Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1of 7

1 paso full

--------------------------
/ip firewall mangle
add action=mark-connection chain=prerouting disabled=no in-interface=ether1 new-
connection-mark=all-inconn passthrough=yes comment="CONNECTION-IN"
add action=mark-packet chain=prerouting connection-mark=all-inconn disabled=no new-
packet-mark=all-inpkt passthrough=yes comment="UPLOAD"
add action=mark-connection chain=forward disabled=no in-interface=all-wireless new-
connection-mark=all-outconn passthrough=yes comment="CONNECTION-OUT"
add action=mark-packet chain=forward connection-mark=all-outconn disabled=no new-
packet-mark=all-outpkt passthrough=yes comment="DOWNLOAD"
-----------------------------------------------------------------------------------
------
PASO DOS full
/ip firewall mangle
add action=mark-packet chain=prerouting src-address=10.3.13.1 packet-mark=all-inpkt
new-packet-mark=client1-pktp passthrough=no comment="CLIENT1 UPSTREAM"
add action=mark-packet chain=prerouting src-address=10.3.13.23 packet-mark=all-
inpkt new-packet-mark=client2-pktp passthrough=no comment="CLIENT2 UPSTREAM"
add action=mark-packet chain=prerouting src-address=10.3.13.50 packet-mark=all-
inpkt new-packet-mark=client3-pktp passthrough=no comment="CLIENT3 UPSTREAM"
add action=mark-packet chain=prerouting src-address=10.3.13.60 packet-mark=all-
inpkt new-packet-mark=client4-pktp passthrough=no comment="CLIENT4 UPSTREAM"
add action=mark-packet chain=prerouting src-address=10.3.13.62 packet-mark=all-
inpkt new-packet-mark=client5-pktp passthrough=no comment="CLIENT5 UPSTREAM"
add action=mark-packet chain=prerouting src-address=10.3.13.95 packet-mark=all-
inpkt new-packet-mark=client6-pktp passthrough=no comment="CLIENT6 UPSTREAM"

/ip firewall mangle


add action=mark-packet chain=forward dst-address=10.3.13.1 packet-mark=all-outpkt
new-packet-mark=client1-pktd passthrough=yes comment="CLIENT1 DOWNSTREAM"
add action=mark-packet chain=forward dst-address=10.3.13.23 packet-mark=all-outpkt
new-packet-mark=client2-pktd passthrough=yes comment="CLIENT2 DOWNSTREAM"
add action=mark-packet chain=forward dst-address=10.3.13.50 packet-mark=all-outpkt
new-packet-mark=client3-pktd passthrough=yes comment="CLIENT3 DOWNSTREAM"
add action=mark-packet chain=forward dst-address=10.3.13.60 packet-mark=all-outpkt
new-packet-mark=client4-pktd passthrough=yes comment="CLIENT4 DOWNSTREAM"
add action=mark-packet chain=forward dst-address=10.3.13.62 packet-mark=all-outpkt
new-packet-mark=client5-pktd passthrough=yes comment="CLIENT5 DOWNSTREAM"
add action=mark-packet chain=forward dst-address=10.3.13.95 packet-mark=all-outpkt
new-packet-mark=client6-pktd passthrough=yes comment="CLIENT6 DOWNSTREAM"
-------------------------------------------------
paso3 full
/ip firewall layer7-protocol
add comment="download" name=high regexp="^.*get.+\\.(exe|rar|iso|zip|7zip|0[0-9][1-
9]|flv|mkv|avi|mp4|3gp|rmvb|mp3|img|dat|mov).*\$"
add comment="download" name=document regexp="^.*get.+\\.(pdf|doc|docx|xlsx|xls|rtf|
ppt|ppt).*\$"
add comment="video" name=youtube regexp="^.*get.+\\.(c.youtube.com|
cdn.dailymotion.com|metacafe.com|mccont.com).*\$"
add comment="video" name=streaming regexp="videoplayback|video"
-----------------------------------------------------------------------------------
------------------------------------------------------
paso4 full
/ip firewall mangle
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=billing-
dpkt packet-mark=billing-pktd passthrough=no comment="BILLING DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=billing-dpkt packet-mark=billing-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=billing-dpkt packet-mark=billing-pktd protocol=tcp
comment=""
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=client1-
dpkt packet-mark=client1-pktd passthrough=no comment="CLIENT1 DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=client1-dpkt packet-mark=client1-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=client1-dpkt packet-mark=client1-pktd protocol=tcp
comment=""
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=client2-
dpkt packet-mark=client2-pktd passthrough=no comment="CLIENT2 DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=client2-dpkt packet-mark=client2-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=client2-dpkt packet-mark=client2-pktd protocol=tcp
comment=""
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=client3-
dpkt packet-mark=client3-pktd passthrough=no comment="CLIENT3 DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=client3-dpkt packet-mark=client3-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=client3-dpkt packet-mark=client3-pktd protocol=tcp
comment=""
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=client4-
dpkt packet-mark=client4-pktd passthrough=no comment="CLIENT4 DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=client4-dpkt packet-mark=client4-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=client4-dpkt packet-mark=client4-pktd protocol=tcp
comment=""
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=client5-
dpkt packet-mark=client5-pktd passthrough=no comment="CLIENT5 DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=client5-dpkt packet-mark=client5-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=client5-dpkt packet-mark=client5-pktd protocol=tcp
comment=""
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=client6-
dpkt packet-mark=client6-pktd passthrough=no comment="CLIENT6 DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=client6-dpkt packet-mark=client6-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=client6-dpkt packet-mark=client6-pktd protocol=tcp
comment=""
add action=mark-packet chain=forward layer7-protocol=high new-packet-mark=master-
dpkt packet-mark=master-pktd passthrough=no comment="MASTER DOWNLOAD"
add action=mark-packet chain=forward layer7-protocol=document new-packet-
mark=master-dpkt packet-mark=master-pktd passthrough=no comment=""
add action=mark-packet chain=forward connection-bytes=1000000-0 src-port=80,443
passthrough=yes new-packet-mark=master-dpkt packet-mark=master-pktd protocol=tcp
comment=""

/ip firewall mangle


add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=billing-spkt packet-mark=billing-pktd passthrough=no comment="BILLING VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=billing-spkt packet-mark=billing-pktd passthrough=no comment=""
add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=client1-spkt packet-mark=client1-pktd passthrough=no comment="CLIENT1 VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=client1-spkt packet-mark=client1-pktd passthrough=no comment=""
add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=client2-spkt packet-mark=client2-pktd passthrough=no comment="CLIENT2 VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=client2-spkt packet-mark=client2-pktd passthrough=no comment=""
add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=client3-spkt packet-mark=client3-pktd passthrough=no comment="CLIENT3 VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=client3-spkt packet-mark=client3-pktd passthrough=no comment=""
add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=client4-spkt packet-mark=client4-pktd passthrough=no comment="CLIENT4 VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=client4-spkt packet-mark=client4-pktd passthrough=no comment=""
add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=client5-spkt packet-mark=client5-pktd passthrough=no comment="CLIENT5 VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=client5-spkt packet-mark=client5-pktd passthrough=no comment=""
add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=client6-spkt packet-mark=client6-pktd passthrough=no comment="CLIENT6 VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=client6-spkt packet-mark=client6-pktd passthrough=no comment=""
add action=mark-packet chain=forward layer7-protocol=youtube new-packet-
mark=master-spkt packet-mark=master-pktd passthrough=no comment="MASTER VIDEO"
add action=mark-packet chain=forward layer7-protocol=streaming new-packet-
mark=master-spkt packet-mark=master-pktd passthrough=no comment=""
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------
paso5full
/ip firewall mangle
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=tcp dst-port=5340-5352,6000-6152,10001-10011,14009-
14030,18901-18909 comment="Online Game Portal"
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=tcp dst-
port=39190,27780,29000,22100,10009,4300,15001,15002,7341,7451
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=tcp dst-port=40000,9300,9400,9700,7342,8005-
8010,37466,36567,8822
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=tcp dst-port=47611,16666,20000,5105,29000,18901-
18909,9015
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=udp dst-port=27005,27015
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=udp dst-port=27005-27020,13055,7800-7900,12060-12070
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=udp dst-port=8005-8010,9068,1293,1479,9401,9600,30000
add action=mark-packet chain=forward packet-mark=all-outpkt new-packet-mark=all-
gpkt passthrough=yes protocol=udp dst-port=14009-14030,42051-42052,40000-
40050,13000-13080

/ip firewall mangle


add action=mark-packet chain=forward src-address=10.3.13.3 packet-mark=all-gpkt
new-packet-mark=billing-gpkt passthrough=no comment="BILLING GAMES"
add action=mark-packet chain=forward src-address=10.3.13.1 packet-mark=all-gpkt
new-packet-mark=client1-gpkt passthrough=no comment="CLIENT1 GAMES"
add action=mark-packet chain=forward src-address=10.3.13.23 packet-mark=all-gpkt
new-packet-mark=client2-gpkt passthrough=no comment="CLIENT2 GAMES"
add action=mark-packet chain=forward src-address=10.3.13.50 packet-mark=all-gpkt
new-packet-mark=client3-gpkt passthrough=no comment="CLIENT3 GAMES"
add action=mark-packet chain=forward src-address=10.3.13.60 packet-mark=all-gpkt
new-packet-mark=client4-gpkt passthrough=no comment="CLIENT4 GAMES"
add action=mark-packet chain=forward src-address=10.3.13.62 packet-mark=all-gpkt
new-packet-mark=client5-gpkt passthrough=no comment="CLIENT5 GAMES"
add action=mark-packet chain=forward src-address=10.3.13.95 packet-mark=all-gpkt
new-packet-mark=client6-gpkt passthrough=no comment="CLIENT6 GAMES"
-----------------------------------------------------------------------------------
-----------------------------------------------------------------------
paso6
/ip firewall mangle
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=billing-bpkt packet-mark=billing-pktd protocol=tcp
comment="BILLING BROWSING"
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=client1-bpkt packet-mark=client1-pktd protocol=tcp
comment="CLIENT1 BROWSING"
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=client2-bpkt packet-mark=client2-pktd protocol=tcp
comment="CLIENT2 BROWSING"
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=client3-bpkt packet-mark=client3-pktd protocol=tcp
comment="CLIENT3 BROWSING"
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=client4-bpkt packet-mark=client4-pktd protocol=tcp
comment="CLIENT4 BROWSING"
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=client5-bpkt packet-mark=client5-pktd protocol=tcp
comment="CLIENT5 BROWSING"
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=client6-bpkt packet-mark=client6-pktd protocol=tcp
comment="CLIENT6 BROWSING"
add action=mark-packet chain=forward connection-bytes=0-1000000 src-port=80,443
passthrough=no new-packet-mark=master-bpkt packet-mark=master-pktd protocol=tcp
comment="MASTER BROWSING"
-----------------------------------------------------------------------------------
---------------------------------------------------------------------------------
PASO7
/queue tree
add name=All-Bandwidth parent=global packet-mark=all-inpkt,all-outpkt queue=default
priority=8 max-limit=2M

/queue tree
add name=Billing parent=All-Bandwidth packet-mark=no-mark queue=default priority=8
add name=Client1 parent=All-Bandwidth packet-mark=no-mark queue=default priority=8
add name=Client2 parent=All-Bandwidth packet-mark=no-mark queue=default priority=8
add name=Client3 parent=All-Bandwidth packet-mark=no-mark queue=default priority=8
add name=Client4 parent=All-Bandwidth packet-mark=no-mark queue=default priority=8
add name=Client5 parent=All-Bandwidth packet-mark=no-mark queue=default priority=8
add name=Client6 parent=All-Bandwidth packet-mark=no-mark queue=default priority=8
add name=Master parent=All-Bandwidth packet-mark=no-mark queue=default priority=8

/queue tree
add name=aBilling-Games parent=Billing packet-mark=billing-gpkt queue=default
priority=1 max-limit=256k
add name=aClient1-Games parent=Client1 packet-mark=client1-gpkt queue=default
priority=1 max-limit=256k
add name=aClient2-Games parent=Client2 packet-mark=client2-gpkt queue=default
priority=1 max-limit=256k
add name=aClient3-Games parent=Client3 packet-mark=client3-gpkt queue=default
priority=1 max-limit=256k
add name=aClient4-Games parent=Client4 packet-mark=client4-gpkt queue=default
priority=1 max-limit=256k
add name=aClient5-Games parent=Client5 packet-mark=client5-gpkt queue=default
priority=1 max-limit=256k
add name=aClient6-Games parent=Client6 packet-mark=client6-gpkt queue=default
priority=1 max-limit=256k
add name=aMaster-Games parent=Master packet-mark=master-gpkt queue=default
priority=1 max-limit=256k

/queue tree
add name=bBilling-Browsing parent=Billing packet-mark=billing-bpkt queue=default
priority=2 max-limit=256k
add name=bClient1-Browsing parent=Client1 packet-mark=client1-bpkt queue=default
priority=2 max-limit=256k
add name=bClient2-Browsing parent=Client2 packet-mark=client2-bpkt queue=default
priority=2 max-limit=256k
add name=bClient3-Browsing parent=Client3 packet-mark=client3-bpkt queue=default
priority=2 max-limit=256k
add name=bClient4-Browsing parent=Client4 packet-mark=client4-bpkt queue=default
priority=2 max-limit=256k
add name=bClient5-Browsing parent=Client5 packet-mark=client5-bpkt queue=default
priority=2 max-limit=256k
add name=bClient6-Browsing parent=Client6 packet-mark=client6-bpkt queue=default
priority=2 max-limit=256k
add name=bMaster-Browsing parent=Master packet-mark=master-bpkt queue=default
priority=2 max-limit=256k

/queue tree
add name=cBilling-Upload parent=Billing packet-mark=billing-pktp queue=default
priority=3 max-limit=200k
add name=cClient1-Upload parent=Client1 packet-mark=client1-pktp queue=default
priority=3 max-limit=200k
add name=cClient2-Upload parent=Client2 packet-mark=client2-pktp queue=default
priority=3 max-limit=200k
add name=cClient3-Upload parent=Client3 packet-mark=client3-pktp queue=default
priority=3 max-limit=200k
add name=cClient4-Upload parent=Client4 packet-mark=client4-pktp queue=default
priority=3 max-limit=200k
add name=cClient5-Upload parent=Client5 packet-mark=client5-pktp queue=default
priority=3 max-limit=200k
add name=cClient6-Upload parent=Client6 packet-mark=client6-pktp queue=default
priority=3 max-limit=200k
add name=cMaster-Upload parent=Master packet-mark=master-pktp queue=default
priority=3 max-limit=200k

/queue tree
add name=dBilling-Download parent=Billing packet-mark=no-mark queue=default
priority=6 max-limit=220k
add name=dClient1-Download parent=Client1 packet-mark=no-mark queue=default
priority=6 max-limit=220k
add name=dClient2-Download parent=Client2 packet-mark=no-mark queue=default
priority=6 max-limit=220k
add name=dClient3-Download parent=Client3 packet-mark=no-mark queue=default
priority=6 max-limit=220k
add name=dClient4-Download parent=Client4 packet-mark=no-mark queue=default
priority=6 max-limit=220k
add name=dClient5-Download parent=Client5 packet-mark=no-mark queue=default
priority=6 max-limit=220k
add name=dClient6-Download parent=Client6 packet-mark=no-mark queue=default
priority=6 max-limit=220k
add name=dMaster-Download parent=Master packet-mark=no-mark queue=default
priority=6 max-limit=220k

/queue tree
add name=eBilling-DownUdf parent=dBilling-Download packet-mark=billing-pktd
queue=default priority=6
add name=eClient1-DownUdf parent=dClient1-Download packet-mark=client1-pktd
queue=default priority=6
add name=eClient2-DownUdf parent=dClient2-Download packet-mark=client2-pktd
queue=default priority=6
add name=eClient3-DownUdf parent=dClient3-Download packet-mark=client3-pktd
queue=default priority=6
add name=eClient4-DownUdf parent=dClient4-Download packet-mark=client4-pktd
queue=default priority=6
add name=eClient5-DownUdf parent=dClient5-Download packet-mark=client5-pktd
queue=default priority=6
add name=eClient6-DownUdf parent=dClient6-Download packet-mark=client6-pktd
queue=default priority=6
add name=eMaster-DownUdf parent=dMaster-Download packet-mark=master-pktd
queue=default priority=6

/queue tree
add name=fBilling-DownExt parent=dBilling-Download packet-mark=billing-dpkt
queue=default priority=7
add name=fClient1-DownExt parent=dClient1-Download packet-mark=client1-dpkt
queue=default priority=7
add name=fClient2-DownExt parent=dClient2-Download packet-mark=client2-dpkt
queue=default priority=7
add name=fClient3-DownExt parent=dClient3-Download packet-mark=client3-dpkt
queue=default priority=7
add name=fClient4-DownExt parent=dClient4-Download packet-mark=client4-dpkt
queue=default priority=7
add name=fClient5-DownExt parent=dClient5-Download packet-mark=client5-dpkt
queue=default priority=7
add name=fClient6-DownExt parent=dClient6-Download packet-mark=client6-dpkt
queue=default priority=7
add name=fMaster-DownExt parent=dMaster-Download packet-mark=master-dpkt
queue=default priority=7

/queue tree
add name=gBilling-DownVid parent=dBilling-Download packet-mark=billing-spkt
queue=default priority=8
add name=gClient1-DownVid parent=dClient1-Download packet-mark=client1-spkt
queue=default priority=8
add name=gClient2-DownVid parent=dClient2-Download packet-mark=client2-spkt
queue=default priority=8
add name=gClient3-DownVid parent=dClient3-Download packet-mark=client3-spkt
queue=default priority=8
add name=gClient4-DownVid parent=dClient4-Download packet-mark=client4-spkt
queue=default priority=8
add name=gClient5-DownVid parent=dClient5-Download packet-mark=client5-spkt
queue=default priority=8
add name=gClient6-DownVid parent=dClient6-Download packet-mark=client6-spkt
queue=default priority=8
add name=gMaster-DownVid parent=dMaster-Download packet-mark=master-spkt
queue=default priority=8

You might also like