Professional Documents
Culture Documents
Firewall
Firewall
jpg
Pegar en Mangle
add action=mark-packet chain=prerouting comment="" connection-mark="PRIO 3" disabled=no newpacket-mark="PRIO 3" passthrough=yes
add action=jump chain=prerouting comment="" disabled=no jump-target="TERMINO DE PROCESAR"
packet-mark="PRIO 3"
add action=mark-connection chain=prerouting comment="PRIO 4 - PUERTOS LABORALES"
disabled=no dst-port=25,110,143,3389,1723,21-23 new-connection-mark="PRIO 4" passthrough=yes
protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark="PRIO 4" disabled=no newpacket-mark="PRIO 4" passthrough=yes
add action=jump chain=prerouting comment="" disabled=no jump-target="TERMINO DE PROCESAR"
packet-mark="PRIO 4"
add action=mark-connection chain=prerouting comment="MARCO PRIO 5" disabled=no newconnection-mark="PRIO 5" passthrough=yes
add action=mark-packet chain=prerouting comment="" connection-mark="PRIO 5" disabled=no newpacket-mark="PRIO 5" passthrough=yes
add action=accept chain="TERMINO DE PROCESAR" comment="" disabled=no
En este ejemplo marcamos conexion y marcamos paquetes que es la forma correcta de un QoS por
que existe la forma de trabajar a nivel de paquetes pero por 2 razones marcamos.
1.- bajo uso de procesador.
2.- re-uso del connection tracking.
El plan de QoS lo Trabajamos de esta manera:
1.2.3.4.5.6.8.-
PRIO1
PRIO2
PRIO3
PRIO4
PRIO5
PRIO7
PRIO8
:
:
:
:
:
:
:
ICMP ,UDP53
UDP 5060-5061 | TCP 1863,5190,777 | 10000-20000 (VozIP)
TCP 80,443,8000-9000
TCP 25,110,143,3389,1723,21-23
Resto
Descargas o Hilos que dicha conexion pase mas de 50 MB
P2P
/queue type
add kind=sfq name=BAJADA sfq-allot=1514 sfq-perturb=5
add kind=sfq name=SUBIDA sfq-allot=1514 sfq-perturb=5
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=Download parent=ether5 priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PRIO1
packet-mark="PRIO 1" parent=Download priority=1 queue=BAJADA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PRIO2
packet-mark="PRIO 2" parent=Download priority=2 queue=BAJADA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PRIO3
packet-mark="PRIO 3" parent=Download priority=3 queue=BAJADA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PRIO4
packet-mark="PRIO 4" parent=Download priority=4 queue=BAJADA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PRIO5
packet-mark="PRIO 5" parent=Download priority=5 queue=BAJADA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PRIO7
packet-mark="PRIO 7" parent=Download priority=7 queue=BAJADA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PRIO8
packet-mark="PRIO 8" parent=Download priority=8 queue=BAJADA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=Upload
parent=pppoe-out1 priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=PRIO.1 packet-mark="PRIO 1" parent=Upload priority=1 queue=SUBIDA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=PRIO.2 packet-mark="PRIO 2" parent=Upload priority=2 queue=SUBIDA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=PRIO.3 packet-mark="PRIO 3" parent=Upload priority=3 queue=SUBIDA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=PRIO.4 packet-mark="PRIO 4" parent=Upload priority=4 queue=SUBIDA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=PRIO.5 packet-mark="PRIO 5" parent=Upload priority=5 queue=SUBIDA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=PRIO.7 packet-mark="PRIO 7" parent=Upload priority=7 queue=SUBIDA
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0
name=PRIO.8 packet-mark="PRIO 8" parent=Upload priority=8 queue=SUBIDA
Finalmente agregamos las reglas que haran que nuestro QoS sea una maravilla este ejemplo esta
hecho para una linea de internet , Hay muchas formas de Hacer QoS esta es la forma por Interfaces
Fisicas es muy recomendada Pronto subire usando interfaces Virtuales Global IN - Global OUT.
Si estas usando PC y esta activado el webproxy y deseas que haya cache full entonces deberas
agregar las siguientes lineas para todos los casos estamos asumiendo que :
ether5 = Local
Esto pegas en si el caso es webproxy mikrotik /ip firewall mangle