Warcraft |
| 199 | 36 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8085 0xffff flowid 1:10 |
| 200 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8085 0xffff flowid 1:10 |
| 201 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3724 0xffff flowid 1:10 |
| 202 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3724 0xffff flowid 1:10 |
| 203 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6112 0xffff flowid 1:10 |
| 204 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6112 0xffff flowid 1:10 |
| 205 | 36 | simandl | #6881..6999 is covered by (6880..6911 + 6912..6975 + 6976..7007) |
| 206 | 38 | simandl | # $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6880 0xffe0 flowid 1:10 |
| 207 | | | # $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6880 0xffe0 flowid 1:10 |
| 208 | 36 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6912 0xffc0 flowid 1:10 |
| 209 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6912 0xffc0 flowid 1:10 |
| 210 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6976 0xffe0 flowid 1:10 |
| 211 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6976 0xffe0 flowid 1:10 |
| 212 | 14 | simandl | # vietcong |
| 213 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5425 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 214 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5425 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 215 | 7 | simandl | # LINEAGE2 |
| 216 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 2106 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 217 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 2106 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 218 | 2 | simandl | # Half-life |
| 219 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27015 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 220 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27015 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 221 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27016 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 222 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27016 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 223 | 4 | simandl | # UT2003, UT2004 |
| 224 | 2 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 7777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 225 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 7777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 226 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 7778 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 227 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 7778 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 228 | 4 | simandl | # BZFlag |
| 229 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5154 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 230 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5154 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 231 | 2 | simandl | # JEDI KNIGHT |
| 232 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28060 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 233 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28060 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 234 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28062 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 235 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28062 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 236 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 237 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 238 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 239 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 240 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28080 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 241 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28080 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 242 | 5 | simandl | # Dark Eden |
| 243 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9997 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 244 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9997 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 245 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9998 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 246 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9998 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 247 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9858 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 248 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9858 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 249 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9650 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 250 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9650 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 251 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 4056 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 252 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 4056 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 253 | 14 | simandl | # Quake 3 arena |
| 254 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27960 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 255 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27960 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 256 | 19 | simandl | # Counter-Strike Source |
| 257 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27000 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 258 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27008 0xffc0 match ip protocol 0x11 0xff flowid 1:10 |
| 259 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27072 0xfff0 match ip protocol 0x11 0xff flowid 1:10 |
| 260 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27088 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 261 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27096 0xfffc match ip protocol 0x11 0xff flowid 1:10 |
| 262 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27000 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 263 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27008 0xffc0 match ip protocol 0x11 0xff flowid 1:10 |
| 264 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27072 0xfff0 match ip protocol 0x11 0xff flowid 1:10 |
| 265 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27088 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 266 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27096 0xfffc match ip protocol 0x11 0xff flowid 1:10 |
| 267 | 5 | simandl | # H323 |
| 268 | 9 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 389 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 269 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 389 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 270 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 522 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 271 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 522 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 272 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1503 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 273 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1503 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 274 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1720 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 275 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1720 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 276 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1731 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 277 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1731 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 278 | 10 | simandl | # Lineage2 |
| 279 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 7777 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 280 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 7777 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 281 | | | # Teamspeak |
| 282 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8767 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 283 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8767 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 284 | 26 | simandl | # L2TP |
| 285 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1701 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 286 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1701 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 287 | 27 | simandl | # Americas Army |
| 288 | | | #UDP |
| 289 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1716 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 290 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1716 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 291 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1718 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 292 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1718 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 293 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 294 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 295 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27900 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 296 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27900 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 297 | | | #TCP |
| 298 | | | #14200 |
| 299 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 14200 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 300 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 14200 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 301 | | | #20024 .. 20031 |
| 302 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20024 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
| 303 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20024 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
| 304 | | | #20032 .. 20047 |
| 305 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20032 0xfff0 match ip protocol 0x6 0xff flowid 1:10 |
| 306 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20032 0xfff0 match ip protocol 0x6 0xff flowid 1:10 |
| 307 | | | #20048 |
| 308 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20048 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 309 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20048 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 310 | 29 | simandl | # Warhammer Online |
| 311 | | | #TCP |
| 312 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1380 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 313 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1380 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 314 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10622 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 315 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10622 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 316 | | | #UDP 33100-33500 (32768-33791) |
| 317 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 33100 0xfc00 match ip protocol 0x11 0xff flowid 1:10 |
| 318 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 33100 0xfc00 match ip protocol 0x11 0xff flowid 1:10 |
| 319 | 30 | simandl | #Battlefield 2 |
| 320 | | | #TCP 16567, 16667 |
| 321 | 46 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 16567 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 322 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 16567 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 323 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 16667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 324 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 16667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 325 | 30 | simandl | #Call of Duty 4 |
| 326 | | | #port 28960 TCP a UDP |
| 327 | 41 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28960 0xffff flowid 1:10 |
| 328 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28960 0xffff flowid 1:10 |
| 329 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3074 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 330 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3074 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 331 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3080 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 332 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3080 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 333 | 47 | sinda | # podpora obecne pro PS3 (TCP: 5223, 10070-10080, UDP: 3478-3479, 3658, 3678, 10070-10080) |
| 334 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5223 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 335 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5223 0xffff match ip protocol 0x6 0xff flowid 1:10 |
| 336 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10070 0xfffe match ip protocol 0x6 0xff flowid 1:10 |
| 337 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10070 0xfffe match ip protocol 0x6 0xff flowid 1:10 |
| 338 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10072 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
| 339 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10072 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
| 340 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3478 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 341 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3478 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 342 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3658 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 343 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3658 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 344 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3678 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 345 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3678 0xffff match ip protocol 0x11 0xff flowid 1:10 |
| 346 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 347 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
| 348 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 349 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
| 350 | 30 | simandl | |
| 351 | 2 | simandl | # TCP ACK packets smaller than 64 bytes |
| 352 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 \ |
| 353 | | | match ip protocol 6 0xff \ |
| 354 | | | match u8 0x05 0x0f at 0 \ |
| 355 | | | match u16 0x0000 0xffc0 at 2 \ |
| 356 | | | match u8 0x10 0xff at 33 \ |
| 357 | | | flowid 1:10 |
| 358 | | | |
| 359 | | | ## Ping class |
| 360 | | | # ICMP |
| 361 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip protocol 0x01 0xff flowid 1:20 |
| 362 | | | |
| 363 | | | ## Routing class |
| 364 | | | # BGP |
| 365 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 179 0xffff match ip protocol 0x6 0xff flowid 1:30 |
| 366 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 179 0xffff match ip protocol 0x6 0xff flowid 1:30 |
| 367 | | | # OSPF |
| 368 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip protocol 0x59 0xff flowid 1:30 |
| 369 | | | |
| 370 | 13 | simandl | ## Email & Data transfer class |
| 371 | 2 | simandl | # FTP |
| 372 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20 0xfffe match ip protocol 0x6 0xff flowid 1:40 |
| 373 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20 0xfffe match ip protocol 0x6 0xff flowid 1:40 |
| 374 | | | # PPTP |
| 375 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1723 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 376 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1723 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 377 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1723 0xffff match ip protocol 0x11 0xff flowid 1:40 |
| 378 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1723 0xffff match ip protocol 0x11 0xff flowid 1:40 |
| 379 | | | # SCP |
| 380 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 22 0xffff match ip protocol 0x6 0xff match ip tos 0x08 0xff flowid 1:40 |
| 381 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 22 0xffff match ip protocol 0x6 0xff match ip tos 0x08 0xff flowid 1:40 |
| 382 | | | # POP3 |
| 383 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 110 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 384 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 110 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 385 | 2 | simandl | # IMAP |
| 386 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 143 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 387 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 143 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 388 | 2 | simandl | # SMTP |
| 389 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 25 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 390 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 25 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 391 | 2 | simandl | # POP3S |
| 392 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 995 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 393 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 995 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 394 | 2 | simandl | # IMAPS |
| 395 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 993 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 396 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 993 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 397 | 2 | simandl | # SSMTP |
| 398 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 465 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 399 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 465 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 400 | 2 | simandl | # rsync |
| 401 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 673 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 402 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 673 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 403 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 673 0xffff match ip protocol 0x11 0xff flowid 1:40 |
| 404 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 673 0xffff match ip protocol 0x11 0xff flowid 1:40 |
| 405 | 2 | simandl | # CVS |
| 406 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 873 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 407 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 873 0xffff match ip protocol 0x6 0xff flowid 1:40 |
| 408 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 873 0xffff match ip protocol 0x11 0xff flowid 1:40 |
| 409 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 873 0xffff match ip protocol 0x11 0xff flowid 1:40 |
| 410 | 39 | simandl | # SVN |
| 411 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3690 0xffff flowid 1:40 |
| 412 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3690 0xffff flowid 1:40 |
| 413 | 40 | sinda | # NNTP over SSL |
| 414 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 563 0xffff flowid 1:40 |
| 415 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 563 0xffff flowid 1:40 |
| 416 | | | # VNC |
| 417 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5900 0xffff flowid 1:40 |
| 418 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5900 0xffff flowid 1:40 |
| 419 | 2 | simandl | |
| 420 | 13 | simandl | ## VOIP class |
| 421 | 33 | simandl | # SIP |
| 422 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5060 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 423 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5060 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 424 | | | # RTP |
| 425 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8000 0xffff match ip protocol 0x11 0xff flowid 1:50 |
| 426 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8000 0xffff match ip protocol 0x11 0xff flowid 1:50 |
| 427 | 38 | simandl | # Skype typeofservice mark |
| 428 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x20 0xff flowid 1:50 #Skype? |
| 429 | 13 | simandl | # VoIP typeofservice mark |
| 430 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x68 0xff flowid 1:50 #SIP |
| 431 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0xb8 0xff flowid 1:50 #RTP |
| 432 | | | # VoIP typeofservice mark for RTP ha-vel.cz |
| 433 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x16 0xff flowid 1:50 #RTP |
| 434 | 13 | simandl | # TOS mimimize delay - VoIP typeofservice mark for RTP vox.802.cz |
| 435 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x10 0xff flowid 1:50 |
| 436 | 18 | simandl | # VoIP IP addr for RTP ha-vel.cz |
| 437 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 217.66.161.0/28 flowid 1:50 #RTP |
| 438 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 217.66.161.0/28 flowid 1:50 #RTP |
| 439 | | | # VoIP IP addr for RTP 802.cz |
| 440 | 44 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 212.71.146.128/26 flowid 1:50 #RTP rtp.802.cz |
| 441 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 212.71.146.128/26 flowid 1:50 #RTP rtp.802.cz |
| 442 | 50 | simandl | # VoIP IP addr for sip.volny.cz |
| 443 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 195.122.207.107 flowid 1:50 |
| 444 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 195.122.207.107 flowid 1:50 |
| 445 | 51 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 195.122.201.50/31 flowid 1:50 |
| 446 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 195.122.201.50/31 flowid 1:50 |
| 447 | 31 | simandl | # VoIP IP addr for others RTP |
| 448 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 62.168.42.145 flowid 1:50 #sip2.fayn.cz |
| 449 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 62.168.42.145 flowid 1:50 #sip2.fayn.cz |
| 450 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 82.208.46.240 flowid 1:50 #sip.mujtelefon.cz |
| 451 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 82.208.46.240 flowid 1:50 #sip.mujtelefon.cz |
| 452 | 33 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 212.20.119.40/29 flowid 1:50 #sip1.netphone.cz |
| 453 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 212.20.119.40/29 flowid 1:50 #sip1.netphone.cz |
| 454 | 31 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 81.91.216.18 flowid 1:50 #aps.sbohempevnalinko.cz |
| 455 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 81.91.216.18 flowid 1:50 #aps.sbohempevnalinko.cz |
| 456 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 81.91.216.11 flowid 1:50 #fax.sipcz.net |
| 457 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 81.91.216.11 flowid 1:50 #fax.sipcz.net |
| 458 | 45 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 69.59.241.0/24 match ip protocol 0x11 0xff flowid 1:50 # Vonage |
| 459 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 69.59.241.0/24 match ip protocol 0x11 0xff flowid 1:50 # Vonage |
| 460 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 193.86.76.226 match ip protocol 0x11 0xff flowid 1:50 #ustredna.systinet.com |
| 461 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 193.86.76.226 match ip protocol 0x11 0xff flowid 1:50 #ustredna.systinet.com |
| 462 | 49 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 195.146.137.186/31 flowid 1:50 # t-com.sk |
| 463 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 195.146.137.186/31 flowid 1:50 # t-com.sk |
| 464 | 33 | simandl | # gnomemeeting |
| 465 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 30000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
| 466 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 30000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
| 467 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 30008 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 468 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 30008 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 469 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 30010 0xffff match ip protocol 0x11 0xff flowid 1:50 |
| 470 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 30010 0xffff match ip protocol 0x11 0xff flowid 1:50 |
| 471 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
| 472 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
| 473 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5010 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 474 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5010 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 475 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5012 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 476 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5012 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
| 477 | 34 | simandl | #ventrilo 3784 .. 3791 |
| 478 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3784 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
| 479 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3784 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
| 480 | 13 | simandl | |
| 481 | | | ## Web & Squid class |
| 482 | | | # HTTP |
| 483 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 80 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 484 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 80 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 485 | | | # HTTPS |
| 486 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 443 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 487 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 443 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 488 | | | # WebCache |
| 489 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8080 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 490 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8080 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 491 | 2 | simandl | # HTTP port |
| 492 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3128 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 493 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3128 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 494 | | | # ICP port |
| 495 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3130 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 496 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3130 0xffff match ip protocol 0x6 0xff flowid 1:60 |
| 497 | 33 | simandl | # VPN KB.CZ |
| 498 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 194.228.113.135 match ip sport 4500 0xffff match ip protocol 0x11 0xff flowid 1:60 |
| 499 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 194.228.113.135 match ip dport 4500 0xffff match ip protocol 0x11 0xff flowid 1:60 |
| 500 | 42 | simandl | # Cisco VPN |
| 501 | 43 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 500 0xffff flowid 1:60 |
| 502 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 500 0xffff flowid 1:60 |
| 503 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 4500 0xffff flowid 1:60 |
| 504 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 4500 0xffff flowid 1:60 |
| 505 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10000 0xffff flowid 1:60 |
| 506 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10000 0xffff flowid 1:60 |
| 507 | 48 | simandl | # OpenVPN |
| 508 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5000 0xffff match ip protocol 0x11 0xff flowid 1:60 |
| 509 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5000 0xffff match ip protocol 0x11 0xff flowid 1:60 |
| 510 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1194 0xffff match ip protocol 0x11 0xff flowid 1:60 |
| 511 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1194 0xffff match ip protocol 0x11 0xff flowid 1:60 |
| 512 | 2 | simandl | |
| 513 | 33 | simandl | |
| 514 | 2 | simandl | ## Unsupported class |
| 515 | 33 | simandl | # Kazaa |
| 516 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1214 0xffff match ip protocol 0x6 0xff flowid 1:666 |
| 517 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1214 0xffff match ip protocol 0x6 0xff flowid 1:666 |
| 518 | | | |
| 519 | | | ## Airfree class |
| 520 | 31 | simandl | # File download over http |
| 521 | 32 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 62.67.46.0/24 flowid 1:667 # TERASPACE-GMBH |
| 522 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 62.67.50.0/24 flowid 1:667 # TERASPACE-GMBH |
| 523 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 62.140.31.0/24 flowid 1:667 # TERASPACE-GMBH |
| 524 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 64.211.146.0/24 flowid 1:667 # TERASPACE-GMBH |
| 525 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.152.62.0/24 flowid 1:667 # TERASPACE-GMBH |
| 526 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.231.24.0/24 flowid 1:667 # TERASPACE-GMBH |
| 527 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.231.41.0/24 flowid 1:667 # TERASPACE-GMBH |
| 528 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.239.137.0/24 flowid 1:667 # TERASPACE-GMBH |
| 529 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.239.236.0/24 flowid 1:667 # TERASPACE-GMBH |
| 530 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 82.129.39.0/24 flowid 1:667 # PA-TERASPACE-COGENT-1 |
| 531 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.131.0/24 flowid 1:667 # TERASPACE-GMBH |
| 532 | 45 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.149.0/24 flowid 1:667 # TERASPACE-GMBH |
| 533 | 32 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.151.0/24 flowid 1:667 # TERASPACE-GMBH |
| 534 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.152.0/23 flowid 1:667 # TERASPACE-GMBH |
| 535 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.219.1.0/24 flowid 1:667 # TERASPACE-GB |
| 536 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 206.57.14.0/24 flowid 1:667 # TERAS |
| 537 | 35 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 212.162.2.0/24 flowid 1:667 # TERASPACE-GMBH |
| 538 | 33 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 212.162.63.0/24 flowid 1:667 # TERASPACE-GMBH |
| 539 | 32 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 77.88.62.0/24 flowid 1:667 # yandex.ru |
| 540 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 83.229.252.0/23 flowid 1:667 # MCHOST-SYN-NET |
| 541 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 85.17.172.0/24 flowid 1:667 # LEASEWEB (filefactory.com) |
| 542 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 94.75.218.0/24 flowid 1:667 # LEASEWEB |
| 543 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 78.140.128.0/18 flowid 1:667 # NL-WEBAZILLA |
| 544 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 88.86.100.160/27 flowid 1:667 # uloz.to |
| 545 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 88.208.16.0/20 flowid 1:667 # HALDEX-NET (letitbit.net) |
| 546 | 31 | simandl | |
| 547 | 2 | simandl | # IP range of DHCP for airfree AP on this router |
| 548 | | | for ipaddr in $AIRFREE |
| 549 | | | do |
| 550 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src $ipaddr flowid 1:667 |
| 551 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip dst $ipaddr flowid 1:667 |
| 552 | | | done |
| 553 | | | # non-CZF-RFC - violators of RFCs |
| 554 | | | for ipaddr in $NONCZF |
| 555 | | | do |
| 556 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src $ipaddr flowid 1:666 |
| 557 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip dst $ipaddr flowid 1:666 |
| 558 | | | done |
| 559 | 25 | simandl | # non-contributors |
| 560 | | | for ipaddr in $NONCONTRIB |
| 561 | | | do |
| 562 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src $ipaddr flowid 1:668 |
| 563 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip dst $ipaddr flowid 1:668 |
| 564 | | | done |
| 565 | 2 | simandl | |
| 566 | 4 | simandl | ## Internet class |
| 567 | 2 | simandl | # IPtables rule |
| 568 | | | # $IPTABLES -t mangle -A FORWARD -s ! 10.0.0.0/8 -o ${FACE} -j MARK --set-mark 999 |
| 569 | | | # $IPTABLES -t mangle -A FORWARD -d ! 10.0.0.0/8 -o ${FACE} -j MARK --set-mark 999 |
| 570 | | | # IPtables mark filter |
| 571 | | | # $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 handle 999 fw flowid 1:999 |
| 572 | | | } |
| 573 | | | |
| 574 | | | for FACE in $FACES |
| 575 | | | do |
| 576 | 4 | simandl | if [ -z "`$IP l | grep $FACE[:@]`" ] |
| 577 | | | then |
| 578 | | | echo "Interface $FACE doesn't exist" |
| 579 | | | continue |
| 580 | | | fi |
| 581 | 2 | simandl | TYPE=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*type[[:space:]]\+\([[:alpha:]]\+\).*}.*/\1/"` |
| 582 | | | if [ "$TYPE" != 'transit' ] |
| 583 | | | then |
| 584 | | | continue |
| 585 | | | fi |
| 586 | | | SPEED=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*speed[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 587 | | | QUANTUM=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*quantum[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 588 | | | |
| 589 | | | if [ -z "$QUANTUM" ] |
| 590 | | | then |
| 591 | 4 | simandl | MTU=`$IP l | grep $FACE[:@] | sed -e "s/^.*mtu[[:space:]]\+\([[:digit:]]\+\).*/\1/"` |
| 592 | 2 | simandl | QUANTUM=$(($QUANTUMOFFS+$MTU)) |
| 593 | | | fi |
| 594 | 15 | simandl | |
| 595 | | | NONCZFSPD=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*NONCZFSPD[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 596 | | | if [ -z $NONCZFSPD ] ; then NONCZFSPD=$DNONCZFSPD ; fi |
| 597 | | | |
| 598 | | | AIRFREESPD=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*AIRFREESPD[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 599 | | | if [ -z $AIRFREESPD ] ; then AIRFREESPD=$DAIRFREESPD ; fi |
| 600 | | | |
| 601 | 25 | simandl | NONCONTRIBSPD=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*NONCONTRIBSPD[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 602 | | | if [ -z $NONCONTRIBSPD ] ; then NONCONTRIBSPD=$DNONCONTRIBSPD ; fi |
| 603 | | | |
| 604 | 15 | simandl | SSHDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*SSHDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 605 | | | if [ -z $SSHDIV ] ; then SSHDIV=$DSSHDIV ; fi |
| 606 | | | |
| 607 | | | PINGDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*PINGDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 608 | | | if [ -z $PINGDIV ] ; then PINGDIV=$DPINGDIV ; fi |
| 609 | | | |
| 610 | | | INTERACTDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*INTERACTDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 611 | | | if [ -z $INTERACTDIV ] ; then INTERACTDIV=$DINTERACTDIV ; fi |
| 612 | | | |
| 613 | | | VOIPDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*VOIPDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 614 | | | if [ -z $VOIPDIV ] ; then VOIPDIV=$DVOIPDIV ; fi |
| 615 | | | |
| 616 | | | WWWDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*WWWDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 617 | | | if [ -z $WWWDIV ] ; then WWWDIV=$DWWWDIV ; fi |
| 618 | | | |
| 619 | | | XFERDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*XFERDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 620 | | | if [ -z $XFERDIV ] ; then XFERDIV=$DXFERDIV ; fi |
| 621 | | | |
| 622 | | | DFLTDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*DFLTDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
| 623 | | | if [ -z $DFLTDIV ] ; then DFLTDIV=$DDFLTDIV ; fi |
| 624 | | | |
| 625 | | | #echo $SPEED $NONCZFSPD $AIRFREESPD $SSHDIV $PINGDIV $INTERACTDIV $VOIPDIV $WWWDIV $XFERDIV $DFLTDIV |
| 626 | 2 | simandl | set_qos_classes |
| 627 | | | done |
| 628 | | | |
| 629 | | | exit 0 |
