Ip firewall mangle
0 likes1,595 views
The document contains firewall configuration settings that mark packets for various protocols like HTTP, DNS, POP3, SMTP, Winbox and P2P with different packet marks as they pass through the prerouting and postrouting chains. Specific ports are marked for protocols like HTTP (port 80), DNS (ports 53 and 53/UDP), POP3 (port 110), SMTP (port 25) and Winbox (port 8291). All P2P traffic is also marked.
Ip firewall mangle
- 1. /ip firewall mangle add chain=prerouting comment="Marcados de Paquetes WWW" action=mark-packet new-packet- mark=www_in passthrough=yes protocol=tcp src-port=80 add chain=postrouting action=mark-packet new-packet-mark=www_out passthrough=yes protocol=tcp dst-port=80 add chain=prerouting comment="Marcados de Paquetes DNS" action=mark-packet new-packet- mark=dns_in passthrough=yes protocol=tcp src-port=53 add chain=postrouting action=mark-packet new-packet-mark=dns_out passthrough=yes protocol=tcp dst-port=53 add chain=prerouting action=mark-packet new-packet-mark=dns_udp_in passthrough=yes protocol=udp src-port=53 add chain=postrouting action=mark-packet new-packet-mark=dns_udp_out passthrough=yes protocol=udp dst-port=53 add chain=prerouting comment="Marcados de Paquetes POP3" action=mark-packet new-packet- mark=pop3_in passthrough=yes protocol=tcp src-port=110 add chain=postrouting action=mark-packet new-packet-mark=pop3_out passthrough=yes protocol=tcp dst-port=110 add chain=prerouting comment="Marcados de Paquetes SMTP" action=mark-packet new-packet- mark=smtp_in passthrough=yes protocol=tcp src-port=25 add chain=postrouting action=mark-packet new-packet-mark=smtp_out passthrough=yes protocol=tcp dst-port=25 add chain=prerouting comment="Marcados de Paquetes WIMBOX" action=mark-packet new- packet-mark=winbox_in passthrough=yes protocol=tcp dst-port=8291 add chain=postrouting action=mark-packet new-packet-mark=winbox_out passthrough=yes protocol=tcp src-port=8291 add chain=prerouting comment="Marcados de Paquetes P2P" action=mark-packet new-packet- mark=p2p_in passthrough=yes p2p=all-p2p add chain=postrouting action=mark-packet new-packet-mark=p2p_out passthrough=yes p2p=all- p2p