BFW Firewall & Router

A powerful network security tool, easy, safe and totally free.

Pular para o conteúdo

modificaciones mayores en el argento QOS [INACTIVE]

Foro dedicado a Argento QoS, Argento Bridge y HDB.
Regras do fórum
Tópico trancado

modificaciones mayores en el argento QOS

Mensagempor Lord » Sex Abr 27, 2007 7:19 pm

quien ha realizado cambios mayores en el argentoQOS en la parte de filtrado...???

por ejemplo hice (y digo modificaciones mayores)
me gustaria que me den sus comentarios y quizas expliquen acerca de sus modificaciones

#
sub_ultra_high_tos_updown udp 0x10 #0x10 minimize delay | 0x08 Maximize-Throughput | 0x04 Maximize-Reliability | 0x02 Minimize-Cost | 0x00 Normal-Service
#

prio_conn_high 20:21
prio_conn_ultra_high 22
prio_conn_high 25
prio_conn_ultra_high 80
prio_conn_high 110
prio_conn_ultra_high 143
prio_conn_high 443
prio_conn_high 1863
prio_conn_high 5050
prio_conn_high 5222

sub_ultra_high_l7_updown dns
sub_ultra_high_l7_updown ssl
sub_ultra_high_l7_updown ssh

sub_ultra_high_l7_down http
sub_ultra_high_l7_down html
sub_ultra_high_l7_down gif
sub_ultra_high_l7_down jpeg
sub_ultra_high_l7_down flash
sub_ultra_high_l7_down perl

sub_high_port_updown tcp 1863
sub_high_port_down tcp 80

sub_norm_port_down tcp 110 marc_yes
sub_norm_port_updown tcp 5050 MARC_YES #yahoo messenger
sub_norm_port_updown tcp 6891:6900 #msn file transfer
sub_norm_l7_up html
sub_norm_l7_up gif
sub_norm_l7_up jpeg
sub_norm_l7_up ftp
sub_norm_l7_updown msnmessenger
sub_norm_l7_updown yahoo

sub_low_port_updown tcp 20:21 marc_yes
sub_low_port_updown tcp 25 marc_yes
sub_low_port_up tcp 110 marc_yes
sub_low_port_up tcp 80

sub_bulk_l7 pdf
sub_bulk_l7 exe
sub_bulk_l7 rar
sub_bulk_l7 zip
sub_bulk_l7 tar
sub_bulk_l7 quicktime
sub_bulk_l7 httpaudio
sub_bulk_l7 httpvideo
sub_bulk_l7 http-dap
sub_bulk_l7 flash
sub_bulk_l7 msn-filetransfer
sub_bulk_l7 ftp

sub_bulk_port tcp 1:19
sub_bulk_port tcp 23:24
sub_bulk_port tcp 26:79
sub_bulk_port tcp 81:109
sub_bulk_port tcp 142:442
sub_bulk_port tcp 444:1862
sub_bulk_port tcp 1864:5049
sub_bulk_port tcp 5051:5521
sub_bulk_port tcp 5523:6890
sub_bulk_port tcp 6901:65535

sub_bulk_port udp 1:19
sub_bulk_port udp 23:24
sub_bulk_port udp 26:79
sub_bulk_port udp 81:109
sub_bulk_port udp 142:442
sub_bulk_port udp 444:1862
sub_bulk_port udp 1864:5049
sub_bulk_port udp 5051:5521
sub_bulk_port udp 5523:6890
sub_bulk_port udp 6901:65535

sub_trash_l7 edonkey
sub_trash_l7 bittorrent
sub_trash_l7 directconnect
sub_trash_l7 fasttrack
sub_trash_l7 soulseek
sub_trash_l7 ares
sub_trash_l7 imesh
sub_trash_l7 irc
sub_trash_l7 napster
sub_trash_l7 soulseek
sub_trash_l7 audiogalaxy
sub_trash_l7 gnutella



low_port_updown udp 1:65535


Pd: estoy usando el flashget para bajar un archivo de torrent y si bien pueden ver que esta filtrado el bittorrent y mas arriba esta el http-dap igual no ejerce ningun control sobre el mismo... me sigue bajando a una alta veloc.....

y cuando veo la tabla de filtrado mangle no aparece nada de hecho aqui esta como aparece

Chain PREROUTING (policy ACCEPT 862K packets, 369M bytes)
pkts bytes target prot opt in out source destination

Chain INPUT (policy ACCEPT 33939 packets, 2707K bytes)
pkts bytes target prot opt in out source destination
1407 109K MARK all -- eth0 * 0.0.0.0/0 192.168.1.1 MARK set 0x1
1407 109K RETURN all -- eth0 * 0.0.0.0/0 192.168.1.1
98 7176 MARK icmp -- eth1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0x3de
19 760 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp spt:80 MARK set 0x3de

Chain FORWARD (policy ACCEPT 828K packets, 366M bytes)
pkts bytes target prot opt in out source destination
0 0 MARK icmp -- * * 192.168.1.0 0.0.0.0/0 MARK set 0x3de
0 0 MARK icmp -- * * 0.0.0.0/0 192.168.1.0 MARK set 0x3de
0 0 RETURN icmp -- * * 0.0.0.0/0 192.168.1.0
0 0 RETURN icmp -- * * 192.168.1.0 0.0.0.0/0
0 0 MARK tcp -- * * 192.168.1.24 0.0.0.0/0 tcp dpt:53 MARK set 0x3de
0 0 RETURN tcp -- * * 192.168.1.24 0.0.0.0/0 tcp dpt:53
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.24 tcp spt:53 MARK set 0x3de
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.24 tcp spt:53
0 0 MARK udp -- * * 192.168.1.24 0.0.0.0/0 udp dpt:53 MARK set 0x3de
0 0 RETURN udp -- * * 192.168.1.24 0.0.0.0/0 udp dpt:53
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.24 udp spt:53 MARK set 0x3de
0 0 RETURN udp -- * * 0.0.0.0/0 192.168.1.24 udp spt:53
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 TOS match 0x10 MARK set 0x3de
0 0 RETURN udp -- * * 192.168.1.0 0.0.0.0/0 TOS match 0x10
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 TOS match 0x10 MARK set 0x3de
0 0 RETURN udp -- * * 0.0.0.0/0 192.168.1.0 TOS match 0x10
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:20:21 flags:0x16/0x02 MARK set 0x3df
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:20:21 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02 MARK set 0x3de
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:22 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:25 flags:0x16/0x02 MARK set 0x3df
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:25 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:80 flags:0x16/0x02 MARK set 0x3de
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:80 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:110 flags:0x16/0x02 MARK set 0x3df
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:110 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:143 flags:0x16/0x02 MARK set 0x3de
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:143 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:443 flags:0x16/0x02 MARK set 0x3df
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:443 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:1863 flags:0x16/0x02 MARK set 0x3df
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:1863 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:5050 flags:0x16/0x02 MARK set 0x3df
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:5050 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:5222 flags:0x16/0x02 MARK set 0x3df
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:5222 flags:0x16/0x02
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:1863 MARK set 0x3df
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spt:1863 MARK set 0x3df
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spt:80 MARK set 0x3df
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spt:110 MARK set 0x3e0
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:5050 MARK set 0x3e0
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:5050
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spt:5050 MARK set 0x3e0
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spt:5050
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:6891:6900 MARK set 0x3e0
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:6891:6900 MARK set 0x3e0
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:20:21 MARK set 0x3e1
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:20:21
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:20:21 MARK set 0x3e1
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:20:21
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:25 MARK set 0x3e1
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:25
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spt:25 MARK set 0x3e1
0 0 RETURN tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spt:25
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:110 MARK set 0x3e1
0 0 RETURN tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:110
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpt:80 MARK set 0x3e1
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:1:19 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:1:19 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:23:24 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:23:24 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:26:79 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:26:79 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:81:109 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:81:109 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:142:442 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:142:442 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:444:1862 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:444:1862 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:1864:5049 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:1864:5049 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:5051:5521 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:5051:5521 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:5523:6890 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:5523:6890 MARK set 0x3e2
0 0 MARK tcp -- * * 192.168.1.0 0.0.0.0/0 tcp dpts:6901:65535 MARK set 0x3e2
0 0 MARK tcp -- * * 0.0.0.0/0 192.168.1.0 tcp spts:6901:65535 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:1:19 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:1:19 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:23:24 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:23:24 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:26:79 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:26:79 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:81:109 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:81:109 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:142:442 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:142:442 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:444:1862 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:444:1862 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:1864:5049 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:1864:5049 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:5051:5521 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:5051:5521 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:5523:6890 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:5523:6890 MARK set 0x3e2
0 0 MARK udp -- * * 192.168.1.0 0.0.0.0/0 udp dpts:6901:65535 MARK set 0x3e2
0 0 MARK udp -- * * 0.0.0.0/0 192.168.1.0 udp spts:6901:65535 MARK set 0x3e2

Chain OUTPUT (policy ACCEPT 17134 packets, 2547K bytes)
pkts bytes target prot opt in out source destination
1473 835K MARK all -- * eth0 192.168.1.1 0.0.0.0/0 MARK set 0x1
1473 835K RETURN all -- * eth0 192.168.1.1 0.0.0.0/0
56 4704 MARK icmp -- * eth1 0.0.0.0/0 0.0.0.0/0 MARK set 0x3de
0 0 MARK tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 MARK set 0x3de

Chain POSTROUTING (policy ACCEPT 848K packets, 368M bytes)
pkts bytes target prot opt in out source destination
378K 128M CONLIMIT all -- * * 0.0.0.0/0 0.0.0.0/0
870K 369M Subnet_qos all -- * * 0.0.0.0/0 0.0.0.0/0
870K 369M l7-filter all -- * * 0.0.0.0/0 0.0.0.0/0
21813 926K DROP all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto ares
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto dns MARK set 0x3de
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto dns
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto dns MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto dns
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ssl MARK set 0x3de
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ssl
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ssl MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ssl
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ssh MARK set 0x3de
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ssh
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ssh MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ssh
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto http MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto http
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto html MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto html
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto gif MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto gif
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto jpeg MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto jpeg
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto flash MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto flash
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto perl MARK set 0x3de
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto perl
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto html MARK set 0x3e0
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto html
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto gif MARK set 0x3e0
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto gif
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto jpeg MARK set 0x3e0
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto jpeg
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ftp MARK set 0x3e0
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ftp
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto msnmessenger MARK set 0x3e0
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto msnmessenger
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto msnmessenger MARK set 0x3e0
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto msnmessenger
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto yahoo MARK set 0x3e0
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto yahoo
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto yahoo MARK set 0x3e0
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto yahoo
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto pdf MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto pdf
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto pdf MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto pdf
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto exe MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto exe
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto exe MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto exe
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto rar MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto rar
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto rar MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto rar
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto zip MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto zip
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto zip MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto zip
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto tar MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto tar
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto tar MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto tar
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto quicktime MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto quicktime
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto quicktime MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto quicktime
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto httpaudio MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto httpaudio
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto httpaudio MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto httpaudio
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto httpvideo MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto httpvideo
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto httpvideo MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto httpvideo
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto http-dap MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto http-dap
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto http-dap MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto http-dap
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto flash MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto flash
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto flash MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto flash
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto msn-filetransfer MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto msn-filetransfer
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto msn-filetransfer MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto msn-filetransfer
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ftp MARK set 0x3e2
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ftp
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ftp MARK set 0x3e2
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ftp
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto edonkey MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto edonkey
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto edonkey MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto edonkey
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto bittorrent MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto bittorrent
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto bittorrent MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto bittorrent
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto directconnect MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto directconnect
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto directconnect MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto directconnect
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto fasttrack MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto fasttrack
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto fasttrack MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto fasttrack
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto soulseek MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto soulseek
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto soulseek MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto soulseek
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ares MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto ares
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ares MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto ares
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto imesh MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto imesh
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto imesh MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto imesh
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto irc MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto irc
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto irc MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto irc
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto napster MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto napster
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto napster MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto napster
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto soulseek MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto soulseek
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto soulseek MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto soulseek
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto audiogalaxy MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto audiogalaxy
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto audiogalaxy MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto audiogalaxy
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto gnutella MARK set 0x3e3
0 0 RETURN all -- * * 192.168.1.0 0.0.0.0/0 LAYER7 l7proto gnutella
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto gnutella MARK set 0x3e3
0 0 RETURN all -- * * 0.0.0.0/0 192.168.1.0 LAYER7 l7proto gnutella
0 0 MARK all -- * * 0.0.0.0/0 192.168.1.0 MARK match 0x0 MARK set 0x3e4
0 0 MARK all -- * * 192.168.1.0 0.0.0.0/0 MARK match 0x0 MARK set 0x3e4

Chain CONLIMIT (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP tcp -- * * 192.168.1.5 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.5 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.7 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.7 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.10 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.10 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.11 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.11 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.12 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.12 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.13 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.13 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.14 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.14 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.15 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.15 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.16 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.16 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.17 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.17 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.18 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.18 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.19 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.19 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.20 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.20 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.21 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.21 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.22 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.22 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.23 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.23 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.24 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.24 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.25 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.25 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.26 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.26 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.27 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.27 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.28 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.28 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.29 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.29 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.30 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.30 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.31 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.31 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.32 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.32 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.33 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.33 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.34 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.34 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.35 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.35 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.36 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.36 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.37 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.37 #conn/32 > 38
2 96 DROP tcp -- * * 192.168.1.38 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.38 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.39 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.39 #conn/32 > 38
64 3778 DROP tcp -- * * 192.168.1.40 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.40 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.41 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.41 #conn/32 > 38
248 11896 DROP tcp -- * * 192.168.1.42 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.42 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.43 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.43 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.44 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.44 #conn/32 > 38
1878 107K DROP tcp -- * * 192.168.1.45 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.45 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.46 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.46 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.47 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.47 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.48 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.48 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.49 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.49 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.50 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.50 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.51 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.51 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.52 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.52 #conn/32 > 38
4 186 DROP tcp -- * * 192.168.1.53 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.53 #conn/32 > 38
0 0 DROP tcp -- * * 192.168.1.54 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.54 #conn/32 > 38
2446 119K DROP tcp -- * * 192.168.1.55 0.0.0.0/0 #conn/32 > 38
0 0 DROP tcp -- * * 0.0.0.0/0 192.168.1.55 #conn/32 > 38

Chain Subnet_qos (1 references)
pkts bytes target prot opt in out source destination

Chain l7-filter (1 references)
pkts bytes target prot opt in out source destination
Avatar do usuário
Lord
BFW Supreme Master
 
Mensagens: 2211
Registrado em: Qua Abr 04, 2007 11:01 am
BrazilFW Box:
Voltar ao topo
Tópico trancado

Voltar para Serie de add-ons Argento

Quem está online

Usuários navegando neste fórum: Nenhum usuário registrado e 1 visitante

Desenvolvido por phpBB® Forum Software © phpBB Group
Prosilver_SE Style modificado por Reginaldo Melo em Agosto de 2018
Traduzido por: Suporte phpBB