Multi WAN + Proxy in DMZ Mode (load balancing disabled)

devouzter · Tue Nov 07, 2006 7:36 am

i have some problem with my network configuration :

configuration export :

/ interface ethernet 
set WAN1-AMAC-NET name="WAN1-AMAC-NET" mtu=1500 mac-address=00:13:F7:0B:EB:47 \
    arp=enabled disable-running-check=yes auto-negotiation=yes full-duplex=yes \
    cable-settings=default speed=100Mbps comment="" disabled=no 
set WAN2-AMAC-NET name="WAN2-AMAC-NET" mtu=1500 mac-address=00:13:F7:0B:EB:87 \
    arp=enabled disable-running-check=yes auto-negotiation=yes full-duplex=yes \
    cable-settings=default speed=100Mbps comment="" disabled=no 
set WAN3-AMAC-NET name="WAN3-AMAC-NET" mtu=1500 mac-address=00:13:F7:0B:EB:9B \
    arp=enabled disable-running-check=yes auto-negotiation=yes full-duplex=yes \
    cable-settings=default speed=100Mbps comment="" disabled=no 
set LAN-AMAC-NET name="LAN-AMAC-NET" mtu=1500 mac-address=00:13:F7:0B:EB:9D \
    arp=enabled disable-running-check=yes auto-negotiation=yes full-duplex=yes \
    cable-settings=default speed=100Mbps comment="" disabled=no 
set DMZ-AMAC-NET name="DMZ-AMAC-NET" mtu=1500 mac-address=00:13:F7:0B:EB:9F \
    arp=enabled disable-running-check=yes auto-negotiation=yes full-duplex=yes \
    cable-settings=default speed=100Mbps comment="" disabled=no 
/ ip address 
add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 \
    interface=LAN-AMAC-NET comment="" disabled=no 
add address=203.84.152.90/29 network=203.84.152.88 broadcast=203.84.152.95 \
    interface=WAN1-AMAC-NET comment="" disabled=no 
add address=10.150.150.2/29 network=10.150.150.0 broadcast=10.150.150.7 \
    interface=WAN2-AMAC-NET comment="" disabled=no 
add address=10.151.151.2/29 network=10.151.151.0 broadcast=10.151.151.7 \
    interface=WAN3-AMAC-NET comment="" disabled=no 
add address=10.10.10.2/29 network=10.10.10.0 broadcast=10.10.10.7 \
    interface=DMZ-AMAC-NET comment="" disabled=no 
/ ip route 
add dst-address=0.0.0.0/0 gateway=203.84.152.89 scope=255 target-scope=10 \
    comment="" disabled=no 
add dst-address=0.0.0.0/0 gateway=10.151.151.1 scope=255 target-scope=10 \
    routing-mark=warnet-a3 comment="" disabled=no 
add dst-address=0.0.0.0/0 gateway=10.151.151.1 scope=255 target-scope=10 \
    routing-mark=test comment="" disabled=no 
add dst-address=0.0.0.0/0 gateway=203.84.152.89 scope=255 target-scope=10 \
    routing-mark=warnet-a1 comment="" disabled=yes 
add dst-address=0.0.0.0/0 gateway=10.151.151.1 scope=255 target-scope=10 \
    routing-mark=billing comment="" disabled=no 
add dst-address=0.0.0.0/0 gateway=203.84.152.89 scope=255 target-scope=10 \
    routing-mark=squid0 comment="" disabled=yes 
add dst-address=0.0.0.0/0 gateway=10.151.151.1 scope=255 target-scope=10 \
    routing-mark=squid1 comment="" disabled=yes 
/ ip firewall mangle 
add chain=prerouting src-address-list=warnet-a1 action=mark-routing \
    new-routing-mark=warnet-a1 passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=warnet-a1 dst-address-list=!nice \
    action=mark-connection new-connection-mark=Con-INET-a1 passthrough=yes \
    comment="" disabled=no 
add chain=prerouting connection-mark=Con-INET-a1 action=mark-packet \
    new-packet-mark=INET-a1 passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=warnet-a1 dst-address-list=nice \
    action=mark-connection new-connection-mark=Con-IIX-a1 passthrough=yes \
    comment="" disabled=no 
add chain=prerouting connection-mark=Con-IIX-a1 action=mark-packet \
    new-packet-mark=IIX-a1 passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=warnet-a3 action=mark-routing \
    new-routing-mark=warnet-a3 passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=warnet-a3 dst-address-list=!nice \
    action=mark-connection new-connection-mark=Con-INET-a3 passthrough=yes \
    comment="" disabled=no 
add chain=prerouting connection-mark=Con-INET-a3 action=mark-packet \
    new-packet-mark=INET-a3 passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=warnet-a3 dst-address-list=nice \
    action=mark-connection new-connection-mark=Con-IIX-a3 passthrough=yes \
    comment="" disabled=no 
add chain=prerouting connection-mark=Con-IIX-a3 action=mark-packet \
    new-packet-mark=IIX-a3 passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=billing action=mark-routing \
    new-routing-mark=billing passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=billing dst-address-list=!nice \
    action=mark-connection new-connection-mark=Con-INET-billing \
    passthrough=yes comment="" disabled=no 
add chain=prerouting connection-mark=Con-INET-billing action=mark-packet \
    new-packet-mark=INET-billing passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=billing dst-address-list=nice \
    action=mark-connection new-connection-mark=Con-IIX-billing passthrough=yes \
    comment="" disabled=no 
add chain=prerouting connection-mark=Con-IIX-billing action=mark-packet \
    new-packet-mark=IIX-billing passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=squid action=mark-routing \
    new-routing-mark=squid passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=squid dst-address-list=!nice \
    action=mark-connection new-connection-mark=Con-INET-squid passthrough=yes \
    comment="" disabled=no 
add chain=prerouting connection-mark=Con-INET-squid action=mark-packet \
    new-packet-mark=INET-squid passthrough=yes comment="" disabled=no 
add chain=prerouting src-address-list=squid dst-address-list=nice \
    action=mark-connection new-connection-mark=Con-IIX-squid passthrough=yes \
    comment="" disabled=no 
add chain=prerouting connection-mark=Con-IIX-squid action=mark-packet \
    new-packet-mark=IIX-squid passthrough=yes comment="" disabled=no 
/ ip firewall nat 
add chain=dstnat in-interface=LAN-AMAC-NET src-address=!10.10.10.3 \
    protocol=tcp dst-port=80 action=dst-nat to-addresses=10.10.10.3 \
    to-ports=3128 comment="" disabled=yes 
add chain=srcnat out-interface=WAN1-AMAC-NET action=src-nat \
    to-addresses=203.84.152.90 to-ports=0-65535 comment="" disabled=yes 
add chain=srcnat out-interface=WAN2-AMAC-NET action=src-nat \
    to-addresses=10.150.150.2 to-ports=0-65535 comment="" disabled=yes 
add chain=srcnat out-interface=WAN3-AMAC-NET action=src-nat \
    to-addresses=10.151.151.2 to-ports=0-65535 comment="" disabled=yes 
add chain=srcnat out-interface=WAN1-AMAC-NET src-address-list=warnet-a1 \
    action=src-nat to-addresses=203.84.152.90 to-ports=0-65535 comment="" \
    disabled=no 
add chain=srcnat out-interface=WAN3-AMAC-NET src-address-list=billing \
    action=src-nat to-addresses=10.151.151.2 to-ports=0-65535 comment="" \
    disabled=no 
add chain=srcnat out-interface=WAN3-AMAC-NET src-address-list=warnet-a3 \
    action=src-nat to-addresses=10.151.151.2 to-ports=0-65535 comment="" \
    disabled=no 
/ ip firewall address-list 
add list=nice address=58.65.240.0/24 comment="" disabled=no 
........................(about 2000+ address)
add list=nice address=222.229.86.0/23 comment="" disabled=no 
add list=billing address=192.168.1.10 comment="" disabled=no 
add list=billing address=192.168.1.50 comment="" disabled=no 
add list=billing address=192.168.1.100 comment="" disabled=no 
add list=billing address=192.168.1.150 comment="" disabled=no 
add list=billing address=192.168.1.200 comment="" disabled=no 
add list=billing address=192.168.1.250 comment="" disabled=no 
add list=billing address=192.168.1.248 comment="" disabled=no 
add list=billing address=192.168.1.5 comment="" disabled=yes 
add list=billing address=192.168.1.6 comment="" disabled=no 
add list=squid address=10.10.10.3 comment="" disabled=no 
add list=warnet-a1 address=192.168.1.11-192.168.1.40 comment="" disabled=no 
add list=warnet-a3 address=192.168.1.236-192.168.1.247 comment="" disabled=no 
/ queue simple 
add name="Squid-IIX" target-addresses=10.10.10.3/32 dst-address=0.0.0.0/0 \
    interface=all parent=none packet-marks=IIX-squid direction=both \
    priority=4 queue=default-small/default-small limit-at=0/0 max-limit=0/0 \
    total-queue=default-small disabled=no 
add name="Squid-INET" target-addresses=10.10.10.3/32 dst-address=0.0.0.0/0 \
    interface=all parent=none packet-marks=INET-squid direction=both \
    priority=4 queue=default-small/default-small limit-at=0/0 max-limit=0/0 \
    total-queue=default-small disabled=no 
add name="SRVBAK-IIX" target-addresses=192.168.1.5/32 dst-address=0.0.0.0/0 \
    interface=all parent=none packet-marks=test-p-iix direction=both \
    priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="SRVBAK-INET" target-addresses=192.168.1.5/32 dst-address=0.0.0.0/0 \
    interface=all parent=none packet-marks=test-p-inet direction=both \
    priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=64000/64000 total-queue=default-small disabled=no 
add name="ServerBilling-IIX" target-addresses=192.168.1.10/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="ServerBilling-INET" target-addresses=192.168.1.10/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="GcBilling-IIX" target-addresses=192.168.1.50/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="GcBilling-INET" target-addresses=192.168.1.50/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="GzBilling-IIX" target-addresses=192.168.1.100/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="GzBilling-INET" target-addresses=192.168.1.100/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A2Billing-IIX" target-addresses=192.168.1.150/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A2Billing-INET" target-addresses=192.168.1.150/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3Billing-IIX" target-addresses=192.168.1.200/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3Billing-INET" target-addresses=192.168.1.200/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3Print-IIX" target-addresses=192.168.1.250/32 dst-address=0.0.0.0/0 \
    interface=all parent=none packet-marks=IIX-billing direction=both \
    priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3Print-INET" target-addresses=192.168.1.250/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-billing \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="HOME-IIX" target-addresses=192.168.1.248/32 dst-address=0.0.0.0/0 \
    interface=all parent=none packet-marks=IIX-billing direction=both \
    priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="HOME-INET" target-addresses=192.168.1.248/32 dst-address=0.0.0.0/0 \
    interface=all parent=none packet-marks=INET-billing direction=both \
    priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-01-IIX" target-addresses=192.168.1.11/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-01-INET" target-addresses=192.168.1.11/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-02-IIX" target-addresses=192.168.1.12/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-02-INET" target-addresses=192.168.1.12/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-03-IIX" target-addresses=192.168.1.13/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-03-INET" target-addresses=192.168.1.13/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-04-IIX" target-addresses=192.168.1.14/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-04-INET" target-addresses=192.168.1.14/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-05-IIX" target-addresses=192.168.1.15/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-05-INET" target-addresses=192.168.1.15/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-06-IIX" target-addresses=192.168.1.16/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-06-INET" target-addresses=192.168.1.16/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-07-IIX" target-addresses=192.168.1.17/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-07-INET" target-addresses=192.168.1.17/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-08-IIX" target-addresses=192.168.1.18/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-08-INET" target-addresses=192.168.1.18/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-09-IIX" target-addresses=192.168.1.19/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-09-INET" target-addresses=192.168.1.19/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-10-IIX" target-addresses=192.168.1.20/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-10-INET" target-addresses=192.168.1.20/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-11-IIX" target-addresses=192.168.1.21/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-11-INET" target-addresses=192.168.1.21/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-12-IIX" target-addresses=192.168.1.22/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-12-INET" target-addresses=192.168.1.22/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-13-IIX" target-addresses=192.168.1.23/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-13-INET" target-addresses=192.168.1.23/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-14-IIX" target-addresses=192.168.1.24/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-14-INET" target-addresses=192.168.1.24/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-15-IIX" target-addresses=192.168.1.25/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-15-INET" target-addresses=192.168.1.25/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-16-IIX" target-addresses=192.168.1.26/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-16-INET" target-addresses=192.168.1.26/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-17-IIX" target-addresses=192.168.1.27/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-17-INET" target-addresses=192.168.1.27/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-18-IIX" target-addresses=192.168.1.28/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-18-INET" target-addresses=192.168.1.28/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-19-IIX" target-addresses=192.168.1.29/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-19-INET" target-addresses=192.168.1.29/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-20-IIX" target-addresses=192.168.1.30/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-20-INET" target-addresses=192.168.1.30/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-21-IIX" target-addresses=192.168.1.31/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-21-INET" target-addresses=192.168.1.31/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-22-IIX" target-addresses=192.168.1.32/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-22-INET" target-addresses=192.168.1.32/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-23-IIX" target-addresses=192.168.1.33/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-23-INET" target-addresses=192.168.1.33/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-24-IIX" target-addresses=192.168.1.34/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-24-INET" target-addresses=192.168.1.34/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-25-IIX" target-addresses=192.168.1.35/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-25-INET" target-addresses=192.168.1.35/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-26-IIX" target-addresses=192.168.1.36/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-26-INET" target-addresses=192.168.1.36/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-27-IIX" target-addresses=192.168.1.37/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-27-INET" target-addresses=192.168.1.37/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-28-IIX" target-addresses=192.168.1.38/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-28-INET" target-addresses=192.168.1.38/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-29-IIX" target-addresses=192.168.1.39/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-29-INET" target-addresses=192.168.1.39/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A1-Net-30-IIX" target-addresses=192.168.1.40/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A1-Net-30-INET" target-addresses=192.168.1.40/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a1 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-01-IIX" target-addresses=192.168.1.236/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-01-INET" target-addresses=192.168.1.236/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-02-IIX" target-addresses=192.168.1.237/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-02-INET" target-addresses=192.168.1.237/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-03-IIX" target-addresses=192.168.1.238/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-03-INET" target-addresses=192.168.1.238/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-04-IIX" target-addresses=192.168.1.239/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-04-INET" target-addresses=192.168.1.239/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-05-IIX" target-addresses=192.168.1.240/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-05-INET" target-addresses=192.168.1.240/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-06-IIX" target-addresses=192.168.1.241/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-06-INET" target-addresses=192.168.1.241/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-07-IIX" target-addresses=192.168.1.242/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-07-INET" target-addresses=192.168.1.242/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-08-IIX" target-addresses=192.168.1.243/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-08-INET" target-addresses=192.168.1.243/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-09-IIX" target-addresses=192.168.1.244/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-09-INET" target-addresses=192.168.1.244/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-10-IIX" target-addresses=192.168.1.245/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-10-INET" target-addresses=192.168.1.245/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-11-IIX" target-addresses=192.168.1.246/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-11-INET" target-addresses=192.168.1.246/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no 
add name="A3-Net-12-IIX" target-addresses=192.168.1.247/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=IIX-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=128000/128000 total-queue=default-small disabled=no 
add name="A3-Net-12-INET" target-addresses=192.168.1.247/32 \
    dst-address=0.0.0.0/0 interface=all parent=none packet-marks=INET-a3 \
    direction=both priority=4 queue=default-small/default-small limit-at=0/0 \
    max-limit=32000/32000 total-queue=default-small disabled=no

what i want is :
1. all my network automatically using proxy in my mikrotik dmz.
2. how to enabling multi routing for my proxy?
3. add load-balancing for my network 2 & 3

my problem is :
1. my squid proxy can't be used for network 2 & 3
2. if i enable routing for proxy and network 1 , then network 1 can't browsing.
3. i've disable load-balancing cause i'm using mangle for my connection, so it's becoming more complex than i thought

so, anyone can help me?

now condition:
1. for now my network 1 can browsing automatically using proxy, but not for network 2 & 3
2. network 1 & proxy using default gateway(see problem 2)
3. using only 2 WAN, WAN1 is for network1 & WAN2 is for network 2&3

thx in advance for anyone want to help me
(sorry for my bad english, i'm indonesian)

iron4umx · Fri Jan 12, 2007 9:14 am

Dude... That is some complex stuff... You are a genius¡¡¡

I will sugest for you to contact a tecnitian or engineer who is really into mikrotik boxes (talk to your local mikrotik distributor) by phone in a 1-800 number (tool free)

My english is bad as well don't worry

Hope you can solve your problem and hope this will hellp you... because...

This is whay over my leege¡¡¡