Явно съм малоумен нещо. Имам следната машина, която работи с
radius,pptp. Опитвам се да си разделя peer/international и
от ip-up.local да shape-вам ppp-тата. ip-up.local ми е
следния.
tc=/sbin/tc
dev="$1"
qdisc="$tc qdisc add dev $dev"
class="$tc class add dev $dev"
filter="$tc filter add dev $dev"
i_filter="handle 1 fw"
p_filter="handle 2 fw"
l_filter="handle 3 fw"
int=64kbit
intd=128kbit
peer=128kbit
peerd=256kbit
local=10mbit
$qdisc root handle 1: htb
$qdisc handle ffff: ingress
#International
$class parent 1: classid 1:11 htb quantum 1500 rate $int
ceil $int
$filter parent 1: protocol ip prio 1 $i_filter flowid 1:11
$filter parent ffff: protocol ip prio 1 $i_filter police
rate $intd ceil $intd mtu 1500 flowid 2:11
#Peer
$class parent 1: classid 1:12 htb rate $peer ceil $peer
$filter parent 1: protocol ip prio 1 $p_filter flowid 1:12
$filter parent ffff: protocol prio 1 $p_filter police rate
$peerd ceil $peerd mtu 1500 flowid 2:12
#Local
$class parent 1: classid 1:13 htb rate $local ceil $local
$filter parent 1: protocol ip prio 1 $l_filter flowid 1:13
$filter parent ffff: protocol prio 1 $l_filter police rate
$local ceil $local mtu 1500 flowid 2:13
ето ми и самото разделяне.
for i in `grep -v \# nets`; do
echo iptables -t mangle -A PREROUTING -d $i -j PEERS
>> ipt
echo iptables -t mangle -A PREROUTING -d $i -j
RETURN >> ipt
echo iptables -t mangle -A PREROUTING -s $i -j PEERS
>> ipt
echo iptables -t mangle -A PREROUTING -s $i -j
RETURN >> ipt
done
nl=`cat ipt|wc -l`
if [ $nl -gt 100 ]; then
sh ipt
fi
iptables -t mangle -A PEERS -s random.real.network.16/28 -j
MARK --set-mark 2
iptables -t mangle -A PREROUTING -s
random.real.network.16/28 -j MARK --set-mark 1
iptables -t mangle -A PEERS -d random.real.network.16/28 -j
MARK --set-mark 2
iptables -t mangle -A PREROUTING -d
random.real.network.16/28 -j MARK --set-mark 1
37363 2871K MARK all -- * *
random.real.network.16/28 0.0.0.0/0 MARK set
0x2
26737 4279K MARK all -- * * 0.0.0.0/0
random.real.network.16/28 MARK set 0x2
Проблема ми е че ingress police-те ми явно нещо не са в ред
защото ограничението ми за dl от peer 256kbit но работи на
128kbit.
Ако някой може да ми помогне.
thanks in advance
|