LuQnEtA login: root

Password:





Tomato v1.25.8025 .2-RAF STD





BusyBox v1.14.2 (2009-07-13 21:56:20 CEST) built-in shell (ash)

Enter 'help' for a list of built-in commands.



# test_firewall

-sh: test_firewall: not found

# cat/tmp/test_firewall

-sh: cat/tmp/test_firewall: not found

TCA="tc class add dev br0"

TFA="tc filter add dev br0"

TQA="tc qdisc add dev br0"

SFQ="sfq perturb 10"

tc qdisc del dev br0 root

tc qdisc add dev br0 root handle 1: htb

tc class add dev br0 parent 1: classid 1:1 htb rate 9000kbit

$TCA parent 1:1 classid 1:10 htb rate 4000kbit ceil 8000kbit prio 2

$TCA parent 1:1 classid 1:11 htb rate 1000kbit ceil 2000kbit prio 2

$TCA parent 1:1 classid 1:12 htb rate 1000kbit ceil 2000kbit prio 2

$TCA parent 1:1 classid 1:13 htb rate 1000kbit ceil 2000kbit prio 2

$TQA parent 1:10 handle 10: $SFQ

$TQA parent 1:11 handle 11: $SFQ

$TQA parent 1:12 handle 12: $SFQ

$TQA parent 1:13 handle 13: $SFQ

$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10

$TFA parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11

$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12

$TFA parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13

iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.3.100-192.168.3.102 -j MARK --set-mark 10

iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.3.104-192.168.3.105 -j MARK --set-mark 11

iptables -t mangle -A POSTROUTING -d 192.168.3.103 -j MARK --set-mark 12

iptables -t mangle -A POSTROUTING -d 192.168.3.106 -j MARK --set-mark 13

TCAU="tc class add dev imq0"

TFAU="tc filter add dev imq0"

TQAU="tc qdisc add dev imq0"

modprobe imq

modprobe ipt_IMQ

ip link set imq0 up

tc qdisc del dev imq0 root

tc qdisc add dev imq0 root handle 1: htb

tc class add dev imq0 parent 1: classid 1:1 htb rate 1000kbit

$TCAU parent 1:1 classid 1:10 htb rate 210kbit ceil 900kbit prio 2

$TCAU parent 1:1 classid 1:11 htb rate 80kbit ceil 300kbit prio 2

$TCAU parent 1:1 classid 1:12 htb rate 80kbit ceil 300kbit prio 2

$TCAU parent 1:1 classid 1:13 htb rate 80kbit ceil 300kbit prio 2

$TQAU parent 1:10 handle 10: $SFQ

$TQAU parent 1:11 handle 11: $SFQ

$TQAU parent 1:12 handle 12: $SFQ

$TQAU parent 1:13 handle 13: $SFQ

$TFAU parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10

$TFAU parent 1:0 prio 2 protocol ip handle 11 fw flowid 1:11

$TFAU parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12

$TFAU parent 1:0 prio 2 protocol ip handle 13 fw flowid 1:13

iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.3.100-192.168.3.102 -j MARK --set-mark 10

iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.3.104-192.168.3.105 -j MARK --set-mark 11

iptables -t mangle -A PREROUTING -s 192.168.3.103 -j MARK --set-mark 12

iptables -t mangle -A PREROUTING -s 192.168.3.106 -j MARK --set-mark 13

iptables -t mangle -A PREROUTING -j IMQ --todev 0