i guess no 1 can :)

afamnu · February 20, 2007, 6:24am

hello all freinds
i have MK 2.9.40, how to make the ICMP packets unlimited , i mean imake limit for each user and client have so much load so its normal when ping the server the ms well be high,any body knows how i can unlimited the icmp on server

afamnu · February 20, 2007, 6:45am

:s no oneeeeeeeee

normis · February 20, 2007, 6:53am

easy. it’s called mangle. look in the manual

janisk · February 20, 2007, 8:05am

indeed it is easy if you look at manual, and only person here that actually reads it is you, normis

afamnu · February 22, 2007, 10:22pm

ok guys , i know mangle , but how i can do this , what’s the rule

firebat · February 23, 2007, 6:05am

Why not mangle packets and mark icmp packets with “icmp”. Then add a queue with sufficient priority and use the packet mark of “icmp” for the queue.

afamnu · February 23, 2007, 7:58am

i already did that , but not working , plz any one can put this rule ..

sergejs · February 23, 2007, 8:15am

Queues and mangle are working fine, when correct configuration is used.
There is no other opportunity except this,

create two mangle rules for each user, first rule to mark ICMP traffic (protocol=icmp), second rule to mark other traffic;
create two queue rules for each user, one for ICMP traffic without limit-at and max-limit configuration, second for other traffic.

afamnu · February 23, 2007, 10:59am

i also did that but its not workss ,

sergejs · February 23, 2007, 11:06am

It works fine for me.
Post your mangle export and used queue export.

afamnu · February 23, 2007, 11:12am

if its works with u can u show me how plz.? and how u did that

sergejs · February 23, 2007, 11:15am

Could you post export from your routers ?
It would be useful to see, why mangle and queues do not work in your case.

afamnu · February 23, 2007, 11:20am

0 chain=forward src-address=217.65.150.0/24 protocol=icmp action=mark-packet
new-packet-mark=ICMP passthrough=yes

1 chain=input src-address=217.65.150.0/24 protocol=icmp action=mark-packet
new-packet-mark=ICMP passthrough=yes that’s it and in queue rules i did that also
name=“ICMP” target-addresses=217.65.150.0/24 dst-address=0.0.0.0
interface=End-Users parent=none packet-marks=ICMP direction=both
priority=8 queue=default-small/default-small limit-at=0/0
max-limit=256000/1024000 total-queue=default-small

So

sergejs · February 23, 2007, 11:32am

Use ‘interface=all’ for ‘queue simple’ configuration, where are the traffic limit for other traffic (not ICMP) ?

afamnu · February 23, 2007, 11:37am

i used all before , but as much as i tryed i lost my mind :s
can u show me how u did that , i also tryed that kind of rule to MSN for port 1863 to make all my customers open without any limit queue but also still not working , can u show me how u did that ,??

afamnu · February 24, 2007, 5:24am

thank u all but still it snt work,:S

mneumark · February 24, 2007, 7:55am

MSN also uses port 80.

GWISA · February 24, 2007, 8:53am

Priority=8 is your problem - you’ve set ICMP for lowest priority…

afamnu · February 24, 2007, 11:45am

can any body give me the right rule to try it …??

GWISA · February 24, 2007, 4:50pm

try this:

/ ip firewall mangle 
add chain=prerouting protocol=icmp action=mark-packet \
    new-packet-mark=icmp-flow passthrough=no comment="ICMP" disabled=no 
add chain=prerouting protocol=!icmp action=mark-packet \
    new-packet-mark=non-ICMP passthrough=no comment="Non-ICMP" disabled=no 

/ queue simple 
add name="ICMP" dst-address=0.0.0.0/0 interface=all parent=none \
    packet-marks=icmp-flow direction=both priority=1
add name="Non-ICMP" dst-address=0.0.0.0/0 interface=all parent=none \
    packet-marks=non-ICMP direction=both priority=8

You can split this up into 2 seperate up/down trees and specify your up/down interfaces.