Freesco, NND, CDN, EOS

iptables -t mangle -A PREROUTING -s $ADDRESS -m layer7 --l7proto edonkey -j MARK --set-mark 0x${MARK}
iptables -t mangle -A PREROUTING -s $ADDRESS -m layer7 --l7proto bittorrent -j MARK --set-mark 0x${MARK}
iptables -t mangle -A PREROUTING -s $ADDRESS -m layer7 --l7proto gnutella -j MARK --set-mark 0x${MARK}
iptables -t mangle -A PREROUTING -s $ADDRESS -m layer7 --l7proto ares -j MARK --set-mark 0x${MARK}
iptables -t mangle -A PREROUTING -s $ADDRESS -m layer7 --l7proto napster -j MARK --set-mark 0x${MARK}
iptables -t mangle -A PREROUTING -s $ADDRESS -m layer7 --l7proto directconnect -j MARK --set-mark 0x${MARK}

 P2P_L7 - (yes/no) - rozpoznanie do kolejkowania, limitowania lub
 blokady p2p przy pomocy layer7.
   P2P_L7="yes"
   P2P_CS_L7_ON="yes"
 P2P_L7_PROTO - jesli ww. P2P_L7=yes - wypisz protokoly p2p layer7,
 ktore maja byc kolejkowane/blokowane.
   P2P_L7_PROTO="freenet fasttrack soulseek directconnect ares"

 P2P_CS_L7_ON - (yes/no) - wlacz limity polaczen P2P z layer7.
   P2P_C_L7="no"
   P2P_C_L7_ON="yes"
 ktore maja byc kolejkowane/blokowane.
   P2P_C_L7_PROTO="gnutella bittorrent fasttrack edonkey soulseek directconnect ares"
Limit połaczen na siec p2p
   P2P_C_LIMIT="40"   



#Całkowite blokowanie p2p L7-PROTO
       if [ "$P2P_L7" == "yes" ] && [ ! "$P2P_L7_PROTO" == "" ] ; then
      for x in $P2P_L7_PROTO ; do
          $IPT -I PREROUTING -t mangle -m layer7 --l7proto $x -j MARK --set-mark 0x62
      done
       fi

      
       if [ "$P2P_L7" == "yes" ] && [ ! "$P2P_L7_PROTO" == "" ] && [ "$P2P_CS_L7_ON" == "yes" ] ; then
      for x in $P2P_L7_PROTO ; do
          $IPT -I FORWARD -m layer7 --l7proto $x -j DROP
      done
      fi

#Ograniczanie liczby połanczen p2p L7-PROTO
      
       if [ "$P2P_C_L7" == "yes" ] && [ ! "$P2P_C_L7_PROTO" == "" ] ; then
       for x in $P2P_C_L7_PROTO ; do
           $IPT -I PREROUTING -t mangle -m layer7 --l7proto $x -j MARK --set-mark 0x62
       done
       fi

      if [ "$P2P_C_L7" == "yes" ] && [ ! "$P2P_C_L7_PROTO" == "" ] && [ "$P2P_C_L7_ON" == "yes" ] ; then
      for x in $P2P_C_L7_PROTO ; do
          $IPT -I FORWARD -p tcp -o $INT_LAN -m connlimit --connlimit-above $P2P_C_LIMIT -m layer7 --l7proto $x -j DROP 
      done
      fi