Página 3 de 4 PrimeiroPrimeiro 1234 ÚltimoÚltimo
+ Responder ao Tópico



  1. #13

    Padrão

    Citação Postado originalmente por alexandrecorrea Ver Post
    da pra fazer com o 2.9 usando um metodo nao tradicional.. como mencionei.. o squid adiciona marcacoes no header de cada objeto.. indicando se este objeto esta sendo um HIT (do cache) ou um MISS (internet)

    basta usar o modulo de marcação de pacotes para detectar este header.. quando detectado.. ele marca a CONEXAO e joga fora do controle de banda...
    se for possivel, coloque as regras ai pra nos,

    obrigado

    saip

    o sol nasce para todos, mas alguns dorme um pouco mais..

  2. #14

    Padrão regras

    eu nao tenho regras so configurado mesmo tem como exportar o meu mk pra script se tiver eu coloco



  3. #15

    Padrão

    Citação Postado originalmente por powernetscm Ver Post
    eu nao tenho regras so configurado mesmo tem como exportar o meu mk pra script se tiver eu coloco
    tem sim, vc entra pelo wimbox, vai new terminal,

    vai ate o local da regra, por exemplo: ip firewall mangle, export.

    ok


    saip

    o sol nasce para todos, mas alguns dorme um pouco mais...

  4. #16

    Padrão mangle

    ip firewall mangle
    add chain=prerouting action=mark-packet new-packet-mark=test-up passthrough=no in-interface=Local comment="" disabled=yes
    add chain=forward action=mark-connection new-connection-mark=test-conn passthrough=yes comment="" disabled=yes
    add chain=forward action=mark-packet new-packet-mark=test-down passthrough=no in-interface=Public connection-mark=test-conn comment="" disabled=yes
    add chain=output action=mark-packet new-packet-mark=test-down passthrough=no out-interface=Local comment="" disabled=yes
    add chain=prerouting action=mark-connection new-connection-mark=ICMP_conn passthrough=yes protocol=icmp comment="ICMP" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=ICMP_Packet passthrough=no protocol=icmp connection-mark=ICMP_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=dns_conn passthrough=yes dst-port=53 protocol=udp comment="Dns" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=dns_packet passthrough=no dst-port=53 protocol=udp connection-mark=dns_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=http_conn passthrough=yes dst-port=80 protocol=tcp comment="Prioriza servi os web" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=http_packet_mark passthrough=no dst-port=80 protocol=tcp connection-mark=http_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=MSN_Connetcion passthrough=yes dst-port=1863 protocol=tcp comment="Msn Messenger" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=Msn_packet passthrough=no dst-port=1863 protocol=tcp connection-mark=MSN_Connetcion comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=https_connection passthrough=yes dst-port=443 protocol=tcp comment="Prioriza Https" \
    disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=https_packet passthrough=no dst-port=443 protocol=tcp connection-mark=https_connection comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=mk_conn passthrough=yes dst-port=8291 protocol=tcp comment="MK" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=mk_packet passthrough=no dst-port=8291 protocol=tcp comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=dhcp_conn passthrough=yes dst-port=67-68 protocol=udp comment="dhcp" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=dhcp_packet passthrough=no dst-port=67-68 protocol=udp connection-mark=dhcp_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=udp0_conn passthrough=yes dst-port=0 protocol=udp comment="TEst 0" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=zero_packet passthrough=no dst-port=0 protocol=udp connection-mark=udp0_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=ftp_conn passthrough=yes dst-port=20-21 protocol=tcp comment="Ftp" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=ftp_packet passthrough=no dst-port=20-21 protocol=tcp connection-mark=ftp_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=orkut_conn passthrough=yes protocol=tcp src-address-list=Orkut comment="Orkut testes \
    Prioridade" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=orkut_packet passthrough=no protocol=tcp connection-mark=orkut_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=udp_conn passthrough=yes dst-port=22 protocol=tcp comment="UDP " disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=udp_packet passthrough=no dst-port=22 protocol=tcp connection-mark=udp_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=Ms_conn passthrough=yes dst-port=1755 protocol=tcp comment="Ms" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=ms_packet passthrough=no dst-port=1755 protocol=tcp connection-mark=Ms_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=skype_conn passthrough=yes dst-port=5060 protocol=tcp comment="skype" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=skype_packet passthrough=no dst-port=5060 protocol=tcp connection-mark=skype_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=conquer_conn passthrough=yes dst-port=5816 protocol=tcp comment="Conquer" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=Conquer_packet passthrough=no dst-port=5816 protocol=tcp connection-mark=conquer_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=pop3_conn passthrough=yes dst-port=110 protocol=tcp comment="POP" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=pop3_packet passthrough=no dst-port=110 protocol=tcp connection-mark=pop3_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=SMTP_conn passthrough=yes dst-port=25 protocol=tcp comment="SMTP" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=SMTP_packet passthrough=no dst-port=25 protocol=tcp connection-mark=SMTP_conn comment="" disabled=no
    add chain=output action=mark-connection new-connection-mark=proxyfull passthrough=yes src-port=3126 protocol=tcp comment="PROXY FULL" disabled=yes
    add chain=output action=mark-packet new-packet-mark=proxyfull passthrough=yes connection-mark=proxyfull comment="" disabled=yes
    add chain=output action=return connection-mark=proxyfull comment="" disabled=yes
    add chain=prerouting action=mark-connection new-connection-mark=stream_conn passthrough=yes dst-port=554 protocol=tcp comment="Stream" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=stream_packet passthrough=no dst-port=554 protocol=tcp connection-mark=stream_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=youtube_conn passthrough=yes src-address-list=youtube comment="YOUTUBE traffic" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=youtube_packet passthrough=no connection-mark=youtube_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=p2p_conn passthrough=yes p2p=all-p2p comment="Marca P2P" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=p2p_packet passthrough=no p2p=all-p2p connection-mark=p2p_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=conn_restantes passthrough=yes comment="Marcando o restante das conex es" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=restante_packet passthrough=no connection-mark=conn_restantes comment="" disabled=no



  5. #17

    Padrão

    Cache FULL 100%????
    e melhor esperar a versao 3.0 do MK.
    nessa versao 2.9 nao funfa 100% nao

  6. #18

    Padrão

    Citação Postado originalmente por powernetscm Ver Post
    ip firewall mangle
    add chain=prerouting action=mark-packet new-packet-mark=test-up passthrough=no in-interface=Local comment="" disabled=yes
    add chain=forward action=mark-connection new-connection-mark=test-conn passthrough=yes comment="" disabled=yes
    add chain=forward action=mark-packet new-packet-mark=test-down passthrough=no in-interface=Public connection-mark=test-conn comment="" disabled=yes
    add chain=output action=mark-packet new-packet-mark=test-down passthrough=no out-interface=Local comment="" disabled=yes
    add chain=prerouting action=mark-connection new-connection-mark=ICMP_conn passthrough=yes protocol=icmp comment="ICMP" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=ICMP_Packet passthrough=no protocol=icmp connection-mark=ICMP_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=dns_conn passthrough=yes dst-port=53 protocol=udp comment="Dns" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=dns_packet passthrough=no dst-port=53 protocol=udp connection-mark=dns_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=http_conn passthrough=yes dst-port=80 protocol=tcp comment="Prioriza servi os web" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=http_packet_mark passthrough=no dst-port=80 protocol=tcp connection-mark=http_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=MSN_Connetcion passthrough=yes dst-port=1863 protocol=tcp comment="Msn Messenger" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=Msn_packet passthrough=no dst-port=1863 protocol=tcp connection-mark=MSN_Connetcion comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=https_connection passthrough=yes dst-port=443 protocol=tcp comment="Prioriza Https" \
    disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=https_packet passthrough=no dst-port=443 protocol=tcp connection-mark=https_connection comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=mk_conn passthrough=yes dst-port=8291 protocol=tcp comment="MK" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=mk_packet passthrough=no dst-port=8291 protocol=tcp comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=dhcp_conn passthrough=yes dst-port=67-68 protocol=udp comment="dhcp" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=dhcp_packet passthrough=no dst-port=67-68 protocol=udp connection-mark=dhcp_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=udp0_conn passthrough=yes dst-port=0 protocol=udp comment="TEst 0" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=zero_packet passthrough=no dst-port=0 protocol=udp connection-mark=udp0_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=ftp_conn passthrough=yes dst-port=20-21 protocol=tcp comment="Ftp" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=ftp_packet passthrough=no dst-port=20-21 protocol=tcp connection-mark=ftp_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=orkut_conn passthrough=yes protocol=tcp src-address-list=Orkut comment="Orkut testes \
    Prioridade" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=orkut_packet passthrough=no protocol=tcp connection-mark=orkut_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=udp_conn passthrough=yes dst-port=22 protocol=tcp comment="UDP " disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=udp_packet passthrough=no dst-port=22 protocol=tcp connection-mark=udp_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=Ms_conn passthrough=yes dst-port=1755 protocol=tcp comment="Ms" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=ms_packet passthrough=no dst-port=1755 protocol=tcp connection-mark=Ms_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=skype_conn passthrough=yes dst-port=5060 protocol=tcp comment="skype" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=skype_packet passthrough=no dst-port=5060 protocol=tcp connection-mark=skype_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=conquer_conn passthrough=yes dst-port=5816 protocol=tcp comment="Conquer" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=Conquer_packet passthrough=no dst-port=5816 protocol=tcp connection-mark=conquer_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=pop3_conn passthrough=yes dst-port=110 protocol=tcp comment="POP" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=pop3_packet passthrough=no dst-port=110 protocol=tcp connection-mark=pop3_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=SMTP_conn passthrough=yes dst-port=25 protocol=tcp comment="SMTP" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=SMTP_packet passthrough=no dst-port=25 protocol=tcp connection-mark=SMTP_conn comment="" disabled=no
    add chain=output action=mark-connection new-connection-mark=proxyfull passthrough=yes src-port=3126 protocol=tcp comment="PROXY FULL" disabled=yes
    add chain=output action=mark-packet new-packet-mark=proxyfull passthrough=yes connection-mark=proxyfull comment="" disabled=yes
    add chain=output action=return connection-mark=proxyfull comment="" disabled=yes
    add chain=prerouting action=mark-connection new-connection-mark=stream_conn passthrough=yes dst-port=554 protocol=tcp comment="Stream" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=stream_packet passthrough=no dst-port=554 protocol=tcp connection-mark=stream_conn comment="" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=youtube_conn passthrough=yes src-address-list=youtube comment="YOUTUBE traffic" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=youtube_packet passthrough=no connection-mark=youtube_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=p2p_conn passthrough=yes p2p=all-p2p comment="Marca P2P" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=p2p_packet passthrough=no p2p=all-p2p connection-mark=p2p_conn comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=conn_restantes passthrough=yes comment="Marcando o restante das conex es" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=restante_packet passthrough=no connection-mark=conn_restantes comment="" disabled=no
    Olá carinha...
    essas suas regras ai...ele faz o (cache) ou o melhoramento da entrega do site Orkut e Youtube....

    pois montei eles aqui e não passa trafego por eles

    Grato pela atenção