MikroTik

Hi.
We have a ISP router, which connects customers to internet and there is a problem with tree queues. Router has 2 eth interfaces (local, public).
I made it following the example in manual.
Upload shaping works properly but download flows still on full bandwith to internet. Downolad mangle does not counting - inteface is set to "public" as in example. If I change this interface to "!public", download mangle starts counting something and queue shows some traffic. But this is not a real traffic - that is still on fullspeed.

Can somebody helps me?
Thanks

Andy
A-Networks Ltd., Slovakia

Please post your quques rules and generic router config. When we can discus.

ok, that's the configuration

Interfaces:
0 R name="LAN" mtu=1500 type=ether rx-rate=0 tx-rate=0
1 R name="WAN" mtu=1500 type=ether rx-rate=0 tx-rate=0

Addresses:
0 ;;; puplic IP
address=213.215.72.222/27 network=213.215.72.192
broadcast=213.215.72.223 interface=WAN actual-interface=WAN

1 ;;; public IPs in LAN
address=213.215.74.25/29 network=213.215.74.24 broadcast=213.215.74.31
interface=LAN actual-interface=LAN

2 ;;; privates IPs
address=172.18.7.254/24 network=172.18.7.0 broadcast=172.18.7.255
interface=LAN actual-interface=LAN

Firewall
forward rules:
...
21 ;;; Andy
src-address=172.18.7.66/32 in-interface=LAN out-interface=WAN
action=accept
...
src-nat:
src-address=172.18.7.0/24 out-interface=WAN action=masquerade
to-src-address=213.215.72.222

Mangle:
0 in-interface=WAN dst-address=172.18.7.66/32 action=accept
mark-flow=66_down

1 src-address=172.18.7.66/32 in-interface=LAN action=accept mark-flow=66_up

Tree queue:
0 name="up" parent=WAN flow="" limit-at=0 queue=default priority=8
max-limit=128000 burst-limit=0 burst-threshold=0 burst-time=0

1 name="Andy_up" parent=up flow=66_up limit-at=21000 queue=default
priority=8 max-limit=128000 burst-limit=0 burst-threshold=0
burst-time=0

2 name="down" parent=LAN flow="" limit-at=0 queue=default priority=8
max-limit=128000 burst-limit=0 burst-threshold=0 burst-time=0

3 name="Andy_down" parent=down flow=66_down limit-at=21000 queue=default
priority=8 max-limit=128000 burst-limit=0 burst-threshold=0
burst-time=0

I thing, it's may be enough...

I see what your problem is, you need to mark your packet action=passthrough, not action=accept

I tried it before - no effect in this case.
Mangle for download isn't marking packets. I if change interface WAN to !LAN (I have 2 interfaces, so it should be the same), it starting counting something. Why? I don't understand this.
Example for this case (!LAN). If I've downloaded 1,5MB, upload mangle has counted etc. 54000 (it seems correct) but download only 31000 bytes!

I heard that it can be solve by connection marks.
Any suggestions?

Andy