BorNEO-BoRNeo

CLEAR LOG DISK MIKROTIK

2012-06-29T14:05:00.005+07:00

Oleh AnJeLaNeT Palangkaraya

FORUM WARNET-MIKROTIK-LINUX PALANGKARAYA

mungkin ilmu yg sudah basi, tapi kadang kita sendiri lupa menghafal perintah2nya, jadi klo nanti lupa beneran inget dengan forum diskusi kita ini...
ooo...di diforum ada caranya,

buka winbox & buka new terminal, selanjutnya ketikan perintah berikut :

/system logging action
set memory memory-lines=1
/system logging action
set memory memory-lines=100

atau kita bisa membuat sebuah script :
WINBOX --->> SYSTEM ------> SCRIPTS

add name="Clear Log" policy=ftp,reboot,read,write,policy,winbox,password,sniff \
source=\
"/system logging action\r\
\nset 1 disk-lines=1\r\
\nset 1 disk-lines=100"

buka NEW TERMINAL :

/system logging action> print
Flags: * - default
# NAME TARGET REMOTE
0 * memory memory
1 * disk disk
2 * echo echo
3 * remote remote 0.0.0.0

ketikan PERINTAH :

/system logging action
set memory memory-lines=1
/system logging action
set memory memory-lines=100

/system logging action
set disk disk-lines=1
/system logging action
set disk disk-lines=100

mudah2an bermanfaat, meski sedikit.

IP FIREWALL FILTER RULES

2012-06-29T14:03:00.000+07:00

Oleh AnJeLaNeT Palangkaraya

FORUM WARNET-MIKROTIK-LINUX PALANGKARAYA

Tut's berikut disusun kembali dengan sumber artikel dari FMI ( 'c0nf' untuk Blok Virusnya) dan dari berbagai sumber artikel yg pernah dibaca penulis, Thanks All.

/ ip firewall filter
add chain=forward connection-state=established action=accept comment="ALLOW ESTABILISHED" disabled=no
add chain=forward connection-state=related action=accept comment="ALLOW RELATED" disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment="Drop Messenger Worm" disabled=no
add chain=forward connection-state=invalid action=drop comment="drop invalid connections" disabled=no

add chain=virus protocol=tcp dst-port=135-139 action=drop comment="Drop Blaster Worm" disabled=no
add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment="Worm" disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop comment="Drop Blaster Worm" disabled=no
add chain=virus protocol=udp dst-port=445 action=drop comment="Drop Blaster Worm" disabled=no
add chain=virus protocol=tcp dst-port=593 action=drop comment="________" disabled=no
add chain=virus protocol=tcp dst-port=1024-1030 action=drop comment="________" disabled=no
add chain=virus protocol=tcp dst-port=1080 action=drop comment="Drop MyDoom" disabled=no
add chain=virus protocol=tcp dst-port=1214 action=drop comment="________" disabled=no
add chain=virus protocol=tcp dst-port=1363 action=drop comment="ndm requester" disabled=no
add chain=virus protocol=tcp dst-port=1364 action=drop comment="ndm server" disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment="screen cast" disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx" disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment="cichlid" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment="Bagle Virus" disabled=no
add chain=virus protocol=tcp dst-port=2283 action=drop comment="Drop Dumaru.Y" disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop comment="Drop Beagle" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment="Drop Beagle.C-K" disabled=no
add chain=virus protocol=tcp dst-port=3127 action=drop comment="Drop MyDoom" disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop comment="Drop Backdoor OptixPro" disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop comment="Worm" disabled=no
add chain=virus protocol=udp dst-port=4444 action=drop comment="Worm" disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop comment="Drop Sasser" disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop comment="Drop Beagle.B" disabled=no
add chain=virus protocol=tcp dst-port=9898 action=drop comment="Drop Dabber.A-B" disabled=no
add chain=virus protocol=tcp dst-port=10000 action=drop comment="Drop Dumaru" disabled=yes
add chain=virus protocol=tcp dst-port=10080 action=drop comment="Drop MyDoom.B" disabled=no
add chain=virus protocol=tcp dst-port=12345 action=drop comment="Drop NetBus" disabled=no
add chain=virus protocol=tcp dst-port=17300 action=drop comment="Drop Kuang2" disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment="Drop SubSeven" disabled=no
add chain=virus protocol=tcp dst-port=65506 action=drop comment="Drop PhatBot,Agobot,Gaobot" disabled=no
add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment="Worm"
add chain=virus protocol=udp dst-port=12667 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=27665 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=31335 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=27444 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=34555 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=35555 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=27444 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=27665 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=31335 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=31846 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=34555 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=35555 action=drop comment="Trinoo" disabled=no

WEBMAIL DLL
add chain=forward protocol=tcp dst-port=995 action=drop comment="WEBMAIL-DLL" disabled=no
add chain=forward protocol=tcp dst-port=25 action=drop comment="------------" disabled=no
add chain=forward protocol=tcp dst-port=465 action=drop comment="-----------" disabled=no
add chain=forward protocol=tcp dst-port=587 action=drop comment="-----------" disabled=no
add chain=forward protocol=tcp dst-port=110 action=drop comment="-----------" disabled=no

add chain=forward action=jump jump-target=virus comment="jump to the virus chain" disabled=no
add chain=input connection-state=established action=accept comment="Accept established connections" disabled=no
add chain=input connection-state=related action=accept comment="Accept related connections" disabled=no
add chain=input connection-state=invalid action=drop comment="Drop invalid connections" disabled=no
add chain=input protocol=udp action=accept comment="UDP" disabled=no
add chain=input protocol=icmp limit=50/5s,2 action=accept comment="Allow limited pings" disabled=no
add chain=input protocol=icmp action=drop comment="Drop excess pings" disabled=no
add chain=input protocol=tcp dst-port=21 src-address-list=LAN-NeT action=accept comment="FTP" disabled=no
add chain=input protocol=tcp dst-port=22 src-address-list=LAN-NeT action=accept comment="SSH for secure shell" disabled=no
add chain=input protocol=tcp dst-port=23 src-address-list=LAN-NeT action=accept comment="Telnet" disabled=no
add chain=input protocol=tcp dst-port=80 src-address-list=LAN-NeT action=accept comment="Web" disabled=no
add chain=input protocol=tcp dst-port=8291 src-address-list=LAN-NeT action=accept comment="winbox" disabled=no
add chain=input protocol=tcp dst-port=25 src-address-list=LAN-NeT action=accept comment="Allow SMTP-Email" disabled=no
add chain=input protocol=tcp dst-port=1723 action=accept comment="pptp-server" disabled=no
add chain=input src-address-list=LAN-NeT action=accept comment="From LAN-NeT" disabled=no
add chain=input action=log log-prefix="DROP INPUT" comment="Log everything else" disabled=no
add chain=input action=drop comment="Drop everything else" disabled=no

Drop port scanners
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w \
comment="PORT SCANNER" disabled=no
add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="NMAP FIN Stealth scan"
add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="SYN/FIN scan"
add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="SYN/RST scan"
add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="FIN/PSH/URG scan"
add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="ALL/ALL scan"
add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="NMAP NULL scan"
add chain=input src-address-list="port scanners" action=drop comment="dropping port scanners" \
disabled=no

LaN-NeT = Nama IP Address List untuk Jaringan Lokal

PERHATIAN, Jika anda menggunakan rules di atas, kemungkinan besar routerboard hanya bisa diremote dari dalam jaringan saja, dari luar jaringan silahkan ditest sendiri.

CLEAR CACHE_MEM PROXY SERVER

2012-06-29T13:58:00.001+07:00

Oleh AnJeLa-NeT Palangkaraya

FORUM WARNET-MIKROTIK-LINUX PALANGKARAYA

Proxy Server dengan OS ubuntu server kadang menjadi momok tersendiri karena proxy server akan menggunakan memory buat OS, metadata, object_hit_memory, tcp buffer.
Sebenarnya bukan OS Ubuntu Server saja, OS yg lainnya juga begitu.
Secara logika lebih baik kita mengecilkan 'cache_mem' pada squid.conf - nya, itu yang paling masuk akal.
akan tetapi kadang kita menginginkan kinerja proxy server yang optimal (atau kadang enggak tau...ehehee..) sehingga kita bikin cache_mem sebesar RAM yg kita gunakan untuk proxy server.

1. clear pagecache
# echo 1 > /proc/sys/vm/drop_caches

2. clear inodes dan dentries
# echo 2 > /proc/sys/vm/drop_caches

3. clear pagecache, inodes & dentries
# echo 3 > /proc/sys/vm/drop_caches

untuk clear secara periodik, kita bisa membuat 'cron' dengan salah satu perintah di atas:

# crontab -e
* */2 * * * echo 3 > /proc/sys/vm/drop_caches

bentuk 'cron' di atas adalah untuk clear pagecache, inodes & dentries setiap 2 jam sekali.

contoh lain :

# crontab -e
0 6,18 * * * sync
1 6,18 * * * echo 3 > /proc/sys/vm/drop_caches

bentuk 'cron' di atas adalah untuk clear pagecache, inodes & dentries setiap jam 6 pagi dan jam 6 sore.

perhitungan cron :

* * * * * path/to/script
| | | | |_ Hari (minggu = 0, senin = 1, dst...)
| | | |___ Bulan (jan = 1, feb = 2, dst...)
| | |_____ Tanggal (1 - 31, sesuaikan tanggal dalam bulan tsb)
| |_______ Jam (0 - 23) |_________ menit (0 - 59)

kode-kode yang lain :

@reboot (jalan pada waktu start up)
@yearly (jalan sekali dalam satu tahun)
@annually (sama seperti @yearly)
@monthly (jalan sekali dalam satu bulan)
@weekly (jalan sekali dalam satu minggu)
@daily (jalan sekali dalam satu hari)
@midnight (sama seperti @daily)
@hourly (jalan sekali dalam satu jam)

contoh:
@daily echo 3 > /proc/sys/vm/drop_caches

maka proses clear akan jalan setiap hari sekali.

cek Usage memory :

# uptime
# free -m

# squidclient mgr:info |grep "Storage Mem size:"
# echo 3 > /proc/sys/vm/drop_caches
# squidclient mgr:info |grep "Storage Mem size:"

Credit : Kweteng, Untitle, Dhopack, electrix_85 from FMI.
Thanks Guy's

OPTIMALISASI FILE DESCRIPTOR

2012-06-29T13:52:00.000+07:00

Oleh AnJeLa-NeT Palangkaraya

FORUM WARNET-MIKROTIK-LINUX PALANGKARAYA

Proses berikut dilakukan setelah melakukan perintah :

   # sudo apt-get install squid
   # sudo apt-get install squid squidclient squid-cgi

DAN SEBELUM PROSES COMPILE

# ulimit -HSn 65536

# echo 65536 > /proc/sys/fs/file-max
# echo "*        soft       nofile          65536" >> /etc/security/limits.conf
# echo "*        hard       nofile          65536" >> /etc/security/limits.conf
# echo "root    soft       nofile          65536" >> /etc/security/limits.conf

# echo "root       hard       nofile          65536" >> /etc/security/limits.conf
# echo "proxy   soft       nofile          65536" >> /etc/security/limits.conf
# echo "proxy   hard       nofile          65536" >> /etc/security/limits.conf
# echo "session required        pam_limits.so" >> /etc/pam.d/common-session

   # modprobe ip_conntrack

   kemudian tambahkan ip_contrack di /etc/modules
   # nano /etc/modules

   tambahkan kalimat berikut baris paling bawah :

   ip_conntrack

   Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

   # nano /etc/default/squid

   Ubah opsi SQUID_MAXFD=1024 menjadi :

   SQUID_MAXFD=4096

   Ubah opsi #define __FD_SETSIZE 1024 dengan mengetik perintah berikut :

   # nano /usr/include/linux/posix_types.h

   Cari tulisan #define __FD_SETSIZE 1024 ubah menjadi #define __FD_SETSIZE 65536

   Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

   Cari tulisan #define __FD_SETSIZE 1024 dengan mengetik perintah berikut :

   # nano /usr/include/bits/typesizes.h

   Cari tulisan #define __FD_SETSIZE 1024 ubah menjadi #define __FD_SETSIZE 65536

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

'BARU DILANJUTKAN PROSES COMPILE & PROSES LAIN INSTALASI SQUID PROXY.....'
JIKA DILAKUKAN SETELAH PROSES INSTALASI, MAKA HASIL DARI MAXIMUM FILE DESCRIPTOR AKAN KEMBALI KE DEFAULTNYA.

contoh hasil :

root@alwi:~# squidclient mgr:info
HTTP/1.0 200 OK
Date: Wed, 05 Oct 2010 21:50:18 GMT
Content-Type: text/plain
Expires: Wed, 05 Oct 2010 21:50:18 GMT
X-Cache: MISS from anjelanet
X-Cache-Lookup: MISS from anjelanet:3128
Via: 1.0 anjelanet:3128 (Lusca/LUSCA_FMI)
Connection: close

Squid Object Cache: Version LUSCA_FMI
Start Time:     Wed, 05 Oct 2010 21:50:15 GMT
Current Time:   Wed, 05 Oct 2010 21:50:18 GMT
Connection information for squid:
        Number of clients accessing cache:      0
        Number of HTTP requests received:       0
        Number of ICP messages received:        0
        Number of ICP messages sent:    0
        Number of queued ICP replies:   0
        Number of HTCP messages received:       0
        Number of HTCP messages sent:   0
        Request failure ratio:   0.00
        Average HTTP requests per minute since start:   0.0
        Average ICP messages per minute since start:    0.0
        Select loop called: 158 times, 19.980 ms avg
Cache information for squid:
        Request Hit Ratios:     5min: 0.0%, 60min: 0.0%
        Byte Hit Ratios:        5min: -0.0%, 60min: -0.0%
        Request Memory Hit Ratios:      5min: 0.0%, 60min: 0.0%
        Request Disk Hit Ratios:        5min: 0.0%, 60min: 0.0%
        Storage Swap size:      1552368 KB
        Storage Mem size:       180 KB
        Mean Object Size:       30.69 KB
        Requests given to unlinkd:      0
Median Service Times (seconds) 5 min    60 min:
        HTTP Requests (All):   0.00000 0.00000
        Cache Misses:          0.00000 0.00000
        Cache Hits:            0.00000 0.00000
        Near Hits:             0.00000 0.00000
        Not-Modified Replies: 0.00000 0.00000
        DNS Lookups:           0.00000 0.00000
        ICP Queries:           0.00000 0.00000
Resource usage for squid:
        UP Time:        3.157 seconds
        CPU Time:       0.676 seconds
        CPU Usage:      21.42%
        CPU Usage, 5 minute avg:        0.00%
        CPU Usage, 60 minute avg:       0.00%
        Process Data Segment Size via sbrk(): 9060 KB
        Maximum Resident Size: 62720 KB
        Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
        Total space in arena:    9060 KB
        Ordinary blocks:         8958 KB      3 blks
        Small blocks:               0 KB      0 blks
        Holding blocks:         55320 KB      6 blks
        Free Small blocks:          0 KB
        Free Ordinary blocks:     101 KB
        Total in use:           64278 KB 100%
        Total free:               101 KB 0%
        Total size:             64380 KB
Memory accounted for:
        Total accounted:         3668 KB
        memPoolAlloc calls: 203653
        memPoolFree calls: 101583
File descriptor usage for squid:
        Maximum number of file descriptors:   65536
        Largest file desc currently in use:     33
        Number of file desc currently in use:   26
        Files queued for open:                   0
        Available number of file descriptors: 65510
        Reserved number of file descriptors:   100
        Store Disk files open:                   0
        IO loop method:                     epoll
Internal Data Structures:
         50610 StoreEntries
            27 StoreEntries with MemObjects
            26 Hot Object Cache Items
         50583 on-disk objects
root@alwi:~#

LB 4 LINE ISP+PROXY EKSTERNAL

2012-06-28T00:20:00.001+07:00

Oleh Anjela-net Palangkaraya di FORUM WARNET-MIKROTIK-LINUX PALANGKARAYA

IP ADDRESS IN MODEM ADSL MODE BRIDGE :
Modem1 : 192.168.3.1
Modem2 : 192.168.4.1
Modem3 : 192.168.5.1
Modem4 : 192.168.6.1

IP ADDRESS IN CPU PROXY SERVER :
192.168.27.27

IP ADDRESS IN MIKROTIK:
Modem1 : 192.168.3.2/24
Modem2 : 192.168.4.2/24
Modem3 : 192.168.5.2/24
LAN : 192.168.1.1/24
Proxy : 192.168.27.1/24

INTERFACE NAME :
ether1 : Modem1
ether2 : Modem2
ether3 : Modem3
ether4 : Modem4
ether5 : LAN
ether6 : Proxy

INTERFACE LIST :
/interface
add name="Modem1" type="ether" mtu=1500 l2mtu=1524
add name="Modem2" type="ether" mtu=1500 l2mtu=1524
add name="Modem3" type="ether" mtu=1500 l2mtu=1524
add name="Modem4" type="ether" mtu=1500 l2mtu=1524
add name="LAN" type="ether" mtu=1500 l2mtu=1524
add name="Proxy" type="ether" mtu=1500 l2mtu=1524

IP ADDRESS LIST :
/ip addr
add address=192.168.3.2/24 network=192.168.3.0 interface=Modem1 actual-interface=Modem1
add address=192.168.4.2/24 network=192.168.4.0 interface=Modem2 actual-interface=Modem2
add address=192.168.5.2/24 network=192.168.5.0 interface=Modem3 actual-interface=Modem3
add address=192.168.6.2/24 network=192.168.6.0 interface=Modem3 actual-interface=Modem4
add address=192.168.1.1/24 network=192.168.1.0 interface=LAN actual-interface=LAN
add address=192.168.27.1/24 network=192.168.27.0 interface=Proxy actual-interface=Proxy

PPP-PPPoE CLIENT :
/interface pppoe-client

add name="pppoe-speedy1" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem1 user="*******@telkom.net" \
password="******" profile=default service-name="anjelanet1" ac-name="" \
add-default-route=no dial-on-demand=no use-peer-dns=no \
allow=pap,chap,mschap1,mschap2

add name="pppoe-speedy2" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem2 user="********@telkom.net" \
password="********" profile=default service-name="anjelanet2" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

add name="pppoe-speedy3" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem3 user="********@telkom.net" \
password="********" profile=default service-name="anjelanet3" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2
add name="pppoe-speedy4" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem3 user="********@telkom.net" \
password="********" profile=default service-name="anjelanet4" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

NAT :
/ip fi nat
add chain=dstnat action=dst-nat to-addresses=192.168.27.27 to-ports=3128 protocol=tcp dst-address-list=!Local+Proxy \
in-interface=LAN dst-port=80,81,8080,3128 comment="TRANSPARENT PROXY"
add chain=srcnat action=masquerade out-interface=pppoe-speedy1 comment="MASQUERADE"
add chain=srcnat action=masquerade out-interface=pppoe-speedy2
add chain=srcnat action=masquerade out-interface=pppoe-speedy3
add chain=srcnat action=masquerade out-interface=pppoe-speedy4
add chain=srcnat action=masquerade out-interface=Modem1
add chain=srcnat action=masquerade out-interface=Modem2
add chain=srcnat action=masquerade out-interface=Modem3
add chain=srcnat action=masquerade out-interface=Modem4

add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=LAN dst-port=53 comment="TRANSPARENT DNS"
add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=LAN dst-port=53
add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=Proxy dst-port=53
add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=Proxy dst-port=53

IP FIREWALL ADDRESS-LIST
/ip fi addr

add list=LAN-NeT address=192.168.1.0/24
add list=Proxy-NeT address=192.168.27.0/24
add list=Local+Proxy address=192.168.1.0/24
add list=Local+Proxy address=192.168.27.0/24

IP FIREWALL MANGLE
/ip fi ma

ROUTING :
add chain=prerouting action=mark-routing new-routing-mark=Poker passthrough=yes protocol=tcp \
dst-port=843,9339 comment="Router Poker"
add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp \
dst-address=203.89.146.0/23 dst-port=49100 comment="Router POINTBLANK"
add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=udp \
dst-address=203.89.146.0/23 dst-port=40000-40010
add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp \
dst-address=203.89.146.0/23 dst-port=39190
add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=tcp \
dst-address=203.89.147.0/24 dst-port=4300,5300,10001,14009-14010,16052,16073 comment="Router ALL GAME"
add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=udp \
dst-address=203.89.147.0/24 dst-port=14010
add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=tcp \
dst-port=4403,4410,8401,8406,9110,13008,16666,17730,17745,18900,31719,46113,49309
add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=udp \
dst-port=12020-12080,13000-13080,17001,21850,21891
add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=tcp \
dst-port=843,9339,17730,17745,49309

PPPoE CONN :
add chain=input action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes \
connection-state=new in-interface=pppoe-speedy1 comment="PPPoE CONN"
add chain=input action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes \
connection-state=new in-interface=pppoe-speedy2
add chain=input action=mark-connection new-connection-mark=pppoe3-conn passthrough=yes \
connection-state=new in-interface=pppoe-speedy3
add chain=input action=mark-connection new-connection-mark=pppoe4-conn passthrough=yes \
connection-state=new in-interface=pppoe-speedy4
add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn \
passthrough=yes connection-state=established in-interface=pppoe-speedy1
add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn \
passthrough=yes connection-state=established in-interface=pppoe-speedy2
add chain=prerouting action=mark-connection new-connection-mark=pppoe3-conn \
passthrough=yes connection-state=established in-interface=pppoe-speedy3
add chain=prerouting action=mark-connection new-connection-mark=pppoe4-conn \
passthrough=yes connection-state=established in-interface=pppoe-speedy4
add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn \
passthrough=yes connection-state=related in-interface=pppoe-speedy1
add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn \
passthrough=yes connection-state=related in-interface=pppoe-speedy2
add chain=prerouting action=mark-connection new-connection-mark=pppoe3-conn \
passthrough=yes connection-state=related in-interface=pppoe-speedy3
add chain=prerouting action=mark-connection new-connection-mark=pppoe4-conn \
passthrough=yes connection-state=related in-interface=pppoe-speedy4
add chain=output action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=no \
connection-mark=pppoe1-conn
add chain=output action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=no \
connection-mark=pppoe2-conn
add chain=output action=mark-routing new-routing-mark=pppoe-speedy3 passthrough=no \
connection-mark=pppoe3-conn
add chain=output action=mark-routing new-routing-mark=pppoe-speedy4 passthrough=no \
connection-mark=pppoe4-conn

HTTP CONN :
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 \
passthrough=yes protocol=tcp src-address-type="" \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:4/0 comment="HTTP CONN"
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 \
passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy \
in-interface=Proxy per-connection-classifier=both-addresses-and-ports:4/1
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe3 \
passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy \
in-interface=Proxy per-connection-classifier=both-addresses-and-ports:4/2
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe3 \
passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy \
in-interface=Proxy per-connection-classifier=both-addresses-and-ports:4/3

add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 \
passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy \
in-interface=LAN dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:4/0

add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 \
passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy \
in-interface=LAN dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:4/1
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe3 \
passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy \
in-interface=LAN dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:4/2
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe3 \
passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy \
in-interface=LAN dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:4/3

MARK-HTTP ROUTE :
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe1 comment="MARK-HTTP ROUTE"

add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe2

add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy3 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe3
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy3 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe4

NON-HTTP CONN :
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:4/0 comment="NON-HTTP CONN"
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:4/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:4/2
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:4/3

add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:4/0
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:4/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:4/2
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:4/3

add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:4/0
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:4/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:4/2
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:4/3

add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:4/0 \
add hain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:4/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:4/2
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:4/3

MARK NON HTTP ROUTE :
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe1 comment="MARK NON HTTP ROUTE"
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe2
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy3 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe3
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy4 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe4

CRITICAL CONN :
add chain=postrouting action=change-dscp new-dscp=1 protocol=tcp dst-port=53 comment="CRITICAL CONN"
add chain=postrouting action=change-dscp new-dscp=1 protocol=icmp
add chain=postrouting action=change-dscp new-dscp=1 protocol=udp dst-port=53
add chain=postrouting action=mark-connection new-connection-mark=critical-conn passthrough=yes dscp=1
add chain=postrouting action=mark-packet new-packet-mark=critical-pkt passthrough=no connection-mark=critical-conn

PROXY-HIT :
add chain=prerouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no protocol=tcp \
in-interface=Proxy dscp=12 comment="PROXY-HIT"
add chain=postrouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no out-interface=LAN dscp=12

IP ROUTE :
/ip r
add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 gateway-status=pppoe-speedy1 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 comment="Default-Route-speedy1-Distance-1"

add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 gateway-status=pppoe-speedy2 reachable check-gateway=ping distance=2 \
scope=30 target-scope=10 routing-mark=PointBlank comment="Default-Route-speedy2-Distance-2"

add dst-address=0.0.0.0/0 gateway=pppoe-speedy3 gateway-status=pppoe-speedy3 reachable check-gateway=ping distance=3 \
scope=30 target-scope=10 routing-mark=All Game comment="Default-Route-speedy3-Distance-3"

add dst-address=0.0.0.0/0 gateway=pppoe-speedy3 gateway-status=pppoe-speedy3 reachable check-gateway=ping distance=3 \
scope=30 target-scope=10 routing-mark=Poker comment="Default-Route-speedy4-Distance-4"

add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 gateway-status=pppoe-speedy1 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy1

add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 gateway-status=pppoe-speedy2 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy2

add dst-address=0.0.0.0/0 gateway=pppoe-speedy3 gateway-status=pppoe-speedy3 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy3

add dst-address=0.0.0.0/0 gateway=pppoe-speedy4 gateway-status=pppoe-speedy3 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy4

LB 3 LINE ISP+ PROXY EKSTERNAL

2012-06-28T00:13:00.001+07:00

Oleh Anjela-net Palangkaraya di FORUM WARNET-MIKROTIK-LINUX PALANGKARAYA
ISP : TELKOMSPEEDY 2Mbps (Paket Eksekutif) 3 LINE

IP ADDRESS IN MODEM ADSL MODE BRIDGE :
Modem1 : 192.168.3.1
Modem2 : 192.168.4.1
Modem3 : 192.168.5.1

IP ADDRESS IN CPU PROXY SERVER :
192.168.27.27

IP ADDRESS IN MIKROTIK:
Modem1 : 192.168.3.2/24
Modem2 : 192.168.4.2/24
LAN : 192.168.1.1/24
Proxy : 192.168.27.1/24
Modem3 : 192.168.5.12/24

INTERFACE NAME :
ether1 : Modem1
ether2 : Modem2
ether3 : Modem3
ether4 : LAN
ether5 : Proxy

INTERFACE LIST :
/interface
add name="Modem1" type="ether" mtu=1500 l2mtu=1524
add name="Modem2" type="ether" mtu=1500 l2mtu=1524
add name="Modem3" type="ether" mtu=1500 l2mtu=1524
add name="LAN" type="ether" mtu=1500 l2mtu=1524
add name="Proxy" type="ether" mtu=1500 l2mtu=1524

IP ADDRESS LIST :
/ip addr
add address=192.168.3.2/24 network=192.168.3.0 interface=Modem1 actual-interface=Modem1
add address=192.168.4.2/24 network=192.168.4.0 interface=Modem2 actual-interface=Modem2
add address=192.168.5.2/24 network=192.168.5.0 interface=Modem3 actual-interface=Modem3
add address=192.168.1.1/24 network=192.168.1.0 interface=LAN actual-interface=LAN
add address=192.168.27.1/24 network=192.168.27.0 interface=Proxy actual-interface=Proxy

PPP-PPPoE CLIENT :
/interface pppoe-client
add name="pppoe-speedy1" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem1 user="*******@telkom.net" \
password="******" profile=default service-name="anjelanet1" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

add name="pppoe-speedy2" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem2 user="********@telkom.net" \
password="********" profile=default service-name="anjelanet2" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

add name="pppoe-speedy3" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem3 user="********@telkom.net" \
password="********" profile=default service-name="anjelanet3" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

********* = ISI DGN USERNAME & PASSWORD SPEEDY ANDA

IP DNS :
Gunakan IP openDNS (Jika anda ingin memilah situs2 yang akan di blok) : 208.67.222.222 208.67.220.220
Gunakan IP DNS Nawala (Jika anda ingin otomatis situs2 yang akan di blok terutama situs2 porno) : 180.131.144.144 180.131.145.145
Gunakan IP DNS ISP anda (IP DNS terbaik adalah IP DNS dengan loop terpendek yaitu IP DNS ISP di wilayah anda)

IP DHCP SERVER :
DHCP-->DHCP Setup-->DHCP Server Interface=LAN-->NEXT..............FINISH
Gunakan IP openDNS (Jika anda ingin memilah situs2 yang akan di blok) : 208.67.222.222 208.67.220.220
Gunakan IP DNS Nawala (Jika anda ingin otomatis situs2 yang akan di blok terutama situs2 porno) : 180.131.144.144 180.131.145.145

IP FIRWALL NAT :
/ip fi nat
add chain=dstnat action=dst-nat to-addresses=192.168.27.27 to-ports=3128 protocol=tcp dst-address-list=!Local+Proxy \
in-interface=LAN dst-port=80,81,8080,3128 comment="TRANSPARENT PROXY"

add chain=srcnat action=masquerade out-interface=pppoe-speedy1 comment="MASQUERADE"
add chain=srcnat action=masquerade out-interface=pppoe-speedy2
add chain=srcnat action=masquerade out-interface=pppoe-speedy3
add chain=srcnat action=masquerade out-interface=Modem1
add chain=srcnat action=masquerade out-interface=Modem2
add chain=srcnat action=masquerade out-interface=Modem3

add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=LAN dst-port=53 comment="TRANSPARENT DNS"
add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=LAN dst-port=53
add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=Proxy dst-port=53
add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=Proxy dst-port=53
add chain=dstnat action=dst-nat to-addresses=192.168.27.27 to-ports=22 protocol=tcp dst-address="IP PUBLIK" \
dst-port=2221 comment="SSH PROXY OUT REMOTE TO WINsCP"

"IP PUBLIK" : Isi dengan IP Publik Internet Speedy anda

IP FIREWALL ADDRESS-LIST
/ip fi addr
add list=LAN-NeT address=192.168.1.0/24
add list=Proxy-NeT address=192.168.27.0/24
add list=Local+Proxy address=192.168.1.0/24
add list=Local+Proxy address=192.168.27.0/24

IP FIREWALL MANGLE :
/ip fi ma

Routing :
add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp \
dst-address=203.89.146.0/23 dst-port=49100 comment="Router POINTBLANK"

add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=udp \
dst-address=203.89.146.0/23 dst-port=40000-40010

add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp \
dst-address=203.89.146.0/23 dst-port=39190

add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=tcp \
dst-address=203.89.147.0/24 dst-port=4300,5300,10001,14009-14010,16052,16073 comment="Router ALL GAME"

add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=udp \
dst-address=203.89.147.0/24 dst-port=14010

add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=tcp \
dst-port=4403,4410,8401,8406,9110,13008,16666,17730,17745,18900,31719,46113,49309
add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=udp \
dst-port=12020-12080,13000-13080,17001,21850,21891

add chain=prerouting action=mark-routing new-routing-mark=All Game passthrough=yes protocol=tcp \
dst-port=843,9339,17730,17745,49309

PPPoE CONN :
add chain=input action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=new \
in-interface=pppoe-speedy1 comment="PPPoE CONN"
add chain=input action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=new \
in-interface=pppoe-speedy2
add chain=input action=mark-connection new-connection-mark=pppoe3-conn passthrough=yes connection-state=new \
in-interface=pppoe-speedy3
add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=established \
in-interface=pppoe-speedy1
add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=established \
in-interface=pppoe-speedy2
add chain=prerouting action=mark-connection new-connection-mark=pppoe3-conn passthrough=yes connection-state=established \
in-interface=pppoe-speedy3
add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=related \
in-interface=pppoe-speedy1
add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=related \
in-interface=pppoe-speedy2
add chain=prerouting action=mark-connection new-connection-mark=pppoe3-conn passthrough=yes connection-state=related \
in-interface=pppoe-speedy3
add chain=output action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=no connection-mark=pppoe1-conn
add chain=output action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=no connection-mark=pppoe2-conn
add chain=output action=mark-routing new-routing-mark=pppoe-speedy3 passthrough=no connection-mark=pppoe3-conn

HTTP CONN :
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 passthrough=yes protocol=tcp \
src-address-type="" dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:3/0 comment="HTTP CONN"
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:3/1
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:3/2
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:3/0
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:3/1
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:3/2

MARK-HTTP ROUTE :
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe1 comment="MARK-HTTP ROUTE"

add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe2

add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy3 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe3

NON-HTTP CONN :
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:3/0 comment="NON-HTTP CONN"
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:3/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:3/2
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:3/0
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:3/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:3/2
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:3/0
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:3/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:3/2
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:3/0 \
add hain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:3/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe3 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:3/2

MARK NON HTTP ROUTE :
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe1 comment="MARK NON HTTP ROUTE"
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe2
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy3 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe3

CRITICAL CONN :
add chain=postrouting action=change-dscp new-dscp=1 protocol=tcp dst-port=53 comment="CRITICAL CONN"
add chain=postrouting action=change-dscp new-dscp=1 protocol=icmp
add chain=postrouting action=change-dscp new-dscp=1 protocol=udp dst-port=53
add chain=postrouting action=mark-connection new-connection-mark=critical-conn passthrough=yes dscp=1
add chain=postrouting action=mark-packet new-packet-mark=critical-pkt passthrough=no connection-mark=critical-conn

PROXY-HIT :
add chain=prerouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no protocol=tcp \
in-interface=Proxy dscp=12 comment="PROXY-HIT"
add chain=postrouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no out-interface=LAN dscp=12

IP ROUTE :
/ip r

add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 gateway-status=pppoe-speedy1 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 comment="Default-Route-speedy1-Distance-1"

add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 gateway-status=pppoe-speedy2 reachable check-gateway=ping distance=2 \
scope=30 target-scope=10 routing-mark=PointBlank comment="Default-Route-speedy2-Distance-2"

add dst-address=0.0.0.0/0 gateway=pppoe-speedy3 gateway-status=pppoe-speedy3 reachable check-gateway=ping distance=3 \
scope=30 target-scope=10 routing-mark=All Game comment="Default-Route-speedy3-Distance-3"

add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 gateway-status=pppoe-speedy1 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy1

add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 gateway-status=pppoe-speedy2 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy2

add dst-address=0.0.0.0/0 gateway=pppoe-speedy3 gateway-status=pppoe-speedy3 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy3

LB 2 LINE ISP+ PROXY EKSTERNAL

2012-06-27T23:46:00.001+07:00

Berikut adalah contoh setting Routerboard/Mikrotik menggunakan 2 koneksi ISP TelkomSpeedy plus Proxy Server Exkternal. Penerapan mohon disesuaikan dengan kondisi jaringan, IP Address, dan Proxy Server anda.

(Artikel ini saya ambil dari Group Facebook punya saya)

IP ADDRESS IN MODEM ADSL MODE BRIDGE :
Modem1 : 192.168.3.1
Modem2 : 192.168.4.1

IP ADDRESS IN CPU PROXY SERVER :
192.168.27.27

IP ADDRESS IN MIKROTIK:
Modem1 : 192.168.3.2/24
Modem2 : 192.168.4.2/24
LAN : 192.168.1.1/24
Proxy : 192.168.27.1/24

INTERFACE NAME :
ether1 : Modem1
ether2 : Modem2
ether3 : LAN
ether4 : Proxy

INTERFACE LIST :
/interface
add name="Modem1" type="ether" mtu=1500 l2mtu=1524
add name="Modem2" type="ether" mtu=1500 l2mtu=1524
add name="LAN" type="ether" mtu=1500 l2mtu=1524
add name="Proxy" type="ether" mtu=1500 l2mtu=1524

IP ADDRESS LIST :
/ip addr
add address=192.168.3.2/24 network=192.168.3.0 interface=Modem1 actual-interface=Modem1
add address=192.168.4.2/24 network=192.168.4.0 interface=Modem2 actual-interface=Modem2
add address=192.168.1.1/24 network=192.168.1.0 interface=LAN actual-interface=LAN
add address=192.168.27.1/24 network=192.168.27.0 interface=Proxy actual-interface=Proxy

PPP-PPPoE CLIENT :
/interface pppoe-client
add name="pppoe-speedy1" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem1 user="*******@telkom.net" \
password="******" profile=default service-name="anjelanet1" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

add name="pppoe-speedy2" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem2 user="********@telkom.net" \
password="********" profile=default service-name="anjelanet2" ac-name="" add-default-route=no dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

********* = ISI DGN USERNAME & PASSWORD SPEEDY ANDA

IP DNS :
IP--->>DNS--->>SETTING
Gunakan IP openDNS (Jika anda ingin memilah situs2 yang akan di blok melalui akun openDNS) : 208.67.222.222 208.67.220.220
Gunakan IP DNS Nawala (Jika anda ingin otomatis situs2 yang akan di blok terutama situs2 porno) : 180.131.144.144 180.131.145.145
Gunakan IP DNS ISP anda (IP DNS terbaik adalah IP DNS dengan loop terpendek yaitu IP DNS ISP di wilayah anda)

IP DHCP SERVER :
DHCP-->DHCP Setup-->DHCP Server Interface=LAN-->NEXT..............FINISH
Gunakan IP openDNS (Jika anda ingin memilah situs2 yang akan di blok) : 208.67.222.222 208.67.220.220
Gunakan IP DNS Nawala (Jika anda ingin otomatis situs2 yang akan di blok terutama situs2 porno) : 180.131.144.144 180.131.145.145

IP FIRWALL NAT :
/ip fi nat
add chain=dstnat action=dst-nat to-addresses=192.168.27.27 to-ports=3128 protocol=tcp dst-address-list=!Local+Proxy \
in-interface=LAN dst-port=80,81,8080,3128 comment="TRANSPARENT PROXY"

add chain=srcnat action=masquerade out-interface=pppoe-speedy1 comment="MASQUERADE"
add chain=srcnat action=masquerade out-interface=pppoe-speedy2
add chain=srcnat action=masquerade out-interface=Modem1
add chain=srcnat action=masquerade out-interface=Modem2

add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=LAN dst-port=53 comment="TRANSPARENT DNS"
add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=LAN dst-port=53
add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=Proxy dst-port=53
add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=Proxy dst-port=53
add chain=dstnat action=dst-nat to-addresses=192.168.27.27 to-ports=22 protocol=tcp dst-address="IP PUBLIK" \
dst-port=2221 comment="SSH PROXY OUT REMOTE TO WINsCP"
"IP PUBLIK" : Isi dengan IP Publik Internet Speedy anda

IP FIREWALL ADDRESS-LIST
/ip fi addr
add list=LAN-NeT address=192.168.1.0/24
add list=Proxy-NeT address=192.168.27.0/24
add list=Local+Proxy address=192.168.1.0/24
add list=Local+Proxy address=192.168.27.0/24

IP FIREWALL MANGLE :
/ip fi ma

Routing :
add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp \
dst-address=203.89.146.0/23 dst-port=49100 comment="Router POINTBLANK"
add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=udp \
dst-address=203.89.146.0/23 dst-port=40000-40010
add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp \
dst-address=203.89.146.0/23 dst-port=39190

PPPoE CONN :
add chain=input action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=new \
in-interface=pppoe-speedy1 comment="PPPoE CONN"
add chain=input action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=new \
in-interface=pppoe-speedy2
add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=established \
in-interface=pppoe-speedy1
add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=established \
in-interface=pppoe-speedy2
add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=related \
in-interface=pppoe-speedy1
add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=related \
in-interface=pppoe-speedy2

add chain=output action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=no connection-mark=pppoe1-conn
add chain=output action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=no connection-mark=pppoe2-conn

HTTP CONN :
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 passthrough=yes protocol=tcp \
src-address-type="" dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:2/0 comment="HTTP CONN"
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:2/1
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:2/0
add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:2/1

MARK-HTTP ROUTE :
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe1 comment="MARK-HTTP ROUTE"
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=Proxy \
connection-mark=http-pppoe2

NON-HTTP CONN :
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:2/0 comment="NON-HTTP CONN"
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 \
per-connection-classifier=both-addresses-and-ports:2/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:2/0
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 \
per-connection-classifier=both-addresses-and-ports:2/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:2/0
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp \
dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy \
per-connection-classifier=both-addresses-and-ports:2/1
add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:2/0 \
add hain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp \
dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:2/1

MARK NON HTTP ROUTE :
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe1 comment="MARK NON HTTP ROUTE"
add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=LAN \
connection-mark=non-http-pppoe2

CRITICAL CONN :
add chain=postrouting action=change-dscp new-dscp=1 protocol=tcp dst-port=53 comment="CRITICAL CONN"
add chain=postrouting action=change-dscp new-dscp=1 protocol=icmp
add chain=postrouting action=change-dscp new-dscp=1 protocol=udp dst-port=53
add chain=postrouting action=mark-connection new-connection-mark=critical-conn passthrough=yes dscp=1
add chain=postrouting action=mark-packet new-packet-mark=critical-pkt passthrough=no connection-mark=critical-conn

PROXY-HIT :
add chain=prerouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no protocol=tcp \
in-interface=Proxy dscp=12 comment="PROXY-HIT"
add chain=postrouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no out-interface=LAN dscp=12

IP ROUTE :
/ip r
add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 gateway-status=pppoe-speedy1 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 comment="Default-Route-speedy1-Distance-1"
add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 gateway-status=pppoe-speedy2 reachable check-gateway=ping distance=2 \
scope=30 target-scope=10 routing-mark=PointBlank comment="Default-Route-speedy2-Distance-2"
add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 gateway-status=pppoe-speedy1 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy1
add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 gateway-status=pppoe-speedy2 reachable check-gateway=ping distance=1 \
scope=30 target-scope=10 routing-mark=pppoe-speedy2

MIKROTIK 1 ISP+PROXY EKSTERNAL

2012-06-27T22:49:00.000+07:00

Berikut adalah contoh setting Routerboard/Mikrotik menggunakan 1 koneksi ISP TelkomSpeedy plus Proxy Server Exkternal. Penerapan mohon disesuaikan dengan kondisi jaringan, IP Address, dan Proxy Server anda.

(Artikel ini saya ambil dari Group Facebook punya saya)

IP ADDRESS IN MODEM ADSL MODE BRIDGE :
Modem : 192.168.3.1
IP ADDRESS IN CPU PROXY SERVER :
192.168.27.27

IP ADDRESS IN MIKROTIK:
Modem : 192.168.3.2/24

INTERFACE NAME :
ether1 : Modem
ether2 : LAN
ether3 : Proxy

INTERFACE LIST :
/interface
add name="Modem" type="ether" mtu=1500 l2mtu=1524
add name="LAN" type="ether" mtu=1500 l2mtu=1524
add name="Proxy" type="ether" mtu=1500 l2mtu=1524

IP ADDRESS LIST :
/ip addr

add address=192.168.3.2/24 network=192.168.3.0 interface=Modem1 actual-interface=Modem
add address=192.168.1.1/24 network=192.168.1.0 interface=LAN actual-interface=LAN
add address=192.168.27.1/24 network=192.168.27.0 interface=Proxy actual-interface=Proxy

PPP-PPPoE CLIENT :
/interface pppoe-client
add name="pppoe-speedy1" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem user="*********@telkom.net" \
password="******" profile=default service-name="AnJeLaNeT" ac-name="" add-default-route=yes dial-on-demand=no \
use-peer-dns=no allow=pap,chap,mschap1,mschap2

********* = ISI DGN USERNAME & PASSWORD SPEEDY ANDA

IP DNS :
Gunakan IP openDNS (Jika anda ingin memilah situs2 yang akan di blok) : 208.67.222.222 208.67.220.220
Gunakan IP DNS Nawala (Jika anda ingin otomatis situs2 yang akan di blok terutama situs2 porno) : 180.131.144.144 180.131.145.145
Gunakan IP DNS ISP anda (IP DNS terbaik adalah IP DNS dengan loop terpendek yaitu IP DNS ISP di wilayah anda)

IP DHCP SERVER :
DHCP-->DHCP Setup-->DHCP Server Interface=LAN-->NEXT..............FINISH
Gunakan IP openDNS (Jika anda ingin memilah situs2 yang akan di blok) : 208.67.222.222 208.67.220.220
Gunakan IP DNS Nawala (Jika anda ingin otomatis situs2 yang akan di blok terutama situs2 porno) : 180.131.144.144 180.131.145.145

IP FIRWALL NAT :
/ip fi nat

TRANSPARENT PROXY
add chain=dstnat action=dst-nat to-addresses=192.168.27.27 to-ports=3128 protocol=tcp src-address-list=LAN-NeT \
dst-address-list=!Proxy-NeT in-interface=LAN dst-port=80,81,8081,8080,3128

MASQUERADE
add chain=srcnat action=masquerade out-interface=pppoe-speedy1
add chain=srcnat action=masquerade out-interface=Modem

Transparent DNS
add chain=dstnat action=redirect to-ports=53 protocol=udp dst-port=53
add chain=dstnat action=redirect to-ports=53 protocol=tcp dst-port=53

CEK MODEM
/ip fir nat
add chain=srcnat action=masquerade disabled=no dst-address=192.168.3.1/24 out-interface=Modem comment="CEK MODEM"

SSH PROXY OUT REMOTE TO WINsCP
add chain=dstnat action=dst-nat to-addresses=192.168.27.27 to-ports=22 protocol=tcp dst-address="IP PUBLIK" \
dst-port=2221 comment="SSH PROXY OUT REMOTE TO WINsCP"

"IP PUBLIK" : Isi dengan IP Publik Internet Speedy anda

IP FIREWALL ADDRESS-LIST
/ip fi addr

add list=LAN-NeT address=192.168.1.0/24
add list=Proxy-NeT address=192.168.27.0/24

Tambahan :
add list=Games address=203.89.146.0/23 comment="Gemscool"
add list=Games address=203.89.147.0/24 comment="Gemscool"
add list=Games address=203.89.146.156 comment="Gemscool"
add list=Games address=203.89.146.158 comment="Gemscool"
add list=Games address=203.89.146.166 comment="Gemscool"
add list=Games address=203.89.147.11 comment="Gemscool"
add list=Games address=203.89.146.99 comment="Gemscool"
add list=Games address=203.89.147.31 comment="Gemscool"
add list=Games address=203.89.146.130 comment="Gemscool"
add list=Games address=202.93.20.0/23 comment="Lytogame"
add list=Games address=202.93.21.0/24 comment="Lytogame"
add list=Games address=202.43.171.0/24 comment="Lytogame"
add list=Games address=202.93.16.0/24 comment="Lytogame"
add list=Games address=202.43.167.72 comment="Lytogame"
add list=Games address=202.93.20.253 comment="Lytogame"
add list=Games address=202.93.17.197 comment="Lytogame"
add list=Games address=117.103.58.198 comment="Lytogame"
add list=Games address=202.93.17.219 comment="Lytogame"
add list=Games address=202.103.21.84 comment="Lytogame"
add list=Games address=202.93.21.250 comment="Lytogame"
add list=Games address=202.93.21.251 comment="Lytogame"
add list=Games address=202.93.21.142 comment="Lytogame"
add list=Games address=202.93.21.244 comment="Lytogame"
add list=Games address=202.93.17.216 comment="Lytogame"
add list=Games address=122.102.49.0/24 comment="Megaxus"
add list=Games address=122.102.51.0/24 comment="Megaxus"
add list=Games address=122.102.53.0/24 comment="Megaxus"
add list=Games address=122.102.51.19 comment="Megaxus"
add list=Games address=122.102.51.17 comment="Megaxus"
add list=Games address=122.102.49.67 comment="Megaxus"
add list=Games address=122.102.49.132 comment="Megaxus"
add list=Games address=122.102.49.202 comment="Megaxus"
add list=Games address=122.102.53.4 comment="Megaxus"
add list=Games address=110.93.12.0/24 comment="Wavegame"
add list=Games address=122.93.12.201 comment="Wavegame"
add list=Games address=122.93.12.251 comment="Wavegame"
add list=Games address=204.160.144.254 comment="Atlantica Nexon"
add list=Games address=8.31.96.209 comment="Atlantica Nexon"
add list=Games address=208.85.111.0/24 comment="Atlantica Nexon"
add list=Games address=202.158.252.194 comment="FIFA Online"
add list=Games address=202.158.252.195 comment="FIFA Online"
add list=Games address=202.70.134.0/24 comment="Cabal Online"
add list=Games address=202.70.134.18 comment="Cabal Online"
add list=Games address=119.110.87.179 comment="IP Fresh-Ragnarok"
add list=Games address=69.175.20.186 comment="IP RF-Commanders"
add list=Games address=174.37.246.56 comment="IP RF-EQG"
add list=Games address=174.132.16.196 comment="IP RF-POA"
add list=Games address=202.162.207.111 comment="IP Dotta-Nusa"
add list=Games address=69.0.145.160 comment="IP Dota"
add list=Games address=72.172.238.49 comment="IP Dotta"
add list=Games address=202.78.197.18 comment="IP Tantra'
add list=Games address=202.78.197.0/24 comment="IP Drif-city"
add list=Games address=122.144.2.0/24 comment="IP IndoGamers"
add list=Games address=180.178.110.0/24 comment="IP X-Shot"
add list=Games address="64.211.145.89"
add list=Games address="64.211.145.91"
add list=Games address="64.211.145.104"
add list=Games address="64.233.181.97"
add list=Games address="64.233.189.113"
add list=Games address="65.54.82.164"
add list=Games address="65.55.162.26"
add list=Games address="66.220.146.25"
add list=Games address="69.63.181.11"
add list=Games address="69.63.181.16"
add list=Games address="69.63.186.30"
add list=Games address="74.125.153.138"
add list=Games address="75.125.122.98"
add list=Games address="116.12.45.2"
add list=Games address="119.110.77.1"
add list=Games address="119.110.77.2"
add list=Games address="119.110.77.3"
add list=Games address="119.110.77.4"
add list=Games address="119.110.77.5"
add list=Games address="119.110.77.6"
add list=Games address="119.110.77.7"
add list=Games address="119.160.200.173"
add list=Games address="119.160.200.166"
add list=Games address="119.160.200.168"
add list=Games address="122.102.49.0/24"
add list=Games address="122.102.48.0/24"
add list=Games address="122.102.50.0/24"
add list=Games address="122.102.51.0/24"
add list=Games address="122.102.52.0/24"
add list=Games address="122.102.53.0/24"
add list=Games address="122.102.54.0/24"
add list=Games address="122.102.55.0/24"
add list=Games address="122.144.2.38"
add list=Games address="122.144.2.132"
add list=Games address="122.144.2.137"
add list=Games address="125.160.17.181"
add list=Games address="125.160.17.182"
add list=Games address="124.195.18.122"
add list=Games address="125.56.199.10"
add list=Games address="125.56.199.16"
add list=Games address="125.56.199.27"
add list=Games address="125.160.173.26"
add list=Games address="125.163.212.218"
add list=Games address="173.194.0.148"
add list=Games address="202.43.161.117"
add list=Games address="202.43.161.120"
add list=Games address="202.43.161.121"
add list=Games address="202.43.167.70"
add list=Games address="202.43.171.131"
add list=Games address="202.43.171.130"
add list=Games address="202.43.171.133"
add list=Games address="202.43.171.134"
add list=Games address="202.57.118.35"
add list=Games address="202.57.118.54"
add list=Games address="202.58.163.204"
add list=Games address="202.67.15.34"
add list=Games address="202.70.134.34"
add list=Games address="202.70.134.35"
add list=Games address="202.70.134.37"
add list=Games address="202.74.73.98"
add list=Games address="202.78.197.83"
add list=Games address="202.78.197.85"
add list=Games address="202.89.208.61"
add list=Games address="202.93.17.0/24"
add list=Games address="202.93.18.0/24"
add list=Games address="202.93.19.0/24"
add list=Games address="202.93.20.0/24"
add list=Games address="202.93.21.0/24"
add list=Games address="202.93.22.0/24"
add list=Games address="202.93.23.0/24"
add list=Games address="202.93.24.0/24"
add list=Games address="202.93.25.0/24"
add list=Games address="202.93.26.0/24"
add list=Games address="202.93.27.0/24"
add list=Games address="202.93.28.0/24"
add list=Games address="202.93.29.0/24"
add list=Games address="202.93.30.0/24"
add list=Games address="202.93.31.0/24"
add list=Games address="202.162.207.111"
add list=Games address="202.138.226.22"
add list=Games address="202.138.226.19"
add list=Games address="202.149.65.139"
add list=Games address="202.149.65.142"
add list=Games address="202.149.65.160"
add list=Games address="202.93.16.0/24"
add list=Games address="203.77.212.20"
add list=Games address="203.89.146.0/24"
add list=Games address="203.89.147.12"
add list=Games address="203.89.147.13"
add list=Games address="204.2.171.27"
add list=Games address="204.2.171.154"
add list=Games address="204.2.171.97"
add list=Games address="204.2.171.112"
add list=Games address="204.117.211.2"
add list=Games address="204.117.211.3"
add list=Games address="204.117.211.4"
add list=Games address="209.190.9.202"
add list=Games address="209.51.218.170"
add list=Games address="211.43.208.219"
add list=Games address="211.233.43.45"
add list=Games address="212.58.226.79"
add list=Load-Poker address=216.252.121.168 comment="Load-Poker"
add list=Load-Poker address=216.252.121.169
add list=Load-Poker address=216.252.121.178
add list=Load-Poker address=208.43.79.19
add list=Load-Poker address=216.252.121.179
add list=Load-Poker address=184.72.247.138
add list=Load-Poker address=208.85.150.85
add list=Load-Poker address=216.227.212.167
add list=Load-Poker address=68.180.219.146
add list=Load-Poker address=67.228.216.164
add list=Load-Poker address=74.114.14.0/24
add list=Load-Poker address=64.71.138.105
add list=Load-Poker address=62.146.56.166
add list=Load-Poker address=184.105.197.12
add list=Load-Poker address=74.114.13.18
add list=Load-Poker address=74.217.68.204
add list=Load-Poker address=208.88.18.6
add list=Load-Poker address=199.9.252.170
add list=Load-Poker address=72.172.239.168
add list=Load-Poker address=74.114.12.233
add list=Load-Poker address=74.114.12.234
add list=Load-Poker address=199.9.252.172
add list=Load-Poker address=174.129.209.171
add list=Load-Poker address=75.126.250.198
add list=Load-Poker address=199.9.252.173
add list=Load-Poker address=68.180.219.144
add list=Load-Poker address=184.73.219.31
add list=Load-Poker address=174.129.56.62
add list=Load-Poker address=98.136.48.240
add list=Load-Poker address=174.129.190.31
add list=Load-Poker address=97.107.132.179
add list=Load-Poker address=64.127.108.169
add list=Load-Poker address=98.136.48.163
add list=Load-Poker address=74.86.119.18
add list=Load-Poker address=98.136.48.213
add list=Load-Poker address=67.228.216.163
add list=Load-Poker address=98.136.48.243
add list=Load-Poker address=98.136.48.234
add list=Load-Poker address=64.127.108.162
add list=Load-Poker address=202.157.174.20
add list=Load-Poker address=219.96.104.162
add list=Load-Poker address=98.136.48.219
add list=Load-Poker address=98.136.48.221
add list=Load-Poker address=98.136.48.220
add list=Load-Poker address=98.136.48.222
add list=Load-Poker address=98.136.48.235
add list=Load-Poker address=98.136.48.167
add list=Load-Poker address=79.125.7.18
add list=Load-Poker address=79.125.9.4
add list=Load-Poker address=218.213.86.12
add list=Load-Poker address=218.213.86.7
add list=Load-Poker address=98.136.48.212
add list=Load-Poker address=98.136.48.209
add list=Load-Poker address=98.136.48.208
add list=Load-Poker address=98.136.48.214
add list=Load-Poker address=98.136.48.241
add list=Load-Poker address=98.136.48.161
add list=Load-Poker address=98.136.48.215
add list=Load-Poker address=98.136.48.216
add list=Load-Poker address=98.136.48.210
add list=Load-Poker address=98.136.48.238
add list=Load-Poker address=202.78.200.35
add list=Load-Poker address=173.231.142.100
add list=Load-Poker address=98.136.48.236
add list=Load-Poker address=67.228.29.180
add list=Load-Poker address=98.136.48.242
add list=Load-Poker address=98.136.48.160
add list=Load-Poker address=98.136.48.165
add list=Load-Poker address=72.172.224.17
add list=Load-Poker address=72.172.224.11
add list=Load-Poker address=98.136.48.211
add list=Load-Poker address=98.136.48.166
add list=Load-Poker address=98.136.48.232
add list=Load-Poker address=98.136.48.239
add list=Load-Poker address=98.136.48.223
add list=Load-Poker address=98.136.48.237
add list=Load-Poker address=98.136.48.217
add list=Load-Poker address=98.136.48.162
add list=Load-Poker address=64.127.108.168
add list=Load-Poker address=209.20.93.211
add list=Load-Poker address=209.20.77.127
add list=Load-Poker address=174.36.242.26
add list=Load-Poker address=174.37.191.94
add list=Load-Poker address=72.172.239.163
add list=Load-Poker address=69.63.181.105
add list=Load-Poker address=64.127.108.165
add list=Load-Poker address=216.67.249.137
add list=Load-Poker address=173.231.142.101
add list=Load-Poker address=184.72.233.87
add list=Load-Poker address=72.172.239.164
add list=Load-Poker address=74.53.7.203
add list=Load-Poker address=184.72.58.19
add list=Load-Poker address=69.164.217.106
add list=Load-Poker address=74.86.120.196
add list=Load-Poker address=212.72.60.32
add list=Load-Poker address=74.53.22.42
add list=Load-Poker address=128.242.240.212
add list=Load-Poker address=128.242.240.148
add list=Load-Poker address=72.35.71.168
add list=Load-Poker address=74.86.120.195
add list=Load-Poker address=67.228.132.167
add list=Load-Poker address=64.236.111.28
add list=Load-Poker address=174.36.242.42
add list=Load-Poker address=72.172.232.90
add list=Load-Poker address=222.124.196.0/24
add list=Load-Poker address=72.37.153.226
add list=Load-Poker address=67.228.132.166
add list=Load-Poker address=67.228.132.169
add list=Load-Poker address=72.172.224.16
add list=Load-Poker address=209.20.84.182
add list=Load-Poker address=67.228.132.170
add list=Load-Poker address=128.242.245.148
add list=Load-Poker address=74.53.7.199
add list=Load-Poker address=72.172.224.13
add list=Load-Poker address=72.172.239.162
add list=Load-Poker address=72.172.224.9
add list=Load-Poker address=208.85.93.166
add list=Load-Poker address=208.85.93.165
add list=Load-Poker address=67.228.132.171
add list=Load-Poker address=75.101.154.77
add list=Load-Poker address=67.228.216.162
add list=Load-Poker address=174.36.242.34
add list=Load-Poker address=184.72.223.245
add list=Load-Poker address=174.120.49.154
add list=Load-Poker address=184.75.160.202

IP FIREWALL MANGLE :
/ip fi ma

PROXY-HIT
add chain=forward action=mark-connection new-connection-mark=HIT-conn passthrough=yes protocol=tcp \
in-interface=Proxy out-interface=LAN src-port=80,81,8081,8080,3128 dscp=12 comment="PROXY-HIT"

add chain=forward action=mark-packet new-packet-mark=PKT-HIT passthrough=no protocol=tcp in-interface=Proxy \
out-interface=LAN src-port=80,81,8081,8080,3128 connection-mark=HIT-conn

CRITICAL
add chain=postrouting action=change-dscp new-dscp=1 passthrough=yes protocol=icmp comment="CRITICAL"
add chain=postrouting action=change-dscp new-dscp=1 passthrough=yes protocol=udp dst-port=53
add chain=postrouting action=change-dscp new-dscp=1 passthrough=yes protocol=tcp dst-port=53
add chain=postrouting action=mark-connection new-connection-mark=critical-conn passthrough=yes dscp=1
add chain=postrouting action=mark-packet new-packet-mark=critical-pkt passthrough=no connection-mark=critical-conn

YAHOO
add chain=prerouting action=mark-connection new-connection-mark=yahoo-conn passthrough=yes \
protocol=tcp dst-port=5000-5010,5050,5100,8001,8002

add chain=prerouting action=mark-packet new-packet-mark=yahoo-pkt passthrough=no connection-mark=yahoo-conn

FB+GAME
add chain=prerouting action=mark-connection new-connection-mark=fb-conn passthrough=yes protocol=tcp \
src-address-list=LAN-NeT dst-address-list=Load-Poker dst-port=843,9339

add chain=prerouting action=mark-packet new-packet-mark=fb-pkt passthrough=no connection-mark=fb-conn

GEMSCOOL
add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=tcp \
src-address-list=LAN-NeT dst-address-list=Games \
dst-port=39190,49100,5300,10001,14009-14010,15100,15101,16052,16073 comment="PORT GEMSCOOL"

add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=udp \
src-address-list=LAN-NeT dst-address-list=Games dst-port=14010,40000-40005

add chain=prerouting action=mark-packet new-packet-mark=game-pkt passthrough=no connection-mark=game-conn

LYTOGAME
add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=tcp \
src-address-list=LAN-NeT dst-address-list=Games \
dst-port=9110,13008,13413,16666,17730,17745,20570,27780,36430,48871,49309,56527,63919,64507 \
comment="PORT LYTOGAME"

add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=udp \
dst-port=12020-12080,13000-13080,17001

add chain=prerouting action=mark-packet new-packet-mark=game-pkt passthrough=no connection-mark=game-conn

MEGAXUS
add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=tcp \
src-address-list=LAN-NeT dst-address-list=Games dst-port=4403,4410,8401,8406,18900,31719,46113,7777 \
comment="PORT MEGAXUS"

add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=udp \
dst-port=21850,21891

add chain=prerouting action=mark-packet new-packet-mark=game-pkt passthrough=no connection-mark=game-conn

ALL GAME
add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=tcp \
dst-port=1818,2001,4062,5340-5352,6000-6152,6214,7341-7350,7451,9376-9377,15001,15002 \
comment="PORT ALL GAME"

add chain=prerouting action=mark-connection new-connection-mark=game-conn passthrough=yes protocol=udp \
dst-port=1949,6100-6152,9600-9602,7777-7977,11100-11125,11440-11460,30000,42051-42052

add chain=prerouting action=mark-packet new-packet-mark=game-pkt passthrough=no connection-mark=game-conn

REALTIME
add chain=prerouting action=mark-connection new-connection-mark=realtime-conn passthrough=yes protocol=tcp \
dst-port=22,179,110,161 comment="REALTIME CONN"
add chain=prerouting action=mark-connection new-connection-mark=realtime-conn passthrough=yes protocol=udp \
dst-port=123
add chain=forward action=mark-packet new-packet-mark=realtime-pkt passthrough=no connection-mark=realtime-conn

CACHE-MISS
add chain=forward action=mark-connection new-connection-mark=HIT-LOSS passthrough=yes protocol=tcp \
in-interface=Proxy out-interface=LAN src-port=3128 packet-mark=no-mark comment="CACHE-MISS"

PROXY-SSH
add chain=prerouting action=mark-connection new-connection-mark=ssh-conn passthrough=yes protocol=tcp \
src-port=22 comment="PROXY-SSH"
add chain=forward action=mark-packet new-packet-mark=ssh-pkt passthrough=no protocol=tcp src-port=22 \
connection-mark=ssh-conn

BW-MANAGEMENT CONN FOR CLIENT :
add chain=prerouting action=mark-connection new-connection-mark=PC-OP passthrough=yes src-address=192.168.1.131 \
comment="BW-MANAGEMENT CONN FOR CLIENT"
add chain=prerouting action=mark-connection new-connection-mark=CLIENT-01 passthrough=yes src-address=192.168.1.2
add chain=prerouting action=mark-connection new-connection-mark=CLIENT-02 passthrough=yes src-address=192.168.1.3
add chain=prerouting action=mark-connection new-connection-mark=CLIENT-03 passthrough=yes src-address=192.168.1.4
add chain=prerouting action=mark-connection new-connection-mark=CLIENT-04 passthrough=yes src-address=192.168.1.5

BW-MANAGEMENT PACKET FOR CLIENT :
add chain=prerouting action=mark-packet new-packet-mark=PC-OP passthrough=no connection-mark=PC-OP \
comment="BW-MANAGEMENT PACKET FOR CLIENT"
add chain=prerouting action=mark-packet new-packet-mark=CLIENT-01 passthrough=no connection-mark=CLIENT-01
add chain=prerouting action=mark-packet new-packet-mark=CLIENT-02 passthrough=no connection-mark=CLIENT-02
add chain=prerouting action=mark-packet new-packet-mark=CLIENT-03 passthrough=no connection-mark=CLIENT-03
add chain=prerouting action=mark-packet new-packet-mark=CLIENT-04 passthrough=no connection-mark=CLIENT-04
add chain=prerouting action=mark-packet new-packet-mark=CLIENT-05 passthrough=no connection-mark=CLIENT-05

QUEUE TYPE
/que ty
add name="PCQ-1Mbps" kind=pcq pcq-rate=1024k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=8000 \
pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 \
pcq-src-address6-mask=128 pcq-dst-address6-mask=128
add name="PCQ-1Mbps-UP" kind=pcq pcq-rate=1024k pcq-limit=50 pcq-classifier=src-address pcq-total-limit=8000 \
pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 \
pcq-src-address6-mask=128 pcq-dst-address6-mask=128
add name="HIT" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=8000 pcq-burst-rate=0 \
pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 \
pcq-src-address6-mask=128 pcq-dst-address6-mask=128
add name="Yahoo" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000 pcq-burst-rate=0 \
pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 \
pcq-src-address6-mask=128 pcq-dst-address6-mask=128
add name="FBgame" kind=pcq pcq-rate=512k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000 \
pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 \
pcq-src-address6-mask=128 pcq-dst-address6-mask=128
add name="GAME" kind=pcq pcq-rate=1024k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000 \
pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 \
pcq-src-address6-mask=128 pcq-dst-address6-mask=128
add name="critical" kind=pfifo pfifo-limit=50

QUEUE TREE
/que tr
add name="01. HIT" parent=global-out packet-mark=PKT-HIT limit-at=0 queue=HIT \
priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
add name="02. GAME ONLINE" parent=LAN packet-mark=game-pkt limit-at=128k \
queue=GAME priority=1 max-limit=1024k burst-limit=0 burst-threshold=0 burst-time=0s
add name="03. FB+GAME" parent=global-out packet-mark=fb-pkt limit-at=100k \
queue=FBgame priority=5 max-limit=512k burst-limit=0 burst-threshold=0 burst-time=0s
add name="04. PCQ-DOWN" parent=global-out limit-at=0 priority=1 max-limit=800k\
burst-limit=0 burst-threshold=0 burst-time=0s
add name="00. PC-OP" parent="04. PCQ-DOWN" packet-mark=PC-OP limit-at=165k queue=PCQ-1Mbps priority=8 max-limit=256k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="01. CLIENT-01" parent="04. PCQ-DOWN" packet-mark=CLIENT-01 limit-at=165k queue=PCQ-1Mbps priority=8 max-limit=256k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="02. CLIENT-02" parent="04. PCQ-DOWN" packet-mark=CLIENT-02 limit-at=165k queue=PCQ-1Mbps priority=8 max-limit=256k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="03. CLIENT-03" parent="04. PCQ-DOWN" packet-mark=CLIENT-03 limit-at=165k queue=PCQ-1Mbps priority=8 max-limit=256k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="04. CLIENT-04" parent="04. PCQ-DOWN" packet-mark=CLIENT-04 limit-at=165k queue=PCQ-1Mbps priority=8 max-limit=256k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="05. CLIENT-05" parent="04. PCQ-DOWN" packet-mark=CLIENT-05 limit-at=165k queue=PCQ-1Mbps priority=8 max-limit=256k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="05. PCQ-UP" parent=global-in limit-at=0 priority=1 max-limit=800k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="000. PC-OP-up" parent="05. PCQ-UP" packet-mark=PC-OP limit-at=64k queue=PCQ-1Mbps-UP priority=8 max-limit=200k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="01. CLIENT-01-up" parent="05. PCQ-UP" packet-mark=CLIENT-01 limit-at=64k queue=PCQ-1Mbps-UP priority=8 max-limit=128k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="02. CLIENT-02-up" parent="05. PCQ-UP" packet-mark=CLIENT-02 limit-at=64k queue=PCQ-1Mbps-UP priority=8 max-limit=128k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="03. CLIENT-03-up" parent="05. PCQ-UP" packet-mark=CLIENT-03 limit-at=64k queue=PCQ-1Mbps-UP priority=8 max-limit=128k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="04. CLIENT-04-up" parent="05. PCQ-UP" packet-mark=CLIENT-04 limit-at=64k queue=PCQ-1Mbps-UP priority=8 max-limit=128k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="05. CLIENT-05-up" parent="05. PCQ-UP" packet-mark=CLIENT-05 limit-at=64k queue=PCQ-1Mbps-UP priority=8 max-limit=128k \
burst-limit=0 burst-threshold=0 burst-time=0s
add name="07. YAHOO" parent=global-out packet-mark=yahoo-pkt limit-at=32k \
queue=Yahoo priority=8 max-limit=128k burst-limit=0 burst-threshold=0 burst-time=0s
add name="08. CRITICAL" parent=pppoe-speedy1 packet-mark=critical-pkt \
limit-at=64k queue=critical priority=1 max-limit=224k burst-limit=0 \
burst-threshold=0 burst-time=0s
add name="09. REALTIME" parent=global-out packet-mark=realtime-pkt \
limit-at=64k queue=default priority=4 max-limit=224k burst-limit=0 \
burst-threshold=0 burst-time=0s
add name="10. PROXY SSH" parent=global-out packet-mark=ssh-pkt limit-at=64k \
queue=wireless-default priority=5 max-limit=224k burst-limit=0 \
burst-threshold=0 burst-time=0s

IP FIREWALL FILTER RULES :
/ip fi fi
add chain=forward connection-state=established action=accept comment="ALLOW ESTABILISHED" disabled=no
add chain=forward connection-state=related action=accept comment="ALLOW RELATED" disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment="Drop Messenger Worm" disabled=no
add chain=forward connection-state=invalid action=drop comment="drop invalid connections" disabled=no
add chain=virus protocol=tcp dst-port=135-139 action=drop comment="Drop Blaster Worm" disabled=no
add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment="Worm" disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop comment="Drop Blaster Worm" disabled=no
add chain=virus protocol=udp dst-port=445 action=drop comment="Drop Blaster Worm" disabled=no
add chain=virus protocol=tcp dst-port=593 action=drop comment="________" disabled=no
add chain=virus protocol=tcp dst-port=1024-1030 action=drop comment="________" disabled=no
add chain=virus protocol=tcp dst-port=1080 action=drop comment="Drop MyDoom" disabled=no
add chain=virus protocol=tcp dst-port=1214 action=drop comment="________" disabled=no
add chain=virus protocol=tcp dst-port=1363 action=drop comment="ndm requester" disabled=no
add chain=virus protocol=tcp dst-port=1364 action=drop comment="ndm server" disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment="screen cast" disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx" disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment="cichlid" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment="Bagle Virus" disabled=no
add chain=virus protocol=tcp dst-port=2283 action=drop comment="Drop Dumaru.Y" disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop comment="Drop Beagle" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment="Drop Beagle.C-K" disabled=no
add chain=virus protocol=tcp dst-port=3127 action=drop comment="Drop MyDoom" disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop comment="Drop Backdoor OptixPro" disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop comment="Worm" disabled=no
add chain=virus protocol=udp dst-port=4444 action=drop comment="Worm" disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop comment="Drop Sasser" disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop comment="Drop Beagle.B" disabled=no
add chain=virus protocol=tcp dst-port=9898 action=drop comment="Drop Dabber.A-B" disabled=no
add chain=virus protocol=tcp dst-port=10000 action=drop comment="Drop Dumaru" disabled=yes
add chain=virus protocol=tcp dst-port=10080 action=drop comment="Drop MyDoom.B" disabled=no
add chain=virus protocol=tcp dst-port=12345 action=drop comment="Drop NetBus" disabled=no
add chain=virus protocol=tcp dst-port=17300 action=drop comment="Drop Kuang2" disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment="Drop SubSeven" disabled=no
add chain=virus protocol=tcp dst-port=65506 action=drop comment="Drop PhatBot,Agobot,Gaobot" disabled=no
add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment="Worm"
add chain=virus protocol=udp dst-port=12667 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=27665 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=31335 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=27444 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=34555 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=udp dst-port=35555 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=27444 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=27665 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=31335 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=31846 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=34555 action=drop comment="Trinoo" disabled=no
add chain=virus protocol=tcp dst-port=35555 action=drop comment="Trinoo" disabled=no

add chain=forward protocol=tcp dst-port=995 action=drop comment="WEBMAIL" disabled=no
add chain=forward protocol=tcp dst-port=25 action=drop comment="------------" disabled=no
add chain=forward protocol=tcp dst-port=465 action=drop comment="-----------" disabled=no
add chain=forward protocol=tcp dst-port=587 action=drop comment="-----------" disabled=no
add chain=forward protocol=tcp dst-port=110 action=drop comment="-----------" disabled=no

(PERHATIAN : AKTIFKAN/ENABLE SCRIPT DIBAWAH JIKA ANDA INGIN INTERNET HANYA BISA DI AKSES & DI REMOTE DARI DALAM JARINGAN ANDA SAJA)
add chain=forward action=jump jump-target=virus comment="jump to the virus chain" disabled=no
add chain=input connection-state=established action=accept comment="Accept established connections" disabled=no
add chain=input connection-state=related action=accept comment="Accept related connections" disabled=no
add chain=input connection-state=invalid action=drop comment="Drop invalid connections" disabled=no
add chain=input protocol=udp action=accept comment="UDP" disabled=no
add chain=input protocol=icmp limit=50/5s,2 action=accept comment="Allow limited pings" disabled=no
add chain=input protocol=icmp action=drop comment="Drop excess pings" disabled=no
add chain=input protocol=tcp dst-port=21 src-address-list=LAN-NeT action=accept comment="FTP" disabled=no
add chain=input protocol=tcp dst-port=22 src-address-list=LAN-NeT action=accept comment="SSH for secure shell" disabled=no
add chain=input protocol=tcp dst-port=23 src-address-list=LAN-NeT action=accept comment="Telnet" disabled=yes
add chain=input protocol=tcp dst-port=80 src-address-list=LAN-NeT action=accept comment="Web" disabled=yes
add chain=input protocol=tcp dst-port=8291 src-address-list=LAN-NeT action=accept comment="winbox" disabled=no
add chain=input protocol=tcp dst-port=25 src-address-list=LAN-NeT action=accept comment="Allow SMTP-Email" disabled=no
add chain=input protocol=tcp dst-port=1723 action=accept comment="pptp-server" disabled=no
add chain=input src-address-list=LAN-NeT action=accept comment="From LAN-NeT" disabled=no
add chain=input action=log log-prefix="DROP INPUT" comment="Log everything else" disabled=no
add chain=input action=drop comment="Drop everything else" disabled=no
add chain=forward protocol=tcp dst-port=80 src-address-list=LAN-NeT action=accept comment="All Update" disabled=no

DROP PORT SCANNER
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w \
comment="PORT SCANNER-NETCUT" disabled=no
add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="NMAP FIN Stealth scan"
add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="SYN/FIN scan"
add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="SYN/RST scan"
add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="FIN/PSH/URG scan"
add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="ALL/ALL scan"
add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list \
address-list="port scanners" address-list-timeout=2w comment="NMAP NULL scan"
add chain=input src-address-list="port scanners" action=drop comment="dropping port scanners" \
disabled=no

Scanner-Poker
add chain=forward action=add-dst-to-address-list protocol=tcp dst-address-list=!LAN-NeT address-list=Load-Poker \
address-list-timeout=0s dst-port=843,9339,4530 comment="Scanner-Poker"
add chain=forward action=drop protocol=tcp dst-port=135-138,445
add chain=input action=reject reject-with=icmp-network-unreachable protocol=tcp dst-port=135-138,445

STOREURL.PL GALAT YOUTUBE

2012-06-27T22:36:00.000+07:00

Berikut storeurl.pl yg sudah di revisi oleh rekan Ucok Karnadi 'FMI', untuk mengatasi problem galat youtube dll. silahkan coba di oprek, klo gagal ulangi dari awal proses instalasi squid.

#!/usr/bin/perl
# $Rev$
# by chudy_fernandez@yahoo.com
# rev by anjelanet01@gmail.com on 04/23/2012
# Thanks for chudy,syedjahanzaib,ucokkarnadi,FMI,etc
# Dedicated for FORUM WARNET-MIKROTIK-LINUX PALANGKARAYA

$|=1;
while (<>) {
@X = split;
# $X[1] =~ s/&sig=.*//;
$x = $X[0] . " ";
$_ = $X[1];
$u = $X[1];

#photos-X.ak.fbcdn.net where X a-z
if (m/^http:\/\/photos-[a-z]?(.ak.fbcdn.net.*)/) {
print $x . "http://photos" . $1 . "\n";

# foto profile facebook
} elsif (m/^http\:\/\/(profile\.ak\.fbcdn\.net\/hprofile-ak-)(snc|ash)[0-9]?(\/.*)/) {
print $x . "http://fb." . $1 . "1" . $3 . "\n";

#a5.sphotos.ak.fbcdn.ne
} elsif (m/^http\:\/\/a[1-8]?\.(sphotos\.ak\.fbcdn\.net\/hphotos-ak-)(snc|ash)[0-9]?(\/.*)/) {
print $x . "http://fb." . $1 . "1" . $3 . "\n";

#BLOGSPOT
} elsif (m/^http:\/\/[1-4].bp.(blogspot.com.*)/) {
print $x . "http://blog-cdn." . $1 . "\n";

#AVAST
} elsif (m/^http:\/\/download[0-9]{3}.(avast.com.*)/) {
print $x . "http://avast-cdn." . $1 . "\n";

#KAV
} elsif (m/^http:\/\/dnl-[0-9]{2}.(geo.kaspersky.com.*)/) {
print $x . "http://kav-cdn." . $1 . "\n";

#AVG
} elsif (m/^http:\/\/update.avg.com/) {
print $x . "http://avg-cdn." . $1 . "\n";

#maps.google.com
} elsif (m/^http:\/\/(cbk|mt|khm|mlt|tbn)[0-9]?(.google\.co(m|\.uk|\.id).*)/) {
print $x . "http://" . $1 . $2 . "\n";

#gstatic and/or wikimapia
} elsif (m/^http:\/\/([a-z])[0-9]?(\.gstatic\.com.*|\.wikimapia\.org.*)/) {
print $x . "http://" . $1 . $2 . "\n";

#maps.google.com
} elsif (m/^http:\/\/(khm|mt)[0-9]?(.google.com.*)/) {
print $x . "http://" . $1 . $2 . "\n";

                # compatibility for old cached get_video?video_id
} elsif (m/^http:\/\/([0-9.]{4}|.*\.youtube\.com|.*\.googlevideo\.com|.*\.video\.google\.com).*?(videoplayback\?id=.*?|video_id=.*?)\&(.*?)/) {
       $z = $2; $z =~ s/video_id=/get_video?video_id=/;
       print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/" . $z . "\n";

               # youtube fix
} elsif (m/^http:\/\/([0-9.]{4}|.*\.youtube\.com|.*\.googlevideo\.com|.*\.video\.google\.com)\/videoplayback\?(.*)/) {
       $p_str = $2;
       $tag = "";
       $alg = "";
       $id = "";
       $range = "";
       if ($p_str =~ m/(itag=[0-9]*)/){$tag = "&".$1}
       if ($p_str =~ m/(algorithm=[a-z]*\-[a-z]*)/){$alg = "&".$1}
       if ($p_str =~ m/(id=[a-zA-Z0-9]*)/){$id = "&".$1}
       if ($p_str =~ m/(range=[0-9\-]*)/){$range = "&".$1; $range =~ s/-//; $range =~ s/range=//; }
       print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/" . $tag . "&" . $alg . "&" . $id . "&" . $range . "\n";

#Google
} elsif (m/^http:\/\/www\.google-analytics\.com\/__utm\.gif\?.*/) {
print $x . "http://www.google-analytics.com/__utm.gif\n";

#Cache High Latency Ads
} elsif (m/^http:\/\/([a-z0-9.]*)(\.doubleclick\.net|\.quantserve\.com|\.googlesyndication\.com|yieldmanager|cpxinteractive)(.*)/) {
$y = $3;$z = $2;
for ($y) {
s/pixel;.*/pixel/;
s/activity;.*/activity/;
s/(imgad[^&]*).*/\1/;
s/;ord=[?0-9]*//;
s/;&timestamp=[0-9]*//;
s/[&?]correlator=[0-9]*//;
s/&cookie=[^&]*//;
s/&ga_hid=[^&]*//;
s/&ga_vid=[^&]*//;
s/&ga_sid=[^&]*//;
# s/&prev_slotnames=[^&]*//
# s/&u_his=[^&]*//;
s/&dt=[^&]*//;
s/&dtd=[^&]*//;
s/&lmt=[^&]*//;
s/(&alternate_ad_url=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/(&url=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/(&ref=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/(&cookie=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/[;&?]ord=[?0-9]*//;
s/[;&]mpvid=[^&;]*//;
s/&xpc=[^&]*//;
# yieldmanager
s/\?clickTag=[^&]*//;
s/&u=[^&]*//;
s/&slotname=[^&]*//;
s/&page_slots=[^&]*//;
}
print $x . "http://" . $1 . $2 . $y . "\n";

#cache high latency ads
} elsif (m/^http:\/\/(.*?)\/(ads)\?(.*?)/) {
print $x . "http://" . $1 . "/" . $2 . "\n";

} elsif (m/^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*?)/) {
print $x . "http://" . $1 . "\n";

#cdn, varialble 1st path
} elsif (($u =~ /filehippo/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(.*)\.([a-z0-9]{3,4})(\?.*)?/)) {
@y = ($1,$2,$4,$5);
$y[0] =~ s/[a-z0-9]{2,5}/cdn./;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

#facebook and game
} elsif (m/^http:\/\/cityvillefb[0-3]?(.static.zgncdn.com.*)/) {
print $x . "http://cityville.SQUIDINTERNAL" . $1 . "\n";

#mediafire
} elsif (($u =~ /mediafire/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(.*)\.([a-zA-Z0-9]{2,3})(\?.*)?/)) {
@y = ($1,$2,$4,$5);
$y[0] =~ s/[a-z]+([0-9]+)?/cdn./;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

#4shared preview
} elsif (($u =~ /4shared/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(dlink__2Fdownload_2F([^\/-]+))([a-zA-Z0-9-]+)\/([^\/\?\&]*\.[^\/\?\&]{2,3})(\?.*)?$/)) {
@y = ($1,$2,$3,$4,$7);
$y[0] =~ s/[a-z]+([0-9]+)?/cdn./;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "/" . $y[3] . "/" . $y[4] . "\n";

#rapidshare
} elsif (($u =~ /rapidshare/) && (m/^http:\/\/(([A-Za-z]+[0-9-.]+)*?)([a-z]*\.[^\/]{3}\/[a-z]*\/[0-9]*)\/(.*?)\/([^\/\?\&]{4,})$/)) {
print $x . "http://cdn." . $3 . "/SQUIDINTERNAL/" . $5 . "\n";

} elsif (($u =~ /maxporn/) && (m/^http:\/\/([^\/]*?)\/(.*?)\/([^\/]*?)(\?.*)?$/)) {
print $x . "http://" . $1 . "/SQUIDINTERNAL/" . $3 . "\n";

#domain/path/.*/path/filename
} elsif (($u =~ /fucktube/) && (m/^http:\/\/(.*?)(\.[^\.\-]*?[^\/]*\/[^\/]*)\/(.*)\/([^\/]*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})(\?.*?)$/)) {
@y = ($1,$2,$4,$5,$6);
$y[0] =~ s/(([a-zA-A]+[0-9]+(-[a-zA-Z])?$)|([^\.]*cdn[^\.]*)|([^\.]*cache[^\.]*))/cdn/;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "/" . $y[3] . "." . $y[4] . "\n";

#like porn hub variables url and center part of the path, filename etention 3 or 4 with or without ? at the end
} elsif (($u =~ /tube8|pornhub|xvideos/) && (m/^http:\/\/(([A-Za-z]+[0-9-.]+)*?(\.[a-z]*)?)\.([a-z]*[0-9]?\.[^\/]{3}\/[a-z]*)(.*?)((\/[a-z]*)?(\/[^\/]*){4}\.[^\/\?]{3,4})(\?.*)?$/)) {
print $x . "http://cdn." . $4 . $6 . "\n";

#for yimg.com video
} elsif (m/^http:\/\/(.*yimg.com)\/\/(.*)\/([^\/\?\&]*\/[^\/\?\&]*\.[^\/\?\&]{3,4})(\?.*)?$/) {
print $x . "http://cdn.yimg.com/" . $3 . "\n";

#for yimg.com doubled
} elsif (m/^http:\/\/(.*?)\.yimg\.com\/(.*?)\.yimg\.com\/(.*?)\?(.*)/) {
print $x . "http://cdn.yimg.com/" . $3 . "\n";

#for yimg.com with &sig=
} elsif (m/^http:\/\/([^\.]*)\.yimg\.com\/(.*)/) {
@y = ($1,$2);
$y[0] =~ s/[a-z]+([0-9]+)?/cdn/;
$y[1] =~ s/&sig=.*//;
print $x . "http://" . $y[0] . ".yimg.com/" . $y[1] . "\n";

#youjizz. We use only domain and filename
} elsif (($u =~ /media[0-9]{1,5}\.youjizz/) && (m/^http:\/\/(.*?)(\.[^\.\-]*?\.[^\/]*)\/(.*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})(\?.*?)$/)) {
@y = ($1,$2,$4,$5);
$y[0] =~ s/(([a-zA-A]+[0-9]+(-[a-zA-Z])?$)|([^\.]*cdn[^\.]*)|([^\.]*cache[^\.]*))/cdn/;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

#general purpose for cdn servers. add above your specific servers.
} elsif (m/^http:\/\/([0-9.]*?)\/\/(.*?)\.(.*)\?(.*?)/) {
print $x . "http://squid-cdn-url/" . $2 . "." . $3 . "\n";

# spicific extention
# } elsif (m/^http:\/\/(.*?)\.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|swf).*?/) {
# @y = ($1,$2);
# $y[0] =~ s/((cache|cdn)[-\d]*)|([a-zA-A]+-?[0-9]+(-[a-zA-Z]*)?)/cdn/;
# print $x . "http://" . $y[0] . "." . $y[1] . "\n";

#generic http://variable.domain.com/path/filename."ex", "ext" or "exte"
#http://cdn1-28.projectplaylist.com
#http://s1sdlod041.bcst.cdn.s1s.yimg.com
} elsif (m/^http:\/\/(.*?)(\.[^\.\-]*?\..*?)\/([^\?\&\=]*)\.([\w\d]{2,4})\??.*$/) {
@y = ($1,$2,$3,$4);
$y[0] =~ s/([a-z][0-9][a-z]dlod[\d]{3})|((cache|cdn)[-\d]*)|([a-zA-A]+-?[0-9]+(-[a-zA-Z]*)?)/cdn/;
print $x . "storeurl://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

# all that ends with ;
} elsif (m/^http:\/\/(.*?)\/(.*?)\;(.*)/) {
print $x . "http://" . $1 . "/" . $2 . "\n";

} else {
print $x . $_ . "\n";
}
}

set kembali squid proxy :
misal :

cd LUSCA_FMI/ ------> klo pake Lusca FMI,
bru :

chmod +x /etc/squid/storeurl.pl
chown proxy:proxy /etc/squid/storeurl.pl

tambahkan rule berikut pada squid.conf :

acl tube dstdomain .youtube.com
range_offset_limit -1 KB tube
quick_abort_min -1 KB

dari console : squid -k reconfigure

close & TEST..

Perhatikan spasi jgn asal copas, revisi dikit'z by anjelanet.

CorelDRAW X6 Full Version

2012-06-27T11:32:00.001+07:00

CorelDRAW ® Graphics Suite X6 terpercaya sebagai software desain yang baik, sebagai solusi perangkat lunak desain grafis, dengan konten yang kaya dan profesional, desain grafis photo-editing dan software desain website.

Sekarang anda memiliki segala yang dibutuhkan untuk mengekspresikan gaya dan kreativitas anda dengan imajinasi yang tak terbatas melalui penggunaan software CorelDRAW Graphics Suite X6 ini.

System Requirements :

Microsoft® Windows® 7 (32-bit or 64-bit Editions) , Windows Vista® (32-bit or 64-bit Editions), or Windows® XP (32-bit), all with latest service packs installed
Intel® Pentium® 4, AMD Athlon™ 64 or AMD Opteron™
1GB RAM
1.5GB hard disk space (for typical installation without content - additional disk space is required during installation)
Mouse or tablet
1024 x 768 screen resolution
DVD drive
Microsoft® Internet Explorer® 7 or higher

Link Download CorelDRAW X6 :

CorelDRAW X6 Graphics Suite X6

Keygen Link Mediafire :

Keygen CorelDRAW X6 Graphics Suite X6

SQUID PROXY DI WINDOWS

2012-06-07T11:38:00.000+07:00

Squid Proxy for Windows sangat bermanfaat bila kita ingin berselancar di dunia maya, dimana fungsi Squid Proxy itu sendiri adalah untuk menghemat pemakaian Bandwidth, menambah kecepatan browsing, atau bisa juga kita manfaatkan untuk memblokir konten-konten yang berbau pornografi. Sebenarnya artikel tentang Squid Proxy for Windows sudah sangat banyak sekali yang membahasnya, namun disini saya hanya berusaha untuk memberikan penyegaran pemahaman, dengan harapan tutorial ini menjadi literatur yang termudah untuk dimengerti dan dicerna, sehingga penerapannya akan lebih efisien.

Mengapa Squid Proxy bisa menghemat pemakain Bandwidth dan Menambah Kecepatan Browsing ? Squid Proxy bekerja sebagai suatu sistem software yang akan menyimpan semua link atau URL yang pernah anda kunjungi, jadi ketika anda membuka link atau URL yang pernah anda kunjungi, Squid Proxy akan bekerja dan meng-upload kembali link dan URL tersebut.

Pengalaman saya, Squid Proxy for Windows ini sangat membantu akses internet terutama terhadap link atau URL yang sering kita buka. Untuk Warung Internet juga sangat cocok untuk diterapkan pada setiap komputer Client, apalagi bila digabungkan dengan Routerboard (Mikrotik).

Sebelumnya kita harus mempersiapkan bahan untuk memulai proses penerapan Squid Proxy di Windows. Jika sudah paham tentang Squid Proxy, anda bisa langsung mendownloadnya di :

ACME Consulting

Bila anda seorang pemula dan tidak mau repot dengan konfigurasinya, maka bisa mendownload di :

MediaFire
(Tunggu beberapa saat dan pilih 'SKIP AD' untuk masuk link Download)

Berikut Langkah-Langkah Instalasi Squid :
Ektrak File RaR Squid yang anda download dari Mediafire pada direktori C, sehingga menjadi seperti ini : C:\squid
Pada direktori D:\, buatlah sebuah folder dan beri nama cache, folder tersebut nantinya berfungsi untuk penyimpanan file yang dibaca oleh Squid.
Bukalah Menu Run dan ketik cmd, untuk membuka command prompt.
Ketikan perintah berikut pada command prompt :

cd \squid\sbin   (Tekan Enter)
squid -z    (Tekan Enter)
squid -i    (Tekan Enter)
squid    (Tekan Enter)

Perintah cd\squid\sbin, berfungsi membuka file folder squid pada direktori C.
Perintah squid -z, berfungsi untuk membuat swap direktori.
Perintah squid -i, berfungsi untuk menginstall squid
Perintah squid, berfungsi untuk menjalankan squid itu sendiri, sehingga ketika kita tekan 'enter', jika instalasi berhasil maka tidak akan muncul pesan apapun pada command prompt.

Aplikasi Monitoring Squid

2011-09-17T05:14:00.004+07:00

Aplikasi Monitoring Squid

- Melihat Usage Memory :

Ketikan perintah :

# wget http://www.pixelbeat.org/scripts/ps_mem.py

# chmod +x ps_mem.py

Cek di PutTY dengan perintah :

./ps_mem.py

- Squid Monitor

Ketikan perintah :

# wget http://squidmon.googlecode.com/svn/trunk/squidmon.py

# chmod +x squidmon.py

Cek dengan perintah :

# cat /var/log/squid/access.log | ./squidmon.py

Atau :

#cat /var/log/squid/access.log | python squidmon.py

- Aplikasi montioring dengan SquidStats

Ketikan perintah-perintah berikut :

# apt-get install librrds-perl libsnmp-session-perl snmpd rrdtool snmp apache2 -y

# perl -MCPAN -e 'install Config::IniFiles'

# wget http://anjelanet.googlecode.com/files/squidstats-r54.tar

# tar -xvf squidstats-r54.tar

# cd squidstats-r54

# cp mib.txt /etc/squid/

# cp snmpd.conf /etc/snmp/

# make && make install

# snmpwalk -v 1 -c public localhost

# squidstats.pl createdb

# squidstats.pl gather

# crontab -e

Pilih 2 lalu enter, kemudian copy kode dibawah ini :

*/5 * * * * /usr/local/bin/squidstats.pl gather >/dev/null

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

# cp squidstats.conf /etc/apache2/conf.d

Edit file squid.conf di /ect/squid/squid.conf dan tambahkan kode berikut jika belum ada:

snmp_port 3401

acl snmppublic snmp_community public

snmp_access allow snmppublic all

setiap edit file ‘squid.conf’ selesai, lakukan perintah berikut :

# squid –k reconfigure

Reboot Proxy Server (# reboot –h now)

Cek Squidstats di browser dengan url :

http://[IP PROXY SERVER ANDA/squidstats/graph-summary.cgi

- Aplikasi Monitoring dengan Webmin :

Ketikan perintah-perintah berikut :

# aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

# apt-get install apt-show-versions

# wget http://prdownloads.sourceforge.net/sourceforge/webadmin/webmin_1.560_all.deb

# dpkg -i webmin_1.560_all.deb

Cek di browser dengan menggunakan url :

http://[IP PROXY SERVER ANDA]:10000

- Perintah-perintah Monitoring lainnya :

# squidclient mgr:info

# squidclient mgr:client_list

# tail -f /var/log/squid/access.log

# multitail -s 2 /var/log/squid/access.log

# tail -f /var/log/squid/access.log | ccze

# tail -f /var/log/squid/cache.log

# tail -n 80 /var/log/squid/cache.log

# tail -f /var/log/squid/access.log |grep jpg

# tail -f /var/log/squid/access.log |grep flv

# squidclient mgr:storedir

DNS Unbound

2011-09-17T05:11:00.001+07:00

Berikut adalah langkah-langkah installasi DNS unbound :

# apt-get install unbound

# cd /etc/unbound

# wget ftp://FTP.INTERNIC.NET/domain/named.cache

# unbound-control-setup

# chown unbound:root unbound_*

# chmod 440 unbound_*

Download unbound.conf di http://anjelanet.googlecode.com/files/unbound.conf

Dari WINSCP, copy paste file unbound.conf ke /etc/unbound/

Edit file unbound.conf menggunakan WINSCP pada bagian :

forward-zone : sesuaikan dengan DNS ISP anda, bila perlu tambahkan DNS Nawala & OpenDNS

zone-anjelanet : sesuaikan dengan IP Proxy Server dan nama root anda

Jika saat installasi OS Ubuntu Server pada pilihan ‘software selection’ di ceklist semua, maka ikut terinstall Bind & dnsmasq. Matikan service DNS bind, jalankan perintah :

# sudo apt-get remove bind

# sudo apt-get purge bind

# sudo apt-get clean

DNSmasq, biasanya berada di di Directory /root/bin, Delete saja file tersebut.

Pada Mikrotik IP—Mangle, disabled script DNS

Edit DNS NameServer Proxy Server dengan perintah :

# nano /etc/resolv.conf

Menjadi :

nameserver 127.0.0.1

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

edit interface network Proxy Server dengan perintah :

# nano /etc/network/interfaces

Baris paling bawah menjadi :

# dns-* options are implemented by the resolvconf package, if installed

dns-nameservers 127.0.0.1

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

Reboot CPU Proxy Server

Kembali ke Mikrotik, IP—DNS, ganti dengan menggunakan IP Proxy Server. Reboot Mikrotik. Setelah kembali menyala CPU Proxy Server & Mikrotiknya, repair dahulu koneksi internet PC yang digunakan menjalankan PutTY dan WINSCP agar membaca DNS Proxy Server, cek koneksi internet dengan membuka browser.

Jika koneksi normal buka kembali WINSCP dan PutTY.

Cek DNS unbound dengan perintah :

# /etc/init.d/unbound restart

# nslookup [IP address Proxy Server]

Seharusnya muncul :

root@root:~# nslookup [IP address Proxy Server]

Server: 127.0.0.1

Address: 127.0.0.1#53

[IP address Proxy Server].in-addr.arpa name = [nama dlm unbound].

root@root:~# nslookup [nama dlm unbound].

Server: 127.0.0.1

Address: 127.0.0.1#53

Name: [nama root anda].

Address: [IP address Proxy Server]

Cek aktifitas unbound dengan perintah :

# unbound-control stats

Atau :

# sudo unbound-control stats | tail -16

Optimalkan Squid Proxy Server Ubuntu

2011-09-17T05:06:00.002+07:00

Optimalisasi Squid Proxy server sebaiknya dilakukan sebelum proses 'compile', berikut tutorialnya :

1. Optimalkan file system cache & ubah opsi untuk partisi cache

Disabled fsck (file system check)

# nano /etc/fstab

Angka standart Drive Cache adalah 0 2 ------>> ganti dengan 0 0 (INGAT HANYA DRIVE CACHE)

Opsi Directory /cache :

Apabila menggunakan reiserfs gunakan opsi noatime,notail

Apabila menggunakan ext4 gunakan opsi noatime,barrier=0

Apabila menggunakan btrfs gunakan opsi noatime,compress,noacl

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

2. Optimalkan kernelnya :

# ulimit -HSn 65536

echo 65536 > /proc/sys/fs/file-max

echo "* soft nofile 65536" >> /etc/security/limits.conf

echo "* hard nofile 65536" >> /etc/security/limits.conf

echo "root soft nofile 65536" >> /etc/security/limits.conf

echo "root hard nofile 65536" >> /etc/security/limits.conf

echo "proxy soft nofile 65536" >> /etc/security/limits.conf

echo "proxy hard nofile 65536" >> /etc/security/limits.conf

rapikan opsi diatas, pindahkan diatas tulisan ‘exit=0, caranya :

# nano /etc/security/limits.conf

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

Masukkan perintah berikut :

echo "session required pam_limits.so" >> /etc/pam.d/common-session

echo "session required /lib/security/pam_limits.so" >> /etc/pam.d/login

Jika terjadi error login (saat proxy server direstart nanti) hapus kembali opsi :

session required /lib/security/pam_limits.so

dengan mengetikan perintah :

# nano /etc/pam.d/login

Cari pada baris paling bawah tulisan “session required /lib/security/pam_limits.so”, lalu hapus.

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit (INGAT HANYA DILAKUKAN JIKA TERJADI ERROR LOGIN SETELAH RESTART PROXY NANTI, JIKA TIDAK ERROR JANGAN DIJALANKAN PERINTAH DIATAS)

# modprobe ip_conntrack

kemudian tambahkan ip_contrack di /etc/modules

# nano /etc/modules

tambahkan kalimat berikut baris paling bawah :

ip_conntrack

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

1. Optimalkan dahulu opsi berikut ini sebelum proses compile :

# nano /etc/default/squid

Ubah opsi SQUID_MAXFD=1024 menjadi :

SQUID_MAXFD=8192

Ubah opsi #define __FD_SETSIZE 1024 dengan mengetik perintah berikut :

# nano /usr/include/linux/posix_types.h

Cari tulisan #define __FD_SETSIZE 1024 ubah menjadi #define __FD_SETSIZE 65536

Setelah selesai tekan Ctrl+O, lalu Enter untuk Save dan Ctrl+X untuk exit

Cari tulisan #define __FD_SETSIZE 1024 dengan mengetik perintah berikut :

# nano /usr/include/bits/typesizes.h

Cari tulisan #define __FD_SETSIZE 1024 ubah menjadi #define __FD_SETSIZE 65536

Opsi-opsi diatas nanti (JANGAN DICEK DULU) akan terlihat hasilnya pada pada saat kita melakukan perintah :

# squidclient mgr:info

Maka :

Maximum number of file descriptors: 1024

Akan terlihat menjadi :

Maximum number of file descriptors: 65536

SERVER PROXY UBUNTU 11.04 : III

2011-09-14T23:09:00.004+07:00

Artikel Lanjutan SERVER PROXY UBUNTU 11.04 : II, perhatikan dengan seksama :

Setelah selesai Proses updating, langkah berikutnya dari PUTTY download file LUSCA_FMI (Credit To NEO FMI), masukkan perintah berikut ini :

wget http://anjelanet.googlecode.com/files/LUSCA_FMI.tar.gz

Selesai proses download, masukkan perintah :

tar xzvf LUSCA_FMI.tar.gz

kemudian :

cd LUSCA_FMI/

Jika anda menggunakan Ubuntu Server 64/bit, masukkan perintah :

make distclean

Proses Compile (Buka Notepad hasil CHOST, CFLAGS & CXXFLAGS tadi :

Untuk Ubuntu 32/bit :

Masukkan CHOST anda, tekan enter

Masukkan CFLAGS anda , tekan enter

Masukkan CXXFLAGS anda, tekan enter

Masukkan kode Compile berikut ini :

./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid \

--localstatedir=/var/spool/squid --datadir=/usr/share/squid --enable-http-gzip --enable-async-io=24 --with-aufs-threads=24 --with-pthreads --enable-storeio=aufs \

--enable-linux-netfilter --enable-arp-acl --enable-epoll --enable-removal-policies=heap --with-aio --with-dl --enable-snmp \

--enable-delay-pools --enable-htcp --enable-cache-digests --disable-unlinkd --enable-large-cache-files --with-large-files \

--enable-err-languages=English --enable-default-err-language=English --with-maxfd=65536

Tekan Enter

Untuk Ubuntu 64/bit :

Masukkan CHOST anda, tekan enter

Masukkan CFLAGS anda, tekan enter

Masukkan CXXFLAGS anda, tekan enter

Masukkan kode Compile berikut ini :

./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid \

--localstatedir=/var/spool/squid --datadir=/usr/share/squid --enable-http-gzip --enable-async-io=24 --with-aufs-threads=24 --with-pthreads --enable-storeio=aufs \

--enable-linux-netfilter --enable-arp-acl --enable-epoll --enable-removal-policies=heap --with-aio --with-dl --enable-snmp \

--enable-delay-pools --enable-htcp --enable-cache-digests --disable-unlinkd --enable-large-cache-files --with-large-files \

--enable-err-languages=English --enable-default-err-language=English --with-maxfd=65536

Tekan Enter

Selanjutnya masukkan berikut :

make

dan berikutnya :

sudo make install

Dari WINSCP copy paste file Squid.conf, Storeurl, Squid, & sysctl : (INGAT PADA WINSCP SISI KIRI ADALAH KOMPUTER YG DIPAKAI UNTUK PROSES REMOTE & SISI KANAN WINSCP ADALAH KOMPUTER PROXY SERVER YANG DIREMOTE)

File sysctl.pl Copy & Paste ke Directory /etc/

File squid.conf & storeurl ke Directory /etc/squid/

File squid ke Directory /etc/init.d/

Kemudian pada buka file squid.conf pada Directory /etc/squid/ yang di copy paste tadi, edit dan sesuaikan bagian ini :

cache_dir aufs /cache1 27300 64 256

cache_dir aufs /cache2 27300 64 256

cache_dir aufs /cache3 27300 64 256

cache_dir aufs /cache1, cache_dir aufs /cache2, cache_dir aufs /cache3 menunjukkan partisi HDD yang akan difungsikan untuk menyimpan cache.

Sesuaikan ‘IP Address Network Mikrotik’ anda, (Ingat bukan IP Address Mikrotik & IP Address Gateway Mikrotik)

acl localnet src 192.168.1.0/24

INGAT!!!!

KESALAHAN PADA cache_dir & acl localnet ‘squid.conf’, MENYEBABKAN ANDA TIDAK DAPAT MENYELESAIKAN PROSES SELANJUTNYA, SEHINGGA MUNCUL PESAN ‘FATAL BUNGLED LINE……’

JADI PERHATIKAN BAIK-BAIK ‘squid.conf’ ANDA.

Selanjutnya kita memberikan Permission untuk Folder Directory Cache, ketikan perintah :

chown proxy:proxy /cache

chmod 777 /cache

chown proxy:proxy /etc/squid/storeurl.pl

chmod 777 /etc/squid/storeurl.pl

karena saya menggunakan Tiga Directory cache, maka perintah yang saya masukkan adalah :

chown proxy:proxy /cache1

chown proxy:proxy /cache2

chown proxy:proxy /cache3

chmod 777 /cache1

chmod 777 /cache2

chmod 777 /cache3

chown proxy:proxy /etc/squid/storeurl.pl

chmod 777 /etc/squid/storeurl.pl

Berikutnya folder-folder swap/cache di dalam folder cache ditentukan dengan perintah :

squid -f /etc/squid/squid.conf -z

Selesai Proses Installasi LUSCA_FMI dengan Squid Proxy High Performance, perintahkan untuk reboot squid anda dengan memasukkan perintah :

sudo /etc/init.d/squid restart

Terakhir, reboot PC Ubuntu Proxy Server anda dengan perintah :

Reboot -h now

Jika Anda Mengikuti Step By Step Proses Instalasi Di Atas Maka Untuk Mematikan PC Ubuntu Proxy Server Anda, Cukup Dengan Menekan Tombol Power PC Ubuntu Proxy Server Anda (Jangan Ditahan, Cukup Tekan Sekali Dalam Hitungan Detik), dimana anda sudah menginstall tools ACPID dengan perintah ‘sudo apt-get install acpid’.

Selanjutnya adalah mengaktifkan PC Proxy sebagai ‘Server Cache’ untuk komputer2 yang lain. Caranya setting mikrotik dari Winbox. Dari Terminal ketik berikut :

/ip fi addr

add name=Local address=192.168.1.0/24

add name=Proxy address=192.168.11.0/24

/ip fi nat

add chain=dstnat action=dst-nat to-addresses=192.168.11.11 to-ports=3128 protocol=tcp \

src-address-list=Local dst-address-list=!Proxy in-interface=Local \

dst-port=80,81,8080,3128 commet="TRANSPARENT PROXY"

add chain=srcnat action=masquerade out-interface=pppoe-speedy1 comment="MASQUARADE"

add chain=srcnat action=masquerade out-interface=Modem

add chain=dstnat action=redirect to-ports=53 protocol=udp dst-port=53 comment="DNS"

add chain=dstnat action=redirect to-ports=53 protocol=tcp dst-port=53

/ip fi addr

add name=Local address=192.168.1.0/24

add name=Proxy address=192.168.11.0/24

/ip fi ma

add chain=forward action=mark-connection new-connection-mark="HIT" passthrough=yes \

protocol=tcp in-interface=Proxy out-interface=Local src-port=3128 dscp=12 comment="PROXY-HIT"

Keterangan :

!Proxy = Membaca IP address Proxy di IP-Firewall-IP Address List

Local = Interface mikrotik yang mengarah ke jaringan Lokal

pppoe-speedy1 = Interface mikrotik yang mengarah ke jaringan internet

Modem = Interface mikrotik yang mengarah ke modem bridge’

‘SESUAIKAN DENGAN KONDISI JARINGAN ANDA’

Sampai disini, anda telah berhasil membangun jaringan dengan menggunakan proxy server sendiri. Selanjutnya tinggal mengembangkan script pada Routerboard/mikrotik untuk pengaturan Mangle dan Bandwidth Management pada opsi ‘Queue’. Tutorial mengenai hal tersebut sudah sangat banyak sekali di internet.

SERVER PROXY UBUNTU 11.04 : II

2011-09-14T23:05:00.003+07:00

Berikut ini adalah artikel lanjutan dari posting SERVER PROXY UBUNTU 11.04 : I, perhatikan baik-baik :

Password : anjelanet

Untuk proses agar bisa Login di @root :

Ketikan perintah : sudo su – dan tekan enter

Isikan Password : anjelanet

Ketikan perintah : passwd dan tekan enter

Isikan Password Baru : anjelanet

Isikan kembali Password Baru : anjelanet

Reboot PC dengan mengetikan perintah = reboot –h now

Hubungkan Kabel UTP atau Kabel LAN dari PC ke Routerboard (Mikrotik) pada ether3 (terserah sisa Port Mikrotik anda). Jenis Kabel LAN bisa Type ‘Straight’ atau Type ‘Cross’, terserah anda.

Pada Mikrotik masuk dengan Winbox pilih interface ether3 (terserah sisa Port Mikrotik anda) ganti nama ‘ether3’ menjadi ‘Proxy’ dan pilih ‘OK’

Pilih Terminal dan masukkan script berikut :

/ip address

add address=192.168.11.1/24 network=192.168.11.0 broadcast=192.168.11.255 interface= Proxy

Cek Koneksi PC Proxy server dengan Mikrotik dari Terminal Mikrotik, ketikan perintah berikut :

Ping 8.8.8.8

Jika berjalan dengan baik Ping - nya, PC Proxy server dengan Mikrotik telah terhubung dengan baik.

PERSIAPAN Instalasi Squid download dahulu dari Web Browser File squid.conf, sysctl.conf, squid, storeurl DISINI.

Cek terlebih dahulu Type dan Komponen PC Proxy Server anda, selanjutnya masuk ke http://en.gentoo-wiki.com/wiki/Safe_Cflags.

Tentukan CHOST, CFLAGS & CXXFLAGS PC Proxy Server anda untuk proses ‘Compile’ . Simpan type CHOST, CFLAGS & CXXFLAGS di Notepad.

Untuk memudahkan proses selanjutnya adalah me-remote PC Proxy Server dari PC lain dalam satu jaringan, menggunakan WINSCP dan PUTTY. Jika belum punya silahkan download DISINI.

Install WINSCP dan PUTTY

Buka WINSCP, pada Hostname masukkan IP Address PC Proxy Server 192.168.11.11, pada User masukkan ‘root’ (tanpa tanda petik) dan pada Password isikan ‘anjelanet’ (tanpa tanda petik). Untuk memudahkan proses, pilih ‘Save’ kemudian pilih ‘Login’. Jika muncul pilihan, pilih ‘Yes’ atau ‘Update’

Setelah Login WINSCP, pada toolbarnya ada pilihan ‘Open session in PUTTY’, pilih saja untuk membuka PUTTY, atau bisa juga dengan menekan Ctrl+P.

Pada Login PUTTY, masukkan Password ‘anjelanet’ (tanpa tanda petik)

Sekarang anda telah masuk dalam Login PUTTY, untuk melakukan proses Update terhadap PC Proxy Server sebagai tahap berikutnya.

Pada PUTTY, masukkan perintah berikut ini satu per satu, (Jika nanti pada proses updating terdapat pilihan ‘Y/N’ pilih ‘Y’ dan Enter) :

sudo apt-get update

sudo apt-get install squid

sudo apt-get install squid squidclient squid-cgi

sudo apt-get install gcc

sudo apt-get install build-essential

sudo apt-get install sharutils

sudo apt-get install ccze

sudo apt-get install libzip-dev

sudo apt-get install automake1.9

sudo apt-get install acpid

sudo apt-get install multitail

SERVER PROXY UBUNTU 11.04 : I

2011-09-14T22:36:00.011+07:00

Berikut ini adalah langkah-langkah installasi Operating System Ubuntu Server 11.04 Natty 32/64 Bit yang akan kita pergunakan sebagai Proxy Server :

Hidupkan PC Calon Proxy Server

Masukkan ‘CD Ubuntu Server’ Ke CDROM

Booting dari CDROM

Pilih language English, Enter

Pilih Install Ubuntu Server, Enter

Tekan enter pada ‘Choose Language’ English

Pilih United States

‘Detect Keyboard Layout Pilih ‘No’

Pada Ubuntu ‘Installer Main Menu’ pilih USA

Pada ‘Keyboard Layout’ Pilih USA

Pilih ‘Continue’ pada ‘Configure The Network’

Pilih ‘Configure Network Manually’

Isi IP Address dengan 192.168.11.11 pilih ‘Continue’, lalu tekan Enter

Netmask 255.255.255.0 pilih ‘Continue’, lalu Enter

Pada Gateway sudah terdapat angka ‘192.168.11.1’, biarkan saja terus Tab Pilih ‘Continue’

Pada Name Server Addresses sudah terdapat angka ‘192.168.11.1’ abaikan dan Tab pilih ‘Continue’, lalu enter

Hotsname diisi dengan : anjelanet (terserah anda) terus pilih continue enter

Domain Name: kosongkan saja, pilih ‘Continue’ dan tekan enter

Pada pilihan ‘Configure The Clock’ pilih ‘Select From Worldwide List’ terus cari Jakarta, lalu tekan Enter

Pada menu ‘Partition Disk’ pilih ‘Manually’

(Penulis menggunakan 2 Harddisk 250 GB & 500 GB 7200 RPM, RAM 2 GB PC6400, HDD 500 GB dipersiapkan untuk men-cache Video Streaming & MP3. Jika HDD & RAM anda berbeda sesuaikan dengan kebutuhan, Pola Partition Nomor 1 & 3 tutorial ini mohon tidak di ubah, cukup penyesuaian pada option RAM saja)

Selanjutnya Jika menggunakan Harddisk bekas pakai, Langkahnya kita hapus partisi yang ada terlebih dahulu. Pilih Directory Partition yang akan dihapus, tekan enter dan pilih Delete The Partition (ULANGI PERINTAH INI UNTUK SEMUA PARTISI YG TERSISA).

Jika telah selesai pilih ‘Guided Partitioning’, kemudian pilih ‘Manually’ arahkan pada FREE SPACE. (UNTUK HARDDISK KOSONG LANGSUNG KE LANGKAH INI).

Arahkan ke FREE SPACE HDD1 Pilih Create New Partition, Enter

Besar Partition I adalah 256 MB, Jadikan sebesar itu. Pilih Continue, Enter (Usahakan untuk tidak merubah besaran Partisi Harddisk ini)

Pilih Primary, Enter

Pilih Beginning, Enter

Pada pilihan ‘Use As’ = Ext4, Enter

Jika muncul option ‘Format The Partition’ tekan enter untuk memilih ‘Yes, Format it’

Mount point = /boot

Mount options pilih ‘Noatime’ dengan menekan tombol ‘SPACE’ pada keyboard

Bootable flag = on

Pilih ‘Done Setting Up The Partition’

Arahkan ke FREE SPACE HDD1 Pilih Create New Partition, Enter

Besar Partition II adalah 30 GB (Sesuaikan kapasitas HDD anda, minimal 10 GB)

Pilih Primary, Enter

Pilih Beginning, Enter

Pada pilihan ‘Use As’ = Ext4

Jika muncul option ‘Format The Partition’ tekan enter untuk memilih ‘Yes, Format it’

Mount point = /

Mount options pilih ‘Noatime’ dengan menekan tombol ‘SPACE’ pada keyboard

Pilih ‘Done Setting Up The Partition’

Arahkan ke FREE SPACE HDD1 Pilih Create New Partition, Enter

Besaran Partisi III adalah 4 GB (RAM 2 GB) (Untuk RAM 1 GB Isikan Partisi III sebesar 2 GB. Rumus = RAM x 2 = Besar Partisi SWAP AREA)

Pilih Primary, Enter

Pilih Beginning, Enter

Pada pilihan ‘Use As’ = Swap Area

Pilih ‘Done Setting Up The Partition’

Arahkan ke FREE SPACE HDD1 Pilih Create New Partition, Enter

Besar Partition IV adalah keseluruhan sisa HDD 1 yang masih FREE SPACE (dalam hal ini Free Space HDD 1 saya 215,8 GB)

Pilih Primary, Enter

Jika muncul option ‘Format The Partition’ tekan enter untuk memilih ‘Yes, Format it’

Pada pilihan ‘Use As’ untuk Ubuntu Server 32/Bit = ReiserFS, untuk Ubuntu Server 64/Bit Pada pilihan ‘Use As’ = BtrFS

Pada Mount point = Enter dan pilih Manually, ‘/home ubah menjadi /cache1’

Mount options untuk Ubuntu Server 32/Bit pilih ‘Notail & Noatime’ dengan menekan tombol ‘SPACE’ pada keyboard,, untuk Ubuntu Server 64/Bit Mount options pilih ‘Noatime’ dengan menekan tombol ‘SPACE’ pada keyboard.

Pilih ‘Done Setting Up The Partition’

(PERHATIAN : JIKA MENGGUNAKAN 1 HARDDISK, ABAIKAN LANGKAH 5 & 6 BERIKUT INI)

Arahkan ke FREE SPACE HDD2 Create New Partition, Enter

Besar Partition V adalah 300 GB (Sesuaikan kapasitas HDD anda)

Pilih Primary, Enter

Pada pilihan ‘Use As’ untuk Ubuntu Server 32/Bit = ReiserFS, untuk Ubuntu Server 64/Bit Pada pilihan ‘Use As’ = BtrFS

Jika muncul option ‘Format The Partition’ tekan enter untuk memilih ‘Yes, Format it’

Pada Mount point = Enter dan pilih Manually, ‘/home ubah menjadi /cache2’

Mount options untuk Ubuntu Server 32/Bit pilih ‘Notail &Noatime’ dengan menekan tombol ‘SPACE’ pada keyboard, untuk Ubuntu Server 64/Bit Mount options pilih ‘Noatime’ dengan menekan tombol ‘SPACE’ pada keyboard.

Pilih ‘Done Setting Up The Partition’

Arahkan ke FREE SPACE HDD2 Create New Partition, Enter

Besar Partition V adalah 200 GB (Sesuaikan kapasitas HDD anda)

Pilih Primary, Enter

Pada pilihan ‘Use As’ untuk Ubuntu Server 32/Bit = ReiserFS, untuk Ubuntu Server 64/Bit Pada pilihan ‘Use As’ = BtrFS

Jika muncul option ‘Format The Partition’ tekan enter untuk memilih ‘Yes, Format it’

Pada Mount point = Enter dan pilih Manually, ‘/home ubah menjadi /cache3’

Pilih ‘Done Setting Up The Partition’

Pilih Finish Partitioning And Write Changes To Disk, tekan Enter

Pada pilihan Write The Changes To Disk pilih Yes, tekan Enter

Pada Full Name For The New User isi dg anjelanet, pilih continue & tekan Enter

Pada Username For Your Account isi dg anjelanet, terus continue & tekan Enter

Pada a password For The New User isi dg anjelanet, terus continue & tekan Enter

Pada Re-Enter Password To Verify isi dg anjelanet, terus continue & tekan Enter

Jika muncul pilihan Use Weak Password pilih Yes, tekan Enter

Pada pilihan Encrypt Your Home Directory pilih ‘No’, tekan Enter

Pada pilihan HTTP Proxy Information dikosongkan saja, pilih Continues, tekan Enter

Pada saat ‘Configuration apt’ mencapai 23% tekan enter, juga pada 72% tekan Enter

Pada saat pilihan updating pilih ‘No Automatic Update’

Pada Choose Software To Install pilih ‘OpenSSH Server’ dengan menekan tombol ‘SPACE’ pada keyboard, selanjutnya pilih Continues, tekan Enter

Pada Pilihan ‘Install GRUB Loader’ pilih Yes

Pada saat ‘Ejecting CD Ubuntu Server Installer’ ambil CD-nya tutup kembali CDROM dan pilih Continues

GOOGLE CHROME 11.0.696.16 Beta

2011-03-23T17:54:00.001+07:00

Google Chrome baru-baru ini telah mengganti logo dengan logo yang lebih sederhana dari logo sebelumnya. Bentuk dan warna dasarnya sama, tetapi logo baru lebih sederhana daripada yang lama. Perubahan logo tersebut juga semakin memperkuat gambaran Chrome yang ingin menyajikan tampilan web menjadi rapi.

Google Chrome 11.0.696.16 Beta, telah menggunakan logo terbaru tersebut dalam rangka ujicoba dalam beberapa minggu ke depan sebelum google merilis versi terbaru dari google chrome.

One box for everything

Google Chrome is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Type in the address bar and get suggestions for both search and web pages.

Thumbnails of your top sites

Access your favorite pages instantly with lightning speed from any new tab.

Incognito mode

Don't want pages you visit to show up in your web history? Choose incognito mode for private browsing.

Safe browsing

Google Chrome warns you if you're about to visit a suspected phishing, malware or otherwise unsafe website.

Anda dapat mengunduh Google Chrome 11.0.696.16 Beta Offline Installer pada link dibawah ini :

Google Chrome 11.0.696.16 Beta

MOZILLA FIREFOX 4.0

2011-03-23T00:29:00.025+07:00

Baru kemaren saya posting Mozilla Firefox 4.0 RC 2, hari Selasa 22 Maret 2011 Mozilla secara resmi kembali merilis software browser terbarunya 'MOZILLA FIRFOX 4.0'. Browser teranyar ini digadang-gadang akan menyediakan pengalaman mengakses web lebih cepat, nyaman, dan mudah menyesuaikan kebutuhan 400 juta pengguna browser Mozilla di seluruh dunia saat ini.

"Firefox menempatkan pengguna sebagai pengendali penuh pengalaman di web, menyediakan tampilan yang rapi, fitur-fitur baru yang menyenangkan, kecepatan jauh meningkat, dan mendukung teknologi-teknologi web modern," tulis tim Mozilla di situs webnya. Perubahan yang paling kentara adalah dalam hal tampilan. Seperti yang dilakukan pengembang browser lainnya, tampilannya lebih bersih dengan menu ringkas. Halaman web menjadi pusat sorotan di tengah. Tersedia fitur App Tabs tempat alamat situs web yang paling sering dikunjungi. Terdapat pula fitur Panorama untuk mengumpulkan banyak tab menjadi satu kategori agar tampilan tetap nyaman saat membuka banyak tab.

Namun, pengguna tetap diberi kebebasan melakukan kustomisasi tampilan browsernya dengan tersedianya fitur Persona. Ekstensi dan add on yang menjadi andalan Firefox sejak awal memperkaya fitur browser yang dapat dipilih secara personal. Kecepatan akses web dengan Firefox 4 diklaim enam kali lipat daripada versi sebelumnya, Firefox 3.6. Dikombinasikan dengan dukungan terhadap fitur grafis berbasis hardware pada komputer masa kini, browser ini juga mendukung akses ke konten multimedia yang kaya. Browser ini juga sudah mendukung penuh teknologi HTML5, video HD (WebM), dan grafis 3D.
Kali ini, pengguna juga lebih nyaman karena crash di salah satu halaman tidak berpengaruh dengan halaman lainnya. Saat tiba-tiba halaman yang tengah dibuka crash karena konten Flash, QuickTime, atau Silverlight tidak bekerja sempurna, halaman lain tetap bisa diakses.
Firefox 4 tersedia untuk pengguna komputer berbasis Windows, Linux, maupun Mac OS X dan tersedia dalam 80 bahasa pengantar. Dalam waktu dekat Firefox 4 juga akan tersedia versi mobile untuk smartphone dan perangkat berbasis Android dan Maemo. Saat ini Firefox 4 Mobile baru tersedia versi Release Candidate (RC).

The Web is all about innovation, and Firefox sets the pace with dozens of new features to deliver a faster, more secure and customizable Web browsing experience for all.

User Experience

The enhancements to Firefox provide the best possible browsing experience on the Web. The new Firefox smart location bar, affectionately known as the "Awesome Bar," learns as people use it, adapting to user preferences and offering better fitting matches over time.

Performance

Firefox is built on top of the powerful new Gecko platform, resulting in a safer, easier to use and more personal product.

Security

Firefox raises the bar for security. The new malware and phishing protection helps protect from viruses, worms, trojans and spyware to keep people safe on the Web.

Customization

Everyone uses the Web differently, and Firefox lets users customize their browser with more than 5,000 add-ons.

Link Download :

MOZILLA FIREFOX 4.0

( Pilih 'SKIP AD' untuk langsung menuju Link Download)

MOZILLA FIREFOX 4.0 RC 2

2011-03-21T21:45:00.006+07:00

Berbicara tentang Web Browser, berarti kita berbicara tentang sebuah inovasi di internet. Firefox telah merilis ‘Mozilla Firefox RC 2’, tentunya dengan berbagai penyempurnaan dari versi pendahulunya dengan maksud yang sangat jelas, yakni memberikan pengalaman browsing dengan kecepatan maksimal, aman dan dapat disesuaikan dengan berbagai kondisi.

User Experience

Performance

Firefox is built on top of the powerful new Gecko platform, resulting in a safer, easier to use and more personal product.

Security

Firefox raises the bar for security. The new malware and phishing protection helps protect from viruses, worms, trojans and spyware to keep people safe on the Web.

Customization

Everyone uses the Web differently, and Firefox lets users customize their browser with more than 5,000 add-ons.

Silahkan Unduh pada Link dibawah ini :

MOZILLA FIREFOX 4.0 RELEASE CANDIDAT 2

Opera 11.10 Beta 1 Build 2048

2011-03-19T12:37:00.009+07:00

Opera kembali merilis produk terbarunya yaitu Opera 11.10 Beta 1 (Build 2048), meskipun masih versi Beta Opera tetap memiliki fitur-fitur internet browsing yang lengkap, Pop-Up, Tab Browsing, pencarian yang terintegrasi, dan fitur-fitur penyempurnaan seperti Opera E-mail, RSS Newsfeed serta IRC Chat.

Anda dapat menyesuaikan tampilan Opera sesuai keinginan.

Speed Dial.

Anda dapat menggunakan fitur speed dial untuk menyimpan situs-situs favorit, sehingga tidak perlu kembali mengetikkan alamat-alamat situs favorit tersebut.

Search Shortcut.

Anda dapat mengetikan pertanyaan langsung di Address Bar.

Trash Can.

Fitur ini memberikan anda kenyamanan dimana Tab terakhir yang ditutup akan langsung kembali terbuka ketika opera dijalankan.

Mouse Gestures.

Fitur Navigasi dengan menggunakan Mouse.

Opera Link.

Sinkronisasi data online pilihan atau diantara perangkat komputer yang berbeda.

Quick Find.

Opera mengingat tidak hanya judul dan alamat situs, tetapi juga isi yang sebenarnya dari halaman web yang anda kunjungi.

Feed Preview.

Fitur untuk preview sebuah feed.

Quick and customizable Web Search.

Dapatkan akses cepat ke Google, Ebay, Amazon dan banyak lagi dengan pencarian di pojok kanan atas.

Title : Opera 11.10 Beta 1 (Build 2048)

Filename : Opera_1110_int_b1_Setup.exe

File size : 9.08MB (9,516,808 bytes)

Requirements : Windows 2000 / XP / 2003 / Vista / Windows7 / XP64 / Vista64 / Windows7 64

Languages : Multiple languages

License : Freeware

Date added : March 17, 2011

Author : Opera Software

Anda tertarik menggunakan Opera 11.10 Beta 1 (Build 2048 ?

Silahkan download DISINI

EASEUS Partition Master 7.1.1

2011-03-14T22:34:00.008+07:00

EASEUS Partition Master Home Edition adalah software Partisi Hardisk seperti Partition Magic, namun keunggulan software ini dengan ukuran file yang kecil yang memudahkan proses instalasi dan proses pemakaiannya relatif efisien karena tidak perlu lagi menutup Operating System anda.

Hal tersebut memungkinkan untuk memperluas partisi Hardisk, meskipun partisi tersebut akan diambilkan dari partisi yang sudah ada sebelumnya atau dari partisi Hardisk yang dipakai untuk Operating System sekalipun.

Title                :    EASEUS Partition Master 7.1.1

Filename         :    EPMSetup.exe
File size           :    11.88MB (12,455,160 bytes)
Requirements :    Windows 2000 / XP / Vista / Windows7 / XP64 / Vista64 / Windows7 64
Languages       :    en-US
License           :    Freeware
Date added     :    March 6, 2011
Author            :    Partition Magic
                           www.partition-tool.com

Penasaran dengan software ini, silahkan Download Gratis DISINI

CCleaner 3.04.1389

2011-03-14T02:27:00.001+07:00

CCleaner merupakan software free alias gratis sebagai sistem optimasi dan alat pembersih perangkat lunak komputer. CCleaner menghapus sisa file yang tidak terpakai dari sistem komputer anda dan memungkinkan Windows untuk beroperasi secara normal dan lebih cepat serta membebaskan ruang hard drive dari file yang tidak bermanfaat lagi. CCleaner juga berfungsi membersihkan jejak aktifitas online komputer anda seperti history Internet komputer anda. Di samping itu itu bisa digunakan untuk membersihkan sistem registry pada perangkat lunak komputer.

Pada dasarnya fungsi CCleaner mirip dengan software utilities seperti Tune-up utilities, tetapi ukuran file yang kecil membuat software ini lebih efisien dan tidak membebani kinerja komputer.

Anda bisa mengunduhnya DISINI

AntiVir Personal 10.0.0.611

2011-03-14T01:21:00.004+07:00

Avira AntiVir Personal - FREE Antivirus merupakan solusi handal antivirus gratis, yang selalu dan secara cepat memindai komputer Anda untuk program yang berbahaya seperti virus, trojan, backdoor program, hoax, dll. Mengawasi setiap aksi yang dijalankan oleh pengguna atau sistem operasi dan bereaksi segera ketika sebuah program berbahaya terdeteksi.

Keunggukan Avira AntiVir Personal :

Mendeteksi dan menghapus lebih dari 150.000 virus
Resident Virus Guard berfungsi untuk memantau pergerakan file secara otomatis, misalnya download data dari internet
Pemindaian dan perbaikan virus secara makro
Proteksi terhadap virus secara makro yang sebelumnya tidak diketahui
Perlindungan terhadap trojan, worm, backdoors, jokes dan program yang berbahaya lainnya
Avira AntiVir pelindung terhadap virus, worm dan Trojan
AntiDialer melindungi terhadap dialer yang mahal
AntiRootkit melindungi terhadap rootkit tersembunyi
AntiPhishing perlindungan terhadap phishing
AntiSpyware perlindungan terhadap spyware dan adware
NetbookSupport untuk laptop dengan resolusi rendah
QuickRemoval menghilangkan virus dengan menekan sebuah tombol
Mudah pengoperasiannya
Internet-Update Wizard agar memudahkan proses update
Perlindungan terhadap virus boot record yang sebelumnya tidak diketahui sebagai virus oleh master boot record

Download DISINI

Mozilla Firefox 4.0 Release Candidat 1

2011-03-12T15:15:00.007+07:00

Title:	Firefox 4.0 RC 1
Filename:	Firefox Setup 4.0 RC 1.exe
File size:	12.00MB (12,578,792 bytes)
Requirements:	Windows 2000 / XP / 2003 / Vista / Windows7 / XP64 / Vista64 / Windows7 64
Languages:	en-US
License:	Open Source
Date added:	March 10, 2011
Author:	Mozilla Organization

The Web is all about innovation, and Firefox sets the pace with dozens of new features to deliver a faster, more secure and customizable Web browsing experience for all.

User Experience

Performance

Firefox is built on top
of the powerful new Gecko platform, resulting in a safer, easier to use and more
personal product.

Security

Firefox raises the bar for security. The new malware and phishing protection helps protect from viruses, worms, trojans and spyware to keep people safe on the Web.

Customization

Everyone uses the Web differently, and Firefox lets users customize their browser with more than 5,000 add-ons.

Download Mozilla Firefox RC 1