Rejestracja: sobota, 25 września 2004, 09:17 Posty: 86
|
Chyba takie są odpowiedzi na pytania ale pierwszego nie jestem w 100% pewien jakby ktoś mógł potwierdzić było by super
Pytanie2 wydać takie polecenie w bashu i restertnąć serwa najlepiej
iptables -I FORWARD -p tcp -d 192.168.0.3 --dport 20:21 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -i eth0 -s 0/0 -d 0/0 --dport 20:21 -j DNAT --to 192.168.0.3
iptables -I FORWARD -p udp -d 192.168.0.3 --dport 20:21 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -i eth0 -s 0/0 -d 0/0 --dport 20:21 -j DNAT --to 192.168.0.3
/etc/rc.d/iptables save
Pytanie1
<global>
iface inet eth0 83.17.209.90/255.255.255.252
iface local eth1 192.168.0.1/24
# do not shape local 83.17.209.90 with 192.168.0.0/24
do not shape local 192.168.0.1 with 192.168.0.0/24
shape router true low 80kbit ceil 140kbit prio 2
stats unit kbit dump 5c file /home/httpd/html/stats/nsstats.txt
resolve hostname true
method mark
reload 3s
</global>
<download>
link speed 1000kbit shape 900kbit
user low 0kbit ceil 64kbit strict 2% prio 5
interactive rate 50kbit ceil 200kbit
interactive srcport 80 dstport 80
# interactive srcip 208.231.90.235
# interactive u32 match ip protocol 1 0xff
# interactive u32 match ip tos 0x10 0xff
policy dynamic
</download>
<upload>
link speed 250kbit shape 230kbit
user low 50kbps ceil 100kbit strict 2% prio 5
interactive rate 32kbit ceil 64kbit
interactive srcport 80 dstport 80
# interactive dstip 208.231.90.235
policy dynamic
</upload>
|
|