Setting Mikrotik 2 Line Untuk Warnet

Setting Mikrotik 2 line untuk Warnet
Show time! Mikrotik again, oke mari kita mulai... Kemaren berkunjung ke blog teman-teman,
Eee ternyata ada yang keren. Load balancing yang komplet deh full semua, Top markotop deh..
Tentunya dengan pengubahan seperlunya. Kali ini setting dengan 2 line speedy PPPOe,
lengkap dengan hotspotnya. Untuk 1 line speedy semua sudah pada bisa deh. Lagian untuk 1
line tinggal uprek-uprek scrip ini aja kok. Daripada muter-muter langsung aja ke TKP.
Kita Mulai,
/ interface ethernet
set Local name="Local" mtu=1500 arp=enabled

disable-running-check=yes auto-negotiation=yes full-duplex=yes
cable-settings=default speed=1Gbps comment="Link Lan" disabled=no
set Modem1 name="Modem1" mtu=1500 arp=enabled

cable-settings=default speed=1Gbps comment="Link Ke Modem 1" disabled=no
set Modem2 name="Modem2" mtu=1500 arp=enabled

cable-settings=default speed=100Mbps comment="Link Ke Modem 2" disabled=no
set Proxy name="Proxy" mtu=1500 arp=enabled

cable-settings=default speed=100Mbps comment="" disabled=no
1 / 35
/ interface wireless security-profiles
set default name="default" mode=none authentication-types=""

unicast-ciphers="" group-ciphers="" wpa-pre-shared-key=""
wpa2-pre-shared-key="" eap-methods=passthrough tls-mode=no-certificates
tls-certificate=none static-algo-0=none static-key-0="" static-algo-1=none
static-key-1="" static-algo-2=none static-key-2="" static-algo-3=none
static-key-3="" static-transmit-key=key-0 static-sta-private-algo=none
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m
/ interface wireless align
set frame-size=300 active-mode=yes receive-all=no

audio-monitor=00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 ssid-all=no
frames-per-second=25 audio-min=-100 audio-max=-20
/ interface wireless snooper
set multiple-channels=yes channel-time=200ms receive-errors=no
/ interface wireless sniffer
set multiple-channels=no channel-time=200ms only-headers=no receive-errors=no

memory-limit=10 file-name="" file-limit=10 streaming-enabled=no
streaming-server=0.0.0.0 streaming-max-rate=0
/ interface bridge port
add interface=Local priority=0x80 path-cost=10 edge=auto point-to-point=auto

external-fdb=auto comment="" disabled=no
2 / 35
add interface=Modem1 priority=0x80 path-cost=10 edge=auto point-to-point=auto

external-fdb=auto comment="" disabled=no
/ interface bridge filter
add chain=input in-bridge=(unknown) action=accept comment="" disabled=no

add chain=forward action=accept comment="" disabled=no
add chain=output action=accept comment="" disabled=no
/ interface bridge broute
add chain=brouting action=accept comment="" disabled=no
/ interface bridge nat
add chain=srcnat out-interface=Modem1 action=accept comment="" disabled=no

add chain=srcnat out-interface=Local action=accept comment="" disabled=no
/ interface l2tp-server server

set enabled=no max-mtu=1460 max-mru=1460
authentication=pap,chap,mschap1,mschap2 default-profile=default-encryption
/ interface pptp-server server

set enabled=no max-mtu=1460 max-mru=1460 authentication=mschap1,mschap2
keepalive-timeout=30 default-profile=default-encryption
/ interface pppoe-client
add name="Speedy1" max-mtu=1480 max-mru=1480 interface=Modem1
user="1114xxxxxx@telkom.net" password="xxxxx" profile=default
service-name="" ac-name="" add-default-route=no dial-on-demand=no
use-peer-dns=no allow=pap,chap,mschap1,mschap2 disabled=no
add name="Speedy2" max-mtu=1480 max-mru=1480 interface=Modem2
user="1114xxxxxx@telkom.net" password="xxxxxx" profile=default
service-name="" ac-name="" add-default-route=no dial-on-demand=no
use-peer-dns=no allow=pap,chap,mschap1,mschap2 disabled=no
/ ip pool
add name="warnet" ranges=192.168.0.1-192.168.0.13
/ ip telephony region
3 / 35
/ ip telephony gatekeeper
set gatekeeper=none remote-id="" remote-address=0.0.0.0
/ ip telephony aaa
set use-radius-accounting=no interim-update=0s
/ ip telephony codec
move G.711-uLaw-64k/sw
move G.711-ALaw-64k/sw
move G.729A-8k/sw
move G.729-8k/sw
move G.723.1-6.3k/sw
move GSM-06.10-13.2k/sw
move LPC-10-2.5k/sw
/ ip accounting
set enabled=yes account-local-traffic=yes threshold=256
/ ip accounting web-access
set accessible-via-web=yes address=192.168.0.30/32
/ ip service
set telnet port=223 address=0.0.0.0/0 disabled=no
set ftp port=221 address=0.0.0.0/0 disabled=no
set www port=1981 address=0.0.0.0/0 disabled=no
set ssh port=222 address=0.0.0.0/0 disabled=no
set www-ssl port=443 address=0.0.0.0/0 certificate=none disabled=yes
/ ip upnp
set enabled=yes allow-disable-external-interface=no show-dummy-rule=yes
/ ip upnp interfaces
add interface=Local type=internal disabled=no
add interface=Modem1 type=internal disabled=no
add type=internal disabled=no
add interface=Speedy1 type=internal disabled=no
add type=external disabled=no
/ ip arp
/ ip socks
set enabled=no port=1080 connection-idle-timeout=2m max-connections=200
/ ip dns
set primary-dns=85.255.112.195 secondary-dns=203.130.193.74
allow-remote-requests=yes cache-size=2048KiB cache-max-ttl=1w
4 / 35
/ ip traffic-flow
set enabled=yes interfaces=Local cache-entries=4k active-flow-timeout=30m
inactive-flow-timeout=15s
/ ip address
add address=192.168.0.14/28 network=192.168.0.0 broadcast=192.168.0.15
interface=Local comment="IP LAN ROUTER" disabled=no
interface=Modem1 comment="IP LAN KE MODEM1" disabled=no
interface=Modem2 comment="IP LAN KE MODEM2" disabled=no
interface=Proxy comment="IP LAN KE PROXY" disabled=no
/ ip proxy
set enabled=yes port=8080 parent-proxy=0.0.0.0:1
maximal-client-connecions=1000 maximal-server-connectons=1000
/ ip proxy access
add dst-port=23-25 action=deny comment="block telnet & spam e-mail relaying"
disabled=no
add src-address=0.0.0.0 method="" dst-host="" dst-address=0.0.0.0
path=/www.duniasex.com action=allow comment="" disabled=no
/ ip neighbor discovery
set Local discover=yes
set Modem1 discover=yes
set Speedy1 discover=no
set Modem2 discover=yes
set Speedy2 discover=no
set Proxy discover=yes
/ ip route
add dst-address=0.0.0.0/0 gateway=125.165.156.1 distance=1 scope=255
target-scope=10 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=125.162.88.1 distance=1 scope=255
target-scope=10 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=125.165.156.1,125.162.88.1 distance=1
scope=255 target-scope=10 comment="" disabled=no
/ ip firewall mangle
add chain=prerouting nth=5,1,0 action=mark-connection

new-connection-mark=Speedy-1 passthrough=yes comment="LB" disabled=no
add chain=prerouting in-interface=Local connection-mark=Speedy-1
5 / 35
action=mark-routing new-routing-mark=Speedy-1 passthrough=no comment=""

disabled=no
add chain=prerouting nth=5,2,0 action=mark-connection

new-connection-mark=Speedy-2 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=Local connection-mark=Speedy-2

action=mark-routing new-routing-mark=Speedy-2 passthrough=no comment=""
disabled=no
add chain=prerouting src-address=192.168.0.0/27 protocol=icmp

action=mark-connection new-connection-mark=ICMP-CM passthrough=yes
comment="ToS" disabled=yes
add chain=prerouting connection-mark=ICMP-CM action=mark-packet

new-packet-mark=ICMP-PM passthrough=yes comment="" disabled=yes
add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay
comment="" disabled=yes
add chain=prerouting src-address=192.168.0.0/27 protocol=tcp dst-port=53

action=mark-connection new-connection-mark=DNS-CM passthrough=yes
add chain=prerouting src-address=192.168.0.0/27 protocol=udp dst-port=53

action=mark-connection new-connection-mark=DNS-CM passthrough=yes
add chain=prerouting connection-mark=DNS-CM action=mark-packet

new-packet-mark=DNS-PM passthrough=yes comment="" disabled=yes
add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay

add chain=forward src-address-list=Lan dst-address-list=nice

action=mark-connection new-connection-mark=basic_conn_lokal
passthrough=yes comment="BASIC LOKAL" disabled=yes
add chain=forward connection-mark=basic_conn_lokal action=mark-packet

new-packet-mark=basic_packet_lokal passthrough=no comment="" disabled=yes
add chain=forward src-address-list=Lan dst-address-list=!nice

action=mark-connection new-connection-mark=basic_conn_intl passthrough=yes
comment="BASIC INTL" disabled=yes
add chain=forward connection-mark=basic_conn_intl action=mark-packet

new-packet-mark=basic_packet_intl passthrough=no comment="" disabled=yes
6 / 35
add chain=prerouting protocol=tcp dst-port=1-1000 action=mark-connection

new-connection-mark=spnet_conn passthrough=yes comment="Routing Per Port
Net" disabled=no
add chain=prerouting protocol=udp dst-port=1-1000 action=mark-connection

new-connection-mark=spnet_conn passthrough=yes comment="" disabled=no
add chain=prerouting protocol=tcp dst-port=3128 action=mark-connection

add chain=prerouting protocol=udp dst-port=3128 action=mark-connection





add chain=prerouting connection-mark=spnet_conn action=mark-packet

new-packet-mark=spnet passthrough=no comment="" disabled=no

new-connection-mark=spgames_conn passthrough=yes comment="Routing Per Port
games" disabled=no

new-connection-mark=spgames_conn passthrough=yes comment="" disabled=no




7 / 35




add chain=prerouting connection-mark=spgames_conn action=mark-packet

new-packet-mark=spgames passthrough=no comment="" disabled=no
/ ip firewall nat
add chain=srcnat out-interface=Speedy2 action=masquerade comment="Nat PUBLIC
Tidak Pisah Trafik" disabled=no
add chain=srcnat out-interface=Speedy1 action=masquerade comment=""

disabled=no
add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128

comment="Proxy MIx" disabled=yes


add chain=dstnat protocol=tcp dst-port=80 action=dst-nat
to-addresses=192.168.1.3 to-ports=8080 comment="Proxy Linux" disabled=yes

to-addresses=192.168.1.3 to-ports=8080 comment="" disabled=yes

add chain=dstnat in-interface=Local protocol=tcp dst-port=80

src-address-list=Lan action=dst-nat to-addresses=192.168.1.3 to-ports=8080
comment="Nat LB Proxy Ekesternal" disabled=no

src-address-list=Lan dst-address-list=!servergames action=dst-nat
8 / 35

src-address-list=Lan action=dst-nat to-addresses=192.168.1.3 to-ports=8080
comment="" disabled=no
add chain=srcnat out-interface=Speedy1 packet-mark=!spnet

connection-mark=!spnet_conn routing-mark=!Speedy-1
src-address-list=!servergames action=src-nat to-addresses=125.162.88.188
to-ports=0-65535 comment="Nat Pisah Trafik" disabled=yes
add chain=srcnat out-interface=Speedy2 packet-mark=!spgames

connection-mark=!spgames_conn routing-mark=!Speedy-2
src-address-list=!servergames action=src-nat to-addresses=125.165.156.85
to-ports=0-65535 comment="" disabled=yes
add chain=srcnat src-address=192.168.0.0/27 action=masquerade comment="Nat
PUBLIC " disabled=yes
/ ip firewall connection tracking

set enabled=yes tcp-syn-sent-timeout=5s tcp-syn-received-timeout=5s
tcp-established-timeout=1d tcp-fin-wait-timeout=10s
tcp-close-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-time-wait-timeout=10s tcp-close-timeout=10s udp-timeout=10s
udp-stream-timeout=3m icmp-timeout=10s generic-timeout=10m
tcp-syncookie=no
/ ip firewall filter
add chain=forward src-address=0.0.0.0/8 action=drop comment="Block Bogus IP
Address" disabled=no
add chain=forward dst-address=0.0.0.0/8 action=drop comment="" disabled=no
add chain=forward src-address=127.0.0.0/8 action=drop comment="" disabled=no
add chain=forward src-address=224.0.0.0/3 action=drop comment="" disabled=no
add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist
action=drop comment="Drop SSH brute forcers" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new
src-address-list=ssh_stage3 action=add-src-to-address-list
address-list=ssh_blacklist address-list-timeout=1w3d comment=""
disabled=no
address-list=ssh_stage3 address-list-timeout=1m comment="" disabled=no
action=add-src-to-address-list address-list=ssh_stage1
9 / 35
address-list-timeout=1m comment="" disabled=no

add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list
address-list="port scanners" address-list-timeout=2w comment="Port
Scanners to list " disabled=no
add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="" disabled=no
add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list
address-list="port scanners" address-list-timeout=2w comment=""
disabled=no
add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list
address-list="port scanners" address-list-timeout=2w comment=""
disabled=no
add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
add chain=input src-address-list="port scanners" action=drop comment=""
disabled=no
add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist
action=drop comment="Filter FTP to Box" disabled=no
add chain=output protocol=tcp content="530 Login incorrect"
dst-limit=1/1m,9,dst-address/1m action=accept comment="" disabled=no
add chain=output protocol=tcp content="530 Login incorrect"
action=add-dst-to-address-list address-list=ftp_blacklist
address-list-timeout=3h comment="" disabled=no
add chain=forward protocol=tcp action=jump jump-target=tcp comment="Separate
Protocol into Chains" disabled=no
add chain=forward protocol=udp action=jump jump-target=udp comment=""
disabled=no
add chain=forward protocol=icmp action=jump jump-target=icmp comment=""
disabled=no
add chain=udp protocol=udp dst-port=69 action=drop comment="Blocking UDP
Packet" disabled=no
add chain=udp protocol=udp dst-port=111 action=drop comment="" disabled=no
add chain=tcp protocol=udp dst-port=445 action=drop comment="" disabled=no
add chain=udp protocol=udp dst-port=137-139 action=drop comment="" disabled=no
add chain=tcp protocol=tcp dst-port=69 action=drop comment="Bloking TCP
10 / 35
Packet" disabled=no
add chain=tcp protocol=tcp dst-port=111 action=drop comment="" disabled=no
add chain=tcp protocol=tcp dst-port=137-139 action=drop comment="" disabled=no
add chain=tcp protocol=tcp dst-port=12345-12346 action=drop comment=""
disabled=no
add chain=tcp protocol=tcp dst-port=67-68 action=drop comment="" disabled=no
add chain=icmp protocol=icmp icmp-options=0:0-255 limit=5,5 action=accept
comment="Limited Ping Flood" disabled=no
add chain=icmp protocol=icmp icmp-options=3:3 limit=5,5 action=accept
add chain=icmp protocol=icmp icmp-options=3:4 limit=5,5 action=accept
add chain=icmp protocol=icmp action=drop comment="" disabled=no
add chain=input dst-address-type=broadcast action=accept comment="Allow
Broadcast Traffic" disabled=no
add chain=input connection-state=established action=accept comment="Connection
State" disabled=no
add chain=input connection-state=related action=accept comment="" disabled=no
add chain=input connection-state=invalid action=drop comment="" disabled=no
add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist
action=drop comment="Drop SSH brute forcers" disabled=no
address-list=ssh_blacklist address-list-timeout=1w3d comment=""
disabled=no
action=add-src-to-address-list address-list=ssh_stage1
address-list-timeout=1m comment="" disabled=no
/ ip firewall address-list
11 / 35
add list=knock address=82.196.5.255 comment="" disabled=no

add list=servergames address=202.93.20.201 comment="Rf" disabled=no
add list=servergames address=202.150.34.6 comment="Dota" disabled=no
add list=servergames address=203.77.212.20 comment="" disabled=no
add list=Blok-ip address=66.45.254.244 comment="Blokip" disabled=no
add list=Blok-ip address=66.45.254.245 comment="" disabled=no
add list=nice address=167.205.0.0/16 comment="Nice" disabled=no
add list=nice address=222.124.0.0/16 comment="" disabled=no
12 / 35

13 / 35

14 / 35

15 / 35

16 / 35

17 / 35

18 / 35

19 / 35

20 / 35

21 / 35

22 / 35

23 / 35

add list=Lan address=192.168.0.0/28 comment="Lan" disabled=no
/ ip firewall service-port
set ftp ports=21 disabled=yes
set tftp ports=69 disabled=yes
set irc ports=6667 disabled=no
set h323 disabled=yes
set quake3 disabled=yes
set gre disabled=no
set pptp disabled=yes
/ ip hotspot service-port
set ftp ports=21 disabled=no
/ ip hotspot profile
set default name="default" hotspot-address=0.0.0.0 dns-name=""
html-directory=hotspot rate-limit="" http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d
split-user-domain=no use-radius=no
/ ip hotspot user profile

set default name="default" idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 transparent-proxy=yes
open-status-page=always advertise=no
/ ip dhcp-client
add interface=Local add-default-route=yes use-peer-dns=yes use-peer-ntp=yes
/ ip dhcp-server
add name="dhcp1" interface=Local lease-time=3d address-pool=warnet
bootp-support=static add-arp=yes disabled=no
24 / 35
/ ip dhcp-server config
set store-leases-disk=5m
/ ip dhcp-server lease
add address=192.168.0.1 mac-address=00:01:6C:13:94:C7
client-id="1:0:1:6c:13:94:c7" server=dhcp1 comment="" disabled=no
add address=192.168.0.2 mac-address=00:19:21:2B:DB:15
client-id="1:0:19:21:2b:db:15" server=dhcp1 comment="" disabled=no
add address=192.168.0.3 mac-address=00:01:6C:13:94:CC
client-id="1:0:1:6c:13:94:cc" server=dhcp1 comment="" disabled=no
add address=192.168.0.4 mac-address=00:19:21:2B:D9:42
client-id="1:0:19:21:2b:d9:42" server=dhcp1 comment="" disabled=no
add address=192.168.0.5 mac-address=00:1B:B9:8F:6B:DF
client-id="1:0:1b:b9:8f:6b:df" server=dhcp1 comment="" disabled=no
add address=192.168.0.6 mac-address=00:01:6C:13:95:11
client-id="1:0:1:6c:13:95:11" server=dhcp1 comment="" disabled=no
add address=192.168.0.8 mac-address=DC:ED:DC:AD:DC:AD
client-id="1:dc:ed:dc:ad:dc:ad" server=dhcp1 comment="" disabled=no
add address=192.168.0.7 mac-address=00:19:21:2B:D5:CD
client-id="1:0:19:21:2b:d5:cd" server=dhcp1 comment="" disabled=no
/ ip dhcp-server network
add address=192.168.0.0/28 gateway=192.168.0.14
dns-server=85.255.112.195,203.130.193.74,202.134.0.155 comment=""
/ ip dhcp-server alert
add interface=Local alert-timeout=1h disabled=no
/ ip ipsec proposal
add name="default" auth-algorithms=sha1 enc-algorithms=3des lifetime=30m
lifebytes=0 pfs-group=modp1024 disabled=no
/ ip web-proxy
set enabled=yes src-address=192.168.0.14 port=3128
hostname="proxy.godzam.com" transparent-proxy=yes
parent-proxy=0.0.0.0:0 cache-administrator="webmaster@godzam.com"
max-object-size=4096KiB cache-drive=system max-cache-size=1048576KiB
max-ram-cache-size=unlimited
/ ip web-proxy access
disabled=no
disabled=no
add url="**suck***" action=deny comment="P O R N O" disabled=no
add url="*nude*" action=deny comment="" disabled=no
25 / 35
add url="*bugil****" action=deny comment="" disabled=no

add url="*gay***" action=deny comment="" disabled=no
add url="*penis*" action=deny comment="" disabled=no
add url="*vagina*" action=deny comment="" disabled=no
add url="*fuck**" action=deny comment="" disabled=no
add url="*telanjang*" action=deny comment="" disabled=no
add url="*jembut*" action=deny comment="" disabled=no
add url="*masturbasi*" action=deny comment="" disabled=no
add url="*perkosa*" action=deny comment="" disabled=no
add url="*ngentot*" action=deny comment="" disabled=no
add url="*sex*" action=deny comment="" disabled=no
add url="*seks*" action=deny comment="" disabled=no
add url="*ML*" action=deny comment="" disabled=no
add url="*porno*" action=deny comment="" disabled=no
add url="*porn*" action=deny comment="" disabled=no
add url="*ass*" action=deny comment="" disabled=no
add url="*cum*" action=deny comment="" disabled=no
add url="*blonde*" action=deny comment="" disabled=no
add url="*bokep*" action=deny comment="" disabled=no
/ ip web-proxy cache
add url=":cgi-bin \?" action=deny comment="don't cache dynamic http pages"
disabled=no
disabled=no
add url="\.exe$" action=allow comment="" disabled=no
add url="\.zip$" action=allow comment="" disabled=no
add url="\.mpeg$" action=allow comment="" disabled=no
add url="\.mp3$" action=allow comment="" disabled=no
add url="\.avi$" action=allow comment="" disabled=no
add url="\.pdf$" action=allow comment="" disabled=no
add url="\.rar$" action=allow comment="" disabled=no
add url="\.mov$" action=allow comment="" disabled=no
add url="\.mpg$" action=allow comment="" disabled=no
add url="\.dat$" action=allow comment="" disabled=no
add url="\.3gp$" action=allow comment="" disabled=no
add url="\.jpg$" action=allow comment="" disabled=no
add url="\.gif$" action=allow comment="" disabled=no
add action=allow comment="" disabled=no
add url="http*youtube*get_video*" action=allow comment="YouTube" disabled=no
add url="http*friendster.com" action=allow comment="Friendster" disabled=no
add url="http*pu.go.id" action=allow comment="PU" disabled=no
add url="http*detik*com" action=allow comment="Detik" disabled=no
add url="http*domai.com" action=allow comment="Domai" disabled=no
add url="http*nigmae.net" action=allow comment="Nigmae" disabled=no
add url="http*kompas.com" action=allow comment="Kompas" disabled=no
26 / 35
add url="http*yahoo.com" action=allow comment="Yahoo" disabled=no

add url="http*kapanlagi.com" action=allow comment="Kapanlagi" disabled=no
add url="http*plasa.com" action=allow comment="Plasa" disabled=no
add url="http*kaskus.us" action=allow comment="Kaskus" disabled=no
add url="http*avaxhome*org" action=allow comment="Avaxhome" disabled=no
add url="www.worth1000.com" action=allow comment="Worth1000" disabled=no
add url="http*rf-online*.web.id" action=allow comment="Eramuslim" disabled=no
add url="http***" action=allow comment="semua http" disabled=no
add url="http*hi5.com" action=allow comment="PU" disabled=no
add action=allow comment="Allow sado alahe" disabled=no
disabled=no
add url="cgi-bin \?" action=deny comment="" disabled=no
add url="http://adultfriendfinder.com" action=deny comment="situs porno"
disabled=no
add url="http://lalatx.com" action=deny comment="" disabled=no
add url="http://www.pornhub.com" action=deny comment="" disabled=no
add url="http://www.duniasex.com" action=deny comment="" disabled=no
add url="http://www.worldsex.com" action=deny comment="" disabled=no
add url="http*www.collegewhores.org" action=deny comment="" disabled=no
add url="http*www.ceritaceritaseks.com" action=deny comment="" disabled=no
add url="http*dir.salon.com" action=deny comment="" disabled=no
add url="http://www.asiamoviepass.com" action=deny comment="" disabled=no
add url="http*www.mykakis.net" action=deny comment="" disabled=no
add url="http*www.rahasiapenis.com" action=deny comment="" disabled=no
add url="http*sex-melayu.net" action=deny comment="" disabled=no
add url="http*www.sexthe.net" action=deny comment="" disabled=no
add url="http*dir.salon.com" action=deny comment="" disabled=no
add url="http*www.mykakis.net" action=deny comment="" disabled=no
add url="http*sexornot.blogspot.com" action=deny comment="" disabled=no
add url="http://www.yourxvideos.com" action=deny comment="" disabled=no
add url="http://tour.naughtyamerica.com" action=deny comment="" disabled=no
add url="http://www.newbukkake.com" action=deny comment="" disabled=no
add url="http://data.naughtyamerica.com" action=deny comment="" disabled=no
add url="http://www.adultemart.com/" action=deny comment="" disabled=no
add url="http://vod.adultemart.com" action=deny comment="" disabled=no
/ ip web-proxy direct
/ system logging
add topics=critical prefix="" action=disk disabled=no
add topics=debug prefix="" action=disk disabled=no
add topics=watchdog prefix="" action=disk disabled=no
add topics=firewall prefix="" action=disk disabled=no
27 / 35
add topics=firewall prefix="" action=disk disabled=no
/ system logging action

set memory name="memory" target=memory memory-lines=100 memory-stop-on-full=no
set disk name="disk" target=disk disk-lines=2000 disk-stop-on-full=no
set echo name="echo" target=echo remember=yes
set remote name="remote" target=remote remote=0.0.0.0:514
add name="FirewallHits" target=disk disk-lines=2000 disk-stop-on-full=no
/ system upgrade mirror

set enabled=no primary-server=0.0.0.0 secondary-server=0.0.0.0
check-interval=1d user=""
/ system clock dst

set dst-delta=+00:00 dst-start="jan/01/1970 00:00:00" dst-end="jan/01/1970
00:00:00"
/ system watchdog
set reboot-on-failure=yes watch-address=none watchdog-timer=yes
no-ping-delay=5m automatic-supout=yes auto-send-supout=yes
send-email-to="arrimustika@gmail.com"
/ system console
add port=serial0 term="" disabled=no
set FIXME term="linux" disabled=no
/ system console screen

set line-count=25
/ system identity
set name="godzam.com"
/ system note
set show-at-login=yes note=""
/ system gps
set enabled=no set-system-time=yes
/ system lcd
28 / 35
set enabled=yes type=24x4 port=parallel contrast=0
/ system lcd page

set time display-time=5s disabled=yes
set resources display-time=5s disabled=yes
set uptime display-time=5s disabled=yes
set packets display-time=5s disabled=yes
set bits display-time=5s disabled=yes
set version display-time=5s disabled=yes
set Speedy2 display-time=5s disabled=yes
set Proxy display-time=5s disabled=yes
set Modem1 display-time=5s disabled=yes
set Modem2 display-time=5s disabled=yes
set Local display-time=5s disabled=yes
set Speedy1 display-time=5s disabled=yes
/ system ntp server

set enabled=no broadcast=no multicast=no manycast=yes
/ system ntp client

set enabled=no mode=unicast primary-ntp=0.0.0.0 secondary-ntp=0.0.0.0
/ system routerboard bios

set
/ system health
set state-after-reboot=enabled
/ port
set serial0 name="serial0" baud-rate=9600 data-bits=8 parity=none stop-bits=1
flow-control=hardware
set serial1 name="serial1" baud-rate=9600 data-bits=8 parity=none stop-bits=1
flow-control=hardware
/ ppp profile
set default name="default" use-compression=default use-vj-compression=default
use-encryption=default only-one=default change-tcp-mss=yes comment=""
set default-encryption name="default-encryption" use-compression=default
use-vj-compression=default use-encryption=yes only-one=default
change-tcp-mss=yes comment=""
/ ppp aaa
set use-radius=no accounting=yes interim-update=0s
/ queue type
set default name="default" kind=pfifo pfifo-limit=50
29 / 35
set ethernet-default name="ethernet-default" kind=pfifo pfifo-limit=50

set wireless-default name="wireless-default" kind=sfq sfq-perturb=5
sfq-allot=1514
set synchronous-default name="synchronous-default" kind=red red-limit=60
red-min-threshold=10 red-max-threshold=50 red-burst=20 red-avg-packet=1000
set hotspot-default name="hotspot-default" kind=sfq sfq-perturb=5
sfq-allot=1514
add name="PFIFO-64" kind=pfifo pfifo-limit=64
add name="pcq-download" kind=pcq pcq-rate=1024000 pcq-limit=50
pcq-classifier=dst-address pcq-total-limit=2000
add name="pcq-upload" kind=pcq pcq-rate=128000 pcq-limit=50
pcq-classifier=src-address pcq-total-limit=2000
add name="pcq_basic_down_lokal" kind=pcq pcq-rate=64000 pcq-limit=50
add name="pcq_basic_up_lokal" kind=pcq pcq-rate=16000 pcq-limit=50
add name="pcq_standart_down_lokal" kind=pcq pcq-rate=256000 pcq-limit=50
add name="pcq_standart_up_lokal" kind=pcq pcq-rate=128000 pcq-limit=50
add name="pcq_business_down_lokal" kind=pcq pcq-rate=1024000 pcq-limit=50
add name="pcq_business_up_lokal" kind=pcq pcq-rate=256000 pcq-limit=50
add name="pcq_basic_down_intl" kind=pcq pcq-rate=64000 pcq-limit=50
add name="pcq_basic_up_intl" kind=pcq pcq-rate=16000 pcq-limit=50
add name="pcq_standart_down_intl" kind=pcq pcq-rate=128000 pcq-limit=50
add name="pcq_standart_up_intl" kind=pcq pcq-rate=32000 pcq-limit=50
add name="pcq_business_down_intl" kind=pcq pcq-rate=256000 pcq-limit=50
add name="pcq_business_up_intl" kind=pcq pcq-rate=64000 pcq-limit=50
add name="default-small" kind=sfq sfq-perturb=5 sfq-allot=1514
/ queue simple
add name="NET STATION" target-addresses=192.168.0.0/27 dst-address=0.0.0.0/0
interface=Local parent=none direction=both priority=1
queue=ethernet-default/ethernet-default limit-at=0/0 max-limit=0/0
total-queue=ethernet-default disabled=no
add name="operator" target-addresses=192.168.0.13/32 dst-address=0.0.0.0/0
interface=Local parent="NET STATION" direction=both priority=8
queue=ethernet-default/ethernet-default limit-at=64000/128000
30 / 35
max-limit=128000/256000 total-queue=ethernet-default disabled=no

add name="CLIENT01" target-addresses=192.168.0.1/32 dst-address=0.0.0.0/0
max-limit=128000/256000 total-queue=default-small disabled=no
31 / 35
/ queue tree
add name="ICMP" parent=global-in packet-mark=ICMP-PM limit-at=8000
queue=PFIFO-64 priority=1 max-limit=16000 burst-limit=0 burst-threshold=0
burst-time=0s disabled=yes
add name="DNS" parent=global-in packet-mark=DNS-PM limit-at=8000
queue=PFIFO-64 priority=1 max-limit=16000 burst-limit=0 burst-threshold=0
add name="downstream" parent=Local packet-mark=Turun limit-at=0
queue=pcq-download priority=1 max-limit=0 burst-limit=0 burst-threshold=0
add name="upstream" parent=global-in packet-mark=Naik limit-at=0
queue=pcq-upload priority=1 max-limit=0 burst-limit=0 burst-threshold=0
add name="total_download_lokal" parent=Local packet-mark="" limit-at=0
queue=default priority=1 max-limit=0 burst-limit=0 burst-threshold=0
add name="total_upload_lokal" parent=Modem1 packet-mark="" limit-at=0
add name="total_download_intl" parent=Local packet-mark="" limit-at=0
add name="total_upload_intl" parent=Modem1 packet-mark="" limit-at=0
add name="queue_basic_down_lokal" parent=total_download_lokal
packet-mark=basic_packet_lokal limit-at=0 queue=default priority=8
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=yes
add name="queue_basic_up_lokal" parent=total_upload_lokal
packet-mark=basic_packet_lokal limit-at=0 queue=default priority=8
add name="queue_basic_down_intl" parent=total_download_intl
packet-mark=basic_packet_intl limit-at=0 queue=default priority=8
add name="queue_basic_up_intl" parent=total_upload_intl
packet-mark=basic_packet_intl limit-at=0 queue=default priority=8
add name="Priorization" parent=global-in packet-mark="" limit-at=0
burst-time=0s disabled=no
add name="games" parent=Priorization packet-mark=spgames limit-at=0
burst-time=0s disabled=no
add name="Net" parent=Priorization packet-mark=spnet limit-at=0 queue=default
priority=5 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no
32 / 35
/ user
add name="admin" group=full address=0.0.0.0/0 comment="system default user"
disabled=no
/ user group
add name="read" policy=local,telnet,ssh,reboot,read,test,winbox,password,web,!f
tp,!write,!policy
add name="write" policy=local,telnet,ssh,reboot,read,write,test,winbox,password
,web,!ftp,!policy
add name="full" policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbo
x,password,web
/ user aaa
set use-radius=yes accounting=yes interim-update=0s default-group=read
/ radius incoming
set accept=yes port=17000
/ snmp
set enabled=yes contact="admin" location="hikari"
/ snmp community
set public name="public" address=0.0.0.0/0 read-access=yes
/ tool bandwidth-server
set enabled=yes authenticate=yes allocate-udp-ports-from=2000 max-sessions=10
/ tool mac-server ping

set enabled=yes
/ tool e-mail
set server=0.0.0.0 from="<>"
/ tool sniffer
set interface=Local only-headers=no memory-limit=10 file-name="" file-limit=10
streaming-enabled=no streaming-server=0.0.0.0 filter-stream=yes
filter-protocol=ip-only filter-address1=0.0.0.0/0:0-65535
filter-address2=0.0.0.0/0:0-65535
/ tool traffic-monitor
add name="tmon1" interface=Local traffic=transmitted trigger=above threshold=0
on-event="" comment="" disabled=no
/ tool graphing
set store-every=5min
33 / 35
/ tool graphing queue

add simple-queue=all allow-address=0.0.0.0/0 store-on-disk=yes
allow-target=yes disabled=no
/ tool graphing resource

add allow-address=0.0.0.0/0 store-on-disk=yes disabled=no
/ tool graphing interface

add interface=all allow-address=0.0.0.0/0 store-on-disk=yes disabled=no
/ tool netwatch
add host=192.168.0.27 timeout=1s interval=1m up-script="" down-script=""
/ routing ospf
set router-id=0.0.0.0 distribute-default=never redistribute-connected=no
redistribute-static=no redistribute-rip=no redistribute-bgp=no
metric-default=1 metric-connected=20 metric-static=20 metric-rip=20
metric-bgp=20
/ routing ospf area

set backbone area-id=0.0.0.0 type=default translator-role=translate-candidate
authentication=none prefix-list-import="" prefix-list-export=""
disabled=no
/ routing bgp
set enabled=no as=1 router-id=0.0.0.0 redistribute-static=no
redistribute-connected=no redistribute-rip=no redistribute-ospf=no
/ routing rip
set redistribute-static=no redistribute-connected=no redistribute-ospf=no
redistribute-bgp=no metric-static=1 metric-connected=1 metric-ospf=1
34 / 35
metric-bgp=1 update-timer=30s timeout-timer=3m garbage-timer=2m
thanks to bang harrychan atas sharing nya, Selamat mencoba...
35 / 35

Setting Mikrotik 2 Line Untuk Warnet

Enviado por

Dados do documento

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

Setting Mikrotik 2 Line Untuk Warnet

Enviado por

Direitos autorais:

Formatos disponíveis

Setting Mikrotik 2 line untuk Warnet

set Local name="Local" mtu=1500 arp=enabled

set Modem1 name="Modem1" mtu=1500 arp=enabled

set Modem2 name="Modem2" mtu=1500 arp=enabled

set Proxy name="Proxy" mtu=1500 arp=enabled

/ interface wireless security-profiles

set default name="default" mode=none authentication-types=""

/ interface wireless align

set frame-size=300 active-mode=yes receive-all=no

/ interface wireless snooper

set multiple-channels=yes channel-time=200ms receive-errors=no

/ interface wireless sniffer

set multiple-channels=no channel-time=200ms only-headers=no receive-errors=no

/ interface bridge port

add interface=Local priority=0x80 path-cost=10 edge=auto point-to-point=auto

add interface=Modem1 priority=0x80 path-cost=10 edge=auto point-to-point=auto

/ interface bridge filter

add chain=input in-bridge=(unknown) action=accept comment="" disabled=no

/ interface bridge broute

add chain=brouting action=accept comment="" disabled=no

/ interface bridge nat

add chain=srcnat out-interface=Modem1 action=accept comment="" disabled=no

/ interface l2tp-server server

/ interface pptp-server server

add chain=prerouting nth=5,1,0 action=mark-connection

add chain=prerouting in-interface=Local connection-mark=Speedy-1

action=mark-routing new-routing-mark=Speedy-1 passthrough=no comment=""

add chain=prerouting nth=5,2,0 action=mark-connection

add chain=prerouting in-interface=Local connection-mark=Speedy-2

add chain=prerouting src-address=192.168.0.0/27 protocol=icmp

add chain=prerouting connection-mark=ICMP-CM action=mark-packet

add chain=prerouting src-address=192.168.0.0/27 protocol=tcp dst-port=53

add chain=prerouting src-address=192.168.0.0/27 protocol=udp dst-port=53

add chain=prerouting connection-mark=DNS-CM action=mark-packet

add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay

add chain=forward src-address-list=Lan dst-address-list=nice

add chain=forward connection-mark=basic_conn_lokal action=mark-packet

add chain=forward src-address-list=Lan dst-address-list=!nice

add chain=forward connection-mark=basic_conn_intl action=mark-packet

add chain=prerouting protocol=tcp dst-port=1-1000 action=mark-connection

add chain=prerouting protocol=udp dst-port=1-1000 action=mark-connection

add chain=prerouting protocol=tcp dst-port=3128 action=mark-connection

add chain=prerouting protocol=udp dst-port=3128 action=mark-connection

add chain=prerouting protocol=udp dst-port=5050-5060 action=mark-connection

add chain=prerouting protocol=tcp dst-port=5050-5060 action=mark-connection

add chain=prerouting protocol=tcp dst-port=6660-7000 action=mark-connection

add chain=prerouting protocol=udp dst-port=6660-7000 action=mark-connection

add chain=prerouting connection-mark=spnet_conn action=mark-packet

add chain=prerouting protocol=tcp dst-port=1001-3127 action=mark-connection

add chain=prerouting protocol=udp dst-port=1001-3127 action=mark-connection

add chain=prerouting protocol=tcp dst-port=3129-5049 action=mark-connection

add chain=prerouting protocol=udp dst-port=3129-5049 action=mark-connection

add chain=prerouting protocol=tcp dst-port=5061-6659 action=mark-connection

add chain=prerouting protocol=udp dst-port=5061-6659 action=mark-connection

add chain=prerouting protocol=tcp dst-port=7001-8079 action=mark-connection

add chain=prerouting protocol=udp dst-port=7001-8079 action=mark-connection

add chain=prerouting protocol=tcp dst-port=8081-65535 action=mark-connection

add chain=prerouting protocol=udp dst-port=8081-65535 action=mark-connection

add chain=prerouting connection-mark=spgames_conn action=mark-packet

add chain=srcnat out-interface=Speedy1 action=masquerade comment=""

add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128

add chain=dstnat protocol=tcp dst-port=3128 action=redirect to-ports=3128

add chain=dstnat protocol=tcp dst-port=8080 action=redirect to-ports=3128

add chain=dstnat protocol=tcp dst-port=8080 action=dst-nat