Postado originalmente por
powernetscm
ip firewall mangle
add chain=prerouting action=mark-packet new-packet-mark=test-up passthrough=no in-interface=Local comment="" disabled=yes
add chain=forward action=mark-connection new-connection-mark=test-conn passthrough=yes comment="" disabled=yes
add chain=forward action=mark-packet new-packet-mark=test-down passthrough=no in-interface=Public connection-mark=test-conn comment="" disabled=yes
add chain=output action=mark-packet new-packet-mark=test-down passthrough=no out-interface=Local comment="" disabled=yes
add chain=prerouting action=mark-connection new-connection-mark=ICMP_conn passthrough=yes protocol=icmp comment="ICMP" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=ICMP_Packet passthrough=no protocol=icmp connection-mark=ICMP_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=dns_conn passthrough=yes dst-port=53 protocol=udp comment="Dns" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=dns_packet passthrough=no dst-port=53 protocol=udp connection-mark=dns_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=http_conn passthrough=yes dst-port=80 protocol=tcp comment="Prioriza servi os web" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=http_packet_mark passthrough=no dst-port=80 protocol=tcp connection-mark=http_conn comment="" \
disabled=no
add chain=prerouting action=mark-connection new-connection-mark=MSN_Connetcion passthrough=yes dst-port=1863 protocol=tcp comment="Msn Messenger" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=Msn_packet passthrough=no dst-port=1863 protocol=tcp connection-mark=MSN_Connetcion comment="" \
disabled=no
add chain=prerouting action=mark-connection new-connection-mark=https_connection passthrough=yes dst-port=443 protocol=tcp comment="Prioriza Https" \
disabled=no
add chain=prerouting action=mark-packet new-packet-mark=https_packet passthrough=no dst-port=443 protocol=tcp connection-mark=https_connection comment="" \
disabled=no
add chain=prerouting action=mark-connection new-connection-mark=mk_conn passthrough=yes dst-port=8291 protocol=tcp comment="MK" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=mk_packet passthrough=no dst-port=8291 protocol=tcp comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=dhcp_conn passthrough=yes dst-port=67-68 protocol=udp comment="dhcp" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=dhcp_packet passthrough=no dst-port=67-68 protocol=udp connection-mark=dhcp_conn comment="" \
disabled=no
add chain=prerouting action=mark-connection new-connection-mark=udp0_conn passthrough=yes dst-port=0 protocol=udp comment="TEst 0" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=zero_packet passthrough=no dst-port=0 protocol=udp connection-mark=udp0_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=ftp_conn passthrough=yes dst-port=20-21 protocol=tcp comment="Ftp" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=ftp_packet passthrough=no dst-port=20-21 protocol=tcp connection-mark=ftp_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=orkut_conn passthrough=yes protocol=tcp src-address-list=Orkut comment="Orkut testes \
Prioridade" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=orkut_packet passthrough=no protocol=tcp connection-mark=orkut_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=udp_conn passthrough=yes dst-port=22 protocol=tcp comment="UDP " disabled=no
add chain=prerouting action=mark-packet new-packet-mark=udp_packet passthrough=no dst-port=22 protocol=tcp connection-mark=udp_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=Ms_conn passthrough=yes dst-port=1755 protocol=tcp comment="Ms" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=ms_packet passthrough=no dst-port=1755 protocol=tcp connection-mark=Ms_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=skype_conn passthrough=yes dst-port=5060 protocol=tcp comment="skype" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=skype_packet passthrough=no dst-port=5060 protocol=tcp connection-mark=skype_conn comment="" \
disabled=no
add chain=prerouting action=mark-connection new-connection-mark=conquer_conn passthrough=yes dst-port=5816 protocol=tcp comment="Conquer" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=Conquer_packet passthrough=no dst-port=5816 protocol=tcp connection-mark=conquer_conn comment="" \
disabled=no
add chain=prerouting action=mark-connection new-connection-mark=pop3_conn passthrough=yes dst-port=110 protocol=tcp comment="POP" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=pop3_packet passthrough=no dst-port=110 protocol=tcp connection-mark=pop3_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=SMTP_conn passthrough=yes dst-port=25 protocol=tcp comment="SMTP" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=SMTP_packet passthrough=no dst-port=25 protocol=tcp connection-mark=SMTP_conn comment="" disabled=no
add chain=output action=mark-connection new-connection-mark=proxyfull passthrough=yes src-port=3126 protocol=tcp comment="PROXY FULL" disabled=yes
add chain=output action=mark-packet new-packet-mark=proxyfull passthrough=yes connection-mark=proxyfull comment="" disabled=yes
add chain=output action=return connection-mark=proxyfull comment="" disabled=yes
add chain=prerouting action=mark-connection new-connection-mark=stream_conn passthrough=yes dst-port=554 protocol=tcp comment="Stream" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=stream_packet passthrough=no dst-port=554 protocol=tcp connection-mark=stream_conn comment="" \
disabled=no
add chain=prerouting action=mark-connection new-connection-mark=youtube_conn passthrough=yes src-address-list=youtube comment="YOUTUBE traffic" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=youtube_packet passthrough=no connection-mark=youtube_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=p2p_conn passthrough=yes p2p=all-p2p comment="Marca P2P" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=p2p_packet passthrough=no p2p=all-p2p connection-mark=p2p_conn comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=conn_restantes passthrough=yes comment="Marcando o restante das conex es" disabled=no
add chain=prerouting action=mark-packet new-packet-mark=restante_packet passthrough=no connection-mark=conn_restantes comment="" disabled=no