
--
/ip firewall mangle
add action=change-mss chain=forward comment="Change MSS" new-mss=\
clamp-to-pmtu protocol=tcp tcp-flags=syn
add action=change-mss chain=output new-mss=clamp-to-pmtu protocol=tcp \
tcp-flags=syn
add action=mark-connection chain=postrouting comment=\
"UDP-Port (VoIP / Zoom / Line) \A1\F7 Conn-Mark (EF) - TX" dst-port=\
3478-3481,4500,5004,5060,8801-8810,16384-32767,19302-19309 \
new-connection-mark="conn - EF" out-interface=pppoe-out1 protocol=udp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (Zoom) \A1\F7 Conn-Mark (EF) - TX" dst-port=8801-8810 \
new-connection-mark="conn - EF" out-interface=pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"UDP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - TX" dst-port=\
7000-8000,10000-20019,27000-27100 new-connection-mark="conn - AF2x" \
out-interface=pppoe-out1 protocol=udp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - TX" dst-port=\
22102,27014-27050,30102 new-connection-mark="conn - AF2x" out-interface=\
pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (HTTPS small packets) \A1\F7 Conn-Mark (AF2x) - TX" \
connection-bytes=0-200000 dst-port=443 new-connection-mark="conn - AF2x" \
out-interface=pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (BitTorrent) \A1\F7 Conn-Mark (CS1) - TX" dst-port=\
6881-6889,17500 new-connection-mark="conn - CS1" out-interface=pppoe-out1 \
protocol=udp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (iCloud / Background / BitTorrent) \A1\F7 Conn-Mark (CS1) - TX" \
dst-port=1935,5223,5228,5000-6000,6881-6889,17500 new-connection-mark=\
"conn - CS1" out-interface=pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment="TCP-Port (Speedtest / Do\
T / HTTPs / DoH / HTTP) \A1\F7 Conn-Mark (BE) - TX" dst-port=\
8080,853,443,80 new-connection-mark="conn - BE" out-interface=pppoe-out1 \
protocol=tcp
add action=mark-connection chain=prerouting comment=\
"UDP-Port (VoIP / Zoom / Line) \A1\F7 Conn-Mark (EF) - RX" in-interface=\
pppoe-out1 new-connection-mark="conn - EF" protocol=udp src-port=\
3478-3481,4500,5004,5060,8801-8810,16384-32767,19302-19309
add action=mark-connection chain=prerouting comment=\
"TCP-Port (Zoom) \A1\F7 Conn-Mark (EF) - RX" in-interface=pppoe-out1 \
new-connection-mark="conn - EF" protocol=tcp src-port=8801-8810
add action=mark-connection chain=prerouting comment=\
"UDP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - RX" in-interface=pppoe-out1 \
new-connection-mark="conn - AF2x" protocol=udp src-port=\
7000-8000,10000-20019,27000-27100
add action=mark-connection chain=prerouting comment=\
"TCP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - RX" in-interface=pppoe-out1 \
new-connection-mark="conn - AF2x" protocol=tcp src-port=\
22102,27014-27050,30102
add action=mark-connection chain=prerouting comment=\
"TCP-Port (HTTPS small packets) \A1\F7 Conn-Mark (AF2x) - RX" \
connection-bytes=0-200000 in-interface=pppoe-out1 new-connection-mark=\
"conn - AF2x" protocol=udp src-port=443
add action=mark-connection chain=prerouting comment=\
"TCP-Port (BitTorrent) \A1\F7 Conn-Mark (CS1) - RX" in-interface=\
pppoe-out1 new-connection-mark="conn - CS1" protocol=udp src-port=\
6881-6889,17500
add action=mark-connection chain=prerouting comment=\
"TCP-Port (iCloud / Background / BitTorrent) \A1\F7 Conn-Mark (CS1) - RX" \
in-interface=pppoe-out1 new-connection-mark="conn - CS1" protocol=tcp \
src-port=1935,5223,5228,5000-6000,6881-6889,17500
add action=mark-connection chain=prerouting comment="TCP-Port (Speedtest / DoT\
\_/ HTTPs / DoH / HTTP) \A1\F7 Conn-Mark (BE) - RX" in-interface=\
pppoe-out1 new-connection-mark="conn - BE" protocol=tcp src-port=\
8080,853,443,80
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (EF) \A1\F7 Packet-Mark (EF) / DSCP (46) - RX" \
connection-mark="conn - EF" dscp=46 new-packet-mark="EF "
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (AF2x) \A1\F7 Packet-Mark (AF2x) / DSCP (18) - RX" \
connection-mark="conn - AF2x" dscp=18 new-packet-mark=AF2x
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (CS1) \A1\F7 Packet-Mark (CS1) / DSCP (8) - RX" \
connection-mark="conn - CS1" dscp=8 new-packet-mark=CS1
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (BE) \A1\F7 Packet-Mark (BE) / DSCP (0) - RX" connection-mark=\
"conn - BE" dscp=0 new-packet-mark=BE
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (EF) \A1\F7 Packet-Mark (EF) / DSCP (46) - TX" \
connection-mark="conn - EF" dscp=46 new-packet-mark="EF "
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (AF2x) \A1\F7 Packet-Mark (AF2x) / DSCP (18) - TX" \
connection-mark="conn - AF2x" dscp=18 new-packet-mark=AF2x
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (CS1) \A1\F7 Packet-Mark (CS1) / DSCP (8) - TX" \
connection-mark="conn - CS1" dscp=8 new-packet-mark=CS1
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (BE) \A1\F7 Packet-Mark (BE) / DSCP (0) - TX" connection-mark=\
"conn - BE" dscp=0 new-packet-mark=BE
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (EF) \A1\F7 DSCP (46) - RX" connection-mark="conn - EF" \
in-interface=pppoe-out1 new-dscp=46
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (AF2x) \A1\F7 DSCP (18) - RX" connection-mark="conn - AF2x" \
in-interface=pppoe-out1 new-dscp=18
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (CS1) \A1\F7 DSCP (8) - RX" connection-mark="conn - CS1" \
in-interface=pppoe-out1 new-dscp=8
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (BE) \A1\F7 DSCP (0) - RX" connection-mark="conn - BE" \
in-interface=pppoe-out1 new-dscp=0
add action=change-dscp chain=prerouting comment="Reset DSCP IPv4 from WAN" \
in-interface=pppoe-out1 new-dscp=0
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (EF) \A1\F7 DSCP (46) - TX" connection-mark="conn - EF" \
new-dscp=46 out-interface=pppoe-out1
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (AF2x) \A1\F7 DSCP (18) - TX" connection-mark="conn - AF2x" \
new-dscp=18 out-interface=pppoe-out1
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (CS1) \A1\F7 DSCP (8) - TX" connection-mark="conn - CS1" \
new-dscp=8 out-interface=pppoe-out1
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (BE) \A1\F7 DSCP (0) - TX" connection-mark="conn - BE" \
new-dscp=0 out-interface=pppoe-out1
add action=change-dscp chain=postrouting comment=\
"Reset any undefined DSCP IPv4" new-dscp=0 out-interface=pppoe-out1
/queue type
add cake-diffserv=diffserv4 cake-flowmode=dual-dsthost cake-nat=yes \
cake-overhead=18 kind=cake name=cake-rx
add cake-ack-filter=filter cake-diffserv=diffserv4 cake-flowmode=dual-srchost \
cake-nat=yes cake-overhead=18 kind=cake name=cake-tx
/queue simple
add max-limit=100M/40M name=cake queue=cake-rx/cake-tx target=pppoe-out1
/ip firewall nat
add action=redirect chain=dstnat comment="Redirect DNS queries to router" \
dst-port=53 protocol=tcp
add action=redirect chain=dstnat dst-port=53 protocol=udp
人品是做人最好的底牌.


Slipknot - Unsainted [OFFICIAL VIDEO]






























































































