YUS大师，麻烦您一次性帮处理一下，非常感谢。

sbriy

问题一：

1联通，2电信。
联通负责走网页，2电信负载走其它。下面是电信负载的。
/ip address add address=192.168.0.254/255.255.255.0 interface=LAN comment=lan
/ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB max-udp-packet-size=512 servers=202.103.225.68,202.103.224.68
/ip address add address=192.168.2.1/255.255.255.0 interface=TEL1
/ip address add address=192.168.3.1/255.255.255.0 interface=TEL2

/ ip firewall mangle
add chain=prerouting dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses:2/0
action=mark-connection new-connection-mark=1_conn passthrough=yes comment="PCC1"
add chain=prerouting connection-mark=1_conn in-interface=LAN action=mark-routing new-routing-mark=to-tel1
add chain=prerouting dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses:2/1
action=mark-connection new-connection-mark=2_conn passthrough=yes comment="PCC2"
add chain=prerouting connection-mark=2_conn in-interface=LAN action=mark-routing new-routing-mark=to-tel2

/ ip firewall mangle
add chain=input in-interface=TEL1 action=mark-connection new-connection-mark=tel1_conn
add chain=input in-interface=TEL2 action=mark-connection new-connection-mark=tel2_conn
add chain=output connection-mark=tel1_conn action=mark-routing new-routing-mark=to-tel1
add chain=output connection-mark=tel2_conn action=mark-routing new-routing-mark=to-tel2

/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
192.168.2.254 routing-mark=to-tel1
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
192.168.3.254 routing-mark=to-tel2
/ip firewall nat
add action=masquerade chain=srcnat comment=1 out-interface=TEL1
add action=masquerade chain=srcnat comment=2 out-interface=TEL2

走网页的，是否只要以下此脚本就够了？
/ ip firewall mangle
add chain=prerouting protocol=tcp dst-port=80 action=mark-connection
new-connection-mark=http_conn passthrough=yes
add chain=prerouting connection-mark=http_conn action=mark-packet
new-packet-mark=CNC passthrough=no

问题二：
passthrough= 何时用NO 何时才YES？

问题三 ：
ROS软路由，局域网两个网段，A和B，我想让A网段拥有优先级，即带宽不足时，优先A网段，怎么搞？

问题四：
VPN服务端的设置，VPN的网关，到底是填在Local Address 还是 Remote Address ？网上各有各的说法。

问题四：
ROS软路由 DNS设置，多线时，应该要设那个DNS？Allow Remote Requests 是否要勾选？什么情况下要勾？

dns256

问题1：网页路由只需要一条，且放在pcc规则之前，passthrough=no，因为处理完成网页后不需要在向下传递给后面的规则处理
/ ip firewall mangle  
add chain=prerouting protocol=tcp dst-port=80 action=mark-routing  
    new-routing-mark=cnc passthrough=no
问题2：passthrough是只是否要将数据传递给后面的规则处理

问题3：你去看下论坛的HTB资料

问题4：VPN的网关是local-address

问题5：网页走那条线路就设置那条线路的DNS