Firewall Mkt12

VERSÃO 2.*** / ip firewall nat add chain=dstnat in-interface=REDE protocol=tcp dst-port=80 action=dst-nat to-ad dresses=200.198.100.202 dresses=200.198.100.20 2 to-ports=5128 \ comment="NAT - Proxy" disabled=no / ip firewall mangle add chain=postrouting protocol=tcp src-port=5128 tos=48 action=mark-connection n ew-connection-mark=n-cache ew-connection-mark=n-c ache passthrough=yes disabled=no add chain=postrouting protocol=tcp src-port=5128 tos=!48 action=mark-connection new-connection-mark=s-cache new-connection-mark=scache passthrough=yes disabled=no add chain=postrouting connection-mark=n-cache action=mark-packet new-packet-mark =pacotes_cache passthrough=no disabled=no / queue type add name="cache-proxy" kind=pcq pcq-rate=4800000 pcq-limit=50 pcq-classifier=dst -address pcq-total-limit=2000 / queue tree add name="CACHE-FULL" parent=global-out packet-mark=pacotes_cache limit-at=0 que ue=cache-proxy priority=8 max-limit=0 \ burst-limit=0 burst-threshold=0 burst-time=0s disabled=no

VERSÃO 3.***

/ip firewall mangle add action=mark-connection chain=postrouting comment="" disabled=no dscp=12 \ new-connection-mark=n-cache new-connection-mark=ncache passthrough=yes protocol=tcp src-port=5128 add action=mark-connection chain=postrouting comment="" disabled=no dscp=!12 \ new-connection-mark=s-cache new-connection-mark=scache passthrough=yes protocol=tcp src-port=5128 add action=mark-packet chain=postrouting comment="Libera cache full" \ connection-mark=n-cache connection-mark=n-cach e disabled=no new-packet-mark=pacote new-packet-mark=pacotes_cache s_cache \   passthrough=no /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-lim it=4000000 name=CACHE-FULL \ packet-mark=pacotes_squid packet-mark=pacotes_sq uid parent=global-out priority=8 queue=cache /queue type add name="cache" kind=pcq pcq-rate=4800000 pcq-limit=50 pcq-classifier=dst-addr pcq-classifier=dst-addre e ss pcq-total-limit=2000 VERSÃO 2.***

/ ip firewall nat add chain=dstnat in-interface=REDE protocol=tcp dst-port=80 action=dst-nat to-ad dresses=200.198.100.202 to-ports=5128 \ comment="NAT - Proxy" disabled=no / ip firewall mangle add chain=postrouting protocol=tcp src-port=5128 tos=48 action=mark-connection n ew-connection-mark=n-cache passthrough=yes disabled=no add chain=postrouting protocol=tcp src-port=5128 tos=!48 action=mark-connection new-connection-mark=s-cache passthrough=yes disabled=no add chain=postrouting connection-mark=n-cache action=mark-packet new-packet-mark =pacotes_cache passthrough=no disabled=no / queue type add name="cache-proxy" kind=pcq pcq-rate=4800000 pcq-limit=50 pcq-classifier=dst -address pcq-total-limit=2000 / queue tree add name="CACHE-FULL" parent=global-out packet-mark=pacotes_cache limit-at=0 que ue=cache-proxy priority=8 max-limit=0 \ burst-limit=0 burst-threshold=0 burst-time=0s disabled=no

VERSÃO 3.***

/ip firewall mangle add action=mark-connection chain=postrouting comment="" disabled=no dscp=12 \ new-connection-mark=n-cache passthrough=yes protocol=tcp src-port=5128 add action=mark-connection chain=postrouting comment="" disabled=no dscp=!12 \ new-connection-mark=s-cache passthrough=yes protocol=tcp src-port=5128 add action=mark-packet chain=postrouting comment="Libera cache full" \ connection-mark=n-cache disabled=no new-packet-mark=pacotes_cache \   passthrough=no /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-lim it=4000000 name=CACHE-FULL \ packet-mark=pacotes_squid parent=global-out priority=8 queue=cache /queue type add name="cache" kind=pcq pcq-rate=4800000 pcq-limit=50 pcq-classifier=dst-addre ss pcq-total-limit=2000

VERSÃO 2.*** / ip firewall nat

add chain=dstnat in-interface=REDE protocol=tcp dst-port=80 action=dst-nat to-ad dresses=200.198.100.202 to-ports=5128 \ comment="NAT - Proxy" disabled=no / ip firewall mangle add chain=postrouting protocol=tcp src-port=5128 tos=48 action=mark-connection n ew-connection-mark=n-cache passthrough=yes disabled=no add chain=postrouting protocol=tcp src-port=5128 tos=!48 action=mark-connection new-connection-mark=s-cache passthrough=yes disabled=no add chain=postrouting connection-mark=n-cache action=mark-packet new-packet-mark =pacotes_cache passthrough=no disabled=no / queue type add name="cache-proxy" kind=pcq pcq-rate=4800000 pcq-limit=50 pcq-classifier=dst -address pcq-total-limit=2000 / queue tree add name="CACHE-FULL" parent=global-out packet-mark=pacotes_cache limit-at=0 que ue=cache-proxy priority=8 max-limit=0 \ burst-limit=0 burst-threshold=0 burst-time=0s disabled=no

VERSÃO 3.***

/ip firewall mangle add action=mark-connection chain=postrouting comment="" disabled=no dscp=12 \ new-connection-mark=n-cache passthrough=yes protocol=tcp src-port=5128 add action=mark-connection chain=postrouting comment="" disabled=no dscp=!12 \ new-connection-mark=s-cache passthrough=yes protocol=tcp src-port=5128 add action=mark-packet chain=postrouting comment="Libera cache full" \ connection-mark=n-cache disabled=no new-packet-mark=pacotes_cache \   passthrough=no /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-lim it=4000000 name=CACHE-FULL \ packet-mark=pacotes_squid parent=global-out priority=8 queue=cache /queue type add name="cache" kind=pcq pcq-rate=4800000 pcq-limit=50 pcq-classifier=dst-addre ss pcq-total-limit=2000