Is there a way to do queuing for individual IP or MAC addresses without making a separate simple queue rule for each address? PCQ does not seem to be a good solution as someone with several open connections easily circumvents the limits. Besides, this I find my MT frequently crashes with PCQ enabled. Any ideas would be greatly appreciated.
PCQ can provide QOS on per IP address basis, regardless of the number of connections made. See the following link for reference:
http://www.mikrotik.com/docs/ros/2.9/root/queue||0.525933300149328
Thanks Eugene. The explanations and examples here are much better than previous documentation. This is very similar to rules I was using already but I seemed to remember that in previous tests we found that each active connection was treated separately and that a user with many active connections could easily exceed his limit. Perhaps that was because I was previously using 0.0.0.0 for src and dst addresses instead of being network specific?
Can MT make a list for grouping ip address for “QUEUE”…?
Yup, first mangle by address list and then queue by packet mark.