API tools faq
paste
ganggumalam

27032018

ganggumalam
Mar 27th, 2018
579
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.91 KB | None | 0 0
raw download clone embed print report
  1. /ip firewall layer7-protocol
  2. add name=torrent regexp="^.+(Torrent|torrent)"
  3.  
  4. /ip firewall address-list
  5. add address=0.0.0.0/8 list=private-lokal
  6. add address=10.0.0.0/8 list=private-lokal
  7. add address=100.64.0.0/10 list=private-lokal
  8. add address=127.0.0.0/8 list=private-lokal
  9. add address=169.254.0.0/16 list=private-lokal
  10. add address=172.16.0.0/12 list=private-lokal
  11. add address=192.0.0.0/24 list=private-lokal
  12. add address=192.0.2.0/24 list=private-lokal
  13. add address=192.168.0.0/16 list=private-lokal
  14. add address=198.18.0.0/15 list=private-lokal
  15. add address=198.51.100.0/24 list=private-lokal
  16. add address=203.0.113.0/24 list=private-lokal
  17. add address=224.0.0.0/3 list=private-lokal
  18. add address=118.98.0.0/17 list=ggc-telkom
  19. add address=118.97.0.0/16 list=ggc-telkom
  20. add address=216.239.32.0/19 list=ggc-telkom
  21. add address=216.58.192.0/19 list=ggc-telkom
  22. add address=172.217.0.0/16 list=ggc-telkom
  23. add address=74.125.0.0/16 list=ggc-telkom
  24. /ip firewall filter
  25. add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=tcp \
  26. src-address-list=!private-lokal
  27. add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=udp \
  28. src-address-list=!private-lokal
  29. add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=tcp \
  30. src-address-list=!private-lokal
  31. add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=udp \
  32. src-address-list=!private-lokal
  33. add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
  34. add action=accept chain=input comment="defconf: accept ICMP" dst-port=\
  35. 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \
  36. protocol=tcp
  37. add action=accept chain=input comment="defconf: accept ICMP" dst-port=\
  38. 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \
  39. protocol=udp
  40. add action=accept chain=input comment="defconf: accept established,related" \
  41. connection-state=established,related
  42. add action=drop chain=input comment="defconf: drop all from WAN" \
  43. in-interface=ether1
  44. add action=accept chain=forward comment="defconf: accept established,related" \
  45. connection-state=established,related
  46. add action=drop chain=forward comment="defconf: drop invalid" \
  47. connection-state=invalid
  48. add action=drop chain=forward comment=\
  49. "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
  50. connection-state=new in-interface=ether1
  51. /ip firewall mangle
  52. add action=mark-connection chain=prerouting comment=private-lokal \
  53. dst-address-list=private-lokal new-connection-mark=private-lokal \
  54. passthrough=yes src-address-list=private-lokal
  55. add action=accept chain=prerouting comment=private-lokal connection-mark=\
  56. private-lokal dst-address-list=private-lokal src-address-list=\
  57. private-lokal
  58. add action=mark-connection chain=prerouting comment=vip dst-address-list=\
  59. !private-lokal new-connection-mark=vip passthrough=yes protocol=icmp \
  60. src-address-list=private-lokal
  61. add action=mark-connection chain=prerouting comment=dns dst-address-list=\
  62. !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
  63. passthrough=yes protocol=tcp src-address-list=private-lokal
  64. add action=mark-connection chain=prerouting comment=dns dst-address-list=\
  65. !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
  66. passthrough=yes protocol=udp src-address-list=private-lokal
  67. add action=accept chain=prerouting comment=vip connection-mark=vip
  68. add action=mark-connection chain=prerouting comment=games dst-address-list=\
  69. games new-connection-mark=games passthrough=yes src-address-list=\
  70. private-lokal
  71. add action=accept chain=prerouting comment=games connection-mark=games
  72. add action=mark-connection chain=prerouting comment=ggc-telkom \
  73. dst-address-list=ggc-telkom new-connection-mark=ggc-redirector \
  74. passthrough=yes src-address-list=private-lokal
  75. add action=accept chain=prerouting comment=ggc-redirector connection-mark=\
  76. ggc-redirector
  77. add action=mark-connection chain=prerouting comment=all-trafik \
  78. dst-address-list=!private-lokal new-connection-mark=all-trafik \
  79. passthrough=yes src-address-list=private-lokal
  80. add action=accept chain=prerouting comment=all-trafik connection-mark=\
  81. all-trafik
  82. add action=jump chain=forward in-interface=ether1 jump-target=qos-down
  83. add action=mark-packet chain=qos-down comment=vip-down connection-mark=vip \
  84. new-packet-mark=vip-down passthrough=no
  85. add action=mark-packet chain=qos-down comment=games-down connection-mark=\
  86. games new-packet-mark=games-down passthrough=no
  87. add action=mark-packet chain=qos-down comment=patch-games-down \
  88. connection-mark=all-trafik new-packet-mark=patch-games-down passthrough=\
  89. no src-address-list=games
  90. add action=mark-packet chain=qos-down comment=ggc-telkom-down \
  91. connection-mark=ggc-redirector new-packet-mark=ggc-telkom-down \
  92. passthrough=no
  93. add action=mark-packet chain=qos-down comment=browsing-down connection-bytes=\
  94. 0-1000000 connection-mark=all-trafik new-packet-mark=browsing-down \
  95. passthrough=no
  96. add action=mark-packet chain=qos-down comment=low-down connection-bytes=\
  97. 1000001-10000000 connection-mark=all-trafik new-packet-mark=low-down \
  98. passthrough=no
  99. add action=mark-packet chain=qos-down comment=midle-down connection-bytes=\
  100. 10000001-50000000 connection-mark=all-trafik new-packet-mark=midle-down \
  101. passthrough=no
  102. add action=mark-packet chain=qos-down comment=high-down connection-bytes=\
  103. 50000001-0 connection-mark=all-trafik new-packet-mark=high-down \
  104. passthrough=no
  105. add action=mark-packet chain=qos-down comment=unknown-down connection-mark=\
  106. all-trafik new-packet-mark=unknown-down passthrough=no
  107. add action=mark-packet chain=qos-down comment=unknown-down new-packet-mark=\
  108. unknown-down passthrough=no
  109. add action=return chain=qos-down
  110. add action=jump chain=forward jump-target=qos-up out-interface=ether1
  111. add action=mark-packet chain=qos-up comment=vip-up connection-mark=vip \
  112. new-packet-mark=vip-up passthrough=no
  113. add action=mark-packet chain=qos-up comment=games-up connection-mark=games \
  114. new-packet-mark=games-up passthrough=no
  115. add action=mark-packet chain=qos-up comment=patch-games-up connection-mark=\
  116. all-trafik dst-address-list=games new-packet-mark=patch-games-up \
  117. passthrough=no
  118. add action=mark-packet chain=qos-up comment=ggc-telkom-up connection-mark=\
  119. ggc-redirector new-packet-mark=ggc-telkom-up passthrough=no
  120. add action=mark-packet chain=qos-up comment=browsing-up connection-bytes=\
  121. 0-1000000 connection-mark=all-trafik new-packet-mark=browsing-up \
  122. passthrough=no
  123. add action=mark-packet chain=qos-up comment=low-up connection-bytes=\
  124. 1000001-10000000 connection-mark=all-trafik new-packet-mark=low-up \
  125. passthrough=no
  126. add action=mark-packet chain=qos-up comment=midle-up connection-bytes=\
  127. 10000001-50000000 connection-mark=all-trafik new-packet-mark=midle-up \
  128. passthrough=no
  129. add action=mark-packet chain=qos-up comment=high-up connection-bytes=\
  130. 50000001-0 connection-mark=all-trafik new-packet-mark=high-up \
  131. passthrough=no
  132. add action=mark-packet chain=qos-up comment=unknown-up connection-mark=\
  133. all-trafik new-packet-mark=unknown-up passthrough=no
  134. add action=mark-packet chain=qos-up comment=unknown-up new-packet-mark=\
  135. unknown-up passthrough=no
  136. add action=return chain=qos-up
  137.  
  138. /ip firewall raw
  139. add action=drop chain=prerouting comment="Xiaomi Ipan" disabled=yes \
  140. src-mac-address=0C:1D:AF:FE:CA:09
  141. add action=drop chain=prerouting comment="Samsung Unknown" src-mac-address=\
  142. 94:B1:0A:4D:76:AF
  143. add action=drop chain=prerouting comment="VIVO Unknown" src-mac-address=\
  144. 3C:B6:B7:12:82:0F
  145. add action=drop chain=prerouting comment="iPhone Ipan" disabled=yes \
  146. src-mac-address=D8:96:95:3F:62:C5
  147. add action=drop chain=prerouting comment="Drop Koneksi ke modem" dst-address=\
  148. 192.168.100.1 dst-port=80 protocol=tcp
  149. add action=drop chain=prerouting comment="Drop Ping Ke Modem" dst-address=\
  150. 192.168.100.1 protocol=icmp
  151. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  152. none-dynamic chain=prerouting comment=Vainglory content=.superevil.net \
  153. dst-address-list=!private-lokal src-address-list=private-lokal
  154. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  155. none-dynamic chain=prerouting comment=Vainglory content=\
  156. .superevilmegacorp.net dst-address-list=!private-lokal src-address-list=\
  157. private-lokal
  158. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  159. none-dynamic chain=prerouting comment=Garena content=.garena.co.id \
  160. dst-address-list=!private-lokal src-address-list=private-lokal
  161. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  162. none-dynamic chain=prerouting comment=megaxus content=.megaxus.co.id \
  163. dst-address-list=!private-lokal src-address-list=private-lokal
  164. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  165. none-dynamic chain=prerouting comment=lytogame content=.lytogame.com \
  166. dst-address-list=!private-lokal src-address-list=private-lokal
  167. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  168. none-dynamic chain=prerouting comment=gemscool content=.gemscool.co.id \
  169. dst-address-list=!private-lokal src-address-list=private-lokal
  170. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  171. none-dynamic chain=prerouting comment=steampowered content=\
  172. .steampowered.com dst-address-list=!private-lokal src-address-list=\
  173. private-lokal
  174. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  175. none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\
  176. !private-lokal dst-port=30100-30110 protocol=tcp src-address-list=\
  177. private-lokal
  178. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  179. none-dynamic chain=prerouting comment=Netmarble content=.netmarble.com \
  180. dst-address-list=!private-lokal src-address-list=private-lokal
  181.  
  182. /queue tree
  183. add max-limit=100M name=INCOMING parent=global queue=default
  184. add limit-at=10M max-limit=10M name=A.1.PAKET-TRAFIK parent=INCOMING queue=\
  185. default
  186. add limit-at=64k max-limit=10M name=A.1.1.VIP packet-mark=vip-down parent=\
  187. A.1.PAKET-TRAFIK priority=1 queue=default
  188. add limit-at=1M max-limit=10M name=A.1.2.GAMES-ONLINE packet-mark=games-down \
  189. parent=A.1.PAKET-TRAFIK priority=2 queue=default
  190. add limit-at=500k max-limit=10M name=A.1.3.PATCH-GAMES packet-mark=\
  191. patch-games-down parent=A.1.PAKET-TRAFIK priority=3 queue=\
  192. pcq-download-default
  193. add limit-at=8M max-limit=8M name=A.1.4.NORMAL parent=A.1.PAKET-TRAFIK queue=\
  194. default
  195. add limit-at=500k max-limit=8M name=A.1.4.1.BROWSING packet-mark=\
  196. browsing-down parent=A.1.4.NORMAL priority=4 queue=pcq-download-default
  197. add limit-at=500k max-limit=8M name=A.1.4.2.LOW packet-mark=low-down parent=\
  198. A.1.4.NORMAL priority=5 queue=pcq-download-default
  199. add limit-at=500k max-limit=8M name=A.1.4.3.MIDLE packet-mark=midle-down \
  200. parent=A.1.4.NORMAL priority=6 queue=pcq-download-default
  201. add limit-at=500k max-limit=8M name=A.1.4.4.HIGH packet-mark=high-down \
  202. parent=A.1.4.NORMAL priority=7 queue=pcq-download-default
  203. add limit-at=500k max-limit=8M name=A.1.4.5.UNKNOWN packet-mark=unknown-down \
  204. parent=A.1.4.NORMAL priority=7 queue=pcq-download-default
  205. add limit-at=1M max-limit=10M name=A.2.GGC-TELKOM packet-mark=ggc-telkom-down \
  206. parent=INCOMING queue=pcq-download-default
  207. add max-limit=100M name=OUTGOING parent=global queue=default
  208. add limit-at=2M max-limit=2M name=B.1.PAKET-TRAFIK parent=OUTGOING queue=\
  209. default
  210. add limit-at=64k max-limit=2M name=B.1.1.VIP packet-mark=vip-up parent=\
  211. B.1.PAKET-TRAFIK priority=1 queue=default
  212. add limit-at=500k max-limit=2M name=B.1.2.GAMES-ONLINE packet-mark=games-up \
  213. parent=B.1.PAKET-TRAFIK priority=2 queue=default
  214. add limit-at=250k max-limit=2M name=B.1.3.PATCH-GAMES packet-mark=\
  215. patch-games-up parent=B.1.PAKET-TRAFIK priority=3 queue=\
  216. pcq-upload-default
  217. add limit-at=1500k max-limit=1500k name=B.1.4.NORMAL parent=B.1.PAKET-TRAFIK \
  218. queue=default
  219. add limit-at=200k max-limit=1500k name=B.1.4.1.BROWSING packet-mark=\
  220. browsing-up parent=B.1.4.NORMAL priority=4 queue=pcq-upload-default
  221. add limit-at=200k max-limit=1500k name=B.1.4.2.LOW packet-mark=low-up parent=\
  222. B.1.4.NORMAL priority=5 queue=pcq-upload-default
  223. add limit-at=200k max-limit=1500k name=B.1.4.3.MIDLE packet-mark=midle-up \
  224. parent=B.1.4.NORMAL priority=6 queue=pcq-upload-default
  225. add limit-at=200k max-limit=1500k name=B.1.4.4.HIGH packet-mark=high-up \
  226. parent=B.1.4.NORMAL priority=7 queue=pcq-upload-default
  227. add limit-at=200k max-limit=1500k name=B.1.4.5.UNKNOWN packet-mark=unknown-up \
  228. parent=B.1.4.NORMAL priority=7 queue=pcq-upload-default
  229. add limit-at=200k max-limit=1500k name=B.2.GGC-TELKOM packet-mark=\
  230. ggc-telkom-up parent=OUTGOING queue=pcq-upload-default
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!