对“网页分离80端口脚本”的一点异议

LUYOKY

==============================================================
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="\CD\F8\D2\B3" content=.htm disabled=yes \
    dst-address-list=!80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.shtml disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.php disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.jsp disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.cgi disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.asp disabled=yes dst-address-list=\
    !80 dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.gif disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.jpg disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.png disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=add-dst-to-address-list address-list=80 address-list-timeout=10m \
    chain=prerouting comment="" content=.swf disabled=no dst-address-list=!80 \
    dst-port=80 protocol=tcp src-address=192.168.10.0/24
add action=mark-connection chain=prerouting comment="" disabled=no \
    dst-address-list=80 new-connection-mark=game passthrough=yes src-address=\
    192.168.10.0/24
add action=mark-routing chain=prerouting comment=4 connection-mark=game \
    disabled=no new-routing-mark=routing_4 passthrough=no src-address=\
==============================================================
我没测试，就脚本看，应该效果不大。
一个很明显的问题，就是当讯雷下载时，上下行带宽都用完了，
这时你想连到你要开网页的服务器都非常困难，要得到.htm.shtml这些标识就更加困难了。

LUYOKY

lz留用

WGHBOY

等你用上标记你就懂了,你试试把adsl的上传利用率到了这个水平,这只不过是一个分离规则

47771885

呵呵 老实你 ROS 给你用真累 。。拼命的给你检查包 不断的给你记录再匹配。。。
一个 包就给你来回折腾 为什么不然他痛痛快快的通过呢

WGHBOY

都快快通过就把桥都逼塌了

47771885

都快快通过就把桥都逼塌了
WGHBOY 发表于 2009-12-28 13:37

                               
登录/注册后可看大图

    你的意思的 所有的车停在桥上就不会塌了 通过 桥 桥就会塌咯 太强了

WGHBOY

你不会在桥的前面设置关卡,确保120,119这些优先通过么

CNCHG

我认为WGHBOY 说的，不是桥厉害，是关卡设在上桥前，看让他上那个桥

WGHBOY

楼上说得对，桥就好比adsl线路，关卡就是ros

jichengwei001

此本 根本无效果

对于那些打开域名时不带上述标记符号的时候  完全没有流量

maciqian

学习学习学习学习

老树昏鸦

脚本一看就头大了，不过说ROS是关卡，决定包走哪个桥（ADSL），这句明白。