>лучше ссылочку на выхлоп pastebin.com :-) http://pastebin.com/pastebin.php?dl=m4465bb63
rc.firewall:
...
# Каналы исходящего трафика
${fwcmd} pipe 1 config bw 3800Kbit/s queue 30
${fwcmd} pipe 2 config bw 90Mbit/s queue 30
# Очереди каналов исходящего трафика
${fwcmd} queue 11 config pipe 1 weight 73 mask src-ip 0xfffffff8
${fwcmd} queue 12 config pipe 1 weight 72 mask src-ip 0xfffffff8
${fwcmd} queue 13 config pipe 1 weight 71 mask src-ip 0xfffffff8
#
${fwcmd} queue 21 config pipe 2 weight 63 mask src-ip 0xfffffff8
${fwcmd} queue 22 config pipe 2 weight 62 mask src-ip 0xfffffff8
${fwcmd} queue 23 config pipe 2 weight 61 mask src-ip 0xfffffff8
${fwcmd} queue 24 config pipe 2 weight 43 mask src-ip 0xfffffff8
#
# Списки портов по приоритету (high,middle,low)
hpsrvs="22,80,443,3128,5190,8080,8081"<><------># ssh, http, https, icq
mpsrvs="21,179,2222,3389"<-----><------><------># ftp
lpsrvs="25,2525,110"<--><------><------><------># mail
${fwcmd} add 8201 queue 11 all from me to not table\(3\) dst-port ${hpsrvs} out via ${cn_if}
${fwcmd} add 8202 queue 12 all from me to not table\(3\) dst-port ${mpsrvs} out via ${cn_if}
${fwcmd} add 8203 queue 13 all from me to not table\(3\) dst-port ${lpsrvs} out via ${cn_if}
${fwcmd} add 8204 queue 13 all from me to not table\(3\) out via ${cn_if}
${fwcmd} add 8211 queue 21 all from me to table\(3\) dst-port ${hpsrvs} out via ${cn_if}
${fwcmd} add 8212 queue 22 all from me to table\(3\) dst-port ${mpsrvs} out via ${cn_if}
${fwcmd} add 8213 queue 23 all from me to table\(3\) dst-port ${lpsrvs} out via ${cn_if}
${fwcmd} add 8214 queue 23 all from me to table\(3\) out via ${cn_if}
...
${fwcmd} pipe 4 config bw 3800Kbit/s queue 30
${fwcmd} pipe 5 config bw 90Mbit/s queue 30
${fwcmd} queue 41 config pipe 4 weight 50 mask dst-ip 0xfffffff8
${fwcmd} queue 51 config pipe 5 weight 50 mask dst-ip 0xfffffff8
${fwcmd} add 10601 queue 41 all from not table\(3\) to any out via ${kv143_if}
${fwcmd} add 10602 queue 51 all from table\(3\) to any out via ${kv143_if}
...
Тут cn_if - интерфейс к провайдеру с локальной сетью, адреса которой в table(3)
kv143_if - компьютеры в квартире:
kv143_if="kv143if"
kv143_net="192.168.114.56/29"
