forum.opennet.ru

Составление сообщения

Исходное сообщение

"веб сайт с локальных машин."
Отправлено ILeonor, 29-Апр-13 17:15

>[оверквотинг удален]
>> -A PREROUTING -i ppp0 -j MINIUPNPD
>> -A PREROUTING -i ippp0 -j MINIUPNPD
>> -A PREROUTING -i eth2 -j MINIUPNPD
>> -A PREROUTING -d 91.227.95.24/32 -p tcp -m tcp --dport 8080 -j DNAT
>> --to-destination 192.168.1.2:80
>> -A POSTROUTING -o ppp0 -j MASQUERADE
>> -A POSTROUTING -o ippp0 -j MASQUERADE
>> -A POSTROUTING -o eth2 -j MASQUERADE
>> -A POSTROUTING -o eth0 -m mark --mark 0x1 -j SNAT --to-source 192.168.1.1
> проверяется маркировка , а где устанавливается?
*mangle
:PREROUTING ACCEPT [4976480:3334564326]
:INPUT ACCEPT [3918643:2767430601]
:FORWARD ACCEPT [1055501:566410413]
:OUTPUT ACCEPT [2759843:2851250330]
:POSTROUTING ACCEPT [3814196:3417582112]
:account - [0:0]
:eth2-dn-traf-tot - [0:0]
:eth2-up-traf-tot - [0:0]
:portfwb - [0:0]
:postrouting-1 - [0:0]
:postrouting-2 - [0:0]
:prerouting-1 - [0:0]
:prerouting-2 - [0:0]
:trafficforward - [0:0]
:trafficoutput - [0:0]
:trafficpostrouting - [0:0]
-A PREROUTING -j portfwb
-A PREROUTING -j prerouting-1
-A PREROUTING -j prerouting-2
-A INPUT -j account
-A FORWARD -j account
-A FORWARD -j trafficforward
-A OUTPUT -j account
-A OUTPUT -j trafficoutput
-A POSTROUTING -j postrouting-1
-A POSTROUTING -j postrouting-2
-A POSTROUTING -j trafficpostrouting
-A account -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN
-A account -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE
-A account -j ACCOUNT --addr 192.168.1.0/24 --tname RED
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109
-A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110
-A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109
-A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110
-A portfwb -d 192.168.44.155/32 -i eth0 -j MARK --set-xmark 0x1/0xffffffff
-A portfwb -d 192.168.44.155/32 -i eth1 -j MARK --set-xmark 0x3/0xffffffff
-A postrouting-1 -o eth0 -j RETURN
-A postrouting-1 -o eth1 -j RETURN
-A postrouting-2 -o ppp0 -j RETURN
-A postrouting-2 -o ippp0 -j RETURN
-A postrouting-2 -o eth2 -j RETURN
-A prerouting-1 -i eth0 -j RETURN
-A prerouting-1 -i eth1 -j RETURN
-A prerouting-2 -i ppp0 -j RETURN
-A prerouting-2 -i ippp0 -j RETURN
-A prerouting-2 -i eth2 -j RETURN
-A trafficforward -i eth2 -j RETURN
-A trafficforward -o eth2 -j RETURN
-A trafficforward -j CONNMARK --set-xmark 0x69/0xffffffff
-A trafficoutput -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 81,441,222 -j CONNMARK --set-xmark 0x67/0xffffffff
-A trafficoutput -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 80,8080,443,8443 -j CONNMARK --set-xmark 0x68/0xffffffff
-A trafficoutput -o eth2 -j RETURN
-A trafficoutput -j CONNMARK --set-xmark 0x69/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff
-A trafficpostrouting -m connmark --mark 0xc8 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Instant_Messaging
-A trafficpostrouting -m connmark --mark 0xc8 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Instant_Messaging
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m udp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m udp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m udp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m udp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff
-A trafficpostrouting -m connmark --mark 0xc9 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Domain_Name_Service
-A trafficpostrouting -m connmark --mark 0xc9 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Domain_Name_Service
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 21 -j CONNMARK --set-xmark 0xca/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 21 -j CONNMARK --set-xmark 0xca/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 21 -j CONNMARK --set-xmark 0xca/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 21 -j CONNMARK --set-xmark 0xca/0xffffffff
-A trafficpostrouting -m connmark --mark 0xca -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_File_Transfer_Protocol
-A trafficpostrouting -m connmark --mark 0xca -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_File_Transfer_Protocol
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff
-A trafficpostrouting -m connmark --mark 0xcb -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Web
-A trafficpostrouting -m connmark --mark 0xcb -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Web
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff
-A trafficpostrouting -m connmark --mark 0xcc -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Electronic_Mail
-A trafficpostrouting -m connmark --mark 0xcc -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Electronic_Mail
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff
-A trafficpostrouting -m connmark --mark 0xcd -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Secure_Shell
-A trafficpostrouting -m connmark --mark 0xcd -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Secure_Shell
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -m connmark --mark 0xce -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Voice_Over_IP
-A trafficpostrouting -m connmark --mark 0xce -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Voice_Over_IP
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff
-A trafficpostrouting -m connmark --mark 0xd0 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Gaming
-A trafficpostrouting -m connmark --mark 0xd0 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Gaming
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff
-A trafficpostrouting -m connmark --mark 0xd1 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Multimedia
-A trafficpostrouting -m connmark --mark 0xd1 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Multimedia
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff
-A trafficpostrouting -m connmark --mark 0xd3 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_VNC
-A trafficpostrouting -m connmark --mark 0xd3 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_VNC
-A trafficpostrouting -m dscp --dscp 0x2e -j CONNMARK --set-xmark 0xce/0xffffffff
-A trafficpostrouting -p esp -j CONNMARK --set-xmark 0xd2/0xffffffff
-A trafficpostrouting -p ah -j CONNMARK --set-xmark 0xd2/0xffffffff
-A trafficpostrouting -m connmark --mark 0x0 -m length --length 1:110 -j CLASSIFY --set-class 0001:0116
-A trafficpostrouting -o eth2 -j eth2-up-traf-tot
-A trafficpostrouting -o eth0 -j eth2-dn-traf-tot
-A trafficpostrouting -o eth1 -j eth2-dn-traf-tot

Исходное сообщение
"веб сайт с локальных машин." Отправлено ILeonor, 29-Апр-13 17:15
>[оверквотинг удален] >> -A PREROUTING -i ppp0 -j MINIUPNPD >> -A PREROUTING -i ippp0 -j MINIUPNPD >> -A PREROUTING -i eth2 -j MINIUPNPD >> -A PREROUTING -d 91.227.95.24/32 -p tcp -m tcp --dport 8080 -j DNAT >> --to-destination 192.168.1.2:80 >> -A POSTROUTING -o ppp0 -j MASQUERADE >> -A POSTROUTING -o ippp0 -j MASQUERADE >> -A POSTROUTING -o eth2 -j MASQUERADE >> -A POSTROUTING -o eth0 -m mark --mark 0x1 -j SNAT --to-source 192.168.1.1 > проверяется маркировка , а где устанавливается? *mangle :PREROUTING ACCEPT [4976480:3334564326] :INPUT ACCEPT [3918643:2767430601] :FORWARD ACCEPT [1055501:566410413] :OUTPUT ACCEPT [2759843:2851250330] :POSTROUTING ACCEPT [3814196:3417582112] :account - [0:0] :eth2-dn-traf-tot - [0:0] :eth2-up-traf-tot - [0:0] :portfwb - [0:0] :postrouting-1 - [0:0] :postrouting-2 - [0:0] :prerouting-1 - [0:0] :prerouting-2 - [0:0] :trafficforward - [0:0] :trafficoutput - [0:0] :trafficpostrouting - [0:0] -A PREROUTING -j portfwb -A PREROUTING -j prerouting-1 -A PREROUTING -j prerouting-2 -A INPUT -j account -A FORWARD -j account -A FORWARD -j trafficforward -A OUTPUT -j account -A OUTPUT -j trafficoutput -A POSTROUTING -j postrouting-1 -A POSTROUTING -j postrouting-2 -A POSTROUTING -j trafficpostrouting -A account -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN -A account -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE -A account -j ACCOUNT --addr 192.168.1.0/24 --tname RED -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109 -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110 -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109 -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110 -A portfwb -d 192.168.44.155/32 -i eth0 -j MARK --set-xmark 0x1/0xffffffff -A portfwb -d 192.168.44.155/32 -i eth1 -j MARK --set-xmark 0x3/0xffffffff -A postrouting-1 -o eth0 -j RETURN -A postrouting-1 -o eth1 -j RETURN -A postrouting-2 -o ppp0 -j RETURN -A postrouting-2 -o ippp0 -j RETURN -A postrouting-2 -o eth2 -j RETURN -A prerouting-1 -i eth0 -j RETURN -A prerouting-1 -i eth1 -j RETURN -A prerouting-2 -i ppp0 -j RETURN -A prerouting-2 -i ippp0 -j RETURN -A prerouting-2 -i eth2 -j RETURN -A trafficforward -i eth2 -j RETURN -A trafficforward -o eth2 -j RETURN -A trafficforward -j CONNMARK --set-xmark 0x69/0xffffffff -A trafficoutput -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 81,441,222 -j CONNMARK --set-xmark 0x67/0xffffffff -A trafficoutput -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 80,8080,443,8443 -j CONNMARK --set-xmark 0x68/0xffffffff -A trafficoutput -o eth2 -j RETURN -A trafficoutput -j CONNMARK --set-xmark 0x69/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff -A trafficpostrouting -m connmark --mark 0xc8 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Instant_Messaging -A trafficpostrouting -m connmark --mark 0xc8 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Instant_Messaging -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m udp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m udp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m udp --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m udp --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff -A trafficpostrouting -m connmark --mark 0xc9 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Domain_Name_Service -A trafficpostrouting -m connmark --mark 0xc9 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Domain_Name_Service -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 21 -j CONNMARK --set-xmark 0xca/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 21 -j CONNMARK --set-xmark 0xca/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 21 -j CONNMARK --set-xmark 0xca/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 21 -j CONNMARK --set-xmark 0xca/0xffffffff -A trafficpostrouting -m connmark --mark 0xca -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_File_Transfer_Protocol -A trafficpostrouting -m connmark --mark 0xca -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_File_Transfer_Protocol -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff -A trafficpostrouting -m connmark --mark 0xcb -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Web -A trafficpostrouting -m connmark --mark 0xcb -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Web -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff -A trafficpostrouting -m connmark --mark 0xcc -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Electronic_Mail -A trafficpostrouting -m connmark --mark 0xcc -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Electronic_Mail -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp --sport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp --dport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff -A trafficpostrouting -m connmark --mark 0xcd -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Secure_Shell -A trafficpostrouting -m connmark --mark 0xcd -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Secure_Shell -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -m connmark --mark 0xce -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Voice_Over_IP -A trafficpostrouting -m connmark --mark 0xce -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Voice_Over_IP -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff -A trafficpostrouting -m connmark --mark 0xd0 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Gaming -A trafficpostrouting -m connmark --mark 0xd0 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Gaming -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff -A trafficpostrouting -m connmark --mark 0xd1 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_Multimedia -A trafficpostrouting -m connmark --mark 0xd1 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_Multimedia -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff -A trafficpostrouting -m connmark --mark 0xd3 -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN_VNC -A trafficpostrouting -m connmark --mark 0xd3 -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE_VNC -A trafficpostrouting -m dscp --dscp 0x2e -j CONNMARK --set-xmark 0xce/0xffffffff -A trafficpostrouting -p esp -j CONNMARK --set-xmark 0xd2/0xffffffff -A trafficpostrouting -p ah -j CONNMARK --set-xmark 0xd2/0xffffffff -A trafficpostrouting -m connmark --mark 0x0 -m length --length 1:110 -j CLASSIFY --set-class 0001:0116 -A trafficpostrouting -o eth2 -j eth2-up-traf-tot -A trafficpostrouting -o eth0 -j eth2-dn-traf-tot -A trafficpostrouting -o eth1 -j eth2-dn-traf-tot

Ваше сообщение

Имя*:

EMail:

Для отправки новых сообщений в текущей нити на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email).
Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.

Заголовок*:

Сообщение*:

>>[оверквотинг удален] 
>>> -A PREROUTING -i ppp0 -j MINIUPNPD 
>>> -A PREROUTING -i ippp0 -j MINIUPNPD 
>>> -A PREROUTING -i eth2 -j MINIUPNPD 
>>> -A PREROUTING -d 91.227.95.24/32 -p tcp -m tcp --dport 8080 -j DNAT 
>>> --to-destination 192.168.1.2:80 
>>> -A POSTROUTING -o ppp0 -j MASQUERADE 
>>> -A POSTROUTING -o ippp0 -j MASQUERADE 
>>> -A POSTROUTING -o eth2 -j MASQUERADE 
>>> -A POSTROUTING -o eth0 -m mark --mark 0x1 -j SNAT --to-source 192.168.1.1 
>> проверяется маркировка , а где устанавливается?

> *mangle 
> :PREROUTING ACCEPT [4976480:3334564326] 
> :INPUT ACCEPT [3918643:2767430601] 
> :FORWARD ACCEPT [1055501:566410413] 
> :OUTPUT ACCEPT [2759843:2851250330] 
> :POSTROUTING ACCEPT [3814196:3417582112] 
> :account - [0:0] 
> :eth2-dn-traf-tot - [0:0] 
> :eth2-up-traf-tot - [0:0] 
> :portfwb - [0:0] 
> :postrouting-1 - [0:0] 
> :postrouting-2 - [0:0] 
> :prerouting-1 - [0:0] 
> :prerouting-2 - [0:0] 
> :trafficforward - [0:0] 
> :trafficoutput - [0:0] 
> :trafficpostrouting - [0:0] 
> -A PREROUTING -j portfwb 
> -A PREROUTING -j prerouting-1 
> -A PREROUTING -j prerouting-2 
> -A INPUT -j account 
> -A FORWARD -j account 
> -A FORWARD -j trafficforward 
> -A OUTPUT -j account 
> -A OUTPUT -j trafficoutput 
> -A POSTROUTING -j postrouting-1 
> -A POSTROUTING -j postrouting-2 
> -A POSTROUTING -j trafficpostrouting 
> -A account -j ACCOUNT --addr 192.168.1.0/24 --tname GREEN 
> -A account -j ACCOUNT --addr 192.168.2.0/24 --tname PURPLE 
> -A account -j ACCOUNT --addr 192.168.1.0/24 --tname RED 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109 
 
> -A eth2-dn-traf-tot -o eth0 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-dn-traf-tot -o eth1 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0x67 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0x68 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0x69 -j CLASSIFY --set-class 0001:0115 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xc8 -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xc9 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xca -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcb -j CLASSIFY --set-class 0001:0109 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcc -j CLASSIFY --set-class 0001:0111 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xcd -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xce -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd0 -j CLASSIFY --set-class 0001:0112 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd1 -j CLASSIFY --set-class 0001:0110 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd2 -j CLASSIFY --set-class 0001:0109 
 
> -A eth2-up-traf-tot -o eth2 -m connmark --mark 0xd3 -j CLASSIFY --set-class 0001:0110 
 
> -A portfwb -d 192.168.44.155/32 -i eth0 -j MARK --set-xmark 0x1/0xffffffff 
> -A portfwb -d 192.168.44.155/32 -i eth1 -j MARK --set-xmark 0x3/0xffffffff 
> -A postrouting-1 -o eth0 -j RETURN 
> -A postrouting-1 -o eth1 -j RETURN 
> -A postrouting-2 -o ppp0 -j RETURN 
> -A postrouting-2 -o ippp0 -j RETURN 
> -A postrouting-2 -o eth2 -j RETURN 
> -A prerouting-1 -i eth0 -j RETURN 
> -A prerouting-1 -i eth1 -j RETURN 
> -A prerouting-2 -i ppp0 -j RETURN 
> -A prerouting-2 -i ippp0 -j RETURN 
> -A prerouting-2 -i eth2 -j RETURN 
> -A trafficforward -i eth2 -j RETURN 
> -A trafficforward -o eth2 -j RETURN 
> -A trafficforward -j CONNMARK --set-xmark 0x69/0xffffffff 
> -A trafficoutput -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 81,441,222 -j CONNMARK --set-xmark 0x67/0xffffffff 
> -A trafficoutput -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 80,8080,443,8443 -j CONNMARK --set-xmark 0x68/0xffffffff 
> -A trafficoutput -o eth2 -j RETURN 
> -A trafficoutput -j CONNMARK --set-xmark 0x69/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 5190:5193,1863,6901,6891:6900 -j CONNMARK --set-xmark 0xc8/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xc8 -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Instant_Messaging 
> -A trafficpostrouting -m connmark --mark 0xc8 -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Instant_Messaging 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m udp 
> --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m udp 
> --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m udp 
> --sport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m udp 
> --dport 53 -j CONNMARK --set-xmark 0xc9/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xc9 -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Domain_Name_Service 
> -A trafficpostrouting -m connmark --mark 0xc9 -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Domain_Name_Service 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --sport 21 -j CONNMARK --set-xmark 0xca/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --dport 21 -j CONNMARK --set-xmark 0xca/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --sport 21 -j CONNMARK --set-xmark 0xca/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --dport 21 -j CONNMARK --set-xmark 0xca/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xca -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_File_Transfer_Protocol 
> -A trafficpostrouting -m connmark --mark 0xca -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_File_Transfer_Protocol 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 80,800,8080,8008,443,3128 -j CONNMARK --set-xmark 0xcb/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xcb -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Web 
> -A trafficpostrouting -m connmark --mark 0xcb -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Web 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 25,110,143,993 -j CONNMARK --set-xmark 0xcc/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xcc -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Electronic_Mail 
> -A trafficpostrouting -m connmark --mark 0xcc -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Electronic_Mail 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --sport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --dport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --sport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m tcp 
> --dport 22 -j CONNMARK --set-xmark 0xcd/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xcd -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Secure_Shell 
> -A trafficpostrouting -m connmark --mark 0xcd -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Secure_Shell 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 1720,1503,5060:5070,3782 -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xce -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Voice_Over_IP 
> -A trafficpostrouting -m connmark --mark 0xce -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Voice_Over_IP 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 27910,7777,4000,6112:6119,27051,88,3074 -j CONNMARK --set-xmark 0xd0/0xffffffff 
 
> -A trafficpostrouting -m connmark --mark 0xd0 -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Gaming 
> -A trafficpostrouting -m connmark --mark 0xd0 -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Gaming 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 554,2001,7070:7071,1755,8000:8001 -j CONNMARK --set-xmark 0xd1/0xffffffff 
 
> -A trafficpostrouting -m connmark --mark 0xd1 -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_Multimedia 
> -A trafficpostrouting -m connmark --mark 0xd1 -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_Multimedia 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -i eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -o eth2 -p tcp -m connmark --mark 0x0 -m multiport 
> --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -i eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --sports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -o eth2 -p udp -m connmark --mark 0x0 -m multiport 
> --dports 5800:5810,5900:5910 -j CONNMARK --set-xmark 0xd3/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0xd3 -j ACCOUNT --addr 192.168.1.0/24 --tname 
> GREEN_VNC 
> -A trafficpostrouting -m connmark --mark 0xd3 -j ACCOUNT --addr 192.168.2.0/24 --tname 
> PURPLE_VNC 
> -A trafficpostrouting -m dscp --dscp 0x2e -j CONNMARK --set-xmark 0xce/0xffffffff 
> -A trafficpostrouting -p esp -j CONNMARK --set-xmark 0xd2/0xffffffff 
> -A trafficpostrouting -p ah -j CONNMARK --set-xmark 0xd2/0xffffffff 
> -A trafficpostrouting -m connmark --mark 0x0 -m length --length 1:110 -j CLASSIFY 
> --set-class 0001:0116 
> -A trafficpostrouting -o eth2 -j eth2-up-traf-tot 
> -A trafficpostrouting -o eth0 -j eth2-dn-traf-tot 
> -A trafficpostrouting -o eth1 -j eth2-dn-traf-tot

При общении не допускается: неуважительное отношение к собеседнику, хамство, унизительное обращение, ненормативная лексика, переход на личности, агрессивное поведение, обесценивание собеседника, провоцирование флейма голословными и заведомо ложными заявлениями. Не отвечайте на сообщения, явно нарушающие правила - удаляются не только сами нарушения, но и все ответы на них. Лог модерирования.

Партнёры:

Хостинг:

Закладки на сайте
Проследить за страницей

Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру