modprobe ipt_layer7
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
CEIL=4900kbit
CEILU=700kbit
WWWMAX=1000000
PRE="iptables -t mangle -A PREROUTING"
POST="iptables -t mangle -A POSTROUTING"
# quakelive
PRIO0="27000:27100,5222"
# ftp, www itp. download
PRIO1="20:110"
# porty wchodzace P2P , ftp i zdalny
P2P="11000-14000"
USL="21,3389"

tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb default 11
tc class add dev br0 parent 1: classid 1:1 htb rate $CEIL
$TCA parent 1:1 classid 1:10 htb rate 256kbit ceil 256kbit prio 0
$TCA parent 1:1 classid 1:11 htb rate 1000kbit ceil $CEIL prio 1
$TCA parent 1:1 classid 1:12 htb rate 1000kbit ceil $CEIL prio 2
$TCA parent 1:1 classid 1:13 htb rate 1000kbit ceil $CEIL prio 3
$TQA parent 1:10 handle 10: $SFQ
$TQA parent 1:11 handle 11: $SFQ
$TQA parent 1:12 handle 12: $SFQ
$TQA parent 1:13 handle 13: $SFQ
$TFA parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10
$TFA parent 1:0 prio 1 protocol ip handle 11 fw flowid 1:11
$TFA parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFA parent 1:0 prio 3 protocol ip handle 13 fw flowid 1:13
$POST -j BCOUNT
# reguly dla programow P2P
$POST -p tcp --dport ${P2P} -j MARK --set-mark 13
$POST -p udp --dport ${P2P} -j MARK --set-mark 13

#ftp i zdalny
$POST -p tcp --dport ${USL} -j MARK --set-mark 11
$POST -p udp --dport ${USL} -j MARK --set-mark 11
# reguly dla PRIO0
$POST -p tcp --sport ${PRIO0} -j MARK --set-mark 10
$POST -p udp --sport ${PRIO0} -j MARK --set-mark 10

# reguly dla PRIO1
$POST -p tcp --sport ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11
$POST -p udp --sport ${PRIO1} -m bcount --range 0x0-${WWWMAX} -j MARK --set-mark 11

# reguly dla PRIO2
$POST -p tcp --sport ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12
$POST -p udp --sport ${PRIO1} -m bcount --range $(($WWWMAX+1)) -j MARK --set-mark 12

$POST -m layer7 --l7proto shoutcast -j MARK --set-mark 11
$POST -m layer7 --l7proto skypetoskype -j MARK --set-mark 11

TCAU="tc class add dev imq0"
TFAU="tc filter add dev imq0"
TQAU="tc qdisc add dev imq0"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1: htb
tc class add dev imq0 parent 1: classid 1:1 htb rate $CEILU
$TCAU parent 1:1 classid 1:10 htb rate 200kbit ceil $CEILU prio 0
$TCAU parent 1:1 classid 1:11 htb rate 200kbit ceil 200kbit prio 1
$TCAU parent 1:1 classid 1:12 htb rate 200kbit ceil 200kbit prio 2
$TCAU parent 1:1 classid 1:13 htb rate 100kbit ceil $CEILU prio 3
$TQAU parent 1:10 handle 10: $SFQ
$TQAU parent 1:11 handle 11: $SFQ
$TQAU parent 1:12 handle 12: $SFQ
$TQAU parent 1:13 handle 13: $SFQ
$TFAU parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10
$TFAU parent 1:0 prio 1 protocol ip handle 11 fw flowid 1:11
$TFAU parent 1:0 prio 2 protocol ip handle 12 fw flowid 1:12
$TFAU parent 1:0 prio 3 protocol ip handle 13 fw flowid 1:13
$PRE -p tcp --dport ${PRIO0} -m iprange --dst-range 192.168.1.100-192.168.1.149 -j MARK --set-mark 10
$PRE -p udp --dport ${PRIO0} -m iprange --dst-range 192.168.1.100-192.168.1.149 -j MARK --set-mark 10
$PRE -p tcp --dport ${PRIO1} -m iprange --src-range 192.168.1.100-192.168.1.149 -j MARK --set-mark 11
$PRE -p udp --dport ${PRIO1} -m iprange --src-range 192.168.1.100-192.168.1.149 -j MARK --set-mark 11
$PRE -p tcp -m iprange --dst-range 192.168.1.100-192.168.1.118 -j MARK --set-mark 12
$PRE -p udp -m iprange --dst-range 192.168.1.120-192.168.1.149 -j MARK --set-mark 12
#$PRE -m iprange -src-range 192.168.1.100-192.168.1.149 -j MARK --set-mark 14
#$PRE -p tcp --sport ${PRIO0} -j MARK --set-mark 10
#$PRE -p udp --sport ${PRIO0} -j MARK --set-mark 10
#$PRE -p tcp --sport ${PRIO1} -j MARK --set-mark 11
#$PRE -p udp --sport ${PRIO1} -j MARK --set-mark 11

#$PRE -p tcp --sport ${USL} -j MARK --set-mark 11
#$PRE -p udp --sport ${USL} -j MARK --set-mark 11

$PRE -j IMQ --todev 0