|
|
|
@ -116,6 +116,14 @@ parse_matching_rule() { |
|
|
|
|
add_insmod ipt_connbytes |
|
|
|
|
append "$var" "-m connbytes --connbytes $value --connbytes-dir both --connbytes-mode bytes" |
|
|
|
|
;; |
|
|
|
|
*:direction) |
|
|
|
|
value="$(echo "$value" | sed -e 's,-,:,g')" |
|
|
|
|
if [ "$value" = "out" ]; then |
|
|
|
|
append "$var" "-o $device" |
|
|
|
|
elif [ "$value" = "in" ]; then |
|
|
|
|
append "$var" "-i $device" |
|
|
|
|
fi |
|
|
|
|
;; |
|
|
|
|
1:pktsize) |
|
|
|
|
value="$(echo "$value" | sed -e 's,-,:,g')" |
|
|
|
|
add_insmod ipt_length |
|
|
|
@ -357,6 +365,7 @@ start_cg() { |
|
|
|
|
append down "iptables -t mangle -A POSTROUTING -o $device -j IMQ --todev $imqdev" "$N" |
|
|
|
|
} |
|
|
|
|
append down "iptables -t mangle -A PREROUTING -i $device -j ${cg}" "$N" |
|
|
|
|
append down "iptables -t mangle -A POSTROUTING -o $device -j ${cg}" "$N" |
|
|
|
|
append down "iptables -t mangle -A PREROUTING -i $device -j IMQ --todev $imqdev" "$N" |
|
|
|
|
} |
|
|
|
|
done |
|
|
|
|