Sunteți pe pagina 1din 18

/interface ethernet

set [ find default-name=ether1 ] comment=WAN1


set [ find default-name=ether2 ] comment=WAN2
set [ find default-name=ether3 ] comment=WAN3
set [ find default-name=ether4 ] comment=WAN4
set [ find default-name=LAN ] comment=LAN

/ip address
add address=192.168.1.10/24 interface=ether1 network=192.168.1.0
add address=192.168.2.11/24 interface=ether2 network=192.168.2.0
add address=192.168.6.12/24 interface=ether3 network=192.168.6.0
add address=192.168.5.13/24 interface=ether4 network=192.168.5.0
add address=192.168.0.1/24 comment=LAN interface=LAN network=192.168.0.0

/ip dns
set servers=8.8.8.8,8.8.4.4,208.67.222.222,208.67.220.220

/ip firewall filter


add action=drop chain=forward comment="Drop conexiones Invalidas" \
connection-state=invalid
add action=drop chain=input comment="Drop ataques DNS" dst-port=53 \
in-interface=!LAN protocol=udp
add action=drop chain=forward disabled=yes src-address=192.168.0.118

/ip firewall mangle


add action=mark-connection chain=prerouting connection-mark=no-mark \
in-interface=ether1 new-connection-mark=ether1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark \
in-interface=ether2 new-connection-mark=ether2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark \
in-interface=ether3 new-connection-mark=ether3_conn
add action=mark-connection chain=prerouting connection-mark=no-mark \
in-interface=ether4 new-connection-mark=ether4_conn
add action=mark-routing chain=output connection-mark=ether1_conn \
new-routing-mark=FO1
add action=mark-routing chain=output connection-mark=ether2_conn \
new-routing-mark=FO2
add action=mark-routing chain=output connection-mark=ether3_conn \
new-routing-mark=FO3
add action=mark-routing chain=output connection-mark=ether4_conn \
new-routing-mark=FO4
add action=accept chain=prerouting dst-address=192.168.1.0/24 in-interface=\
LAN
add action=accept chain=prerouting dst-address=192.168.2.0/24 in-interface=\
LAN
add action=accept chain=prerouting dst-address=192.168.5.0/24 in-interface=\
LAN
add action=accept chain=prerouting dst-address=192.168.6.0/24 in-interface=\
LAN
add action=jump chain=prerouting comment=safe connection-mark=no-mark \
dst-address-list=fb in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
fb-cdn in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
yt-cdn in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=g \
in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
nflx in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
nflx-cdn in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
spt-per in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
hw-cdn in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
lv3-cdn in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
ak-cdn in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=vlv \
dst-port=80,443 in-interface=LAN jump-target=safe protocol=tcp
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=\
tw-tv in-interface=LAN jump-target=safe
add action=jump chain=prerouting connection-mark=no-mark dst-address-list=ms \
in-interface=LAN jump-target=safe
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether1_conn \
per-connection-classifier=both-addresses-and-ports:8/0
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether1_conn \
per-connection-classifier=both-addresses-and-ports:8/1
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether2_conn \
per-connection-classifier=both-addresses-and-ports:8/2
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether2_conn \
per-connection-classifier=both-addresses-and-ports:8/3
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether3_conn \
per-connection-classifier=both-addresses-and-ports:8/4
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether3_conn \
per-connection-classifier=both-addresses-and-ports:8/5
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether4_conn \
per-connection-classifier=both-addresses-and-ports:8/6
add action=mark-connection chain=safe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether4_conn \
per-connection-classifier=both-addresses-and-ports:8/7
add action=jump chain=prerouting comment=unsafe connection-mark=no-mark \
dst-address-list=per in-interface=LAN jump-target=unsafe
add action=jump chain=prerouting connection-mark=no-mark dst-port=80,443 \
in-interface=LAN jump-target=unsafe protocol=tcp
add action=jump chain=prerouting connection-mark=no-mark in-interface=LAN \
jump-target=unsafe
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether1_conn \
per-connection-classifier=src-address:8/0
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether1_conn \
per-connection-classifier=src-address:8/1
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether2_conn \
per-connection-classifier=src-address:8/2
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether2_conn \
per-connection-classifier=src-address:8/3
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether3_conn \
per-connection-classifier=src-address:8/4
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether3_conn \
per-connection-classifier=src-address:8/5
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether4_conn \
per-connection-classifier=src-address:8/6
add action=mark-connection chain=unsafe connection-mark=no-mark \
dst-address-type=!local in-interface=LAN new-connection-mark=ether4_conn \
per-connection-classifier=src-address:8/7
add action=mark-routing chain=prerouting connection-mark=ether1_conn \
in-interface=LAN new-routing-mark=to_ether1
add action=mark-routing chain=prerouting connection-mark=ether2_conn \
in-interface=LAN new-routing-mark=to_ether2
add action=mark-routing chain=prerouting connection-mark=ether3_conn \
in-interface=LAN new-routing-mark=to_ether3
add action=mark-routing chain=prerouting connection-mark=ether4_conn \
in-interface=LAN new-routing-mark=to_ether4
add action=passthrough chain=output comment="QoS | wan_x1 | Abr 30, 2018" \
disabled=yes
add action=mark-packet chain=prerouting comment=icmp in-interface=ether1 \
new-packet-mark=icmp_in_x1 passthrough=no protocol=icmp
add action=mark-packet chain=postrouting new-packet-mark=icmp_out_x1 \
out-interface=ether1 passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether1 new-packet-mark=www_in_x1 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x1 out-interface=ether1 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether1 new-packet-mark=www_in_x1 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x1 out-interface=ether1 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment=dota2 in-interface=ether1 \
new-packet-mark=steam_in_x1 passthrough=no protocol=udp src-port=\
27000-28000
add action=mark-packet chain=postrouting dst-port=27000-28000 \
new-packet-mark=steam_out_x1 out-interface=ether1 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="league of legends" \
in-interface=ether1 new-packet-mark=lol_in_x1 passthrough=no protocol=udp \
src-port=5000-5500
add action=mark-packet chain=postrouting dst-port=5000-5500 new-packet-mark=\
lol_out_x1 out-interface=ether1 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether1 new-packet-mark=\
lol_in_x1 passthrough=no protocol=tcp src-port=\
8393-8400,2099,5222,5223,8088
add action=mark-packet chain=postrouting dst-port=\
8393-8400,2099,5222,5223,8088 new-packet-mark=lol_out_x1 out-interface=\
ether1 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox in-interface=ether1 \
new-packet-mark=winbox_in_x1 passthrough=no protocol=tcp src-port=\
8291,8292
add action=mark-packet chain=postrouting dst-port=8291,8292 new-packet-mark=\
winbox_out_x1 out-interface=ether1 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox-inter dst-port=\
8291,8292 in-interface=ether1 new-packet-mark=winbox_in_x1 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=winbox_out_x1 \
out-interface=ether1 passthrough=no protocol=tcp src-port=8291,8292
add action=mark-packet chain=prerouting comment=dns in-interface=ether1 \
new-packet-mark=dns_in_x1 passthrough=no protocol=udp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x1 out-interface=ether1 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether1 new-packet-mark=\
dns_in_x1 passthrough=no protocol=tcp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x1 out-interface=ether1 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="yt-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=\
yt-cdn_in_1_x1 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_1_x1 out-interface=\
ether1 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=\
yt-cdn_in_2_x1 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_2_x1 out-interface=\
ether1 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=yt-cdn_in_3_x1 passthrough=no \
src-address-list=yt-cdn
add action=mark-packet chain=postrouting dst-address-list=yt-cdn \
new-packet-mark=yt-cdn_out_3_x1 out-interface=ether1 passthrough=no
add action=mark-packet chain=prerouting comment="g 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=g_in_1_x1 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=g new-packet-mark=g_out_1_x1 out-interface=ether1 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=g_in_2_x1 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=g new-packet-mark=g_out_2_x1 out-interface=ether1 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=g_in_3_x1 passthrough=no \
src-address-list=g
add action=mark-packet chain=postrouting dst-address-list=g new-packet-mark=\
g_out_3_x1 out-interface=ether1 passthrough=no
add action=mark-packet chain=prerouting comment="nflx 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=\
nflx_in_1_x1 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=nflx new-packet-mark=nflx_out_1_x1 out-interface=ether1 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=\
nflx_in_2_x1 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=nflx new-packet-mark=nflx_out_2_x1 out-interface=ether1 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=nflx_in_3_x1 passthrough=no \
src-address-list=nflx
add action=mark-packet chain=postrouting dst-address-list=nflx \
new-packet-mark=nflx_out_3_x1 out-interface=ether1 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=\
fb-cdn_in_1_x1 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_1_x1 out-interface=\
ether1 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=\
fb-cdn_in_2_x1 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_2_x1 out-interface=\
ether1 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=fb-cdn_in_3_x1 passthrough=no \
src-address-list=fb-cdn
add action=mark-packet chain=postrouting dst-address-list=fb-cdn \
new-packet-mark=fb-cdn_out_3_x1 out-interface=ether1 passthrough=no
add action=mark-packet chain=prerouting comment="fb 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=fb_in_1_x1 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb new-packet-mark=fb_out_1_x1 out-interface=ether1 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=fb_in_2_x1 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb new-packet-mark=fb_out_2_x1 out-interface=ether1 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=fb_in_3_x1 passthrough=no \
src-address-list=fb
add action=mark-packet chain=postrouting dst-address-list=fb new-packet-mark=\
fb_out_3_x1 out-interface=ether1 passthrough=no
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=www_in_1_x1 \
passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-256000 dst-port=\
80,443 new-packet-mark=www_out_1_x1 out-interface=ether1 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=\
www_in_2_x1 passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443 new-packet-mark=www_out_2_x1 out-interface=ether1 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=www_in_3_x1 passthrough=no protocol=\
udp src-port=80,443
add action=mark-packet chain=postrouting dst-port=80,443 new-packet-mark=\
www_out_3_x1 out-interface=ether1 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=www_in_1_x1 \
passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-128000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_1_x1 out-interface=ether1 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=\
www_in_2_x1 passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_2_x1 out-interface=ether1 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 512k-~ | 2M-~" \
in-interface=ether1 new-packet-mark=www_in_3_x1 passthrough=no protocol=\
tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting dst-port=80,443,5060,8080 \
new-packet-mark=www_out_3_x1 out-interface=ether1 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=\
tcp/udp_in_1_x1 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x1 out-interface=ether1 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=\
tcp/udp_in_2_x1 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x1 out-interface=ether1 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=tcp/udp_in_3_x1 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x1 \
out-interface=ether1 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="udp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether1 new-packet-mark=\
tcp/udp_in_1_x1 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x1 out-interface=ether1 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether1 new-packet-mark=\
tcp/udp_in_2_x1 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x1 out-interface=ether1 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 1M-~ | 2M-~" \
in-interface=ether1 new-packet-mark=tcp/udp_in_3_x1 passthrough=no \
protocol=udp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x1 \
out-interface=ether1 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment=other in-interface=ether1 \
new-packet-mark=other_in_x1 passthrough=no
add action=mark-packet chain=postrouting new-packet-mark=other_out_x1 \
out-interface=ether1 passthrough=no
add action=passthrough chain=output comment="QoS | wan_x2 | Abr 30, 2017" \
disabled=yes
add action=mark-packet chain=prerouting comment=icmp in-interface=ether2 \
new-packet-mark=icmp_in_x2 passthrough=no protocol=icmp
add action=mark-packet chain=postrouting new-packet-mark=icmp_out_x2 \
out-interface=ether2 passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether2 new-packet-mark=www_in_x2 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x2 out-interface=ether2 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether2 new-packet-mark=www_in_x2 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x2 out-interface=ether2 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment=dota2 in-interface=ether2 \
new-packet-mark=steam_in_x2 passthrough=no protocol=udp src-port=\
27000-28000
add action=mark-packet chain=postrouting dst-port=27000-28000 \
new-packet-mark=steam_out_x2 out-interface=ether2 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="league of legends" \
in-interface=ether2 new-packet-mark=lol_in_x2 passthrough=no protocol=udp \
src-port=5000-5500
add action=mark-packet chain=postrouting dst-port=5000-5500 new-packet-mark=\
lol_out_x2 out-interface=ether2 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether2 new-packet-mark=\
lol_in_x2 passthrough=no protocol=tcp src-port=\
8393-8400,2099,5222,5223,8088
add action=mark-packet chain=postrouting dst-port=\
8393-8400,2099,5222,5223,8088 new-packet-mark=lol_out_x2 out-interface=\
ether2 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox in-interface=ether2 \
new-packet-mark=winbox_in_x2 passthrough=no protocol=tcp src-port=\
8291,8292
add action=mark-packet chain=postrouting dst-port=8291,8292 new-packet-mark=\
winbox_out_x2 out-interface=ether2 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox-inter dst-port=\
8291,8292 in-interface=ether2 new-packet-mark=winbox_in_x2 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=winbox_out_x2 \
out-interface=ether2 passthrough=no protocol=tcp src-port=8291,8292
add action=mark-packet chain=prerouting comment=dns in-interface=ether2 \
new-packet-mark=dns_in_x2 passthrough=no protocol=udp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x2 out-interface=ether2 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether2 new-packet-mark=\
dns_in_x2 passthrough=no protocol=tcp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x2 out-interface=ether2 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="yt-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=\
yt-cdn_in_1_x2 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_1_x2 out-interface=\
ether2 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=\
yt-cdn_in_2_x2 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_2_x2 out-interface=\
ether2 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=yt-cdn_in_3_x2 passthrough=no \
src-address-list=yt-cdn
add action=mark-packet chain=postrouting dst-address-list=yt-cdn \
new-packet-mark=yt-cdn_out_3_x2 out-interface=ether2 passthrough=no
add action=mark-packet chain=prerouting comment="g 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=g_in_1_x2 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=g new-packet-mark=g_out_1_x2 out-interface=ether2 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=g_in_2_x2 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=g new-packet-mark=g_out_2_x2 out-interface=ether2 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=g_in_3_x2 passthrough=no \
src-address-list=g
add action=mark-packet chain=postrouting dst-address-list=g new-packet-mark=\
g_out_3_x2 out-interface=ether2 passthrough=no
add action=mark-packet chain=prerouting comment="nflx 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=\
nflx_in_1_x2 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=nflx new-packet-mark=nflx_out_1_x2 out-interface=ether2 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=\
nflx_in_2_x2 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=nflx new-packet-mark=nflx_out_2_x2 out-interface=ether2 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=nflx_in_3_x2 passthrough=no \
src-address-list=nflx
add action=mark-packet chain=postrouting dst-address-list=nflx \
new-packet-mark=nflx_out_3_x2 out-interface=ether2 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=\
fb-cdn_in_1_x2 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_1_x2 out-interface=\
ether2 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=\
fb-cdn_in_2_x2 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_2_x2 out-interface=\
ether2 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=fb-cdn_in_3_x2 passthrough=no \
src-address-list=fb-cdn
add action=mark-packet chain=postrouting dst-address-list=fb-cdn \
new-packet-mark=fb-cdn_out_3_x2 out-interface=ether2 passthrough=no
add action=mark-packet chain=prerouting comment="fb 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=fb_in_1_x2 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb new-packet-mark=fb_out_1_x2 out-interface=ether2 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=fb_in_2_x2 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb new-packet-mark=fb_out_2_x2 out-interface=ether2 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=fb_in_3_x2 passthrough=no \
src-address-list=fb
add action=mark-packet chain=postrouting dst-address-list=fb new-packet-mark=\
fb_out_3_x2 out-interface=ether2 passthrough=no
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=www_in_1_x2 \
passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-256000 dst-port=\
80,443 new-packet-mark=www_out_1_x2 out-interface=ether2 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=\
www_in_2_x2 passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443 new-packet-mark=www_out_2_x2 out-interface=ether2 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=www_in_3_x2 passthrough=no protocol=\
udp src-port=80,443
add action=mark-packet chain=postrouting dst-port=80,443 new-packet-mark=\
www_out_3_x2 out-interface=ether2 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=www_in_1_x2 \
passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-128000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_1_x2 out-interface=ether2 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=\
www_in_2_x2 passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_2_x2 out-interface=ether2 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 512k-~ | 2M-~" \
in-interface=ether2 new-packet-mark=www_in_3_x2 passthrough=no protocol=\
tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting dst-port=80,443,5060,8080 \
new-packet-mark=www_out_3_x2 out-interface=ether2 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=\
tcp/udp_in_1_x2 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x2 out-interface=ether2 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=\
tcp/udp_in_2_x2 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x2 out-interface=ether2 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=tcp/udp_in_3_x2 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x2 \
out-interface=ether2 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="udp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether2 new-packet-mark=\
tcp/udp_in_1_x2 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x2 out-interface=ether2 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether2 new-packet-mark=\
tcp/udp_in_2_x2 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x2 out-interface=ether2 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 1M-~ | 2M-~" \
in-interface=ether2 new-packet-mark=tcp/udp_in_3_x2 passthrough=no \
protocol=udp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x2 \
out-interface=ether2 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment=other in-interface=ether2 \
new-packet-mark=other_in_x2 passthrough=no
add action=mark-packet chain=postrouting new-packet-mark=other_out_x2 \
out-interface=ether2 passthrough=no
add action=passthrough chain=output comment="QoS | wan_x3 | Abr 30, 2017" \
disabled=yes
add action=mark-packet chain=prerouting comment=icmp in-interface=ether3 \
new-packet-mark=icmp_in_x3 passthrough=no protocol=icmp
add action=mark-packet chain=postrouting new-packet-mark=icmp_out_x3 \
out-interface=ether3 passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether3 new-packet-mark=www_in_x3 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x3 out-interface=ether3 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether3 new-packet-mark=www_in_x3 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x3 out-interface=ether3 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment=dota2 in-interface=ether3 \
new-packet-mark=steam_in_x3 passthrough=no protocol=udp src-port=\
27000-28000
add action=mark-packet chain=postrouting dst-port=27000-28000 \
new-packet-mark=steam_out_x3 out-interface=ether3 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="league of legends" \
in-interface=ether3 new-packet-mark=lol_in_x3 passthrough=no protocol=udp \
src-port=5000-5500
add action=mark-packet chain=postrouting dst-port=5000-5500 new-packet-mark=\
lol_out_x3 out-interface=ether3 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether3 new-packet-mark=\
lol_in_x3 passthrough=no protocol=tcp src-port=\
8393-8400,2099,5222,5223,8088
add action=mark-packet chain=postrouting dst-port=\
8393-8400,2099,5222,5223,8088 new-packet-mark=lol_out_x3 out-interface=\
ether3 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox in-interface=ether3 \
new-packet-mark=winbox_in_x3 passthrough=no protocol=tcp src-port=\
8291,8292
add action=mark-packet chain=postrouting dst-port=8291,8292 new-packet-mark=\
winbox_out_x3 out-interface=ether3 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox-inter dst-port=\
8291,8292 in-interface=ether3 new-packet-mark=winbox_in_x3 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=winbox_out_x3 \
out-interface=ether3 passthrough=no protocol=tcp src-port=8291,8292
add action=mark-packet chain=prerouting comment=dns in-interface=ether3 \
new-packet-mark=dns_in_x3 passthrough=no protocol=udp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x3 out-interface=ether3 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether3 new-packet-mark=\
dns_in_x3 passthrough=no protocol=tcp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x3 out-interface=ether3 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="yt-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=\
yt-cdn_in_1_x3 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_1_x3 out-interface=\
ether3 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=\
yt-cdn_in_2_x3 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_2_x3 out-interface=\
ether3 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=yt-cdn_in_3_x3 passthrough=no \
src-address-list=yt-cdn
add action=mark-packet chain=postrouting dst-address-list=yt-cdn \
new-packet-mark=yt-cdn_out_3_x3 out-interface=ether3 passthrough=no
add action=mark-packet chain=prerouting comment="g 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=g_in_1_x3 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=g new-packet-mark=g_out_1_x3 out-interface=ether3 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=g_in_2_x3 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=g new-packet-mark=g_out_2_x3 out-interface=ether3 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=g_in_3_x3 passthrough=no \
src-address-list=g
add action=mark-packet chain=postrouting dst-address-list=g new-packet-mark=\
g_out_3_x3 out-interface=ether3 passthrough=no
add action=mark-packet chain=prerouting comment="nflx 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=\
nflx_in_1_x3 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=nflx new-packet-mark=nflx_out_1_x3 out-interface=ether3 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=\
nflx_in_2_x3 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=nflx new-packet-mark=nflx_out_2_x3 out-interface=ether3 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=nflx_in_3_x3 passthrough=no \
src-address-list=nflx
add action=mark-packet chain=postrouting dst-address-list=nflx \
new-packet-mark=nflx_out_3_x3 out-interface=ether3 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=\
fb-cdn_in_1_x3 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_1_x3 out-interface=\
ether3 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=\
fb-cdn_in_2_x3 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_2_x3 out-interface=\
ether3 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=fb-cdn_in_3_x3 passthrough=no \
src-address-list=fb-cdn
add action=mark-packet chain=postrouting dst-address-list=fb-cdn \
new-packet-mark=fb-cdn_out_3_x3 out-interface=ether3 passthrough=no
add action=mark-packet chain=prerouting comment="fb 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=fb_in_1_x3 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb new-packet-mark=fb_out_1_x3 out-interface=ether3 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=fb_in_2_x3 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb new-packet-mark=fb_out_2_x3 out-interface=ether3 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=fb_in_3_x3 passthrough=no \
src-address-list=fb
add action=mark-packet chain=postrouting dst-address-list=fb new-packet-mark=\
fb_out_3_x3 out-interface=ether3 passthrough=no
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=www_in_1_x3 \
passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-256000 dst-port=\
80,443 new-packet-mark=www_out_1_x3 out-interface=ether3 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=\
www_in_2_x3 passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443 new-packet-mark=www_out_2_x3 out-interface=ether3 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=www_in_3_x3 passthrough=no protocol=\
udp src-port=80,443
add action=mark-packet chain=postrouting dst-port=80,443 new-packet-mark=\
www_out_3_x3 out-interface=ether3 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=www_in_1_x3 \
passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-128000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_1_x3 out-interface=ether3 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=\
www_in_2_x3 passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_2_x3 out-interface=ether3 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 512k-~ | 2M-~" \
in-interface=ether3 new-packet-mark=www_in_3_x3 passthrough=no protocol=\
tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting dst-port=80,443,5060,8080 \
new-packet-mark=www_out_3_x3 out-interface=ether3 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=\
tcp/udp_in_1_x3 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x3 out-interface=ether3 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=\
tcp/udp_in_2_x3 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x3 out-interface=ether3 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=tcp/udp_in_3_x3 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x3 \
out-interface=ether3 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="udp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether3 new-packet-mark=\
tcp/udp_in_1_x3 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x3 out-interface=ether3 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether3 new-packet-mark=\
tcp/udp_in_2_x3 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x3 out-interface=ether3 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 1M-~ | 2M-~" \
in-interface=ether3 new-packet-mark=tcp/udp_in_3_x3 passthrough=no \
protocol=udp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x3 \
out-interface=ether3 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment=other in-interface=ether3 \
new-packet-mark=other_in_x3 passthrough=no
add action=mark-packet chain=postrouting new-packet-mark=other_out_x3 \
out-interface=ether3 passthrough=no
add action=passthrough chain=output comment="QoS | wan_x4 | Abr 30, 2017" \
disabled=yes
add action=mark-packet chain=prerouting comment=icmp in-interface=ether4 \
new-packet-mark=icmp_in_x4 passthrough=no protocol=icmp
add action=mark-packet chain=postrouting new-packet-mark=icmp_out_x4 \
out-interface=ether4 passthrough=no protocol=icmp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether4 new-packet-mark=www_in_x4 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x4 out-interface=ether4 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment=www connection-bytes=0-4000 \
in-interface=ether4 new-packet-mark=www_in_x4 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-4000 dst-port=\
80,443 new-packet-mark=www_out_x4 out-interface=ether4 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment=dota2 in-interface=ether4 \
new-packet-mark=steam_in_x4 passthrough=no protocol=udp src-port=\
27000-28000
add action=mark-packet chain=postrouting dst-port=27000-28000 \
new-packet-mark=steam_out_x4 out-interface=ether4 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="league of legends" \
in-interface=ether4 new-packet-mark=lol_in_x4 passthrough=no protocol=udp \
src-port=5000-5500
add action=mark-packet chain=postrouting dst-port=5000-5500 new-packet-mark=\
lol_out_x4 out-interface=ether4 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether4 new-packet-mark=\
lol_in_x4 passthrough=no protocol=tcp src-port=\
8393-8400,2099,5222,5223,8088
add action=mark-packet chain=postrouting dst-port=\
8393-8400,2099,5222,5223,8088 new-packet-mark=lol_out_x4 out-interface=\
ether4 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox in-interface=ether4 \
new-packet-mark=winbox_in_x4 passthrough=no protocol=tcp src-port=\
8291,8292
add action=mark-packet chain=postrouting dst-port=8291,8292 new-packet-mark=\
winbox_out_x4 out-interface=ether4 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment=winbox-inter dst-port=\
8291,8292 in-interface=ether4 new-packet-mark=winbox_in_x4 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=winbox_out_x4 \
out-interface=ether4 passthrough=no protocol=tcp src-port=8291,8292
add action=mark-packet chain=prerouting comment=dns in-interface=ether4 \
new-packet-mark=dns_in_x4 passthrough=no protocol=udp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x4 out-interface=ether4 passthrough=no protocol=udp
add action=mark-packet chain=prerouting in-interface=ether4 new-packet-mark=\
dns_in_x4 passthrough=no protocol=tcp src-port=53
add action=mark-packet chain=postrouting dst-port=53 new-packet-mark=\
dns_out_x4 out-interface=ether4 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="yt-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=\
yt-cdn_in_1_x4 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_1_x4 out-interface=\
ether4 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=\
yt-cdn_in_2_x4 passthrough=no src-address-list=yt-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=yt-cdn new-packet-mark=yt-cdn_out_2_x4 out-interface=\
ether4 passthrough=no
add action=mark-packet chain=prerouting comment="yt-cdn 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=yt-cdn_in_3_x4 passthrough=no \
src-address-list=yt-cdn
add action=mark-packet chain=postrouting dst-address-list=yt-cdn \
new-packet-mark=yt-cdn_out_3_x4 out-interface=ether4 passthrough=no
add action=mark-packet chain=prerouting comment="g 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=g_in_1_x4 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=g new-packet-mark=g_out_1_x4 out-interface=ether4 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=g_in_2_x4 \
passthrough=no src-address-list=g
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=g new-packet-mark=g_out_2_x4 out-interface=ether4 \
passthrough=no
add action=mark-packet chain=prerouting comment="g 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=g_in_3_x4 passthrough=no \
src-address-list=g
add action=mark-packet chain=postrouting dst-address-list=g new-packet-mark=\
g_out_3_x4 out-interface=ether4 passthrough=no
add action=mark-packet chain=prerouting comment="nflx 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=\
nflx_in_1_x4 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=nflx new-packet-mark=nflx_out_1_x4 out-interface=ether4 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=\
nflx_in_2_x4 passthrough=no src-address-list=nflx
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=nflx new-packet-mark=nflx_out_2_x4 out-interface=ether4 \
passthrough=no
add action=mark-packet chain=prerouting comment="nflx 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=nflx_in_3_x4 passthrough=no \
src-address-list=nflx
add action=mark-packet chain=postrouting dst-address-list=nflx \
new-packet-mark=nflx_out_3_x4 out-interface=ether4 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=\
fb-cdn_in_1_x4 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_1_x4 out-interface=\
ether4 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=\
fb-cdn_in_2_x4 passthrough=no src-address-list=fb-cdn
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb-cdn new-packet-mark=fb-cdn_out_2_x4 out-interface=\
ether4 passthrough=no
add action=mark-packet chain=prerouting comment="fb-cdn 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=fb-cdn_in_3_x4 passthrough=no \
src-address-list=fb-cdn
add action=mark-packet chain=postrouting dst-address-list=fb-cdn \
new-packet-mark=fb-cdn_out_3_x4 out-interface=ether4 passthrough=no
add action=mark-packet chain=prerouting comment="fb 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=fb_in_1_x4 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
dst-address-list=fb new-packet-mark=fb_out_1_x4 out-interface=ether4 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=fb_in_2_x4 \
passthrough=no src-address-list=fb
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
dst-address-list=fb new-packet-mark=fb_out_2_x4 out-interface=ether4 \
passthrough=no
add action=mark-packet chain=prerouting comment="fb 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=fb_in_3_x4 passthrough=no \
src-address-list=fb
add action=mark-packet chain=postrouting dst-address-list=fb new-packet-mark=\
fb_out_3_x4 out-interface=ether4 passthrough=no
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=www_in_1_x4 \
passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-256000 dst-port=\
80,443 new-packet-mark=www_out_1_x4 out-interface=ether4 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=\
www_in_2_x4 passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443 new-packet-mark=www_out_2_x4 out-interface=ether4 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="www 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=www_in_3_x4 passthrough=no protocol=\
udp src-port=80,443
add action=mark-packet chain=postrouting dst-port=80,443 new-packet-mark=\
www_out_3_x4 out-interface=ether4 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment="www 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=www_in_1_x4 \
passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-128000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_1_x4 out-interface=ether4 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=\
www_in_2_x4 passthrough=no protocol=tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting connection-bytes=0-1024000 dst-port=\
80,443,5060,8080 new-packet-mark=www_out_2_x4 out-interface=ether4 \
passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="www 512k-~ | 2M-~" \
in-interface=ether4 new-packet-mark=www_in_3_x4 passthrough=no protocol=\
tcp src-port=80,443,5060,8080
add action=mark-packet chain=postrouting dst-port=80,443,5060,8080 \
new-packet-mark=www_out_3_x4 out-interface=ether4 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=\
tcp/udp_in_1_x4 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x4 out-interface=ether4 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=\
tcp/udp_in_2_x4 passthrough=no protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x4 out-interface=ether4 passthrough=no \
protocol=tcp
add action=mark-packet chain=prerouting comment="tcp 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=tcp/udp_in_3_x4 passthrough=no \
protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x4 \
out-interface=ether4 passthrough=no protocol=tcp
add action=mark-packet chain=prerouting comment="udp 0k-256k | 0k-512k" \
connection-bytes=0-512000 in-interface=ether4 new-packet-mark=\
tcp/udp_in_1_x4 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-256000 \
new-packet-mark=tcp/udp_out_1_x4 out-interface=ether4 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 256k-1M | 512k-2M" \
connection-bytes=0-2048000 in-interface=ether4 new-packet-mark=\
tcp/udp_in_2_x4 passthrough=no protocol=udp
add action=mark-packet chain=postrouting connection-bytes=0-1024000 \
new-packet-mark=tcp/udp_out_2_x4 out-interface=ether4 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment="udp 1M-~ | 2M-~" \
in-interface=ether4 new-packet-mark=tcp/udp_in_3_x4 passthrough=no \
protocol=udp
add action=mark-packet chain=postrouting new-packet-mark=tcp/udp_out_3_x4 \
out-interface=ether4 passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment=other in-interface=ether4 \
new-packet-mark=other_in_x4 passthrough=no
add action=mark-packet chain=postrouting new-packet-mark=other_out_x4 \
out-interface=ether4 passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether2
add action=masquerade chain=srcnat out-interface=ether3
add action=masquerade chain=srcnat out-interface=ether4
add action=dst-nat chain=dstnat comment="Acceso x86" dst-port=8293 \
in-interface=ether1 protocol=tcp to-addresses=192.168.0.118 to-ports=8291
add action=dst-nat chain=dstnat comment="Acceso Mikrotik" dst-port=8292 \
in-interface=ether1 protocol=tcp to-addresses=192.168.0.117 to-ports=8291
add action=dst-nat chain=dstnat comment="Acceso Mikrotik" dst-port=8294 \
in-interface=ether1 protocol=tcp to-addresses=192.168.0.33 to-ports=8291
/ip route
add distance=1 gateway=192.168.1.1 routing-mark=FO1
add distance=1 gateway=192.168.2.1 routing-mark=FO2
add distance=1 gateway=192.168.6.1 routing-mark=FO3
add distance=1 gateway=192.168.5.1 routing-mark=FO4
add comment=rutax1 distance=1 gateway=192.168.1.1 routing-mark=to_ether1
add comment=rutax2 distance=1 gateway=192.168.2.1 routing-mark=to_ether2
add comment=rutax3 distance=1 gateway=192.168.6.1 routing-mark=to_ether3
add comment=rutax4 distance=1 gateway=192.168.5.1 routing-mark=to_ether4
add comment=ruta1 distance=1 gateway=192.168.1.1
add comment=ruta2 distance=2 gateway=192.168.2.1
add comment=ruta3 distance=3 gateway=192.168.6.1
add comment=ruta4 distance=4 gateway=192.168.5.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/routing ospf network
add area=backbone network=192.168.0.0/24
/system clock
set time-zone-name=America/Lima
/system identity
set name=BALANCEADOR
/system ntp client
set enabled=yes primary-ntp=129.6.15.28 secondary-ntp=129.6.15.29
/system scheduler
add interval=2m name=FO on-event=FO policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=\
startup
/system script
add name=FO owner=BalanceadoRx4 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
global X (4);\r\
\n:for i from=1 to=\$X do={\r\
\n\r\
\n :local pingresultado [/ping 8.8.8.8 routing-table=\"FO\$i\" count=5]\
;\r\
\n :if (\$pingresultado>0 && [/ip route get [find comment=\"ru\
ta\$i\"] disabled]=true) do={\r\
\n /ip route set [find comment=\"ruta\$i\"] disabled=no;\r\
\n /ip route set [find comment=\"rutax\$i\"] disabled=no;\
\r\
\n\r\
\n }\r\
\n\r\
\n :if (\$pingresultado=0 && [/ip route get [find comment=\"ru\
ta\$i\"] disabled]=false) do={\r\
\n /ip route set [find comment=\"ruta\$i\"] disabled=yes;\
\r\
\n /ip route set [find comment=\"rutax\$i\"] disabled=yes;\
\r\
\n }\r\
\n}"

S-ar putea să vă placă și