роутер                         шлюз №1
eth1                 eth0               /-192.168.28.17/24 <-> инет реал ip
192.168.111.1/24<NAT>192.168.28.16/24 -|  шлюз №2
                                        \-192.168.28.1/24  <-> инет реал ip 

#!/bin/sh
# IP адрес кого пингуем
DSTIP='8.8.8.8'
# основной шлюз MAC адрес
MAC0='d0:d0:fd:0f:6d:81'

ICMP=`./nping -c 2 --icmp --dest-mac $MAC0 $DSTIP |grep packets|awk '{print $12}'`
#echo $ICMP
if [ $ICMP = 2 ]; then
{
    #echo 'Резерв'
    ip route change default via 192.168.28.17
}
fi
if [ $ICMP = 0 ];then
{
    #echo 'Основной'
    ip route change default via 192.168.28.1
}
fi
exit

mkdir /TEST
cd /TEST
for i in {a..c}; do : > $i; done

#!/usr/local/bin/bash

SOURCE="/TEST"
PATHTOBACKUP="/Volumes/BackUp"

date=`date "+%Y-%m-%dT%H:%M:%S"`
rsync -az --link-dest=$PATHTOBACKUP/current $SOURCE $PATHTOBACKUP/back-$date
unlink ${PATHTOBACKUP}/current
ln -s  $PATHTOBACKUP/back-$date ${PATHTOBACKUP}/current

--link-dest arg does not exist: /Volumes/BackUp/current
unlink: /Volumes/BackUp/current: No such file or directory

ls -l /Volumes/BackUp/back-2017-03-05T14:19:44/TEST/a
-rw-r--r--  1 ES  wheel  0  5 мар 14:01 /Volumes/BackUp/back-2017-03-05T14:19:44/TEST/a
ls -i1 /Volumes/BackUp/back-2017-03-05T14:14:48/TEST/a
14083 /Volumes/BackUp/back-2017-03-05T14:14:48/TEST/a
ls -i1 /Volumes/BackUp/back-2017-03-05T14:19:44/TEST/a
14091 /Volumes/BackUp/back-2017-03-05T14:19:44/TEST/a

Darwin Kernel Version 13.4.0: Mon Jan 11 18:17:34 PST 2016; root:xnu-2422.115.15~1/RELEASE_X86_64
rsync  version 3.1.2  protocol version 31
GNU bash, версия 4.4.12(1)-release (x86_64-apple-darwin13.4.0)

echo "1">/proc/sys/net/ipv4/ip_forward
echo "0">/proc/sys/net/ipv4/conf/all/rp_filter

ip route add default via 195.*.*.* dev ppp0 table te
ip route add default via 134.*.*.* dev eth4 table ky

ip rule add fwmark 1 lookup te
ip rule add fwmark 2 lookup ky

# ip ru
0:      from all lookup local
32764:  from all fwmark 0x2 lookup ky
32765:  from all fwmark 0x1 lookup te
32766:  from all lookup main
32767:  from all lookup default


iptables -t mangle -A INPUT -i ppp0 -j CONNMARK --set-mark 1
iptables -t mangle -A INPUT -i eth4 -j CONNMARK --set-mark 2
iptables -t mangle -A OUTPUT -j CONNMARK --restore-mark

Nov 17 13:15:04 deb7 spampd[26971]: skipped large message (884.0966796875KB)

AutomapHostsOnResolve 1
TransProxyType TPROXY
VirtualAddrNetworkIPv4 10.192.0.0/10
DNSPort 153 NoPreferIPv6Automap
TransPort 127.0.0.1:9040 NoPreferIPv6Automap

root@openwrt:~# netstat -atpn|grep 9040
tcp        0      0 127.0.0.1:9040          0.0.0.0:*               LISTEN      23264/tor

ip route add local default dev lo table 100
ip rule add fwmark 1 lookup 100

iptables -t mangle -N DIVERT
iptables -t mangle -A DIVERT -j MARK --set-mark 1
iptables -t mangle -A DIVERT -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
iptables -t mangle -A PREROUTING -p tcp -d 10.192.0.0/10 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 9040

root@openwrt:~# ip rule show
0:      from all lookup local
32765:  from all fwmark 0x1 lookup 100
32766:  from all lookup main
32767:  from all lookup default
root@openwrt:~# ip route show table 100
local default dev lo
root@openwrt:~# iptables -t mangle -L -v
Chain PREROUTING (policy ACCEPT 141K packets, 46M bytes)
 pkts bytes target     prot opt in     out     source               destination
 7935 2433K DIVERT     tcp  --  any    any     anywhere             anywhere             socket
   28  1680 TPROXY     tcp  --  any    any     anywhere             10.192.0.0/10        TPROXY redirect 0.0.0.0:9040 mark 0x1/0x1

Chain INPUT (policy ACCEPT 18499 packets, 5939K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy ACCEPT 130K packets, 42M bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 26325 packets, 8048K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 156K packets, 50M bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain DIVERT (1 references)
 pkts bytes target     prot opt in     out     source               destination
 7935 2433K MARK       all  --  any    any     anywhere             anywhere             MARK set 0x1
 7935 2433K ACCEPT     all  --  any    any     anywhere             anywhere

[pythagoras@localhost ~]$ dig -p 153 flibustahezeous3.onion A

; <<>> DiG 9.10.4-P3-RedHat-9.10.4-2.P3.fc24 <<>> -p 153 flibustahezeous3.onion A
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35660
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;flibustahezeous3.onion.                IN      A

;; ANSWER SECTION:
flibustahezeous3.onion. 60      IN      A       10.210.74.75

;; Query time: 48 msec
;; SERVER: 192.168.1.1#153(192.168.1.1)
;; WHEN: Сб ноя 12 18:24:37 MSK 2016
;; MSG SIZE  rcvd: 56

[pythagoras@localhost ~]$ curl -v "http://10.210.74.75/"
*   Trying 10.210.74.75...
* connect to 10.210.74.75 port 80 failed: Connection timed out
* Failed to connect to 10.210.74.75 port 80: Connection timed out
* Closing connection 0
curl: (7) Failed to connect to 10.210.74.75 port 80: Connection timed out

# шейпим исходящий трафик, корневая дисциплина — HTB
tc qdisc add dev enp3s0 root handle 1: htb default 99 r2q 1000

# корневой класс на ~20-мегабитный линк
tc class add dev enp3s0 parent 1: classid 1:1 htb rate 18000kbit burst 10k

# дочерний класс, допустим, сюда мы хотим засунуть ICMP
tc class add dev enp3s0 parent 1:1 classid 1:11 htb rate 100kbit ceil 18000kbit prio 1 quantum 2000

# дочерний класс по умолчанию для неклассифицированного трафика
tc class add dev enp3s0 parent 1:1 classid 1:99 htb rate 100kbit ceil 18000kbit prio 2 quantum 2000              

# навешиваем fq_codel на дочерние классы
tc qdisc add dev enp3s0 parent 1:11 handle 11: fq_codel
tc qdisc add dev enp3s0 parent 1:99 handle 99: fq_codel

# собственно, фильтр для ICMP
tc filter add dev enp3s0 parent 1: bpf run bytecode "$(tcpdump -ienp3s0 -ddd 'ip proto 1' | tr '\n' ',')" flowid 1:11

tc filter add dev enp3s0 parent 1: u32 match ip protocol 1 0xff flowid 1:11

03:00.0 RAID bus controller: LSI Logic / Symbios Logic MegaRAID SAS 2208 [Thunderbolt] (rev 05)
        Subsystem: Dell PERC H710 Mini (for monolithics)
...
        Kernel driver in use: megaraid_sas

hpacucli ctrl all show config

Smart Array P420i in Slot 0 (Embedded)    (sn: )

   array A (SAS, Unused Space: 0  MB)


      logicaldrive 1 (1.6 TB, RAID 1+0, OK)

      physicaldrive 2I:1:1 (port 2I:box 1:bay 1, SAS, 600 GB, OK)
      physicaldrive 2I:1:2 (port 2I:box 1:bay 2, SAS, 600 GB, OK)
      physicaldrive 2I:1:3 (port 2I:box 1:bay 3, SAS, 600 GB, OK)
      physicaldrive 2I:1:4 (port 2I:box 1:bay 4, SAS, 600 GB, OK)
      physicaldrive 2I:1:5 (port 2I:box 1:bay 5, SAS, 600 GB, OK)
      physicaldrive 2I:1:6 (port 2I:box 1:bay 6, SAS, 600 GB, OK)
      physicaldrive 2I:1:7 (port 2I:box 1:bay 7, SAS, 600 GB, OK, spare)

   array B (SATA, Unused Space: 0  MB)


      logicaldrive 5 (5.5 TB, RAID 5, OK)

      physicaldrive 2I:1:9 (port 2I:box 1:bay 9, SATA, 2 TB, OK)
      physicaldrive 2I:1:10 (port 2I:box 1:bay 10, SATA, 2 TB, OK)
      physicaldrive 2I:1:11 (port 2I:box 1:bay 11, SATA, 2 TB, OK)
      physicaldrive 2I:1:12 (port 2I:box 1:bay 12, SATA, 2 TB, OK)
      physicaldrive 2I:1:8 (port 2I:box 1:bay 8, SATA, 2 TB, OK, spare)

   Enclosure SEP (Vendor ID HP, Model Gen8 ServBP 12+2) 378 (WWID: , Port: 2I, Box: 1)

   Expander 380 (WWID: , Port: 2I, Box: 1)

   SEP (Vendor ID PMCSIERA, Model SRCv8x6G) 379 (WWID: )

~$
>cat tst
a
b
c

~$
>a=0; while read; do ((++a)); echo $a; done < tst; echo "Всего строк "$a
1
2
3
Всего строк 3

~$
>a=0; cat tst | while read; do ((++a)); echo $a; done; echo "Всего строк "$a
1
2
3
Всего строк 0

ipset --exist create blacklist_permanent  hash:ip
iptables -v -A FORWARD -p tcp -m set --match-set blacklist_permanent src -j DROP
iptables -v -A INPUT -p tcp -m set --match-set blacklist_permanent src -j DROP

iptables -v -N CONNRATE
iptables -v -A CONNRATE -j LOG --log-prefix "Iptables: REASON=ConnRate "
iptables -v -A CONNRATE -j DROP

iptables -v -A FORWARD -p tcp -m state --state NEW -m hashlimit --match multiport --dports 3389 \
      --hashlimit-name CONN_RATE --hashlimit-mode srcip --hashlimit-above 1/m --hashlimit-burst 10 -j CONNRATE

kill -20 `ps ax | grep tcpdump | grep -v grep | cut -c1-6`

-A POSTROUTING -d 127.0.0.1/32 -j SNAT --to-source XX.XX.XX.XX 
-A OUTPUT -d XX.XX.XX.XX/32 -j DNAT --to-destination 127.0.0.1

1 iptables -A INPUT -p icmp --icmp-type echo-request -m recent --name LETMEIN --set
2 iptables -A INPUT -p icmp --icmp-type echo-request -m recent --name LETMEIN --update --seconds 10 --hitcount 1
3 iptables -A INPUT -p icmp --icmp-type echo-request -m recent --name LETMEIN --update --seconds 10 --hitcount 2

4 iptables -A INPUT -p icmp --icmp-type echo-request -m recent --name LETMEIN --rcheck --seconds 10 --hitcount 3 -j LOG --log-prefix "LETMEIN: "

5 iptables -A INPUT -p tcp -m multiport --dports 111 -m recent --name LETMEIN ! --rcheck --hitcount 3 -j DROP