Mikrotik:QOS:Three Interfaces
From My notepad
QOS on Three Interfaces
- ether1 = LAN
- ether2 = T1 (1544k)
- ether3 = DSL (8M/512k)
This is a very brute force approach, but it's the only approach I've got right now. There's probably a better way of doing this.
/ ip firewall mangle
add chain=forward action=mark-packet new-packet-mark=Unclassified passthrough=yes comment="Default \
mark" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 action=mark-packet \
new-packet-mark=e1-e2-Unclassified passthrough=yes comment="Default: Mark \
all packets as UNKNOWN - LAN to T1" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=4569 action=mark-packet new-packet-mark=e1-e2-VoIP-IAX2 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=4569 action=mark-packet new-packet-mark=e1-e2-VoIP-IAX2 \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=5060 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=5060 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=5061 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=5061 action=mark-packet new-packet-mark=e1-e2-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=21 action=mark-connection new-connection-mark=FTPCON \
passthrough=yes comment="ftp" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 \
connection-mark=FTPCON action=mark-packet new-packet-mark=e1-e2-Data-FTP \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=25 action=mark-packet new-packet-mark=e1-e2-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=25 action=mark-packet new-packet-mark=e1-e2-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=53 action=mark-packet new-packet-mark=e1-e2-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=80 action=mark-packet new-packet-mark=e1-e2-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=80 action=mark-packet new-packet-mark=e1-e2-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=110 action=mark-packet new-packet-mark=e1-e2-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=110 action=mark-packet new-packet-mark=e1-e2-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=119 action=mark-packet new-packet-mark=e1-e2-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=119 action=mark-packet new-packet-mark=e1-e2-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=443 action=mark-packet new-packet-mark=e1-e2-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=443 action=mark-packet new-packet-mark=e1-e2-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=515 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=873 action=mark-packet new-packet-mark=e1-e2-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=873 action=mark-packet new-packet-mark=e1-e2-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=1701 action=mark-packet new-packet-mark=e1-e2-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=1723 action=mark-packet new-packet-mark=e1-e2-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
src-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=udp \
dst-port=9100 action=mark-packet new-packet-mark=e1-e2-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
src-port=3389 action=mark-packet new-packet-mark=e1-e2-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 protocol=tcp \
dst-port=3389 action=mark-packet new-packet-mark=e1-e2-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 \
dst-address-list=voip-servers action=mark-packet \
new-packet-mark=e1-e2-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 \
src-address-list=voip-servers action=mark-packet \
new-packet-mark=e1-e2-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether2 action=passthrough \
comment="This rule shows us how many packets are still Unclassified... \
change the action to log to see what they are" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 action=mark-packet \
new-packet-mark=e2-e1-Unclassified passthrough=yes comment="Default: Mark \
all packets as UNKNOWN - T1 to LAN" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=4569 action=mark-packet new-packet-mark=e2-e1-VoIP-IAX2 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=4569 action=mark-packet new-packet-mark=e2-e1-VoIP-IAX2 \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=5060 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=5060 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=5061 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=5061 action=mark-packet new-packet-mark=e2-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=21 action=mark-connection new-connection-mark=FTPCON \
passthrough=yes comment="ftp" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 \
connection-mark=FTPCON action=mark-packet new-packet-mark=e2-e1-Data-FTP \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=25 action=mark-packet new-packet-mark=e2-e1-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=25 action=mark-packet new-packet-mark=e2-e1-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=53 action=mark-packet new-packet-mark=e2-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=80 action=mark-packet new-packet-mark=e2-e1-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=80 action=mark-packet new-packet-mark=e2-e1-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=110 action=mark-packet new-packet-mark=e2-e1-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=110 action=mark-packet new-packet-mark=e2-e1-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=119 action=mark-packet new-packet-mark=e2-e1-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=119 action=mark-packet new-packet-mark=e2-e1-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=443 action=mark-packet new-packet-mark=e2-e1-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=443 action=mark-packet new-packet-mark=e2-e1-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=515 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=873 action=mark-packet new-packet-mark=e2-e1-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=873 action=mark-packet new-packet-mark=e2-e1-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=1701 action=mark-packet new-packet-mark=e2-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=1723 action=mark-packet new-packet-mark=e2-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
src-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=udp \
dst-port=9100 action=mark-packet new-packet-mark=e2-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
src-port=3389 action=mark-packet new-packet-mark=e2-e1-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 protocol=tcp \
dst-port=3389 action=mark-packet new-packet-mark=e2-e1-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 \
dst-address-list=voip-servers action=mark-packet \
new-packet-mark=e2-e1-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 \
src-address-list=voip-servers action=mark-packet \
new-packet-mark=e2-e1-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether2 out-interface=ether1 action=passthrough \
comment="This rule shows us how many packets are still Unclassified... \
change the action to log to see what they are" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 action=mark-packet \
new-packet-mark=e1-e3-Unclassified passthrough=yes comment="Default: Mark \
all packets as UNKNOWN - LAN to DSL" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=4569 action=mark-packet new-packet-mark=e1-e3-VoIP-IAX2 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=4569 action=mark-packet new-packet-mark=e1-e3-VoIP-IAX2 \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=5060 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=5060 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=5061 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=5061 action=mark-packet new-packet-mark=e1-e3-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=21 action=mark-connection new-connection-mark=FTPCON \
passthrough=yes comment="ftp" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 \
connection-mark=FTPCON action=mark-packet new-packet-mark=e1-e3-Data-FTP \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=25 action=mark-packet new-packet-mark=e1-e3-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=25 action=mark-packet new-packet-mark=e1-e3-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=53 action=mark-packet new-packet-mark=e1-e3-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=80 action=mark-packet new-packet-mark=e1-e3-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=80 action=mark-packet new-packet-mark=e1-e3-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=110 action=mark-packet new-packet-mark=e1-e3-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=110 action=mark-packet new-packet-mark=e1-e3-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=119 action=mark-packet new-packet-mark=e1-e3-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=119 action=mark-packet new-packet-mark=e1-e3-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=443 action=mark-packet new-packet-mark=e1-e3-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=443 action=mark-packet new-packet-mark=e1-e3-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=515 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=873 action=mark-packet new-packet-mark=e1-e3-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=873 action=mark-packet new-packet-mark=e1-e3-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=1701 action=mark-packet new-packet-mark=e1-e3-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=1723 action=mark-packet new-packet-mark=e1-e3-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
src-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=udp \
dst-port=9100 action=mark-packet new-packet-mark=e1-e3-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
src-port=3389 action=mark-packet new-packet-mark=e1-e3-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 protocol=tcp \
dst-port=3389 action=mark-packet new-packet-mark=e1-e3-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 \
dst-address-list=voip-servers action=mark-packet \
new-packet-mark=e1-e3-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 \
src-address-list=voip-servers action=mark-packet \
new-packet-mark=e1-e3-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether1 out-interface=ether3 action=passthrough \
comment="This rule shows us how many packets are still Unclassified... \
change the action to log to see what they are" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 action=mark-packet \
new-packet-mark=e3-e1-Unclassified passthrough=yes comment="Default: Mark \
all packets as UNKNOWN - DSL to LAN" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=4569 action=mark-packet new-packet-mark=e3-e1-VoIP-IAX2 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=4569 action=mark-packet new-packet-mark=e3-e1-VoIP-IAX2 \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=5060 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=5060 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=5061 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=5061 action=mark-packet new-packet-mark=e3-e1-VoIP-SIP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=21 action=mark-connection new-connection-mark=FTPCON \
passthrough=yes comment="ftp" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 \
connection-mark=FTPCON action=mark-packet new-packet-mark=e3-e1-Data-FTP \
passthrough=yes comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=25 action=mark-packet new-packet-mark=e3-e1-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=25 action=mark-packet new-packet-mark=e3-e1-Data-SMTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=53 action=mark-packet new-packet-mark=e3-e1-Data-DNS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=80 action=mark-packet new-packet-mark=e3-e1-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=80 action=mark-packet new-packet-mark=e3-e1-Data-HTTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=110 action=mark-packet new-packet-mark=e3-e1-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=110 action=mark-packet new-packet-mark=e3-e1-Data-POP3 \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=119 action=mark-packet new-packet-mark=e3-e1-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=119 action=mark-packet new-packet-mark=e3-e1-Data-NNTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=443 action=mark-packet new-packet-mark=e3-e1-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=443 action=mark-packet new-packet-mark=e3-e1-Data-HTTPS \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=515 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=873 action=mark-packet new-packet-mark=e3-e1-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=873 action=mark-packet new-packet-mark=e3-e1-Data-RSYNC \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=1701 action=mark-packet new-packet-mark=e3-e1-Data-L2TP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=1723 action=mark-packet new-packet-mark=e3-e1-Data-PPTP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
src-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=udp \
dst-port=9100 action=mark-packet new-packet-mark=e3-e1-Data-PRINTER \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
src-port=3389 action=mark-packet new-packet-mark=e3-e1-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 protocol=tcp \
dst-port=3389 action=mark-packet new-packet-mark=e3-e1-Data-RDP \
passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 \
dst-address-list=voip-servers action=mark-packet \
new-packet-mark=e3-e1-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 \
src-address-list=voip-servers action=mark-packet \
new-packet-mark=e3-e1-VoIP-Data passthrough=no comment="" disabled=no
add chain=forward in-interface=ether3 out-interface=ether1 action=passthrough \
comment="This rule shows us how many packets are still Unclassified... \
change the action to log to see what they are" disabled=no
/ queue tree
add name="queue-root" parent=global-out packet-mark="" limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e2" parent=queue-root packet-mark="" limit-at=1313000 \
queue=default priority=8 max-limit=1467000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e2-e1" parent=queue-root packet-mark="" limit-at=1313000 \
queue=default priority=8 max-limit=1467000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e3" parent=queue-root packet-mark="" limit-at=384000 \
queue=default priority=8 max-limit=487000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e3-e1" parent=queue-root packet-mark="" limit-at=6964000 \
queue=default priority=8 max-limit=7783000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="VoIP-e1-e2" parent=e1-e2 packet-mark="" limit-at=0 queue=default \
priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
disabled=no
add name="Other-e1-e2" parent=e1-e2 packet-mark="" limit-at=1236000 \
queue=default priority=8 max-limit=1313000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e2-Unclassified" parent=Other-e1-e2 \
packet-mark=e1-e2-Unclassified limit-at=0 queue=default priority=8 \
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-VoIPData" parent=VoIP-e1-e2 packet-mark=e1-e2-VoIP-Data \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-HTTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-HTTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-SMTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-SMTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-DNS" parent=Other-e1-e2 packet-mark=e1-e2-Data-DNS limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e2-RDP" parent=Other-e1-e2 packet-mark=e1-e2-Data-RDP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e2-FTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-FTP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e2-HTTPS" parent=Other-e1-e2 packet-mark=e1-e2-Data-HTTPS \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-POP3" parent=Other-e1-e2 packet-mark=e1-e2-Data-POP3 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-NNTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-NNTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-RSYNC" parent=Other-e1-e2 packet-mark=e1-e2-Data-RSYNC \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-VoIP-SIP" parent=VoIP-e1-e2 packet-mark=e1-e2-VoIP-SIP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-VoIP-IAX2" parent=VoIP-e1-e2 packet-mark=e1-e2-VoIP-IAX2 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-PPTP" parent=Other-e1-e2 packet-mark=e1-e2-Data-PPTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-L2TP" parent=Other-e1-e2 packet-mark=e1-e2-Data-L2TP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e2-PRINTER" parent=Other-e1-e2 packet-mark=e1-e2-Data-PRINTER \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="VoIP-e2-e1" parent=e2-e1 packet-mark="" limit-at=0 queue=default \
priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
disabled=no
add name="Other-e2-e1" parent=e2-e1 packet-mark="" limit-at=1236000 \
queue=default priority=8 max-limit=1313000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e2-e1-Unclassified" parent=Other-e2-e1 \
packet-mark=e2-e1-Unclassified limit-at=0 queue=default priority=8 \
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-VoIPData" parent=VoIP-e2-e1 packet-mark=e2-e1-VoIP-Data \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-HTTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-HTTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-SMTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-SMTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-DNS" parent=Other-e2-e1 packet-mark=e2-e1-Data-DNS limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e2-e1-RDP" parent=Other-e2-e1 packet-mark=e2-e1-Data-RDP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e2-e1-FTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-FTP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e2-e1-HTTPS" parent=Other-e2-e1 packet-mark=e2-e1-Data-HTTPS \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-POP3" parent=Other-e2-e1 packet-mark=e2-e1-Data-POP3 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-NNTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-NNTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-RSYNC" parent=Other-e2-e1 packet-mark=e2-e1-Data-RSYNC \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-VoIP-SIP" parent=VoIP-e2-e1 packet-mark=e2-e1-VoIP-SIP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-VoIP-IAX2" parent=VoIP-e2-e1 packet-mark=e2-e1-VoIP-IAX2 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-PPTP" parent=Other-e2-e1 packet-mark=e2-e1-Data-PPTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-L2TP" parent=Other-e2-e1 packet-mark=e2-e1-Data-L2TP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e2-e1-PRINTER" parent=Other-e2-e1 packet-mark=e2-e1-Data-PRINTER \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="VoIP-e1-e3" parent=e1-e3 packet-mark="" limit-at=0 queue=default \
priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
disabled=no
add name="Other-e1-e3" parent=e1-e3 packet-mark="" limit-at=410000 \
queue=default priority=8 max-limit=436000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e3-Unclassified" parent=Other-e1-e3 \
packet-mark=e1-e3-Unclassified limit-at=0 queue=default priority=8 \
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-VoIPData" parent=VoIP-e1-e3 packet-mark=e1-e3-VoIP-Data \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-HTTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-HTTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-SMTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-SMTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-DNS" parent=Other-e1-e3 packet-mark=e1-e3-Data-DNS limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e3-RDP" parent=Other-e1-e3 packet-mark=e1-e3-Data-RDP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e3-FTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-FTP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e1-e3-HTTPS" parent=Other-e1-e3 packet-mark=e1-e3-Data-HTTPS \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-POP3" parent=Other-e1-e3 packet-mark=e1-e3-Data-POP3 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-NNTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-NNTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-RSYNC" parent=Other-e1-e3 packet-mark=e1-e3-Data-RSYNC \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-VoIP-SIP" parent=VoIP-e1-e3 packet-mark=e1-e3-VoIP-SIP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-VoIP-IAX2" parent=VoIP-e1-e3 packet-mark=e1-e3-VoIP-IAX2 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-PPTP" parent=Other-e1-e3 packet-mark=e1-e3-Data-PPTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-L2TP" parent=Other-e1-e3 packet-mark=e1-e3-Data-L2TP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e1-e3-PRINTER" parent=Other-e1-e3 packet-mark=e1-e3-Data-PRINTER \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="VoIP-e3-e1" parent=e3-e1 packet-mark="" limit-at=0 queue=default \
priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s \
disabled=no
add name="Other-e3-e1" parent=e3-e1 packet-mark="" limit-at=6144000 \
queue=default priority=8 max-limit=6964000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e3-e1-Unclassified" parent=Other-e3-e1 \
packet-mark=e3-e1-Unclassified limit-at=0 queue=default priority=8 \
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-VoIPData" parent=VoIP-e3-e1 packet-mark=e3-e1-VoIP-Data \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-HTTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-HTTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-SMTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-SMTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-DNS" parent=Other-e3-e1 packet-mark=e3-e1-Data-DNS limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e3-e1-RDP" parent=Other-e3-e1 packet-mark=e3-e1-Data-RDP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e3-e1-FTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-FTP limit-at=0 \
queue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name="e3-e1-HTTPS" parent=Other-e3-e1 packet-mark=e3-e1-Data-HTTPS \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-POP3" parent=Other-e3-e1 packet-mark=e3-e1-Data-POP3 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-NNTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-NNTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-RSYNC" parent=Other-e3-e1 packet-mark=e3-e1-Data-RSYNC \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-VoIP-SIP" parent=VoIP-e3-e1 packet-mark=e3-e1-VoIP-SIP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-VoIP-IAX2" parent=VoIP-e3-e1 packet-mark=e3-e1-VoIP-IAX2 \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-PPTP" parent=Other-e3-e1 packet-mark=e3-e1-Data-PPTP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-L2TP" parent=Other-e3-e1 packet-mark=e3-e1-Data-L2TP \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="e3-e1-PRINTER" parent=Other-e3-e1 packet-mark=e3-e1-Data-PRINTER \
limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no