Hi, I recently upgraded to 4.3 and I decided to try PCC load balancing, the problem I have is that I don't feel it's working correctly because my first connection always has a lot more traffic than the second one. I have two 4mb adsl and the first one is always at it's full capacity meanwhile the other is between 300 kbps and 1.5 mbps only in very rare ocations both are full, here is my configuration:

/ip firewall mangle
add action=accept chain=output comment="" disabled=no dst-address=10.0.0.0/24
add action=accept chain=input comment="" disabled=no dst-address=10.0.0.0/24
add action=accept chain=prerouting comment="" disabled=no dst-address=\
10.0.0.0/24 src-address-list=clients
add action=mark-connection chain=input comment="Marcar Entrantes" \
connection-state=new disabled=no in-interface=ether4 new-connection-mark=\
adsl1_conn passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new \
disabled=no in-interface=Bridge1 new-connection-mark=adsl2_conn \
passthrough=yes
add action=accept chain=output comment=\
"Prevenir que las conexiones salientes sean marcadas y ruteadas por PCC" \
disabled=no dst-address-list=clients
add action=accept chain=output comment="" disabled=no dst-address=\
172.165.20.0/24
add action=accept chain=output comment="" disabled=no dst-address=\
172.165.15.0/24
add action=accept chain=output comment="Prevenir que las conexiones choquen co\
n las marcas PCC y sean asignadas a otra salida" connection-state=new \
disabled=no dst-address=192.168.20.0/24
add action=accept chain=output comment="" connection-state=new disabled=no \
dst-address=192.168.254.0/24
add action=mark-routing chain=output comment="" connection-mark=adsl1_conn \
disabled=no new-routing-mark=to_adsl1 passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=adsl2_conn \
disabled=no new-routing-mark=to_adsl2 passthrough=yes
add action=accept chain=prerouting comment="Reglas de Aceptacion-Prevenir cone\
xiones locales que sean marcadas y enviadas a las salidas de ineternet don\
de serian rechazadas porque las direcciones no coinciden" disabled=no \
dst-address=192.168.20.0/24 src-address-list=clients
add action=accept chain=prerouting comment="" disabled=no dst-address=\
192.168.254.0/24 src-address-list=clients
add action=accept chain=prerouting comment="" disabled=no dst-address-list=\
clients src-address-list=clients
add action=mark-connection chain=prerouting comment="Marcar las conexiones de \
las direcciones de los clientes con el balanceo PCC para asignarles las re\
glas de ruteo" connection-state=new disabled=no dst-address-type=!local \
new-connection-mark=adsl1_conn passthrough=yes per-connection-classifier=\
both-addresses:2/0 src-address-list=clients
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local new-connection-mark=adsl2_conn \
passthrough=yes per-connection-classifier=both-addresses:2/1 \
src-address-list=clients
add action=mark-routing chain=prerouting comment="" connection-mark=\
adsl1_conn disabled=no new-routing-mark=to_adsl1 passthrough=yes \
src-address-list=clients
add action=mark-routing chain=prerouting comment="" connection-mark=\
adsl2_conn disabled=no new-routing-mark=to_adsl2 passthrough=yes \
src-address-list=clients

/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=dst-nat chain=dstnat comment="Para User Mannager" disabled=no \
dst-port=60000 protocol=tcp to-addresses=10.0.0.5
add action=dst-nat chain=dstnat comment="Para User Mannager" disabled=no \
dst-port=8291 in-interface=ether4 protocol=tcp to-addresses=10.0.0.1
add action=masquerade chain=srcnat comment=NAT disabled=no out-interface=\
ether4
add action=masquerade chain=srcnat comment="" disabled=no out-int

/ip route
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=192.168.20.254 routing-mark=to_adsl1 scope=30 \
target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=192.168.254.254 routing-mark=to_adsl2 scope=30 \
target-scope=10
add check-gateway=ping comment="" disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=192.168.20.254 scope=30 target-scope=10
add check-gateway=arp comment="" disabled=no distance=3 dst-address=0.0.0.0/0 \
gateway=192.168.254.254 scope=30 target-scope=10

Help please.

how many packets have your PCC rules counted? are those values equal?

Hi, I have no idea, in the manual I did't read anything about packets, where and how do you configure that?

it's in queue statistics =)

Thank you for your answer but I don't understand what do you mean.

/ip firewall mangle print stats
Flags: X - disabled, I - invalid, D - dynamic
# CHAIN ACTION BYTES PACKETS
0 output accept 1330470 12394
1 input accept 5248563 46712
2 prerouting accept 4433971 34886
3 ;;; Marcar Entrantes
input mark-connection 813707 8045
4 input mark-connection 1863289 18440
5 ;;; Prevenir que las conexiones salientes sean marcadas y ruteadas por PCC
output accept 6275735408 5178346
6 output accept 0 0
7 output accept 0 0
8 ;;; Prevenir que las conexiones choquen con las marcas PCC y sean asign...
output accept 1983519 30471
9 output accept 1991181 30596
10 output mark-routing 709000 7249
11 output mark-routing 1180203 11559
12 ;;; Reglas de Aceptacion-Prevenir conexiones locales que sean marcadas ...
prerouting accept 0 0
13 prerouting accept 43192 647
14 prerouting accept 1680387 20862
15 ;;; Marcar las conexiones de las direcciones de los clientes con el bal...
prerouting mark-connection 15603747 212883
16 prerouting mark-connection 14146853 185439

Actually the connection that has less traffic has more marked bytes, what I have seen is that it appears that web surfing traffic is distributed equal between the two connections but the downloads almost every time go to the first gateway.

It seems that the rules are working fine but it's traffic that gets away or escapes from the rules, I have tried other PCC examples and alwas the default gateway gets a lot more traffic 3/1 proportion, anybody else has this problem?

actually, I was speaking about 15th and 16th rules, as I can see. 'input' is traffic directed to the router itself

seems like your downloaders are out of statistics, and they work via 1st gateway mainly )))

try to set 'adsl2_conn' mark for rule with 'per-connection-classifier=both-addresses:2/0' and 'adsl1_conn' mark for rule with 'per-connection-classifier=both-addresses:2/1' and then see whether traffic will change between interfaces...

Tried what you suggested but the traffic keeps going mostly to the same ethernet, as I told it seems that a lot of traffic is jumping the rules and goig through the default gateway.

hmmm... maybe try to see (add a rule with action=log), what packets do not have packet-mark after PCC rules...

I don't know if this is what you wanted to see:

/log> print
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:1983->66.132.225.10:30000, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:23
:69:94:1e:50, proto TCP (ACK), 172.165.15.18:49280->208.92.52.48:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6569->69.63.181.11:80, len 28
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6569->69.63.181.11:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6569->69.63.181.11:80, len 1460
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6569->69.63.181.11:80, len 114
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34545, len 32
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34545, len 32
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 76.13.222.11:80->192.168.20.50:34545, len 494

21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,FIN), 76.13.222.11:80->192.168.20.50:34545, len 32
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60932->24.33.236.66:27443, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:61148->174.70.132.253:21697, len 20

21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:61140->69.76.149.2:44061, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60928->67.10.162.54:17999, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6568->76.13.222.11:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34544, len 1472
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 76.13.222.11:80->192.168.20.50:34544, len 844

21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,FIN), 76.13.222.11:80->192.168.20.50:34544, len 32
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.218.153.10:62444->192.168.20.50:3002, len
46
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6566->76.13.222.11:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.182.37.190:54529->192.168.20.50:2812, len
39
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 24.3.123.235:34267->192.168.20.50:60938, len
105
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6525->201.211.33.247:36984, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34545, len 32
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34544, len 32
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 67.10.162.54:17999->192.168.20.50:60928, len
73
21:53:30 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 24.33.236.66:27443->192.168.254.20:60932, le
n 158
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6570->76.13.222.11:80, len 28
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6571->69.63.176.178:80, len 28
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:30 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 69.76.149.2:44061->192.168.254.20:61140, len
243
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6570->76.13.222.11:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6571->69.63.176.178:80, len 20
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6571->69.63.176.178:80, len 1460
21:53:30 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6571->69.63.176.178:80, len 145
21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:30 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6570->76.13.222.11:80, len 966
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0e
:e8:6b:42:66, proto TCP (ACK), 172.165.15.3:3002->190.218.153.10:62444, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0e
:e8:6b:42:66, proto TCP (ACK), 172.165.15.3:2812->190.182.37.190:54529, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6560->80.31.255.246:3557, len 28
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 68.50.12.253:63958->192.168.20.50:3267, len 4
6
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 69.63.181.16:80->192.168.20.50:37747, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 209.222.128.224:80->192.168.20.50:59818, len 1472

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (SYN,ACK), 69.63.176.178:80->192.168.20.50:58285, len 24

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (SYN,ACK), 76.13.222.11:80->192.168.20.50:34547, len 40
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 66.132.225.10:30000->192.168.254.20:1983, le
n 66
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK,PSH), 172.165.15.22:60932->24.33.236.66:27443, len
265
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto UDP, 172.165.15.22:30804->192.168.1.112:6352, len 41
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60938->24.3.123.235:34267, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6525->201.211.33.247:36984, len
245
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.50.182.20:34637->192.168.20.50:3127, len
46
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60928->67.10.162.54:17999, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:61140->69.76.149.2:44061, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 69.63.176.178:80->192.168.20.50:58285, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 69.63.176.178:80->192.168.20.50:58285, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34547, len 32
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 66.132.225.10:30000->192.168.254.20:1983, le
n 27
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,RST), 207.46.216.54:80->192.168.20.50:39598, len 20

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 69.63.176.178:80->192.168.20.50:58285, len 20
6
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 69.63.176.178:80->192.168.20.50:58285, len 33
8
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,FIN), 69.63.176.178:80->192.168.20.50:58285, len 20

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:1983->66.132.225.10:30000, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6571->69.63.176.178:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 69.63.181.16:80->192.168.20.50:37747, len 424

21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 24.33.236.66:27443->192.168.254.20:60932, le
n 73
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0e
:e8:6b:42:66, proto TCP (ACK), 172.165.15.3:3267->68.50.12.253:63958, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK,PSH), 172.165.15.22:60932->24.33.236.66:27443, len
73
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6569->69.63.181.11:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:3932->65.54.49.129:1863, len 446

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 67.10.162.54:17999->192.168.20.50:60928, len
174
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 208.92.52.48:80->192.168.20.50:55862, len 964

21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 69.76.149.2:44061->192.168.254.20:61140, len
105
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34547, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 76.13.222.11:80->192.168.20.50:34547, len 839

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,FIN), 76.13.222.11:80->192.168.20.50:34547, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 69.63.176.178:80->192.168.20.50:58285, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6570->76.13.222.11:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 68.50.12.253:63958->192.168.20.50:3267, len 7
2
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0e
:e8:6b:42:66, proto TCP (ACK), 172.165.15.3:3127->190.50.182.20:34637, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6572->74.125.67.139:80, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6573->74.125.67.99:80, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 65.54.49.129:1863->192.168.20.50:3932, len 30

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 65.54.49.129:1863->192.168.20.50:3932, len 53
2
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 65.54.49.129:1863->192.168.20.50:3932, len 24
5
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,RST), 80.31.255.246:3557->192.168.254.20:6560, len
20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6572->74.125.67.139:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6573->74.125.67.99:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:3932->65.54.49.129:1863, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 24.33.236.66:27443->192.168.254.20:60932, le
n 73
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6572->74.125.67.139:80, len 603
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6573->74.125.67.99:80, len 734
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 76.13.222.11:80->192.168.20.50:34547, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 69.63.181.16:80->192.168.20.50:37747, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 74.125.67.101:80->192.168.20.50:40809, len 17
8
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.173.4.190:17819->192.168.20.50:2867, len
46
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6574->190.201.28.62:9616, len 28
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60928->67.10.162.54:17999, len 20
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK), 201.211.33.247:36984->192.168.254.20:6525, len 2
0
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 74.125.67.104:80->192.168.20.50:42086, len 26
8
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6572->74.125.67.139:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,FIN,PSH), 174.129.220.145:80->192.168.20.50:64976,
len 633
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6573->74.125.67.99:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:64976->174.129.220.145:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK,FIN), 172.165.15.22:64976->174.129.220.145:80, len
20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:23
:69:94:1e:50, proto TCP (ACK), 172.165.15.18:49280->208.92.52.48:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:3932->65.54.49.129:1863, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto UDP, 172.165.15.2:6575->74.66.13.222:40749, len 37
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:61140->69.76.149.2:44061, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 24.3.123.235:34267->192.168.20.50:60938, len
73
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 209.222.128.224:80->192.168.20.50:59818, len
288
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0e
:e8:6b:42:66, proto TCP (ACK), 172.165.15.3:3267->68.50.12.253:63958, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60932->24.33.236.66:27443, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 67.10.162.54:17999->192.168.20.50:60928, len
73
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto UDP, 172.165.15.2:6529->200.33.146.194:53, len 60
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 174.129.220.145:80->192.168.20.50:64976, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto UDP, 192.168.20.254:53->192.168.20.50:53595, len 153
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (SYN,ACK), 190.201.28.62:9616->192.168.20.50:6574, len 2
8
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 69.76.149.2:44061->192.168.254.20:61140, len
142
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6574->190.201.28.62:9616, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0e
:e8:6b:42:66, proto TCP (ACK), 172.165.15.3:2867->190.173.4.190:17819, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK,PSH), 172.165.15.22:61140->69.76.149.2:44061, len 7
3
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6576->187.141.2.58:80, len 28
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6576->187.141.2.58:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 208.92.52.48:80->192.168.20.50:55862, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 208.92.52.48:80->192.168.20.50:55862, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:16
:b6:8f:41:5b, proto TCP (ACK), 172.165.15.47:1962->209.222.128.224:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 208.92.52.48:80->192.168.20.50:55862, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6577->69.63.176.178:80, len 28
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:23
:69:94:1e:50, proto TCP (ACK), 172.165.15.18:49280->208.92.52.48:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6577->69.63.176.178:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6577->69.63.176.178:80, len 1460
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6577->69.63.176.178:80, len 146
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto UDP, 172.165.15.2:6529->200.33.146.194:53, len 50
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60938->24.3.123.235:34267, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 174.70.132.253:21697->192.168.20.50:61148, le
n 73
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 24.33.236.66:27443->192.168.254.20:60932, le
n 105
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6578->187.141.2.58:80, len 28
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6578->187.141.2.58:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6576->187.141.2.58:80, len 778
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 69.76.149.2:44061->192.168.254.20:61140, len
121
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60928->67.10.162.54:17999, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6578->187.141.2.58:80, len 528
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (SYN,ACK), 187.141.2.58:80->192.168.20.50:33171, len 40
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (SYN,ACK), 187.141.2.58:80->192.168.20.50:33172, len 40
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (SYN,ACK), 69.63.176.178:80->192.168.20.50:58287, len 24

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 187.141.2.58:80->192.168.20.50:33171, len 147
2
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 187.141.2.58:80->192.168.20.50:33171, len 580

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 208.92.52.48:80->192.168.20.50:55862, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 208.92.52.48:80->192.168.20.50:55862, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33172, len 32
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6576->187.141.2.58:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
1460
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 187.141.2.58:80->192.168.20.50:33172, len 377

21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6576->187.141.2.58:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:23
:69:94:1e:50, proto TCP (ACK), 172.165.15.18:49280->208.92.52.48:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.211.33.247:36984->192.168.254.20:6525, l
en 195
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6578->187.141.2.58:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 190.102.222.207:3256->192.168.20.50:6516, len
628
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 67.10.162.54:17999->192.168.20.50:60928, len
73
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6516->190.102.222.207:3256, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6579->187.141.2.58:80, len 28
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.221.233.46:21950->192.168.254.20:6504, l
en 1420
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.211.33.247:36984->192.168.254.20:6525, l
en 1460
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 69.63.176.178:80->192.168.20.50:58287, len 20
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.221.233.46:21950->192.168.254.20:6504, l
en 668
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 69.63.176.178:80->192.168.20.50:58287, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6579->187.141.2.58:80, len 775
21:53:31 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.211.33.247:36984->192.168.254.20:6525, l
en 628
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6525->201.211.33.247:36984, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6504->201.221.233.46:21950, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:61148->174.70.132.253:21697, len 20

21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60932->24.33.236.66:27443, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:61140->69.76.149.2:44061, len 20
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:31 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 187.141.2.58:80->192.168.20.50:33171, len 147
2
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6574->190.201.28.62:9616, len 25
7
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 187.141.2.58:80->192.168.20.50:33171, len 147
2
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK), 187.141.2.58:80->192.168.20.50:33171, len 1472
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 187.141.2.58:80->192.168.20.50:33171, len 645

21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:23
:69:94:1e:50, proto TCP (ACK), 172.165.15.18:49280->208.92.52.48:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.221.233.46:21950->192.168.254.20:6504, l
en 1420
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 24.33.236.66:27443->192.168.254.20:60932, le
n 73
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 66.132.225.10:30000->192.168.254.20:1983, le
n 49
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6525->201.211.33.247:36984, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:60928->67.10.162.54:17999, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (SYN), 172.165.15.2:6580->69.63.181.11:80, len 28
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 69.76.149.2:44061->192.168.254.20:61140, len
105
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 66.132.225.10:30000->192.168.254.20:1983, le
n 27
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.211.33.247:36984->192.168.254.20:6525, l
en 1460
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:0c
:42:34:0f:1e, proto TCP (ACK), 172.165.15.22:1983->66.132.225.10:30000, len 20
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.221.233.46:21950->192.168.254.20:6504, l
en 668
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto TCP (ACK,PSH), 201.211.33.247:36984->192.168.254.20:6525, l
en 1460
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:Bridge1 out:(none), src-mac 00:1
4:95:93:bb:09, proto ICMP (type 0, code 0), 192.168.254.254->192.168.254.20, len
36
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6580->69.63.181.11:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6580->69.63.181.11:80, len 1460
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK,PSH), 172.165.15.2:6580->69.63.181.11:80, len 114
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether4 out:(none), src-mac 00:23
:51:28:f3:91, proto TCP (ACK,PSH), 67.10.162.54:17999->192.168.20.50:60928, len
73
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6579->187.141.2.58:80, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6504->201.221.233.46:21950, len 20
21:53:32 firewall,info after-pcc prerouting: in:ether1 out:(none), src-mac 00:40
:90:00:2b:45, proto TCP (ACK), 172.165.15.2:6525->201.211.33.247:36984, len 20

Thats true..... I have the same problem too !!


MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK

MikroTik RouterOS 3.30 (c) 1999-2009 http://www.mikrotik.com/





[admin@MikroTik] > ip
[admin@MikroTik] /ip> firewall
[admin@MikroTik] /ip firewall> mangle
[admin@MikroTik] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Mark new inbound connection WAN1
chain=input action=mark-connection new-connection-mark=wan1
passthrough=yes connection-state=new in-interface=LinkDotNet

1 ;;; Mark new inbound connection wan2
chain=input action=mark-connection new-connection-mark=wan2
passthrough=yes connection-state=new in-interface=TeData

2 ;;; Mark established inbound connection wan1
chain=prerouting action=mark-connection new-connection-mark=wan1
passthrough=yes connection-state=established in-interface=LinkDotNet

3 ;;; Mark established inbound connection wan2
chain=prerouting action=mark-connection new-connection-mark=wan2
passthrough=yes connection-state=established in-interface=TeData

4 ;;; Mark related inbound connection wan1
chain=prerouting action=mark-connection new-connection-mark=wan1
passthrough=yes connection-state=related in-interface=LinkDotNet

5 ;;; Mark related inbound connection wan2
chain=prerouting action=mark-connection new-connection-mark=wan2
passthrough=yes connection-state=related in-interface=TeData

6 ;;; Mark new inbound route wan1
chain=output action=mark-routing new-routing-mark=wan1 passthrough=yes
connection-mark=wan1

7 ;;; Mark new inbound route wan2
chain=output action=mark-routing new-routing-mark=wan2 passthrough=yes
connection-mark=wan2

8 chain=prerouting action=mark-connection new-connection-mark=wan1_pcc_conn
passthrough=yes connection-state=new dst-address-type=!local
in-interface=LAN per-connection-classifier=both-addresses:2/0

9 chain=prerouting action=mark-connection new-connection-mark=wan2_pcc
passthrough=yes connection-state=new dst-address-type=!local
in-interface=LAN per-connection-classifier=src-address:2/1

10 chain=prerouting action=mark-connection new-connection-mark=wan1_pcc_conn
passthrough=yes connection-state=established dst-address-type=!local
in-interface=LAN per-connection-classifier=both-addresses:2/0

11 chain=prerouting action=mark-connection new-connection-mark=wan2_pcc
passthrough=yes connection-state=established dst-address-type=!local
in-interface=LAN per-connection-classifier=both-addresses:2/1

12 chain=prerouting action=mark-connection new-connection-mark=wan1_pcc_conn
passthrough=yes connection-state=related dst-address-type=!local
in-interface=LAN per-connection-classifier=both-addresses:2/0

13 chain=prerouting action=mark-connection new-connection-mark=wan2_pcc
passthrough=yes connection-state=related dst-address-type=!local
in-interface=LAN per-connection-classifier=both-addresses:2/1

14 chain=prerouting action=mark-routing new-routing-mark=wan1 passthrough=ye>
connection-mark=wan1_pcc_conn

15 chain=prerouting action=mark-routing new-routing-mark=wan2 passthrough=ye>
connection-mark=wan2_pcc

[admin@MikroTik] /ip firewall mangle> /ip
[admin@MikroTik] /ip> firewall
[admin@MikroTik] /ip firewall> nat
[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough

1 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=192.168.80.0/24

2 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=192.168.88.0/24
[admin@MikroTik] /ip firewall nat> /ip
[admin@MikroTik] /ip> route
[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE
0 A S ;;; WAN 1 - Distance 1
0.0.0.0/0 reachable LinkDotNet 1 LinkDotNet
1 S ;;; WAN 1 - Distance 2
0.0.0.0/0 reachable TeData 2 TeData
2 A S ;;; WAN 2 - Distance 1
0.0.0.0/0 reachable TeData 1 TeData
3 S ;;; WAN 2 - Distance 2
0.0.0.0/0 reachable LinkDotNet 2 LinkDotNet
4 S ;;; Default Route - Distance 2
0.0.0.0/0 reachable TeData 2 TeData
5 A S ;;; Default Route - Distance 1
0.0.0.0/0 reachable LinkDotNet 1 LinkDotNet
6 ADC 41.130.0.1/32 41.130.11.54 0 LinkDotNet
7 ADC 163.121.170.22/32 196.202.112.105 0 TeData
8 ADC 192.168.80.0/24 192.168.80.1 0 wlan1
9 ADC 192.168.88.0/24 192.168.88.1 0 LAN
[admin@MikroTik] /ip route>

vdelarenal75, have you set 'connection-mark=no-mark' for your logging rule?

Try this...

Note that the ISP1 gives us 2Mbps and ISP2 - 4Mbps so we want a traffic ratio 1:2 (1/3 of the source/destination IP pairs from 192.168.0.0/24 goes through ISP1, and 2/3 through ISP2).

IP addresses of the router:
[admin@Router] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.0.254/24 192.168.0.0 192.168.0.255 Local
1 10.1.0.2/28 10.1.0.0 10.1.0.15 Public1
2 10.1.1.2/28 10.1.1.0 10.1.1.15 Public2
[admin@Router] ip address>

Add the default routes - one for ISP1 and 2 for ISP2 so we can get the ratio 1:3:

[admin@Router] ip route> add gateway=10.1.0.1,10.1.1.1,10.1.1.1
[admin@Router] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf
# DST-ADDRESS G GATEWAY DISTANCE INTERFACE
0 ADC 10.1.0.0/28 Public1
1 ADC 10.1.1.0/28 Public2
2 ADC 192.168.0.0/24 Local
3 A S 0.0.0.0/0 r 10.1.0.1 Public1
r 10.1.1.1 Public2
r 10.1.1.1 Public2
[admin@Router] ip route>

After configure all go to the clint PC open three command Prompt windows
and type c:\ tracert (any URL) all three windows with diff. URLs
if two trace show u 10.1.1.1 and one shows 10.1.0.1
its means u done the load balancing

vdelarenal75, have you set 'connection-mark=no-mark' for your logging rule?

No Chupaka I didn't, let me do it again it should be in prerouting, postrouting or output?

Ok it seems that now it's working ok, this is what I did:

1.- Inverted the PCC rules as Chubaka sugested adsl2 to both-addresses:2/0 and adsl1 to both-adresses:2/1
2.- Removed masquarade for the two wan connections and left masquarade for the Hotspot and PPoE server
3.- Removed use proxy in the default Hotspot profile (I know that it looks that has nothing to do with the problem but it didn't worked until I did that)
4.- Reboot the router (It didn't work until I rebooted the router)

Thankyou for the help Chubaka and I'll keep you posted if it keeps workinf fine.

Regards.

Yep!!!!! it's perfect now, thank you for your help.

you are welcome =)

p.s. I'm not Chubaka

Upppsss, sorry about that Chupaka.