sesuaikan ethernet yang menuju modem dengan nama ethernet = public
/ip firewall address-list add address=192.168.88.0/24 disabled=no list=private_IPv4 add address=10.5.0.0/16 disabled=no list=private_IPv4 add address=10.6.0.0/16 disabled=no list=private_IPv4 /ip firewall layer7-protocol add name=exe regexp="\\x4d\\x5a(\\x90\\x03|\\x50\\x02)\\x04" add name=zip regexp="^.*get.+\\\\.(exe|rar|iso|zip|7zip|0[0-9][1-9]|flv|mkv|avi|mp4|3gp|rmvb|mp3|img|dat|mov).*\\\$" add name=mp4 regexp="\\x18\\x66\\x74\\x79\\x70" add name=rar regexp="Rar\\x21\\x1a\\x07" add name=video regexp="^.+(c.youtube.com|googlevideo.com|cdn.dailymotion.com|metacafe.com|mccont.com).*\$" add name=youtube regexp=videoplayback|video /ip firewall mangle add action=mark-connection chain=forward comment="Games Traffic Poit Blank" \ disabled=no dst-port=39190-39200 new-connection-mark=games passthrough=\ yes protocol=tcp src-address-list=private_IPv4 add action=mark-connection chain=forward disabled=no dst-port=40000-40010 \ new-connection-mark=games passthrough=yes protocol=udp src-address-list=\ private_IPv4 add action=mark-connection chain=forward comment="Games Traffic Dota 2" \ disabled=no dst-port=27000-27150,9100-9200,8230-8250,8110-8120 \ new-connection-mark=games passthrough=yes protocol=tcp src-address-list=\ private_IPv4 add action=mark-connection chain=forward disabled=no dst-port=27000-27150,347 \ new-connection-mark=games passthrough=yes protocol=udp src-address-list=\ private_IPv4 add action=mark-connection chain=forward comment="Games Traffic Lost Saga" \ disabled=no dst-port=14000-14010 new-connection-mark=games passthrough=\ yes protocol=tcp src-address-list=private_IPv4 add action=mark-connection chain=forward disabled=no dst-port=14000-14010 \ new-connection-mark=games passthrough=yes protocol=udp src-address-list=\ private_IPv4 add action=mark-connection chain=forward comment=\ "Games Traffic Fifa Online 3" disabled=no dst-port=7770-7790 \ new-connection-mark=games passthrough=yes protocol=tcp src-address-list=\ private_IPv4 add action=mark-connection chain=forward disabled=no dst-port=16300-16350 \ new-connection-mark=games passthrough=yes protocol=udp src-address-list=\ private_IPv4 add action=mark-connection chain=forward comment=roblox disabled=no dst-port=\ 54695-62096 new-connection-mark=games passthrough=yes protocol=udp \ src-address-list=private_IPv4 add action=mark-packet chain=forward connection-mark=games disabled=no \ in-interface=public new-packet-mark=games_down passthrough=no add action=mark-packet chain=forward connection-mark=games disabled=no \ new-packet-mark=games_up passthrough=no add action=mark-connection chain=forward comment="ICMP Traffic" disabled=no \ new-connection-mark=icmp passthrough=yes protocol=icmp src-address-list=\ private_IPv4 add action=mark-packet chain=forward connection-mark=icmp disabled=no \ in-interface=public new-packet-mark=icmp_down passthrough=no protocol=\ icmp add action=mark-packet chain=forward connection-mark=icmp disabled=no \ new-packet-mark=icmp_up passthrough=no protocol=icmp add action=mark-connection chain=forward comment="DNS Traffic" disabled=no \ dst-port=53 new-connection-mark=dns passthrough=yes protocol=udp \ src-address-list=private_IPv4 add action=mark-packet chain=forward connection-mark=dns disabled=no \ in-interface=public new-packet-mark=dns_down passthrough=no protocol=udp add action=mark-packet chain=forward connection-mark=dns disabled=no \ new-packet-mark=dns_up passthrough=no protocol=udp add action=mark-connection chain=forward comment="Remote Traffic" disabled=no \ dst-port=22,23,8291,5938,4899,1125 new-connection-mark=remote \ passthrough=yes protocol=tcp src-address-list=private_IPv4 add action=mark-packet chain=forward connection-mark=remote disabled=no \ in-interface=public new-packet-mark=remote_down passthrough=no add action=mark-packet chain=forward connection-mark=remote disabled=no \ new-packet-mark=remote_up passthrough=no add action=mark-connection chain=forward comment="YouTube Traffic" disabled=\ no layer7-protocol=video new-connection-mark=youtube passthrough=yes \ src-address-list=private_IPv4 add action=mark-connection chain=forward comment=video-traffic disabled=no \ layer7-protocol=youtube new-connection-mark=youtube passthrough=yes \ src-address-list=private_IPv4 add action=mark-connection chain=forward comment="Extension Layer7" disabled=\ no layer7-protocol=exe new-connection-mark=extensi passthrough=yes \ src-address-list=private_IPv4 add action=mark-connection chain=forward disabled=no layer7-protocol=zip \ new-connection-mark=extensi passthrough=yes src-address-list=private_IPv4 add action=mark-connection chain=forward disabled=no layer7-protocol=rar \ new-connection-mark=extensi passthrough=yes src-address-list=private_IPv4 add action=mark-connection chain=forward disabled=no layer7-protocol=mp4 \ new-connection-mark=extensi passthrough=yes src-address-list=private_IPv4 add action=mark-packet chain=forward connection-mark=youtube disabled=no \ new-packet-mark=youtube_down passthrough=no add action=mark-packet chain=forward connection-mark=youtube disabled=no \ new-packet-mark=youtube_up passthrough=no add action=mark-packet chain=forward connection-mark=extensi disabled=no \ new-packet-mark=extensi_down passthrough=no add action=mark-packet chain=forward connection-mark=extensi disabled=no \ new-packet-mark=extensi_up passthrough=no add action=mark-connection chain=forward comment="Browsing Traffic" \ connection-mark=!heavy_traffic disabled=no new-connection-mark=browsing \ passthrough=yes src-address-list=private_IPv4 add action=mark-connection chain=forward comment="Heavy Traffic" \ connection-bytes=1024000-0 connection-mark=browsing connection-rate=\ 256k-102400k disabled=no new-connection-mark=heavy_traffic passthrough=\ yes protocol=tcp add action=mark-connection chain=forward connection-bytes=1024000-0 \ connection-mark=browsing connection-rate=256k-102400k disabled=no \ new-connection-mark=heavy_traffic passthrough=yes protocol=udp add action=mark-packet chain=forward connection-mark=heavy_traffic disabled=\ no in-interface=public new-packet-mark=heavy_browsing_down passthrough=no add action=mark-packet chain=forward connection-mark=heavy_traffic disabled=\ no new-packet-mark=heavy_browsing_up passthrough=no add action=mark-packet chain=forward connection-mark=browsing disabled=no \ in-interface=public new-packet-mark=small_browsing_down passthrough=no add action=mark-packet chain=forward connection-mark=browsing disabled=no \ new-packet-mark=small_browsing_up passthrough=no /queue type add kind=pcq name=down_pcq pcq-burst-rate=0 pcq-burst-threshold=0 \ pcq-burst-time=10s pcq-classifier=dst-address pcq-dst-address-mask=32 \ pcq-dst-address6-mask=64 pcq-limit=50 pcq-rate=0 pcq-src-address-mask=32 \ pcq-src-address6-mask=64 pcq-total-limit=2000 add kind=pcq name=up_pcq pcq-burst-rate=0 pcq-burst-threshold=0 \ pcq-burst-time=10s pcq-classifier=src-address pcq-dst-address-mask=32 \ pcq-dst-address6-mask=64 pcq-limit=50 pcq-rate=0 pcq-src-address-mask=32 \ pcq-src-address6-mask=64 pcq-total-limit=2000 /queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=20M name="1.-|> [Download]" packet-mark="" parent=global-out \ priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M \ max-limit=20M name="1.-|> GAMES" packet-mark=games_down parent=\ "1.-|> [Download]" priority=1 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M \ max-limit=10M name="2.-|> ICMP" packet-mark=icmp_down parent=\ "1.-|> [Download]" priority=1 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=15M name="5. Download Traffic" packet-mark="" parent=\ "1.-|> [Download]" priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=10M name="1. Small Browsing" packet-mark=small_browsing_down \ parent="5. Download Traffic" priority=5 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=5M name="2. Heavy Browsing" packet-mark=heavy_browsing_down \ parent="5. Download Traffic" priority=7 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=10M name="3. YouTube" packet-mark=youtube_down parent=\ "5. Download Traffic" priority=6 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=5M name="4. Extensi" packet-mark=extensi_down parent=\ "5. Download Traffic" priority=8 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M \ max-limit=10M name="3.-|> DNS" packet-mark=dns_down parent=\ "1.-|> [Download]" priority=1 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M \ max-limit=10M name="4.-|> REMOTE" packet-mark=remote_down parent=\ "1.-|> [Download]" priority=8 queue=down_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=4M name="2. <|- [Upload]" packet-mark="" parent=global-out \ priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=4M \ max-limit=10M name="1.<|- GAMES" packet-mark=games_up parent=\ "2. <|- [Upload]" priority=1 queue=up_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1M \ max-limit=10M name="2.<|- ICMP" packet-mark=icmp_up parent=\ "2. <|- [Upload]" priority=1 queue=up_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=512k \ max-limit=4M name="3.<|- DNS" packet-mark=dns_up parent="2. <|- [Upload]" \ priority=1 queue=up_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1M \ max-limit=4M name="4.<|- REMOTE" packet-mark=remote_up parent=\ "2. <|- [Upload]" priority=3 queue=up_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=4M name="5. Upload Traffic" packet-mark="" parent=\ "2. <|- [Upload]" priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=4M name="1. small browsing" packet-mark=small_browsing_up \ parent="5. Upload Traffic" priority=5 queue=up_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=1M name="2. heavy browsing" packet-mark=heavy_browsing_up \ parent="5. Upload Traffic" priority=7 queue=up_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=1500k name="3. youtube" packet-mark=youtube_up parent=\ "5. Upload Traffic" priority=7 queue=up_pcq add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \ max-limit=1M name="4. extensi" packet-mark=extensi_up parent=\ "5. Upload Traffic" priority=8 queue=up_pcq
0 komentar:
Posting Komentar