Skip to content

Instantly share code, notes, and snippets.

@yenleidong
Last active August 29, 2015 14:10
Show Gist options
  • Save yenleidong/32119aae58d399523934 to your computer and use it in GitHub Desktop.
Save yenleidong/32119aae58d399523934 to your computer and use it in GitHub Desktop.
Mark Packet Ping dan DNS
#Lokal 192.168.8.0/24
/ ip firewall mangle
add action=mark-connection chain=prerouting comment="--> ping" \
new-connection-mark=icmp-c protocol=icmp src-address=192.168.8.0/24
add action=mark-packet chain=prerouting connection-mark=icmp-c \
new-packet-mark=icmp-p
add action=change-dscp chain=prerouting packet-mark=icmp-p
add action=mark-connection chain=prerouting comment="--> dns" dst-port=53 \
new-connection-mark=dns-c protocol=tcp src-address=192.168.8.0/24
add action=mark-connection chain=prerouting dst-port=53 new-connection-mark=\
dns-c protocol=udp src-address=192.168.8.0/24
add action=mark-packet chain=prerouting connection-mark=dns-c \
new-packet-mark=dns-p
add action=change-dscp chain=prerouting packet-mark=dns-p
/ queue type
add name="64" kind=pfifo pfifo-limit=64
/queue tree
add max-limit=32k name=64 parent=global priority=5 queue=64
add limit-at=8k max-limit=16k name=ping packet-mark=icmp-p parent=64 \
priority=1 queue=default
add limit-at=8k max-limit=16k name=dns packet-mark=dns-p parent=64 priority=1 \
queue=default
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment