MikroTik RouterOS (часть 4) - [693] :: В помощь системному администратору

/ip firewall mangle
add action=accept chain=prerouting dst-address=a.a.a.a in-interface=lan
add action=accept chain=prerouting dst-address=b.b.b.b in-interface=lan
add action=accept chain=prerouting dst-address=c.c.c.c in-interface=lan
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-rostelecom new-connection-mark=conn_rostelekom passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-domru new-connection-mark=conn_domru passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-dom290 new-connection-mark=conn_domru290 passthrough=yes
add action=accept chain=prerouting protocol=ospf
add action=mark-connection chain=prerouting dst-address=192.168.44.1 dst-port=53 layer7-protocol="Kcena DNS" new-connection-mark=Kcena-DNS-forward passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting dst-address=192.168.44.1 dst-port=53 layer7-protocol="Kcena DNS" new-connection-mark=Kcena-DNS-forward passthrough=yes protocol=udp
add action=mark-connection chain=prerouting dst-address=192.168.44.1 dst-port=53 layer7-protocol=UIP-DNS new-connection-mark=UIP-DNS-forward passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting dst-address=192.168.44.1 dst-port=53 layer7-protocol=UIP-DNS new-connection-mark=UIP-DNS-forward passthrough=yes protocol=udp
add action=mark-connection chain=prerouting dst-address=192.168.44.1 dst-port=53 layer7-protocol=veter-DNS new-connection-mark=veter-DNS-forward passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting dst-address=192.168.44.1 dst-port=53 layer7-protocol=veter-DNS new-connection-mark=veter-DNS-forward passthrough=yes protocol=udp
add action=accept chain=prerouting dst-address-list=client-lan src-address-list=client-lan
add action=mark-connection chain=prerouting comment="conn rostel" dst-address-type=!local in-interface=lan new-connection-mark=conn_rostelekom passthrough=yes per-connection-classifier=\
both-addresses:3/0
add action=mark-routing chain=prerouting comment=ros connection-mark=conn_rostelekom dst-address-type=!local new-routing-mark=rout_rostelekom passthrough=no
add action=mark-connection chain=prerouting comment="conn domru" dst-address-type=!local in-interface=lan new-connection-mark=conn_domru passthrough=yes per-connection-classifier=\
both-addresses:3/1
add action=mark-routing chain=prerouting comment=domru connection-mark=conn_domru dst-address-type=!local new-routing-mark=rout_domru passthrough=no
add action=mark-connection chain=prerouting comment="conn domru290" dst-address-type=!local in-interface=lan new-connection-mark=conn_domru290 passthrough=yes per-connection-classifier=\
both-addresses:3/2
add action=mark-routing chain=prerouting comment=domru290 connection-mark=conn_domru290 dst-address-type=!local new-routing-mark=rout_domru290 passthrough=no
add action=mark-connection chain=input in-interface=pppoe-rostelecom new-connection-mark=conn_rostelekom passthrough=yes
add action=mark-connection chain=input in-interface=pppoe-domru new-connection-mark=conn_domru passthrough=yes
add action=mark-connection chain=input in-interface=pppoe-dom290 new-connection-mark=conn_domru290 passthrough=yes
add action=mark-routing chain=output comment="rout rostel" connection-mark=conn_rostelekom new-routing-mark=rout_rostelekom passthrough=no
add action=mark-routing chain=output comment="rout domru" connection-mark=conn_domru new-routing-mark=rout_domru passthrough=no
add action=mark-routing chain=output comment="rout domru290" connection-mark=conn_domru290 new-routing-mark=rout_domru290 passthrough=no

Модерирует : lynx, Crash_Master, dg, emx, ShriEkeR
articlebot (11-03-2019 21:34): продолжение в MikroTik RouterOS (часть 5)	Версия для печати • Подписаться • Добавить в закладки
На первую страницу • к этому сообщению • к последнему сообщению