很抱歉已經爬了文找了很久
但還是找不到哪裡有問題
所以希望各位大大幫忙
IP 用DHCP自動分配
192.168.0.101到192.168.0.150
設定每位使用者的上傳為10kbps~10kbps
而下載30kbps~50kbps
但是每當開完機器後就會有使用PtoP的用戶上傳流量大增(每天早上重開機)
下載沒有問題但是上傳就不受管制
現在有問題的是192.168.0.118
192.168.0.133
192.168.0.149
我發現後就會重開機(大約中午)
再次重開完就正常了
想請各位大大幫我看看哪裡的設定有問題
謝謝
/etc/rc.d/rc.local
#!/bin/sh
#
# Coyote local command init script
# 清除 ppp0 所有佇列規則
tc qdisc del dev ppp0 root 2>/dev/null
# 定義最頂層(根)佇列規則，並指定 default 類別編號
tc qdisc add dev ppp0 root handle 10: htb default 500
# 定義第一層的 10:1 類別 (總頻寬)
tc class add dev ppp0 parent 10: classid 10:1 htb rate 75kbps ceil 75kbps
# 定義第二層葉類別
# rate 保證頻寬，ceil 最大頻寬，prio 優先權
tc class add dev ppp0 parent 10:1 classid 10:10 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:20 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:30 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:40 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:50 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:60 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:70 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:80 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:90 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:100 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:110 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:120 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:130 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:140 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:150 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:160 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:170 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:180 htb rate 5kbps ceil 6kbps prio 4
tc class add dev ppp0 parent 10:1 classid 10:190 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:200 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:210 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:220 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:230 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:240 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:250 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:260 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:270 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:280 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:290 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:300 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:310 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:320 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:330 htb rate 5kbps ceil 6kbps prio 4
tc class add dev ppp0 parent 10:1 classid 10:340 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:350 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:360 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:370 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:380 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:390 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:400 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:410 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:420 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:430 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:440 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:450 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:460 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:470 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:480 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:490 htb rate 10kbps ceil 10kbps prio 2
tc class add dev ppp0 parent 10:1 classid 10:500 htb rate 10kbps ceil 10kbps prio 2
# 由於採用 fw 過濾器，所以此處使用 pfifo 的佇列規則即可
tc qdisc add dev ppp0 parent 10:10 handle 101: pfifo
tc qdisc add dev ppp0 parent 10:20 handle 102: pfifo
tc qdisc add dev ppp0 parent 10:30 handle 103: pfifo
tc qdisc add dev ppp0 parent 10:40 handle 104: pfifo
tc qdisc add dev ppp0 parent 10:50 handle 105: pfifo
tc qdisc add dev ppp0 parent 10:60 handle 106: pfifo
tc qdisc add dev ppp0 parent 10:70 handle 107: pfifo
tc qdisc add dev ppp0 parent 10:80 handle 108: pfifo
tc qdisc add dev ppp0 parent 10:90 handle 109: pfifo
tc qdisc add dev ppp0 parent 10:100 handle 110: pfifo
tc qdisc add dev ppp0 parent 10:110 handle 111: pfifo
tc qdisc add dev ppp0 parent 10:120 handle 112: pfifo
tc qdisc add dev ppp0 parent 10:130 handle 113: pfifo
tc qdisc add dev ppp0 parent 10:140 handle 114: pfifo
tc qdisc add dev ppp0 parent 10:150 handle 115: pfifo
tc qdisc add dev ppp0 parent 10:160 handle 116: pfifo
tc qdisc add dev ppp0 parent 10:170 handle 117: pfifo
tc qdisc add dev ppp0 parent 10:180 handle 118: pfifo
tc qdisc add dev ppp0 parent 10:190 handle 119: pfifo
tc qdisc add dev ppp0 parent 10:200 handle 120: pfifo
tc qdisc add dev ppp0 parent 10:210 handle 121: pfifo
tc qdisc add dev ppp0 parent 10:220 handle 122: pfifo
tc qdisc add dev ppp0 parent 10:230 handle 123: pfifo
tc qdisc add dev ppp0 parent 10:240 handle 124: pfifo
tc qdisc add dev ppp0 parent 10:250 handle 125: pfifo
tc qdisc add dev ppp0 parent 10:260 handle 126: pfifo
tc qdisc add dev ppp0 parent 10:270 handle 127: pfifo
tc qdisc add dev ppp0 parent 10:280 handle 128: pfifo
tc qdisc add dev ppp0 parent 10:290 handle 129: pfifo
tc qdisc add dev ppp0 parent 10:300 handle 130: pfifo
tc qdisc add dev ppp0 parent 10:310 handle 131: pfifo
tc qdisc add dev ppp0 parent 10:320 handle 132: pfifo
tc qdisc add dev ppp0 parent 10:330 handle 133: pfifo
tc qdisc add dev ppp0 parent 10:340 handle 134: pfifo
tc qdisc add dev ppp0 parent 10:350 handle 135: pfifo
tc qdisc add dev ppp0 parent 10:360 handle 136: pfifo
tc qdisc add dev ppp0 parent 10:370 handle 137: pfifo
tc qdisc add dev ppp0 parent 10:380 handle 138: pfifo
tc qdisc add dev ppp0 parent 10:390 handle 139: pfifo
tc qdisc add dev ppp0 parent 10:400 handle 140: pfifo
tc qdisc add dev ppp0 parent 10:410 handle 141: pfifo
tc qdisc add dev ppp0 parent 10:420 handle 142: pfifo
tc qdisc add dev ppp0 parent 10:430 handle 143: pfifo
tc qdisc add dev ppp0 parent 10:440 handle 144: pfifo
tc qdisc add dev ppp0 parent 10:450 handle 145: pfifo
tc qdisc add dev ppp0 parent 10:460 handle 146: pfifo
tc qdisc add dev ppp0 parent 10:470 handle 147: pfifo
tc qdisc add dev ppp0 parent 10:480 handle 148: pfifo
tc qdisc add dev ppp0 parent 10:490 handle 149: pfifo
tc qdisc add dev ppp0 parent 10:500 handle 150: pfifo
# 設定過濾器
# 指定貼有 10 標籤 (handle) 的封包，歸類到 10:10 類別，以此類推
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 10 fw classid 10:10
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 20 fw classid 10:20
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 30 fw classid 10:30
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 40 fw classid 10:40
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 50 fw classid 10:50
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 60 fw classid 10:60
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 70 fw classid 10:70
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 80 fw classid 10:80
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 90 fw classid 10:90
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 100 fw classid 10:100
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 110 fw classid 10:110
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 120 fw classid 10:120
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 130 fw classid 10:130
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 140 fw classid 10:140
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 150 fw classid 10:150
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 160 fw classid 10:160
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 170 fw classid 10:170
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 180 fw classid 10:180
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 190 fw classid 10:190
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 200 fw classid 10:200
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 210 fw classid 10:210
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 220 fw classid 10:220
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 230 fw classid 10:230
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 240 fw classid 10:240
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 250 fw classid 10:250
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 260 fw classid 10:260
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 270 fw classid 10:270
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 280 fw classid 10:280
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 290 fw classid 10:290
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 300 fw classid 10:300
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 310 fw classid 10:310
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 320 fw classid 10:320
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 330 fw classid 10:330
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 340 fw classid 10:340
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 350 fw classid 10:350
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 360 fw classid 10:360
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 370 fw classid 10:370
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 380 fw classid 10:380
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 390 fw classid 10:390
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 400 fw classid 10:400
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 410 fw classid 10:410
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 420 fw classid 10:420
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 430 fw classid 10:430
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 440 fw classid 10:440
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 450 fw classid 10:450
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 460 fw classid 10:460
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 470 fw classid 10:470
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 480 fw classid 10:480
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 490 fw classid 10:490
tc filter add dev ppp0 parent 10: protocol ip prio 100 handle 500 fw classid 10:500
# QoS eth0 下載方面
#
# 清除 eth0所有佇列規則
tc qdisc del dev eth0 root 2>/dev/null
# 定義最頂層(根)佇列規則，並指定 default 類別編號
tc qdisc add dev eth0 root handle 10: htb default 500
# 定義第一層的 10:1 類別 (總頻寬)
tc class add dev eth0 parent 10: classid 10:1 htb rate 700kbps ceil 700kbps
# 定義第二層葉類別
# rate 保證頻寬，ceil 最大頻寬，prio 優先權
tc class add dev eth0 parent 10:1 classid 10:10 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:20 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:30 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:40 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:50 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:60 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:70 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:80 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:90 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:100 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:110 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:120 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:130 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:140 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:150 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:160 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:170 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:180 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:190 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:200 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:210 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:220 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:230 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:240 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:250 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:260 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:270 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:280 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:290 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:300 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:310 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:320 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:330 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:340 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:350 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:360 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:370 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:380 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:390 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:400 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:410 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:420 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:430 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:440 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:450 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:460 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:470 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:480 htb rate 20kbps ceil 30kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:490 htb rate 30kbps ceil 50kbps prio 2
tc class add dev eth0 parent 10:1 classid 10:500 htb rate 20kbps ceil 30kbps prio 2
# 定義各葉類別的佇列規則
# parent 類別編號，handle 葉類別佇列規則編號
tc qdisc add dev eth0 parent 10:10 handle 101: pfifo
tc qdisc add dev eth0 parent 10:20 handle 102: pfifo
tc qdisc add dev eth0 parent 10:30 handle 103: pfifo
tc qdisc add dev eth0 parent 10:40 handle 104: pfifo
tc qdisc add dev eth0 parent 10:50 handle 105: pfifo
tc qdisc add dev eth0 parent 10:60 handle 106: pfifo
tc qdisc add dev eth0 parent 10:70 handle 107: pfifo
tc qdisc add dev eth0 parent 10:80 handle 108: pfifo
tc qdisc add dev eth0 parent 10:90 handle 109: pfifo
tc qdisc add dev eth0 parent 10:100 handle 110: pfifo
tc qdisc add dev eth0 parent 10:110 handle 111: pfifo
tc qdisc add dev eth0 parent 10:120 handle 112: pfifo
tc qdisc add dev eth0 parent 10:130 handle 113: pfifo
tc qdisc add dev eth0 parent 10:140 handle 114: pfifo
tc qdisc add dev eth0 parent 10:150 handle 115: pfifo
tc qdisc add dev eth0 parent 10:160 handle 116: pfifo
tc qdisc add dev eth0 parent 10:170 handle 117: pfifo
tc qdisc add dev eth0 parent 10:180 handle 118: pfifo
tc qdisc add dev eth0 parent 10:190 handle 119: pfifo
tc qdisc add dev eth0 parent 10:200 handle 120: pfifo
tc qdisc add dev eth0 parent 10:210 handle 121: pfifo
tc qdisc add dev eth0 parent 10:220 handle 122: pfifo
tc qdisc add dev eth0 parent 10:230 handle 123: pfifo
tc qdisc add dev eth0 parent 10:240 handle 124: pfifo
tc qdisc add dev eth0 parent 10:250 handle 125: pfifo
tc qdisc add dev eth0 parent 10:260 handle 126: pfifo
tc qdisc add dev eth0 parent 10:270 handle 127: pfifo
tc qdisc add dev eth0 parent 10:280 handle 128: pfifo
tc qdisc add dev eth0 parent 10:290 handle 129: pfifo
tc qdisc add dev eth0 parent 10:300 handle 130: pfifo
tc qdisc add dev eth0 parent 10:310 handle 131: pfifo
tc qdisc add dev eth0 parent 10:320 handle 132: pfifo
tc qdisc add dev eth0 parent 10:330 handle 133: pfifo
tc qdisc add dev eth0 parent 10:340 handle 134: pfifo
tc qdisc add dev eth0 parent 10:350 handle 135: pfifo
tc qdisc add dev eth0 parent 10:360 handle 136: pfifo
tc qdisc add dev eth0 parent 10:370 handle 137: pfifo
tc qdisc add dev eth0 parent 10:380 handle 138: pfifo
tc qdisc add dev eth0 parent 10:390 handle 139: pfifo
tc qdisc add dev eth0 parent 10:400 handle 140: pfifo
tc qdisc add dev eth0 parent 10:410 handle 141: pfifo
tc qdisc add dev eth0 parent 10:420 handle 142: pfifo
tc qdisc add dev eth0 parent 10:430 handle 143: pfifo
tc qdisc add dev eth0 parent 10:440 handle 144: pfifo
tc qdisc add dev eth0 parent 10:450 handle 145: pfifo
tc qdisc add dev eth0 parent 10:460 handle 146: pfifo
tc qdisc add dev eth0 parent 10:470 handle 147: pfifo
tc qdisc add dev eth0 parent 10:480 handle 148: pfifo
tc qdisc add dev eth0 parent 10:490 handle 149: pfifo
tc qdisc add dev eth0 parent 10:500 handle 150: pfifo
# 設定過濾器
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 101 fw classid 10:10
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 102 fw classid 10:20
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 103 fw classid 10:30
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 104 fw classid 10:40
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 105 fw classid 10:50
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 106 fw classid 10:60
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 107 fw classid 10:70
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 108 fw classid 10:80
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 109 fw classid 10:90
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 110 fw classid 10:100
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 111 fw classid 10:110
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 112 fw classid 10:120
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 113 fw classid 10:130
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 114 fw classid 10:140
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 115 fw classid 10:150
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 116 fw classid 10:160
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 117 fw classid 10:170
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 118 fw classid 10:180
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 119 fw classid 10:190
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 120 fw classid 10:200
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 121 fw classid 10:210
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 122 fw classid 10:220
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 123 fw classid 10:230
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 124 fw classid 10:240
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 125 fw classid 10:250
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 126 fw classid 10:260
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 127 fw classid 10:270
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 128 fw classid 10:280
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 129 fw classid 10:290
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 130 fw classid 10:300
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 131 fw classid 10:310
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 132 fw classid 10:320
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 133 fw classid 10:330
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 134 fw classid 10:340
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 135 fw classid 10:350
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 136 fw classid 10:360
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 137 fw classid 10:370
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 138 fw classid 10:380
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 139 fw classid 10:390
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 140 fw classid 10:400
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 141 fw classid 10:410
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 142 fw classid 10:420
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 143 fw classid 10:430
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 144 fw classid 10:440
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 145 fw classid 10:450
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 146 fw classid 10:460
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 147 fw classid 10:470
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 148 fw classid 10:480
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 149 fw classid 10:490
tc filter add dev eth0 parent 10: protocol ip prio 100 handle 150 fw classid 10:500
******************************************************************************************************
iptables
# Local Custom Firewall rules
# Level 7 Filtering example:
#iptables -t mangle -A POSTROUTING -m layer7 --l7proto edonkey -j DROP
# Attention: To enable the commands below can cause some side effects
# Syn-flood and DOS protection
#iptables -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT
# Port Scanners protection
#iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT
#iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP
# Ping-of-dead protection
#iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT
# Speed UP DNS
#iptables -t mangle -A OUTPUT -p udp --dport 53 -j TOS --set-tos 0x08
#iptables -t mangle -A PREROUTING -p udp --dport 53 -j TOS --set-tos 0x10
# Speed UP HTTP
#iptables -t mangle -A OUTPUT -p tcp -j TOS --sport 80 --set-tos 0x08
#iptables -t mangle -A PREROUTING -p tcp --dport 80 -j TOS --set-tos 0x08
#iptables -t mangle -A OUTPUT -p tcp -j TOS --sport 80 --set-tos 0x10
iptables -I FORWARD -p tcp -m connlimit --connlimit-above 100 -j REJECT
# uploads
iptables -t mangle -A PREROUTING -s 192.168.0.101 -j MARK --set-mark 101
iptables -t mangle -A PREROUTING -s 192.168.0.102 -j MARK --set-mark 102
iptables -t mangle -A PREROUTING -s 192.168.0.103 -j MARK --set-mark 103
iptables -t mangle -A PREROUTING -s 192.168.0.104 -j MARK --set-mark 104
iptables -t mangle -A PREROUTING -s 192.168.0.105 -j MARK --set-mark 105
iptables -t mangle -A PREROUTING -s 192.168.0.106 -j MARK --set-mark 106
iptables -t mangle -A PREROUTING -s 192.168.0.107 -j MARK --set-mark 107
iptables -t mangle -A PREROUTING -s 192.168.0.108 -j MARK --set-mark 108
iptables -t mangle -A PREROUTING -s 192.168.0.109 -j MARK --set-mark 109
iptables -t mangle -A PREROUTING -s 192.168.0.110 -j MARK --set-mark 110
iptables -t mangle -A PREROUTING -s 192.168.0.111 -j MARK --set-mark 111
iptables -t mangle -A PREROUTING -s 192.168.0.112 -j MARK --set-mark 112
iptables -t mangle -A PREROUTING -s 192.168.0.113 -j MARK --set-mark 113
iptables -t mangle -A PREROUTING -s 192.168.0.114 -j MARK --set-mark 114
iptables -t mangle -A PREROUTING -s 192.168.0.115 -j MARK --set-mark 115
iptables -t mangle -A PREROUTING -s 192.168.0.116 -j MARK --set-mark 116
iptables -t mangle -A PREROUTING -s 192.168.0.117 -j MARK --set-mark 117
iptables -t mangle -A PREROUTING -s 192.168.0.118 -j MARK --set-mark 118
iptables -t mangle -A PREROUTING -s 192.168.0.119 -j MARK --set-mark 119
iptables -t mangle -A PREROUTING -s 192.168.0.120 -j MARK --set-mark 120
iptables -t mangle -A PREROUTING -s 192.168.0.121 -j MARK --set-mark 121
iptables -t mangle -A PREROUTING -s 192.168.0.122 -j MARK --set-mark 122
iptables -t mangle -A PREROUTING -s 192.168.0.123 -j MARK --set-mark 123
iptables -t mangle -A PREROUTING -s 192.168.0.124 -j MARK --set-mark 124
iptables -t mangle -A PREROUTING -s 192.168.0.125 -j MARK --set-mark 125
iptables -t mangle -A PREROUTING -s 192.168.0.126 -j MARK --set-mark 126
iptables -t mangle -A PREROUTING -s 192.168.0.127 -j MARK --set-mark 127
iptables -t mangle -A PREROUTING -s 192.168.0.128 -j MARK --set-mark 128
iptables -t mangle -A PREROUTING -s 192.168.0.129 -j MARK --set-mark 129
iptables -t mangle -A PREROUTING -s 192.168.0.130 -j MARK --set-mark 130
iptables -t mangle -A PREROUTING -s 192.168.0.131 -j MARK --set-mark 131
iptables -t mangle -A PREROUTING -s 192.168.0.132 -j MARK --set-mark 132
iptables -t mangle -A PREROUTING -s 192.168.0.133 -j MARK --set-mark 133
iptables -t mangle -A PREROUTING -s 192.168.0.134 -j MARK --set-mark 134
iptables -t mangle -A PREROUTING -s 192.168.0.135 -j MARK --set-mark 135
iptables -t mangle -A PREROUTING -s 192.168.0.136 -j MARK --set-mark 136
iptables -t mangle -A PREROUTING -s 192.168.0.137 -j MARK --set-mark 137
iptables -t mangle -A PREROUTING -s 192.168.0.138 -j MARK --set-mark 138
iptables -t mangle -A PREROUTING -s 192.168.0.139 -j MARK --set-mark 139
iptables -t mangle -A PREROUTING -s 192.168.0.140 -j MARK --set-mark 140
iptables -t mangle -A PREROUTING -s 192.168.0.141 -j MARK --set-mark 141
iptables -t mangle -A PREROUTING -s 192.168.0.142 -j MARK --set-mark 142
iptables -t mangle -A PREROUTING -s 192.168.0.143 -j MARK --set-mark 143
iptables -t mangle -A PREROUTING -s 192.168.0.144 -j MARK --set-mark 144
iptables -t mangle -A PREROUTING -s 192.168.0.145 -j MARK --set-mark 145
iptables -t mangle -A PREROUTING -s 192.168.0.146 -j MARK --set-mark 146
iptables -t mangle -A PREROUTING -s 192.168.0.147 -j MARK --set-mark 147
iptables -t mangle -A PREROUTING -s 192.168.0.148 -j MARK --set-mark 148
iptables -t mangle -A PREROUTING -s 192.168.0.149 -j MARK --set-mark 149
iptables -t mangle -A PREROUTING -s 192.168.0.150 -j MARK --set-mark 150
# downloads
iptables -t mangle -A POSTROUTING -d 192.168.0.101 -j MARK --set-mark 101
iptables -t mangle -A POSTROUTING -d 192.168.0.102 -j MARK --set-mark 102
iptables -t mangle -A POSTROUTING -d 192.168.0.103 -j MARK --set-mark 103
iptables -t mangle -A POSTROUTING -d 192.168.0.104 -j MARK --set-mark 104
iptables -t mangle -A POSTROUTING -d 192.168.0.105 -j MARK --set-mark 105
iptables -t mangle -A POSTROUTING -d 192.168.0.106 -j MARK --set-mark 106
iptables -t mangle -A POSTROUTING -d 192.168.0.107 -j MARK --set-mark 107
iptables -t mangle -A POSTROUTING -d 192.168.0.108 -j MARK --set-mark 108
iptables -t mangle -A POSTROUTING -d 192.168.0.109 -j MARK --set-mark 109
iptables -t mangle -A POSTROUTING -d 192.168.0.110 -j MARK --set-mark 110
iptables -t mangle -A POSTROUTING -d 192.168.0.111 -j MARK --set-mark 111
iptables -t mangle -A POSTROUTING -d 192.168.0.112 -j MARK --set-mark 112
iptables -t mangle -A POSTROUTING -d 192.168.0.113 -j MARK --set-mark 113
iptables -t mangle -A POSTROUTING -d 192.168.0.114 -j MARK --set-mark 114
iptables -t mangle -A POSTROUTING -d 192.168.0.115 -j MARK --set-mark 115
iptables -t mangle -A POSTROUTING -d 192.168.0.116 -j MARK --set-mark 116
iptables -t mangle -A POSTROUTING -d 192.168.0.117 -j MARK --set-mark 117
iptables -t mangle -A POSTROUTING -d 192.168.0.118 -j MARK --set-mark 118
iptables -t mangle -A POSTROUTING -d 192.168.0.119 -j MARK --set-mark 119
iptables -t mangle -A POSTROUTING -d 192.168.0.120 -j MARK --set-mark 120
iptables -t mangle -A POSTROUTING -d 192.168.0.121 -j MARK --set-mark 121
iptables -t mangle -A POSTROUTING -d 192.168.0.122 -j MARK --set-mark 122
iptables -t mangle -A POSTROUTING -d 192.168.0.123 -j MARK --set-mark 123
iptables -t mangle -A POSTROUTING -d 192.168.0.124 -j MARK --set-mark 124
iptables -t mangle -A POSTROUTING -d 192.168.0.125 -j MARK --set-mark 125
iptables -t mangle -A POSTROUTING -d 192.168.0.126 -j MARK --set-mark 126
iptables -t mangle -A POSTROUTING -d 192.168.0.127 -j MARK --set-mark 127
iptables -t mangle -A POSTROUTING -d 192.168.0.128 -j MARK --set-mark 128
iptables -t mangle -A POSTROUTING -d 192.168.0.129 -j MARK --set-mark 129
iptables -t mangle -A POSTROUTING -d 192.168.0.130 -j MARK --set-mark 130
iptables -t mangle -A POSTROUTING -d 192.168.0.131 -j MARK --set-mark 131
iptables -t mangle -A POSTROUTING -d 192.168.0.132 -j MARK --set-mark 132
iptables -t mangle -A POSTROUTING -d 192.168.0.133 -j MARK --set-mark 133
iptables -t mangle -A POSTROUTING -d 192.168.0.134 -j MARK --set-mark 134
iptables -t mangle -A POSTROUTING -d 192.168.0.135 -j MARK --set-mark 135
iptables -t mangle -A POSTROUTING -d 192.168.0.136 -j MARK --set-mark 136
iptables -t mangle -A POSTROUTING -d 192.168.0.137 -j MARK --set-mark 137
iptables -t mangle -A POSTROUTING -d 192.168.0.138 -j MARK --set-mark 138
iptables -t mangle -A POSTROUTING -d 192.168.0.139 -j MARK --set-mark 139
iptables -t mangle -A POSTROUTING -d 192.168.0.140 -j MARK --set-mark 140
iptables -t mangle -A POSTROUTING -d 192.168.0.141 -j MARK --set-mark 141
iptables -t mangle -A POSTROUTING -d 192.168.0.142 -j MARK --set-mark 142
iptables -t mangle -A POSTROUTING -d 192.168.0.143 -j MARK --set-mark 143
iptables -t mangle -A POSTROUTING -d 192.168.0.144 -j MARK --set-mark 144
iptables -t mangle -A POSTROUTING -d 192.168.0.145 -j MARK --set-mark 145
iptables -t mangle -A POSTROUTING -d 192.168.0.146 -j MARK --set-mark 146
iptables -t mangle -A POSTROUTING -d 192.168.0.147 -j MARK --set-mark 147
iptables -t mangle -A POSTROUTING -d 192.168.0.148 -j MARK --set-mark 148
iptables -t mangle -A POSTROUTING -d 192.168.0.149 -j MARK --set-mark 149
iptables -t mangle -A POSTROUTING -d 192.168.0.150 -j MARK --set-mark 150
ps.很抱歉文章沒有簡略,本來想簡略讓版面間單一點,但是怕簡略了就把問題給刪掉了,所以就沒簡略了
感謝大大看完
 |
回覆時引用此文章
書籤