Regras- Mangle-simple queue-queue tree-queue types
OLA A TODOS COLOCO AS MINHAS REGRAS AQUI AO PESSOAL QUE QUEIRE DEIXAR SEU SERVE UM POUCO MAIS EFICIENTE
[eniak@MikroTik] ip firewall mangle>
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Ajuste de Bloqueio SSH e Telnet
chain=prerouting protocol=tcp dst-port=20-23
action=add-src-to-address-list address-list=drop_port_22_23
address-list-timeout=0s
1 ;;; Marca Todo Trafego p2p
chain=prerouting src-address=10.10.10.0/24 p2p=all-p2p
action=mark-connection new-connection-mark=p2p_conn passthrough=yes
2 chain=prerouting connection-mark=p2p_conn action=mark-packet
new-packet-mark=allp2p passthrough=yes
3 ;;; HTTP
chain=prerouting protocol=tcp dst-port=80 action=mark-connection
new-connection-mark=http-down passthrough=yes
4 chain=prerouting connection-mark=http-down action=mark-packet
new-packet-mark=HTTP passthrough=yes
5 ;;; SSL
chain=prerouting protocol=tcp dst-port=443 action=mark-connection
new-connection-mark=443_conn passthrough=yes
6 chain=prerouting connection-mark=443_conn action=mark-packet
new-packet-mark=HTTP passthrough=yes
7 ;;; MSN-IN
chain=prerouting protocol=tcp dst-port=1863 action=mark-connection
new-connection-mark=msn_in passthrough=yes
8 chain=prerouting connection-mark=msn_in action=mark-packet
new-packet-mark=MSN_IN passthrough=yes
9 ;;; MSN-OUT
chain=prerouting protocol=tcp src-port=1863 action=mark-connection
new-connection-mark=msn_out passthrough=yes
10 chain=prerouting connection-mark=msn_out action=mark-packet
new-packet-mark=MSN_OUT passthrough=yes
11 ;;; VOIP-IN
chain=prerouting protocol=udp dst-port=5060 action=mark-connection
new-connection-mark=voip_in passthrough=yes
12 chain=prerouting connection-mark=voip_in action=mark-packet
new-packet-mark=VOIP_IN passthrough=yes
13 ;;; VOIP-OUT
chain=prerouting protocol=udp src-port=5060 action=mark-connection
new-connection-mark=voip_out passthrough=yes
14 ;;; Protocol classifier
chain=prerouting protocol=tcp connection-state=new action=jump
jump-target=tcp-services
15 chain=prerouting protocol=udp connection-state=new action=jump
jump-target=udp-services
16 chain=prerouting connection-state=new action=jump
jump-target=other-services
17 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=20-21
action=mark-connection new-connection-mark=ftp passthrough=no
18 chain=tcp-services protocol=tcp src-port=513-65535 dst-port=22
action=mark-connection new-connection-mark=ssh passthrough=no
19 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=23
action=mark-connection new-connection-mark=telnet passthrough=no
20 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=25
action=mark-connection new-connection-mark=smtp passthrough=no
21 chain=tcp-services protocol=tcp src-port=53 dst-port=53
action=mark-connection new-connection-mark=dns passthrough=no
22 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=53
action=mark-connection new-connection-mark=dns passthrough=no
23 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=80
action=mark-connection new-connection-mark=http passthrough=no
24 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=110
action=mark-connection new-connection-mark=pop3 passthrough=no
25 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=113
action=mark-connection new-connection-mark=auth passthrough=no
26 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=119
action=mark-connection new-connection-mark=nntp passthrough=no
27 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=143
action=mark-connection new-connection-mark=imap passthrough=no
28 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=161-162
action=mark-connection new-connection-mark=snmp passthrough=no
29 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=443
action=mark-connection new-connection-mark=https passthrough=no
30 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=465
action=mark-connection new-connection-mark=smtps passthrough=no
31 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=993
action=mark-connection new-connection-mark=imaps passthrough=no
32 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=995
action=mark-connection new-connection-mark=pop3s passthrough=no
33 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=1723
action=mark-connection new-connection-mark=pptp passthrough=no
34 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=2379
action=mark-connection new-connection-mark=kgs passthrough=no
35 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=3126
action=mark-connection new-connection-mark=proxy passthrough=no
36 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=3987
action=mark-connection new-connection-mark=win-ts passthrough=no
37 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=4242-4243
action=mark-connection new-connection-mark=emule passthrough=no
38 chain=tcp-services protocol=tcp src-port=4661-4662 dst-port=1024-65535
action=mark-connection new-connection-mark=overnet passthrough=no
39 chain=tcp-services protocol=tcp src-port=4711 dst-port=1024-65535
action=mark-connection new-connection-mark=emule passthrough=no
40 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=5900-5901
action=mark-connection new-connection-mark=vnc passthrough=no
41 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=6667-6669
action=mark-connection new-connection-mark=irc passthrough=no
42 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=6881-6889
action=mark-connection new-connection-mark=bittorrent passthrough=no
43 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=8080
action=mark-connection new-connection-mark=http passthrough=no
44 chain=tcp-services protocol=tcp src-port=1024-65535 dst-port=8291
action=mark-connection new-connection-mark=winbox passthrough=no
45 chain=tcp-services protocol=tcp action=mark-connection
new-connection-mark=other-tcp passthrough=no
46 chain=udp-services protocol=udp src-port=1024-65535 dst-port=53
action=mark-connection new-connection-mark=dns passthrough=no
47 chain=udp-services protocol=udp src-port=1024-65535 dst-port=123
action=mark-connection new-connection-mark=ntp passthrough=no
48 chain=udp-services protocol=udp src-port=1024-65535 dst-port=1701
action=mark-connection new-connection-mark=l2tp passthrough=no
49 chain=udp-services protocol=udp src-port=1024-65535 dst-port=4665
action=mark-connection new-connection-mark=emule passthrough=no
50 chain=udp-services protocol=udp src-port=1024-65535 dst-port=4672
action=mark-connection new-connection-mark=emule passthrough=no
51 chain=udp-services protocol=udp src-port=4672 dst-port=1024-65535
action=mark-connection new-connection-mark=emule passthrough=no
52 chain=udp-services protocol=udp src-port=1024-65535 dst-port=12053
action=mark-connection new-connection-mark=overnet passthrough=no
53 chain=udp-services protocol=udp src-port=12053 dst-port=1024-65535
action=mark-connection new-connection-mark=overnet passthrough=no
54 chain=udp-services protocol=udp src-port=36725 dst-port=1024-65535
action=mark-connection new-connection-mark=skype passthrough=no
55 chain=udp-services protocol=udp connection-state=new
action=mark-connection new-connection-mark=other-udp passthrough=no
56 chain=other-services protocol=icmp icmp-options=8:0-255
action=mark-connection new-connection-mark=ping passthrough=no
57 chain=other-services protocol=gre action=mark-connection
new-connection-mark=gre passthrough=no
58 chain=other-services action=mark-connection new-connection-mark=other
passthrough=no
59 chain=prerouting in-interface=wlan1 action=mark-packet
new-packet-mark=nat-traversal passthrough=no
TA MARCANDO TUDO CERTO