|
|
|
@ -116,6 +116,22 @@ parse_matching_rule() { |
|
|
|
|
add_insmod ipt_connbytes |
|
|
|
|
append "$var" "-m connbytes --connbytes $value --connbytes-dir both --connbytes-mode bytes" |
|
|
|
|
;; |
|
|
|
|
*:tos) |
|
|
|
|
add_insmod ipt_tos |
|
|
|
|
case "$value" in |
|
|
|
|
!*) append "$var" "-m tos ! --tos $value";; |
|
|
|
|
*) append "$var" "-m tos --tos $value" |
|
|
|
|
esac |
|
|
|
|
;; |
|
|
|
|
*:dscp) |
|
|
|
|
add_insmod ipt_dscp |
|
|
|
|
dscp_option="--dscp" |
|
|
|
|
[ -z "${value%%[EBCA]*}" ] && dscp_option="--dscp-class" |
|
|
|
|
case "$value" in |
|
|
|
|
!*) append "$var" "-m dscp ! $dscp_option $value";; |
|
|
|
|
*) append "$var" "-m dscp $dscp_option $value" |
|
|
|
|
esac |
|
|
|
|
;; |
|
|
|
|
*:direction) |
|
|
|
|
value="$(echo "$value" | sed -e 's,-,:,g')" |
|
|
|
|
if [ "$value" = "out" ]; then |
|
|
|
@ -146,6 +162,19 @@ parse_matching_rule() { |
|
|
|
|
!*) append "$var" "-m mark ! --mark $class";; |
|
|
|
|
*) append "$var" "-m mark --mark $class";; |
|
|
|
|
esac |
|
|
|
|
;; |
|
|
|
|
1:TOS) |
|
|
|
|
add_insmod ipt_TOS |
|
|
|
|
config_get TOS "$rule" 'TOS' |
|
|
|
|
suffix="-j TOS --set-tos "${TOS:-"Normal-Service"} |
|
|
|
|
;; |
|
|
|
|
1:DSCP) |
|
|
|
|
add_insmod ipt_DSCP |
|
|
|
|
config_get DSCP "$rule" 'DSCP' |
|
|
|
|
[ -z "${DSCP%%[EBCA]*}" ] && set_value="--set-dscp-class $DSCP" \ |
|
|
|
|
|| set_value="--set-dscp $DSCP" |
|
|
|
|
suffix="-j DSCP $set_value" |
|
|
|
|
;; |
|
|
|
|
esac |
|
|
|
|
done |
|
|
|
|
append "$var" "$suffix" |
|
|
|
@ -327,6 +356,16 @@ add_rules() { |
|
|
|
|
config_get target "$rule" target |
|
|
|
|
config_get target "$target" classnr |
|
|
|
|
config_get options "$rule" options |
|
|
|
|
|
|
|
|
|
## If we want to override the TOS field, let's clear the DSCP field first. |
|
|
|
|
[ ! -z "$(echo $options | grep 'TOS')" ] && { |
|
|
|
|
s_options=${options%%TOS} |
|
|
|
|
add_insmod ipt_DSCP |
|
|
|
|
parse_matching_rule iptrule "$rule" "$s_options" "$prefix" "-j DSCP --set-dscp 0" |
|
|
|
|
append "$var" "$iptrule" "$N" |
|
|
|
|
unset iptrule |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
parse_matching_rule iptrule "$rule" "$options" "$prefix" "-j MARK --set-mark $target" |
|
|
|
|
append "$var" "$iptrule" "$N" |
|
|
|
|
done |
|
|
|
|