stark писал(а):
покажите команды в типе шлюза , скриншоты настройки шлюза в договоре и вывод команды ip firewall address-list print(есть ли там этот ip , который на шлюзе в договоре).
правила из sheduler.log:
07-27/09:45:02 DEBUG [pool-2-thread-1] IPNTestGates - Contract: 4; status: 0; ruleType: null; rule: ContractGateRule gid=3; cid=4; rule=[OPEN]
ip firewall address-list add address=192.168.128.64 list="INFORMIX" comment="!!INFORMIX!!" disabled=no
ip firewall mangle add chain=forward dst-address-list="INFORMIX" action=mark-connection new-connection-mark=con-dl-4 passthrough=yes disabled=no
ip firewall mangle add chain=forward src-address-list="INFORMIX" action=mark-connection new-connection-mark=con-up-4 passthrough=yes disabled=no
ip firewall mangle add chain=forward connection-mark=con-dl-4 action=mark-packet new-packet-mark=user-dl-4 passthrough=no disabled=no
ip firewall mangle add chain=forward connection-mark=con-up-4 action=mark-packet new-packet-mark=user-up-4 passthrough=no disabled=no
queue tree add name="Download-4" parent=Download packet-mark=user-dl-4 limit-at=0 max-limit=0 disabled=no
queue tree add name="Upload-4" parent=Upload packet-mark=user-up-4 limit-at=0 max-limit=0 disabled=no
[/OPEN]
[CLOSE]
ip firewall address-list remove "!!INFORMIX!!"
ip firewall mangle remove [/ip firewall mangle find where new-connection-mark=con-up-4]
ip firewall mangle remove [/ip firewall mangle find where new-connection-mark=con-dl-4]
ip firewall mangle remove [/ip firewall mangle find where new-packet-mark=user-up-4]
ip firewall mangle remove [/ip firewall mangle find where new-packet-mark=user-dl-4]
queue tree remove [/queue tree find where name=Download-4]
queue tree remove [/queue tree find where name=Upload-4]
[/CLOSE]
[DELETE]
ip firewall address-list remove "!!INFORMIX!!"
ip firewall mangle remove [/ip firewall mangle find where new-connection-mark=con-up-4]
ip firewall mangle remove [/ip firewall mangle find where new-connection-mark=con-dl-4]
ip firewall mangle remove [/ip firewall mangle find where new-packet-mark=user-up-4]
ip firewall mangle remove [/ip firewall mangle find where new-packet-mark=user-dl-4]
queue tree remove [/queue tree find where name=Download-4]
queue tree remove [/queue tree find where name=Upload-4]
[/DELETE]
/ip firewall address-list print detail
Flags: X - disabled, D - dynamic
0 ;;; !!INFORMIX!!
list=INFORMIX address=192.168.128.64
Вложение:
ipn-gate.JPG [ 94.96 КБ | Просмотров: 3714 ]