Mein Problem habe ich durch suchen nirgends finden können. Es ist folgendes...
Ich habe seit 01.04.06 vier Mbit über das Fernshkabel, vorher hatte ich 1 Mbit. Direkt hinter dem Kabelmodem ist mein 2.68 Debian mit 2 Realtek, Usb Drucker, Samba, ftp, ssh usw.. Kernel habe ich selbst gebacken da ich SMP habe (Asus A7m266-d).
Das Debian Routet für mich und meine Freundin also insgesamt 3 Rechner und das klappt auch alles wunderbar.
Mein problem ist das ich an allen Rechnen im Lan maximal 2 Mbit bekomme wohingegen das Debian System die vollen 4 Mbit nutzt. Das ist ärgerlich da ich meine Downloads nicht unbedingt über vnc am Router laden will sondern an meinem eigenen Rechner...
Irgend jemand eine Idee woran es liegen könnte ?
Hier meine Interfaces...
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet dhcp
# The secondary interface
auto eth1
iface eth1 inet static
address 192.168.0.1
netmask 255.255.255.0
network 192.168.0.1
broadcast 192.168.0.255
Da ich iptables nicht behersche, aber sowohl gnome als auch kde installiert habe benutze ich zum portforwarden Guidedog.
Guidedog hat folgendes script um meine Ports zu forwarden:
#!/bin/sh
# [Guidedog]
# DO NOT EDIT!
# This script was generated by "Guidedog" by Simon Edwards
# http://www.simonzone.com/software/guidedog/ This script requires Linux
# kernel 2.4.x and iptables.
#
# [Description]
#
# [Config]
# DISABLED=0
# ROUTING=1
# MASQUERADE=1
# MASQUERADEFTP=0
# MASQUERADEIRC=0
# [Forwarding]
# TYPE=TCP
# ORIGINALPORT=10308
# SPECIFYORIGINALADDRESS=0
# ORIGINALADDRESS=
# NEWPORT=10308
# SPECIFYNEWADDRESS=1
# NEWADDRESS=192.168.0.42
# COMMENT=LockOnTCP
# [Forwarding]
# TYPE=UDP
# ORIGINALPORT=10308
# SPECIFYORIGINALADDRESS=0
# ORIGINALADDRESS=
# NEWPORT=10308
# SPECIFYNEWADDRESS=1
# NEWADDRESS=192.168.0.42
# COMMENT=LockonUDP
# [End]
# Real code starts here
# If you change the line below then also change the # DISABLED line above.
DISABLE_GUIDEDOG=0
if [ $DISABLE_GUIDEDOG -eq 0 ]; then
# Set the path
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/sbin
if test -z $GUIDEDOG_VERBOSE; then
GUIDEDOG_VERBOSE=0
fi;
logger -p auth.info -t guidedog Configuring routing now.
[ $GUIDEDOG_VERBOSE -eq 1 ] && echo "Resetting routing rules."
# Shut down routing
echo 0 > /proc/sys/net/ipv4/ip_forward 2> /dev/null
iptables -t nat -P PREROUTING DROP
iptables -t nat -P POSTROUTING DROP
iptables -t nat -P OUTPUT DROP
iptables -t mangle -P PREROUTING DROP
iptables -t mangle -P POSTROUTING DROP
# Delete any existing chains
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
# Enable/disable routing
[ $GUIDEDOG_VERBOSE -eq 1 ] && echo "Enabling routing."
echo 1 > /proc/sys/net/ipv4/ip_forward 2> /dev/null
[ $GUIDEDOG_VERBOSE -eq 1 ] && echo "Loading kernel modules."
modprobe iptable_nat
# Port forwarding/Tunnelling
iptables -t nat -N gforward
iptables -t nat -N ftolocal
iptables -t mangle -N gforward
iptables -t mangle -N ftolocal
# Switch the current language for a moment
GUIDEDOG_BACKUP_LANG=$LANG
GUIDEDOG_BACKUP_LC_ALL=$LC_ALL
LANG=US
LC_ALL=US
export LANG
export LC_ALL
# Work out our local IPs.
LOCAL_IP="`ifconfig | gawk '/inet addr:/ { match(\$0,/inet addr:[[:digit:]\\.]+/)
printf \"%s\\n\",substr(\$0,RSTART+10,RLENGTH-10) }'`"
# Restore the language setting
LANG=$GUIDEDOG_BACKUP_LANG
LC_ALL=$GUIDEDOG_BACKUP_LC_ALL
export LANG
export LC_ALL
for X in $LOCAL_IP ; do
iptables -t nat -A gforward -d $X -j ftolocal
iptables -t mangle -A gforward -d $X -j ftolocal
done
# LockOnTCP
iptables -t mangle -A ftolocal -p tcp --dport 10308 -j MARK --set-mark 1
iptables -t nat -A ftolocal -p tcp --dport 10308 -j DNAT --to-destination 192.168.0.42:10308
# LockonUDP
iptables -t mangle -A ftolocal -p udp --dport 10308 -j MARK --set-mark 1
iptables -t nat -A ftolocal -p udp --dport 10308 -j DNAT --to-destination 192.168.0.42:10308
iptables -t nat -A PREROUTING -j gforward
iptables -t nat -A OUTPUT -j gforward
iptables -t mangle -A PREROUTING -j gforward
# Marked packets are in the process of being port forwarded.
# We also need to source Nat them too.
iptables -t nat -A POSTROUTING -m mark --mark 1 -j MASQUERADE
[ $GUIDEDOG_VERBOSE -eq 1 ] && echo "Inserting masquerade rules."
iptables -t nat -N fromprivate
# Packets from the private IP range to another private IP range are untouched.
iptables -t nat -A fromprivate -d 192.168.0.0/16 -j ACCEPT
iptables -t nat -A fromprivate -d 172.16.0.0/12 -j ACCEPT
iptables -t nat -A fromprivate -d 10.0.0.0/8 -j ACCEPT
# Packets that get here are from the private address range
# and are trying to get out to the internet. We NAT them.
iptables -t nat -A fromprivate -j MASQUERADE
# No-masquerade addresses.
# Siphon off any packets that are from the private IP range.
iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -j fromprivate
iptables -t nat -A POSTROUTING -s 172.16.0.0/12 -j fromprivate
iptables -t nat -A POSTROUTING -s 10.0.0.0/8 -j fromprivate
# packets that get here can just hit the default policy.
iptables -t nat -P PREROUTING ACCEPT
iptables -t nat -P POSTROUTING ACCEPT
iptables -t nat -P OUTPUT ACCEPT
iptables -t mangle -P PREROUTING ACCEPT
iptables -t mangle -P POSTROUTING ACCEPT
iptables -t mangle -P OUTPUT ACCEPT
[ $GUIDEDOG_VERBOSE -eq 1 ] && echo "Finished."
fi;
true
