Mikrotik

[轉]虛擬機跑起來！RouterOS CHR 軟路由效能輕鬆突破 1000M！

https://www.jkg.tw/?p=2531&fbclid=IwAR0TdjR76xT3k3w_bTNPfLZ8eW9Wuri9WBGJU7xoHsQo4PDUq2M5iIN4zfc https://youtu.be/4PzJulQTSrY?t=1016 占美 i5 4278u

ip firewall filiter raw input forward

https://www.mobile01.com/topicdetail.php?f=110&t=3205444&p=574#5738 ip firewall filter是在nat動作後 ip firewall raw在nat動作前當封包透過nat進來後會分兩個路徑: 1.提供路由器(Router)自用 2.給區域網路的電腦使用若要指定給路由器(Router),進入chain使用input 若要指定給區域網路的電腦,chain則一律用forward 一般病毒防護都著重在區網的桌機,所以要在firewall filter進行過濾,chain設為forward即可. RouterOS路由器的smb伺服器預設是關閉的,所以若沒開啟不太需要再新增一筆chain=input封鎖項目. /ip firewall raw操作: 在nat之前的意思即,封包在進入路由器前就先判定有敵意. 所以在這操作即不管這封包最終是路由器使用,還是給區網的電腦操作一律都先行丟棄,這樣明白吧XD input/forward都是在nat後的動作,所以在firewall raw看不到這兩個chain. prerouting是在nat前的動作,所以在firewall filter看不到這個chain.

[轉][RouterOS] 上傳流量爆頻寬 DNS

https://tlcheng.wordpress.com/tag/rb750gr3/

[轉]2 wan mapping to 1 lan multiple wan mapped to a single internal server

http://www.minitw.com/archives/routeros/routeros-2-wan-mapping-to-1-lan-multiple-wan-mapped-to-a-single-internal-server.htm

mikrotik qos connection timeout (Established)and limit connection

Now P2P is too good, so use QOS can’t stop. So 1、 setup limit connection：in Firewall, Filter Rule add Action: drop Protocol: TCP UDP Extra-Connection Limit: xx 2、set connection timeout: in Firewall, Connections, Tracking-TCP Established Timeout: 00:05:00 (5mins by your want) then……p2p……can use, but…..you know