|
脚本写成这样不知道还能不能用?如果可以用的话能不能限制无线的流量呢?我的无线是在eth1接口上的,有线在br0上面。
#--------------------------------------------
#WRT54 Script Generator v1.02
#(C) 2006-2007 Robert "Robson" Mytkowski
#--------------------------------------------
TCA="tc class add dev eth1"
TFA="tc filter add dev eth1"
TQA="tc qdisc add dev eth1"
S购物="sfq perturb 10"
tc qdisc del dev eth1 root
tc qdisc add dev eth1 root handle 1: htb
tc class add dev eth1 parent 1: classid 1:1 htb rate 5500kbit
$TCA parent 1:1 classid 1:10 htb rate 1024kbit ceil 2048kbit prio 2
$TCA parent 1:1 classid 1:11 htb rate 1024kbit ceil 2048kbit prio 2
$TQA parent 1:10 handle 10: $S购物
$TQA parent 1:11 handle 11: $S购物
$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
iptables -t mangle -A POSTROUTING -d 192.168.1.11 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.1.22 -j MARK --set-mark 11
TCAU="tc class add dev imq0"
TFAU="tc filter add dev imq0"
TQAU="tc qdisc add dev imq0"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1: htb
tc class add dev imq0 parent 1: classid 1:1 htb rate 460kbit
$TCAU parent 1:1 classid 1:10 htb rate 64kbit ceil 128kbit prio 2
$TCAU parent 1:1 classid 1:11 htb rate 64kbit ceil 128kbit prio 2
$TQAU parent 1:10 handle 10: $S购物
$TQAU parent 1:11 handle 11: $S购物
$TFAU parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
$TFAU parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
iptables -t mangle -A PREROUTING -s 192.168.1.11 -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -s 192.168.1.22 -j MARK --set-mark 11
iptables -t mangle -A PREROUTING -j IMQ --todev 0
iptables -I FORWARD -s 192.168.1.11 -p tcp -m connlimit --connlimit-above 200 -j DROP
iptables -I FORWARD -s 192.168.1.22 -p tcp -m connlimit --connlimit-above 200 -j DROP
iptables -I FORWARD -s 192.168.1.11 -p udp -m limit --limit 20/sec -j DROP
iptables -I FORWARD -s 192.168.1.22 -p udp -m limit --limit 20/sec -j DROP
#--------------------------------------------
#WRT54 Script Generator v1.02
#(C) 2006-2007 Robert "Robson" Mytkowski
#--------------------------------------------
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
S购物="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 3452kbit
$TCA parent 1:1 classid 1:10 htb rate 1024kbit ceil 2048kbit prio 0
$TCA parent 1:1 classid 1:11 htb rate 512kbit ceil 2048kbit prio 2
$TCA parent 1:1 classid 1:12 htb rate 1024kbit ceil 3096kbit prio 4
$TQA parent 1:10 handle 10: $S购物
$TQA parent 1:11 handle 11: $S购物
$TQA parent 1:12 handle 12: $S购物
$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 4 protocol ip handle 12 fw flowid 1:12
iptables -t mangle -A POSTROUTING -d 192.168.1.6 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.1.33 -j MARK --set-mark 11
iptables -t mangle -A POSTROUTING -d 192.168.1.100 -j MARK --set-mark 12
TCAU="tc class add dev imq0"
TFAU="tc filter add dev imq0"
TQAU="tc qdisc add dev imq0"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1: htb
tc class add dev imq0 parent 1: classid 1:1 htb rate 332kbit
$TCAU parent 1:1 classid 1:10 htb rate 128kbit ceil 256kbit prio 0
$TCAU parent 1:1 classid 1:11 htb rate 64kbit ceil 128kbit prio 2
$TCAU parent 1:1 classid 1:12 htb rate 40kbit ceil 80kbit prio 4
$TQAU parent 1:10 handle 10: $S购物
$TQAU parent 1:11 handle 11: $S购物
$TQAU parent 1:12 handle 12: $S购物
$TFAU parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10
$TFAU parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11
$TFAU parent 1:0 prio 4 protocol ip handle 12 fw flowid 1:12
iptables -t mangle -A PREROUTING -s 192.168.1.6 -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -s 192.168.1.33 -j MARK --set-mark 11
iptables -t mangle -A PREROUTING -s 192.168.1.100 -j MARK --set-mark 12
iptables -t mangle -A PREROUTING -j IMQ --todev 0
iptables -I FORWARD -s 192.168.1.6 -p tcp -m connlimit --connlimit-above 300 -j DROP
iptables -I FORWARD -s 192.168.1.33 -p tcp -m connlimit --connlimit-above 200 -j DROP
iptables -I FORWARD -s 192.168.1.100 -p tcp -m connlimit --connlimit-above 300 -j DROP
iptables -I FORWARD -s 192.168.1.6 -p udp -m limit --limit 20/sec -j DROP
iptables -I FORWARD -s 192.168.1.33 -p udp -m limit --limit 20/sec -j DROP
iptables -I FORWARD -s 192.168.1.100 -p udp -m limit --limit 20/sec -j DROP |
|