SHOW:
|
|
- or go back to the newest paste.
| 1 | /ip firewall address-list | |
| 2 | add address=10.0.0.0/8 list=private-lokal | |
| 3 | add address=172.16.0.0/12 list=private-lokal | |
| 4 | add address=192.168.0.0/16 list=private-lokal | |
| 5 | ||
| 6 | /ip firewall mangle | |
| 7 | add action=mark-connection chain=prerouting comment=vip dst-address-list=!private-lokal new-connection-mark=vip protocol=icmp src-address-list=private-lokal | |
| 8 | add action=mark-connection chain=prerouting comment=vip dst-address-list=!private-lokal new-connection-mark=vip protocol=igmp src-address-list=private-lokal | |
| 9 | add action=mark-connection chain=prerouting comment=vip dst-address-list=!private-lokal dst-port=123,53,5353 new-connection-mark=vip protocol=tcp \ | |
| 10 | src-address-list=private-lokal | |
| 11 | add action=mark-connection chain=prerouting comment=vip dst-address-list=!private-lokal dst-port=123,53,5353 new-connection-mark=vip protocol=udp \ | |
| 12 | src-address-list=private-lokal | |
| 13 | add action=mark-packet chain=prerouting comment=vip-up connection-mark=vip dst-address-list=!private-lokal new-packet-mark=vip-up passthrough=no \ | |
| 14 | src-address-list=private-lokal | |
| 15 | add action=mark-packet chain=prerouting comment=vip-down connection-mark=vip dst-address-list=private-lokal new-packet-mark=vip-down passthrough=no \ | |
| 16 | src-address-list=!private-lokal | |
| 17 | add action=mark-connection chain=prerouting comment=googlevideo content=.youtube.com dst-address-list=!private-lokal new-connection-mark=googlevideo \ | |
| 18 | src-address-list=private-lokal | |
| 19 | add action=mark-connection chain=prerouting comment=googlevideo content=googlevideo.com dst-address-list=!private-lokal new-connection-mark=googlevideo \ | |
| 20 | src-address-list=private-lokal | |
| 21 | add action=mark-packet chain=prerouting comment=googlevideo-up connection-mark=googlevideo dst-address-list=!private-lokal new-packet-mark=googlevideo-up \ | |
| 22 | passthrough=no src-address-list=private-lokal | |
| 23 | add action=mark-packet chain=prerouting comment=googlevideo-down connection-mark=googlevideo dst-address-list=private-lokal new-packet-mark=googlevideo-down \ | |
| 24 | passthrough=no src-address-list=!private-lokal | |
| 25 | add action=mark-connection chain=prerouting comment=sosmed content=facebook.com dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 26 | private-lokal | |
| 27 | add action=mark-connection chain=prerouting comment=sosmed content=fbcdn.net dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 28 | private-lokal | |
| 29 | add action=mark-connection chain=prerouting comment=sosmed content=akamaihd.net dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 30 | private-lokal | |
| 31 | add action=mark-connection chain=prerouting comment=sosmed content=twitter.com dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 32 | private-lokal | |
| 33 | add action=mark-connection chain=prerouting comment=sosmed content=twimg.com dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 34 | private-lokal | |
| 35 | add action=mark-connection chain=prerouting comment=sosmed content=instagram.com dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 36 | private-lokal | |
| 37 | add action=mark-connection chain=prerouting comment=sosmed content=telegram.com dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 38 | private-lokal | |
| 39 | add action=mark-connection chain=prerouting comment=sosmed content=whatsapp.com dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 40 | private-lokal | |
| 41 | add action=mark-connection chain=prerouting comment=sosmed content=path.com dst-address-list=!private-lokal new-connection-mark=sosmed src-address-list=\ | |
| 42 | private-lokal | |
| 43 | add action=mark-packet chain=prerouting comment=sosmed-up connection-mark=sosmed dst-address-list=!private-lokal new-packet-mark=sosmed-up passthrough=no \ | |
| 44 | src-address-list=private-lokal | |
| 45 | add action=mark-packet chain=prerouting comment=sosmed-down connection-mark=sosmed dst-address-list=private-lokal new-packet-mark=sosmed-down passthrough=no \ | |
| 46 | src-address-list=!private-lokal | |
| 47 | add action=mark-connection chain=prerouting comment=streaming dst-address-list=!private-lokal dst-port=182,282,8777,1935 new-connection-mark=streaming \ | |
| 48 | protocol=tcp src-address-list=private-lokal | |
| 49 | add action=mark-connection chain=prerouting comment=streaming dst-address-list=!private-lokal dst-port=182,282,8777,1935 new-connection-mark=streaming \ | |
| 50 | protocol=udp src-address-list=private-lokal | |
| 51 | add action=mark-connection chain=prerouting comment=streaming content=.mp4 dst-address-list=!private-lokal new-connection-mark=streaming src-address-list=\ | |
| 52 | private-lokal | |
| 53 | add action=mark-connection chain=prerouting comment=streaming content=.flv dst-address-list=!private-lokal new-connection-mark=streaming src-address-list=\ | |
| 54 | private-lokal | |
| 55 | add action=mark-connection chain=prerouting comment=streaming content=.mkv dst-address-list=!private-lokal new-connection-mark=streaming src-address-list=\ | |
| 56 | private-lokal | |
| 57 | add action=mark-connection chain=prerouting comment=streaming content=.3gp dst-address-list=!private-lokal new-connection-mark=streaming src-address-list=\ | |
| 58 | private-lokal | |
| 59 | add action=mark-connection chain=prerouting comment=streaming content=.ts dst-address-list=!private-lokal new-connection-mark=streaming src-address-list=\ | |
| 60 | private-lokal | |
| 61 | add action=mark-connection chain=prerouting comment=streaming content=.m3u dst-address-list=!private-lokal new-connection-mark=streaming src-address-list=\ | |
| 62 | private-lokal | |
| 63 | add action=mark-packet chain=prerouting comment=streaming-up connection-mark=streaming dst-address-list=!private-lokal new-packet-mark=streaming-up \ | |
| 64 | passthrough=no src-address-list=private-lokal | |
| 65 | add action=mark-packet chain=prerouting comment=streaming-down connection-mark=streaming dst-address-list=private-lokal new-packet-mark=streaming-down \ | |
| 66 | passthrough=no src-address-list=!private-lokal | |
| 67 | add action=mark-connection chain=prerouting comment=down-up connection-rate=512k-100M dst-address-list=!private-lokal new-connection-mark=down-up protocol=\ | |
| 68 | tcp src-address-list=private-lokal | |
| 69 | add action=mark-connection chain=prerouting comment=down-up connection-rate=512k-100M dst-address-list=!private-lokal new-connection-mark=down-up protocol=\ | |
| 70 | udp src-address-list=private-lokal | |
| 71 | add action=mark-packet chain=prerouting comment=up connection-mark=down-up dst-address-list=!private-lokal new-packet-mark=up passthrough=no \ | |
| 72 | src-address-list=private-lokal | |
| 73 | add action=mark-packet chain=prerouting comment=down connection-mark=down-up dst-address-list=private-lokal new-packet-mark=down passthrough=no \ | |
| 74 | src-address-list=!private-lokal | |
| 75 | add action=mark-connection chain=prerouting connection-rate=0-128k dst-address-list=!private-lokal dst-port=\ | |
| 76 | !21,22,23,80,81,88,5050,843,443,182,8777,1935,8000-8081,282 new-connection-mark=games protocol=tcp src-address-list=private-lokal | |
| 77 | add action=mark-connection chain=prerouting connection-rate=0-128k dst-address-list=!private-lokal dst-port=\ | |
| 78 | !21,22,23,80,81,88,5050,843,443,182,8777,1935,8000-8081,282 new-connection-mark=games protocol=udp src-address-list=private-lokal | |
| 79 | add action=mark-packet chain=prerouting comment=games-up connection-mark=games dst-address-list=!private-lokal new-packet-mark=games-up passthrough=no \ | |
| 80 | src-address-list=private-lokal | |
| 81 | add action=mark-packet chain=prerouting comment=games-down connection-mark=games dst-address-list=private-lokal new-packet-mark=games-down passthrough=no \ | |
| 82 | src-address-list=!private-lokal | |
| 83 | add action=mark-connection chain=prerouting comment=browsing dst-address-list=!private-lokal dst-port=80,443,843,8000-8090 new-connection-mark=browsing \ | |
| 84 | protocol=tcp src-address-list=private-lokal | |
| 85 | add action=mark-connection chain=prerouting comment=browsing dst-address-list=!private-lokal dst-port=80,443,843,8000-8090 new-connection-mark=browsing \ | |
| 86 | protocol=udp src-address-list=private-lokal | |
| 87 | add action=mark-packet chain=prerouting comment=browsing-up connection-mark=browsing dst-address-list=!private-lokal new-packet-mark=browsing-up passthrough=\ | |
| 88 | no src-address-list=private-lokal | |
| 89 | add action=mark-packet chain=prerouting comment=browsing-down connection-mark=browsing dst-address-list=private-lokal new-packet-mark=browsing-down \ | |
| 90 | passthrough=no src-address-list=!private-lokal | |
| 91 | add action=mark-connection chain=prerouting comment=unknown dst-address-list=!private-lokal new-connection-mark=unknown src-address-list=private-lokal | |
| 92 | add action=mark-packet chain=prerouting comment=unknown-up connection-mark=unknown dst-address-list=!private-lokal new-packet-mark=unknown-up passthrough=no \ | |
| 93 | src-address-list=private-lokal | |
| 94 | add action=mark-packet chain=prerouting comment=unknown-down connection-mark=unknown dst-address-list=private-lokal new-packet-mark=unknown-down passthrough=\ | |
| 95 | no src-address-list=!private-lokal | |
| 96 | ||
| 97 | ||
| 98 | /queue tree | |
| 99 | add max-limit=100M name=QOS parent=global | |
| 100 | add max-limit=100M name=DOWN parent=QOS | |
| 101 | add limit-at=64k max-limit=100M name=D.01.VIP packet-mark=vip-down parent=DOWN priority=1 | |
| 102 | add limit-at=2M max-limit=100M name=D.02.GAMES-ONLINE packet-mark=games-down parent=DOWN priority=3 | |
| 103 | add limit-at=10M max-limit=10M name=D.03.DOWN-TRAFIK parent=DOWN | |
| 104 | add limit-at=1M max-limit=10M name=DA.BROWSING packet-mark=browsing-down parent=D.03.DOWN-TRAFIK priority=5 | |
| 105 | add limit-at=1M max-limit=10M name=DB.SOSMED packet-mark=sosmed-down parent=D.03.DOWN-TRAFIK priority=5 | |
| 106 | add limit-at=1M max-limit=10M name=DC.YOUTUBE packet-mark=googlevideo-down parent=D.03.DOWN-TRAFIK priority=6 | |
| 107 | add limit-at=1M max-limit=10M name=DD.STREAMING packet-mark=streaming-down parent=D.03.DOWN-TRAFIK priority=6 | |
| 108 | add limit-at=1M max-limit=10M name=DE.DOWNLOAD packet-mark=down parent=D.03.DOWN-TRAFIK priority=7 | |
| 109 | add limit-at=1M max-limit=10M name=DF.UNKNOWN packet-mark=unknown-down parent=D.03.DOWN-TRAFIK | |
| 110 | add max-limit=100M name=UP parent=QOS | |
| 111 | add limit-at=64k max-limit=100M name=U.01.VIP packet-mark=vip-up parent=UP priority=1 | |
| 112 | add limit-at=1M max-limit=100M name=U.02.GAMES-ONLINE packet-mark=games-up parent=UP priority=3 | |
| 113 | add limit-at=10M max-limit=10M name=U.03.UP-TRAFIK parent=UP | |
| 114 | add limit-at=1M max-limit=10M name=UA.BROWSING packet-mark=browsing-up parent=U.03.UP-TRAFIK priority=5 | |
| 115 | add limit-at=1M max-limit=10M name=UB.SOSMED packet-mark=sosmed-up parent=U.03.UP-TRAFIK priority=5 | |
| 116 | add limit-at=1M max-limit=10M name=UC.YOUTUBE packet-mark=googlevideo-up parent=U.03.UP-TRAFIK priority=6 | |
| 117 | add limit-at=1M max-limit=10M name=UD.STREAMING packet-mark=streaming-up parent=U.03.UP-TRAFIK priority=6 | |
| 118 | add limit-at=1M max-limit=10M name=UE.UPLOAD packet-mark=up parent=U.03.UP-TRAFIK priority=7 | |
| 119 | add limit-at=1M max-limit=10M name=UF.UNKNOWN packet-mark=unknown-up parent=U.03.UP-TRAFIK |