This is what I'm using and it's working: # Identify DoH add chain=prerouting action=mark-connection connection-state=new new-connection-mark=DoH passthrough=yes dst-address-list=DoH comment="DoH" add chain=prerouting action=mark-packet connection-mark=DoH new-packet-mark=DoH passthrough=no...

Is it possible to prioritize DoH (DNS over HTTPS) traffic such as 1.1.1.1? I created a src-list with all the IP address of DoH providers, then added this mangle rule: add action=mark-packet chain=forward new-packet-mark=DoH passthrough=no src-address-list=DoH comment="DoH" But the packets ...

Then only one question remains, how sure are you that indeed it was matched by the Rule because of that specific port ?

I generated traffic and checked where the queued bytes are going, also used torch to verify that it is indeed port 51820

I can't be sure or guess as to why the first rule was matched by that port although it does not exist in the ports field.
What is your ROS Version ?
Is it updated to latest Version ?

Using latest version: v6.46.6 on hAP ac^2

Am not sure if it is correct to add ports and port-ranges at the same line... According to the Manual it should be Ports or Port Ranges... You can just move your last rules on top and you will be fine... Using both ports and port ranges work, I did move the rule to the top and it worked! thank you,...

I have two mangle rules, first one with a port range 12000-51819,51821-64000 and the second rule with only port 51820, issue is the range isn't excluding the port 51820 correctly, it is still getting marked by the first rule, what am I doing wrong? add chain=prerouting action=mark-connection new-con...

Does it make sense to use RED for VPN queue running on UDP only? the congestion methods mentioned all seem to apply to TCP exclusively, but in the guide it's mentioned that it can be applied to QUIC which uses UDP so I gues this means it's fine to use it on UDP VPN?

I use unbound on my Pihole, and only these NAT rules works when there's a hard coded DNS on a client: /ip firewall nat add chain=dstnat action=accept src-address=192.168.1.250 /ip firewall nat add action=dst-nat chain=dstnat dst-port=53 in-interface=bridge protocol=tcp to-addresses=192.168.1.1 /ip f...

If I modify my script to disable more than 4 NAT rules it stops working and says "no such item (4)" This is what works: /ip firewall nat disable 1,2,3,4 /ip dns set servers=9.9.9.11,149.112.112.11 /tool e-mail send to="address@gmail.com" subject="Pi-hole is down on $[/system...

I would like to change my queue tree max-limit using scripts, I managed to do it by creating scripts that deletes everything in queue tree then create them again with the modified max-limit, is there a better way to do it? thank you

I would like to change the parent queue tree max-limit every 12 hours automatically, how can I do that using the scheduler?

How to add some TCP ports and prioritize them as VOIP? can I simply do this and it will be enough?: /ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=VOIP port=4244,5222,5223,5228,5242,50318,59234,1119,3724,6113 protocol=tcp passthrough=yes comment="VOIP" ...

Hello, can the hAP ac² act as a router instead of an access point? I want it to act as a DHCP server and use firewall nat rules.