晚安囉~DSCP已更新,用Diffserv4比較恰當.--/ip firewall mangleadd action=change-mss chain=forward comment="Change MSS" new-mss=\clamp-to-pmtu protocol=tcp tcp-flags=synadd action=change-mss chain=output new-mss=clamp-to-pmtu protocol=tcp \tcp-flags=synadd action=mark-connection chain=postrouting comment=\"UDP-Port (VoIP / Zoom / Line) \A1\F7 Conn-Mark (EF) - TX" dst-port=\3478-3481,4500,5004,5060,8801-8810,16384-32767,19302-19309 \new-connection-mark="conn - EF" out-interface=pppoe-out1 protocol=udpadd action=mark-connection chain=postrouting comment=\"TCP-Port (Zoom) \A1\F7 Conn-Mark (EF) - TX" dst-port=8801-8810 \new-connection-mark="conn - EF" out-interface=pppoe-out1 protocol=tcpadd action=mark-connection chain=postrouting comment=\"UDP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - TX" dst-port=\7000-8000,10000-20019,27000-27100 new-connection-mark="conn - AF2x" \out-interface=pppoe-out1 protocol=udpadd action=mark-connection chain=postrouting comment=\"TCP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - TX" dst-port=\22102,27014-27050,30102 new-connection-mark="conn - AF2x" out-interface=\pppoe-out1 protocol=tcpadd action=mark-connection chain=postrouting comment=\"TCP-Port (HTTPS small packets) \A1\F7 Conn-Mark (AF2x) - TX" \connection-bytes=0-200000 dst-port=443 new-connection-mark="conn - AF2x" \out-interface=pppoe-out1 protocol=tcpadd action=mark-connection chain=postrouting comment=\"TCP-Port (BitTorrent) \A1\F7 Conn-Mark (CS1) - TX" dst-port=\6881-6889,17500 new-connection-mark="conn - CS1" out-interface=pppoe-out1 \protocol=udpadd action=mark-connection chain=postrouting comment=\"TCP-Port (iCloud / Background / BitTorrent) \A1\F7 Conn-Mark (CS1) - TX" \dst-port=1935,5223,5228,5000-6000,6881-6889,17500 new-connection-mark=\"conn - CS1" out-interface=pppoe-out1 protocol=tcpadd action=mark-connection chain=postrouting comment="TCP-Port (Speedtest / Do\T / HTTPs / DoH / HTTP) \A1\F7 Conn-Mark (BE) - TX" dst-port=\8080,853,443,80 new-connection-mark="conn - BE" out-interface=pppoe-out1 \protocol=tcpadd action=mark-connection chain=prerouting comment=\"UDP-Port (VoIP / Zoom / Line) \A1\F7 Conn-Mark (EF) - RX" in-interface=\pppoe-out1 new-connection-mark="conn - EF" protocol=udp src-port=\3478-3481,4500,5004,5060,8801-8810,16384-32767,19302-19309add action=mark-connection chain=prerouting comment=\"TCP-Port (Zoom) \A1\F7 Conn-Mark (EF) - RX" in-interface=pppoe-out1 \new-connection-mark="conn - EF" protocol=tcp src-port=8801-8810add action=mark-connection chain=prerouting comment=\"UDP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - RX" in-interface=pppoe-out1 \new-connection-mark="conn - AF2x" protocol=udp src-port=\7000-8000,10000-20019,27000-27100add action=mark-connection chain=prerouting comment=\"TCP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - RX" in-interface=pppoe-out1 \new-connection-mark="conn - AF2x" protocol=tcp src-port=\22102,27014-27050,30102add action=mark-connection chain=prerouting comment=\"TCP-Port (HTTPS small packets) \A1\F7 Conn-Mark (AF2x) - RX" \connection-bytes=0-200000 in-interface=pppoe-out1 new-connection-mark=\"conn - AF2x" protocol=udp src-port=443add action=mark-connection chain=prerouting comment=\"TCP-Port (BitTorrent) \A1\F7 Conn-Mark (CS1) - RX" in-interface=\pppoe-out1 new-connection-mark="conn - CS1" protocol=udp src-port=\6881-6889,17500add action=mark-connection chain=prerouting comment=\"TCP-Port (iCloud / Background / BitTorrent) \A1\F7 Conn-Mark (CS1) - RX" \in-interface=pppoe-out1 new-connection-mark="conn - CS1" protocol=tcp \src-port=1935,5223,5228,5000-6000,6881-6889,17500add action=mark-connection chain=prerouting comment="TCP-Port (Speedtest / DoT\\_/ HTTPs / DoH / HTTP) \A1\F7 Conn-Mark (BE) - RX" in-interface=\pppoe-out1 new-connection-mark="conn - BE" protocol=tcp src-port=\8080,853,443,80add action=mark-packet chain=prerouting comment=\"Conn-Mark (EF) \A1\F7 Packet-Mark (EF) / DSCP (46) - RX" \connection-mark="conn - EF" dscp=46 new-packet-mark="EF "add action=mark-packet chain=prerouting comment=\"Conn-Mark (AF2x) \A1\F7 Packet-Mark (AF2x) / DSCP (18) - RX" \connection-mark="conn - AF2x" dscp=18 new-packet-mark=AF2xadd action=mark-packet chain=prerouting comment=\"Conn-Mark (CS1) \A1\F7 Packet-Mark (CS1) / DSCP (8) - RX" \connection-mark="conn - CS1" dscp=8 new-packet-mark=CS1add action=mark-packet chain=prerouting comment=\"Conn-Mark (BE) \A1\F7 Packet-Mark (BE) / DSCP (0) - RX" connection-mark=\"conn - BE" dscp=0 new-packet-mark=BEadd action=mark-packet chain=postrouting comment=\"Conn-Mark (EF) \A1\F7 Packet-Mark (EF) / DSCP (46) - TX" \connection-mark="conn - EF" dscp=46 new-packet-mark="EF "add action=mark-packet chain=postrouting comment=\"Conn-Mark (AF2x) \A1\F7 Packet-Mark (AF2x) / DSCP (18) - TX" \connection-mark="conn - AF2x" dscp=18 new-packet-mark=AF2xadd action=mark-packet chain=postrouting comment=\"Conn-Mark (CS1) \A1\F7 Packet-Mark (CS1) / DSCP (8) - TX" \connection-mark="conn - CS1" dscp=8 new-packet-mark=CS1add action=mark-packet chain=postrouting comment=\"Conn-Mark (BE) \A1\F7 Packet-Mark (BE) / DSCP (0) - TX" connection-mark=\"conn - BE" dscp=0 new-packet-mark=BEadd action=change-dscp chain=prerouting comment=\"Pack-Mark (EF) \A1\F7 DSCP (46) - RX" connection-mark="conn - EF" \in-interface=pppoe-out1 new-dscp=46add action=change-dscp chain=prerouting comment=\"Pack-Mark (AF2x) \A1\F7 DSCP (18) - RX" connection-mark="conn - AF2x" \in-interface=pppoe-out1 new-dscp=18add action=change-dscp chain=prerouting comment=\"Pack-Mark (CS1) \A1\F7 DSCP (8) - RX" connection-mark="conn - CS1" \in-interface=pppoe-out1 new-dscp=8add action=change-dscp chain=prerouting comment=\"Pack-Mark (BE) \A1\F7 DSCP (0) - RX" connection-mark="conn - BE" \in-interface=pppoe-out1 new-dscp=0add action=change-dscp chain=prerouting comment="Reset DSCP IPv4 from WAN" \in-interface=pppoe-out1 new-dscp=0add action=change-dscp chain=postrouting comment=\"Pack-Mark (EF) \A1\F7 DSCP (46) - TX" connection-mark="conn - EF" \new-dscp=46 out-interface=pppoe-out1add action=change-dscp chain=postrouting comment=\"Pack-Mark (AF2x) \A1\F7 DSCP (18) - TX" connection-mark="conn - AF2x" \new-dscp=18 out-interface=pppoe-out1add action=change-dscp chain=postrouting comment=\"Pack-Mark (CS1) \A1\F7 DSCP (8) - TX" connection-mark="conn - CS1" \new-dscp=8 out-interface=pppoe-out1add action=change-dscp chain=postrouting comment=\"Pack-Mark (BE) \A1\F7 DSCP (0) - TX" connection-mark="conn - BE" \new-dscp=0 out-interface=pppoe-out1add action=change-dscp chain=postrouting comment=\"Reset any undefined DSCP IPv4" new-dscp=0 out-interface=pppoe-out1/queue typeadd cake-diffserv=diffserv4 cake-flowmode=dual-dsthost cake-nat=yes \cake-overhead=18 kind=cake name=cake-rxadd cake-ack-filter=filter cake-diffserv=diffserv4 cake-flowmode=dual-srchost \cake-nat=yes cake-overhead=18 kind=cake name=cake-tx/queue simpleadd max-limit=100M/40M name=cake queue=cake-rx/cake-tx target=pppoe-out1/ip firewall natadd action=redirect chain=dstnat comment="Redirect DNS queries to router" \dst-port=53 protocol=tcpadd action=redirect chain=dstnat dst-port=53 protocol=udp