upstream... ( learn lan-ips 6and4 via mac ) payload rules are up to you...
addconsoledynamicipsets() {
ipset create consoles4 hash:ip family inet 2>/dev/null
ipset create consoles6 hash:ip family inet6 2>/dev/null
ipset create consoles list:set 2>/dev/null
ipset add consoles consoles4 2>/dev/null
ipset add consoles consoles6 2>/dev/null
if [ ! -z "$DSCPCONSOLEMACS" ]; then
for cMAC in $DSCPCONSOLEMACS; do
echo "consolemac: $cMAC [learnips>dcsp5-6]"; sleep 1
#learndeviceaddresses>ipsets
echo "console $cMAC rule4"
iptables -t mangle -D PREROUTING -m conntrack --ctstate NEW -m mac --mac-source ${cMAC} -j SET --add-set consoles src --exist 2>/dev/null
iptables -t mangle -I PREROUTING -m conntrack --ctstate NEW -m mac --mac-source ${cMAC} -j SET --add-set consoles src --exist
echo "console $cMAC rule6"
ip6tables -t mangle -D PREROUTING -m conntrack --ctstate NEW -m mac --mac-source ${cMAC} -j SET --add-set consoles src --exist 2>/dev/null
ip6tables -t mangle -I PREROUTING -m conntrack --ctstate NEW -m mac --mac-source ${cMAC} -j SET --add-set consoles src --exist
############################ payload rules
#>ip4console4toCSbyproto
iptmark -p tcp -m set --match-set consoles4 src,dst -m multiport ! --ports 80,591,8008,8080,443 -j DSCP --set-dscp-class CS5 -m comment --comment "ConsolesCS5-TCPfrom4"
iptmark -p udp -m set --match-set consoles4 src,dst -m multiport ! --ports 80,591,8008,8080,443 -j DSCP --set-dscp-class CS6 -m comment --comment "ConsolesCS6-UDPfrom4"
#>ip6console6toCSbyproto
ipt6mark -p tcp -m set --match-set consoles6 src,dst -m multiport ! --ports 80,591,8008,8080,443 -j DSCP --set-dscp-class CS5 -m comment --comment "ConsolesCS5-TCPfrom6"
ipt6mark -p udp -m set --match-set consoles6 src,dst -m multiport ! --ports 80,591,8008,8080,443 -j DSCP --set-dscp-class CS6 -m comment --comment "ConsolesCS6-UDPfrom6"
done
else
echo "specialmac: CMACS [none]"; sleep 1
fi
}
#DSCPCONSOLEMACS="bb:bb:bb:bb:bb:bb cc:cc:cc:cc:cc:cc"
#addconsoledynamicipsets