/ queue type
add name="pcq-to-ip" kind=pcq pcq-rate=0 pcq-limit=50 \
    pcq-classifier=dst-address pcq-total-limit=2000 
add name="pcq-from-ip" kind=pcq pcq-rate=0 pcq-limit=50 \
    pcq-classifier=src-address pcq-total-limit=2000 
/

/ ip firewall mangle 
add chain=prerouting p2p=all-p2p action=mark-connection new-connection-mark=1 \
    comment="" disabled=no 
add chain=prerouting connection-mark=1 action=mark-packet new-packet-mark=7 \
    comment="" disabled=no 
add chain=prerouting in-interface=AP connection-mark=1 action=mark-packet new-packet-mark=p2p-from-ap  comment="P2P-from AP" disabled=no 
add chain=prerouting packet-mark=p2p-from-ap action=accept comment="" disabled=no 
add chain=prerouting packet-mark=7 action=accept comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=1080 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1080 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=1080 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=1080 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=1194 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1194 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=1194 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=1194 action=mark-packet \
    new-packet-mark=5  comment="" disabled=no 
add chain=prerouting protocol=gre action=mark-packet new-packet-mark=5 \
     comment="" disabled=no 
add chain=prerouting protocol=encap action=mark-packet new-packet-mark=5 \
     comment="" disabled=no 
add chain=prerouting packet-mark=5 action=accept comment="" disabled=no 
add chain=prerouting connection-type=ftp action=mark-packet new-packet-mark=4 \
     comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=21 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=21 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=20 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=20 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=898-990 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=898-990 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=69 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=69 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=873 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=873 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=21 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=21 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=20 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=20 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=69 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=69 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=873 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=873 action=mark-packet \
    new-packet-mark=4  comment="" disabled=no 
add chain=prerouting packet-mark=4 action=accept comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=80 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=80 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=443 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=443 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=6667 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=6667 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=8080 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=8080 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=3128 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=3128 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=3130 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=3130 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=35000-35002 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=35000-35002 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=80 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=80 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=443 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=443 action=mark-packet \
    new-packet-mark=3  comment="" disabled=no 
add chain=prerouting packet-mark=3 action=accept comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=25 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=25 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=110 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=110 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=995 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=995 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=8000 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=8000 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=25 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=25 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=110 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=110 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=995 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=995 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=8000 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=8000 action=mark-packet \
    new-packet-mark=2  comment="" disabled=no 
add chain=prerouting packet-mark=2 action=accept comment="" disabled=no 
add chain=prerouting protocol=icmp action=mark-packet new-packet-mark=1 \
     comment="" disabled=no 
add chain=prerouting protocol=ospf action=mark-packet new-packet-mark=1 \
     comment="" disabled=no 
add chain=prerouting protocol=tcp tcp-flags=syn,!rst,!ack action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=22 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=22 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=23 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=23 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=37 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=37 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=53 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=53 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=119 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=119 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=123 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=123 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=161-162 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=161-162 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=179 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=179 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=10115 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=10115 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=10113 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=10113 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=8000 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=8000 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=1503 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1503 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=1718 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1718 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=1720 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1720 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=1731 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1731 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=1812-1813 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=1812-1813 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=10001 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=10001 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=14000-14002 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=14000-14002 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=12000 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=12000 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=411 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=411 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=412 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=412 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=3987 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=3987 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=3306 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=3306 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=4899 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=4899 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=5800 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=5800 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp src-port=5900 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=tcp dst-port=5900 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp action=mark-packet new-packet-mark=1 \
     comment="" disabled=no 
add chain=prerouting protocol=udp src-port=22 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=22 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=23 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=23 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=37 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=37 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=53 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=53 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=123 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=123 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=161-162 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=161-162 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=1812-1813 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=1812-1813 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=179 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=179 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=10115 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=10115 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=8767 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=8767 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=27015 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=27015 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=1719 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=1719 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=33434-33463 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=33434-33463 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp packet-mark=!1 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=3306 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=3306 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=4899 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=4899 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=5800 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=5800 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp src-port=5060 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting protocol=udp dst-port=5060 action=mark-packet \
    new-packet-mark=1  comment="" disabled=no 
add chain=prerouting packet-mark=1 action=accept comment="" disabled=no 
add chain=prerouting action=mark-packet new-packet-mark=6  \
    comment="" disabled=no
/