add chain=output protocol=tcp src-port=3128 content="X-Cache: HIT" \
action=mark-connection new-connection-mark=squid-connection-HIT \
passthrough=yes comment="Cache-squid" disabled=no
add chain=output connection-mark=squid-connection-HIT action=mark-packet \
new-packet-mark=squid-packet-HIT passthrough=no comment="" disabled=no
add chain=output connection-mark=squid-connection-HIT action=return comment="" \
disabled=no
add chain=forward src-address=10.5.50.0/24 action=mark-connection \
new-connection-mark=test-conn passthrough=yes comment="CONN-MARK" \
disabled=no
add chain=prerouting in-interface=(unknown) src-address=10.5.50.0/24 \
action=mark-packet new-packet-mark="Test up" passthrough=yes comment="" \
disabled=no
add chain=forward in-interface=pppoe-out1 connection-mark=test-conn \
action=mark-packet new-packet-mark="test down" passthrough=no \
comment="Down direct conection" disabled=no
add chain=output out-interface=(unknown) dst-address=10.5.50.0/24 \
action=mark-packet new-packet-mark="test down" passthrough=no \
comment="down via proxy" disabled=no
add chain=forward protocol=icmp action=change-ttl new-ttl=set:30 comment="TTL" \
disabled=no
add chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1360 \
comment="" disabled=no
add chain=output protocol=tcp src-port=8291 src-address-list=clientes \
action=accept comment="Portas sem controle de banda \(winbox, dns, \
etc...\)" disabled=no
add chain=input protocol=udp dst-port=53 src-address-list=clientes \
action=mark-connection new-connection-mark=semqueue passthrough=yes \
comment="" disabled=no
add chain=prerouting protocol=tcp dst-port=53 src-address-list=clientes \
action=mark-connection new-connection-mark=semqueue passthrough=yes \
comment="" disabled=no
add chain=output protocol=tcp dst-port=22 src-address-list=clientes \
action=mark-connection new-connection-mark=semqueue passthrough=yes \
comment="" disabled=no
add chain=prerouting connection-mark=semqueue action=mark-packet \
new-packet-mark=semqueue passthrough=yes comment="" disabled=no
add chain=output connection-mark=semqueue action=return comment="" disabled=no
add chain=prerouting protocol=udp dst-port=5060-5062 action=mark-connection \
new-connection-mark=voip-in passthrough=yes comment="PRIORIZAR TRAFEGO \
VOIP" disabled=no