This chapter focuses on how to connect labeling and package labeling, queue Queue can be used to make calls.
So how to package labeling, we first understand your own needs.
1. Mark connection and DNS packet (bidirectional)
2. Mark 192.168.11.0/24 segment we all connections (two-way)
First, the operation flow:
1. Mark DNS connection upload
So this time we first open mangle, click create a new rule, catena alberghiera choose Prerouting
In which the operation flag, connecting labeled DNS_U_conn, and add notes for "upload the DNS chain"
At this point we have completed the internal network connection mark request to send DNS PPPOE dial-up.
2. upload connection mark becomes DNS packet marking
Click Add New, and then create a rule. Chain election Prerouting
In operation inside the marked packet marking. Marked DNS_U_P, and add notes as "DNS upload package"!
After completing the upload package labeling, we need to continue to remove the match passthrough, save CPU resources.
This time we are done with the connection to upload DNS packet marking and labeling of the.
3. Mark DNS download link.
Mangle a new connection, the selection forward
In which the operation flag, connecting labeled DNS_D_conn, and add notes for "Download the DNS chain"
4. The DNS packet marking upload connection mark becomes
Mangle a new connection,
In operation inside the marked packet marking. Marked DNS_D_P, and add notes as "DNS download package"!
Second, all of the connections labeled
According to the above operation, four mangle create additional rules
Upload mark the connection as ALL_U_conn, retention continues to match
Upload packet is marked ALL_U_P, continues to match removed
Download link labeled ALL_D_conn, retention continues to match
Download package marked ALL_D_P, continues to match removed
Asked Questions:
1 upload with prerouting, Download forward, which is why?
Because when you need to upload through the gateway NAT, form a mapping table. Download time directly send back data through NAT mapping table, take the high road, does not require a gateway!
2. This way, then call QUEUE queue processing time would not limit the speed of Ether4?
Yes, so we can Ether4 a Bridge to interface to hang above the speed limit will not Ether4 of the present embodiment is connected only to be exemplary tags and packet marking.
、