Scribd Logo
Upload

Welcome to Scribd!

  • Handy Cache

    Uploaded by

    Samuel Baldeon Yllaconza
    250 views1 page
    This firewall configuration document contains 4 rules that redirect traffic from a client IP range to a local server on ports 1010, 2020, 3030, and 4040 for load balancing and caching. It also marks this traffic for prioritization and monitoring to ensure the caching server remains available. Additional rules block specific protocols like QUIC from Google services to enforce the redirects.

    Original Description:

    CONFIGURACION CACHE PROXY

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This firewall configuration document contains 4 rules that redirect traffic from a client IP range to a local server on ports 1010, 2020, 3030, and 4040 for load balancing and caching. It also marks this traffic for prioritization and monitoring to ensure the caching server remains available. Additional rules block specific protocols like QUIC from Google services to enforce the redirects.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    250 views1 page

    Handy Cache

    Uploaded by

    Samuel Baldeon Yllaconza
    This firewall configuration document contains 4 rules that redirect traffic from a client IP range to a local server on ports 1010, 2020, 3030, and 4040 for load balancing and caching. It also marks this traffic for prioritization and monitoring to ensure the caching server remains available. Additional rules block specific protocols like QUIC from Google services to enforce the redirects.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 1

    /ip firewall nat

    add action=dst-nat chain=dstnat comment="Redirect Handycache" dst-address=!192.1


    68.10.0/24 dst-port=80,8080,8888,8880,8777,3477,33301 per-connection-classifier=
    both-addresses-and-ports:4/0 protocol=tcp src-address-list="Clientes Internet" t
    o-addresses=192.168.10.2 to-ports=1010
    add action=dst-nat chain=dstnat comment="Redirect Handycache" dst-address=!192.1
    68.10.0/24 dst-port=80,8080,8888,8880,8777,3477,33301 per-connection-classifier=
    both-addresses-and-ports:4/1 protocol=tcp src-address-list="Clientes Internet" t
    o-addresses=192.168.10.2 to-ports=2020
    add action=dst-nat chain=dstnat comment="Redirect Handycache" dst-address=!192.1
    68.10.0/24 dst-port=80,8080,8888,8880,8777,3477,33301 per-connection-classifier=
    both-addresses-and-ports:4/2 protocol=tcp src-address-list="Clientes Internet" t
    o-addresses=192.168.10.2 to-ports=3030
    add action=dst-nat chain=dstnat comment="Redirect Handycache" dst-address=!192.1
    68.10.0/24 dst-port=80,8080,8888,8880,8777,3477,33301 per-connection-classifier=
    both-addresses-and-ports:4/3 protocol=tcp src-address-list="Clientes Internet" t
    o-addresses=192.168.10.2 to-ports=4040
    /ip firewall mangle
    add action=mark-connection chain=postrouting comment=HandyCache content="Server:
    HandyCache" new-connection-mark=handy-connection protocol=tcp src-address= 192.
    168.10.2
    add action=mark-packet chain=postrouting connection-mark=handy-connection new-pa
    cket-mark=handy-packs
    /queue simple
    add comment="Servidor Proxy HC" limit-at=10M/10M max-limit=10M/10M name=HandyCac
    he packet-marks=handy-packs priority=6/6 queue=default/default target=""
    /tool netwatch
    add comment=Handycache disabled=no down-script="/ip firewall nat set [find comme
    nt=\"Redirect Handycache\"] disabled=yes" host= 192.168.10.2 interval=2s timeout
    =2s up-script="/ip firewall nat set [find comment=\"Redirect Handycache\"] disab
    led=no"
    /ip firewall layer7-protocol add name=Google regexp="^.*(google|youtube)\..*"
    /ip firewall mangle add action=add-dst-to-address-list address-list=Google chain
    =postrouting out-interface="WAN" layer7-protocol=Google
    /ip firewall filter add action=drop chain=forward comment="Bloqueo udp Chrome" d
    st-address-list=Google dst-port=!53 protocol=udp

    /ip firewall filter


    add action=drop chain=forward comment="Bloqueo Quic Chrome" dst-port=80,443 prot
    ocol=udp
    https://www.youtube.com/watch?v=foJpebjqQfo
    http://www.alterserv.com/foros/index.php?topic=1605.340

    You might also like