RouterOS Mangle 問題

請有了解的大大幫我看一下紅字的nas-down何為吃不到 XD
我想mark從192.168.88.100的NAS有Download行為 mark 為nas-down,
好像都會變成pck-general-down,可以給我一些意見嗎?

ip > firewall > mangle

add action=mark-packet chain=postrouting disabled=no new-packet-mark=ack-up out-interface=ether1-gateway dst-port=80,443,23 packet-size=0-123 passthrough=no protocol=tcp tcp-flags=ack

add action=mark-packet chain=postrouting disabled=no new-packet-mark=syn-up out-interface=ether1-gateway dst-port=80,443,23 packet-size=0-666 passthrough=no protocol=tcp tcp-flags=syn

add action=mark-packet chain=postrouting disabled=no new-packet-mark=udp-up out-interface=ether1-gateway dst-port=53,123 passthrough=no protocol=udp

add action=mark-packet chain=postrouting disabled=no new-packet-mark=icmp-up out-interface=ether1-gateway passthrough=no protocol=icmp

add action=mark-packet chain=postrouting disabled=no new-packet-mark=tcp-game-up out-interface=ether1dst-port=1119,1120,2099,3724,4000,5222,5223,6112,6113,6114 passthrough=no protocol=tcp

add action=mark-packet chain=postrouting disabled=no new-packet-mark=udp-game-up out-interface=ether1-gateway dst-port=1119,1120,3724,5000-5200 passthrough=no p

add action=mark-packet chain=postrouting disabled=no new-packet-mark=nas-up out-interface=ether1-gateway passthrough=no src-address=192.168.88.100

add action=mark-packet chain=postrouting disabled=no new-packet-mark=p2p-up out-interface=ether1-gateway p2p=all-p2p passthrough=no

add action=mark-packet chain=postrouting disabled=no new-packet-mark=pck-small-up out-interface=ether1-gateway dst-port=80,443,23 p2p=!all-p2p packet-size=0-512 protocol=tcp

add action=mark-packet chain=postrouting disabled=no new-packet-mark=pck-general-up out-interface=ether1-gateway p2p=!all-p2p passthrough=no

--------------------------------------------------------------------------------------------

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=ack-down packet-size=0-123 passthrough=no protocol=tcp src-port=tcp-flags=ack

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=syn-down packet-size=0-666 passthrough=no protocol=tcp src-port=tcp-flags=syn

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=udp-down passthrough=no protocol=udp src-port=53,123

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=icmp-down passthrough=no protocol=icmp

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=tcp-game-down passthrough=no protocol=tcp src-port=1119,1120,2099,3724,4000,5222,5223,6112,6113,6114

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=udp-game-down passthrough=no protocol=udp src-port=1119,1120,372

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=nas-down dst-address=192.168.88.100 passthrough=no

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=p2p-down p2p=all-p2p passthrough=no

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=pck-small-down p2p=!all-p2p packet-size=0-512 passthrough=no protocol=tcp src-port=80,443,23

add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=pck-general-down p2p=!all-p2p passthrough=no





2011-05-12 23:43 發佈

valsily wrote:
RouterOS的m...(恕刪)


我想因該沒有要先mark conn,再mark package 這回事..
我記得原先只有mark package,之後某個版本後,才有可以mark connection,
而且我現在也只有紅字的部分沒有吃到mark而已,其他的都正常...
etoanik wrote:
我想因該沒有要先ma...(恕刪)



add action=mark-packet chain=prerouting disabled=no in-interface=ether1-gateway new-packet-mark=nas-down dst-address=192.168.88.100 passthrough=no


把chain=prerouting
改成chain=forward 試試
應該是prerouting階段還沒還原nat到local address,所以mark不到該address的packet。 樓上說的沒錯,應該改用forward階段就可以了。
etoanik wrote:
請有了解的大大幫我看...(恕刪)


這沒對Linux link OS 有研究的話, 似乎比較困難?

沒記錯的話,Router OS 應該是基於Free BSD 的基礎發展而來?

若是Web 的設定可以簡單一點,應該是不錯的選擇, 可惜越是開放的OS ,使用的簡單性,似乎沒這摸簡單?光這些CLI 就把我給嚇跑了?
RouterOS建構在開放的FreeBSD,但是本身卻不開放,是100%商業軟體。 接觸ROS之後發現這類的OS小問題不少,bug似乎修改不完。透過論壇才知道全世界的用戶千奇百怪,什麼樣的組態都有(譬如南非的ADSL還有分國內專用和國外專用,要用Dual WAN還要區分開來),ROS功能強大且穩定性算是很不錯了。很難想像那些小廠,feedback少,問題肯定很多,只是我們沒遇到而已。

phuang3 wrote:
RouterOS建構...(恕刪)


RouterOS 哪時候 base on FreeBSD 了?
什麼是 MikroTik RouterOS?

MikroTik RouterOS 是路由作業系統,是基於 Linux 核心開發,
相容 x86 PC 的路由軟體,將普通 PC變為高性能路由器,
現在已移植到 MikroTik RouterBOARD 硬體平臺運行。


RouterOS這套軟體是東歐的小國家拉脫維亞(Latvijas Republika)MikroTik 公司所開發,
公司名稱是MikroTik(Mikrotikls SIA),
官方網站是(www.mikrotik.com/www.RouterOS.com)。

chiouss wrote:
RouterOS 哪...(恕刪)


抱歉,是我搞錯。 有一說是建構在ReactOS上。
內文搜尋
X
評分
評分
複製連結
Mobile01提醒您
您目前瀏覽的是行動版網頁
是否切換到電腦版網頁呢?