skrypt iptables - próba optymalizacji

[Przemysław Backiel]

Witam,

poprawiam poszczegolne elementy skryptu iptables
i zastanawiam sie, czy zamiana następujących linii:

$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto 
counterstrike-source -j MARK --set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto 
counterstrike-source -j MARK --set-mark 4
$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto 
battlefield2 -j MARK --set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto 
battlefield2 -j MARK --set-mark 4
$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto 
battlefield1942 -j MARK --set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto 
battlefield1942 -j MARK --set-mark 4
$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto 
halflife2-deathmatch -j MARK --set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto 
halflife2-deathmatch -j MARK --set-mark 4
$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto 
quake-halflife -j MARK --set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto 
quake-halflife -j MARK --set-mark 4
$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto doom3 
-j MARK --set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto doom3 
-j MARK --set-mark 4
$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto 
worldofwarcraft -j MARK --set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto 
worldofwarcraft -j MARK --set-mark 4


na dwie:

$IPTABLES -t mangle -A PREROUTING -i $IF_OUT -m layer7 --l7proto 
worldofwarcraft, counterstrike-source, battlefield2, 
halflife2-deathmatch, quake-halflife, doom3, worldofwarcraft -j MARK 
--set-mark 4
$IPTABLES -t mangle -A POSTROUTING -o $IF_OUT -m layer7 --l7proto 
worldofwarcraft, counterstrike-source, battlefield2, 
halflife2-deathmatch, quake-halflife, doom3, worldofwarcraft -j MARK 
--set-mark 4

zwiekszy taka zmiana wydajnosc?


-- 
Z powazaniem
Przemyslaw Backiel