Anh hoa oi, co mot van de can giai? quyet la khi cau hinh TOS = type of
service cho di qua mot duong` route dinh san~ bang cach cho kiem tra
truong` TOS trongIP header
Minh thiet lap TOS bang IPchains
#ipchains -A output -p TCP -d 0.0.0.0/0 -s 0.0.0.0/0 ftp -t 0x01 0x10
Thiet lap quy tac tim
# ip rule add from 0/0 tos 0x10 table 2 chi? tim` duong` o? bang?
route 2
Ket qua la khi request gui? di co TOS = 0x10 no se gui? theo duong` o?
bang? 2 de? default la eth0
Nhung source add lai lay la 10.10.200.1 la add cua? eth1
Do vay khi gui? ve lai quay ve eth1. do do hoat dong khong dung'
vay co co che nao` de? lam cho no hoat dong dung khong?
IPautoforward co anh? huong? den viec. cau hinh khong ???
[root@netnam /]# ip ro sh
10.10.200.1 dev eth1 scope link
203.160.0.9 dev eth0 scope link
203.160.0.0/24 dev eth0 proto kernel scope link src 203.160.0.9
10.10.0.0/16 dev eth1 proto kernel scope link src 10.10.200.1
127.0.0.0/8 dev lo scope link
[root@netnam /]# ip ro s table 1
default via 10.10.0.1 dev eth1
[root@netnam /]# ip ro s table 2
default via 203.160.0.1 dev eth0
[root@netnam /]#
[root@netnam /]# ip rule
0: from all lookup local
32764: from all tos throughput lookup 2
32765: from all tos lowdelay lookup 2 (gia tri TOS = 0x10)
32766: from all lookup main
32767: from all lookup default
32800: from all lookup inr.ruhep
32810: from all lookup 2
root@netnam /]# tcpdump -n -i eth0 host 203.162.7.66
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on eth0
06:49:23.049314 > 10.10.200.1.1046 > 203.162.7.66.ftp: .
2614583367:2614583367(0
) ack 763136069 win 32120 (DF) [tos 0x10]
06:50:12.500089 > 10.10.200.1.1046 > 203.162.7.66.ftp: P 0:14(14) ack 1
win 3212
0 (DF) [tos 0x10]
06:50:12.751076 > 10.10.200.1.1046 > 203.162.7.66.ftp: . 14:14(0) ack 37
win 321
20 (DF) [tos 0x10]
06:50:17.151832 > 10.10.200.1.1046 > 203.162.7.66.ftp: P 14:29(15) ack
37 win 32
120 (DF) [tos 0x10]
06:50:18.885491 > 10.10.200.1.1046 > 203.162.7.66.ftp: P 29:35(6) ack 59
win 321
20 (DF) [tos 0x10]
06:50:18.901105 > 10.10.200.1.1046 > 203.162.7.66.ftp: . 35:35(0) ack 78
win 321
20 (DF) [tos 0x10]
06:51:36.683443 > 10.10.200.1.1046 > 203.162.7.66.ftp: P 35:41(6) ack 78
win 321
20 (DF) [tos 0x10]
06:51:36.711979 > 10.10.200.1.1046 > 203.162.7.66.ftp: F 41:41(0) ack
119 win 32
120 (DF) [tos 0x10]
06:51:36.860304 > 10.10.200.1.1046 > 203.162.7.66.ftp: . 42:42(0) ack
120 win 32
120 (DF) [tos 0x10]
root@netnam /]# tcpdump -n -i eth0 host 203.162.7.66
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on eth1
06:49:22.792057 > 10.10.200.1.1046 > 203.162.7.66.ftp: S
2614583366:2614583366(0
) win 32120 <mss 1460,sackOK,timestamp 1023685 0,nop,wscale 0> (DF) [tos
0x10]
06:49:22.794772 < 203.162.7.66.ftp > 10.10.200.1.1046: S
763136000:763136000(0)
ack 2614583367 win 33580 <mss 1460,nop,wscale 0> (DF)
06:49:22.794917 > 10.10.200.1.1046 > 203.162.7.66.ftp: . 1:1(0) ack 1
win 32120
(DF) [tos 0x10]
06:49:23.049237 < 203.162.7.66.ftp > 10.10.200.1.1046: P 1:69(68) ack 1
win 3358
0 (DF)
06:50:12.528055 < 203.162.7.66.ftp > 10.10.200.1.1046: . 69:69(0) ack 15
win 335
66 (DF)
06:50:12.739552 < 203.162.7.66.ftp > 10.10.200.1.1046: P 69:105(36) ack
15 win 3
3580 (DF)
06:50:17.331664 < 203.162.7.66.ftp > 10.10.200.1.1046: . 105:105(0) ack
30 win 3
3580 (DF)
06:50:18.884978 < 203.162.7.66.ftp > 10.10.200.1.1046: P 105:127(22) ack
30 win
33580 (DF)
06:50:18.887396 < 203.162.7.66.ftp > 10.10.200.1.1046: P 127:146(19) ack
36 win
33580 (DF)
06:51:36.711656 < 203.162.7.66.ftp > 10.10.200.1.1046: P 146:187(41) ack
42 win
33580 (DF)
06:51:36.713547 < 203.162.7.66.ftp > 10.10.200.1.1046: . 187:187(0) ack
43 win 3
3580 (DF)
06:51:36.860226 < 203.162.7.66.ftp > 10.10.200.1.1046: F 187:187(0) ack
43 win 3
3580 (DF)
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
