vpn pi-hole

/interface pptp-client
add comment=pi-hole connect-to=6f3907360889.sn.mynetname.net disabled=no name=pi-hole password=pi-hole profile=default user=pi-hole

/ip firewall nat
add comment=pi-hole action=masquerade chain=srcnat out-interface=pi-hole
add comment=pi-hole action=dst-nat chain=dstnat dst-address=!192.168.22.48 dst-port=53 protocol=udp src-address=!192.168.22.48 to-addresses=192.168.22.48 to-ports=53
add comment=pi-hole action=dst-nat chain=dstnat dst-address=!192.168.22.48 dst-port=53 protocol=tcp src-address=!192.168.22.48 to-addresses=192.168.22.48 to-ports=53
add comment=pi-hole action=masquerade chain=srcnat dst-address=192.168.22.48 dst-port=53 protocol=udp src-address-list=private-lokal
add comment=pi-hole action=masquerade chain=srcnat dst-address=192.168.22.48 dst-port=53 protocol=tcp src-address-list=private-lokal


/ip firewall address-list
add address=0.0.0.0/8 list=private-lokal
add address=10.0.0.0/8 list=private-lokal
add address=100.64.0.0/10 list=private-lokal
add address=127.0.0.0/8 list=private-lokal
add address=169.254.0.0/16 list=private-lokal
add address=172.16.0.0/12 list=private-lokal
add address=192.0.0.0/24 list=private-lokal
add address=192.0.2.0/24 list=private-lokal
add address=192.168.0.0/16 list=private-lokal
add address=198.18.0.0/15 list=private-lokal
add address=198.51.100.0/24 list=private-lokal
add address=203.0.113.0/24 list=private-lokal
add address=224.0.0.0/3 list=private-lokal

/ip route
add comment=pi-hole distance=1 dst-address=192.168.22.48/32 gateway=pi-hole


/tool netwatch
add comment=cek-pi-hole down-script="/ip firewall nat disable [find comment=pi-hole]; log warning \"rule firewall nat untuk pi-hole telah MATI\";\r\
    \n" host=192.168.22.48 up-script=\
    "/ip firewall nat enable [find comment=pi-hole]; log warning \"rule firewall nat untuk pi-hole telah AKTIF\";\r\
    \ndelay 5\r\
    \n/ip route enable [find comment=pi-hole]; log warning \"rule ip route untuk pi-hole telah AKTIF\";"