Delaypool rasa Mikrotik

on Monday, April 6, 2009

Langkah 1


Kita masukan rule di firewall untuk mendapatkan IP dari download server dan memasukan IP tersebut ke


dalam address list


/ip firewall filter add chain=forward \


src-address=192.168.10.0/24 protocol=tcp content=.mp3 \


action=add-dst-to-address-list address-list=downloads \


address-list-timeout=01:00:00


/ip firewall filter add chain=forward \


src-address=192.168.10.0/24 protocol=tcp content=.exe \


action=add-dst-to-address-list address-list=downloads \


address-list-timeout=01:00:00


Rule diatas akan menangkap semua traffic dengan content .mp3 dan .exe yang berasal dari blok IP LAN dan


memasukannya ke addres list downloads selama 1 jam.


Langkah 2


Kita lakukan mangle untuk marking paket yang berasal dari address list yang telah kita dapat dari


Langkah 1


/ip firewall mangle add chain=forward \


protocol=tcp src-address-list=downloads \


action=mark-packet new-packet-mark=download-paket


Mangle ini kita perlukan untuk melabeli paket sehingga simple queue dapat menangkap traffic dari IP-IP


yang telah terdapat pada address list "downloads"


Langkah 3


Langkah terakhir kita masukkan simple queue dari paket mark yang telah kita dapet dari langkah 2


/queue simple add name=download-files \


max-limit=64000/64000 packet-marks=download-paket


Letakan queue di urutan paling atas supaya dibaca dulu oleh mikortik




cara lainnya:


/ip firewall ma


add chain=forward protocol=tcp content=.exe \


action=mark-connection new-connection-mark=con-dowloader passthrough=yes \


comment="" disabled=no


add chain=output protocol=tcp content=.exe \


action=mark-connection new-connection-mark=con-dowloader passthrough=yes \


comment="" disabled=no


add chain=forward protocol=tcp content=.avi \


action=mark-connection new-connection-mark=con-dowloader passthrough=yes \


comment="" disabled=no


add chain=output protocol=tcp content=.avi \


action=mark-connection new-connection-mark=con-dowloader passthrough=yes \


comment="" disabled=no


add chain=forward protocol=tcp content=.zip \


action=mark-connection new-connection-mark=con-dowloader passthrough=yes \


comment="" disabled=no


add chain=output protocol=tcp content=.zip \


action=mark-connection new-connection-mark=con-dowloader passthrough=yes \


comment="" disabled=no


add chain=output connection-mark=con-dowloader action=mark-packet \


new-packet-mark=downloader-pkt passthrough=no comment="" disabled=no


add chain=forward connection-mark=con-dowloader action=mark-packet \


new-packet-mark=downloader-pkt passthrough=no comment="" disabled=no


*tambahin sendiri ext pa ja sampe puaas taro diatas


queuenya


Quote:


/queue simple


add name="downloader" dst-address=0.0.0.0/0 interface=all \


packet-marks=downloader-pkt direction=both priority=8 \


queue=default-small/default-small limit-at=0/64000 max-limit=0/64000 \


burst-limit=/128000 burst-threshold=/96000 burst-time=/10s \


total-queue=default-small disabled=no

0 comments: