muttley

Ola pessoal.
Muitos vão dizer que não presta, que não funciona mais.
Mas esta funcionando sim, mas só para http. HTTPS não!
.....
Regras.
....
/ip firewall filter
add action=accept chain=forward comment="Aceita BFW" disabled=no \
src-address=192.168.10.0/30

/ip firewall nat
add action=dst-nat chain=dstnat comment="Redirect BFW Cache" disabled=yes \
dst-port=80 protocol=tcp src-address=10.0.0.0/8 to-addresses=\
192.168.10.2 to-ports=3129

/ip firewall mangle
add action=mark-connection chain=postrouting comment="TOS 12==================\
==========================================================================\
=========================" disabled=no dscp=12 new-connection-mark=\
proxy-hits passthrough=yes protocol=tcp src-address=192.168.10.2
add action=mark-packet chain=postrouting comment="" connection-mark=\
proxy-hits disabled=no new-packet-mark=proxy-squid passthrough=yes


Na versão 6 do mikotik não se usa mais o queue tree.
/queue type
add kind=pcq name=cachefull pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-rate=20M pcq-src-address6-mask=64
/queue simple
add name=cachefull packet-marks=proxy-tos12 queue=cachefull/cachefull target=""

E pra essa regra do queue simple ficar sempre na mesma posição. Usamos um script.

/system script
add name=CacheFull owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"/queue simple move [find name=\"CacheFull\"] [ick [find] 0]"

/system scheduler
add interval=10s name=CacheFull on-event="/system script run CacheFull" policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=startup
==================

link pra download das regras; https://www.4shared.com/office/KTZ5bwFCei/REGRAS-NA_VERSAO_6_DO_MK-BFW_e.html?