Freesco, NND, CDN, EOS

IF0=eth1
IF1=eth0
IF2=eth2
IP0=192.168.0.2
IP1=83.17.109.122
IP2=192.168.1.5
P1=83.17.109.121
P2=192.168.1.1
P0_NET=192.168.0.1/24
P1_NET=83.17.109.120/29
P2_NET=192.168.1.0/24

ip route add $P1_NET dev $IF1 src $IP1 table T1
ip route add default via $P1 table T1
ip route add $P2_NET dev $IF2 src $IP2 table T2
ip route add default via $P2 table T2

ip route add $P0_NET     dev $IF0 table T1
ip route add $P2_NET     dev $IF2 table T1
ip route add 127.0.0.0/8 dev lo   table T1
ip route add $P0_NET     dev $IF0 table T2
ip route add $P1_NET     dev $IF1 table T2
ip route add 127.0.0.0/8 dev lo   table T2

ip route add $P1_NET dev $IF1 src $IP1
ip route add $P2_NET dev $IF2 src $IP2

stat_busy "Uruchamiamy dwie bramy"
ip route add default scope global nexthop via $P1 dev $IF1 weight 100 nexthop via $P2 dev $IF2 weight 1
stat_done

ip rule add from $IP1 table T1
ip rule add from $IP2 table T2

ip rule add fwmark 0x1 table T2

stat_busy "Czyszczenie pamieci podrecznej"
ip route flush cache
stat_done

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j SNAT --to 83.17.109.122
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth2 -j SNAT --to 192.168.1.5

stat_busy "Markowanie pakietow ...."

iptables -t mangle -A PREROUTING -p icmp -s $P0_NET -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p tcp --dport 25 -s $P0_NET -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p tcp --dport 110 -s $P0_NET -j MARK --set-mark 0x1

# obsluga Counter-Strike 1.5 oraz 1.6
iptables -t mangle -A PREROUTING -p tcp --dport 27000:27039 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 27006:27025 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 27000:27004 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 1200 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p tcp --dport 5273 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p tcp --dport 6000:6003 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 6000:6003 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p tcp --dport 7001:7002 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 7001:7002 -j MARK --set-mark 0x1

# obsluga call of duty
iptables -t mangle -A PREROUTING -p tcp --dport 28960 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 28960 -j MARK --set-mark 0x1

#skype

iptables -t mangle -A PREROUTING -p udp --sport 80 -j MARK --set-mark 0x1

#voiperized

iptables -t mangle -A PREROUTING -p udp --sport 4379 -j MARK --set-mark 0x1

# gry internetowe na wp.pl
iptables -t mangle -A PREROUTING -p tcp --dport 5000:5005 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 5000:5005 -j MARK --set-mark 0x1

# irc
iptables -t mangle -A PREROUTING -p tcp --dport 6666:6668 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -p udp --dport 6666:6668 -j MARK --set-mark 0x1

#mute
iptables -t mangle -A PREROUTING -p tcp --dport 44405 -j MARK --set-mark 0x1

...
    ...SC - to sieć, ....RT - IP bramy na routerze (następne urządzenie)
   # Tworzenie tablicy T1 i okreslenie kierunku default
   ip route add default via $WANINT1_RT dev $WANINT1 table $T1
   # NAT (lub odmiana)
   ip route add $WANINT1_SC dev $WANINT1 src $WANINT1_IP table $T1
   # Jak cos wraca to przez T1
   ip rule add from 80.50.255.2 table $T1
   # Pozostale interf. tez T1 obsluguje
   ip route add $LANINT_SC dev $LANINT table $T1
   ip route add $WANINT_SC dev $WANINT table $T1
   ip route add 127.0.0.0/8 dev lo table $T1
   ip route flush cache
...

...
   $i -t mangle -A PREROUTING -s $IP -j MARK --set-mark $MARK_HEX
...

...        ip rule add fwmark $MARK_HEX table $T1

...

- W komendzie 'iptables' jest liczba DZIESIĘTNA lub hex, a w 'ip rule' jest HEX ( to ważne [ja sie męczyłem nad tym dwa dni, Ty masz odemnie za darmo w sekundę ]}