SHOW:
|
|
- or go back to the newest paste.
| 1 | /ip firewall address-list | |
| 2 | add address=0.0.0.0/8 list=private-lokal | |
| 3 | add address=10.0.0.0/8 list=private-lokal | |
| 4 | add address=100.64.0.0/10 list=private-lokal | |
| 5 | add address=127.0.0.0/8 list=private-lokal | |
| 6 | add address=169.254.0.0/16 list=private-lokal | |
| 7 | add address=172.16.0.0/12 list=private-lokal | |
| 8 | add address=192.0.0.0/24 list=private-lokal | |
| 9 | add address=192.0.2.0/24 list=private-lokal | |
| 10 | add address=192.168.0.0/16 list=private-lokal | |
| 11 | add address=198.18.0.0/15 list=private-lokal | |
| 12 | add address=198.51.100.0/24 list=private-lokal | |
| 13 | add address=203.0.113.0/24 list=private-lokal | |
| 14 | add address=224.0.0.0/3 list=private-lokal | |
| 15 | add address=118.98.0.0/17 list=ggc-telkom | |
| 16 | add address=118.97.0.0/16 list=ggc-telkom | |
| 17 | add address=216.239.32.0/19 list=ggc-telkom | |
| 18 | add address=216.58.192.0/19 list=ggc-telkom | |
| 19 | add address=172.217.0.0/16 list=ggc-telkom | |
| 20 | add address=74.125.0.0/16 list=ggc-telkom | |
| 21 | /ip firewall raw | |
| 22 | add action=drop chain=prerouting comment="Drop Koneksi ke modem" dst-address=\ | |
| 23 | 192.168.100.1 dst-port=80 protocol=tcp | |
| 24 | add action=drop chain=prerouting comment="Drop Ping Ke Modem" dst-address=\ | |
| 25 | 192.168.100.1 protocol=icmp | |
| 26 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 27 | none-dynamic chain=prerouting comment=Vainglory dst-address-list=\ | |
| 28 | !private-lokal dst-port=7000-8020 protocol=tcp src-address-list=\ | |
| 29 | private-lokal | |
| 30 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 31 | none-dynamic chain=prerouting comment=Vainglory content=.superevil.net \ | |
| 32 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 33 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 34 | none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\ | |
| 35 | !private-lokal dst-port=30000-30150 protocol=tcp src-address-list=\ | |
| 36 | private-lokal | |
| 37 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 38 | none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\ | |
| 39 | !private-lokal dst-port=5000-5600 protocol=udp src-address-list=\ | |
| 40 | private-lokal | |
| 41 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 42 | none-dynamic chain=prerouting comment="Mobile Legends" content=\ | |
| 43 | .youngjoygame.com dst-address-list=!private-lokal src-address-list=\ | |
| 44 | private-lokal | |
| 45 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 46 | none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\ | |
| 47 | !private-lokal dst-port=10012,17500 protocol=tcp src-address-list=\ | |
| 48 | private-lokal | |
| 49 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 50 | none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\ | |
| 51 | !private-lokal dst-port="10491,10010,10013,10612,20002,20001,20000,12235,1\ | |
| 52 | 3748,13972,13894,11455,10096,10039" protocol=udp src-address-list=\ | |
| 53 | private-lokal | |
| 54 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 55 | none-dynamic chain=prerouting comment="PUBG Mobile" content=.igamecj.com \ | |
| 56 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 57 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 58 | none-dynamic chain=prerouting comment="PUBG Mobile" content=\ | |
| 59 | tencentgames.helpshift.com dst-address-list=!private-lokal \ | |
| 60 | src-address-list=private-lokal | |
| 61 | add action=add-dst-to-address-list address-list=games address-list-timeout=\ | |
| 62 | none-dynamic chain=prerouting comment=Garena content=.garenanow.com \ | |
| 63 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 64 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 65 | none-dynamic chain=prerouting comment=ig content=.cdninstagram.com \ | |
| 66 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 67 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 68 | none-dynamic chain=prerouting comment=ig content=.instagram.com \ | |
| 69 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 70 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 71 | none-dynamic chain=prerouting comment=WA content=.whatsapp.net \ | |
| 72 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 73 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 74 | none-dynamic chain=prerouting comment=WA content=.whatsapp.com \ | |
| 75 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 76 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 77 | none-dynamic chain=prerouting comment=life360 content=.life360.com \ | |
| 78 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 79 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 80 | none-dynamic chain=prerouting comment=fb content=.facebook.com \ | |
| 81 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 82 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 83 | none-dynamic chain=prerouting comment=fb content=.facebook.net \ | |
| 84 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 85 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 86 | none-dynamic chain=prerouting comment=fb content=.fbcdn.net \ | |
| 87 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 88 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 89 | none-dynamic chain=prerouting comment=twitter content=.twitter.com \ | |
| 90 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 91 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 92 | none-dynamic chain=prerouting comment=twitter content=.twimg.com \ | |
| 93 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 94 | add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\ | |
| 95 | none-dynamic chain=prerouting comment=tiktok content=.tiktokv.com \ | |
| 96 | dst-address-list=!private-lokal src-address-list=private-lokal | |
| 97 | /ip firewall filter | |
| 98 | add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=tcp \ | |
| 99 | src-address-list=!private-lokal | |
| 100 | add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=udp \ | |
| 101 | src-address-list=!private-lokal | |
| 102 | add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=tcp \ | |
| 103 | src-address-list=!private-lokal | |
| 104 | add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=udp \ | |
| 105 | src-address-list=!private-lokal | |
| 106 | add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp | |
| 107 | add action=accept chain=input comment="defconf: accept ICMP" dst-port=\ | |
| 108 | 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \ | |
| 109 | protocol=tcp | |
| 110 | add action=accept chain=input comment="defconf: accept ICMP" dst-port=\ | |
| 111 | 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \ | |
| 112 | protocol=udp | |
| 113 | add action=accept chain=input comment="defconf: accept established,related" \ | |
| 114 | connection-state=established,related | |
| 115 | add action=drop chain=input comment="defconf: drop all from WAN" \ | |
| 116 | in-interface=ether1 | |
| 117 | add action=accept chain=forward comment="defconf: accept established,related" \ | |
| 118 | connection-state=established,related | |
| 119 | add action=drop chain=forward comment="defconf: drop invalid" \ | |
| 120 | connection-state=invalid | |
| 121 | add action=drop chain=forward comment=\ | |
| 122 | "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ | |
| 123 | connection-state=new in-interface=ether1 | |
| 124 | /ip firewall mangle | |
| 125 | add action=mark-connection chain=prerouting comment=private-lokal \ | |
| 126 | dst-address-list=private-lokal new-connection-mark=private-lokal \ | |
| 127 | passthrough=yes src-address-list=private-lokal | |
| 128 | add action=accept chain=prerouting comment=private-lokal connection-mark=\ | |
| 129 | private-lokal dst-address-list=private-lokal src-address-list=\ | |
| 130 | private-lokal | |
| 131 | add action=mark-connection chain=prerouting comment=vip dst-address-list=\ | |
| 132 | !private-lokal new-connection-mark=vip passthrough=yes protocol=icmp \ | |
| 133 | src-address-list=private-lokal | |
| 134 | add action=mark-connection chain=prerouting comment=dns dst-address-list=\ | |
| 135 | !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \ | |
| 136 | passthrough=yes protocol=tcp src-address-list=private-lokal | |
| 137 | add action=mark-connection chain=prerouting comment=dns dst-address-list=\ | |
| 138 | !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \ | |
| 139 | passthrough=yes protocol=udp src-address-list=private-lokal | |
| 140 | add action=accept chain=prerouting comment=vip connection-mark=vip | |
| 141 | add action=mark-connection chain=prerouting comment=games dst-address-list=\ | |
| 142 | games new-connection-mark=games passthrough=yes src-address-list=\ | |
| 143 | private-lokal | |
| 144 | add action=accept chain=prerouting comment=games connection-mark=games | |
| 145 | add action=mark-connection chain=prerouting comment=sosmed dst-address-list=\ | |
| 146 | sosmed new-connection-mark=sosmed passthrough=yes src-address-list=\ | |
| 147 | private-lokal | |
| 148 | add action=accept chain=prerouting comment=sosmed connection-mark=sosmed | |
| 149 | add action=mark-connection chain=prerouting comment=ggc-telkom \ | |
| 150 | dst-address-list=ggc-telkom new-connection-mark=ggc-redirector \ | |
| 151 | passthrough=yes src-address-list=private-lokal | |
| 152 | add action=accept chain=prerouting comment=ggc-redirector connection-mark=\ | |
| 153 | ggc-redirector | |
| 154 | add action=mark-connection chain=prerouting comment=all-trafik \ | |
| 155 | dst-address-list=!private-lokal new-connection-mark=all-trafik \ | |
| 156 | passthrough=yes src-address-list=private-lokal | |
| 157 | add action=accept chain=prerouting comment=all-trafik connection-mark=\ | |
| 158 | all-trafik | |
| 159 | add action=jump chain=forward in-interface=ether1 jump-target=qos-down | |
| 160 | add action=mark-packet chain=qos-down comment=vip-down connection-mark=vip \ | |
| 161 | new-packet-mark=vip-down passthrough=no | |
| 162 | add action=mark-packet chain=qos-down comment=games-down connection-mark=\ | |
| 163 | games new-packet-mark=games-down passthrough=no | |
| 164 | add action=mark-packet chain=qos-down comment=sosmed-down connection-mark=\ | |
| 165 | sosmed new-packet-mark=sosmed-down passthrough=no | |
| 166 | add action=mark-packet chain=qos-down comment=patch-games-down \ | |
| 167 | connection-mark=all-trafik new-packet-mark=patch-games-down passthrough=\ | |
| 168 | no src-address-list=games | |
| 169 | add action=mark-packet chain=qos-down comment=ggc-telkom-down \ | |
| 170 | connection-mark=ggc-redirector new-packet-mark=ggc-telkom-down \ | |
| 171 | passthrough=no | |
| 172 | add action=mark-packet chain=qos-down comment=browsing-down connection-bytes=\ | |
| 173 | 0-1000000 connection-mark=all-trafik new-packet-mark=browsing-down \ | |
| 174 | passthrough=no | |
| 175 | add action=mark-packet chain=qos-down comment=low-down connection-bytes=\ | |
| 176 | 1000001-2000000 connection-mark=all-trafik new-packet-mark=low-down \ | |
| 177 | passthrough=no | |
| 178 | add action=mark-packet chain=qos-down comment=midle-down connection-bytes=\ | |
| 179 | 2000001-5000000 connection-mark=all-trafik new-packet-mark=midle-down \ | |
| 180 | passthrough=no | |
| 181 | add action=mark-packet chain=qos-down comment=high-down connection-bytes=\ | |
| 182 | 5000001-10000000 connection-mark=all-trafik new-packet-mark=high-down \ | |
| 183 | passthrough=no | |
| 184 | add action=mark-packet chain=qos-down comment=unknown-down connection-mark=\ | |
| 185 | all-trafik new-packet-mark=unknown-down passthrough=no | |
| 186 | add action=mark-packet chain=qos-down comment=unknown-down new-packet-mark=\ | |
| 187 | unknown-down passthrough=no | |
| 188 | add action=return chain=qos-down | |
| 189 | add action=jump chain=forward jump-target=qos-up out-interface=ether1 | |
| 190 | add action=mark-packet chain=qos-up comment=vip-up connection-mark=vip \ | |
| 191 | new-packet-mark=vip-up passthrough=no | |
| 192 | add action=mark-packet chain=qos-up comment=games-up connection-mark=games \ | |
| 193 | new-packet-mark=games-up passthrough=no | |
| 194 | add action=mark-packet chain=qos-up comment=sosmed-up connection-mark=sosmed \ | |
| 195 | new-packet-mark=sosmed-up passthrough=no | |
| 196 | add action=mark-packet chain=qos-up comment=patch-games-up connection-mark=\ | |
| 197 | all-trafik dst-address-list=games new-packet-mark=patch-games-up \ | |
| 198 | passthrough=no | |
| 199 | add action=mark-packet chain=qos-up comment=ggc-telkom-up connection-mark=\ | |
| 200 | ggc-redirector new-packet-mark=ggc-telkom-up passthrough=no | |
| 201 | add action=mark-packet chain=qos-up comment=browsing-up connection-bytes=\ | |
| 202 | 0-300000 connection-mark=all-trafik new-packet-mark=browsing-up \ | |
| 203 | passthrough=no | |
| 204 | add action=mark-packet chain=qos-up comment=low-up connection-bytes=\ | |
| 205 | 301000-500000 connection-mark=all-trafik new-packet-mark=low-up \ | |
| 206 | passthrough=no | |
| 207 | add action=mark-packet chain=qos-up comment=midle-up connection-bytes=\ | |
| 208 | 501000-999000 connection-mark=all-trafik new-packet-mark=midle-up \ | |
| 209 | passthrough=no | |
| 210 | add action=mark-packet chain=qos-up comment=high-up connection-bytes=\ | |
| 211 | 1000000-2000000 connection-mark=all-trafik new-packet-mark=high-up \ | |
| 212 | passthrough=no | |
| 213 | add action=mark-packet chain=qos-up comment=unknown-up connection-mark=\ | |
| 214 | all-trafik new-packet-mark=unknown-up passthrough=no | |
| 215 | add action=mark-packet chain=qos-up comment=unknown-up new-packet-mark=\ | |
| 216 | unknown-up passthrough=no | |
| 217 | add action=return chain=qos-up | |
| 218 | /queue tree | |
| 219 | add max-limit=100M name=DOWNLOAD parent=global queue=default | |
| 220 | add bucket-size=0 limit-at=64k max-limit=10M name=1.VIP packet-mark=vip-down \ | |
| 221 | parent=DOWNLOAD priority=1 queue=default | |
| 222 | add bucket-size=0 limit-at=1M max-limit=10M name=2.GAMES-ONLINE packet-mark=\ | |
| 223 | games-down parent=DOWNLOAD priority=3 queue=default | |
| 224 | add bucket-size=0 limit-at=1M max-limit=10M name=3.PATCH-GAMES packet-mark=\ | |
| 225 | patch-games-down parent=DOWNLOAD priority=3 queue=pcq-download-default | |
| 226 | add limit-at=8M max-limit=10M name=4.NORMAL parent=DOWNLOAD queue=default | |
| 227 | add limit-at=500k max-limit=10M name=4.1.BROWSING packet-mark=browsing-down \ | |
| 228 | parent=4.NORMAL priority=5 queue=pcq-download-default | |
| 229 | add limit-at=500k max-limit=10M name=4.3.LOW packet-mark=low-down parent=\ | |
| 230 | 4.NORMAL priority=5 queue=pcq-download-default | |
| 231 | add limit-at=500k max-limit=10M name=4.4.MIDLE packet-mark=midle-down parent=\ | |
| 232 | 4.NORMAL priority=7 queue=pcq-download-default | |
| 233 | add limit-at=500k max-limit=10M name=4.5.HIGH packet-mark=high-down parent=\ | |
| 234 | 4.NORMAL queue=pcq-download-default | |
| 235 | add limit-at=500k max-limit=10M name=4.6.UNKNOWN packet-mark=unknown-down \ | |
| 236 | parent=4.NORMAL queue=pcq-download-default | |
| 237 | add limit-at=500k max-limit=10M name=4.7.GOOGLE packet-mark=ggc-telkom-down \ | |
| 238 | parent=4.NORMAL priority=5 queue=pcq-download-default | |
| 239 | add max-limit=100M name=UPLOAD parent=global queue=default | |
| 240 | add limit-at=64k max-limit=2M name=1.UPLOAD-VIP packet-mark=vip-up parent=\ | |
| 241 | UPLOAD priority=1 queue=default | |
| 242 | add limit-at=1M max-limit=2M name=2.UPLOAD-GAMES-ONLINE packet-mark=games-up \ | |
| 243 | parent=UPLOAD priority=3 queue=default | |
| 244 | add limit-at=1M max-limit=2M name=3.UPLOAD-PATCH-GAMES packet-mark=\ | |
| 245 | patch-games-up parent=UPLOAD priority=3 queue=pcq-upload-default | |
| 246 | add limit-at=1500k max-limit=2M name=4.UPLOAD-NORMAL parent=UPLOAD queue=\ | |
| 247 | default | |
| 248 | add limit-at=100k max-limit=2M name=4.1.UPLOAD-BROWSING packet-mark=\ | |
| 249 | browsing-up parent=4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default | |
| 250 | add limit-at=100k max-limit=2M name=4.3.UPLOAD-LOW packet-mark=low-up parent=\ | |
| 251 | 4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default | |
| 252 | add limit-at=100k max-limit=2M name=4.4.UPLOAD-MIDLE packet-mark=midle-up \ | |
| 253 | parent=4.UPLOAD-NORMAL priority=7 queue=pcq-upload-default | |
| 254 | add limit-at=100k max-limit=2M name=4.5.UPLOAD-HIGH packet-mark=high-up \ | |
| 255 | parent=4.UPLOAD-NORMAL queue=pcq-upload-default | |
| 256 | add limit-at=100k max-limit=2M name=4.6.UPLOAD-UNKNOWN packet-mark=unknown-up \ | |
| 257 | parent=4.UPLOAD-NORMAL queue=pcq-upload-default | |
| 258 | add limit-at=100k max-limit=2M name=4.7.UPLOAD-GOOGLE packet-mark=\ | |
| 259 | ggc-telkom-up parent=4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default | |
| 260 | add limit-at=500k max-limit=10M name=4.2.SOSMED packet-mark=sosmed-down \ | |
| 261 | parent=4.NORMAL priority=6 queue=pcq-download-default | |
| 262 | add limit-at=100k max-limit=2M name=4.2.UPLOAD-SOSMED packet-mark=sosmed-up \ | |
| 263 | parent=4.UPLOAD-NORMAL priority=6 queue=pcq-upload-default |
