|
楼主 |
发表于 2007-5-11 18:33:53
|
显示全部楼层
这样就ok了 address list 同一个ip 只会被标成 odd 或 even
add chain=prerouting in-interface=lan src-address-list=odd action=mark-connection new-connection-mark=odd \
passthrough=yes comment="2" disabled=no
add chain=prerouting in-interface=lan psd=21,3s,3,1 src-address-list=odd action=mark-routing new-routing-mark=odd \
passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan src-address-list=even action=mark-connection new-connection-mark=even \
passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan psd=21,3s,3,1 src-address-list=even action=mark-routing new-routing-mark=even \
passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan connection-state=new nth=1,1,0 action=mark-connection new-connection-mark=odd \
passthrough=yes comment="!!" disabled=no
add chain=prerouting in-interface=lan connection-state=new nth=1,1,1 src-address-list=!odd action=mark-connection \
new-connection-mark=even passthrough=yes comment="!!!" disabled=no
add chain=prerouting in-interface=lan connection-mark=odd action=add-src-to-address-list address-list=odd \
address-list-timeout=1d comment="" disabled=no
add chain=prerouting in-interface=lan connection-mark=odd action=mark-routing new-routing-mark=odd passthrough=no \
comment="" disabled=no
add chain=prerouting in-interface=lan connection-state=new nth=1,1,1 action=mark-connection new-connection-mark=even \
passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan connection-mark=even action=add-src-to-address-list address-list=even \
address-list-timeout=1d comment="" disabled=no
add chain=prerouting in-interface=lan connection-mark=even action=mark-routing new-routing-mark=even passthrough=no \
comment="" disabled=no
add chain=prerouting in-interface=lan connection-state=new nth=1,1,1 src-address-list=!odd action=mark-connection \
new-connection-mark=even passthrough=yes comment="" disabled=no |
|