網(wǎng)吧ROS限制p2p的策略

真正有效的辦法，思路不是禁止而是限制包分級(jí)與總流量大小，作用是起到p2p的下載仍然能用，但是流量有限并且策略級(jí)別低與其他應(yīng)用。這個(gè)做的好處不用我說(shuō)了，很多游戲如果你完全禁止了p2p會(huì)很麻煩的。我這里限制的是整個(gè)網(wǎng)絡(luò)最大128k,根據(jù)自己情況修改。而且消耗的系統(tǒng)資源非常小

/ ip firewall mangle
add chain=forward p2p=all-p2p action=mark-connection new-connection-mark=p2pCOM passthrough=yes comment="" disabled=no
add chain=forward connection-mark=p2pCOM action=mark-packet new-packet-mark=p2p passthrough=yes comment="" disabled=no
/ queue tree
add name="p2pW" parent=WAN packet-mark=p2p limit-at=128000 queue=default priority=8 max-limit=128000 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="p2pL" parent=LAN packet-mark=p2p limit-at=128000 queue=default priority=8 max-limit=128000 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no