[go: up one dir, main page]

0% found this document useful (0 votes)
116 views4 pages

Better Bandwidth Management

This document contains firewall configuration rules that: 1. Classify network traffic using layer 7 protocols and ports into categories like Facebook, streaming, downloading, torrents and gaming; 2. Mark connections and packets belonging to each category with different marks to apply bandwidth limits in queue trees; 3. Create queue trees that apply bandwidth limits per category for both inbound and outbound traffic.

Uploaded by

alfred jam
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
116 views4 pages

Better Bandwidth Management

This document contains firewall configuration rules that: 1. Classify network traffic using layer 7 protocols and ports into categories like Facebook, streaming, downloading, torrents and gaming; 2. Mark connections and packets belonging to each category with different marks to apply bandwidth limits in queue trees; 3. Create queue trees that apply bandwidth limits per category for both inbound and outbound traffic.

Uploaded by

alfred jam
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 4

/ip firewall layer7-protocol

add name=torrent-bittorrent regexp="^(\13bittorrent protocol|azver1\$|get /scr\


ape\\\\\?info_hash=)|d1:ad2:id20:|87P\\)[RP]"
add name=torrent-sites2 regexp="^.*(get|GET).+(torrent|thepiratebay|isohunt|en\
tertane|demonoid|btjunkie|mininova|flixflux|torrentz|vertor|h33t|btscene|b\
itunity|bittoxic|thunderbytes|entertane|zoozle|vcdq|bitnova|bitsoup|megano\
va|fulldls|btbot|flixflux|seedpeer|fenopy|gpirate|commonbits).*\$"
add name=download-large regexp="^.*get.+\\.(exe|rar|iso|zip|7zip|0[0-9][1-9]|f\
lv|mkv|avi|mp4|3gp|rmvb|mp3|img|dat|mov).*\$"
add name=download-docs regexp=\
"^.*get.+\\.(pdf|doc|docx|xlsx|xls|rtf|ppt|ppt).*\$"
add name=streaming-video2 regexp="^.*get.+\\.(c.youtube.com|cdn.dailymotion.co\
m|metacafe.com|mccont.com).*\$"
add name=streaming-video regexp=videoplayback|video
add name=streaming-playing regexp="dur="
add name=rt regexp="\\.(ppft)"
add name=download-ext regexp="^.*get.+\\.(gz|exe|rar|obb|apk|zip|7z|cab|asf|mo\
v|wmv|mpg|mpeg|img|pdf|doc|docx|xlsx|xls|rtf|ppt|pptx|mkv|avi|flv|wav|rm|m\
p3|mp4|ram|rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3gp|mpe|qt|raw|wma|ogg|deb|tar\
|bzip|gzip|gzip2|0[0-9][0-9]).*\$"
add name=streaming-video3 regexp="^.+(c.youtube.com|googlevideo.com|cdn.dailym\
otion.com|metacafe.com|mccont.com|fbcdn-video-a.akamaihd.net|hvideo-xpa1).\
*\$"
add name=facebook regexp="^.+(facebook.com).*\$"
add name=download-idm regexp="get /.*(user-agent: mozilla/4.0|range: bytes=)"
/ip pool
add name=dhcp_pool0 ranges=100.0.77.2-100.0.77.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge-lan lease-time=2d10m \
name=dhcp1
/queue simple
add comment="\"===============================================================\
==\\\r\
\n ====================================================================\
======\\\r\
\n ========================\"" name="LAN CONNECTION" target=bridge-lan
add max-limit=50M/50M name=PISOWIFI-BAHAY parent="LAN CONNECTION" target=\
100.0.77.253/32
add max-limit=400M/400M name=BATIARAO parent="LAN CONNECTION" target=\
100.0.77.246/32
add comment="\"===============================================================\
==\\\r\
\n ====================================================================\
======\\\r\
\n ========================\"" max-limit=400M/400M name=RB4011-PPPoE \
parent="LAN CONNECTION" target=100.0.77.247/32
add max-limit=50M/50M name=PISOWIFI-ANTEMAY parent="LAN CONNECTION" target=\
100.0.77.249/32
add max-limit=80M/80M name=PC-LAPTOP parent="LAN CONNECTION" target=\
100.0.77.254/32,100.0.77.251/32
add max-limit=2M/2M name=WiFi-Aron parent="LAN CONNECTION" target=\
100.0.77.252/32
add max-limit=2M/2M name=WiFi-KuyaMARLON parent="LAN CONNECTION" target=\
100.0.77.248/32
add max-limit=2M/2M name=WiFi-KuyaGAB parent="LAN CONNECTION" target=\
100.0.77.250/32
/queue tree
add comment="\"===============================================================\
==\\\r\
\n ====================================================================\
======\\\r\
\n ========================\"" max-limit=900M name=Total-Download \
parent=global
add comment="\"===============================================================\
==\\\r\
\n ====================================================================\
======\\\r\
\n ========================\"" max-limit=900M name=Total-Upload \
parent=ether1-ISP
add limit-at=2M max-limit=150M name="Facebook (DL)" packet-mark=fb-pkt \
parent=Total-Download priority=4 queue=pcq-download-default
add limit-at=2M max-limit=200M name="Streaming (DL)" packet-mark=\
Streaming-pkt parent=Total-Download priority=4 queue=pcq-download-default
add limit-at=3M max-limit=350M name="Browsing (DL)" packet-mark=browsing-pkt \
parent=Total-Download priority=4 queue=pcq-download-default
add limit-at=1M max-limit=100M name="LargeFiles (DL)" packet-mark=\
Downloading-pkt parent=Total-Download queue=pcq-download-default
add limit-at=1M max-limit=100M name="Torrent (DL)" packet-mark=Torrent-pkt \
parent=Total-Download queue=pcq-download-default
add limit-at=4M max-limit=50M name="Gaming (DL)" packet-mark=gaming-pkt \
parent=Total-Download priority=1 queue=pcq-download-default
add limit-at=2M max-limit=150M name="Facebook (UP)" packet-mark=fb-pkt \
parent=Total-Upload priority=4 queue=pcq-upload-default
add limit-at=2M max-limit=350M name="Browsing (UP)" packet-mark=browsing-pkt \
parent=Total-Upload priority=4 queue=pcq-upload-default
add limit-at=4M max-limit=50M name="Gaming (UP)" packet-mark=gaming-pkt \
parent=Total-Upload priority=1 queue=pcq-upload-default
add limit-at=1M max-limit=100M name="LargeFiles (UP)" packet-mark=\
Downloading-pkt parent=Total-Upload queue=pcq-upload-default
add limit-at=2M max-limit=200M name="Streaming (UP)" packet-mark=\
Streaming-pkt parent=Total-Upload priority=4 queue=pcq-upload-default
add limit-at=1M max-limit=100M name="Torrent (UP)" packet-mark=Torrent-pkt \
parent=Total-Upload queue=pcq-upload-default
add name="Others (DL)" packet-mark=Others-pkt parent=Total-Download priority=\
3 queue=pcq-download-default
add name="Others (UP)" packet-mark=Others-pkt parent=Total-Upload priority=3 \
queue=pcq-upload-default
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes
/ip firewall filter
add action=fasttrack-connection chain=forward protocol=icmp
add action=fasttrack-connection chain=forward dst-port=53 protocol=udp
/ip firewall mangle
add action=mark-connection chain=prerouting comment=Facebook-Connection \
layer7-protocol=facebook new-connection-mark=fb-con passthrough=yes
add action=mark-packet chain=prerouting connection-mark=fb-con \
new-packet-mark=fb-pkt passthrough=no
add action=mark-connection chain=prerouting comment=Streaming-Connection \
layer7-protocol=streaming-video new-connection-mark=Steeaming-conn \
passthrough=yes
add action=mark-connection chain=prerouting layer7-protocol=streaming-video2 \
new-connection-mark=Steeaming-conn passthrough=yes
add action=mark-connection chain=prerouting layer7-protocol=streaming-video3 \
new-connection-mark=Steeaming-conn passthrough=yes
add action=mark-connection chain=prerouting layer7-protocol=streaming-playing \
new-connection-mark=Steeaming-conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Steeaming-conn \
new-packet-mark=Streaming-pkt passthrough=no
add action=mark-connection chain=prerouting comment="Downloading Connection" \
layer7-protocol=download-ext new-connection-mark=Downloading-conn \
passthrough=yes
add action=mark-connection chain=prerouting layer7-protocol=download-idm \
new-connection-mark=Downloading-conn passthrough=yes
add action=mark-connection chain=prerouting layer7-protocol=download-large \
new-connection-mark=Downloading-conn passthrough=yes
add action=mark-connection chain=prerouting layer7-protocol=download-docs \
new-connection-mark=Downloading-conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Downloading-conn \
new-packet-mark=Downloading-pkt passthrough=no
add action=mark-connection chain=prerouting comment=Torrent-Connection \
layer7-protocol=torrent-bittorrent new-connection-mark=Torrent-conn \
passthrough=yes
add action=mark-connection chain=prerouting layer7-protocol=torrent-sites2 \
new-connection-mark=Torrent-conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Torrent-conn \
new-packet-mark=Torrent-pkt passthrough=no
add action=mark-connection chain=prerouting comment=Browsing-Connection \
dst-port=20,21,80,443,8000,8080,18080,18090 new-connection-mark=\
Browsing-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting dst-port=\
20,21,80,443,8000,8080,18080,18090 new-connection-mark=Browsing-conn \
passthrough=yes protocol=udp
add action=mark-packet chain=prerouting connection-mark=Browsing-conn \
new-packet-mark=browsing-pkt passthrough=no
add action=mark-connection chain=prerouting comment=Gaming-Connection \
dst-port=30000-30999,9992,4000-8999,27087-27089,27704-27706 \
new-connection-mark=games-con passthrough=yes protocol=udp
add action=mark-connection chain=prerouting dst-port=\
13000-13080,14028,30000-30200,40000-42474 new-connection-mark=games-con \
passthrough=yes protocol=udp
add action=mark-connection chain=prerouting dst-port="7086-7995,12070-12460,41\
182-42474,10491,10010,10013,10612,20002,20001,20000,12235" \
new-connection-mark=games-con passthrough=yes protocol=udp
add action=mark-connection chain=prerouting dst-port="5100,5500-5599,24000-260\
00,12060-12070,12020-12080,13000-13080,13006,10008" new-connection-mark=\
games-con passthrough=yes protocol=udp src-port=""
add action=mark-connection chain=prerouting dst-port=\
27000-27036,4380,3478,4379,24000-24050,9339,9322-9342 \
new-connection-mark=games-con passthrough=yes protocol=udp
add action=mark-connection chain=prerouting dst-port="5509,30097-30147,52776,5\
3826,52754,53111,52754,5000-7999,30000-30999,56400-56999" \
new-connection-mark=games-con passthrough=yes port="" protocol=tcp
add action=mark-connection chain=prerouting dst-port=\
9000-9999,9339,9322-9342,39190-39200,49001-49190,10009,27920-27940 \
new-connection-mark=games-con passthrough=yes port="" protocol=tcp
add action=mark-connection chain=prerouting dst-port=\
2080-2099,30097-30147,9000-9100,10009-13008,16666,28012,16666,9110 \
new-connection-mark=games-con passthrough=yes port="" protocol=tcp
add action=mark-connection chain=prerouting dst-port=10012,17500 \
new-connection-mark=games-con passthrough=yes port="" protocol=tcp
add action=mark-packet chain=prerouting connection-mark=games-con \
new-packet-mark=gaming-pkt passthrough=no
add action=mark-connection chain=prerouting comment=Others-Connection \
new-connection-mark=others-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting new-connection-mark=others-conn \
passthrough=yes protocol=udp
add action=mark-packet chain=prerouting connection-mark=others-conn \
new-packet-mark=Others-pkt passthrough=no

You might also like