Hello, i´m trying to use queue tree, i could mark the packets for an especific protocol (ej tcp) and i could put these packets in diferent queues for the upload and download traffic (for tcp).
Now i want to do that but first i´d like to mark all the traffic upload in a queue and all the download in another one. If in mangle i don´t specify the protocol the rule doesn´t match the traffic (i though the default was all the protocols but it isn´t).
Please i need help to mark all the protocols for up/down (separatelly), thanks in advance
SORRY!
I do mark the traffic, but when i try to put the packets in a queue (with the same configuration as i had when i was working with tcp traffic) the packets doesnt income in the queue, what happens?
I think i´m finding the problem, Can I put more than 1 mark in the same chain to a packet?, how can i mark all the upload traffic, and then put to the packets another mark (for example tcp packets, etc)?
you can’t add two marks, first mark is overwritten by second
Instead you can use marks something like this : http-donload, p2p-download etc
I have::
My ISP --------------- My MT-------------Clients (192.168.1.0)
I´m doing nat, I was doing that:
For Upload:
–Firewall Mangle:
src add 192.168.1.0/24
mark packet
–Queue Tree:
parent:global-in
For Download:
–Firewall Mangle:
dst add 192.168.1.0/24
mark packet
–Queue Tree:
parent:global-out
In each queue there is the total traffic (U/D), so i can´t make leafs for that queues because i can´t use more marks, so my question is if i can put that traffic in the parent queues of my tree without using marks, so i could use the marks for the leafs. I want that::
download traffic (parent)
-------sip-download
-------http-download
-------ftp-download
-------etc-download
upload traffic (parent)
-------sip-upload
-------http-upload
-------ftp-upload
-------etc-upload
So i woul´d like to use the marks for sip, http,ftp, etc. Helpppp! jaj, thanks
is this help you
/ ip firewall mangle
add chain=prerouting src-address=172.16.80.0/24 action=mark-connection new-connection-mark=“Con Entire Traffic” passthrough=yes comment=“Mark-connection
All Traffic” disabled=no
add chain=prerouting src-address=172.16.80.0/24 connection-mark=“Con Entire Traffic” dst-address-list=“!BG traffic” action=mark-connection
new-connection-mark=“Con Oversea” passthrough=yes comment=“Mark-connection Oversea Traffic” disabled=no
add chain=prerouting src-address=172.16.80.0/26 protocol=tcp dst-port=80 dst-address-list=“BG traffic” action=mark-connection
new-connection-mark=http_conn passthrough=yes comment=“http bg con” disabled=no
add chain=prerouting src-address=172.16.80.0/26 protocol=tcp dst-port=80 dst-address-list=“!BG traffic” action=mark-connection
new-connection-mark=http_conn_inter passthrough=yes comment=“http int con” disabled=no
add chain=prerouting src-address=172.16.80.0/26 p2p=all-p2p dst-address-list=“!BG traffic” action=mark-connection new-connection-mark=p2p_conn_int
passthrough=yes comment=“p2p int con” disabled=no
add chain=prerouting src-address=172.16.80.0/26 p2p=all-p2p dst-address-list=“BG traffic” action=mark-connection new-connection-mark=p2p_conn
passthrough=yes comment=“p2p bg con” disabled=no
add chain=prerouting connection-mark=p2p_conn p2p=all-p2p action=mark-packet new-packet-mark=p2p passthrough=no comment=“” disabled=no
add chain=prerouting connection-mark=p2p_conn_int p2p=all-p2p action=mark-packet new-packet-mark=p2p_int passthrough=no comment=“” disabled=no
add chain=prerouting connection-mark=http_conn_inter action=mark-packet new-packet-mark=http_inter passthrough=no comment=“” disabled=no
add chain=prerouting connection-mark=http_conn action=mark-packet new-packet-mark=http passthrough=no comment=“” disabled=no
add chain=prerouting connection-mark=“Con Oversea” action=mark-packet new-packet-mark=“Oversea traffic” passthrough=no comment=“Mark-packet Oversea
Traffic” disabled=no
add chain=prerouting action=mark-packet new-packet-mark=“Local Country Traffic” passthrough=no comment=“Mark-packet Local Country Traffic” disabled=no
then in queue for each user must have rule for each mark
sorry but what is “BG traffic” and why 2 rules for each like 1 for p2p_conn_int and 1 for p2p_conn same rule but why ???