Mon Jan 23, 2017 6:43 am
Thank you Sob,
I have other mangle rules using Layer7 strings voice prioritization and pop3 traffic.
But these are on chain post routing. My full mange rules are listed below.
0 D chain=forward action=change-mss new-mss=1410 tcp-flags=syn protocol=tcp
out-interface=all-ppp tcp-mss=1411-65535
1 D chain=forward action=change-mss new-mss=1410 tcp-flags=syn protocol=tcp
in-interface=all-ppp tcp-mss=1411-65535
2 ;;; neo internet routing
chain=prerouting action=mark-connection new-connection-mark=neoint-conn
passthrough=yes in-interface=bridge1 neo internet log=no log-prefix=""
3 ;;; napa routing
chain=prerouting action=mark-connection new-connection-mark=napa-conn
passthrough=yes in-interface=ether4 log=no log-prefix=""
4 ;;; neoint in rote
chain=prerouting action=mark-routing new-routing-mark=neoint-route
passthrough=yes connection-mark=neoint-conn log=no log-prefix=""
5 chain=prerouting action=mark-routing new-routing-mark=napa-route
passthrough=yes connection-mark=napa-conn log=no log-prefix=""
6 ;;; Neoint - output
chain=output action=mark-routing new-routing-mark=neoint-route
passthrough=yes connection-mark=neoint-conn log=no log-prefix=""
7 chain=output action=mark-routing new-routing-mark=napa-route
passthrough=yes connection-mark=napa-conn log=no log-prefix=""
8 chain=forward action=accept src-address=10.50.0.4 log=no log-prefix=""
9 chain=forward action=accept src-address=10.50.0.5 log=no log-prefix=""
10 ;;; POP3 Traffic
chain=prerouting action=mark-connection new-connection-mark=pop3-conn
passthrough=yes protocol=tcp dst-port=110 log=no log-prefix=""
11 chain=prerouting action=mark-packet new-packet-mark=pop3-packet
passthrough=yes connection-mark=pop3-conn log=no log-prefix=""
12 chain=prerouting action=mark-routing new-routing-mark=pop3-route
passthrough=yes protocol=tcp port=110 log=no log-prefix=""
13 ;;; DSCP - 7 - Skype, HTTPS
chain=postrouting action=change-dscp new-dscp=7 passthrough=yes
protocol=tcp dst-port=443 log=no log-prefix=""
14 ;;; DSCP - 7 - VOIP
chain=postrouting action=change-dscp new-dscp=7 passthrough=yes
protocol=udp port=1167,1719,1720,8010 log=no log-prefix=""
15 ;;; DSCP - 7 - VOIP
chain=postrouting action=change-dscp new-dscp=7 passthrough=yes
protocol=tcp port=1719,1720,8008,8009 log=no log-prefix=""
16 ;;; DSCP - 7 - SIP
chain=postrouting action=change-dscp new-dscp=7 passthrough=yes
protocol=tcp port=5060 log=no log-prefix=""
17 ;;; DSCP - 7 - SIP
chain=postrouting action=change-dscp new-dscp=7 passthrough=yes
protocol=udp port=5060,5061 log=no log-prefix=""
18 ;;; DSCP - 7 - IAX
chain=postrouting action=change-dscp new-dscp=7 passthrough=yes
protocol=udp port=4569 log=no log-prefix=""
19 ;;; DSCP - 7 - SIP 5004
chain=postrouting action=change-dscp new-dscp=7 passthrough=yes
protocol=udp port=5004 log=no log-prefix=""
20 ;;; Priority - 7 - Ventrilo VOIP
chain=postrouting action=change-dscp new-dscp=0 passthrough=yes
protocol=tcp port=3784 log=no log-prefix=""
21 ;;; Priority - 7 - Ventrilo VOIP
chain=postrouting action=change-dscp new-dscp=0 passthrough=yes
protocol=udp port=3784,3785 log=no log-prefix=""
22 ;;; Priority - 7 - Windows Live Messenger Voice
chain=postrouting action=change-dscp new-dscp=0 passthrough=yes
protocol=tcp port=6901 log=no log-prefix=""
23 ;;; Priority - 7 - Windows Live Messenger Voice
chain=postrouting action=change-dscp new-dscp=0 passthrough=yes
protocol=udp port=6901 log=no log-prefix=""
24 ;;; Section Break
chain=output action=accept log=no log-prefix=""
25 ;;; Priority - 0 - VOIP - h323
chain=forward action=set-priority new-priority=7 passthrough=yes
layer7-protocol=h323 log=no log-prefix=""
26 ;;; Priority - 0 - VOIP - SIP
chain=forward action=set-priority new-priority=7 passthrough=yes
layer7-protocol=sip log=no log-prefix=""
27 ;;; Priority - 0 - VOIP - IAX
chain=forward action=set-priority new-priority=7 passthrough=yes
protocol=udp port=4569 log=no log-prefix=""
28 ;;; Priority - 0 - VOIP - Skypeout
chain=forward action=set-priority new-priority=7 passthrough=yes
layer7-protocol=skypeout log=no log-prefix=""
29 ;;; Priority - 0 - VOIP - skypetoskype
chain=forward action=set-priority new-priority=7 passthrough=yes
layer7-protocol=skypetoskype log=no log-prefix=""
30 ;;; Priority - 0 - VOIP - STUN
chain=forward action=set-priority new-priority=7 passthrough=yes
layer7-protocol=stun log=no log-prefix=""
31 ;;; Priority - 0 - VOIP - Teamspeak
chain=forward action=set-priority new-priority=7 passthrough=yes
layer7-protocol=teamspeak log=no log-prefix=""
32 chain=prerouting action=mark-routing new-routing-mark=electrocom
passthrough=yes src-address=10.5.0.0/16 src-address-list=!electrocom
log=no log-prefix=""