/ip firewall mangle print detail
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=prerouting action=passthrough
1 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
2 D ;;; special dummy rule to show fasttrack counters
chain=postrouting action=passthrough
3 chain=prerouting action=mark-connection new-connection-mark=KORG_conn protocol=tcp dst-address=192.168.0.12 dst-port=48855
4 X chain=output action=mark-routing new-routing-mark=KORG_route passthrough=yes connection-mark=KORG_conn log=no log-prefix=""
5 chain=prerouting action=mark-routing new-routing-mark=GIISDMDK passthrough=yes log=no log-prefix=""
6 ;;; Voice to DSI
chain=prerouting action=mark-routing new-routing-mark=VOICE_DSI passthrough=no src-address-list=VOICE_SERVERS dst-address-list=VOICE_PROVIDER
7 X ;;; Branch voice to DSI
chain=prerouting action=mark-routing new-routing-mark=VOICE_DSI passthrough=no src-address-list=GRE_PEERS dst-address-list=VOICE_PROVIDER log=no log-prefix=""
8 ;;; Rule "Bruteforce": add a device performing unsuccessful authorization to BlackList.
chain=output action=add-src-to-address-list address-list=Banlist address-list-timeout=none-dynamic content=ipsec,error phase1 negotiation failed due to time up log=no log-prefix=""
[фыва@RO.ALMAZ] > /ip route print detail where routing-mark!="main"
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
0 A S ;;; Route for KORG via DSI
dst-address=0.0.0.0/0 gateway=195.206.50.89 gateway-status=195.206.50.89 reachable via DSI_INET distance=1 scope=30 target-scope=10 routing-mark=KORG_route
1 A S ;;; Voice via DSI only
dst-address=195.206.40.110/32 gateway=195.206.50.89 gateway-status=195.206.50.89 reachable via DSI_INET check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=VOICE_DSI
2 A S ;;; Default via Interfonica (ether1)
dst-address=0.0.0.0/0 gateway=31.44.248.33 gateway-status=31.44.248.33 reachable via INTERFONICA_INET check-gateway=ping distance=25 scope=30 target-scope=10
3 S ;;; Default via DSI (ether1)
dst-address=0.0.0.0/0 gateway=195.206.50.89 gateway-status=195.206.50.89 reachable via DSI_INET check-gateway=ping distance=26 scope=30 target-scope=10
4 A S ;;; DSI_TRACKING
dst-address=8.8.4.4/32 gateway=195.206.50.89 gateway-status=195.206.50.89 reachable via DSI_INET distance=1 scope=30 target-scope=10
5 ADC dst-address=10.7.7.4/30 pref-src=10.7.7.5 gateway=Tunnel70 gateway-status=Tunnel70 reachable distance=0 scope=10
6 ADC dst-address=10.7.7.8/30 pref-src=10.7.7.9 gateway=Tunnel71 gateway-status=Tunnel71 reachable distance=0 scope=10
7 ADC dst-address=10.10.8.110/32 pref-src=10.10.8.1 gateway=<l2tp-Alm.vpn6> gateway-status=<l2tp-Alm.vpn6> reachable distance=0 scope=10
8 ADC dst-address=10.10.10.0/24 pref-src=10.10.10.2 gateway=INTERFONICA_VPN gateway-status=INTERFONICA_VPN reachable distance=0 scope=10
9 A S dst-address=10.16.1.0/24 gateway=10.10.8.110 gateway-status=10.10.8.110 reachable via <l2tp-Alm.vpn6> distance=1 scope=30 target-scope=10
10 ADC dst-address=10.18.18.0/30 pref-src=10.18.18.1 gateway=Tunnel18 gateway-status=Tunnel18 reachable distance=0 scope=10
11 ADC dst-address=10.18.18.4/30 pref-src=10.18.18.5 gateway=Tunnel180 gateway-status=Tunnel180 reachable distance=0 scope=10
12 ADC dst-address=10.19.19.0/30 pref-src=10.19.19.1 gateway=Tunnel19 gateway-status=Tunnel19 reachable distance=0 scope=10
13 ADC dst-address=10.19.19.4/30 pref-src=10.19.19.5 gateway=Tunnel190 gateway-status=Tunnel190 reachable distance=0 scope=10
14 ADC dst-address=10.24.24.0/30 pref-src=10.24.24.1 gateway=Tunnel24 gateway-status=Tunnel24 reachable distance=0 scope=10
15 ADC dst-address=10.24.24.4/30 pref-src=10.24.24.5 gateway=Tunnel240 gateway-status=Tunnel240 reachable distance=0 scope=10
16 ADC dst-address=10.29.29.0/30 pref-src=10.29.29.1 gateway=Tunnel29 gateway-status=Tunnel29 reachable distance=0 scope=10
17 ADC dst-address=10.29.29.4/30 pref-src=10.29.29.5 gateway=Tunnel290 gateway-status=Tunnel290 reachable distance=0 scope=10
18 ADC dst-address=10.35.35.0/30 pref-src=10.35.35.1 gateway=Tunnel35 gateway-status=Tunnel35 reachable distance=0 scope=10
19 ADC dst-address=10.35.35.4/30 pref-src=10.35.35.5 gateway=Tunnel350 gateway-status=Tunnel350 reachable distance=0 scope=10
20 ADC dst-address=10.37.37.0/30 pref-src=10.37.37.1 gateway=Tunnel137 gateway-status=Tunnel137 reachable distance=0 scope=10
21 ADC dst-address=10.37.37.4/30 pref-src=10.37.37.5 gateway=Tunnel37 gateway-status=Tunnel37 reachable distance=0 scope=10
22 DC dst-address=10.39.39.0/30 pref-src=10.39.39.1 gateway=Tunnel39 gateway-status=Tunnel39 unreachable distance=255 scope=10
23 ADC dst-address=10.39.39.4/30 pref-src=10.39.39.5 gateway=Tunnel390 gateway-status=Tunnel390 reachable distance=0 scope=10
24 ADC dst-address=31.44.248.32/30 pref-src=31.44.248.34 gateway=INTERFONICA_INET gateway-status=INTERFONICA_INET reachable distance=0 scope=10
25 A S ;;; Komsomoll_via_MTS
dst-address=62.113.84.102/32 gateway=31.44.248.33 gateway-status=31.44.248.33 reachable via INTERFONICA_INET distance=1 scope=30 target-scope=10
26 A S ;;; KOMSOMOLL_via_DSI
dst-address=78.109.34.59/32 gateway=31.44.248.33 gateway-status=31.44.248.33 reachable via INTERFONICA_INET distance=1 scope=30 target-scope=10
27 A S ;;; EVROPARK_via_NetA_ROSTELECOM
dst-address=90.188.227.253/32 gateway=31.44.248.33 gateway-status=31.44.248.33 reachable via INTERFONICA_INET distance=1 scope=30 target-scope=10
28 A S ;;; JamMoll_via_DSI
dst-address=91.185.38.131/32 gateway=195.206.50.89 gateway-status=195.206.50.89 reachable via DSI_INET distance=1 scope=30 target-scope=10
29 ADC dst-address=172.0.0.0/29 pref-src=172.0.0.2 gateway=INTERFONICA_614VLan gateway-status=INTERFONICA_614VLan reachable distance=0 scope=10
30 A S ;;; DSI_VPN
dst-address=172.16.0.0/16 gateway=172.16.0.1 gateway-status=172.16.0.1 reachable via DSI_VPN distance=1 scope=30 target-scope=10
31 ADC dst-address=172.16.0.0/24 pref-src=172.16.0.2 gateway=DSI_VPN gateway-status=DSI_VPN reachable distance=0 scope=10
32 A S ;;; DSI_VPN
dst-address=192.168.0.0/16 gateway=172.16.0.1 gateway-status=172.16.0.1 reachable via DSI_VPN distance=1 scope=30 target-scope=10
33 ADC dst-address=192.168.0.0/24 pref-src=192.168.0.3 gateway=ether2 gateway-status=ether2 reachable distance=0 scope=10
34 ADo dst-address=192.168.1.0/24 gateway=10.10.10.66 gateway-status=10.10.10.66 reachable via INTERFONICA_VPN distance=110 scope=20 target-scope=10 ospf-metric=20 ospf-type=intra-area
35 A S dst-address=192.168.5.0/24 gateway=Tunnel35 gateway-status=Tunnel35 reachable check-gateway=ping distance=5 scope=30 target-scope=10
36 A S dst-address=192.168.7.0/24 gateway=Tunnel71 gateway-status=Tunnel71 reachable check-gateway=ping distance=5 scope=30 target-scope=10
37 S dst-address=192.168.7.0/24 gateway=Tunnel70 gateway-status=Tunnel70 reachable check-gateway=ping distance=10 scope=30 target-scope=10
38 X S dst-address=192.168.7.0/24 gateway=10.10.10.2 gateway-status=10.10.10.2 inactive distance=1 scope=30 target-scope=10
39 ADC dst-address=192.168.13.0/24 pref-src=192.168.13.1 gateway=VIDEO gateway-status=VIDEO reachable distance=0 scope=10
40 A S dst-address=192.168.18.0/24 gateway=Tunnel180 gateway-status=Tunnel180 reachable check-gateway=ping distance=5 scope=30 target-scope=10
41 S dst-address=192.168.18.0/24 gateway=Tunnel18 gateway-status=Tunnel18 reachable check-gateway=ping distance=10 scope=30 target-scope=10
42 A S dst-address=192.168.19.0/24 gateway=Tunnel19 gateway-status=Tunnel19 reachable check-gateway=ping distance=5 scope=30 target-scope=10
43 S dst-address=192.168.19.0/24 gateway=Tunnel190 gateway-status=Tunnel190 reachable check-gateway=ping distance=10 scope=30 target-scope=10
44 A S dst-address=192.168.24.0/24 gateway=Tunnel24 gateway-status=Tunnel24 reachable check-gateway=ping distance=5 scope=30 target-scope=10
45 S dst-address=192.168.24.0/24 gateway=Tunnel240 gateway-status=Tunnel240 reachable check-gateway=ping distance=10 scope=30 target-scope=10
46 A S dst-address=192.168.29.0/24 gateway=Tunnel29 gateway-status=Tunnel29 reachable check-gateway=ping distance=5 scope=30 target-scope=10
47 A S dst-address=192.168.35.0/24 gateway=Tunnel35 gateway-status=Tunnel35 reachable check-gateway=ping distance=5 scope=30 target-scope=10
48 S dst-address=192.168.35.0/24 gateway=Tunnel350 gateway-status=Tunnel350 reachable check-gateway=ping distance=10 scope=30 target-scope=10
49 A S dst-address=192.168.37.0/24 gateway=Tunnel137 gateway-status=Tunnel137 reachable check-gateway=ping distance=5 scope=30 target-scope=10
50 S dst-address=192.168.37.0/24 gateway=Tunnel37 gateway-status=Tunnel37 reachable check-gateway=ping distance=10 scope=30 target-scope=10
51 S dst-address=192.168.39.0/24 gateway=Tunnel39 gateway-status=Tunnel39 unreachable check-gateway=ping distance=5 scope=30 target-scope=10
52 A S dst-address=192.168.39.0/24 gateway=Tunnel390 gateway-status=Tunnel390 reachable check-gateway=ping distance=10 scope=30 target-scope=10
53 ADo dst-address=192.168.113.0/24 gateway=10.10.10.66 gateway-status=10.10.10.66 reachable via INTERFONICA_VPN distance=110 scope=20 target-scope=10 ospf-metric=30 ospf-type=external-type-1
54 A S dst-address=192.168.224.0/24 gateway=192.168.0.10 gateway-status=192.168.0.10 reachable via ether2 distance=1 scope=30 target-scope=10
55 ADC dst-address=195.206.50.88/30 pref-src=195.206.50.90 gateway=DSI_INET gateway-status=DSI_INET reachable distance=0 scope=10
56 A S ;;; 18_Shelehov_DSI
dst-address=195.206.50.198/32 gateway=195.206.50.89 gateway-status=195.206.50.89 reachable via DSI_INET distance=1 scope=30 target-scope=10
57 A S ;;; INTERFONICA_TRACKING
dst-address=195.208.8.21/32 gateway=31.44.248.33 gateway-status=31.44.248.33 reachable via INTERFONICA_INET distance=1 scope=30 target-scope=10
58 A S ;;; INTERFONICA_TRACKING
dst-address=195.208.15.3/32 gateway=31.44.248.33 gateway-status=31.44.248.33 reachable via INTERFONICA_INET distance=1 scope=30 target-scope=10
59 ADo dst-address=255.255.255.252/32 gateway=10.10.10.66 gateway-status=10.10.10.66 reachable via INTERFONICA_VPN distance=110 scope=20 target-scope=10 ospf-metric=30 ospf-type=external-type-1
[фыва@RO.ALMAZ] > /ip firewall mangle print stats
Flags: X - disabled, I - invalid, D - dynamic
# CHAIN ACTION BYTES PACKETS
0 D ;;; special dummy rule to show fasttrack counters
prerouting passthrough 1 840 025 23... 1 602 986 485
1 D ;;; special dummy rule to show fasttrack counters
forward passthrough 1 840 025 23... 1 602 986 485
2 D ;;; special dummy rule to show fasttrack counters
postrouting passthrough 1 840 025 23... 1 602 986 485
3 prerouting mark-connection 0 0
4 X output mark-routing 0 0
5 prerouting mark-routing 21 780 374 759 67 789 831
6 ;;; Voice to DSI
prerouting mark-routing 12 771 519 26 801
7 X ;;; Branch voice to DSI
prerouting mark-routing 0 0
8 ;;; Rule "Bruteforce": add a device performing unsuccessful authorization to BlackList.
output add-src-to-address-list 0 0
[фыва@RO.ALMAZ] > /ip firewall mangle print stats
Flags: X - disabled, I - invalid, D - dynamic
# CHAIN ACTION BYTES PACKETS
0 D ;;; special dummy rule to show fasttrack counters
prerouting passthrough 1 840 379 41... 1 603 314 986
1 D ;;; special dummy rule to show fasttrack counters
forward passthrough 1 840 379 41... 1 603 314 986
2 D ;;; special dummy rule to show fasttrack counters
postrouting passthrough 1 840 379 41... 1 603 314 986
3 prerouting mark-connection 0 0
4 X output mark-routing 0 0
5 prerouting mark-routing 21 784 348 553 67 804 525
6 ;;; Voice to DSI
prerouting mark-routing 12 773 839 26 805
7 X ;;; Branch voice to DSI
prerouting mark-routing 0 0
8 ;;; Rule "Bruteforce": add a device performing unsuccessful authorization to BlackList.
output