[Você precisa estar registrado e conectado para ver este link.] 5x
 por [Você precisa estar registrado e conectado para ver este link.] em Seg 16 Dez - 22:02


Essa regra libera os pacote icmp para os computadores ligados ao mikrotik.
mas use com moderação pois ela pode "fatorar" a sua rede.   

1- /ip firewall mangle
add action=mark-connection chain=prerouting comment="" disabled=no \
new-connection-mark=pingC passthrough=yes protocol=icmp
add action=mark-packet chain=prerouting comment="" connection-mark=pingC \
disabled=no new-packet-mark=pingF passthrough=no
add action=mark-connection chain=input comment="" disabled=no \
new-connection-mark=pingC passthrough=yes protocol=icmp
add action=mark-packet chain=input comment="" connection-mark=pingC disabled=\
no new-packet-mark=pingF passthrough=no
add action=mark-connection chain=output comment="" disabled=no \
new-connection-mark=pingC passthrough=yes protocol=icmp
add action=mark-packet chain=output comment="" disabled=no new-packet-mark=\
pingF passthrough=no protocol=icmp
add action=mark-connection chain=postrouting comment="" disabled=no \
new-connection-mark=pingC passthrough=yes protocol=icmp
add action=mark-packet chain=postrouting comment="" disabled=no \
new-packet-mark=pingF passthrough=no protocol=icmp

2- /queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ping_in packet-mark=pingF parent=global priority=7 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ping_out packet-mark=pingF parent=global priority=7 \
queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=ping_total packet-mark=pingF parent=global \
priority=7 queue=default