mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-28 11:43:25 +02:00
QoS-Update - Komplette grafische Ueberarbeitung
git-svn-id: http://svn.ipfire.org/svn/ipfire/trunk@402 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8
This commit is contained in:
@@ -290,40 +290,6 @@ END
|
||||
}
|
||||
}
|
||||
|
||||
print <<END
|
||||
|
||||
### SET LEVEL7-RULES
|
||||
END
|
||||
;
|
||||
foreach $l7ruleentry (sort @l7rules)
|
||||
{
|
||||
@l7ruleline = split( /\;/, $l7ruleentry );
|
||||
if ( $l7ruleline[1] eq $qossettings{'RED_DEV'} )
|
||||
{
|
||||
$qossettings{'CLASS'} = $l7ruleline[0];
|
||||
$qossettings{'DEVICE'} = $l7ruleline[1];
|
||||
$qossettings{'L7PROT'} = $l7ruleline[2];
|
||||
$qossettings{'QIP'} = $l7ruleline[3];
|
||||
$qossettings{'DIP'} = $l7ruleline[4];
|
||||
print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
|
||||
print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
|
||||
}
|
||||
}
|
||||
|
||||
print "\n\t### SET PORT-RULES\n";
|
||||
foreach $portruleentry (sort @portrules)
|
||||
{
|
||||
@@ -376,6 +342,40 @@ print "\n\t### SET PORT-RULES\n";
|
||||
}
|
||||
}
|
||||
|
||||
print <<END
|
||||
|
||||
### SET LEVEL7-RULES
|
||||
END
|
||||
;
|
||||
foreach $l7ruleentry (sort @l7rules)
|
||||
{
|
||||
@l7ruleline = split( /\;/, $l7ruleentry );
|
||||
if ( $l7ruleline[1] eq $qossettings{'RED_DEV'} )
|
||||
{
|
||||
$qossettings{'CLASS'} = $l7ruleline[0];
|
||||
$qossettings{'DEVICE'} = $l7ruleline[1];
|
||||
$qossettings{'L7PROT'} = $l7ruleline[2];
|
||||
$qossettings{'QIP'} = $l7ruleline[3];
|
||||
$qossettings{'DIP'} = $l7ruleline[4];
|
||||
print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
|
||||
print "\tiptables -t mangle -A QOS-OUT -o $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
|
||||
}
|
||||
}
|
||||
|
||||
print <<END
|
||||
|
||||
### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
|
||||
@@ -510,40 +510,6 @@ END
|
||||
|
||||
}
|
||||
|
||||
print <<END
|
||||
|
||||
### SET LEVEL7-RULES
|
||||
END
|
||||
;
|
||||
foreach $l7ruleentry (sort @l7rules)
|
||||
{
|
||||
@l7ruleline = split( /\;/, $l7ruleentry );
|
||||
if ( $l7ruleline[1] eq $qossettings{'IMQ_DEV'} )
|
||||
{
|
||||
$qossettings{'CLASS'} = $l7ruleline[0];
|
||||
$qossettings{'DEVICE'} = $l7ruleline[1];
|
||||
$qossettings{'L7PROT'} = $l7ruleline[2];
|
||||
$qossettings{'QIP'} = $l7ruleline[3];
|
||||
$qossettings{'DIP'} = $l7ruleline[4];
|
||||
print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
|
||||
print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
|
||||
}
|
||||
}
|
||||
|
||||
print "\n\t### SET PORT-RULES\n";
|
||||
foreach $portruleentry (sort @portrules)
|
||||
{
|
||||
@@ -596,6 +562,40 @@ print "\n\t### SET PORT-RULES\n";
|
||||
}
|
||||
}
|
||||
|
||||
print <<END
|
||||
|
||||
### SET LEVEL7-RULES
|
||||
END
|
||||
;
|
||||
foreach $l7ruleentry (sort @l7rules)
|
||||
{
|
||||
@l7ruleline = split( /\;/, $l7ruleentry );
|
||||
if ( $l7ruleline[1] eq $qossettings{'IMQ_DEV'} )
|
||||
{
|
||||
$qossettings{'CLASS'} = $l7ruleline[0];
|
||||
$qossettings{'DEVICE'} = $l7ruleline[1];
|
||||
$qossettings{'L7PROT'} = $l7ruleline[2];
|
||||
$qossettings{'QIP'} = $l7ruleline[3];
|
||||
$qossettings{'DIP'} = $l7ruleline[4];
|
||||
print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j MARK --set-mark $qossettings{'CLASS'}\n";
|
||||
print "\tiptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} ";
|
||||
if ($qossettings{'QIP'} ne ''){
|
||||
print "-s $qossettings{'QIP'} ";
|
||||
}
|
||||
if ($qossettings{'DIP'} ne ''){
|
||||
print "-d $qossettings{'DIP'} ";
|
||||
}
|
||||
print "-m layer7 --l7dir /etc/l7-protocols/protocols --l7proto $qossettings{'L7PROT'} -j RETURN\n";
|
||||
}
|
||||
}
|
||||
|
||||
print <<END
|
||||
### REDUNDANT: SET ALL NONMARKED PACKETS TO DEFAULT CLASS
|
||||
iptables -t mangle -A QOS-INC -i $qossettings{'RED_DEV'} -m mark --mark 0 -j MARK --set-mark $qossettings{'DEFCLASS_INC'}
|
||||
|
||||
File diff suppressed because it is too large
Load Diff
@@ -14,3 +14,5 @@ if [ "$NUMBER" ]; then
|
||||
else
|
||||
echo "$MODULES" > /nicdriver
|
||||
fi
|
||||
|
||||
# kudzu -qps -c NETWORK | egrep "desc|network.hwaddr|driver" | awk -F': ' '{print $2}' | sed -e '/..:..:..:..:..:../a\\' -e "s/$/\;/g"
|
||||
|
||||
Reference in New Issue
Block a user