1 | 2 | simandl | #!/bin/sh |
2 | | | # |
3 | | | # CZFree.Net RFC-QoS script |
4 | | | # |
5 | 26 | simandl | # date: 30/06/2008 |
6 | 28 | simandl | # authors: Rakerihoo, Fyzik, Libor, Dzus, Bonez, Simandl, Danny, Sinda |
7 | 2 | simandl | # references: http://www.lartc.org/ |
8 | | | # http://luxik.cdi.cz/~devik/qos/htb/ |
9 | 28 | simandl | # http://connected.prosek.czf/forum/showthread.php?s=&threadid=9 |
10 | 13 | simandl | # http://www.simandl.cz/stranky/linux/qos/soubory/qos_base |
11 | 4 | simandl | # version: 2.1.6 |
12 | 29 | simandl | # ps ver : 0.1.9 |
13 | 2 | simandl | # |
14 | | | # Changelog |
15 | | | # |
16 | 61 | simandl | # 12/10/10 [simandl] port pro mumble 64738 |
17 | 60 | simandl | # 12/10/10 [simandl] uprava ip adres LOTRO |
18 | 59 | simandl | # 02/09/10 [simandl] pridan port 9987 pro ts3 a 3784 pro ventrilo |
19 | 58 | simandl | # 12/08/10 [simandl] pridana ip 213.168.165.12 sip.fayn.cz |
20 | 56 | simandl | # 03/08/10 [simandl] StarCraft II port 1119 |
21 | 57 | simandl | # 28/05/10 [sinda] podpora pro VoIP ipex.cz (voip.pe3ny.net) |
22 | 54 | sinda | # 28/04/09 [sinda] podpora pro hru rFactor (TCP 34447, UDP 34397) |
23 | 53 | sinda | # 14/04/09 [sinda] rtp ha-vel oprava prefixu 28 -> 24 |
24 | 52 | sinda | # 05/04/09 [sinda] VATSIM Microsoft Flight simulator FS2004 (TCP/UDP 6809, 6073, 3782 a 3290) |
25 | 51 | sinda | # 25/03/09 [sinda] VoIP IP addr for sip.volny.cz (rtp servery) |
26 | 50 | simandl | # 20/03/09 [simandl] VoIP IP addr for sip.volny.cz |
27 | 49 | sinda | # 18/03/09 [sinda] podpora ip RTP pro VoIP od t-com.sk (195.146.137.186/31 TCP/UDP) |
28 | 48 | simandl | # 13/03/09 [simandl] OpenVPN presunuto do web tridy |
29 | 47 | sinda | # 03/03/09 [sinda] podpora obecne pro PS3 (TCP: 5223, 10070-10080, UDP: 3478-3479, 3658, 3678, 10070-10080) |
30 | 46 | sinda | # 03/03/09 [sinda] uprava ceil trid, snaha o rozliseni preferenci |
31 | | | # 03/03/09 [sinda] oprava podpory pro Battlefield 2 (TCP 16567, 16667) |
32 | 45 | sinda | # 26/02/09 [sinda] podpora pro Vonage voip, UDP vse z 69.59.241/24 |
33 | 44 | simandl | # 11/02/09 [simandl] za provoz na 802.cz povazovano vse v subnetu 212.71.146.128/26 |
34 | | | # 10/02/09 [simandl] doplnena podpora pro Cisco VPN |
35 | 41 | simandl | # 09/02/09 [sinda] doplnena podpora pro Call of Duty 4 (na PS3) - UDP: 3074, 3075, 3080 |
36 | 40 | sinda | # 02/02/09 [sinda] doplnena podpora pro nntps a vnc do tridy 40 (data transfer) |
37 | 39 | simandl | # 25/01/09 [simandl] doplnena podpora pro svn port 3690 |
38 | 38 | simandl | # 14/01/09 [sinda] doplnena podpora pro hru "Sniper Elite" porty UDP 21540 a 54468 |
39 | | | # 13/01/09 [sinda] doplnena podpora pro RTP dle ip operatora systinet.com a rozsireni portu OpenVPN o 1194/UDP |
40 | 37 | simandl | # 07/01/09 [simandl] doplnena podpora pro hru "World Of Warcraft" porty 6112 a 6881-6999 |
41 | 34 | simandl | # 23/12/08 [simandl] podpora pro ventrilo |
42 | 31 | simandl | # 04/12/08 [sinda] doplnena podpora pro RTP dle ip operatoru fayn.cz, mujtelefon.cz, netphone.cz, aps.sbohempevnalinko.cz, fax.sipcz.net |
43 | 32 | simandl | # 01/12/08 [sinda] File download over http do class airfree (TERASPACE-GMBH, yandex.ru, ...) |
44 | 30 | simandl | # 04/11/08 [simandl] podpora pro hry "Battlefield" a "Call of Duty" |
45 | 29 | simandl | # 13/10/08 [simandl] podpora pro hru "Warhammer Online" |
46 | 28 | simandl | # 28/09/08 [simandl] doplneni chybejicich autoru a zmena v references 10.24.1.2 na connected.prosek.czf |
47 | 27 | simandl | # 05/08/08 [simandl] podpora pro Americas Army |
48 | 26 | simandl | # 30/06/08 [simandl] podpora pro L2TP port 1701 UDP |
49 | 25 | simandl | # 09/03/08 [simandl] podpora pro noncontrib |
50 | 23 | simandl | # 01/12/07 [simandl] doplnena podpora pro hru "World Of Warcraft" 8085 3724 |
51 | 19 | simandl | # 09/08/07 [sinda] doplnena podpora pro hru "Counter-Strike Source" UDP 270xx |
52 | 18 | simandl | # 26/07/07 [sinda] doplnena podpora pro RTP ha-vel.cz a 802.cz dle ip adresy rtp serveru operatora |
53 | 15 | simandl | # 31/08/06 [simandl] doplnena podpora pro definici rychlosti a delitelu pro kazdy iface zvlast v souboru iface_conf |
54 | 14 | simandl | # 14/07/06 [sinda] doplneny porty pro hru Quake 3 arena |
55 | 13 | simandl | # 17/01/06 [simandl] doplneny TOSy pro ha-vel a hlas.802.cz do VoIP tridy 50 |
56 | | | # 12/12/05 [simandl] preskupeny protokoly trid - 40 mail&data 50 voip 60 web&squid - tak aby byly rovnomerne vyuzite |
57 | 10 | simandl | # 23/11/05 [simandl] doplneny porty pro Lineage2 a Teamspeak |
58 | 9 | simandl | # 22/11/05 [danny] DSCP/ToS filtry pro SIP/RTP (VoIP), maximum reliability [DEV] |
59 | 8 | simandl | # 20/11/05 [simandl] doplnen port pro RTP |
60 | 6 | simandl | # 14/11/05 [simandl] doplneny porty pro SIP a gnomemeeting |
61 | 5 | simandl | # 08/11/05 [simandl] doplneny porty pro H.323 |
62 | | | # 19/08/05 [simandl] doplneny porty pro hru DarkEden |
63 | 4 | simandl | # 30/10/04 [dzus] oprava parseru MTU, vylepseni kontroly konfig. souboru |
64 | | | # 27/10/04 [bonez] OpenVPN pridano do data transfer class |
65 | | | # 05/06/04 [dzus] do interactive class pridan BZFlag, uprava parseru konfig souboru |
66 | 2 | simandl | # 18/02/04 [dzus] SCP zarazeno do download class (rozliseno podle TOS maximize throughput) |
67 | | | # 04/01/04 [dzus] podpora pro Jedi Knight, oprava prio u filtru, oprava filtru na FTP, zruseni PPTP class |
68 | | | # 20/11/03 [dzus] zrusena H323 class, pridan filtr na TCP ACK, nastaveni quantum podle MTU |
69 | | | # 28/09/03 [dzus] oprava bugu ve filtrech (bez prio to nechodi dobre) |
70 | | | # 27/09/03 [dzus] konfigurace interfacu se nacita z ext souboru, pridan TOS minimize delay filtr |
71 | | | # 20/09/03 [dzus] vyhazeni marku z IPtables, nyni pouze filtry v tc |
72 | | | # 01/09/03 [dzus] vynechani internetoveho rozhrani z konfigurace |
73 | | | # 07/08/03 [fyzik] preference Inetoveho traffiku |
74 | | | # 31/07/03 [fyzik] podpora pro HL@tchor, airfree, fixes |
75 | | | # 05/05/03 [fyzik] podpora pro IRC, PPTP, H323, LDAP, DC, NTP |
76 | | | # 04/05/03 [fyzik] napsal uvod |
77 | | | # 01/05/03 [fyzik] non-CZF-RFC, inspirovan Liborovym Heaven QoS |
78 | | | # 00/03/03 [Rakerihoo] napsal RFC-QoS :) |
79 | | | # |
80 | | | # ToDo |
81 | | | # * zkusit a otestovat podtridy CZF-transfer, CZF-klient, CZF-shared a markovanat podle MAC |
82 | | | # * pridat podporu ostatnich interaktivnich games |
83 | | | |
84 | | | |
85 | | | ### Configuration START |
86 | | | |
87 | 21 | simandl | IFACECONFFILE='/etc/qos/iface_conf' |
88 | | | IPADDRFILE="/etc/qos/ip_adresy" |
89 | 2 | simandl | |
90 | 15 | simandl | #default speeds and dividers |
91 | | | DNONCZFSPD='64' |
92 | 25 | simandl | DNONCONTRIBSPD='64' |
93 | 18 | simandl | DAIRFREESPD='2048' |
94 | 15 | simandl | DSSHDIV='2' |
95 | | | DPINGDIV='2' |
96 | | | DINTERACTDIV='2' |
97 | | | DVOIPDIV='2' |
98 | | | DWWWDIV='2' |
99 | | | DXFERDIV='4' |
100 | | | DDFLTDIV='8' |
101 | 13 | simandl | |
102 | 2 | simandl | ### Configuration STOP |
103 | | | |
104 | | | if [ ! -f $IFACECONFFILE ] |
105 | | | then |
106 | | | echo "Interface configuration file doesn't exist - program terminated" 1>&2 |
107 | | | exit 1 |
108 | | | fi |
109 | | | |
110 | 4 | simandl | IFACECONF=`grep -v '^[[:space:]]*#' $IFACECONFFILE` |
111 | | | IFACECONF=`echo $IFACECONF | sed -e 's/[[:space:]]*}[[:space:]]*/}\\\n/g'` |
112 | | | FACES=`echo -e $IFACECONF | sed -e 's/^[[:space:]]*interface[[:space:]]\+\([[:alnum:]]\+\).*/\1/;t;d'` |
113 | 2 | simandl | |
114 | | | echo "Applying CZF-QOS rules" |
115 | | | |
116 | | | echo "-Set global variables" |
117 | | | IPTABLES="`which iptables`" |
118 | | | TC="`which tc`" |
119 | | | IP="`which ip`" |
120 | | | IPT_RESTORE="`which iptables-restore`" |
121 | | | |
122 | | | STOCHASIS="sfq perturb 10" |
123 | | | |
124 | | | QUANTUMOFFS="500" |
125 | | | |
126 | | | #$IPT_RESTORE < /etc/network/iptables |
127 | | | |
128 | | | echo "-Remove Qdisc root classes" |
129 | | | for FACE in ${FACES} ; do |
130 | | | $TC qdisc del dev ${FACE} root &>/dev/null |
131 | 15 | simandl | #echo $FACE |
132 | 2 | simandl | done |
133 | | | |
134 | | | ## qoseni podle IP - priklad |
135 | | | if [ -f $IPADDRFILE ] |
136 | | | then |
137 | 4 | simandl | NONCZF="`sed -e 's/^[[:space:]]*\([[:digit:].,/]\+\)[[:space:]].*NONCZF[[:space:]]*\+/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
138 | | | NONCZF="$NONCZF `sed -e 's/^.*[[:space:]]\+NONCZF[[:space:]]\+\([[:digit:].,/]\+\)[[:space:]]*/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
139 | 25 | simandl | NONCONTRIB="`sed -e 's/^[[:space:]]*\([[:digit:].,/]\+\)[[:space:]].*NONCONTRIB[[:space:]]*\+/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
140 | | | NONCONTRIB="$NONCONTRIB `sed -e 's/^.*[[:space:]]\+NONCONTRIB[[:space:]]\+\([[:digit:].,/]\+\)[[:space:]]*/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
141 | 4 | simandl | AIRFREE="`sed -e 's/^[[:space:]]*\([[:digit:].,/]\+\)[[:space:]].*AIRFREE[[:space:]]*\+/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
142 | | | AIRFREE="$AIRFREE `sed -e 's/^.*[[:space:]]\+AIRFREE[[:space:]]\+\([[:digit:].,/]\+\)[[:space:]]*/\1/;t repl;d;: repl;y/,/ /' $IPADDRFILE`" |
143 | 2 | simandl | fi |
144 | | | |
145 | | | set_qos_classes () { |
146 | | | echo "-Initializing QoS_base rules on interface $FACE (speed $SPEED)" |
147 | | | |
148 | | | $TC qdisc add dev ${FACE} root handle 1: htb default 300 r2q 2 |
149 | | | $TC class add dev ${FACE} parent 1: classid 1:1 htb rate $((${SPEED}/2))kbit ceil ${SPEED}kbit burst 15k quantum ${QUANTUM} |
150 | 32 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:5 htb rate 64kbit ceil $((${SPEED}/${SSHDIV}))kbit burst 5k prio 1 # SSH class |
151 | 38 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:10 htb rate 192kbit ceil $((${SPEED}/${INTERACTDIV}))kbit burst 5k prio 1 # interactive class |
152 | 46 | sinda | $TC class add dev ${FACE} parent 1:1 classid 1:20 htb rate 64kbit ceil $((${SPEED}/${PINGDIV}))kbit burst 5k prio 0 |
153 | | | $TC class add dev ${FACE} parent 1:1 classid 1:30 htb rate 64kbit ceil 128kbit burst 5k prio 0 # routing class |
154 | | | $TC class add dev ${FACE} parent 1:1 classid 1:40 htb rate 48kbit ceil $((${SPEED}/${XFERDIV}))kbit burst 5k prio 4 # email & data transfer class |
155 | 38 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:50 htb rate 192kbit ceil $((${SPEED}/${VOIPDIV}))kbit burst 5k prio 0 # voip class |
156 | 46 | sinda | $TC class add dev ${FACE} parent 1:1 classid 1:60 htb rate 48kbit ceil $((${SPEED}/${WWWDIV}))kbit burst 8k prio 3 # web & squid class |
157 | 13 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:300 htb rate 32kbit ceil $((${SPEED}/${DFLTDIV}))kbit burst 1k prio 5 # default trafic class |
158 | 2 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:666 htb rate 32kbit ceil ${NONCZFSPD}kbit burst 1k prio 5 # unsupported trafic class |
159 | | | $TC class add dev ${FACE} parent 1:1 classid 1:667 htb rate 32kbit ceil ${AIRFREESPD}kbit burst 1k prio 4 # local wireless free band |
160 | 25 | simandl | $TC class add dev ${FACE} parent 1:1 classid 1:668 htb rate 32kbit ceil ${NONCONTRIBSPD}kbit burst 1k prio 5 # non contributors trafic class |
161 | 4 | simandl | # $TC class add dev ${FACE} parent 1:1 classid 1:999 htb rate 32kbit ceil $((${SPEED}/2))kbit burst 8k prio 4 # Inet traffic class |
162 | 2 | simandl | |
163 | | | $TC qdisc add dev ${FACE} parent 1:5 handle 5: $STOCHASIS # SSH sub-classes |
164 | | | $TC qdisc add dev ${FACE} parent 1:10 handle 10: $STOCHASIS # interactive sub-classes |
165 | | | $TC qdisc add dev ${FACE} parent 1:20 handle 20: $STOCHASIS # ping sub-classes |
166 | | | $TC qdisc add dev ${FACE} parent 1:30 handle 30: $STOCHASIS # routing sub-classes |
167 | 13 | simandl | $TC qdisc add dev ${FACE} parent 1:40 handle 40: $STOCHASIS # email & data transfer sub-classes |
168 | | | $TC qdisc add dev ${FACE} parent 1:50 handle 50: $STOCHASIS # voip sub-classes |
169 | | | $TC qdisc add dev ${FACE} parent 1:60 handle 60: $STOCHASIS # web & squid sub-classes |
170 | 2 | simandl | $TC qdisc add dev ${FACE} parent 1:300 handle 300: $STOCHASIS # default class |
171 | 25 | simandl | $TC qdisc add dev ${FACE} parent 1:666 handle 666: $STOCHASIS # unsupported |
172 | | | $TC qdisc add dev ${FACE} parent 1:667 handle 667: $STOCHASIS # local wireless |
173 | | | $TC qdisc add dev ${FACE} parent 1:668 handle 668: $STOCHASIS # non contributor class |
174 | 4 | simandl | # $TC qdisc add dev ${FACE} parent 1:999 handle 999: $STOCHASIS # Inet traffic |
175 | 2 | simandl | |
176 | | | |
177 | | | ## SSH class |
178 | | | # SSH |
179 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 3 u32 match ip sport 22 0xffff match ip protocol 0x6 0xff flowid 1:5 |
180 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 3 u32 match ip dport 22 0xffff match ip protocol 0x6 0xff flowid 1:5 |
181 | | | |
182 | | | ## Interactive class |
183 | 13 | simandl | # NTP |
184 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 123 0xffff match ip protocol 0x6 0xff flowid 1:10 |
185 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 123 0xffff match ip protocol 0x6 0xff flowid 1:10 |
186 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 123 0xffff match ip protocol 0x11 0xff flowid 1:10 |
187 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 123 0xffff match ip protocol 0x11 0xff flowid 1:10 |
188 | 9 | simandl | # DNS |
189 | 2 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 53 0xffff match ip protocol 0x6 0xff flowid 1:10 |
190 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 53 0xffff match ip protocol 0x6 0xff flowid 1:10 |
191 | | | # IRC |
192 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 194 0xffff match ip protocol 0x6 0xff flowid 1:10 |
193 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 194 0xffff match ip protocol 0x6 0xff flowid 1:10 |
194 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
195 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
196 | | | # LDAP, LDAPs |
197 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 389 0xffff match ip protocol 0x6 0xff flowid 1:10 |
198 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 389 0xffff match ip protocol 0x6 0xff flowid 1:10 |
199 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 636 0xffff match ip protocol 0x6 0xff flowid 1:10 |
200 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 636 0xffff match ip protocol 0x6 0xff flowid 1:10 |
201 | | | # GAMES |
202 | 38 | simandl | # Sniper Elite |
203 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 21540 0xffff match ip protocol 0x11 0xff flowid 1:10 |
204 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 21540 0xffff match ip protocol 0x11 0xff flowid 1:10 |
205 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 54468 0xffff match ip protocol 0x11 0xff flowid 1:10 |
206 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 54468 0xffff match ip protocol 0x11 0xff flowid 1:10 |
207 | 23 | simandl | # World Of Warcraft |
208 | 36 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8085 0xffff flowid 1:10 |
209 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8085 0xffff flowid 1:10 |
210 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3724 0xffff flowid 1:10 |
211 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3724 0xffff flowid 1:10 |
212 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6112 0xffff flowid 1:10 |
213 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6112 0xffff flowid 1:10 |
214 | 36 | simandl | #6881..6999 is covered by (6880..6911 + 6912..6975 + 6976..7007) |
215 | 38 | simandl | # $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6880 0xffe0 flowid 1:10 |
216 | | | # $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6880 0xffe0 flowid 1:10 |
217 | 36 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6912 0xffc0 flowid 1:10 |
218 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6912 0xffc0 flowid 1:10 |
219 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6976 0xffe0 flowid 1:10 |
220 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6976 0xffe0 flowid 1:10 |
221 | 14 | simandl | # vietcong |
222 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5425 0xffff match ip protocol 0x11 0xff flowid 1:10 |
223 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5425 0xffff match ip protocol 0x11 0xff flowid 1:10 |
224 | 7 | simandl | # LINEAGE2 |
225 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 2106 0xffff match ip protocol 0x11 0xff flowid 1:10 |
226 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 2106 0xffff match ip protocol 0x11 0xff flowid 1:10 |
227 | 2 | simandl | # Half-life |
228 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27015 0xffff match ip protocol 0x11 0xff flowid 1:10 |
229 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27015 0xffff match ip protocol 0x11 0xff flowid 1:10 |
230 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27016 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
231 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27016 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
232 | 4 | simandl | # UT2003, UT2004 |
233 | 2 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 7777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
234 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 7777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
235 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 7778 0xffff match ip protocol 0x11 0xff flowid 1:10 |
236 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 7778 0xffff match ip protocol 0x11 0xff flowid 1:10 |
237 | 4 | simandl | # BZFlag |
238 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5154 0xffff match ip protocol 0x11 0xff flowid 1:10 |
239 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5154 0xffff match ip protocol 0x11 0xff flowid 1:10 |
240 | 2 | simandl | # JEDI KNIGHT |
241 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28060 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
242 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28060 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
243 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28062 0xffff match ip protocol 0x11 0xff flowid 1:10 |
244 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28062 0xffff match ip protocol 0x11 0xff flowid 1:10 |
245 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
246 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
247 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
248 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
249 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28080 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
250 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28080 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
251 | 5 | simandl | # Dark Eden |
252 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9997 0xffff match ip protocol 0x11 0xff flowid 1:10 |
253 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9997 0xffff match ip protocol 0x11 0xff flowid 1:10 |
254 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9998 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
255 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9998 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
256 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9858 0xffff match ip protocol 0x11 0xff flowid 1:10 |
257 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9858 0xffff match ip protocol 0x11 0xff flowid 1:10 |
258 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9650 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
259 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9650 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
260 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 4056 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
261 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 4056 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
262 | 14 | simandl | # Quake 3 arena |
263 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27960 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
264 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27960 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
265 | 19 | simandl | # Counter-Strike Source |
266 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27000 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
267 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27008 0xffc0 match ip protocol 0x11 0xff flowid 1:10 |
268 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27072 0xfff0 match ip protocol 0x11 0xff flowid 1:10 |
269 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27088 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
270 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27096 0xfffc match ip protocol 0x11 0xff flowid 1:10 |
271 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27000 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
272 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27008 0xffc0 match ip protocol 0x11 0xff flowid 1:10 |
273 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27072 0xfff0 match ip protocol 0x11 0xff flowid 1:10 |
274 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27088 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
275 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27096 0xfffc match ip protocol 0x11 0xff flowid 1:10 |
276 | 5 | simandl | # H323 |
277 | 9 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 389 0xffff match ip protocol 0x11 0xff flowid 1:10 |
278 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 389 0xffff match ip protocol 0x11 0xff flowid 1:10 |
279 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 522 0xffff match ip protocol 0x11 0xff flowid 1:10 |
280 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 522 0xffff match ip protocol 0x11 0xff flowid 1:10 |
281 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1503 0xffff match ip protocol 0x11 0xff flowid 1:10 |
282 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1503 0xffff match ip protocol 0x11 0xff flowid 1:10 |
283 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1720 0xffff match ip protocol 0x11 0xff flowid 1:10 |
284 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1720 0xffff match ip protocol 0x11 0xff flowid 1:10 |
285 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1731 0xffff match ip protocol 0x11 0xff flowid 1:10 |
286 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1731 0xffff match ip protocol 0x11 0xff flowid 1:10 |
287 | 10 | simandl | # Lineage2 |
288 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 7777 0xffff match ip protocol 0x6 0xff flowid 1:10 |
289 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 7777 0xffff match ip protocol 0x6 0xff flowid 1:10 |
290 | | | # Teamspeak |
291 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8767 0xffff match ip protocol 0x11 0xff flowid 1:10 |
292 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8767 0xffff match ip protocol 0x11 0xff flowid 1:10 |
293 | 26 | simandl | # L2TP |
294 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1701 0xffff match ip protocol 0x11 0xff flowid 1:10 |
295 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1701 0xffff match ip protocol 0x11 0xff flowid 1:10 |
296 | 27 | simandl | # Americas Army |
297 | | | #UDP |
298 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1716 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
299 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1716 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
300 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1718 0xffff match ip protocol 0x11 0xff flowid 1:10 |
301 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1718 0xffff match ip protocol 0x11 0xff flowid 1:10 |
302 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
303 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8777 0xffff match ip protocol 0x11 0xff flowid 1:10 |
304 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 27900 0xffff match ip protocol 0x11 0xff flowid 1:10 |
305 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 27900 0xffff match ip protocol 0x11 0xff flowid 1:10 |
306 | | | #TCP |
307 | | | #14200 |
308 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 14200 0xffff match ip protocol 0x6 0xff flowid 1:10 |
309 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 14200 0xffff match ip protocol 0x6 0xff flowid 1:10 |
310 | | | #20024 .. 20031 |
311 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20024 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
312 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20024 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
313 | | | #20032 .. 20047 |
314 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20032 0xfff0 match ip protocol 0x6 0xff flowid 1:10 |
315 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20032 0xfff0 match ip protocol 0x6 0xff flowid 1:10 |
316 | | | #20048 |
317 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20048 0xffff match ip protocol 0x6 0xff flowid 1:10 |
318 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20048 0xffff match ip protocol 0x6 0xff flowid 1:10 |
319 | 29 | simandl | # Warhammer Online |
320 | | | #TCP |
321 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1380 0xffff match ip protocol 0x6 0xff flowid 1:10 |
322 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1380 0xffff match ip protocol 0x6 0xff flowid 1:10 |
323 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10622 0xffff match ip protocol 0x6 0xff flowid 1:10 |
324 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10622 0xffff match ip protocol 0x6 0xff flowid 1:10 |
325 | | | #UDP 33100-33500 (32768-33791) |
326 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 33100 0xfc00 match ip protocol 0x11 0xff flowid 1:10 |
327 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 33100 0xfc00 match ip protocol 0x11 0xff flowid 1:10 |
328 | 30 | simandl | #Battlefield 2 |
329 | | | #TCP 16567, 16667 |
330 | 46 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 16567 0xffff match ip protocol 0x6 0xff flowid 1:10 |
331 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 16567 0xffff match ip protocol 0x6 0xff flowid 1:10 |
332 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 16667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
333 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 16667 0xffff match ip protocol 0x6 0xff flowid 1:10 |
334 | 30 | simandl | #Call of Duty 4 |
335 | | | #port 28960 TCP a UDP |
336 | 41 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 28960 0xffff flowid 1:10 |
337 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 28960 0xffff flowid 1:10 |
338 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3074 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
339 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3074 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
340 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3080 0xffff match ip protocol 0x11 0xff flowid 1:10 |
341 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3080 0xffff match ip protocol 0x11 0xff flowid 1:10 |
342 | 47 | sinda | # podpora obecne pro PS3 (TCP: 5223, 10070-10080, UDP: 3478-3479, 3658, 3678, 10070-10080) |
343 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5223 0xffff match ip protocol 0x6 0xff flowid 1:10 |
344 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5223 0xffff match ip protocol 0x6 0xff flowid 1:10 |
345 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10070 0xfffe match ip protocol 0x6 0xff flowid 1:10 |
346 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10070 0xfffe match ip protocol 0x6 0xff flowid 1:10 |
347 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10072 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
348 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10072 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
349 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3478 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
350 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3478 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
351 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3658 0xffff match ip protocol 0x11 0xff flowid 1:10 |
352 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3658 0xffff match ip protocol 0x11 0xff flowid 1:10 |
353 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3678 0xffff match ip protocol 0x11 0xff flowid 1:10 |
354 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3678 0xffff match ip protocol 0x11 0xff flowid 1:10 |
355 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
356 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10070 0xfffe match ip protocol 0x11 0xff flowid 1:10 |
357 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
358 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10072 0xfff8 match ip protocol 0x11 0xff flowid 1:10 |
359 | 52 | sinda | # VATSIM Microsoft Flight simulator FS2004 (TCP/UDP 6809, 6073, 3782 a 3290) |
360 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3290 0xffff flowid 1:10 |
361 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3290 0xffff flowid 1:10 |
362 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3782 0xffff flowid 1:10 |
363 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3782 0xffff flowid 1:10 |
364 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6073 0xffff flowid 1:10 |
365 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6073 0xffff flowid 1:10 |
366 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 6809 0xffff flowid 1:10 |
367 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 6809 0xffff flowid 1:10 |
368 | 54 | sinda | # podpora pro hru rFactor (TCP 34447, UDP 34397) |
369 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 34447 0xffff match ip protocol 0x06 0xff flowid 1:10 |
370 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 34447 0xffff match ip protocol 0x06 0xff flowid 1:10 |
371 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 34397 0xffff match ip protocol 0x11 0xff flowid 1:10 |
372 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 34397 0xffff match ip protocol 0x11 0xff flowid 1:10 |
373 | 60 | simandl | # LOTRO - server Snowbourn 99-108 |
374 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 94.75.195.96/28 flowid 1:10 |
375 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 94.75.195.96/28 flowid 1:10 |
376 | 56 | simandl | # podpora pro hru StarCraft II (TCP UDP 1119) |
377 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1119 0xffff flowid 1:10 |
378 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1119 0xffff flowid 1:10 |
379 | 59 | simandl | # podpora pro ts3 (TCP UDP 9987) |
380 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 9987 0xffff flowid 1:10 |
381 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 9987 0xffff flowid 1:10 |
382 | | | # podpora pro ventrilo (TCP UDP 3784) |
383 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3784 0xffff flowid 1:10 |
384 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3784 0xffff flowid 1:10 |
385 | 61 | simandl | # podpora pro mumble (TCP UDP 64738) |
386 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 64738 0xffff flowid 1:10 |
387 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 64738 0xffff flowid 1:10 |
388 | 30 | simandl | |
389 | 2 | simandl | # TCP ACK packets smaller than 64 bytes |
390 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 \ |
391 | | | match ip protocol 6 0xff \ |
392 | | | match u8 0x05 0x0f at 0 \ |
393 | | | match u16 0x0000 0xffc0 at 2 \ |
394 | | | match u8 0x10 0xff at 33 \ |
395 | | | flowid 1:10 |
396 | | | |
397 | | | ## Ping class |
398 | | | # ICMP |
399 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip protocol 0x01 0xff flowid 1:20 |
400 | | | |
401 | | | ## Routing class |
402 | | | # BGP |
403 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 179 0xffff match ip protocol 0x6 0xff flowid 1:30 |
404 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 179 0xffff match ip protocol 0x6 0xff flowid 1:30 |
405 | | | # OSPF |
406 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip protocol 0x59 0xff flowid 1:30 |
407 | | | |
408 | 13 | simandl | ## Email & Data transfer class |
409 | 2 | simandl | # FTP |
410 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 20 0xfffe match ip protocol 0x6 0xff flowid 1:40 |
411 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 20 0xfffe match ip protocol 0x6 0xff flowid 1:40 |
412 | | | # PPTP |
413 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1723 0xffff match ip protocol 0x6 0xff flowid 1:40 |
414 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1723 0xffff match ip protocol 0x6 0xff flowid 1:40 |
415 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1723 0xffff match ip protocol 0x11 0xff flowid 1:40 |
416 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1723 0xffff match ip protocol 0x11 0xff flowid 1:40 |
417 | | | # SCP |
418 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 22 0xffff match ip protocol 0x6 0xff match ip tos 0x08 0xff flowid 1:40 |
419 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 22 0xffff match ip protocol 0x6 0xff match ip tos 0x08 0xff flowid 1:40 |
420 | | | # POP3 |
421 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 110 0xffff match ip protocol 0x6 0xff flowid 1:40 |
422 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 110 0xffff match ip protocol 0x6 0xff flowid 1:40 |
423 | 2 | simandl | # IMAP |
424 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 143 0xffff match ip protocol 0x6 0xff flowid 1:40 |
425 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 143 0xffff match ip protocol 0x6 0xff flowid 1:40 |
426 | 2 | simandl | # SMTP |
427 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 25 0xffff match ip protocol 0x6 0xff flowid 1:40 |
428 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 25 0xffff match ip protocol 0x6 0xff flowid 1:40 |
429 | 2 | simandl | # POP3S |
430 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 995 0xffff match ip protocol 0x6 0xff flowid 1:40 |
431 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 995 0xffff match ip protocol 0x6 0xff flowid 1:40 |
432 | 2 | simandl | # IMAPS |
433 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 993 0xffff match ip protocol 0x6 0xff flowid 1:40 |
434 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 993 0xffff match ip protocol 0x6 0xff flowid 1:40 |
435 | 2 | simandl | # SSMTP |
436 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 465 0xffff match ip protocol 0x6 0xff flowid 1:40 |
437 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 465 0xffff match ip protocol 0x6 0xff flowid 1:40 |
438 | 2 | simandl | # rsync |
439 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 673 0xffff match ip protocol 0x6 0xff flowid 1:40 |
440 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 673 0xffff match ip protocol 0x6 0xff flowid 1:40 |
441 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 673 0xffff match ip protocol 0x11 0xff flowid 1:40 |
442 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 673 0xffff match ip protocol 0x11 0xff flowid 1:40 |
443 | 2 | simandl | # CVS |
444 | 13 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 873 0xffff match ip protocol 0x6 0xff flowid 1:40 |
445 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 873 0xffff match ip protocol 0x6 0xff flowid 1:40 |
446 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 873 0xffff match ip protocol 0x11 0xff flowid 1:40 |
447 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 873 0xffff match ip protocol 0x11 0xff flowid 1:40 |
448 | 39 | simandl | # SVN |
449 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3690 0xffff flowid 1:40 |
450 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3690 0xffff flowid 1:40 |
451 | 40 | sinda | # NNTP over SSL |
452 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 563 0xffff flowid 1:40 |
453 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 563 0xffff flowid 1:40 |
454 | | | # VNC |
455 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5900 0xffff flowid 1:40 |
456 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5900 0xffff flowid 1:40 |
457 | 2 | simandl | |
458 | 13 | simandl | ## VOIP class |
459 | 33 | simandl | # SIP |
460 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5060 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
461 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5060 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
462 | | | # RTP |
463 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8000 0xffff match ip protocol 0x11 0xff flowid 1:50 |
464 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8000 0xffff match ip protocol 0x11 0xff flowid 1:50 |
465 | 38 | simandl | # Skype typeofservice mark |
466 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x20 0xff flowid 1:50 #Skype? |
467 | 13 | simandl | # VoIP typeofservice mark |
468 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x68 0xff flowid 1:50 #SIP |
469 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0xb8 0xff flowid 1:50 #RTP |
470 | | | # VoIP typeofservice mark for RTP ha-vel.cz |
471 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x16 0xff flowid 1:50 #RTP |
472 | 13 | simandl | # TOS mimimize delay - VoIP typeofservice mark for RTP vox.802.cz |
473 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip tos 0x10 0xff flowid 1:50 |
474 | 18 | simandl | # VoIP IP addr for RTP ha-vel.cz |
475 | 53 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 217.66.161.0/24 flowid 1:50 #RTP |
476 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 217.66.161.0/24 flowid 1:50 #RTP |
477 | 18 | simandl | # VoIP IP addr for RTP 802.cz |
478 | 44 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 212.71.146.128/26 flowid 1:50 #RTP rtp.802.cz |
479 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 212.71.146.128/26 flowid 1:50 #RTP rtp.802.cz |
480 | 50 | simandl | # VoIP IP addr for sip.volny.cz |
481 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 195.122.207.107 flowid 1:50 |
482 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 195.122.207.107 flowid 1:50 |
483 | 51 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 195.122.201.50/31 flowid 1:50 |
484 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 195.122.201.50/31 flowid 1:50 |
485 | 31 | simandl | # VoIP IP addr for others RTP |
486 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 62.168.42.145 flowid 1:50 #sip2.fayn.cz |
487 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 62.168.42.145 flowid 1:50 #sip2.fayn.cz |
488 | 58 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 213.168.165.12 flowid 1:50 #sip.fayn.cz |
489 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 213.168.165.12 flowid 1:50 #sip.fayn.cz |
490 | 31 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 82.208.46.240 flowid 1:50 #sip.mujtelefon.cz |
491 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 82.208.46.240 flowid 1:50 #sip.mujtelefon.cz |
492 | 33 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 212.20.119.40/29 flowid 1:50 #sip1.netphone.cz |
493 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 212.20.119.40/29 flowid 1:50 #sip1.netphone.cz |
494 | 31 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 81.91.216.18 flowid 1:50 #aps.sbohempevnalinko.cz |
495 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 81.91.216.18 flowid 1:50 #aps.sbohempevnalinko.cz |
496 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 81.91.216.11 flowid 1:50 #fax.sipcz.net |
497 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 81.91.216.11 flowid 1:50 #fax.sipcz.net |
498 | 45 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 69.59.241.0/24 match ip protocol 0x11 0xff flowid 1:50 # Vonage |
499 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 69.59.241.0/24 match ip protocol 0x11 0xff flowid 1:50 # Vonage |
500 | 38 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 193.86.76.226 match ip protocol 0x11 0xff flowid 1:50 #ustredna.systinet.com |
501 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 193.86.76.226 match ip protocol 0x11 0xff flowid 1:50 #ustredna.systinet.com |
502 | 49 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 195.146.137.186/31 flowid 1:50 # t-com.sk |
503 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 195.146.137.186/31 flowid 1:50 # t-com.sk |
504 | 57 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 213.168.162.0/24 flowid 1:50 # VoIP ipex.cz |
505 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 213.168.162.0/24 flowid 1:50 # VoIP ipex.cz |
506 | 33 | simandl | # gnomemeeting |
507 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 30000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
508 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 30000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
509 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 30008 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
510 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 30008 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
511 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 30010 0xffff match ip protocol 0x11 0xff flowid 1:50 |
512 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 30010 0xffff match ip protocol 0x11 0xff flowid 1:50 |
513 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
514 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5000 0xfff8 match ip protocol 0x11 0xff flowid 1:50 |
515 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5010 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
516 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5010 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
517 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5012 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
518 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5012 0xfffe match ip protocol 0x11 0xff flowid 1:50 |
519 | 34 | simandl | #ventrilo 3784 .. 3791 |
520 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3784 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
521 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3784 0xfff8 match ip protocol 0x6 0xff flowid 1:10 |
522 | 13 | simandl | |
523 | | | ## Web & Squid class |
524 | | | # HTTP |
525 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 80 0xffff match ip protocol 0x6 0xff flowid 1:60 |
526 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 80 0xffff match ip protocol 0x6 0xff flowid 1:60 |
527 | | | # HTTPS |
528 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 443 0xffff match ip protocol 0x6 0xff flowid 1:60 |
529 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 443 0xffff match ip protocol 0x6 0xff flowid 1:60 |
530 | | | # WebCache |
531 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 8080 0xffff match ip protocol 0x6 0xff flowid 1:60 |
532 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 8080 0xffff match ip protocol 0x6 0xff flowid 1:60 |
533 | 2 | simandl | # HTTP port |
534 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3128 0xffff match ip protocol 0x6 0xff flowid 1:60 |
535 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3128 0xffff match ip protocol 0x6 0xff flowid 1:60 |
536 | | | # ICP port |
537 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 3130 0xffff match ip protocol 0x6 0xff flowid 1:60 |
538 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 3130 0xffff match ip protocol 0x6 0xff flowid 1:60 |
539 | 33 | simandl | # VPN KB.CZ |
540 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip src 194.228.113.135 match ip sport 4500 0xffff match ip protocol 0x11 0xff flowid 1:60 |
541 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dst 194.228.113.135 match ip dport 4500 0xffff match ip protocol 0x11 0xff flowid 1:60 |
542 | 42 | simandl | # Cisco VPN |
543 | 43 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 500 0xffff flowid 1:60 |
544 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 500 0xffff flowid 1:60 |
545 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 4500 0xffff flowid 1:60 |
546 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 4500 0xffff flowid 1:60 |
547 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 10000 0xffff flowid 1:60 |
548 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 10000 0xffff flowid 1:60 |
549 | 48 | simandl | # OpenVPN |
550 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 5000 0xffff match ip protocol 0x11 0xff flowid 1:60 |
551 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 5000 0xffff match ip protocol 0x11 0xff flowid 1:60 |
552 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1194 0xffff match ip protocol 0x11 0xff flowid 1:60 |
553 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1194 0xffff match ip protocol 0x11 0xff flowid 1:60 |
554 | 2 | simandl | |
555 | 33 | simandl | |
556 | 2 | simandl | ## Unsupported class |
557 | 33 | simandl | # Kazaa |
558 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip sport 1214 0xffff match ip protocol 0x6 0xff flowid 1:666 |
559 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 2 u32 match ip dport 1214 0xffff match ip protocol 0x6 0xff flowid 1:666 |
560 | | | |
561 | | | ## Airfree class |
562 | 31 | simandl | # File download over http |
563 | 32 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 62.67.46.0/24 flowid 1:667 # TERASPACE-GMBH |
564 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 62.67.50.0/24 flowid 1:667 # TERASPACE-GMBH |
565 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 62.140.31.0/24 flowid 1:667 # TERASPACE-GMBH |
566 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 64.211.146.0/24 flowid 1:667 # TERASPACE-GMBH |
567 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.152.62.0/24 flowid 1:667 # TERASPACE-GMBH |
568 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.231.24.0/24 flowid 1:667 # TERASPACE-GMBH |
569 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.231.41.0/24 flowid 1:667 # TERASPACE-GMBH |
570 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.239.137.0/24 flowid 1:667 # TERASPACE-GMBH |
571 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 80.239.236.0/24 flowid 1:667 # TERASPACE-GMBH |
572 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 82.129.39.0/24 flowid 1:667 # PA-TERASPACE-COGENT-1 |
573 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.131.0/24 flowid 1:667 # TERASPACE-GMBH |
574 | 45 | sinda | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.149.0/24 flowid 1:667 # TERASPACE-GMBH |
575 | 32 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.151.0/24 flowid 1:667 # TERASPACE-GMBH |
576 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.122.152.0/23 flowid 1:667 # TERASPACE-GMBH |
577 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 195.219.1.0/24 flowid 1:667 # TERASPACE-GB |
578 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 206.57.14.0/24 flowid 1:667 # TERAS |
579 | 35 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 212.162.2.0/24 flowid 1:667 # TERASPACE-GMBH |
580 | 33 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 212.162.63.0/24 flowid 1:667 # TERASPACE-GMBH |
581 | 32 | simandl | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 77.88.62.0/24 flowid 1:667 # yandex.ru |
582 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 83.229.252.0/23 flowid 1:667 # MCHOST-SYN-NET |
583 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 85.17.172.0/24 flowid 1:667 # LEASEWEB (filefactory.com) |
584 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 94.75.218.0/24 flowid 1:667 # LEASEWEB |
585 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 78.140.128.0/18 flowid 1:667 # NL-WEBAZILLA |
586 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 88.86.100.160/27 flowid 1:667 # uloz.to |
587 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src 88.208.16.0/20 flowid 1:667 # HALDEX-NET (letitbit.net) |
588 | 31 | simandl | |
589 | 2 | simandl | # IP range of DHCP for airfree AP on this router |
590 | | | for ipaddr in $AIRFREE |
591 | | | do |
592 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src $ipaddr flowid 1:667 |
593 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip dst $ipaddr flowid 1:667 |
594 | | | done |
595 | | | # non-CZF-RFC - violators of RFCs |
596 | | | for ipaddr in $NONCZF |
597 | | | do |
598 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src $ipaddr flowid 1:666 |
599 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip dst $ipaddr flowid 1:666 |
600 | | | done |
601 | 25 | simandl | # non-contributors |
602 | | | for ipaddr in $NONCONTRIB |
603 | | | do |
604 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip src $ipaddr flowid 1:668 |
605 | | | $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 u32 match ip dst $ipaddr flowid 1:668 |
606 | | | done |
607 | 2 | simandl | |
608 | 4 | simandl | ## Internet class |
609 | 2 | simandl | # IPtables rule |
610 | | | # $IPTABLES -t mangle -A FORWARD -s ! 10.0.0.0/8 -o ${FACE} -j MARK --set-mark 999 |
611 | | | # $IPTABLES -t mangle -A FORWARD -d ! 10.0.0.0/8 -o ${FACE} -j MARK --set-mark 999 |
612 | | | # IPtables mark filter |
613 | | | # $TC filter add dev ${FACE} parent 1:0 protocol ip prio 1 handle 999 fw flowid 1:999 |
614 | | | } |
615 | | | |
616 | | | for FACE in $FACES |
617 | | | do |
618 | 4 | simandl | if [ -z "`$IP l | grep $FACE[:@]`" ] |
619 | | | then |
620 | | | echo "Interface $FACE doesn't exist" |
621 | | | continue |
622 | | | fi |
623 | 2 | simandl | TYPE=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*type[[:space:]]\+\([[:alpha:]]\+\).*}.*/\1/"` |
624 | | | if [ "$TYPE" != 'transit' ] |
625 | | | then |
626 | | | continue |
627 | | | fi |
628 | | | SPEED=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*speed[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
629 | | | QUANTUM=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*quantum[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
630 | | | |
631 | | | if [ -z "$QUANTUM" ] |
632 | | | then |
633 | 4 | simandl | MTU=`$IP l | grep $FACE[:@] | sed -e "s/^.*mtu[[:space:]]\+\([[:digit:]]\+\).*/\1/"` |
634 | 2 | simandl | QUANTUM=$(($QUANTUMOFFS+$MTU)) |
635 | | | fi |
636 | 15 | simandl | |
637 | | | NONCZFSPD=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*NONCZFSPD[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
638 | | | if [ -z $NONCZFSPD ] ; then NONCZFSPD=$DNONCZFSPD ; fi |
639 | | | |
640 | | | AIRFREESPD=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*AIRFREESPD[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
641 | | | if [ -z $AIRFREESPD ] ; then AIRFREESPD=$DAIRFREESPD ; fi |
642 | | | |
643 | 25 | simandl | NONCONTRIBSPD=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*NONCONTRIBSPD[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
644 | | | if [ -z $NONCONTRIBSPD ] ; then NONCONTRIBSPD=$DNONCONTRIBSPD ; fi |
645 | | | |
646 | 15 | simandl | SSHDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*SSHDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
647 | | | if [ -z $SSHDIV ] ; then SSHDIV=$DSSHDIV ; fi |
648 | | | |
649 | | | PINGDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*PINGDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
650 | | | if [ -z $PINGDIV ] ; then PINGDIV=$DPINGDIV ; fi |
651 | | | |
652 | | | INTERACTDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*INTERACTDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
653 | | | if [ -z $INTERACTDIV ] ; then INTERACTDIV=$DINTERACTDIV ; fi |
654 | | | |
655 | | | VOIPDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*VOIPDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
656 | | | if [ -z $VOIPDIV ] ; then VOIPDIV=$DVOIPDIV ; fi |
657 | | | |
658 | | | WWWDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*WWWDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
659 | | | if [ -z $WWWDIV ] ; then WWWDIV=$DWWWDIV ; fi |
660 | | | |
661 | | | XFERDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*XFERDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
662 | | | if [ -z $XFERDIV ] ; then XFERDIV=$DXFERDIV ; fi |
663 | | | |
664 | | | DFLTDIV=`echo -e $IFACECONF | grep $FACE | sed -e "s/^.*{.*DFLTDIV[[:space:]]\+\([[:digit:]]\+\).*}.*/\1/;t;d"` |
665 | | | if [ -z $DFLTDIV ] ; then DFLTDIV=$DDFLTDIV ; fi |
666 | | | |
667 | | | #echo $SPEED $NONCZFSPD $AIRFREESPD $SSHDIV $PINGDIV $INTERACTDIV $VOIPDIV $WWWDIV $XFERDIV $DFLTDIV |
668 | 2 | simandl | set_qos_classes |
669 | | | done |
670 | | | |
671 | | | exit 0 |