Página inicial Explorar contacts
Entrar
LDA010
/
bug_ebuild
Observar 0
Favorito 0
Fork 0
Arquivos Issues 0 Pull Requests 0 Wiki
Branch: master
Branches Tags
bug_ebuild
/
gentoo
/
net-misc
/
htbinit
/
files
/
htb_0.8.5_ipv6.diff

htb_0.8.5_ipv6.diff 4.6 KB
Link permanente Histórico Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129 
  1. --- htb.init.old	2004-01-29 22:41:23.000000000 +0100
    2. 

  2. +++ htb.init		2006-09-07 23:32:58.000000000 +0200
    3. 

  3. @@ -275,6 +284,7 @@
    4. 

  4.  ### Filtering parameters
    5. 

  5.  #
    6. 

  6.  # RULE=[[saddr[/prefix]][:port[/mask]],][daddr[/prefix]][:port[/mask]]
    7. 

  7. +# RULEIPv6=[[saddr[/prefix]][_port[/mask]],][daddr[/prefix]][_port[/mask]]
    8. 

  8.  #
    9. 

  9.  #	These parameters make up "u32" filter rules that select traffic for
    10. 

  10.  #	each of the classes. You can use multiple RULE fields per config.
    11. 

  11. @@ -300,9 +310,13 @@
    12. 

  12.  #	RULE=10.5.5.5:80,
    13. 

  13.  #		selects traffic going from port 80 of single host 10.5.5.5
    14. 

  14.  #
    15. 

  15. +#	RULEIPv6=3ffe:80fe:c28:1:45d1:3a1:5e2b:e6c8
    16. 

  16. +#		selects traffic going to IPv6 host 3ffe:80fe:c28:1:45d1:3a1:5e2b:e6c8
    17. 

  17. +#
    18. 

  18.  #
    19. 

  19.  #
    20. 

  20.  # REALM=[srealm,][drealm]
    21. 

  21. +# REALMIPv6=[srealm,][drealm]
    22. 

  22.  #
    23. 

  23.  #	These parameters make up "route" filter rules that classify traffic
    24. 

  24.  #	according to packet source/destination realms. For information about
    25. 

  25. @@ -327,6 +341,7 @@
    26. 

  26.  #
    27. 

  27.  #
    28. 

  28.  # MARK=<mark>
    29. 

  29. +# MARKIPv6=<mark>
    30. 

  30.  #
    31. 

  31.  #	These parameters make up "fw" filter rules that select traffic for
    32. 

  32.  #	each of the classes accoring to firewall "mark". Mark is a decimal
    33. 

  33. @@ -414,6 +429,9 @@
    34. 

  34.  PRIO_RULE_DEFAULT=${PRIO_RULE:-100}
    35. 

  35.  PRIO_MARK_DEFAULT=${PRIO_MARK:-200}
    36. 

  36.  PRIO_REALM_DEFAULT=${PRIO_REALM:-300}
    37. 

  37. +PRIO_RULEIPv6=${PRIO_RULEIPv6:-150}
    38. 

  38. +PRIO_MARKIPv6=${PRIO_MARKIPv6:-250}
    39. 

  39. +PRIO_REALMIPv6=${PRIO_REALMIPv6:-350}
    40. 

  40.  
    41. 

  41.  ### Default HTB_PATH & HTB_CACHE settings
    42. 

  42.  HTB_PATH=${HTB_PATH:-/etc/sysconfig/htb}
    43. 

  43. @@ -818,6 +838,13 @@
    44. 

  44.  		prio $PRIO_MARK handle $mark fw classid 1:$CLASS
    45. 

  45.  	done ### mark
    46. 

  46.  
    47. 

  47. +	### Create fw filter for MARKIPv6 fields
    48. 

  48. +	for mark in `htb_cfile_rules MARKIPv6`; do
    49. 

  49. +               ### Attach fw filter to root class
    50. 

  50. +               tc filter add dev $DEVICE parent 1:0 protocol ipv6 \
    51. 

  51. +               prio $PRIO_MARKIPv6 handle $mark fw classid 1:$CLASS
    52. 

  52. +	done ### markipv6
    53. 

  53. +
    54. 

  54.  	### Create route filter for REALM fields
    55. 

  55.  	for realm in `htb_cfile_rules REALM`; do
    56. 

  56.  		### Split realm into source & destination realms
    57. 

  57. @@ -833,6 +860,21 @@
    58. 

  58.  		${DREALM:+to $DREALM} classid 1:$CLASS
    59. 

  59.  	done ### realm
    60. 

  60.  
    61. 

  61. +	### Create route filter for REALMIPv6 fields
    62. 

  62. +	for realm in `htb_cfile_rules REALMIPv6`; do
    63. 

  63. +               ### Split realm into source & destination realms
    64. 

  64. +               SREALM=${realm%%,*}; DREALM=${realm##*,}
    65. 

  65. +               [ "$SREALM" = "$DREALM" ] && SREALM=""
    66. 

  66. +
    67. 

  67. +               ### Convert asterisks to empty strings
    68. 

  68. +               SREALM=${SREALM#\*}; DREALM=${DREALM#\*}
    69. 

  69. +
    70. 

  70. +               ### Attach route filter to the root class
    71. 

  71. +               tc filter add dev $DEVICE parent 1:0 protocol ipv6 \
    72. 

  72. +               prio $PRIO_REALM route ${SREALM:+from $SREALM} \
    73. 

  73. +               ${DREALM:+to $DREALM} classid 1:$CLASS
    74. 

  74. +	done ### realmipv6
    75. 

  75. +
    76. 

  76.  	### Create u32 filter for RULE fields
    77. 

  77.  	for rule in `htb_cfile_rules RULE`; do
    78. 

  78.  		### Split rule into source & destination
    79. 

  79. @@ -876,6 +918,49 @@
    80. 

  80.  		prio $PRIO_RULE u32 $u32_s $u32_d classid 1:$CLASS
    81. 

  81.  	done ### rule
    82. 

  82.  
    83. 

  83. +       ### Create u32 filter for RULEIPv6 fields
    84. 

  84. +       for rule in `htb_cfile_rules RULEIPv6`; do
    85. 

  85. +               ### Split rule into source & destination
    86. 

  86. +               SRC=${rule%%,*}; DST=${rule##*,}
    87. 

  87. +               [ "$SRC" = "$rule" ] && SRC=""
    88. 

  88. +
    89. 

  89. +
    90. 

  90. +               ### Split destination into address, port & mask fields
    91. 

  91. +               DADDR=${DST%%_*}; DTEMP=${DST##*_}
    92. 

  92. +               [ "$DADDR" = "$DST" ] && DTEMP=""
    93. 

  93. +
    94. 

  94. +               DPORT=${DTEMP%%/*}; DMASK=${DTEMP##*/}
    95. 

  95. +               [ "$DPORT" = "$DTEMP" ] && DMASK="0xffff"
    96. 

  96. +
    97. 

  97. +
    98. 

  98. +               ### Split up source (if specified)
    99. 

  99. +               SADDR=""; SPORT=""
    100. 

  100. +               if [ -n "$SRC" ]; then
    101. 

  101. +                       SADDR=${SRC%%_*}; STEMP=${SRC##*_}
    102. 

  102. +                       [ "$SADDR" = "$SRC" ] && STEMP=""
    103. 

  103. +
    104. 

  104. +                       SPORT=${STEMP%%/*}; SMASK=${STEMP##*/}
    105. 

  105. +                       [ "$SPORT" = "$STEMP" ] && SMASK="0xffff"
    106. 

  106. +               fi
    107. 

  107. +
    108. 

  108. +
    109. 

  109. +               ### Convert asterisks to empty strings
    110. 

  110. +               SADDR=${SADDR#\*}; DADDR=${DADDR#\*}
    111. 

  111. +
    112. 

  112. +               ### Compose u32 filter rules
    113. 

  113. +               u32_s="${SPORT:+match ip6 sport $SPORT $SMASK}"
    114. 

  114. +               u32_s="${SADDR:+match ip6 src $SADDR} $u32_s"
    115. 

  115. +               u32_d="${DPORT:+match ip6 dport $DPORT $DMASK}"
    116. 

  116. +               u32_d="${DADDR:+match ip6 dst $DADDR} $u32_d"
    117. 

  117. +
    118. 

  118. +               ### Uncomment the following if you want to see parsed rules
    119. 

  119. +               #echo "$rule: $u32_s $u32_d"
    120. 

  120. +
    121. 

  121. +               ### Attach u32 filter to the appropriate class
    122. 

  122. +               tc filter add dev $DEVICE parent 1:0 protocol ipv6 \
    123. 

  123. +               prio $PRIO_RULEIPv6 u32 $u32_s $u32_d classid 1:$CLASS
    124. 

  124. +	done ### ruleipv6
    125. 

  125. +
    126. 

  126.  	[ "$1" = "compile" ] && echo
    127. 

  127.  done ### classfile
    128. 

  128.  ;;
    129. 

  129.