|
楼主 |
发表于 2009-1-6 18:28:44
|
显示全部楼层
本帖最后由 zh1000000 于 2009-1-6 18:30 编辑
版主大大也来了~~感动感动~~
像我这样的特殊共享环境,应该有蛮多人会碰上的~
IP ROUTE
C - connect, S - static, r - rip, b - bgp, o - ospf
# DST-ADDRESS PREF-SRC G GATEWAY DIS
0 ADC 172.10.1.50/32 172.10.1.1
1 ADC 172.10.1.51/32 172.10.1.1
2 ADC 172.10.1.53/32 172.10.1.1
3 ADC 172.10.1.54/32 172.10.1.1
4 ADC 172.10.1.58/32 172.10.1.1
5 ADC 172.10.1.60/32 172.10.1.1
6 ADC 172.10.1.63/32 172.10.1.1
7 ADC 172.10.1.0/24 172.10.1.1
8 ADC 222.XXX.128.1/32 222.XXX.130.74
9 DC 222.XXX.128.1/32 222.XXX.130.63
10 DC 222.XXX.128.1/32 222.XXX.128.128
11 ADC 222.XXX.128.128/32 222.XXX.128.128
12 ADC 222.XXX.130.63/32 222.XXX.130.63
13 ADC 222.XXX.130.74/32 222.XXX.130.74
14 A S ;;; 1
0.0.0.0/0 r 222.XXX.128.128
15 A S ;;; 2
0.0.0.0/0 r 222.XXX.130.74
16 A S ;;; 3
0.0.0.0/0 r 222.XXX.130.63
mangle
0 ;;; UDP
chain=prerouting src-address=172.10.1.0/24 protocol=udp
action=mark-packet new-packet-mark=udp passthrough=yes
1 ;;;
chain=prerouting src-address=172.10.1.0/24 protocol=tcp dst-port=443
dst-address-list=!QQGame action=add-dst-to-address-list address-list=443
address-list-timeout=3h
2 chain=prerouting src-address=172.10.1.0/24 dst-address-list=443
action=mark-connection new-connection-mark=1 passthrough=yes
3 ;;; QQ
chain=prerouting protocol=tcp dst-port=443 dst-address-list=QQGame
action=mark-connection new-connection-mark=1 passthrough=yes
4 ;;;
chain=prerouting src-address=172.10.1.0/24 connection-state=new
nth=2,3,0 action=mark-connection new-connection-mark=1 passthrough=yes
5 chain=prerouting src-address=172.10.1.0/24 connection-mark=1
action=mark-routing new-routing-mark=1 passthrough=no
6 chain=prerouting src-address=172.10.1.0/24 connection-state=new nth=2,3,1
action=mark-connection new-connection-mark=2 passthrough=yes
7 chain=prerouting src-address=172.10.1.0/24 connection-mark=2
action=mark-routing new-routing-mark=2 passthrough=no
8 chain=prerouting src-address=172.10.1.0/24 connection-state=new nth=2,3,2
action=mark-connection new-connection-mark=3 passthrough=yes
9 chain=prerouting src-address=172.10.1.0/24 connection-mark=3
action=mark-routing new-routing-mark=3 passthrough=no
10 ;;; Change MSS
chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1440
11 chain=postrouting action=accept
由于一直没成功,不想浪费带宽资源,无奈之下现在用住3线的NTH
线路3就是1M的,其他是2M。 |
|