求双线DSCP排除服务器限速

qkhh

双线ADSL线路，用的是DSCP标记。排除服务器不成功

add action=change-dscp chain=prerouting comment=server disabled=no dscp=0 \
    new-dscp=1 passthrough=yes src-address=192.168.1.251
add action=accept chain=prerouting comment=server disabled=no dscp=1 \
    src-address-type=!local
add action=accept chain=postrouting comment=server disabled=no dscp=1 \
    src-address-list=server-ip

这个我的排除服务器脚本

qkhh

用DSCP标记为accept 服务器还是跟客户机一样的限速
如果用mark connection标记连接再标记包也不行。(服务器连网页都打不开）

qkhh

谁能帮帮忙。搞来搞去就是不行。单线可以排除服务器。双线就不行了。

qkhh

全部脚本贴出来当然没问题，又不是什么高级的东西。

我用DSCP标记是因为双线用链接标记的话有问题，不能正常工作。也许是我不会搞。单线用链接标记可以正常工作我会。
因为用DSCP标记在双线下可以正常使用QOS限速，端口及大小包都可以区分开来，游戏网页什么的也正常。所以才用DSCP标记。

qkhh

bobwalker 发表于 2012-10-14 13:44

                               
登录/注册后可看大图

脚本不全，所以没人回答。

不用担心别人用你的脚本，你全贴出来，也没人用。因为在ROS中，使用DSCP做Q ...

/ip firewall mangle
add action=change-mss chain=forward disabled=no new-mss=1440 passthrough=yes \
    protocol=tcp tcp-flags=syn
add action=mark-connection chain=prerouting connection-state=new disabled=no \
    in-interface=Lan new-connection-mark=con1 nth=2,1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=con1 disabled=no \
    in-interface=Lan new-routing-mark=to-con1 passthrough=yes
add action=mark-connection chain=prerouting connection-state=new disabled=no \
    in-interface=Lan new-connection-mark=con2 nth=2,2 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=con2 disabled=no \
    in-interface=Lan new-routing-mark=to-con2 passthrough=yes
add action=add-src-to-address-list address-list=neiwang-ip \
    address-list-timeout=5m chain=prerouting comment=\
    "\C4\DA\CD\F8\B5\D8\D6\B7\C1\D0\B1\EDlan" disabled=no in-interface=Lan \
    src-address=192.168.1.2-192.168.1.250
add action=change-dscp chain=prerouting comment=server disabled=no dscp=0 \
    new-dscp=1 passthrough=yes src-address=192.168.1.251
add action=accept chain=prerouting comment=server disabled=no dscp=1 \
    src-address-type=!local
add action=accept chain=postrouting comment=server disabled=no dscp=1 \
    src-address-list=server-ip
add action=change-dscp chain=prerouting comment=icmp disabled=no dscp=0 \
    new-dscp=3 passthrough=yes protocol=icmp
add action=change-dscp chain=prerouting comment=web disabled=no dscp=0 \
    new-dscp=4 passthrough=yes port=80,8080 protocol=tcp
add action=mark-packet chain=prerouting disabled=no dscp=4 in-interface=\
    pppoe-out1 new-packet-mark=web-down passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=4 new-packet-mark=\
    web-up out-interface=pppoe-out1 passthrough=no src-address-list=\
    neiwang-ip
add action=mark-packet chain=prerouting disabled=no dscp=4 in-interface=\
    pppoe-out2 new-packet-mark=web-down2 passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=4 new-packet-mark=\
    web-up2 out-interface=pppoe-out2 passthrough=no src-address-list=\
    neiwang-ip
add action=change-dscp chain=prerouting comment="\B4\F3\B0\FC" disabled=no \
    dscp=0 new-dscp=2 packet-size=512-65535 passthrough=yes
add action=mark-packet chain=prerouting disabled=no dscp=2 in-interface=\
    pppoe-out1 new-packet-mark=dabao-down passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=2 new-packet-mark=\
    dabao-up out-interface=pppoe-out1 passthrough=no src-address-list=\
    neiwang-ip
add action=mark-packet chain=prerouting disabled=no dscp=2 in-interface=\
    pppoe-out2 new-packet-mark=dabao-down2 passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=2 new-packet-mark=\
    dabao-up2 out-interface=pppoe-out2 passthrough=no src-address-list=\
    neiwang-ip
add action=change-dscp chain=prerouting comment=\
    "\B5\D8\CF\C2\B3\C7\D3\C2\CA\BF" disabled=no dscp=0 new-dscp=3 \
    passthrough=yes port=10001-10070,7101-7106 protocol=tcp
add action=change-dscp chain=prerouting disabled=no dscp=0 new-dscp=3 \
    passthrough=yes port=5063 protocol=udp
add action=change-dscp chain=prerouting comment="\B4\A9\D4\BD\BB\F0\CF\DF" \
    disabled=no dscp=0 new-dscp=3 passthrough=yes port=12000-12175,2349 \
    protocol=udp
add action=change-dscp chain=prerouting disabled=no dscp=0 new-dscp=3 \
    passthrough=yes port=7101-7106,10008,28012 protocol=tcp
add action=mark-packet chain=prerouting disabled=no dscp=3 in-interface=\
    pppoe-out1 new-packet-mark=youxi-down passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=3 new-packet-mark=\
    youxi-up out-interface=pppoe-out1 passthrough=no src-address-list=\
    neiwang-ip
add action=mark-packet chain=prerouting disabled=no dscp=3 in-interface=\
    pppoe-out2 new-packet-mark=youxi-down2 passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=3 new-packet-mark=\
    youxi-up2 out-interface=pppoe-out2 passthrough=no src-address-list=\
    neiwang-ip
add action=change-dscp chain=prerouting comment="\C6\E4\CB\FC\B0\FC" \
    disabled=no dscp=0 new-dscp=9 passthrough=yes
add action=mark-packet chain=prerouting disabled=no dscp=9 in-interface=\
    pppoe-out1 new-packet-mark=qitabao-down passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=9 new-packet-mark=\
    qitabao-up out-interface=pppoe-out1 passthrough=no src-address-list=\
    neiwang-ip
add action=mark-packet chain=prerouting disabled=no dscp=9 in-interface=\
    pppoe-out2 new-packet-mark=qitabao-down2 passthrough=no src-address-type=\
    !local
add action=mark-packet chain=postrouting disabled=no dscp=9 new-packet-mark=\
    qitabao-up2 out-interface=pppoe-out2 passthrough=no src-address-list=\
    neiwang-ip

qkhh

bobwalker 发表于 2012-10-14 14:17

                               
登录/注册后可看大图

下面第一条规则，你把上行我包dscp改为1，但下行包dscp没有变。其他不用我说了吧。

非常感谢指点。我确实是一知半解。看来得再研究研究双线链接标记了。之前用connection标记双线游戏总是很难进房间。

luhong_1979

bobwalker 发表于 2012-10-14 13:44

                               
登录/注册后可看大图

脚本不全，所以没人回答。

不用担心别人用你的脚本，你全贴出来，也没人用。因为在ROS中，使用DSCP做Q ...

除了DSCP，还有啥更高效率的方法？

wangyuping

学习了，顶上云