> partea "relevanta" este asta:
> DEV=eth0
> TC=/sbin/tc
> U32="filter add dev $DEV protocol ip parent 1:0 prio 1 u32"
>
> echo Delete previous root qdisc
> $TC qdisc del dev $DEV root >/dev/null 2>&1
>
> echo Add root qdisc
> $TC qdisc add dev $DEV root handle 1: htb default 10
> echo Add root class
> $TC class add dev $DEV parent 1: classid 1:1 htb rate 1280kbps ceil
> 1280kbps burst 256k
> echo Add default class
> $TC class add dev $DEV parent 1:1 classid 1:0x10 htb rate 1kbps ceil
> 1kbps burst 256k
> $TC qdisc add dev $DEV parent 1:0x10 handle 0x10: pfifo limit 5
>
> echo Add class Innertemple_Servers, que pfifo limit 5
> $TC class add dev $DEV parent 1:1 classid 1:0x20 htb rate 1280kbps
> ceil 1280kbps burst 64k prio 1
> echo Add client Servers
> $TC class add dev $DEV parent 1:0x20 classid 1:0x21 htb rate
> 1280kbps ceil 1280kbps burst 64k prio 2
> $TC ${U32} match ip src 192.168.30.0/24 flowid 1:0x21
> $TC ${U32} match ip src 82.77.20.147/32 flowid 1:0x21
> $TC ${U32} match ip src 82.77.20.129/32 flowid 1:0x21
> $TC ${U32} match ip src 82.77.238.96/27 flowid 1:0x21
> $TC qdisc add dev $DEV parent 1:0x21 handle 0x21: pfifo limit 5
> echo Add client BROWSING
> $TC class add dev $DEV parent 1:0x20 classid 1:0x22 htb rate
> 1280kbps ceil 1280kbps burst 64k prio 2
> $TC ${U32} match ip dst 192.168.30.0/23 match mark 3 0xffff flowid 1:0x22
> $TC qdisc add dev $DEV parent 1:0x22 handle 0x22: pfifo limit 5
> ...
>
>
> clasa browsing e cea care nu merge corect (sau deloc).
> am incercat si
> $TC ${U32} match ip dst 192.168.30.0/23 match mark 3 0xffff flowid 1:0x22
> si
> $TC ${U32} match mark 3 0xffff flowid 1:0x22
>
>
> dar tot degeaba. sintactic e ok, adica nu mai da illegal match sau
> ceva de genu dar nici de mers nu merge.
> marcarea se face in postrouting, am facut si in prerouting dar tot un
> drac (adica nimic)
>
> pkts bytes target prot opt in out source destination
> 1746 466K MARK all -- * * 0.0.0.0/0
> 0.0.0.0/0 TOS match 0x10 MARK set 0x3
>
> am si un tos acolo dar asta nu conteaza prea mult, nu?
Mie imi merge.
E posibil sa ai alt filtru care face match mai inainte.
Lasa numai configuratia de mai sus si fa un test. Spune-mi de pe ce ip
pleci si pe ce ip vrei sa ajungi.
Vezi daca merge si cu informatiile obtinute, revin-o.
Ce zice "tc -s filter show dev eth0"?
> ---
> Detalii despre listele noastre de mail: http://www.lug.ro/
>
>
---
Catalin(ux aka Dino) BOIE
catab at deuroconsult.ro
http://kernel.umbrella.ro/
---
Detalii despre listele noastre de mail: http://www.lug.ro/
