LUYOKY 发表于 2009-12-28 00:01:05

对“网页分离80端口脚本”的一点异议

==============================================================
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="\CD\F8\D2\B3" content=.htm disabled=yes \
    dst-address-list=!80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.shtml disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.php disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.jsp disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.cgi disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.asp disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.gif disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.jpg disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.png disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.swf disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=mark-connection chain=prerouting comment="" disabled=no \
    dst-address-list=80 new-connection-mark=game passthrough=yes src-address=\
    192.168.10.0/24
add action=mark-routing chain=prerouting comment=4 connection-mark=game \
    disabled=no new-routing-mark=routing_4 passthrough=no src-address=\
==============================================================
我没测试，就脚本看，应该效果不大。
一个很明显的问题，就是当讯雷下载时，上下行带宽都用完了，
这时你想连到你要开网页的服务器都非常困难，要得到.htm.shtml这些标识就更加困难了。

LUYOKY 发表于 2009-12-28 00:01:52

lz留用

WGHBOY 发表于 2009-12-28 01:19:21

等你用上标记你就懂了,你试试把adsl的上传利用率到了这个水平,这只不过是一个分离规则

47771885 发表于 2009-12-28 02:46:24

呵呵 老实你 ROS 给你用真累 。。拼命的给你检查包 不断的给你记录再匹配。。。
一个 包就给你来回折腾 为什么不然他痛痛快快的通过呢

WGHBOY 发表于 2009-12-28 13:37:04

都快快通过就把桥都逼塌了

47771885 发表于 2009-12-28 18:16:45

都快快通过就把桥都逼塌了
WGHBOY 发表于 2009-12-28 13:37 http://bbs.routerclub.com/images/common/back.gif


    你的意思的 所有的车停在桥上就不会塌了 通过 桥 桥就会塌咯 太强了

WGHBOY 发表于 2009-12-28 19:47:34

你不会在桥的前面设置关卡,确保120,119这些优先通过么

CNCHG 发表于 2010-2-7 18:59:14

我认为WGHBOY 说的，不是桥厉害，是关卡设在上桥前，看让他上那个桥

WGHBOY 发表于 2010-2-8 00:05:46

楼上说得对，桥就好比adsl线路，关卡就是ros

jichengwei001 发表于 2011-9-19 09:29:40

此本 根本无效果

对于那些打开域名时不带上述标记符号的时候完全没有流量

maciqian 发表于 2011-9-21 13:05:53

学习学习学习学习

老树昏鸦 发表于 2011-11-3 20:36:02

脚本一看就头大了，不过说ROS是关卡，决定包走哪个桥（ADSL），这句明白。
页: [1]
查看完整版本: 对“网页分离80端口脚本”的一点异议