Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

Firewall modify based on DPI

$
0
0

I'm wanting to send streaming media and social networking over ADSL, traffic from my work PC to a 4G connection, and all traffic from other hosts over ADSL. This is the config I have created.

 

$ show firewall modify SOURCE_ROUTE 
rule 30 { application { category Streaming-Media } description "Streaming media" modify { table 2 } } rule 31 { application { category Social-Network } description "Social networking" modify { table 1 } } rule 32 { application { category P2P } description P2P modify { table 1 } } rule 33 { description "P2P protocol" modify { table 1 } p2p { all } } rule 50 { description "Work computer to 4G" modify { table 2 } source { mac-address ff:ff:ff:ff:ff:ff } } rule 100 { description "traffic from everyone to ADSL" modify { table 1 } source { address 192.168.1.0/24 } }

and here are the stats for that firewall rule

 

$ show firewall modify SOURCE_ROUTE statistics
--------------------------------------------------------------------------------

IPv4 Firewall "SOURCE_ROUTE"

 Active on (eth2,IN)

rule  packets     bytes       action  description
----  -------     -----       ------  -----------
30    0           0           MODIFY  Streaming media
31    0           0           MODIFY  Social networking
32    0           0           MODIFY  P2P
33    1           972         MODIFY  P2P protocol
50    8892        1194517     MODIFY  Work computer to 4G
100   1756916     412787480   MODIFY  traffic from everyone to ADSL
10000 611         78194       ACCEPT  DEFAULT ACTION

Reading this suggests that modify rules come before DPI. Is there a way to modify these categories to use a different routing table? Unlike just about everyone else here, I'm not looking to block them Icon Biggrin.


Viewing all articles
Browse latest Browse all 20028

Trending Articles