[LARTC] Mark all traffic except browsing

Eduardo Bejar wonka at linkabu.net
Wed Jul 6 18:31:03 CEST 2005


Hi,

I´d like to create two classes for HTB, one of them to limit traffic for
everything except browsing and the other to limit traffic only for browsing.
How can I mark all traffic except the one related to browsing with iptables?

Currently I mark all traffic related to one IP with:

iptables -A PREROUTING -i eth2 -t mangle -p tcp -s $IP_ADDRESS -j MARK
--set-mark 10

Should I use three rules for my purpose?

iptables -A PREROUTING -i eth2 -t mangle -p tcp -s $IP_ADDRESS --dport 1:79
-j MARK --set-mark 10
iptables -A PREROUTING -i eth2 -t mangle -p tcp -s $IP_ADDRESS --dport
81:65535 -j MARK --set-mark 10

iptables -A PREROUTING -i eth2 -t mangle -p tcp -s $IP_ADDRESS --dport 80 -j
MARK --set-mark 11

Please tell me if this is correct,

Regards,

Edo



More information about the LARTC mailing list