Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- /ip firewall address-list
- add address=0.0.0.0/8 list=private-lokal
- add address=10.0.0.0/8 list=private-lokal
- add address=100.64.0.0/10 list=private-lokal
- add address=127.0.0.0/8 list=private-lokal
- add address=169.254.0.0/16 list=private-lokal
- add address=172.16.0.0/12 list=private-lokal
- add address=192.0.0.0/24 list=private-lokal
- add address=192.0.2.0/24 list=private-lokal
- add address=192.168.0.0/16 list=private-lokal
- add address=198.18.0.0/15 list=private-lokal
- add address=198.51.100.0/24 list=private-lokal
- add address=203.0.113.0/24 list=private-lokal
- add address=224.0.0.0/3 list=private-lokal
- add address=118.98.0.0/17 list=ggc-telkom
- add address=118.97.0.0/16 list=ggc-telkom
- add address=216.239.32.0/19 list=ggc-telkom
- add address=216.58.192.0/19 list=ggc-telkom
- add address=172.217.0.0/16 list=ggc-telkom
- add address=74.125.0.0/16 list=ggc-telkom
- /ip firewall raw
- add action=drop chain=prerouting comment="Drop Koneksi ke modem" dst-address=\
- 192.168.100.1 dst-port=80 protocol=tcp
- add action=drop chain=prerouting comment="Drop Ping Ke Modem" dst-address=\
- 192.168.100.1 protocol=icmp
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment=Vainglory dst-address-list=\
- !private-lokal dst-port=7000-8020 protocol=tcp src-address-list=\
- private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment=Vainglory content=.superevil.net \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\
- !private-lokal dst-port=30000-30150 protocol=tcp src-address-list=\
- private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\
- !private-lokal dst-port=5000-5600 protocol=udp src-address-list=\
- private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment="Mobile Legends" content=\
- .youngjoygame.com dst-address-list=!private-lokal src-address-list=\
- private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\
- !private-lokal dst-port=10012,17500 protocol=tcp src-address-list=\
- private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\
- !private-lokal dst-port="10491,10010,10013,10612,20002,20001,20000,12235,1\
- 3748,13972,13894,11455,10096,10039" protocol=udp src-address-list=\
- private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment="PUBG Mobile" content=.igamecj.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment="PUBG Mobile" content=\
- tencentgames.helpshift.com dst-address-list=!private-lokal \
- src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=games address-list-timeout=\
- none-dynamic chain=prerouting comment=Garena content=.garenanow.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=ig content=.cdninstagram.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=ig content=.instagram.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=WA content=.whatsapp.net \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=WA content=.whatsapp.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=life360 content=.life360.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=fb content=.facebook.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=fb content=.facebook.net \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=fb content=.fbcdn.net \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=twitter content=.twitter.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=twitter content=.twimg.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
- none-dynamic chain=prerouting comment=tiktok content=.tiktokv.com \
- dst-address-list=!private-lokal src-address-list=private-lokal
- /ip firewall filter
- add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=tcp \
- src-address-list=!private-lokal
- add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=udp \
- src-address-list=!private-lokal
- add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=tcp \
- src-address-list=!private-lokal
- add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=udp \
- src-address-list=!private-lokal
- add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
- add action=accept chain=input comment="defconf: accept ICMP" dst-port=\
- 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \
- protocol=tcp
- add action=accept chain=input comment="defconf: accept ICMP" dst-port=\
- 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \
- protocol=udp
- add action=accept chain=input comment="defconf: accept established,related" \
- connection-state=established,related
- add action=drop chain=input comment="defconf: drop all from WAN" \
- in-interface=ether1
- add action=accept chain=forward comment="defconf: accept established,related" \
- connection-state=established,related
- add action=drop chain=forward comment="defconf: drop invalid" \
- connection-state=invalid
- add action=drop chain=forward comment=\
- "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
- connection-state=new in-interface=ether1
- /ip firewall mangle
- add action=mark-connection chain=prerouting comment=private-lokal \
- dst-address-list=private-lokal new-connection-mark=private-lokal \
- passthrough=yes src-address-list=private-lokal
- add action=accept chain=prerouting comment=private-lokal connection-mark=\
- private-lokal dst-address-list=private-lokal src-address-list=\
- private-lokal
- add action=mark-connection chain=prerouting comment=vip dst-address-list=\
- !private-lokal new-connection-mark=vip passthrough=yes protocol=icmp \
- src-address-list=private-lokal
- add action=mark-connection chain=prerouting comment=dns dst-address-list=\
- !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
- passthrough=yes protocol=tcp src-address-list=private-lokal
- add action=mark-connection chain=prerouting comment=dns dst-address-list=\
- !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
- passthrough=yes protocol=udp src-address-list=private-lokal
- add action=accept chain=prerouting comment=vip connection-mark=vip
- add action=mark-connection chain=prerouting comment=games dst-address-list=\
- games new-connection-mark=games passthrough=yes src-address-list=\
- private-lokal
- add action=accept chain=prerouting comment=games connection-mark=games
- add action=mark-connection chain=prerouting comment=sosmed dst-address-list=\
- sosmed new-connection-mark=sosmed passthrough=yes src-address-list=\
- private-lokal
- add action=accept chain=prerouting comment=sosmed connection-mark=sosmed
- add action=mark-connection chain=prerouting comment=ggc-telkom \
- dst-address-list=ggc-telkom new-connection-mark=ggc-redirector \
- passthrough=yes src-address-list=private-lokal
- add action=accept chain=prerouting comment=ggc-redirector connection-mark=\
- ggc-redirector
- add action=mark-connection chain=prerouting comment=all-trafik \
- dst-address-list=!private-lokal new-connection-mark=all-trafik \
- passthrough=yes src-address-list=private-lokal
- add action=accept chain=prerouting comment=all-trafik connection-mark=\
- all-trafik
- add action=jump chain=forward in-interface=ether1 jump-target=qos-down
- add action=mark-packet chain=qos-down comment=vip-down connection-mark=vip \
- new-packet-mark=vip-down passthrough=no
- add action=mark-packet chain=qos-down comment=games-down connection-mark=\
- games new-packet-mark=games-down passthrough=no
- add action=mark-packet chain=qos-down comment=sosmed-down connection-mark=\
- sosmed new-packet-mark=sosmed-down passthrough=no
- add action=mark-packet chain=qos-down comment=patch-games-down \
- connection-mark=all-trafik new-packet-mark=patch-games-down passthrough=\
- no src-address-list=games
- add action=mark-packet chain=qos-down comment=ggc-telkom-down \
- connection-mark=ggc-redirector new-packet-mark=ggc-telkom-down \
- passthrough=no
- add action=mark-packet chain=qos-down comment=browsing-down connection-bytes=\
- 0-1000000 connection-mark=all-trafik new-packet-mark=browsing-down \
- passthrough=no
- add action=mark-packet chain=qos-down comment=low-down connection-bytes=\
- 1000001-2000000 connection-mark=all-trafik new-packet-mark=low-down \
- passthrough=no
- add action=mark-packet chain=qos-down comment=midle-down connection-bytes=\
- 2000001-5000000 connection-mark=all-trafik new-packet-mark=midle-down \
- passthrough=no
- add action=mark-packet chain=qos-down comment=high-down connection-bytes=\
- 5000001-10000000 connection-mark=all-trafik new-packet-mark=high-down \
- passthrough=no
- add action=mark-packet chain=qos-down comment=unknown-down connection-mark=\
- all-trafik new-packet-mark=unknown-down passthrough=no
- add action=mark-packet chain=qos-down comment=unknown-down new-packet-mark=\
- unknown-down passthrough=no
- add action=return chain=qos-down
- add action=jump chain=forward jump-target=qos-up out-interface=ether1
- add action=mark-packet chain=qos-up comment=vip-up connection-mark=vip \
- new-packet-mark=vip-up passthrough=no
- add action=mark-packet chain=qos-up comment=games-up connection-mark=games \
- new-packet-mark=games-up passthrough=no
- add action=mark-packet chain=qos-up comment=sosmed-up connection-mark=sosmed \
- new-packet-mark=sosmed-up passthrough=no
- add action=mark-packet chain=qos-up comment=patch-games-up connection-mark=\
- all-trafik dst-address-list=games new-packet-mark=patch-games-up \
- passthrough=no
- add action=mark-packet chain=qos-up comment=ggc-telkom-up connection-mark=\
- ggc-redirector new-packet-mark=ggc-telkom-up passthrough=no
- add action=mark-packet chain=qos-up comment=browsing-up connection-bytes=\
- 0-300000 connection-mark=all-trafik new-packet-mark=browsing-up \
- passthrough=no
- add action=mark-packet chain=qos-up comment=low-up connection-bytes=\
- 301000-500000 connection-mark=all-trafik new-packet-mark=low-up \
- passthrough=no
- add action=mark-packet chain=qos-up comment=midle-up connection-bytes=\
- 501000-999000 connection-mark=all-trafik new-packet-mark=midle-up \
- passthrough=no
- add action=mark-packet chain=qos-up comment=high-up connection-bytes=\
- 1000000-2000000 connection-mark=all-trafik new-packet-mark=high-up \
- passthrough=no
- add action=mark-packet chain=qos-up comment=unknown-up connection-mark=\
- all-trafik new-packet-mark=unknown-up passthrough=no
- add action=mark-packet chain=qos-up comment=unknown-up new-packet-mark=\
- unknown-up passthrough=no
- add action=return chain=qos-up
- /queue tree
- add max-limit=100M name=DOWNLOAD parent=global queue=default
- add bucket-size=0 limit-at=64k max-limit=10M name=1.VIP packet-mark=vip-down \
- parent=DOWNLOAD priority=1 queue=default
- add bucket-size=0 limit-at=1M max-limit=10M name=2.GAMES-ONLINE packet-mark=\
- games-down parent=DOWNLOAD priority=3 queue=default
- add bucket-size=0 limit-at=1M max-limit=10M name=3.PATCH-GAMES packet-mark=\
- patch-games-down parent=DOWNLOAD priority=3 queue=pcq-download-default
- add limit-at=8M max-limit=10M name=4.NORMAL parent=DOWNLOAD queue=default
- add limit-at=500k max-limit=10M name=4.1.BROWSING packet-mark=browsing-down \
- parent=4.NORMAL priority=5 queue=pcq-download-default
- add limit-at=500k max-limit=10M name=4.3.LOW packet-mark=low-down parent=\
- 4.NORMAL priority=5 queue=pcq-download-default
- add limit-at=500k max-limit=10M name=4.4.MIDLE packet-mark=midle-down parent=\
- 4.NORMAL priority=7 queue=pcq-download-default
- add limit-at=500k max-limit=10M name=4.5.HIGH packet-mark=high-down parent=\
- 4.NORMAL queue=pcq-download-default
- add limit-at=500k max-limit=10M name=4.6.UNKNOWN packet-mark=unknown-down \
- parent=4.NORMAL queue=pcq-download-default
- add limit-at=500k max-limit=10M name=4.7.GOOGLE packet-mark=ggc-telkom-down \
- parent=4.NORMAL priority=5 queue=pcq-download-default
- add max-limit=100M name=UPLOAD parent=global queue=default
- add limit-at=64k max-limit=2M name=1.UPLOAD-VIP packet-mark=vip-up parent=\
- UPLOAD priority=1 queue=default
- add limit-at=1M max-limit=2M name=2.UPLOAD-GAMES-ONLINE packet-mark=games-up \
- parent=UPLOAD priority=3 queue=default
- add limit-at=1M max-limit=2M name=3.UPLOAD-PATCH-GAMES packet-mark=\
- patch-games-up parent=UPLOAD priority=3 queue=pcq-upload-default
- add limit-at=1500k max-limit=2M name=4.UPLOAD-NORMAL parent=UPLOAD queue=\
- default
- add limit-at=100k max-limit=2M name=4.1.UPLOAD-BROWSING packet-mark=\
- browsing-up parent=4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default
- add limit-at=100k max-limit=2M name=4.3.UPLOAD-LOW packet-mark=low-up parent=\
- 4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default
- add limit-at=100k max-limit=2M name=4.4.UPLOAD-MIDLE packet-mark=midle-up \
- parent=4.UPLOAD-NORMAL priority=7 queue=pcq-upload-default
- add limit-at=100k max-limit=2M name=4.5.UPLOAD-HIGH packet-mark=high-up \
- parent=4.UPLOAD-NORMAL queue=pcq-upload-default
- add limit-at=100k max-limit=2M name=4.6.UPLOAD-UNKNOWN packet-mark=unknown-up \
- parent=4.UPLOAD-NORMAL queue=pcq-upload-default
- add limit-at=100k max-limit=2M name=4.7.UPLOAD-GOOGLE packet-mark=\
- ggc-telkom-up parent=4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default
- add limit-at=500k max-limit=10M name=4.2.SOSMED packet-mark=sosmed-down \
- parent=4.NORMAL priority=6 queue=pcq-download-default
- add limit-at=100k max-limit=2M name=4.2.UPLOAD-SOSMED packet-mark=sosmed-up \
- parent=4.UPLOAD-NORMAL priority=6 queue=pcq-upload-default
Advertisement
Add Comment
Please, Sign In to add comment