恭喜L7专题开启.发个官网wiki上面用L7限速的例子

wbyz20 · 发表于 2009-3-27 17:09:46

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要登录才可以下载或查看，没有账号？注册

×

L7模版

/ip firewall layer7-protocol
add comment="" name=edonkey regexp="^[\C5\D4\E3-\E5].\?.\?.\?.\?([\01\02\05\14\
\15\16\18\19\1A\1B\1C !234568@ABCFGHIJKLMNOPQRSTUVWX[`\81\82\90\91\93\96\
\97\98\99\9A\9B\9C\9E\A0\A1\A2\A3\A4]|Y................\?[ -~]|\96....\$)"
add comment="" name=goboogy regexp="<peerplat>|^get /getfilebyhash\\.cgi\\\?|^\
get /queue_register\\.cgi\\\?|^get /getupdowninfo\\.cgi\\\?"
add comment="" name=soribada regexp="^GETMP3\r\
\nFilename|^\01.\?.\?.\?(Q:\\+|Q2|^\10[\14-\16]\10[\15-\17].\?.\?.\?.\?\
\$"
add comment="" name=rdp regexp=rdpdr.*cliprdr.*rdpsnd
add comment="" name=gnutella regexp="^(gnd[\01\02]\?.\?.\?\01|gnutella connect\
/[012]\\.[0-9]\r\
\n|get /uri-res/n2r\\\?urn:sha1:|get /.*user-agent: (gtk-gnutella|bearshar\
e|mactella|gnucleus|gnotella|limewire|imesh)|get /.*content-type: applicat\
ion/x-gnutella-packets|giv [0-9]*:[0-9a-f]*/|queue [0-9a-f]* [1-9][0-9]\?[\
0-9]\?\\.[1-9][0-9]\?[0-9]\?\\.[1-9][0-9]\?[0-9]\?\\.[1-9][0-9]\?[0-9]\?:[\
1-9][0-9]\?[0-9]\?[0-9]\?|gnutella.*content-type: application/x-gnutella|.\
..................\?lime)"
add comment="" name=cvs regexp="^BEGIN (AUTH|VERIFICATION|GSSAPI) REQUEST\
\n"
add comment="" name=nbns regexp="\01\10\01|\\)\10\01\01|0\10\01"
add comment="" name=shoutcast regexp=\
"icy [1-5][0-9][0-9] [\t-\r -~]*(content-type:audio|icy-)"
add comment="" name=dns regexp="^.\?.\?.\?.\?[\01\02].\?.\?.\?.\?.\?.\?[\01-\?\
][a-z0-9][\01-\?a-z]*[\02-\06][a-z][a-z][fglmoprstuvz]\?[aeop]\?(um)\?[\01\
-\10\1C][\01\03\04\FF]"
add comment="" name=quake-halflife regexp="^\FF\FF\FF\FFget(info|challenge)"
add comment="" name=poco regexp="^\80\94\
\n\01....\1F\9E"
add comment="" name=ciscovpn regexp="^\01\F4\01\F4"
add comment="" name=x11 regexp="^[lb].\?\0B"
add comment="" name=xboxlive regexp="^X\80........\F3|^\06XN"
add comment="" name=applejuice regexp="^ajprot\r\
\n"
add comment="" name=zmaap regexp="^\1B\D7;H[\01\02]\01\?\01"
add comment="" name=live365 regexp=membername.*session.*player
add comment="" name=rlogin regexp=\
"^[a-z][a-z0-9][a-z0-9]+/[1-9][0-9]\?[0-9]\?[0-9]\?00"
add comment="" name=http regexp="http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\
\r -~]*(connection:|content-type:|content-length:|date|post [\t-\r -~]* \
http/[01]\\.[019]"
add comment="" name=sip regexp=\
"^(invite|register|cancel) sip[\t-\r -~]*sip/[0-2]\\.[0-9]"
add comment="" name=pop3 regexp="^(\\+ok |-err )"
add comment="" name=smb regexp="\FFsmb[r%]"
add comment="" name=quake1 regexp="^\80\0C\01quake\03"
add comment="" name=lpd regexp="^(\01[!-~]+|\02[!-~]+\
\n.[\01\02\03][\01-\
\n -~]*|[\03\04][!-~]+[\t-\r]+[a-z][\t-\r -~]*|\05[!-~]+[\t-\r]+([a-z][!-~\
]*[\t-\r]+[1-9][0-9]\?[0-9]\?|root[\t-\r]+[!-~]+).*)\
\n\$"
add comment="" name=mute regexp=\
"^(Public|AES)Key: [0-9a-f]*\
\nEnd(Public|AES)Key\
\n\$"
add comment="" name=ssh regexp="^ssh-[12]\\.[0-9]"
add comment="" name=jabber regexp=\
"<stream:stream[\t-\r ][ -~]*[\t-\r ]xmlns=['\"]jabber"
add comment="" name=bittorrent regexp="^(\13bittorrent protocol|azver\01\$|get\
/scrape\\\?info_hash=)|d1:ad2:id20:|\08'7P\\)[RP]"
add comment="" name=ncp regexp="^(dmdt.*\01.*(\"\"|\11\11|uu)|tncp.*33)"
add comment="" name=tls regexp=\
"^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B)"
add comment="" name=directconnect regexp="^(\\\$mynick |\\\$lock |\\\$key )"
add comment="" name=netbios regexp="\81.\?.\?.[A-P][A-P][A-P][A-P][A-P][A-P][A\
-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][\
A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P][A-P]\
[A-P][A-P][A-P][A-P]"
add comment="" name=tftp regexp="^(\01|\02)[ -~]*(netascii|octet|mail)"
add comment="" name=subspace regexp="^\01....\11\10........\01\$"
add comment="" name=hotline regexp="^....................TRTPHOTL\01\02"
add comment="" name=doom3 regexp="^\FF\FFchallenge"
add comment="" name=ftp regexp="^220[\t-\r -~]*ftp"
add comment="" name=kugoo regexp="^1..\8E"
add comment="" name=tsp regexp=\
"^[\01-\13\16-\$]\01.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?[ -~]+"
add comment="" name=battlefield1942 regexp="^\01\11\10\\|\F8\02\10@\06"
add comment="" name=ssdp regexp="^notify[\t-\r ]\\*[\t-\r ]http/1\\.1[\t-\r -~\
]*ssdpalive|byebye)|^m-search[\t-\r ]\\*[\t-\r ]http/1\\.1[\t-\r -~]*ssd\
p:discover"
add comment="" name=imap regexp="^(\\* ok|a[0-9]+ noop)"
add comment="" name=ares regexp="^\03[]Z].\?.\?\05\$"
add comment="" name=fasttrack regexp="^get (/.download/[ -~]*|/.supernode[ -~]\
|/.status[ -~]|/.network[ -~]*|/.files|/.hash=[0-9a-f]*/[ -~]*) http/1.1|u\
ser-agent: kazaa|x-kazaa(-username|-network|-ip|-supernodeip|-xferid|-xfer\
uid|tag)|^give [0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]\?[0-9]\?[0-9]\?"
add comment="" name=qq regexp="^.\?\02.+\03\$"
add comment="" name=100bao regexp="^\01\01\05\
\n"
add comment="" name=aim regexp=\
"^(\\*[\01\02].*\03\0B|\\*\01.\?.\?.\?.\?\01)|flapon|toc_signon.*0x"
add comment="" name=unknown regexp=.
add comment="" name=msn-filetransfer regexp=\
"^(ver [ -~]*msnftp\r\
\nver msnftp\r\
\nusr|method msnmsgr"
add comment="" name=yahoo regexp=\
"^(ymsg|ypns|yhoo).\?.\?.\?.\?.\?.\?.\?[lwt].*\C0\80"
add comment="" name=validcertssl regexp="^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\
\01\?.*\0B).*(thawte|equifax secure|rsa data security, inc|verisign, inc|g\
te cybertrust root|entrust\\.net limited)"
add comment="" name=ntp regexp="^([\13\1B#\D3\DB\E3]|[\14\1C\$].......\?.\?.\?\
.\?.\?.\?.\?.\?.\?[\C6-\FF])"
add comment="" name=gnucleuslan regexp=\
"gnuclear connect/[\t-\r -~]*user-agent: gnucleus [\t-\r -~]*lan:"
add comment="" name=vnc regexp="^rfb 00[1-9]\\.00[0-9]\
\n\$"
add comment="" name=bgp regexp=\
"^\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF\FF..\?\01[\03\04]"
add comment="" name=tesla regexp="\03\9A\89\"111\\.00 Beta |\E2<i\1E\1C\E9"
add comment="" name=openft regexp="x-openftalias: [-)(0-9a-z ~.]"
add comment="" name=h323 regexp=\
"^\03..\?\08...\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?\05"
add comment="" name=finger regexp=\
"^[a-z][a-z0-9\\-_]+|login: [\t-\r -~]* name: [\t-\r -~]* Directory:"
add comment="" name=ident regexp="^[1-9][0-9]\?[0-9]\?[0-9]\?[0-9]\?[\t-\r]*,[\
\t-\r]*[1-9][0-9]\?[0-9]\?[0-9]\?[0-9]\?(\r\
\n|[\r\
\n])\?\$"
add comment="" name=gkrellm regexp="^gkrellm [23].[0-9].[0-9]\
\n\$"
add comment="" name=hddtemp regexp=\
"^\\|/dev/[a-z][a-z][a-z]\\|[0-9a-z]*\\|[0-9][0-9]\\|[cfk]\\|"
add comment="" name=socks regexp="\05[\01-\08]*\05[\01-\08]\?.*\05[\01-\03][\
\01\03].*\05[\01-\08]\?[\01\03]"
add comment="" name=biff regexp="^[a-z][a-z0-9]+@[1-9][0-9]+\$"
add comment="" name=dhcp regexp="^[\01\02][\01- ]\06.*c\82sc"
add comment="" name=smtp regexp="^220[\t-\r -~]* (e\?smtp|simple mail)"
add comment="" name=ipp regexp=ipp://
add comment="" name=msnmessenger regexp="ver [0-9]+ msnp[1-9][0-9]\? [\t-\r -~\
]*cvr0\r\
\n\$|usr 1 [!-~]+ [0-9. ]+\r\
\n\$|ans 1 [!-~]+ [0-9. ]+\r\
\n\$"
add comment="" name=irc regexp="^(nick[\t-\r -~]*user[\t-\r -~]*:|user[\t-\r -\
~]*:[\02-\r -~]*nick[\t-\r -~]*\r\
\n)"
add comment="" name=gopher regexp="^[\t-\r]*[1-9,+tgi][\t-\r -~]*\t[\t-\r -~]*\
\t[a-z0-9.]*\\.[a-z][a-z].\?.\?\t[1-9]"
add comment="" name=telnet regexp="^\FF[\FB-\FE].\FF[\FB-\FE].\FF[\FB-\FE]"
add comment="" name=snmp regexp="^\02\01\04.+([\A0-\A3]\02[\01-\04].\?.\?.\?.\
\?\02\01.\?\02\01.\?0|\A4\06.+@\04.\?.\?.\?.\?\02\01.\?\02\01.\?C)"
add comment="" name=nntp regexp=\
"^(20[01][\t-\r -~]*AUTHINFO USER|20[01][\t-\r -~]*news)"
add comment="" name=aimwebcontent regexp=user-agent:aim/
add comment="" name=rtsp regexp="rtsp/1.0 200 ok"
add comment="" name=skypeout regexp="^(\01.\?.\?.\?.\?.\?.\?.\?.\?\01|\02.\?.\
\?.\?.\?.\?.\?.\?.\?\02|\03.\?.\?.\?.\?.\?.\?.\?.\?\03|\04.\?.\?.\?.\?.\?.\
\?.\?.\?\04|\05.\?.\?.\?.\?.\?.\?.\?.\?\05|\06.\?.\?.\?.\?.\?.\?.\?.\?\06|\
\07.\?.\?.\?.\?.\?.\?.\?.\?\07|\08.\?.\?.\?.\?.\?.\?.\?.\?\08|\t.\?.\?.\?.\
\?.\?.\?.\?.\?\t|\
\n.\?.\?.\?.\?.\?.\?.\?.\?\
\n|\0B.\?.\?.\?.\?.\?.\?.\?.\?\0B|\0C.\?.\?.\?.\?.\?.\?.\?.\?\0C|\r.\?.\?.\
\?.\?.\?.\?.\?.\?\r|\0E.\?.\?.\?.\?.\?.\?.\?.\?\0E|\0F.\?.\?.\?.\?.\?.\?.\
\?.\?\0F|\10.\?.\?.\?.\?.\?.\?.\?.\?\10|\11.\?.\?.\?.\?.\?.\?.\?.\?\11|\12\
.\?.\?.\?.\?.\?.\?.\?.\?\12|\13.\?.\?.\?.\?.\?.\?.\?.\?\13|\14.\?.\?.\?.\?\
.\?.\?.\?.\?\14|\15.\?.\?.\?.\?.\?.\?.\?.\?\15|\16.\?.\?.\?.\?.\?.\?.\?.\?\
\16|\17.\?.\?.\?.\?.\?.\?.\?.\?\17|\18.\?.\?.\?.\?.\?.\?.\?.\?\18|\19.\?.\
\?.\?.\?.\?.\?.\?.\?\19|\1A.\?.\?.\?.\?.\?.\?.\?.\?\1A|\1B.\?.\?.\?.\?.\?.\
\?.\?.\?\1B|\1C.\?.\?.\?.\?.\?.\?.\?.\?\1C|\1D.\?.\?.\?.\?.\?.\?.\?.\?\1D|\
\1E.\?.\?.\?.\?.\?.\?.\?.\?\1E|\1F.\?.\?.\?.\?.\?.\?.\?.\?\1F| .\?.\?.\?.\
\?.\?.\?.\?.\? |!.\?.\?.\?.\?.\?.\?.\?.\?!|\".\?.\?.\?.\?.\?.\?.\?.\?\"|#.\
\?.\?.\?.\?.\?.\?.\?.\?#|\\\$.\?.\?.\?.\?.\?.\?.\?.\?\\\$|%.\?.\?.\?.\?.\?\
.\?.\?.\?%|&.\?.\?.\?.\?.\?.\?.\?.\?&|'.\?.\?.\?.\?.\?.\?.\?.\?'|\$.\?.\?\
.\?.\?.\?.\?.\?.\?\\(|\$.\?.\?.\?.\?.\?.\?.\?.\?\\)|\\*.\?.\?.\?.\?.\?.\?\
.\?.\?\\*|\\+.\?.\?.\?.\?.\?.\?.\?.\?\\+|,.\?.\?.\?.\?.\?.\?.\?.\?,|-.\?.\
\?.\?.\?.\?.\?.\?.\?-|\\..\?.\?.\?.\?.\?.\?.\?.\?\\.|/.\?.\?.\?.\?.\?.\?.\
\?.\?/|0.\?.\?.\?.\?.\?.\?.\?.\?0|1.\?.\?.\?.\?.\?.\?.\?.\?1|2.\?.\?.\?.\?\
.\?.\?.\?.\?2|3.\?.\?.\?.\?.\?.\?.\?.\?3|4.\?.\?.\?.\?.\?.\?.\?.\?4|5.\?.\
\?.\?.\?.\?.\?.\?.\?5|6.\?.\?.\?.\?.\?.\?.\?.\?6|7.\?.\?.\?.\?.\?.\?.\?.\?\
7|8.\?.\?.\?.\?.\?.\?.\?.\?8|9.\?.\?.\?.\?.\?.\?.\?.\?9|:.\?.\?.\?.\?.\?.\
\?.\?.\?:|;.\?.\?.\?.\?.\?.\?.\?.\?;|<.\?.\?.\?.\?.\?.\?.\?.\?<|=.\?.\?.\?\
.\?.\?.\?.\?.\?=|>.\?.\?.\?.\?.\?.\?.\?.\?>|\\\?.\?.\?.\?.\?.\?.\?.\?.\?\\\
\?|@.\?.\?.\?.\?.\?.\?.\?.\?@|A.\?.\?.\?.\?.\?.\?.\?.\?A|B.\?.\?.\?.\?.\?.\
\?.\?.\?B|C.\?.\?.\?.\?.\?.\?.\?.\?C|D.\?.\?.\?.\?.\?.\?.\?.\?D|E.\?.\?.\?\
.\?.\?.\?.\?.\?E|F.\?.\?.\?.\?.\?.\?.\?.\?F|G.\?.\?.\?.\?.\?.\?.\?.\?G|H.\
\?.\?.\?.\?.\?.\?.\?.\?H|I.\?.\?.\?.\?.\?.\?.\?.\?I|J.\?.\?.\?.\?.\?.\?.\?\
.\?J|K.\?.\?.\?.\?.\?.\?.\?.\?K|L.\?.\?.\?.\?.\?.\?.\?.\?L|M.\?.\?.\?.\?.\
\?.\?.\?.\?M|N.\?.\?.\?.\?.\?.\?.\?.\?N|O.\?.\?.\?.\?.\?.\?.\?.\?O|P.\?.\?\
.\?.\?.\?.\?.\?.\?P|Q.\?.\?.\?.\?.\?.\?.\?.\?Q|R.\?.\?.\?.\?.\?.\?.\?.\?R|\
S.\?.\?.\?.\?.\?.\?.\?.\?S|T.\?.\?.\?.\?.\?.\?.\?.\?T|U.\?.\?.\?.\?.\?.\?.\
\?.\?U|V.\?.\?.\?.\?.\?.\?.\?.\?V|W.\?.\?.\?.\?.\?.\?.\?.\?W|X.\?.\?.\?.\?\
.\?.\?.\?.\?X|Y.\?.\?.\?.\?.\?.\?.\?.\?Y|Z.\?.\?.\?.\?.\?.\?.\?.\?Z|\\[.\?\
.\?.\?.\?.\?.\?.\?.\?\\[|\\].\?.\?.\?.\?.\?.\?.\?.\?\\]|\\].\?.\?.\?.\?.\?\
.\?.\?.\?\\]|\\^.\?.\?.\?.\?.\?.\?.\?.\?\\^|_.\?.\?.\?.\?.\?.\?.\?.\?_|`.\
\?.\?.\?.\?.\?.\?.\?.\?`|a.\?.\?.\?.\?.\?.\?.\?.\?a|b.\?.\?.\?.\?.\?.\?.\?\
.\?b|c.\?.\?.\?.\?.\?.\?.\?.\?c|d.\?.\?.\?.\?.\?.\?.\?.\?d|e.\?.\?.\?.\?.\
\?.\?.\?.\?e|f.\?.\?.\?.\?.\?.\?.\?.\?f|g.\?.\?.\?.\?.\?.\?.\?.\?g|h.\?.\?\
.\?.\?.\?.\?.\?.\?h|i.\?.\?.\?.\?.\?.\?.\?.\?i|j.\?.\?.\?.\?.\?.\?.\?.\?j|\
k.\?.\?.\?.\?.\?.\?.\?.\?k|l.\?.\?.\?.\?.\?.\?.\?.\?l|m.\?.\?.\?.\?.\?.\?.\
\?.\?m|n.\?.\?.\?.\?.\?.\?.\?.\?n|o.\?.\?.\?.\?.\?.\?.\?.\?o|p.\?.\?.\?.\?\
.\?.\?.\?.\?p|q.\?.\?.\?.\?.\?.\?.\?.\?q|r.\?.\?.\?.\?.\?.\?.\?.\?r|s.\?.\
\?.\?.\?.\?.\?.\?.\?s|t.\?.\?.\?.\?.\?.\?.\?.\?t|u.\?.\?.\?.\?.\?.\?.\?.\?\
u|v.\?.\?.\?.\?.\?.\?.\?.\?v|w.\?.\?.\?.\?.\?.\?.\?.\?w|x.\?.\?.\?.\?.\?.\
\?.\?.\?x|y.\?.\?.\?.\?.\?.\?.\?.\?y|z.\?.\?.\?.\?.\?.\?.\?.\?z|\\{.\?.\?.\
\?.\?.\?.\?.\?.\?\\{|\\|.\?.\?.\?.\?.\?.\?.\?.\?\\||\\}.\?.\?.\?.\?.\?.\?.\
\?.\?\\}|~.\?.\?.\?.\?.\?.\?.\?.\?~|\7F.\?.\?.\?.\?.\?.\?.\?.\?\7F|\80.\?.\
\?.\?.\?.\?.\?.\?.\?\80|\81.\?.\?.\?.\?.\?.\?.\?.\?\81|\82.\?.\?.\?.\?.\?.\
\?.\?.\?\82|\83.\?.\?.\?.\?.\?.\?.\?.\?\83|\84.\?.\?.\?.\?.\?.\?.\?.\?\84|\
\85.\?.\?.\?.\?.\?.\?.\?.\?\85|\86.\?.\?.\?.\?.\?.\?.\?.\?\86|\87.\?.\?.\?\
.\?.\?.\?.\?.\?\87|\88.\?.\?.\?.\?.\?.\?.\?.\?\88|\89.\?.\?.\?.\?.\?.\?.\?\
.\?\89|\8A.\?.\?.\?.\?.\?.\?.\?.\?\8A|\8B.\?.\?.\?.\?.\?.\?.\?.\?\8B|\8C.\
\?.\?.\?.\?.\?.\?.\?.\?\8C|\8D.\?.\?.\?.\?.\?.\?.\?.\?\8D|\8E.\?.\?.\?.\?.\
\?.\?.\?.\?\8E|\8F.\?.\?.\?.\?.\?.\?.\?.\?\8F|\90.\?.\?.\?.\?.\?.\?.\?.\?\
\90|\91.\?.\?.\?.\?.\?.\?.\?.\?\91|\92.\?.\?.\?.\?.\?.\?.\?.\?\92|\93.\?.\
\?.\?.\?.\?.\?.\?.\?\93|\94.\?.\?.\?.\?.\?.\?.\?.\?\94|\95.\?.\?.\?.\?.\?.\
\?.\?.\?\95|\96.\?.\?.\?.\?.\?.\?.\?.\?\96|\97.\?.\?.\?.\?.\?.\?.\?.\?\97|\
\98.\?.\?.\?.\?.\?.\?.\?.\?\98|\99.\?.\?.\?.\?.\?.\?.\?.\?\99|\9A.\?.\?.\?\
.\?.\?.\?.\?.\?\9A|\9B.\?.\?.\?.\?.\?.\?.\?.\?\9B|\9C.\?.\?.\?.\?.\?.\?.\?\
.\?\9C|\9D.\?.\?.\?.\?.\?.\?.\?.\?\9D|\9E.\?.\?.\?.\?.\?.\?.\?.\?\9E|\9F.\
\?.\?.\?.\?.\?.\?.\?.\?\9F|\A0.\?.\?.\?.\?.\?.\?.\?.\?\A0|\A1.\?.\?.\?.\?.\
\?.\?.\?.\?\A1|\A2.\?.\?.\?.\?.\?.\?.\?.\?\A2|\A3.\?.\?.\?.\?.\?.\?.\?.\?\
\A3|\A4.\?.\?.\?.\?.\?.\?.\?.\?\A4|\A5.\?.\?.\?.\?.\?.\?.\?.\?\A5|\A6.\?.\
\?.\?.\?.\?.\?.\?.\?\A6|\A7.\?.\?.\?.\?.\?.\?.\?.\?\A7|\A8.\?.\?.\?.\?.\?.\
\?.\?.\?\A8|\A9.\?.\?.\?.\?.\?.\?.\?.\?\A9|\AA.\?.\?.\?.\?.\?.\?.\?.\?\AA|\
\AB.\?.\?.\?.\?.\?.\?.\?.\?\AB|\AC.\?.\?.\?.\?.\?.\?.\?.\?\AC|\AD.\?.\?.\?\
.\?.\?.\?.\?.\?\AD|\AE.\?.\?.\?.\?.\?.\?.\?.\?\AE|\AF.\?.\?.\?.\?.\?.\?.\?\
.\?\AF|\B0.\?.\?.\?.\?.\?.\?.\?.\?\B0|\B1.\?.\?.\?.\?.\?.\?.\?.\?\B1|\B2.\
\?.\?.\?.\?.\?.\?.\?.\?\B2|\B3.\?.\?.\?.\?.\?.\?.\?.\?\B3|\B4.\?.\?.\?.\?.\
\?.\?.\?.\?\B4|\B5.\?.\?.\?.\?.\?.\?.\?.\?\B5|\B6.\?.\?.\?.\?.\?.\?.\?.\?\
\B6|\B7.\?.\?.\?.\?.\?.\?.\?.\?\B7|\B8.\?.\?.\?.\?.\?.\?.\?.\?\B8|\B9.\?.\
\?.\?.\?.\?.\?.\?.\?\B9|\BA.\?.\?.\?.\?.\?.\?.\?.\?\BA|\BB.\?.\?.\?.\?.\?.\
\?.\?.\?\BB|\BC.\?.\?.\?.\?.\?.\?.\?.\?\BC|\BD.\?.\?.\?.\?.\?.\?.\?.\?\BD|\
\BE.\?.\?.\?.\?.\?.\?.\?.\?\BE|\BF.\?.\?.\?.\?.\?.\?.\?.\?\BF|\C0.\?.\?.\?\
.\?.\?.\?.\?.\?\C0|\C1.\?.\?.\?.\?.\?.\?.\?.\?\C1|\C2.\?.\?.\?.\?.\?.\?.\?\
.\?\C2|\C3.\?.\?.\?.\?.\?.\?.\?.\?\C3|\C4.\?.\?.\?.\?.\?.\?.\?.\?\C4|\C5.\
\?.\?.\?.\?.\?.\?.\?.\?\C5|\C6.\?.\?.\?.\?.\?.\?.\?.\?\C6|\C7.\?.\?.\?.\?.\
\?.\?.\?.\?\C7|\C8.\?.\?.\?.\?.\?.\?.\?.\?\C8|\C9.\?.\?.\?.\?.\?.\?.\?.\?\
\C9|\CA.\?.\?.\?.\?.\?.\?.\?.\?\CA|\CB.\?.\?.\?.\?.\?.\?.\?.\?\CB|\CC.\?.\
\?.\?.\?.\?.\?.\?.\?\CC|\CD.\?.\?.\?.\?.\?.\?.\?.\?\CD|\CE.\?.\?.\?.\?.\?.\
\?.\?.\?\CE|\CF.\?.\?.\?.\?.\?.\?.\?.\?\CF|\D0.\?.\?.\?.\?.\?.\?.\?.\?\D0|\
\D1.\?.\?.\?.\?.\?.\?.\?.\?\D1|\D2.\?.\?.\?.\?.\?.\?.\?.\?\D2|\D3.\?.\?.\?\
.\?.\?.\?.\?.\?\D3|\D4.\?.\?.\?.\?.\?.\?.\?.\?\D4|\D5.\?.\?.\?.\?.\?.\?.\?\
.\?\D5|\D6.\?.\?.\?.\?.\?.\?.\?.\?\D6|\D7.\?.\?.\?.\?.\?.\?.\?.\?\D7|\D8.\
\?.\?.\?.\?.\?.\?.\?.\?\D8|\D9.\?.\?.\?.\?.\?.\?.\?.\?\D9|\DA.\?.\?.\?.\?.\
\?.\?.\?.\?\DA|\DB.\?.\?.\?.\?.\?.\?.\?.\?\DB|\DC.\?.\?.\?.\?.\?.\?.\?.\?\
\DC|\DD.\?.\?.\?.\?.\?.\?.\?.\?\DD|\DE.\?.\?.\?.\?.\?.\?.\?.\?\DE|\DF.\?.\
\?.\?.\?.\?.\?.\?.\?\DF|\E0.\?.\?.\?.\?.\?.\?.\?.\?\E0|\E1.\?.\?.\?.\?.\?.\
\?.\?.\?\E1|\E2.\?.\?.\?.\?.\?.\?.\?.\?\E2|\E3.\?.\?.\?.\?.\?.\?.\?.\?\E3|\
\E4.\?.\?.\?.\?.\?.\?.\?.\?\E4|\E5.\?.\?.\?.\?.\?.\?.\?.\?\E5|\E6.\?.\?.\?\
.\?.\?.\?.\?.\?\E6|\E7.\?.\?.\?.\?.\?.\?.\?.\?\E7|\E8.\?.\?.\?.\?.\?.\?.\?\
.\?\E8|\E9.\?.\?.\?.\?.\?.\?.\?.\?\E9|\EA.\?.\?.\?.\?.\?.\?.\?.\?\EA|\EB.\
\?.\?.\?.\?.\?.\?.\?.\?\EB|\EC.\?.\?.\?.\?.\?.\?.\?.\?\EC|\ED.\?.\?.\?.\?.\
\?.\?.\?.\?\ED|\EE.\?.\?.\?.\?.\?.\?.\?.\?\EE|\EF.\?.\?.\?.\?.\?.\?.\?.\?\
\EF|\F0.\?.\?.\?.\?.\?.\?.\?.\?\F0|\F1.\?.\?.\?.\?.\?.\?.\?.\?\F1|\F2.\?.\
\?.\?.\?.\?.\?.\?.\?\F2|\F3.\?.\?.\?.\?.\?.\?.\?.\?\F3|\F4.\?.\?.\?.\?.\?.\
\?.\?.\?\F4|\F5.\?.\?.\?.\?.\?.\?.\?.\?\F5|\F6.\?.\?.\?.\?.\?.\?.\?.\?\F6|\
\F7.\?.\?.\?.\?.\?.\?.\?.\?\F7|\F8.\?.\?.\?.\?.\?.\?.\?.\?\F8|\F9.\?.\?.\?\
.\?.\?.\?.\?.\?\F9|\FA.\?.\?.\?.\?.\?.\?.\?.\?\FA|\FB.\?.\?.\?.\?.\?.\?.\?\
.\?\FB|\FC.\?.\?.\?.\?.\?.\?.\?.\?\FC|\FD.\?.\?.\?.\?.\?.\?.\?.\?\FD|\FE.\
\?.\?.\?.\?.\?.\?.\?.\?\FE|\FF.\?.\?.\?.\?.\?.\?.\?.\?\FF)"
add comment="" name=skypetoskype regexp="^..\02............."
add comment="" name=counterstrike-source regexp=\
"^\FF\FF\FF\FF.*cstrikeCounter-Strike"
add comment="" name=halflife2-deathmatch regexp=\
"^\FF\FF\FF\FF.*hl2mpDeathmatch"
add comment="" name=freenet regexp="^\01[\08\t][\03\04]"
add comment="" name=battlefield2 regexp="^(\11 \01...\?\11|\FE\FD.\?.\?.\?.\?.\
\?.\?(\14\01\06|\FF\FF\FF))|[]\01].\?battlefield2"
add comment="" name=napster regexp="^(.[\02\06][!-~]+ [!-~]+ [0-9][0-9]\?[0-9]\
\?[0-9]\?[0-9]\? \"[\t-\r -~]+\" ([0-9]|10)|1(send|get)[!-~]+ \"[\t-\r -~]\
+\")"
add comment="" name=soulseek regexp=\
"^(\05..\?|.\01.[ -~]+\01F..\?.\?.\?.\?.\?.\?.\?)\$"
add comment="" name=xunlei regexp="^[()]...\?.\?.\?(reg|get|query)"
add comment="" name=ssl regexp=\
"^(.\?.\?\16\03.*\16\03|.\?.\?\01\03\01\?.*\0B)"
add comment="" name=citrix regexp="2&\85\92X"
add comment="" name=whois regexp="^[ !-~]+\r\
\n\$"
add comment="" name=dayofdefeat-source regexp=\
"^\FF\FF\FF\FF.*dodDay of Defeat"
add comment="" name=teamspeak regexp="^\F4\BE\03.*teamspeak"
add comment="" name=worldofwarcraft regexp="^\06\EC\01"
add comment="" name=ventrilo regexp="^..\?v\\\$\CF"
add comment="" name=http-rtsp regexp="^(get[\t-\r -~]* Accept: application/x-r\
tsp-tunnelled|http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\r -~]*a=contro\
l:rtsp://)"
add comment="" name=thecircle regexp=\
"^t\03ni.\?[\01-\06]\?t[\01-\05]s[\
\n\0B](glob|who are you\$|query data)"
add comment="" name=uucp regexp="^\10here="
add comment="" name=pcanywhere regexp="^(nq|st)\$"
add comment="" name=subversion regexp="^\\( success \\( 1 2 \\("
add comment="" name=imesh regexp="^(post[\t-\r -~]*<asswordHash>.............\
...................</PasswordHash><ClientVer>|4\80\?\r\?\FC\FF\04|get[\t-\
\r -~]*Host: imsh\\.download-prod\\.musicnet\\.com|\02(\01|\02)\83.\?.\?.\
\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?.\?\
.\?\02(\01|\02)\83)"
add comment="" name=cimd regexp="\02[0-4][0-9]:[0-9]+.*\03\$"
add comment="" name=mohaa regexp="^\FF\FF\FF\FFgetstatus\
\n"
add comment="" name=stun regexp="^[\01\02]................\?\$"
add comment="" name=tor regexp=TOR1.*<identity>
add comment="" name=radmin regexp="^\01\01(\08\08|\1B\1B)\$"
add comment="" name=unset regexp=.
add comment="" name=chikka regexp="^CTPv1.[123] Kamusta.*\r\
\n\$"
add comment="" name=replaytv-ivs regexp="^(get /ivs-IVSGetFileChunk|http/(0\\.\
9|1\\.0|1\\.1) [1-5][0-9][0-9] [\t-\r -~]*#####REPLAY_CHUNK_START#####)"
add comment="" name=armagetron regexp=YCLC_E|CYEL

wbyz20 · 发表于 2009-3-27 17:10:47

Mangle标记
/ip firewall mangle
add action=mark-packet chain=prerouting comment=100bao_p2p disabled=no \
in-interface=dsl layer7-protocol=100bao new-packet-mark=100bao_p2p_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=100bao new-packet-mark=100bao_p2p_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="aim mesenger" disabled=no \
in-interface=dsl layer7-protocol=aim new-packet-mark=aim_mesanger_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=aim new-packet-mark=aim_mesanger_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=aim_messenger_web disabled=no \
in-interface=dsl layer7-protocol=aimwebcontent new-packet-mark=\
aim_mesenger_web_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=aimwebcontent new-packet-mark=aim_mesenger_web_out \
out-interface=dsl passthrough=yes
add action=mark-packet chain=prerouting comment=applejuice_p2p disabled=no \
in-interface=dsl layer7-protocol=applejuice new-packet-mark=applejuice_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=applejuice new-packet-mark=applejuice_out out-interface=\
dsl passthrough=yes
add action=mark-packet chain=prerouting comment=ares_p2p disabled=no \
in-interface=dsl layer7-protocol=ares new-packet-mark=ares_p2p_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=ares new-packet-mark=ares_p2p_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=bgp_routing disabled=no \
in-interface=dsl layer7-protocol=bgp new-packet-mark=bgp_routing_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=bgp new-packet-mark=bgp_routing_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=bittorent_p2p disabled=no \
in-interface=dsl layer7-protocol=bittorrent new-packet-mark=bittorent_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=bittorrent new-packet-mark=bittorent_out out-interface=\
dsl passthrough=yes
add action=mark-packet chain=prerouting comment=dhcp disabled=no \
in-interface=dsl layer7-protocol=dhcp new-packet-mark=dhcp_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=dhcp new-packet-mark=dhcp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"Direct Connect - P2P filesharing " disabled=no in-interface=dsl \
layer7-protocol=directconnect new-packet-mark=DC_p2p_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=directconnect new-packet-mark=DC_p2p_out out-interface=\
dsl passthrough=yes
add action=mark-packet chain=prerouting comment="DNS - Domain Name System " \
disabled=no in-interface=dsl layer7-protocol=dns new-packet-mark=DNS_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=dns new-packet-mark=DNS_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"eDonkey2000 - P2P filesharing " disabled=no in-interface=dsl \
layer7-protocol=edonkey new-packet-mark=edonkey_p2p_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=edonkey new-packet-mark=edonkey_p2p_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"FastTrack - P2P filesharing (Kazaa, Morpheus, iMesh, Grokster, etc)" \
disabled=no in-interface=dsl layer7-protocol=fasttrack new-packet-mark=\
fasttrack_p2p_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=fasttrack new-packet-mark=fasttrack_p2p_out \
out-interface=dsl passthrough=yes
add action=mark-packet chain=prerouting comment=\
"FTP - File Transfer Protocol " disabled=no in-interface=dsl \
layer7-protocol=ftp new-packet-mark=ftp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=ftp new-packet-mark=ftp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="GnucleusLAN - LAN-only P2P " \
disabled=no in-interface=dsl layer7-protocol=gnucleuslan new-packet-mark=\
gnu_p2p_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=gnucleuslan new-packet-mark=gnu_p2p_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="Gnutella - P2P filesharing" \
disabled=no in-interface=dsl layer7-protocol=gnutella new-packet-mark=\
gnutella_p2p_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=gnutella new-packet-mark=gnutella_p2p_out out-interface=\
dsl passthrough=yes
add action=mark-packet chain=prerouting comment=\
"GoBoogy - a Korean P2P protocol" disabled=no in-interface=dsl \
layer7-protocol=goboogy new-packet-mark=gobogy_p2p_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=goboogy new-packet-mark=gobogy_p2p_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="H.323 - Voice over IP" \
disabled=no in-interface=dsl layer7-protocol=h323 new-packet-mark=\
h323_voiceoverip_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=h323 new-packet-mark=h323_voiceoverip_out out-interface=\
dsl passthrough=yes
add action=mark-packet chain=prerouting comment="RTSP tunneled within HTTP" \
disabled=no in-interface=dsl layer7-protocol=http-rtsp new-packet-mark=\
httprtsp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=http-rtsp new-packet-mark=httprtsp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"www HyperText Transfer Protocol " disabled=no in-interface=dsl \
layer7-protocol=http new-packet-mark=http_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=http new-packet-mark=http_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"Ident - Identification Protocol - RFC 1413" disabled=no in-interface=dsl \
layer7-protocol=ident new-packet-mark=ident_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=ident new-packet-mark=ident_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"IMAP - Internet Message Access Protocol (A common e-mail protocol)" \
disabled=no in-interface=dsl layer7-protocol=imap new-packet-mark=imap_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=imap new-packet-mark=imap_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"iMesh - the native protocol of iMesh, a P2P application " disabled=no \
in-interface=dsl layer7-protocol=imesh new-packet-mark=imesh_p2p_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=imesh new-packet-mark=imesh_p2p_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="IRC - Internet Relay Chat" \
disabled=no in-interface=dsl layer7-protocol=irc new-packet-mark=irc_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=irc new-packet-mark=irc_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"KuGoo - a Chinese P2P program " disabled=no in-interface=dsl \
layer7-protocol=kugoo new-packet-mark=koogo_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=kugoo new-packet-mark=koogo_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"MSN (Micosoft Network) Messenger file transfers " disabled=no \
in-interface=dsl layer7-protocol=msn-filetransfer new-packet-mark=\
msnfile_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=msn-filetransfer new-packet-mark=msnfile_out \
out-interface=dsl passthrough=yes
add action=mark-packet chain=prerouting comment="MSN Messenger " disabled=no \
in-interface=dsl layer7-protocol=msnmessenger new-packet-mark=msn_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=msnmessenger new-packet-mark=msn_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="MUTE - P2P filesharing " \
disabled=no in-interface=dsl layer7-protocol=mute new-packet-mark=\
mute_p2p_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=mute new-packet-mark=mute_p2p_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="Napster - P2P filesharing" \
disabled=no in-interface=dsl layer7-protocol=napster new-packet-mark=\
napster_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=napster new-packet-mark=napster_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"NetBIOS - Network Basic Input Output System" disabled=no in-interface=\
dsl layer7-protocol=netbios new-packet-mark=netbios_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=netbios new-packet-mark=netbios_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"NNTP - Network News Transfer Protocol " disabled=no in-interface=dsl \
layer7-protocol=nntp new-packet-mark=nntp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=nntp new-packet-mark=nntp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"SNTP - (Simple) Network Time Protocol " disabled=no in-interface=dsl \
layer7-protocol=ntp new-packet-mark=ntp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=ntp new-packet-mark=ntp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"Remote Administrator - remote desktop for MS Windows" disabled=no \
in-interface=dsl layer7-protocol=radmin new-packet-mark=radmin_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=radmin new-packet-mark=radmin_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"Remote Desktop Protocol (used in Windows Terminal Services)" disabled=no \
in-interface=dsl layer7-protocol=rdp new-packet-mark=rdp_in passthrough=\
yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=rdp new-packet-mark=rdp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"RTSP - Real Time Streaming Protocol " disabled=no in-interface=dsl \
layer7-protocol=rtsp new-packet-mark=rtsp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=rtsp new-packet-mark=rtsp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"SIP - Session Initiation Protocol - Internet telephony " disabled=no \
in-interface=dsl layer7-protocol=sip new-packet-mark=sip_in passthrough=\
yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=sip new-packet-mark=sip_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"Skype to phone - UDP voice call " disabled=no in-interface=dsl \
layer7-protocol=skypeout new-packet-mark=skypeout_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=skypeout new-packet-mark=skypeout_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"Skype to Skype - UDP voice call " disabled=no in-interface=dsl \
layer7-protocol=skypetoskype new-packet-mark=skype2skype_in passthrough=\
yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=skypetoskype new-packet-mark=skype2skype_out \
out-interface=dsl passthrough=yes
add action=mark-packet chain=prerouting comment=\
"POP3 - Post Office Protocol version 3" disabled=no in-interface=dsl \
layer7-protocol=pop3 new-packet-mark=pop3_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=pop3 new-packet-mark=pop3_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"SMTP - Simple Mail Transfer Protocol " disabled=no in-interface=dsl \
layer7-protocol=smtp new-packet-mark=smtp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=smtp new-packet-mark=smtp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"SNMP - Simple Network Management Protocol " disabled=no in-interface=dsl \
layer7-protocol=snmp new-packet-mark=snmp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=snmp new-packet-mark=snmp_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="Soulseek - P2P filesharing " \
disabled=no in-interface=dsl layer7-protocol=soulseek new-packet-mark=\
soulsek_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=soulseek new-packet-mark=soulsek_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment="SSH - Secure SHell" \
disabled=no in-interface=dsl layer7-protocol=ssh new-packet-mark=ssh_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=ssh new-packet-mark=ssh_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"SSL and TLS - Secure Socket Layer / Transport Layer Security " disabled=\
no in-interface=dsl layer7-protocol=ssl new-packet-mark=ssl_in \
passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=ssl new-packet-mark=ssl_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=vnc disabled=no in-interface=\
dsl layer7-protocol=vnc new-packet-mark=vnc_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=vnc new-packet-mark=vnc_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"TeamSpeak - VoIP application " disabled=no in-interface=dsl \
layer7-protocol=teamspeak new-packet-mark=teamspeak_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=teamspeak new-packet-mark=teamspeak_out out-interface=dsl \
passthrough=yes

wbyz20 · 发表于 2009-3-27 17:11:30

tree队列树限速
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=\
10000000 max-limit=11000000 name=DSL_IN packet-mark="" parent=global-in \
priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=100bao_p2p_in packet-mark=100bao_p2p_in parent=DSL_IN \
priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesanger_in packet-mark=aim_mesanger_in parent=\
DSL_IN priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesenger_web_in packet-mark=aim_mesenger_web_in \
parent=DSL_IN priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=applejuice_in packet-mark=applejuice_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ares_p2p_in packet-mark=ares_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=http_in packet-mark=http_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=bittorent_in packet-mark=bittorent_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=dhcp_in packet-mark=dhcp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DC_p2p_in packet-mark=DC_p2p_in parent=DSL_IN priority=7 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DNS_in packet-mark=DNS_in parent=DSL_IN priority=1 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=edonkey_p2p_in packet-mark=edonkey_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=fasttrack_p2p_in packet-mark=fasttrack_p2p_in parent=\
DSL_IN priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ftp_in packet-mark=ftp_in parent=DSL_IN priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnu_p2p_in packet-mark=gnu_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnutella_p2p_in packet-mark=gnutella_p2p_in parent=\
DSL_IN priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gobogy_p2p_in packet-mark=gobogy_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=h323_voiceoverip_in packet-mark=h323_voiceoverip_in \
parent=DSL_IN priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=httprtsp_in packet-mark=httprtsp_in parent=DSL_IN \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ident_in packet-mark=ident_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imap_in packet-mark=imap_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imesh_p2p_in packet-mark=imesh_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=irc_in packet-mark=irc_in parent=DSL_IN priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msnfile_in packet-mark=msnfile_in parent=DSL_IN \
priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=mute_p2p_in packet-mark=mute_p2p_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=napster_in packet-mark=napster_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=netbios_in packet-mark=netbios_in parent=DSL_IN \
priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=nntp_in packet-mark=nntp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=radmin_in packet-mark=radmin_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ntp_in packet-mark=ntp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rdp_in packet-mark=rdp_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rtsp_in packet-mark=rtsp_in parent=DSL_IN priority=6 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=sip_in packet-mark=sip_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skypeout_in packet-mark=skypeout_in parent=DSL_IN \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skype2skype_in packet-mark=skype2skype_in parent=DSL_IN \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=pop3_in packet-mark=pop3_in parent=DSL_IN priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=smtp_in packet-mark=smtp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=snmp_in packet-mark=snmp_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=soulsek_in packet-mark=soulsek_in parent=DSL_IN \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssh_in packet-mark=ssh_in parent=DSL_IN priority=3 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssl_in packet-mark=ssl_in parent=DSL_IN priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=vnc_in packet-mark=vnc_in parent=DSL_IN priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=teamspeak_in packet-mark=teamspeak_in parent=DSL_IN \
priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=500000 \
max-limit=600000 name=DSL_OUT packet-mark="" parent=global-out priority=1 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=100bao_p2p_out packet-mark=100bao_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesanger_out packet-mark=aim_mesanger_out parent=\
DSL_OUT priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=aim_mesenger_web_out packet-mark=aim_mesenger_web_out \
parent=DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ares_p2p_out packet-mark=ares_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=bgp_routing_out packet-mark=bgp_routing_out parent=\
DSL_OUT priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=bittorent_out packet-mark=bittorent_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=dhcp_out packet-mark=dhcp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DC_p2p_out packet-mark=DC_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=DNS_out packet-mark=DNS_out parent=DSL_OUT priority=1 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=edonkey_p2p_out packet-mark=edonkey_p2p_out parent=\
DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=fasttrack_p2p_out packet-mark=fasttrack_p2p_out parent=\
DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ftp_out packet-mark=ftp_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnu_p2p_out packet-mark=gnu_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gnutella_p2p_out packet-mark=gnutella_p2p_out parent=\
DSL_OUT priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=gobogy_p2p_out packet-mark=gobogy_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=h323_voiceoverip_out packet-mark=h323_voiceoverip_out \
parent=DSL_OUT priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=httprtsp_out packet-mark=httprtsp_out parent=DSL_OUT \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=http_out packet-mark=http_out parent=DSL_OUT priority=3 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ident_out packet-mark=ident_out parent=DSL_OUT priority=\
2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imap_out packet-mark=imap_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=imesh_p2p_out packet-mark=imesh_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=irc_out packet-mark=irc_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=koogo_out packet-mark=koogo_out parent=DSL_OUT priority=\
7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msnfile_out packet-mark=msnfile_out parent=DSL_OUT \
priority=6 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msn_out packet-mark=msn_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=mute_p2p_out packet-mark=mute_p2p_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=napster_out packet-mark=napster_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=netbios_out packet-mark=netbios_out parent=DSL_OUT \
priority=2 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=nntp_out packet-mark=nntp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ntp_out packet-mark=ntp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=radmin_out packet-mark=radmin_out parent=DSL_OUT \
priority=4 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rdp_out packet-mark=rdp_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=rtsp_out packet-mark=rtsp_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=sip_out packet-mark=sip_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skypeout_out packet-mark=skypeout_out parent=DSL_OUT \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=skype2skype_out packet-mark=skype2skype_out parent=\
DSL_OUT priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=pop3_out packet-mark=pop3_out parent=DSL_OUT priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=smtp_out packet-mark=smtp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=snmp_out packet-mark=snmp_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=soulsek_out packet-mark=soulsek_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssh_out packet-mark=ssh_out parent=DSL_OUT priority=3 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ssl_out packet-mark=ssl_out parent=DSL_OUT priority=2 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=vnc_out packet-mark=vnc_out parent=DSL_OUT priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=teamspeak_out packet-mark=teamspeak_out parent=DSL_OUT \
priority=5 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=applejuice_out packet-mark=applejuice_out parent=DSL_OUT \
priority=7 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=msn_in packet-mark=msn_in parent=DSL_IN priority=5 \
queue=default

wbyz20 · 发表于 2009-3-27 17:13:40

pxyq · 发表于 2009-3-27 19:28:39

太长了吧，看着眼花

politank · 发表于 2009-3-30 23:27:31

看都看的眼花，还是导出rsc吧，内容里面有表情

蔡都小周 · 发表于 2009-3-30 23:47:56

谢谢楼主分享!

hwwy2002 · 发表于 2009-4-1 03:16:21

gaoshou lai de

ycfei · 发表于 2009-4-3 22:33:52

没看懂。

63396232 · 发表于 2009-4-10 11:11:48

我刚进来什么是软件路由都没看懂该去哪里看啊！

hhl11047646 · 发表于 2009-4-19 19:47:26

头痛！

gxhacker · 发表于 2009-4-19 22:55:51

头痛！

edchild · 发表于 2009-5-2 23:34:02

看到眼花花

observer · 发表于 2009-5-25 18:29:47

pxe · 发表于 2009-6-29 16:10:15

看得眼精花

账号		自动登录	找回密码
密码			注册

[限速] 恭喜L7专题开启.发个官网wiki上面用L7限速的例子

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。