Sie sind auf Seite 1von 4

/ip

/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip
/ip

firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall
firewall

layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol
layer7-protocol

add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add
add

name="EXE" regexp="\\.(exe)"
name="RAR" regexp="\\.(rar)"
name="ZIP" regexp="\\.(zip)"
name="7z" regexp="\\.(7z)"
name="CAB" regexp="\\.(cab)"
name="ASF" regexp="\\.(asf)"
name="MOV" regexp="\\.(mov)"
name="WMV" regexp="\\.(wmv)"
name="MPG" regexp="\\.(mpg)"
name="MPEG" regexp="\\.(mpeg)"
name="MKV" regexp="\\.(mkv)"
name="AVI" regexp="\\.(avi)"
name="FLV" regexp="\\.(flv)"
name="WAV" regexp="\\.(wav)"
name="RM" regexp="\\.(rm)"
name="MP3" regexp="\\.(mp3)"
name="MP4" regexp="\\.(mp4)"
name="RAM" regexp="\\.(ram)"
name="RMVB" regexp="\\.(rmvb)"
name="DAT" regexp="\\.(dat)"
name="DAA" regexp="\\.(daa)"
name="ISO" regexp="\\.(iso)"
name="NRG" regexp="\\.(nrg)"
name="BIN" regexp="\\.(bin)"
name="VCD" regexp="\\.(vcd)"

=========================
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="EXE MARK PACKET " disabled=no layer7-protocol=EXE newpacket-mark=EXE passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="RAR MARK PACKET " disabled=no layer7-protocol=RAR newpacket-mark=RAR passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="ZIP MARK PACKET " disabled=no layer7-protocol=ZIP newpacket-mark=ZIP passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="7z MARK PACKET " disabled=no layer7-protocol=7z new-pa
cket-mark=7z passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="CAB MARK PACKET " disabled=no layer7-protocol=CAB newpacket-mark=CAB passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="ASF MARK PACKET " disabled=no layer7-protocol=ASF newpacket-mark=ASF passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="MOV MARK PACKET " disabled=no layer7-protocol=MOV newpacket-mark=MOV passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="WMV MARK PACKET " disabled=no layer7-protocol=WMV newpacket-mark=WMV passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="MPG MARK PACKET " disabled=no layer7-protocol=MPG newpacket-mark=MPG passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="MPEG MARK PACKET " disabled=no layer7-protocol=MPEG ne
w-packet-mark=MPEG passthrough=no
/ip firewall mangle add action=mark-packet \

chain=prerouting comment="MKV MARK PACKET " disabled=no layer7-protocol=MKV newpacket-mark=MKV passthrough=no


/ip firewall mangle add action=mark-packet \
chain=prerouting comment="AVI MARK PACKET " disabled=no layer7-protocol=AVI newpacket-mark=AVI passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="FLV MARK PACKET " disabled=no layer7-protocol=FLV newpacket-mark=FLV passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="WAV MARK PACKET " disabled=no layer7-protocol=WAV newpacket-mark=WAV passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="RM MARK PACKET " disabled=no layer7-protocol=RM new-pa
cket-mark=RM passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="MP3 MARK PACKET " disabled=no layer7-protocol=MP3 newpacket-mark=MP3 passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="MP4 MARK PACKET " disabled=no layer7-protocol=MP4 newpacket-mark=MP4 passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="RAM MARK PACKET " disabled=no layer7-protocol=RAM newpacket-mark=RAM passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="RMVB MARK PACKET " disabled=no layer7-protocol=RMVB ne
w-packet-mark=RMVB passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="DAT MARK PACKET " disabled=no layer7-protocol=DAT newpacket-mark=DAT passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="DAA MARK PACKET " disabled=no layer7-protocol=DAA newpacket-mark=DAA passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="ISO MARK PACKET " disabled=no layer7-protocol=ISO newpacket-mark=ISO passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="NRG MARK PACKET " disabled=no layer7-protocol=NRG newpacket-mark=NRG passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="BIN MARK PACKET " disabled=no layer7-protocol=BIN newpacket-mark=BIN passthrough=no
/ip firewall mangle add action=mark-packet \
chain=prerouting comment="VCD MARK PACKET " disabled=no layer7-protocol=VCD newpacket-mark=VCD passthrough=no
======================
/queue tree add name="LIMIT FILE EXTENTION" parent=global \
limit-at=0 priority=3 max-limit=1048576 burst-limit=0 burst-threshold=0 burst-ti
me=0s
/queue tree add name="7z" parent="LIMIT FILE EXTENTION" \
packet-mark=7z limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bur
st-threshold=0 burst-time=0s
/queue tree add name="ASF" parent="LIMIT FILE EXTENTION" \
packet-mark=ASF limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="AVI" parent="LIMIT FILE EXTENTION" \
packet-mark=AVI limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="BIN" parent="LIMIT FILE EXTENTION" \

packet-mark=BIN limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu


rst-threshold=0 burst-time=0s
/queue tree add name="CAB" parent="LIMIT FILE EXTENTION" \
packet-mark=CAB limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="DAA" parent="LIMIT FILE EXTENTION" \
packet-mark=DAA limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="DAT" parent="LIMIT FILE EXTENTION" \
packet-mark=DAT limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="EXE" parent="LIMIT FILE EXTENTION" \
packet-mark=EXE limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="FLV" parent="LIMIT FILE EXTENTION" \
packet-mark=FLV limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="ISO" parent="LIMIT FILE EXTENTION" \
packet-mark=ISO limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="MKV" parent="LIMIT FILE EXTENTION" \
packet-mark=MKV limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="MOV" parent="LIMIT FILE EXTENTION" \
packet-mark=MOV limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="MP3" parent="LIMIT FILE EXTENTION" \
packet-mark=MP3 limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="MP4" parent="LIMIT FILE EXTENTION" \
packet-mark=MP4 limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="MPEG" parent="LIMIT FILE EXTENTION" \
packet-mark=MPEG limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 b
urst-threshold=0 burst-time=0s
/queue tree add name="MPG" parent="LIMIT FILE EXTENTION" \
packet-mark=MPG limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="NRG" parent="LIMIT FILE EXTENTION" \
packet-mark=NRG limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="RAM" parent="LIMIT FILE EXTENTION" \
packet-mark=RAM limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="RAR" parent="LIMIT FILE EXTENTION" \
packet-mark=RAR limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="RM" parent="LIMIT FILE EXTENTION" \
packet-mark=RM limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bur
st-threshold=0 burst-time=0s
/queue tree add name="RMVB" parent="LIMIT FILE EXTENTION" \
packet-mark=RMVB limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 b
urst-threshold=0 burst-time=0s
/queue tree add name="VCD" parent="LIMIT FILE EXTENTION" \
packet-mark=VCD limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="WAV" parent="LIMIT FILE EXTENTION" \
packet-mark=WAV limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
rst-threshold=0 burst-time=0s
/queue tree add name="WMV" parent="LIMIT FILE EXTENTION" \

packet-mark=WMV
rst-threshold=0
/queue tree add
packet-mark=ZIP
rst-threshold=0

limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu


burst-time=0s
name="ZIP" parent="LIMIT FILE EXTENTION" \
limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 bu
burst-time=0s

Das könnte Ihnen auch gefallen