Abnan Software's: HFS

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="http://aacable.files.wordpress.com/2011/08/glassline-network-presentation-by-zaib.png?w=300&h=227" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://aacable.files.wordpress.com/2011/08/glassline-network-presentation-by-zaib.png?w=300&h=227" width="320" /></a></div>As you can see, <strong>FTP</strong> servers are placed behind <strong>Mikrotik DMZ</strong>, when user connects via <strong>pppoe</strong> server, dynamic queue is created for that user according to his package, lets say <strong>512k</strong>, now the problem is this restriction also applied on local FTP server placed behind mikrotik <strong>DMZ,</strong> and we don’t want to limit speed for Local FTP.<br /> The solution I found was to make mangle rules that mark packets <strong>TO/FROM</strong> the <strong>FTP</strong> server, and add Queue tree at my desired speed or at line speed for those marks.<br /> This works for me. JUST MAKE SURE YOUR FTP SERVERS HAVE MIKROTIK IP AS THERE DEFAULT GATEWAY <span class="wp-smiley emoji emoji-smile" title=":)">:)</span> This is important so that you can user original ip on the the FTP server rather then just mikrotik ip.<br /><span style="text-decoration: underline;"><br /></span><br /><blockquote class="tr_bq"><br /><blockquote class="tr_bq"><h2>Scenario:</h2></blockquote></blockquote><br /><br /><strong>172.16.0.0/16 </strong>are my pppoe client ip pool.<strong><br />192.168.250.0/24 </strong>is FTP server pool. Behind Mikrotik DMZ.<strong><br /></strong><strong><br /></strong>On mikrotik, I created following rules and FTP servers exempted  from dynamic queue rate limit and ftp data delivered at LAN speed , all  works ok <span class="wp-smiley emoji emoji-smile" title=":)">:)</span><br /><br /><h2><span style="color: magenta;"><strong>[Mikrotik 5.x ROS Code]</strong></span></h2><blockquote class="tr_bq"><div class="container"><div class="line number1 index0 alt2"><code class="plain plain">/ip  firewall mangle add chain=prerouting src-address=172.16.0.0/16  dst-address=192.168.250.0/24 action=mark-packet new-packet-mark=ftp-up</code></div><div class="line number2 index1 alt1"> </div><div class="line number3 index2 alt2"><code class="plain plain">/ip  firewall mangle add chain=postrouting dst-address=172.16.0.0/16  src-address=192.168.250.0/24 action=mark-packet new-packet-mark=ftp-down</code></div><div class="line number4 index3 alt1"> </div><div class="line number5 index4 alt2"><code class="plain plain">/queue type add name=ftp-exempt kind=sfq</code></div><div class="line number6 index5 alt1"><code class="plain plain">/queue tree add name=ftp-up parent=global-in packet-mark=ftp-up queue=ftp-exempt max-limit=100M</code></div><div class="line number7 index6 alt2"><code class="plain plain">/queue tree add name=ftp-down parent=global-out packet-mark=ftp-down queue=ftp-exempt max-limit=100M</code></div></div></blockquote><br /><h2><span style="color: magenta;"><strong>[Mikrotik 6.x ROS Code]</strong></span></h2><h2><span style="color: magenta;"><strong> </strong></span></h2><blockquote class="tr_bq"><div class="container"><div class="line number1 index0 alt2"><code class="plain plain">/ip firewall mangle</code></div><div class="line number2 index1 alt1"><code class="plain plain">add action=mark-packet chain=prerouting dst-address=192.168.250.0/24 new-packet-mark=ftp-up src-address=172.16.0.0/16</code></div><div class="line number3 index2 alt2"><code class="plain plain">add action=mark-packet chain=postrouting dst-address=172.16.0.0/16 new-packet-mark=ftp-down src-address=192.168.250.0/24</code></div><div class="line number4 index3 alt1"> </div><div class="line number5 index4 alt2"><code class="plain plain">/queue tree</code></div><div class="line number6 index5 alt1"><code class="plain plain">add limit-at=100M max-limit=100M name=ftp-up packet-mark=ftp-up parent=global queue=ftp-exempt</code></div><div class="line number7 index6 alt2"><code class="plain plain">add limit-at=100M max-limit=100M name=ftp-down packet-mark=ftp-down parent=global queue=ftp-exempt</code></div></div></blockquote><h2><span style="color: magenta;"><strong> </strong></span></h2><br /><h2><span style="color: magenta;"><strong> </strong></span></h2><span class="wp-smiley emoji emoji-smile" title=":)"> </span> </div>

Howto exempt rate limit for FTP Server Behind MT DMZ in placment of Dynamic Queues !

As you can see, FTP servers are placed behind Mikrotik DMZ , when user connects via pppoe server, dynamic queue is created for that user a...