search for: regra

...ll -m layer7 --l7proto msnmessenger -j MARK --set-mark $MSN # referente ao ssh SSH="23" $IPT -t mangle -A PREROUTING -p all -m layer7 --l7proto ssh -j MARK --set-mark $SSH #---- # SALVANDO MARCAS DO IPTABLES #---- $IPT -t mangle -A PREROUTING -j CONNMARK --save-mark #------ # Apagando regras antigas de QoS #------ $TC qdisc del dev $DL01 root 2> /dev/null > /dev/null $TC qdisc del dev $DL01 ingress 2> /dev/null > /dev/null $TC qdisc del dev $DL02 root 2> /dev/null > /dev/null $TC qdisc del dev $DL02 ingress 2> /dev/null > /dev/null $TC qdisc del dev $UP r...

...derstand why it did not worked well before). Att, Nataniel Klug ------------------------ #!/bin/sh #------ # Script de QoS Cyber Nett #------ # Nataniel Klug # suporte@cnett.com.br #------ TC="/sbin/tc" IPT="/usr/local/sbin/iptables" DL="eth1" #------ # Apagando regras antigas de QoS #------ $TC qdisc del dev $DL root 2> /dev/null > /dev/null $TC qdisc del dev $DL ingress 2> /dev/null > /dev/null #------ # Regras para a placa eth1 #------ $TC qdisc add dev $DL root handle 1: htb default 40 CLASS="/sbin/tc class add dev $DL parent" $CLA...

...es perdem o acesso. Ainda assim, somente usu?rios com Windows XP tem esse problema. Vou testar suas indica??es. F?bio Rabelo wrote: > > > 2010/3/23 Leonardo Carneiro - Veltrac <lscarneiro at veltrac.com.br > <mailto:lscarneiro at veltrac.com.br>> > > N?o existem regras de firewall para nenhuma interface. Tenho as > seguinte regra sobre interfaces e redes: > > hosts allow = 192.168.0. 192.168.1. 127. > interfaces = eth0 eth1 > > > E estas linhas acima est?o no smb.conf ?!? > > Se sim, o Sr. tem que acrescentar o loop...

...92.168.2.245 The default gw of the PROXY is 192.168.1.7 and the link2 is a Secondary link that i need to go out to internet!!!! My internal IP of the network is 192.168.2.0/24 Im using this #!/bin/bash # # Legenda: # eth0 Link2 # eth1 link1 # # # Resetando o Firewall: echo -n "Resetando regras existentes" iptables -F iptables -Z iptables -X iptables -t nat -F iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT echo "[OK]" # OBS: essa regra eh mutuamente excludente com a proxima, a do NAT # ou seja, escolha uma das duas echo -n "Habil...

...------------------------------------------------------- #!/bin/sh #------ # Script de QoS Cyber Nett #------ # Nataniel Klug # suporte@cnett.com.br #------ TC="/sbin/tc" IPT="/usr/local/sbin/iptables" $IPT -t mangle -X $IPT -t mangle -F DL="eth1" #------ # Apagando regras antigas de QoS #------ $TC qdisc del dev $DL root 2> /dev/null > /dev/null $TC qdisc del dev $DL ingress 2> /dev/null > /dev/null #------ # Regras para a placa eth1 #------ $TC qdisc add dev $DL root handle 1: htb default 50 CLASS="/sbin/tc class add dev $DL parent" $CLA...

...'189.47.133.38/32' set infortron2 = '200.211.36.2/32' set redeinterna = '192.168.0.0/24' ############################################################################### ############################################################################### ### vamos dar um flush nas regras do firewall iptables -F iptables -F -t nat iptables -X iptables -X -t nat ############################################################################### ############################################################################### # aplicando as regras contra ataques de negacao de servico # con...

...My full script (the one that is working fine is at the end). Att, Nataniel Klug ------ #!/bin/sh #------ # Script de QoS Cyber Nett #------ # Nataniel Klug # suporte@cnett.com.br #------ TC="/sbin/tc" IPT="/usr/local/sbin/iptables" DL="eth3" #------ # Apagando regras antigas de QoS #------ $TC qdisc del dev $DL root 2> /dev/null > /dev/null $TC qdisc del dev $DL ingress 2> /dev/null > /dev/null #------ # Regras para a placa eth1 #------ $TC qdisc add dev $DL root handle 1: htb default 50 CLASS="/sbin/tc class add dev $DL parent" $CLA...

Hi. there is a way to MARK udp VOIP (SIP) traffic, in order to put in a highest prio class ? Traffic flow seems start on udp 5060 port, but next both server and client seems jump to a random(?) port. I can''t use CONNMARK because is udp traffic. I only see a pattern for L7 patch in order to SIP traffic identification , but I run 2.4 kernel series . When you patch 2.4 kernel with

...I then created the script bellow. The problem is I can''t ''see'' any traffic (Sent 0 bytes) on classes 1:11 1:12 on imq0. Classes 2:11 and 2:12 on eth2 has its counters increased and seems to make sence. Any help will be greatly appreciated. Thaks a lot. #!/bin/sh # # Regras para HTB geradas em Thu Dec 22 11:16:01 2005 # # # htbgen version 0.0.1 - 2005/12/16 # IP=/sbin/ip TC=/sbin/tc # # Rules for input via eth2 (output via imq0) # $TC qdisc del dev imq0 root >&/dev/null $TC qdisc add dev imq0 root handle 1: htb default ffff r2q 1 IPT=/usr/sbin/iptables R...