Mikrotik 2.9.27 Simple Firewall Mangle

/ ip firewall mangle 
add chain=forward src-address-list=Lan dst-address-list=nice \
action=mark-connection new-connection-mark=basic_conn_lokal \
passthrough=yes comment="BASIC LOKAL" disabled=no 
add chain=forward connection-mark=basic_conn_lokal action=mark-packet \
new-packet-mark=basic_packet_lokal passthrough=no comment="" disabled=no 
add chain=forward src-address-list=Lan dst-address-list=!nice \
action=mark-connection new-connection-mark=basic_conn_intl passthrough=yes \
comment="BASIC INTL" disabled=no 
add chain=forward connection-mark=basic_conn_intl action=mark-packet \
new-packet-mark=basic_packet_intl passthrough=no comment="" disabled=no 
add chain=prerouting src-address=192.168.0.0/27 protocol=icmp \
action=mark-connection new-connection-mark=ICMP-CM passthrough=yes \
comment="ToS" disabled=no 
add chain=prerouting connection-mark=ICMP-CM action=mark-packet \
new-packet-mark=ICMP-PM passthrough=yes comment="" disabled=no 
add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay \
comment="" disabled=no 
add chain=prerouting src-address=192.168.0.0/27 protocol=tcp dst-port=53 \
action=mark-connection new-connection-mark=DNS-CM passthrough=yes \
comment="" disabled=no 
add chain=prerouting src-address=192.168.0.0/27 protocol=udp dst-port=53 \
action=mark-connection new-connection-mark=DNS-CM passthrough=yes \
comment="" disabled=no 
add chain=prerouting connection-mark=DNS-CM action=mark-packet \
new-packet-mark=DNS-PM passthrough=yes comment="" disabled=no 
add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay \
comment="" disabled=no 
add chain=prerouting p2p=all-p2p action=mark-connection \
new-connection-mark=prio_conn_p2p passthrough=yes comment="Prio P2P" \
disabled=no 
add chain=prerouting connection-mark=prio_conn_p2p action=mark-packet \
new-packet-mark=prio_p2p_packet passthrough=no comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=110 action=mark-connection \
new-connection-mark=prio_conn_download_services passthrough=yes \
comment="Prio Download_Services" disabled=no 
add chain=prerouting protocol=tcp dst-port=995 action=mark-connection \
new-connection-mark=prio_conn_download_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=143 action=mark-connection \
new-connection-mark=prio_conn_download_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=993 action=mark-connection \
new-connection-mark=prio_conn_download_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=995 action=mark-connection \
new-connection-mark=prio_conn_download_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=25 action=mark-connection \
new-connection-mark=prio_conn_download_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=80 connection-bytes=500000-0 \
action=mark-connection new-connection-mark=prio_conn_download_services \
passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=20-21 action=mark-connection \
new-connection-mark=prio_conn_download_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=22 packet-size=1400-1500 \
action=mark-connection new-connection-mark=prio_conn_download_services \
passthrough=yes comment="" disabled=no 
add chain=prerouting connection-mark=prio_conn_download_services \
action=mark-packet new-packet-mark=prio_download_packet passthrough=yes \
comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=53 action=mark-connection \
new-connection-mark=prio_conn_ensign_services passthrough=yes \
comment="Prio Ensign_Services" disabled=no 
add chain=prerouting protocol=udp dst-port=53 action=mark-connection \
new-connection-mark=prio_conn_ensign_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=icmp action=mark-connection \
new-connection-mark=prio_conn_ensign_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=443 action=mark-connection \
new-connection-mark=prio_conn_ensign_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=23 action=mark-connection \
new-connection-mark=prio_conn_ensign_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=80 connection-bytes=0-500000 \
action=mark-connection new-connection-mark=prio_conn_ensign_services \
passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=179 action=mark-connection \
new-connection-mark=prio_conn_ensign_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=8000 action=mark-connection \
new-connection-mark=prio_conn_ensign_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting connection-mark=prio_conn_ensign_services \
action=mark-packet new-packet-mark=prio_ensign_packet passthrough=no \
comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=22 packet-size=1400-1500 \
action=mark-connection new-connection-mark=prio_conn_ensign_services \
passthrough=yes comment="Prio User_Request" disabled=no 
add chain=prerouting dst-address-list=user_request action=mark-connection \
new-connection-mark=prio_conn_user_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting connection-mark=prio_conn_user_services \
action=mark-packet new-packet-mark=prio_request_packet passthrough=yes \
comment="" disabled=no 
add chain=prerouting protocol=gre action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=5100 action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes \
comment="Prio_Communication" disabled=no 
add chain=prerouting protocol=tcp dst-port=5050 action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=udp dst-port=5060 action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=1869 action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=1723 action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=5190 action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=tcp dst-port=6660-7000 action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=ipencap action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=ipsec-esp action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=ipsec-ah action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=ipip action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting protocol=encap action=mark-connection \
new-connection-mark=prio_conn_comm_services passthrough=yes comment="" \
disabled=no 
add chain=prerouting connection-mark=prio_conn_comm_services \
action=mark-packet new-packet-mark=prio_comm_packet passthrough=no \
comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1-1000 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="Routing Per Port \
Net" disabled=no 
add chain=prerouting protocol=udp dst-port=1-1000 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=3128 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=3128 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=5050-5060 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=5050-5060 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=6660-7000 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=6660-7000 action=mark-connection \
new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no 
add chain=prerouting connection-mark=spnet_conn action=mark-packet \
new-packet-mark=spnet passthrough=no comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1001-3127 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="Routing Per Port \
games" disabled=no 
add chain=prerouting protocol=udp dst-port=1001-3127 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=3129-5049 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=3129-5049 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=5061-6659 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=5061-6659 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=7001-8079 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=7001-8079 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=8081-65535 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=8081-65535 action=mark-connection \
new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no 
add chain=prerouting connection-mark=spgames_conn action=mark-packet \
new-packet-mark=spgames passthrough=no comment="" disabled=no 
add chain=prerouting src-address=192.168.0.0/27 action=mark-packet \
new-packet-mark=Naik passthrough=no comment="Up Traffic" disabled=no 
add chain=forward src-address=192.168.0.0/27 action=mark-connection \
new-connection-mark=Koneksi passthrough=yes comment="Conn-Mark" \
disabled=no 
add chain=forward in-interface=Public connection-mark=Koneksi \
action=mark-packet new-packet-mark=Turun passthrough=no \
comment="Down-Direct Connection" disabled=no 
add chain=forward in-interface=Local connection-mark=Koneksi \
action=mark-packet new-packet-mark=Turun passthrough=no comment="" \
disabled=no 
add chain=forward in-interface=bridge1 connection-mark=Koneksi \
action=mark-packet new-packet-mark=Turun passthrough=no comment="" \
disabled=yes 
add chain=output out-interface=Local dst-address=192.168.0.0/27 \
action=mark-packet new-packet-mark=Turun passthrough=no comment="Down-Via \
Proxy" disabled=no 
add chain=output out-interface=bridge1 dst-address=192.168.0.0/27 \
action=mark-packet new-packet-mark=Turun passthrough=no comment="" \
disabled=yes