Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- /ip firewall address-list
- add address=10.0.0.0/8 list=private-lokal
- add address=172.16.0.0/12 list=private-lokal
- add address=192.168.0.0/16 list=private-lokal
- /ip firewall layer7-protocol
- add name=youtube regexp="(youtube.com|r[0-9]+---[a-z]+-+[a-z0-9-]+\\.googlevideo\\.com)"
- #misal ether1 = biznet = 192.168.1.1 = default route = jalur-1 dan exit-1
- #misal ether2 = adsl = 192.168.2.1 = jalur-2 dan exit-2
- /ip route
- add check-gateway=ping comment=exit-1 distance=1 gateway=192.168.1.1 routing-mark=exit-1
- add check-gateway=ping comment=exit-2 distance=1 gateway=192.168.2.1 routing-mark=exit-2
- add check-gateway=ping comment=jalur-1 distance=1 gateway=192.168.1.1
- add check-gateway=ping comment=jalur-2 distance=2 gateway=192.168.2.1
- add check-gateway=ping comment=jalur-1 distance=1 gateway=192.168.1.1 routing-mark=jalur-1
- add check-gateway=ping comment=jalur-2 distance=1 gateway=192.168.2.1 routing-mark=jalur-2
- /ip firewall mangle
- add action=accept chain=input dst-address-list=lokal src-address-list=private-lokal
- add action=accept chain=prerouting dst-address-list=lokal src-address-list=private-lokal
- add action=accept chain=forward dst-address-list=lokal src-address-list=private-lokal
- add action=accept chain=postrouting dst-address-list=lokal src-address-list=private-lokal
- add action=accept chain=output dst-address-list=lokal src-address-list=private-lokal
- add action=mark-connection chain=input comment=exit-1 in-interface=ether1 new-connection-mark=exit-1 passthrough=yes
- add action=mark-connection chain=input comment=exit-2 in-interface=ether2 new-connection-mark=exit-2 passthrough=yes
- add action=mark-routing chain=output comment=exit-1 connection-mark=exit-1 new-routing-mark=exit-1 passthrough=no
- add action=mark-routing chain=output comment=exit-2 connection-mark=exit-2 new-routing-mark=exit-2 passthrough=no
- #akses youtube via biznet sebagai default route
- add action=accept chain=prerouting dst-address-list=!private-lokal src-address-list=private-lokal layer7-protocol=youtube
- #selain youtube, via adsl sebagai jalur-2
- add action=mark-routing chain=prerouting comment=jalur-2 src-address-list=private-lokal dst-address-list=!private-lokal new-routing-mark=jalur-2 passthrough=no
Add Comment
Please, Sign In to add comment