belajar mangle

/interface ethernet
set [ find default-name=ether4 ] name=Cctv
set [ find default-name=ether2 ] arp=proxy-arp name=Hotspot
set [ find default-name=ether3 ] name=Lan
set [ find default-name=ether5 ] name=Modem_Browser
set [ find default-name=ether1 ] name=Radio

/ip firewall layer7-protocol
add name=video_fb regexp="video-sin[0-9]+-[0-9]+\\.[a-z]+\\.fbcdn\\.net"
/ip pool
add name=expired-pppoe ranges=192.168.168.9,192.168.168.10-192.168.168.20
add name=ppp-remot ranges=10.10.99.20-10.10.99.254
add name=bulanan ranges=192.168.73.150,192.168.73.151-192.168.73.254
add name=Key ranges=192.168.73.5,192.168.73.7
add name=ppoe_hotspot ranges=192.168.73.10,192.168.73.11-192.168.73.50
add name=hotspot ranges=192.168.99.50,192.168.99.51-192.168.99.254
add name=expired ranges=192.168.168.51,192.168.168.52-192.168.168.254
add name=Cctv ranges=172.191.191.3,172.191.191.4-172.191.191.254
/ip dhcp-server
add add-arp=yes address-pool=hotspot disabled=no interface=Hotspot \
    lease-time=3h name=dhcp1
add address-pool=Cctv disabled=no interface=Cctv lease-time=1d10m name=Cctv
/ppp profile
add local-address=10.10.99.1 name=vpn_remot remote-address=ppp-remot

/queue simple
add max-limit=5M/30M name="0. HIT PROXY" packet-marks=HIT priority=1/1 \
    target=""
add max-limit=5M/27M name="1. Global" packet-marks=\
    icmp_pkt,Game_pkt,up_pkt,down_pkt,ggc_pkt target=192.168.0.0/16
add max-limit=512k/1M name="0. ICMP" packet-marks=icmp_pkt parent="1. Global" \
    priority=1/1 target=192.168.0.0/16,172.16.0.0/12
add limit-at=128k/1M max-limit=3M/5M name="1. Game" packet-marks=Game_pkt \
    parent="1. Global" priority=1/1 target=192.168.0.0/16
/queue type
add kind=pcq name=Download pcq-classifier=dst-address pcq-rate=256k
add kind=pcq name=Http pcq-classifier=dst-address pcq-rate=1M
add kind=pcq name=Game pcq-classifier=\
    src-address,dst-address,src-port,dst-port
add kind=pcq name=Upload pcq-classifier=src-address
add kind=pcq name=PCQ_Limit_Video pcq-classifier=dst-address pcq-rate=64k
add kind=pcq name=down_pcq pcq-classifier=dst-address pcq-dst-address6-mask=\
    64 pcq-src-address6-mask=64
add kind=pcq name=up_pcq pcq-classifier=src-address pcq-dst-address6-mask=64 \
    pcq-src-address6-mask=64
add kind=pcq name="2 Mbs-down_pcq" pcq-classifier=dst-address \
    pcq-dst-address6-mask=64 pcq-rate=2M pcq-src-address6-mask=64
add kind=pcq name=512k-up_pcq pcq-classifier=src-address \
    pcq-dst-address6-mask=64 pcq-rate=512k pcq-src-address6-mask=64
/queue simple
add max-limit=4M/25M name="3. Download  /  Upload" packet-marks=\
    up_pkt,down_pkt,ggc_pkt parent="1. Global" queue=up_pcq/down_pcq target=\
    192.168.0.0/16
add limit-at=64/64 max-limit=2M/21M name="1. Warnet" parent=\
    "3. Download  /  Upload" target=192.168.7.0/24
add max-limit=1M/17M name="0. Billing" parent="1. Warnet" target=\
    192.168.7.10/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="1. PC-Client" parent="1. Warnet" target=192.168.7.21/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="2. PC-Client" parent="1. Warnet" target=192.168.7.22/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="3. PC-Client" parent="1. Warnet" target=192.168.7.23/32
add burst-limit=0/10M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="4. PC-Client" parent="1. Warnet" target=192.168.7.24/32
add burst-limit=0/10M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="5. PC-Client" parent="1. Warnet" target=192.168.7.25/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="10. PC-Client" parent="1. Warnet" target=192.168.7.30/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="6. PC-Client" parent="1. Warnet" target=192.168.7.26/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="7. PC-Client" parent="1. Warnet" target=192.168.7.27/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="8. PC-Client" parent="1. Warnet" target=192.168.7.28/32
add burst-limit=0/5M burst-threshold=0/2M burst-time=0s/5s max-limit=\
    384k/768k name="9. PC-Client" parent="1. Warnet" target=192.168.7.29/32
add limit-at=64/64 max-limit=3M/23M name="2. Hotspot" parent=\
    "3. Download  /  Upload" target=192.168.0.0/16
add limit-at=64/64 max-limit=1M/7M name="1. bulanan" parent="2. Hotspot" \
    priority=3/3 target=192.168.73.0/24
add limit-at=64/64 max-limit=3M/21M name="2. Vouceran" parent="2. Hotspot" \
    target=192.168.99.0/24
add limit-at=64/64 max-limit=512k/1500k name="1. Key" parent="1. bulanan" \
    priority=1/1 queue=up_pcq/down_pcq target=\
    192.168.73.5/32,192.168.73.7/32,192.168.73.8/32

/ip firewall mangle
add action=mark-connection chain=input connection-mark=no-mark in-interface=\
    Modem_Browser new-connection-mark=modemUSB_conn
add action=mark-routing chain=output connection-mark=modemUSB_conn \
    new-routing-mark=via_browsing
add action=mark-connection chain=input connection-mark=no-mark in-interface=\
    pppoe-out1 new-connection-mark=pppoe_conn passthrough=yes
add action=mark-routing chain=output connection-mark=pppoe_conn \
    new-routing-mark=via_radio passthrough=yes
add action=mark-packet chain=forward comment="HIT PROXY" dscp=12 \
    new-packet-mark=HIT passthrough=no

add chain=prerouting comment="Bypass Local Paket" dst-address-list=PRIVATE_IP \
    src-address-list=PRIVATE_IP
add chain=forward dst-address-list=PRIVATE_IP src-address-list=PRIVATE_IP
add chain=output dst-address-list=PRIVATE_IP src-address-list=PRIVATE_IP

add action=mark-connection chain=prerouting comment="Game Conn" dst-port=\
    27000-28998,9100-9200,8230-8250,8110-8120,14300-15512,14000-14010 \
    new-connection-mark=game_conn passthrough=yes protocol=tcp src-address=\
    192.168.7.0/24
add action=mark-connection chain=prerouting dst-port=\
    39190-39200,49001-49190,9080-9081 new-connection-mark=game_conn \
    passthrough=yes protocol=tcp src-address=192.168.7.0/24
add action=mark-connection chain=prerouting dst-port="27000-28998,3478-4380,28\
    010-28200,39000,15000-15500,14000-14010,40000-40010,24010-24160" \
    new-connection-mark=game_conn passthrough=yes protocol=udp src-address=\
    192.168.7.0/24
add action=jump chain=prerouting connection-rate=0-325k jump-target=jumpgames \
    port=!21,22,23,80,81,88,5050,843,443,182,282,8777,1935,8000-8081 \
    protocol=tcp src-address=192.168.0.0/16
add action=jump chain=prerouting connection-rate=0-325k jump-target=jumpgames \
    port=!21,22,23,80,81,88,5050,843,443,182,282,8777,1935,8000-8081 \
    protocol=udp src-address=192.168.0.0/16
add action=mark-connection chain=jumpgames connection-rate=0-325k \
    new-connection-mark=game_conn passthrough=yes port="!53,5353,5938,8291,126\
    71-12675,123,7282,40003,3478,8181,8383,1080,1194,1468" protocol=tcp \
    src-address=192.168.0.0/16
add action=mark-connection chain=jumpgames connection-rate=0-325k \
    new-connection-mark=game_conn passthrough=yes port="!53,5353,5938,8291,126\
    71-12675,123,7282,40003,3478,8181,8383,1080,1194,1468" protocol=udp \
    src-address=192.168.0.0/16
add action=return chain=jumpgames src-address=192.168.0.0/16
add action=mark-routing chain=prerouting connection-mark=game_conn \
    in-interface=Lan new-routing-mark=game_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=game_conn \
    in-interface=Hotspot new-routing-mark=game_route passthrough=yes
add action=mark-packet chain=prerouting connection-mark=game_conn \
    new-packet-mark=Game_pkt passthrough=no
add action=change-dscp chain=postrouting comment=ICMP new-dscp=1 passthrough=\
    yes protocol=icmp
add action=change-dscp chain=postrouting dst-port=53 new-dscp=1 passthrough=\
    yes protocol=udp
add action=change-dscp chain=postrouting dst-port=53 new-dscp=1 passthrough=\
    yes protocol=tcp
add action=mark-connection chain=postrouting dscp=1 new-connection-mark=\
    icmp_conn passthrough=yes
add action=mark-packet chain=postrouting connection-mark=icmp_conn \
    new-packet-mark=icmp_pkt passthrough=no
add action=jump chain=prerouting comment=Lb dst-address-list=!PRIVATE_IP \
    in-interface=Lan jump-target=LoadBalance src-address=192.168.7.0/24
add action=jump chain=prerouting dst-address-list=!PRIVATE_IP in-interface=\
    Hotspot jump-target=LoadBalance src-address=192.168.99.0/24
add action=jump chain=prerouting dst-address-list=!PRIVATE_IP in-interface=\
    Hotspot jump-target=LoadBalance src-address=192.168.73.0/24
add action=mark-connection chain=LoadBalance new-connection-mark=local_con1 \
    passthrough=yes per-connection-classifier=both-addresses:3/0
add action=mark-connection chain=LoadBalance new-connection-mark=local_con1 \
    passthrough=yes per-connection-classifier=both-addresses:3/1
add action=mark-connection chain=LoadBalance new-connection-mark=local_con2 \
    passthrough=yes per-connection-classifier=both-addresses:3/2
add action=mark-routing chain=LoadBalance connection-mark=local_con1 \
    new-routing-mark=via_browsing passthrough=yes
add action=mark-routing chain=LoadBalance connection-mark=local_con2 \
    new-routing-mark=via_radio passthrough=yes
add action=mark-connection chain=LoadBalance dst-port=80,8080 \
    new-connection-mark=local_con11 passthrough=yes \
    per-connection-classifier=src-address-and-port:3/0 protocol=tcp
add action=mark-connection chain=LoadBalance dst-port=80,8080 \
    new-connection-mark=local_con11 passthrough=yes \
    per-connection-classifier=src-address-and-port:3/1 protocol=tcp
add action=mark-connection chain=LoadBalance dst-port=80,8080 \
    new-connection-mark=local_con22 passthrough=yes \
    per-connection-classifier=src-address-and-port:3/2 protocol=tcp
add action=mark-routing chain=LoadBalance connection-mark=local_con11 \
    new-routing-mark=via_browsing passthrough=yes
add action=mark-routing chain=LoadBalance connection-mark=local_con22 \
    new-routing-mark=via_radio passthrough=yes
add action=mark-connection chain=prerouting comment=Koneksi-GGC dst-address=\
    !192.168.0.0/16 dst-address-list=ggc-telkom new-connection-mark=ggc_conn \
    passthrough=yes src-address=192.168.0.0/16 time=\
    8h-22h,sun,mon,tue,wed,thu,fri,sat
add action=mark-packet chain=prerouting comment=Koneksi-GGC connection-mark=\
    ggc_conn new-packet-mark=ggc_pkt passthrough=no time=\
    8h-22h,sun,mon,tue,wed,thu,fri,sat
add action=mark-routing chain=prerouting comment=Unlimited disabled=yes \
    dst-address=!192.168.73.0/24 dst-port=443 new-routing-mark=via_radio \
    passthrough=yes protocol=tcp src-address=192.168.73.0/24 time=\
    23h-7h,sun,mon,tue,wed,thu,fri,sat
add action=mark-routing chain=prerouting comment=pptp-vpnbook \
    dst-address-list=speedtest new-routing-mark=pptp-vpnbook passthrough=no \
    src-address-list=PRIVATE_IP
add action=mark-connection chain=prerouting comment="Global Conn" \
    dst-address-list=!PRIVATE_IP new-connection-mark=Global_conn \
    src-address-list=PRIVATE_IP
add action=mark-packet chain=prerouting connection-mark=Global_conn \
    in-interface=Modem_Browser new-packet-mark=down_pkt passthrough=no
add action=mark-packet chain=prerouting connection-mark=Global_conn \
    in-interface=pppoe-out1 new-packet-mark=down_pkt passthrough=no
add action=mark-packet chain=prerouting connection-mark=Global_conn \
    in-interface=all-ppp new-packet-mark=up_pkt passthrough=no
add action=mark-packet chain=prerouting connection-mark=Global_conn \
    in-interface=Lan new-packet-mark=up_pkt passthrough=no
add action=mark-packet chain=prerouting connection-mark=Global_conn \
    in-interface=Hotspot new-packet-mark=up_pkt passthrough=no