Sample policyd configuration file
This is a complete example of the /etc/policyd.conf configuration file.
#loglevel 511 # Verbose logging
######################################################################
#
# Mark rsh traffic on TCP source ports 513 and 514.
ServiceCategories tcp_513_514_svc
{
MaxRate 0 # Mark only
OutgoingTOS 00011100 # binary
FlowServiceType ControlledLoad
}
ServicePolicyRules tcp_513_514_flt
{
ProtocolNumber 6 # TCP
SourceAddressRange 0.0.0.0-0.0.0.0 # Any IP src addr
DestinationAddressRange 0.0.0.0-0.0.0.0 # Any IP dst addr
SourcePortRange 513-514
DestinationPortRange 0-0 # Any dst port
ServiceReference tcp_513_514_svc
}
#
######################################################################
#
# Shape connected UDP traffic on source port 9000.
ServiceCategories udp_9000_svc
{
MaxRate 8192 # kilobits
MaxTokenBucket 64 # kilobits
FlowServiceType Guaranteed
}
ServicePolicyRules udp_9000_flt
{
ProtocolNumber 17 # UDP
SourceAddressRange 0.0.0.0-0.0.0.0 # Any IP src addr
DestinationAddressRange 0.0.0.0-0.0.0.0 # Any IP dst addr
SourcePortRange 9000-9000
DestinationPortRange 0-0 # Any dst port
ServiceReference udp_9000_svc
}
#
######################################################################
#
# Mark and police finger traffic on TCP source port 79.
ServiceCategories tcp_79_svc
{
MaxRate 8 # kilobits
MaxTokenBucket 32 # kilobits
OutgoingTOS 00011100 # binary
FlowServiceType ControlledLoad
}
ServicePolicyRules tcp_79_flt
{
ProtocolNumber 6 # TCP
SourceAddressRange 0.0.0.0-0.0.0.0 # Any IP src addr
DestinationAddressRange 0.0.0.0-0.0.0.0 # Any IP dst addr
SourcePortRange 79-79
DestinationPortRange 0-0 # Any dst port
ServiceReference tcp_79_svc
}
#
######################################################################
#
# Mark and shape ftp-data traffic on TCP source port 20.
ServiceCategories tcp_20_svc
{
MaxRate 81920 # kilobits
MaxTokenBucket 128 # kilobits
OutgoingTOS 00011101 # binary
FlowServiceType Guaranteed
}
ServicePolicyRules tcp_20_flt
{
ProtocolNumber 6 # TCP
SourceAddressRange 0.0.0.0-0.0.0.0 # Any IP src addr
DestinationAddressRange 0.0.0.0-0.0.0.0 # Any IP dst addr
SourcePortRange 20-20
DestinationPortRange 0-0 # Any dst port
ServiceReference tcp_20_svc
}
#
######################################################################
#
# LDAP server entry.
#ReadFromDirectory
#{
# LDAP_Server 9.3.33.138 # IP address of LDAP server
# Base o=ibm,c=us # Base distinguished name
# LDAP_SelectedTag myhost # Typically client hostname
#}
#
######################################################################