Mikrotik:QOS:Three Interfaces

From My notepad
Jump to: navigation, search

QOS on Three Interfaces

  • ether1 = LAN
  • ether2 = T1 (1544k)
  • ether3 = DSL (8M/512k)

This is a very brute force approach, but it's the only approach I've got right now. There's probably a better way of doing this.

/ ip firewall mangle 
add chain=forward action=mark-packet new-packet-mark=Unclassified passthrough=yes comment="Default \
    mark" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 action=mark-packet \
    new-packet-mark=e1-e2-Unclassified passthrough=yes comment="Default: Mark \
    all packets as UNKNOWN  - LAN to T1" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=4569 action=mark-packet new-packet-mark=e1-e2-VoIP-IAX2 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=4569 action=mark-packet new-packet-mark=e1-e2-VoIP-IAX2 \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=5060 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=5060 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=5061 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=5061 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=21 action=mark-connection new-connection-mark=FTPCON \
    passthrough=yes comment="ftp" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 \
    connection-mark=FTPCON action=mark-packet new-packet-mark=e1-e2-Data-FTP \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=25 action=mark-packet new-packet-mark=e1-e2-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=25 action=mark-packet new-packet-mark=e1-e2-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=80 action=mark-packet new-packet-mark=e1-e2-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=80 action=mark-packet new-packet-mark=e1-e2-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=110 action=mark-packet new-packet-mark=e1-e2-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=110 action=mark-packet new-packet-mark=e1-e2-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=119 action=mark-packet new-packet-mark=e1-e2-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=119 action=mark-packet new-packet-mark=e1-e2-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=443 action=mark-packet new-packet-mark=e1-e2-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=443 action=mark-packet new-packet-mark=e1-e2-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=873 action=mark-packet new-packet-mark=e1-e2-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=873 action=mark-packet new-packet-mark=e1-e2-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    src-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
    dst-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    src-port=3389 action=mark-packet new-packet-mark=e1-e2-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
    dst-port=3389 action=mark-packet new-packet-mark=e1-e2-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 \
    dst-address-list=voip-servers action=mark-packet \
    new-packet-mark=e1-e2-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 \
    src-address-list=voip-servers action=mark-packet \
    new-packet-mark=e1-e2-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether2 action=passthrough \
    comment="This rule shows us how many packets are still Unclassified... \
    change the action to log to see what they are" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 action=mark-packet \
    new-packet-mark=e2-e1-Unclassified passthrough=yes comment="Default: Mark \
    all packets as UNKNOWN - T1 to LAN" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=4569 action=mark-packet new-packet-mark=e2-e1-VoIP-IAX2 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=4569 action=mark-packet new-packet-mark=e2-e1-VoIP-IAX2 \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=5060 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=5060 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=5061 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=5061 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=21 action=mark-connection new-connection-mark=FTPCON \
    passthrough=yes comment="ftp" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 \
    connection-mark=FTPCON action=mark-packet new-packet-mark=e2-e1-Data-FTP \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=25 action=mark-packet new-packet-mark=e2-e1-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=25 action=mark-packet new-packet-mark=e2-e1-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=80 action=mark-packet new-packet-mark=e2-e1-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=80 action=mark-packet new-packet-mark=e2-e1-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=110 action=mark-packet new-packet-mark=e2-e1-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=110 action=mark-packet new-packet-mark=e2-e1-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=119 action=mark-packet new-packet-mark=e2-e1-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=119 action=mark-packet new-packet-mark=e2-e1-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=443 action=mark-packet new-packet-mark=e2-e1-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=443 action=mark-packet new-packet-mark=e2-e1-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=873 action=mark-packet new-packet-mark=e2-e1-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=873 action=mark-packet new-packet-mark=e2-e1-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    src-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
    dst-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    src-port=3389 action=mark-packet new-packet-mark=e2-e1-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
    dst-port=3389 action=mark-packet new-packet-mark=e2-e1-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 \
    dst-address-list=voip-servers action=mark-packet \
    new-packet-mark=e2-e1-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 \
    src-address-list=voip-servers action=mark-packet \
    new-packet-mark=e2-e1-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether2 out-interface=ether1 action=passthrough \
    comment="This rule shows us how many packets are still Unclassified... \
    change the action to log to see what they are" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 action=mark-packet \
    new-packet-mark=e1-e3-Unclassified passthrough=yes comment="Default: Mark \
    all packets as UNKNOWN - LAN to DSL" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=4569 action=mark-packet new-packet-mark=e1-e3-VoIP-IAX2 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=4569 action=mark-packet new-packet-mark=e1-e3-VoIP-IAX2 \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=5060 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=5060 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=5061 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=5061 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=21 action=mark-connection new-connection-mark=FTPCON \
    passthrough=yes comment="ftp" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 \
    connection-mark=FTPCON action=mark-packet new-packet-mark=e1-e3-Data-FTP \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=25 action=mark-packet new-packet-mark=e1-e3-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=25 action=mark-packet new-packet-mark=e1-e3-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=80 action=mark-packet new-packet-mark=e1-e3-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=80 action=mark-packet new-packet-mark=e1-e3-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=110 action=mark-packet new-packet-mark=e1-e3-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=110 action=mark-packet new-packet-mark=e1-e3-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=119 action=mark-packet new-packet-mark=e1-e3-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=119 action=mark-packet new-packet-mark=e1-e3-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=443 action=mark-packet new-packet-mark=e1-e3-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=443 action=mark-packet new-packet-mark=e1-e3-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=873 action=mark-packet new-packet-mark=e1-e3-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=873 action=mark-packet new-packet-mark=e1-e3-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    src-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
    dst-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    src-port=3389 action=mark-packet new-packet-mark=e1-e3-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
    dst-port=3389 action=mark-packet new-packet-mark=e1-e3-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 \
    dst-address-list=voip-servers action=mark-packet \
    new-packet-mark=e1-e3-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 \
    src-address-list=voip-servers action=mark-packet \
    new-packet-mark=e1-e3-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether1 out-interface=ether3 action=passthrough \
    comment="This rule shows us how many packets are still Unclassified... \
    change the action to log to see what they are" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 action=mark-packet \
    new-packet-mark=e3-e1-Unclassified passthrough=yes comment="Default: Mark \
    all packets as UNKNOWN - DSL to LAN" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=4569 action=mark-packet new-packet-mark=e3-e1-VoIP-IAX2 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=4569 action=mark-packet new-packet-mark=e3-e1-VoIP-IAX2 \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=5060 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=5060 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=5061 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=5061 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=21 action=mark-connection new-connection-mark=FTPCON \
    passthrough=yes comment="ftp" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 \
    connection-mark=FTPCON action=mark-packet new-packet-mark=e3-e1-Data-FTP \
    passthrough=yes comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=25 action=mark-packet new-packet-mark=e3-e1-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=25 action=mark-packet new-packet-mark=e3-e1-Data-SMTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=80 action=mark-packet new-packet-mark=e3-e1-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=80 action=mark-packet new-packet-mark=e3-e1-Data-HTTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=110 action=mark-packet new-packet-mark=e3-e1-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=110 action=mark-packet new-packet-mark=e3-e1-Data-POP3 \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=119 action=mark-packet new-packet-mark=e3-e1-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=119 action=mark-packet new-packet-mark=e3-e1-Data-NNTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=443 action=mark-packet new-packet-mark=e3-e1-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=443 action=mark-packet new-packet-mark=e3-e1-Data-HTTPS \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=873 action=mark-packet new-packet-mark=e3-e1-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=873 action=mark-packet new-packet-mark=e3-e1-Data-RSYNC \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    src-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
    dst-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    src-port=3389 action=mark-packet new-packet-mark=e3-e1-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
    dst-port=3389 action=mark-packet new-packet-mark=e3-e1-Data-RDP \
    passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 \
    dst-address-list=voip-servers action=mark-packet \
    new-packet-mark=e3-e1-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 \
    src-address-list=voip-servers action=mark-packet \
    new-packet-mark=e3-e1-VoIP-Data passthrough=no comment="" disabled=no 
add chain=forward in-interface=ether3 out-interface=ether1 action=passthrough \
    comment="This rule shows us how many packets are still Unclassified... \
    change the action to log to see what they are" disabled=no 

/ queue tree 
add name="queue-root" parent=global-out packet-mark="" limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e2" parent=queue-root packet-mark="" limit-at=1313000 \
    queue=default priority=8 max-limit=1467000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e2-e1" parent=queue-root packet-mark="" limit-at=1313000 \
    queue=default priority=8 max-limit=1467000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e3" parent=queue-root packet-mark="" limit-at=384000 \
    queue=default priority=8 max-limit=487000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e3-e1" parent=queue-root packet-mark="" limit-at=6964000 \
    queue=default priority=8 max-limit=7783000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="VoIP-e1-e2" parent=e1-e2 packet-mark="" limit-at=0 queue=default \
    priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no 
add name="Other-e1-e2" parent=e1-e2 packet-mark="" limit-at=1236000 \
    queue=default priority=8 max-limit=1313000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e2-Unclassified" parent=Other-e1-e2 \
    packet-mark=e1-e2-Unclassified limit-at=0 queue=default priority=8 \
    max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-VoIPData" parent=VoIP-e1-e2 packet-mark=e1-e2-VoIP-Data \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-HTTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-HTTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-SMTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-SMTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-DNS" parent=Other-e1-e2 packet-mark=e1-e2-Data-DNS limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e2-RDP" parent=Other-e1-e2 packet-mark=e1-e2-Data-RDP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e2-FTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-FTP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e2-HTTPS" parent=Other-e1-e2 packet-mark=e1-e2-Data-HTTPS \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-POP3" parent=Other-e1-e2 packet-mark=e1-e2-Data-POP3 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-NNTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-NNTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-RSYNC" parent=Other-e1-e2 packet-mark=e1-e2-Data-RSYNC \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-VoIP-SIP" parent=VoIP-e1-e2 packet-mark=e1-e2-VoIP-SIP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-VoIP-IAX2" parent=VoIP-e1-e2 packet-mark=e1-e2-VoIP-IAX2 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-PPTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-PPTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-L2TP" parent=Other-e1-e2 packet-mark=e1-e2-Data-L2TP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e2-PRINTER" parent=Other-e1-e2 packet-mark=e1-e2-Data-PRINTER \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="VoIP-e2-e1" parent=e2-e1 packet-mark="" limit-at=0 queue=default \
    priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no 
add name="Other-e2-e1" parent=e2-e1 packet-mark="" limit-at=1236000 \
    queue=default priority=8 max-limit=1313000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e2-e1-Unclassified" parent=Other-e2-e1 \
    packet-mark=e2-e1-Unclassified limit-at=0 queue=default priority=8 \
    max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-VoIPData" parent=VoIP-e2-e1 packet-mark=e2-e1-VoIP-Data \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-HTTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-HTTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-SMTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-SMTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-DNS" parent=Other-e2-e1 packet-mark=e2-e1-Data-DNS limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e2-e1-RDP" parent=Other-e2-e1 packet-mark=e2-e1-Data-RDP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e2-e1-FTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-FTP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e2-e1-HTTPS" parent=Other-e2-e1 packet-mark=e2-e1-Data-HTTPS \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-POP3" parent=Other-e2-e1 packet-mark=e2-e1-Data-POP3 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-NNTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-NNTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-RSYNC" parent=Other-e2-e1 packet-mark=e2-e1-Data-RSYNC \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-VoIP-SIP" parent=VoIP-e2-e1 packet-mark=e2-e1-VoIP-SIP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-VoIP-IAX2" parent=VoIP-e2-e1 packet-mark=e2-e1-VoIP-IAX2 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-PPTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-PPTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-L2TP" parent=Other-e2-e1 packet-mark=e2-e1-Data-L2TP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e2-e1-PRINTER" parent=Other-e2-e1 packet-mark=e2-e1-Data-PRINTER \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="VoIP-e1-e3" parent=e1-e3 packet-mark="" limit-at=0 queue=default \
    priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no 
add name="Other-e1-e3" parent=e1-e3 packet-mark="" limit-at=410000 \
    queue=default priority=8 max-limit=436000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e3-Unclassified" parent=Other-e1-e3 \
    packet-mark=e1-e3-Unclassified limit-at=0 queue=default priority=8 \
    max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-VoIPData" parent=VoIP-e1-e3 packet-mark=e1-e3-VoIP-Data \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-HTTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-HTTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-SMTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-SMTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-DNS" parent=Other-e1-e3 packet-mark=e1-e3-Data-DNS limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e3-RDP" parent=Other-e1-e3 packet-mark=e1-e3-Data-RDP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e3-FTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-FTP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e1-e3-HTTPS" parent=Other-e1-e3 packet-mark=e1-e3-Data-HTTPS \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-POP3" parent=Other-e1-e3 packet-mark=e1-e3-Data-POP3 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-NNTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-NNTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-RSYNC" parent=Other-e1-e3 packet-mark=e1-e3-Data-RSYNC \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-VoIP-SIP" parent=VoIP-e1-e3 packet-mark=e1-e3-VoIP-SIP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-VoIP-IAX2" parent=VoIP-e1-e3 packet-mark=e1-e3-VoIP-IAX2 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-PPTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-PPTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-L2TP" parent=Other-e1-e3 packet-mark=e1-e3-Data-L2TP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e1-e3-PRINTER" parent=Other-e1-e3 packet-mark=e1-e3-Data-PRINTER \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="VoIP-e3-e1" parent=e3-e1 packet-mark="" limit-at=0 queue=default \
    priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no 
add name="Other-e3-e1" parent=e3-e1 packet-mark="" limit-at=6144000 \
    queue=default priority=8 max-limit=6964000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e3-e1-Unclassified" parent=Other-e3-e1 \
    packet-mark=e3-e1-Unclassified limit-at=0 queue=default priority=8 \
    max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-VoIPData" parent=VoIP-e3-e1 packet-mark=e3-e1-VoIP-Data \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-HTTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-HTTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-SMTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-SMTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-DNS" parent=Other-e3-e1 packet-mark=e3-e1-Data-DNS limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e3-e1-RDP" parent=Other-e3-e1 packet-mark=e3-e1-Data-RDP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e3-e1-FTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-FTP limit-at=0 \
    queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no 
add name="e3-e1-HTTPS" parent=Other-e3-e1 packet-mark=e3-e1-Data-HTTPS \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-POP3" parent=Other-e3-e1 packet-mark=e3-e1-Data-POP3 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-NNTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-NNTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-RSYNC" parent=Other-e3-e1 packet-mark=e3-e1-Data-RSYNC \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-VoIP-SIP" parent=VoIP-e3-e1 packet-mark=e3-e1-VoIP-SIP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-VoIP-IAX2" parent=VoIP-e3-e1 packet-mark=e3-e1-VoIP-IAX2 \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-PPTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-PPTP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-L2TP" parent=Other-e3-e1 packet-mark=e3-e1-Data-L2TP \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
add name="e3-e1-PRINTER" parent=Other-e3-e1 packet-mark=e3-e1-Data-PRINTER \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no 
Personal tools