Community discussions

MikroTik App
 
manish
newbie
Topic Author
Posts: 39
Joined: Fri Jun 23, 2006 8:57 pm

PPPoE Server ICMP bypass

Sat Jul 17, 2021 5:11 pm

Hello Experts,

I have a PPPoE Server, using Radius to connect, how can I bypass icmp, I have tried to mangle and bypass but does not seem to work.

/ip firewall mangle
add action=mark-connection chain=prerouting new-connection-mark=icmp-con passthrough=yes protocol=icmp
add action=mark-connection chain=postrouting new-connection-mark=icmp-con passthrough=yes protocol=icmp
add action=mark-packet chain=prerouting connection-mark=icmp-con new-packet-mark=icmp-pkt passthrough=no protocol=icmp
add action=mark-packet chain=postrouting connection-mark=icmp-con new-packet-mark=icmp-pkt passthrough=no protocol=icmp

after that I have a queue rule allow which sits on top of all simple queue.

/queue simple
add max-limit=10M/10M name=ICMP packet-marks=icmp-pkt target=""

Dont know where I am going wrong as ICMP does not seem to pass through the queue.

Thank you.
 
doush
Long time Member
Long time Member
Posts: 665
Joined: Thu Jun 04, 2009 3:11 pm

Re: PPPoE Server ICMP bypass

Sat Jul 17, 2021 6:26 pm

What about only this ?
/ip firewall mangle
add action=mark-packet chain=prerouting  new-packet-mark=icmp-pkt passthrough=no protocol=icmp
add action=mark-packet chain=postrouting  new-packet-mark=icmp-pkt passthrough=no protocol=icmp

/queue simple
add max-limit=10M/10M name=ICMP packet-marks=icmp-pkt
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 999
Joined: Fri Jun 26, 2020 4:37 pm

Re: PPPoE Server ICMP bypass

Sun Jul 18, 2021 2:21 pm

Simple Queues by default would rate limit all traffic regardless of protocol. You don't need to manually intervene for ICMP as the underlying Linux Kernel rates limit anyway.

Use this for better guidance: viewtopic.php?f=23&t=176358

Who is online

Users browsing this forum: troy and 11 guests