Trying to create a whitelist to limit bandwidth. My sync speed is 1536/256 kbps.
Simple rules in order:
1. Do not limit (or set to 1536/256) MAC 00:00:00:00:00 (computer is in 192.168.1.0/24).
2. Do not limit (or set to 1536/256) MAC 00:00:00:00:01 (computer is in 192.168.1.0/24).
3. Do not limit (or set to 1536/256) MAC 00:00:00:00:02 (computer is in 192.168.1.0/24).
4. Do not limit (or set to 1536/256) MAC 00:00:00:00:03 (computer is in 192.168.1.0/24).
5. Limit IP range 192.168.1.2 -> 192.168.1.254 (or all MAC/IP's) to 500/60 kbps.
This is the code which i was given and it doesnt work
Code:
TCA="tc class add dev br0"
TFA="tc filter add dev br0"
TQA="tc qdisc add dev br0"
SFQ="sfq perturb 10"
tc qdisc del dev br0 root
tc qdisc add dev br0 root handle 1: htb
tc class add dev br0 parent 1: classid 1:1 htb rate 1500kbps
$TCA parent 1:1 classid 1:99 htb rate 1kbps ceil 50kbps prio 2
$TQA parent 1:99 handle 99: $SFQ
$TFA parent 1:0 prio 2 protocol ip handle 99 fw flowid 1:99
iptables -t mangle -A POSTROUTING -m iprange --dst-range 192.168.1.2-192.168.1.254 -j MARK --set-mark 99
TCAU="tc class add dev imq0"
TFAU="tc filter add dev imq0"
TQAU="tc qdisc add dev imq0"
modprobe imq
modprobe ipt_IMQ
ip link set imq0 up
tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1: htb
tc class add dev imq0 parent 1: classid 1:1 htb rate 250kbps
$TCAU parent 1:1 classid 1:10 htb rate 1kbps ceil 250kbps prio 1
$TCAU parent 1:1 classid 1:11 htb rate 1kbps ceil 250kbps prio 1
$TCAU parent 1:1 classid 1:12 htb rate 1kbps ceil 250kbps prio 1
$TCAU parent 1:1 classid 1:13 htb rate 1kbps ceil 250kbps prio 1
$TCAU parent 1:1 classid 1:14 htb rate 1kbps ceil 250kbps prio 1
$TCAU parent 1:1 classid 1:99 htb rate 1kbps ceil 6kbps prio 2
$TQAU parent 1:10 handle 10: $SFQ
$TQAU parent 1:11 handle 11: $SFQ
$TQAU parent 1:12 handle 12: $SFQ
$TQAU parent 1:13 handle 13: $SFQ
$TQAU parent 1:14 handle 14: $SFQ
$TQAU parent 1:99 handle 99: $SFQ
$TFAU parent 1:0 prio 2 protocol ip handle 99 fw flowid 1:99
iptables -t mangle -A PREROUTING -m mac --mac-source 00:00:00:00:00:01 -j MARK --set-mark 10
iptables -t mangle -A PREROUTING -m mac --mac-source 00:00:00:00:00:02 -j MARK --set-mark 11
iptables -t mangle -A PREROUTING -m mac --mac-source 00:00:00:00:00:03 -j MARK --set-mark 12
iptables -t mangle -A PREROUTING -m mac --mac-source 00:00:00:00:00:04 -j MARK --set-mark 13
iptables -t mangle -A PREROUTING -m mac --mac-source 00:00:00:00:00:05 -j MARK --set-mark 14
iptables -t mangle -A PREROUTING -m iprange --src-range 192.168.1.2-192.168.1.254 -j MARK --set-mark 99
iptables -t mangle -A PREROUTING -j IMQ --todev 0
Hi
I need help with an iptables configuration, this is what I have
server A
Server B
A and B are using different gateways
i am sending port 22 from A to B, I see the packages coming in B but B is not sending the package to internet. please give me some examples. (0 Replies)
Hi, I just build a Linux server, I said yes to enable the firewall. I only choose SSH conneciton. When I check the iptables. I see all of this (see below). I want to reject every thing only allow SSH from subnet 192.168.1.xx. Can you advise, how to do.
Chain RH-Firewall-1-INPUT (2... (2 Replies)
Hi,
On the IPTABLES, I did iptables --flush. I want to start fresh. Now I only want two things. Allow one ip address to this server. Allow port 443 as incoming from every where. Please advice how to do this.
This is what I did so for.
iptables -I INPUT -i eth0 -s 1.2.3.4 -j ACCEPT... (5 Replies)
Hello
We have one linux machine in the office which happens to be an important firewall. I just know the basics and need to make one change
Essentially it is forward mysql traffic to another internal machine.
This is the original rule (forward to 192.20.0.17) which is working
... (0 Replies)
I have a CentOS 5.2 (10.20.21.73) machine that I need help with configuring iptables. According to documentation I believe this line should allow all communication between my machine and another machine (other machine has no firewall)
-A RH-Firewall-1-INPUT -s 10.20.21.12 -j ACCEPT
#... (1 Reply)
Thanks in advance
I have to remove ip_tables_name from /proc/net/...
i was trying to do so and getting the following error
cmd : rm ip_tables_names
error : rm: remove regular empty file `ip_tables_names'? y
rm: cannot remove `ip_tables_names': Operation not permitted (4 Replies)
Hey guys, I have just started using IP tables and was wondering if anyone could direct me to any good online resources as I am totally new to this. Thanks. (1 Reply)
