|
还有一点楼主要注意生成的脚本可能太大不能保存到防火墙命令中。我就是这样的,
我是用这个方法解决的脚本如下:
#--------------------------------------------
#WRT54 Script Generator v1.00
#Copyright (C) 2006 Robert "Robson" Mytkowski
#--------------------------------------------
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 2048kbit
$TCA parent 1:1 classid 1:10 htb rate 300kbit ceil 300kbit prio 2
$TFA parent 1:0 prio 2 protocol ip handle 10 fw flowid 1:10
iptables -t mangle -A POSTROUTING -d 192.168.0.12/30 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.16/28 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.32/27 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.64/26 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.128/26 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.192/27 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.224/28 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.240/29 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.248/30 -j MARK --set-mark 10
iptables -t mangle -A POSTROUTING -d 192.168.0.252/31 -j MARK --set-mark 10
tc qdisc add dev br0 ingress
$TFA parent ffff: protocol ip handle 50 fw police rate 300kbit mtu 12k burst 10k drop
iptables -t mangle -A PREROUTING -s 192.168.0.12/30 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.16/28 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.32/27 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.64/26 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.128/26 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.192/27 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.224/28 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.240/29 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.248/30 -j MARK --set-mark 50
iptables -t mangle -A PREROUTING -s 192.168.0.252/31 -j MARK --set-mark 50
ip 地址从192.168.0。12-192.168.0.253 |
|