SHOW:
|
|
- or go back to the newest paste.
| 1 | #credit : Agung Cespun | |
| 2 | #pastikan sumber internet pada ether1 | |
| 3 | #1 wan (sumber internet) = ehter1 = indihome 20mbps | |
| 4 | ||
| 5 | /ip firewall address-list | |
| 6 | add list="private-lokal" address=0.0.0.0/8 | |
| 7 | add list="private-lokal" address=10.0.0.0/8 | |
| 8 | add list="private-lokal" address=100.64.0.0/10 | |
| 9 | add list="private-lokal" address=127.0.0.0/8 | |
| 10 | add list="private-lokal" address=169.254.0.0/16 | |
| 11 | add list="private-lokal" address=172.16.0.0/12 | |
| 12 | add list="private-lokal" address=192.0.0.0/24 | |
| 13 | add list="private-lokal" address=192.0.2.0/24 | |
| 14 | add list="private-lokal" address=192.168.0.0/16 | |
| 15 | add list="private-lokal" address=198.18.0.0/15 | |
| 16 | add list="private-lokal" address=198.51.100.0/24 | |
| 17 | add list="private-lokal" address=203.0.113.0/24 | |
| 18 | add list="private-lokal" address=224.0.0.0/3 | |
| 19 | add list="ggc-telkom" address=118.98.0.0/17 | |
| 20 | add list="ggc-telkom" address=118.97.0.0/16 | |
| 21 | ||
| 22 | ||
| 23 | #ip firewall mangle | |
| 24 | /ip firewall mangle | |
| 25 | add action=mark-connection chain=input comment=private-lokal dst-address-list=private-lokal new-connection-mark=private-lokal passthrough=no src-address-list=private-lokal | |
| 26 | add action=accept chain=input comment=private-lokal connection-mark=private-lokal | |
| 27 | add action=mark-connection chain=prerouting comment=private-lokal dst-address-list=private-lokal new-connection-mark=private-lokal passthrough=no src-address-list=private-lokal | |
| 28 | add action=accept chain=prerouting comment=private-lokal connection-mark=private-lokal | |
| 29 | add action=mark-connection chain=forward comment=private-lokal dst-address-list=private-lokal new-connection-mark=private-lokal passthrough=no src-address-list=private-lokal | |
| 30 | add action=accept chain=forward comment=private-lokal connection-mark=private-lokal | |
| 31 | add action=mark-connection chain=postrouting comment=private-lokal dst-address-list=private-lokal new-connection-mark=private-lokal passthrough=no src-address-list=private-lokal | |
| 32 | add action=accept chain=postrouting comment=private-lokal connection-mark=private-lokal | |
| 33 | add action=mark-connection chain=output comment=private-lokal dst-address-list=private-lokal new-connection-mark=private-lokal passthrough=no src-address-list=private-lokal | |
| 34 | add action=accept chain=output comment=private-lokal connection-mark=private-lokal | |
| 35 | add action=mark-connection chain=prerouting comment=vip new-connection-mark=vip passthrough=no protocol=icmp | |
| 36 | add action=mark-connection chain=prerouting comment=vip new-connection-mark=vip passthrough=no port=53,5353,123,8291,1194 protocol=tcp | |
| 37 | add action=mark-connection chain=prerouting comment=vip new-connection-mark=vip passthrough=no port=53,5353,123,8291,1194 protocol=udp | |
| 38 | add action=accept chain=prerouting comment=vip connection-mark=vip | |
| 39 | add action=mark-packet chain=forward comment=vip-down connection-mark=vip in-interface=internet new-packet-mark=vip-down passthrough=no | |
| 40 | add action=mark-packet chain=forward comment=vip-up connection-mark=vip new-packet-mark=vip-up out-interface=internet passthrough=no | |
| 41 | add action=mark-connection chain=prerouting comment=jump1 connection-rate=0-384k dst-address-list=!private-lokal dst-port=!21,22,23,80,81,88,5050,843,443,182,282,8777,1935,8000-8081 new-connection-mark=jump1 passthrough=yes protocol=tcp src-address-list=private-lokal | |
| 42 | add action=mark-connection chain=prerouting comment=jump1 connection-rate=0-384k dst-address-list=!private-lokal dst-port=!21,22,23,80,81,88,5050,843,443,182,282,8777,1935,8000-8081 new-connection-mark=jump2 passthrough=yes protocol=udp src-address-list=private-lokal | |
| 43 | add action=mark-connection chain=prerouting comment=games connection-mark=jump1 connection-rate=0-384k dst-address-list=!private-lokal new-connection-mark=games passthrough=no protocol=tcp src-address-list=private-lokal | |
| 44 | add action=mark-connection chain=prerouting comment=games connection-mark=jump2 connection-rate=0-384k dst-address-list=!private-lokal new-connection-mark=games passthrough=no protocol=udp src-address-list=private-lokal | |
| 45 | add action=accept chain=prerouting comment=games-ip connection-mark=games | |
| 46 | add action=add-dst-to-address-list address-list=games address-list-timeout=none-dynamic chain=forward comment=games-ip connection-mark=games dst-address-list=!private-lokal src-address-list=private-lokal | |
| 47 | add action=mark-packet chain=forward comment=games-down in-interface=internet new-packet-mark=games-down passthrough=no src-address-list=games | |
| 48 | add action=mark-packet chain=forward comment=games-up dst-address-list=games new-packet-mark=games-up out-interface=internet passthrough=no | |
| 49 | add action=mark-connection chain=prerouting comment=GGC dst-address-list=ggc-telkom new-connection-mark=ggc-telkom passthrough=yes src-address-list=private-lokal | |
| 50 | add action=accept chain=prerouting comment=GGC connection-mark=ggc-telkom | |
| 51 | add action=mark-packet chain=forward comment=GGC-down connection-mark=ggc-telkom in-interface=internet new-packet-mark=GGC-down passthrough=no | |
| 52 | add action=mark-packet chain=forward comment=GGC-up connection-mark=ggc-telkom new-packet-mark=GGC-up out-interface=internet passthrough=no | |
| 53 | add action=mark-packet chain=forward comment=wifi-down dst-address=192.168.11.0/24 new-packet-mark=in-hs passthrough=no | |
| 54 | add action=mark-packet chain=forward comment=wifi-up new-packet-mark=out-hs passthrough=no src-address=192.168.11.0/24 | |
| 55 | add action=mark-connection chain=prerouting comment=high connection-bytes=100000001-0 dst-address-list=!private-lokal new-connection-mark=high passthrough=no src-address-list=private-lokal | |
| 56 | add action=accept chain=prerouting comment=high connection-mark=high | |
| 57 | add action=mark-packet chain=forward comment=high-down connection-mark=high in-interface=internet new-packet-mark=high-down passthrough=no | |
| 58 | add action=mark-packet chain=forward comment=high-up connection-mark=high new-packet-mark=high-up out-interface=internet passthrough=no | |
| 59 | add action=mark-connection chain=prerouting comment=midle connection-bytes=10000001-100000000 dst-address-list=!private-lokal new-connection-mark=midle passthrough=no src-address-list=private-lokal | |
| 60 | add action=accept chain=prerouting comment=midle connection-mark=midle | |
| 61 | add action=mark-packet chain=forward comment=midle-down connection-mark=midle in-interface=internet new-packet-mark=midle-down passthrough=no | |
| 62 | add action=mark-packet chain=forward comment=midle-up connection-mark=midle new-packet-mark=midle-up out-interface=internet passthrough=no | |
| 63 | add action=mark-connection chain=prerouting comment=low connection-bytes=3000001-10000000 dst-address-list=!private-lokal new-connection-mark=low passthrough=no src-address-list=private-lokal | |
| 64 | add action=accept chain=prerouting comment=low connection-mark=low | |
| 65 | add action=mark-packet chain=forward comment=low-down connection-mark=low in-interface=internet new-packet-mark=low-down passthrough=no | |
| 66 | add action=mark-packet chain=forward comment=low-up connection-mark=low new-packet-mark=low-up out-interface=internet passthrough=no | |
| 67 | add action=mark-connection chain=prerouting comment=lower connection-bytes=1000001-3000000 dst-address-list=!private-lokal new-connection-mark=lower passthrough=no src-address-list=private-lokal | |
| 68 | add action=accept chain=prerouting comment=lower connection-mark=lower | |
| 69 | add action=mark-packet chain=forward comment=lower-down connection-mark=lower in-interface=internet new-packet-mark=lower-down passthrough=no | |
| 70 | add action=mark-packet chain=forward comment=lower-up connection-mark=lower new-packet-mark=lower-up out-interface=internet passthrough=no | |
| 71 | add action=mark-connection chain=prerouting comment=lowest connection-bytes=0-1000000 dst-address-list=!private-lokal new-connection-mark=lowest passthrough=no src-address-list=private-lokal | |
| 72 | add action=accept chain=prerouting comment=lowest connection-mark=lowest | |
| 73 | add action=mark-packet chain=forward comment=lowest-down connection-mark=lowest in-interface=internet new-packet-mark=lowest-down passthrough=no | |
| 74 | add action=mark-packet chain=forward comment=lowest-up connection-mark=lowest new-packet-mark=lowest-up out-interface=internet passthrough=no | |
| 75 | add action=mark-connection chain=prerouting comment=unknown dst-address-list=!private-lokal new-connection-mark=unknown-con passthrough=no src-address-list=private-lokal | |
| 76 | add action=accept chain=prerouting comment=unknown connection-mark=unknown-con | |
| 77 | add action=mark-packet chain=forward comment=unknown-down connection-mark=unknown-con in-interface=internet new-packet-mark=unknown-down passthrough=no | |
| 78 | add action=mark-packet chain=forward comment=unknown-up connection-mark=unknown-con new-packet-mark=unknown-up out-interface=internet passthrough=no | |
| 79 | ||
| 80 | #queue tree | |
| 81 | /queue type | |
| 82 | set 4 kind=pcq pcq-burst-rate=3M pcq-burst-threshold=512k pcq-rate=2M | |
| 83 | add kind=pcq name="3. PCQ-10Mb" pcq-burst-rate=12M pcq-burst-threshold=1M pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-rate=8M pcq-src-address6-mask=64 | |
| 84 | add kind=pcq name="2. PCQ yutub" pcq-burst-rate=4M pcq-burst-threshold=1M pcq-burst-time=5s pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-rate=2M pcq-src-address6-mask=64 | |
| 85 | add kind=pcq name="1. PCQ WARNET-down" pcq-burst-rate=5M pcq-burst-threshold=512k pcq-burst-time=5s pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-rate=3M pcq-src-address6-mask=64 | |
| 86 | add kind=pfifo name=PFIFO-64 pfifo-limit=64 | |
| 87 | add kind=pcq name="4. PCQ-UP" pcq-classifier=src-address pcq-dst-address6-mask=64 pcq-rate=512k pcq-src-address6-mask=64 | |
| 88 | set 11 pcq-limit=20KiB | |
| 89 | set 14 pfifo-limit=35 | |
| 90 | ||
| 91 | /queue tree | |
| 92 | add max-limit=100M name=A.DOWN parent=global queue=default | |
| 93 | add limit-at=64k max-limit=100M name=A.01.VIP packet-mark=vip-down parent=A.DOWN priority=1 queue=default | |
| 94 | add limit-at=2M max-limit=100M name=A.02.GAMES-ONLINE packet-mark=games-down parent=A.DOWN priority=2 queue=default | |
| 95 | add limit-at=1M max-limit=30M name=A.03.NORMAL parent=A.DOWN queue=default | |
| 96 | add limit-at=1M max-limit=25M name=A.03.1.GGC packet-mark=GGC-down parent=A.03.NORMAL priority=3 queue=pcq-download-default | |
| 97 | add limit-at=1M max-limit=15M name=A.03.2.BYTES-TRAFIK parent=A.03.NORMAL queue=pcq-download-default | |
| 98 | add limit-at=1M max-limit=8M name=A.1.LOWEST packet-mark=lowest-down parent=A.03.2.BYTES-TRAFIK priority=4 queue=pcq-download-default | |
| 99 | add limit-at=1M max-limit=8M name=A.2.LOWER packet-mark=lower-down parent=A.03.2.BYTES-TRAFIK priority=5 queue=pcq-download-default | |
| 100 | add limit-at=1M max-limit=8M name=A.3.LOW packet-mark=low-down parent=A.03.2.BYTES-TRAFIK priority=6 queue=pcq-download-default | |
| 101 | add limit-at=1M max-limit=8M name=A.4.MIDLE packet-mark=midle-down parent=A.03.2.BYTES-TRAFIK priority=7 queue=pcq-download-default | |
| 102 | add limit-at=1M max-limit=8M name=A.5.HIGH packet-mark=high-down parent=A.03.2.BYTES-TRAFIK queue=pcq-download-default | |
| 103 | add limit-at=1M max-limit=8M name=A.6.UNKNOWN packet-mark=unknown-down parent=A.03.2.BYTES-TRAFIK queue=pcq-download-default | |
| 104 | add max-limit=100M name=B.UP parent=global queue=default | |
| 105 | add limit-at=64k max-limit=100M name=B.01.VIP packet-mark=vip-up parent=B.UP priority=1 queue=default | |
| 106 | add limit-at=1M max-limit=100M name=B.02.GAMES-ONLINE packet-mark=games-up parent=B.UP priority=2 queue=default | |
| 107 | add limit-at=2M max-limit=3M name=B.03.NORMAL parent=B.UP queue=default | |
| 108 | add limit-at=1M max-limit=4M name=B.03.1.GGC packet-mark=GGC-up parent=B.03.NORMAL priority=3 queue=pcq-upload-default | |
| 109 | add limit-at=1M max-limit=4M name=B.03.2.BYTES-TRAFIK parent=B.03.NORMAL queue=default | |
| 110 | add limit-at=100k max-limit=4M name=B.1.LOWEST packet-mark=lowest-up parent=B.03.2.BYTES-TRAFIK priority=4 queue=pcq-upload-default | |
| 111 | add limit-at=100k max-limit=4M name=B.2.LOWER packet-mark=lower-up parent=B.03.2.BYTES-TRAFIK priority=5 queue=pcq-upload-default | |
| 112 | add limit-at=100k max-limit=4M name=B.3.LOW packet-mark=low-up parent=B.03.2.BYTES-TRAFIK priority=6 queue=pcq-upload-default | |
| 113 | add limit-at=100k max-limit=4M name=B.4.MIDLE packet-mark=midle-up parent=B.03.2.BYTES-TRAFIK priority=7 queue=pcq-upload-default | |
| 114 | add limit-at=100k max-limit=4M name=B.5.HIGH packet-mark=high-up parent=B.03.2.BYTES-TRAFIK queue=pcq-upload-default | |
| 115 | add limit-at=100k max-limit=4M name=B.6.UNKNOWN packet-mark=unknown-up parent=B.03.2.BYTES-TRAFIK queue=pcq-upload-default | |
| 116 | add limit-at=1M max-limit=8M name=A.7.WIFI packet-mark=in-hs parent=A.03.2.BYTES-TRAFIK queue=pcq-download-default | |
| 117 | add limit-at=100k max-limit=4M name=B.7.WIFI packet-mark=out-hs parent=B.03.2.BYTES-TRAFIK queue=pcq-upload-default |
