#!/bin/sh

# eth1 - down

# clasa root
tc qdisc add dev eth1 root handle 1: htb default 15

#default - lasam mare cat suntem in teste sa avem portita
tc class add dev eth1 parent 1: classid 1:15 htb rate 50mbit ceil 90mbit prio 4

#LAN
tc class add dev eth1 parent 1: classid 1:10 htb rate 50mbit ceil 90mbit prio 3

# internet
tc class add dev eth1 parent 1:1 classid 1:20 htb rate 500kbit ceil 500kbit prio 0
# clasa pentru latenta mica la programe interactive (ssh, irc, etc)
tc class add dev eth1 parent 1:20 classid 1:21 htb rate 128kbit ceil 256kbit prio 0

# metro
tc class add dev eth1 parent 1:0 classid 1:30 htb rate 50mbit ceil 90mbit prio 2
tc qdisc add dev eth1 parent 1:30 handle 130: sfq perturb 10


# prioritati
tc filter add dev eth1 protocol ip parent 1:0 prio 1 handle 1 fw flowid 1:21

# ping
iptables -t mangle -A PREROUTING -p icmp -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p icmp -j RETURN

# ssh   
iptables -t mangle -A PREROUTING -p tcp -m tcp --sport 22 -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p tcp -m tcp --sport 22 -j RETURN

iptables -t mangle -A PREROUTING -p tcp -m tcp --dport 22 -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p tcp -m tcp --dport 22 -j RETURN

# irc
iptables -t mangle -A PREROUTING -p tcp -m tcp --dport 6667 -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p tcp -m tcp --dport 6667 -j RETURN

# ...
iptables -t mangle -I PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -j MARK --set-mark 1
iptables -t mangle -I PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -j RETURN