A friend of mine has asked me to help him limiting p2p traffic to 30kb~40kb.
On my test router I copied the rules from this wiki page
http://wiki.mikrotik.com/wiki/Basic_tra ... _protocols
After I have done this I noticed that mangle rules did not pass on the results to the queue tree.
But after changing passthrough=yes to passthrough=no the queue tree started to work.
It does detect p2p but does not slow down the speed. I tried to set the max limit to 1k for "bittorent" protocol but it goes from green to red but speed stay the same. I have noticed that when I set max limit on "remaining all" then the speed will go down.
Can someone maybe tell me what I’m doing wrong? I already tried numerous ways to try and solve this.
Can encrypted and non-encrypted p2p really be throttled?
I’m using mikrotik rb750g
Mangle rules after edit....
Code: Select all
add action=mark-packet chain=prerouting comment=100bao_p2p disabled=no \
in-interface=ether5 layer7-protocol=100bao new-packet-mark=100bao_p2p_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=100bao \
new-packet-mark=100bao_p2p_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="aim mesenger" disabled=no \
in-interface=ether5 layer7-protocol=aim new-packet-mark=aim_mesanger_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=aim \
new-packet-mark=aim_mesanger_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=aim_messenger_web disabled=no \
in-interface=ether5 layer7-protocol=aimwebcontent new-packet-mark=\
aim_mesenger_web_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
aimwebcontent new-packet-mark=aim_mesenger_web_out out-interface=ether5 \
passthrough=no
add action=mark-packet chain=prerouting comment=applejuice_p2p disabled=no \
in-interface=ether5 layer7-protocol=applejuice new-packet-mark=\
applejuice_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
applejuice new-packet-mark=applejuice_out out-interface=ether5 \
passthrough=no
add action=mark-packet chain=prerouting comment=ares_p2p disabled=no \
in-interface=ether5 layer7-protocol=ares new-packet-mark=ares_p2p_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=ares \
new-packet-mark=ares_p2p_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=bgp_routing disabled=no \
in-interface=ether5 layer7-protocol=bgp new-packet-mark=bgp_routing_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=bgp \
new-packet-mark=bgp_routing_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=bittorent_p2p disabled=no \
in-interface=ether5 new-packet-mark=bittorent_in p2p=all-p2p passthrough=\
no
add action=mark-packet chain=prerouting comment=bittorent_p2p disabled=no \
in-interface=ether5 layer7-protocol=bittorrent new-packet-mark=\
bittorent_in passthrough=no
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
bittorent_out out-interface=ether5 p2p=all-p2p passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
bittorrent new-packet-mark=bittorent_out out-interface=ether5 \
passthrough=no
add action=mark-packet chain=prerouting comment=dhcp disabled=no \
in-interface=ether5 layer7-protocol=dhcp new-packet-mark=dhcp_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=dhcp \
new-packet-mark=dhcp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"Direct Connect - P2P filesharing " disabled=no in-interface=ether5 \
layer7-protocol=directconnect new-packet-mark=DC_p2p_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
directconnect new-packet-mark=DC_p2p_out out-interface=ether5 \
passthrough=no
add action=mark-packet chain=prerouting comment="DNS - Domain Name System " \
disabled=no in-interface=ether5 layer7-protocol=dns new-packet-mark=\
DNS_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=dns \
new-packet-mark=DNS_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"eDonkey2000 - P2P filesharing " disabled=no in-interface=ether5 \
layer7-protocol=edonkey new-packet-mark=edonkey_p2p_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=edonkey \
new-packet-mark=edonkey_p2p_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"FastTrack - P2P filesharing (Kazaa, Morpheus, iMesh, Grokster, etc)" \
disabled=no in-interface=ether5 layer7-protocol=fasttrack \
new-packet-mark=fasttrack_p2p_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
fasttrack new-packet-mark=fasttrack_p2p_out out-interface=ether5 \
passthrough=no
add action=mark-packet chain=prerouting comment=\
"FTP - File Transfer Protocol " disabled=no in-interface=ether5 \
layer7-protocol=ftp new-packet-mark=ftp_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=ftp \
new-packet-mark=ftp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="GnucleusLAN - LAN-only P2P " \
disabled=no in-interface=ether5 layer7-protocol=gnucleuslan \
new-packet-mark=gnu_p2p_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
gnucleuslan new-packet-mark=gnu_p2p_out out-interface=ether5 passthrough=\
no
add action=mark-packet chain=prerouting comment="Gnutella - P2P filesharing" \
disabled=no in-interface=ether5 layer7-protocol=gnutella new-packet-mark=\
gnutella_p2p_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=gnutella \
new-packet-mark=gnutella_p2p_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"GoBoogy - a Korean P2P protocol" disabled=no in-interface=ether5 \
layer7-protocol=goboogy new-packet-mark=gobogy_p2p_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=goboogy \
new-packet-mark=gobogy_p2p_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="H.323 - Voice over IP" \
disabled=no in-interface=ether5 layer7-protocol=h323 new-packet-mark=\
h323_voiceoverip_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=h323 \
new-packet-mark=h323_voiceoverip_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="RTSP tunneled within HTTP" \
disabled=no in-interface=ether5 layer7-protocol=http-rtsp \
new-packet-mark=httprtsp_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
http-rtsp new-packet-mark=httprtsp_out out-interface=ether5 passthrough=\
no
add action=mark-packet chain=prerouting comment=\
"www HyperText Transfer Protocol " disabled=no in-interface=ether5 \
layer7-protocol=http new-packet-mark=http_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=http \
new-packet-mark=http_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"Ident - Identification Protocol - RFC 1413" disabled=no in-interface=\
ether5 layer7-protocol=ident new-packet-mark=ident_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=ident \
new-packet-mark=ident_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"IMAP - Internet Message Access Protocol (A common e-mail protocol)" \
disabled=no in-interface=ether5 layer7-protocol=imap new-packet-mark=\
imap_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=imap \
new-packet-mark=imap_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"iMesh - the native protocol of iMesh, a P2P application " disabled=no \
in-interface=ether5 layer7-protocol=imesh new-packet-mark=imesh_p2p_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=imesh \
new-packet-mark=imesh_p2p_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="IRC - Internet Relay Chat" \
disabled=no in-interface=ether5 layer7-protocol=irc new-packet-mark=\
irc_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=irc \
new-packet-mark=irc_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"KuGoo - a Chinese P2P program " disabled=no in-interface=ether5 \
layer7-protocol=kugoo new-packet-mark=koogo_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=kugoo \
new-packet-mark=koogo_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"MSN (Micosoft Network) Messenger file transfers " disabled=no \
in-interface=ether5 layer7-protocol=msn-filetransfer new-packet-mark=\
msnfile_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
msn-filetransfer new-packet-mark=msnfile_out out-interface=ether5 \
passthrough=no
add action=mark-packet chain=prerouting comment="MSN Messenger " disabled=no \
in-interface=ether5 layer7-protocol=msnmessenger new-packet-mark=msn_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
msnmessenger new-packet-mark=msn_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="MUTE - P2P filesharing " \
disabled=no in-interface=ether5 layer7-protocol=mute new-packet-mark=\
mute_p2p_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=mute \
new-packet-mark=mute_p2p_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="Napster - P2P filesharing" \
disabled=no in-interface=ether5 layer7-protocol=napster new-packet-mark=\
napster_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=napster \
new-packet-mark=napster_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"NetBIOS - Network Basic Input Output System" disabled=no in-interface=\
ether5 layer7-protocol=netbios new-packet-mark=netbios_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=netbios \
new-packet-mark=netbios_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"NNTP - Network News Transfer Protocol " disabled=no in-interface=ether5 \
layer7-protocol=nntp new-packet-mark=nntp_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=nntp \
new-packet-mark=nntp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"SNTP - (Simple) Network Time Protocol " disabled=no in-interface=ether5 \
layer7-protocol=ntp new-packet-mark=ntp_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=ntp \
new-packet-mark=ntp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"Remote Administrator - remote desktop for MS Windows" disabled=no \
in-interface=ether5 layer7-protocol=radmin new-packet-mark=radmin_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=radmin \
new-packet-mark=radmin_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"Remote Desktop Protocol (used in Windows Terminal Services)" disabled=no \
in-interface=ether5 layer7-protocol=rdp new-packet-mark=rdp_in \
passthrough=yes
add action=mark-packet chain=postrouting disabled=no layer7-protocol=rdp \
new-packet-mark=rdp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"RTSP - Real Time Streaming Protocol " disabled=no in-interface=ether5 \
layer7-protocol=rtsp new-packet-mark=rtsp_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=rtsp \
new-packet-mark=rtsp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"SIP - Session Initiation Protocol - Internet telephony " disabled=no \
in-interface=ether5 layer7-protocol=sip new-packet-mark=sip_in \
passthrough=yes
add action=mark-packet chain=postrouting disabled=no layer7-protocol=sip \
new-packet-mark=sip_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"Skype to phone - UDP voice call " disabled=no in-interface=ether5 \
layer7-protocol=skypeout new-packet-mark=skypeout_in passthrough=no \
protocol=udp
add action=mark-packet chain=postrouting disabled=no layer7-protocol=skypeout \
new-packet-mark=skypeout_out out-interface=ether5 passthrough=no \
protocol=udp
add action=mark-packet chain=prerouting comment=\
"Skype to Skype - UDP voice call " disabled=no in-interface=ether5 \
layer7-protocol=skypetoskype new-packet-mark=skype2skype_in passthrough=\
yes protocol=udp
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
skypetoskype new-packet-mark=skype2skype_out out-interface=ether5 \
passthrough=no protocol=udp
add action=mark-packet chain=prerouting comment=\
"POP3 - Post Office Protocol version 3" disabled=no in-interface=ether5 \
layer7-protocol=pop3 new-packet-mark=pop3_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=pop3 \
new-packet-mark=pop3_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"SMTP - Simple Mail Transfer Protocol " disabled=no in-interface=ether5 \
layer7-protocol=smtp new-packet-mark=smtp_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=smtp \
new-packet-mark=smtp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"SNMP - Simple Network Management Protocol " disabled=no in-interface=\
ether5 layer7-protocol=snmp new-packet-mark=snmp_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=snmp \
new-packet-mark=snmp_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="Soulseek - P2P filesharing " \
disabled=no in-interface=ether5 layer7-protocol=soulseek new-packet-mark=\
soulsek_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=soulseek \
new-packet-mark=soulsek_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment="SSH - Secure SHell" \
disabled=no in-interface=ether5 layer7-protocol=ssh new-packet-mark=\
ssh_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=ssh \
new-packet-mark=ssh_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"SSL and TLS - Secure Socket Layer / Transport Layer Security " disabled=\
no in-interface=ether5 layer7-protocol=ssl new-packet-mark=ssl_in \
passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=ssl \
new-packet-mark=ssl_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=vnc disabled=no in-interface=\
ether5 layer7-protocol=vnc new-packet-mark=vnc_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=vnc \
new-packet-mark=vnc_out out-interface=ether5 passthrough=no
add action=mark-packet chain=prerouting comment=\
"TeamSpeak - VoIP application " disabled=no in-interface=ether5 \
layer7-protocol=teamspeak new-packet-mark=teamspeak_in passthrough=no
add action=mark-packet chain=postrouting disabled=no layer7-protocol=\
teamspeak new-packet-mark=teamspeak_out out-interface=ether5 passthrough=\
no
add action=mark-packet chain=prerouting comment=\
"Everything else that remains" disabled=no in-interface=ether5 \
new-packet-mark=remaining_in passthrough=no
add action=mark-packet chain=postrouting disabled=no new-packet-mark=\
remaining_out out-interface=ether5 passthrough=no
Code: Select all
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10M \
max-limit=11M name=DSL_IN packet-mark="" parent=global-in priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=100bao_p2p_in packet-mark=100bao_p2p_in parent=DSL_IN \
priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesanger_in packet-mark=aim_mesanger_in parent=\
DSL_IN priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesenger_web_in packet-mark=aim_mesenger_web_in \
parent=DSL_IN priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=applejuice_in packet-mark=applejuice_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ares_p2p_in packet-mark=ares_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=http_in packet-mark=http_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=1k name=bittorent_in packet-mark=bittorent_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=dhcp_in packet-mark=dhcp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DC_p2p_in packet-mark=DC_p2p_in parent=DSL_IN priority=7 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DNS_in packet-mark=DNS_in parent=DSL_IN priority=1 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=edonkey_p2p_in packet-mark=edonkey_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=fasttrack_p2p_in packet-mark=fasttrack_p2p_in parent=\
DSL_IN priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ftp_in packet-mark=ftp_in parent=DSL_IN priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnu_p2p_in packet-mark=gnu_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnutella_p2p_in packet-mark=gnutella_p2p_in parent=\
DSL_IN priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gobogy_p2p_in packet-mark=gobogy_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=h323_voiceoverip_in packet-mark=h323_voiceoverip_in \
parent=DSL_IN priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=httprtsp_in packet-mark=httprtsp_in parent=DSL_IN \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ident_in packet-mark=ident_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imap_in packet-mark=imap_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imesh_p2p_in packet-mark=imesh_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=irc_in packet-mark=irc_in parent=DSL_IN priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msnfile_in packet-mark=msnfile_in parent=DSL_IN \
priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=mute_p2p_in packet-mark=mute_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=napster_in packet-mark=napster_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=netbios_in packet-mark=netbios_in parent=DSL_IN \
priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=nntp_in packet-mark=nntp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=radmin_in packet-mark=radmin_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ntp_in packet-mark=ntp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rdp_in packet-mark=rdp_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rtsp_in packet-mark=rtsp_in parent=DSL_IN priority=6 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=sip_in packet-mark=sip_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skypeout_in packet-mark=skypeout_in parent=DSL_IN \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skype2skype_in packet-mark=skype2skype_in parent=DSL_IN \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=pop3_in packet-mark=pop3_in parent=DSL_IN priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=smtp_in packet-mark=smtp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=snmp_in packet-mark=snmp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=soulsek_in packet-mark=soulsek_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssh_in packet-mark=ssh_in parent=DSL_IN priority=3 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssl_in packet-mark=ssl_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=vnc_in packet-mark=vnc_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=teamspeak_in packet-mark=teamspeak_in parent=DSL_IN \
priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=500k \
max-limit=600k name=DSL_OUT packet-mark="" parent=global-in priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=100bao_p2p_out packet-mark=100bao_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesanger_out packet-mark=aim_mesanger_out parent=\
DSL_OUT priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesenger_web_out packet-mark=aim_mesenger_web_out \
parent=DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ares_p2p_out packet-mark=ares_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=bgp_routing_out packet-mark=bgp_routing_out parent=\
DSL_OUT priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=1k name=bittorent_out packet-mark=bittorent_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=dhcp_out packet-mark=dhcp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DC_p2p_out packet-mark=DC_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DNS_out packet-mark=DNS_out parent=DSL_OUT priority=1 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=edonkey_p2p_out packet-mark=edonkey_p2p_out parent=\
DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=fasttrack_p2p_out packet-mark=fasttrack_p2p_out parent=\
DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ftp_out packet-mark=ftp_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnu_p2p_out packet-mark=gnu_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnutella_p2p_out packet-mark=gnutella_p2p_out parent=\
DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gobogy_p2p_out packet-mark=gobogy_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=h323_voiceoverip_out packet-mark=h323_voiceoverip_out \
parent=DSL_OUT priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=httprtsp_out packet-mark=httprtsp_out parent=DSL_OUT \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=http_out packet-mark=http_out parent=DSL_OUT priority=3 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ident_out packet-mark=ident_out parent=DSL_OUT priority=\
2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imap_out packet-mark=imap_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imesh_p2p_out packet-mark=imesh_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=irc_out packet-mark=irc_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=koogo_out packet-mark=koogo_out parent=DSL_OUT priority=\
7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msnfile_out packet-mark=msnfile_out parent=DSL_OUT \
priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msn_out packet-mark=msn_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=mute_p2p_out packet-mark=mute_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=napster_out packet-mark=napster_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=netbios_out packet-mark=netbios_out parent=DSL_OUT \
priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=nntp_out packet-mark=nntp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ntp_out packet-mark=ntp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=radmin_out packet-mark=radmin_out parent=DSL_OUT \
priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rdp_out packet-mark=rdp_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rtsp_out packet-mark=rtsp_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=sip_out packet-mark=sip_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skypeout_out packet-mark=skypeout_out parent=DSL_OUT \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skype2skype_out packet-mark=skype2skype_out parent=\
DSL_OUT priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=pop3_out packet-mark=pop3_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=smtp_out packet-mark=smtp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=snmp_out packet-mark=snmp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=soulsek_out packet-mark=soulsek_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssh_out packet-mark=ssh_out parent=DSL_OUT priority=3 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssl_out packet-mark=ssl_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=vnc_out packet-mark=vnc_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=teamspeak_out packet-mark=teamspeak_out parent=DSL_OUT \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=applejuice_out packet-mark=applejuice_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msn_in packet-mark=msn_in parent=DSL_IN priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=remaining_in packet-mark=remaining_in parent=DSL_IN \
priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=remaining_out packet-mark=remaining_out parent=DSL_OUT \
priority=6 queue=default