|
|
|
@ -116,6 +116,22 @@ parse_matching_rule() {
|
|
|
|
|
add_insmod ipt_connbytes
|
|
|
|
|
append "$var" "-m connbytes --connbytes $value --connbytes-dir both --connbytes-mode bytes"
|
|
|
|
|
;;
|
|
|
|
|
*:tos)
|
|
|
|
|
add_insmod ipt_tos
|
|
|
|
|
case "$value" in
|
|
|
|
|
!*) append "$var" "-m tos ! --tos $value";;
|
|
|
|
|
*) append "$var" "-m tos --tos $value"
|
|
|
|
|
esac
|
|
|
|
|
;;
|
|
|
|
|
*:dscp)
|
|
|
|
|
add_insmod ipt_dscp
|
|
|
|
|
dscp_option="--dscp"
|
|
|
|
|
[ -z "${value%%[EBCA]*}" ] && dscp_option="--dscp-class"
|
|
|
|
|
case "$value" in
|
|
|
|
|
!*) append "$var" "-m dscp ! $dscp_option $value";;
|
|
|
|
|
*) append "$var" "-m dscp $dscp_option $value"
|
|
|
|
|
esac
|
|
|
|
|
;;
|
|
|
|
|
*:direction)
|
|
|
|
|
value="$(echo "$value" | sed -e 's,-,:,g')"
|
|
|
|
|
if [ "$value" = "out" ]; then
|
|
|
|
@ -146,6 +162,19 @@ parse_matching_rule() {
|
|
|
|
|
!*) append "$var" "-m mark ! --mark $class";;
|
|
|
|
|
*) append "$var" "-m mark --mark $class";;
|
|
|
|
|
esac
|
|
|
|
|
;;
|
|
|
|
|
1:TOS)
|
|
|
|
|
add_insmod ipt_TOS
|
|
|
|
|
config_get TOS "$rule" 'TOS'
|
|
|
|
|
suffix="-j TOS --set-tos "${TOS:-"Normal-Service"}
|
|
|
|
|
;;
|
|
|
|
|
1:DSCP)
|
|
|
|
|
add_insmod ipt_DSCP
|
|
|
|
|
config_get DSCP "$rule" 'DSCP'
|
|
|
|
|
[ -z "${DSCP%%[EBCA]*}" ] && set_value="--set-dscp-class $DSCP" \
|
|
|
|
|
|| set_value="--set-dscp $DSCP"
|
|
|
|
|
suffix="-j DSCP $set_value"
|
|
|
|
|
;;
|
|
|
|
|
esac
|
|
|
|
|
done
|
|
|
|
|
append "$var" "$suffix"
|
|
|
|
@ -327,6 +356,16 @@ add_rules() {
|
|
|
|
|
config_get target "$rule" target
|
|
|
|
|
config_get target "$target" classnr
|
|
|
|
|
config_get options "$rule" options
|
|
|
|
|
|
|
|
|
|
## If we want to override the TOS field, let's clear the DSCP field first.
|
|
|
|
|
[ ! -z "$(echo $options | grep 'TOS')" ] && {
|
|
|
|
|
s_options=${options%%TOS}
|
|
|
|
|
add_insmod ipt_DSCP
|
|
|
|
|
parse_matching_rule iptrule "$rule" "$s_options" "$prefix" "-j DSCP --set-dscp 0"
|
|
|
|
|
append "$var" "$iptrule" "$N"
|
|
|
|
|
unset iptrule
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
parse_matching_rule iptrule "$rule" "$options" "$prefix" "-j MARK --set-mark $target"
|
|
|
|
|
append "$var" "$iptrule" "$N"
|
|
|
|
|
done
|
|
|
|
|