晚點去編diffserv8,撇去連線標記的部分,整體可以縮短很多行.
建議這一定要做,因為封包才不會被ISP跳路由,比方NextDNS主機永遠連台北.
至於TLS-Host的部分,我先暫停,先把Diffserv8的DSCP弄出再搞.
NeverGiveUp!! wrote:/ip firewall mangle
完成了測試!剩下的T...(恕刪)
add action=mark-connection chain=postrouting comment=\
"UDP-Port (VoIP / Zoom / Line) \A1\F7 Conn-Mark (EF) - TX" dst-port=\
3478,3479,5060-5061,8801-8810 new-connection-mark="conn - EF" \
out-interface=pppoe-out1 protocol=udp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (Zoom) \A1\F7 Conn-Mark (EF) - TX" dst-port=8801-8810 \
new-connection-mark="conn - EF" out-interface=pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"UDP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - TX" dst-port=27000-27200 \
new-connection-mark="conn - AF2x" out-interface=pppoe-out1 protocol=udp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - TX" dst-port=27014-27050 \
new-connection-mark="conn - AF2x" out-interface=pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (HTTPS small packets) \A1\F7 Conn-Mark (AF2x) - TX" \
connection-bytes=0-200000 dst-port=443 new-connection-mark="conn - AF2x" \
out-interface=pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (BitTorrent) \A1\F7 Conn-Mark (CS1) - TX" dst-port=6881-6999 \
new-connection-mark="conn - CS1" out-interface=pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (iCloud / Background) \A1\F7 Conn-Mark (CS1) - TX" dst-port=\
5223,5228,5000-6000 new-connection-mark="conn - CS1" out-interface=\
pppoe-out1 protocol=tcp
add action=mark-connection chain=postrouting comment=\
"TCP-Port (Http / Https / DoH) \A1\F7 Conn-Mark (BE) - TX" dst-port=\
80,443 new-connection-mark="conn - BE" out-interface=pppoe-out1 protocol=\
tcp
add action=mark-connection chain=prerouting comment=\
"UDP-Port (VoIP / Zoom / Line) \A1\F7 Conn-Mark (EF) - RX" in-interface=\
pppoe-out1 new-connection-mark="conn - EF" protocol=udp src-port=\
3478,3479,5060-5061,8801-8810
add action=mark-connection chain=prerouting comment=\
"TCP-Port (Zoom) \A1\F7 Conn-Mark (EF) - RX" in-interface=pppoe-out1 \
new-connection-mark="conn - EF" protocol=tcp src-port=8801-8810
add action=mark-connection chain=prerouting comment=\
"UDP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - RX" in-interface=pppoe-out1 \
new-connection-mark="conn - AF2x" protocol=udp src-port=27000-27200
add action=mark-connection chain=prerouting comment=\
"TCP-Port (Steam) \A1\F7 Conn-Mark (AF2x) - RX" in-interface=pppoe-out1 \
new-connection-mark="conn - AF2x" protocol=tcp src-port=27014-27050
add action=mark-connection chain=prerouting comment=\
"TCP-Port (HTTPS small packets) \A1\F7 Conn-Mark (AF2x) - RX" \
connection-bytes=0-200000 in-interface=pppoe-out1 new-connection-mark=\
"conn - AF2x" protocol=udp src-port=443
add action=mark-connection chain=prerouting comment=\
"TCP-Port (BitTorrent) \A1\F7 Conn-Mark (CS1) - RX" in-interface=\
pppoe-out1 new-connection-mark="conn - CS1" protocol=tcp src-port=\
6881-6999
add action=mark-connection chain=prerouting comment=\
"TCP-Port (iCloud / Background) \A1\F7 Conn-Mark (CS1) - RX" \
in-interface=pppoe-out1 new-connection-mark="conn - CS1" protocol=tcp \
src-port=5223,5228,5000-6000
add action=mark-connection chain=prerouting comment=\
"TCP-Port (Http / Https / DoH) \A1\F7 Conn-Mark (BE) - RX" in-interface=\
pppoe-out1 new-connection-mark="conn - BE" protocol=tcp src-port=80,443
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (EF) \A1\F7 Packet-Mark (EF) / DSCP (46) - RX" \
connection-mark="conn - EF" dscp=46 new-packet-mark="EF "
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (AF2x) \A1\F7 Packet-Mark (AF2x) / DSCP (18) - RX" \
connection-mark="conn - AF2x" dscp=18 new-packet-mark=AF2x
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (CS1) \A1\F7 Packet-Mark (CS1) / DSCP (8) - RX" \
connection-mark="conn - CS1" dscp=8 new-packet-mark=CS1
add action=mark-packet chain=prerouting comment=\
"Conn-Mark (BE) \A1\F7 Packet-Mark (BE) / DSCP (0) - RX" connection-mark=\
"conn - BE" dscp=0 new-packet-mark=BE
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (EF) \A1\F7 Packet-Mark (EF) / DSCP (46) - TX" \
connection-mark="conn - EF" dscp=46 new-packet-mark="EF "
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (AF2x) \A1\F7 Packet-Mark (AF2x) / DSCP (18) - TX" \
connection-mark="conn - AF2x" dscp=18 new-packet-mark=AF2x
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (CS1) \A1\F7 Packet-Mark (CS1) / DSCP (8) - TX" \
connection-mark="conn - CS1" dscp=8 new-packet-mark=CS1
add action=mark-packet chain=postrouting comment=\
"Conn-Mark (BE) \A1\F7 Packet-Mark (BE) / DSCP (0) - TX" connection-mark=\
"conn - BE" dscp=0 new-packet-mark=BE
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (EF) \A1\F7 DSCP (46) - RX" connection-mark="conn - EF" \
in-interface=pppoe-out1 new-dscp=46
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (AF2x) \A1\F7 DSCP (18) - RX" connection-mark="conn - AF2x" \
in-interface=pppoe-out1 new-dscp=18
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (CS1) \A1\F7 DSCP (8) - RX" connection-mark="conn - CS1" \
in-interface=pppoe-out1 new-dscp=8
add action=change-dscp chain=prerouting comment=\
"Pack-Mark (BE) \A1\F7 DSCP (0) - RX" connection-mark="conn - BE" \
in-interface=pppoe-out1 new-dscp=0
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (EF) \A1\F7 DSCP (46) - TX" connection-mark="conn - EF" \
new-dscp=46 out-interface=pppoe-out1
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (AF2x) \A1\F7 DSCP (18) - TX" connection-mark="conn - AF2x" \
new-dscp=18 out-interface=pppoe-out1
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (CS1) \A1\F7 DSCP (8) - TX" connection-mark="conn - CS1" \
new-dscp=8 out-interface=pppoe-out1
add action=change-dscp chain=postrouting comment=\
"Pack-Mark (BE) \A1\F7 DSCP (0) - TX" connection-mark="conn - BE" \
new-dscp=0 out-interface=pppoe-out1
/queue type
add cake-diffserv=diffserv4 cake-flowmode=dual-dsthost cake-nat=yes \
cake-overhead=18 kind=cake name=cake-rx
add cake-ack-filter=filter cake-diffserv=diffserv4 cake-flowmode=dual-srchost \
cake-nat=yes cake-overhead=18 kind=cake name=cake-tx
/queue simple
add max-limit=100M/40M name=cake queue=cake-rx/cake-tx target=pppoe-out1



























































































