forked from extern/shorewall_code
Expunge ":P" from traffic shaping marking examples
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3865 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
8b573c4ec5
commit
f5bcf10464
@ -15,13 +15,15 @@
|
|||||||
</author>
|
</author>
|
||||||
</authorgroup>
|
</authorgroup>
|
||||||
|
|
||||||
<pubdate>2005-10-04</pubdate>
|
<pubdate>2006-05-05</pubdate>
|
||||||
|
|
||||||
<copyright>
|
<copyright>
|
||||||
<year>2004</year>
|
<year>2004</year>
|
||||||
|
|
||||||
<year>2005</year>
|
<year>2005</year>
|
||||||
|
|
||||||
|
<year>2006</year>
|
||||||
|
|
||||||
<holder>Thomas M. Eastep</holder>
|
<holder>Thomas M. Eastep</holder>
|
||||||
</copyright>
|
</copyright>
|
||||||
|
|
||||||
@ -208,5 +210,20 @@ SAVE:P - - tcp - -
|
|||||||
|
|
||||||
<para>These rules do exactly the same thing as their counterparts
|
<para>These rules do exactly the same thing as their counterparts
|
||||||
described above.</para>
|
described above.</para>
|
||||||
|
|
||||||
|
<para>One change that I recommend --do your marking in the FORWARD chain
|
||||||
|
rather than in the PREROUTING chain:</para>
|
||||||
|
|
||||||
|
<programlisting>#MARK SOURCE DEST PROTO PORT(S) CLIENT USER TEST
|
||||||
|
# PORT(S)
|
||||||
|
RESTORE:F - - tcp
|
||||||
|
CONTINUE:F - - tcp - - - !0
|
||||||
|
1:F - - ipp2p ipp2p
|
||||||
|
SAVE:F - - tcp - - - 1
|
||||||
|
1:12 - eth0 - - - - 1
|
||||||
|
2:12 - eth1 - - - - 1 </programlisting>
|
||||||
|
|
||||||
|
<para>It will work the same and will work with a <ulink
|
||||||
|
url="MultiISP.html">Multi-ISP setup</ulink>.</para>
|
||||||
</section>
|
</section>
|
||||||
</article>
|
</article>
|
@ -21,7 +21,7 @@
|
|||||||
</author>
|
</author>
|
||||||
</authorgroup>
|
</authorgroup>
|
||||||
|
|
||||||
<pubdate>2006-05-01</pubdate>
|
<pubdate>2006-05-05</pubdate>
|
||||||
|
|
||||||
<copyright>
|
<copyright>
|
||||||
<year>2001-2006</year>
|
<year>2001-2006</year>
|
||||||
@ -772,8 +772,8 @@ ppp0 3 8*full/10 8*full/10 2</programlisting>
|
|||||||
|
|
||||||
<programlisting>#MARK SOURCE DEST PROTO PORT(S) CLIENT USER
|
<programlisting>#MARK SOURCE DEST PROTO PORT(S) CLIENT USER
|
||||||
# PORT(S)
|
# PORT(S)
|
||||||
1:P 0.0.0.0/0 0.0.0.0/0 icmp echo-request
|
1:F 0.0.0.0/0 0.0.0.0/0 icmp echo-request
|
||||||
1:P 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
|
1:F 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
|
||||||
# mark traffic which should have a lower priority with a 3:
|
# mark traffic which should have a lower priority with a 3:
|
||||||
# mldonkey
|
# mldonkey
|
||||||
3 0.0.0.0/0 0.0.0.0/0 udp - 4666</programlisting>
|
3 0.0.0.0/0 0.0.0.0/0 udp - 4666</programlisting>
|
||||||
@ -856,10 +856,10 @@ ppp0 4 90kbit 200kbit 3 default</pro
|
|||||||
|
|
||||||
<programlisting>#MARK SOURCE DEST PROTO PORT(S) CLIENT USER
|
<programlisting>#MARK SOURCE DEST PROTO PORT(S) CLIENT USER
|
||||||
# PORT(S)
|
# PORT(S)
|
||||||
1:P 0.0.0.0/0 0.0.0.0/0 icmp echo-request
|
1:F 0.0.0.0/0 0.0.0.0/0 icmp echo-request
|
||||||
1:P 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
|
1:F 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
|
||||||
2:P 192.168.2.23 0.0.0.0/0 all
|
2:F 192.168.2.23 0.0.0.0/0 all
|
||||||
3:P 192.168.2.42 0.0.0.0/0 all</programlisting>
|
3:F 192.168.2.42 0.0.0.0/0 all</programlisting>
|
||||||
|
|
||||||
<para>We mark icmp ping and replies so they will go into the fast
|
<para>We mark icmp ping and replies so they will go into the fast
|
||||||
interactive class and set a mark for each host.</para>
|
interactive class and set a mark for each host.</para>
|
||||||
|
Loading…
Reference in New Issue
Block a user