# jan/06/1970 01:21:27 by RouterOS 5.

9
# software id = 0SDF-SZBR
#
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d \
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=forward disabled=no dst-port=\
1100-1399,2300-2399,40706-40737,50817,8500 protocol=tcp
add action=accept chain=forward disabled=no dst-port=\
1100-1399,2300-2399,40706-40737,50817,8500 protocol=udp
/ip firewall mangle
add action=mark-routing chain=prerouting comment="RAKION TCP" disabled=no \
dst-port=1100-1399,2300-2399,40706-40737,50817,8500 in-interface=ether5 \
new-routing-mark=WAN-RAKION-TCP passthrough=no protocol=tcp
add action=mark-routing chain=prerouting comment="RAKION UDP" disabled=no \
dst-port=1100-1399,2300-2399,40706-40737,50817,8500 in-interface=ether5 \
new-routing-mark=WAN-RAKION-UDP passthrough=no protocol=udp
add action=mark-connection chain=prerouting connection-state=new disabled=no \
in-interface=ether5 new-connection-mark=conn4 nth=4,1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=conn4 disabled=no \
in-interface=ether5 new-routing-mark=route4 passthrough=no
add action=mark-connection chain=prerouting connection-state=new disabled=no \
in-interface=ether5 new-connection-mark=conn3 nth=3,1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=conn3 disabled=no \
in-interface=ether5 new-routing-mark=route3 passthrough=no
add action=mark-connection chain=prerouting connection-state=new disabled=no \
in-interface=ether5 new-connection-mark=conn2 nth=2,1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=conn2 disabled=no \
in-interface=ether5 new-routing-mark=route1 passthrough=no
add action=mark-connection chain=prerouting connection-state=new disabled=no \
in-interface=ether5 new-connection-mark=conn1 nth=1,1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=conn1 disabled=no \
in-interface=ether5 new-routing-mark=route2 passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=ether1
add action=masquerade chain=srcnat disabled=no out-interface=ether2
add action=masquerade chain=srcnat disabled=no out-interface=ether3
add action=masquerade chain=srcnat disabled=no out-interface=ether4
add action=redirect chain=dstnat disabled=no dst-port=53 protocol=udp \
to-ports=53
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061 sip-direct-media=yes
set pptp disabled=no