I'm trying to load the traffic of my users with 3 Internet connection, I divided the connections like this:
Connection 1 - WAN1: It´s you for all traffic sweepings, like P2P, RapidShare..., ftp, and everything strange.
Connection 2 - WAN2: Common connection, but heavy connections, (here is the problem) Mails, Youtube, http download, and big thing, but not of WAN1.
Connection 3 - VIP: Vip connection, like HTTP, VPN, NET service, Chat, VOIP (This is the more expensive connection, so I have to safe it!!)
Well the problem appears when I tried to change the route of some connection.
For example If I start download a Router OS of the Mikrotik page it's mangle with this rule without problem:
Code: Select all
add action=mark-connection chain=HTTP comment=HTTP \
disabled=no dst-port=80 new-connection-mark=HTTP_CON passthrough=yes \
protocol=tcp
add action=mark-routing chain=HTTP comment="" connection-mark=HTTP_CON \
disabled=no new-routing-mark=VIP passthrough=noCode: Select all
add action=mark-connection chain=FTP comment="HTTP de archivos - 1 Mbyte" \
connection-bytes=512000-1000000 disabled=yes new-connection-mark=FTP_CON \
passthrough=yes protocol=tcp
add action=mark-connection chain=FTP comment="HTTP de archivos - 3 Mbyte" \
connection-bytes=1000000-3000000 disabled=yes new-connection-mark=FTP_CON \
passthrough=yes protocol=tcp
add action=mark-connection chain=FTP comment="HTTP de archivos - 6 Mbyte" \
connection-bytes=3000000-6000000 disabled=yes new-connection-mark=FTP_CON \
passthrough=yes protocol=tcp
add action=mark-connection chain=FTP comment="HTTP de archivos - 30 Mbyte" \
connection-bytes=6000000-30000000 disabled=yes new-connection-mark=\
FTP_CON passthrough=yes protocol=tcp
add action=mark-connection chain=FTP comment="HTTP de archivos - 60 Mbyte" \
connection-bytes=30000000-60000000 disabled=yes new-connection-mark=\
FTP_CON passthrough=yes protocol=tcp
add action=mark-connection chain=HTTP comment=\
"HTTP de archivos - Infinitive Mbyte" connection-bytes=60000000-0 \
disabled=yes new-connection-mark=FTP_CON passthrough=yes protocol=tcp
add action=mark-routing chain=FTP comment="" connection-mark=FTP_CON \
disabled=no new-routing-mark=WAN2 passthrough=noIt's stop downloading, I think because the route is different, so the IP of who is downloading change!
The same happend with youtube page, the fist part you can see, but few seconds later is mangled with L7 or port 554, and stop showing the video!
Code: Select all
add action=mark-connection chain=VIDEO comment=RSTP disabled=no dst-port=554 \
new-connection-mark=VIDEO_CON passthrough=yes protocol=tcp
add action=mark-connection chain=VIDEO comment=\
"RTSP - Real Time Streaming Protocol - L7" disabled=no layer7-protocol=\
rtsp new-connection-mark=VIDEO_CON passthrough=yes
add action=mark-connection chain=VIDEO comment="Quicktime HTTP - L7" \
disabled=no layer7-protocol=quicktime new-connection-mark=VIDEO_CON \
passthrough=yes
add action=mark-connection chain=VIDEO comment=\
"HTTP - Video over HyperText Transfer Protocol (RFC 2616) - L7" disabled=\
no layer7-protocol=httpvideo new-connection-mark=VIDEO_CON passthrough=\
yes
add action=mark-connection chain=VIDEO comment=\
"RTSP tunneled within HTTP - L7" disabled=no layer7-protocol=http-rtsp \
new-connection-mark=VIDEO_CON passthrough=yes
add action=mark-routing chain=VIDEO comment="" connection-mark=VIDEO_CON \
disabled=no new-routing-mark=WAN2 passthrough=yes 
Thanks in advance
Rafael Lore
