Even een rotkick voor me eigen.
Ik ben creatief aan de gang gegaan
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
| #!/bin/bash
iptables -t mangle -F
iptables -t mangle -A PREROUTING -p tcp --sport 22 -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p tcp --sport 22 -j RETURN
iptables -t mangle -A PREROUTING -p tcp --dport 22 -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p tcp --dport 22 -j RETURN
iptables -t mangle -A POSTROUTING -p tcp --sport 22 -j MARK --set-mark 1
iptables -t mangle -A POSTROUTING -p tcp --sport 22 -j RETURN
iptables -t mangle -A POSTROUTING -p tcp --dport 22 -j MARK --set-mark 1
iptables -t mangle -A POSTROUTING -p tcp --dport 22 -j RETURN
iptables -t mangle -A PREROUTING -p icmp -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -p icmp -j RETURN
iptables -t mangle -A POSTROUTING -p icmp -j MARK --set-mark 3
iptables -t mangle -A POSTROUTING -p icmp -j RETURN
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d ! 192.168.1.0/24 -p tcp --dport 1024:65535 --sport 1024:65535 -j MARK --set-mark 90
iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -d ! 192.168.1.0/24 -p tcp --dport 1024:65535 --sport 1024:65535 -j RETURN
iptables -t mangle -A POSTROUTING -d 192.168.1.0/24 -s ! 192.168.1.0/24 -p tcp --dport 1024:65535 --sport 1024:65535 -m mark ! --mark 90 -j MARK --set-mark 91
iptables -t mangle -A POSTROUTING -d 192.168.1.0/24 -s ! 192.168.1.0/24 -p tcp --dport 1024:65535 --sport 1024:65535 -m mark ! --mark 90 -j RETURN
tc qdisc del dev ppp0 root
tc qdisc del dev eth0 root
tc qdisc add dev eth0 root handle 1:0 htb default 2
#tc class add dev eth0 parent 1: classid 1:5 htb rate 128kbit prio 0
#tc qdisc add dev eth0 parent 1:5 handle 5: sfq perturb 10
#tc filter add dev eth0 parent 1:0 prio 0 protocol ip handle 5 fw flowid 1:5
tc class add dev eth0 parent 1:0 classid 1:1 htb rate 100mbit
tc class add dev eth0 parent 1:1 classid 1:91 htb rate 1mbit
tc class add dev eth0 parent 1:1 classid 1:90 htb rate 128kbit
tc class add dev eth0 parent 1:1 classid 1:2 htb prio 0 rate 100mbit
tc qdisc add dev eth0 parent 1:91 handle 91: sfq perturb 2
tc filter add dev eth0 parent 1:0 prio 0 protocol ip handle 91 fw flowid 1:91
tc qdisc add dev eth0 parent 1:90 handle 90: sfq perturb 2
tc filter add dev eth0 parent 1:0 prio 0 protocol ip handle 90 fw flowid 1:90
tc filter add dev eth0 parent 1:0 protocol ip handle 1 fw flowid 1:2
tc filter add dev eth0 parent 1:0 protocol ip handle 2 fw flowid 1:2
tc filter add dev eth0 parent 1:0 protocol ip handle 3 fw flowid 1:2 |
Dit zou er grofweg voor moeten zorgen dat TCP verbindingen van een unprivileged port naar een unprivileged port gecapped worden op down 1mbit en up 128kbit. (p2p enzo

)
Maar het lijkt er op dat inkomend en uitgaand gewoon op de hoop gesmeten worden.
tc -d -s class ls dev eth0 heeft dan ook de volgende output:
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
| class htb 1:1 root rate 100Mbit ceil 100Mbit burst 51587b/8 mpu 0b overhead 0b cburst 51587b/8 mpu 0b overhead 0b level 7
Sent 31411058 bytes 65260 pkts (dropped 0, overlimits 0 requeues 0)
rate 49280bit 160pps
lended: 0 borrowed: 0 giants: 0
tokens: 4220 ctokens: 4220
class htb 1:2 parent 1:1 prio 0 quantum 200000 rate 100Mbit ceil 100Mbit burst 51587b/8 mpu 0b overhead 0b cburst 51587b/8 mpu 0b overhead 0b level 0
Sent 21492878 bytes 56158 pkts (dropped 0, overlimits 0 requeues 0)
rate 17090bit 131pps
lended: 56158 borrowed: 0 giants: 0
tokens: 4220 ctokens: 4220
class htb 1:91 parent 1:1 leaf 91: prio 0 quantum 3200 rate 256Kbit ceil 1Mbit burst 1727b/8 mpu 0b overhead 0b cburst 1727b/8 mpu 0b overhead 0b level 0
Sent 10317484 bytes 9227 pkts (dropped 2211, overlimits 0 requeues 0)
rate 32060bit 28pps backlog 125p
lended: 9102 borrowed: 0 giants: 0
tokens: -95154 ctokens: -95154
class htb 1:90 parent 1:1 leaf 90: prio 0 quantum 1600 rate 128Kbit ceil 128Kbit burst 1663b/8 mpu 0b overhead 0b cburst 1663b/8 mpu 0b overhead 0b level 0
Sent 0 bytes 0 pkts (dropped 0, overlimits 0 requeues 0)
lended: 0 borrowed: 0 giants: 0
tokens: 106496 ctokens: 106496 |
Wat kan er hier fout aan zijn?