# note you have only 7 prios!!! # note the protonames are global!!! (so you can just one proto into two # protogroups) # protocol definitions # ? # ! ?test interactive 50 100 # interactive class - ssh, ospf and irc ;) !interactive u32 match ip sport 22 0xffff match ip protocol 0x6 0xff match ip tos 0x10 0xff # ssh shell !interactive u32 match ip dport 22 0xffff match ip protocol 0x6 0xff match ip tos 0x10 0xff # ssh shell !interactive u32 match ip sport 6667 0xffff match ip protocol 0x6 0xff # irc !interactive u32 match ip dport 6667 0xffff match ip protocol 0x6 0xff # irc #!1 TODO: ospf ?test fast_and_little 30 100 # almost interactive class - udp games, icmp and tos min delay !fast_and_little u32 match ip protocol 0x01 0xff # icmp !fast_and_little u32 match ip protocol 0x11 0xff # udp !fast_and_little u32 match ip tos 0x10 0xff # tos minimize delay !fast_and_little u32 match ip protocol 0x6 0xff match u8 0x05 0x0f at 0 match u16 0x0000 0xffc0 at 2 match u8 0x10 0xff at 33 # tcp ack size<64 ?test stream 80 100 # streamed transports class - http, tos max throughput !stream u32 match ip tos 0x8 0xff # tos maximize throughput !stream u32 match ip sport 80 0xffff match ip protocol 0x6 0xff # http !stream u32 match ip dport 80 0xffff match ip protocol 0x6 0xff # http ?test bagr 100 100 # test fw rule !bagr mark 5 # fwmark test ?test iptest 100 100 !iptest ipt -p udp !iptest include metal !metal mark 5 !metal other ?default def 100 100 !def include iptest