$IPTABLES -A FORWARD -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -j MASQUERADE
$IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to $INTIP:3128
$IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128

iptables -t mangle -A PREROUTING -p udp --dport 5004:5082  -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -p udp --dport 5004:5082  -j TOS --set-tos Minimize-Delay
iptables -t mangle -A PREROUTING -p udp --dport 5004:5082  -j ACCEPT

iptables -t mangle -A PREROUTING -p udp --dport 10000:11000  -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -p udp --dport 10000:11000  -j TOS --set-tos Minimize-Delay
iptables -t mangle -A PREROUTING -p udp --dport 10000:11000  -j ACCEPT

iptables -t mangle -A PREROUTING -p all -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -p all -j ACCEPT