IPFW Question

12 отговора 581 прегледа
#1

IPFW Question

abe vse se kania da pitam.
Iskam da razdelia BG ot INTL trafika i da sloja razlichen shape na 2te.
IPFW ima edna opciq - fwd. Imam izvestna ideia kak bi moglo da stane no shte se radvam ako niakoi spodeli opit v taia nasoka.

Отговор
в отговор на 3chO #2

Mai ne sam napisal neshtata kato horata

Ideqta e slednata s taia opciika na ipfw - fwd da nasochish bulgarskite mreji prez edin interfeis a vsichki ostanali prez 2ri interfeis i sled tova da sazdavash shaping policies na otdelnite interfeisi a ne na glavniq potok.
Dali sega stana po iasno ?

Отговор
в отговор на 3chO #3

Re: Mai ne sam napisal neshtata kato horata

Аз лично съм го правил със ipfw2, и опцията му за групи от мрежи.
Примерно:

goodguys="{ 10.1.2.0/24{20,35,66,18} or 10.2.3.0/28{6,3,11} }"
badguys="10.1.2.0/24{8,38,60}"

ipfw add allow ip from ${goodguys} to any
ipfw add deny ip from ${badguys} to any
Като съответно вместо allow,deny - pipe, queue изобщо което ти върши работа.
Имаше един пиниз, не знам дали са го оправили - ако някоя от групите стане много голяма просто тихичко умира и нищо не се случва.
Затова е хубаво да си разделиш пиъринга на две групи и съответно да направиш правилата за всяка една от тях.

Скоро не съм си играл със това, може и да са оправили бъгчето.

waiting... dreaming... wishing...
Отговор
в отговор на 3chO #4

Re: Mai ne sam napisal neshtata kato horata

Нали съм си добричък ;)))
Ето ти интерфейсите:
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
Някакъв адрес - от тука иде нета ;)))
ether 00:03:47:73:52:b0
media: Ethernet autoselect (10baseT/UTP)
status: active
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 1.1.1.1 netmask 0xfffffffc broadcast 1.1.1.3
ether 00:03:47:73:52:ad
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
fxp2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 1.1.1.5 netmask 0xfffffffc broadcast 1.1.1.7
ether 00:03:47:73:52:26
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active

Сега - превиш следното нещо:
/sbin/ipfw -f flush
/sbin/ipfw add allow all from any to [адреса на fxp0]/32 in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.176.64.0/18 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.200.195.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.204.128.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.213.160.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.213.184.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.32.56.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.44.96.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 62.73.64.0/18 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 80.246.192.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 80.72.64.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 80.80.128.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 81.161.208.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 81.161.240.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 82.137.64.0/18 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 82.146.0.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 82.147.128.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 139.92.144.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 139.92.51.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 152.158.113.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 157.125.223.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 192.92.129.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.108.24.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.108.32.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.109.54.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.110.159.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.110.216.0/21 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.110.82.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.111.194.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.111.89.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.138.67.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.178.153.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.178.166.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.178.222.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.193.162.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.193.164.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.193.182.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.194.140.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.194.156.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.200.14.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.200.24.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.201.114.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.201.172.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.201.240.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.22.103.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.254.29.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.41.182.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.41.188.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.41.206.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.41.64.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 193.68.0.0/16 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 194.12.224.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 194.141.0.0/16 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 194.145.63.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 194.146.232.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 194.153.145.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 194.8.53.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 194.8.60.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.138.128.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.149.248.0/21 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.177.218.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.177.248.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.190.152.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.212.63.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.22.146.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.230.12.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.230.16.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.230.0.0/21 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.230.8.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.234.236.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.24.32.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.24.88.0/21 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.34.96.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.39.198.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.39.212.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.47.193.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.68.200.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.68.214.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.69.108.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.69.120.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.69.164.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.72.112.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.85.215.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 195.96.224.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 209.239.78.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.104.96.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.116.128.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.122.160.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.124.64.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.21.128.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.36.0.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.39.64.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.5.128.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.50.0.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.56.0.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.7.192.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.72.192.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.91.160.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 212.95.160.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.130.64.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.137.32.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.137.38.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.137.40.0/21 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.137.48.0/21 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.137.56.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.137.58.0/24 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.137.60.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.145.96.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.16.32.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.169.32.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.174.0.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.191.192.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.208.10.0/23 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.222.32.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.226.0.0/18 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.240.192.0/18 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 213.91.128.0/17 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.10.240.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.145.160.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.18.240.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.197.128.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.30.208.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.75.128.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.75.144.0/22 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.79.32.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.79.64.0/19 to any in via fxp0
/sbin/ipfw add forward 1.1.1.2 all from 217.9.224.0/20 to any in via fxp0
/sbin/ipfw add forward 1.1.1.6 all from any to any in via fxp0

От другата страна имаш още една машина която да ти посреща разделения вече трафик. Съответно мрежите са 1.1.1.0/30 и 1.1.1.4/30. Така можеш да си правиш QoS на incoming и outgoing ;))). Може да се реализира и само с една машина - оставям те да помислиш ;))).
Още нещо - този списък на БГ мрежите не е update-=ван скоро - така че ......

И.

FreeBSD will root jOOr phat anus.
Отговор
в отговор на DarkStar #5

Exeee

:))) THX na Dark Star . - shte porabotq.

Kolkoto do polzvaneto na alias i razdelianeto na 2 grupi za BG Peering se poiaviavat izvestni problemi. :)) Opitvah. Nachina na DS mai e nai dobroto reshenie na problema

Отговор
в отговор на 3chO #6

Re: IPFW Question

Не бях поглеждал насам от няколко дни, затова отговарям чак сега - изрових един стар config за ipfw1, който ми работеше известно време на един gateway - вътрешната мрежа е на 4 сегмента, различно о-shape-ни, трафикът е разделен на 2 по IP-та, има и masq и са затворени ненужните портове. Ти само за shape питаш, ама ме мързи да махам другото ..
За да работи трябва sysctl net.inet.ip.fw.one_pass=1


add 100 allow ip from any to any via lo0
add 200 allow ip from any to any via dc0
add 300 allow ip from any to 224.0.0.0/8
add 400 allow udp from any to 255.255.255.255 in recv xl0
add 600 allow ip from me to any out

add 1000 divert natd ip from any to me in recv xl0

add 1500 allow icmp from any to me
add 1600 allow tcp from any to me established
add 1700 allow tcp from any to me ssh,domain,smtp,pop3,cvspserver,http setup in
recv xl0
add 1701 allow udp from any to me domain
add 1702 allow udp from any domain to me
add 1703 allow udp from dhcpd.catv.interbgc.com 67 to me 68 in via xl0
add 1704 allow tcp from ntp.cis.strath.ac.uk 123 to me in via xl0
add 1705 allow udp from ntp.cis.strath.ac.uk 123 to me in via xl0
add 1706 allow tcp from ntp2a.mcc.ac.uk 123 to me in via xl0
add 1707 allow udp from ntp2a.mcc.ac.uk 123 to me in via xl0
add 1708 allow tcp from ntp1.belbone.be 123 to me in via xl0
add 1709 allow udp from ntp1.belbone.be 123 to me in via xl0
add 1710 allow tcp from ntp2.belbone.be 123 to me in via xl0
add 1711 allow udp from ntp2.belbone.be 123 to me in via xl0
add 1712 allow tcp from ntp.karpo.cz 123 to me in via xl0
add 1713 allow udp from ntp.karpo.cz 123 to me in via xl0
add 1714 allow tcp from ntp1.contactel.cz 123 to me in via xl0
add 1715 allow udp from ntp1.contactel.cz 123 to me in via xl0
add 1716 allow tcp from ntp2.contactel.cz 123 to me in via xl0
add 1717 allow udp from ntp2.contactel.cz 123 to me in via xl0
add 1718 allow tcp from clock.netcetera.dk 123 to me in via xl0
add 1719 allow udp from clock.netcetera.dk 123 to me in via xl0
add 1720 allow tcp from clock2.netcetera.dk 123 to me in via xl0
add 1721 allow udp from clock.netcetera.dk 123 to me in via xl0

add 2000 skipto 4000 ip from 192.168.0.0/29 to 80.80.128.0/20 out
add 2001 skipto 4000 ip from 192.168.0.0/29 to 195.96.224.0/19 out
add 2002 skipto 4000 ip from 192.168.0.0/29 to 213.191.192.0/19 out
add 2003 skipto 4000 ip from 192.168.0.0/29 to 213.174.0.0/19 out
add 2004 skipto 4000 ip from 192.168.0.0/29 to 195.34.96.0/19 out
add 2005 skipto 4000 ip from 192.168.0.0/29 to 212.39.64.0/19 out
add 2006 skipto 4000 ip from 192.168.0.0/29 to 213.16.32.0/19 out
add 2007 skipto 4000 ip from 192.168.0.0/29 to 213.91.128.0/17 out
add 2008 skipto 4000 ip from 192.168.0.0/29 to 217.79.32.0/20 out
add 2009 skipto 4000 ip from 192.168.0.0/29 to 80.72.64.0/20 out
add 2010 skipto 4000 ip from 192.168.0.0/29 to 217.10.240.0/20 out
add 2011 skipto 4000 ip from 192.168.0.0/29 to 195.138.128.0/19 out
add 2012 skipto 4000 ip from 192.168.0.0/29 to 212.56.0.0/19 out
add 2013 skipto 4000 ip from 192.168.0.0/29 to 212.122.160.0/19 out
add 2014 skipto 4000 ip from 192.168.0.0/29 to 217.9.224.0/20 out
add 2015 skipto 4000 ip from 192.168.0.0/29 to 217.18.240.0/20 out
add 2016 skipto 4000 ip from 192.168.0.0/29 to 217.145.160.0/20 out
add 2017 skipto 4000 ip from 192.168.0.0/29 to 212.21.128.0/19 out
add 2018 skipto 4000 ip from 192.168.0.0/29 to 62.213.160.0/19 out
add 2019 skipto 4000 ip from 192.168.0.0/29 to 212.124.64.0/19 out
add 2020 skipto 4000 ip from 192.168.0.0/29 to 213.137.32.0/19 out
add 2021 skipto 4000 ip from 192.168.0.0/29 to 212.116.128.0/19 out
add 2022 skipto 4000 ip from 192.168.0.0/29 to 213.145.96.0/19 out
add 2023 skipto 4000 ip from 192.168.0.0/29 to 62.73.64.0/18 out
add 2024 skipto 4000 ip from 192.168.0.0/29 to 62.176.64.0/19 out
add 2025 skipto 4000 ip from 192.168.0.0/29 to 62.176.96.0/19 out
add 2026 skipto 4000 ip from 192.168.0.0/29 to 212.5.128.0/19 out
add 2027 skipto 4000 ip from 192.168.0.0/29 to 213.226.0.0/19 out
add 2028 skipto 4000 ip from 192.168.0.0/29 to 213.226.32.0/19 out
add 2029 skipto 4000 ip from 192.168.0.0/29 to 194.12.224.0/19 out
add 2030 skipto 4000 ip from 192.168.0.0/29 to 80.246.192.0/20 out
add 2031 skipto 4000 ip from 192.168.0.0/29 to 212.72.192.0/19 out
add 2032 skipto 4000 ip from 192.168.0.0/29 to 213.130.64.0/19 out
add 2033 skipto 4000 ip from 192.168.0.0/29 to 212.7.192.0/19 out
add 2034 skipto 4000 ip from 192.168.0.0/29 to 217.75.128.0/20 out
add 2035 skipto 4000 ip from 192.168.0.0/29 to 195.24.32.0/19 out
add 2036 skipto 4000 ip from 192.168.0.0/29 to 212.95.160.0/19 out
add 2037 skipto 4000 ip from 192.168.0.0/29 to 213.222.32.0/19 out
add 2038 skipto 4000 ip from 192.168.0.0/29 to 62.204.128.0/19 out
add 2039 skipto 4000 ip from 192.168.0.0/29 to 212.36.0.0/19 out
add 2040 skipto 4000 ip from 192.168.0.0/29 to 212.50.0.0/19 out
add 2041 skipto 4000 ip from 192.168.0.0/29 to 212.91.160.0/19 out
add 2042 skipto 4000 ip from 192.168.0.0/29 to 213.169.32.0/19 out
add 2043 skipto 4000 ip from 192.168.0.0/29 to 217.79.64.0/20 out
add 2044 skipto 4000 ip from 192.168.0.0/29 to 217.79.80.0/20 out
add 2045 skipto 4000 ip from 192.168.0.0/29 to 195.230.0.0/19 out
add 2046 skipto 4000 ip from 192.168.0.0/29 to 194.141.0.0/19 out
add 2047 skipto 4000 ip from 192.168.0.0/29 to 194.141.32.0/19 out
add 2048 skipto 4000 ip from 192.168.0.0/29 to 194.141.64.0/18 out
add 2049 skipto 4000 ip from 192.168.0.0/29 to 194.141.128.0/17 out
add 2050 skipto 4000 ip from 192.168.0.0/29 to 217.197.128.0/20 out
add 2051 skipto 4000 ip from 192.168.0.0/29 to 193.200.0.0/16 out
add 2100 skipto 4100 ip from 192.168.0.0/29 to any out

add 2200 skipto 4200 ip from 80.80.128.0/20 to 192.168.0.0/29 in
add 2201 skipto 4200 ip from 195.96.224.0/19 to 192.168.0.0/29 in
add 2202 skipto 4200 ip from 213.191.192.0/19 to 192.168.0.0/29 in
add 2203 skipto 4200 ip from 213.174.0.0/19 to 192.168.0.0/29 in
add 2204 skipto 4200 ip from 195.34.96.0/19 to 192.168.0.0/29 in
add 2205 skipto 4200 ip from 212.39.64.0/19 to 192.168.0.0/29 in
add 2206 skipto 4200 ip from 213.16.32.0/19 to 192.168.0.0/29 in
add 2207 skipto 4200 ip from 213.91.128.0/17 to 192.168.0.0/29 in
add 2208 skipto 4200 ip from 217.79.32.0/20 to 192.168.0.0/29 in
add 2209 skipto 4200 ip from 80.72.64.0/20 to 192.168.0.0/29 in
add 2210 skipto 4200 ip from 217.10.240.0/20 to 192.168.0.0/29 in
add 2211 skipto 4200 ip from 195.138.128.0/19 to 192.168.0.0/29 in
add 2212 skipto 4200 ip from 212.56.0.0/19 to 192.168.0.0/29 in
add 2213 skipto 4200 ip from 212.122.160.0/19 to 192.168.0.0/29 in
add 2214 skipto 4200 ip from 217.9.224.0/20 to 192.168.0.0/29 in
add 2215 skipto 4200 ip from 217.18.240.0/20 to 192.168.0.0/29 in
add 2216 skipto 4200 ip from 217.145.160.0/20 to 192.168.0.0/29 in
add 2217 skipto 4200 ip from 212.21.128.0/19 to 192.168.0.0/29 in
add 2218 skipto 4200 ip from 62.213.160.0/19 to 192.168.0.0/29 in
add 2219 skipto 4200 ip from 212.124.64.0/19 to 192.168.0.0/29 in
add 2220 skipto 4200 ip from 213.137.32.0/19 to 192.168.0.0/29 in
add 2221 skipto 4200 ip from 212.116.128.0/19 to 192.168.0.0/29 in
add 2222 skipto 4200 ip from 213.145.96.0/19 to 192.168.0.0/29 in
add 2223 skipto 4200 ip from 62.73.64.0/18 to 192.168.0.0/29 in
add 2224 skipto 4200 ip from 62.176.64.0/19 to 192.168.0.0/29 in
add 2225 skipto 4200 ip from 62.176.96.0/19 to 192.168.0.0/29 in
add 2226 skipto 4200 ip from 212.5.128.0/19 to 192.168.0.0/29 in
add 2227 skipto 4200 ip from 213.226.0.0/19 to 192.168.0.0/29 in
add 2228 skipto 4200 ip from 213.226.32.0/19 to 192.168.0.0/29 in
add 2229 skipto 4200 ip from 194.12.224.0/19 to 192.168.0.0/29 in
add 2230 skipto 4200 ip from 80.246.192.0/20 to 192.168.0.0/29 in
add 2231 skipto 4200 ip from 212.72.192.0/19 to 192.168.0.0/29 in
add 2232 skipto 4200 ip from 213.130.64.0/19 to 192.168.0.0/29 in
add 2233 skipto 4200 ip from 212.7.192.0/19 to 192.168.0.0/29 in
add 2234 skipto 4200 ip from 217.75.128.0/20 to 192.168.0.0/29 in
add 2235 skipto 4200 ip from 195.24.32.0/19 to 192.168.0.0/29 in
add 2236 skipto 4200 ip from 212.95.160.0/19 to 192.168.0.0/29 in
add 2237 skipto 4200 ip from 213.222.32.0/19 to 192.168.0.0/29 in
add 2238 skipto 4200 ip from 62.204.128.0/19 to 192.168.0.0/29 in
add 2239 skipto 4200 ip from 212.36.0.0/19 to 192.168.0.0/29 in
add 2240 skipto 4200 ip from 212.50.0.0/19 to 192.168.0.0/29 in
add 2241 skipto 4200 ip from 212.91.160.0/19 to 192.168.0.0/29 in
add 2242 skipto 4200 ip from 213.169.32.0/19 to 192.168.0.0/29 in
add 2243 skipto 4200 ip from 217.79.64.0/20 to 192.168.0.0/29 in
add 2244 skipto 4200 ip from 217.79.80.0/20 to 192.168.0.0/29 in
add 2245 skipto 4200 ip from 195.230.0.0/19 to 192.168.0.0/29 in
add 2246 skipto 4200 ip from 194.141.0.0/19 to 192.168.0.0/29 in
add 2214 skipto 4200 ip from 194.141.32.0/19 to 192.168.0.0/29 in
add 2248 skipto 4200 ip from 194.141.64.0/18 to 192.168.0.0/29 in
add 2249 skipto 4200 ip from 194.141.128.0/17 to 192.168.0.0/29 in
add 2250 skipto 4200 ip from 217.197.128.0/20 to 192.168.0.0/29 in
add 2251 skipto 4200 ip from 193.200.0.0/16 to 192.168.0.0/29 in
add 2300 skipto 4300 ip from any to 192.168.0.0/29 in

add 2400 skipto 4400 ip from 192.168.0.8/29 to 80.80.128.0/20 out
add 2401 skipto 4400 ip from 192.168.0.8/29 to 195.96.224.0/19 out
add 2402 skipto 4400 ip from 192.168.0.8/29 to 213.191.192.0/19 out
add 2403 skipto 4400 ip from 192.168.0.8/29 to 213.174.0.0/19 out
add 2404 skipto 4400 ip from 192.168.0.8/29 to 195.34.96.0/19 out
add 2405 skipto 4400 ip from 192.168.0.8/29 to 212.39.64.0/19 out
add 2406 skipto 4400 ip from 192.168.0.8/29 to 213.16.32.0/19 out
add 2407 skipto 4400 ip from 192.168.0.8/29 to 213.91.128.0/17 out
add 2408 skipto 4400 ip from 192.168.0.8/29 to 217.79.32.0/20 out
add 2409 skipto 4400 ip from 192.168.0.8/29 to 80.72.64.0/20 out
add 2410 skipto 4400 ip from 192.168.0.8/29 to 217.10.240.0/20 out
add 2411 skipto 4400 ip from 192.168.0.8/29 to 195.138.128.0/19 out
add 2412 skipto 4400 ip from 192.168.0.8/29 to 212.56.0.0/19 out
add 2413 skipto 4400 ip from 192.168.0.8/29 to 212.122.160.0/19 out
add 2414 skipto 4400 ip from 192.168.0.8/29 to 217.9.224.0/20 out
add 2415 skipto 4400 ip from 192.168.0.8/29 to 217.18.240.0/20 out
add 2416 skipto 4400 ip from 192.168.0.8/29 to 217.145.160.0/20 out
add 2417 skipto 4400 ip from 192.168.0.8/29 to 212.21.128.0/19 out
add 2418 skipto 4400 ip from 192.168.0.8/29 to 62.213.160.0/19 out
add 2419 skipto 4400 ip from 192.168.0.8/29 to 212.124.64.0/19 out
add 2420 skipto 4400 ip from 192.168.0.8/29 to 213.137.32.0/19 out
add 2421 skipto 4400 ip from 192.168.0.8/29 to 212.116.128.0/19 out
add 2422 skipto 4400 ip from 192.168.0.8/29 to 213.145.96.0/19 out
add 2423 skipto 4400 ip from 192.168.0.8/29 to 62.73.64.0/18 out
add 2424 skipto 4400 ip from 192.168.0.8/29 to 62.176.64.0/19 out
add 2425 skipto 4400 ip from 192.168.0.8/29 to 62.176.96.0/19 out
add 2426 skipto 4400 ip from 192.168.0.8/29 to 212.5.128.0/19 out
add 2427 skipto 4400 ip from 192.168.0.8/29 to 213.226.0.0/19 out
add 2428 skipto 4400 ip from 192.168.0.8/29 to 213.226.32.0/19 out
add 2429 skipto 4400 ip from 192.168.0.8/29 to 194.12.224.0/19 out
add 2430 skipto 4400 ip from 192.168.0.8/29 to 80.246.192.0/20 out
add 2431 skipto 4400 ip from 192.168.0.8/29 to 212.72.192.0/19 out
add 2432 skipto 4400 ip from 192.168.0.8/29 to 213.130.64.0/19 out
add 2433 skipto 4400 ip from 192.168.0.8/29 to 212.7.192.0/19 out
add 2434 skipto 4400 ip from 192.168.0.8/29 to 217.75.128.0/20 out
add 2435 skipto 4400 ip from 192.168.0.8/29 to 195.24.32.0/19 out
add 2436 skipto 4400 ip from 192.168.0.8/29 to 212.95.160.0/19 out
add 2437 skipto 4400 ip from 192.168.0.8/29 to 213.222.32.0/19 out
add 2438 skipto 4400 ip from 192.168.0.8/29 to 62.204.128.0/19 out
add 2439 skipto 4400 ip from 192.168.0.8/29 to 212.36.0.0/19 out
add 2440 skipto 4400 ip from 192.168.0.8/29 to 212.50.0.0/19 out
add 2441 skipto 4400 ip from 192.168.0.8/29 to 212.91.160.0/19 out
add 2442 skipto 4400 ip from 192.168.0.8/29 to 213.169.32.0/19 out
add 2443 skipto 4400 ip from 192.168.0.8/29 to 217.79.64.0/20 out
add 2444 skipto 4400 ip from 192.168.0.8/29 to 217.79.80.0/20 out
add 2445 skipto 4400 ip from 192.168.0.8/29 to 195.230.0.0/19 out
add 2446 skipto 4400 ip from 192.168.0.8/29 to 194.141.0.0/19 out
add 2447 skipto 4400 ip from 192.168.0.8/29 to 194.141.32.0/19 out
add 2448 skipto 4400 ip from 192.168.0.8/29 to 194.141.64.0/18 out
add 2449 skipto 4400 ip from 192.168.0.8/29 to 194.141.128.0/17 out
add 2450 skipto 4400 ip from 192.168.0.8/29 to 217.197.128.0/20 out
add 2451 skipto 4400 ip from 192.168.0.8/29 to 193.200.0.0/16 out
add 2500 skipto 4500 ip from 192.168.0.8/29 to any out

add 2600 skipto 4600 ip from 80.80.128.0/20 to 192.168.0.8/29 in
add 2601 skipto 4600 ip from 195.96.224.0/19 to 192.168.0.8/29 in
add 2602 skipto 4600 ip from 213.191.192.0/19 to 192.168.0.8/29 in
add 2603 skipto 4600 ip from 213.174.0.0/19 to 192.168.0.8/29 in
add 2604 skipto 4600 ip from 195.34.96.0/19 to 192.168.0.8/29 in
add 2605 skipto 4600 ip from 212.39.64.0/19 to 192.168.0.8/29 in
add 2606 skipto 4600 ip from 213.16.32.0/19 to 192.168.0.8/29 in
add 2607 skipto 4600 ip from 213.91.128.0/17 to 192.168.0.8/29 in
add 2608 skipto 4600 ip from 217.79.32.0/20 to 192.168.0.8/29 in
add 2609 skipto 4600 ip from 80.72.64.0/20 to 192.168.0.8/29 in
add 2610 skipto 4600 ip from 217.10.240.0/20 to 192.168.0.8/29 in
add 2611 skipto 4600 ip from 195.138.128.0/19 to 192.168.0.8/29 in
add 2612 skipto 4600 ip from 212.56.0.0/19 to 192.168.0.8/29 in
add 2613 skipto 4600 ip from 212.122.160.0/19 to 192.168.0.8/29 in
add 2614 skipto 4600 ip from 217.9.224.0/20 to 192.168.0.8/29 in
add 2615 skipto 4600 ip from 217.18.240.0/20 to 192.168.0.8/29 in
add 2616 skipto 4600 ip from 217.145.160.0/20 to 192.168.0.8/29 in
add 2617 skipto 4600 ip from 212.21.128.0/19 to 192.168.0.8/29 in
add 2618 skipto 4600 ip from 62.213.160.0/19 to 192.168.0.8/29 in
add 2619 skipto 4600 ip from 212.124.64.0/19 to 192.168.0.8/29 in
add 2620 skipto 4600 ip from 213.137.32.0/19 to 192.168.0.8/29 in
add 2621 skipto 4600 ip from 212.116.128.0/19 to 192.168.0.8/29 in
add 2622 skipto 4600 ip from 213.145.96.0/19 to 192.168.0.8/29 in
add 2623 skipto 4600 ip from 62.73.64.0/18 to 192.168.0.8/29 in
add 2624 skipto 4600 ip from 62.176.64.0/19 to 192.168.0.8/29 in
add 2625 skipto 4600 ip from 62.176.96.0/19 to 192.168.0.8/29 in
add 2626 skipto 4600 ip from 212.5.128.0/19 to 192.168.0.8/29 in
add 2627 skipto 4600 ip from 213.226.0.0/19 to 192.168.0.8/29 in
add 2628 skipto 4600 ip from 213.226.32.0/19 to 192.168.0.8/29 in
add 2629 skipto 4600 ip from 194.12.224.0/19 to 192.168.0.8/29 in
add 2630 skipto 4600 ip from 80.246.192.0/20 to 192.168.0.8/29 in
add 2631 skipto 4600 ip from 212.72.192.0/19 to 192.168.0.8/29 in
add 2632 skipto 4600 ip from 213.130.64.0/19 to 192.168.0.8/29 in
add 2633 skipto 4600 ip from 212.7.192.0/19 to 192.168.0.8/29 in
add 2634 skipto 4600 ip from 217.75.128.0/20 to 192.168.0.8/29 in
add 2635 skipto 4600 ip from 195.24.32.0/19 to 192.168.0.8/29 in
add 2636 skipto 4600 ip from 212.95.160.0/19 to 192.168.0.8/29 in
add 2637 skipto 4600 ip from 213.222.32.0/19 to 192.168.0.8/29 in
add 2638 skipto 4600 ip from 62.204.128.0/19 to 192.168.0.8/29 in
add 2639 skipto 4600 ip from 212.36.0.0/19 to 192.168.0.8/29 in
add 2640 skipto 4600 ip from 212.50.0.0/19 to 192.168.0.8/29 in
add 2641 skipto 4600 ip from 212.91.160.0/19 to 192.168.0.8/29 in
add 2642 skipto 4600 ip from 213.169.32.0/19 to 192.168.0.8/29 in
add 2643 skipto 4600 ip from 217.79.64.0/20 to 192.168.0.8/29 in
add 2644 skipto 4600 ip from 217.79.80.0/20 to 192.168.0.8/29 in
add 2645 skipto 4600 ip from 195.230.0.0/19 to 192.168.0.8/29 in
add 2646 skipto 4600 ip from 194.141.0.0/19 to 192.168.0.8/29 in
add 2647 skipto 4600 ip from 194.141.32.0/19 to 192.168.0.8/29 in
add 2648 skipto 4600 ip from 194.141.64.0/18 to 192.168.0.8/29 in
add 2649 skipto 4600 ip from 194.141.128.0/17 to 192.168.0.8/29 in
add 2650 skipto 4600 ip from 217.197.128.0/20 to 192.168.0.8/29 in
add 2651 skipto 4600 ip from 193.200.0.0/16 to 192.168.0.8/29 in
add 2700 skipto 4700 ip from any to 192.168.0.8/29 in

add 2800 skipto 4800 ip from 192.168.0.16/29 to 80.80.128.0/20 out
add 2801 skipto 4800 ip from 192.168.0.16/29 to 195.96.224.0/19 out
add 2802 skipto 4800 ip from 192.168.0.16/29 to 213.191.192.0/19 out
add 2803 skipto 4800 ip from 192.168.0.16/29 to 213.174.0.0/19 out
add 2804 skipto 4800 ip from 192.168.0.16/29 to 195.34.96.0/19 out
add 2805 skipto 4800 ip from 192.168.0.16/29 to 212.39.64.0/19 out
add 2806 skipto 4800 ip from 192.168.0.16/29 to 213.16.32.0/19 out
add 2807 skipto 4800 ip from 192.168.0.16/29 to 213.91.128.0/17 out
add 2808 skipto 4800 ip from 192.168.0.16/29 to 217.79.32.0/20 out
add 2809 skipto 4800 ip from 192.168.0.16/29 to 80.72.64.0/20 out
add 2810 skipto 4800 ip from 192.168.0.16/29 to 217.10.240.0/20 out
add 2811 skipto 4800 ip from 192.168.0.16/29 to 195.138.128.0/19 out
add 2812 skipto 4800 ip from 192.168.0.16/29 to 212.56.0.0/19 out
add 2813 skipto 4800 ip from 192.168.0.16/29 to 212.122.160.0/19 out
add 2814 skipto 4800 ip from 192.168.0.16/29 to 217.9.224.0/20 out
add 2815 skipto 4800 ip from 192.168.0.16/29 to 217.18.240.0/20 out
add 2816 skipto 4800 ip from 192.168.0.16/29 to 217.145.160.0/20 out
add 2817 skipto 4800 ip from 192.168.0.16/29 to 212.21.128.0/19 out
add 2818 skipto 4800 ip from 192.168.0.16/29 to 62.213.160.0/19 out
add 2819 skipto 4800 ip from 192.168.0.16/29 to 212.124.64.0/19 out
add 2820 skipto 4800 ip from 192.168.0.16/29 to 213.137.32.0/19 out
add 2821 skipto 4800 ip from 192.168.0.16/29 to 212.116.128.0/19 out
add 2822 skipto 4800 ip from 192.168.0.16/29 to 213.145.96.0/19 out
add 2823 skipto 4800 ip from 192.168.0.16/29 to 62.73.64.0/18 out
add 2824 skipto 4800 ip from 192.168.0.16/29 to 62.176.64.0/19 out
add 2825 skipto 4800 ip from 192.168.0.16/29 to 62.176.96.0/19 out
add 2826 skipto 4800 ip from 192.168.0.16/29 to 212.5.128.0/19 out
add 2827 skipto 4800 ip from 192.168.0.16/29 to 213.226.0.0/19 out
add 2828 skipto 4800 ip from 192.168.0.16/29 to 213.226.32.0/19 out
add 2829 skipto 4800 ip from 192.168.0.16/29 to 194.12.224.0/19 out
add 2830 skipto 4800 ip from 192.168.0.16/29 to 80.246.192.0/20 out
add 2831 skipto 4800 ip from 192.168.0.16/29 to 212.72.192.0/19 out
add 2832 skipto 4800 ip from 192.168.0.16/29 to 213.130.64.0/19 out
add 2833 skipto 4800 ip from 192.168.0.16/29 to 212.7.192.0/19 out
add 2834 skipto 4800 ip from 192.168.0.16/29 to 217.75.128.0/20 out
add 2835 skipto 4800 ip from 192.168.0.16/29 to 195.24.32.0/19 out
add 2836 skipto 4800 ip from 192.168.0.16/29 to 212.95.160.0/19 out
add 2837 skipto 4800 ip from 192.168.0.16/29 to 213.222.32.0/19 out
add 2838 skipto 4800 ip from 192.168.0.16/29 to 62.204.128.0/19 out
add 2839 skipto 4800 ip from 192.168.0.16/29 to 212.36.0.0/19 out
add 2840 skipto 4800 ip from 192.168.0.16/29 to 212.50.0.0/19 out
add 2841 skipto 4800 ip from 192.168.0.16/29 to 212.91.160.0/19 out
add 2842 skipto 4800 ip from 192.168.0.16/29 to 213.169.32.0/19 out
add 2843 skipto 4800 ip from 192.168.0.16/29 to 217.79.64.0/20 out
add 2844 skipto 4800 ip from 192.168.0.16/29 to 217.79.80.0/20 out
add 2845 skipto 4800 ip from 192.168.0.16/29 to 195.230.0.0/19 out
add 2846 skipto 4800 ip from 192.168.0.16/29 to 194.141.0.0/19 out
add 2847 skipto 4800 ip from 192.168.0.16/29 to 194.141.32.0/19 out
add 2848 skipto 4800 ip from 192.168.0.16/29 to 194.141.64.0/18 out
add 2849 skipto 4800 ip from 192.168.0.16/29 to 194.141.128.0/17 out
add 2850 skipto 4800 ip from 192.168.0.16/29 to 217.197.128.0/20 out
add 2851 skipto 4800 ip from 192.168.0.16/29 to 193.200.0.0/16 out
add 2900 skipto 4900 ip from 192.168.0.16/29 to any out

add 3000 skipto 5000 ip from 80.80.128.0/20 to 192.168.0.16/29 in
add 3001 skipto 5000 ip from 195.96.224.0/19 to 192.168.0.16/29 in
add 3002 skipto 5000 ip from 213.191.192.0/19 to 192.168.0.16/29 in
add 3003 skipto 5000 ip from 213.174.0.0/19 to 192.168.0.16/29 in
add 3004 skipto 5000 ip from 195.34.96.0/19 to 192.168.0.16/29 in
add 3005 skipto 5000 ip from 212.39.64.0/19 to 192.168.0.16/29 in
add 3006 skipto 5000 ip from 213.16.32.0/19 to 192.168.0.16/29 in
add 3007 skipto 5000 ip from 213.91.128.0/17 to 192.168.0.16/29 in
add 3008 skipto 5000 ip from 217.79.32.0/20 to 192.168.0.16/29 in
add 3009 skipto 5000 ip from 80.72.64.0/20 to 192.168.0.16/29 in
add 3010 skipto 5000 ip from 217.10.240.0/20 to 192.168.0.16/29 in
add 3011 skipto 5000 ip from 195.138.128.0/19 to 192.168.0.16/29 in
add 3012 skipto 5000 ip from 212.56.0.0/19 to 192.168.0.16/29 in
add 3013 skipto 5000 ip from 212.122.160.0/19 to 192.168.0.16/29 in
add 3014 skipto 5000 ip from 217.9.224.0/20 to 192.168.0.16/29 in
add 3015 skipto 5000 ip from 217.18.240.0/20 to 192.168.0.16/29 in
add 3016 skipto 5000 ip from 217.145.160.0/20 to 192.168.0.16/29 in
add 3017 skipto 5000 ip from 212.21.128.0/19 to 192.168.0.16/29 in
add 3018 skipto 5000 ip from 62.213.160.0/19 to 192.168.0.16/29 in
add 3019 skipto 5000 ip from 212.124.64.0/19 to 192.168.0.16/29 in
add 3020 skipto 5000 ip from 213.137.32.0/19 to 192.168.0.16/29 in
add 3021 skipto 5000 ip from 212.116.128.0/19 to 192.168.0.16/29 in
add 3022 skipto 5000 ip from 213.145.96.0/19 to 192.168.0.16/29 in
add 3023 skipto 5000 ip from 62.73.64.0/18 to 192.168.0.16/29 in
add 3024 skipto 5000 ip from 62.176.64.0/19 to 192.168.0.16/29 in
add 3025 skipto 5000 ip from 62.176.96.0/19 to 192.168.0.16/29 in
add 3026 skipto 5000 ip from 212.5.128.0/19 to 192.168.0.16/29 in
add 3027 skipto 5000 ip from 213.226.0.0/19 to 192.168.0.16/29 in
add 3028 skipto 5000 ip from 213.226.32.0/19 to 192.168.0.16/29 in
add 3029 skipto 5000 ip from 194.12.224.0/19 to 192.168.0.16/29 in
add 3030 skipto 5000 ip from 80.246.192.0/20 to 192.168.0.16/29 in
add 3031 skipto 5000 ip from 212.72.192.0/19 to 192.168.0.16/29 in
add 3032 skipto 5000 ip from 213.130.64.0/19 to 192.168.0.16/29 in
add 3033 skipto 5000 ip from 212.7.192.0/19 to 192.168.0.16/29 in
add 3034 skipto 5000 ip from 217.75.128.0/20 to 192.168.0.16/29 in
add 3035 skipto 5000 ip from 195.24.32.0/19 to 192.168.0.16/29 in
add 3036 skipto 5000 ip from 212.95.160.0/19 to 192.168.0.16/29 in
add 3037 skipto 5000 ip from 213.222.32.0/19 to 192.168.0.16/29 in
add 3038 skipto 5000 ip from 62.204.128.0/19 to 192.168.0.16/29 in
add 3039 skipto 5000 ip from 212.36.0.0/19 to 192.168.0.16/29 in
add 3040 skipto 5000 ip from 212.50.0.0/19 to 192.168.0.16/29 in
add 3041 skipto 5000 ip from 212.91.160.0/19 to 192.168.0.16/29 in
add 3042 skipto 5000 ip from 213.169.32.0/19 to 192.168.0.16/29 in
add 3043 skipto 5000 ip from 217.79.64.0/20 to 192.168.0.16/29 in
add 3044 skipto 5000 ip from 217.79.80.0/20 to 192.168.0.16/29 in
add 3045 skipto 5000 ip from 195.230.0.0/19 to 192.168.0.16/29 in
add 3046 skipto 5000 ip from 194.141.0.0/19 to 192.168.0.16/29 in
add 3047 skipto 5000 ip from 194.141.32.0/19 to 192.168.0.16/29 in
add 3048 skipto 5000 ip from 194.141.64.0/18 to 192.168.0.16/29 in
add 3049 skipto 5000 ip from 194.141.128.0/17 to 192.168.0.16/29 in
add 3050 skipto 5000 ip from 217.197.128.0/20 to 192.168.0.16/29 in
add 3051 skipto 5000 ip from 193.200.0.0/16 to 192.168.0.16/29 in
add 3100 skipto 5100 ip from any to 192.168.0.16/29 in

add 3200 skipto 5200 ip from 192.168.0.24/29 to 80.80.128.0/20 out
add 3201 skipto 5200 ip from 192.168.0.24/29 to 195.96.224.0/19 out
add 3202 skipto 5200 ip from 192.168.0.24/29 to 213.191.192.0/19 out
add 3203 skipto 5200 ip from 192.168.0.24/29 to 213.174.0.0/19 out
add 3204 skipto 5200 ip from 192.168.0.24/29 to 195.34.96.0/19 out
add 3205 skipto 5200 ip from 192.168.0.24/29 to 212.39.64.0/19 out
add 3206 skipto 5200 ip from 192.168.0.24/29 to 213.16.32.0/19 out
add 3207 skipto 5200 ip from 192.168.0.24/29 to 213.91.128.0/17 out
add 3208 skipto 5200 ip from 192.168.0.24/29 to 217.79.32.0/20 out
add 3209 skipto 5200 ip from 192.168.0.24/29 to 80.72.64.0/20 out
add 3210 skipto 5200 ip from 192.168.0.24/29 to 217.10.240.0/20 out
add 3211 skipto 5200 ip from 192.168.0.24/29 to 195.138.128.0/19 out
add 3212 skipto 5200 ip from 192.168.0.24/29 to 212.56.0.0/19 out
add 3213 skipto 5200 ip from 192.168.0.24/29 to 212.122.160.0/19 out
add 3214 skipto 5200 ip from 192.168.0.24/29 to 217.9.224.0/20 out
add 3215 skipto 5200 ip from 192.168.0.24/29 to 217.18.240.0/20 out
add 3216 skipto 5200 ip from 192.168.0.24/29 to 217.145.160.0/20 out
add 3217 skipto 5200 ip from 192.168.0.24/29 to 212.21.128.0/19 out
add 3218 skipto 5200 ip from 192.168.0.24/29 to 62.213.160.0/19 out
add 3219 skipto 5200 ip from 192.168.0.24/29 to 212.124.64.0/19 out
add 3220 skipto 5200 ip from 192.168.0.24/29 to 213.137.32.0/19 out
add 3221 skipto 5200 ip from 192.168.0.24/29 to 212.116.128.0/19 out
add 3222 skipto 5200 ip from 192.168.0.24/29 to 213.145.96.0/19 out
add 3223 skipto 5200 ip from 192.168.0.24/29 to 62.73.64.0/18 out
add 3224 skipto 5200 ip from 192.168.0.24/29 to 62.176.64.0/19 out
add 3225 skipto 5200 ip from 192.168.0.24/29 to 62.176.96.0/19 out
add 3226 skipto 5200 ip from 192.168.0.24/29 to 212.5.128.0/19 out
add 3227 skipto 5200 ip from 192.168.0.24/29 to 213.226.0.0/19 out
add 3228 skipto 5200 ip from 192.168.0.24/29 to 213.226.32.0/19 out
add 3229 skipto 5200 ip from 192.168.0.24/29 to 194.12.224.0/19 out
add 3230 skipto 5200 ip from 192.168.0.24/29 to 80.246.192.0/20 out
add 3231 skipto 5200 ip from 192.168.0.24/29 to 212.72.192.0/19 out
add 3232 skipto 5200 ip from 192.168.0.24/29 to 213.130.64.0/19 out
add 3233 skipto 5200 ip from 192.168.0.24/29 to 212.7.192.0/19 out
add 3234 skipto 5200 ip from 192.168.0.24/29 to 217.75.128.0/20 out
add 3235 skipto 5200 ip from 192.168.0.24/29 to 195.24.32.0/19 out
add 3236 skipto 5200 ip from 192.168.0.24/29 to 212.95.160.0/19 out
add 3237 skipto 5200 ip from 192.168.0.24/29 to 213.222.32.0/19 out
add 3238 skipto 5200 ip from 192.168.0.24/29 to 62.204.128.0/19 out
add 3239 skipto 5200 ip from 192.168.0.24/29 to 212.36.0.0/19 out
add 3240 skipto 5200 ip from 192.168.0.24/29 to 212.50.0.0/19 out
add 3241 skipto 5200 ip from 192.168.0.24/29 to 212.91.160.0/19 out
add 3242 skipto 5200 ip from 192.168.0.24/29 to 213.169.32.0/19 out
add 3243 skipto 5200 ip from 192.168.0.24/29 to 217.79.64.0/20 out
add 3244 skipto 5200 ip from 192.168.0.24/29 to 217.79.80.0/20 out
add 3245 skipto 5200 ip from 192.168.0.24/29 to 195.230.0.0/19 out
add 3246 skipto 5200 ip from 192.168.0.24/29 to 194.141.0.0/19 out
add 3247 skipto 5200 ip from 192.168.0.24/29 to 194.141.32.0/19 out
add 3248 skipto 5200 ip from 192.168.0.24/29 to 194.141.64.0/18 out
add 3249 skipto 5200 ip from 192.168.0.24/29 to 194.141.128.0/17 out
add 3250 skipto 5200 ip from 192.168.0.24/29 to 217.197.128.0/20 out
add 3251 skipto 5200 ip from 192.168.0.24/29 to 193.200.0.0/16 out
add 3300 skipto 5300 ip from 192.168.0.24/29 to any out

add 3400 skipto 5400 ip from 80.80.128.0/20 to 192.168.0.24/29 in
add 3401 skipto 5400 ip from 195.96.224.0/19 to 192.168.0.24/29 in
add 3402 skipto 5400 ip from 213.191.192.0/19 to 192.168.0.24/29 in
add 3403 skipto 5400 ip from 213.174.0.0/19 to 192.168.0.24/29 in
add 3404 skipto 5400 ip from 195.34.96.0/19 to 192.168.0.24/29 in
add 3405 skipto 5400 ip from 212.39.64.0/19 to 192.168.0.24/29 in
add 3406 skipto 5400 ip from 213.16.32.0/19 to 192.168.0.24/29 in
add 3407 skipto 5400 ip from 213.91.128.0/17 to 192.168.0.24/29 in
add 3408 skipto 5400 ip from 217.79.32.0/20 to 192.168.0.24/29 in
add 3409 skipto 5400 ip from 80.72.64.0/20 to 192.168.0.24/29 in
add 3410 skipto 5400 ip from 217.10.240.0/20 to 192.168.0.24/29 in
add 3411 skipto 5400 ip from 195.138.128.0/19 to 192.168.0.24/29 in
add 3412 skipto 5400 ip from 212.56.0.0/19 to 192.168.0.24/29 in
add 3413 skipto 5400 ip from 212.122.160.0/19 to 192.168.0.24/29 in
add 3414 skipto 5400 ip from 217.9.224.0/20 to 192.168.0.24/29 in
add 3415 skipto 5400 ip from 217.18.240.0/20 to 192.168.0.24/29 in
add 3416 skipto 5400 ip from 217.145.160.0/20 to 192.168.0.24/29 in
add 3417 skipto 5400 ip from 212.21.128.0/19 to 192.168.0.24/29 in
add 3418 skipto 5400 ip from 62.213.160.0/19 to 192.168.0.24/29 in
add 3419 skipto 5400 ip from 212.124.64.0/19 to 192.168.0.24/29 in
add 3420 skipto 5400 ip from 213.137.32.0/19 to 192.168.0.24/29 in
add 3421 skipto 5400 ip from 212.116.128.0/19 to 192.168.0.24/29 in
add 3422 skipto 5400 ip from 213.145.96.0/19 to 192.168.0.24/29 in
add 3423 skipto 5400 ip from 62.73.64.0/18 to 192.168.0.24/29 in
add 3424 skipto 5400 ip from 62.176.64.0/19 to 192.168.0.24/29 in
add 3425 skipto 5400 ip from 62.176.96.0/19 to 192.168.0.24/29 in
add 3426 skipto 5400 ip from 212.5.128.0/19 to 192.168.0.24/29 in
add 3427 skipto 5400 ip from 213.226.0.0/19 to 192.168.0.24/29 in
add 3428 skipto 5400 ip from 213.226.32.0/19 to 192.168.0.24/29 in
add 3429 skipto 5400 ip from 194.12.224.0/19 to 192.168.0.24/29 in
add 3430 skipto 5400 ip from 80.246.192.0/20 to 192.168.0.24/29 in
add 3431 skipto 5400 ip from 212.72.192.0/19 to 192.168.0.24/29 in
add 3432 skipto 5400 ip from 213.130.64.0/19 to 192.168.0.24/29 in
add 3433 skipto 5400 ip from 212.7.192.0/19 to 192.168.0.24/29 in
add 3434 skipto 5400 ip from 217.75.128.0/20 to 192.168.0.24/29 in
add 3435 skipto 5400 ip from 195.24.32.0/19 to 192.168.0.24/29 in
add 3436 skipto 5400 ip from 212.95.160.0/19 to 192.168.0.24/29 in
add 3437 skipto 5400 ip from 213.222.32.0/19 to 192.168.0.24/29 in
add 3438 skipto 5400 ip from 62.204.128.0/19 to 192.168.0.24/29 in
add 3439 skipto 5400 ip from 212.36.0.0/19 to 192.168.0.24/29 in
add 3440 skipto 5400 ip from 212.50.0.0/19 to 192.168.0.24/29 in
add 3441 skipto 5400 ip from 212.91.160.0/19 to 192.168.0.24/29 in
add 3442 skipto 5400 ip from 213.169.32.0/19 to 192.168.0.24/29 in
add 3443 skipto 5400 ip from 217.79.64.0/20 to 192.168.0.24/29 in
add 3444 skipto 5400 ip from 217.79.80.0/20 to 192.168.0.24/29 in
add 3445 skipto 5400 ip from 195.230.0.0/19 to 192.168.0.24/29 in
add 3446 skipto 5400 ip from 194.141.0.0/19 to 192.168.0.24/29 in
add 3447 skipto 5400 ip from 194.141.32.0/19 to 192.168.0.24/29 in
add 3448 skipto 5400 ip from 194.141.64.0/18 to 192.168.0.24/29 in
add 3449 skipto 5400 ip from 194.141.128.0/17 to 192.168.0.24/29 in
add 3450 skipto 5400 ip from 217.197.128.0/20 to 192.168.0.24/29 in
add 3451 skipto 5400 ip from 193.200.0.0/16 to 192.168.0.24/29 in
add 3552 skipto 5500 ip from any to 192.168.0.24/29 in

add 3999 skipto 6000 ip from any to any

add 4000 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 4010 queue 11 ip from any to any
add 4020 skipto 6000 ip from any to any

add 4100 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 4110 queue 13 ip from any to any
add 4120 skipto 6000 ip from any to any

add 4200 queue 12 ip from any to any
add 4210 skipto 6000 ip from any to any

add 4300 queue 14 ip from any to any
add 4310 skipto 6000 ip from any to any

add 4400 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 4410 queue 21 ip from any to any
add 4420 skipto 6000 ip from any to any

add 4500 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 4510 queue 23 ip from any to any
add 4520 skipto 6000 ip from any to any

add 4600 queue 22 ip from any to any
add 4610 skipto 6000 ip from any to any

add 4700 queue 24 ip from any to any
add 4710 skipto 6000 ip from any to any

add 4800 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 4810 queue 31 ip from any to any
add 4820 skipto 6000 ip from any to any

add 4900 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 4910 queue 33 ip from any to any
add 4920 skipto 6000 ip from any to any

add 5000 queue 32 ip from any to any
add 5010 skipto 6000 ip from any to any

add 5100 queue 34 ip from any to any
add 5110 skipto 6000 ip from any to any

add 5200 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 5210 queue 41 ip from any to any
add 5220 skipto 6000 ip from any to any

add 5300 divert natd ip from 192.168.0.0/24 to not 192.168.0.0/24 out xmit xl0
add 5310 queue 43 ip from any to any
add 5320 skipto 6000 ip from any to any

add 5400 queue 42 ip from any to any
add 5410 skipto 6000 ip from any to any

add 5500 queue 44 ip from any to any
add 5510 skipto 6000 ip from any to any

#add 10000 deny log ip from any to any

pipe 1 config bw 512Kbit/s
pipe 2 config bw 512Kbit/s
pipe 3 config bw 64Kbit/s
pipe 4 config bw 64Kbit/s

queue 11 config pipe 1 weight 100 mask src-ip 0x00000007
queue 12 config pipe 2 weight 100 mask dst-ip 0x00000007
queue 13 config pipe 3 weight 100 mask src-ip 0x00000007
queue 14 config pipe 4 weight 100 mask dst-ip 0x00000007
queue 21 config pipe 1 weight 50 mask src-ip 0x00000007
queue 22 config pipe 2 weight 50 mask dst-ip 0x00000007
queue 23 config pipe 3 weight 50 mask src-ip 0x00000007
queue 24 config pipe 4 weight 50 mask dst-ip 0x00000007
queue 31 config pipe 1 weight 20 mask src-ip 0x00000007
queue 32 config pipe 2 weight 20 mask dst-ip 0x00000007
queue 33 config pipe 3 weight 20 mask src-ip 0x00000007
queue 34 config pipe 4 weight 20 mask dst-ip 0x00000007
queue 41 config pipe 1 weight 2 mask src-ip 0x00000007
queue 42 config pipe 2 weight 2 mask dst-ip 0x00000007
queue 43 config pipe 3 weight 2 mask src-ip 0x00000007
queue 44 config pipe 4 weight 2 mask dst-ip 0x00000007



______________

истината е увивно растение
Отговор
в отговор на Labrett #7

Labrett

:)))
Ideiata na Labrett sashto e super. :)). Shte vi obiasnia kakva e ideiata mi i kakvo imah predvid. Ne che ne oceniavam pomoshtta no iskah neshto razlichno.
Ideiata e slednata:

_____________________
/
/
/ NIC1 - NET a.a.a.a
------------------------- ____________________
/
IPS Upstream NIC |
\____________________
-------------------------\
\ NIC2 - NET b.b.b.b
\______________________

na interfeis NIC1 limit 128Kbit/s za vsichki vhodiashti kam IP a.a.a.1
na interfeis NIC1 limit 64Kbit/s za vsichki vhodiashti kam IP a.a.a.2

na interfeis NIC2 limit 256Kbit/s za vsichki vhodiashti kam IP b.b.b.1
na interfeis NIC2 limit 512Kbit/s za vsichki vhodiashti kam IP b.b.b.2

Ili sheip na interfeis a ne po klasove.
Dali uspiah da opisha kakvo iskam da napravia ? :)

Отговор
в отговор на 3chO #8

HEH

Poluchila se e ebasi bozata. :))
Shte gi napravia na kartinka i shte go turia na URL

Отговор
в отговор на 3chO #9

Re: HEH

Ти сам си си написал решението :) `Не по класове (и IP-та), а по интерфейси`.
Защо не пробваш да сглобиш config и да го постнеш тук, пък ние ще ти кажем ако нещо му куца?



______________

истината е увивно растение
Отговор
в отговор на Labrett #10

Taka i shte

stane nakraia :)))). Shte sedna dneska da pomilsq i da natvoria neshto :)))
i shte postna. samo deto nemam kude da testvam :(

Отговор
в отговор на 3chO #11

abe mojete

da me obiavite za lamer ama az pak da pitam praviloto

ipfw add fwd 192.168.1.1 all from 10.0.0.1 to me in via int-1

nali tova oznachava che vsichki vhodiashti paketi ot 10.0.0.1 za men polucheni prez int-1 shte budat forwardnati kam ip 192.168.1.1 ?

Shtoto taka i ne mojah da go razbera tva v ipfw man stranichkata a niamam kude da testvam ?

Отговор
в отговор на 3chO #12

Re: abe mojete

Ахам ;))
Това ознчава, че ip пакет, който е input на интерфейс int-1 със :
source address: 10.0.0.1
destination address: me
ще бъде forward-нат към интерфейса през който се вижда 192.168.1.1.

И.

FreeBSD will root jOOr phat anus.
Отговор
в отговор на DarkStar #13

eeeee

Eeee ti napravo mi reshi problema
dovechera siadam da pisha config i posle shte obdajdame vapreki che tvoia e perfecten :)))

have a nice evening

Отговор