Queue firewall

1. /ipfi ma
add action=mark-connectionchain=forwarddisabled=nonew-connection-mark=all-conn
passthrough=yesprotocol=icmp
add action=mark-connectionchain=forwardconnection-mark=!heavy-conndisabled=nonew-
connection-mark=all-connpassthrough=yes src-address=192.168.2.0/24
add action=mark-connectionchain=forwardconnection-bytes=2560000-0 connection-mark=all-conn
connection-rate=100k-100Mdisabled=nonew-connection-mark=
heavy-connpassthrough=yesprotocol=tcp
add action=mark-connectionchain=forwardconnection-bytes=2560000-0 connection-mark=all-conn
connection-rate=100k-100Mdisabled=nonew-connection-mark=
heavy-connpassthrough=yesprotocol=udp
add action=mark-packetchain=forwardconnection-mark=all-conndisabled=nonew-packet-
mark=all-packpassthrough=no
add action=mark-packetchain=forwardconnection-mark=heavy-conndisabled=nonew-packet-
mark=heavy-packpassthrough=no
/que ty
add kind=pcqname=q.type.uploadpcq-burst-rate=0pcq-burst-threshold=0pcq-burst-time=10spcq-
classifier=src-addresspcq-dst-address-mask=32
pcq-dst-address6-mask=64pcq-limit=20pcq-rate=128k pcq-src-address-mask=32pcq-src-
address6-mask=64pcq-total-limit=500
add kind=pcqname=q.type.heavypcq-burst-rate=0pcq-burst-threshold=0pcq-burst-time=10spcq-
classifier=dst-addresspcq-dst-address-mask=32
pcq-dst-address6-mask=64pcq-limit=20pcq-rate=512k pcq-src-address-mask=32pcq-src-
address6-mask=64pcq-total-limit=500
add kind=pcqname=q.type.allpcq-burst-rate=0pcq-burst-threshold=0pcq-burst-time=10spcq-
classifier=dst-addresspcq-dst-address-mask=32
pcq-dst-address6-mask=64pcq-limit=20pcq-rate=384k pcq-src-address-mask=32pcq-src-
address6-mask=64pcq-total-limit=500

2. /que sim
add burst-limit=0/0burst-threshold=0/0burst-time=0s/0s direction=uploaddisabled=no
interface=ether2-lanlimit-at=0/0max-limit=2560k/5120k name=qs.uploadparent=
none priority=8queue=q.type.upload/default-smalltarget-addresses=192.168.2.0/24 total-
queue=default-small
add burst-limit=0/0burst-threshold=0/0burst-time=0s/0sdirection=downloaddisabled=no
interface=all limit-at=0/384kmax-limit=128k/2Mname=qs.all
packet-marks=all-packparent=nonepriority=5queue=default-small/q.type.all total-
queue=default-small
add burst-limit=0/0burst-threshold=0/0burst-time=0s/0sdirection=downloaddisabled=no
interface=all limit-at=0/256kmax-limit=128k/768kname=qs.heavy
packet-marks=heavy-packparent=none priority=7queue=default-small/q.type.heavytotal-
queue=default-small