bravelc 发表于 2011-8-9 20:05:49

版主，高手帮我解决mangle的问题！

版主，高手帮我解决mangle的问题！我用了一个网页优先脚本，的确有效果，但有极少数的网站打不开，禁用firwall的mangle网页标记后，那个网站就能够打开，试了很多。请高手帮我分析。补充我是双线ＡＤＳＬ
/ ip firewall mangle
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=msie content=MSIE disabled=no dst-port=80 protocol=\
    tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=jpg content=.jpg disabled=no dst-port=80 protocol=\
    tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=gif content=.gif disabled=no dst-port=80 protocol=\
    tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=htm content=.htm disabled=no dst-port=80 protocol=\
    tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=html content=.html disabled=no dst-port=80 \
    protocol=tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=asp content=.asp disabled=no dst-port=80 protocol=\
    tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=aspx content=.aspx disabled=no dst-port=80 \
    protocol=tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=php content=.php disabled=no dst-port=80 protocol=\
    tcp


/ ip firewall mangle

add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=swf content=.swf disabled=no dst-port=80 protocol=\
    tcp
add action=add-dst-to-address-list address-list=web80 address-list-timeout=5m \
    chain=forward comment=shtml content=.shtml disabled=no dst-port=80 \
    protocol=tcp
add action=mark-connection chain=forward comment=web80 disabled=no \
    new-connection-mark=web passthrough=yes src-address-list=web80
add action=mark-connection chain=forward comment="" disabled=no \
    dst-address-list=web80 new-connection-mark=web passthrough=yes

add action=mark-packet chain=forward comment="" connection-mark=web disabled=no new-packet-mark=web80 passthrough=no

9939781 发表于 2011-8-9 21:41:09

好眼熟的标记
页: [1]
查看完整版本: 版主，高手帮我解决mangle的问题！