API tools faq
paste
mfr3108

10mbps indihome

mfr3108
Sep 14th, 2019
167
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.65 KB | None | 0 0
raw download clone embed print report diff
  1. /ip firewall address-list
  2. add address=0.0.0.0/8 list=private-lokal
  3. add address=10.0.0.0/8 list=private-lokal
  4. add address=100.64.0.0/10 list=private-lokal
  5. add address=127.0.0.0/8 list=private-lokal
  6. add address=169.254.0.0/16 list=private-lokal
  7. add address=172.16.0.0/12 list=private-lokal
  8. add address=192.0.0.0/24 list=private-lokal
  9. add address=192.0.2.0/24 list=private-lokal
  10. add address=192.168.0.0/16 list=private-lokal
  11. add address=198.18.0.0/15 list=private-lokal
  12. add address=198.51.100.0/24 list=private-lokal
  13. add address=203.0.113.0/24 list=private-lokal
  14. add address=224.0.0.0/3 list=private-lokal
  15. add address=118.98.0.0/17 list=ggc-telkom
  16. add address=118.97.0.0/16 list=ggc-telkom
  17. add address=216.239.32.0/19 list=ggc-telkom
  18. add address=216.58.192.0/19 list=ggc-telkom
  19. add address=172.217.0.0/16 list=ggc-telkom
  20. add address=74.125.0.0/16 list=ggc-telkom
  21. /ip firewall raw
  22. add action=drop chain=prerouting comment="Drop Koneksi ke modem" dst-address=\
  23. 192.168.100.1 dst-port=80 protocol=tcp
  24. add action=drop chain=prerouting comment="Drop Ping Ke Modem" dst-address=\
  25. 192.168.100.1 protocol=icmp
  26. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  27. none-dynamic chain=prerouting comment=Vainglory dst-address-list=\
  28. !private-lokal dst-port=7000-8020 protocol=tcp src-address-list=\
  29. private-lokal
  30. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  31. none-dynamic chain=prerouting comment=Vainglory content=.superevil.net \
  32. dst-address-list=!private-lokal src-address-list=private-lokal
  33. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  34. none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\
  35. !private-lokal dst-port=30000-30150 protocol=tcp src-address-list=\
  36. private-lokal
  37. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  38. none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\
  39. !private-lokal dst-port=5000-5600 protocol=udp src-address-list=\
  40. private-lokal
  41. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  42. none-dynamic chain=prerouting comment="Mobile Legends" content=\
  43. .youngjoygame.com dst-address-list=!private-lokal src-address-list=\
  44. private-lokal
  45. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  46. none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\
  47. !private-lokal dst-port=10012,17500 protocol=tcp src-address-list=\
  48. private-lokal
  49. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  50. none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\
  51. !private-lokal dst-port="10491,10010,10013,10612,20002,20001,20000,12235,1\
  52. 3748,13972,13894,11455,10096,10039" protocol=udp src-address-list=\
  53. private-lokal
  54. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  55. none-dynamic chain=prerouting comment="PUBG Mobile" content=.igamecj.com \
  56. dst-address-list=!private-lokal src-address-list=private-lokal
  57. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  58. none-dynamic chain=prerouting comment="PUBG Mobile" content=\
  59. tencentgames.helpshift.com dst-address-list=!private-lokal \
  60. src-address-list=private-lokal
  61. add action=add-dst-to-address-list address-list=games address-list-timeout=\
  62. none-dynamic chain=prerouting comment=Garena content=.garenanow.com \
  63. dst-address-list=!private-lokal src-address-list=private-lokal
  64. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  65. none-dynamic chain=prerouting comment=ig content=.cdninstagram.com \
  66. dst-address-list=!private-lokal src-address-list=private-lokal
  67. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  68. none-dynamic chain=prerouting comment=ig content=.instagram.com \
  69. dst-address-list=!private-lokal src-address-list=private-lokal
  70. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  71. none-dynamic chain=prerouting comment=WA content=.whatsapp.net \
  72. dst-address-list=!private-lokal src-address-list=private-lokal
  73. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  74. none-dynamic chain=prerouting comment=WA content=.whatsapp.com \
  75. dst-address-list=!private-lokal src-address-list=private-lokal
  76. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  77. none-dynamic chain=prerouting comment=life360 content=.life360.com \
  78. dst-address-list=!private-lokal src-address-list=private-lokal
  79. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  80. none-dynamic chain=prerouting comment=fb content=.facebook.com \
  81. dst-address-list=!private-lokal src-address-list=private-lokal
  82. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  83. none-dynamic chain=prerouting comment=fb content=.facebook.net \
  84. dst-address-list=!private-lokal src-address-list=private-lokal
  85. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  86. none-dynamic chain=prerouting comment=fb content=.fbcdn.net \
  87. dst-address-list=!private-lokal src-address-list=private-lokal
  88. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  89. none-dynamic chain=prerouting comment=twitter content=.twitter.com \
  90. dst-address-list=!private-lokal src-address-list=private-lokal
  91. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  92. none-dynamic chain=prerouting comment=twitter content=.twimg.com \
  93. dst-address-list=!private-lokal src-address-list=private-lokal
  94. add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
  95. none-dynamic chain=prerouting comment=tiktok content=.tiktokv.com \
  96. dst-address-list=!private-lokal src-address-list=private-lokal
  97. /ip firewall filter
  98. add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=tcp \
  99. src-address-list=!private-lokal
  100. add action=drop chain=input comment=dns-flood dst-port=53,5353 protocol=udp \
  101. src-address-list=!private-lokal
  102. add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=tcp \
  103. src-address-list=!private-lokal
  104. add action=drop chain=forward comment=dns-flood dst-port=53,5353 protocol=udp \
  105. src-address-list=!private-lokal
  106. add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
  107. add action=accept chain=input comment="defconf: accept ICMP" dst-port=\
  108. 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \
  109. protocol=tcp
  110. add action=accept chain=input comment="defconf: accept ICMP" dst-port=\
  111. 8291-8299,8030-8039,2222,22,5900-5911,1701-1723,8123,1194,8012,8123 \
  112. protocol=udp
  113. add action=accept chain=input comment="defconf: accept established,related" \
  114. connection-state=established,related
  115. add action=drop chain=input comment="defconf: drop all from WAN" \
  116. in-interface=ether1
  117. add action=accept chain=forward comment="defconf: accept established,related" \
  118. connection-state=established,related
  119. add action=drop chain=forward comment="defconf: drop invalid" \
  120. connection-state=invalid
  121. add action=drop chain=forward comment=\
  122. "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
  123. connection-state=new in-interface=ether1
  124. /ip firewall mangle
  125. add action=mark-connection chain=prerouting comment=private-lokal \
  126. dst-address-list=private-lokal new-connection-mark=private-lokal \
  127. passthrough=yes src-address-list=private-lokal
  128. add action=accept chain=prerouting comment=private-lokal connection-mark=\
  129. private-lokal dst-address-list=private-lokal src-address-list=\
  130. private-lokal
  131. add action=mark-connection chain=prerouting comment=vip dst-address-list=\
  132. !private-lokal new-connection-mark=vip passthrough=yes protocol=icmp \
  133. src-address-list=private-lokal
  134. add action=mark-connection chain=prerouting comment=dns dst-address-list=\
  135. !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
  136. passthrough=yes protocol=tcp src-address-list=private-lokal
  137. add action=mark-connection chain=prerouting comment=dns dst-address-list=\
  138. !private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
  139. passthrough=yes protocol=udp src-address-list=private-lokal
  140. add action=accept chain=prerouting comment=vip connection-mark=vip
  141. add action=mark-connection chain=prerouting comment=games dst-address-list=\
  142. games new-connection-mark=games passthrough=yes src-address-list=\
  143. private-lokal
  144. add action=accept chain=prerouting comment=games connection-mark=games
  145. add action=mark-connection chain=prerouting comment=sosmed dst-address-list=\
  146. sosmed new-connection-mark=sosmed passthrough=yes src-address-list=\
  147. private-lokal
  148. add action=accept chain=prerouting comment=sosmed connection-mark=sosmed
  149. add action=mark-connection chain=prerouting comment=ggc-telkom \
  150. dst-address-list=ggc-telkom new-connection-mark=ggc-redirector \
  151. passthrough=yes src-address-list=private-lokal
  152. add action=accept chain=prerouting comment=ggc-redirector connection-mark=\
  153. ggc-redirector
  154. add action=mark-connection chain=prerouting comment=all-trafik \
  155. dst-address-list=!private-lokal new-connection-mark=all-trafik \
  156. passthrough=yes src-address-list=private-lokal
  157. add action=accept chain=prerouting comment=all-trafik connection-mark=\
  158. all-trafik
  159. add action=jump chain=forward in-interface=ether1 jump-target=qos-down
  160. add action=mark-packet chain=qos-down comment=vip-down connection-mark=vip \
  161. new-packet-mark=vip-down passthrough=no
  162. add action=mark-packet chain=qos-down comment=games-down connection-mark=\
  163. games new-packet-mark=games-down passthrough=no
  164. add action=mark-packet chain=qos-down comment=sosmed-down connection-mark=\
  165. sosmed new-packet-mark=sosmed-down passthrough=no
  166. add action=mark-packet chain=qos-down comment=patch-games-down \
  167. connection-mark=all-trafik new-packet-mark=patch-games-down passthrough=\
  168. no src-address-list=games
  169. add action=mark-packet chain=qos-down comment=ggc-telkom-down \
  170. connection-mark=ggc-redirector new-packet-mark=ggc-telkom-down \
  171. passthrough=no
  172. add action=mark-packet chain=qos-down comment=browsing-down connection-bytes=\
  173. 0-1000000 connection-mark=all-trafik new-packet-mark=browsing-down \
  174. passthrough=no
  175. add action=mark-packet chain=qos-down comment=low-down connection-bytes=\
  176. 1000001-2000000 connection-mark=all-trafik new-packet-mark=low-down \
  177. passthrough=no
  178. add action=mark-packet chain=qos-down comment=midle-down connection-bytes=\
  179. 2000001-5000000 connection-mark=all-trafik new-packet-mark=midle-down \
  180. passthrough=no
  181. add action=mark-packet chain=qos-down comment=high-down connection-bytes=\
  182. 5000001-10000000 connection-mark=all-trafik new-packet-mark=high-down \
  183. passthrough=no
  184. add action=mark-packet chain=qos-down comment=unknown-down connection-mark=\
  185. all-trafik new-packet-mark=unknown-down passthrough=no
  186. add action=mark-packet chain=qos-down comment=unknown-down new-packet-mark=\
  187. unknown-down passthrough=no
  188. add action=return chain=qos-down
  189. add action=jump chain=forward jump-target=qos-up out-interface=ether1
  190. add action=mark-packet chain=qos-up comment=vip-up connection-mark=vip \
  191. new-packet-mark=vip-up passthrough=no
  192. add action=mark-packet chain=qos-up comment=games-up connection-mark=games \
  193. new-packet-mark=games-up passthrough=no
  194. add action=mark-packet chain=qos-up comment=sosmed-up connection-mark=sosmed \
  195. new-packet-mark=sosmed-up passthrough=no
  196. add action=mark-packet chain=qos-up comment=patch-games-up connection-mark=\
  197. all-trafik dst-address-list=games new-packet-mark=patch-games-up \
  198. passthrough=no
  199. add action=mark-packet chain=qos-up comment=ggc-telkom-up connection-mark=\
  200. ggc-redirector new-packet-mark=ggc-telkom-up passthrough=no
  201. add action=mark-packet chain=qos-up comment=browsing-up connection-bytes=\
  202. 0-300000 connection-mark=all-trafik new-packet-mark=browsing-up \
  203. passthrough=no
  204. add action=mark-packet chain=qos-up comment=low-up connection-bytes=\
  205. 301000-500000 connection-mark=all-trafik new-packet-mark=low-up \
  206. passthrough=no
  207. add action=mark-packet chain=qos-up comment=midle-up connection-bytes=\
  208. 501000-999000 connection-mark=all-trafik new-packet-mark=midle-up \
  209. passthrough=no
  210. add action=mark-packet chain=qos-up comment=high-up connection-bytes=\
  211. 1000000-2000000 connection-mark=all-trafik new-packet-mark=high-up \
  212. passthrough=no
  213. add action=mark-packet chain=qos-up comment=unknown-up connection-mark=\
  214. all-trafik new-packet-mark=unknown-up passthrough=no
  215. add action=mark-packet chain=qos-up comment=unknown-up new-packet-mark=\
  216. unknown-up passthrough=no
  217. add action=return chain=qos-up
  218. /queue tree
  219. add max-limit=100M name=DOWNLOAD parent=global queue=default
  220. add bucket-size=0 limit-at=64k max-limit=10M name=1.VIP packet-mark=vip-down \
  221. parent=DOWNLOAD priority=1 queue=default
  222. add bucket-size=0 limit-at=1M max-limit=10M name=2.GAMES-ONLINE packet-mark=\
  223. games-down parent=DOWNLOAD priority=3 queue=default
  224. add bucket-size=0 limit-at=1M max-limit=10M name=3.PATCH-GAMES packet-mark=\
  225. patch-games-down parent=DOWNLOAD priority=3 queue=pcq-download-default
  226. add limit-at=8M max-limit=10M name=4.NORMAL parent=DOWNLOAD queue=default
  227. add limit-at=500k max-limit=10M name=4.1.BROWSING packet-mark=browsing-down \
  228. parent=4.NORMAL priority=5 queue=pcq-download-default
  229. add limit-at=500k max-limit=10M name=4.3.LOW packet-mark=low-down parent=\
  230. 4.NORMAL priority=5 queue=pcq-download-default
  231. add limit-at=500k max-limit=10M name=4.4.MIDLE packet-mark=midle-down parent=\
  232. 4.NORMAL priority=7 queue=pcq-download-default
  233. add limit-at=500k max-limit=10M name=4.5.HIGH packet-mark=high-down parent=\
  234. 4.NORMAL queue=pcq-download-default
  235. add limit-at=500k max-limit=10M name=4.6.UNKNOWN packet-mark=unknown-down \
  236. parent=4.NORMAL queue=pcq-download-default
  237. add limit-at=500k max-limit=10M name=4.7.GOOGLE packet-mark=ggc-telkom-down \
  238. parent=4.NORMAL priority=5 queue=pcq-download-default
  239. add max-limit=100M name=UPLOAD parent=global queue=default
  240. add limit-at=64k max-limit=2M name=1.UPLOAD-VIP packet-mark=vip-up parent=\
  241. UPLOAD priority=1 queue=default
  242. add limit-at=1M max-limit=2M name=2.UPLOAD-GAMES-ONLINE packet-mark=games-up \
  243. parent=UPLOAD priority=3 queue=default
  244. add limit-at=1M max-limit=2M name=3.UPLOAD-PATCH-GAMES packet-mark=\
  245. patch-games-up parent=UPLOAD priority=3 queue=pcq-upload-default
  246. add limit-at=1500k max-limit=2M name=4.UPLOAD-NORMAL parent=UPLOAD queue=\
  247. default
  248. add limit-at=100k max-limit=2M name=4.1.UPLOAD-BROWSING packet-mark=\
  249. browsing-up parent=4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default
  250. add limit-at=100k max-limit=2M name=4.3.UPLOAD-LOW packet-mark=low-up parent=\
  251. 4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default
  252. add limit-at=100k max-limit=2M name=4.4.UPLOAD-MIDLE packet-mark=midle-up \
  253. parent=4.UPLOAD-NORMAL priority=7 queue=pcq-upload-default
  254. add limit-at=100k max-limit=2M name=4.5.UPLOAD-HIGH packet-mark=high-up \
  255. parent=4.UPLOAD-NORMAL queue=pcq-upload-default
  256. add limit-at=100k max-limit=2M name=4.6.UPLOAD-UNKNOWN packet-mark=unknown-up \
  257. parent=4.UPLOAD-NORMAL queue=pcq-upload-default
  258. add limit-at=100k max-limit=2M name=4.7.UPLOAD-GOOGLE packet-mark=\
  259. ggc-telkom-up parent=4.UPLOAD-NORMAL priority=5 queue=pcq-upload-default
  260. add limit-at=500k max-limit=10M name=4.2.SOSMED packet-mark=sosmed-down \
  261. parent=4.NORMAL priority=6 queue=pcq-download-default
  262. add limit-at=100k max-limit=2M name=4.2.UPLOAD-SOSMED packet-mark=sosmed-up \
  263. parent=4.UPLOAD-NORMAL priority=6 queue=pcq-upload-default
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!