robim novy shaper podla navodu (http://www.skfree.net/modules.php?op=mo ... =0&thold=0), lokalne IP adresy mi shapuje v pohode,ale verejne mi neprepusti cez router.

ip tunnel add inbound mode ipip remote 127.0.0.3 local 127.0.0.2
ip tunnel add outbound mode ipip remote 127.0.0.2 local 127.0.0.3

ip addr add 127.0.0.2/32 dev inbound
ip addr add 127.0.0.3/32 dev outbound

ip link set inbound up
ip link set outbound up

ip ro add 85.237.228.0/27 dev inbound table tunnel
ip ro add 10.10.10.0/24 dev inbound table tunnel

ip ro add default dev outbound table tunnel
ip rule add iif eth0 lookup tunnel pref 100
ip rule add to 85.237.228.0/27 lookup main pref 101
ip rule add to 10.10.10.0/24 lookup main pref 101

ip rule add iif eth1 lookup tunnel pref 102
echo 0 >/proc/sys/net/ipv4/conf/inbound/rp_filter
echo 0 >/proc/sys/net/ipv4/conf/outbound/rp_filter
ip route flush cache
iptables -t raw -A PREROUTING -i eth1 -j NOTRACK
iptables -t raw -A PREROUTING -i outbound -j NOTRACK

ip link set tx 100 dev inbound
ip link set tx 100 dev outbound

eth0 213.151.202.204/25
eth1 85.237.228.1/27
eth1:1 10.10.10.1/24

10.10.10.0/24 siet mi bezi v pohode, vsetko shapuje ako ma

ale zo siete 85.237.228.0/27 dokazem pingnut len na router eth0, dalej ma nepusti.

ak tie pravidla vysie zrusim tak verejna siet bezi bez prob.

neviete poradit co s tym?
dik