Conformacin bsica de trfico en Mikrotik basada en protocolos

de Capa-7.
Los paquetes son marcados en la entrada pblica / ip firewall mangle.
Los paquetes son marcados sobre la base de firmas de capa-7 y luego
se ponen en cola.
Primero aadimos firmas de capa-7 para el router (que son
actualmente idnticas a l7-protos.rsc de la pgina de MikroTik WiKi
Layer 7)
/ip firewall layer7-protocol
add comment="" name=pop3 regexp="^(\\+ok |-err )"
add comment="" name=smtp regexp="^220[\t-\r -~]* (e\?smtp|simple mail)"

Se deben crear reglas mangle - (sustitur interface dsl de este ejemplo

segun sean las necesidades) (wan, ether1 etc)
/ip firewall mangle
add action=mark-packet chain=prerouting comment=\
"POP3 - Post Office Protocol version 3" disabled=no in-interface=dsl \
layer7-protocol=pop3 new-packet-mark=pop3_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=pop3 new-packet-mark=pop3_out out-interface=dsl \
passthrough=yes
add action=mark-packet chain=prerouting comment=\
"SMTP - Simple Mail Transfer Protocol " disabled=no in-interface=dsl \
layer7-protocol=smtp new-packet-mark=smtp_in passthrough=yes
add action=mark-packet chain=postrouting comment="" disabled=no \
layer7-protocol=smtp new-packet-mark=smtp_out out-interface=dsl \
passthrough=yes

Creamos el rbol queue y cambiamos Max velocidad de carga y

descarga en DSL_IN y DSL_OUT (global-in global-out) y cambiar las
reglas de prioridad para satisfacer sus necesidades:

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=pop3_in packet-mark=pop3_in parent=DSL_IN
priority=5 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=smtp_in packet-mark=smtp_in parent=DSL_IN
priority=2 \
queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=0 name=pop3_out packet-mark=pop3_out parent=DSL_OUT
priority=4 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=smtp_out packet-mark=smtp_out parent=DSL_OUT
priority=2 \
queue=default

Para referencia ver Fuentes:

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/L7
http://wiki.mikrotik.com/wiki/Basic_traffic_shaping_based_on_layer-7_protocols